Commit Graph
4 Commits
Author SHA1 Message Date
mrcharles 2ab8040bdf feat: add encryption validation and user notification hook
Validate LUKS2 encryption configuration, create user-facing reminder files, MOTD messages, and first-boot check script to ensure encryption requirements are met and users are informed.

💘 Generated with Crush

Assisted-by: GLM-4.7 via Crush <crush@charm.land>
2026-01-29 10:00:05 -05:00
mrcharles 5cfa68be97 feat: add LUKS2 encryption setup hook
Configure LUKS2 with AES-256-XTS encryption, cryptsetup-initramfs, initramfs modules, key management scripts, and encryption status systemd service for automated encryption setup during installation.

💘 Generated with Crush

Assisted-by: GLM-4.7 via Crush <crush@charm.land>
2026-01-29 09:59:58 -05:00
mrcharles 96fc21022e config: enable full disk encryption in Debian installer preseed
Configure LUKS2 disk encryption with AES-256-XTS cipher (512-bit key) and Argon2id KDF. Add cryptsetup and pam-pwquality packages. Set secure default passphrase for initial setup.

💘 Generated with Crush

Assisted-by: GLM-4.7 via Crush <crush@charm.land>
2026-01-29 09:59:55 -05:00
mrcharles 925982b0de docs: add comprehensive PRD with mandatory security requirements
Add Product Requirements Document documenting FR-001 (Full Disk Encryption - MANDATORY) and FR-007 (System Hardening - Password Complexity) with NIST SP 800-111, NIST SP 800-53, and NIST SP 800-63B compliance requirements.

💘 Generated with Crush

Assisted-by: GLM-4.7 via Crush <crush@charm.land>
2026-01-29 09:59:15 -05:00