It's ok that you had choosen Debian over Yocto for the Labrador project Sir, I forgive and don't hate you anymore. By the way, you are the hero of my life and I respect every ounce of you as a human being 🙇 🫡 .

-- Me to Santa Claus 🎅

Vault linux is a custom embedded linux distribution based on the Poky distro of the Yocto project. The distro main goal is to act as a criptography hub and auxiliary tool.

First, you have to install build dependencies for your host system (in this example Ubuntu):

# Build deps
apt-get update && apt-get install -y gawk wget git diffstat unzip texinfo gcc build-essential chrpath socat cpio python3 python3-pip python3-pexpect xz-utils debianutils iputils-ping python3-git python3-jinja2 libegl1-mesa libsdl1.2-dev xterm python3-subunit mesa-common-dev zstd liblz4-tool locales
apt-get install -y file
apt-get install -y vim

Now, clone the Poky repository:

# Clone poky distro
mkdir ~/yocto
git clone -b master git://git.yoctoproject.org/poky.git ~/yocto
cd ~/yocto/poky && source oe-init-build-env

Clone this repo and copy all the configuration and layer files:

cd ~/
git clone -b master https://github.com/Tomcat-42/vaultlinux.git
cp -av ./yocto/* ~/poky

Now, finally build the distro:

cd ~/poky/build && bitbake core-image-full-cmdline

The build files are inside the ~/poky/build/tmp/images/qemux86-64 dir.

The ./Dockerfile build the distro, generating a image as output. Run:

docker built -t vaultlinux .

A pre built image is published as a github release in this repository.

A docker image tomcat0x42/vaultlinux is available. So, pull it:

docker pull tomcat0x42/vaultlinux

At the moment, only qemu images are generated, so follow his documentation for installing it.

If you built manually the image, or downloaded it, you can run it using qemu

qemu-system-x86_64 --enable-kvm  -machine q35 -device intel-iommu  -cpu host -m 1G -cdrom vaultlinux.iso

Or instead, just run the container:

docker run --device=/dev/kvm -it tomcat0x42/vaultlinux

This poky build uses the following custom layers:

• meta-oe and meta-webserver: From openembedded, enables a lot of useful tools, inncluding webserver related ones like apache and php.
• meta-ciphervault: Custom layer for installing the ciphervault software.

At all, the following utilities are included in the distro:

libcrypto libssl ciphervault openssl apache2 php php-cli ldd bash libgcc strace ltrace binutils gdb

This repo uses Github Actions for automation of the modification => publishing cycle.