Package: anon-apt-sources-list Version: 3:7.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 77 Depends: fasttrack-archive-keyring Homepage: https://github.com/Kicksecure/anon-apt-sources-list Priority: optional Section: misc Filename: pool/main/a/anon-apt-sources-list/anon-apt-sources-list_7.5-1_all.deb Size: 30652 SHA256: 220a6d8646abc6594bacdefdb06ed05eb0522af1a415df304ba3905728e8be85 SHA1: b6e14f0086e49a37795e91d9f5cff1a8b86931cc MD5sum: c4d94aa23c594a872c1bfcd5855c939a Description: Kicksecure APT and Flatpak Repository Configuration Configuring APT and Flatpak sources: - Includes Debian APT repositories (main, updates, backports, fasttrack, security) - Incorporates Debian APT components (main, contrib, non-free, non-free-firmware) - Integrates the Flathub repository (verified and floss subsets only) . Flatpak: - Official Flathub repository only. - Uses subset verified_floss, which means only verified applications and freedom software can be installed by default. . Provides configuration files: - /etc/apt/sources.list.d/debian.sources for APT sources - /etc/flatpak/remotes.d/flathub.flatpakrepo for Flatpak sources . A Discussion on Distribution Maintenance Strategies: . The more standard way would indeed be populating /etc/apt/sources.list at install or build time and leaving /etc/apt/sources.list.d alone. . The idea of managing /etc/apt/sources.list.d/debian.sources for the user is, the security-focused distribution maintainers can decide when it is a better "change stable to oldstable", "keep wheezy as long as needed to work out [eventual!] issues that would break during upgrade to jessie" and such. Package: anon-connection-wizard Version: 1:11.2-1 Architecture: all Maintainer: iry Installed-Size: 266 Depends: helper-scripts, pkexec, mate-polkit, privleap, python3, python3-pyqt5, python3-stem, python3-yaml, qtwayland5 Recommends: obfs4proxy, tor Homepage: https://www.kicksecure.com/wiki/Anon_Connection_Wizard Priority: optional Section: misc Filename: pool/main/a/anon-connection-wizard/anon-connection-wizard_11.2-1_all.deb Size: 95320 SHA256: 8e2be5f079858c0066f35db9a2c4bff6db6aa385e5a3fdf5c7b33546a0976110 SHA1: 66e2bdedd20867075d710f9aca7c6b31c00d9ca7 MD5sum: 54996913ab338b4337b01b753881aa36 Description: Tor Connection Configuration (ACW) WARNING: Not (yet) a standalone ready to use outside of Whonix: . Creates a Tor settings file: `/usr/local/etc/torrc.d/40_tor_control_panel.conf` . anon-connection-wizard (ACW) is a Tor-launcher-like application that helps users in different Internet environment connect to the Tor network. It helps user to configure Tor to use a proxy and/or Tor bridges. This application is especially useful for system Tor users who would like to run the standalone core Tor with different torified applications. The wizard can be run at any time to change the connection configuration. . Creates a Tor settings file: `/usr/local/etc/torrc.d/40_tor_control_panel.conf` . anon-connection-wizard is produced independently from the Tor anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. Package: anon-shared-build-apt-sources-tpo Version: 3:7.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 125 Depends: helper-scripts, gnupg, sq Recommends: deb.torproject.org-keyring Homepage: https://github.com/Kicksecure/anon-shared-build-apt-sources-tpo Priority: optional Section: misc Filename: pool/main/a/anon-shared-build-apt-sources-tpo/anon-shared-build-apt-sources-tpo_7.1-1_all.deb Size: 65076 SHA256: fee1afcd32f4217f3a49e445e4563d97e64d424c757e8cc0dea0d067b567ffd7 SHA1: 7344db2ea09b445091701989bf140eb6814b44fb MD5sum: 844760661bcc12a682d1600c47b4c9ec Description: Adds TPO's APT repository to Derivative Linux Distributions Comes with "deb http://deb.torproject.org/torproject.org stable main", The Tor Project's APT signing key. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profile-dist Version: 3:10.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 96 Depends: helper-scripts Replaces: apparmor-profile-anondist Homepage: https://www.kicksecure.com/wiki/Apparmor-profile-everything Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-dist/apparmor-profile-dist_10.0-1_all.deb Size: 36124 SHA256: 34e33eb6a47c7bd2b026f77877b37e3584dd3f991a5de0ea845302fdf99e597c SHA1: c0f37265317fbc32104b195b68d042ae2042d2b0 MD5sum: 7e0c6537761cf89fc63b608627b73292 Description: AppArmor Profile for Derivative Linux Distributions Displaces /etc/apparmor.d/abstractions/base with a version, that includes additions required for Derivative Linux Distributions. . Does not depend on AppArmor, so this package can be installed by default on any anonymity distribution by default, without requiring to also have AppArmor installed. Just for the case, AppArmor gets installed later by the user. Package: apparmor-profile-hexchat Version: 3:5.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 60 Depends: apparmor Replaces: apparmor-profile-xchat Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-hexchat/apparmor-profile-hexchat_5.5-1_all.deb Size: 23912 SHA256: cde89ba8fb7e6965feeb7d72c9dedc6f6c602268122981343fb2c906b9702f0e SHA1: c3e19c274b3dea735cd3b598e11db50fc597cb59 MD5sum: b0b3af0563aa9d6afbf41fabb2ecaf69 Description: AppArmor profile for HexChat IRC An AppArmor profile to confine HexChat IRC. This profile is developed by the Whonix team. HexChat IRC is developed by xchat.org / hexchat.github.io. . For better security. Package: apparmor-profile-thunderbird Version: 3:6.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 65 Depends: apparmor Replaces: apparmor-profile-icedove Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-thunderbird/apparmor-profile-thunderbird_6.1-1_all.deb Size: 27056 SHA256: 6b3734055d7123cdc291377d0beecbef74a84085af5b9dc0e9b13b8886d6df79 SHA1: 543793f64ec43200ae051cf2b292f772411deec1 MD5sum: e7b01d88386fbffff39511f7db4ee9cc Description: AppArmor profile for Thunderbird for Debian An AppArmor profile to confine Thunderbird. . This profile is just an extension of the upstream AppArmor Debian profile. The upstream AppArmor upstream profile is the foundation. . Primarily this AppArmor profile makes Debian's AppArmor profile for Thunderbird compatible with Qubes Debian based VMs. . This profile is developed by the Kicksecure team. Thunderbird is developed by mozilla.org. Package: apparmor-profile-torbrowser Version: 3:9.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 74 Depends: apparmor Homepage: https://www.kicksecure.com/wiki/AppArmor Priority: optional Section: misc Filename: pool/main/a/apparmor-profile-torbrowser/apparmor-profile-torbrowser_9.7-1_all.deb Size: 34852 SHA256: 8d34f303bcf7018e35bdeb17cb7c2e2e993b6eae8b683a914fc990f198c61b4f SHA1: 034631d4720819dcab967050af72446f72ded803 MD5sum: 0c8650b06d1805c0470f1666c84888a8 Description: AppArmor profile for The Tor Browser Bundle (TBB) An AppArmor profile to confine The Tor Browser Bundle (TBB). This profile is developed by the Whonix team. TBB is developed by The Tor Project. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Pre-Depends: legacy-dist Depends: apparmor-profile-hexchat, apparmor-profile-thunderbird, apparmor-profile-torbrowser, apparmor-profiles, apparmor-profiles-extra Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/apparmor-profiles-kicksecure_36.1-1_all.deb Size: 85056 SHA256: 8443b45fc178e2aa7046c04687cb97ef7ebe3c4bd1096173c2c3e5952b313cd7 SHA1: c96b2d1ad70d33fff91e4b140f247b46e2d3fd09 MD5sum: 65faab7bd289f8d21f8ac5277b518ed5 Description: AppArmor profiles developed by the Kicksecure Team A metapackage, which installs apparmor profiles packages from Debian: . * apparmor-profile * apparmor-profiles-extra . as well as installs apparmor profiles developed by the Kicksecure team: . * apparmor-profile-thunderbird * apparmor-profile-torbrowser * apparmor-profile-hexchat . Increases security. Package: binaries-freedom Version: 0:3.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 31 Depends: fuse Homepage: https://github.com/Kicksecure/binaries-freedom Priority: optional Section: misc Filename: pool/main/b/binaries-freedom/binaries-freedom_3.3-1_all.deb Size: 11256 SHA256: 4f15f98eeded72e6f3fb11e8ac35ff178daf199e9d1e40c2e345d743d2cdffb8 SHA1: 44fd15e99f54a64915e3077725e22d2211d6518d MD5sum: 1bfff5aa44643bc8e79203beedadfce8 Description: Freedom Software Binaries This is an empty package at this time. . https://forums.whonix.org/t/policy-for-inclusion-of-compiled-software/6635 Package: bindp Version: 3:4.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 33 Homepage: https://github.com/Kicksecure/bindp Priority: optional Section: misc Filename: pool/main/b/bindp/bindp_4.4-1_all.deb Size: 15372 SHA256: b6b6959444cf1c6aec49eb4bfafc5c1cc8c0dbb7c1ddf0441e0a10ed683ef649 SHA1: 5b0d60aa31a26ebc8c48830ff749ffe9e9b3f827 MD5sum: 41c7554dfa6b94d745ec04b432ec8af1 Description: Binding specific IP and Port for Linux Running Application This package is probably most useful for Anonymity Distributions. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: bootclockrandomization Version: 3:7.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 84 Depends: msgcollector Homepage: https://www.kicksecure.com/wiki/Boot_Clock_Randomization Priority: optional Section: misc Filename: pool/main/b/bootclockrandomization/bootclockrandomization_7.9-1_all.deb Size: 31928 SHA256: 2d724bf4e51b2a54e0bf4d5596287b609a07f285575aa0860c0e03e1b960dacb SHA1: 89e08f77a307dab12b87f520e432dd4014dca377 MD5sum: b034b482ae78c941beb281206ff7201f Description: Randomizes clock when systems boots Randomizes clock at boot time. Moves clock a few seconds and nanoseconds to past or future. Useful in context of anonymity/privacy/Tor. . This is useful to enforce the design goal, that the host clock and Gateway/Workstation clock should always slightly differ (even before secure timesync succeeded!) to prevent time based fingerprinting / linkablity issues. . Runs before Tor / sdwdate (if installed). . See also: https://www.whonix.org/wiki/Dev/TimeSync Package: browser-choice Version: 3:2.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 286 Depends: python3, helper-scripts Homepage: https://www.kicksecure.com/wiki/browser-choice Priority: optional Section: admin Filename: pool/main/b/browser-choice/browser-choice_2.6-1_all.deb Size: 62328 SHA256: 21c3800a50db27d536c7c6a30f55b97cff15ff254bb13713d681f8a9e7249ca1 SHA1: 4ecbfcce0a2a6ee7d136a7dd6f5c039d2006b5af MD5sum: 84f4e235fa9527173b348bdb5c3af0e8 Description: browser selection installer dialog A graphical interface that allows users to select and manage browsers. . Features a plugin-based design and multiple install types. Package: calamares-settings-debian Version: 13.1.7-1 Architecture: all Maintainer: Jonathan Carter Installed-Size: 225 Depends: calamares, rsync, cryptsetup, libglib2.0-bin, keyutils, pkexec, qml-module-qtquick-window2, qml-module-qtquick2, dconf-gsettings-backend | gsettings-backend Provides: calamares-settings Homepage: https://salsa.debian.org/live-team/calamares-settings-debian Priority: optional Section: utils Filename: pool/main/c/calamares-settings-debian/calamares-settings-debian_13.1.7-1_all.deb Size: 129348 SHA256: 5dd9fc074112120361f680d154137d2ba8903e5a3e82b8da6da999f4a4a1721f SHA1: ebbc3f9de752c82940f829c4380d7ca28819f4e4 MD5sum: d3d540c5c601972131aa08588a339967 Description: Debian theme and settings for the Calamares Installer Calamares is a generic installer framework for Linux distributions. By default, it contains a set of boilerplate wording and images. This package provides the latest Debian artwork as well as scripts that supports EFI installations. . It also serves as an example for how derivatives can create their own calamares-settings packages. Package: damngpl Version: 3:4.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 32 Depends: perl Homepage: http://www.finnie.org/software/damngpl/damngpl Priority: optional Section: misc Filename: pool/main/d/damngpl/damngpl_4.7-1_all.deb Size: 13908 SHA256: 185ec283e8b9742605175a53101da145dcd0b6956db55d54d82723b8fe48e8f9 SHA1: 2d91780bd5275d5565603b1d6d0e4eb5e53d1906 MD5sum: 4a3ba279be5d15c5a0c3ea8f3f1ee62b Description: Extract source package info from Debian status files damngpl will parse a Debian-style /var/lib/dpkg/status file and extract source package information about installed packages. This information can be used in several ways, usually to download source packages. . Multiple input files can be specified on the command line, or piped into standard input if no files are specified. Results are returned to standard output. . The name damngpl was chosen as a tongue-in-cheek description of its purpose (downloading Debian sources for the Finnix project to remain GPL compliant). Please do not send hate mail to the author, thinking he is anti-GPL. He's not. . See also: http://blog.finnix.org/2011/08/21/finnix-and-gpl-compliance/ Package: deb.torproject.org-keyring Version: 2025.08.08 Architecture: all Maintainer: Peter Palfrader Installed-Size: 20 Priority: important Section: misc Filename: pool/main/d/deb.torproject.org-keyring/deb.torproject.org-keyring_2025.08.08_all.deb Size: 4500 SHA256: e5bd5c6442ead01e183838be611d6bdf04896ba299095fbb4dc5ab5fe8f19bf6 SHA1: 7b9ee87c815b20602e588c1e6ded420ba7eeb4e4 MD5sum: 874fc9f0da1acbbf1a6eb2c7a25cecc1 Description: GnuPG archive key of the deb.torproject.org repository The deb.torproject.org repository digitally signs its Release files. This package contains the current repository key used for that, and upon installation configures your system to accept archives signed with this key. Package: debug-misc Version: 3:5.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 107 Suggests: systemd-coredump, serial-console-enable Replaces: grub-output-verbose Homepage: https://github.com/Kicksecure/debug-misc Priority: optional Section: misc Filename: pool/main/d/debug-misc/debug-misc_5.6-1_all.deb Size: 28028 SHA256: 86ccc6f4587c024fcb561d1022bfba8c4a2c8265d102cc150cc525f42e8c514a SHA1: 8fe5cbeaf54658fef31464737aeeb4eb2e9c21c9 MD5sum: 9d3e2cbdd3a2ec7cf683530f9b0d36c4 Description: Enables miscellaneous debug settings Ships a `/etc/default/grub.d/45_debug-misc.cfg` configuration file. This removes `quiet`, `loglevel=0`, and `rhgb` from the `GRUB_CMDLINE_LINUX_DEFAULT` variable. It also removes `debugfs=off`, `efi_pstore.pstore_disable=1`, and `erst_disable` from the `GRUB_CMDLINE_LINUX` variable. Finally, it adds `debug=vc` to the `GRUB_CMDLINE_LINUX` variable to enable verbose output during the initial ramdisk boot phase. . Undo debugging related `sysctl` settings by package `security-misc-shared`. . Enables persistent systemd journal log. . Disables `/usr/lib/systemd/coredump.conf.d/30_security-misc.conf` by package `security-misc-shared` using `debian/debug-misc.links` by creating a symlink from `/etc/systemd/coredump.conf.d/30_security-misc.conf` to `/dev/null`. . Disables `/usr/lib/systemd/pstore.conf.d/30_security-misc.conf` by package `security-misc-shared` using `debian/debug-misc.links` by creating a symlink from `/etc/systemd/pstore.conf.d/30_security-misc.conf` to `/dev/null`. . Disables `panic-on-oops`, `remove-system.map` by package `security-misc-shared`. . `config-package-dev` `hide` `/etc/sysctl.d/30_silent-kernel-printk.conf` which kernel.printk to default as if `security-misc-shared` would not have lowered verbosity. . Configure systemd `getty` service to not clear `tty`. `/lib/systemd/system/getty@tty.service.d/30_debug-misc.conf` . Coredumps are enabled. `/etc/security/limits.d/40_debug-misc.conf` . Coredumps may contain important information such as encryption keys or passwords. Package `security-misc-shared` disables coredumps. Package `debug-misc` re-enables coredumps. . Contains a helper tool to cause a segfault for testing purposes. `segfault-build` creates `segfault-run`. Running `segfault-run` results in `segfault-run` terminating with a segfault. This is useful to test if coredump files are being generated when an application crashes. `/usr/sbin/segfault-build` `/usr/share/debug-misc/segfault.c` . For better usability, to ease debugging in case of issues. . For better security, this package should only be installed on specific machines that require debugging. Unfortunately, security and debugging are conflicting optimization goals. Package: desktop-config-dist Version: 3:17.3-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 345 Depends: python3, helper-scripts, dconf-gsettings-backend | gsettings-backend, init-system-helpers (>= 1.52) Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist_17.3-1_all.deb Size: 98848 SHA256: 34ab96efcb40b868635192a1c04d14b57cb01675354f20ea85fd2d3b8dd870be SHA1: c4d7d180d0a952d7f1cca89920ed26c43ca8872d MD5sum: 1e23cf383d9d7ba48900cb266040199d Description: Configuration for Derivative Desktop Sets desktop and display setting, wallpaper and desktop icons. Sets icon theme and style. Settings for the default panel aka task bar, like panel position/color/size and panel plugins/shortcuts. . Autologin for account 'user' setting in lightdm. . Live check systray indicator which indicates the status of grub-live, whether the system was booted into persistent or live mode. See also: https://www.kicksecure.com/wiki/grub-live . Adds start menu entries for web browser, terminal emulator, file manager. . Sets Whisker Menu for better usability. . Disable maximize windows when moving to top for better privacy. . Disables thumbnails for better security. . Disables save on exit for better privacy. Package: desktop-config-dist-dependencies Source: desktop-config-dist Version: 3:17.3-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 76 Depends: gnome-colors-common, adwaita-icon-theme, python3-pyudev, wlr-randr Homepage: https://github.com/Kicksecure/desktop-config-dist Priority: optional Section: misc Filename: pool/main/d/desktop-config-dist/desktop-config-dist-dependencies_17.3-1_all.deb Size: 46808 SHA256: 30017dc097faf7ac93de36037f6a6952ec3d2484a0cdb927a64d378d874643d4 SHA1: 66af66214ad9b3a65f15e0087fe884aab6df81e3 MD5sum: dc276465e92a09f2fd68eaf08f44c9c2 Description: Dependencies of desktop-config-dist A metapackage with dependencies for package desktop-config-dist. . Only useful for Non-Qubes. Not useful in Qubes. Package: developer-meta-files Version: 3:51.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 423 Depends: python3, python3-debian, bc, jq Homepage: https://github.com/Kicksecure/developer-meta-files Priority: optional Section: misc Filename: pool/main/d/developer-meta-files/developer-meta-files_51.4-1_all.deb Size: 156496 SHA256: 8be953927ffae4d7310e130d65a8f418267dde4e416bf48073694b90bcf5349c SHA1: 66f9ef46d9af677c85599d361a869e33ab76d0bf MD5sum: cbebc80c12a4adc9c85688b06c5a0fc6 Description: Linux Distributions Maintenance Helper Scripts Todo . Description Package: dist-baremetal-cli Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Pre-Depends: legacy-dist Depends: nvme-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-baremetal-cli_36.1-1_all.deb Size: 84964 SHA256: 46e86161f41c6dc874b0415c93063eab333d901b6121886aa45a6990eaf65645 SHA1: f3b6ae3ed3201cccd3c2517913a94631f5b5b7f4 MD5sum: 4caf7b67fefa8986999a8d08ca2f4bf5 Description: All systems, physical hardware, command-line packages For all hardened systems. . For physical hardware. . Provides packages for basic command-line-only installations. Package: dist-baremetal-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Pre-Depends: legacy-dist Depends: psensor, liblxqt-backlight-helper Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-baremetal-gui-lxqt_36.1-1_all.deb Size: 85000 SHA256: 86490e343f56d15bf2ae4e8d119f226cd1a1d3a1d52f90f33b2aa1415f1edef2 SHA1: 6e63a1e0028a5fc87f8512d253e632f510698747 MD5sum: 8104992707781adf07c5d1502aff40f4 Description: All systems, physical hardware, LXQt GUI packages For all hardened systems. . For physical hardware. . Provides packages for LXQt graphical desktop installations. Package: dist-base-files Version: 3:15.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 693 Pre-Depends: zsh Depends: dpkg-dev, helper-scripts, adduser, moreutils, xz-utils, zsh-syntax-highlighting, zsh-autosuggestions, systemd-repart Conflicts: anon-base-files, diverts-etc++grub.d++10+-+linux Replaces: anon-base-files Provides: anon-base-files, diverts-etc++grub.d++10+-+linux Homepage: https://github.com/Kicksecure/dist-base-files Priority: optional Section: misc Filename: pool/main/d/dist-base-files/dist-base-files_15.7-1_all.deb Size: 195352 SHA256: 6feb3448e9a54bca99a8a9cb55b10a3ae5eaad8b01dbb30074de5e445696a1ba SHA1: b7ec990dc34073040d1b245a3990a8065115ddac MD5sum: 451910ab5e2f5e9d738488c42c0ca0db Description: base files for distributions Grub config for more organized boot menu. "Normal" boot options are on top. "Advanced" boot options (for older kernel versions) have been moved to the bottom. . Creates user `user` with empty password (passwordless) (not in Qubes). That is if user `user` is not existing yet. And if it does create user `user` it also locks the root account. Therefore root account locking effectively only happens in new builds not having user `user` already created. . Creates system groups: * console * ssh . Ships a systemd unit file dist-skel-first-boot.service which runs `/usr/libexec/helper-scripts/first-boot-skel` (part of helper-scripts) package. . Simplifies sudo default lecture to only showing the default password once. . Creates version file `/var/lib/dist-base-files/build_version`. . Default shell: Sets default shell for user `user` to `zsh`. (Unless file `/etc/no-shell-change` exists.) `debian/dist-base-files.postinst` . Provides common files for derivative GRUB themes. . This package gets installed by default in both, Kicksecure and Whonix. Package: dist-general-cli Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Pre-Depends: legacy-dist Depends: apparmor-profile-dist, apt-transport-tor, apt-utils, bootclockrandomization, ca-certificates, dialog, dist-base-files, dummy-dependency-mta, gawk, init, initializer-dist, locales, menu, nmap, repository-dist, sdwdate, security-misc-shared, setup-dist, sudo, timesanitycheck, usrmerge, apparmor-profiles-kicksecure, apparmor-utils, bash-completion, boot-info-script, btrfs-progs, bzip2, curl, debian-keyring, dbus-user-session, distro-info-data, bind9-dnsutils, e2fsprogs, eject, file, haveged, hunspell-en-us, iotop, iproute2, iputils-ping, jitterentropy-rngd, less, libblockdev-crypto3, libpam-tmpdir, lsof, man-db, most, nano, net-tools, openvpn, 7zip, pciutils, pcmciautils, procps, secure-delete, sensible-utils, strace, sysfsutils, systemcheck, torsocks, traceroute, udisks2, unzip, usability-misc, usbutils, vim, xz-utils, zip, codecrypt, diceware, dirmngr, equivs, extrepo, extrepo-offline-data, fuse, gpg, gpg-agent, makepasswd, pwgen, htop, pv, cryptsetup, dmsetup, udev, anon-apt-sources-list, tor, vm-config-dist, tor-ctrl Breaks: kicksecure-default-applications-cli, kicksecure-dependencies-cli, kicksecure-dependencies-system, kicksecure-recommended-cli Replaces: kicksecure-default-applications-cli, kicksecure-dependencies-cli, kicksecure-dependencies-system, kicksecure-recommended-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-cli_36.1-1_all.deb Size: 85584 SHA256: c2a6701965bed87074d51aefde7842b3496ce9f5d9ef992abdd186feb7feb905 SHA1: f05033e01bf11f12e5df56d52c510c7b6018764a MD5sum: 75a1a9145db713b5f363a0f9f4b21776 Description: All systems, all hardware, command-line packages For all hardened systems. . For all hardware platforms. . Provides packages for basic command-line-only installations. Package: dist-general-gui-all Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Pre-Depends: legacy-dist Depends: desktop-config-dist, libgl1-mesa-dri, mesa-vulkan-drivers, libfuse2t64, mate-polkit, xdg-desktop-portal, msgcollector-gui, repository-dist-wizard, sdwdate-gui, setup-wizard-dist, security-misc-desktop, mesa-utils, open-link-confirmation, accountsservice, icon-pack-dist, libasound2t64 Breaks: kicksecure-desktop-applications-recommended, kicksecure-desktop-environment-essential-gui Replaces: kicksecure-desktop-applications-recommended, kicksecure-desktop-environment-essential-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-gui-all_36.1-1_all.deb Size: 85176 SHA256: 7168fb545feb6b2ce78d5a35d3eb5340aea3adc99c28027ed52305a6e0fe03e1 SHA1: 3aeb66b19b01dfab5b821e9c66b72a6d27fa75b2 MD5sum: e941e7a5ba638f922d84c117426d49f0 Description: All systems, all hardware, GUI packages For all hardened systems. . For all hardware platforms. . Provides packages for all graphical desktop installations. Package: dist-general-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Pre-Depends: legacy-dist Depends: dummy-dependency-sway, dummy-dependency-lxqt-policykit, featherpad, gnome-keyring, lxqt-about, lxqt-about-l10n, lxqt-admin, lxqt-admin-l10n, desktop-file-utils, lxqt-themes, lxqt-system-theme, lxqt-config, lxqt-config-l10n, lxqt-notificationd, lxqt-notificationd-l10n, lxqt-globalkeys, lxqt-globalkeys-l10n, lxqt-qtplugin, pcmanfm-qt, pcmanfm-qt-l10n, qterminal, qterminal-l10n, qtxdg-tools, lxqt-openssh-askpass, lxqt-openssh-askpass-l10n, lxqt-sudo, lxqt-sudo-l10n, papirus-icon-theme, qps, qt6-svg-plugins, qt6-translations-l10n, qt6-wayland, xdg-desktop-portal-gtk, xdg-desktop-portal-lxqt, gvfs, gvfs-backends, pkexec, polkitd, sysmaint-panel, discover, hwinfo, laptop-detect, lm-sensors, lshw, gparted, lxqt-archiver, lxqt-archiver-l10n, liblxqt-l10n, libfm-qt-l10n Breaks: kicksecure-desktop-applications-lxqt, kicksecure-desktop-applications-xfce, kicksecure-desktop-environment-essential-lxqt, kicksecure-desktop-environment-essential-xfce, kicksecure-shared-host-lxqt, kicksecure-shared-host-xfce Replaces: kicksecure-desktop-applications-lxqt, kicksecure-desktop-applications-xfce, kicksecure-desktop-environment-essential-lxqt, kicksecure-desktop-environment-essential-xfce, kicksecure-shared-host-lxqt, kicksecure-shared-host-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-gui-lxqt_36.1-1_all.deb Size: 85364 SHA256: 6b978cc12492ddbdd4fb8b790a5fce16f7633fbb72362dc4814ae9c74d46cf0f SHA1: 22120f49d90928ebbd0996fbd222001ffc23eb24 MD5sum: 6d8ccfe3b6dd77b57817e9ca54b8a9c4 Description: All systems, all hardware, LXQt GUI packages For all hardened systems. . For all hardware platforms. . Provides packages for LXQt graphical desktop installations. Package: dist-general-server Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Pre-Depends: legacy-dist Depends: security-misc-server Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-general-server_36.1-1_all.deb Size: 84964 SHA256: 16f6f26d0b7b833ac1f22c9e825b32560513e03f5c5a5f03a9de4abe955dba96 SHA1: c5dfabc28b08683c51767432b93dbbe58363575f MD5sum: 8148ec26a53fdbea94d16affcb794eb4 Description: All systems, all hardware, server packages For all hardened systems. . For all hardware platforms. . Provides packages for server installations. Package: dist-nonqubes-cli Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Pre-Depends: legacy-dist Depends: dracut, systemd-cryptsetup, acpi-support, console-common, console-setup, grub-live-dracut, kbd, keyboard-configuration, swap-file-creator, smartmontools Breaks: non-qubes-enhancements-cli Replaces: non-qubes-enhancements-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-cli_36.1-1_all.deb Size: 85096 SHA256: 4bc981f027e1c121833dc884372fe889cc01cee3aa71f7e4b50c2459c76a9d7f SHA1: a234faf60e775057b3b9b8cac4bb28b026db7020 MD5sum: b65e6257e74cce953502753edd52ba13 Description: All systems, not Qubes VMs, command-line packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dist-nonqubes-gui-all Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Pre-Depends: legacy-dist Depends: rads, desktop-config-dist-dependencies, labwc, waybar, wvkbd, gsmartcontrol, upower Breaks: non-qubes-audio, non-qubes-enhancements-gui Replaces: non-qubes-audio, non-qubes-enhancements-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-gui-all_36.1-1_all.deb Size: 85080 SHA256: a7c5fb0ecb5d563dbe70cc7a8c05fbe6e69322d3d739dd143302375ae9fff01d SHA1: 8ae6e05db38a354becf544957b67553fe2a60147 MD5sum: 8b87e956ac2f26b16d8fc313499d276c Description: All systems, not Qubes VMs, GUI packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: dist-nonqubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Pre-Depends: legacy-dist Depends: swayidle, swaylock, greetd, wlgreet, lxqt-powermanagement, lxqt-powermanagement-l10n, lxqt-panel, lxqt-panel-l10n, lxqt-runner, lxqt-runner-l10n, lxqt-session, lxqt-session-l10n, lxqt-wayland-session, swaybg, wdisplays, flameshot, grim, xdg-desktop-portal-wlr, kanshi, smart-notifier Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-nonqubes-gui-lxqt_36.1-1_all.deb Size: 85140 SHA256: 9b04dbe85089349a5b78a11ea35b33a6df00bf57fa7016592017934f394540eb SHA1: d7bea4ed5733c4c772dad79ce7c10e65619cae6a MD5sum: a1baddb1771d4ad5cd8a085e6b3be6df Description: All systems, not Qubes VMs, LXQt GUI packages For all hardened systems. . For machines other than Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: dist-qubes-cli Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Pre-Depends: legacy-dist Depends: qubes-core-agent-networking, qubes-core-agent-dom0-updates, qubes-input-proxy-sender, qubes-kernel-vm-support, qubes-usb-proxy, qubesdb-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-cli_36.1-1_all.deb Size: 85048 SHA256: e669b1304dbfe5aae8c04186937b4da285c525b59ba7bb08025d05501a6fcbdc SHA1: 364c4ec605718a3f8f3b90df99e186bb9395fba8 MD5sum: a2160158f4fbefb5a51d92d9e374ee52 Description: All systems, Qubes VMs, command-line packages For all hardened systems. . For Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dist-qubes-gui-all Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Pre-Depends: legacy-dist Depends: qubes-core-agent-pcmanfm-qt, qubes-core-agent-nautilus, qubes-notification-agent Breaks: qubes-whonix-shared-packages-recommended Replaces: qubes-whonix-shared-packages-recommended Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-gui-all_36.1-1_all.deb Size: 85048 SHA256: 6d5f567bb883dc477127fb3deda6c6c83afc9a35045511e8d9b89427ec7f690e SHA1: f198db067d3a14eb8c93993267973274dbcd947a MD5sum: bfe14eac88a0d619414503b8ab664778 Description: All systems, Qubes VMs, GUI packages For all hardened systems. . For Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: dist-qubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-qubes-gui-lxqt_36.1-1_all.deb Size: 84976 SHA256: f34a9d7a6d07c492f268657992df7de6ca7dc85d07e9193cc03029734cf27862 SHA1: 0920ca7a9475cfb5ab595ab59cf093854621fc3e MD5sum: 5f4fd8fd0d0992694caf7fa30a35b1bc Description: All systems, Qubes VMs, LXQt GUI packages For all hardened systems. . For Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: dist-vm-cli Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dist-vm-cli_36.1-1_all.deb Size: 84968 SHA256: 16fa8da8097e49818819551a60c9ee0f25e9780eac97dbbf6239c6c577cb9d23 SHA1: 62ab7d08a204edd9b863ea69288ac250adcb7325 MD5sum: f18826c8579202a9cdfba5ee3e77cd42 Description: All systems, VMs, command-line packages For all hardened systems. . For non-Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: dummy-dependency-apparmor-profiles-kicksecure Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Conflicts: apparmor-profiles-kicksecure Provides: apparmor-profiles-kicksecure Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-apparmor-profiles-kicksecure_36.1-1_all.deb Size: 85016 SHA256: 41b9ee30bef1c6ac9be3f2cd8337349b4e40731ab7884672a99d7161ef1bf9dc SHA1: 6845b6f6989627d6802765c09683433a84058a16 MD5sum: 65ca705ed65811dace9278d35d8790cc Description: dummy package apparmor-profiles-kicksecure A metapackage, which satisfies the dependency on apparmor-profiles-kicksecure. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-bindp Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Conflicts: bindp Provides: bindp Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-bindp_36.1-1_all.deb Size: 85004 SHA256: ce34448b88c9507ce83bbe33aac8f6b67f56ea01d21a6ca63f320899e4f57203 SHA1: bbbe9b8ac4534338d6fa52fe66715271bef3f15c MD5sum: f288eabf50d5ec516f1174b963c41776 Description: dummy package to satisfy architecture specific dependency bindp A metapackage, which satisfies the dependency on bindp. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-browser-choice Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Conflicts: browser-choice Provides: browser-choice Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-browser-choice_36.1-1_all.deb Size: 85036 SHA256: a7b3840f6e799b6960ad9964acc25c8fa82d4829736d3467be8a69a37631738e SHA1: ee84299576b70a6f9ad1bcb4e09a629ac7480f5b MD5sum: 690a3e603d66d641c5a178b3011550de Description: dummy package browser-choice A metapackage, which satisfies the dependency on browser-choice, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-electrum Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Conflicts: electrum Replaces: dummy-dependency-hardened-electrum Provides: dummy-dependency-hardened-electrum, electrum Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-electrum_36.1-1_all.deb Size: 85028 SHA256: 8b9bc278a43760b5a71a626041ff8704225ee0a088d15620a3c55f2328db34d6 SHA1: d6bb94d68a779cdb1a4727bedd0b3f33cdbbbbbc MD5sum: 75002973999dd4b175d51d0fd35733f4 Description: dummy package to satisfy architecture specific dependency electrum A metapackage, which satisfies the dependency on electrum. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-firefox-esr Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Conflicts: firefox-esr Provides: firefox-esr Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-firefox-esr_36.1-1_all.deb Size: 85012 SHA256: 6d24459740f9b94830379e07deeaf4d8eab709e11e724ba28acf1324f1233713 SHA1: 33a3f14eef086eb8467aea064fd9848badcda619 MD5sum: 11ed159e99ced407930f56668f0964c2 Description: dummy package firefox-esr A metapackage, which satisfies the dependency on firefox-esr, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-hardened-malloc Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Conflicts: hardened-malloc Provides: hardened-malloc Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-hardened-malloc_36.1-1_all.deb Size: 85028 SHA256: 28981f64907d1d529a17a8923d140bcbc7d0009c149cf762838cdeaaf87cf6e9 SHA1: efe0892fdc7061ffc3cdc82ed95eb467e2171fe0 MD5sum: d268365481352eec75a9c29c93e1feb1 Description: dummy package to satisfy architecture specific dependency hardened-malloc A metapackage, which satisfies the dependency on: . hardened-malloc . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-kloak Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Conflicts: kloak Provides: kloak Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-kloak_36.1-1_all.deb Size: 85000 SHA256: 46f24e20fbc039738779a1fd83c17971a3d790a5ba828965f873cd977e9fd6cc SHA1: 69cec16dbd941b340bd6f13097ffb7e79a0d8031 MD5sum: c6a1e6e16ef6e11ddee0d488536dff38 Description: dummy package to satisfy architecture specific dependency kloak A metapackage, which satisfies the dependency on kloak. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-lxqt-policykit Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Conflicts: lxqt-policykit Provides: lxqt-policykit Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-lxqt-policykit_36.1-1_all.deb Size: 85052 SHA256: 803f314537e6f9d649b257841d0edc9804aff42c6eace66678ffce5b98147ac4 SHA1: b2040987627746eb45b4b6e3f37e4defdd7d7f3e MD5sum: a653e8a586b7361c034dd4556727661d Description: dummy package lxqt-policykit A metapackage, which satisfies the dependency on lxqt-policykit. Because lxqt-policykit is buggy. Bugs out on pam-info stdout/stderr output. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-mta Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Conflicts: default-mta, mail-transport-agent Provides: default-mta, mail-transport-agent Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-mta_36.1-1_all.deb Size: 85076 SHA256: 7c95b6a8ced7492bc378e4b11a568ddb87f31c88fd3cb7497cba3e5c51a44d54 SHA1: 5ebd4e22105593f506c17511d589969a089de6ce MD5sum: ed3a009aa11774d919e32d791ffc382c Description: dummy package mta A metapackage, which satisfies the dependency on default-mta and mail-transport-agent. Because apt attempts to install a mail transport agent when upgrading Bookworm to Trixie. . This package cannot provide a real implementation of a mail transport agent. It is only a dummy to satisfy the dependency. Package: dummy-dependency-qubes-core-agent-passwordless-root Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Conflicts: qubes-core-agent-passwordless-root Provides: qubes-core-agent-passwordless-root Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-qubes-core-agent-passwordless-root_36.1-1_all.deb Size: 85044 SHA256: 1660dc95fca46fedfc7267f14d0e61ef167a4cdc434d4c0f52263877225642c7 SHA1: 20789898198994229c6f66af7b49ff31079d1b89 MD5sum: 96dce64af2be527026b773c224d556a9 Description: dummy package qubes-core-agent-passwordless-root A metapackage, which satisfies the dependency on qubes-core-agent-passwordless-root, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-sway Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Conflicts: sway Provides: sway Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-sway_36.1-1_all.deb Size: 85004 SHA256: 0709814923aad0e66ed744c77ece2188b33852c9c154afbabd0eacbd070c1e0e SHA1: c49f070bcbda5fb51f6de434a85d3c9d10f7ee0e MD5sum: 0f7c8a31d78815d2c597c2fc19895f6f Description: dummy package sway A metapackage, which satisfies the dependency on sway. Used to install wlgreet without sway. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tb-starter Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Conflicts: tb-starter Provides: tb-starter Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tb-starter_36.1-1_all.deb Size: 85024 SHA256: e30bef7eebbb9bf5a12ea50626dc67d2935d7aafdb2123b8bc6a261e262455d2 SHA1: 6d6350aaed737d75075a8be84f2e7bb10b4ad9ad MD5sum: 0f1435f8c59aa2618497b374912c93c1 Description: dummy package tb-starter A metapackage, which satisfies the dependency on tb-starter, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tb-updater Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Conflicts: tb-updater Provides: tb-updater Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tb-updater_36.1-1_all.deb Size: 85028 SHA256: 6294efb118a9f9b3c6d7ff925bd54d8d0b4284bbeb3098c2a21e9c0459106b07 SHA1: a2dffce05fdd430651d2cbb58bc85d35d3ec58f1 MD5sum: 90d5760e1ae024cbdf4bc933af2e3a77 Description: dummy package tb-updater A metapackage, which satisfies the dependency on tb-updater, which may not be wanted by all users. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-tirdad Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Conflicts: tirdad Provides: tirdad Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-tirdad_36.1-1_all.deb Size: 85004 SHA256: b63831ab4451ed285b5d27c7074540a823f726009a7f1329f86883c0f7b1fab2 SHA1: 27a39b94049fee47d0140277c6b068c1973d5dc4 MD5sum: 322b8a8ba1d662708f997d8407ab68b9 Description: dummy package to satisfy architecture specific dependency tirdad A metapackage, which satisfies the dependency on tirdad. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: dummy-dependency-xorg-vm Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Conflicts: xserver-xorg-video-vmware Provides: xserver-xorg-video-vmware Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/dummy-dependency-xorg-vm_36.1-1_all.deb Size: 85012 SHA256: 68ffdce7006cfa9730e96213a4018e9196ce564ae5967dafb003b37dd337b53f SHA1: 83b5d042a94513eb3ec20f4d38fffb31ade12f6b MD5sum: e3a00cfa6837dbf9ee9f0c46ce1fd61e Description: dummy dependency xserver-xorg-video-vmware A metapackage, which satisfies the dependency on xserver-xorg-video-vmware. . This package cannot provide a real implementation of that package. It is only a dummy to satisfy the dependency. Package: firmware-freedom Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Pre-Depends: legacy-dist Depends: firmware-linux-free, firmware-ath9k-htc, firmware-carl9170 Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/firmware-freedom_36.1-1_all.deb Size: 85028 SHA256: a4e9ece88eced08744d15ca8029c12dd51aece32d1a55f9a1a2ca4b6b9474632 SHA1: 7266c67c415349fdf4636191dfc1a89b62a3cb1b MD5sum: 0da488f5103133650ffcb78e8a50015d Description: Recommended packages for hosts with freedom hardware design A metapackage, which includes freedom firmware useful for hosts with freedom hardware design. . These are not useful in Qubes, since this would be up to Qubes. Package: genmkfile Version: 3:17.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 165 Depends: make, dpkg-dev, devscripts, moreutils, safe-rm, strip-nondeterminism, perl, rsync, python3 Homepage: https://github.com/Kicksecure/genmkfile Priority: optional Section: misc Filename: pool/main/g/genmkfile/genmkfile_17.6-1_all.deb Size: 62024 SHA256: 13f0ad9f7b91d4632904be9d2e9c240ddedb4200aee4fcc1b32d916eaf117cee SHA1: bbbfe0bd91df9f6eb0fea78e4f335727525c410f MD5sum: a45c7c9a0fd1fae189b19ba66abdd559 Description: Generic Makefile Makes packaging simpler. No more need to manually maintain 'make install' targets or distribution specific install files such as debian/pkg-name.install. . Files in etc/... in root source folder will be installed to /etc/..., files in usr/... will be installed to /usr/... and so forth. This should make renaming, moving files around, packaging, etc. very simple. Packaging of most packages can look very similar. . Provides common make targets such as 'make install', 'make dist', 'make installsim', 'make installcheck', 'make uninstall', 'make uninstallcheck', 'make distclean'. . Very extensible through file ./make-helper-overrides.bsh or folder ./make-helper-overrides.d. By using overrides, any make target can be easily extended using pre or post hooks or replaced. Override files which are executable will be used. Override files which are not executable will be skipped. . Contains a minimal Makefile while the heavy lifting is done by a bash script make-helper.bsh. . Building for multiple platforms possible, example: export make_cross_build_platform_list="i386 amd64" . Can call with lintian (static analysis tool for Debian packages). By default it will be using lintian if installed while failing open (non-zero exit code). lintian can be disabled. export make_use_lintian=false Or can be configured to fail closed (non-zero exit code). export make_use_lintian=true . Can build packages without chroot using debuild (default) or inside chroot using cowbuilder. To enable cowbuilder, use: export make_use_cowbuilder=true . Supports signing packages using debsign. (sign a Debian .changes and .dsc file pair using GPG) export make_use_debsign=true Package: gpg-bash-lib Version: 3:5.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 647 Depends: safe-rm Homepage: https://github.com/Kicksecure/gpg-bash-lib Priority: optional Section: libs Filename: pool/main/g/gpg-bash-lib/gpg-bash-lib_5.3-1_all.deb Size: 490888 SHA256: d046437346f7fa334b0cef971f0a6732ac3d13d2f26e05fd792bd5fc2d58ab37 SHA1: 5b885600182572cb99b145480a1cf00e3648f730 MD5sum: cf13eecd72090e7117e1c4e42ab8790e Description: gpg bash library Abstracts file verification into common functions. Allows detecting of stale files, i.e. detection downgrade or indefinite freeze attacks by implementing a valid-until like mechanism. . Internally parses gpg's --status-file output. . For better security. Package: grub-live Version: 3:11.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 119 Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live_11.0-1_all.deb Size: 40120 SHA256: e4537bd2c3cd66195d5c448c3b1cd6a06e164cef0793c676f04ef10a06a2b17a SHA1: c5281224dedb50fe7fef02ea340b29a4b33f93cd MD5sum: 1542d9fbb61988c7e266ed1530c53fcd Description: grub live boot menu entry Base grub-live package. You probably do not want to install this directly, install grub-live-dracut instead. . Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . Adds a grub live boot menu entry. . Existing grub boot entries stay unmodified. . No claims are made with regard to anti forensics. Package: grub-live-dracut Source: grub-live Version: 3:11.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 63 Depends: grub-live, dracut Provides: boot-live, grub-live-boot Homepage: https://github.com/Kicksecure/grub-live Priority: optional Section: misc Filename: pool/main/g/grub-live/grub-live-dracut_11.0-1_all.deb Size: 31832 SHA256: aa2b52fe4ea6a945abec81bd543066c0a2c25c46a20668d37e510e503cc1422f SHA1: 71a207c62eecd03846ec3285346fb611d79c0d41 MD5sum: 756831ba3c9263f350160b2435855a24 Description: grub live dracut dependencies Dracut version metapackage for grub-live. . See also the package grub-live. Package: hardened-kernel Version: 3:5.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 474 Depends: build-essential, libssl-dev, libncurses-dev, fakeroot, libelf-dev, bison, flex, gcc-12-plugin-dev, curl, bc, kmod, cpio Homepage: https://www.kicksecure.com/wiki/Hardened-kernel Priority: optional Section: misc Filename: pool/main/h/hardened-kernel/hardened-kernel_5.2-1_all.deb Size: 158220 SHA256: fde543735888fbf54002055ace8171e4bb0a58e7cb103c9a909b2de8d7d374a9 SHA1: d86d6c5d078bf869d7016783ac2f76939c383799 MD5sum: bb77f496c08afd14bc7ca350ba184292 Description: Hardened Kernel for Host and VMs This is a hardened kernel configuration for Whonix / Kicksecure. hardened-vm-kernel is designed specifically for virtual machines and hardened-host-kernel is designed for hosts. . Both configs try to have as many hardening options enabled as possible and have little attack surface. hardened-vm-kernel only has support for VMs and all other hardware options are disabled to reduce attack surface and compile time. . During installation of hardened-vm-kernel, it compiles the kernel on your own machine and does not use a pre-compiled kernel. This ensures the kernel symbols in the compiled image are completely unique which makes it far harder for kernel exploits. This is possible due to hardened-vm-kernel having only VM config options enabled which drastically reduces compile time. . During installation of hardened-host-kernel, the kernel is not compiled on your machine and it uses a pre-compiled kernel. This is because the host kernel needs most hardware options enabled to support most devices which makes compilation take a very long time. . The VM kernel is more secure than the host kernel due to having less attack surface and not being pre-compiled but if you want more security for the host, it is recommended to edit the hardened host config, enable only the hardware options you need and compile the kernel yourself. This makes the security of the host and VM kernel comparable. . Both configs were based on the default Debian config. . These kernels use the linux-hardened patch for further hardening. Custom hardening patches should be sent there. . This only supports LTS kernels as they have the least attack surface (stable kernels have more code and more bugs) and the best stability. . Build script /usr/share/hardened-vm-kernel/build does not run automatic yet. . Kernel does not get installed automatic yet. . See also development discussion: http://forums.whonix.org/t/kernel-recompilation-for-better-hardening Package: helper-scripts Version: 3:48.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 1030 Depends: python3, python3-stem, python3-scapy, python3-yaml, bubblewrap, moreutils, equivs, safe-rm, jq, python3-schema, sq Breaks: usability-misc (<< 3:31.7-1) Replaces: anon-shared-helper-scripts, anon-ws-leaktest, curl-scripts, python-guimessages, python3-guimessages, usability-misc (<< 3:31.7-1) Homepage: https://github.com/Kicksecure/helper-scripts Priority: optional Section: misc Filename: pool/main/h/helper-scripts/helper-scripts_48.2-1_all.deb Size: 273968 SHA256: 5ad7866f4b861f1e669c60dad6ef973046f5ba817a7d4562f4b412e5e0b243db SHA1: 62298d7e951e3947d37998a078a6a9eb6cdd23f9 MD5sum: 0791fe5ecdaa403c5a72a92d35bc4d67 Description: Helper scripts useful for Linux Distributions Contains a script for curl progress bar in terminal. Includes another script to convert curl exit codes to curl status messages. Implemented in bash. Common code that can be used by other scripts. . Library that can be used by other (anonymity related) packages that want to programmatically get information about states of Tor. Common code, that is often required. Includes bash and Python helper scripts. . Leak Test for Anonymity Distribution Workstations Integrated leak test. Needs to be manually run. See: https://www.whonix.org/wiki/Dev/Leak_Tests . Translatable GUI Messages Generic modules guimessage.py and translations.py. Called with two parameters: .yaml file path and yaml section. Return translations according to distribution local language (Python 'locale'). . Provides the ld-system-preload-disable wrapper to disable /etc/ld.so.preload per application via bubblewrap. Useful if hardened_malloc is being globally preloaded and needs to be disabled for some applications. . Provides the dummy-dependency script for quickly creating and installing dummy packages for working around package dependencies. . Provides apt-get-noninteractive that is a simple wrapper around apt-get, that sets all required environment variables to make it interactive as well as to prevent systemd service starts and restarts during apt-get. Package: helper-scripts-tests Source: helper-scripts Version: 3:48.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 160 Depends: helper-scripts, git, python3-pytest, pylint, mypy, black, ncurses-term Homepage: https://github.com/Kicksecure/helper-scripts Priority: optional Section: misc Filename: pool/main/h/helper-scripts/helper-scripts-tests_48.2-1_all.deb Size: 128424 SHA256: 4b5a6c542e43eb1b5d089473e90fd7e17033beedad95f6d9e2bc5fda680482b5 SHA1: 94375735b7b918dc82cd19ce03bb9301dced3020 MD5sum: 6118f8f59ce56a6881822e85bf42ca96 Description: Helper scripts test packages This is a dependency package for tests. Package: icon-pack-dist Version: 3:5.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 2528 Conflicts: anon-icon-pack Replaces: anon-icon-pack Provides: anon-icon-pack Homepage: https://github.com/Kicksecure/icon-pack-dist Priority: optional Section: misc Filename: pool/main/i/icon-pack-dist/icon-pack-dist_5.2-1_all.deb Size: 1440004 SHA256: 9378144200a6e3a752c0573094875a312768cfd7c8ee907e232a002217b354fb SHA1: 208a251970fb27b3929cafb46a957054a167d597 MD5sum: fb8943cda1cd798238a370d333005c3e Description: Icon Pack for Derivative Distributions Contains icons, that are used by other derivative distribution specific packages. Others are welcome to use these icons according to their Free licenses as well. Package: initializer-dist Version: 3:8.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 84 Depends: psmisc, debsums, damngpl, safe-rm Conflicts: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Replaces: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Provides: anon-shared-build-remember-sources, anon-shared-build-sanity-checks, whonix-initializer Homepage: https://www.kicksecure.com/wiki/Verifiable_Builds Priority: optional Section: misc Filename: pool/main/i/initializer-dist/initializer-dist_8.5-1_all.deb Size: 34912 SHA256: 08adeaad3121c711700c3b1b5d7bea36f9e3432c183f0d221c50da6ed486ac63 SHA1: 7a26d3db1c50afab64764827f3f37aab84df041c MD5sum: c44abd11833cd4753f95256048d58009 Description: Initializes Linux distributions, Release Upgrades and Legacy Contains a chroot-scripts-post.d script, that cleans up temporary files, logs. . Deletes random seeds. Since these should not be included in a redistributed image. Also sometimes called 'golden' image. . - /var/lib/urandom/random-seed - /var/lib/systemd/random-seed - /var/lib/random-seed - See also: https://systemd.io/RANDOM_SEEDS.html Package: kicksecure-baremetal-cli Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Pre-Depends: legacy-dist Depends: kicksecure-nonqubes-cli, kicksecure-general-cli, dist-baremetal-cli, dist-nonqubes-cli, dist-general-cli, ram-wipe, wpasupplicant Breaks: kicksecure-cli-host, kicksecure-cli-host-packages-recommended Replaces: kicksecure-cli-host, kicksecure-cli-host-packages-recommended Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-cli_36.1-1_all.deb Size: 85044 SHA256: 07841bde0ea5197a5ea5e3679d746f57a4933d2e39bd829698d8dd0b8836e87f SHA1: 2bf2244fe7644621ffb0a10210765f6c9e234dd5 MD5sum: d30db2aba2aa2ee64ce9fe31ee188fc1 Description: Kicksecure systems, physical hardware, command-line packages For Kicksecure systems. . For physical hardware. . Provides packages for basic command-line-only installations. Package: kicksecure-baremetal-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Pre-Depends: legacy-dist Depends: kicksecure-baremetal-cli, kicksecure-nonqubes-gui-lxqt, kicksecure-nonqubes-gui-all, kicksecure-nonqubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-baremetal-gui-lxqt, dist-baremetal-cli, dist-nonqubes-gui-lxqt, dist-nonqubes-gui-all, dist-nonqubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-lxqt-host, kicksecure-xfce-host Replaces: kicksecure-lxqt-host, kicksecure-xfce-host Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-gui-lxqt_36.1-1_all.deb Size: 85064 SHA256: 8bbc85f1f3a574875fb3e4fc91c0f395b72b6d44f5c295ed6c311aaffc5904df SHA1: a0fbd99928af1c7909b1f65ecbf25c1af69b9880 MD5sum: 156eb5836c3eac8f34e9fe139f86ee11 Description: Kicksecure systems, physical hardware, LXQt GUI packages For Kicksecure systems. . For physical hardware. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-baremetal-server Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Pre-Depends: legacy-dist Depends: kicksecure-baremetal-cli, kicksecure-nonqubes-cli, kicksecure-general-cli, dist-baremetal-cli, dist-nonqubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-baremetal-server_36.1-1_all.deb Size: 85000 SHA256: 7eb28ba5438f1d261cafb47a34c0a2165fdf119b6f3f2fb2ad9b7138e2d24b3e SHA1: d2e03a844b4768e9906b85c40399fd32da9010e9 MD5sum: 11ec10b44888c9c47fc65eb09406066d Description: Kicksecure systems, physical hardware, server packages For Kicksecure systems. . For physical hardware. . Provides packages for server installations. Package: kicksecure-base-files Version: 3:10.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 2729 Depends: less Conflicts: diverts-etc++issue, diverts-etc++motd, diverts-etc++xdg++waybar++config.jsonc, diverts-etc++xdg++waybar++style.css Breaks: desktop-config-dist (<< 3:14.7-1) Replaces: desktop-config-dist (<< 3:14.7-1) Provides: diverts-etc++issue, diverts-etc++motd, diverts-etc++xdg++waybar++config.jsonc, diverts-etc++xdg++waybar++style.css Homepage: https://github.com/Kicksecure/kicksecure-base-files Priority: optional Section: misc Filename: pool/main/k/kicksecure-base-files/kicksecure-base-files_10.3-1_all.deb Size: 2632500 SHA256: f5e4e9beaa7e080bb71194ccf5134262789271ef851da12c8d821d27f13ccb64 SHA1: 04ce6b783bc21213db13167f9ea7af0832c209dd MD5sum: 1f839d954b44eca83aab4f0f7d040e90 Description: Kicksecure base system miscellaneous files This package contains several important miscellaneous files, such as /etc/issue, /etc/motd, /etc/dpkg/origins/kicksecure, /usr/bin/kicksecure, and others. . Sets the KICKSECURE environment variable to 1 as well. Package: kicksecure-general-cli Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Pre-Depends: legacy-dist Depends: dosfstools, kicksecure-base-files, lvm2, ntfs-3g, obfs4proxy, gddrescue, usbguard Breaks: kicksecure-cli Replaces: kicksecure-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-cli_36.1-1_all.deb Size: 85036 SHA256: c263c1dd9ba84ca29c3d41730e891496a51517365c355d904f6ab52ce232ca3e SHA1: 4e67b73f06a77730f70f8851e68a98e0f89296f8 MD5sum: aa003a7946535a54a0ad7d9272d95b9d Description: Kicksecure systems, all hardware, command-line packages For Kicksecure systems. . For all hardware platforms. . Provides packages for basic command-line-only installations. Package: kicksecure-general-gui-all Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Pre-Depends: legacy-dist Depends: browser-choice, flatpak, keepassxc, kicksecure-welcome-page, loupe, vlc, ddrescueview, pipewire-audio, pipewire-pulse, wireplumber, rtkit, catfish, electrum, usbguard-notifier Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-gui-all_36.1-1_all.deb Size: 85080 SHA256: 19c2dac462ac2b04e7afd2e0d62edf301ab13b41891ae99087183161b5fab7d2 SHA1: b5ab3f743f4e8bc50f67c54b4c1e084080676c9b MD5sum: fe4f4282db9264e9c4231b246637b3a6 Description: Kicksecure systems, all hardware, GUI packages For Kicksecure systems. . For all hardware platforms. . Provides packages for all graphical desktop installations. Package: kicksecure-general-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Pre-Depends: legacy-dist Depends: network-manager-applet, nm-connection-editor Breaks: kicksecure-lxqt, kicksecure-xfce Replaces: kicksecure-lxqt, kicksecure-xfce Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-general-gui-lxqt_36.1-1_all.deb Size: 85040 SHA256: 0d2910e350f97c5f3386575afe8f58c3b00c39fa5f024fccaae68393e59cc554 SHA1: 1583dcbb64ffa2173ff177626f5431c871c725e2 MD5sum: cea227a187d7a2dfc185955816c67280 Description: Kicksecure systems, all hardware, LXQt GUI packages For Kicksecure systems. . For all hardware platforms. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-network-conf Version: 3:6.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 75 Depends: network-manager, iw, wpasupplicant, netbase, wireless-tools, wireless-regdb Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf_6.9-1_all.deb Size: 22864 SHA256: 655af1aaae912f74335aee678a10f8b122945b75a6d6fb33dc4785a8024a60f8 SHA1: 51384d44e39eb647f6d4e4d7c37c833fbd65abb6 MD5sum: 859df84ecaccfd70f9e928054a131392 Description: Network Configuration for Kicksecure CLI Disables systemd Predictable Network Interface Names. . Disables systemd-resolved during boot unless file /etc/dns-enable exists. . Disables systemd-resolved fallback DNS (which by default is set to Google). . Disables NetworkManager hostname management (useful in redistributed Kicksecure VMs). Package: kicksecure-network-conf-gui Source: kicksecure-network-conf Version: 3:6.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 49 Depends: network-manager-gnome Homepage: https://github.com/Kicksecure/kicksecure-network-conf Priority: optional Section: misc Filename: pool/main/k/kicksecure-network-conf/kicksecure-network-conf-gui_6.9-1_all.deb Size: 19488 SHA256: 2ed67ecfc4e6d8d74360d83e3e0c30f970a33a8a62c103143af034ed76223402 SHA1: 26149acd768ae533e766b34a5a9fe6d2d73b9f80 MD5sum: 608af953ef551749d55fa14c8b21b762 Description: Network Configuration for Kicksecure GUI A metapackage with dependencies recommended for a Kicksecure GUI for networking. . See also kicksecure-network-conf. Package: kicksecure-nonqubes-cli Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-cli_36.1-1_all.deb Size: 84984 SHA256: 20c3eaed89d2ecf01881e0e0494665d551bf2aafafcf1501e3dc867e2c788d69 SHA1: 37706e0fbecac8410a396af1c6ff5dff17c1276b MD5sum: 9218a46d2b87a041d4e73e65224029e8 Description: Kicksecure systems, not Qubes VMs, command-line packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-nonqubes-gui-all Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Pre-Depends: legacy-dist Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-gui-all_36.1-1_all.deb Size: 84988 SHA256: 38bf8a0036fc22d2f82a4cbdb6b53b40874da7d650df5871821a0181e6e6a01b SHA1: 46e402fd3a8cc96e60e51f910840a2f3f4f5a117 MD5sum: 5e394dcdd26cb6c8c905bda9ccb48b5d Description: Kicksecure systems, not Qubes VMs, GUI packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: kicksecure-nonqubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Pre-Depends: legacy-dist Depends: pavucontrol-qt, pavucontrol-qt-l10n Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-nonqubes-gui-lxqt_36.1-1_all.deb Size: 85016 SHA256: 10d696a2d862fd1626663a8a2281c4c20560aa791386e30ec5da606ed05c0f25 SHA1: 92e734dd96d965feb90b444d905bc8e9ae204b17 MD5sum: 59d85820efd461f5b63cf21d85041b56 Description: Kicksecure systems, not Qubes VMs, LXQt GUI packages For Kicksecure systems. . For machines other than Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-packages-dependencies-pre Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Depends: dist-base-files, kicksecure-network-conf Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-packages-dependencies-pre_36.1-1_all.deb Size: 85012 SHA256: a807355e8508132578776c844eaa686c5f02c10b09561ffb50d4c05fdc3860c4 SHA1: 91f9799eeacc87b09a7384b2c2ac4aff0c5b4617 MD5sum: 7d43ffefe4e239f1a16cf1b7429c1d7b Description: Dependencies for Kicksecure that changes network related files A metapackage, which installs packages which Kicksecure depends on. Can not be merged into another package due to conflicts with chroot build process. Package: kicksecure-qubes-cli Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Pre-Depends: legacy-dist Depends: kicksecure-general-cli, dist-qubes-cli, dist-general-cli, qubes-gpg-split, qubes-img-converter, qubes-pdf-converter, qubes-core-agent-network-manager, wpasupplicant Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-cli_36.1-1_all.deb Size: 85048 SHA256: d63916900ddd44492d6215b3fd0d8b5ecca3ab72fd91ddce7d3417ff19acb73b SHA1: 814fc699c6dfea2ddf99afe4787eefb4cfe3b664 MD5sum: bf20bbd789b561dd53d4965d980c5b68 Description: Kicksecure systems, Qubes VMs, command-line packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-qubes-gui-all Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Pre-Depends: legacy-dist Depends: pipewire-qubes Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-gui-all_36.1-1_all.deb Size: 84984 SHA256: 9c4c64cc4ac473f1ae9ef45259a9cdfde7808aca8e1e94e331ccc8425cac2f05 SHA1: cecf0e8d3cbb70ae770ddc967fada08cbe9d64db MD5sum: 37aeb447864de9bcc0cb7033258cf9c4 Description: Kicksecure systems, Qubes VMs, GUI packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for all graphical desktop installations. Package: kicksecure-qubes-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Pre-Depends: legacy-dist Depends: kicksecure-qubes-gui-all, kicksecure-qubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-qubes-gui-lxqt, dist-qubes-gui-all, dist-qubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-qubes-gui Replaces: kicksecure-qubes-gui Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-gui-lxqt_36.1-1_all.deb Size: 85048 SHA256: ecbb3ae719ef5106e1fef049b6b87ac8cfc5f8bdc138fdbde865cf5fa434ff57 SHA1: da1ea1e7ae8049a079f214f4c80cb0a3689f8ae8 MD5sum: 7ba74bdd74930e407136a9484b6948cf Description: Kicksecure systems, Qubes VMs, LXQt GUI packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-qubes-server Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Pre-Depends: legacy-dist Depends: kicksecure-qubes-cli, kicksecure-general-cli, dist-qubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-qubes-server_36.1-1_all.deb Size: 84992 SHA256: 5ca2b74089dea0235652a6c9189d712bbc486b3b4f5bf52d1d4a2b36da7ccf48 SHA1: 3821580a3092e7937d9bbc0ab8da75d31ed0273d MD5sum: dbadba29b4cb83bdcbc696f9d03c09f8 Description: Kicksecure systems, Qubes VMs, server packages For Kicksecure systems. . For Qubes virtual machines. . Provides packages for server installations. Package: kicksecure-vm-cli Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Pre-Depends: legacy-dist Depends: kicksecure-nonqubes-cli, kicksecure-general-cli, dist-vm-cli, dist-nonqubes-cli, dist-general-cli Breaks: kicksecure-cli-vm Replaces: kicksecure-cli-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-cli_36.1-1_all.deb Size: 85016 SHA256: cb21174a6ac2dca3282d551bd33c5f84e5c3fbfc731819c14de5ba692cb0cb48 SHA1: feb3d8cb6ecedaf8c3a4821327e2f93cda48df1f MD5sum: 703ecbe7852e17c26f1083728b3a0a8a Description: Kicksecure systems, VMs, command-line packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for basic command-line-only installations. Package: kicksecure-vm-gui-lxqt Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Pre-Depends: legacy-dist Depends: kicksecure-vm-cli, kicksecure-nonqubes-gui-lxqt, kicksecure-nonqubes-gui-all, kicksecure-nonqubes-cli, kicksecure-general-gui-lxqt, kicksecure-general-gui-all, kicksecure-general-cli, dist-vm-cli, dist-nonqubes-gui-lxqt, dist-nonqubes-gui-all, dist-nonqubes-cli, dist-general-gui-lxqt, dist-general-gui-all, dist-general-cli Breaks: kicksecure-lxqt-vm, kicksecure-xfce-vm Replaces: kicksecure-lxqt-vm, kicksecure-xfce-vm Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-gui-lxqt_36.1-1_all.deb Size: 85060 SHA256: f0744ae7df93a884c8349642611bf87f1fabea2146b2cce542465b05ac37b808 SHA1: 2310446a638f6d56b9763f0c9e7c2954a2ebe1d7 MD5sum: 177fcfd8204acee37299fad4b43812a0 Description: Kicksecure systems, VMs, LXQt GUI packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for LXQt graphical desktop installations. Package: kicksecure-vm-server Source: kicksecure-meta-packages Version: 3:36.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 112 Pre-Depends: legacy-dist Depends: kicksecure-vm-cli, kicksecure-nonqubes-cli, kicksecure-general-cli, dist-vm-cli, dist-nonqubes-cli, dist-general-server, dist-general-cli Homepage: https://github.com/Kicksecure/kicksecure-meta-packages Priority: optional Section: metapackages Filename: pool/main/k/kicksecure-meta-packages/kicksecure-vm-server_36.1-1_all.deb Size: 85000 SHA256: 115e76d99d9a0355925a0d6201e55d821886af075c173b5125bfc7c48771d3bb SHA1: 60c87bf4b89720df5a7730f7bd90172e052c9e8e MD5sum: 9f9bdf171dfa1f02299d2bd65346e82f Description: Kicksecure systems, VMs, server packages For Kicksecure systems. . For non-Qubes virtual machines. . Provides packages for server installations. Package: kicksecure-welcome-page Version: 3:7.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 1013 Depends: fonts-roboto-fontface, libjs-jquery Homepage: https://github.com/Kicksecure/kicksecure-welcome-page Priority: optional Section: misc Filename: pool/main/k/kicksecure-welcome-page/kicksecure-welcome-page_7.7-1_all.deb Size: 922556 SHA256: dad058a70e183c212ad660f4aeb0149772718f3b335cd6dbdd11f67c08621f65 SHA1: a18b9e85c08286e4ac900248b34c9dbc296ed4fc MD5sum: d2583cc1d1b15564feecc40c484da1b7 Description: Local Browser Homepage for Kicksecure Kicksecure specific browser start page. . Contains Kicksecure logo and Kicksecure links. . Safe to remove, if you know what you are doing. Package: legacy-dist Version: 3:19.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 151 Depends: helper-scripts, apt-forktracer, moreutils Conflicts: vbox-disable-timesync, whonix-legacy Replaces: vbox-disable-timesync, whonix-legacy Provides: vbox-disable-timesync, whonix-legacy Homepage: https://github.com/Kicksecure/legacy-dist Priority: optional Section: misc Filename: pool/main/l/legacy-dist/legacy-dist_19.9-1_all.deb Size: 60896 SHA256: 5808c7fa527ecb6b7a49e744eaf5b4c6700b266aa5330b5f6d1a79711b4e56d5 SHA1: 4ac98eed237e541bab04275921ba77ffeea6c2a5 MD5sum: 8ecf7fe68749d0bc55a06f5f036ba94a Description: Prepare older Build Versions of Derivatives for Upgrade Applies fixes required for upgrading from for example version 8.x to version 9.x etc. . Upgrades from version 7.x or older versions is unsupported. . Safe to remove. Package: libvirt-dist Version: 3:11.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 144 Depends: adduser, qemu-kvm, libvirt-daemon-system, libvirt-clients, virt-manager, gir1.2-spiceclientgtk-3.0, dnsmasq-base, helper-scripts, msgcollector Conflicts: whonix-libvirt Replaces: whonix-libvirt Provides: whonix-libvirt Homepage: https://github.com/Kicksecure/libvirt-dist Priority: optional Section: misc Filename: pool/main/libv/libvirt-dist/libvirt-dist_11.8-1_all.deb Size: 55936 SHA256: 1decab7adfd5784713815bb059c502335d91b6cac8a5958d6ea81b5a19488f7a SHA1: 9d10851cb6592bca52f70f7e3bfeeab8f17afc8f MD5sum: 05d6f63b603f24a761786aa3cf9a399f Description: Whonix Libvirt XML Files for KVM and QEMU Libvirt XML files for Whonix-Gateway, Whonix-Workstation, Whonix-Custom-Workstation and Whonix's internal network. . Whonix-Host grub branding, motd and issue banner. . Whonix-Host boot popup. . See also: - https://www.kicksecure.com/wiki/KVM - https://www.kicksecure.com/wiki/QEMU Package: live-config-dist Version: 3:9.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 309 Depends: helper-scripts, pkexec, rsync, libglib2.0-bin, xdg-user-dirs, qml6-module-qtquick-window Homepage: https://github.com/Kicksecure/live-config-dist Priority: optional Section: misc Filename: pool/main/l/live-config-dist/live-config-dist_9.9-1_all.deb Size: 148788 SHA256: 0e79c5c0085cfed9b5dddd0f6bbf7c116a5b3e63fe1c90f243e3e04227a390b4 SHA1: 3c86b8d322e4a10755a3837e9184f238079e1ca2 MD5sum: dd583223ab983f25b40d4f5d6fb2cd26 Description: calamares-settings-kicksecure and maybe calamares-settings-whonix Installed in Host ISO Live. . Supposed to be removed in Host installed. . Kernel parameters required for Live ISO. Package: lxqt-wayland-session Version: 0.2.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 473 Homepage: https://github.com/lxqt/lxqt-wayland-session Priority: optional Section: x11 Filename: pool/main/l/lxqt-wayland-session/lxqt-wayland-session_0.2.6-1_all.deb Size: 342096 SHA256: 8f38a2628beb9d80936f08de310a5eb8c4b58e7338c4d16907ca671740558200 SHA1: a05c949a9c7b4b6b7c1f425b291bd589c8ff7651 MD5sum: f2c1cbeea5d4eecfc751a6a0a75209af Description: Files needed for the LXQt Wayland Session Files needed for the LXQt Wayland Session: Wayland session start script, its desktop entry for display managers and default configurations for actually supported compositors. Package: mediawiki-shell Version: 3:5.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 160 Depends: helper-scripts, safe-rm, jq, retry, python3 Homepage: https://github.com/Kicksecure/mediawiki-shell Priority: optional Section: misc Filename: pool/main/m/mediawiki-shell/mediawiki-shell_5.4-1_all.deb Size: 49196 SHA256: c10ce5ad98efe30c9cd09e8fe86a3432694bf3a061da97ecc39bb102774e995f SHA1: fd7c94f5ffed492c32204337d541183913e5921b MD5sum: 6411503f45816463b3db36bd439728f5 Description: bash shell scripts for usage of MediaWiki API Download, upload changes to, and manage pages from MediaWiki wikis from the command line. . This tool may work on other wiki sites, but is primarily intended for management of the Kicksecure and Whonix wikis. Package: msgcollector Version: 3:16.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 217 Depends: python3, inotify-tools, procps, safe-rm, moreutils, init-system-helpers (>= 1.52) Conflicts: diverts-etc++bash.bash+-+logout Provides: diverts-etc++bash.bash+-+logout Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector_16.0-1_all.deb Size: 71492 SHA256: 4408d838abdc7deb9e6c4ae41392383de93f80fb13217cc5fb2248e90fda570b SHA1: babe7ec6a46c2e2f7baff5a920019fbd54f1a47c MD5sum: c76b72567083158b4a8add8a7fc5ae8f Description: Command Line Interface Messages Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in terminal user interfaces (CLI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as ncurses but has of course much less and very different features. . For graphical user interface (GUI) support also install package msgcollector-gui. Package: msgcollector-gui Source: msgcollector Version: 3:16.0-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 78 Depends: msgcollector, python3-pyqt5, qtwayland5, yad, libnotify-bin, lxqt-notificationd, x11-utils, gnome-colors-common Homepage: https://github.com/Kicksecure/msgcollector Priority: optional Section: misc Filename: pool/main/m/msgcollector/msgcollector-gui_16.0-1_all.deb Size: 50084 SHA256: d97b3cf02f21adb1bc6ddb6bc8cf0a37e15805f2e2f3faca762419a3443f9123 SHA1: c22eac4efce55beda2fa2280396c29d740bcef1d MD5sum: 0376f6281dcc7143c1bf47651e214fb1 Description: Graphical User Interface Toolkit Library A programming library providing an application programming interface (API) that allows the programmer to output colored text in graphical user interfaces (GUI). . Applications can send messages to msgcollector which it collects and dispatches once instructed to do so by the application. . For clarity and avoidance of confusion, msgcollector does not collect any data. Applications that do not use msgcollector do not interact with msgcollector. It is roughly in the same category as Qt or GDK but has of course much less and very different features. . A metapackage that installs required dependencies for graphical user interface support. Package: open-link-confirmation Version: 3:8.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 104 Depends: sensible-utils, icon-pack-dist, msgcollector, xdg-utils Recommends: tb-starter, tb-updater Breaks: tb-default-browser (<< 3:7.5-1) Replaces: tb-default-browser (<< 3:7.5-1) Homepage: https://github.com/Kicksecure/open-link-confirmation Priority: optional Section: misc Filename: pool/main/o/open-link-confirmation/open-link-confirmation_8.2-1_all.deb Size: 35000 SHA256: c2ccacb27d1d3cabdc87d04263597d63f4e362ec023740d983ce310dd03981df SHA1: 9daa9d960c62f6414651a13ff499f8c3ed52d2d1 MD5sum: b6862f47bedaa6b12deb8109c82ab8a6 Description: confirmation dialog before opening links or files Provides a safety wrapper for opening URLs or files. Prompts the user for confirmation before launching the associated application, to prevent accidental or unsafe link openings. . Integrates with msgcollector to display graphical confirmation and error dialogs. Uses helper-scripts' sanitize-string to strip potentially malicious Unicode or HTML input, trims displayed addresses to 128 characters, and logs diagnostic information through msgcollector. . Detects execution context: * On Kicksecure and Whonix-Workstation systems, links can be opened after explicit confirmation in a supported browser. * On Whonix-Gateway (anon-gw-base-files installed), opening of links is blocked for security reasons. Local files are instead opened in the text editor defined by $EDITOR (defaulting to FeatherPad or Mousepad). * In Qubes OS Template, integrates with qvm-open-in-dvm for secure link opening in disposable VMs. Handles refusal responses and displays informative error dialogs. * When booted in "sysmaint" (system maintenance) mode, link opening is refused to avoid network activity during administrative sessions. . Automatically detects and uses installed browsers such as: brave-browser, chromium, firefox, mullvad-browser, browser-choice, or torbrowser (Whonix starter wrapper). Falls back to x-www-browser if none of the above are available. . Provides infinite recursion protection to prevent self-invocation loops, sets environment variables (OPEN_LINK_CONFIRMATION, OPEN_LINK_CONFIRMATION_COUNTER), and adjusts XDG_CONFIG_DIRS and XDG_DATA_DIRS to register itself as a compliant XDG handler and default $BROWSER. . Designed for security-focused environments such as Kicksecure, Whonix, and Qubes OS. . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: privleap Version: 3:5.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 385 Depends: python3, python3-pam, python3-sdnotify Homepage: https://www.kicksecure.com/wiki/Privleap Priority: optional Section: admin Filename: pool/main/p/privleap/privleap_5.2-1_all.deb Size: 73108 SHA256: 3ebf2268ee1b0cff095ba9dbea77a6c3f372cd61c696b97bf93d4b78157c7566 SHA1: 8130f48481de25c075a184cb30621baa54a943cc MD5sum: 7018dca11f8dd2afb0f266317579f7f5 Description: Limited privilege escalation framework Provides a privilege escalation framework for running pre-defined command sequences ("actions") as root. . Does not require a SUID executable. Package: rads Version: 3:8.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 115 Homepage: https://www.kicksecure.com/wiki/RAM_Adjusted_Desktop_Starter Priority: optional Section: misc Filename: pool/main/r/rads/rads_8.5-1_all.deb Size: 36692 SHA256: 9f9ad12520d33f1551d0546e37766eff637ecfd63fab2a3be75a8d7029f406fe SHA1: 6f95b18ecc08984401ba4a2cee6e04ea754a2826 MD5sum: b68dd790aada8d798fc309635d5d18cc Description: RAM Adjusted Desktop Starter If there is more than X MB RAM in total, the desktop environment will be started. . If less than X MB RAM in total (for example, only 196 MB RAM in total), no desktop environment will be started. . This should be quite convenient, because users with low RAM could reduce Y MB and even if they sometimes wanted to configure/check something, they could assign 512 RAM and automagically boot into the graphical desktop. There are also many settings in /etc/rads.d/ (stackable) to configure this feature, so if you want, you can also add a lot RAM, but not boot into a desktop environment, or use different display managers and so on. . Most useful in virtual machines. Package: ram-wipe Version: 3:4.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 81 Depends: helper-scripts, dracut, secure-delete, kexec-tools, systemd-cryptsetup Homepage: https://github.com/Kicksecure/ram-wipe Priority: optional Section: misc Filename: pool/main/r/ram-wipe/ram-wipe_4.2-1_all.deb Size: 24980 SHA256: bb166f2e4536bcc2276d5bd7c8dbb4044a7795d59032ddcc0c34d6c89fe133eb SHA1: c6ac0941040172114e4da6f72c04eed704ba1ccc MD5sum: e4ae7bdb87bfec7ff2048ab396f6927b Description: Wipe RAM on shutdown and reboot A dracut module that wipes RAM on shutdown and reboot. . Not implemented for initramfs-tools. Package: repository-dist Version: 3:13.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 145 Depends: helper-scripts, lsb-release, moreutils, python3:any, sq Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist_13.4-1_all.deb Size: 58656 SHA256: 5eb7f8a7090ac82f424ea945d6d04fc70cc80fc70b491b44ddd12012710bb3ef SHA1: c087b8d9e2364f263a9f242587fb3b3c3e4e0ce8 MD5sum: 3a882a295f681775210b6d4d77fa2b98 Description: Derivative APT Repository Command Line Interface (CLI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . Derivative's APT Repository is not enabled by default. Some users prefer this for trust/security reasons. . On first boot of Derivative, the Derivative Repository Tool gets automatically started by setup-dist. The user is free to either leave Derivative's repository disabled or to configure it as desired. . Technically speaking, this tool creates or deletes file `/etc/sources.list.d/derivative.sources`. . Using APT `signed-by`. Package: repository-dist-wizard Source: repository-dist Version: 3:13.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 75 Depends: pkexec, python3-pyqt5, python3:any, qtwayland5 Homepage: https://www.kicksecure.com/wiki/Project-APT-Repository Priority: optional Section: misc Filename: pool/main/r/repository-dist/repository-dist-wizard_13.4-1_all.deb Size: 41460 SHA256: c9a075ec8fa9540ec1c8c674b7d7c5d83ea3659e1a1887505de1ccb6371d9e6d SHA1: ca9cbc5e3189c6e410cbca3474627beeecee4c09 MD5sum: c3879ac99db0ef1e4b0d4d12b7dd6a4b Description: Derivative APT Repository Graphical User Interface (GUI) This tool can always be used to enable either Derivative's stable, testers or developers repository or to disable Derivative's repository. . This is a metapackage depending on the required packages for the GUI (Graphical User Interface). Package: ro-mode-init Version: 3:3.4-1 Architecture: all Maintainer: Algernon <33966997+Algernon-01@users.noreply.github.com> Installed-Size: 60 Depends: live-boot, live-boot-initramfs-tools, live-tools Conflicts: grub-default-live, grub-live Replaces: grub-default-live, grub-live Provides: boot-live Homepage: https://github.com/Kicksecure/ro-mode-init Priority: optional Section: misc Filename: pool/main/r/ro-mode-init/ro-mode-init_3.4-1_all.deb Size: 19648 SHA256: f02f010e5c16e48f19d196a4cb98e331c5c8c738a13ba4def5da44f411d3ad13 SHA1: 9df20e2b5c06eba1bbcaafb0b06bbb4d9c34015f MD5sum: ee48fcae2f3ebd17dc0881c95a3b7640 Description: Detects read-only disks and automatically enables live-boot Allows booting the system in live mode. Meaning, no persistent modifications will be written to the disk. All changes stay in RAM. . No claims are made with regard to anti forensics. Package: sandbox-app-launcher Version: 0:7.3-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 131 Depends: sudo, bubblewrap, apparmor, libseccomp-dev, helper-scripts, dbus-x11 Homepage: https://www.kicksecure.com/wiki/Sandbox-app-launcher Priority: optional Section: misc Filename: pool/main/s/sandbox-app-launcher/sandbox-app-launcher_7.3-1_all.deb Size: 49068 SHA256: d114d5fc42a6a5d5d6d2cbc4f4e52757dc9bd1c6fe3654c278d30a1cdf0c1b23 SHA1: 9e1106436835ce41dd7d40ac4f86270c1a15ffb7 MD5sum: 1b2be03c1467f57c664a789300b962b3 Description: application launcher to start apps in a restrictive sandbox sandbox-app-launcher runs each app as its own user, in a bubblewrap sandbox and confined by apparmor. . The directory, `/shared`, is shared across all app sandboxes to transfer files across. . This implements a permissions system to configure what apps can access. There are currently 5 available permissions: . * Network access . * Webcam access . * Microphone access . * Shared storage access (read-only or read-write) . * Dynamic native code execution . All apps the user installs will be automatically configured to run in the sandbox and a prompt will ask the user which permissions they wish to grant the application (not implemented yet). . Currently a WIP and not for actual use. Package: sdwdate Version: 3:27.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 347 Depends: bc, helper-scripts, adduser, gcc, libc6-dev, privleap, python3-stem, python3-dateutil, python3-socks, python3-sdnotify, python3-requests, python3, tor, util-linux-extra Recommends: timesanitycheck, bootclockrandomization Conflicts: time-daemon Provides: time-daemon Homepage: https://www.kicksecure.com/wiki/Sdwdate Priority: optional Section: misc Filename: pool/main/s/sdwdate/sdwdate_27.7-1_all.deb Size: 153944 SHA256: e4790a22d06ab21b7d8e86d8ece4e650a3ccb5074dbcd3ed3c2b6673c8ee8faa SHA1: 047707c084085f36650615abe221b6c07c1e4db4 MD5sum: 382189c3c6fc55346167d64d7cbb26c6 Description: Secure Distributed Network Time Synchronization Time keeping is crucial for security, privacy, and anonymity. Sdwdate is a Tor friendly replacement for rdate and ntpdate that sets the system's clock by communicating via onion encrypted TCP with Tor onion webservers. . At randomized intervals, sdwdate connects to a variety of webservers and extracts the time stamps from http headers (RFC 2616). Using sclockadj option, time is gradually adjusted preventing bigger clock jumps that could confuse logs, servers, Tor, i2p, etc. . This package contains the sdwdate time fetcher and daemon. No installation on remote servers required. To avoid conflicts, this daemon should not be enabled together with ntp or tlsdated. Package: sdwdate-gui Version: 1:13.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 283 Depends: privleap, python3, python3-pyqt5, python3-pyinotify, qtwayland5, helper-scripts, sdwdate, adduser, python3-schema Homepage: https://www.kicksecure.com/wiki/sdwdate-gui Priority: optional Section: misc Filename: pool/main/s/sdwdate-gui/sdwdate-gui_13.8-1_all.deb Size: 106200 SHA256: ecb8306189adc71a6697ff6adb65dd088f3a551c80a80a0755a4116c8fabbe94 SHA1: 5867c05d83629cf9f6f8ec1ca5161dcf2bce89ae MD5sum: 76a919c17c8a62ab6ff44528545b109d Description: Sdwdate Monitor sdwdate-gui is a systray icon monitor for sdwdate: checks sdwdate's status and modify the tray icon accordingly. In addition, it allows the user to restart sdwdate and view the log. Package: security-misc-desktop Source: security-misc Version: 3:51.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 216 Depends: security-misc-shared Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-desktop_51.4-1_all.deb Size: 177224 SHA256: 09dc679d604bd736afb24dab1b2baa7cbf70ae6f1e92e1b08ebb6496c845e47f SHA1: 409809ec5bcb5d998db192c4b0de97c6440a4440 MD5sum: cbdf336cda310a17c0eb6b4deac5339d Description: Security improvements for desktops For desktops. . (Or servers running a desktop?) Package: security-misc-server Source: security-misc Version: 3:51.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 204 Depends: security-misc-shared Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-server_51.4-1_all.deb Size: 176108 SHA256: 76271c9a2e7e06b2e6efe291439d4700e95771ef09efc188577c04483c4f2299 SHA1: 711dbe79f003df8e23fcb3ceaf9adf8e9a551e78 MD5sum: 0afa5aa2618bfb684516893720f30049 Description: Security improvements for servers For servers. . (Or desktops running a server?) Package: security-misc-shared Source: security-misc Version: 3:51.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 763 Depends: adduser, apparmor-profile-dist, build-essential, dmsetup, helper-scripts, libcap2-bin, libglib2.0-bin, libpam-modules-bin, libpam-runtime, libpam-umask, memlockd, python3, secure-delete, dconf-gsettings-backend | gsettings-backend, debconf (>= 0.5) | debconf-2.0 Conflicts: security-misc Replaces: anon-gpg-tweaks, security-misc, swappiness-lowest, tcp-timestamps-disable Provides: security-misc Homepage: https://www.kicksecure.com/wiki/Security-misc Priority: optional Section: misc Filename: pool/main/s/security-misc/security-misc-shared_51.4-1_all.deb Size: 262800 SHA256: f918136fc6ac3115b19e0b93abcaff33fd02d4e1e03961903950cc0acdd413d0 SHA1: 47bda7644efdbb3e530e0b127f719b6cd0c8af98 MD5sum: 680bc1f5d6835c2c02579a0f0e75682b Description: Enhances Miscellaneous Security Settings https://github.com/Kicksecure/security-misc/blob/master/README.md . https://www.kicksecure.com/wiki/Security-misc . Package security-misc-desktop and/or security-misc-server may also be useful. . Discussion: . Happening primarily in Whonix forums. https://forums.whonix.org/t/kernel-hardening-security-misc/7296 Package: serial-console-enable Version: 3:4.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 62 Homepage: https://github.com/Kicksecure/serial-console-enable Priority: optional Section: misc Filename: pool/main/s/serial-console-enable/serial-console-enable_4.7-1_all.deb Size: 18388 SHA256: 4457fc290936428f1a1535cff54e79bf56b596167b58a67c5e50d0dad47f8902 SHA1: 8427733d56e011533d717ef66a4c7865ca045c6e MD5sum: 8e48b27742b459c08631390a6d343a2f Description: Enables serial console Ships a /etc/default/grub.d/30_serial_console.cfg configuration file, that enables serial console. . Enables /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service by creating a symlink from: /lib/systemd/system/serial-getty@.service to: /lib/systemd/system/getty.target.wants/serial-getty@ttyS0.service . Useful for serial console login such as into Whonix KVM VMs from the host operating system. . Forum discussion: https://forums.whonix.org/t/how-do-i-enter-the-whonix-shell-from-cli/7271 . Safe to remove if you do not require serial console login such as: virsh console vm-name Package: setup-dist Version: 3:12.1-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 110 Depends: helper-scripts, dialog, privleap, menu, python3 Conflicts: whonixsetup Replaces: whonixsetup Provides: whonixsetup Homepage: https://github.com/Kicksecure/setup-dist Priority: optional Section: misc Filename: pool/main/s/setup-dist/setup-dist_12.1-1_all.deb Size: 42792 SHA256: 0e98cfff9f17a2348f725d15b82f82394da375b694806acb774816e8971d820b SHA1: cbc861ec6b1abd92e8451f97c3c77822cb619036 MD5sum: f3d340b036b8667cdf096a1048033b99 Description: First Time Connection Setup Disclaimer. . When the derivative starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. setup-dist is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: setup-wizard-dist Version: 3:13.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 140 Depends: setup-dist, python3-yaml, helper-scripts, python3, x11-xserver-utils Recommends: icon-pack-dist Conflicts: whonix-setup-wizard Replaces: whonix-setup-wizard Provides: whonix-setup-wizard Homepage: https://github.com/Kicksecure/setup-wizard-dist Priority: optional Section: misc Filename: pool/main/s/setup-wizard-dist/setup-wizard-dist_13.2-1_all.deb Size: 61196 SHA256: 70856f61d1dcd0fc5411f92cd43b4d6fbf9fb3c6d7e6a1744654b49971d88c06 SHA1: 1695651331902ed0a2108728c5ce5de113ab4edc MD5sum: 7c35bf04145bf63c7b715ad3364425b1 Description: First Boot Setup Disclaimer. . When distribution starts for the first time, it won't automatically connect to the public Tor network. This is useful for users who want to hide Tor from their ISP. Anon Connection Wizard is automatically started, which educates about different methods to connect (public Tor network, bridges, etc.). Package: swap-file-creator Version: 3:9.5-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 90 Depends: helper-scripts, bc, safe-rm Homepage: https://www.kicksecure.com/wiki/Swap-file-creator Priority: optional Section: misc Filename: pool/main/s/swap-file-creator/swap-file-creator_9.5-1_all.deb Size: 37888 SHA256: 5b4157a72e84b90886f5507af95e81c3472ebb8a794fca6a967eef9995858325 SHA1: 66c69f56198e4fd4e69514f2544e9f841e1d44c1 MD5sum: aa7d23c7ed53aba78d43bb1e07c19538 Description: Swap file creator for LUKS-encrypted systems swap-file-creator automatically creates and enables a swap file on systems using LUKS full-disk encryption. A new swap file is created on every boot if the target path resides on a LUKS-encrypted device. . By default, no swap file is created on unencrypted disks. This can be optionally overridden (not recommended for privacy), allowing swap-file- creator to operate on unencrypted storage as well. . The tool is particularly useful for systems with low RAM, such as virtual machines, where lack of swap may cause freezing during upgrades or heavy memory operations. . The swap file can be shredded on shutdown for additional privacy, if enabled. Various parameters, including file path, custom size, and pre-checks, can be configured through /etc/default/swap-file-creator. . Earlier versions provided an additional dm-crypt layer and created a swap file encrypted with an ephemeral key. Due to a Linux kernel bug, this functionality is no longer possible as of Debian trixie, and the swap file is instead placed directly on top of LUKS full-disk encryption. More details: https://lore.kernel.org/lkml/20251111231835.1232ad8f@kf-m2g5/T/#u Package: sysmaint-panel Version: 3:4.9-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 129 Depends: helper-scripts, pkexec, python3, python3-pyqt5, safe-rm Homepage: https://www.kicksecure.com/wiki/System_Maintenance_Panel Priority: optional Section: admin Filename: pool/main/s/sysmaint-panel/sysmaint-panel_4.9-1_all.deb Size: 32896 SHA256: 057584369ae111a1b16dbffdfa548d0a7d56e2fc1d3129357e08bd06c1bf8008 SHA1: ff8eddeb4125e8b0f0f9081d3d1a5d9641ff7cc3 MD5sum: 62f361dab00e1bed46c8437028163b74 Description: System Maintenance Panel The System Maintenance Panel (sysmaint-panel) allows the user to perform several common system maintenance and administration tasks. It can be used to install, remove, and update software, create and remove user accounts, and enable or disable password protection and autologin for user accounts. . Provides a minimal session that can be booted into for system maintenance tasks on Linux distributions. Package: systemcheck Version: 3:50.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 633 Depends: dist-base-files, python3, signify-openbsd, curl, ca-certificates, msgcollector, psmisc, vrms, libarchive-tools, helper-scripts, net-tools, privleap, adduser, security-misc-shared, spectre-meltdown-checker, apparmor-profile-dist, safe-rm Recommends: icon-pack-dist, msgcollector-gui Conflicts: apparmor-profile-whonixcheck, whonixcheck Replaces: apparmor-profile-whonixcheck, whonixcheck Homepage: https://www.kicksecure.com/wiki/systemcheck Priority: optional Section: misc Filename: pool/main/s/systemcheck/systemcheck_50.2-1_all.deb Size: 206824 SHA256: 9dc4c568b615f4869840678e594a1483733810dd417b825329b42269bfd3bffe SHA1: 808422fe14f354b3e09df14e53623280d0fd805f MD5sum: 81bc07cf3b672d88f162a45ee18e0195 Description: Anonymity and security check Checks many important aspects for better security. . Only checks things. Does not change things. . Safe to remove. Package: tb-default-browser Source: open-link-confirmation Version: 3:8.2-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 61 Depends: open-link-confirmation Homepage: https://github.com/Kicksecure/open-link-confirmation Priority: optional Section: oldlibs Filename: pool/main/o/open-link-confirmation/tb-default-browser_8.2-1_all.deb Size: 28976 SHA256: 8696b45351f98609e1b7eaddf60a69f15025f49fbb057eb29034cbdcd7ca11f6 SHA1: 40dca0cd5fb65a8061881e68b58abcf94baefcd6 MD5sum: 6f87f5089f3ce4d6bec7b967e37a82e7 Description: transitional package This is a transitional package. It can safely be removed. Package: tb-starter Version: 3:18.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 172 Depends: msgcollector, privleap Recommends: tb-updater, open-link-confirmation, icon-pack-dist Provides: torbrowser-launcher Homepage: https://github.com/Kicksecure/tb-starter Priority: optional Section: misc Filename: pool/main/t/tb-starter/tb-starter_18.6-1_all.deb Size: 68512 SHA256: a01a1f496cf6eae67f17ecb606cc54b72c6e53886a131de2da27603338c1ee95 SHA1: 0ac08eca8fb43bd6fd48c7f449281ab86cdf10a9 MD5sum: 7ef76f1ef99075a0b209fe64f4c7309c Description: Tor Browser Starter (by Whonix developers) Both, a starter for Tor Browser. Provides security hardening, integration with Debian, Whonix and Qubes. . Starter. . - Tor Browser Starter start menu entry and `/usr/bin/torbrowser` starter. Starts `/home/user/.tb/tor-browser/start-tor-browser`. . When config option tb_hardening=true is set or when using command line option --hardening, firejail will be used. . Uses open-link-confirmation if available. . Prompts to install the browser if not yet installed. . Changes directory into browser directly before startup. . Custom homepage support. . Qubes integration. . Sanity tests: - Aborts if detected being run as root. - Aborts in Qubes TemplateVM. - Aborts in Qubes DVM Template. - Waits for Qubes mount dirs and gui agent being ready. . In Qubes AppVM copies browser from root image to private image at first start. . Tor Browser documentation by Whonix. . - https://www.whonix.org/wiki/Tor_Browser - https://www.whonix.org/wiki/Tor_Browser/Advanced_Users . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tb-updater Version: 3:43.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 489 Depends: msgcollector-gui, curl, psmisc, gpg-bash-lib, pv, libarchive-tools, jq, libdbus-glib-1-2, privleap, python3, acl, helper-scripts Recommends: tb-starter, icon-pack-dist Suggests: open-link-confirmation Homepage: https://github.com/Kicksecure/tb-updater Priority: optional Section: misc Filename: pool/main/t/tb-updater/tb-updater_43.8-1_all.deb Size: 254768 SHA256: 5ca636ac559ebdb2d7821be9de142cb28086e53997de340375fbad70f7f566d2 SHA1: 8834567c022a4c685ba22168ebe52ff4edfbc3b7 MD5sum: 5dd2b9b7c0ea9831ddb23f919b5d01fc Description: Tor Browser Downloader by Whonix developers Automates download and verification of Tor Browser from The Tor Project's website. Useful for initial installation of Tor Browser, clean re-installations of Tor Browser and keeping newly created Qubes AppVMs inherited from updated Qubes TemplateVMs can ship up to date versions of Tor Browsers. . Incapable of preserving of updating and preserving user data. Use Tor Browser's internal updater for that purpose. Notifies about already exiting installations of Tor Browser. Renamed rather than deletes old versions of Tor Browsers to avoid user data loss. . Has a cli and a gui mode. Can auto detect latest version numbers or use user configured version numbers. Comes with a download confirmation screen that lets users choose which version to download. [1] Has a installation confirmation screen [2] that enables users to detect indefinite freeze and rollback attacks. . Integrates well with tb-starter and open-link-confirmation package as well as with Qubes. . Without the helper-scripts package installed, the GUI will not move the progress bar. . If you have the helper-scripts package installed, it will show a nicer progress bar when run in terminal and more meaningful curl exit code messages, when curl failed. . When having the helper-scripts package installed (recommended for Anonymity Distributions), Tor Browser Downloader will check, that Tor is enabled, that no package manager is currently running and that Tor finished bootstrapping before download attempts. . Supports being run inside chroot and from Debian maintainer postinst script. . Qubes integration: . - Up-to-date browser versions made available to freshly created AppVMs and DispVMs. - In DispVM mounts browser folder which resides in root image to user home folder rather than copying for faster browser startup. . This package is produced independently of, and carries no guarantee from, The Tor Project. . [1] https://www.whonix.org/wiki/Tor_Browser#Download_Confirmation_Screen [2] https://www.whonix.org/wiki/Tor_Browser#Installation_Confirmation_Screen Package: timesanitycheck Version: 3:8.6-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 79 Homepage: https://www.whonix.org/wiki/Dev/TimeSync Priority: optional Section: misc Filename: pool/main/t/timesanitycheck/timesanitycheck_8.6-1_all.deb Size: 28360 SHA256: 431899e0b95206fa9d2227fffe5949b747d19ad3fe39e5746ff5a526144f72ee SHA1: e116e8c8c876e8c15981ee0dfb051a511b6987f3 MD5sum: 5ad61e94222550dba6fff5b6676bdcd4 Description: Checks if the system clock is sane between build timestamp and expiration date Reports, if clock is sane and not slower than build timestamp or faster than expiration date (configurable, default currently set to 17 MAY 2033 10:00:00). . This should catch situations, where the host's clock is too much off (CMOS battery defect, user mistakenly set a very wrong date, etc.), resulting in network time synchronization tools (such as sdwdate) no longer being able to correct the clock; catch eventual bigger bugs in network time synchronization tools; and some types of attacks on network time synchronization. Package: tor-control-panel Version: 1:8.0-1 Architecture: all Maintainer: troubadour Installed-Size: 188 Depends: anon-connection-wizard, helper-scripts, pkexec, mate-polkit, python3, python3-ipy, python3-pyqt5, python3-stem, qtwayland5 Recommends: obfs4proxy, tor Homepage: https://www.whonix.org/wiki/Tor-control-panel Priority: optional Section: misc Filename: pool/main/t/tor-control-panel/tor-control-panel_8.0-1_all.deb Size: 71652 SHA256: 103f0e4c0b61292d2322e8588d46233403d715067cf107484e2efaab141d71d0 SHA1: 238d0ef7687a9159478451907f3b63bbb234b3a9 MD5sum: bedc2c98f9792909fbffb677cabf06b4 Description: Tor Control Graphical User Interface WARNING: Not (yet) a standalone ready to use outside of Whonix: . tor-control-panel is a Tor controller. . tor-control-panel is produced independently from the Tor anonymity software and carries no guarantee from The Tor Project about quality, suitability or anything else. Package: tor-ctrl Version: 3:6.4-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 83 Depends: tor, netcat-openbsd, xxd, safe-rm Homepage: https://gitweb.torproject.org/torspec.git/tree/control-spec.txt Priority: optional Section: misc Filename: pool/main/t/tor-ctrl/tor-ctrl_6.4-1_all.deb Size: 30348 SHA256: 7009dac131b6e27f00755d0daeb8d35145ed8b79bc255c8d43eaf47dcf4055c8 SHA1: 7d8a55607faab90871824977d4a82a89b08d6705 MD5sum: 99de1e5c81560eaed6e4267ec41cc788 Description: Tor controller command line tool Command line tool for setting up stream for communication from the Tor Controller's (client) to a Tor process (server). The client send commands using TCP sockets or Unix-domain sockets and receive replies from the server. . https://gitweb.torproject.org/torspec.git/tree/control-spec.txt . This package is produced independently of, and carries no guarantee from, The Tor Project. Package: tor-geoipdb Source: tor Version: 0.4.8.21-1~d13.trixie+1 Architecture: all Maintainer: Peter Palfrader Installed-Size: 25238 Depends: tor (>= 0.4.8.21-1~d13.trixie+1) Breaks: tor (<< 0.2.4.8) Replaces: tor (<< 0.2.4.8) Homepage: https://www.torproject.org/ Priority: optional Section: net Filename: pool/main/t/tor/tor-geoipdb_0.4.8.21-1~d13.trixie+1_all.deb Size: 2685488 SHA256: a47251b4ba9274ff9596d1a3236603aed03dca67d172122b397902840a3c9efb SHA1: 1073d9b761d46173255cd8baee71e0cce11366b3 MD5sum: 9c46ec3d563ac9fdb446b672783dcae9 Description: GeoIP database for Tor This package provides a GeoIP database for Tor, i.e. it maps IPv4 addresses to countries. . Bridge relays (special Tor relays that aren't listed in the main Tor directory) use this information to report which countries they see connections from. These statistics enable the Tor network operators to learn when certain countries start blocking access to bridges. . Clients can also use this to learn what country each relay is in, so Tor controllers like arm or Vidalia can use it, or if they want to configure path selection preferences. Package: usability-misc Version: 3:36.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 741 Depends: policyrcd-script-zg2, adduser, python3, damngpl, helper-scripts (>= 3:35.3-1), dkms, dconf-gsettings-backend | gsettings-backend Conflicts: desktop-config-dist (<< 3:13.8-1) Replaces: gpl-sources-download, grub-screen-resolution, scurl Homepage: https://github.com/Kicksecure/usability-misc Priority: optional Section: misc Filename: pool/main/u/usability-misc/usability-misc_36.7-1_all.deb Size: 205940 SHA256: 65df29442059be79c1a81cf9c8e4ecfc0676c405b01a3778166b60613661a2ed SHA1: a97cb3ae829adffc71bcb22e437b80abee6c2e1e MD5sum: ce858c57bfd55537930edbd1c4ef3ed2 Description: Misc usability improvements Enables auto login for user `user` in `lightdm`. `/etc/lightdm/lightdm.conf.d/30_autologin.conf` https://www.kicksecure.com/wiki/Desktop#Disable_Autologin . Creates folders /home/user/Downloads and /home/user/Pictures. . Adds account "user" to group libvirt as well as to group kvm. . Ships a file /etc/sudoers.d/user-passwordless that contains comments and "#user ALL=(ALL:ALL) NOPASSWD:ALL". Lets account "user" easily run all commands without password. Disabled (out commented) by default. . Simplifies running OpenVPN as unprivileged user. . Ships a FoxyProxy add-on configuration file for use with Tor Browser. . Sets mousepad as the default editor for environment variable VISUAL is unset and if mousepad is installed. . Disable sudo default lecture. /etc/sudoers.d/sudo-lecture-disable . Add pwfeedback to sudo Defaults so password asterisks are shown while typing. /etc/sudoers.d/pwfeedback . qterminal: . Ships gsudoedit, a wrapper to run sudoedit with a graphical editor. . Bisq workaround "sudo mkdir -p /usr/share/desktop-directories" as per https://github.com/bisq-network/bisq/issues/848 . gpl_sources_download GPL'ed source code of all installed packages. Used damngpl to get a list of all GPL'ed packages, then downloads them using apt-get source. . SSL curl wrapper: Simple wrapper called scurl, that adds "--tlsv1.3 --proto =https" in front of all invocations of "curl" when running "scurl". . Sets 1024x768 as boot screen resolution Ships a /etc/default/grub.d/30_screen_resolution.cfg configuration file, that injects "vga=0x0317" into the GRUB_CMDLINE_LINUX_DEFAULT variable. . Ships `zsh` derivative configuration settings folder `/etc/zsh`. But does not configure `zsh` as default shell. (That is up to package `dist-base-files`.) . Enable systemd-journald audit transport. (`deb-systemd-helper enable systemd-journald-audit.socket`) Required by helper-scripts `apparmor-info` and `apparmor-watch`. Debian no longer enables systemd-journald-audit.socket by default. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1038993 . Creates Secure Boot MOK key using 'shim-signed-mok-setup' (provided by package 'helper-scripts') during installation. Package: user-sysmaint-split Version: 3:11.7-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 203 Pre-Depends: helper-scripts Depends: security-misc-shared, adduser, libglib2.0-bin Breaks: qubes-core-agent-passwordless-root (>= 1) Homepage: https://github.com/Kicksecure/user-sysmaint-split Priority: optional Section: misc Filename: pool/main/u/user-sysmaint-split/user-sysmaint-split_11.7-1_all.deb Size: 55576 SHA256: 1fbe6b3f9f5c3423e48b1541a5df2d903e4bdf7988d8a0e50b8669f7bbf9af9c SHA1: cadf2efe9889f89410f870d8e50ed88974aa6899 MD5sum: dbb1f625167561dd972e18e2bfc23c9c Description: Role-Based Boot Modes - user versus sysmaint Adds a GRUB boot menu entry: "PERSISTENT Mode | SYSMAINT Session | system maintenance tasks" . Makes Privilege Escalation Tools (such as 'sudo', 'su', 'pkexec') inaccessible to limited user accounts such as account "user". . Adds kernel parameter "boot-role=sysmaint" and "systemd.unit=sysmaint-boot.target". Package: vm-config-dist Version: 3:15.8-1 Architecture: all Maintainer: Patrick Schleizer Installed-Size: 198 Depends: adduser, 7zip, helper-scripts, python3, python3-pyudev, python3-schema Replaces: power-savings-disable-in-vms, shared-folder-help Homepage: https://github.com/Kicksecure/vm-config-dist Priority: optional Section: misc Filename: pool/main/v/vm-config-dist/vm-config-dist_15.8-1_all.deb Size: 60624 SHA256: 534a8b463e868c5deca28e9508ad1c454a5caca50259b3e18ca43660c548cfa2 SHA1: 373a0f40485be1859c0459732ffc85445eb53ff1 MD5sum: ab1bfba7371da0527f0754f682e9be9e Description: usability enhancements inside virtual machines Sets environment variable `QMLSCENE_DEVICE=softwarecontext` as a workaround for "Automatic fallback to softwarecontext renderer". . It is not useful to open a screensaver or to power down the desktop for operating systems that are run inside VMs. There is no real display that could be saved and no real power that could be conserved. From a usability perspective, it is also counterintuitive when looking at the VM window and only seeing a black screen. Therefore, it makes sense to disable power savings in VMs. `/etc/profile.d/20_power_savings_disable_in_vms.sh` `/etc/X11/Xsession.d/20_software_rendering_in_vms.sh` . Makes setting up a shared folder for virtual machines a bit easier. . * Creates a folder `/mnt/shared` with `chmod 777`, adds a group "vboxsf", and adds account "user" to group "vboxsf". Facilitates auto-mounting of shared folders. . * Helps using shared folders with VirtualBox and KVM a bit easier (as in requiring fewer manual steps from the user). . * `/lib/systemd/system/mnt-shared-vbox.service` * `/lib/systemd/system/mnt-shared-kvm.service` . Sets screen resolution to 1920x1080 by default for VMs in VirtualBox and KVM. This is a workaround for the low screen resolution of 1024x768 at first boot. . Installs VirtualBox guest additions if the package `virtualbox-guest-additions-iso` is installed, if the environment variable `dist_build_virtualbox=true` is set, or if running inside VirtualBox. (`systemd-detect-virt` returning `oracle`) `/usr/bin/vbox-guest-installer