New release

CHANGELOG

@@ -1,3 +1,77 @@
+[ 14.0.1 ]
+
+ * Reintroduce egg theme
+ * Update branding module to list Debian 14
+ * Set only password requirement to be at least 6 characters
+   (See Debian bugs: #1082020, #1109136)
+ * Disable lvm support (See Debian bugs: #1109138, #1060232)
+ 
+[ 13.0.12 ]
+
+ * Initial Ceratopsian artwork changes
+ * Support for alternate media paths (Debian bug: #1089618)
+
+[ 13.0.11 ]
+
+ * Fix typo in filename
+ * Move scripts to helpers
+
+[ 13.0.10 ]
+
+ * Make script names less generic and namespace under /usr/share/calamares
+   https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1021156
+
+[ 13.0.9 ]
+
+ * Bump minimum storage required to 15G
+   https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=#1037123
+ * Update copyright years 
+ * Fix dconf entry for calamares launcher (fixes launcher on GNOME)
+ * Use trim by default for encrypted media
+   https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1001192
+ * Use idle cycles to preload calamares binary and libraries
+   for faster startup
+
+[ 13.0.8 ]
+
+ * Move lukskeyconfig further up the task chain
+
+[ 13.0.7 ]
+
+ * Move lukskeyconfig action before fstab
+   (fstab now depends on it being configured)
+
+[ 13.0.6 ]
+
+ * Merge MR!3
+   - Add missing mountpoints
+ * Merge MR!2
+   - Install more generic grub-efi package to allow installation on
+     non-amd64 architectures
+ * Remove space_cache from fstab module (space_cache=v2 is now default)
+   and also autodefrag which isn't useful on modern storage
+
+[ 13.0.5 ]
+
+ * Add pesky missing delimiter for Calamares desktop icon setup
+   (thanks Roland Clobus, #1037299)
+
+[ 13.0.4 ]
+
+ * Update config in mount module so that /dev is properly mounted
+   in target
+
+[ 13.0.3 ]
+
+ * Update branding elements for Calamares 3.3 series
+ * Fix desktop file launcher
+ * Set installEFIFallback: true
+ * Don't allow empty passwords
+
+[ 13.0.2 ]
+
+ * Fix desktop icon path in add-calamares-desktop-icon 
+
 [ 13.0.1 ]
 
  * Initial release for trixie

COPYING

@@ -1,6 +1,6 @@
 ISC License
 
-Copyright (c) 2016-2023, Jonathan Carter <jcc@debian.org>
+Copyright (c) 2016-2024, Jonathan Carter <jcc@debian.org>
 
 Permission to use, copy, modify, and/or distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice and this permission notice appear in all copies.
 

add-calamares-desktop-icon

@@ -26,10 +26,19 @@ else
     chmod +x $DESKTOP/calamares-install-debian.desktop
 fi
 
-# Set desktop launcher as trusted under gnome/xfce (See: #1037299)
+# Set desktop launcher as trusted under Xfce (See: #1037299)
+if [ "$XDG_CURRENT_DESKTOP" = "XFCE" ]; then
     gio set --type=string ~/Desktop/calamares-install-debian.desktop \
         metadata::trusted true
     gio set --type=string ~/Desktop/calamares-install-debian.desktop \
         metadata::xfce-exe-checksum \
-        "$(sha256sum ~/Desktop/calamares-install-debian.desktop | cut -f1)"
+        "$(sha256sum ~/Desktop/calamares-install-debian.desktop | cut -f1 -d' ')"
     touch ~/Desktop/calamares-install-debian.desktop
+fi
+
+# Preload calamares binaries and libraries using idle disk cycles
+# so that it launches faster
+ionice -C Idle cat /usr/bin/calamares > /dev/null
+for file in $(ldd /usr/bin/calamares | awk '{print $3}'): do
+    ionice -C Idle cat $file > /dev/null
+done

calamares-install-debian.desktop

@@ -3,7 +3,7 @@ Type=Application
 Version=1.0
 Name=Install Debian
 GenericName=Calamares Installer
-Exec=install-debian
+Exec=calamares-install-debian
 Comment=Calamares — Installer for Debian Live
 Keywords=calamares;system;install;debian;installer
 Icon=install-debian

calamares-modules/bootloader-config/module.desc

@@ -2,5 +2,5 @@
 type:       "job"
 name:       "bootloader-config"
 interface:  "process"
-command:    "/usr/sbin/bootloader-config"
+command:    "/usr/share/calamares/helpers/calamares-bootloader-config"
 timeout:    600

calamares-modules/dpkg-unsafe-io-undo/module.desc

@@ -2,5 +2,5 @@
 type:       "job"
 name:       "dpkg-unsafe-io-undo"
 interface:  "process"
-command:    "/usr/sbin/dpkg-unsafe-io -u"
+command:    "/usr/share/calamares/helpers/calamares-dpkg-unsafe-io -u"
 timeout:    600

calamares-modules/dpkg-unsafe-io/module.desc

@@ -2,5 +2,5 @@
 type:       "job"
 name:       "dpkg-unsafe-io"
 interface:  "process"
-command:    "/usr/sbin/dpkg-unsafe-io"
+command:    "/usr/share/calamares/helpers/calamares-dpkg-unsafe-io"
 timeout:    600

calamares-modules/sources-final/module.desc

@@ -2,5 +2,5 @@
 type:       "job"
 name:       "sources-final"
 interface:  "process"
-command:    "/usr/sbin/sources-final"
+command:    "/usr/share/calamares/helpers/calamares-sources-final"
 timeout:    600

calamares-modules/sources-media-unmount/module.desc

@@ -2,5 +2,5 @@
 type:       "job"
 name:       "sources-media-unmount"
 interface:  "process"
-command:    "/usr/sbin/sources-media -u"
+command:    "/usr/share/calamares/helpers/calamares-sources-media -u"
 timeout:    600

calamares-modules/sources-media/module.desc

@@ -2,5 +2,5 @@
 type:       "job"
 name:       "sources-media"
 interface:  "process"
-command:    "/usr/sbin/sources-media"
+command:    "/usr/share/calamares/helpers/calamares-sources-media"
 timeout:    600

calamares/branding/debian/branding.desc

@@ -3,35 +3,37 @@ componentName:   debian
 welcomeStyleCalamares: true
 welcomeExpandingLogo: true
 windowExpanding: normal
-windowSize: 800px,520px
+windowSize: 800px,580px
 windowPlacement: center
 
 strings:
     productName:         Debian GNU/Linux
     shortProductName:    Debian
-    version:             13
-    shortVersion:        13
-    versionedName:       Debian 13
-    shortVersionedName:  Debian 13
+    version:             14
+    shortVersion:        14
+    versionedName:       Debian 14
+    shortVersionedName:  Debian 14
     bootloaderEntryName: Debian
     productUrl:          https://debian.org
     supportUrl:          https://www.debian.org/support
     knownIssuesUrl:      https://bugs.debian.org
-    releaseNotesUrl:     https://www.debian.org/releases/bookworm/releasenotes
+    releaseNotesUrl:     https://www.debian.org/releases/forky/releasenotes
     donateUrl:           https://www.debian.org
 
+sidebar: widget
+navigation: widget
+
 images:
     productLogo:         "debian-logo.png"
     productIcon:         "debian-logo.png"
     productWelcome:      "welcome.png"
-    # productWallpaper:  "wallpaper.png"
 
 slideshow:               "show.qml"
 
 style:
-   sidebarBackground:    "#2c3133"
-   sidebarText:          "#FFFFFF"
-   sidebarTextSelect:    "#4d7079"
-   sidebarTextSelect:    "#292F34"
+   SidebarBackground:    "#26475b"
+   SidebarText:          "#FFFFFF"
+   SidebarTextCurrent:   "#fbfbfb"
+   SidebarBackgroundCurrent: "#265370"
 
 slideshowAPI: 2

calamares/modules/bootloader.conf

@@ -51,4 +51,4 @@ efiBootMgr: "efibootmgr"
 # seems to be the only one). If you set this to false, take care
 # to add another module to optionally install the fallback on those
 # boards that need it.
-installEFIFallback: false
+installEFIFallback: true 

calamares/modules/fstab.conf

@@ -1,11 +1,11 @@
 ---
 mountOptions:
     default: defaults,noatime
-    btrfs: defaults,noatime,space_cache,autodefrag
+    btrfs: defaults,noatime
 ssdExtraMountOptions:
     ext4: discard
     jfs: discard
     xfs: discard
     swap: discard
     btrfs: discard,compress=lzo
-crypttabOptions: luks,keyscript=/bin/cat
+crypttabOptions: luks,discard,keyscript=/bin/cat

calamares/modules/mount.conf

@@ -1,17 +1,22 @@
+# SPDX-FileCopyrightText: no
+# SPDX-License-Identifier: CC0-1.0
+#
 # Mount filesystems in the target (generally, before treating the
 # target as a usable chroot / "live" system). Filesystems are
 # automatically mounted from the partitioning module. Filesystems
 # listed here are **extra**. The filesystems listed in *extraMounts*
-# are mounted in all target systems. The filesystems listed in
-# *extraMountsEfi* are mounted in the target system **only** if
-# the host machine uses UEFI.
+# are mounted in all target systems.
 ---
 # Extra filesystems to mount. The key's value is a list of entries; each
-# entry has four keys:
+# entry has five keys:
 #   - device    The device node to mount
-#   - fs        The filesystem type to use
+#   - fs (optional) The filesystem type to use
 #   - mountPoint Where to mount the filesystem
-#   - options (optional) Extra options to pass to mount(8)
+#   - options (optional) An array of options to pass to mount
+#   - efi (optional) A boolean that when true is only mounted for UEFI installs
+#
+# The device is not mounted if the mountPoint is unset or if the fs is
+# set to unformatted.
 #
 extraMounts:
     - device: proc
@@ -22,15 +27,18 @@ extraMounts:
       mountPoint: /sys
     - device: /dev
       mountPoint: /dev
-      options: bind
+      options: [ bind ]
     - device: tmpfs
       fs: tmpfs
       mountPoint: /run
     - device: /run/udev
       mountPoint: /run/udev
-      options: bind
-
-extraMountsEfi:
+      options: [ bind ]
     - device: efivarfs
       fs: efivarfs
       mountPoint: /sys/firmware/efi/efivars
+      efi: true
+    - device: /dev/pts
+      mountPoint: /dev/pts
+      options: [ bind ]
+      # /dev/pts is required by apt for storing the logs

calamares/modules/partition.conf

@@ -0,0 +1,385 @@
+# SPDX-FileCopyrightText: no
+# SPDX-License-Identifier: CC0-1.0
+#
+
+# Options for EFI system partition.
+#
+# - *mountPoint*
+#   This setting specifies the mount point of the EFI system partition. Some
+#   distributions (Fedora, Debian, Manjaro, etc.) use /boot/efi, others (KaOS,
+#   etc.) use just /boot.
+#
+#   Defaults to "/boot/efi", may be empty (but weird effects ensue)
+# - *recommendedSize*
+#   This optional setting specifies the size of the EFI system partition.
+#   If nothing is specified, the default size of 300MiB will be used.
+#   When writing quantities here, M is treated as MiB, and if you really
+#   want one-million (10^6) bytes, use MB.
+# - *minimumSize*
+#   This optional setting specifies the absolute minimum size of the EFI
+#   system partition. If nothing is specified, the *recommendedSize*
+#   is used instead.
+# - *label*
+#   This optional setting specifies the name of the EFI system partition (see
+#   PARTLABEL; gpt only; requires KPMCore >= 4.2.0).
+#   If nothing is specified, the partition name is left unset.
+#
+# Going below the *recommended* size is allowed, but the user will
+# get a warning that it might not work. Going below the *minimum*
+# size is not allowed and the user will be told it will not work.
+#
+# Both quantities must be at least 32MiB, this is enforced by the EFI
+# spec. If minimum is not specified, it defaults to the recommended
+# size. Distro's that allow more user latitude can set the minimum lower.
+efi:
+    mountPoint:         "/boot/efi"
+    recommendedSize:    300MiB
+    minimumSize:        32MiB
+    label:              "EFI"
+
+# Deprecated alias of efi.mountPoint
+# efiSystemPartition:     "/boot/efi"
+
+# Deprecated alias of efi.recommendedSize
+# efiSystemPartitionSize:          300MiB
+
+# Deprecated alias of efi.label
+# efiSystemPartitionName:     EFI
+
+# In autogenerated partitioning, allow the user to select a swap size?
+# If there is exactly one choice, no UI is presented, and the user
+# cannot make a choice -- this setting is used. If there is more than
+# one choice, a UI is presented.
+#
+# Legacy settings *neverCreateSwap* and *ensureSuspendToDisk* correspond
+# to values of *userSwapChoices* as follows:
+#    - *neverCreateSwap* is true, means [none]
+#    - *neverCreateSwap* is false, *ensureSuspendToDisk* is false, [small]
+#    - *neverCreateSwap* is false, *ensureSuspendToDisk* is true, [suspend]
+#
+# Autogenerated swap sizes are as follows:
+#    - *suspend*: Swap is always at least total memory size,
+#      and up to 4GiB RAM follows the rule-of-thumb 2 * memory;
+#      from 4GiB to 8 GiB it stays steady at 8GiB, and over 8 GiB memory
+#      swap is the size of main memory.
+#    - *small*: Follows the rules above, but Swap is at
+#      most 8GiB, and no more than 10% of available disk.
+# In both cases, a fudge factor (usually 10% extra) is applied so that there
+# is some space for administrative overhead (e.g. 8 GiB swap will allocate
+# 8.8GiB on disk in the end).
+#
+# If *file* is enabled here, make sure to have the *fstab* module
+# as well (later in the exec phase) so that the swap file is
+# actually created.
+userSwapChoices:
+    - none      # Create no swap, use no swap
+    - small     # Up to 4GB
+    - suspend   # At least main memory size
+    # - reuse     # Re-use existing swap, but don't create any (unsupported right now)
+    - file      # To swap file instead of partition
+
+# This optional setting specifies the name of the swap partition (see
+# PARTLABEL; gpt only; requires KPMCore >= 4.2.0).
+# If nothing is specified, the partition name is left unset.
+# swapPartitionName:      swap
+
+# LEGACY SETTINGS (these will generate a warning)
+# ensureSuspendToDisk:    true
+# neverCreateSwap:        false
+
+# This setting specifies the LUKS generation (i.e LUKS1, LUKS2) used internally by
+# cryptsetup when creating an encrypted partition.
+#
+# This option is set to luks1 by default, as grub doesn't support LUKS2 + Argon2id
+# currently. On the other hand grub does support LUKS2 with PBKDF2 and could therefore be
+# also set to luks2. Also there are some patches for grub and Argon2.
+# See: https://aur.archlinux.org/packages/grub-improved-luks2-git
+#
+# Choices: luks1, luks2 (in addition, "luks" means "luks1")
+#
+# The default is luks1
+#
+luksGeneration: luks2
+
+# This setting determines if encryption should be allowed when using zfs.  This
+# setting has no effect unless zfs support is provided.
+#
+# This setting is to handle the fact that some bootloaders(such as grub) do not
+# support zfs encryption.
+#
+# The default is true
+#
+# allowZfsEncryption: true
+
+# Correctly draw nested (e.g. logical) partitions as such.
+drawNestedPartitions:   false
+
+# Show/hide partition labels on manual partitioning page.
+alwaysShowPartitionLabels: true
+
+# Allow manual partitioning.
+#
+# When set to false, this option hides the "Manual partitioning" button,
+# limiting the user's choice to "Erase", "Replace" or "Alongside".
+# This can be useful when using a custom partition layout we don't want
+# the user to modify.
+#
+# If nothing is specified, manual partitioning is enabled.
+#allowManualPartitioning:   true
+
+# Show not encrypted boot partition warning.
+#
+# When set to false, this option does not show the
+# "Boot partition not encrypted" warning when encrypting the
+# root partition but not /boot partition.
+#
+# If nothing is specified, the warning is shown.
+#showNotEncryptedBootMessage:   true
+
+# Initial selection on the Choice page
+#
+# There are four radio buttons (in principle: erase, replace, alongside, manual),
+# and you can pick which of them, if any, is initially selected. For most
+# installers, "none" is the right choice: it makes the user pick something specific,
+# rather than accidentally being able to click past an important choice (in particular,
+# "erase" is a dangerous choice).
+#
+# The default is "none"
+#
+initialPartitioningChoice: none
+#
+# Similarly, some of the installation choices may offer a choice of swap;
+# the available choices depend on *userSwapChoices*, above, and this
+# setting can be used to pick a specific one.
+#
+# The default is "none" (no swap) if that is one of the enabled options, otherwise
+# one of the items from the options.
+initialSwapChoice: none
+
+# armInstall
+#
+# Leaves 16MB empty at the start of a drive when partitioning
+# where usually the u-boot loader goes
+#
+# armInstall: false
+
+# Default partition table type, used when a "erase" disk is made.
+#
+# When erasing a disk, a new partition table is created on disk.
+# In other cases, e.g. Replace and Alongside, as well as when using
+# manual partitioning, this partition table exists already on disk
+# and it is left unmodified.
+#
+# Possible values: gpt, msdos (or other names defined by KPMcore).
+# Names are case-sensitive.
+#
+# If nothing is specified, Calamares defaults to "gpt" if system is
+# efi or "msdos" otherwise.
+#
+# defaultPartitionTableType: msdos
+
+# Requirement for partition table type
+#
+# Restrict the installation on disks that match the type of partition
+# tables that are specified.
+#
+# Possible values: msdos, gpt (or other names defined by KPMcore).
+# Names are case-sensitive.
+#
+# If nothing is specified, Calamares defaults to both "msdos" and "gpt".
+#
+# requiredPartitionTableType: gpt
+# requiredPartitionTableType:
+#     - msdos
+#     - gpt
+
+# Default filesystem type, used when a "new" partition is made.
+#
+# When replacing a partition, the new filesystem type will be from the
+# defaultFileSystemType value. In other cases, e.g. Erase and Alongside,
+# as well as when using manual partitioning and creating a new
+# partition, this filesystem type is pre-selected. Note that
+# editing a partition in manual-creation mode will not automatically
+# change the filesystem type to this default value -- it is not
+# creating a new partition.
+#
+# Suggested values: ext2, ext3, ext4, reiser, xfs, jfs, btrfs
+# If nothing is specified, Calamares defaults to "ext4".
+#
+# Names are case-sensitive and defined by KPMCore.
+defaultFileSystemType:  "ext4"
+
+# Selectable filesystem type, used when "erase" is done.
+#
+# When erasing the disk, the *defaultFileSystemType* is used (see
+# above), but it is also possible to give users a choice:
+# list suitable filesystems here. A drop-down is provided
+# to pick which is the filesystems will be used.
+#
+# The value *defaultFileSystemType* is added to this list (with a warning)
+# if not present; the default pick is the *defaultFileSystemType*.
+#
+# If not specified at all, uses *defaultFileSystemType* without a
+# warning (this matches traditional no-choice-available behavior best).
+# availableFileSystemTypes:  ["ext4","f2fs"]
+
+# Per-directory filesystem restrictions.
+#
+# This optional setting specifies what filesystems the user can and cannot use
+# for various directories and mountpoints when using manual partitioning.
+#
+# If nothing is specified, the only restriction enforced by default is that
+# the EFI system partition must use the fat32 filesystem.
+#
+# Otherwise, the filesystem restrictions are defined as follow:
+#
+# directoryFilesystemRestrictions:
+#     - directory: "any"
+#       allowedFilesystemTypes: ["all"]
+#     - directory: "/"
+#       allowedFilesystemTypes: ["ext4","xfs","btrfs","jfs","f2fs"]
+#     - mountpoint: "efi"
+#       allowedFilesystemTypes: ["fat32"]
+#       onlyWhenMountpoint: true
+#
+# There can be any number of mountpoints listed, each entry having the
+# following attributes:
+#   - mountpoint: mountpoint's full path
+#                 or
+#                 "any" to specify a global whitelist that applies to all
+#                 mountpoints
+#                 or
+#                 "efi" to specify a whitelist specific to the EFI system
+#                 partition, wherever that partition is located
+#   - allowedFilesystemTypes: the list of all filesystems valid for this
+#                             mountpoint. If the list contains exactly one
+#                             element, and that element is the special value
+#                             "any", all filesystem types recognized by
+#                             Calamares will be allowed.
+#   - onlyWhenMountpoint: Whether the restriction should apply only when the
+#                         specified directory is a mountpoint. When set to
+#                         true, Calamares will only enforce the listed
+#                         restrictions when the user makes a separate partition
+#                         for this directory and assigns the mountpoint
+#                         accordingly. When set to false, Calamares will
+#                         ensure this directory uses the specified filesystem
+#                         even if the directory is part of a filesystem on a
+#                         different mountpoint. Defaults to false.
+
+# The ClearMounts job unmounts / unmaps things before partitioning.
+# Some special entries under /dev/mapper are excepted from this process.
+# The example lists the three hard-coded exceptions which always apply
+# (they don't need to be listed here). Add other names or wildcards (with
+# a trailing '*') to this list if the live-ISO has additional mounts.
+essentialMounts: [ "live-*", "control", "ventoy" ]
+
+# Show/hide LUKS related functionality in automated partitioning modes.
+# Disable this if you choose not to deploy early unlocking support in GRUB2
+# and/or your distribution's initramfs solution.
+#
+# BIG FAT WARNING:
+#
+# This option is unsupported, as it cuts out a crucial security feature.
+# Disabling LUKS and shipping Calamares without a correctly configured GRUB2
+# and initramfs is considered suboptimal use of the Calamares software. The
+# Calamares team will not provide user support for any potential issue that
+# may arise as a consequence of setting this option to false.
+# It is strongly recommended that system integrators put in the work to support
+# LUKS unlocking support in GRUB2 and initramfs/dracut/mkinitcpio/etc.
+# For more information on setting up GRUB2 for Calamares with LUKS, see
+# https://github.com/calamares/calamares/wiki/Deploy-LUKS
+#
+# If nothing is specified, LUKS is enabled in automated modes.
+#enableLuksAutomatedPartitioning:    true
+
+# When enableLuksAutomatedPartitioning is true, this option will pre-check
+# encryption checkbox. This option is only usefull to help people to not forget
+# to cypher their disk when installing in enterprise (for exemple).
+#preCheckEncryption:    false
+
+# LVM support
+#
+# There is only one sub-key available, *enable* (defaults to true)
+# which can be used to show (default) or hide the LVM buttons in the partitioning module.
+lvm:
+    enable: false
+
+# Partition layout.
+#
+# This optional setting specifies a custom partition layout.
+#
+# If nothing is specified, the default partition layout is a single partition
+# for root that uses 100% of the space and uses the filesystem defined by
+# defaultFileSystemType.
+#
+# Note: the EFI system partition is prepended automatically to the layout if
+# needed; the swap partition is appended to the layout if enabled (selections
+# "small" or "suspend" in *userSwapChoices*).
+#
+# Otherwise, the partition layout is defined as follow:
+#
+# partitionLayout:
+#     - name: "rootfs"
+#       type: "4f68bce3-e8cd-4db1-96e7-fbcaf984b709"
+#       filesystem: "ext4"
+#       noEncrypt: false
+#       mountPoint: "/"
+#       size: 20%
+#       minSize: 500M
+#       maxSize: 10G
+#       attributes: 0xffff000000000003
+#     - name: "home"
+#       type: "933ac7e1-2eb4-4f13-b844-0e14e2aef915"
+#       filesystem: "ext4"
+#       noEncrypt: false
+#       mountPoint: "/home"
+#       size: 3G
+#       minSize: 1.5G
+#       features:
+#         64bit: false
+#         casefold: true
+#     - name: "data"
+#       filesystem: "fat32"
+#       mountPoint: "/data"
+#       features:
+#         sector-size: 4096
+#         sectors-per-cluster: 128
+#       size: 100%
+#
+# There can be any number of partitions, each entry having the following attributes:
+#   - name: filesystem label
+#           and
+#           partition name (gpt only; since KPMCore 4.2.0)
+#   - uuid: partition uuid (optional parameter; gpt only; requires KPMCore >= 4.2.0)
+#   - type: partition type (optional parameter; gpt only; requires KPMCore >= 4.2.0)
+#   - attributes: partition attributes (optional parameter; gpt only; requires KPMCore >= 4.2.0)
+#   - filesystem: filesystem type (optional parameter)
+#       - if not set at all, treat as "unformatted"
+#       - if "unformatted", no filesystem will be created
+#       - if "unknown" (or an unknown FS name, like "elephant") then the
+#         default filesystem type, or the user's choice, will be applied instead
+#         of "unknown" (e.g. the user might pick ext4, or xfs).
+#   - noEncrypt: whether this partition is exempt from encryption if enabled (optional parameter; default is false)
+#   - mountPoint: partition mount point (optional parameter; not mounted if unset)
+#   - size: partition size in bytes (append 'K', 'M' or 'G' for KiB, MiB or GiB)
+#           or
+#           % of the available drive space if a '%' is appended to the value
+#   - minSize: minimum partition size (optional parameter)
+#   - maxSize: maximum partition size (optional parameter)
+#   - features: filesystem features (optional parameter; requires KPMCore >= 4.2.0)
+#       name: boolean or integer or string
+
+# Checking for available storage
+#
+# This overlaps with the setting of the same name in the welcome module's
+# requirements section. If nothing is set by the welcome module, this
+# value is used instead. It is still a problem if there is no required
+# size set at all, and the replace and resize options will not be offered
+# if no required size is set.
+#
+# The value is in Gibibytes (GiB).
+#
+# BIG FAT WARNING: except for OEM-phase-0 use, you should be using
+#                  the welcome module, **and** configure this value in
+#                  `welcome.conf`, not here.
+# requiredStorage: 3.5

calamares/modules/users.conf

@@ -15,3 +15,9 @@ defaultGroups:
 autologinGroup:  autologin
 sudoersGroup:    sudo
 setRootPassword: false
+
+passwordRequirements:
+    nonempty: true
+    minLength: 6  # Password at least this many characters
+    maxLength: -1  # Password at most this many characters
+

calamares/modules/welcome.conf

@@ -4,7 +4,7 @@ showKnownIssuesUrl:     true
 showReleaseNotesUrl:    true
 
 requirements:
-    requiredStorage:    10
+    requiredStorage:    15
     requiredRam:        1.0
     check:
         - storage

calamares/settings.conf

@@ -62,6 +62,7 @@ sequence:
   - partition
   - mount
   - unpackfs
+  - luksbootkeyfile
   - dpkg-unsafe-io
   - sources-media
   - machineid
@@ -78,7 +79,6 @@ sequence:
   - grubcfg
   - bootloader
   - packages
-  - luksbootkeyfile
   - plymouthcfg
   - initramfscfg
   - initramfs

conf/96_calamares-settings-debian.gschema.override

@@ -1,6 +1,6 @@
 # Launcher icons
 [org.gnome.shell]
-favorite-apps=['install-debian.desktop', 'firefox-esr.desktop', 'org.gnome.Evolution.desktop', 'rhythmbox.desktop', 'libreoffice-writer.desktop', 'org.gnome.Nautilus.desktop', 'org.gnome.Software.desktop', 'yelp.desktop']
+favorite-apps=['calamares-install-debian.desktop', 'firefox-esr.desktop', 'org.gnome.Evolution.desktop', 'rhythmbox.desktop', 'libreoffice-writer.desktop', 'org.gnome.Nautilus.desktop', 'org.gnome.Software.desktop', 'yelp.desktop']
 
 # We don't want the screensaver to enable on the live media while installing
 [org.gnome.desktop.lockdown]

debian/.gitignore

@@ -1,5 +0,0 @@
-.debhelper/
-calamares-settings-debian.substvars
-calamares-settings-debian/
-debhelper-build-stamp
-files

debian/changelog

@@ -1,3 +1,97 @@
+calamares-settings-debian (14.0.1-1) unstable; urgency=medium
+
+  * New upstream release
+    - Reintroduce egg theme
+    - Update branding for Debian 14
+    - Set only password requirement to be at least 6 characters
+      (Closes: #1082020, #1109136)
+    - Disable lvm support (Closes: #1109138, #1060232)
+
+ -- Jonathan Carter <jcc@debian.org>  Wed, 13 Aug 2025 21:32:37 +0200
+
+calamares-settings-debian (13.0.13-1) unstable; urgency=medium
+
+  * New upstream relese
+    - Fix support url (Closes: #1109232)
+
+ -- Jonathan Carter <jcc@debian.org>  Sun, 13 Jul 2025 23:52:19 +0200
+
+calamares-settings-debian (13.0.12-2) unstable; urgency=medium
+
+  * Add rsync as a dependency (Closes: #1080188) 
+
+ -- Jonathan Carter <jcc@debian.org>  Mon, 06 Jan 2025 12:03:48 +0200
+
+calamares-settings-debian (13.0.12-1) unstable; urgency=medium
+
+  * New upstream release
+    - Includes initial Caretopsia artwork for Trixie
+    - Support more than one value for the media path
+      (Closes: #1089618)
+
+ -- Jonathan Carter <jcc@debian.org>  Fri, 20 Dec 2024 15:01:36 +0200
+
+calamares-settings-debian (13.0.11-1) unstable; urgency=medium
+
+  * New upstream release
+    - Make script names less generic and namespace (Closes: #1021156)
+
+ -- Jonathan Carter <jcc@debian.org>  Fri, 23 Aug 2024 17:48:32 +0200
+
+calamares-settings-debian (13.0.9-1) unstable; urgency=medium
+
+  * New upstream release (Closes: #1037123, #1001192)
+
+ -- Jonathan Carter <jcc@debian.org>  Thu, 22 Aug 2024 18:54:20 +0200
+
+calamares-settings-debian (13.0.8-1) unstable; urgency=medium
+
+  * New upstream release
+    - Further attempt to fix encrypted installs
+
+ -- Jonathan Carter <jcc@debian.org>  Mon, 22 Jul 2024 15:39:42 +0900
+
+calamares-settings-debian (13.0.7-1) unstable; urgency=medium
+
+  * New upstream release
+    - Fix encrypted installs
+
+ -- Jonathan Carter <jcc@debian.org>  Mon, 22 Jul 2024 14:13:23 +0900
+
+calamares-settings-debian (13.0.6-1) unstable; urgency=medium
+
+  * New upstream release
+    - Mount efivarfs when needed (Closes: #1051607)
+
+ -- Jonathan Carter <jcc@debian.org>  Fri, 21 Jun 2024 18:13:26 +0200
+
+calamares-settings-debian (13.0.5-2) unstable; urgency=medium
+
+  * Update debian/watch to work with new GitLab release
+
+ -- Jonathan Carter <jcc@debian.org>  Wed, 19 Jun 2024 11:01:19 +0200
+
+calamares-settings-debian (13.0.5-1) unstable; urgency=medium
+
+  * New upstream release
+    - Fix delimiter in desktop icon script (Closes: #1037299)
+
+ -- Jonathan Carter <jcc@debian.org>  Sun, 11 Feb 2024 14:48:39 +0200
+
+calamares-settings-debian (13.0.4-1) unstable; urgency=medium
+
+  * New upstream release
+    - Fix crash where /dev isn't mounted
+
+ -- Jonathan Carter <jcc@debian.org>  Mon, 28 Aug 2023 19:17:29 +0200
+
+calamares-settings-debian (13.0.3-1) unstable; urgency=medium
+
+  * New upstream release
+    - Do not allow empty password (Closes: #1050291)
+
+ -- Jonathan Carter <jcc@debian.org>  Fri, 25 Aug 2023 21:51:02 +0200
+
 calamares-settings-debian (13.0.2-1) unstable; urgency=medium
 
   * New upstream release

debian/control

@@ -12,6 +12,7 @@ Vcs-Browser: https://salsa.debian.org/live-team/calamares-settings-debian-packag
 Package: calamares-settings-debian
 Architecture: all
 Depends: calamares,
+         rsync,
          cryptsetup,
          libglib2.0-bin,
          keyutils,

debian/copyright

@@ -3,7 +3,7 @@ Upstream-Name: calamares-settings-debian
 Source: https://gitlab.com/highvoltage/calamares-settings-debian
 
 Files: *
-Copyright: 2016-2023, Jonathan Carter <jcc@debian.org>
+Copyright: 2016-2024, Jonathan Carter <jcc@debian.org>
 License: ISC
 
 Files: calamares/branding/debian/*png

debian/files

@@ -0,0 +1 @@
+calamares-settings-debian_14.0.1-1_source.buildinfo utils optional

debian/install

@@ -1,6 +1,6 @@
 calamares etc
 calamares-modules/* usr/lib/calamares/modules
-scripts/* usr/sbin
+helpers/* usr/share/calamares/helpers
 *.desktop usr/share/applications
 calamares-install-debian usr/bin
 artwork/install-debian.png usr/share/pixmaps

debian/watch

@@ -1,2 +1,3 @@
 version=4
-https://salsa.debian.org/live-team/calamares-settings-debian/tags .*/calamares-settings-debian-(.*)\.tar\.gz
+opts="searchmode=plain" \
+ https://salsa.debian.org/live-team/calamares-settings-debian/tags?sort=updated_desc -/archive/v?\d[\d.]+/calamares-settings-debian-@ANY_VERSION@@ARCHIVE_EXT@ debian uupdate

helpers/calamares-bootloader-config

@@ -16,7 +16,7 @@ echo "Running bootloader-config..."
 
 if [ -d /sys/firmware/efi/efivars ]; then
     echo " * Installing grub-efi (uefi)..."
-    DEBIAN_FRONTEND=noninteractive chroot $CHROOT apt-get -y install grub-efi-amd64
+    DEBIAN_FRONTEND=noninteractive chroot $CHROOT apt-get -y install grub-efi
 else
     echo " * install grub... (bios)"
     DEBIAN_FRONTEND=noninteractive chroot $CHROOT apt-get -y install grub-pc

helpers/calamares-sources-media

@@ -1,9 +1,17 @@
 #!/bin/sh
 
 CHROOT=$(mount | grep proc | grep calamares | awk '{print $3}' | sed -e "s#/proc##g")
-MEDIUM_PATH="/run/live/medium"
+KNOWN_MEDIUM_PATHS="/run/live/medium /run/initramfs/live"
 RELEASE="trixie"
 
+# Support both dracut and initramfs configurations to avoid substitutions
+# in live-build, see: #1089618
+for path in $KNOWN_MEDIUM_PATHS; do
+    if [ "$(mount | grep $path | cut -f3 -d" ")" = "$path" ]; then
+        MEDIUM_PATH=$path
+    fi
+done
+
 if [ "$1" = "-u" ]; then
     umount $CHROOT/$MEDIUM_PATH
     rm $CHROOT/etc/apt/sources.list.d/debian-live-media.list