Package: age-api Version: 3:0.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 53 Depends: helper-scripts Homepage: https://www.kicksecure.com/wiki/age-api Priority: optional Section: misc Filename: pool/main/a/age-api/age-api_0.5-1_all.deb Size: 15184 SHA256: 916db52c6bafef61f180e291ce40827621f64c2745276fc4421b3a987b84f262 SHA1: e7c685c2fe262a9c6005ea75b228fb16e496604a MD5sum: 7e19ec174822e839c2c66df8a8cf1bc7 Description: Local age bracket storage and query helper (age signaling) DRAFT: Nothing has been decided yet. Much better places to get further information: * https://www.kicksecure.com/wiki/age-api * https://forums.whonix.org/t/whonix-adding-age-verification/22969 . age-api provides a minimal local mechanism to store an age bracket and query it for age-signaling use cases. . The age-api-query tool outputs a machine-readable age bracket number on stdout and a human-readable description on stderr. . DRAFT: Final implementation - if any - would look much different from what is currently implemented. . See also: https://www.kicksecure.com/wiki/age-api Package: anon-apt-sources-list Version: 3:7.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 78 Depends: fasttrack-archive-keyring Homepage: https://github.com/Kicksecure/anon-apt-sources-list Priority: optional Section: misc Filename: pool/main/a/anon-apt-sources-list/anon-apt-sources-list_7.6-1_all.deb Size: 30792 SHA256: fe0bc239bb65379b9c0a4516611ad96918f38b9d578fb5115e106ae19d5a2db6 SHA1: 739e27af4c22781789a65d7adab509a1a016929d MD5sum: f5087c1b5f7178e63c010e6a030b133d Description: Kicksecure APT and Flatpak Repository Configuration Configuring APT and Flatpak sources: - Includes Debian APT repositories (main, updates, backports, fasttrack, security) - Incorporates Debian APT components (main, contrib, non-free, non-free-firmware) - Integrates the Flathub repository (verified and floss subsets only) . Flatpak: - Official Flathub repository only. - Uses subset verified_floss, which means only verified applications and freedom software can be installed by default. . Provides configuration files: - /etc/apt/sources.list.d/debian.sources for APT sources - /etc/flatpak/remotes.d/flathub.flatpakrepo for Flatpak sources . A Discussion on Distribution Maintenance Strategies: . The more standard way would indeed be populating /etc/apt/sources.list at install or build time and leaving /etc/apt/sources.list.d alone. . The idea of managing /etc/apt/sources.list.d/debian.sources for the user is, the security-focused distribution maintainers can decide when it is a better "change stable to oldstable", "keep wheezy as long as needed to work out [eventual!] issues that would break during upgrade to jessie" and such. Package: anon-connection-wizard Version: 1:11.3-1 Architecture: all Maintainer: iry Installed-Size: 266 Depends: helper-scripts, pkexec, mate-polkit, privleap, python3, python3-pyqt5, python3-stem, python3-yaml, qtwayland5 Recommends: obfs4proxy, tor Homepage: https://www.kicksecure.com/wiki/Anon_Connection_Wizard Priority: optional Section: misc Filename: pool/main/a/anon-connection-wizard/anon-connection-wizard_11.3-1_all.deb Size: 95436 SHA256: 12a382f734d32e575b68078171121e816fea4464e67a20b0fc8181cbe2f65899 SHA1: 67378641aad4b787c649f2f4710599ae5d5007e4 MD5sum: e05caaafc5963e6393c3cae8cdb1a6de Description: Tor Connection Configuration (ACW) WARNING: Not (yet) a standalone ready to use outside of Whonix: . Creates a Tor settings file: `/usr/local/etc/torrc.d/40_tor_control_panel.conf` . anon-connection-wizard (ACW) is a Tor-launcher-like application that helps users in different Internet environment connect to the Tor network. It helps user to configure Tor to use a proxy and/or Tor bridges. This application is especially useful for system Tor users who would like to run the standalone core Tor with different torified applications. The wizard can be run at any time to change the connection configuration. . Creates a Tor settings file: `/usr/local/etc/torrc.d/40_tor_control_panel.conf` . anon-connection-wizard is produced independently from the Tor anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. Package: anon-shared-build-apt-sources-tpo Version: 3:7.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 125 Depends: helper-scripts, gnupg, sq Recommends: deb.torproject.org-keyring Homepage: https://github.com/Kicksecure/anon-shared-build-apt-sources-tpo Priority: optional Section: misc Filename: pool/main/a/anon-shared-build-apt-sources-tpo/anon-shared-build-apt-sources-tpo_7.2-1_all.deb Size: 65200 SHA256: a98a506f8c5a09d01342e927ab5054b1f855ed87060cedc730ae0eedc2b7beec SHA1: 61e2d41030bc789627d3642241f418a00cf66f07 MD5sum: 777aaeb3d382090556eec120cd57c69d Description: Adds TPO's APT repository to Derivative Linux Distributions Comes with "deb http://deb.torproject.org/torproject.org stable main", The Tor Project's APT signing key. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profile-dist Version: 3:10.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 97 Depends: helper-scripts Replaces: apparmor-profile-anondist Homepage: https://www.kicksecure.com/wiki/Apparmor-profile-everything Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-dist/apparmor-profile-dist_10.1-1_all.deb Size: 36308 SHA256: 801ca889c4268d5af45b7c652c48a463663bbbdd484f30a7f8a515dacdc9685c SHA1: aafa8ebc5d6222244309d8e268f0492f26f90d23 MD5sum: 9f91d8d1a8204a7802c82bb55a8f0a22 Description: AppArmor Profile for Derivative Linux Distributions Displaces /etc/apparmor.d/abstractions/base with a version, that includes additions required for Derivative Linux Distributions. . Does not depend on AppArmor, so this package can be installed by default on any anonymity distribution by default, without requiring to also have AppArmor installed. Just for the case, AppArmor gets installed later by the user. Package: apparmor-profile-hexchat Version: 3:5.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 60 Depends: apparmor Replaces: apparmor-profile-xchat Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-hexchat/apparmor-profile-hexchat_5.6-1_all.deb Size: 24036 SHA256: 3096a0c3b072de62cc5a1b4a855fc426267077b2ee3c006822eb2e30d60a4cd4 SHA1: a5ff8f1789ff0fb407c38e8aa6bf86a6a3e2c0c8 MD5sum: 6fc49b4cd72cee536167e99d6fe1aa0f Description: AppArmor profile for HexChat IRC An AppArmor profile to confine HexChat IRC. This profile is developed by the Whonix team. HexChat IRC is developed by xchat.org / hexchat.github.io. . For better security. Package: apparmor-profile-thunderbird Version: 3:6.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 65 Depends: apparmor Replaces: apparmor-profile-icedove Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-thunderbird/apparmor-profile-thunderbird_6.2-1_all.deb Size: 27208 SHA256: cb7bd0ea714069a525cfc176f2d59c107c965f39474e3761b07fbb850d6b73de SHA1: c9abbafecf3b6f6a12444156ab8c4f613249b303 MD5sum: 762a3f842d03c04746f5e00d3b2b9a4b Description: AppArmor profile for Thunderbird for Debian An AppArmor profile to confine Thunderbird. . This profile is just an extension of the upstream AppArmor Debian profile. The upstream AppArmor upstream profile is the foundation. . Primarily this AppArmor profile makes Debian's AppArmor profile for Thunderbird compatible with Qubes Debian based VMs. . This profile is developed by the Kicksecure team. Thunderbird is developed by mozilla.org. Package: apparmor-profile-torbrowser Version: 3:9.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 74 Depends: apparmor Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-torbrowser/apparmor-profile-torbrowser_9.8-1_all.deb Size: 34996 SHA256: e0749f6e3560ad8e09e9498a0af724a316ff3c76f6776acf3f7a103264fcb85a SHA1: 89c4a58222f6019726720855ad7bf1de4b6f481f MD5sum: b34a56330aad639ea08bb30da4a5b09e Description: AppArmor profile for The Tor Browser Bundle (TBB) An AppArmor profile to confine The Tor Browser Bundle (TBB). This profile is developed by the Whonix team. TBB is developed by The Tor Project. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: apparmor-profile-hexchat, apparmor-profile-thunderbird, apparmor-profile-torbrowser, apparmor-profiles, apparmor-profiles-extra Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/apparmor-profiles-kicksecure_36.7-1_all.deb Size: 86068 SHA256: 49318e47e290d3f9b2f28f433610be66e64c54b7d41992edb1fba0953cd87682 SHA1: 0efe789cbcf5c9c2b96d093affc7a2494488940a MD5sum: 27a5d7a644fa55462da4a62b8a853683 Description: AppArmor profiles developed by the Kicksecure Team A metapackage, which installs apparmor profiles packages from Debian: . * apparmor-profile * apparmor-profiles-extra . as well as installs apparmor profiles developed by the Kicksecure team: . * apparmor-profile-thunderbird * apparmor-profile-torbrowser * apparmor-profile-hexchat . Increases security. Package: binaries-freedom Version: 0:3.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 31 Depends: fuse Homepage: https://github.com/Kicksecure/binaries-freedom Priority: optional Section: misc Filename: pool/main/b/binaries-freedom/binaries-freedom_3.4-1_all.deb Size: 11404 SHA256: 9f0f172a541eb54c1a01f1670d0f3a6b3aad2481852b12b45684bb2b332b5e97 SHA1: fa7a4ae15fa4b52374837e9fc6e272cc3c292a90 MD5sum: a5a6f16deafda7d1170d18173e950d70 Description: Freedom Software Binaries This is an empty package at this time. . https://forums.whonix.org/t/policy-for-inclusion-of-compiled-software/6635 Package: bindp Version: 3:4.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 33 Homepage: https://github.com/Kicksecure/bindp Priority: optional Section: misc Filename: pool/main/b/bindp/bindp_4.5-1_all.deb Size: 15512 SHA256: 0b5e7f98aceeba0f052b038640cf64e3dd92df895a63514565db6897686b84a8 SHA1: 9973c699ac40d20f5ac97bdd1ced4f37ada045e2 MD5sum: 7ae47a9dd7798de099654aad510e1edf Description: Binding specific IP and Port for Linux Running Application This package is probably most useful for Anonymity Distributions. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: bootclockrandomization Version: 3:8.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 84 Depends: msgcollector Homepage: https://www.kicksecure.com/wiki/Boot_Clock_Randomization Priority: optional Section: misc Filename: pool/main/b/bootclockrandomization/bootclockrandomization_8.0-1_all.deb Size: 32084 SHA256: dc38077c697b19fb61c1eb5812f58da449f91287b221bb23356f9d7995fddcc1 SHA1: 6744baca05d4053cd48e43d5bcff7325f11cd66d MD5sum: da0ed9c913b50a406621cd641c53b53c Description: Randomizes clock when systems boots Randomizes clock at boot time. Moves clock a few seconds and nanoseconds to past or future. Useful in context of anonymity/privacy/Tor. . This is useful to enforce the design goal, that the host clock and Gateway/Workstation clock should always slightly differ (even before secure timesync succeeded!) to prevent time based fingerprinting / linkablity issues. . Runs before Tor / sdwdate (if installed). . See also: https://www.whonix.org/wiki/Dev/TimeSync Package: browser-choice Version: 3:2.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 286 Depends: python3, helper-scripts Homepage: https://www.kicksecure.com/wiki/browser-choice Priority: optional Section: admin Filename: pool/main/b/browser-choice/browser-choice_2.6-1_all.deb Size: 62328 SHA256: 21c3800a50db27d536c7c6a30f55b97cff15ff254bb13713d681f8a9e7249ca1 SHA1: 4ecbfcce0a2a6ee7d136a7dd6f5c039d2006b5af MD5sum: 84f4e235fa9527173b348bdb5c3af0e8 Description: browser selection installer dialog A graphical interface that allows users to select and manage browsers. . Features a plugin-based design and multiple install types. Package: calamares-settings-debian Version: 13.1.8-1 Architecture: all Maintainer: Jonathan Carter Installed-Size: 225 Depends: calamares, rsync, cryptsetup, libglib2.0-bin, keyutils, pkexec, qml-module-qtquick-window2, qml-module-qtquick2, dconf-gsettings-backend | gsettings-backend Provides: calamares-settings Homepage: https://salsa.debian.org/live-team/calamares-settings-debian Priority: optional Section: utils Filename: pool/main/c/calamares-settings-debian/calamares-settings-debian_13.1.8-1_all.deb Size: 129364 SHA256: 54b42049e071423e93b11c2148b0cf8e171b3e90c46c3482cb88caafa8fbf6aa SHA1: ab5aa1ef254766638355411911bd13001a6c6332 MD5sum: 889be0b067962d7d81c3fd6090d36ff4 Description: Debian theme and settings for the Calamares Installer Calamares is a generic installer framework for Linux distributions. By default, it contains a set of boilerplate wording and images. This package provides the latest Debian artwork as well as scripts that supports EFI installations. . It also serves as an example for how derivatives can create their own calamares-settings packages. Package: damngpl Version: 3:4.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 32 Depends: perl Homepage: http://www.finnie.org/software/damngpl/damngpl Priority: optional Section: misc Filename: pool/main/d/damngpl/damngpl_4.8-1_all.deb Size: 14048 SHA256: c0016303719e1d575979880658050b4e54dc5d34bdef4f70c94e466f767e38eb SHA1: 952ff32744638c374f6757038f3e0aa68c2488df MD5sum: 9cd05244b4803a85ce27263f7ea702d6 Description: Extract source package info from Debian status files damngpl will parse a Debian-style /var/lib/dpkg/status file and extract source package information about installed packages. This information can be used in several ways, usually to download source packages. . Multiple input files can be specified on the command line, or piped into standard input if no files are specified. Results are returned to standard output. . The name damngpl was chosen as a tongue-in-cheek description of its purpose (downloading Debian sources for the Finnix project to remain GPL compliant). Please do not send hate mail to the author, thinking he is anti-GPL. He's not. . See also: http://blog.finnix.org/2011/08/21/finnix-and-gpl-compliance/ Package: deb.torproject.org-keyring Version: 2025.08.08 Architecture: all Maintainer: Peter Palfrader Installed-Size: 20 Priority: important Section: misc Filename: pool/main/d/deb.torproject.org-keyring/deb.torproject.org-keyring_2025.08.08_all.deb Size: 4500 SHA256: e5bd5c6442ead01e183838be611d6bdf04896ba299095fbb4dc5ab5fe8f19bf6 SHA1: 7b9ee87c815b20602e588c1e6ded420ba7eeb4e4 MD5sum: 874fc9f0da1acbbf1a6eb2c7a25cecc1 Description: GnuPG archive key of the deb.torproject.org repository The deb.torproject.org repository digitally signs its Release files. This package contains the current repository key used for that, and upon installation configures your system to accept archives signed with this key. Package: debug-misc Version: 3:5.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 107 Suggests: systemd-coredump, serial-console-enable Replaces: grub-output-verbose Homepage: https://github.com/Kicksecure/debug-misc Priority: optional Section: misc Filename: pool/main/d/debug-misc/debug-misc_5.7-1_all.deb Size: 28168 SHA256: d08ba0c9b770e0ecc77f2526e85d0cd432eaccf5b17656f7d88569d842391779 SHA1: 93d25a30a8fade8da3b8c96b096e7b89bbf7fa59 MD5sum: cd5bb13d523d6e860350b76a99ac5430 Description: Enables miscellaneous debug settings Ships a `/etc/default/grub.d/45_debug-misc.cfg` configuration file. This removes `quiet`, `loglevel=0`, and `rhgb` from the `GRUB_CMDLINE_LINUX_DEFAULT` variable. It also removes `debugfs=off`, `efi_pstore.pstore_disable=1`, and `erst_disable` from the `GRUB_CMDLINE_LINUX` variable. Finally, it adds `debug=vc` to the `GRUB_CMDLINE_LINUX` variable to enable verbose output during the initial ramdisk boot phase. . Undo debugging related `sysctl` settings by package `security-misc-shared`. . Enables persistent systemd journal log. . Disables `/usr/lib/systemd/coredump.conf.d/30_security-misc.conf` by package `security-misc-shared` using `debian/debug-misc.links` by creating a symlink from `/etc/systemd/coredump.conf.d/30_security-misc.conf` to `/dev/null`. . Disables `/usr/lib/systemd/pstore.conf.d/30_security-misc.conf` by package `security-misc-shared` using `debian/debug-misc.links` by creating a symlink from `/etc/systemd/pstore.conf.d/30_security-misc.conf` to `/dev/null`. . Disables `panic-on-oops`, `remove-system.map` by package `security-misc-shared`. . `config-package-dev` `hide` `/etc/sysctl.d/30_silent-kernel-printk.conf` which kernel.printk to default as if `security-misc-shared` would not have lowered verbosity. . Configure systemd `getty` service to not clear `tty`. `/lib/systemd/system/getty@tty.service.d/30_debug-misc.conf` . Coredumps are enabled. `/etc/security/limits.d/40_debug-misc.conf` . Coredumps may contain important information such as encryption keys or passwords. Package `security-misc-shared` disables coredumps. Package `debug-misc` re-enables coredumps. . Contains a helper tool to cause a segfault for testing purposes. `segfault-build` creates `segfault-run`. Running `segfault-run` results in `segfault-run` terminating with a segfault. This is useful to test if coredump files are being generated when an application crashes. `/usr/sbin/segfault-build` `/usr/share/debug-misc/segfault.c` . For better usability, to ease debugging in case of issues. . For better security, this package should only be installed on specific machines that require debugging. Unfortunately, security and debugging are conflicting optimization goals. Package: desktop-config-dist Version: 3:17.6-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 346 Depends: python3, helper-scripts, dconf-gsettings-backend | gsettings-backend, init-system-helpers (>= 1.52) Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist_17.6-1_all.deb Size: 99500 SHA256: f943f91614d1e29c8e907eefb6285ef991cd941ae5fc1eb33b3459c28bb66ed6 SHA1: 5653bae166218de819a38707036ab2e035c3b97e MD5sum: b6cef3baa8f9e182678f703550288d79 Description: Configuration for Derivative Desktop Sets desktop and display setting, wallpaper and desktop icons. Sets icon theme and style. Settings for the default panel aka task bar, like panel position/color/size and panel plugins/shortcuts. . Autologin for account 'user' setting in lightdm. . Live check systray indicator which indicates the status of grub-live, whether the system was booted into persistent or live mode. See also: https://www.kicksecure.com/wiki/grub-live . Adds start menu entries for web browser, terminal emulator, file manager. . Sets Whisker Menu for better usability. . Disable maximize windows when moving to top for better privacy. . Disables thumbnails for better security. . Disables save on exit for better privacy. Package: desktop-config-dist-dependencies Source: desktop-config-dist Version: 3:17.6-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 76 Depends: gnome-colors-common, adwaita-icon-theme, python3-pyudev, wlr-randr Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist-dependencies_17.6-1_all.deb Size: 47312 SHA256: 183f0f044773a4bfcc1314870826b7a17d43fa01adf83beb50802f11d6fdbb52 SHA1: d94fe945cc7863e54178e4e561e14f84a0558254 MD5sum: f961a5d25a0e4550ca78e5fe48744f63 Description: Dependencies of desktop-config-dist A metapackage with dependencies for package desktop-config-dist. . Only useful for Non-Qubes. Not useful in Qubes. Package: developer-meta-files Version: 3:52.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 421 Depends: python3, python3-debian, bc, jq Homepage: https://github.com/Kicksecure/developer-meta-files Priority: optional Section: misc Filename: pool/main/d/developer-meta-files/developer-meta-files_52.8-1_all.deb Size: 158252 SHA256: 03f1d117067e9c5f868a5e2f79f119a62dac50d2e808bd626d902b273e8fa0ab SHA1: a07fb72965b2baa6b7603e4ec0d9bd78b6b3816f MD5sum: e3533f2f90a5b7de1d55a7fe584a46af Description: Linux Distributions Maintenance Helper Scripts Todo . Description Package: dist-baremetal-cli Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: nvme-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-baremetal-cli_36.7-1_all.deb Size: 85992 SHA256: b8d3e84ba804969e36f5a0bf25516c55ee9f238ff503749bc0577c343d2cf730 SHA1: ea281a66ca7b8c429059ba049249514fe2e08fb0 MD5sum: ebeb24280e2c86a2776ca4ed44063bab Description: All systems, physical hardware, command-line packages For all hardened systems. . For physical hardware. . Provides packages for basic command-line-only installations. Package: dist-baremetal-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: psensor, liblxqt-backlight-helper Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-baremetal-gui-lxqt_36.7-1_all.deb Size: 86020 SHA256: 006873bd66f3b643ae8bb4438dec9f93d6141db2c4c03cdfd4d4f40070077b03 SHA1: 6e3be99f9c142b251448e55623c82a7aa14c55d2 MD5sum: 62fc64b2990cc1ed1b460a4f8359f2da Description: All systems, physical hardware, LXQt GUI packages For all hardened systems. . For physical hardware. . Provides packages for LXQt graphical desktop installations. Package: dist-base-files Version: 3:15.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 693 Pre-Depends: zsh Depends: dpkg-dev, helper-scripts, adduser, moreutils, xz-utils, zsh-syntax-highlighting, zsh-autosuggestions, systemd-repart Conflicts: anon-base-files, diverts-etc++grub.d++10+-+linux Replaces: anon-base-files Provides: anon-base-files, diverts-etc++grub.d++10+-+linux Homepage: https://github.com/Kicksecure/dist-base-files Priority: optional Section: misc Filename: pool/main/d/dist-base-files/dist-base-files_15.8-1_all.deb Size: 194452 SHA256: 2fcde3fcf84b534cd56ecdf1d09f99eb7f339effcd769f0fdf151e3b75d75f52 SHA1: e2af4c695e7e75600046e80ba747728f877a07c4 MD5sum: 2d723925396ff3a22dd1c296571641f3 Description: base files for distributions Grub config for more organized boot menu. "Normal" boot options are on top. "Advanced" boot options (for older kernel versions) have been moved to the bottom. . Creates user `user` with empty password (passwordless) (not in Qubes). That is if user `user` is not existing yet. And if it does create user `user` it also locks the root account. Therefore root account locking effectively only happens in new builds not having user `user` already created. . Creates system groups: * console * ssh . Ships a systemd unit file dist-skel-first-boot.service which runs `/usr/libexec/helper-scripts/first-boot-skel` (part of helper-scripts) package. . Simplifies sudo default lecture to only showing the default password once. . Creates version file `/var/lib/dist-base-files/build_version`. . Default shell: Sets default shell for user `user` to `zsh`. (Unless file `/etc/no-shell-change` exists.) `debian/dist-base-files.postinst` . Provides common files for derivative GRUB themes. . This package gets installed by default in both, Kicksecure and Whonix. Package: dist-general-cli Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: apparmor-profile-dist, apt-transport-tor, apt-utils, bootclockrandomization, ca-certificates, dialog, dist-base-files, dummy-dependency-mta, gawk, init, initializer-dist, locales, menu, nmap, repository-dist, sdwdate, security-misc-shared, setup-dist, sudo, timesanitycheck, usrmerge, apparmor-profiles-kicksecure, apparmor-utils, bash-completion, boot-info-script, btrfs-progs, bzip2, curl, debian-keyring, dbus-user-session, distro-info-data, bind9-dnsutils, e2fsprogs, eject, file, haveged, hunspell-en-us, iotop, iproute2, iputils-ping, jitterentropy-rngd, less, libblockdev-crypto3, libpam-tmpdir, lsof, man-db, most, nano, net-tools, openvpn, 7zip, pciutils, pcmciautils, procps, secure-delete, sensible-utils, strace, sysfsutils, systemcheck, torsocks, traceroute, udisks2, unzip, usability-misc, usbutils, vim, xz-utils, zip, codecrypt, diceware, dirmngr, equivs, extrepo, extrepo-offline-data, fuse, sq, sqv, sqop, sequoia-git, sequoia-chameleon-gnupg, gpg-agent, makepasswd, pwgen, htop, pv, cryptsetup, dmsetup, udev, anon-apt-sources-list, tor, vm-config-dist, tor-ctrl, mokutil Breaks: kicksecure-default-applications-cli, kicksecure-dependencies-cli, kicksecure-dependencies-system, kicksecure-recommended-cli Replaces: kicksecure-default-applications-cli, kicksecure-dependencies-cli, kicksecure-dependencies-system, kicksecure-recommended-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-cli_36.7-1_all.deb Size: 86616 SHA256: 01b626783d1daf07db4d6126e2b13668430e92d3e9270dd8bd0bdcd0c3759f6d SHA1: 42335c9e593404735b744512017c1ae2b033cbcd MD5sum: 295c9ec2d9e3a118ad51ff41c610381d Description: All systems, all hardware, command-line packages For all hardened systems. . For all hardware platforms. . Provides packages for basic command-line-only installations. Package: dist-general-gui-all Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: desktop-config-dist, libgl1-mesa-dri, mesa-vulkan-drivers, libfuse2t64, mate-polkit, xdg-desktop-portal, msgcollector-gui, repository-dist-wizard, sdwdate-gui, setup-wizard-dist, security-misc-desktop, mesa-utils, open-link-confirmation, accountsservice, icon-pack-dist, libasound2t64 Breaks: kicksecure-desktop-applications-recommended, kicksecure-desktop-environment-essential-gui Replaces: kicksecure-desktop-applications-recommended, kicksecure-desktop-environment-essential-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-gui-all_36.7-1_all.deb Size: 86192 SHA256: b79c4c6134479e037172b5d6253e2c9f654d7d785415dc2c6ce5a2319b86c254 SHA1: bb0933c7df97a357f7039e76d2b6c4c621dfe5c3 MD5sum: a79010441660fe1162c1656a7eb235ff Description: All systems, all hardware, GUI packages For all hardened systems. . For all hardware platforms. . Provides packages for all graphical desktop installations. Package: dist-general-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: dummy-dependency-sway, dummy-dependency-lxqt-policykit, featherpad, gnome-keyring, lxqt-about, lxqt-about-l10n, lxqt-admin, lxqt-admin-l10n, desktop-file-utils, lxqt-themes, lxqt-system-theme, lxqt-config, lxqt-config-l10n, lxqt-notificationd, lxqt-notificationd-l10n, lxqt-globalkeys, lxqt-globalkeys-l10n, lxqt-qtplugin, pcmanfm-qt, pcmanfm-qt-l10n, qterminal, qterminal-l10n, qtxdg-tools, lxqt-openssh-askpass, lxqt-openssh-askpass-l10n, lxqt-sudo, lxqt-sudo-l10n, papirus-icon-theme, qps, qt6-svg-plugins, qt6-translations-l10n, qt6-wayland, xdg-desktop-portal-gtk, xdg-desktop-portal-lxqt, gvfs, gvfs-backends, pkexec, polkitd, sysmaint-panel, discover, hwinfo, laptop-detect, lm-sensors, lshw, gparted, lxqt-archiver, lxqt-archiver-l10n, liblxqt-l10n, libfm-qt-l10n Breaks: kicksecure-desktop-applications-lxqt, kicksecure-desktop-applications-xfce, kicksecure-desktop-environment-essential-lxqt, kicksecure-desktop-environment-essential-xfce, kicksecure-shared-host-lxqt, kicksecure-shared-host-xfce Replaces: kicksecure-desktop-applications-lxqt, kicksecure-desktop-applications-xfce, kicksecure-desktop-environment-essential-lxqt, kicksecure-desktop-environment-essential-xfce, kicksecure-shared-host-lxqt, kicksecure-shared-host-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-gui-lxqt_36.7-1_all.deb Size: 86380 SHA256: 0c97537f23b271c50807f9063d313d1d151b4d664abd3063c9e6cfa81a77321b SHA1: ad09dd34943b9454717d1e273c892675fa225ec0 MD5sum: 743ca08579496c46c252e1f848114052 Description: All systems, all hardware, LXQt GUI packages For all hardened systems. . For all hardware platforms. . Provides packages for LXQt graphical desktop installations. Package: dist-general-server Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: security-misc-server Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-server_36.7-1_all.deb Size: 85972 SHA256: 97717c666dc3696173e11efd2135c18e9c16eabefdeecf08a0ae0837525451b4 SHA1: 368b6fb703ec712637153af4d4c936e3534d1350 MD5sum: 18e8d209e31ce86f27706f75a82f3564 Description: All systems, all hardware, server packages For all hardened systems. . For all hardware platforms. . Provides packages for server installations. Package: dist-nonqubes-cli Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: dracut, systemd-cryptsetup, acpi-support, console-common, console-setup, grub-live-dracut, kbd, keyboard-configuration, swap-file-creator, smartmontools Breaks: non-qubes-enhancements-cli Replaces: non-qubes-enhancements-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-cli_36.7-1_all.deb Size: 86116 SHA256: c82bdd735f639b642b98e2a13c7dff6dc6d328b1af253a3244f834987aac4b76 SHA1: 8581a54d7c5323c855e25cd4230673343ad94c40 MD5sum: 0649720565b0b472c6ca7e0b907bd575 Description: All systems, not Qubes VMs, command-line packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dist-nonqubes-gui-all Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: rads, desktop-config-dist-dependencies, labwc, waybar, wvkbd, gsmartcontrol, upower Breaks: non-qubes-audio, non-qubes-enhancements-gui Replaces: non-qubes-audio, non-qubes-enhancements-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-gui-all_36.7-1_all.deb Size: 86088 SHA256: b842dba635fa5faac1d63d6c746bcf404c9edd5772ac0de356598d75214e43c0 SHA1: e17c9b68eba4fd0fee3a07c19765fc28f36b0ecc MD5sum: 7a0913251b655d1cbc85d6be46934936 Description: All systems, not Qubes VMs, GUI packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: dist-nonqubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: swayidle, swaylock, greetd, wlgreet, lxqt-powermanagement, lxqt-powermanagement-l10n, lxqt-panel, lxqt-panel-l10n, lxqt-runner, lxqt-runner-l10n, lxqt-session, lxqt-session-l10n, lxqt-wayland-session, swaybg, wdisplays, flameshot, grim, xdg-desktop-portal-wlr, kanshi, smart-notifier Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-gui-lxqt_36.7-1_all.deb Size: 86144 SHA256: b106ed8eb7e2a40982340c435910964d717de06ed3dd4d110df3b797df4640ee SHA1: bb185ccb8594cb12e92993f3ea60d6621c5ebbe8 MD5sum: 8e4332420a0dff49d33536a6fe69e123 Description: All systems, not Qubes VMs, LXQt GUI packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: dist-qubes-cli Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: qubes-core-agent-networking, qubes-core-agent-dom0-updates, qubes-input-proxy-sender, qubes-kernel-vm-support, qubes-usb-proxy, qubesdb-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-cli_36.7-1_all.deb Size: 86064 SHA256: c982e3596a91125c189e16ab06483eeeeb9bb5f85f3c0a07b609502bc8980624 SHA1: 16d6bc63ff2d6b3df4986152bbb04aff935eef67 MD5sum: 0b1d496c3109f550c18ba6b3804de34f Description: All systems, Qubes VMs, command-line packages For all hardened systems. . For Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dist-qubes-gui-all Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: qubes-core-agent-pcmanfm-qt, qubes-core-agent-nautilus, qubes-notification-agent Breaks: qubes-whonix-shared-packages-recommended Replaces: qubes-whonix-shared-packages-recommended Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-gui-all_36.7-1_all.deb Size: 86064 SHA256: 62d055ac84d22f8cb453433a9fa44a70dc3ab2bf01fc64735dc700d2e3e06851 SHA1: 3d1c2768cec16e4a89d93001897d0a0848e82b24 MD5sum: f828d15df84500b2e24992a4563e66b1 Description: All systems, Qubes VMs, GUI packages For all hardened systems. . For Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: dist-qubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-gui-lxqt_36.7-1_all.deb Size: 85988 SHA256: 462399085f65172fd1a3173cea2bcb196279a2a11c55e1ad43dccf75450d1d2a SHA1: e2a2f41c4c6b213b614c58a13f85928d1b236460 MD5sum: 016e98cb9ef033289b8bfef8135edf5a Description: All systems, Qubes VMs, LXQt GUI packages For all hardened systems. . For Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: dist-vm-cli Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-vm-cli_36.7-1_all.deb Size: 85976 SHA256: a28916cfe15e51da5c9849b5a4ff38f3994ebf1c6525c4372aa778b3435410ef SHA1: 1e9d84b55177c7ebd8fa043eec84b6fc922efad9 MD5sum: 581a5b7ec1406204f92cebb05b5ecb46 Description: All systems, VMs, command-line packages For all hardened systems. . For non-Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dummy-dependency-apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: apparmor-profiles-kicksecure Provides: apparmor-profiles-kicksecure Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-apparmor-profiles-kicksecure_36.7-1_all.deb Size: 86032 SHA256: 7e97021e6bb59300d7d058b2d1a1e099c50cc29cca790572e67fe54b8a7784b6 SHA1: e73eaa842517652d4eba0d65b9185f30d29430b5 MD5sum: f50d65db0b8b5ed3e8bb59af3384faeb Description: dummy package apparmor-profiles-kicksecure A metapackage, which satisfies the dependency on apparmor-profiles-kicksecure. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-bindp Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: bindp Provides: bindp Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-bindp_36.7-1_all.deb Size: 86024 SHA256: 529930acc2ec4cb5961394b4d82727c988bd73c36382103905cea295c1e66107 SHA1: 2ddf9d241c9567657b3f8dce782c944480ab425e MD5sum: 36f90ce484d6218f116731763a9c0d5b Description: dummy package to satisfy architecture specific dependency bindp A metapackage, which satisfies the dependency on bindp. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-browser-choice Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: browser-choice Provides: browser-choice Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-browser-choice_36.7-1_all.deb Size: 86040 SHA256: e78f48c61d44fbe639cab4e0bf0aa6b933796d242c0d44442796c2192a89faf5 SHA1: f1670e47e1b3c7a490d6ec464af2e2fe2e5dda81 MD5sum: 6a750a4f5ed67d96c4116ac8b240ab06 Description: dummy package browser-choice A metapackage, which satisfies the dependency on browser-choice, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-efibootmgr Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: efibootmgr Provides: efibootmgr Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-efibootmgr_36.7-1_all.deb Size: 86044 SHA256: 0ec7ed8dcc42ff0ebe300d8b9a19a48638556a619d24549f1029706966b7419f SHA1: 9350201a1f59d2f59cfebc9a40b8a95343126e1a MD5sum: 0e0c7ad385cd09c33bc4773f5c6caca0 Description: dummy package efibootmgr A metapackage, which satisfies the dependency on efibootmgr. Because efibootmgr is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-electrum Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: electrum Replaces: dummy-dependency-hardened-electrum Provides: dummy-dependency-hardened-electrum, electrum Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-electrum_36.7-1_all.deb Size: 86040 SHA256: dc51d608b9159d82f933b9bace8f0bda3a680755529c43dc9a068c0667f00219 SHA1: 1f8d65ac481ad19f64a5ab54941b9ed155fd4526 MD5sum: 52d0b1ef758db856dedb83cc44b1d74a Description: dummy package to satisfy architecture specific dependency electrum A metapackage, which satisfies the dependency on electrum. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-firefox-esr Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: firefox-esr Provides: firefox-esr Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-firefox-esr_36.7-1_all.deb Size: 86040 SHA256: 038df63e8364ce25b593dba606c4307e73cb38aa6874541f0f12039ba3fd3256 SHA1: 25778ff86bfad31c081ee2061292d38bbbdc1fe7 MD5sum: e571222e19e8e2f426130f85e1dea77d Description: dummy package firefox-esr A metapackage, which satisfies the dependency on firefox-esr, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-hardened-malloc Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: hardened-malloc Provides: hardened-malloc Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-hardened-malloc_36.7-1_all.deb Size: 86028 SHA256: 394f98c9bbc414c3f8cf60f0bda39e874230fb6ca94432d0a2623af948fbc1b2 SHA1: 578f679b898a13ba39dabd05b0de701d2074eaf0 MD5sum: 165eaa5adbde6ae8430377b9ed882321 Description: dummy package to satisfy architecture specific dependency hardened-malloc A metapackage, which satisfies the dependency on: . hardened-malloc . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-keyutils Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: keyutils Provides: keyutils Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-keyutils_36.7-1_all.deb Size: 86032 SHA256: 734d8393eb151bb0cdc60a0c237db0e8ba635876b5ab488e426f272b527c8f60 SHA1: 8f010050e9f9c58e6eba7aaa2a67fd668bdc3ace MD5sum: 92647088dcb1ee0c18596becb6937255 Description: dummy package keyutils A metapackage, which satisfies the dependency on keyutils. Because keyutils is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-kloak Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: kloak Provides: kloak Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-kloak_36.7-1_all.deb Size: 86012 SHA256: 84527e091ac0d80821c69c66a15c46d9692f086b786b5bea92da233f08c5b149 SHA1: 6cd4fb9f0d8010c4cf12b6e61ffd62410e94a81d MD5sum: a4c038e5a182c4f9d1f2b360a4aaaf58 Description: dummy package to satisfy architecture specific dependency kloak A metapackage, which satisfies the dependency on kloak. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-lxqt-policykit Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: lxqt-policykit Provides: lxqt-policykit Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-lxqt-policykit_36.7-1_all.deb Size: 86056 SHA256: df06876ef4c41f9ff2b332f2f3aa9e11da57cebd3ec88ab75703f8f688a22483 SHA1: a10690893026f1255d92a0d7013e275ed50f3a0d MD5sum: ee933a7e46c9d72d6256d8180c79de60 Description: dummy package lxqt-policykit A metapackage, which satisfies the dependency on lxqt-policykit. Because lxqt-policykit is buggy. Bugs out on pam-info stdout/stderr output. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-mokutil Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: mokutil Provides: mokutil Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-mokutil_36.7-1_all.deb Size: 86028 SHA256: 3623b9714d4a5ee2bf774771a769d92a1c7aec906b9796859afe0bb9b55fe7bf SHA1: 64da0424b523117443c44929712408d85b883322 MD5sum: 80f9d6fe2e7480bf3b8ea48eda4da4e1 Description: dummy package mokutil A metapackage, which satisfies the dependency on mokutil. Because mokutil is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-mta Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: default-mta, mail-transport-agent Provides: default-mta, mail-transport-agent Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-mta_36.7-1_all.deb Size: 86080 SHA256: e2655ff4f5a2253d52adce8b7ad469086fe46c49690ad5abe8f8b87bfdb842a4 SHA1: be48c352da0f28502bc907a10d85ba4f5a4acd9a MD5sum: c4274ed5c37505350f97d1a3c5b614b0 Description: dummy package mta A metapackage, which satisfies the dependency on default-mta and mail-transport-agent. Because apt attempts to install a mail transport agent when upgrading Bookworm to Trixie. . This package cannot provide a real implementation of a mail transport agent. It is only a dummy to satisfy the dependency. Package: dummy-dependency-qubes-core-agent-passwordless-root Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: qubes-core-agent-passwordless-root Provides: qubes-core-agent-passwordless-root Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-qubes-core-agent-passwordless-root_36.7-1_all.deb Size: 86064 SHA256: 530a1a5a22f80593c7d3ac6e23fbdc79a6cde28bc7b31a381dfe3b37f7a35d5f SHA1: fa714a3b68323344ca943df16eb6de39a4e7d183 MD5sum: f7f2164c620f73f93264f7380d47ebb2 Description: dummy package qubes-core-agent-passwordless-root A metapackage, which satisfies the dependency on qubes-core-agent-passwordless-root, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-sbsigntool Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: sbsigntool Provides: sbsigntool Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-sbsigntool_36.7-1_all.deb Size: 86040 SHA256: 2d18aa9a897febfac6b391e99aa74fd051c4237b5d68ae1f6b881a9ad87c76f9 SHA1: 9301eecd2d291fe47a06b219752116e44e5e4b48 MD5sum: efdbe1ada8695ed3abcbcb4ede83c17b Description: dummy package sbsigntool A metapackage, which satisfies the dependency on sbsigntool. Because sbsigntool is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-sway Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: sway Provides: sway Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-sway_36.7-1_all.deb Size: 86016 SHA256: b07454909a208b6cae3de1bcc902767c43cbea7a27e6e8098c29dd3088a36998 SHA1: b598fdc45c3245589c8739e3092177e2a37d8a8e MD5sum: 115096977f4e1fdcbaf9029fab39369f Description: dummy package sway A metapackage, which satisfies the dependency on sway. Used to install wlgreet without sway. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tb-starter Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: tb-starter Provides: tb-starter Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tb-starter_36.7-1_all.deb Size: 86036 SHA256: 0b4c2db2bedbe36c4b5eb91ccee79a8d5aaad3144b61a2dce8226d76fc972d85 SHA1: ed7359a354b29ab303fd2692d04c364e91845033 MD5sum: 68ecba56f6e53a27d03a42d29c7748e4 Description: dummy package tb-starter A metapackage, which satisfies the dependency on tb-starter, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tb-updater Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: tb-updater Provides: tb-updater Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tb-updater_36.7-1_all.deb Size: 86040 SHA256: 747a040f3cf04b13b86be7a99b22cc098dbc04f9ad9f0910af8c77ce8d6d60fb SHA1: 103cbab8e006b46695db75e63853f0f58295e437 MD5sum: fd5e77e4714c1db6d8c8643bf74ffe9d Description: dummy package tb-updater A metapackage, which satisfies the dependency on tb-updater, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tirdad Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: tirdad Provides: tirdad Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tirdad_36.7-1_all.deb Size: 86024 SHA256: 007950c7bc13413d18c02d5fdc05ea7620bd6acb17613a3220765952b3761296 SHA1: b5bef5fc83dfc7c450f1e8a9898d551e23182c70 MD5sum: 84d71031a48787a1437b2bd53c50d59f Description: dummy package to satisfy architecture specific dependency tirdad A metapackage, which satisfies the dependency on tirdad. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-virtualbox-guest-utils Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: virtualbox-guest-utils Provides: virtualbox-guest-utils Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-virtualbox-guest-utils_36.7-1_all.deb Size: 86052 SHA256: 56544008d7ec8f87cc5dd06b3d94aef789c26743b10d953a02d18659347153dc SHA1: cf0ea7204fc35646b14438c397b6cda4099ec27f MD5sum: 948e3b824aa6d26c28ca183c4b568aaa Description: dummy package virtualbox-guest-utils A metapackage, which satisfies the dependency on virtualbox-guest-utils. Because virtualbox-guest-utils is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-virtualbox-guest-x11 Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: virtualbox-guest-x11 Provides: virtualbox-guest-x11 Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-virtualbox-guest-x11_36.7-1_all.deb Size: 86052 SHA256: a810d8976ab92efb179e47fcbf87902a836b426a566360ee4615ef57e49adede SHA1: d9f78115e448cd0bcae1bbb54da2ffebf199c41f MD5sum: c0d6125938b7843c0e7e72dbc8cca8b9 Description: dummy package virtualbox-guest-x11 A metapackage, which satisfies the dependency on virtualbox-guest-x11. Because virtualbox-guest-x11 is not available on all architectures. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-xorg-vm Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Conflicts: xserver-xorg-video-vmware Provides: xserver-xorg-video-vmware Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-xorg-vm_36.7-1_all.deb Size: 86020 SHA256: 71c98eba027f792b0c73f1c39ba9aa4529d8d215531a6237e0e07b296577028c SHA1: d72d2045461c9e02830aca33a773a9d4b8ced379 MD5sum: 38ed01342a6d7c46994a1002832a4109 Description: dummy dependency xserver-xorg-video-vmware A metapackage, which satisfies the dependency on xserver-xorg-video-vmware. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: firmware-freedom Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: firmware-linux-free, firmware-ath9k-htc, firmware-carl9170 Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/firmware-freedom_36.7-1_all.deb Size: 86040 SHA256: 35fcdc7531d33c23b2cfa779f20ede602c275ccced2fbf04cd8a5c48778f8504 SHA1: eafbc9e523651ccc69fc973f0579b51e2df5b680 MD5sum: 5a1eca6db49689c95b05ab39d03333c3 Description: Recommended packages for hosts with freedom hardware design A metapackage, which includes freedom firmware useful for hosts with freedom hardware design. . These are not useful in Qubes, since this would be up to Qubes. Package: genmkfile Version: 3:18.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 174 Depends: make, dpkg-dev, devscripts, moreutils, safe-rm, strip-nondeterminism, perl, rsync, python3 Homepage: https://github.com/Kicksecure/genmkfile Priority: optional Section: misc Filename: pool/main/g/genmkfile/genmkfile_18.3-1_all.deb Size: 64672 SHA256: c4ce169fc2497b47a30d3d0ac69deb7372a6d2ac9fea9efa37bbd04ec0b6a3ea SHA1: 7ede12d706b046f3c47a1cbab740a91bb0a4311f MD5sum: 488533d599cb21fb48ffd27d2bfe70d6 Description: Generic Makefile Makes packaging simpler. No more need to manually maintain 'make install' targets or distribution specific install files such as debian/pkg-name.install. . Files in etc/... in root source folder will be installed to /etc/..., files in usr/... will be installed to /usr/... and so forth. This should make renaming, moving files around, packaging, etc. very simple. Packaging of most packages can look very similar. . Provides common make targets such as 'make install', 'make dist', 'make installsim', 'make installcheck', 'make uninstall', 'make uninstallcheck', 'make distclean'. . Very extensible through file ./make-helper-overrides.bsh or folder ./make-helper-overrides.d. By using overrides, any make target can be easily extended using pre or post hooks or replaced. Override files which are executable will be used. Override files which are not executable will be skipped. . Contains a minimal Makefile while the heavy lifting is done by a bash script make-helper.bsh. . Building for multiple platforms possible, example: export make_cross_build_platform_list="i386 amd64" . Can call with lintian (static analysis tool for Debian packages). By default it will be using lintian if installed while failing open (non-zero exit code). lintian can be disabled. export make_use_lintian=false Or can be configured to fail closed (non-zero exit code). export make_use_lintian=true . Can build packages without chroot using debuild (default) or inside chroot using cowbuilder. To enable cowbuilder, use: export make_use_cowbuilder=true . Supports signing packages using debsign. (sign a Debian .changes and .dsc file pair using GPG) export make_use_debsign=true Package: gpg-bash-lib Version: 3:5.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 647 Depends: safe-rm Homepage: https://github.com/Kicksecure/gpg-bash-lib Priority: optional Section: libs Filename: pool/main/g/gpg-bash-lib/gpg-bash-lib_5.4-1_all.deb Size: 491076 SHA256: c67398804d41ded321fb69593a8a719812f1e4920e60ab5c75016193f22fb0c0 SHA1: d644af9199a28cf07c37245d8d8c97c58bc78340 MD5sum: ed653709dafc9f065b89413a0ce823e6 Description: gpg bash library Abstracts file verification into common functions. Allows detecting of stale files, i.e. detection downgrade or indefinite freeze attacks by implementing a valid-until like mechanism. . Internally parses gpg's --status-file output. . For better security. Package: grub-live Version: 3:11.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 119 Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live_11.0-1_all.deb Size: 40120 SHA256: e4537bd2c3cd66195d5c448c3b1cd6a06e164cef0793c676f04ef10a06a2b17a SHA1: c5281224dedb50fe7fef02ea340b29a4b33f93cd MD5sum: 1542d9fbb61988c7e266ed1530c53fcd Description: grub live boot menu entry Base grub-live package. You probably do not want to install this directly, install grub-live-dracut instead. . Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . Adds a grub live boot menu entry. . Existing grub boot entries stay unmodified. . No claims are made with regard to anti forensics. Package: grub-live-dracut Source: grub-live Version: 3:11.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 63 Depends: grub-live, dracut Provides: boot-live, grub-live-boot Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live-dracut_11.0-1_all.deb Size: 31832 SHA256: aa2b52fe4ea6a945abec81bd543066c0a2c25c46a20668d37e510e503cc1422f SHA1: 71a207c62eecd03846ec3285346fb611d79c0d41 MD5sum: 756831ba3c9263f350160b2435855a24 Description: grub live dracut dependencies Dracut version metapackage for grub-live. . See also the package grub-live. Package: hardened-kernel Version: 3:5.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 474 Depends: build-essential, libssl-dev, libncurses-dev, fakeroot, libelf-dev, bison, flex, gcc-12-plugin-dev, curl, bc, kmod, cpio Homepage: https://www.kicksecure.com/wiki/Hardened-kernel Priority: optional Section: misc Filename: pool/main/h/hardened-kernel/hardened-kernel_5.3-1_all.deb Size: 158344 SHA256: 545064c1051331f7b902f1589cce04be0f1981b5f75ae85cc673bd74d17191f1 SHA1: e472c7faf5c18fff0d4f5959b5278f7fdbaa7c77 MD5sum: 6ef86709f92f883e33f741447dc07b05 Description: Hardened Kernel for Host and VMs This is a hardened kernel configuration for Whonix / Kicksecure. hardened-vm-kernel is designed specifically for virtual machines and hardened-host-kernel is designed for hosts. . Both configs try to have as many hardening options enabled as possible and have little attack surface. hardened-vm-kernel only has support for VMs and all other hardware options are disabled to reduce attack surface and compile time. . During installation of hardened-vm-kernel, it compiles the kernel on your own machine and does not use a pre-compiled kernel. This ensures the kernel symbols in the compiled image are completely unique which makes it far harder for kernel exploits. This is possible due to hardened-vm-kernel having only VM config options enabled which drastically reduces compile time. . During installation of hardened-host-kernel, the kernel is not compiled on your machine and it uses a pre-compiled kernel. This is because the host kernel needs most hardware options enabled to support most devices which makes compilation take a very long time. . The VM kernel is more secure than the host kernel due to having less attack surface and not being pre-compiled but if you want more security for the host, it is recommended to edit the hardened host config, enable only the hardware options you need and compile the kernel yourself. This makes the security of the host and VM kernel comparable. . Both configs were based on the default Debian config. . These kernels use the linux-hardened patch for further hardening. Custom hardening patches should be sent there. . This only supports LTS kernels as they have the least attack surface (stable kernels have more code and more bugs) and the best stability. . Build script /usr/share/hardened-vm-kernel/build does not run automatic yet. . Kernel does not get installed automatic yet. . See also development discussion: http://forums.whonix.org/t/kernel-recompilation-for-better-hardening Package: helper-scripts Version: 3:49.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 1051 Depends: python3, python3-stem, python3-scapy, python3-yaml, bubblewrap, moreutils, equivs, safe-rm, jq, python3-schema, sq Breaks: usability-misc (<< 3:31.7-1) Replaces: anon-shared-helper-scripts, anon-ws-leaktest, curl-scripts, python-guimessages, python3-guimessages, usability-misc (<< 3:31.7-1) Homepage: https://github.com/Kicksecure/helper-scripts Priority: optional Section: misc Filename: pool/main/h/helper-scripts/helper-scripts_49.1-1_all.deb Size: 280392 SHA256: 2b2dd23e9006b30762d112279024da4555c62f3c0a8087190749c5c5fd4ff91a SHA1: b2f587095fdc75495a10978155e33473f698d3c9 MD5sum: a378ae8218780a62c66092f4b4931218 Description: Helper scripts useful for Linux Distributions Contains a script for curl progress bar in terminal. Includes another script to convert curl exit codes to curl status messages. Implemented in bash. Common code that can be used by other scripts. . Library that can be used by other (anonymity related) packages that want to programmatically get information about states of Tor. Common code, that is often required. Includes bash and Python helper scripts. . Leak Test for Anonymity Distribution Workstations Integrated leak test. Needs to be manually run. See: https://www.whonix.org/wiki/Dev/Leak_Tests . Translatable GUI Messages Generic modules guimessage.py and translations.py. Called with two parameters: .yaml file path and yaml section. Return translations according to distribution local language (Python 'locale'). . Provides the ld-system-preload-disable wrapper to disable /etc/ld.so.preload per application via bubblewrap. Useful if hardened_malloc is being globally preloaded and needs to be disabled for some applications. . Provides the dummy-dependency script for quickly creating and installing dummy packages for working around package dependencies. . Provides apt-get-noninteractive that is a simple wrapper around apt-get, that sets all required environment variables to make it interactive as well as to prevent systemd service starts and restarts during apt-get. Package: helper-scripts-tests Source: helper-scripts Version: 3:49.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 164 Depends: helper-scripts, git, python3-pytest, pylint, mypy, black, ncurses-term Homepage: https://github.com/Kicksecure/helper-scripts Priority: optional Section: misc Filename: pool/main/h/helper-scripts/helper-scripts-tests_49.1-1_all.deb Size: 130760 SHA256: ba2ff0173f33769d0ef07caac48ec75b083c056bcb03c8ce31c5928b22b5399a SHA1: f750f70f9424b667cc4e1dd72c1e9ff78fd6a985 MD5sum: 01f82538be9efabffaa74633711a0d20 Description: Helper scripts test packages This is a dependency package for tests. Package: icon-pack-dist Version: 3:5.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 2528 Conflicts: anon-icon-pack Replaces: anon-icon-pack Provides: anon-icon-pack Homepage: https://github.com/Kicksecure/icon-pack-dist Priority: optional Section: misc Filename: pool/main/i/icon-pack-dist/icon-pack-dist_5.3-1_all.deb Size: 1439528 SHA256: 66cf3ebe1d0d3485bf1781cc21dfab1bac8c5cb6001586f1c488bb36fd265620 SHA1: 676ebf8d8a6d9a68f606d2ab5c09b5c31888a594 MD5sum: b65259ed5ebf4a587ee8a5b35fb420b3 Description: Icon Pack for Derivative Distributions Contains icons, that are used by other derivative distribution specific packages. Others are welcome to use these icons according to their Free licenses as well. Package: initializer-dist Version: 3:8.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 84 Depends: psmisc, debsums, damngpl, safe-rm Conflicts: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Replaces: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Provides: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Homepage: https://www.kicksecure.com/wiki/Verifiable_Builds Priority: optional Section: misc Filename: pool/main/i/initializer-dist/initializer-dist_8.6-1_all.deb Size: 35032 SHA256: 8fb89519c234bad47511e0628c26313d55fd81aa397567255d93ca193235d1b6 SHA1: b589881534c92b8c01d2d2ba768c950ac163d57e MD5sum: 9809212fc5c7ac0d5f6e394ab8c0b44d Description: Initializes Linux distributions, Release Upgrades and Legacy Contains a chroot-scripts-post.d script, that cleans up temporary files, logs. . Deletes random seeds. Since these should not be included in a redistributed image. Also sometimes called 'golden' image. . - /var/lib/urandom/random-seed - /var/lib/systemd/random-seed - /var/lib/random-seed - See also: https://systemd.io/RANDOM_SEEDS.html Package: kicksecure-baremetal-cli Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: kicksecure-nonqubes-cli, kicksecure-general-cli, dist-baremetal-cli, dist-nonqubes-cli, dist-general-cli, ram-wipe, wpasupplicant Breaks: kicksecure-cli-host, kicksecure-cli-host-packages-recommended Replaces: kicksecure-cli-host, kicksecure-cli-host-packages-recommended Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-cli_36.7-1_all.deb Size: 86060 SHA256: 978cbda392008679a3bd2b65a46caa86cc9cedd5adafe80d4a75a33d7c22f1ec SHA1: 9c99c3b5825938ea9fd221544379ce2466a79acc MD5sum: 38bc5dc316c7fbe405750331a44ca393 Description: Kicksecure systems, physical hardware, command-line packages For Kicksecure systems. . For physical hardware. . Provides packages for basic command-line-only installations. Package: kicksecure-baremetal-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: kicksecure-baremetal-cli, kicksecure-nonqubes-gui-lxqt, kicksecure-nonqubes-gui-all, kicksecure-nonqubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-baremetal-gui-lxqt, dist-baremetal-cli, dist-nonqubes-gui-lxqt, dist-nonqubes-gui-all, dist-nonqubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-lxqt-host, kicksecure-xfce-host Replaces: kicksecure-lxqt-host, kicksecure-xfce-host Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-gui-lxqt_36.7-1_all.deb Size: 86084 SHA256: 10a11683786649a56693da42b4f143d447da0bf7b95bc6989f8b75bee2c50899 SHA1: cb2d0e69cfcc1fdd7eaa352f3e023274018c8fc4 MD5sum: 0c4807c29c09f0117ed915b0b8c43c79 Description: Kicksecure systems, physical hardware, LXQt GUI packages For Kicksecure systems. . For physical hardware. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-baremetal-server Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: kicksecure-baremetal-cli, kicksecure-nonqubes-cli, kicksecure-general-cli, dist-baremetal-cli, dist-nonqubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-server_36.7-1_all.deb Size: 86024 SHA256: 9f2de96705e06dbfc382391d442bde10c7e554fa2c4b7468812adf25146372c4 SHA1: 2cd15dbc9d7ab571ec3ccf66eb4f4fd122c5cf49 MD5sum: dbd7e95c01ee6ae02207cb56dfa345c5 Description: Kicksecure systems, physical hardware, server packages For Kicksecure systems. . For physical hardware. . Provides packages for server installations. Package: kicksecure-base-files Version: 3:10.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 2729 Depends: less Conflicts: diverts-etc++issue, diverts-etc++motd, diverts-etc++xdg++waybar++config.jsonc, diverts-etc++xdg++waybar++style.css Breaks: desktop-config-dist (<< 3:14.7-1) Replaces: desktop-config-dist (<< 3:14.7-1) Provides: diverts-etc++issue, diverts-etc++motd, diverts-etc++xdg++waybar++config.jsonc, diverts-etc++xdg++waybar++style.css Homepage: https://github.com/Kicksecure/kicksecure-base-files Priority: optional Section: misc Filename: pool/main/k/kicksecure-base-files/kicksecure-base-files_10.4-1_all.deb Size: 2632628 SHA256: 5e109c64e29e7e50ac21114dd73e7e40d1b61ce15434b6d31fa0bf960d74fbd7 SHA1: 92f153fc638080aef91f2e7a423d9c5372bb1bf0 MD5sum: 5e19a8445756510e2b998591dfdda868 Description: Kicksecure base system miscellaneous files This package contains several important miscellaneous files, such as /etc/issue, /etc/motd, /etc/dpkg/origins/kicksecure, /usr/bin/kicksecure, and others. . Sets the KICKSECURE environment variable to 1 as well. Package: kicksecure-general-cli Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: dosfstools, kicksecure-base-files, lvm2, ntfs-3g, obfs4proxy, gddrescue, usbguard Breaks: kicksecure-cli Replaces: kicksecure-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-cli_36.7-1_all.deb Size: 86052 SHA256: 17499fdfe1fdc3d596b98fe965a3a62951b615928e0d7b0479b7fff7b6060470 SHA1: 9b59de2ed1e46230a73e5857f986086254c4675c MD5sum: 4a254180960da62edf9bdfc5b1797e6d Description: Kicksecure systems, all hardware, command-line packages For Kicksecure systems. . For all hardware platforms. . Provides packages for basic command-line-only installations. Package: kicksecure-general-gui-all Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: browser-choice, flatpak, keepassxc, kicksecure-welcome-page, loupe, vlc, ddrescueview, pipewire-audio, pipewire-pulse, wireplumber, rtkit, catfish, electrum, usbguard-notifier Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-gui-all_36.7-1_all.deb Size: 86100 SHA256: 5bd50b48a306c38f41bc583e2f1519fc5ce5c7f2630b48670b342f901a86df23 SHA1: f56b3bcd034b51e14a9dfe3ee1eca283ad407258 MD5sum: 08adbd2ae24e26610e35fb31796f6b68 Description: Kicksecure systems, all hardware, GUI packages For Kicksecure systems. . For all hardware platforms. . Provides packages for all graphical desktop installations. Package: kicksecure-general-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: network-manager-applet, nm-connection-editor Breaks: kicksecure-lxqt, kicksecure-xfce Replaces: kicksecure-lxqt, kicksecure-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-gui-lxqt_36.7-1_all.deb Size: 86048 SHA256: 2b7c1f9eb14c7c34826c1bc42b1b01c2ebe56cb3dda5dfdd4e9ec7901de06873 SHA1: dc4bdb685a6dc8ece614370abd76df619322a772 MD5sum: d1a84ce2ba78135aed601a869c992757 Description: Kicksecure systems, all hardware, LXQt GUI packages For Kicksecure systems. . For all hardware platforms. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-network-conf Version: 3:7.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 75 Depends: network-manager, iw, wpasupplicant, netbase, wireless-tools, wireless-regdb Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf_7.0-1_all.deb Size: 23012 SHA256: 6cf6c4b37ba0522b9a5e246694190b2f331d1be83a905b69f1d3079277266ff0 SHA1: 8fbe60859efbdb4744d4e186e2d7d01d4b6db93f MD5sum: df234c4aeeddeb03c3071d0e2a728e33 Description: Network Configuration for Kicksecure CLI Disables systemd Predictable Network Interface Names. . Disables systemd-resolved during boot unless file /etc/dns-enable exists. . Disables systemd-resolved fallback DNS (which by default is set to Google). . Disables NetworkManager hostname management (useful in redistributed Kicksecure VMs). Package: kicksecure-network-conf-gui Source: kicksecure-network-conf Version: 3:7.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 49 Depends: network-manager-gnome Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf-gui_7.0-1_all.deb Size: 19652 SHA256: ec2f2f98299da3d3cdd1e45d3bbfbd9fba6e4edf081abd2e4954794148a28e8f SHA1: 21c4244ca797636b7ad130df8631200817714bf5 MD5sum: 5ee5c10c561701aec7843ea283b62c4b Description: Network Configuration for Kicksecure GUI A metapackage with dependencies recommended for a Kicksecure GUI for networking. . See also kicksecure-network-conf. Package: kicksecure-nonqubes-cli Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-cli_36.7-1_all.deb Size: 86008 SHA256: a0af37427ea6e4252572d5d97939490b0cf9bcad946f08b57481a15133c458de SHA1: caffb6438249b15f037616d913c83cc8826fdd50 MD5sum: 2818f67feb96adf547a0e4eba143c403 Description: Kicksecure systems, not Qubes VMs, command-line packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-nonqubes-gui-all Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-gui-all_36.7-1_all.deb Size: 86004 SHA256: b06ea3bd259055a25852181ce27fee4189402cdd29a4033ec93021940180fce2 SHA1: 31ed61f013e1ece2dd3e207cb9bf72233504bb2d MD5sum: fd8dbe7b08f3c9b2146f069f734544e9 Description: Kicksecure systems, not Qubes VMs, GUI packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: kicksecure-nonqubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: pavucontrol-qt, pavucontrol-qt-l10n Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-gui-lxqt_36.7-1_all.deb Size: 86024 SHA256: c433dbf126b246a6cabe584f57456c4a0c7731b15275c8a240a4f5d88f517857 SHA1: 6953fc7e5d8c4b58fe1f43e919b185e1984e5b6e MD5sum: 75943768eaf8298beff47fd958495418 Description: Kicksecure systems, not Qubes VMs, LXQt GUI packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-packages-dependencies-pre Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Depends: dist-base-files, kicksecure-network-conf Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-packages-dependencies-pre_36.7-1_all.deb Size: 86028 SHA256: 089ab195df933bdd329e43170618c678e1acddfbb561866076dad9b38fdbb649 SHA1: 6ba167c7805f83815d0b26c3cee0e38145ff2801 MD5sum: 7d7d56738d641cfcac94e303f3c079bd Description: Dependencies for Kicksecure that changes network related files A metapackage, which installs packages which Kicksecure depends on. Can not be merged into another package due to conflicts with chroot build process. Package: kicksecure-qubes-cli Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: kicksecure-general-cli, dist-qubes-cli, dist-general-cli, split-gpg2, qubes-img-converter, qubes-pdf-converter, qubes-core-agent-network-manager, wpasupplicant Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-cli_36.7-1_all.deb Size: 86060 SHA256: d9f8b23469f33b275bf20e294d1ca72365cf9418e30f305de2b04b43e15e1873 SHA1: 8511e6ca9f8e8bf05d76f6385eb1a5734c8eecd4 MD5sum: c10c9a524a0339b66e5f3ac0497d968a Description: Kicksecure systems, Qubes VMs, command-line packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-qubes-gui-all Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: pipewire-qubes Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-gui-all_36.7-1_all.deb Size: 85984 SHA256: b643446d3b7ed03c4a865c15ca3a810c139854dc450df0a41c340d4fca772cae SHA1: 96fa8c8272fd58ae95f6d51722655f7c62ff1dd8 MD5sum: 307d63d02ab2bcf8cae78c2a0fa1bd30 Description: Kicksecure systems, Qubes VMs, GUI packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: kicksecure-qubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: kicksecure-qubes-gui-all, kicksecure-qubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-qubes-gui-lxqt, dist-qubes-gui-all, dist-qubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-qubes-gui Replaces: kicksecure-qubes-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-gui-lxqt_36.7-1_all.deb Size: 86044 SHA256: ee44c7cd1f172c13f4f1db45f55c44e8c997c907dd4f5618b79b7d476676f3c5 SHA1: 19a5d869a708d942120f4256fb825305034cedd0 MD5sum: 53400159f90448dca6ff606dff57d77d Description: Kicksecure systems, Qubes VMs, LXQt GUI packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-qubes-server Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: kicksecure-qubes-cli, kicksecure-general-cli, dist-qubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-server_36.7-1_all.deb Size: 86008 SHA256: afb48625c0c7708fe8d4a42940b00cc914258cce15ac20b034c0e8e0260ea530 SHA1: 70e9d0377bd95ac84e25a225c24dc9a29cb60429 MD5sum: d6c2083558ab1834a9b5b6906c1ecaa3 Description: Kicksecure systems, Qubes VMs, server packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for server installations. Package: kicksecure-vm-cli Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: kicksecure-nonqubes-cli, kicksecure-general-cli, dist-vm-cli, dist-nonqubes-cli, dist-general-cli Breaks: kicksecure-cli-vm Replaces: kicksecure-cli-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-cli_36.7-1_all.deb Size: 86020 SHA256: c86de2931c28e05c29cae8c13238c135c889dab00d14759c3820aca5f16ecc06 SHA1: 4b814a5b66c9857f3b7c3cb0d65b7bcd5f84aab1 MD5sum: 05ec528077e4b355a4fce5732ebee06f Description: Kicksecure systems, VMs, command-line packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-vm-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: kicksecure-vm-cli, kicksecure-nonqubes-gui-lxqt, kicksecure-nonqubes-gui-all, kicksecure-nonqubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-vm-cli, dist-nonqubes-gui-lxqt, dist-nonqubes-gui-all, dist-nonqubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-lxqt-vm, kicksecure-xfce-vm Replaces: kicksecure-lxqt-vm, kicksecure-xfce-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-gui-lxqt_36.7-1_all.deb Size: 86080 SHA256: 5c8eb170432dc5adeb069ea223c05ebfa5805c9d0efca870d8c0c816c8a77664 SHA1: de44f0c568d882fda9d09c28c2196538616e1ffa MD5sum: 68011b5ddbcc24800950a8f8b1dfd306 Description: Kicksecure systems, VMs, LXQt GUI packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-vm-server Source: kicksecure-meta-packages Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 113 Pre-Depends: legacy-dist Depends: kicksecure-vm-cli, kicksecure-nonqubes-cli, kicksecure-general-cli, dist-vm-cli, dist-nonqubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-server_36.7-1_all.deb Size: 86020 SHA256: d50f85e4cc6d592b736a05a5f9dfe3123f13f5b66fbb6b5b56585453d9cc9f4a SHA1: f2b9c3b3674c3e31046000093aac8da1fd98b9db MD5sum: fcae99d19000f4d783eeb71e18851d6e Description: Kicksecure systems, VMs, server packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for server installations. Package: kicksecure-welcome-page Version: 3:7.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 1013 Depends: fonts-roboto-fontface, libjs-jquery Homepage: https://github.com/Kicksecure/kicksecure-welcome-page Priority: optional Section: misc Filename: pool/main/k/kicksecure-welcome-page/kicksecure-welcome-page_7.8-1_all.deb Size: 922724 SHA256: 708cf667cfdca5c80ffa0d56426a7ff7b3f769432f6fd76caf9630800fcf8b22 SHA1: b6fbbc3a283305f3a164359246920439a10f55cf MD5sum: 4bb1e3c3df017c71c7eff5b6031b8400 Description: Local Browser Homepage for Kicksecure Kicksecure specific browser start page. . Contains Kicksecure logo and Kicksecure links. . Safe to remove, if you know what you are doing. Package: legacy-dist Version: 3:20.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 154 Depends: helper-scripts, apt-forktracer, moreutils Conflicts: vbox-disable-timesync, whonix-legacy Breaks: kloak (<< 0:0.6.3-1) Replaces: kloak (<< 0:0.6.3-1), vbox-disable-timesync, whonix-legacy Provides: vbox-disable-timesync, whonix-legacy Homepage: https://github.com/Kicksecure/legacy-dist Priority: optional Section: misc Filename: pool/main/l/legacy-dist/legacy-dist_20.3-1_all.deb Size: 62256 SHA256: b0f90b89ec4462dd8f03a94ccab3905dfa4dcd25d3b5131536d95407da0959f3 SHA1: 9abd86e9adc5bd05b5a8923ad41ab62257dcb069 MD5sum: 89a438919d36949a6131e4187d5e8b5a Description: Prepare older Build Versions of Derivatives for Upgrade Applies fixes required for upgrading from for example version 8.x to version 9.x etc. . Upgrades from version 7.x or older versions is unsupported. . Safe to remove. Package: libvirt-dist Version: 3:11.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 144 Depends: adduser, qemu-kvm, libvirt-daemon-system, libvirt-clients, virt-manager, gir1.2-spiceclientgtk-3.0, dnsmasq-base, helper-scripts, msgcollector Conflicts: whonix-libvirt Replaces: whonix-libvirt Provides: whonix-libvirt Homepage: https://github.com/Kicksecure/libvirt-dist Priority: optional Section: misc Filename: pool/main/libv/libvirt-dist/libvirt-dist_11.9-1_all.deb Size: 56092 SHA256: b1b025a28769cbbd1b2161846248bdc9944e57ef87c7a8854ff372f6bec60625 SHA1: 14f1a811a83c01c4b50fd8d61410bdc30cf48342 MD5sum: 1c42248785e3cb9576a18972f207c254 Description: Whonix Libvirt XML Files for KVM and QEMU Libvirt XML files for Whonix-Gateway, Whonix-Workstation, Whonix-Custom-Workstation and Whonix's internal network. . Whonix-Host grub branding, motd and issue banner. . Whonix-Host boot popup. . See also: - https://www.kicksecure.com/wiki/KVM - https://www.kicksecure.com/wiki/QEMU Package: live-config-dist Version: 3:10.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 309 Depends: helper-scripts, pkexec, rsync, libglib2.0-bin, xdg-user-dirs, qml6-module-qtquick-window Homepage: https://github.com/Kicksecure/live-config-dist Priority: optional Section: misc Filename: pool/main/l/live-config-dist/live-config-dist_10.0-1_all.deb Size: 148928 SHA256: 0b1aabc8072a2ccfbee726f6a1d5fc85e07a9258fa6670d5fe7d1b1c5c72328f SHA1: 0420d01f62486f7832e52939c84b4339ced44868 MD5sum: 249d19fd912f7e88dca828f3a036b8ff Description: calamares-settings-kicksecure and maybe calamares-settings-whonix Installed in Host ISO Live. . Supposed to be removed in Host installed. . Kernel parameters required for Live ISO. Package: lxqt-wayland-session Version: 0.2.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 473 Homepage: https://github.com/lxqt/lxqt-wayland-session Priority: optional Section: x11 Filename: pool/main/l/lxqt-wayland-session/lxqt-wayland-session_0.2.8-1_all.deb Size: 342160 SHA256: a02bf820ed03375177abcb2545b3e1d8dd617375b53af7ae9cd75e64c680be93 SHA1: 3959a78332c1cb5636b0cf13c36523466c5223d6 MD5sum: 80d3a3d015dfb4ff09a4a8df3f884d6d Description: Files needed for the LXQt Wayland Session Files needed for the LXQt Wayland Session: Wayland session start script, its desktop entry for display managers and default configurations for actually supported compositors. Package: mediawiki-shell Version: 3:5.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 160 Depends: helper-scripts, safe-rm, jq, retry, python3 Homepage: https://github.com/Kicksecure/mediawiki-shell Priority: optional Section: misc Filename: pool/main/m/mediawiki-shell/mediawiki-shell_5.5-1_all.deb Size: 49336 SHA256: befba42d3ca620c8953f1fb586998229fdde47b29c609755fa6a899f830263d7 SHA1: bd5e583e34676729ad582d3971ed722618c0c132 MD5sum: c5152e2dfce82d35e223b7af0062e954 Description: bash shell scripts for usage of MediaWiki API Download, upload changes to, and manage pages from MediaWiki wikis from the command line. . This tool may work on other wiki sites, but is primarily intended for management of the Kicksecure and Whonix wikis. Package: msgcollector Version: 3:16.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 222 Depends: python3, inotify-tools, procps, safe-rm, moreutils, init-system-helpers (>= 1.52) Conflicts: diverts-etc++bash.bash+-+logout Provides: diverts-etc++bash.bash+-+logout Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector_16.2-1_all.deb Size: 73192 SHA256: 50117004a276ab72f5ccc0f7f7ca22e7ff1dbf4c40eb99e7d873343daa9b7fa5 SHA1: 1048913a892b67e9a1503211498c320082b87ba0 MD5sum: 776d939e3226ae90fe8744513f0c978d Description: Command Line Interface Messages Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in terminal user interfaces (CLI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as ncurses but has of course much less and very different features. . For graphical user interface (GUI) support also install package msgcollector-gui. Package: msgcollector-gui Source: msgcollector Version: 3:16.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 79 Depends: msgcollector, python3-pyqt5, qtwayland5, yad, libnotify-bin, lxqt-notificationd, x11-utils, gnome-colors-common Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector-gui_16.2-1_all.deb Size: 50752 SHA256: 43a8224528af70a680ed82b803a838da3384a746e19344ecfe3a8bafa0e11db8 SHA1: e1777709b29721745dd0a93d6eda7511d8449e25 MD5sum: e1fa506e28f294ce77e0ea2e18eac330 Description: Graphical User Interface Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in graphical user interfaces (GUI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as Qt or GDK but has of course much less and very different features. . A metapackage that installs required dependencies for graphical user interface support. Package: open-link-confirmation Version: 3:8.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Depends: sensible-utils, icon-pack-dist, msgcollector, xdg-utils Recommends: tb-starter, tb-updater Breaks: tb-default-browser (<< 3:7.5-1) Replaces: tb-default-browser (<< 3:7.5-1) Homepage: https://github.com/Kicksecure/open-link-confirmation Priority: optional Section: misc Filename: pool/main/o/open-link-confirmation/open-link-confirmation_8.3-1_all.deb Size: 35140 SHA256: c87441d61dc65c606813793f578a51058dfa6b16537eec6692f96578683932af SHA1: 86a04ff132d523ad97d2bab487ccdf3b08ddf353 MD5sum: 3355d95c17e81dc8f38174b396813758 Description: confirmation dialog before opening links or files Provides a safety wrapper for opening URLs or files. Prompts the user for confirmation before launching the associated application, to prevent accidental or unsafe link openings. . Integrates with msgcollector to display graphical confirmation and error dialogs. Uses helper-scripts' sanitize-string to strip potentially malicious Unicode or HTML input, trims displayed addresses to 128 characters, and logs diagnostic information through msgcollector. . Detects execution context: * On Kicksecure and Whonix-Workstation systems, links can be opened after explicit confirmation in a supported browser. * On Whonix-Gateway (anon-gw-base-files installed), opening of links is blocked for security reasons. Local files are instead opened in the text editor defined by $EDITOR (defaulting to FeatherPad or Mousepad). * In Qubes OS Template, integrates with qvm-open-in-dvm for secure link opening in disposable VMs. Handles refusal responses and displays informative error dialogs. * When booted in "sysmaint" (system maintenance) mode, link opening is refused to avoid network activity during administrative sessions. . Automatically detects and uses installed browsers such as: brave-browser, chromium, firefox, mullvad-browser, browser-choice, or torbrowser (Whonix starter wrapper). Falls back to x-www-browser if none of the above are available. . Provides infinite recursion protection to prevent self-invocation loops, sets environment variables (OPEN_LINK_CONFIRMATION, OPEN_LINK_CONFIRMATION_COUNTER), and adjusts XDG_CONFIG_DIRS and XDG_DATA_DIRS to register itself as a compliant XDG handler and default $BROWSER. . Designed for security-focused environments such as Kicksecure, Whonix, and Qubes OS. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: privleap Version: 3:5.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 460 Depends: python3, python3-pam, python3-sdnotify Homepage: https://www.kicksecure.com/wiki/Privleap Priority: optional Section: admin Filename: pool/main/p/privleap/privleap_5.4-1_all.deb Size: 81668 SHA256: 19ad9025ef41e278583922af359a4ae4ccb4afe7682b87c50d3e547bd1187d52 SHA1: cbf6754a209346a6a45f3f7376860c44ce940694 MD5sum: ecfc553d6e15096a658c736684a7cb6d Description: Limited privilege escalation framework Provides a privilege escalation framework for running pre-defined command sequences ("actions") as root. . Does not require a SUID executable. Package: rads Version: 3:8.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 115 Homepage: https://www.kicksecure.com/wiki/RAM_Adjusted_Desktop_Starter Priority: optional Section: misc Filename: pool/main/r/rads/rads_8.6-1_all.deb Size: 36832 SHA256: 1ab48f77f6a4db16a8d9dbee7daa36103ac0bf33d20882ebf1d7d0a012d23467 SHA1: 118b96d5f62e10ea754a7823f2b5e0bf23b57dfd MD5sum: ed191a32b97cd40ee41adb8c140d0bdd Description: RAM Adjusted Desktop Starter If there is more than X MB RAM in total, the desktop environment will be started. . If less than X MB RAM in total (for example, only 196 MB RAM in total), no desktop environment will be started. . This should be quite convenient, because users with low RAM could reduce Y MB and even if they sometimes wanted to configure/check something, they could assign 512 RAM and automagically boot into the graphical desktop. There are also many settings in /etc/rads.d/ (stackable) to configure this feature, so if you want, you can also add a lot RAM, but not boot into a desktop environment, or use different display managers and so on. . Most useful in virtual machines. Package: ram-wipe Version: 3:4.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 82 Depends: helper-scripts, dracut, secure-delete, kexec-tools, systemd-cryptsetup Homepage: https://github.com/Kicksecure/ram-wipe Priority: optional Section: misc Filename: pool/main/r/ram-wipe/ram-wipe_4.4-1_all.deb Size: 25704 SHA256: f75f7fbbaeaf9d5893a0d16da2a2fe03a266ea9443e783580c2bf5ab072ba69e SHA1: b0ba3430d6125c7309fe6d1b2f345e62634d7694 MD5sum: bc404a1e57414ae4808593db886b8a13 Description: Wipe RAM on shutdown and reboot Helps protect sensitive data by wiping RAM during shutdown and reboot, which can help defend against cold boot attacks. . This package requires dracut. It is incompatible with systems using initramfs-tools unless they are switched to dracut. . Implemented as the dracut module ram-wipe. . Only tested on systemd-enabled systems. . User documentation: https://www.kicksecure.com/wiki/ram-wipe . Design documentation: https://www.kicksecure.com/wiki/Dev/RAM_Wipe . Discussion: https://forums.whonix.org/t/is-ram-wipe-possible-cold-warm-boot-attack-defense . Related links: * https://www.kicksecure.com * https://www.kicksecure.com/wiki/ram-wipe * https://www.kicksecure.com/wiki/Dev/RAM_Wipe * https://www.kicksecure.com/wiki/dracut * https://www.kicksecure.com/wiki/systemd Package: repository-dist Version: 3:13.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 145 Depends: helper-scripts, lsb-release, moreutils, python3:any, sq Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist_13.4-1_all.deb Size: 58656 SHA256: 5eb7f8a7090ac82f424ea945d6d04fc70cc80fc70b491b44ddd12012710bb3ef SHA1: c087b8d9e2364f263a9f242587fb3b3c3e4e0ce8 MD5sum: 3a882a295f681775210b6d4d77fa2b98 Description: Derivative APT Repository Command Line Interface (CLI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . Derivative's APT Repository is not enabled by default. Some users prefer this for trust/security reasons. . On first boot of Derivative, the Derivative Repository Tool gets automatically started by setup-dist. The user is free to either leave Derivative's repository disabled or to configure it as desired. . Technically speaking, this tool creates or deletes file `/etc/sources.list.d/derivative.sources`. . Using APT `signed-by`. Package: repository-dist-wizard Source: repository-dist Version: 3:13.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 75 Depends: pkexec, python3-pyqt5, python3:any, qtwayland5 Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist-wizard_13.4-1_all.deb Size: 41460 SHA256: c9a075ec8fa9540ec1c8c674b7d7c5d83ea3659e1a1887505de1ccb6371d9e6d SHA1: ca9cbc5e3189c6e410cbca3474627beeecee4c09 MD5sum: c3879ac99db0ef1e4b0d4d12b7dd6a4b Description: Derivative APT Repository Graphical User Interface (GUI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . This is a metapackage depending on the required packages for the GUI (Graphical User Interface). Package: ro-mode-init Version: 3:3.5-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 60 Depends: live-boot, live-boot-initramfs-tools, live-tools Conflicts: grub-default-live, grub-live Replaces: grub-default-live, grub-live Provides: boot-live Homepage: https://github.com/Kicksecure/ro-mode-init Priority: optional Section: misc Filename: pool/main/r/ro-mode-init/ro-mode-init_3.5-1_all.deb Size: 19804 SHA256: 03a379e32830c06b3062f98e95906998cd859fbadfb048163b6508604cbd0cab SHA1: 965cce6eb3b2a4fea68da6c66235bb1b51ac72c4 MD5sum: af83e2e6ed9dec3b6ce946047d7b4812 Description: Detects read-only disks and automatically enables live-boot Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . No claims are made with regard to anti forensics. Package: sandbox-app-launcher Version: 0:7.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 132 Depends: sudo, bubblewrap, apparmor, libseccomp-dev, helper-scripts, dbus-x11 Homepage: https://www.kicksecure.com/wiki/Sandbox-app-launcher Priority: optional Section: misc Filename: pool/main/s/sandbox-app-launcher/sandbox-app-launcher_7.4-1_all.deb Size: 49216 SHA256: 1ebefe283af0c7cccfd28249f7412c715cdd3d2fc16fe80540a2ce7a8913cee8 SHA1: 4db416b326048d19d3162e842cba75d58b2c3c85 MD5sum: 3d66b876d552ddd4d1ac537db73acb05 Description: application launcher to start apps in a restrictive sandbox sandbox-app-launcher runs each app as its own user, in a bubblewrap sandbox and confined by apparmor. . The directory, `/shared`, is shared across all app sandboxes to transfer files across. . This implements a permissions system to configure what apps can access. There are currently 5 available permissions: . * Network access . * Webcam access . * Microphone access . * Shared storage access (read-only or read-write) . * Dynamic native code execution . All apps the user installs will be automatically configured to run in the sandbox and a prompt will ask the user which permissions they wish to grant the application (not implemented yet). . Currently a WIP and not for actual use. Package: sdwdate Version: 3:27.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 347 Depends: bc, helper-scripts, adduser, gcc, libc6-dev, privleap, python3-stem, python3-dateutil, python3-socks, python3-sdnotify, python3-requests, python3, tor, util-linux-extra Recommends: timesanitycheck, bootclockrandomization Conflicts: time-daemon Provides: time-daemon Homepage: https://www.kicksecure.com/wiki/Sdwdate Priority: optional Section: misc Filename: pool/main/s/sdwdate/sdwdate_27.8-1_all.deb Size: 154104 SHA256: 1a5ca483719ab541846c3e6c6f4b325970bf4667476ed69d5fa2e7376f1f6fd7 SHA1: b7f77b89fd900455a965210adbbbf9e863ebc203 MD5sum: ac8d15095f3fac5ea97ae2faa5242caa Description: Secure Distributed Network Time Synchronization Time keeping is crucial for security, privacy, and anonymity. Sdwdate is a Tor friendly replacement for rdate and ntpdate that sets the system's clock by communicating via onion encrypted TCP with Tor onion webservers. . At randomized intervals, sdwdate connects to a variety of webservers and extracts the time stamps from http headers (RFC 2616). Using sclockadj option, time is gradually adjusted preventing bigger clock jumps that could confuse logs, servers, Tor, i2p, etc. . This package contains the sdwdate time fetcher and daemon. No installation on remote servers required. To avoid conflicts, this daemon should not be enabled together with ntp or tlsdated. Package: sdwdate-gui Version: 1:13.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 285 Depends: privleap, python3, python3-pyqt5, python3-pyinotify, qtwayland5, helper-scripts, sdwdate, adduser, python3-schema Homepage: https://www.kicksecure.com/wiki/sdwdate-gui Priority: optional Section: misc Filename: pool/main/s/sdwdate-gui/sdwdate-gui_13.9-1_all.deb Size: 106532 SHA256: 8b74a89c4c19b783283436711c1178d6d09199a477d9af0a301c96228a37c1f2 SHA1: 80e0439b2b7a28acf6f0d9b78506f24a27d2445c MD5sum: d7f0d94094652d07cd49b031ab9a661e Description: Sdwdate Monitor sdwdate-gui is a systray icon monitor for sdwdate: checks sdwdate's status and modify the tray icon accordingly. In addition, it allows the user to restart sdwdate and view the log. Package: security-misc-desktop Source: security-misc Version: 3:51.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 218 Depends: security-misc-shared Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-desktop_51.8-1_all.deb Size: 179464 SHA256: b602d863f31788e95023b3a91c6f2334dbfbf0747647aa654530f5fd7c75ecee SHA1: 77e692162bc3a67c53d2e6b4d5dc237c54b07941 MD5sum: cb7521adc9332363c880f35068d8442f Description: Security improvements for desktops For desktops. . (Or servers running a desktop?) Package: security-misc-server Source: security-misc Version: 3:51.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 206 Depends: security-misc-shared Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-server_51.8-1_all.deb Size: 178308 SHA256: ae1fb51a206a00142a60e7515f6fb0bdbaaa44a05756549b9f9b6061316d3f5f SHA1: 77cf305ee3cd438432aae8c559aa71af41604532 MD5sum: fb352eb900e4e114c175153461a3cfee Description: Security improvements for servers For servers. . (Or desktops running a server?) Package: security-misc-shared Source: security-misc Version: 3:51.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 807 Depends: adduser, apparmor-profile-dist, build-essential, dmsetup, helper-scripts, libcap2-bin, libdbus-1-dev, libglib2.0-bin, libpam-modules-bin, libpam-runtime, libpam-umask, libsystemd-dev, memlockd, pkgconf, python3, secure-delete, dconf-gsettings-backend | gsettings-backend, debconf (>= 0.5) | debconf-2.0, init-system-helpers (>= 1.52) Conflicts: security-misc Replaces: anon-gpg-tweaks, security-misc, swappiness-lowest, tcp-timestamps-disable Provides: security-misc Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-shared_51.8-1_all.deb Size: 273164 SHA256: bfcceb390d6c0a1fa0ef6233b46c5d3f5525e36802c5259af12c8484db0de5f8 SHA1: 15d071cd69423621cf79d4bf24d995a93ed2b9d4 MD5sum: fcffe0fa46370a0a19c838bf04997d08 Description: Enhances Miscellaneous Security Settings https://github.com/Kicksecure/security-misc/blob/master/README.md . https://www.kicksecure.com/wiki/Security-misc . Package security-misc-desktop and/or security-misc-server may also be useful. . Discussion: . Happening primarily in Whonix forums. https://forums.whonix.org/t/kernel-hardening-security-misc/7296 Package: serial-console-enable Version: 3:4.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 62 Homepage: https://github.com/Kicksecure/serial-console-enable Priority: optional Section: misc Filename: pool/main/s/serial-console-enable/serial-console-enable_4.8-1_all.deb Size: 18532 SHA256: 78012c6f10b688df444f47defc4e78e8541f56e3dc5f9527a62605b734630004 SHA1: 30c24e1b2f2502b8831786b9ae787afe34ce667f MD5sum: 1721a728deee4e005dfc536d477a50f6 Description: Enables serial console Ships a /etc/default/grub.d/30_serial_console.cfg configuration file, that enables serial console. . Enables /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service by creating a symlink from: /lib/systemd/system/serial-getty@.service to: /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service . Useful for serial console login such as into Whonix KVM VMs from the host operating system. . Forum discussion: https://forums.whonix.org/t/how-do-i-enter-the-whonix-shell-from-cli/7271 . Safe to remove if you do not require serial console login such as: virsh console vm-name Package: setup-dist Version: 3:12.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Depends: helper-scripts, dialog, privleap, menu, python3 Conflicts: whonixsetup Replaces: whonixsetup Provides: whonixsetup Homepage: https://github.com/Kicksecure/setup-dist Priority: optional Section: misc Filename: pool/main/s/setup-dist/setup-dist_12.2-1_all.deb Size: 42944 SHA256: 7b69c168cbb510d440b213227a0d76848d0233b6b3729c3f985d9871a5c64909 SHA1: ad3af6bf771d870c89ea77bb98ff5c91e234125d MD5sum: 444b900cc2c53615f0bd0c9a15130345 Description: First Time Connection Setup Disclaimer. . When the derivative starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. setup-dist is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: setup-wizard-dist Version: 3:13.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 140 Depends: setup-dist, python3-yaml, helper-scripts, python3, x11-xserver-utils Recommends: icon-pack-dist Conflicts: whonix-setup-wizard Replaces: whonix-setup-wizard Provides: whonix-setup-wizard Homepage: https://github.com/Kicksecure/setup-wizard-dist Priority: optional Section: misc Filename: pool/main/s/setup-wizard-dist/setup-wizard-dist_13.3-1_all.deb Size: 61352 SHA256: 3a1c258f029d5f6898d8ca1b1b877eaa27c17c1834652bd8a7aa5410e10ace82 SHA1: 6701fe2e72a7da90befdead4d54f3b3d54e60689 MD5sum: 21e793fcb975d27b9ecb44dc6369ab7c Description: First Boot Setup Disclaimer. . When distribution starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. Anon Connection Wizard is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: swap-file-creator Version: 3:9.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 90 Depends: helper-scripts, bc, safe-rm Homepage: https://www.kicksecure.com/wiki/Swap-file-creator Priority: optional Section: misc Filename: pool/main/s/swap-file-creator/swap-file-creator_9.6-1_all.deb Size: 38056 SHA256: 3379903f654a47c09334c1fc293343648b8f2894c1e796f7400ccc342b0a61fe SHA1: e0395da9df8226f610a9a338e4588beaa3642f7a MD5sum: 91dc9803f75112fa3bb563aecd291257 Description: Swap file creator for LUKS-encrypted systems swap-file-creator automatically creates and enables a swap file on systems using LUKS full-disk encryption. A new swap file is created on every boot if the target path resides on a LUKS-encrypted device. . By default, no swap file is created on unencrypted disks. This can be optionally overridden (not recommended for privacy), allowing swap-file- creator to operate on unencrypted storage as well. . The tool is particularly useful for systems with low RAM, such as virtual machines, where lack of swap may cause freezing during upgrades or heavy memory operations. . The swap file can be shredded on shutdown for additional privacy, if enabled. Various parameters, including file path, custom size, and pre-checks, can be configured through /etc/default/swap-file-creator. . Earlier versions provided an additional dm-crypt layer and created a swap file encrypted with an ephemeral key. Due to a Linux kernel bug, this functionality is no longer possible as of Debian trixie, and the swap file is instead placed directly on top of LUKS full-disk encryption. More details: https://lore.kernel.org/lkml/20251111231835.1232ad8f@kf-m2g5/T/#u Package: sysmaint-panel Version: 3:5.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 129 Depends: helper-scripts, pkexec, python3, python3-pyqt5, safe-rm Homepage: https://www.kicksecure.com/wiki/System_Maintenance_Panel Priority: optional Section: admin Filename: pool/main/s/sysmaint-panel/sysmaint-panel_5.0-1_all.deb Size: 33100 SHA256: e7242b9bb1ce6dc72ef885652e5cd9d1d738b966311bf1e25948114060310c26 SHA1: febaf4aeb583863e6410462d2b8310fe26184991 MD5sum: e7eff2034d0dabaa34542e263751e061 Description: System Maintenance Panel The System Maintenance Panel (sysmaint-panel) allows the user to perform several common system maintenance and administration tasks. It can be used to install, remove, and update software, create and remove user accounts, and enable or disable password protection and autologin for user accounts. . Provides a minimal session that can be booted into for system maintenance tasks on Linux distributions. Package: systemcheck Version: 3:51.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 642 Depends: dist-base-files, python3, signify-openbsd, curl, ca-certificates, msgcollector, psmisc, vrms, libarchive-tools, helper-scripts, net-tools, privleap, adduser, security-misc-shared, spectre-meltdown-checker, apparmor-profile-dist, safe-rm Recommends: icon-pack-dist, msgcollector-gui Conflicts: apparmor-profile-whonixcheck, whonixcheck Replaces: apparmor-profile-whonixcheck, whonixcheck Homepage: https://www.kicksecure.com/wiki/systemcheck Priority: optional Section: misc Filename: pool/main/s/systemcheck/systemcheck_51.2-1_all.deb Size: 210708 SHA256: ff336d6274aa09dede961848aa8c1639bf48033f2163d7f3e2432e26851eb2c4 SHA1: 5c10791191143701c9cfbbd2d9cff25fdc7f744f MD5sum: 3e2146dc0b0f920645595a4060da4094 Description: Anonymity and security check Checks many important aspects for better security. . Only checks things. Does not change things. . Safe to remove. Package: tb-default-browser Source: open-link-confirmation Version: 3:8.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 61 Depends: open-link-confirmation Homepage: https://github.com/Kicksecure/open-link-confirmation Priority: optional Section: oldlibs Filename: pool/main/o/open-link-confirmation/tb-default-browser_8.3-1_all.deb Size: 29116 SHA256: 40819f6b4c4aa8bd3486cb92e1870f56ee6912f0fad3282caf1a76e3c8ff7f62 SHA1: bb4435e948de6a55de6fbcbcee20175cebd313bb MD5sum: 200cacce3417c7e527fb202d9d192b93 Description: transitional package This is a transitional package. It can safely be removed. Package: tb-starter Version: 3:18.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 172 Depends: msgcollector, privleap Recommends: tb-updater, open-link-confirmation, icon-pack-dist Provides: torbrowser-launcher Homepage: https://github.com/Kicksecure/tb-starter Priority: optional Section: misc Filename: pool/main/t/tb-starter/tb-starter_18.6-1_all.deb Size: 68512 SHA256: a01a1f496cf6eae67f17ecb606cc54b72c6e53886a131de2da27603338c1ee95 SHA1: 0ac08eca8fb43bd6fd48c7f449281ab86cdf10a9 MD5sum: 7ef76f1ef99075a0b209fe64f4c7309c Description: Tor Browser Starter (by Whonix developers) Both, a starter for Tor Browser. Provides security hardening, integration with Debian, Whonix and Qubes. . Starter. . - Tor Browser Starter start menu entry and `/usr/bin/torbrowser` starter. Starts `/home/user/.tb/tor-browser/start-tor-browser`. . When config option tb_hardening=true is set or when using command line option --hardening, firejail will be used. . Uses open-link-confirmation if available. . Prompts to install the browser if not yet installed. . Changes directory into browser directly before startup. . Custom homepage support. . Qubes integration. . Sanity tests: - Aborts if detected being run as root. - Aborts in Qubes TemplateVM. - Aborts in Qubes DVM Template. - Waits for Qubes mount dirs and gui agent being ready. . In Qubes AppVM copies browser from root image to private image at first start. . Tor Browser documentation by Whonix. . - https://www.whonix.org/wiki/Tor_Browser - https://www.whonix.org/wiki/Tor_Browser/Advanced_Users . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tb-updater Version: 3:44.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 496 Depends: msgcollector-gui, curl, psmisc, pv, libarchive-tools, jq, libdbus-glib-1-2, privleap, python3, acl, helper-scripts Recommends: tb-starter, icon-pack-dist Suggests: open-link-confirmation Homepage: https://github.com/Kicksecure/tb-updater Priority: optional Section: misc Filename: pool/main/t/tb-updater/tb-updater_44.3-1_all.deb Size: 257256 SHA256: 3bb34cc4abe760a227cbe587520c54825ed8e5cb839cd285426e4563e01ffb8f SHA1: 13f18f1a4d9132428a92bf796d5ae5d6e07c1504 MD5sum: b492b84545a18bd2cfba718a9e4dd336 Description: Tor Browser Downloader by Whonix developers Automates download and verification of Tor Browser from The Tor Project's website. Useful for initial installation of Tor Browser, clean re-installations of Tor Browser and keeping newly created Qubes AppVMs inherited from updated Qubes TemplateVMs can ship up to date versions of Tor Browsers. . Incapable of preserving of updating and preserving user data. Use Tor Browser's internal updater for that purpose. Notifies about already exiting installations of Tor Browser. Renamed rather than deletes old versions of Tor Browsers to avoid user data loss. . Has a cli and a gui mode. Can auto detect latest version numbers or use user configured version numbers. Comes with a download confirmation screen that lets users choose which version to download. [1] Has a installation confirmation screen [2] that enables users to detect indefinite freeze and rollback attacks. . Integrates well with tb-starter and open-link-confirmation package as well as with Qubes. . Without the helper-scripts package installed, the GUI will not move the progress bar. . If you have the helper-scripts package installed, it will show a nicer progress bar when run in terminal and more meaningful curl exit code messages, when curl failed. . When having the helper-scripts package installed (recommended for Anonymity Distributions), Tor Browser Downloader will check, that Tor is enabled, that no package manager is currently running and that Tor finished bootstrapping before download attempts. . Supports being run inside chroot and from Debian maintainer postinst script. . Qubes integration: . - Up-to-date browser versions made available to freshly created AppVMs and DispVMs. - In DispVM mounts browser folder which resides in root image to user home folder rather than copying for faster browser startup. . This package is produced independently of, and carries no guarantee from, The Tor Project. . [1] https://www.whonix.org/wiki/Tor_Browser#Download_Confirmation_Screen [2] https://www.whonix.org/wiki/Tor_Browser#Installation_Confirmation_Screen Package: timesanitycheck Version: 3:8.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 80 Homepage: https://www.whonix.org/wiki/Dev/TimeSync Priority: optional Section: misc Filename: pool/main/t/timesanitycheck/timesanitycheck_8.9-1_all.deb Size: 28616 SHA256: a5ff841bac33f23a8ccc3badd1e5b635b1ee56ab4b4af119a155683f413a095b SHA1: 4911f2bd547825dabbbe90480f9152bc2698133f MD5sum: aa973457aa3a3da66f4621c681fde8f8 Description: Checks if the system clock is sane between build timestamp and expiration date Reports, if clock is sane and not slower than build timestamp or faster than expiration date (configurable, default currently set to 17 MAY 2033 10:00:00). . This should catch situations, where the host's clock is too much off (CMOS battery defect, user mistakenly set a very wrong date, etc.), resulting in network time synchronization tools (such as sdwdate) no longer being able to correct the clock; catch eventual bigger bugs in network time synchronization tools; and some types of attacks on network time synchronization. Package: tor Version: 0.4.9.6-1~d13.trixie+1 Architecture: arm64 Maintainer: Peter Palfrader Installed-Size: 6039 Depends: libc6 (>= 2.38), libcap2 (>= 1:2.10), libevent-2.1-7t64 (>= 2.1.8-stable), liblzma5 (>= 5.1.1alpha+20120614), libssl3t64 (>= 3.0.0), libsystemd0, libzstd1 (>= 1.5.5), zlib1g (>= 1:1.1.4), adduser, runit-helper (>= 2.14.0~), lsb-base Recommends: logrotate, tor-geoipdb, torsocks Suggests: mixmaster, torbrowser-launcher, socat, apparmor-utils, nyx, obfs4proxy Conflicts: libssl0.9.8 (<< 0.9.8g-9) Breaks: runit (<< 2.1.2-51~) Homepage: https://www.torproject.org/ Priority: optional Section: net Filename: pool/main/t/tor/tor_0.4.9.6-1~d13.trixie+1_arm64.deb Size: 2002108 SHA256: c3b8c29b0063cae3e23b6732b15b5e054e3870322b2bb737eb38286a9f36bc9f SHA1: 88ea64cfbe165df6027eace2faa6407634eec491 MD5sum: 4287a32870161a57db4a008631fa2aeb Description: anonymizing overlay network for TCP Tor is a connection-based low-latency anonymous communication system. . Clients choose a source-routed path through a set of relays, and negotiate a "virtual circuit" through the network, in which each relay knows its predecessor and successor, but no others. Traffic flowing down the circuit is decrypted at each relay, which reveals the downstream relay. . Basically, Tor provides a distributed network of relays. Users bounce their TCP streams (web traffic, ftp, ssh, etc) around the relays, and recipients, observers, and even the relays themselves have difficulty learning which users connected to which destinations. . This package enables only a Tor client by default, but it can also be configured as a relay and/or a hidden service easily. . Client applications can use the Tor network by connecting to the local socks proxy interface provided by your Tor instance. If the application itself does not come with socks support, you can use a socks client such as torsocks. . Note that Tor does no protocol cleaning on application traffic. There is a danger that application protocols and associated programs can be induced to reveal information about the user. Tor depends on Torbutton and similar protocol cleaners to solve this problem. For best protection when web surfing, the Tor Project recommends that you use the Tor Browser Bundle, a standalone tarball that includes static builds of Tor, Torbutton, and a modified Firefox that is patched to fix a variety of privacy bugs. Package: tor-control-panel Version: 1:8.1-1 Architecture: all Maintainer: troubadour Installed-Size: 188 Depends: anon-connection-wizard, helper-scripts, pkexec, mate-polkit, python3, python3-ipy, python3-pyqt5, python3-stem, qtwayland5 Recommends: obfs4proxy, tor Homepage: https://www.whonix.org/wiki/Tor-control-panel Priority: optional Section: misc Filename: pool/main/t/tor-control-panel/tor-control-panel_8.1-1_all.deb Size: 71764 SHA256: 28df0a30f2adb746659c3d36404ff321c7a211c9e2db5cf31b0da45cf2e6b168 SHA1: 3e64ba05c667edf82b0a67382c9ea674955ec2b7 MD5sum: 34156940cd1dbfa7c3402f0bb935a9c0 Description: Tor Control Graphical User Interface WARNING: Not (yet) a standalone ready to use outside of Whonix: . tor-control-panel is a Tor controller. . tor-control-panel is produced independently from the Tor anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. Package: tor-ctrl Version: 3:6.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 83 Depends: tor, netcat-openbsd, xxd, safe-rm Homepage: https://gitweb.torproject.org/torspec.git/tree/control-spec.txt Priority: optional Section: misc Filename: pool/main/t/tor-ctrl/tor-ctrl_6.6-1_all.deb Size: 30584 SHA256: ab50296e5f07f7e920cdcae7826c9ad4aff395d0194807e43d8c237ebe480052 SHA1: 89afc86c61dabdaa5a4436985dd950823545ea41 MD5sum: edb8eedb2f6362a37b3eaeb6f488619c Description: Tor controller command line tool Command line tool for setting up stream for communication from the Tor Controller's (client) to a Tor process (server). The client send commands using TCP sockets or Unix-domain sockets and receive replies from the server. . https://gitweb.torproject.org/torspec.git/tree/control-spec.txt . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tor-geoipdb Source: tor Version: 0.4.9.6-1~d13.trixie+1 Architecture: all Maintainer: Peter Palfrader Installed-Size: 25124 Depends: tor (>= 0.4.9.6-1~d13.trixie+1) Breaks: tor (<< 0.2.4.8) Replaces: tor (<< 0.2.4.8) Homepage: https://www.torproject.org/ Priority: optional Section: net Filename: pool/main/t/tor/tor-geoipdb_0.4.9.6-1~d13.trixie+1_all.deb Size: 2739552 SHA256: a7e6c605a0ef8af68a5596803c3b93dbba322d8d1705f74db490b534967b9ded SHA1: f86410b3858fb9435931e79f69995e970868bff1 MD5sum: d6a6e0356d9a06a8b024d5a821b09ece Description: GeoIP database for Tor This package provides a GeoIP database for Tor, i.e. it maps IPv4 addresses to countries. . Bridge relays (special Tor relays that aren't listed in the main Tor directory) use this information to report which countries they see connections from. These statistics enable the Tor network operators to learn when certain countries start blocking access to bridges. . Clients can also use this to learn what country each relay is in, so Tor controllers like arm or Vidalia can use it, or if they want to configure path selection preferences. Package: usability-misc Version: 3:37.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 745 Depends: policyrcd-script-zg2, adduser, python3, damngpl, helper-scripts (>= 3:35.3-1), dkms, dconf-gsettings-backend | gsettings-backend Conflicts: desktop-config-dist (<< 3:13.8-1) Replaces: gpl-sources-download, grub-screen-resolution, scurl Homepage: https://github.com/Kicksecure/usability-misc Priority: optional Section: misc Filename: pool/main/u/usability-misc/usability-misc_37.1-1_all.deb Size: 206992 SHA256: bacdfb44bb4db89d8caaffc9b8770afeae5483e3a123af4186729ceac3fbaf77 SHA1: 53dad4afbed80d5eb006699250549fe0953ed1f0 MD5sum: 282a293c5b603180e7c3504a750687d5 Description: Misc usability improvements Enables auto login for user `user` in `lightdm`. `/etc/lightdm/lightdm.conf.d/30_autologin.conf` https://www.kicksecure.com/wiki/Desktop#Disable_Autologin . Creates folders /home/user/Downloads and /home/user/Pictures. . Adds account "user" to group libvirt as well as to group kvm. . Ships a file /etc/sudoers.d/user-passwordless that contains comments and "#user ALL=(ALL:ALL) NOPASSWD:ALL". Lets account "user" easily run all commands without password. Disabled (out commented) by default. . Simplifies running OpenVPN as unprivileged user. . Ships a FoxyProxy add-on configuration file for use with Tor Browser. . Sets mousepad as the default editor for environment variable VISUAL is unset and if mousepad is installed. . Disable sudo default lecture. /etc/sudoers.d/sudo-lecture-disable . Add pwfeedback to sudo Defaults so password asterisks are shown while typing. /etc/sudoers.d/pwfeedback . qterminal: . Ships gsudoedit, a wrapper to run sudoedit with a graphical editor. . Bisq workaround "sudo mkdir -p /usr/share/desktop-directories" as per https://github.com/bisq-network/bisq/issues/848 . gpl_sources_download GPL'ed source code of all installed packages. Used damngpl to get a list of all GPL'ed packages, then downloads them using apt-get source. . SSL curl wrapper: Simple wrapper called scurl, that adds "--tlsv1.3 --proto =https" in front of all invocations of "curl" when running "scurl". . Sets 1024x768 as boot screen resolution Ships a /etc/default/grub.d/30_screen_resolution.cfg configuration file, that injects "vga=0x0317" into the GRUB_CMDLINE_LINUX_DEFAULT variable. . Ships `zsh` derivative configuration settings folder `/etc/zsh`. But does not configure `zsh` as default shell. (That is up to package `dist-base-files`.) . Enable systemd-journald audit transport. (`deb-systemd-helper enable systemd-journald-audit.socket`) Required by helper-scripts `apparmor-info` and `apparmor-watch`. Debian no longer enables systemd-journald-audit.socket by default. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1038993 . Creates Secure Boot MOK key using 'shim-signed-mok-setup' (provided by package 'helper-scripts') during installation. Package: user-sysmaint-split Version: 3:11.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 204 Pre-Depends: helper-scripts Depends: security-misc-shared, adduser, libglib2.0-bin Breaks: qubes-core-agent-passwordless-root (>= 1) Homepage: https://github.com/Kicksecure/user-sysmaint-split Priority: optional Section: misc Filename: pool/main/u/user-sysmaint-split/user-sysmaint-split_11.9-1_all.deb Size: 55924 SHA256: 947b58413c2198dd8d15cf6b5e3410b3feac3aa5928a7f330dbc818abedfe6b7 SHA1: 0c5facf9f7a850b4d4a5c5d769170f1fb0aaa264 MD5sum: c9980251c3574bd453b5b8f787a7850a Description: Role-Based Boot Modes - user versus sysmaint Adds a GRUB boot menu entry: "PERSISTENT Mode | SYSMAINT Session | system maintenance tasks" . Makes Privilege Escalation Tools (such as 'sudo', 'su', 'pkexec') inaccessible to limited user accounts such as account "user". . Adds kernel parameter "boot-role=sysmaint" and "systemd.unit=sysmaint-boot.target". Package: vm-config-dist Version: 3:16.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 205 Depends: adduser, 7zip, helper-scripts, python3, python3-pyudev, python3-schema Replaces: power-savings-disable-in-vms, shared-folder-help Homepage: https://github.com/Kicksecure/vm-config-dist Priority: optional Section: misc Filename: pool/main/v/vm-config-dist/vm-config-dist_16.0-1_all.deb Size: 62548 SHA256: 8a4f69f36f7db9e9a1f14dccf816b611a2a1145bc4543a288340af69dc7019d6 SHA1: c19f27863cf71207f76e926a3faf3a67e2219e1e MD5sum: c47e614858372588f18d5e83408fbe52 Description: usability enhancements inside virtual machines Sets environment variable `QMLSCENE_DEVICE=softwarecontext` as a workaround for "Automatic fallback to softwarecontext renderer". . It is not useful to open a screensaver or to power down the desktop for operating systems that are run inside VMs. There is no real display that could be saved and no real power that could be conserved. From a usability perspective, it is also counterintuitive when looking at the VM window and only seeing a black screen. Therefore, it makes sense to disable power savings in VMs. `/etc/profile.d/20_power_savings_disable_in_vms.sh` `/etc/X11/Xsession.d/20_software_rendering_in_vms.sh` . Makes setting up a shared folder for virtual machines a bit easier. . * Creates a folder `/mnt/shared` with `chmod 777`, adds a group "vboxsf", and adds account "user" to group "vboxsf". Facilitates auto-mounting of shared folders. . * Helps using shared folders with VirtualBox and KVM a bit easier (as in requiring fewer manual steps from the user). . * `/lib/systemd/system/mnt-shared-vbox.service` * `/lib/systemd/system/mnt-shared-kvm.service` . Sets screen resolution to 1920x1080 by default for VMs in VirtualBox and KVM. This is a workaround for the low screen resolution of 1024x768 at first boot. . Installs VirtualBox guest additions if the package `virtualbox-guest-additions-iso` is installed, if the environment variable `dist_build_virtualbox=true` is set, or if running inside VirtualBox. (`systemd-detect-virt` returning `oracle`) `/usr/bin/vbox-guest-installer