Quark Security's Certifiable Linux Integration Platform
Clone or download
Type Name Latest commit message Commit time
Failed to load latest commit information.
conf Add package list conf file for 7.3 May 11, 2017
host_packages Carry python-lockfile for offline builds. May 2, 2017
kickstart fixes for scap content on rhel 7.5 Apr 23, 2018
packages Add filename-based transitions for sudoers Apr 11, 2018
repos Initial import of the build system for CLIP. Jan 10, 2012
support added scripts used to smoke test live and install isos with qemu Feb 1, 2018
.gitignore Add python bytecode files to gitignore May 11, 2017
CONFIG_AWS.tmpl allow what availibility zone an AMI will be installed in to be specified Apr 8, 2015
CONFIG_BUILD Make SELinux policy type configurable from top-level CONFIG_BUILD Oct 12, 2017
CONFIG_REPOS updated CONFIG_REPOS to point to rhel 7.4 repos Sep 12, 2017
Help-AWS.txt fix some spelling errors and typos Apr 9, 2015
Help-Adding-Existing-Binary-Packages-to-Image.txt Update guidance for adding packages. Sep 18, 2012
Help-Adding-Source-Packages.txt Clarify options for adding source packages to build system Sep 26, 2012
Help-Build-System.txt Rename clip-rhel6 -> clip-minimal, apache-webserver->clip-apache Aug 26, 2014
Help-FAQ.txt Add info re: PYTHONPATH in sudoers Feb 1, 2016
Help-Known-Issues.txt Drop kernel bug from known issues and add openscap double free Feb 11, 2016
Help-Live-Media.txt Rename clip-rhel6 -> clip-minimal, apache-webserver->clip-apache Aug 26, 2014
Help-Package-Dependencies.txt fix some spelling errors and typos Apr 9, 2015
Help-Released-Upstream-Packages.txt Proofreading. Fixes to many Help-*.txt files. Sep 6, 2012
Help-Releases.txt Adjust Help-Releases.txt to reflect dropping of vars in CONFIG_BUILD Nov 20, 2012
Help-Updating-Existing-External-Packages.txt Proofreading. Fixes to many Help-*.txt files. Sep 6, 2012
Help-Use-Cases.txt Drop "my-" prefix for repo dirs. Jul 9, 2014
Help-Yum-Repos.txt Cleanup and rename yum repo help file Feb 11, 2016
Help-bootstrap-config.txt Fix up logic in the bootstrap script Jul 25, 2016
Help-clip-apache.txt Enhance help for apache and vpn variants Jan 6, 2016
Help-clip-sftp.txt Add help re: sftp variant Apr 9, 2015
Help-clip-vpn.txt Enhance help for apache and vpn variants Jan 6, 2016
Help-pxe-boot.txt Add help file for pxe boots Apr 14, 2017
INSTALL Add INSTALL and README which provides general overview of available d… Dec 6, 2012
LICENSE-2.0.txt Add Apache 2.0 license Jul 17, 2012
Makefile Add support for yum repos w/ alphabetic subdirs. Feb 2, 2018
README.md Make the bootstrap script less interactive Jul 20, 2016
bootstrap.sh Update the bootstrap script to use subscription manager instead Apr 24, 2018


Here is a quick list of the things you need to do to get started.

Big Hint/Suggestion: if you use Quark Security's build VM you can skip steps 1-4. Why not make your life easier by downloading it: Quark Security's CLIP build VM

  1. Add your user to /etc/sudoers (required since mock and livecd creator use chroots).

Note that this line is required to generate media.

  1. CHANGE THE DEFAULT PASSWORD IN YOUR KICKSTART (kickstarts/clip-minimal/clip-minimal.ks)! CLIP intentionally ships with an unencrypted default password! It is "neutronbass".

  2. Go back and re-read #2.

  3. Run "./bootstrap.sh" or "./bootstrap.sh -c ". See [Help-bootstrap-config.txt] for details.

  4. After you have run bootstrap once you do not have to run it again. Roll an ISO by running "$ make clip-minimal-inst-iso". This will generate an installable ISO. Alternatively, run "$ make clip-minimal-live-iso" to generate a live media ISO.

Note: for a complete list of targets available please run "$ make help".

After you have successfully rolled an installation ISO it is time to move on to customizing the image. Each topic related to customizing the image is discussed in Help-*.txt files in the root of the CLIP repo.

For general questions please reference Help-FAQ.txt. For more detailed instructions, you may reference the following:

  1. Help-Adding-Existing-Binary-Packages-to-Image.txt

    Assistance for adding binary packages to a rolled ISO.

  2. Help-Adding-Source-Packages.txt

    Assistance for adding source packages to the build system.

  3. Help-Build-System.txt

    Assistance in setting up the build system.

  4. Help-Generating-Live-Media.txt

    How to generate live media.

  5. Help-Known-Issues.txt

    A list of currently known issues and how to get past them.

  6. Help-Releases.txt

    Help in getting a CLIP release out.

  7. Help-Use-Cases.txt

    How to best use CLIP for specific scenarios.