Commit Graph

723 Commits

Author SHA1 Message Date
Rubiginosa
620f2521c6 added aurora-asus and aurora-dx-asus images
fixed dx userns

Signed-off-by: Rubiginosa <89671549+Rubiginosa@users.noreply.github.com>

updated readme with aurora-asus
2024-04-06 19:40:23 -07:00
qoijjj
3be6988aa4 revert: feat: add additional selinux tooling, until bluebuild supports this package 2024-04-06 19:38:33 -07:00
qoijjj
9f6aa640d4 feat: add just command to remove all hardening kargs 2024-04-06 17:08:00 -07:00
qoijjj
b8db54dd62 feat: add additional selinux tooling 2024-04-06 13:45:03 -07:00
qoijjj
04854499db docs: improve userns clarity 2024-04-06 13:42:31 -07:00
qoijjj
5e90fe2318 chore: bump bluebuild github action 2024-04-04 17:49:49 -07:00
qoijjj
667fd842eb docs: add surface images to the readme 2024-04-04 17:49:12 -07:00
MkKvcs
b6a01eb34a add: Aurora images to secureblue (#249) 2024-04-04 17:42:25 -07:00
qoijjj
27f9c86430 docs: fix typo in kargs readme 2024-03-31 00:35:46 -07:00
qoijjj
e1f6b5ba9f feat: add additional chromium policy hardening and drop chkrootkit as its false positives make it low-utility 2024-03-31 06:32:39 +00:00
Martin Cigorraga
786d2a6f93 Replace hardcoded Fedora version in Copr repos
Lets use %OS_VERSION% and let the package manager fill in with the appropriate version of the OS.
2024-03-31 06:10:01 +00:00
qoijjj
55a54742d6 fix: disable compression for sshd for server variants 2024-03-29 19:05:31 +00:00
qoijjj
6955f00e39 docs: move docs.md to wiki 2024-03-28 21:23:42 +00:00
qoijjj
23696c8914 docs: fix typo 2024-03-28 14:18:30 -07:00
qoijjj
4a67ddc502 docs: fix table of contents formatting 2024-03-28 14:18:08 -07:00
qoijjj
a93c6e794a docs: add doc table of contents 2024-03-28 21:15:19 +00:00
qoijjj
effca02e2c docs: remove broken ublue link and replace it with the original content 2024-03-28 13:54:03 -07:00
qoijjj
d3f2ba5d2e docs: fix broken links to the fedora chromium spec 2024-03-28 17:43:15 +00:00
qoijjj
8712beeb44 docs: add additional chromium documentation and fix existing documentation 2024-03-28 17:39:04 +00:00
qoijjj
42bb63becd readme: fix asus link 2024-03-27 18:42:48 -07:00
qoijjj
87dce3c085 docs: additional readme clarity 2024-03-27 18:38:53 -07:00
qoijjj
891c81f27f docs: add additional details to the readme 2024-03-27 18:37:38 -07:00
qoijjj
6d4a2a809b feat: add ISO generation script 2024-03-28 01:26:04 +00:00
qoijjj
f228f4e689 fix: motd script spacing 2024-03-24 22:53:19 -07:00
qoijjj
f1bacc015a feat: add image tag warning to advise users not to use specific tags 2024-03-24 21:56:06 -07:00
qoijjj
67e114ce4b fix: sudo timeout to 1min instead of 0min 2024-03-22 13:30:15 -07:00
qoijjj
cb67ab87f6 feat: disable ghns by default 2024-03-21 19:50:36 -07:00
qoijjj
f7856e7098 Revert "feat: add image tag warning to advise users not to use specific tags"
This reverts commit 3dc08c057c.
2024-03-21 14:12:24 -07:00
qoijjj
12051fc5b5 docs: fix readme typo 2024-03-21 13:14:35 -07:00
qoijjj
5c5bd69c5a docs: add community section to readme 2024-03-21 13:13:58 -07:00
qoijjj
3dc08c057c feat: add image tag warning to advise users not to use specific tags 2024-03-21 12:39:32 -07:00
qoijjj
6d4884e3ad fix: just: remove broken karg entirely and remove just commands that were merged upstream 2024-03-21 12:34:09 -07:00
qoijjj
e53449e86e docs: fix broken markdown table 2024-03-20 17:47:03 -07:00
qoijjj
476252c130 chore: additional chromium improvements 2024-03-18 19:49:58 -07:00
qoijjj
b9f4abc3b8 feat: add chromium VAAPI flags 2024-03-18 19:11:41 -07:00
qoijjj
6732e2caa8 chore: remove unnecessary quotes 2024-03-18 18:46:03 -07:00
qoijjj
308eaeea34 fix: move disableuserns-scripts to the end of the recipes 2024-03-18 18:07:51 -07:00
qoijjj
78321fd73f fix: move common-scripts last 2024-03-18 17:57:59 -07:00
qoijjj
2ff6a31bfc fix: rearrange modules to ensure file changes are applied properly 2024-03-18 17:44:33 -07:00
qoijjj
09032c19b0 docs: pull in new patch details from Vanadium 2024-03-18 15:53:20 -07:00
qoijjj
be9f5a54d4 docs: readability improvements 2024-03-18 15:01:22 -07:00
qoijjj
e53fac6fec feat: additional chromium hardening 2024-03-18 14:54:17 -07:00
fiftydinar
efba15919d fix: Assure that "disabling CoreDump tweak" is applied correctly (#241)
* fix: Assure that "disabling CoreDump tweak" is applied correctly

Since Fedora uses systemd, we need to make this change too, else it won't be applied throughout the system, but only in SSH/TTY sessions.

Bluefin had the same issue with open-file limits tweak here:
https://github.com/ublue-os/bluefin/pull/988

I usually put those config overrides to `/usr/lib`, but I will put them in `/usr/etc` to comply with the project's structure.

As far as I look, this is the only tweak which needs this systemd conf change.

* fix: Assure that "disabling CoreDump tweak" is applied correctly

Since Fedora uses systemd, we need to make this change too, else it won't be applied throughout the system, but only in SSH/TTY sessions.

Bluefin had the same issue with open-file limits tweak here:
https://github.com/ublue-os/bluefin/pull/988

I usually put those config overrides to `/usr/lib`, but I will put them in `/usr/etc` to comply with the project's structure.

As far as I look, this is the only tweak which needs this systemd conf change.

Signed-off-by: fiftydinar <65243233+fiftydinar@users.noreply.github.com>

---------

Signed-off-by: fiftydinar <65243233+fiftydinar@users.noreply.github.com>
2024-03-15 12:36:20 -07:00
qoijjj
2ef32f75c7 docs: improve readability 2024-03-13 16:35:15 -07:00
qoijjj
34519792b1 improve: add more filetypes to github linguist 2024-03-13 16:09:17 -07:00
qoijjj
926ee3b497 docs: add additional question to FAQ 2024-03-13 14:14:46 -07:00
qoijjj
29eee4b804 fix: create parent dirs for upower on server images 2024-03-13 13:39:21 -07:00
qoijjj
1773316010 fix: set Justfiles as not documentation 2024-03-13 13:34:42 -07:00
qoijjj
518caefd67 include Justfiles as detectable 2024-03-13 13:34:03 -07:00
qoijjj
9d19d8a9f3 feat: set yaml files as detectable by github 2024-03-13 13:27:40 -07:00