mirror of
https://github.com/CyberMind-FR/secubox-deb.git
synced 2026-07-29 22:07:24 +00:00
CyberMind-FR
bd7dda0c6f
Task 14: Arch Profiles - Add profiles/arch/arm64.yaml and profiles/arch/amd64.yaml - Add ResolveWithArch() to merger for base → arch → tier chain - Add tests for arch profile resolution Task 15: Package secubox.yaml for All Packages - Add scripts/generate-secubox-yaml.py generator script - Generate 131 debian/secubox.yaml files with: - Category detection (security, network, system, etc.) - Tier assignment (all, lite, standard, pro) - API socket and UI path detection Task 16: APT Repository Setup - Add apt/conf/ reprepro configuration (multi-arch arm64/amd64) - Add apt/hooks/lintian-check pre-publish validation - Add scripts/apt-publish.sh and scripts/apt-sync.sh - Add apt/README.md documentation Task 17: CI Integration - Add .github/workflows/build-secubox-cli.yml - Build for linux-amd64 and linux-arm64 - Version injection via ldflags - GitHub releases on tag push Code Quality Fixes (Tasks 10-13): - Add atomic writes for OTA boot control files (0600 perms) - Fix NVME device extraction (nvme0n1p2 → nvme0n1) - Add scanner.Err() checks in hardware detection - Fix URL injection validation in fetch command - Add proper cleanup on checksum failures Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
30 lines
539 B
YAML
30 lines
539 B
YAML
# profiles/arch/amd64.yaml
|
|
# Architecture profile for AMD64 (x86_64) devices
|
|
name: arch-amd64
|
|
inherits: base
|
|
description: AMD64 architecture base (VMs, x64 hardware)
|
|
|
|
kernel:
|
|
modules:
|
|
enable:
|
|
- kvm
|
|
- kvm_intel
|
|
- kvm_amd
|
|
- virtio_net
|
|
- virtio_blk
|
|
- virtio_scsi
|
|
- vfio
|
|
- vfio_pci
|
|
|
|
packages:
|
|
required:
|
|
- intel-microcode
|
|
- amd64-microcode
|
|
|
|
# x86_64-specific sysctl
|
|
sysctl:
|
|
# Enable huge pages
|
|
vm.nr_hugepages: 128
|
|
# KVM-specific tuning
|
|
kernel.sched_rt_runtime_us: 950000
|