Kicksecure ™ Packages for Debian Hosts and Kicksecure ™ Host Enhancements

Your support makes all the difference!
We believe security software like Kicksecure needs to remain open source and independent. Would you help sustain and grow the project? Learn more about our 10 year success story and maybe DONATE!
About this Packages for Debian Hosts Page This wiki page is maintained by a contributor. | |
---|---|
Support Status | testing |
Difficulty | medium |
Contributor | HulaHoop![]() |
Support | Support |
Introduction[edit]
Many of the packages developed under the Kicksecure ™ umbrella can be thought of as independent projects in their own right. They are directly relevant to Debian hosts because they can increase privacy and security.
This guide shows how to download these select packages from the Kicksecure ™ repository; they can be downloaded stand-alone or combined.
How-to: Install Kicksecure ™ Packages[edit]
Complete the following steps to add the Kicksecure ™ Signing Key to the system's APT keyring.
Open a terminal.
1. Package curl
needs to be installed.
Install curl
. To accomplish that, the following steps A. to D. need to be done.
A. Update the package lists.
sudo apt update
B. Upgrade the system.
sudo apt full-upgrade
C. Install the curl
package.
Using apt
command line parameter --no-install-recommends
is in most cases optional.
sudo apt install --no-install-recommends curl
D. Done.
The procedure of installing curl
is complete.
2. Download Kicksecure ™ Signing Key. [1]
If you are using Debian, run.
curl --tlsv1.3 --output /usr/share/keyrings/derivative.asc --url https://www.kicksecure.com/keys/derivative.asc
Downloading over onion requires an already functional system Tor. torsocks curl --output /usr/share/keyrings/derivative.asc --url http://www.w5j6stm77zs6652pgsij4awcjeel3eco7kvipheu6mtr623eyyehj4yd.onion/keys/derivative.asc
If you are using a Qubes Debian Template, run.
curl --proxy http://127.0.0.1:8082/ --tlsv1.3 --output /usr/share/keyrings/derivative.asc --url https://www.kicksecure.com/keys/derivative.asc
Downloading over onion requires an already functional system Tor. torsocks curl --proxy http://127.0.0.1:8082/ --output /usr/share/keyrings/derivative.asc --url http://www.w5j6stm77zs6652pgsij4awcjeel3eco7kvipheu6mtr623eyyehj4yd.onion/keys/derivative.asc
3. Users can check Kicksecure ™ Signing Key for better security.
4. Done.
The procedure of adding the Kicksecure ™ signing key is now complete.
Add Kicksecure ™ Repository.
Choose either: Option A, Option B OR Option C
Option A: Add Kicksecure ™ Onion Repository.
To add Kicksecure ™ Repository over Onion please install apt-transport-tor from the Debian repository.
sudo apt install apt-transport-tor
Add Kicksecure ™ APT repository for default Kicksecure ™ using Debian stable. At the time of writing this was bullseye
.
echo "deb [signed-by=/usr/share/keyrings/derivative.asc] tor+http://deb.w5j6stm77zs6652pgsij4awcjeel3eco7kvipheu6mtr623eyyehj4yd.onion bullseye main contrib non-free" | sudo tee /etc/apt/sources.list.d/derivative.list
Option B: Add Kicksecure ™ Clearnet Repository over Tor.
To add Kicksecure ™ Repository over torified clearnet install apt-transport-tor
from the Debian repository.
sudo apt install apt-transport-tor
Add Kicksecure ™ APT repository for default Kicksecure ™ using Debian stable. At the time of writing this was bullseye
.
echo "deb [signed-by=/usr/share/keyrings/derivative.asc] tor+https://deb.kicksecure.com bullseye main contrib non-free" | sudo tee /etc/apt/sources.list.d/derivative.list
Option C: Add Kicksecure Clearnet Repository over clearnet.
NOTE: When later using Kicksecure ™ repository tool, then this will be upgraded to "Clearnet Rep. via Tor", unless see footnote. [2]
To add Kicksecure ™ Repository over clearnet please add Kicksecure ™ APT repository for default Kicksecure ™ using Debian stable. At the time of writing this was bullseye
.
echo "deb [signed-by=/usr/share/keyrings/derivative.asc] https://deb.kicksecure.com bullseye main contrib non-free" | sudo tee /etc/apt/sources.list.d/derivative.list
Install package-name
.
Install package-name
. To accomplish that, the following steps A. to D. need to be done.
A. Update the package lists.
sudo apt update
B. Upgrade the system.
sudo apt full-upgrade
C. Install the package-name
package.
Using apt
command line parameter --no-install-recommends
is in most cases optional.
sudo apt install --no-install-recommends package-name
D. Done.
The procedure of installing package-name
is complete.
Supported Packages[edit]
usability-misc
(GitHub)
lkrg
(GitHub)
hardened-malloc
(GitHub)
security-misc
(GitHub)
tb-updater
(GitHub)
tb-starter
(GitHub)
grub-live
(GitHub)
monero-gui
(GitLab) (build documentation)
ram-wipe
(GitHub)
Footnotes[edit]
- ↑
See Secure Downloads to understand why
curl
and the parameters--tlsv1.3
are used instead ofwget
.
Placing an additional signing key into folder/usr/share/keyrings
by itself alone has no impact on security as this folder is not automatically used by Debian's APT by default. Only when an APT sources list configuration file points to folder/usr/share/keyrings
using thesigned-by
keyword the signing key will be actually used. Therefore deleting keys in/usr/share/keyrings
is optional if intending to disable an APT repository. See also APT Signing Key Folders. - ↑
Unless using
repository-dist --transport plain-tls
. See alsoman repository-dist
.