Merge pull request #78 from duonl/develop/ALPHA

Abaddon-4

Author: jbbletterman

CHANGELOG.md

@@ -2,7 +2,19 @@
 
 ## 2026
 
+## August
+* `2026-08-12 04:36:19` : [OAC-1516] Optimizations for PXE-boot (2)
+    * [OAC-1519] Replace `/var/cache` with `/var/cache/apt` in [mksquashfs exclusions](./ISO-builder.sh#L1061)
+    * [OAC-1519] Clean out debconf passwords in [chroot.sh](./script/chroot.sh#L230)
+    * [OAC-1526] Adding `layerfs-path=filesystem.squashfs` as default variable in [Grub](./config/grub/grub.cfg.img) as `$SQUASHFS_PXE`
+* `2026-08-11 09:17:16` : [OAC-1516] Optimizations for PXE-boot
+    * [OAC-1521] Updated [README](./README.md)
+    * [OAC-1517] Removed [APT sources file](./config/apt/sources.list) for RELEASE and DEBUG
+    * Minor kernel patch: `7.0.0-28` --> `7.0.0-29`
+
 ## Juli
+* `2026-07-21 05:46:27` : [OAC-1461] Remove double output of detected audio sinks
+    * Minor kernel patch: `7.0.0-27` --> `7.0.0-28`
 * `2026-07-09 10:06:24` : [OAC-1471] Added `ntfs.mod` through `grub-smktandalone` instead
     * Removed `grub-efi-amd64-bin`
     * `nmcli` commands now also require `sudo` when editing connections

ISO-builder.sh

@@ -917,6 +917,11 @@ fi
 delete_file "${CHROOT_DIR}/etc/machine-id" 'Generalizing distro...'
 delete_file "${CHROOT_DIR}/etc/resolv.conf" 'Clearing resolv.conf...'
 
+if [[ ${BCLD_MODEL} != 'test' ]]; then
+    # Delete APT sources for RELEASE and DEBUG
+    delete_file "${CHROOT_DIR}/etc/apt/sources.list" 'Removing APT sources for RELEASE and DEBUG...'
+fi
+
 ## Unnecessary services
 delete_file "${CHSERVICE_DIR}/dbus-org.freedesktop.resolve1.service" 'Disable resolvconf'
 delete_file "${CHSERVICE_DIR}/multi-user.target.wants/systemd-resolved.service" 'Disable resolvconf'
@@ -1053,7 +1058,7 @@ list_header "Generating SquashFS"
 list_entry
 /usr/bin/mksquashfs chroot "${CASPER_DIR}/filesystem.squashfs" \
 	-e boot \
-	-e var/cache \
+	-e var/cache/apt \
 	-e var/lib/apt/lists \
 	-e usr/share/backgrounds
 list_catch

README.md

@@ -1,18 +1,11 @@
-# UPDATE 20/05/2025
-📣📣📣 IMPORTANT 📣📣📣
-
-> BCLD HAS OFFICIALLY CHANGED OWNERSHIP TO DUO (NL)
-
-> ALL DEVELOPMENT AND MAINTENANCE ACTIVITIES WILL CONTINUE AS NORMAL
-
 # Introduction
 
 |||
 |---|---|
 | This is the <u>official</u> BCLD (Bootable Client Lockdown) Project.<br/>This project is a follow-up to the Fedora BCLD project.<br/>BCLD was initiated in hopes of advancing hardware support and being able to operate in accordance with Secure Boot.<br/>Below are extensive instructions to the product. | <img title="" src="./assets/bcld-logo.png" alt="logo" width="300" data-align="left"> |
 
-**BCLD Version**: 14.2-4 BCLD (Chimera)<br/>
-**BCLD Kernel**: 6.14.0-37-generic
+**BCLD Version**: 15.0-4 BCLD (Abaddon)<br/>
+**BCLD Kernel**: 7.0.0-29-generic
 
 # Index
 
@@ -258,7 +251,6 @@ This folder contains important scripts for building a BCLD image.
 * As with Fedora BCLD, the version number is kept in a file called `./VERSION`.
 * This can be configured in [BUILD.conf](./config/BUILD.conf).
 * So use helpful, concise descriptions like: `14-dec-2022_BCLD-Omniscius-3_FACET-TEST.img`
-* 
 * The `VERSION` file contains a concatenated string: `12.10-3 BCLD Test (Omniscius)`.
 
 # Artifacts

config/BUILD.conf

@@ -62,7 +62,7 @@ export BCLD_DATE="$(/usr/bin/date +'%d-%b-%Y')"
 export BCLD_DEFAULT_URL='https://www.google.com/'
 export BCLD_HOME='/root'
 export BCLD_MD5="./test/bcld.md5"
-export BCLD_PATCH='2' # Changes with every major feature update
+export BCLD_PATCH='4' # Changes with every major feature update
 export BCLD_RELEASE='15.0' # Changes with every major LTS (or Facet) upgrade
 export BCLD_REPO_BRANCH='main'
 export BCLD_TERM='xterm-256color'
@@ -75,7 +75,7 @@ export FAT_LABEL="BCLD-USB"
 export HOME='/root'
 export KERNEL_MINOR='7.0'
 export KERNEL_MODEL='generic'
-export KERNEL_PATCH='0-27'
+export KERNEL_PATCH='0-29'
 export LC_ALL="C"
 export NVIDIA_FIRMWARE="595-595.71.05"
 export REPO_NAME="${BCLD_CODE_NAME^^}-${BCLD_RELEASE}-${BCLD_PATCH}"

config/grub/grub.cfg.img

@@ -15,8 +15,9 @@ set gfxmode="1280x1024x32"
 set ISO_FILE="/bcld.iso"
 set PLYMOUTH="quiet splash"
 set SURFACE_FIX='pci=hpiosize=0' # Fixes issue of Surface laptops not shutting down
+set SQUASHFS_PXE='layerfs-path=filesystem.squashfs'
 
-set PARAMS="iso-scan/filename=$ISO_FILE boot=casper noprompt noeject toram apparmor=0 $SURFACE_FIX $PLYMOUTH"
+set PARAMS="iso-scan/filename=$ISO_FILE boot=casper noprompt noeject toram apparmor=0 $SURFACE_FIX $PLYMOUTH $SQUASHFS_PXE"
 set PRIOMETERS="systemd.unit=graphical.target 5"
 
 set default=0

script/chroot.sh

@@ -147,7 +147,6 @@ if [[ -n "${BCLD_PKG_EXTRA}" ]]; then
 	/usr/bin/apt-get install -yq --no-install-recommends ${BCLD_PKG_EXTRA} | /usr/bin/tee -a "${LOG_FILE}"
 fi
 
-
 ### Uninstall packages ###
 
 ## If there is a REMOVE file, use it.
@@ -160,11 +159,10 @@ if [[ -f ${REMOVE} ]]; then
     /usr/bin/apt-get remove -yq --purge $(/usr/bin/cat ${REMOVE}) | /usr/bin/tee -a "${LOG_FILE}"
 fi
 
-
 # Configurations
 list_header "Configurations"
 
-## User/Run Level/Target, het is complex...
+## User/Run Level/Target
 list_item "Default Target: ${DEFAULT_TARGET}"
 list_entry
 /usr/bin/systemctl enable "${DEFAULT_TARGET}.target"
@@ -229,6 +227,12 @@ list_item "Set DPKG to unattended..."
 /usr/bin/echo unattended-upgrades unattended-upgrades/enable_auto_updates boolean true | debconf-set-selections
 dpkg-reconfigure -f noninteractive unattended-upgrades
 
+## Clean out debconf passwords
+list_item "Clean out debconf passwords..."
+/usr/bin/rm -f /var/cache/debconf/passwords.dat
+/usr/bin/touch /var/cache/debconf/passwords.dat
+/usr/bin/chmod 600 /var/cache/debconf/passwords.dat
+
 # This is where the Chrome apps will be pulled from Nexus
 if [[ ${DEB_COUNT} -gt 0 ]]; then
     # Look for any Chrome apps inside APP_DIR

script/startup.sh

@@ -600,7 +600,7 @@ if [[ "${BCLD_SOUNDCHECK}" -eq 1 ]]; then
     list_item_pass 'BCLD Sound Check enabled!'
 fi
 
-print_item "Scanning sound cards (please wait)"
+print_item "Checking for sound card(s)"
 
 # Give systems time to start Pulse Audio
 for scan in $(/usr/bin/seq 1 20); do
@@ -629,7 +629,7 @@ if [[ -z "${BCLD_SINKS}" ]] \
 		list_item_fail 'Unable to detect any sound cards!'
 	fi
 else
-	list_item_pass "Sinks detected: ${BCLD_SINKS}"
+	list_item_pass "Sound card(s) found!"
 fi
 # SINKS found with pactl and output in JSON. Used throughout code
 SINKS_JSON="$(/usr/bin/pactl --format json list sinks)"