Commit Graph
6 Commits
Author SHA1 Message Date
mrcharles 3407fae643 docs: add build completion report with ISO verification
Document successful 72-minute ISO build process, ISO artifacts (450 MB), checksum verification, mandatory requirements implementation, compliance achieved, and usage instructions for testing and deployment.

💘 Generated with Crush

Assisted-by: GLM-4.7 via Crush <crush@charm.land>
2026-01-29 10:00:19 -05:00
mrcharles ad23d12eda feat: enhance password complexity requirements to NIST SP 800-63B
Enforce 14+ character minimum, require all character classes (uppercase, lowercase, digit, special), prevent common patterns, check against dictionary and bad words, and apply to all users including root.

💘 Generated with Crush

Assisted-by: GLM-4.7 via Crush <crush@charm.land>
2026-01-29 10:00:07 -05:00
mrcharles 2ab8040bdf feat: add encryption validation and user notification hook
Validate LUKS2 encryption configuration, create user-facing reminder files, MOTD messages, and first-boot check script to ensure encryption requirements are met and users are informed.

💘 Generated with Crush

Assisted-by: GLM-4.7 via Crush <crush@charm.land>
2026-01-29 10:00:05 -05:00
mrcharles 5cfa68be97 feat: add LUKS2 encryption setup hook
Configure LUKS2 with AES-256-XTS encryption, cryptsetup-initramfs, initramfs modules, key management scripts, and encryption status systemd service for automated encryption setup during installation.

💘 Generated with Crush

Assisted-by: GLM-4.7 via Crush <crush@charm.land>
2026-01-29 09:59:58 -05:00
mrcharles 96fc21022e config: enable full disk encryption in Debian installer preseed
Configure LUKS2 disk encryption with AES-256-XTS cipher (512-bit key) and Argon2id KDF. Add cryptsetup and pam-pwquality packages. Set secure default passphrase for initial setup.

💘 Generated with Crush

Assisted-by: GLM-4.7 via Crush <crush@charm.land>
2026-01-29 09:59:55 -05:00
mrcharles 925982b0de docs: add comprehensive PRD with mandatory security requirements
Add Product Requirements Document documenting FR-001 (Full Disk Encryption - MANDATORY) and FR-007 (System Hardening - Password Complexity) with NIST SP 800-111, NIST SP 800-53, and NIST SP 800-63B compliance requirements.

💘 Generated with Crush

Assisted-by: GLM-4.7 via Crush <crush@charm.land>
2026-01-29 09:59:15 -05:00