Package: age-api Version: 3:0.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 53 Depends: helper-scripts Homepage: https://www.kicksecure.com/wiki/age-api Priority: optional Section: misc Filename: pool/main/a/age-api/age-api_0.6-1_all.deb Size: 15296 SHA256: 1cc69d38d7a494b0f890a19f1c35c34d5b9151d0a4b5f1a8158520e91c2a96e6 SHA1: d2511eefbd55265213130e55f99d359e3c93ed3b MD5sum: e29e11da00482eadd28bc51cc67314a6 Description: Local age bracket storage and query helper (age signaling) DRAFT: Nothing has been decided yet. Much better places to get further information: * https://www.kicksecure.com/wiki/age-api * https://forums.whonix.org/t/whonix-adding-age-verification/22969 . age-api provides a minimal local mechanism to store an age bracket and query it for age-signaling use cases. . The age-api-query tool outputs a machine-readable age bracket number on stdout and a human-readable description on stderr. . DRAFT: Final implementation - if any - would look much different from what is currently implemented. . See also: https://www.kicksecure.com/wiki/age-api Package: anon-apt-sources-list Version: 3:7.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 78 Depends: fasttrack-archive-keyring Homepage: https://github.com/Kicksecure/anon-apt-sources-list Priority: optional Section: misc Filename: pool/main/a/anon-apt-sources-list/anon-apt-sources-list_7.8-1_all.deb Size: 31056 SHA256: 08a5a54300a86f1d0bb3bb92e1910e7fbaf6d576b22b4089b039cb324a98eccf SHA1: 68b5f37a32a0f29ba35efb69cf9c384b4996a88b MD5sum: 1c283cb59bb562e40243d61943f5b420 Description: Kicksecure APT and Flatpak Repository Configuration Configuring APT and Flatpak sources: - Includes Debian APT repositories (main, updates, backports, fasttrack, security) - Incorporates Debian APT components (main, contrib, non-free, non-free-firmware) - Integrates the Flathub repository (verified and floss subsets only) . Flatpak: - Official Flathub repository only. - Uses subset verified_floss, which means only verified applications and freedom software can be installed by default. . Provides configuration files: - /etc/apt/sources.list.d/debian.sources for APT sources - /etc/flatpak/remotes.d/flathub.flatpakrepo for Flatpak sources . A Discussion on Distribution Maintenance Strategies: . The more standard way would indeed be populating /etc/apt/sources.list at install or build time and leaving /etc/apt/sources.list.d alone. . The idea of managing /etc/apt/sources.list.d/debian.sources for the user is, the security-focused distribution maintainers can decide when it is a better "change stable to oldstable", "keep wheezy as long as needed to work out [eventual!] issues that would break during upgrade to jessie" and such. Package: anon-connection-wizard Version: 1:11.5-1 Architecture: all Maintainer: iry Installed-Size: 47 Depends: tor-control-panel (>= 1:8.4-1) Homepage: https://www.kicksecure.com/wiki/Anon_Connection_Wizard Priority: optional Section: oldlibs Filename: pool/main/a/anon-connection-wizard/anon-connection-wizard_11.5-1_all.deb Size: 13908 SHA256: 9371c0f567da76c6e97a44c013dd8bc715ad7cc6b251a2694aa334af763387d0 SHA1: 991f9f57377bb02ac03ba5b3e394e8be5caa8ba1 MD5sum: 4c90de8604ef4eafcec4b78a40e2c253 Description: Tor Connection Configuration (ACW) (transitional package) This is a transitional dummy package, it can be safely removed. Its functionality was merged with tor-control-panel. Package: anon-shared-build-apt-sources-tpo Version: 3:7.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 125 Depends: helper-scripts, gnupg, sq Recommends: deb.torproject.org-keyring Homepage: https://github.com/Kicksecure/anon-shared-build-apt-sources-tpo Priority: optional Section: misc Filename: pool/main/a/anon-shared-build-apt-sources-tpo/anon-shared-build-apt-sources-tpo_7.3-1_all.deb Size: 65284 SHA256: 69ed314afd354902a312e790a2d8f34440ace4d23d2e4b199323d5f8a3076d81 SHA1: 205d7daffe505faae2c75d13fd5ccd53ff812783 MD5sum: 0cb95c65ddd09d26bf6a40ce8a059511 Description: Adds TPO's APT repository to Derivative Linux Distributions Comes with "deb http://deb.torproject.org/torproject.org stable main", The Tor Project's APT signing key. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profile-dist Version: 3:10.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 97 Depends: helper-scripts Replaces: apparmor-profile-anondist Homepage: https://www.kicksecure.com/wiki/Apparmor-profile-everything Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-dist/apparmor-profile-dist_10.2-1_all.deb Size: 36392 SHA256: 46cba5d279c0a5cfc2c9833b762164443bd061009bc9ace842f88aaca82e6378 SHA1: 937d3a47cca787b2284f305f03cac6be64e6e324 MD5sum: ab675d9d05ff2f80da9aab4902f65b7b Description: AppArmor Profile for Derivative Linux Distributions Displaces /etc/apparmor.d/abstractions/base with a version, that includes additions required for Derivative Linux Distributions. . Does not depend on AppArmor, so this package can be installed by default on any anonymity distribution by default, without requiring to also have AppArmor installed. Just for the case, AppArmor gets installed later by the user. Package: apparmor-profile-hexchat Version: 3:5.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 60 Depends: apparmor Replaces: apparmor-profile-xchat Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-hexchat/apparmor-profile-hexchat_5.7-1_all.deb Size: 24140 SHA256: 87e892db0db1cfbb9e777cb57e803140f80d7452332daae592e51a246b0a5595 SHA1: 63f6fd859100d34e0250d3b9b46b6140dccbfaf0 MD5sum: 5abba8d6fc4062170f0f454cdd88fc88 Description: AppArmor profile for HexChat IRC An AppArmor profile to confine HexChat IRC. This profile is developed by the Whonix team. HexChat IRC is developed by xchat.org / hexchat.github.io. . For better security. Package: apparmor-profile-thunderbird Version: 3:6.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 65 Depends: apparmor Replaces: apparmor-profile-icedove Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-thunderbird/apparmor-profile-thunderbird_6.3-1_all.deb Size: 27288 SHA256: 1d6d93cbc57e21ab935acc9f5713650c47cb754f4d20e93143ee0188a2cff52e SHA1: 25becc44047b543196f2aa3a07897a52c45471b8 MD5sum: e04b6408a6114387f56daa0e871de265 Description: AppArmor profile for Thunderbird for Debian An AppArmor profile to confine Thunderbird. . This profile is just an extension of the upstream AppArmor Debian profile. The upstream AppArmor upstream profile is the foundation. . Primarily this AppArmor profile makes Debian's AppArmor profile for Thunderbird compatible with Qubes Debian based VMs. . This profile is developed by the Kicksecure team. Thunderbird is developed by mozilla.org. Package: apparmor-profile-torbrowser Version: 3:10.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 75 Depends: apparmor Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-torbrowser/apparmor-profile-torbrowser_10.0-1_all.deb Size: 35904 SHA256: af8206db3e1b72bdba397836eb589ed74e85494a9d267fb384fab93e53f42f73 SHA1: 0a30647b10c36e46e0ac2cf1ae1e39ddb40805a8 MD5sum: c4cd114dfe4ada7a2225344c06a0d8a7 Description: AppArmor profile for The Tor Browser Bundle (TBB) An AppArmor profile to confine The Tor Browser Bundle (TBB). This profile is developed by the Whonix team. TBB is developed by The Tor Project. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Pre-Depends: legacy-dist Depends: apparmor-profile-hexchat, apparmor-profile-thunderbird, apparmor-profile-torbrowser, apparmor-profiles, apparmor-profiles-extra Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/apparmor-profiles-kicksecure_37.2-1_all.deb Size: 88436 SHA256: b422c9de6741bd6c7c7e16667834d88ed0c20a7e37a029cd48edc40a3bd7b007 SHA1: a67cf512c24717ebc7fb7a2ad8ca090d70e6054e MD5sum: 5a4ac34be92e834e3bfab67e1b984c68 Description: AppArmor profiles developed by the Kicksecure Team A metapackage, which installs apparmor profiles packages from Debian: . * apparmor-profile * apparmor-profiles-extra . as well as installs apparmor profiles developed by the Kicksecure team: . * apparmor-profile-thunderbird * apparmor-profile-torbrowser * apparmor-profile-hexchat . Increases security. Package: binaries-freedom Version: 0:3.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 31 Depends: fuse Homepage: https://github.com/Kicksecure/binaries-freedom Priority: optional Section: misc Filename: pool/main/b/binaries-freedom/binaries-freedom_3.5-1_all.deb Size: 11492 SHA256: 3d78fd9075cd4974878a907f4465885df98967532df3ef317fdad8b113c502dc SHA1: 873cc93a10cb95a325968f4582a2ed78d975ea54 MD5sum: e8a66e63f8989738fda944b6afb39488 Description: Freedom Software Binaries This is an empty package at this time. . https://forums.whonix.org/t/policy-for-inclusion-of-compiled-software/6635 Package: bindp Version: 3:4.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 33 Homepage: https://github.com/Kicksecure/bindp Priority: optional Section: misc Filename: pool/main/b/bindp/bindp_4.8-1_all.deb Size: 15896 SHA256: b7216eb4d4cb2f290e7d5bbf5b1d51640c050ca09753217ce44b37e8d0cf5e09 SHA1: 8b538e5cf4fc34756276334c7971aecc2628df25 MD5sum: 55f84913b975866902f18157628e5194 Description: Binding specific IP and Port for Linux Running Application This package is probably most useful for Anonymity Distributions. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: bootclockrandomization Version: 3:8.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 84 Depends: msgcollector Homepage: https://www.kicksecure.com/wiki/Boot_Clock_Randomization Priority: optional Section: misc Filename: pool/main/b/bootclockrandomization/bootclockrandomization_8.2-1_all.deb Size: 32600 SHA256: ddf895509f83548b39ff404e61dfbfe31ecf7cdfd6e0421db0f8d30083561703 SHA1: d557fb4ed13d2d5a4a32759fe1a1b59f19ee482a MD5sum: f996b2f80ba5d205ca9b0de4c7061999 Description: Randomizes clock when systems boots Randomizes clock at boot time. Moves clock a few seconds and nanoseconds to past or future. Useful in context of anonymity/privacy/Tor. . This is useful to enforce the design goal, that the host clock and Gateway/Workstation clock should always slightly differ (even before secure timesync succeeded!) to prevent time based fingerprinting / linkablity issues. . Runs before Tor / sdwdate (if installed). . See also: https://www.whonix.org/wiki/Dev/TimeSync Package: browser-choice Version: 3:3.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 287 Depends: python3, helper-scripts Homepage: https://www.kicksecure.com/wiki/browser-choice Priority: optional Section: admin Filename: pool/main/b/browser-choice/browser-choice_3.0-1_all.deb Size: 63452 SHA256: 92b3d2433518b1851e0261228acec4e6f7b6d4ebab92d20c8cb366b78137484f SHA1: f257b8227cca14b47811dd51432510967b4ff039 MD5sum: 6657b134c4a1afbee36c877d92f4a673 Description: browser selection installer dialog A graphical interface that allows users to select and manage browsers. . Features a plugin-based design and multiple install types. Package: calamares-settings-debian Version: 13.1.9-1 Architecture: all Maintainer: Jonathan Carter Installed-Size: 225 Depends: calamares, rsync, cryptsetup, libglib2.0-bin, keyutils, pkexec, qml-module-qtquick-window2, qml-module-qtquick2, dconf-gsettings-backend | gsettings-backend Provides: calamares-settings Homepage: https://salsa.debian.org/live-team/calamares-settings-debian Priority: optional Section: utils Filename: pool/main/c/calamares-settings-debian/calamares-settings-debian_13.1.9-1_all.deb Size: 129384 SHA256: acb936338d60918ec0768b7b11a955c5b7d2a4cc86a745a48245ee557b46880e SHA1: c705fd8dc697d9709574428851bf3d20ea9403b1 MD5sum: de2d3bd03e3e45783d2935d358473f2d Description: Debian theme and settings for the Calamares Installer Calamares is a generic installer framework for Linux distributions. By default, it contains a set of boilerplate wording and images. This package provides the latest Debian artwork as well as scripts that supports EFI installations. . It also serves as an example for how derivatives can create their own calamares-settings packages. Package: damngpl Version: 3:4.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 32 Depends: perl Homepage: http://www.finnie.org/software/damngpl/damngpl Priority: optional Section: misc Filename: pool/main/d/damngpl/damngpl_4.9-1_all.deb Size: 14140 SHA256: 208fcd2049b3f0634bed412c64bff90a0cda0c45a63283df562cb7a4ceece401 SHA1: 4f5c9fb97688cfa33006e86d7e5f0618ba20caa7 MD5sum: 54dbb90fa710892a6050eb32ec807852 Description: Extract source package info from Debian status files damngpl will parse a Debian-style /var/lib/dpkg/status file and extract source package information about installed packages. This information can be used in several ways, usually to download source packages. . Multiple input files can be specified on the command line, or piped into standard input if no files are specified. Results are returned to standard output. . The name damngpl was chosen as a tongue-in-cheek description of its purpose (downloading Debian sources for the Finnix project to remain GPL compliant). Please do not send hate mail to the author, thinking he is anti-GPL. He's not. . See also: http://blog.finnix.org/2011/08/21/finnix-and-gpl-compliance/ Package: deb.torproject.org-keyring Version: 2025.08.08 Architecture: all Maintainer: Peter Palfrader Installed-Size: 20 Priority: important Section: misc Filename: pool/main/d/deb.torproject.org-keyring/deb.torproject.org-keyring_2025.08.08_all.deb Size: 4500 SHA256: e5bd5c6442ead01e183838be611d6bdf04896ba299095fbb4dc5ab5fe8f19bf6 SHA1: 7b9ee87c815b20602e588c1e6ded420ba7eeb4e4 MD5sum: 874fc9f0da1acbbf1a6eb2c7a25cecc1 Description: GnuPG archive key of the deb.torproject.org repository The deb.torproject.org repository digitally signs its Release files. This package contains the current repository key used for that, and upon installation configures your system to accept archives signed with this key. Package: debug-misc Version: 3:5.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 108 Suggests: systemd-coredump, serial-console-enable Replaces: grub-output-verbose Homepage: https://github.com/Kicksecure/debug-misc Priority: optional Section: misc Filename: pool/main/d/debug-misc/debug-misc_5.9-1_all.deb Size: 28504 SHA256: aad814eec48522f3d8fc6bf85e8c32b4136e2bb605d44370074c62f584245826 SHA1: 9a867185a784e163f183b91ea76001365eae2fe9 MD5sum: ec282178709a3ab0e0e835f67f3c4ef5 Description: Enables miscellaneous debug settings Ships a `/etc/default/grub.d/45_debug-misc.cfg` configuration file. This removes `quiet`, `loglevel=0`, and `rhgb` from the `GRUB_CMDLINE_LINUX_DEFAULT` variable. It also removes `debugfs=off`, `efi_pstore.pstore_disable=1`, and `erst_disable` from the `GRUB_CMDLINE_LINUX` variable. Finally, it adds `debug=vc` to the `GRUB_CMDLINE_LINUX` variable to enable verbose output during the initial ramdisk boot phase. . Undo debugging related `sysctl` settings by package `security-misc-shared`. . Enables persistent systemd journal log. . Disables `/usr/lib/systemd/coredump.conf.d/30_security-misc.conf` by package `security-misc-shared` using `debian/debug-misc.links` by creating a symlink from `/etc/systemd/coredump.conf.d/30_security-misc.conf` to `/dev/null`. . Disables `/usr/lib/systemd/pstore.conf.d/30_security-misc.conf` by package `security-misc-shared` using `debian/debug-misc.links` by creating a symlink from `/etc/systemd/pstore.conf.d/30_security-misc.conf` to `/dev/null`. . Disables `panic-on-oops`, `remove-system.map` by package `security-misc-shared`. . `config-package-dev` `hide` `/etc/sysctl.d/30_silent-kernel-printk.conf` which kernel.printk to default as if `security-misc-shared` would not have lowered verbosity. . Configure systemd `getty` service to not clear `tty`. `/lib/systemd/system/getty@tty.service.d/30_debug-misc.conf` . Coredumps are enabled. `/etc/security/limits.d/40_debug-misc.conf` . Coredumps may contain important information such as encryption keys or passwords. Package `security-misc-shared` disables coredumps. Package `debug-misc` re-enables coredumps. . Contains a helper tool to cause a segfault for testing purposes. `segfault-build` creates `segfault-run`. Running `segfault-run` results in `segfault-run` terminating with a segfault. This is useful to test if coredump files are being generated when an application crashes. `/usr/sbin/segfault-build` `/usr/share/debug-misc/segfault.c` . For better usability, to ease debugging in case of issues. . For better security, this package should only be installed on specific machines that require debugging. Unfortunately, security and debugging are conflicting optimization goals. Package: desktop-config-dist Version: 3:18.3-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 357 Depends: python3, helper-scripts, dconf-gsettings-backend | gsettings-backend, init-system-helpers (>= 1.52) Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist_18.3-1_all.deb Size: 102648 SHA256: 0a3ca353bfef6f52f24c959be1034de72a08a56302ad1eee451238b0160d7914 SHA1: b63b7f11f76c93d32b452f925ca2e57372cce7dc MD5sum: 458d1d0df80c9ea17e87226d8b0bfa0b Description: Configuration for Derivative Desktop Sets desktop and display setting, wallpaper and desktop icons. Sets icon theme and style. Settings for the default panel aka task bar, like panel position/color/size and panel plugins/shortcuts. . Autologin for account 'user' setting in lightdm. . Live check systray indicator which indicates the status of grub-live, whether the system was booted into persistent or live mode. See also: https://www.kicksecure.com/wiki/grub-live . Adds start menu entries for web browser, terminal emulator, file manager. . Sets Whisker Menu for better usability. . Disable maximize windows when moving to top for better privacy. . Disables thumbnails for better security. . Disables save on exit for better privacy. Package: desktop-config-dist-dependencies Source: desktop-config-dist Version: 3:18.3-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 78 Depends: gnome-colors-common, adwaita-icon-theme, python3-pyudev, wlr-randr Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist-dependencies_18.3-1_all.deb Size: 49056 SHA256: 6cecef302726036b32229ca1c41e32d2e22509e0cae0cb3e1e0bd87ee2b16897 SHA1: af107a221d2a4c23fc0faae5628b4c01ba3a4ce3 MD5sum: 40e1b6273fef44b6911d404290333e75 Description: Dependencies of desktop-config-dist A metapackage with dependencies for package desktop-config-dist. . Only useful for Non-Qubes. Not useful in Qubes. Package: developer-meta-files Version: 3:60.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 1111 Depends: python3, python3-debian, bc, jq, dctrl-tools Homepage: https://github.com/Kicksecure/developer-meta-files Priority: optional Section: misc Filename: pool/main/d/developer-meta-files/developer-meta-files_60.1-1_all.deb Size: 541228 SHA256: 7d112764a6407e926780f5f8348b153d986c0c67bd3aaa2ae404cd29f31da748 SHA1: 927384dda9f5610b1a11bce80012fc384ee299c7 MD5sum: fc37450bf9801ee32bce3971c5a3bd6c Description: Linux Distributions Maintenance Helper Scripts Todo . Description Package: dist-baremetal-cli Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Pre-Depends: legacy-dist Depends: nvme-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-baremetal-cli_37.2-1_all.deb Size: 88360 SHA256: 6df282e93617340119515829cdb64e393181fd42f856d376a301fcd9d035a90c SHA1: 964a1e269ed197715de19fe41d1acb0ad6afcee9 MD5sum: 07e982c4e06d1af101a6378d287fa6f8 Description: All systems, physical hardware, command-line packages For all hardened systems. . For physical hardware. . Provides packages for basic command-line-only installations. Package: dist-baremetal-gui-all Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Depends: virtualbox-guest-additions-iso | virtualbox-7.2 | virtualbox-7.3 | virtualbox-7.4 | virtualbox-8.0 | virtualbox-8.1 | virtualbox-8.2 | virtualbox-8.3 | virtualbox-8.4 Breaks: virtualbox-guest-utils, virtualbox-guest-x11 Replaces: virtualbox-guest-utils, virtualbox-guest-x11 Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-baremetal-gui-all_37.2-1_all.deb Size: 88904 SHA256: 3c763310e90f4f8033b6db6518dbac87a490292d845c2d45fcb57d008d3fe04b SHA1: 6d6f3ed862d9192730e1e435e01f6863eca8ddfb MD5sum: f74d2398fd6b77cb117b1da8e90796d1 Description: All systems, physical hardware, GUI packages For all hardened systems. . For physical hardware. . Provides packages for all graphical desktop installations. Package: dist-baremetal-gui-lxqt Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Pre-Depends: legacy-dist Depends: psensor, liblxqt-backlight-helper Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-baremetal-gui-lxqt_37.2-1_all.deb Size: 88400 SHA256: 2bf510274badff65ed249269c8c8cc788aebc6c7d21f5a7a17b25679612bf1f3 SHA1: c353a1a21faf79c0e5d0555099f4e7024844022f MD5sum: d4f1ee075fc6d2304087cac93190b803 Description: All systems, physical hardware, LXQt GUI packages For all hardened systems. . For physical hardware. . Provides packages for LXQt graphical desktop installations. Package: dist-base-files Version: 3:16.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 693 Pre-Depends: zsh Depends: dpkg-dev, helper-scripts, adduser, moreutils, xz-utils, zsh-syntax-highlighting, zsh-autosuggestions, systemd-repart Conflicts: anon-base-files, diverts-etc++grub.d++10+-+linux Replaces: anon-base-files Provides: anon-base-files, diverts-etc++grub.d++10+-+linux Homepage: https://github.com/Kicksecure/dist-base-files Priority: optional Section: misc Filename: pool/main/d/dist-base-files/dist-base-files_16.0-1_all.deb Size: 194828 SHA256: 108b5a131f01fc6b90a1675facaca0db73e04d657a859b1de894c25d7a48a608 SHA1: fe51e880c78e35b5953674d4c11e3ea2f77e5716 MD5sum: 1ef5ac1171d93684c10f13bdf82d18e4 Description: base files for distributions Grub config for more organized boot menu. "Normal" boot options are on top. "Advanced" boot options (for older kernel versions) have been moved to the bottom. . Creates user `user` with empty password (passwordless) (not in Qubes). That is if user `user` is not existing yet. And if it does create user `user` it also locks the root account. Therefore root account locking effectively only happens in new builds not having user `user` already created. . Creates system groups: * console * ssh . Ships a systemd unit file dist-skel-first-boot.service which runs `/usr/libexec/helper-scripts/first-boot-skel` (part of helper-scripts) package. . Simplifies sudo default lecture to only showing the default password once. . Creates version file `/var/lib/dist-base-files/build_version`. . Default shell: Sets default shell for user `user` to `zsh`. (Unless file `/etc/no-shell-change` exists.) `debian/dist-base-files.postinst` . Provides common files for derivative GRUB themes. . This package gets installed by default in both, Kicksecure and Whonix. Package: dist-general-cli Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Pre-Depends: legacy-dist Depends: apparmor-profile-dist, apt-transport-tor, apt-utils, bootclockrandomization, ca-certificates, dialog, dist-base-files, dummy-dependency-mta, gawk, init, initializer-dist, locales, menu, nmap, repository-dist, sdwdate, security-misc-shared, setup-dist, sudo, timesanitycheck, usrmerge, apparmor-profiles-kicksecure, apparmor-utils, bash-completion, boot-info-script, btrfs-progs, bzip2, curl, debian-keyring, dbus-user-session, distro-info-data, bind9-dnsutils, e2fsprogs, eject, file, haveged, hunspell-en-us, iotop, iproute2, iputils-ping, jitterentropy-rngd, less, libblockdev-crypto3, libpam-tmpdir, lsof, man-db, most, nano, net-tools, openvpn, 7zip, pciutils, pcmciautils, procps, secure-delete, sensible-utils, strace, sysfsutils, systemcheck, torsocks, traceroute, udisks2, unzip, usability-misc, usbutils, vim, xz-utils, zip, codecrypt, diceware, dirmngr, equivs, extrepo, extrepo-offline-data, fuse, sq, sqv, sqop, sequoia-git, sequoia-chameleon-gnupg, gpg-agent, makepasswd, pwgen, htop, pv, cryptsetup, dmsetup, udev, anon-apt-sources-list, tor, vm-config-dist, tor-ctrl, mokutil Breaks: kicksecure-default-applications-cli, kicksecure-dependencies-cli, kicksecure-dependencies-system, kicksecure-recommended-cli Replaces: kicksecure-default-applications-cli, kicksecure-dependencies-cli, kicksecure-dependencies-system, kicksecure-recommended-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-cli_37.2-1_all.deb Size: 89000 SHA256: 5d340e1c54e0625ee6e76657bf32d13b28562274baf234197858df1916ec3936 SHA1: cadefc82667059d574f824a3810f351460319d6c MD5sum: b516c5fd3346d110f5c543879f4f8191 Description: All systems, all hardware, command-line packages For all hardened systems. . For all hardware platforms. . Provides packages for basic command-line-only installations. Package: dist-general-gui-all Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Pre-Depends: legacy-dist Depends: desktop-config-dist, libgl1-mesa-dri, mesa-vulkan-drivers, libfuse2t64, mate-polkit, xdg-desktop-portal, msgcollector-gui, repository-dist-wizard, sdwdate-gui, setup-wizard-dist, security-misc-desktop, mesa-utils, open-link-confirmation, accountsservice, icon-pack-dist, libasound2t64 Breaks: kicksecure-desktop-applications-recommended, kicksecure-desktop-environment-essential-gui Replaces: kicksecure-desktop-applications-recommended, kicksecure-desktop-environment-essential-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-gui-all_37.2-1_all.deb Size: 88576 SHA256: 022a7e69fde6510b18784671d9949d64feaf9790f9cb1dc228fcc4b1cfc4e593 SHA1: f0334482a083840f528dfc63fdbf57f20a4608df MD5sum: 90d9ca61f8cb6afc72594903b1e6da5e Description: All systems, all hardware, GUI packages For all hardened systems. . For all hardware platforms. . Provides packages for all graphical desktop installations. Package: dist-general-gui-lxqt Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Pre-Depends: legacy-dist Depends: dummy-dependency-sway, dummy-dependency-lxqt-policykit, featherpad, gnome-keyring, lxqt-about, lxqt-about-l10n, lxqt-admin, lxqt-admin-l10n, desktop-file-utils, lxqt-themes, lxqt-system-theme, lxqt-config, lxqt-config-l10n, lxqt-notificationd, lxqt-notificationd-l10n, lxqt-globalkeys, lxqt-globalkeys-l10n, lxqt-qtplugin, pcmanfm-qt, pcmanfm-qt-l10n, qterminal, qterminal-l10n, qtxdg-tools, lxqt-openssh-askpass, lxqt-openssh-askpass-l10n, lxqt-sudo, lxqt-sudo-l10n, papirus-icon-theme, qt6-svg-plugins, qt6-translations-l10n, qt6-wayland, xdg-desktop-portal-gtk, xdg-desktop-portal-lxqt, gvfs, gvfs-backends, pkexec, polkitd, sysmaint-panel, discover, hwinfo, laptop-detect, lm-sensors, lshw, gparted, lxqt-archiver, lxqt-archiver-l10n, liblxqt-l10n, libfm-qt-l10n Breaks: kicksecure-desktop-applications-lxqt, kicksecure-desktop-applications-xfce, kicksecure-desktop-environment-essential-lxqt, kicksecure-desktop-environment-essential-xfce, kicksecure-shared-host-lxqt, kicksecure-shared-host-xfce Replaces: kicksecure-desktop-applications-lxqt, kicksecure-desktop-applications-xfce, kicksecure-desktop-environment-essential-lxqt, kicksecure-desktop-environment-essential-xfce, kicksecure-shared-host-lxqt, kicksecure-shared-host-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-gui-lxqt_37.2-1_all.deb Size: 88736 SHA256: a6e1f12b0de1c647a1dcfbeae5ef6686c8c3b2609ba7166af450ea7de43a6229 SHA1: 4b8796290f8fd23fb455eaa0fbb4099cb6eb37d2 MD5sum: 16073466753dd5bf9dbcac801d140896 Description: All systems, all hardware, LXQt GUI packages For all hardened systems. . For all hardware platforms. . Provides packages for LXQt graphical desktop installations. Package: dist-general-server Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Pre-Depends: legacy-dist Depends: security-misc-server Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-server_37.2-1_all.deb Size: 88348 SHA256: 214c54f598bfa8120c142908a83d087f0067fca40eb54be281602906e3e24e0c SHA1: 0c1dfd7af510a2e03a81b50fcb116f7dbc47625c MD5sum: 488bf19c5ab8049db20880a72c4c7aca Description: All systems, all hardware, server packages For all hardened systems. . For all hardware platforms. . Provides packages for server installations. Package: dist-nonqubes-cli Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Pre-Depends: legacy-dist Depends: dracut, systemd-cryptsetup, acpi-support, console-common, console-setup, grub-live-dracut, kbd, keyboard-configuration, swap-file-creator, smartmontools Breaks: non-qubes-enhancements-cli Replaces: non-qubes-enhancements-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-cli_37.2-1_all.deb Size: 88496 SHA256: ef5558391b7b5acb08fba4fc25159d4c2c760a1dfec3b70deeba61d83698c062 SHA1: 34f45456acba63d757dd010b742da51d75d47539 MD5sum: 3eb9a20d6d50e4a93d41d0e0f2a30498 Description: All systems, not Qubes VMs, command-line packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dist-nonqubes-gui-all Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Pre-Depends: legacy-dist Depends: rads, desktop-config-dist-dependencies, labwc, waybar, wvkbd, gsmartcontrol, upower Breaks: non-qubes-audio, non-qubes-enhancements-gui Replaces: non-qubes-audio, non-qubes-enhancements-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-gui-all_37.2-1_all.deb Size: 88464 SHA256: 6d16206b96932091c90fc8a09a5d0e9317c3c87ad823dc97ad8b9fa61063fe04 SHA1: bb588263cd1137bdfdcc4ab699e943957f4dc693 MD5sum: dbbc557e6b52c17a498796de0883a98a Description: All systems, not Qubes VMs, GUI packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: dist-nonqubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Pre-Depends: legacy-dist Depends: swayidle, swaylock, greetd, wlgreet, lxqt-powermanagement, lxqt-powermanagement-l10n, lxqt-panel, lxqt-panel-l10n, lxqt-runner, lxqt-runner-l10n, lxqt-session, lxqt-session-l10n, lxqt-wayland-session, swaybg, wdisplays, flameshot, grim, xdg-desktop-portal-wlr, kanshi, smart-notifier Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-gui-lxqt_37.2-1_all.deb Size: 88524 SHA256: 8806efea0aad29f14c772e61a2b19c66bf2720e5a8fe16f634701669e40e246d SHA1: bce7693b3060d2381bd5ab3baacb9b7afdaa0397 MD5sum: c53ed402694ab0729332610be7ee1c7d Description: All systems, not Qubes VMs, LXQt GUI packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: dist-qubes-cli Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Pre-Depends: legacy-dist Depends: qubes-core-agent-networking, qubes-core-agent-dom0-updates, qubes-input-proxy-sender, qubes-kernel-vm-support, qubes-usb-proxy, qubesdb-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-cli_37.2-1_all.deb Size: 88432 SHA256: f273c455650d0cb2863aad4609e074495e4d78a52d5ef2d9687ca2815fbcc2c8 SHA1: 9a4e5d193c6e26ff5aaca34d9c9394fd8973fdc6 MD5sum: ab49356335541085c228830bfcf86e88 Description: All systems, Qubes VMs, command-line packages For all hardened systems. . For Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dist-qubes-gui-all Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Pre-Depends: legacy-dist Depends: qubes-core-agent-pcmanfm-qt, qubes-core-agent-nautilus, qubes-notification-agent Breaks: qubes-whonix-shared-packages-recommended Replaces: qubes-whonix-shared-packages-recommended Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-gui-all_37.2-1_all.deb Size: 88432 SHA256: cdaa38535d7d55900f1c2a2ff9a6c20ee3266e65094324885bc74ef216a16597 SHA1: 4d341b02a45782a2c2bb074850e0ac6e355f8f18 MD5sum: 6bf61a7aa35cb2bf87b325eda16bb164 Description: All systems, Qubes VMs, GUI packages For all hardened systems. . For Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: dist-qubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-gui-lxqt_37.2-1_all.deb Size: 88360 SHA256: fc7abac4e87e63f58542eec65cd934f9db58dee16d5fc07b0417c0ecf86de9f6 SHA1: 947eb7c3cb9100e04ae44ee2dce11694473753fa MD5sum: c58e133cd208c06e4001e7418c762e49 Description: All systems, Qubes VMs, LXQt GUI packages For all hardened systems. . For Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: dist-vm-cli Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-vm-cli_37.2-1_all.deb Size: 88356 SHA256: c6a7d438b18a2ba3d2ec37217348d6827ee76ec2cc802cc3baaad1e855eb1c1a SHA1: 14fc44f452653da5bc30551b3fd4fb195540c105 MD5sum: fddad00abef07d0b9ec60efd8492daf4 Description: All systems, VMs, command-line packages For all hardened systems. . For non-Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dist-vm-gui-all Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 118 Pre-Depends: legacy-dist Depends: virtualbox-guest-additions-iso | virtualbox-7.2 | virtualbox-7.3 | virtualbox-7.4 | virtualbox-8.0 | virtualbox-8.1 | virtualbox-8.2 | virtualbox-8.3 | virtualbox-8.4 Breaks: virtualbox-guest-utils, virtualbox-guest-x11 Replaces: virtualbox-guest-utils, virtualbox-guest-x11 Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-vm-gui-all_37.2-1_all.deb Size: 88920 SHA256: 1b18029805f640095da3ba027c2638254b4c507b50b94e63be567cfc075cd037 SHA1: 8f82359d588ee5dfe8cae4943a41e1c2415acfb7 MD5sum: 2b1deb44fa2fef10f230256c2a4856fc Description: All systems, VMs, GUI packages For all hardened systems. . For non-Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: dummy-dependency-apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Conflicts: apparmor-profiles-kicksecure Provides: apparmor-profiles-kicksecure Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-apparmor-profiles-kicksecure_37.2-1_all.deb Size: 88396 SHA256: 4f44d0a28fb93e983ba41a556f172c902563525b6118c8e7b59ab84b34fa4009 SHA1: c2bdaa3381ee885e7436b3de0aa3de5fe9f135f4 MD5sum: edf0239e2c63577d8bd4fc8e27e8bcba Description: dummy package apparmor-profiles-kicksecure A metapackage, which satisfies the dependency on apparmor-profiles-kicksecure. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-bindp Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Conflicts: bindp Provides: bindp Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-bindp_37.2-1_all.deb Size: 88392 SHA256: f49d366c651664110701290f4b1d3181b0955f9b97105bc9a4a318622488bd1a SHA1: 17677b6beee49c4730bc38d13d62d05e0673d37e MD5sum: 0d679ea0144f894029ca8415d35962ee Description: dummy package to satisfy architecture specific dependency bindp A metapackage, which satisfies the dependency on bindp. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-browser-choice Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Conflicts: browser-choice Provides: browser-choice Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-browser-choice_37.2-1_all.deb Size: 88408 SHA256: b0028f988109292c4a3ea861a0113cbbbcb8a95dfcad3f35f41db81efbaabd8d SHA1: 9aba08a36ea5e15ce35bbc1dbaf1f6be2627e859 MD5sum: b7dd79ca4bfec5ff5d0380e68504f8de Description: dummy package browser-choice A metapackage, which satisfies the dependency on browser-choice, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-efibootmgr Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Conflicts: efibootmgr Provides: efibootmgr Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-efibootmgr_37.2-1_all.deb Size: 88416 SHA256: 04b11b20cb7aa4fd59891a88435d54cfefed10b5343f1891bbe6521d0a05afd5 SHA1: 391b2ae5be526c45e44b7ed3d24ffe225bfe54bd MD5sum: e606056c44a7b25e5f007698a47d6afd Description: dummy package efibootmgr A metapackage, which satisfies the dependency on efibootmgr. Because efibootmgr is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-electrum Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Conflicts: electrum Replaces: dummy-dependency-hardened-electrum Provides: dummy-dependency-hardened-electrum, electrum Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-electrum_37.2-1_all.deb Size: 88420 SHA256: 5a551f88616436e2c4f36d744131f335d30900ba02ed453270ac2620be58d913 SHA1: 21fdc8b0c2e59b2b4cf1c5dab1c4dc126778242f MD5sum: 5c2d2e66455586afe55f14bc64b0ea8d Description: dummy package to satisfy architecture specific dependency electrum A metapackage, which satisfies the dependency on electrum. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-firefox-esr Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Conflicts: firefox-esr Provides: firefox-esr Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-firefox-esr_37.2-1_all.deb Size: 88416 SHA256: 71bc05e78dec9e2a5ccf3a7d949dc28b432f0f27b065a9a8e9c3faeea983dd85 SHA1: 454f3fdc494ed6fdbdf1e2ad5a7788e3d2d4aeba MD5sum: 6d3636281fd188f1cd0bcc16c1e88a20 Description: dummy package firefox-esr A metapackage, which satisfies the dependency on firefox-esr, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-hardened-malloc Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Conflicts: hardened-malloc Provides: hardened-malloc Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-hardened-malloc_37.2-1_all.deb Size: 88396 SHA256: ac46c868e41cf5f2e549827d6319f9ae9a479a822db42222bb54e37b2ed9bc3d SHA1: 3d3369cac6d9504629ad782be067dba5ada00185 MD5sum: f40e2e2c631c1b0e0a440afba82e6ef1 Description: dummy package to satisfy architecture specific dependency hardened-malloc A metapackage, which satisfies the dependency on: . hardened-malloc . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-keyutils Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Conflicts: keyutils Provides: keyutils Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-keyutils_37.2-1_all.deb Size: 88408 SHA256: 88a9a2b501ca957481ed2709485177276545602245233b16ec1058d5564f2048 SHA1: 75775eaba70f32008586f83aa45abbef462cce5c MD5sum: 547d650d54e18b8c1e3d9dffeef1c8b3 Description: dummy package keyutils A metapackage, which satisfies the dependency on keyutils. Because keyutils is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-kloak Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Conflicts: kloak Provides: kloak Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-kloak_37.2-1_all.deb Size: 88396 SHA256: 3b55680073732affe07b7452ec5179053be6d1bb1bd1f58ae2306e796b3dae04 SHA1: af6cf43d4d40f77b426d1daef2582efc5dc0e96e MD5sum: ae76a7a6c152e81b02d6e13d8659b3bb Description: dummy package to satisfy architecture specific dependency kloak A metapackage, which satisfies the dependency on kloak. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-lxqt-policykit Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Conflicts: lxqt-policykit Provides: lxqt-policykit Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-lxqt-policykit_37.2-1_all.deb Size: 88440 SHA256: 82dff526b4657ef9287b01de730140dd321df3a8092bc549e926e285d49a476e SHA1: 81f4cdf1cf60047eb4813c19e6c5ddf536163dd5 MD5sum: 5531377bd2f54a282342f1bfb4f91da1 Description: dummy package lxqt-policykit A metapackage, which satisfies the dependency on lxqt-policykit. Because lxqt-policykit is buggy. Bugs out on pam-info stdout/stderr output. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-mokutil Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Conflicts: mokutil Provides: mokutil Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-mokutil_37.2-1_all.deb Size: 88392 SHA256: 3d130b92b3c1663545ae9b556b22b0707be3136d603a689567f7c20f7c23a9ba SHA1: 6bf5f2618c0e5bba7a33dac5ba91b7bd5fd90ea6 MD5sum: c6d9ad9d8ee2e1f28c59f342f2f768c4 Description: dummy package mokutil A metapackage, which satisfies the dependency on mokutil. Because mokutil is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-mta Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Conflicts: default-mta, mail-transport-agent Provides: default-mta, mail-transport-agent Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-mta_37.2-1_all.deb Size: 88456 SHA256: dec227fb262ac2b17a9ddd959da89210d43428d0ec209514448f0a488f0b782f SHA1: d32905254a2f70da2616488638d00349e27a56d9 MD5sum: ac9a2a9207b0e8faf80302640b4e201f Description: dummy package mta A metapackage, which satisfies the dependency on default-mta and mail-transport-agent. Because apt attempts to install a mail transport agent when upgrading Bookworm to Trixie. . This package cannot provide a real implementation of a mail transport agent. It is only a dummy to satisfy the dependency. Package: dummy-dependency-qubes-core-agent-passwordless-root Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Conflicts: qubes-core-agent-passwordless-root Provides: qubes-core-agent-passwordless-root Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-qubes-core-agent-passwordless-root_37.2-1_all.deb Size: 88436 SHA256: b302eed1365946c532afceffb11f59dc4838578a01e1a594276b98ae92ae872b SHA1: bbc8b952b337a58caf97576f5eae19c3d8ee8482 MD5sum: b1c8b6aa033d583dadec41a10828356e Description: dummy package qubes-core-agent-passwordless-root A metapackage, which satisfies the dependency on qubes-core-agent-passwordless-root, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-sbsigntool Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Conflicts: sbsigntool Provides: sbsigntool Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-sbsigntool_37.2-1_all.deb Size: 88420 SHA256: 4805cda4f13904183c0239867d47f2888cb6575e94ab36fa9290a31b2a4549c1 SHA1: 6d8fa36020b5b2c44640fcc2463f64507043ba11 MD5sum: 28aa83821758adff518035e69c53405d Description: dummy package sbsigntool A metapackage, which satisfies the dependency on sbsigntool. Because sbsigntool is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-sway Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Conflicts: sway Provides: sway Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-sway_37.2-1_all.deb Size: 88384 SHA256: bcaa4d768de53b78f7b079111976a1a11b16f719c9d582595bc20c1f6ca761a4 SHA1: 71a36c6503e78eed5665fd64788914cc2c54cbef MD5sum: f8cc341833dcd04e626e937055c94073 Description: dummy package sway A metapackage, which satisfies the dependency on sway. Used to install wlgreet without sway. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tb-starter Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Conflicts: tb-starter Provides: tb-starter Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tb-starter_37.2-1_all.deb Size: 88412 SHA256: e6eb78e6132c6a66c530703361fa284ee23c4dff1f3976733c1ff9933359d7c3 SHA1: 1278c2079a66c734c65e19b728871bf667ed9295 MD5sum: 7e47c104bc408cb618a0fb6736ba3ce1 Description: dummy package tb-starter A metapackage, which satisfies the dependency on tb-starter, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tb-updater Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Conflicts: tb-updater Provides: tb-updater Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tb-updater_37.2-1_all.deb Size: 88408 SHA256: 91ee9819d00583f3e2c4591a1f23f3f29ea17b69cbcd87982da660637331d15b SHA1: 503b844059a1443e7b00645799f8d00df876fd2d MD5sum: f9f4ed6a13a54ab66c8f4b0b1d7bad53 Description: dummy package tb-updater A metapackage, which satisfies the dependency on tb-updater, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tirdad Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Conflicts: tirdad Provides: tirdad Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tirdad_37.2-1_all.deb Size: 88384 SHA256: 2e020ea2c8536868177f2da478cae2dd5f2efc7a473691d32f7603136920c85f SHA1: 82e015c166f501a75e31653370c7db9b7e9d2439 MD5sum: 387c913e3aa1e400398db664974e6c1d Description: dummy package to satisfy architecture specific dependency tirdad A metapackage, which satisfies the dependency on tirdad. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-virtualbox-guest-utils Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Conflicts: virtualbox-guest-utils Provides: virtualbox-guest-utils Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-virtualbox-guest-utils_37.2-1_all.deb Size: 88432 SHA256: 7bbffe7b02084f34adee77c63738ca07033d1306c9720b8bb258ea79867ce8d2 SHA1: 3fc7b7ec511c076d0b1f406229c338deb95801ef MD5sum: bfd6c54ba28b8ddaa94ab66c11bea522 Description: dummy package virtualbox-guest-utils A metapackage, which satisfies the dependency on virtualbox-guest-utils. Because virtualbox-guest-utils is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-virtualbox-guest-x11 Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Conflicts: virtualbox-guest-x11 Provides: virtualbox-guest-x11 Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-virtualbox-guest-x11_37.2-1_all.deb Size: 88420 SHA256: 98983bc686a3dc39185caac02c8e65ece12846a23e2c59860e2f64d5c5411637 SHA1: faec75d3d2603b473867d5701d0771bfaba7696b MD5sum: 17113d01fb0b0bb4790ff0613bc68652 Description: dummy package virtualbox-guest-x11 A metapackage, which satisfies the dependency on virtualbox-guest-x11. Because virtualbox-guest-x11 is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-xorg-vm Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Conflicts: xserver-xorg-video-vmware Provides: xserver-xorg-video-vmware Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-xorg-vm_37.2-1_all.deb Size: 88396 SHA256: 6521b292a8bce7e6fe8697530ab146bc7213ee560c19a599456c1b237f6bcae7 SHA1: 01c1815c5221413c7077d6f89a74b3b9d8a04e09 MD5sum: 2b9283aac0537424f24ade67125e65a9 Description: dummy dependency xserver-xorg-video-vmware A metapackage, which satisfies the dependency on xserver-xorg-video-vmware. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: firmware-freedom Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Pre-Depends: legacy-dist Depends: firmware-linux-free, firmware-ath9k-htc, firmware-carl9170 Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/firmware-freedom_37.2-1_all.deb Size: 88416 SHA256: dd4f7395fcbd773bfaa7a004e4bd920d2c74f49afa1995f5dacbd2da01cc3fa6 SHA1: cdf26b152bea589617712732a2f8269102de1acb MD5sum: 349a5ef6a5b03002c48bc3ef0586a0ff Description: Recommended packages for hosts with freedom hardware design A metapackage, which includes freedom firmware useful for hosts with freedom hardware design. . These are not useful in Qubes, since this would be up to Qubes. Package: genmkfile Version: 3:21.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 223 Depends: make, dpkg-dev, devscripts, moreutils, safe-rm, strip-nondeterminism, perl, rsync, python3, dctrl-tools Homepage: https://github.com/Kicksecure/genmkfile Priority: optional Section: misc Filename: pool/main/g/genmkfile/genmkfile_21.9-1_all.deb Size: 108184 SHA256: 19d841a7eaa8839ec0ee4aee1c151c39f7d0cc6f4989992cc222a470f253dc23 SHA1: 7d8b9a415b28aaa3cf1da96396601aef8bfee667 MD5sum: 5529ef3900908bf6e6ab66317a4a12a8 Description: Generic Makefile Makes packaging simpler. No more need to manually maintain 'make install' targets or distribution specific install files such as debian/pkg-name.install. . Files in etc/... in root source folder will be installed to /etc/..., files in usr/... will be installed to /usr/... and so forth. This should make renaming, moving files around, packaging, etc. very simple. Packaging of most packages can look very similar. . Provides common make targets such as 'make install', 'make dist', 'make installsim', 'make installcheck', 'make uninstall', 'make uninstallcheck', 'make distclean'. . Very extensible through file ./make-helper-overrides.bsh or folder ./make-helper-overrides.d. By using overrides, any make target can be easily extended using pre or post hooks or replaced. Override files which are executable will be used. Override files which are not executable will be skipped. . Contains a minimal Makefile while the heavy lifting is done by a bash script make-helper.bsh. . Building for multiple platforms possible, example: export make_cross_build_platform_list="i386 amd64" . Can call with lintian (static analysis tool for Debian packages). By default it will be using lintian if installed while failing open (non-zero exit code). lintian can be disabled. export make_use_lintian=false Or can be configured to fail closed (non-zero exit code). export make_use_lintian=true . Can build packages without chroot using debuild (default) or inside chroot using cowbuilder. To enable cowbuilder, use: export make_use_cowbuilder=true . Supports signing packages using debsign. (sign a Debian .changes and .dsc file pair using GPG) export make_use_debsign=true Package: gpg-bash-lib Version: 3:5.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 647 Depends: safe-rm Homepage: https://github.com/Kicksecure/gpg-bash-lib Priority: optional Section: libs Filename: pool/main/g/gpg-bash-lib/gpg-bash-lib_5.5-1_all.deb Size: 491108 SHA256: 4693375626e0b7bcf9e5992ee0ee9a66156df6909ebc8663dc684d368a14d656 SHA1: 6005be50ce30ad4a8b616ea1148ea4ad27c1da0e MD5sum: db8bc0a9d6893876453a09b499b79899 Description: gpg bash library Abstracts file verification into common functions. Allows detecting of stale files, i.e. detection downgrade or indefinite freeze attacks by implementing a valid-until like mechanism. . Internally parses gpg's --status-file output. . For better security. Package: grub-live Version: 3:11.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 122 Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live_11.3-1_all.deb Size: 42080 SHA256: 29872d109f97a0848293de799ece9251978387e1ce64803e98fb2ea8cd0f139e SHA1: bd3396141bf9d4224be1b0bf493cafaac33665bd MD5sum: 0b7ee3ab6f59936fc3edf7e1e89f5d61 Description: grub live boot menu entry Base grub-live package. You probably do not want to install this directly, install grub-live-dracut instead. . Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . Adds a grub live boot menu entry. . Existing grub boot entries stay unmodified. . No claims are made with regard to anti forensics. Package: grub-live-dracut Source: grub-live Version: 3:11.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 65 Depends: grub-live, dracut Provides: boot-live, grub-live-boot Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live-dracut_11.3-1_all.deb Size: 33548 SHA256: c595b03c7414976974a841cdd8e37de62baf0ebfa26d1aafb072f01cff6bb4cb SHA1: d61a3f717402e6a66ae315a9b4aab42774c62b36 MD5sum: 4b02e9ff71be5477a6cba990ecfa0342 Description: grub live dracut dependencies Dracut version metapackage for grub-live. . See also the package grub-live. Package: hardened-kernel Version: 3:5.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 475 Depends: build-essential, libssl-dev, libncurses-dev, fakeroot, libelf-dev, bison, flex, gcc-12-plugin-dev, curl, bc, kmod, cpio Homepage: https://www.kicksecure.com/wiki/Hardened-kernel Priority: optional Section: misc Filename: pool/main/h/hardened-kernel/hardened-kernel_5.5-1_all.deb Size: 158508 SHA256: a4b1b82341fbb23c1cea9ae3e5efa87f8bd8a5bf079657e9e1388dd90c9bcccb SHA1: 4c86585ee5c17290a81bc17a9135fc1733dfcfe5 MD5sum: 1abb77a7e5f335cd60dc43ab141dfcfa Description: Hardened Kernel for Host and VMs This is a hardened kernel configuration for Whonix / Kicksecure. hardened-vm-kernel is designed specifically for virtual machines and hardened-host-kernel is designed for hosts. . Both configs try to have as many hardening options enabled as possible and have little attack surface. hardened-vm-kernel only has support for VMs and all other hardware options are disabled to reduce attack surface and compile time. . During installation of hardened-vm-kernel, it compiles the kernel on your own machine and does not use a pre-compiled kernel. This ensures the kernel symbols in the compiled image are completely unique which makes it far harder for kernel exploits. This is possible due to hardened-vm-kernel having only VM config options enabled which drastically reduces compile time. . During installation of hardened-host-kernel, the kernel is not compiled on your machine and it uses a pre-compiled kernel. This is because the host kernel needs most hardware options enabled to support most devices which makes compilation take a very long time. . The VM kernel is more secure than the host kernel due to having less attack surface and not being pre-compiled but if you want more security for the host, it is recommended to edit the hardened host config, enable only the hardware options you need and compile the kernel yourself. This makes the security of the host and VM kernel comparable. . Both configs were based on the default Debian config. . These kernels use the linux-hardened patch for further hardening. Custom hardening patches should be sent there. . This only supports LTS kernels as they have the least attack surface (stable kernels have more code and more bugs) and the best stability. . Build script /usr/share/hardened-vm-kernel/build does not run automatic yet. . Kernel does not get installed automatic yet. . See also development discussion: http://forums.whonix.org/t/kernel-recompilation-for-better-hardening Package: helper-scripts Version: 3:53.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 1299 Depends: python3, python3-stem, python3-scapy, python3-yaml, bubblewrap, moreutils, equivs, safe-rm, jq, python3-schema, sq Breaks: usability-misc (<< 3:31.7-1) Replaces: anon-shared-helper-scripts, anon-ws-leaktest, curl-scripts, python-guimessages, python3-guimessages, usability-misc (<< 3:31.7-1) Homepage: https://github.com/Kicksecure/helper-scripts Priority: optional Section: misc Filename: pool/main/h/helper-scripts/helper-scripts_53.9-1_all.deb Size: 387748 SHA256: 6f9c46f92a852f5144ba391bacee0e86552c103c728facbe90c590351acad17d SHA1: 2f170a6f681557c153867afaeedf5784b690fdbc MD5sum: 181cb48e9896848e7547593074896415 Description: Helper scripts useful for Linux Distributions Contains a script for curl progress bar in terminal. Includes another script to convert curl exit codes to curl status messages. Implemented in bash. Common code that can be used by other scripts. . Library that can be used by other (anonymity related) packages that want to programmatically get information about states of Tor. Common code, that is often required. Includes bash and Python helper scripts. . Leak Test for Anonymity Distribution Workstations Integrated leak test. Needs to be manually run. See: https://www.whonix.org/wiki/Dev/Leak_Tests . Translatable GUI Messages Generic modules guimessage.py and translations.py. Called with two parameters: .yaml file path and yaml section. Return translations according to distribution local language (Python 'locale'). . Provides the ld-system-preload-disable wrapper to disable /etc/ld.so.preload per application via bubblewrap. Useful if hardened_malloc is being globally preloaded and needs to be disabled for some applications. . Provides the dummy-dependency script for quickly creating and installing dummy packages for working around package dependencies. . Provides apt-get-noninteractive that is a simple wrapper around apt-get, that sets all required environment variables to make it interactive as well as to prevent systemd service starts and restarts during apt-get. Package: helper-scripts-tests Source: helper-scripts Version: 3:53.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 227 Depends: helper-scripts, git, python3-pytest, pylint, mypy, black, ncurses-term Homepage: https://github.com/Kicksecure/helper-scripts Priority: optional Section: misc Filename: pool/main/h/helper-scripts/helper-scripts-tests_53.9-1_all.deb Size: 194444 SHA256: 84f98ada9975e75fa4d76b6541f56f2259fed0d5a000f77dac25719a87b173e3 SHA1: efa29e295b4fd53c94188bbaca7c7289146f2536 MD5sum: e67dade72fb79da2e09ee1ebca538a7d Description: Helper scripts test packages This is a dependency package for tests. Package: icon-pack-dist Version: 3:5.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 2528 Conflicts: anon-icon-pack Replaces: anon-icon-pack Provides: anon-icon-pack Homepage: https://github.com/Kicksecure/icon-pack-dist Priority: optional Section: misc Filename: pool/main/i/icon-pack-dist/icon-pack-dist_5.4-1_all.deb Size: 1440008 SHA256: 9a3e87e94fb80ccf591bc7e75c1c0fe545d84ca59c1b6203a9850c5bfd448fb2 SHA1: 995df465d9c0f8c60fb9e4d27227f7a6e0feeea6 MD5sum: d56db62c73e8dd693f2c39a0bb74d4ff Description: Icon Pack for Derivative Distributions Contains icons, that are used by other derivative distribution specific packages. Others are welcome to use these icons according to their Free licenses as well. Package: initializer-dist Version: 3:8.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 98 Depends: psmisc, debsums, damngpl, safe-rm Conflicts: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Replaces: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Provides: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Homepage: https://www.kicksecure.com/wiki/Verifiable_Builds Priority: optional Section: misc Filename: pool/main/i/initializer-dist/initializer-dist_8.9-1_all.deb Size: 43932 SHA256: d9ffc226bebb05f6171a0241d6075c9e49e7e056fc56311ebb52a665bda004bd SHA1: 6a23f9ff60917ce4dd8f387bf9f638dff3e017b4 MD5sum: 9967b10c71382cbcf8928b0adca09a4e Description: Initializes Linux distributions, Release Upgrades and Legacy Contains a chroot-scripts-post.d script, that cleans up temporary files, logs. . Deletes random seeds. Since these should not be included in a redistributed image. Also sometimes called 'golden' image. . - /var/lib/urandom/random-seed - /var/lib/systemd/random-seed - /var/lib/random-seed - See also: https://systemd.io/RANDOM_SEEDS.html Package: kicksecure-baremetal-cli Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Pre-Depends: legacy-dist Depends: kicksecure-nonqubes-cli, kicksecure-general-cli, dist-baremetal-cli, dist-nonqubes-cli, dist-general-cli, ram-wipe, wpasupplicant Breaks: kicksecure-cli-host, kicksecure-cli-host-packages-recommended Replaces: kicksecure-cli-host, kicksecure-cli-host-packages-recommended Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-cli_37.2-1_all.deb Size: 88432 SHA256: 84b9401c1c6ff79ec027b50d0d71d8012dc0ee8f6d293b7ef0ec01abfba42e29 SHA1: 4e2ec2363e3676eea4805a24b7e46e6e66988632 MD5sum: 90e82a0049537e2df416729e089b7b8c Description: Kicksecure systems, physical hardware, command-line packages For Kicksecure systems. . For physical hardware. . Provides packages for basic command-line-only installations. Package: kicksecure-baremetal-gui-lxqt Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Pre-Depends: legacy-dist Depends: kicksecure-baremetal-cli, kicksecure-nonqubes-gui-lxqt, kicksecure-nonqubes-gui-all, kicksecure-nonqubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-baremetal-gui-lxqt, dist-baremetal-gui-all, dist-baremetal-cli, dist-nonqubes-gui-lxqt, dist-nonqubes-gui-all, dist-nonqubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-lxqt-host, kicksecure-xfce-host Replaces: kicksecure-lxqt-host, kicksecure-xfce-host Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-gui-lxqt_37.2-1_all.deb Size: 88456 SHA256: 623b35dd89b79e7fff9d42c095e9167e94b3a0017911d12119e97c2c59aa0ae3 SHA1: 01c341fe806d64f9609a36d3237d5472d85ec01c MD5sum: 1985efc45cad6cd8338828de047fcf7f Description: Kicksecure systems, physical hardware, LXQt GUI packages For Kicksecure systems. . For physical hardware. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-baremetal-server Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Pre-Depends: legacy-dist Depends: kicksecure-baremetal-cli, kicksecure-nonqubes-cli, kicksecure-general-cli, dist-baremetal-cli, dist-nonqubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-server_37.2-1_all.deb Size: 88388 SHA256: 45c8718746b50ae308eb2d0f32fb24b7dc6da689cfdae08343dc1f6bb09db8a0 SHA1: 9d6fa8bf69b26260a5bbe1ccd86fb1171cdf7284 MD5sum: 6b17ad70f072c21b75932a58ae8926a2 Description: Kicksecure systems, physical hardware, server packages For Kicksecure systems. . For physical hardware. . Provides packages for server installations. Package: kicksecure-base-files Version: 3:10.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 2729 Depends: less Conflicts: diverts-etc++issue, diverts-etc++motd, diverts-etc++xdg++waybar++config.jsonc, diverts-etc++xdg++waybar++style.css Breaks: desktop-config-dist (<< 3:14.7-1) Replaces: desktop-config-dist (<< 3:14.7-1) Provides: diverts-etc++issue, diverts-etc++motd, diverts-etc++xdg++waybar++config.jsonc, diverts-etc++xdg++waybar++style.css Homepage: https://github.com/Kicksecure/kicksecure-base-files Priority: optional Section: misc Filename: pool/main/k/kicksecure-base-files/kicksecure-base-files_10.7-1_all.deb Size: 2633012 SHA256: 2c6fc64131e5dd87e6d5ea4515ab09948c102f07186f209aa8ceaf5f9e9df952 SHA1: 01097648544ca8a6375a4ef60975e575f0336302 MD5sum: b983bdc8e8142833dc2889ee8acdc207 Description: Kicksecure base system miscellaneous files This package contains several important miscellaneous files, such as /etc/issue, /etc/motd, /etc/dpkg/origins/kicksecure, /usr/bin/kicksecure, and others. . Sets the KICKSECURE environment variable to 1 as well. Package: kicksecure-debug Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Pre-Depends: legacy-dist Depends: kicksecure-base-files, dist-base-files, initializer-dist, apparmor, apparmor-profile-dist, vm-config-dist, security-misc-server, tirdad-dkms, rads, ram-wipe, usability-misc, systemcheck, user-sysmaint-split, sudo, libpam-tmpdir, repository-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-debug_37.2-1_all.deb Size: 88544 SHA256: c1181f109eaa0152cae0eb3c0abd02b44a968a5de86863733b6c975da6d48f21 SHA1: 577c9ec457a98c33cde55d8d71ca863d891af869 MD5sum: 0067246948f4918220c702c7028c2655 Description: Kicksecure minimal boot-test / debug image A deliberately minimal package set for fast boot-test iteration: the boot chain (GRUB SMBIOS cmdline reader, RAM wipe). . NOT for production use. Intended only to speed up boot/grub/systemcheck iteration. Package: kicksecure-general-cli Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Pre-Depends: legacy-dist Depends: dosfstools, kicksecure-base-files, lvm2, ntfs-3g, obfs4proxy, gddrescue, usbguard Breaks: kicksecure-cli Replaces: kicksecure-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-cli_37.2-1_all.deb Size: 88424 SHA256: dcce63b1c324abd6b00618a80014ac8193c07676d4f3f7d7f158988de9751e76 SHA1: ebd658b05563e9d17857f57342f6d4a7af57e7a3 MD5sum: 481e93f475eafe36564be402c436d701 Description: Kicksecure systems, all hardware, command-line packages For Kicksecure systems. . For all hardware platforms. . Provides packages for basic command-line-only installations. Package: kicksecure-general-gui-all Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Pre-Depends: legacy-dist Depends: browser-choice, flatpak, keepassxc, kicksecure-welcome-page, loupe, vlc, ddrescueview, pipewire-audio, pipewire-pulse, wireplumber, rtkit, catfish, electrum, usbguard-notifier Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-gui-all_37.2-1_all.deb Size: 88472 SHA256: 3e5bbf5ae0d492840a31278d2809ef9d60da1e652c51bd34aef8df2584dd9cca SHA1: 63c85accf222449e0ee24c39fcfca90bfaf9a6f8 MD5sum: ec6e7559e8df8fa4056ee47c8c7d2cba Description: Kicksecure systems, all hardware, GUI packages For Kicksecure systems. . For all hardware platforms. . Provides packages for all graphical desktop installations. Package: kicksecure-general-gui-lxqt Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Pre-Depends: legacy-dist Depends: network-manager-applet, nm-connection-editor Breaks: kicksecure-lxqt, kicksecure-xfce Replaces: kicksecure-lxqt, kicksecure-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-gui-lxqt_37.2-1_all.deb Size: 88424 SHA256: 14f5ef29d4b2d3dc5ab016a04ac815637a454c832a5b6ad71b31845084c9d6ca SHA1: 5bd4b5e18fed792d2313678fa65e5a71abaf5b80 MD5sum: d013fc689af7155ed537e2727022a0e8 Description: Kicksecure systems, all hardware, LXQt GUI packages For Kicksecure systems. . For all hardware platforms. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-network-conf Version: 3:7.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 75 Depends: network-manager, iw, wpasupplicant, netbase, wireless-tools, wireless-regdb Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf_7.1-1_all.deb Size: 23092 SHA256: 868d123412250789480ecbdedd1728fe9e3af7314956154112ed4ad09432bcc3 SHA1: 6dce58e63b0e4ed28e2eb910e8b7984ab6590365 MD5sum: efe00dd9a96883ea6b77782e176e379b Description: Network Configuration for Kicksecure CLI Disables systemd Predictable Network Interface Names. . Disables systemd-resolved during boot unless file /etc/dns-enable exists. . Disables systemd-resolved fallback DNS (which by default is set to Google). . Disables NetworkManager hostname management (useful in redistributed Kicksecure VMs). Package: kicksecure-network-conf-gui Source: kicksecure-network-conf Version: 3:7.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 49 Depends: network-manager-gnome Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf-gui_7.1-1_all.deb Size: 19736 SHA256: 8342a329cc95f369edcbd43b9b76cef77f821d418b86442a368b11b4e0576265 SHA1: 483a6ec95cdf4c193bd93320906a087c1a57bc96 MD5sum: 46fac60d0d686416a531f94e47d286ac Description: Network Configuration for Kicksecure GUI A metapackage with dependencies recommended for a Kicksecure GUI for networking. . See also kicksecure-network-conf. Package: kicksecure-nonqubes-cli Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-cli_37.2-1_all.deb Size: 88368 SHA256: 810e7056bb5cce0a6caac5e16b571206a57c210b807b8d2af3109fe77429930b SHA1: 90f901cfc0f860d900b9e2ed609a5aa6aa44a185 MD5sum: fbb455aabd2caad8553914a441dbd088 Description: Kicksecure systems, not Qubes VMs, command-line packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-nonqubes-gui-all Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-gui-all_37.2-1_all.deb Size: 88372 SHA256: 145e9e8342ced410e50ad81f5272c784fe8f4a668ccf4f82ff1d8b873e61ea22 SHA1: 8d4c42f2b0e88db1156d7fbd9ea4314356968181 MD5sum: 6be08003e94af619a26938e3defd11e7 Description: Kicksecure systems, not Qubes VMs, GUI packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: kicksecure-nonqubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Pre-Depends: legacy-dist Depends: pavucontrol-qt, pavucontrol-qt-l10n Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-gui-lxqt_37.2-1_all.deb Size: 88388 SHA256: 014e044ce2fe6d169afab45e6256d4f9068bace03e007b4052e40d40b369dd33 SHA1: 28c2f4f00c76957dd6caa911e152827d3e67ff37 MD5sum: 6d7067e5d9b6bcfe26215534cf23a4e2 Description: Kicksecure systems, not Qubes VMs, LXQt GUI packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-packages-dependencies-pre Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Depends: dist-base-files, kicksecure-network-conf Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-packages-dependencies-pre_37.2-1_all.deb Size: 88408 SHA256: ddf49fa4ce9845580e154d443ff88feeb08c0a13b816c87666aff60a852a9e47 SHA1: aa5d1c688a21160bb8842bf093b61103cb91d94b MD5sum: 5515298c5cbd2242233d4ac7ae12accf Description: Dependencies for Kicksecure that changes network related files A metapackage, which installs packages which Kicksecure depends on. Can not be merged into another package due to conflicts with chroot build process. Package: kicksecure-qubes-cli Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Pre-Depends: legacy-dist Depends: kicksecure-general-cli, dist-qubes-cli, dist-general-cli, split-gpg2, qubes-img-converter, qubes-pdf-converter, qubes-core-agent-network-manager, wpasupplicant Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-cli_37.2-1_all.deb Size: 88420 SHA256: 53b267fa0ee83fbc0669f3fa2271ad0e31f0728e4981ec4df114da8def7ccac7 SHA1: 7b0d5020d962211df579aa0693233fc6e5deb1cd MD5sum: b2de198d8f358c93fd5dab0dc10d7a67 Description: Kicksecure systems, Qubes VMs, command-line packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-qubes-gui-all Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Pre-Depends: legacy-dist Depends: pipewire-qubes Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-gui-all_37.2-1_all.deb Size: 88356 SHA256: 847fd93542fb8d6b35a984ca6c0056cf8648ed8a38b32de1c4cacd07ee89a23e SHA1: 7cb142ce8ecb6969c65efded55fbd8d98e3f7037 MD5sum: 2cdc2a69acc9db7aae5f8b858a047b6b Description: Kicksecure systems, Qubes VMs, GUI packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: kicksecure-qubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Pre-Depends: legacy-dist Depends: kicksecure-qubes-gui-all, kicksecure-qubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-qubes-gui-lxqt, dist-qubes-gui-all, dist-qubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-qubes-gui Replaces: kicksecure-qubes-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-gui-lxqt_37.2-1_all.deb Size: 88428 SHA256: 9b946d139e5df9de660cfa00214b12aecf94202f200dce0fac72fd2a65604a74 SHA1: 31a96ea474f83a93c95801add7de0912028b607d MD5sum: 304ec43938934c1356059ca3d35d37be Description: Kicksecure systems, Qubes VMs, LXQt GUI packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-qubes-server Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Pre-Depends: legacy-dist Depends: kicksecure-qubes-cli, kicksecure-general-cli, dist-qubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-server_37.2-1_all.deb Size: 88376 SHA256: c879a5915a756c00d26f6044c35d56051174656c096fa8ac8faceb730ed4cf46 SHA1: 69b6452cf8108e6ac3bbe2f4ae45a8122fce14ed MD5sum: 519ea64a2a729ce459a2513a0b29be0d Description: Kicksecure systems, Qubes VMs, server packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for server installations. Package: kicksecure-vm-cli Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Pre-Depends: legacy-dist Depends: kicksecure-nonqubes-cli, kicksecure-general-cli, dist-vm-cli, dist-nonqubes-cli, dist-general-cli Breaks: kicksecure-cli-vm Replaces: kicksecure-cli-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-cli_37.2-1_all.deb Size: 88396 SHA256: 710810846a45863413d479f1200f2e0e22ad3bcf72fdd9931848612a0fe888e6 SHA1: 63970a14f295612fed81a0ec6cb2f552970011df MD5sum: 03da629afbcd3abfacda6f67f528a644 Description: Kicksecure systems, VMs, command-line packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-vm-gui-lxqt Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Pre-Depends: legacy-dist Depends: kicksecure-vm-cli, kicksecure-nonqubes-gui-lxqt, kicksecure-nonqubes-gui-all, kicksecure-nonqubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-vm-gui-all, dist-vm-cli, dist-nonqubes-gui-lxqt, dist-nonqubes-gui-all, dist-nonqubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-lxqt-vm, kicksecure-xfce-vm Replaces: kicksecure-lxqt-vm, kicksecure-xfce-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-gui-lxqt_37.2-1_all.deb Size: 88456 SHA256: 16e931519296100fbdfaab67f6d3aed6e3323a6c4819c78856479c542533437f SHA1: 1708ef1752788a4cedfb91ee0c6ecf663232c663 MD5sum: 3f88bca3708d638348a60a6b5cf051cb Description: Kicksecure systems, VMs, LXQt GUI packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-vm-server Source: kicksecure-meta-packages Version: 3:37.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 116 Pre-Depends: legacy-dist Depends: kicksecure-vm-cli, kicksecure-nonqubes-cli, kicksecure-general-cli, dist-vm-cli, dist-nonqubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-server_37.2-1_all.deb Size: 88384 SHA256: 2b4cc3788d12754119a90d031e754473aa9449528a79eb9bac5d97369cad08e1 SHA1: b2debd12ae42a85b1b0af60b93367d8c74eecaa3 MD5sum: 13e028989b0d818ae8b2474be38b92b6 Description: Kicksecure systems, VMs, server packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for server installations. Package: kicksecure-welcome-page Version: 3:7.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 1013 Depends: fonts-roboto-fontface, libjs-jquery Homepage: https://github.com/Kicksecure/kicksecure-welcome-page Priority: optional Section: misc Filename: pool/main/k/kicksecure-welcome-page/kicksecure-welcome-page_7.9-1_all.deb Size: 922816 SHA256: 2edd29dd3c71da6438737d65e6b2a563dd6d49ef014eda7b4f81fe916629efd5 SHA1: bd1786b34faa351b5fbb6fe94b6fd788bc8b4b8d MD5sum: 310f6ba1a283b2ca823fd84996128ea6 Description: Local Browser Homepage for Kicksecure Kicksecure specific browser start page. . Contains Kicksecure logo and Kicksecure links. . Safe to remove, if you know what you are doing. Package: legacy-dist Version: 3:21.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 158 Depends: helper-scripts, apt-forktracer, moreutils Conflicts: vbox-disable-timesync, whonix-legacy Breaks: kloak (<< 0:0.6.3-1) Replaces: kloak (<< 0:0.6.3-1), vbox-disable-timesync, whonix-legacy Provides: vbox-disable-timesync, whonix-legacy Homepage: https://github.com/Kicksecure/legacy-dist Priority: optional Section: misc Filename: pool/main/l/legacy-dist/legacy-dist_21.0-1_all.deb Size: 63656 SHA256: 45743d104d7c48a0f3a5b17794683f93c86e2d10b89fbd4a3ffe78d9eb7e7a51 SHA1: ee56420f4f47f3ffadb51288a985c8661d070fe1 MD5sum: f4a0e4a0d9d12c9756b26a09616670cb Description: Prepare older Build Versions of Derivatives for Upgrade Applies fixes required for upgrading from for example version 8.x to version 9.x etc. . Upgrades from version 7.x or older versions is unsupported. . Safe to remove. Package: libvirt-dist Version: 3:12.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 144 Depends: adduser, qemu-kvm, libvirt-daemon, libvirt-clients, virt-manager, gir1.2-spiceclientgtk-3.0, passt, helper-scripts, msgcollector Conflicts: whonix-libvirt Replaces: whonix-libvirt Provides: whonix-libvirt Homepage: https://github.com/Kicksecure/libvirt-dist Priority: optional Section: misc Filename: pool/main/libv/libvirt-dist/libvirt-dist_12.4-1_all.deb Size: 62296 SHA256: b01438e62053695fd21c90b02dac4945f27fe145b10ab8b4962635b4235de77a SHA1: 83f31d854a3d5ea883cfd4e981614dc855c6ce59 MD5sum: 59d6e7b08033909f9ecc81619502ea5a Description: Whonix Libvirt XML Files for KVM and QEMU Libvirt XML files for Whonix-Gateway, Whonix-Workstation, Whonix-Custom-Workstation and Whonix's internal network. . Whonix-Host grub branding, motd and issue banner. . Whonix-Host boot popup. . See also: - https://www.kicksecure.com/wiki/KVM - https://www.kicksecure.com/wiki/QEMU Package: live-config-dist Version: 3:10.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 309 Depends: helper-scripts, pkexec, rsync, libglib2.0-bin, xdg-user-dirs, qml6-module-qtquick-window Homepage: https://github.com/Kicksecure/live-config-dist Priority: optional Section: misc Filename: pool/main/l/live-config-dist/live-config-dist_10.2-1_all.deb Size: 149700 SHA256: fd4344013a63d38b6c30f7a4b344768d7da54a78554f67497658ccb31a1ffe6e SHA1: 583f1b8b1acbf992e85a8be2f714512437bfa8ae MD5sum: 012fa0576103dcca364b9fe72b69a6e9 Description: calamares-settings-kicksecure and maybe calamares-settings-whonix Installed in Host ISO Live. . Supposed to be removed in Host installed. . Kernel parameters required for Live ISO. Package: lxqt-wayland-session Version: 0.3.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 473 Homepage: https://github.com/lxqt/lxqt-wayland-session Priority: optional Section: x11 Filename: pool/main/l/lxqt-wayland-session/lxqt-wayland-session_0.3.0-1_all.deb Size: 342180 SHA256: 737c5dd87a7a9ed38fdec91ec7277dd11313a6a87878f15f8f565eb09d3e7f21 SHA1: eb5a76da374b9e55d7b3e4ee011fc8dcb7448f93 MD5sum: 033d3e0edaaa86f47452afb8a4b5a1b9 Description: Files needed for the LXQt Wayland Session Files needed for the LXQt Wayland Session: Wayland session start script, its desktop entry for display managers and default configurations for actually supported compositors. Package: mediawiki-shell Version: 3:7.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 263 Depends: helper-scripts, safe-rm, jq, retry, python3 Homepage: https://github.com/Kicksecure/mediawiki-shell Priority: optional Section: misc Filename: pool/main/m/mediawiki-shell/mediawiki-shell_7.6-1_all.deb Size: 88264 SHA256: ec85f6872297d464ded415d509a7b9d466916e24d66a3e78a048c5a7eaa7f529 SHA1: 002654642e9387a2f07f52c458e5458ef5cbc16f MD5sum: 4ae13ef6dd0c95426ac92d76080adfac Description: bash shell scripts for usage of MediaWiki API Download, upload changes to, and manage pages from MediaWiki wikis from the command line. . This tool may work on other wiki sites, but is primarily intended for management of the Kicksecure and Whonix wikis. Package: msgcollector Version: 3:17.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 247 Depends: python3, inotify-tools, procps, safe-rm, moreutils, helper-scripts, init-system-helpers (>= 1.52) Conflicts: diverts-etc++bash.bash+-+logout Provides: diverts-etc++bash.bash+-+logout Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector_17.6-1_all.deb Size: 96860 SHA256: cc2cb781f7278d1ec0fe3aeb768cd1b33fcc96b63eb2b237415f4e4b5a9a35a8 SHA1: 4fd2a235c054984dc7dbcbad8360744a07992a83 MD5sum: a1cd0cb2a97c7956ed4b53b5be550caf Description: Command Line Interface Messages Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in terminal user interfaces (CLI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as ncurses but has of course much less and very different features. . For graphical user interface (GUI) support also install package msgcollector-gui. Package: msgcollector-gui Source: msgcollector Version: 3:17.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 100 Depends: msgcollector, python3-pyqt5, qtwayland5, yad, libnotify-bin, lxqt-notificationd, x11-utils, gnome-colors-common Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector-gui_17.6-1_all.deb Size: 72696 SHA256: 1bd0807c962e122a839535b27c0dee00c4f80c12afa390913c094b103cd1d72a SHA1: bee84f25ab38fbfb8ca75ea7865db45fa367e21e MD5sum: 5cb87a70e61f5ddb40082040d2522c44 Description: Graphical User Interface Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in graphical user interfaces (GUI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as Qt or GDK but has of course much less and very different features. . A metapackage that installs required dependencies for graphical user interface support. Package: open-link-confirmation Version: 3:9.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Depends: sensible-utils, icon-pack-dist, msgcollector, xdg-utils, helper-scripts Recommends: tb-starter, tb-updater Breaks: tb-default-browser (<< 3:7.5-1) Replaces: tb-default-browser (<< 3:7.5-1) Homepage: https://github.com/Kicksecure/open-link-confirmation Priority: optional Section: misc Filename: pool/main/o/open-link-confirmation/open-link-confirmation_9.0-1_all.deb Size: 38036 SHA256: 7b6f0acb822f1d885da393e05bdd162220d48113172fa1488a836ddaecb89c2f SHA1: 9fb7329aaac2b6db552ddfb85cc626fde2318503 MD5sum: f2584ddefcd4d05135aa4e74b988915d Description: confirmation dialog before opening links or files Provides a safety wrapper for opening URLs or files. Prompts the user for confirmation before launching the associated application, to prevent accidental or unsafe link openings. . Integrates with msgcollector to display graphical confirmation and error dialogs. Uses helper-scripts' sanitize-string to strip potentially malicious Unicode or HTML input, trims displayed addresses to 128 characters, and logs diagnostic information through msgcollector. . Detects execution context: * On Kicksecure and Whonix-Workstation systems, links can be opened after explicit confirmation in a supported browser. * On Whonix-Gateway (anon-gw-base-files installed), opening of links is blocked for security reasons. Local files are instead opened in the text editor defined by $EDITOR (defaulting to FeatherPad or Mousepad). * In Qubes OS Template, integrates with qvm-open-in-dvm for secure link opening in disposable VMs. Handles refusal responses and displays informative error dialogs. * When booted in "sysmaint" (system maintenance) mode, link opening is refused to avoid network activity during administrative sessions. . Automatically detects and uses installed browsers such as: brave-browser, chromium, firefox, mullvad-browser, browser-choice, or torbrowser (Whonix starter wrapper). Falls back to x-www-browser if none of the above are available. . Provides infinite recursion protection to prevent self-invocation loops, sets environment variables (OPEN_LINK_CONFIRMATION, OPEN_LINK_CONFIRMATION_COUNTER), and adjusts XDG_CONFIG_DIRS and XDG_DATA_DIRS to register itself as a compliant XDG handler and default $BROWSER. . Designed for security-focused environments such as Kicksecure, Whonix, and Qubes OS. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: privleap Version: 3:6.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 464 Depends: python3, python3-pam, python3-sdnotify Homepage: https://www.kicksecure.com/wiki/Privleap Priority: optional Section: admin Filename: pool/main/p/privleap/privleap_6.3-1_all.deb Size: 84456 SHA256: 68d49ac3d17f6c5012797ae30214da5eeb176f192740a2b2dc9cecf526e73c62 SHA1: e09dcb98e8317bcaa26f040da8133df2ec6977ca MD5sum: 14d40a9247fc8cbd1f4065ca8dba2b04 Description: Limited privilege escalation framework Provides a privilege escalation framework for running pre-defined command sequences ("actions") as root. . Does not require a SUID executable. Package: rads Version: 3:9.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 119 Homepage: https://www.kicksecure.com/wiki/RAM_Adjusted_Desktop_Starter Priority: optional Section: misc Filename: pool/main/r/rads/rads_9.0-1_all.deb Size: 39252 SHA256: c7c4af8c651d7a43086dd038ebf0713629599f086a62da6f993c1f17fb75ea64 SHA1: fd98b0a48d0e7b8524cead2d03c9d195d3d63b3a MD5sum: a79b5e480b5dfc7f449a141843a11bca Description: RAM Adjusted Desktop Starter If there is more than X MB RAM in total, the desktop environment will be started. . If less than X MB RAM in total (for example, only 196 MB RAM in total), no desktop environment will be started. . This should be quite convenient, because users with low RAM could reduce Y MB and even if they sometimes wanted to configure/check something, they could assign 512 RAM and automagically boot into the graphical desktop. There are also many settings in /etc/rads.d/ (stackable) to configure this feature, so if you want, you can also add a lot RAM, but not boot into a desktop environment, or use different display managers and so on. . Most useful in virtual machines. Package: ram-wipe Version: 3:4.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 82 Depends: helper-scripts, dracut, secure-delete, kexec-tools, systemd-cryptsetup Homepage: https://github.com/Kicksecure/ram-wipe Priority: optional Section: misc Filename: pool/main/r/ram-wipe/ram-wipe_4.6-1_all.deb Size: 25892 SHA256: e04c24d84d913e9241138e9f722aaed2391248fda8ff2a1e5f9e7eaf02c0f797 SHA1: f2f19c8dbc0a235b1c89b4fa33dbcc8021a207c9 MD5sum: 881d5e86a8bf8da7f1984d02dd20d9bf Description: Wipe RAM on shutdown and reboot Helps protect sensitive data by wiping RAM during shutdown and reboot, which can help defend against cold boot attacks. . This package requires dracut. It is incompatible with systems using initramfs-tools unless they are switched to dracut. . Implemented as the dracut module ram-wipe. . Only tested on systemd-enabled systems. . User documentation: https://www.kicksecure.com/wiki/ram-wipe . Design documentation: https://www.kicksecure.com/wiki/Dev/RAM_Wipe . Discussion: https://forums.whonix.org/t/is-ram-wipe-possible-cold-warm-boot-attack-defense . Related links: * https://www.kicksecure.com * https://www.kicksecure.com/wiki/ram-wipe * https://www.kicksecure.com/wiki/Dev/RAM_Wipe * https://www.kicksecure.com/wiki/dracut * https://www.kicksecure.com/wiki/systemd Package: repository-dist Version: 3:13.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 146 Depends: helper-scripts, lsb-release, moreutils, python3:any, sq Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist_13.7-1_all.deb Size: 60104 SHA256: 7be9de1094809e94b1e047ee6626ed995eb772b42689f34c199ecc71a9784d83 SHA1: e21dcdfc0d90f6b8837fbf39f927fa8990e20801 MD5sum: 9234410ba85375324e55ded01227c24a Description: Derivative APT Repository Command Line Interface (CLI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . Derivative's APT Repository is not enabled by default. Some users prefer this for trust/security reasons. . On first boot of Derivative, the Derivative Repository Tool gets automatically started by setup-dist. The user is free to either leave Derivative's repository disabled or to configure it as desired. . Technically speaking, this tool creates or deletes file `/etc/sources.list.d/derivative.sources`. . Using APT `signed-by`. Package: repository-dist-wizard Source: repository-dist Version: 3:13.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 76 Depends: pkexec, python3-pyqt5, python3:any, qtwayland5 Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist-wizard_13.7-1_all.deb Size: 42728 SHA256: d724e069f8aac3cdd2420d232b319aab2ea28dcfd9cfd21cf083d4e8cb6f5221 SHA1: f5c7978e8b11ac06ff7e2f9b523ef085da439ffa MD5sum: 6eebf51a795c6fa203101e43d309e9ab Description: Derivative APT Repository Graphical User Interface (GUI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . This is a metapackage depending on the required packages for the GUI (Graphical User Interface). Package: ro-mode-init Version: 3:3.6-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 60 Depends: live-boot, live-boot-initramfs-tools, live-tools Conflicts: grub-default-live, grub-live Replaces: grub-default-live, grub-live Provides: boot-live Homepage: https://github.com/Kicksecure/ro-mode-init Priority: optional Section: misc Filename: pool/main/r/ro-mode-init/ro-mode-init_3.6-1_all.deb Size: 19880 SHA256: 173a0fdfa4782eaad88b8d8f93b73c2eaaf495dc5df7b48a0ab5bf7d67e5f3bb SHA1: af95b0d98e47c1e7ada01da7a15de79654daedd4 MD5sum: 878810b208f881cc9ffdbdc93a0301ce Description: Detects read-only disks and automatically enables live-boot Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . No claims are made with regard to anti forensics. Package: sandbox-app-launcher Version: 0:7.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 132 Depends: sudo, bubblewrap, apparmor, libseccomp-dev, helper-scripts, dbus-x11 Homepage: https://www.kicksecure.com/wiki/Sandbox-app-launcher Priority: optional Section: misc Filename: pool/main/s/sandbox-app-launcher/sandbox-app-launcher_7.5-1_all.deb Size: 49288 SHA256: 71d02e298531f228a3ea9895272e41a089ff48b05684f3f0a471ceeb0f3239b3 SHA1: 522f9d220772f980549c661b5bb3d456ba6125db MD5sum: 651035ef64a978e57139e3260eed0345 Description: application launcher to start apps in a restrictive sandbox sandbox-app-launcher runs each app as its own user, in a bubblewrap sandbox and confined by apparmor. . The directory, `/shared`, is shared across all app sandboxes to transfer files across. . This implements a permissions system to configure what apps can access. There are currently 5 available permissions: . * Network access . * Webcam access . * Microphone access . * Shared storage access (read-only or read-write) . * Dynamic native code execution . All apps the user installs will be automatically configured to run in the sandbox and a prompt will ask the user which permissions they wish to grant the application (not implemented yet). . Currently a WIP and not for actual use. Package: sdwdate Version: 3:28.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 371 Depends: bc, helper-scripts, adduser, gcc, libc6-dev, privleap, python3-stem, python3-dateutil, python3-socks, python3-sdnotify, python3-requests, python3, tor, util-linux-extra Recommends: timesanitycheck, bootclockrandomization Conflicts: time-daemon Provides: time-daemon Homepage: https://www.kicksecure.com/wiki/Sdwdate Priority: optional Section: misc Filename: pool/main/s/sdwdate/sdwdate_28.8-1_all.deb Size: 172924 SHA256: 2dfa93f4e72af2a56b187ba9cce41e6ada5263d487914ba74fa4a2f76a1b9796 SHA1: 70321c3e6d305468599d9609e71e16a556bd495b MD5sum: 0d4e3d8e4042810b45277ccb693515aa Description: Secure Distributed Network Time Synchronization Time keeping is crucial for security, privacy, and anonymity. Sdwdate is a Tor friendly replacement for rdate and ntpdate that sets the system's clock by communicating via onion encrypted TCP with Tor onion webservers. . At randomized intervals, sdwdate connects to a variety of webservers and extracts the time stamps from http headers (RFC 2616). Using sclockadj option, time is gradually adjusted preventing bigger clock jumps that could confuse logs, servers, Tor, i2p, etc. . This package contains the sdwdate time fetcher and daemon. No installation on remote servers required. To avoid conflicts, this daemon should not be enabled together with ntp or tlsdated. Package: sdwdate-gui Version: 1:15.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 309 Depends: privleap, python3, python3-pyqt5, python3-pyinotify, qtwayland5, helper-scripts, sdwdate, adduser, python3-schema Homepage: https://www.kicksecure.com/wiki/sdwdate-gui Priority: optional Section: misc Filename: pool/main/s/sdwdate-gui/sdwdate-gui_15.4-1_all.deb Size: 120636 SHA256: 6bfc259a787f71fa4e6133981da81f0d3f4485549313868227a5df4ee5924fd9 SHA1: 469ba02492292a3bb6896f530d96f77b3619ad47 MD5sum: 4cd86c3a9ca018a5c93e36bbe1622ce8 Description: Sdwdate Monitor sdwdate-gui is a systray icon monitor for sdwdate: checks sdwdate's status and modify the tray icon accordingly. In addition, it allows the user to restart sdwdate and view the log. Package: security-misc-desktop Source: security-misc Version: 3:53.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 243 Depends: security-misc-shared Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-desktop_53.3-1_all.deb Size: 205068 SHA256: 52150a5f435acb26b10035fe39c86726421940d418d3479bd417bf023d305ea8 SHA1: d506a132d0ecaed20d79acd86a20efafbe29e0e9 MD5sum: 41c4236a103bdb3d71c6c713a9a6145e Description: Security improvements for desktops For desktops. . (Or servers running a desktop?) Package: security-misc-server Source: security-misc Version: 3:53.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 231 Depends: security-misc-shared Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-server_53.3-1_all.deb Size: 203920 SHA256: e7a7e7c5878ed6adbfad182ed3c8b2dff63d37a563691bcb8b63a759a49fb1de SHA1: 27cf106e1fe6588cab865ad5b07c1d1ba6a95e18 MD5sum: 0d09edfd2e4740919406465b02511ae7 Description: Security improvements for servers For servers. . (Or desktops running a server?) Package: security-misc-shared Source: security-misc Version: 3:53.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 855 Depends: adduser, apparmor-profile-dist, build-essential, dmsetup, helper-scripts, libcap2-bin, libdbus-1-dev, libglib2.0-bin, libpam-modules-bin, libpam-runtime, libpam-umask, libsystemd-dev, memlockd, pkgconf, python3, secure-delete, dconf-gsettings-backend | gsettings-backend, debconf (>= 0.5) | debconf-2.0, init-system-helpers (>= 1.52) Conflicts: security-misc Replaces: anon-gpg-tweaks, security-misc, swappiness-lowest, tcp-timestamps-disable Provides: security-misc Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-shared_53.3-1_all.deb Size: 303020 SHA256: f307a171ee603878e743292ac56d6d8f10d1389166f64303d845edc17e325ca2 SHA1: 0cebc4fa0d810f31de772e1d06a8fab9a161ca3c MD5sum: 29cf3b797a0782c31fd905db18593d94 Description: Enhances Miscellaneous Security Settings https://github.com/Kicksecure/security-misc/blob/master/README.md . https://www.kicksecure.com/wiki/Security-misc . Package security-misc-desktop and/or security-misc-server may also be useful. . Discussion: . Happening primarily in Whonix forums. https://forums.whonix.org/t/kernel-hardening-security-misc/7296 Package: serial-console-enable Version: 3:5.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 65 Homepage: https://github.com/Kicksecure/serial-console-enable Priority: optional Section: misc Filename: pool/main/s/serial-console-enable/serial-console-enable_5.0-1_all.deb Size: 20440 SHA256: 01f402e4b3647d40e292ee4730ecf4a9c390c7b89cb112a61a1ca035234c6df7 SHA1: 47b767d8dbdde6c8d6ad1cb68efda8872a4505e1 MD5sum: a977ceb25f6dc55a1d6048edbbba0250 Description: Enables serial console Ships a /etc/default/grub.d/30_serial_console.cfg configuration file, that enables serial console. . Enables /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service by creating a symlink from: /lib/systemd/system/serial-getty@.service to: /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service . Useful for serial console login such as into Whonix KVM VMs from the host operating system. . Forum discussion: https://forums.whonix.org/t/how-do-i-enter-the-whonix-shell-from-cli/7271 . Safe to remove if you do not require serial console login such as: virsh console vm-name Package: setup-dist Version: 3:12.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Depends: helper-scripts, dialog, privleap, menu, python3 Conflicts: whonixsetup Replaces: whonixsetup Provides: whonixsetup Homepage: https://github.com/Kicksecure/setup-dist Priority: optional Section: misc Filename: pool/main/s/setup-dist/setup-dist_12.3-1_all.deb Size: 43040 SHA256: a09ab1ef23e1c7c2a8df1179472769fff990fed57052df0e10fbd02e6e256c56 SHA1: 7c2038d0306125f58439a14e02be635229a45667 MD5sum: 9da09f19112df2dccdfb8696d6ec19e4 Description: First Time Connection Setup Disclaimer. . When the derivative starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. setup-dist is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: setup-wizard-dist Version: 3:13.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 141 Depends: setup-dist, python3-yaml, helper-scripts, python3, x11-xserver-utils Recommends: icon-pack-dist Conflicts: whonix-setup-wizard Replaces: whonix-setup-wizard Provides: whonix-setup-wizard Homepage: https://github.com/Kicksecure/setup-wizard-dist Priority: optional Section: misc Filename: pool/main/s/setup-wizard-dist/setup-wizard-dist_13.5-1_all.deb Size: 62640 SHA256: 0d355cac58517056bba222c4f4fd59fe451b6a71365a46e3016c55f7540d2da9 SHA1: f76becb3987f67888ea4cc3d8780349f64adf21a MD5sum: 08ce80c80b8879e87f4777c573cd3098 Description: First Boot Setup Disclaimer. . When distribution starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. Anon Connection Wizard is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: swap-file-creator Version: 3:9.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 90 Depends: helper-scripts, bc, safe-rm Homepage: https://www.kicksecure.com/wiki/Swap-file-creator Priority: optional Section: misc Filename: pool/main/s/swap-file-creator/swap-file-creator_9.7-1_all.deb Size: 38112 SHA256: dedd1de7d2fe995048c575ca81c7caacb2a0569ab2fdfe254da39c122328a8a8 SHA1: c5d4df79ae3e270f597f8543e81be0269ba96ad5 MD5sum: 8afab731c3cdb906c5293797f648120c Description: Swap file creator for LUKS-encrypted systems swap-file-creator automatically creates and enables a swap file on systems using LUKS full-disk encryption. A new swap file is created on every boot if the target path resides on a LUKS-encrypted device. . By default, no swap file is created on unencrypted disks. This can be optionally overridden (not recommended for privacy), allowing swap-file- creator to operate on unencrypted storage as well. . The tool is particularly useful for systems with low RAM, such as virtual machines, where lack of swap may cause freezing during upgrades or heavy memory operations. . The swap file can be shredded on shutdown for additional privacy, if enabled. Various parameters, including file path, custom size, and pre-checks, can be configured through /etc/default/swap-file-creator. . Earlier versions provided an additional dm-crypt layer and created a swap file encrypted with an ephemeral key. Due to a Linux kernel bug, this functionality is no longer possible as of Debian trixie, and the swap file is instead placed directly on top of LUKS full-disk encryption. More details: https://lore.kernel.org/lkml/20251111231835.1232ad8f@kf-m2g5/T/#u Package: sysmaint-panel Version: 3:5.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 129 Depends: helper-scripts, pkexec, python3, python3-pyqt5, safe-rm Homepage: https://www.kicksecure.com/wiki/System_Maintenance_Panel Priority: optional Section: admin Filename: pool/main/s/sysmaint-panel/sysmaint-panel_5.2-1_all.deb Size: 33828 SHA256: 245389872e2ab555635de7d286f9bbf5d05d70b4be4c8bcf4a7b0166dbfa375a SHA1: 21a4844c1ecb27c51f0279e8fe48a17ebb1db2cb MD5sum: c0f48795cf6aa076d7980f42d93e45f8 Description: System Maintenance Panel The System Maintenance Panel (sysmaint-panel) allows the user to perform several common system maintenance and administration tasks. It can be used to install, remove, and update software, create and remove user accounts, and enable or disable password protection and autologin for user accounts. . Provides a minimal session that can be booted into for system maintenance tasks on Linux distributions. Package: systemcheck Version: 3:52.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 657 Depends: dist-base-files, python3, signify-openbsd, curl, ca-certificates, msgcollector, psmisc, vrms, libarchive-tools, helper-scripts, net-tools, iproute2, privleap, adduser, security-misc-shared, spectre-meltdown-checker, apparmor-profile-dist, safe-rm Recommends: icon-pack-dist, msgcollector-gui Conflicts: apparmor-profile-whonixcheck, whonixcheck Replaces: apparmor-profile-whonixcheck, whonixcheck Homepage: https://www.kicksecure.com/wiki/systemcheck Priority: optional Section: misc Filename: pool/main/s/systemcheck/systemcheck_52.5-1_all.deb Size: 231368 SHA256: 4b84e6f0fca694be551a43dea13583389edbe3170d46feaf4e7541c063425794 SHA1: 8f0ae693a288e249cc7a802f1b12e99e36e8c8cf MD5sum: 6ff2306bbe2012288ac3dde4a0b3e453 Description: Anonymity and security check Checks many important aspects for better security. . Only checks things. Does not change things. . Safe to remove. Package: tb-default-browser Source: open-link-confirmation Version: 3:9.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 65 Depends: open-link-confirmation Homepage: https://github.com/Kicksecure/open-link-confirmation Priority: optional Section: oldlibs Filename: pool/main/o/open-link-confirmation/tb-default-browser_9.0-1_all.deb Size: 31584 SHA256: 4f1b2a26bbdd99ffe32df4d3fad299bba6426fb3f65e08a3c22efbdb0a8cbdfd SHA1: f77e6c6e207e733c1030285bfce29faaa3f6c5a4 MD5sum: dff271be40223924b9d2453c8247ffaf Description: transitional package This is a transitional package. It can safely be removed. Package: tb-starter Version: 3:18.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 172 Depends: msgcollector, privleap Recommends: tb-updater, open-link-confirmation, icon-pack-dist Provides: torbrowser-launcher Homepage: https://github.com/Kicksecure/tb-starter Priority: optional Section: misc Filename: pool/main/t/tb-starter/tb-starter_18.9-1_all.deb Size: 69296 SHA256: 4557a123889dc3c65e744213078cc9939997f69017645422d8fda9a5aa70abe1 SHA1: bc0bfb4586e46756e1092a43dbf6c11f52ab5509 MD5sum: d6a6237049d765171ae0252661bdfb1e Description: Tor Browser Starter (by Whonix developers) Both, a starter for Tor Browser. Provides security hardening, integration with Debian, Whonix and Qubes. . Starter. . - Tor Browser Starter start menu entry and `/usr/bin/torbrowser` starter. Starts `/home/user/.tb/tor-browser/start-tor-browser`. . When config option tb_hardening=true is set or when using command line option --hardening, firejail will be used. . Uses open-link-confirmation if available. . Prompts to install the browser if not yet installed. . Changes directory into browser directly before startup. . Custom homepage support. . Qubes integration. . Sanity tests: - Aborts if detected being run as root. - Aborts in Qubes TemplateVM. - Aborts in Qubes DVM Template. - Waits for Qubes mount dirs and gui agent being ready. . In Qubes AppVM copies browser from root image to private image at first start. . Tor Browser documentation by Whonix. . - https://www.whonix.org/wiki/Tor_Browser - https://www.whonix.org/wiki/Tor_Browser/Advanced_Users . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tb-updater Version: 3:47.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 553 Depends: msgcollector-gui, curl, psmisc, pv, libarchive-tools, jq, libdbus-glib-1-2, privleap, python3, acl, helper-scripts, sq, sqop Recommends: tb-starter, icon-pack-dist Suggests: open-link-confirmation Homepage: https://github.com/Kicksecure/tb-updater Priority: optional Section: misc Filename: pool/main/t/tb-updater/tb-updater_47.3-1_all.deb Size: 294548 SHA256: 1173e65ffdde37c4bbd3004b3739630b0b8c2e58cba72a8515e3a09d5b0688ba SHA1: de160d353019e7ba077720cf97603be828fdba98 MD5sum: c254f60e39bbb79feb516616b0781fed Description: Tor Browser Downloader by Whonix developers Automates download and verification of Tor Browser from The Tor Project's website. Useful for initial installation of Tor Browser, clean re-installations of Tor Browser and keeping newly created Qubes AppVMs inherited from updated Qubes TemplateVMs can ship up to date versions of Tor Browsers. . Incapable of preserving of updating and preserving user data. Use Tor Browser's internal updater for that purpose. Notifies about already exiting installations of Tor Browser. Renamed rather than deletes old versions of Tor Browsers to avoid user data loss. . Has a cli and a gui mode. Can auto detect latest version numbers or use user configured version numbers. Comes with a download confirmation screen that lets users choose which version to download. [1] Has a installation confirmation screen [2] that enables users to detect indefinite freeze and rollback attacks. . Integrates well with tb-starter and open-link-confirmation package as well as with Qubes. . Without the helper-scripts package installed, the GUI will not move the progress bar. . If you have the helper-scripts package installed, it will show a nicer progress bar when run in terminal and more meaningful curl exit code messages, when curl failed. . When having the helper-scripts package installed (recommended for Anonymity Distributions), Tor Browser Downloader will check, that Tor is enabled, that no package manager is currently running and that Tor finished bootstrapping before download attempts. . Supports being run inside chroot and from Debian maintainer postinst script. . Qubes integration: . - Up-to-date browser versions made available to freshly created AppVMs and DispVMs. - In DispVM mounts browser folder which resides in root image to user home folder rather than copying for faster browser startup. . This package is produced independently of, and carries no guarantee from, The Tor Project. . [1] https://www.whonix.org/wiki/Tor_Browser#Download_Confirmation_Screen [2] https://www.whonix.org/wiki/Tor_Browser#Installation_Confirmation_Screen Package: timesanitycheck Version: 3:10.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 81 Homepage: https://www.whonix.org/wiki/Dev/TimeSync Priority: optional Section: misc Filename: pool/main/t/timesanitycheck/timesanitycheck_10.1-1_all.deb Size: 29660 SHA256: dd0d62909a5c43e42da92a7d80d8219ba4f22324c2abd660f34cfe985b24ee8f SHA1: 8beaffbb5378bcb4352c8426a026805d90546be7 MD5sum: cad0e41ee09f26a4601c6c22c0bef95a Description: Checks if the system clock is sane between build timestamp and expiration date Reports, if clock is sane and not slower than build timestamp or faster than expiration date (configurable, default currently set to 17 MAY 2033 10:00:00). . This should catch situations, where the host's clock is too much off (CMOS battery defect, user mistakenly set a very wrong date, etc.), resulting in network time synchronization tools (such as sdwdate) no longer being able to correct the clock; catch eventual bigger bugs in network time synchronization tools; and some types of attacks on network time synchronization. Package: tor-control-panel Version: 1:8.5-1 Architecture: all Maintainer: troubadour Installed-Size: 563 Depends: helper-scripts, pkexec, mate-polkit, privleap, python3, python3-ipy, python3-pyqt5, python3-stem, python3-yaml, qtwayland5 Recommends: obfs4proxy, tor Breaks: anon-connection-wizard (<< 1:11.5-1) Replaces: anon-connection-wizard (<< 1:11.5-1) Provides: anon-connection-wizard Homepage: https://www.whonix.org/wiki/Tor-control-panel Priority: optional Section: misc Filename: pool/main/t/tor-control-panel/tor-control-panel_8.5-1_all.deb Size: 354812 SHA256: 502a44d88040adcbb9b5acef2534a37eabccc0bfbdb7a7e9dc1b5eebb458f93e SHA1: bd178f12826a37ee07a40f75869798ad355683a8 MD5sum: e56d453c73a835e7edc2a63789a8d040 Description: Tor Control Graphical User Interfaces WARNING: Not (yet) a standalone ready to use outside of Whonix: . anon-connection-wizard (ACW) is a Tor-launcher-like application that helps users in different Internet environments connect to the Tor network. It helps user to configure Tor to use a proxy and/or Tor bridges. This application is especially useful for system Tor users who would like to run the standalone core Tor with different torified applications. The wizard can be run at any time to change the connection configuration. . tor-control-panel is a Tor controller. It provides the same functionality as anon-connection-wizard, but in an "expert mode" user interface that is much faster to use. It can also stop and restart Tor, display Tor logs, launch onioncircuits to view active Tor circuits, and send NEWNYM signals to Tor to request new circuits to be used for all new connections. . Both tools create and modify a Tor settings file: `/usr/local/etc/torrc.d/40_tor_control_panel.conf` . tor-control-panel is produced independently from the Tor anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. Package: tor-ctrl Version: 3:7.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 84 Depends: tor, netcat-openbsd, xxd, safe-rm Homepage: https://gitweb.torproject.org/torspec.git/tree/control-spec.txt Priority: optional Section: misc Filename: pool/main/t/tor-ctrl/tor-ctrl_7.2-1_all.deb Size: 31872 SHA256: 3096446e2a0881504a1f4c32dad5479945d62a846e1f2ed4cf3265c53cd4ec00 SHA1: 6c328530f80c31e7e1b58753f244b1d2ef84d338 MD5sum: 13c73c29b6dcdb0f7cb2382becf789d9 Description: Tor controller command line tool Command line tool for setting up stream for communication from the Tor Controller's (client) to a Tor process (server). The client send commands using TCP sockets or Unix-domain sockets and receive replies from the server. . https://gitweb.torproject.org/torspec.git/tree/control-spec.txt . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tor-geoipdb Source: tor Version: 0.4.9.11-1~d13.trixie+1 Architecture: all Maintainer: Peter Palfrader Installed-Size: 25435 Depends: tor (>= 0.4.9.11-1~d13.trixie+1) Breaks: tor (<< 0.2.4.8) Replaces: tor (<< 0.2.4.8) Homepage: https://www.torproject.org/ Priority: optional Section: net Filename: pool/main/t/tor/tor-geoipdb_0.4.9.11-1~d13.trixie+1_all.deb Size: 2777912 SHA256: aaf832aa27e4c9cd15b1243130638330b436c8062a636e77774a155ff73f1150 SHA1: 0fe55e5f18bf0f07c1d6567a622b31402b307993 MD5sum: 88022132e497ea2c4ffafa45e5c18bd6 Description: GeoIP database for Tor This package provides a GeoIP database for Tor, i.e. it maps IPv4 addresses to countries. . Bridge relays (special Tor relays that aren't listed in the main Tor directory) use this information to report which countries they see connections from. These statistics enable the Tor network operators to learn when certain countries start blocking access to bridges. . Clients can also use this to learn what country each relay is in, so Tor controllers like arm or Vidalia can use it, or if they want to configure path selection preferences. Package: usability-misc Version: 3:41.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 800 Depends: policyrcd-script-zg2, adduser, python3, damngpl, helper-scripts (>= 3:35.3-1), dkms, dconf-gsettings-backend | gsettings-backend Conflicts: desktop-config-dist (<< 3:13.8-1) Replaces: gpl-sources-download, grub-screen-resolution, scurl Homepage: https://github.com/Kicksecure/usability-misc Priority: optional Section: misc Filename: pool/main/u/usability-misc/usability-misc_41.0-1_all.deb Size: 233596 SHA256: 0b17a63c54bf366f4d0c3adc9a1bc7f44b6640b3fd1887abca5c5a266de91470 SHA1: c1db73f43e20bdc76a425693012eb0c53840e3f2 MD5sum: 84ca60912c076b50e46c0ad89462099f Description: Misc usability improvements Enables auto login for user `user` in `lightdm`. `/etc/lightdm/lightdm.conf.d/30_autologin.conf` https://www.kicksecure.com/wiki/Desktop#Disable_Autologin . Creates folders /home/user/Downloads and /home/user/Pictures. . Adds account "user" to group libvirt as well as to group kvm. . Ships a file /etc/sudoers.d/user-passwordless that contains comments and "#user ALL=(ALL:ALL) NOPASSWD:ALL". Lets account "user" easily run all commands without password. Disabled (out commented) by default. . Simplifies running OpenVPN as unprivileged user. . Ships a FoxyProxy add-on configuration file for use with Tor Browser. . Sets mousepad as the default editor for environment variable VISUAL is unset and if mousepad is installed. . Disable sudo default lecture. /etc/sudoers.d/sudo-lecture-disable . Add pwfeedback to sudo Defaults so password asterisks are shown while typing. /etc/sudoers.d/pwfeedback . qterminal: . Ships gsudoedit, a wrapper to run sudoedit with a graphical editor. . Bisq workaround "sudo mkdir -p /usr/share/desktop-directories" as per https://github.com/bisq-network/bisq/issues/848 . gpl_sources_download GPL'ed source code of all installed packages. Used damngpl to get a list of all GPL'ed packages, then downloads them using apt-get source. . SSL curl wrapper: Simple wrapper called scurl, that adds "--tlsv1.3 --proto =https" in front of all invocations of "curl" when running "scurl". . Sets 1024x768 as boot screen resolution Ships a /etc/default/grub.d/30_screen_resolution.cfg configuration file, that injects "vga=0x0317" into the GRUB_CMDLINE_LINUX_DEFAULT variable. . Ships `zsh` derivative configuration settings folder `/etc/zsh`. But does not configure `zsh` as default shell. (That is up to package `dist-base-files`.) . Enable systemd-journald audit transport. (`deb-systemd-helper enable systemd-journald-audit.socket`) Required by helper-scripts `apparmor-info` and `apparmor-watch`. Debian no longer enables systemd-journald-audit.socket by default. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1038993 . Creates Secure Boot MOK key using 'shim-signed-mok-setup' (provided by package 'helper-scripts') during installation. Package: user-sysmaint-split Version: 3:12.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 208 Pre-Depends: helper-scripts Depends: security-misc-shared, adduser, libglib2.0-bin Breaks: qubes-core-agent-passwordless-root (>= 1) Homepage: https://github.com/Kicksecure/user-sysmaint-split Priority: optional Section: misc Filename: pool/main/u/user-sysmaint-split/user-sysmaint-split_12.8-1_all.deb Size: 58984 SHA256: 192a81bd3a103848d109360b7d05eb54c1329a907c6c97d127105e16a8758c67 SHA1: 8b2052e38aad8ef297e090e9f84a553371fd1b38 MD5sum: f9c39cab078201a0342aa7c106693bbd Description: Role-Based Boot Modes - user versus sysmaint Adds a GRUB boot menu entry: "PERSISTENT Mode | SYSMAINT Session | system maintenance tasks" . Makes Privilege Escalation Tools (such as 'sudo', 'su', 'pkexec') inaccessible to limited user accounts such as account "user". . Adds kernel parameter "boot-role=sysmaint" and "systemd.unit=sysmaint-boot.target". Package: vm-config-dist Version: 3:17.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 238 Depends: adduser, 7zip, helper-scripts, python3, python3-pyudev, python3-schema Replaces: power-savings-disable-in-vms, shared-folder-help Homepage: https://github.com/Kicksecure/vm-config-dist Priority: optional Section: misc Filename: pool/main/v/vm-config-dist/vm-config-dist_17.5-1_all.deb Size: 73916 SHA256: af21153c1629a38ececf8f1ff233503addc51e7b3f1018b650f1e2178ab39145 SHA1: 239c0bef45ccac99b5977de7425b68360bd66181 MD5sum: fcba69968b6d3645bbea3b5ef257981a Description: usability enhancements inside virtual machines Sets environment variable `QMLSCENE_DEVICE=softwarecontext` as a workaround for "Automatic fallback to softwarecontext renderer". . Audio: Intel HD Audio Workaround. Workaround for "VirtualBox Intel HD Audio and PipeWire Incompatibility / Audio broken after increasing ram to 5 GB / No sound after latest updates." `/etc/modprobe.d/30_vm-config-dist.conf` . It is not useful to open a screensaver or to power down the desktop for operating systems that are run inside VMs. There is no real display that could be saved and no real power that could be conserved. From a usability perspective, it is also counterintuitive when looking at the VM window and only seeing a black screen. Therefore, it makes sense to disable power savings in VMs. `/etc/profile.d/20_power_savings_disable_in_vms.sh` `/etc/X11/Xsession.d/20_software_rendering_in_vms.sh` . Makes setting up a shared folder for virtual machines a bit easier. . * Creates a folder `/mnt/shared` with `chmod 777`, adds a group "vboxsf", and adds account "user" to group "vboxsf". Facilitates auto-mounting of shared folders. . * Helps using shared folders with VirtualBox and KVM a bit easier (as in requiring fewer manual steps from the user). . * `/lib/systemd/system/mnt-shared-vbox.service` * `/lib/systemd/system/mnt-shared-kvm.service` . Sets screen resolution to 1920x1080 by default for VMs in VirtualBox and KVM. This is a workaround for the low screen resolution of 1024x768 at first boot. . Installs VirtualBox guest additions if the package `virtualbox-guest-additions-iso` is installed, if the environment variable `dist_build_virtualbox=true` is set, or if running inside VirtualBox. (`systemd-detect-virt` returning `oracle`) `/usr/bin/vbox-guest-installer .