KNEL/football
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: update spec with Debian 13.3.0 details

Browse Source 
- Update base image to Debian 13.3.0 (Trixie) stable release
- Clarify all packages must be pre-included in ISO (no internet downloads)
- Update USB mount requirements to include pre-installed utilities
- Specify exact ISO: debian-13.3.0-amd64-netinst.iso
This commit is contained in:
Charles N Wyble
2026-01-21 09:20:39 -05:00
parent c8ff5b6e32
commit b246f06e6d
1 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
football-spec.md
View File

@@ -38,8 +38,9 @@ This project aims to build a highly secure, compliant Debian 13 (Trixie) install
#### Network Restrictions #### Network Restrictions
- **WiFi**: Permanently disabled via kernel module blacklist - **WiFi**: Permanently disabled via kernel module blacklist
- **Bluetooth**: Permanently disabled via kernel module blacklist - **Bluetooth**: Permanently disabled via kernel module blacklist
- **General Internet**: Disabled by default - **General Internet**: Disabled by default - all packages must be included in ISO
- **Allowed Traffic**: WireGuard tunnel traffic only - **Allowed Traffic**: WireGuard tunnel traffic only
- **Package Sources**: All required packages pre-included in ISO, no external downloads during or after installation
#### Firewall Configuration #### Firewall Configuration
- **Default Policy**: Deny all inbound and outbound traffic - **Default Policy**: Deny all inbound and outbound traffic
@@ -58,6 +59,7 @@ This project aims to build a highly secure, compliant Debian 13 (Trixie) install
- Automatic detection and mounting of USB storage devices - Automatic detection and mounting of USB storage devices
- Support for common filesystems (ext4, FAT32, NTFS) - Support for common filesystems (ext4, FAT32, NTFS)
- Proper permissions for configuration file copying - Proper permissions for configuration file copying
- All required filesystem utilities pre-installed in ISO
#### Desktop Shortcuts #### Desktop Shortcuts
1. **WireGuard Configuration Editor** 1. **WireGuard Configuration Editor**
@@ -74,7 +76,8 @@ This project aims to build a highly secure, compliant Debian 13 (Trixie) install
### Build Process ### Build Process
- **Tool**: `live-build` for ISO generation - **Tool**: `live-build` for ISO generation
- **Base Image**: Debian 13 (Trixie) netinst - **Base Image**: Debian 13.3.0 (Trixie) netinst
- **Specific ISO**: debian-13.3.0-amd64-netinst.iso from official Debian mirrors
- **Customization**: Config hooks for security hardening - **Customization**: Config hooks for security hardening
### Preseed Configuration ### Preseed Configuration
@@ -286,7 +289,7 @@ main "$@"
# Multi-stage build for security hardening # Multi-stage build for security hardening
# Base stage # Base stage
FROM debian:trixie-slim AS base FROM debian:13.3-slim AS base
# Set environment variables # Set environment variables
ENV DEBIAN_FRONTEND=noninteractive ENV DEBIAN_FRONTEND=noninteractive