Commit Graph

  • ef6feeaaf4 fix: build.yml recipe directory qoijjj 2024-05-16 15:11:36 -07:00
  • f42df43ee5 chore: bump github action to 1.5.0 qoijjj 2024-05-16 15:07:17 -07:00
  • c4b73ca409 feat: add back container policy hardening qoijjj 2024-05-16 13:18:12 -07:00
  • 459acc2fb5 fix: use separate signing module for shared cosign pubkey across secu… (#279) qoijjj 2024-05-16 12:11:02 -07:00
  • 03b8337762 docs: add additional readme details qoijjj 2024-05-15 16:44:01 -07:00
  • 709cf50b3e docs: readme: add detailed logo qoijjj 2024-05-15 09:42:12 -07:00
  • aa65f59471 docs: readme: add discord icon qoijjj 2024-05-15 09:31:05 -07:00
  • f673ae01f3 fix: reference repos in /etc instead of /usr/etc qoijjj 2024-05-14 15:57:11 -07:00
  • 76db56ccc1 fix: mirror script qoijjj 2024-05-14 15:51:09 -07:00
  • 3b9ae540ac feat: always use https mirrors for layering qoijjj 2024-05-14 15:30:17 -07:00
  • d3169a1132 feat: harden container policy.json qoijjj 2024-05-14 13:29:34 -07:00
  • 9d6b7c60ff feat: opt out of homebrew analytics by default qoijjj 2024-05-13 17:23:29 -07:00
  • 4928161480 feat: replace image name in checksum file (#275) Tracker3223 2024-05-13 20:05:22 +02:00
  • eb9f173fb1 docs: pull in latest vanadium changes qoijjj 2024-05-12 20:01:37 -07:00
  • ce01e4c25d fix: iso name for image generation script qoijjj 2024-05-11 08:57:28 -07:00
  • cc1ed05cee docs: add to FAQ about NTS DoT deadlock (#274) Cheng Zhang 2024-05-11 04:00:19 +00:00
  • 8d7c2b5b17 feat: add iso name to image generation script qoijjj 2024-05-10 15:48:36 -07:00
  • 89ed0fe505 fix: iso generation parameters qoijjj 2024-05-10 12:11:04 -07:00
  • a91172be17 fix: iso generator qoijjj 2024-05-10 09:36:10 -07:00
  • de3ba7ae33 fix: remove wget2 from server images as it's incompatible with ucore 40 qoijjj 2024-05-10 17:54:44 +02:00
  • cdbe5e9719 fix: include wget script qoijjj 2024-05-09 19:44:52 -07:00
  • f275411a39 Improve post install instructions (#272) Alexis Purslane 2024-05-08 23:06:33 +00:00
  • ed9d6776bf fix: add back podman which is required by bootc qoijjj 2024-05-08 11:43:35 -07:00
  • c2d6c72556 docs: another whitespace fix qoijjj 2024-05-07 18:01:20 +02:00
  • c3ab4e8107 docs: fix whitespace qoijjj 2024-05-07 18:00:45 +02:00
  • 9102eb4bfa docs: correct vanadium comparison qoijjj 2024-05-07 17:59:09 +02:00
  • 828cc318b6 docs: pull latest vanadium patches for comparison qoijjj 2024-05-07 17:57:36 +02:00
  • 2751734255 fix: use build-container-installer in iso generation script qoijjj 2024-05-07 08:22:50 -07:00
  • 604d1de3cc fix: aurora images qoijjj 2024-05-03 20:56:02 +02:00
  • 3daf6c0599 fix: server images qoijjj 2024-05-03 20:51:26 +02:00
  • f9deeeeeb1 docs: only the latest tag is supported qoijjj 2024-04-23 23:46:05 -07:00
  • 0c91660a27 chore: bump bluebuild action qoijjj 2024-04-23 17:16:16 -07:00
  • c960670156 docs: add link to vanadium comparison qoijjj 2024-04-23 12:53:22 -07:00
  • d0e25ed972 docs: fix POSTINSTALL typos qoijjj 2024-04-23 09:51:16 -07:00
  • 74b197d812 docs: add enroll-secure-boot-key to POSTINSTALL qoijjj 2024-04-23 09:50:46 -07:00
  • 872596dd73 feat: upgrade to f40 (#264) qoijjj 2024-04-23 09:01:41 -07:00
  • 656bf9b5e2 feat: disable chromium internal pdf viewer qoijjj 2024-04-19 16:22:38 -07:00
  • 13bea8f532 remove chkrootkit from README.md (#261) spaceoden 2024-04-19 18:37:03 +00:00
  • a86a3b7a02 feat: add additional chromium hardening based on vanadium qoijjj 2024-04-17 22:53:33 -07:00
  • 23020bab4e docs: update vanadium comparison readme qoijjj 2024-04-17 22:28:05 -07:00
  • 3c546eb01b docs: minor justfile messaging changes qoijjj 2024-04-17 10:13:09 -07:00
  • 1cfb2b30d8 feat: just commands to override modprobe blacklist (#260) Cheng Zhang 2024-04-17 17:11:12 +00:00
  • 2365a4b385 Merge pull request #259 from secureblue/qoijjj-patch-1 qoijjj 2024-04-13 12:28:16 -04:00
  • f028c16f70 Update README.md qoijjj 2024-04-13 12:26:25 -04:00
  • 8bf24693e4 Fix Aurora images not building (#258) MkKvcs 2024-04-10 21:34:20 +02:00
  • d6837c4356 Change Aurora images according to upstream suggestions (#257) MkKvcs 2024-04-10 21:01:36 +02:00
  • f3ec42e58e feat: add necessary init script, then add additional selinux tooling with alerts disabled by default qoijjj 2024-04-07 20:37:23 -07:00
  • 1e7336dc9b added disable-firefox to aurora images Rubiginosa 2024-04-07 13:52:31 -04:00
  • 620f2521c6 added aurora-asus and aurora-dx-asus images Rubiginosa 2024-04-06 12:47:14 -04:00
  • 3be6988aa4 revert: feat: add additional selinux tooling, until bluebuild supports this package qoijjj 2024-04-06 19:38:33 -07:00
  • 9f6aa640d4 feat: add just command to remove all hardening kargs qoijjj 2024-04-06 17:08:00 -07:00
  • b8db54dd62 feat: add additional selinux tooling qoijjj 2024-04-06 13:45:03 -07:00
  • 04854499db docs: improve userns clarity qoijjj 2024-04-06 13:42:31 -07:00
  • 5e90fe2318 chore: bump bluebuild github action qoijjj 2024-04-04 17:49:49 -07:00
  • 667fd842eb docs: add surface images to the readme qoijjj 2024-04-04 17:49:12 -07:00
  • b6a01eb34a add: Aurora images to secureblue (#249) MkKvcs 2024-04-05 02:42:25 +02:00
  • 27f9c86430 docs: fix typo in kargs readme qoijjj 2024-03-31 00:35:46 -07:00
  • e1f6b5ba9f feat: add additional chromium policy hardening and drop chkrootkit as its false positives make it low-utility qoijjj 2024-03-31 06:32:39 +00:00
  • 786d2a6f93 Replace hardcoded Fedora version in Copr repos Martin Cigorraga 2024-03-31 01:11:04 -03:00
  • 55a54742d6 fix: disable compression for sshd for server variants qoijjj 2024-03-29 19:05:31 +00:00
  • 6955f00e39 docs: move docs.md to wiki qoijjj 2024-03-28 21:23:42 +00:00
  • 23696c8914 docs: fix typo qoijjj 2024-03-28 14:18:30 -07:00
  • 4a67ddc502 docs: fix table of contents formatting qoijjj 2024-03-28 14:18:08 -07:00
  • a93c6e794a docs: add doc table of contents qoijjj 2024-03-28 21:15:19 +00:00
  • effca02e2c docs: remove broken ublue link and replace it with the original content qoijjj 2024-03-28 13:54:03 -07:00
  • d3f2ba5d2e docs: fix broken links to the fedora chromium spec qoijjj 2024-03-28 17:43:15 +00:00
  • 8712beeb44 docs: add additional chromium documentation and fix existing documentation qoijjj 2024-03-28 17:39:04 +00:00
  • 42bb63becd readme: fix asus link qoijjj 2024-03-27 18:42:48 -07:00
  • 87dce3c085 docs: additional readme clarity qoijjj 2024-03-27 18:38:53 -07:00
  • 891c81f27f docs: add additional details to the readme qoijjj 2024-03-27 18:37:38 -07:00
  • 6d4a2a809b feat: add ISO generation script qoijjj 2024-03-28 01:26:04 +00:00
  • f228f4e689 fix: motd script spacing qoijjj 2024-03-24 22:53:19 -07:00
  • f1bacc015a feat: add image tag warning to advise users not to use specific tags qoijjj 2024-03-24 21:33:39 -07:00
  • 67e114ce4b fix: sudo timeout to 1min instead of 0min qoijjj 2024-03-22 13:30:15 -07:00
  • cb67ab87f6 feat: disable ghns by default qoijjj 2024-03-21 18:27:52 -07:00
  • f7856e7098 Revert "feat: add image tag warning to advise users not to use specific tags" qoijjj 2024-03-21 14:12:24 -07:00
  • 12051fc5b5 docs: fix readme typo qoijjj 2024-03-21 13:14:35 -07:00
  • 5c5bd69c5a docs: add community section to readme qoijjj 2024-03-21 13:13:58 -07:00
  • 3dc08c057c feat: add image tag warning to advise users not to use specific tags qoijjj 2024-03-21 12:39:32 -07:00
  • 6d4884e3ad fix: just: remove broken karg entirely and remove just commands that were merged upstream qoijjj 2024-03-21 12:34:09 -07:00
  • e53449e86e docs: fix broken markdown table qoijjj 2024-03-20 17:47:03 -07:00
  • 476252c130 chore: additional chromium improvements qoijjj 2024-03-18 19:49:58 -07:00
  • b9f4abc3b8 feat: add chromium VAAPI flags qoijjj 2024-03-18 19:11:41 -07:00
  • 6732e2caa8 chore: remove unnecessary quotes qoijjj 2024-03-18 18:46:03 -07:00
  • 308eaeea34 fix: move disableuserns-scripts to the end of the recipes qoijjj 2024-03-18 18:07:51 -07:00
  • 78321fd73f fix: move common-scripts last qoijjj 2024-03-18 17:57:59 -07:00
  • 2ff6a31bfc fix: rearrange modules to ensure file changes are applied properly qoijjj 2024-03-18 17:44:33 -07:00
  • 09032c19b0 docs: pull in new patch details from Vanadium qoijjj 2024-03-18 15:53:20 -07:00
  • be9f5a54d4 docs: readability improvements qoijjj 2024-03-18 15:01:22 -07:00
  • e53fac6fec feat: additional chromium hardening qoijjj 2024-03-18 14:54:17 -07:00
  • efba15919d fix: Assure that "disabling CoreDump tweak" is applied correctly (#241) fiftydinar 2024-03-15 20:36:20 +01:00
  • 2ef32f75c7 docs: improve readability qoijjj 2024-03-13 16:35:15 -07:00
  • 34519792b1 improve: add more filetypes to github linguist qoijjj 2024-03-13 16:09:17 -07:00
  • 926ee3b497 docs: add additional question to FAQ qoijjj 2024-03-13 14:14:46 -07:00
  • 29eee4b804 fix: create parent dirs for upower on server images qoijjj 2024-03-13 13:39:21 -07:00
  • 1773316010 fix: set Justfiles as not documentation qoijjj 2024-03-13 13:34:42 -07:00
  • 518caefd67 include Justfiles as detectable qoijjj 2024-03-13 13:34:03 -07:00
  • 9d19d8a9f3 feat: set yaml files as detectable by github qoijjj 2024-03-13 13:27:40 -07:00
  • 00607a1b44 docs: improve FAQ qoijjj 2024-03-13 13:12:45 -07:00
  • 1ce6b06828 feat: justfile improvements qoijjj 2024-03-13 12:58:31 -07:00