Package: notepod
Version: 4
Architecture: amd64
Maintainer: Julien Muchembled <jm@nexedi.com>
Installed-Size: 578
Depends: libc6 (>= 2.39), libgcc-s1 (>= 4.2), grub-efi-amd64, unattended-upgrades
Filename: amd64/notepod_4_amd64.deb
Size: 253512
MD5sum: 198c34090238d143424ee7a6eac452e6
SHA1: a948843875049ee6b1b26eb743647b42b3afce26
SHA256: 7c4d5786fa2b20f45b37a2313b04d3b9019d74ea8bdc8a5a2a357e6b737f935b
Section: admin
Priority: optional
Homepage: https://notepod.nexedi.com/
Description: NotePOD is a Nexedi flavor of Ubuntu with a focus on security
 This package applies the following changes:
 .
  - grub-install: Always use options --no-nvram --removable, as a way to stay
    as far away as possible from buggy closed-source UEFIs, and make it
    possible to move easily the storage device from one computer to another.
    Should we enable secure boot (more a tool against users than anything else),
    systemd-boot looks better than grub for that.
 .
  - upgrade-grub: Disable quick-boot (like on Debian) because it breaks hidden
    menu. Also sets a few defaults in /etc/default/grub.d/00-notepod.cfg
 .
  - unattended-upgrades: Auto-upgrade Ungoogled Chromium if installed. This
    package is provided by a PPA and we don't want other packages from PPA
    to be upgraded automatically. On the other side, using Package-Whitelist
    would break auto-upgrade for official repositories.
 .
  - apt: Enable xtradeb PPA (Ungoogled Chromium). Make sure official
    repositories have higher priority.
 .
  - systemd: Enable SYSTEMD_SULOGIN_FORCE.
 .
  - firefox: Policies with some settings from LibreWolf, uBlock Origin and
    a few other extensions.
 .
  - gnome-initial-setup: Skip questions about location services and telemetry.
    Disable first login dialog.
 .
 Uninstalling this package reverts the system to a standard Ubuntu one.
 .
 It also includes a setuid-root helper for the
 https://lab.nexedi.com/nexedi/slapos/-/blob/master/software/system-audit/software.cfg
 SlapOS Software Release.