Package: age-api Version: 3:0.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 53 Depends: helper-scripts Homepage: https://www.kicksecure.com/wiki/age-api Priority: optional Section: misc Filename: pool/main/a/age-api/age-api_0.5-1_all.deb Size: 15184 SHA256: 916db52c6bafef61f180e291ce40827621f64c2745276fc4421b3a987b84f262 SHA1: e7c685c2fe262a9c6005ea75b228fb16e496604a MD5sum: 7e19ec174822e839c2c66df8a8cf1bc7 Description: Local age bracket storage and query helper (age signaling) DRAFT: Nothing has been decided yet. Much better places to get further information: * https://www.kicksecure.com/wiki/age-api * https://forums.whonix.org/t/whonix-adding-age-verification/22969 . age-api provides a minimal local mechanism to store an age bracket and query it for age-signaling use cases. . The age-api-query tool outputs a machine-readable age bracket number on stdout and a human-readable description on stderr. . DRAFT: Final implementation - if any - would look much different from what is currently implemented. . See also: https://www.kicksecure.com/wiki/age-api Package: anon-apt-sources-list Version: 3:7.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 78 Depends: fasttrack-archive-keyring Homepage: https://github.com/Kicksecure/anon-apt-sources-list Priority: optional Section: misc Filename: pool/main/a/anon-apt-sources-list/anon-apt-sources-list_7.6-1_all.deb Size: 30792 SHA256: fe0bc239bb65379b9c0a4516611ad96918f38b9d578fb5115e106ae19d5a2db6 SHA1: 739e27af4c22781789a65d7adab509a1a016929d MD5sum: f5087c1b5f7178e63c010e6a030b133d Description: Kicksecure APT and Flatpak Repository Configuration Configuring APT and Flatpak sources: - Includes Debian APT repositories (main, updates, backports, fasttrack, security) - Incorporates Debian APT components (main, contrib, non-free, non-free-firmware) - Integrates the Flathub repository (verified and floss subsets only) . Flatpak: - Official Flathub repository only. - Uses subset verified_floss, which means only verified applications and freedom software can be installed by default. . Provides configuration files: - /etc/apt/sources.list.d/debian.sources for APT sources - /etc/flatpak/remotes.d/flathub.flatpakrepo for Flatpak sources . A Discussion on Distribution Maintenance Strategies: . The more standard way would indeed be populating /etc/apt/sources.list at install or build time and leaving /etc/apt/sources.list.d alone. . The idea of managing /etc/apt/sources.list.d/debian.sources for the user is, the security-focused distribution maintainers can decide when it is a better "change stable to oldstable", "keep wheezy as long as needed to work out [eventual!] issues that would break during upgrade to jessie" and such. Package: anon-connection-wizard Version: 1:11.3-1 Architecture: all Maintainer: iry Installed-Size: 266 Depends: helper-scripts, pkexec, mate-polkit, privleap, python3, python3-pyqt5, python3-stem, python3-yaml, qtwayland5 Recommends: obfs4proxy, tor Homepage: https://www.kicksecure.com/wiki/Anon_Connection_Wizard Priority: optional Section: misc Filename: pool/main/a/anon-connection-wizard/anon-connection-wizard_11.3-1_all.deb Size: 95436 SHA256: 12a382f734d32e575b68078171121e816fea4464e67a20b0fc8181cbe2f65899 SHA1: 67378641aad4b787c649f2f4710599ae5d5007e4 MD5sum: e05caaafc5963e6393c3cae8cdb1a6de Description: Tor Connection Configuration (ACW) WARNING: Not (yet) a standalone ready to use outside of Whonix: . Creates a Tor settings file: `/usr/local/etc/torrc.d/40_tor_control_panel.conf` . anon-connection-wizard (ACW) is a Tor-launcher-like application that helps users in different Internet environment connect to the Tor network. It helps user to configure Tor to use a proxy and/or Tor bridges. This application is especially useful for system Tor users who would like to run the standalone core Tor with different torified applications. The wizard can be run at any time to change the connection configuration. . Creates a Tor settings file: `/usr/local/etc/torrc.d/40_tor_control_panel.conf` . anon-connection-wizard is produced independently from the Tor anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. Package: anon-shared-build-apt-sources-tpo Version: 3:7.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 125 Depends: helper-scripts, gnupg, sq Recommends: deb.torproject.org-keyring Homepage: https://github.com/Kicksecure/anon-shared-build-apt-sources-tpo Priority: optional Section: misc Filename: pool/main/a/anon-shared-build-apt-sources-tpo/anon-shared-build-apt-sources-tpo_7.2-1_all.deb Size: 65200 SHA256: a98a506f8c5a09d01342e927ab5054b1f855ed87060cedc730ae0eedc2b7beec SHA1: 61e2d41030bc789627d3642241f418a00cf66f07 MD5sum: 777aaeb3d382090556eec120cd57c69d Description: Adds TPO's APT repository to Derivative Linux Distributions Comes with "deb http://deb.torproject.org/torproject.org stable main", The Tor Project's APT signing key. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profile-dist Version: 3:10.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 97 Depends: helper-scripts Replaces: apparmor-profile-anondist Homepage: https://www.kicksecure.com/wiki/Apparmor-profile-everything Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-dist/apparmor-profile-dist_10.1-1_all.deb Size: 36308 SHA256: 801ca889c4268d5af45b7c652c48a463663bbbdd484f30a7f8a515dacdc9685c SHA1: aafa8ebc5d6222244309d8e268f0492f26f90d23 MD5sum: 9f91d8d1a8204a7802c82bb55a8f0a22 Description: AppArmor Profile for Derivative Linux Distributions Displaces /etc/apparmor.d/abstractions/base with a version, that includes additions required for Derivative Linux Distributions. . Does not depend on AppArmor, so this package can be installed by default on any anonymity distribution by default, without requiring to also have AppArmor installed. Just for the case, AppArmor gets installed later by the user. Package: apparmor-profile-hexchat Version: 3:5.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 60 Depends: apparmor Replaces: apparmor-profile-xchat Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-hexchat/apparmor-profile-hexchat_5.6-1_all.deb Size: 24036 SHA256: 3096a0c3b072de62cc5a1b4a855fc426267077b2ee3c006822eb2e30d60a4cd4 SHA1: a5ff8f1789ff0fb407c38e8aa6bf86a6a3e2c0c8 MD5sum: 6fc49b4cd72cee536167e99d6fe1aa0f Description: AppArmor profile for HexChat IRC An AppArmor profile to confine HexChat IRC. This profile is developed by the Whonix team. HexChat IRC is developed by xchat.org / hexchat.github.io. . For better security. Package: apparmor-profile-thunderbird Version: 3:6.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 65 Depends: apparmor Replaces: apparmor-profile-icedove Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-thunderbird/apparmor-profile-thunderbird_6.2-1_all.deb Size: 27208 SHA256: cb7bd0ea714069a525cfc176f2d59c107c965f39474e3761b07fbb850d6b73de SHA1: c9abbafecf3b6f6a12444156ab8c4f613249b303 MD5sum: 762a3f842d03c04746f5e00d3b2b9a4b Description: AppArmor profile for Thunderbird for Debian An AppArmor profile to confine Thunderbird. . This profile is just an extension of the upstream AppArmor Debian profile. The upstream AppArmor upstream profile is the foundation. . Primarily this AppArmor profile makes Debian's AppArmor profile for Thunderbird compatible with Qubes Debian based VMs. . This profile is developed by the Kicksecure team. Thunderbird is developed by mozilla.org. Package: apparmor-profile-torbrowser Version: 3:9.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 74 Depends: apparmor Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-torbrowser/apparmor-profile-torbrowser_9.8-1_all.deb Size: 34996 SHA256: e0749f6e3560ad8e09e9498a0af724a316ff3c76f6776acf3f7a103264fcb85a SHA1: 89c4a58222f6019726720855ad7bf1de4b6f481f MD5sum: b34a56330aad639ea08bb30da4a5b09e Description: AppArmor profile for The Tor Browser Bundle (TBB) An AppArmor profile to confine The Tor Browser Bundle (TBB). This profile is developed by the Whonix team. TBB is developed by The Tor Project. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: apparmor-profile-hexchat, apparmor-profile-thunderbird, apparmor-profile-torbrowser, apparmor-profiles, apparmor-profiles-extra Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/apparmor-profiles-kicksecure_36.8-1_all.deb Size: 86160 SHA256: ea5a249b93c513272ea66d76c2870e50d055e20d797ddfe80425ee952cf8772a SHA1: f41f6cdff1b9cf61338cb80f8aac3103a243fb75 MD5sum: 9848fde2e58e03b8c606acc96029351a Description: AppArmor profiles developed by the Kicksecure Team A metapackage, which installs apparmor profiles packages from Debian: . * apparmor-profile * apparmor-profiles-extra . as well as installs apparmor profiles developed by the Kicksecure team: . * apparmor-profile-thunderbird * apparmor-profile-torbrowser * apparmor-profile-hexchat . Increases security. Package: binaries-freedom Version: 0:3.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 31 Depends: fuse Homepage: https://github.com/Kicksecure/binaries-freedom Priority: optional Section: misc Filename: pool/main/b/binaries-freedom/binaries-freedom_3.4-1_all.deb Size: 11404 SHA256: 9f0f172a541eb54c1a01f1670d0f3a6b3aad2481852b12b45684bb2b332b5e97 SHA1: fa7a4ae15fa4b52374837e9fc6e272cc3c292a90 MD5sum: a5a6f16deafda7d1170d18173e950d70 Description: Freedom Software Binaries This is an empty package at this time. . https://forums.whonix.org/t/policy-for-inclusion-of-compiled-software/6635 Package: bindp Version: 3:4.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 33 Homepage: https://github.com/Kicksecure/bindp Priority: optional Section: misc Filename: pool/main/b/bindp/bindp_4.7-1_all.deb Size: 15828 SHA256: 96fa92ad3856ad9f621ff67833fe7e5628992c9830140ec0490e6c6c57055211 SHA1: 3d2eb4b28de2bcc92a181548884fa89e444b3d66 MD5sum: 2e7d2e33a40d6a8f2afb603791c432a2 Description: Binding specific IP and Port for Linux Running Application This package is probably most useful for Anonymity Distributions. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: bootclockrandomization Version: 3:8.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 84 Depends: msgcollector Homepage: https://www.kicksecure.com/wiki/Boot_Clock_Randomization Priority: optional Section: misc Filename: pool/main/b/bootclockrandomization/bootclockrandomization_8.0-1_all.deb Size: 32084 SHA256: dc38077c697b19fb61c1eb5812f58da449f91287b221bb23356f9d7995fddcc1 SHA1: 6744baca05d4053cd48e43d5bcff7325f11cd66d MD5sum: da0ed9c913b50a406621cd641c53b53c Description: Randomizes clock when systems boots Randomizes clock at boot time. Moves clock a few seconds and nanoseconds to past or future. Useful in context of anonymity/privacy/Tor. . This is useful to enforce the design goal, that the host clock and Gateway/Workstation clock should always slightly differ (even before secure timesync succeeded!) to prevent time based fingerprinting / linkablity issues. . Runs before Tor / sdwdate (if installed). . See also: https://www.whonix.org/wiki/Dev/TimeSync Package: browser-choice Version: 3:2.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 286 Depends: python3, helper-scripts Homepage: https://www.kicksecure.com/wiki/browser-choice Priority: optional Section: admin Filename: pool/main/b/browser-choice/browser-choice_2.6-1_all.deb Size: 62328 SHA256: 21c3800a50db27d536c7c6a30f55b97cff15ff254bb13713d681f8a9e7249ca1 SHA1: 4ecbfcce0a2a6ee7d136a7dd6f5c039d2006b5af MD5sum: 84f4e235fa9527173b348bdb5c3af0e8 Description: browser selection installer dialog A graphical interface that allows users to select and manage browsers. . Features a plugin-based design and multiple install types. Package: calamares-settings-debian Version: 13.1.8-1 Architecture: all Maintainer: Jonathan Carter Installed-Size: 225 Depends: calamares, rsync, cryptsetup, libglib2.0-bin, keyutils, pkexec, qml-module-qtquick-window2, qml-module-qtquick2, dconf-gsettings-backend | gsettings-backend Provides: calamares-settings Homepage: https://salsa.debian.org/live-team/calamares-settings-debian Priority: optional Section: utils Filename: pool/main/c/calamares-settings-debian/calamares-settings-debian_13.1.8-1_all.deb Size: 129364 SHA256: 54b42049e071423e93b11c2148b0cf8e171b3e90c46c3482cb88caafa8fbf6aa SHA1: ab5aa1ef254766638355411911bd13001a6c6332 MD5sum: 889be0b067962d7d81c3fd6090d36ff4 Description: Debian theme and settings for the Calamares Installer Calamares is a generic installer framework for Linux distributions. By default, it contains a set of boilerplate wording and images. This package provides the latest Debian artwork as well as scripts that supports EFI installations. . It also serves as an example for how derivatives can create their own calamares-settings packages. Package: damngpl Version: 3:4.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 32 Depends: perl Homepage: http://www.finnie.org/software/damngpl/damngpl Priority: optional Section: misc Filename: pool/main/d/damngpl/damngpl_4.8-1_all.deb Size: 14048 SHA256: c0016303719e1d575979880658050b4e54dc5d34bdef4f70c94e466f767e38eb SHA1: 952ff32744638c374f6757038f3e0aa68c2488df MD5sum: 9cd05244b4803a85ce27263f7ea702d6 Description: Extract source package info from Debian status files damngpl will parse a Debian-style /var/lib/dpkg/status file and extract source package information about installed packages. This information can be used in several ways, usually to download source packages. . Multiple input files can be specified on the command line, or piped into standard input if no files are specified. Results are returned to standard output. . The name damngpl was chosen as a tongue-in-cheek description of its purpose (downloading Debian sources for the Finnix project to remain GPL compliant). Please do not send hate mail to the author, thinking he is anti-GPL. He's not. . See also: http://blog.finnix.org/2011/08/21/finnix-and-gpl-compliance/ Package: deb.torproject.org-keyring Version: 2025.08.08 Architecture: all Maintainer: Peter Palfrader Installed-Size: 20 Priority: important Section: misc Filename: pool/main/d/deb.torproject.org-keyring/deb.torproject.org-keyring_2025.08.08_all.deb Size: 4500 SHA256: e5bd5c6442ead01e183838be611d6bdf04896ba299095fbb4dc5ab5fe8f19bf6 SHA1: 7b9ee87c815b20602e588c1e6ded420ba7eeb4e4 MD5sum: 874fc9f0da1acbbf1a6eb2c7a25cecc1 Description: GnuPG archive key of the deb.torproject.org repository The deb.torproject.org repository digitally signs its Release files. This package contains the current repository key used for that, and upon installation configures your system to accept archives signed with this key. Package: debug-misc Version: 3:5.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 107 Suggests: systemd-coredump, serial-console-enable Replaces: grub-output-verbose Homepage: https://github.com/Kicksecure/debug-misc Priority: optional Section: misc Filename: pool/main/d/debug-misc/debug-misc_5.7-1_all.deb Size: 28168 SHA256: d08ba0c9b770e0ecc77f2526e85d0cd432eaccf5b17656f7d88569d842391779 SHA1: 93d25a30a8fade8da3b8c96b096e7b89bbf7fa59 MD5sum: cd5bb13d523d6e860350b76a99ac5430 Description: Enables miscellaneous debug settings Ships a `/etc/default/grub.d/45_debug-misc.cfg` configuration file. This removes `quiet`, `loglevel=0`, and `rhgb` from the `GRUB_CMDLINE_LINUX_DEFAULT` variable. It also removes `debugfs=off`, `efi_pstore.pstore_disable=1`, and `erst_disable` from the `GRUB_CMDLINE_LINUX` variable. Finally, it adds `debug=vc` to the `GRUB_CMDLINE_LINUX` variable to enable verbose output during the initial ramdisk boot phase. . Undo debugging related `sysctl` settings by package `security-misc-shared`. . Enables persistent systemd journal log. . Disables `/usr/lib/systemd/coredump.conf.d/30_security-misc.conf` by package `security-misc-shared` using `debian/debug-misc.links` by creating a symlink from `/etc/systemd/coredump.conf.d/30_security-misc.conf` to `/dev/null`. . Disables `/usr/lib/systemd/pstore.conf.d/30_security-misc.conf` by package `security-misc-shared` using `debian/debug-misc.links` by creating a symlink from `/etc/systemd/pstore.conf.d/30_security-misc.conf` to `/dev/null`. . Disables `panic-on-oops`, `remove-system.map` by package `security-misc-shared`. . `config-package-dev` `hide` `/etc/sysctl.d/30_silent-kernel-printk.conf` which kernel.printk to default as if `security-misc-shared` would not have lowered verbosity. . Configure systemd `getty` service to not clear `tty`. `/lib/systemd/system/getty@tty.service.d/30_debug-misc.conf` . Coredumps are enabled. `/etc/security/limits.d/40_debug-misc.conf` . Coredumps may contain important information such as encryption keys or passwords. Package `security-misc-shared` disables coredumps. Package `debug-misc` re-enables coredumps. . Contains a helper tool to cause a segfault for testing purposes. `segfault-build` creates `segfault-run`. Running `segfault-run` results in `segfault-run` terminating with a segfault. This is useful to test if coredump files are being generated when an application crashes. `/usr/sbin/segfault-build` `/usr/share/debug-misc/segfault.c` . For better usability, to ease debugging in case of issues. . For better security, this package should only be installed on specific machines that require debugging. Unfortunately, security and debugging are conflicting optimization goals. Package: desktop-config-dist Version: 3:17.7-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 346 Depends: python3, helper-scripts, dconf-gsettings-backend | gsettings-backend, init-system-helpers (>= 1.52) Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist_17.7-1_all.deb Size: 99684 SHA256: 7e3056a3a377faaa89ae5d71f0085c59f872d53248073193900e2d717dfe8282 SHA1: f70c1ac12a103a8d2a784e86aa09ad98b6649720 MD5sum: b59dc79c9d897c66648af4e101c70c9b Description: Configuration for Derivative Desktop Sets desktop and display setting, wallpaper and desktop icons. Sets icon theme and style. Settings for the default panel aka task bar, like panel position/color/size and panel plugins/shortcuts. . Autologin for account 'user' setting in lightdm. . Live check systray indicator which indicates the status of grub-live, whether the system was booted into persistent or live mode. See also: https://www.kicksecure.com/wiki/grub-live . Adds start menu entries for web browser, terminal emulator, file manager. . Sets Whisker Menu for better usability. . Disable maximize windows when moving to top for better privacy. . Disables thumbnails for better security. . Disables save on exit for better privacy. Package: desktop-config-dist-dependencies Source: desktop-config-dist Version: 3:17.7-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 76 Depends: gnome-colors-common, adwaita-icon-theme, python3-pyudev, wlr-randr Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist-dependencies_17.7-1_all.deb Size: 47496 SHA256: 952a1d7b43fded3a5b88bb0a24235b38819d903c7763d9a8db25701c1500f20c SHA1: f7d7a67ff92b402821ec3cf60e214cff4e3b325f MD5sum: d3668ab4b4a0069a7384a386ed2156d6 Description: Dependencies of desktop-config-dist A metapackage with dependencies for package desktop-config-dist. . Only useful for Non-Qubes. Not useful in Qubes. Package: developer-meta-files Version: 3:53.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 425 Depends: python3, python3-debian, bc, jq Homepage: https://github.com/Kicksecure/developer-meta-files Priority: optional Section: misc Filename: pool/main/d/developer-meta-files/developer-meta-files_53.4-1_all.deb Size: 159880 SHA256: 243a5e7a1acadc5d6e3cdbbb413c8c947da0e25ce33b00fe16045fa5ec31eb6f SHA1: be6fd69886e37040ee1a42252b5034992d718a6e MD5sum: daa07b3d9b9323e639944d2ad5ccd53b Description: Linux Distributions Maintenance Helper Scripts Todo . Description Package: dist-baremetal-cli Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: nvme-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-baremetal-cli_36.8-1_all.deb Size: 86076 SHA256: 1b67bba1da590e8c1fc4bc3af30b9030dd579633837dd1c0261cf373d215ea3c SHA1: 3177def2015dbc459fcc64c1efb2036cf5b39d6e MD5sum: 986764173715304a840ac3ce4e7b4381 Description: All systems, physical hardware, command-line packages For all hardened systems. . For physical hardware. . Provides packages for basic command-line-only installations. Package: dist-baremetal-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: psensor, liblxqt-backlight-helper Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-baremetal-gui-lxqt_36.8-1_all.deb Size: 86112 SHA256: ac40d4305a0ebab64398aafcae590dfeef95c090b1e4ad94d9ffea7f0761ed9f SHA1: 7a851afa5ce7ae48de8964c023269a53ec7ff618 MD5sum: e3d6331d40d20f1ed7bc0fd29e38b229 Description: All systems, physical hardware, LXQt GUI packages For all hardened systems. . For physical hardware. . Provides packages for LXQt graphical desktop installations. Package: dist-base-files Version: 3:15.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 693 Pre-Depends: zsh Depends: dpkg-dev, helper-scripts, adduser, moreutils, xz-utils, zsh-syntax-highlighting, zsh-autosuggestions, systemd-repart Conflicts: anon-base-files, diverts-etc++grub.d++10+-+linux Replaces: anon-base-files Provides: anon-base-files, diverts-etc++grub.d++10+-+linux Homepage: https://github.com/Kicksecure/dist-base-files Priority: optional Section: misc Filename: pool/main/d/dist-base-files/dist-base-files_15.8-1_all.deb Size: 194452 SHA256: 2fcde3fcf84b534cd56ecdf1d09f99eb7f339effcd769f0fdf151e3b75d75f52 SHA1: e2af4c695e7e75600046e80ba747728f877a07c4 MD5sum: 2d723925396ff3a22dd1c296571641f3 Description: base files for distributions Grub config for more organized boot menu. "Normal" boot options are on top. "Advanced" boot options (for older kernel versions) have been moved to the bottom. . Creates user `user` with empty password (passwordless) (not in Qubes). That is if user `user` is not existing yet. And if it does create user `user` it also locks the root account. Therefore root account locking effectively only happens in new builds not having user `user` already created. . Creates system groups: * console * ssh . Ships a systemd unit file dist-skel-first-boot.service which runs `/usr/libexec/helper-scripts/first-boot-skel` (part of helper-scripts) package. . Simplifies sudo default lecture to only showing the default password once. . Creates version file `/var/lib/dist-base-files/build_version`. . Default shell: Sets default shell for user `user` to `zsh`. (Unless file `/etc/no-shell-change` exists.) `debian/dist-base-files.postinst` . Provides common files for derivative GRUB themes. . This package gets installed by default in both, Kicksecure and Whonix. Package: dist-general-cli Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: apparmor-profile-dist, apt-transport-tor, apt-utils, bootclockrandomization, ca-certificates, dialog, dist-base-files, dummy-dependency-mta, gawk, init, initializer-dist, locales, menu, nmap, repository-dist, sdwdate, security-misc-shared, setup-dist, sudo, timesanitycheck, usrmerge, apparmor-profiles-kicksecure, apparmor-utils, bash-completion, boot-info-script, btrfs-progs, bzip2, curl, debian-keyring, dbus-user-session, distro-info-data, bind9-dnsutils, e2fsprogs, eject, file, haveged, hunspell-en-us, iotop, iproute2, iputils-ping, jitterentropy-rngd, less, libblockdev-crypto3, libpam-tmpdir, lsof, man-db, most, nano, net-tools, openvpn, 7zip, pciutils, pcmciautils, procps, secure-delete, sensible-utils, strace, sysfsutils, systemcheck, torsocks, traceroute, udisks2, unzip, usability-misc, usbutils, vim, xz-utils, zip, codecrypt, diceware, dirmngr, equivs, extrepo, extrepo-offline-data, fuse, sq, sqv, sqop, sequoia-git, sequoia-chameleon-gnupg, gpg-agent, makepasswd, pwgen, htop, pv, cryptsetup, dmsetup, udev, anon-apt-sources-list, tor, vm-config-dist, tor-ctrl, mokutil Breaks: kicksecure-default-applications-cli, kicksecure-dependencies-cli, kicksecure-dependencies-system, kicksecure-recommended-cli Replaces: kicksecure-default-applications-cli, kicksecure-dependencies-cli, kicksecure-dependencies-system, kicksecure-recommended-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-cli_36.8-1_all.deb Size: 86716 SHA256: dae54689311758fd255169c1da7654ba298094dcd97821bd3b5b568e713c370e SHA1: 3b33356159d35eb4e50d44f08c5e47a8807e7af3 MD5sum: c7c53df3e2dd626d838b60959bbebb60 Description: All systems, all hardware, command-line packages For all hardened systems. . For all hardware platforms. . Provides packages for basic command-line-only installations. Package: dist-general-gui-all Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: desktop-config-dist, libgl1-mesa-dri, mesa-vulkan-drivers, libfuse2t64, mate-polkit, xdg-desktop-portal, msgcollector-gui, repository-dist-wizard, sdwdate-gui, setup-wizard-dist, security-misc-desktop, mesa-utils, open-link-confirmation, accountsservice, icon-pack-dist, libasound2t64 Breaks: kicksecure-desktop-applications-recommended, kicksecure-desktop-environment-essential-gui Replaces: kicksecure-desktop-applications-recommended, kicksecure-desktop-environment-essential-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-gui-all_36.8-1_all.deb Size: 86280 SHA256: 758c939e52ab44f549873decda875c6dc8b6e7ebf6b180c8ae038c1dc7de3ccf SHA1: abfff9a8b1a73d214320d79de1f74ac85c74f35b MD5sum: d5cec4e702c42cd6dd5c27dafeadfea1 Description: All systems, all hardware, GUI packages For all hardened systems. . For all hardware platforms. . Provides packages for all graphical desktop installations. Package: dist-general-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: dummy-dependency-sway, dummy-dependency-lxqt-policykit, featherpad, gnome-keyring, lxqt-about, lxqt-about-l10n, lxqt-admin, lxqt-admin-l10n, desktop-file-utils, lxqt-themes, lxqt-system-theme, lxqt-config, lxqt-config-l10n, lxqt-notificationd, lxqt-notificationd-l10n, lxqt-globalkeys, lxqt-globalkeys-l10n, lxqt-qtplugin, pcmanfm-qt, pcmanfm-qt-l10n, qterminal, qterminal-l10n, qtxdg-tools, lxqt-openssh-askpass, lxqt-openssh-askpass-l10n, lxqt-sudo, lxqt-sudo-l10n, papirus-icon-theme, qt6-svg-plugins, qt6-translations-l10n, qt6-wayland, xdg-desktop-portal-gtk, xdg-desktop-portal-lxqt, gvfs, gvfs-backends, pkexec, polkitd, sysmaint-panel, discover, hwinfo, laptop-detect, lm-sensors, lshw, gparted, lxqt-archiver, lxqt-archiver-l10n, liblxqt-l10n, libfm-qt-l10n Breaks: kicksecure-desktop-applications-lxqt, kicksecure-desktop-applications-xfce, kicksecure-desktop-environment-essential-lxqt, kicksecure-desktop-environment-essential-xfce, kicksecure-shared-host-lxqt, kicksecure-shared-host-xfce Replaces: kicksecure-desktop-applications-lxqt, kicksecure-desktop-applications-xfce, kicksecure-desktop-environment-essential-lxqt, kicksecure-desktop-environment-essential-xfce, kicksecure-shared-host-lxqt, kicksecure-shared-host-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-gui-lxqt_36.8-1_all.deb Size: 86472 SHA256: 183a3b4b8095320a3d88841da54e0c13c7a325b15dc4254b0ec97b59035cd94d SHA1: 3fae0a4f6b1720bb435242b7780c0c1b866d83c0 MD5sum: fbc2a4342f521ce3972c1a6a96491bfd Description: All systems, all hardware, LXQt GUI packages For all hardened systems. . For all hardware platforms. . Provides packages for LXQt graphical desktop installations. Package: dist-general-server Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: security-misc-server Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-server_36.8-1_all.deb Size: 86068 SHA256: 5161f4dd898fa76a24e127c18d43d1f0ac8d95f7f6c214739b895b742fd59739 SHA1: 620130b64eab133ceda32ab13a995be7e0736502 MD5sum: 6e0c671e0d4535a51d49d6d127c04f7d Description: All systems, all hardware, server packages For all hardened systems. . For all hardware platforms. . Provides packages for server installations. Package: dist-nonqubes-cli Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: dracut, systemd-cryptsetup, acpi-support, console-common, console-setup, grub-live-dracut, kbd, keyboard-configuration, swap-file-creator, smartmontools Breaks: non-qubes-enhancements-cli Replaces: non-qubes-enhancements-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-cli_36.8-1_all.deb Size: 86216 SHA256: a5c699c90d27540e36c65dcbaad1a28e77be0de18a86c7b60ebc8ffd2a0b41e3 SHA1: d792e1b1a7f0ded6f063e248c4e19aba4d2bc2c9 MD5sum: ff9a683190d2c09d9a000ba10f267b84 Description: All systems, not Qubes VMs, command-line packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dist-nonqubes-gui-all Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: rads, desktop-config-dist-dependencies, labwc, waybar, wvkbd, gsmartcontrol, upower Breaks: non-qubes-audio, non-qubes-enhancements-gui Replaces: non-qubes-audio, non-qubes-enhancements-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-gui-all_36.8-1_all.deb Size: 86184 SHA256: a9c1549599523d1a82a46bcfdd8ad08f4a9993825c8b80ebee1491ac2cbd1221 SHA1: cd33c045ae78c36ac33aaa8fdf879ce8c6267a11 MD5sum: f6fbb3dafa635aeda81648242651673b Description: All systems, not Qubes VMs, GUI packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: dist-nonqubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: swayidle, swaylock, greetd, wlgreet, lxqt-powermanagement, lxqt-powermanagement-l10n, lxqt-panel, lxqt-panel-l10n, lxqt-runner, lxqt-runner-l10n, lxqt-session, lxqt-session-l10n, lxqt-wayland-session, swaybg, wdisplays, flameshot, grim, xdg-desktop-portal-wlr, kanshi, smart-notifier Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-gui-lxqt_36.8-1_all.deb Size: 86232 SHA256: 506ba62fe923a918b024ac8a7389c2f3b24095215b225c8ce410d8a0f657266a SHA1: dfeca2b5b59f35acd6efccc6322ac4db35cb3014 MD5sum: 21719b7988c16c134281b3406499f1d8 Description: All systems, not Qubes VMs, LXQt GUI packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: dist-qubes-cli Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: qubes-core-agent-networking, qubes-core-agent-dom0-updates, qubes-input-proxy-sender, qubes-kernel-vm-support, qubes-usb-proxy, qubesdb-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-cli_36.8-1_all.deb Size: 86152 SHA256: 05f4390b0c76c43d39339836a549169ce2222afe38dabd9ad04d01cafe7c0ff7 SHA1: 6b725f11c163521d401bf68c2590be6a64e501fa MD5sum: c75c7c31fa2b7f47cf3eaa62fc7d0349 Description: All systems, Qubes VMs, command-line packages For all hardened systems. . For Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dist-qubes-gui-all Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: qubes-core-agent-pcmanfm-qt, qubes-core-agent-nautilus, qubes-notification-agent Breaks: qubes-whonix-shared-packages-recommended Replaces: qubes-whonix-shared-packages-recommended Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-gui-all_36.8-1_all.deb Size: 86152 SHA256: e04065ae87bdd151dc638a2f4bc1d1e709e78f2a8f8df7479e0dd91672a6247b SHA1: 85aaba8cd896f7efaccfe77fe340766878de481c MD5sum: d09b545903658d066c8a5b236f56ba89 Description: All systems, Qubes VMs, GUI packages For all hardened systems. . For Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: dist-qubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-gui-lxqt_36.8-1_all.deb Size: 86080 SHA256: 16a7b283e48856ef73f410020ddbfff4673f07f13b1aaa398975f28f79678038 SHA1: 629f2264d7a7bda8619627ba9dfc1100b2787e2a MD5sum: 9f61664da675cef8b6b2d6a2b50b571c Description: All systems, Qubes VMs, LXQt GUI packages For all hardened systems. . For Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: dist-vm-cli Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-vm-cli_36.8-1_all.deb Size: 86068 SHA256: c03cc6076879d45ca99a69f3a3e41804119050583e687330c0857701d7535533 SHA1: deffb78450375232dee65f14279873d8c6e0a96c MD5sum: 3353e0bd99934b1ddb86df84b37b4aa5 Description: All systems, VMs, command-line packages For all hardened systems. . For non-Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dummy-dependency-apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: apparmor-profiles-kicksecure Provides: apparmor-profiles-kicksecure Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-apparmor-profiles-kicksecure_36.8-1_all.deb Size: 86120 SHA256: 6092af83a44457e5a7b99e896ff3425926f5ea6ac615fb2e6f4e3d67d0ba9f76 SHA1: fe5ef833a8cb2c2a0738271796ac7aa409b0c491 MD5sum: 18814918ba6884425727d3eddeb1845f Description: dummy package apparmor-profiles-kicksecure A metapackage, which satisfies the dependency on apparmor-profiles-kicksecure. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-bindp Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: bindp Provides: bindp Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-bindp_36.8-1_all.deb Size: 86100 SHA256: 9a5f5018eaf9c3792b728315b6c73358c90b5e5a96bdd9bed4e0deac3e46c162 SHA1: d111202b8bb97b16222969ec378593c3a9e149e9 MD5sum: 8a2c5704836563745620dd69ef934d83 Description: dummy package to satisfy architecture specific dependency bindp A metapackage, which satisfies the dependency on bindp. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-browser-choice Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: browser-choice Provides: browser-choice Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-browser-choice_36.8-1_all.deb Size: 86132 SHA256: 8e4c72a93de13d9f66dfcf60894bb25ddd88a4605c05628ad41dbc29177d0215 SHA1: 2430faa191cc141eb4884e44e92f3b7650d60acf MD5sum: 0f4d3832a7957231b38f20a76c5e335d Description: dummy package browser-choice A metapackage, which satisfies the dependency on browser-choice, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-efibootmgr Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: efibootmgr Provides: efibootmgr Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-efibootmgr_36.8-1_all.deb Size: 86140 SHA256: 608dc1dc9bc5a51d742ee8baac5d41c6ae9334af96940802367df3b73af41dc8 SHA1: 07bf1ca487fe0227cb653d264d8bef8368c48a4e MD5sum: 4022f3a508f8e0ddd2cd4f1cc441db02 Description: dummy package efibootmgr A metapackage, which satisfies the dependency on efibootmgr. Because efibootmgr is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-electrum Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: electrum Replaces: dummy-dependency-hardened-electrum Provides: dummy-dependency-hardened-electrum, electrum Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-electrum_36.8-1_all.deb Size: 86128 SHA256: 4b2571181c74f8278fe82da08dde622d634345ce7b6382f61b21a86b41d4cc3e SHA1: 8372eb52979855cf89e2482ed01f7a99304ab6db MD5sum: 18a9d535e737b3a368ee1a1bd9def281 Description: dummy package to satisfy architecture specific dependency electrum A metapackage, which satisfies the dependency on electrum. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-firefox-esr Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: firefox-esr Provides: firefox-esr Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-firefox-esr_36.8-1_all.deb Size: 86124 SHA256: c68f239486f3101de0205d2367fd3f6f51b67a8102cd524fcb32ae8e04e2c8a8 SHA1: 092229bbc9a5c1c0a1eede2da07d9d50ba1e9ee2 MD5sum: 24c12ae0e7c4b5c35691bef1c8c1ae7d Description: dummy package firefox-esr A metapackage, which satisfies the dependency on firefox-esr, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-hardened-malloc Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: hardened-malloc Provides: hardened-malloc Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-hardened-malloc_36.8-1_all.deb Size: 86120 SHA256: 2c8202635253359a0c208c62ff0811a03d41a12ffad4c1abecfd86653d272f49 SHA1: 2de1e983243b0073ef7998b4ab2cb637ea9e973d MD5sum: 2dc939971ec639746b73886d025263a5 Description: dummy package to satisfy architecture specific dependency hardened-malloc A metapackage, which satisfies the dependency on: . hardened-malloc . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-keyutils Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: keyutils Provides: keyutils Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-keyutils_36.8-1_all.deb Size: 86132 SHA256: a8f41e8b88eecc285e7d4641dab3d889ea6ad31a128968d08cccc0d4753f083d SHA1: 8ef9b697e64bf14adfee8e881901f484850e6491 MD5sum: 79e6d93f90789b46f749c7561b8ccae2 Description: dummy package keyutils A metapackage, which satisfies the dependency on keyutils. Because keyutils is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-kloak Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: kloak Provides: kloak Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-kloak_36.8-1_all.deb Size: 86100 SHA256: 472277620aa9ec9c3bd1854674d7d5d3c03fb9650f25aab47ce23d276e320d54 SHA1: 10f9337cab403c8105106646791fe1d786986623 MD5sum: 0277f05e73448229e71950aadeb94c3a Description: dummy package to satisfy architecture specific dependency kloak A metapackage, which satisfies the dependency on kloak. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-lxqt-policykit Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: lxqt-policykit Provides: lxqt-policykit Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-lxqt-policykit_36.8-1_all.deb Size: 86148 SHA256: d9e3dd655ea49e33cda4207629d644758a72cb4649be7e77e510f950c641d2a5 SHA1: e6acff1c24a41b34a175a022f6d9a918d0d79871 MD5sum: 83141d85498644adb305d03b74df1e97 Description: dummy package lxqt-policykit A metapackage, which satisfies the dependency on lxqt-policykit. Because lxqt-policykit is buggy. Bugs out on pam-info stdout/stderr output. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-mokutil Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: mokutil Provides: mokutil Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-mokutil_36.8-1_all.deb Size: 86116 SHA256: 488b1e5931194688b6e6f7a361bcdb01256f7214f8803ca459d9c0bb77a96303 SHA1: 00becc7096a2a8bcbc42a5c67bc7fc6840d84ae3 MD5sum: 2e58c7cf6a406b92b8a0483288e8799b Description: dummy package mokutil A metapackage, which satisfies the dependency on mokutil. Because mokutil is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-mta Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: default-mta, mail-transport-agent Provides: default-mta, mail-transport-agent Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-mta_36.8-1_all.deb Size: 86172 SHA256: 7506a47d103660cd15a72ed7d043b13f7b09972e84c6712b4558b851394f57d7 SHA1: e72fbe59afbed8fec46f0906873b16887f9066e2 MD5sum: ff099395c4918f8932c1e8994516aae9 Description: dummy package mta A metapackage, which satisfies the dependency on default-mta and mail-transport-agent. Because apt attempts to install a mail transport agent when upgrading Bookworm to Trixie. . This package cannot provide a real implementation of a mail transport agent. It is only a dummy to satisfy the dependency. Package: dummy-dependency-qubes-core-agent-passwordless-root Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: qubes-core-agent-passwordless-root Provides: qubes-core-agent-passwordless-root Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-qubes-core-agent-passwordless-root_36.8-1_all.deb Size: 86156 SHA256: d3e6595f32652ebfcd4c3ea6139916c70be8d9ada5bc5b07807ade0576c246a1 SHA1: b13692a3d965d80afd8706488da309d41bd08ffe MD5sum: b18a215b956badf4525f5a323649584e Description: dummy package qubes-core-agent-passwordless-root A metapackage, which satisfies the dependency on qubes-core-agent-passwordless-root, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-sbsigntool Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: sbsigntool Provides: sbsigntool Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-sbsigntool_36.8-1_all.deb Size: 86124 SHA256: da9972f44763d04336ece9154ee05fd0b15e3e40db5b27a8fb165161ee8c804a SHA1: 51007154fc22ddc00368029e41350ca9ac524cf0 MD5sum: 299ac5351bed60a6fd100bf82d67a095 Description: dummy package sbsigntool A metapackage, which satisfies the dependency on sbsigntool. Because sbsigntool is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-sway Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: sway Provides: sway Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-sway_36.8-1_all.deb Size: 86112 SHA256: fbc2968bb640b19be2d7d8778fc87a975b4812023ebdf71974bfdf267cafdea8 SHA1: 8a0690fc8ac527ed8eaff12fc040cc27421342b5 MD5sum: 5d77da9f6d8eac92adb06cb4a67f999c Description: dummy package sway A metapackage, which satisfies the dependency on sway. Used to install wlgreet without sway. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tb-starter Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: tb-starter Provides: tb-starter Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tb-starter_36.8-1_all.deb Size: 86128 SHA256: a6c47e2192c1973167c9efe217663b0f46bad4652b85bf6aeb749c0c24119b60 SHA1: 515ccf75927610ece3b1e77c8aafc169e37b65a5 MD5sum: 9f0279692d8f3659d0146b3a48964dc6 Description: dummy package tb-starter A metapackage, which satisfies the dependency on tb-starter, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tb-updater Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: tb-updater Provides: tb-updater Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tb-updater_36.8-1_all.deb Size: 86124 SHA256: 9dfc124e2186699da9548f5a06065709eda4b497a38998adc799a107b8b3dff5 SHA1: 2d63e100e87116700e98875c5161923cfcb458ef MD5sum: 2bfc0069b3d0d04175667cf3ea082ef6 Description: dummy package tb-updater A metapackage, which satisfies the dependency on tb-updater, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tirdad Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: tirdad Provides: tirdad Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tirdad_36.8-1_all.deb Size: 86108 SHA256: 3634ddca964afa1548c866decba9b95938d5f620f58eafa4dc57465cb7c36430 SHA1: 3ae20d83b2d101bb171d76102a00ad278391b3cd MD5sum: ccee3ffa2acf224129864164dbb092d4 Description: dummy package to satisfy architecture specific dependency tirdad A metapackage, which satisfies the dependency on tirdad. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-virtualbox-guest-utils Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: virtualbox-guest-utils Provides: virtualbox-guest-utils Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-virtualbox-guest-utils_36.8-1_all.deb Size: 86156 SHA256: 04f2baa8a542899e0fd8c4136292b1f554cb72e98baf92281d292a846a7aeefc SHA1: 6630ed2edcb2ffafc18129e2984356bf5385d385 MD5sum: a0b85e690d6e734c7cc65cb480f2b1c2 Description: dummy package virtualbox-guest-utils A metapackage, which satisfies the dependency on virtualbox-guest-utils. Because virtualbox-guest-utils is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-virtualbox-guest-x11 Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: virtualbox-guest-x11 Provides: virtualbox-guest-x11 Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-virtualbox-guest-x11_36.8-1_all.deb Size: 86144 SHA256: 1e03acb36e734057d29c8b8596fe7276449101d2d53e4e71eee8503c2ec41235 SHA1: 1b541dc2eed7fb5f9d6bacd15d03251d2a84c4a6 MD5sum: 924ad69649ea6b31dfce9216c35a0548 Description: dummy package virtualbox-guest-x11 A metapackage, which satisfies the dependency on virtualbox-guest-x11. Because virtualbox-guest-x11 is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-xorg-vm Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Conflicts: xserver-xorg-video-vmware Provides: xserver-xorg-video-vmware Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-xorg-vm_36.8-1_all.deb Size: 86120 SHA256: 49918598ba0279a2b8102b336e84a241d18f31d9120c6bb88c92c08208f69270 SHA1: 19d8ddace85df04f8c4b67caef827a633b34188e MD5sum: e518919138866172a0ae8a7993bcfd20 Description: dummy dependency xserver-xorg-video-vmware A metapackage, which satisfies the dependency on xserver-xorg-video-vmware. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: firmware-freedom Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: firmware-linux-free, firmware-ath9k-htc, firmware-carl9170 Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/firmware-freedom_36.8-1_all.deb Size: 86132 SHA256: f6bf214ccf9cfb1d388b16de3d7f27593199c59ff387f5353d45d7eb889b333b SHA1: de931e1f3bd7bbd1a35b96e5c37db16b0cd7ceb1 MD5sum: 38bdd738c6f3de1588722c44598d5002 Description: Recommended packages for hosts with freedom hardware design A metapackage, which includes freedom firmware useful for hosts with freedom hardware design. . These are not useful in Qubes, since this would be up to Qubes. Package: genmkfile Version: 3:18.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 173 Depends: make, dpkg-dev, devscripts, moreutils, safe-rm, strip-nondeterminism, perl, rsync, python3 Homepage: https://github.com/Kicksecure/genmkfile Priority: optional Section: misc Filename: pool/main/g/genmkfile/genmkfile_18.5-1_all.deb Size: 64996 SHA256: 42b4112ba10f57aefd4aa7293c3643a3a2a964c97ae677e97eb94cccb23addac SHA1: b6882a8b5624ddd8bd8b96b35f02242818426e1f MD5sum: fad6c382a33578aa1cbe235ffa4d134f Description: Generic Makefile Makes packaging simpler. No more need to manually maintain 'make install' targets or distribution specific install files such as debian/pkg-name.install. . Files in etc/... in root source folder will be installed to /etc/..., files in usr/... will be installed to /usr/... and so forth. This should make renaming, moving files around, packaging, etc. very simple. Packaging of most packages can look very similar. . Provides common make targets such as 'make install', 'make dist', 'make installsim', 'make installcheck', 'make uninstall', 'make uninstallcheck', 'make distclean'. . Very extensible through file ./make-helper-overrides.bsh or folder ./make-helper-overrides.d. By using overrides, any make target can be easily extended using pre or post hooks or replaced. Override files which are executable will be used. Override files which are not executable will be skipped. . Contains a minimal Makefile while the heavy lifting is done by a bash script make-helper.bsh. . Building for multiple platforms possible, example: export make_cross_build_platform_list="i386 amd64" . Can call with lintian (static analysis tool for Debian packages). By default it will be using lintian if installed while failing open (non-zero exit code). lintian can be disabled. export make_use_lintian=false Or can be configured to fail closed (non-zero exit code). export make_use_lintian=true . Can build packages without chroot using debuild (default) or inside chroot using cowbuilder. To enable cowbuilder, use: export make_use_cowbuilder=true . Supports signing packages using debsign. (sign a Debian .changes and .dsc file pair using GPG) export make_use_debsign=true Package: gpg-bash-lib Version: 3:5.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 647 Depends: safe-rm Homepage: https://github.com/Kicksecure/gpg-bash-lib Priority: optional Section: libs Filename: pool/main/g/gpg-bash-lib/gpg-bash-lib_5.4-1_all.deb Size: 491076 SHA256: c67398804d41ded321fb69593a8a719812f1e4920e60ab5c75016193f22fb0c0 SHA1: d644af9199a28cf07c37245d8d8c97c58bc78340 MD5sum: ed653709dafc9f065b89413a0ce823e6 Description: gpg bash library Abstracts file verification into common functions. Allows detecting of stale files, i.e. detection downgrade or indefinite freeze attacks by implementing a valid-until like mechanism. . Internally parses gpg's --status-file output. . For better security. Package: grub-live Version: 3:11.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 122 Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live_11.2-1_all.deb Size: 41988 SHA256: 73c3dbae6bc6cac48c697d4e82a13cc0d770d9955afac04b83cb90300982c362 SHA1: 54a04f195570926e4f216f2d78cd500cba2cf873 MD5sum: 956a1bd82582a875d9f82cdc2ed0c3b4 Description: grub live boot menu entry Base grub-live package. You probably do not want to install this directly, install grub-live-dracut instead. . Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . Adds a grub live boot menu entry. . Existing grub boot entries stay unmodified. . No claims are made with regard to anti forensics. Package: grub-live-dracut Source: grub-live Version: 3:11.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 65 Depends: grub-live, dracut Provides: boot-live, grub-live-boot Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live-dracut_11.2-1_all.deb Size: 33444 SHA256: 0affb21ad0e0dd3c273ca36f9a3f211e3b9acda2dc759ce24e1eef40f76afd1e SHA1: e3f9aa3535aa41d61770e38d5d700f844ac3a486 MD5sum: 0e85ff5931962c355525ba85011cf227 Description: grub live dracut dependencies Dracut version metapackage for grub-live. . See also the package grub-live. Package: hardened-kernel Version: 3:5.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 474 Depends: build-essential, libssl-dev, libncurses-dev, fakeroot, libelf-dev, bison, flex, gcc-12-plugin-dev, curl, bc, kmod, cpio Homepage: https://www.kicksecure.com/wiki/Hardened-kernel Priority: optional Section: misc Filename: pool/main/h/hardened-kernel/hardened-kernel_5.3-1_all.deb Size: 158344 SHA256: 545064c1051331f7b902f1589cce04be0f1981b5f75ae85cc673bd74d17191f1 SHA1: e472c7faf5c18fff0d4f5959b5278f7fdbaa7c77 MD5sum: 6ef86709f92f883e33f741447dc07b05 Description: Hardened Kernel for Host and VMs This is a hardened kernel configuration for Whonix / Kicksecure. hardened-vm-kernel is designed specifically for virtual machines and hardened-host-kernel is designed for hosts. . Both configs try to have as many hardening options enabled as possible and have little attack surface. hardened-vm-kernel only has support for VMs and all other hardware options are disabled to reduce attack surface and compile time. . During installation of hardened-vm-kernel, it compiles the kernel on your own machine and does not use a pre-compiled kernel. This ensures the kernel symbols in the compiled image are completely unique which makes it far harder for kernel exploits. This is possible due to hardened-vm-kernel having only VM config options enabled which drastically reduces compile time. . During installation of hardened-host-kernel, the kernel is not compiled on your machine and it uses a pre-compiled kernel. This is because the host kernel needs most hardware options enabled to support most devices which makes compilation take a very long time. . The VM kernel is more secure than the host kernel due to having less attack surface and not being pre-compiled but if you want more security for the host, it is recommended to edit the hardened host config, enable only the hardware options you need and compile the kernel yourself. This makes the security of the host and VM kernel comparable. . Both configs were based on the default Debian config. . These kernels use the linux-hardened patch for further hardening. Custom hardening patches should be sent there. . This only supports LTS kernels as they have the least attack surface (stable kernels have more code and more bugs) and the best stability. . Build script /usr/share/hardened-vm-kernel/build does not run automatic yet. . Kernel does not get installed automatic yet. . See also development discussion: http://forums.whonix.org/t/kernel-recompilation-for-better-hardening Package: helper-scripts Version: 3:49.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 1089 Depends: python3, python3-stem, python3-scapy, python3-yaml, bubblewrap, moreutils, equivs, safe-rm, jq, python3-schema, sq Breaks: usability-misc (<< 3:31.7-1) Replaces: anon-shared-helper-scripts, anon-ws-leaktest, curl-scripts, python-guimessages, python3-guimessages, usability-misc (<< 3:31.7-1) Homepage: https://github.com/Kicksecure/helper-scripts Priority: optional Section: misc Filename: pool/main/h/helper-scripts/helper-scripts_49.9-1_all.deb Size: 293572 SHA256: 1f2a17c6d14e74bb267251f15a5fef14c23fc42f2247ca044e17aa2b4802bddb SHA1: 7b979fcf9292e8848967e4ee56c4f77255307a6d MD5sum: 0fb3012f88a4c2154d5d390494d07515 Description: Helper scripts useful for Linux Distributions Contains a script for curl progress bar in terminal. Includes another script to convert curl exit codes to curl status messages. Implemented in bash. Common code that can be used by other scripts. . Library that can be used by other (anonymity related) packages that want to programmatically get information about states of Tor. Common code, that is often required. Includes bash and Python helper scripts. . Leak Test for Anonymity Distribution Workstations Integrated leak test. Needs to be manually run. See: https://www.whonix.org/wiki/Dev/Leak_Tests . Translatable GUI Messages Generic modules guimessage.py and translations.py. Called with two parameters: .yaml file path and yaml section. Return translations according to distribution local language (Python 'locale'). . Provides the ld-system-preload-disable wrapper to disable /etc/ld.so.preload per application via bubblewrap. Useful if hardened_malloc is being globally preloaded and needs to be disabled for some applications. . Provides the dummy-dependency script for quickly creating and installing dummy packages for working around package dependencies. . Provides apt-get-noninteractive that is a simple wrapper around apt-get, that sets all required environment variables to make it interactive as well as to prevent systemd service starts and restarts during apt-get. Package: helper-scripts-tests Source: helper-scripts Version: 3:49.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 169 Depends: helper-scripts, git, python3-pytest, pylint, mypy, black, ncurses-term Homepage: https://github.com/Kicksecure/helper-scripts Priority: optional Section: misc Filename: pool/main/h/helper-scripts/helper-scripts-tests_49.9-1_all.deb Size: 135708 SHA256: 5d21e4f9a7bb3f23bab1aee1d890891adaa0a6913533f4661b824aa232a7df9e SHA1: 456b69db6ac388290a84d3eaea7bba481541fa73 MD5sum: 8ba3f3f38b45007177e3c1213b8dd6c7 Description: Helper scripts test packages This is a dependency package for tests. Package: icon-pack-dist Version: 3:5.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 2528 Conflicts: anon-icon-pack Replaces: anon-icon-pack Provides: anon-icon-pack Homepage: https://github.com/Kicksecure/icon-pack-dist Priority: optional Section: misc Filename: pool/main/i/icon-pack-dist/icon-pack-dist_5.3-1_all.deb Size: 1439528 SHA256: 66cf3ebe1d0d3485bf1781cc21dfab1bac8c5cb6001586f1c488bb36fd265620 SHA1: 676ebf8d8a6d9a68f606d2ab5c09b5c31888a594 MD5sum: b65259ed5ebf4a587ee8a5b35fb420b3 Description: Icon Pack for Derivative Distributions Contains icons, that are used by other derivative distribution specific packages. Others are welcome to use these icons according to their Free licenses as well. Package: initializer-dist Version: 3:8.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 84 Depends: psmisc, debsums, damngpl, safe-rm Conflicts: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Replaces: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Provides: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Homepage: https://www.kicksecure.com/wiki/Verifiable_Builds Priority: optional Section: misc Filename: pool/main/i/initializer-dist/initializer-dist_8.6-1_all.deb Size: 35032 SHA256: 8fb89519c234bad47511e0628c26313d55fd81aa397567255d93ca193235d1b6 SHA1: b589881534c92b8c01d2d2ba768c950ac163d57e MD5sum: 9809212fc5c7ac0d5f6e394ab8c0b44d Description: Initializes Linux distributions, Release Upgrades and Legacy Contains a chroot-scripts-post.d script, that cleans up temporary files, logs. . Deletes random seeds. Since these should not be included in a redistributed image. Also sometimes called 'golden' image. . - /var/lib/urandom/random-seed - /var/lib/systemd/random-seed - /var/lib/random-seed - See also: https://systemd.io/RANDOM_SEEDS.html Package: kicksecure-baremetal-cli Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: kicksecure-nonqubes-cli, kicksecure-general-cli, dist-baremetal-cli, dist-nonqubes-cli, dist-general-cli, ram-wipe, wpasupplicant Breaks: kicksecure-cli-host, kicksecure-cli-host-packages-recommended Replaces: kicksecure-cli-host, kicksecure-cli-host-packages-recommended Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-cli_36.8-1_all.deb Size: 86152 SHA256: 8b99c137b0c0e2bd345c0babd277609939440a8d7fa608d387c051ee81276a6a SHA1: 8952b8a369fd1d8329525a5fd0f990a9b5199a70 MD5sum: bc9482dfaf34aac580fe792af5ce1b8d Description: Kicksecure systems, physical hardware, command-line packages For Kicksecure systems. . For physical hardware. . Provides packages for basic command-line-only installations. Package: kicksecure-baremetal-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: kicksecure-baremetal-cli, kicksecure-nonqubes-gui-lxqt, kicksecure-nonqubes-gui-all, kicksecure-nonqubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-baremetal-gui-lxqt, dist-baremetal-cli, dist-nonqubes-gui-lxqt, dist-nonqubes-gui-all, dist-nonqubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-lxqt-host, kicksecure-xfce-host Replaces: kicksecure-lxqt-host, kicksecure-xfce-host Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-gui-lxqt_36.8-1_all.deb Size: 86172 SHA256: 9b148368316fa63484d8a8af76c2a80129580d4250983a71be2375636bfba39b SHA1: cb4d7262492e75df80996046273ab5e9e1e7d92b MD5sum: 73b473093b5628abb42e8220460b445b Description: Kicksecure systems, physical hardware, LXQt GUI packages For Kicksecure systems. . For physical hardware. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-baremetal-server Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: kicksecure-baremetal-cli, kicksecure-nonqubes-cli, kicksecure-general-cli, dist-baremetal-cli, dist-nonqubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-server_36.8-1_all.deb Size: 86100 SHA256: 3389b2d4d4c1fdb00711ecb58e16ea13dd738b48854eb9aa5ca302250355edfb SHA1: 6aa24c6db9beed64e60237aa4bdee2d59ff2a07d MD5sum: 141d4c715da80dbdf57dcc10607fd39a Description: Kicksecure systems, physical hardware, server packages For Kicksecure systems. . For physical hardware. . Provides packages for server installations. Package: kicksecure-base-files Version: 3:10.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 2729 Depends: less Conflicts: diverts-etc++issue, diverts-etc++motd, diverts-etc++xdg++waybar++config.jsonc, diverts-etc++xdg++waybar++style.css Breaks: desktop-config-dist (<< 3:14.7-1) Replaces: desktop-config-dist (<< 3:14.7-1) Provides: diverts-etc++issue, diverts-etc++motd, diverts-etc++xdg++waybar++config.jsonc, diverts-etc++xdg++waybar++style.css Homepage: https://github.com/Kicksecure/kicksecure-base-files Priority: optional Section: misc Filename: pool/main/k/kicksecure-base-files/kicksecure-base-files_10.5-1_all.deb Size: 2632768 SHA256: 93befb9854568757708fdfc0551cfebc84852cb3d98a894b1613b9953acb2993 SHA1: 176eea9a7323531f55279b7ac38b5c54d6bd75ce MD5sum: 2332c807e93d6c9c96a7b2e77ac1ed75 Description: Kicksecure base system miscellaneous files This package contains several important miscellaneous files, such as /etc/issue, /etc/motd, /etc/dpkg/origins/kicksecure, /usr/bin/kicksecure, and others. . Sets the KICKSECURE environment variable to 1 as well. Package: kicksecure-general-cli Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: dosfstools, kicksecure-base-files, lvm2, ntfs-3g, obfs4proxy, gddrescue, usbguard Breaks: kicksecure-cli Replaces: kicksecure-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-cli_36.8-1_all.deb Size: 86132 SHA256: 018c4c3dbeafab02477d510014e60d29b19ba31422808bacedbc63b29e457cc3 SHA1: f185a4c34a4a129caa1ace89b056ef5a89e9ae2d MD5sum: 5f7c91fea6481c424389daca31b50581 Description: Kicksecure systems, all hardware, command-line packages For Kicksecure systems. . For all hardware platforms. . Provides packages for basic command-line-only installations. Package: kicksecure-general-gui-all Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: browser-choice, flatpak, keepassxc, kicksecure-welcome-page, loupe, vlc, ddrescueview, pipewire-audio, pipewire-pulse, wireplumber, rtkit, catfish, electrum, usbguard-notifier Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-gui-all_36.8-1_all.deb Size: 86188 SHA256: 2260a481102572f304f4a3416cb37c46a4f73a4926ec5171648625cf562f904c SHA1: 8d840eb6273ea32de7f189be9e59cc03e29c07bf MD5sum: 97db18ef53f6283279766476520acdc2 Description: Kicksecure systems, all hardware, GUI packages For Kicksecure systems. . For all hardware platforms. . Provides packages for all graphical desktop installations. Package: kicksecure-general-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: network-manager-applet, nm-connection-editor Breaks: kicksecure-lxqt, kicksecure-xfce Replaces: kicksecure-lxqt, kicksecure-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-gui-lxqt_36.8-1_all.deb Size: 86140 SHA256: 70847515fb6dca322aca930bd55c7a11fb365a0aa676e0e3e4dad3547972bb0d SHA1: 06a84621fada0c73d9ad5701288e1b000a8d8db8 MD5sum: 6f45fefb3ddae8c2d4435e3ab09873d9 Description: Kicksecure systems, all hardware, LXQt GUI packages For Kicksecure systems. . For all hardware platforms. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-network-conf Version: 3:7.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 75 Depends: network-manager, iw, wpasupplicant, netbase, wireless-tools, wireless-regdb Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf_7.0-1_all.deb Size: 23012 SHA256: 6cf6c4b37ba0522b9a5e246694190b2f331d1be83a905b69f1d3079277266ff0 SHA1: 8fbe60859efbdb4744d4e186e2d7d01d4b6db93f MD5sum: df234c4aeeddeb03c3071d0e2a728e33 Description: Network Configuration for Kicksecure CLI Disables systemd Predictable Network Interface Names. . Disables systemd-resolved during boot unless file /etc/dns-enable exists. . Disables systemd-resolved fallback DNS (which by default is set to Google). . Disables NetworkManager hostname management (useful in redistributed Kicksecure VMs). Package: kicksecure-network-conf-gui Source: kicksecure-network-conf Version: 3:7.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 49 Depends: network-manager-gnome Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf-gui_7.0-1_all.deb Size: 19652 SHA256: ec2f2f98299da3d3cdd1e45d3bbfbd9fba6e4edf081abd2e4954794148a28e8f SHA1: 21c4244ca797636b7ad130df8631200817714bf5 MD5sum: 5ee5c10c561701aec7843ea283b62c4b Description: Network Configuration for Kicksecure GUI A metapackage with dependencies recommended for a Kicksecure GUI for networking. . See also kicksecure-network-conf. Package: kicksecure-nonqubes-cli Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-cli_36.8-1_all.deb Size: 86092 SHA256: acace7da844834feeee8d3ec38157931a63a84a0c5a0247b56a76a0760594af0 SHA1: 6943cfe1038c430032c44322d8d3373f709c84f6 MD5sum: 9ec929898192ee4f8129912785e33f54 Description: Kicksecure systems, not Qubes VMs, command-line packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-nonqubes-gui-all Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-gui-all_36.8-1_all.deb Size: 86084 SHA256: ae088334783c5b2cfc4d8a779992a1cf31182f1543cffe29c302a7988450d47b SHA1: ebdd0035ea06bfacaf4c01fda76c3ebb0fe1f0e3 MD5sum: aa17c777d7536bb620d2da3b63bdc1a3 Description: Kicksecure systems, not Qubes VMs, GUI packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: kicksecure-nonqubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: pavucontrol-qt, pavucontrol-qt-l10n Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-gui-lxqt_36.8-1_all.deb Size: 86116 SHA256: 7f36c24885b6af2a831deccf676d90e3053b09042c48eddc897a9e89dbd9417d SHA1: 5d63064972b2e38d4286aa572f07b253a81285e2 MD5sum: da7df90b94727d0e64dc6e08c72fbf9e Description: Kicksecure systems, not Qubes VMs, LXQt GUI packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-packages-dependencies-pre Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Depends: dist-base-files, kicksecure-network-conf Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-packages-dependencies-pre_36.8-1_all.deb Size: 86108 SHA256: c78bd9fef04609dd26a98fabbff15626c47fbcc08a5118838b035ddd64f150c6 SHA1: bf3b7bc803945bbd09fa01fe6f1b5111242c3655 MD5sum: b9dc53b0d88c50d8effbe065c8affdf1 Description: Dependencies for Kicksecure that changes network related files A metapackage, which installs packages which Kicksecure depends on. Can not be merged into another package due to conflicts with chroot build process. Package: kicksecure-qubes-cli Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: kicksecure-general-cli, dist-qubes-cli, dist-general-cli, split-gpg2, qubes-img-converter, qubes-pdf-converter, qubes-core-agent-network-manager, wpasupplicant Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-cli_36.8-1_all.deb Size: 86152 SHA256: 2f8eb3bf45d2d439b577fca8dbe39464980221f9e588f5848301e7ce9dd75697 SHA1: 726d580b3065b9ae9e6ae87485948bf37931473d MD5sum: 7da46667346a6442a8d7283ef2cc6ef3 Description: Kicksecure systems, Qubes VMs, command-line packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-qubes-gui-all Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: pipewire-qubes Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-gui-all_36.8-1_all.deb Size: 86068 SHA256: d5d8394fa7a829f640897b3c34210d0f965e91429936f0c9f3924d6ecebfe5dc SHA1: 563ef7db8aed17e6b5c5747c7a1aca4cac2dd27d MD5sum: 7eccdc621e0229715b79d73e05cb6713 Description: Kicksecure systems, Qubes VMs, GUI packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: kicksecure-qubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: kicksecure-qubes-gui-all, kicksecure-qubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-qubes-gui-lxqt, dist-qubes-gui-all, dist-qubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-qubes-gui Replaces: kicksecure-qubes-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-gui-lxqt_36.8-1_all.deb Size: 86140 SHA256: 510b9e8a34cb9d1bddcfdd95693116199e4bd25f9d578c3f25a7cc823d7bcd4a SHA1: 446781983b22cc96b7bceb88560e7657b0f63508 MD5sum: 6fd9778c9632a80c91910ece8dbd423c Description: Kicksecure systems, Qubes VMs, LXQt GUI packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-qubes-server Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: kicksecure-qubes-cli, kicksecure-general-cli, dist-qubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-server_36.8-1_all.deb Size: 86084 SHA256: 94a654296793a763f30b9b436ca673130fad083ac62f20ae5cc452e777d05c6d SHA1: eaeca44f0e537f3760cec53cf55fb7e83090e493 MD5sum: abd755467361ba86bf549d6ca4c106b7 Description: Kicksecure systems, Qubes VMs, server packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for server installations. Package: kicksecure-vm-cli Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: kicksecure-nonqubes-cli, kicksecure-general-cli, dist-vm-cli, dist-nonqubes-cli, dist-general-cli Breaks: kicksecure-cli-vm Replaces: kicksecure-cli-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-cli_36.8-1_all.deb Size: 86116 SHA256: 173526ccf2fca4f84496fe256b3de88c84c8b84ace3446c00a0175f90f04105f SHA1: 1880d8c52f8a8abac790737b5900a0fc6170cbf5 MD5sum: a502aa0f9647f89f93ebc46da94fd509 Description: Kicksecure systems, VMs, command-line packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-vm-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: kicksecure-vm-cli, kicksecure-nonqubes-gui-lxqt, kicksecure-nonqubes-gui-all, kicksecure-nonqubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-vm-cli, dist-nonqubes-gui-lxqt, dist-nonqubes-gui-all, dist-nonqubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-lxqt-vm, kicksecure-xfce-vm Replaces: kicksecure-lxqt-vm, kicksecure-xfce-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-gui-lxqt_36.8-1_all.deb Size: 86172 SHA256: b2c3b18b6112ba4c9d58895cebe2bf7791f98a2b75e17554dd70b61edf34ddf6 SHA1: 32d1816e46e48058354a6a9145bb38b4eb7d597d MD5sum: 27124dd9f8d451f452f59aaa57a83824 Description: Kicksecure systems, VMs, LXQt GUI packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-vm-server Source: kicksecure-meta-packages Version: 3:36.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 114 Pre-Depends: legacy-dist Depends: kicksecure-vm-cli, kicksecure-nonqubes-cli, kicksecure-general-cli, dist-vm-cli, dist-nonqubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-server_36.8-1_all.deb Size: 86104 SHA256: 22f4e94e3512f0f9e497259b3e0522031e250fa43b660fa024ccb05ddb33ef5d SHA1: 711b42c123e3ad36ad18bcbc90e0abd8d677cad2 MD5sum: 34541561d5fabd8b33a7c1180ea3b4f2 Description: Kicksecure systems, VMs, server packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for server installations. Package: kicksecure-welcome-page Version: 3:7.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 1013 Depends: fonts-roboto-fontface, libjs-jquery Homepage: https://github.com/Kicksecure/kicksecure-welcome-page Priority: optional Section: misc Filename: pool/main/k/kicksecure-welcome-page/kicksecure-welcome-page_7.8-1_all.deb Size: 922724 SHA256: 708cf667cfdca5c80ffa0d56426a7ff7b3f769432f6fd76caf9630800fcf8b22 SHA1: b6fbbc3a283305f3a164359246920439a10f55cf MD5sum: 4bb1e3c3df017c71c7eff5b6031b8400 Description: Local Browser Homepage for Kicksecure Kicksecure specific browser start page. . Contains Kicksecure logo and Kicksecure links. . Safe to remove, if you know what you are doing. Package: legacy-dist Version: 3:20.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 156 Depends: helper-scripts, apt-forktracer, moreutils Conflicts: vbox-disable-timesync, whonix-legacy Breaks: kloak (<< 0:0.6.3-1) Replaces: kloak (<< 0:0.6.3-1), vbox-disable-timesync, whonix-legacy Provides: vbox-disable-timesync, whonix-legacy Homepage: https://github.com/Kicksecure/legacy-dist Priority: optional Section: misc Filename: pool/main/l/legacy-dist/legacy-dist_20.4-1_all.deb Size: 62444 SHA256: 611c02ea82b97c87b40be67eab7d1e0228702706c4c2da1b77d030d37d2a28a8 SHA1: ab3512b0fd4bccf8b4bd3ada7901f795e623477d MD5sum: 595e0f100d78f5031cc3a75a45204480 Description: Prepare older Build Versions of Derivatives for Upgrade Applies fixes required for upgrading from for example version 8.x to version 9.x etc. . Upgrades from version 7.x or older versions is unsupported. . Safe to remove. Package: libvirt-dist Version: 3:11.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 144 Depends: adduser, qemu-kvm, libvirt-daemon-system, libvirt-clients, virt-manager, gir1.2-spiceclientgtk-3.0, dnsmasq-base, helper-scripts, msgcollector Conflicts: whonix-libvirt Replaces: whonix-libvirt Provides: whonix-libvirt Homepage: https://github.com/Kicksecure/libvirt-dist Priority: optional Section: misc Filename: pool/main/libv/libvirt-dist/libvirt-dist_11.9-1_all.deb Size: 56092 SHA256: b1b025a28769cbbd1b2161846248bdc9944e57ef87c7a8854ff372f6bec60625 SHA1: 14f1a811a83c01c4b50fd8d61410bdc30cf48342 MD5sum: 1c42248785e3cb9576a18972f207c254 Description: Whonix Libvirt XML Files for KVM and QEMU Libvirt XML files for Whonix-Gateway, Whonix-Workstation, Whonix-Custom-Workstation and Whonix's internal network. . Whonix-Host grub branding, motd and issue banner. . Whonix-Host boot popup. . See also: - https://www.kicksecure.com/wiki/KVM - https://www.kicksecure.com/wiki/QEMU Package: live-config-dist Version: 3:10.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 309 Depends: helper-scripts, pkexec, rsync, libglib2.0-bin, xdg-user-dirs, qml6-module-qtquick-window Homepage: https://github.com/Kicksecure/live-config-dist Priority: optional Section: misc Filename: pool/main/l/live-config-dist/live-config-dist_10.0-1_all.deb Size: 148928 SHA256: 0b1aabc8072a2ccfbee726f6a1d5fc85e07a9258fa6670d5fe7d1b1c5c72328f SHA1: 0420d01f62486f7832e52939c84b4339ced44868 MD5sum: 249d19fd912f7e88dca828f3a036b8ff Description: calamares-settings-kicksecure and maybe calamares-settings-whonix Installed in Host ISO Live. . Supposed to be removed in Host installed. . Kernel parameters required for Live ISO. Package: lxqt-wayland-session Version: 0.2.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 473 Homepage: https://github.com/lxqt/lxqt-wayland-session Priority: optional Section: x11 Filename: pool/main/l/lxqt-wayland-session/lxqt-wayland-session_0.2.9-1_all.deb Size: 342168 SHA256: 2d40e8780f4396e8393102a03a506d3f9c75da33c5b8f6cdd1331ae389d1372c SHA1: 988b317717934e6292015f090f258a1dd539303e MD5sum: f4cbcc9f23e32b0ad007ec37a9eb8669 Description: Files needed for the LXQt Wayland Session Files needed for the LXQt Wayland Session: Wayland session start script, its desktop entry for display managers and default configurations for actually supported compositors. Package: mediawiki-shell Version: 3:5.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 179 Depends: helper-scripts, safe-rm, jq, retry, python3 Homepage: https://github.com/Kicksecure/mediawiki-shell Priority: optional Section: misc Filename: pool/main/m/mediawiki-shell/mediawiki-shell_5.9-1_all.deb Size: 60352 SHA256: 36ba4fecbd962abd5a49fe10bf67d6be1bb5cd581c7f2d9982b6d1d42ae29fd2 SHA1: 9db7e13c30c2d0b6358f43184f1aace4a481da8a MD5sum: 6526920af1867d6eceedf1d110a4e0bb Description: bash shell scripts for usage of MediaWiki API Download, upload changes to, and manage pages from MediaWiki wikis from the command line. . This tool may work on other wiki sites, but is primarily intended for management of the Kicksecure and Whonix wikis. Package: msgcollector Version: 3:16.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 234 Depends: python3, inotify-tools, procps, safe-rm, moreutils, init-system-helpers (>= 1.52) Conflicts: diverts-etc++bash.bash+-+logout Provides: diverts-etc++bash.bash+-+logout Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector_16.4-1_all.deb Size: 80888 SHA256: a2009da630dfc744fdb626d8f4960cb2f440e12f7a59e822ecf9ab795dc0d483 SHA1: f9505118d5dc711a148b33c878d06d6cfdfe7528 MD5sum: 68de0d9736b52a4744a63655127fc6bf Description: Command Line Interface Messages Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in terminal user interfaces (CLI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as ncurses but has of course much less and very different features. . For graphical user interface (GUI) support also install package msgcollector-gui. Package: msgcollector-gui Source: msgcollector Version: 3:16.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 85 Depends: msgcollector, python3-pyqt5, qtwayland5, yad, libnotify-bin, lxqt-notificationd, x11-utils, gnome-colors-common Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector-gui_16.4-1_all.deb Size: 57404 SHA256: 5765f97ecc0e3253aa11ff2400a5f4a4913b12dae85fa52514cb225bec1ae54f SHA1: 62234682948675b2ed9ae8f03656fb128e0c6a7c MD5sum: 657d91c3ba52969274d55f20dbe6c7dc Description: Graphical User Interface Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in graphical user interfaces (GUI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as Qt or GDK but has of course much less and very different features. . A metapackage that installs required dependencies for graphical user interface support. Package: open-link-confirmation Version: 3:8.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 105 Depends: sensible-utils, icon-pack-dist, msgcollector, xdg-utils Recommends: tb-starter, tb-updater Breaks: tb-default-browser (<< 3:7.5-1) Replaces: tb-default-browser (<< 3:7.5-1) Homepage: https://github.com/Kicksecure/open-link-confirmation Priority: optional Section: misc Filename: pool/main/o/open-link-confirmation/open-link-confirmation_8.4-1_all.deb Size: 35380 SHA256: 6d420787ef418beee3ee1690b77493f573ebc667537cee2610c2e176e80d6282 SHA1: 3044fc0081de60c782d20309318b08844528f658 MD5sum: d3d350a34374335695f2eaa138ae67e8 Description: confirmation dialog before opening links or files Provides a safety wrapper for opening URLs or files. Prompts the user for confirmation before launching the associated application, to prevent accidental or unsafe link openings. . Integrates with msgcollector to display graphical confirmation and error dialogs. Uses helper-scripts' sanitize-string to strip potentially malicious Unicode or HTML input, trims displayed addresses to 128 characters, and logs diagnostic information through msgcollector. . Detects execution context: * On Kicksecure and Whonix-Workstation systems, links can be opened after explicit confirmation in a supported browser. * On Whonix-Gateway (anon-gw-base-files installed), opening of links is blocked for security reasons. Local files are instead opened in the text editor defined by $EDITOR (defaulting to FeatherPad or Mousepad). * In Qubes OS Template, integrates with qvm-open-in-dvm for secure link opening in disposable VMs. Handles refusal responses and displays informative error dialogs. * When booted in "sysmaint" (system maintenance) mode, link opening is refused to avoid network activity during administrative sessions. . Automatically detects and uses installed browsers such as: brave-browser, chromium, firefox, mullvad-browser, browser-choice, or torbrowser (Whonix starter wrapper). Falls back to x-www-browser if none of the above are available. . Provides infinite recursion protection to prevent self-invocation loops, sets environment variables (OPEN_LINK_CONFIRMATION, OPEN_LINK_CONFIRMATION_COUNTER), and adjusts XDG_CONFIG_DIRS and XDG_DATA_DIRS to register itself as a compliant XDG handler and default $BROWSER. . Designed for security-focused environments such as Kicksecure, Whonix, and Qubes OS. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: privleap Version: 3:5.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 459 Depends: python3, python3-pam, python3-sdnotify Homepage: https://www.kicksecure.com/wiki/Privleap Priority: optional Section: admin Filename: pool/main/p/privleap/privleap_5.5-1_all.deb Size: 81784 SHA256: df4ae0fb21993b8a5b33ac53ea2719b6baa0dc12c22c9c68d56c2dc6ee71b616 SHA1: 56db9c3a60d96b2fbc25bc0e947b10562715258f MD5sum: d7232fa2b78bcb405cffc2aa10da0c6f Description: Limited privilege escalation framework Provides a privilege escalation framework for running pre-defined command sequences ("actions") as root. . Does not require a SUID executable. Package: rads Version: 3:8.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 115 Homepage: https://www.kicksecure.com/wiki/RAM_Adjusted_Desktop_Starter Priority: optional Section: misc Filename: pool/main/r/rads/rads_8.6-1_all.deb Size: 36832 SHA256: 1ab48f77f6a4db16a8d9dbee7daa36103ac0bf33d20882ebf1d7d0a012d23467 SHA1: 118b96d5f62e10ea754a7823f2b5e0bf23b57dfd MD5sum: ed191a32b97cd40ee41adb8c140d0bdd Description: RAM Adjusted Desktop Starter If there is more than X MB RAM in total, the desktop environment will be started. . If less than X MB RAM in total (for example, only 196 MB RAM in total), no desktop environment will be started. . This should be quite convenient, because users with low RAM could reduce Y MB and even if they sometimes wanted to configure/check something, they could assign 512 RAM and automagically boot into the graphical desktop. There are also many settings in /etc/rads.d/ (stackable) to configure this feature, so if you want, you can also add a lot RAM, but not boot into a desktop environment, or use different display managers and so on. . Most useful in virtual machines. Package: ram-wipe Version: 3:4.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 82 Depends: helper-scripts, dracut, secure-delete, kexec-tools, systemd-cryptsetup Homepage: https://github.com/Kicksecure/ram-wipe Priority: optional Section: misc Filename: pool/main/r/ram-wipe/ram-wipe_4.5-1_all.deb Size: 25824 SHA256: 6101f56bf8b114a0671cbed7529ab5d004fb61248e64fc70df08270fd54bb0c9 SHA1: 5ba513911fc0bb102ba210569cdfb94357f2a28f MD5sum: 2e1b65825ba3f8719c1b0edfd1c91c60 Description: Wipe RAM on shutdown and reboot Helps protect sensitive data by wiping RAM during shutdown and reboot, which can help defend against cold boot attacks. . This package requires dracut. It is incompatible with systems using initramfs-tools unless they are switched to dracut. . Implemented as the dracut module ram-wipe. . Only tested on systemd-enabled systems. . User documentation: https://www.kicksecure.com/wiki/ram-wipe . Design documentation: https://www.kicksecure.com/wiki/Dev/RAM_Wipe . Discussion: https://forums.whonix.org/t/is-ram-wipe-possible-cold-warm-boot-attack-defense . Related links: * https://www.kicksecure.com * https://www.kicksecure.com/wiki/ram-wipe * https://www.kicksecure.com/wiki/Dev/RAM_Wipe * https://www.kicksecure.com/wiki/dracut * https://www.kicksecure.com/wiki/systemd Package: repository-dist Version: 3:13.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 145 Depends: helper-scripts, lsb-release, moreutils, python3:any, sq Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist_13.4-1_all.deb Size: 58656 SHA256: 5eb7f8a7090ac82f424ea945d6d04fc70cc80fc70b491b44ddd12012710bb3ef SHA1: c087b8d9e2364f263a9f242587fb3b3c3e4e0ce8 MD5sum: 3a882a295f681775210b6d4d77fa2b98 Description: Derivative APT Repository Command Line Interface (CLI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . Derivative's APT Repository is not enabled by default. Some users prefer this for trust/security reasons. . On first boot of Derivative, the Derivative Repository Tool gets automatically started by setup-dist. The user is free to either leave Derivative's repository disabled or to configure it as desired. . Technically speaking, this tool creates or deletes file `/etc/sources.list.d/derivative.sources`. . Using APT `signed-by`. Package: repository-dist-wizard Source: repository-dist Version: 3:13.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 75 Depends: pkexec, python3-pyqt5, python3:any, qtwayland5 Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist-wizard_13.4-1_all.deb Size: 41460 SHA256: c9a075ec8fa9540ec1c8c674b7d7c5d83ea3659e1a1887505de1ccb6371d9e6d SHA1: ca9cbc5e3189c6e410cbca3474627beeecee4c09 MD5sum: c3879ac99db0ef1e4b0d4d12b7dd6a4b Description: Derivative APT Repository Graphical User Interface (GUI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . This is a metapackage depending on the required packages for the GUI (Graphical User Interface). Package: ro-mode-init Version: 3:3.5-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 60 Depends: live-boot, live-boot-initramfs-tools, live-tools Conflicts: grub-default-live, grub-live Replaces: grub-default-live, grub-live Provides: boot-live Homepage: https://github.com/Kicksecure/ro-mode-init Priority: optional Section: misc Filename: pool/main/r/ro-mode-init/ro-mode-init_3.5-1_all.deb Size: 19804 SHA256: 03a379e32830c06b3062f98e95906998cd859fbadfb048163b6508604cbd0cab SHA1: 965cce6eb3b2a4fea68da6c66235bb1b51ac72c4 MD5sum: af83e2e6ed9dec3b6ce946047d7b4812 Description: Detects read-only disks and automatically enables live-boot Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . No claims are made with regard to anti forensics. Package: sandbox-app-launcher Version: 0:7.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 132 Depends: sudo, bubblewrap, apparmor, libseccomp-dev, helper-scripts, dbus-x11 Homepage: https://www.kicksecure.com/wiki/Sandbox-app-launcher Priority: optional Section: misc Filename: pool/main/s/sandbox-app-launcher/sandbox-app-launcher_7.4-1_all.deb Size: 49216 SHA256: 1ebefe283af0c7cccfd28249f7412c715cdd3d2fc16fe80540a2ce7a8913cee8 SHA1: 4db416b326048d19d3162e842cba75d58b2c3c85 MD5sum: 3d66b876d552ddd4d1ac537db73acb05 Description: application launcher to start apps in a restrictive sandbox sandbox-app-launcher runs each app as its own user, in a bubblewrap sandbox and confined by apparmor. . The directory, `/shared`, is shared across all app sandboxes to transfer files across. . This implements a permissions system to configure what apps can access. There are currently 5 available permissions: . * Network access . * Webcam access . * Microphone access . * Shared storage access (read-only or read-write) . * Dynamic native code execution . All apps the user installs will be automatically configured to run in the sandbox and a prompt will ask the user which permissions they wish to grant the application (not implemented yet). . Currently a WIP and not for actual use. Package: sdwdate Version: 3:28.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 348 Depends: bc, helper-scripts, adduser, gcc, libc6-dev, privleap, python3-stem, python3-dateutil, python3-socks, python3-sdnotify, python3-requests, python3, tor, util-linux-extra Recommends: timesanitycheck, bootclockrandomization Conflicts: time-daemon Provides: time-daemon Homepage: https://www.kicksecure.com/wiki/Sdwdate Priority: optional Section: misc Filename: pool/main/s/sdwdate/sdwdate_28.1-1_all.deb Size: 154912 SHA256: 6ffe6c87a19485b2e08824be606940cf77dec3287b428c1c00a9f1df80238553 SHA1: eddbd4bb834ede7e6ab90487b33986dcbb1b4a7e MD5sum: e69c1a8ef33180f9d52e60778f81b919 Description: Secure Distributed Network Time Synchronization Time keeping is crucial for security, privacy, and anonymity. Sdwdate is a Tor friendly replacement for rdate and ntpdate that sets the system's clock by communicating via onion encrypted TCP with Tor onion webservers. . At randomized intervals, sdwdate connects to a variety of webservers and extracts the time stamps from http headers (RFC 2616). Using sclockadj option, time is gradually adjusted preventing bigger clock jumps that could confuse logs, servers, Tor, i2p, etc. . This package contains the sdwdate time fetcher and daemon. No installation on remote servers required. To avoid conflicts, this daemon should not be enabled together with ntp or tlsdated. Package: sdwdate-gui Version: 1:14.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 291 Depends: privleap, python3, python3-pyqt5, python3-pyinotify, qtwayland5, helper-scripts, sdwdate, adduser, python3-schema Homepage: https://www.kicksecure.com/wiki/sdwdate-gui Priority: optional Section: misc Filename: pool/main/s/sdwdate-gui/sdwdate-gui_14.3-1_all.deb Size: 108752 SHA256: be00156a140b799246e187d82745c484a6316447e38964ec68d6a6dec0446481 SHA1: ea3e90ffbb19a116f9649eec649f836924e0b9cb MD5sum: effdcfc33c278497b8c81eeaf1da904a Description: Sdwdate Monitor sdwdate-gui is a systray icon monitor for sdwdate: checks sdwdate's status and modify the tray icon accordingly. In addition, it allows the user to restart sdwdate and view the log. Package: security-misc-desktop Source: security-misc Version: 3:52.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 220 Depends: security-misc-shared Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-desktop_52.3-1_all.deb Size: 181480 SHA256: 2b58b89263be509f4141c1c5de824a33bbb52b119a20458f70d1cf3381145d99 SHA1: 0457990ba43715522e6759cf54fdbca20c28102f MD5sum: 8d894258e0b352464fb438a1f0fdf758 Description: Security improvements for desktops For desktops. . (Or servers running a desktop?) Package: security-misc-server Source: security-misc Version: 3:52.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 208 Depends: security-misc-shared Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-server_52.3-1_all.deb Size: 180348 SHA256: 1ee334a70f8a6a6caeb8c5a850f68688d708e1d51687e066dd49585395df5c72 SHA1: c91885b17202060438f547efd45dbf29b2cf14cb MD5sum: 5a1f2c6ed9e2a87be6a3b8abcef97808 Description: Security improvements for servers For servers. . (Or desktops running a server?) Package: security-misc-shared Source: security-misc Version: 3:52.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 812 Depends: adduser, apparmor-profile-dist, build-essential, dmsetup, helper-scripts, libcap2-bin, libdbus-1-dev, libglib2.0-bin, libpam-modules-bin, libpam-runtime, libpam-umask, libsystemd-dev, memlockd, pkgconf, python3, secure-delete, dconf-gsettings-backend | gsettings-backend, debconf (>= 0.5) | debconf-2.0, init-system-helpers (>= 1.52) Conflicts: security-misc Replaces: anon-gpg-tweaks, security-misc, swappiness-lowest, tcp-timestamps-disable Provides: security-misc Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-shared_52.3-1_all.deb Size: 276304 SHA256: df47d9dcba1e3d3c56e641c7eecb931957a33fb24b2c5f11c07740d267a67565 SHA1: 62b15962bbf71c09530a952ffd26ddd352e4a2a7 MD5sum: 1ad6a9aa63da0877b4ed77802c00a031 Description: Enhances Miscellaneous Security Settings https://github.com/Kicksecure/security-misc/blob/master/README.md . https://www.kicksecure.com/wiki/Security-misc . Package security-misc-desktop and/or security-misc-server may also be useful. . Discussion: . Happening primarily in Whonix forums. https://forums.whonix.org/t/kernel-hardening-security-misc/7296 Package: serial-console-enable Version: 3:4.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 62 Homepage: https://github.com/Kicksecure/serial-console-enable Priority: optional Section: misc Filename: pool/main/s/serial-console-enable/serial-console-enable_4.8-1_all.deb Size: 18532 SHA256: 78012c6f10b688df444f47defc4e78e8541f56e3dc5f9527a62605b734630004 SHA1: 30c24e1b2f2502b8831786b9ae787afe34ce667f MD5sum: 1721a728deee4e005dfc536d477a50f6 Description: Enables serial console Ships a /etc/default/grub.d/30_serial_console.cfg configuration file, that enables serial console. . Enables /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service by creating a symlink from: /lib/systemd/system/serial-getty@.service to: /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service . Useful for serial console login such as into Whonix KVM VMs from the host operating system. . Forum discussion: https://forums.whonix.org/t/how-do-i-enter-the-whonix-shell-from-cli/7271 . Safe to remove if you do not require serial console login such as: virsh console vm-name Package: setup-dist Version: 3:12.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Depends: helper-scripts, dialog, privleap, menu, python3 Conflicts: whonixsetup Replaces: whonixsetup Provides: whonixsetup Homepage: https://github.com/Kicksecure/setup-dist Priority: optional Section: misc Filename: pool/main/s/setup-dist/setup-dist_12.2-1_all.deb Size: 42944 SHA256: 7b69c168cbb510d440b213227a0d76848d0233b6b3729c3f985d9871a5c64909 SHA1: ad3af6bf771d870c89ea77bb98ff5c91e234125d MD5sum: 444b900cc2c53615f0bd0c9a15130345 Description: First Time Connection Setup Disclaimer. . When the derivative starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. setup-dist is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: setup-wizard-dist Version: 3:13.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 140 Depends: setup-dist, python3-yaml, helper-scripts, python3, x11-xserver-utils Recommends: icon-pack-dist Conflicts: whonix-setup-wizard Replaces: whonix-setup-wizard Provides: whonix-setup-wizard Homepage: https://github.com/Kicksecure/setup-wizard-dist Priority: optional Section: misc Filename: pool/main/s/setup-wizard-dist/setup-wizard-dist_13.3-1_all.deb Size: 61352 SHA256: 3a1c258f029d5f6898d8ca1b1b877eaa27c17c1834652bd8a7aa5410e10ace82 SHA1: 6701fe2e72a7da90befdead4d54f3b3d54e60689 MD5sum: 21e793fcb975d27b9ecb44dc6369ab7c Description: First Boot Setup Disclaimer. . When distribution starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. Anon Connection Wizard is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: swap-file-creator Version: 3:9.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 90 Depends: helper-scripts, bc, safe-rm Homepage: https://www.kicksecure.com/wiki/Swap-file-creator Priority: optional Section: misc Filename: pool/main/s/swap-file-creator/swap-file-creator_9.6-1_all.deb Size: 38056 SHA256: 3379903f654a47c09334c1fc293343648b8f2894c1e796f7400ccc342b0a61fe SHA1: e0395da9df8226f610a9a338e4588beaa3642f7a MD5sum: 91dc9803f75112fa3bb563aecd291257 Description: Swap file creator for LUKS-encrypted systems swap-file-creator automatically creates and enables a swap file on systems using LUKS full-disk encryption. A new swap file is created on every boot if the target path resides on a LUKS-encrypted device. . By default, no swap file is created on unencrypted disks. This can be optionally overridden (not recommended for privacy), allowing swap-file- creator to operate on unencrypted storage as well. . The tool is particularly useful for systems with low RAM, such as virtual machines, where lack of swap may cause freezing during upgrades or heavy memory operations. . The swap file can be shredded on shutdown for additional privacy, if enabled. Various parameters, including file path, custom size, and pre-checks, can be configured through /etc/default/swap-file-creator. . Earlier versions provided an additional dm-crypt layer and created a swap file encrypted with an ephemeral key. Due to a Linux kernel bug, this functionality is no longer possible as of Debian trixie, and the swap file is instead placed directly on top of LUKS full-disk encryption. More details: https://lore.kernel.org/lkml/20251111231835.1232ad8f@kf-m2g5/T/#u Package: sysmaint-panel Version: 3:5.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 129 Depends: helper-scripts, pkexec, python3, python3-pyqt5, safe-rm Homepage: https://www.kicksecure.com/wiki/System_Maintenance_Panel Priority: optional Section: admin Filename: pool/main/s/sysmaint-panel/sysmaint-panel_5.0-1_all.deb Size: 33100 SHA256: e7242b9bb1ce6dc72ef885652e5cd9d1d738b966311bf1e25948114060310c26 SHA1: febaf4aeb583863e6410462d2b8310fe26184991 MD5sum: e7eff2034d0dabaa34542e263751e061 Description: System Maintenance Panel The System Maintenance Panel (sysmaint-panel) allows the user to perform several common system maintenance and administration tasks. It can be used to install, remove, and update software, create and remove user accounts, and enable or disable password protection and autologin for user accounts. . Provides a minimal session that can be booted into for system maintenance tasks on Linux distributions. Package: systemcheck Version: 3:51.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 647 Depends: dist-base-files, python3, signify-openbsd, curl, ca-certificates, msgcollector, psmisc, vrms, libarchive-tools, helper-scripts, net-tools, privleap, adduser, security-misc-shared, spectre-meltdown-checker, apparmor-profile-dist, safe-rm Recommends: icon-pack-dist, msgcollector-gui Conflicts: apparmor-profile-whonixcheck, whonixcheck Replaces: apparmor-profile-whonixcheck, whonixcheck Homepage: https://www.kicksecure.com/wiki/systemcheck Priority: optional Section: misc Filename: pool/main/s/systemcheck/systemcheck_51.5-1_all.deb Size: 212288 SHA256: a51f82aaaa93d1cc99058a61ddeadc57fa936e3ee10acb2b0e226086c8648825 SHA1: 41fbfc04046e0206d9444bdb65352df6e35d22ad MD5sum: 9b9ea4f42544f2be9f3d56365d06e565 Description: Anonymity and security check Checks many important aspects for better security. . Only checks things. Does not change things. . Safe to remove. Package: tb-default-browser Source: open-link-confirmation Version: 3:8.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 62 Depends: open-link-confirmation Homepage: https://github.com/Kicksecure/open-link-confirmation Priority: optional Section: oldlibs Filename: pool/main/o/open-link-confirmation/tb-default-browser_8.4-1_all.deb Size: 29312 SHA256: f2b534668abbdf0bdc07e704fa66aa085ded716bc5db9d4fb12e94bf844ccdcf SHA1: 0b6d692622f90aafe1ee86ed00686f165ca74085 MD5sum: 6753c8c43fc120ddeee834101dbe4820 Description: transitional package This is a transitional package. It can safely be removed. Package: tb-starter Version: 3:18.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 172 Depends: msgcollector, privleap Recommends: tb-updater, open-link-confirmation, icon-pack-dist Provides: torbrowser-launcher Homepage: https://github.com/Kicksecure/tb-starter Priority: optional Section: misc Filename: pool/main/t/tb-starter/tb-starter_18.7-1_all.deb Size: 68624 SHA256: d5ea93a3575827e5f5ae0f1ee0bf14fbcacfe1b200916174d1a03963c568d804 SHA1: f4513ca94133150c17b462bdacdaa982190d0560 MD5sum: 4a105738f10d816784400e9c82d688f3 Description: Tor Browser Starter (by Whonix developers) Both, a starter for Tor Browser. Provides security hardening, integration with Debian, Whonix and Qubes. . Starter. . - Tor Browser Starter start menu entry and `/usr/bin/torbrowser` starter. Starts `/home/user/.tb/tor-browser/start-tor-browser`. . When config option tb_hardening=true is set or when using command line option --hardening, firejail will be used. . Uses open-link-confirmation if available. . Prompts to install the browser if not yet installed. . Changes directory into browser directly before startup. . Custom homepage support. . Qubes integration. . Sanity tests: - Aborts if detected being run as root. - Aborts in Qubes TemplateVM. - Aborts in Qubes DVM Template. - Waits for Qubes mount dirs and gui agent being ready. . In Qubes AppVM copies browser from root image to private image at first start. . Tor Browser documentation by Whonix. . - https://www.whonix.org/wiki/Tor_Browser - https://www.whonix.org/wiki/Tor_Browser/Advanced_Users . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tb-updater Version: 3:44.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 502 Depends: msgcollector-gui, curl, psmisc, pv, libarchive-tools, jq, libdbus-glib-1-2, privleap, python3, acl, helper-scripts, sq, sqop Recommends: tb-starter, icon-pack-dist Suggests: open-link-confirmation Homepage: https://github.com/Kicksecure/tb-updater Priority: optional Section: misc Filename: pool/main/t/tb-updater/tb-updater_44.7-1_all.deb Size: 260220 SHA256: 87a1f914646632e1b5cf6488ad757e9d70e3860371652652ce541ead6ab240d9 SHA1: 536234b3f47fa677e9fad284d44273128ffd0140 MD5sum: 1780287348f18eebeba94128622f6a77 Description: Tor Browser Downloader by Whonix developers Automates download and verification of Tor Browser from The Tor Project's website. Useful for initial installation of Tor Browser, clean re-installations of Tor Browser and keeping newly created Qubes AppVMs inherited from updated Qubes TemplateVMs can ship up to date versions of Tor Browsers. . Incapable of preserving of updating and preserving user data. Use Tor Browser's internal updater for that purpose. Notifies about already exiting installations of Tor Browser. Renamed rather than deletes old versions of Tor Browsers to avoid user data loss. . Has a cli and a gui mode. Can auto detect latest version numbers or use user configured version numbers. Comes with a download confirmation screen that lets users choose which version to download. [1] Has a installation confirmation screen [2] that enables users to detect indefinite freeze and rollback attacks. . Integrates well with tb-starter and open-link-confirmation package as well as with Qubes. . Without the helper-scripts package installed, the GUI will not move the progress bar. . If you have the helper-scripts package installed, it will show a nicer progress bar when run in terminal and more meaningful curl exit code messages, when curl failed. . When having the helper-scripts package installed (recommended for Anonymity Distributions), Tor Browser Downloader will check, that Tor is enabled, that no package manager is currently running and that Tor finished bootstrapping before download attempts. . Supports being run inside chroot and from Debian maintainer postinst script. . Qubes integration: . - Up-to-date browser versions made available to freshly created AppVMs and DispVMs. - In DispVM mounts browser folder which resides in root image to user home folder rather than copying for faster browser startup. . This package is produced independently of, and carries no guarantee from, The Tor Project. . [1] https://www.whonix.org/wiki/Tor_Browser#Download_Confirmation_Screen [2] https://www.whonix.org/wiki/Tor_Browser#Installation_Confirmation_Screen Package: timesanitycheck Version: 3:9.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 80 Homepage: https://www.whonix.org/wiki/Dev/TimeSync Priority: optional Section: misc Filename: pool/main/t/timesanitycheck/timesanitycheck_9.1-1_all.deb Size: 28788 SHA256: a84711e5d2cebf295841b3c3cd2db364d1ffb2767834325518913451e4cc7e0c SHA1: 551e3aec3016ca42ea09ec8c39b3eb2c6ef4088c MD5sum: 155116e031fab5d42a177e88076dc309 Description: Checks if the system clock is sane between build timestamp and expiration date Reports, if clock is sane and not slower than build timestamp or faster than expiration date (configurable, default currently set to 17 MAY 2033 10:00:00). . This should catch situations, where the host's clock is too much off (CMOS battery defect, user mistakenly set a very wrong date, etc.), resulting in network time synchronization tools (such as sdwdate) no longer being able to correct the clock; catch eventual bigger bugs in network time synchronization tools; and some types of attacks on network time synchronization. Package: tor-control-panel Version: 1:8.2-1 Architecture: all Maintainer: troubadour Installed-Size: 188 Depends: anon-connection-wizard, helper-scripts, pkexec, mate-polkit, python3, python3-ipy, python3-pyqt5, python3-stem, qtwayland5 Recommends: obfs4proxy, tor Homepage: https://www.whonix.org/wiki/Tor-control-panel Priority: optional Section: misc Filename: pool/main/t/tor-control-panel/tor-control-panel_8.2-1_all.deb Size: 71928 SHA256: e5e43f0dc2640be39f0ff51aebeeb6ae2c399804929bafbb7d7ca0e28486a8c0 SHA1: 50a2085b4ed4309aab145dab72562d0272b177f0 MD5sum: 045059ba82f449889cdcedc63e200769 Description: Tor Control Graphical User Interface WARNING: Not (yet) a standalone ready to use outside of Whonix: . tor-control-panel is a Tor controller. . tor-control-panel is produced independently from the Tor anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. Package: tor-ctrl Version: 3:6.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 83 Depends: tor, netcat-openbsd, xxd, safe-rm Homepage: https://gitweb.torproject.org/torspec.git/tree/control-spec.txt Priority: optional Section: misc Filename: pool/main/t/tor-ctrl/tor-ctrl_6.6-1_all.deb Size: 30584 SHA256: ab50296e5f07f7e920cdcae7826c9ad4aff395d0194807e43d8c237ebe480052 SHA1: 89afc86c61dabdaa5a4436985dd950823545ea41 MD5sum: edb8eedb2f6362a37b3eaeb6f488619c Description: Tor controller command line tool Command line tool for setting up stream for communication from the Tor Controller's (client) to a Tor process (server). The client send commands using TCP sockets or Unix-domain sockets and receive replies from the server. . https://gitweb.torproject.org/torspec.git/tree/control-spec.txt . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tor-geoipdb Source: tor Version: 0.4.9.6-1~d13.trixie+1 Architecture: all Maintainer: Peter Palfrader Installed-Size: 25124 Depends: tor (>= 0.4.9.6-1~d13.trixie+1) Breaks: tor (<< 0.2.4.8) Replaces: tor (<< 0.2.4.8) Homepage: https://www.torproject.org/ Priority: optional Section: net Filename: pool/main/t/tor/tor-geoipdb_0.4.9.6-1~d13.trixie+1_all.deb Size: 2739552 SHA256: a7e6c605a0ef8af68a5596803c3b93dbba322d8d1705f74db490b534967b9ded SHA1: f86410b3858fb9435931e79f69995e970868bff1 MD5sum: d6a6e0356d9a06a8b024d5a821b09ece Description: GeoIP database for Tor This package provides a GeoIP database for Tor, i.e. it maps IPv4 addresses to countries. . Bridge relays (special Tor relays that aren't listed in the main Tor directory) use this information to report which countries they see connections from. These statistics enable the Tor network operators to learn when certain countries start blocking access to bridges. . Clients can also use this to learn what country each relay is in, so Tor controllers like arm or Vidalia can use it, or if they want to configure path selection preferences. Package: usability-misc Version: 3:37.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 758 Depends: policyrcd-script-zg2, adduser, python3, damngpl, helper-scripts (>= 3:35.3-1), dkms, dconf-gsettings-backend | gsettings-backend Conflicts: desktop-config-dist (<< 3:13.8-1) Replaces: gpl-sources-download, grub-screen-resolution, scurl Homepage: https://github.com/Kicksecure/usability-misc Priority: optional Section: misc Filename: pool/main/u/usability-misc/usability-misc_37.7-1_all.deb Size: 212996 SHA256: 4c77ce60803472c740eaef9a19dacefe6f099557a0069c695ff9be4ea3db2eea SHA1: 742d5f04482f46a0274b3f557f80808923121a7c MD5sum: a15993a350c6bf49416336783d389430 Description: Misc usability improvements Enables auto login for user `user` in `lightdm`. `/etc/lightdm/lightdm.conf.d/30_autologin.conf` https://www.kicksecure.com/wiki/Desktop#Disable_Autologin . Creates folders /home/user/Downloads and /home/user/Pictures. . Adds account "user" to group libvirt as well as to group kvm. . Ships a file /etc/sudoers.d/user-passwordless that contains comments and "#user ALL=(ALL:ALL) NOPASSWD:ALL". Lets account "user" easily run all commands without password. Disabled (out commented) by default. . Simplifies running OpenVPN as unprivileged user. . Ships a FoxyProxy add-on configuration file for use with Tor Browser. . Sets mousepad as the default editor for environment variable VISUAL is unset and if mousepad is installed. . Disable sudo default lecture. /etc/sudoers.d/sudo-lecture-disable . Add pwfeedback to sudo Defaults so password asterisks are shown while typing. /etc/sudoers.d/pwfeedback . qterminal: . Ships gsudoedit, a wrapper to run sudoedit with a graphical editor. . Bisq workaround "sudo mkdir -p /usr/share/desktop-directories" as per https://github.com/bisq-network/bisq/issues/848 . gpl_sources_download GPL'ed source code of all installed packages. Used damngpl to get a list of all GPL'ed packages, then downloads them using apt-get source. . SSL curl wrapper: Simple wrapper called scurl, that adds "--tlsv1.3 --proto =https" in front of all invocations of "curl" when running "scurl". . Sets 1024x768 as boot screen resolution Ships a /etc/default/grub.d/30_screen_resolution.cfg configuration file, that injects "vga=0x0317" into the GRUB_CMDLINE_LINUX_DEFAULT variable. . Ships `zsh` derivative configuration settings folder `/etc/zsh`. But does not configure `zsh` as default shell. (That is up to package `dist-base-files`.) . Enable systemd-journald audit transport. (`deb-systemd-helper enable systemd-journald-audit.socket`) Required by helper-scripts `apparmor-info` and `apparmor-watch`. Debian no longer enables systemd-journald-audit.socket by default. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1038993 . Creates Secure Boot MOK key using 'shim-signed-mok-setup' (provided by package 'helper-scripts') during installation. Package: user-sysmaint-split Version: 3:12.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 205 Pre-Depends: helper-scripts Depends: security-misc-shared, adduser, libglib2.0-bin Breaks: qubes-core-agent-passwordless-root (>= 1) Homepage: https://github.com/Kicksecure/user-sysmaint-split Priority: optional Section: misc Filename: pool/main/u/user-sysmaint-split/user-sysmaint-split_12.0-1_all.deb Size: 56492 SHA256: d463ebae1b912281fd10b7b792f94722395bf0dc9cfe79a25cbc6916b71c7091 SHA1: b7da0f1303a9089bbfeb32008d7374eb2645f279 MD5sum: 32708120edb7fa4a69d2f494e1cff34e Description: Role-Based Boot Modes - user versus sysmaint Adds a GRUB boot menu entry: "PERSISTENT Mode | SYSMAINT Session | system maintenance tasks" . Makes Privilege Escalation Tools (such as 'sudo', 'su', 'pkexec') inaccessible to limited user accounts such as account "user". . Adds kernel parameter "boot-role=sysmaint" and "systemd.unit=sysmaint-boot.target". Package: vm-config-dist Version: 3:16.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 205 Depends: adduser, 7zip, helper-scripts, python3, python3-pyudev, python3-schema Replaces: power-savings-disable-in-vms, shared-folder-help Homepage: https://github.com/Kicksecure/vm-config-dist Priority: optional Section: misc Filename: pool/main/v/vm-config-dist/vm-config-dist_16.1-1_all.deb Size: 62788 SHA256: 58142a1b8cb9c118d738b6bdf08745a4f0930f61b7f2d794c2453364294f0429 SHA1: 14a4fbb6846b948676f8af6a541902ea0a62005e MD5sum: 4c2398f143b09e1a60eab05bc272e9ed Description: usability enhancements inside virtual machines Sets environment variable `QMLSCENE_DEVICE=softwarecontext` as a workaround for "Automatic fallback to softwarecontext renderer". . It is not useful to open a screensaver or to power down the desktop for operating systems that are run inside VMs. There is no real display that could be saved and no real power that could be conserved. From a usability perspective, it is also counterintuitive when looking at the VM window and only seeing a black screen. Therefore, it makes sense to disable power savings in VMs. `/etc/profile.d/20_power_savings_disable_in_vms.sh` `/etc/X11/Xsession.d/20_software_rendering_in_vms.sh` . Makes setting up a shared folder for virtual machines a bit easier. . * Creates a folder `/mnt/shared` with `chmod 777`, adds a group "vboxsf", and adds account "user" to group "vboxsf". Facilitates auto-mounting of shared folders. . * Helps using shared folders with VirtualBox and KVM a bit easier (as in requiring fewer manual steps from the user). . * `/lib/systemd/system/mnt-shared-vbox.service` * `/lib/systemd/system/mnt-shared-kvm.service` . Sets screen resolution to 1920x1080 by default for VMs in VirtualBox and KVM. This is a workaround for the low screen resolution of 1024x768 at first boot. . Installs VirtualBox guest additions if the package `virtualbox-guest-additions-iso` is installed, if the environment variable `dist_build_virtualbox=true` is set, or if running inside VirtualBox. (`systemd-detect-virt` returning `oracle`) `/usr/bin/vbox-guest-installer