Shadowfetch Linux 2.1.3 "Fire Edition"

Security and stability release. No feature changes from 2.1.2 Fire Edition.

Fixed

• Critical (GitHub issue #3): the installer no longer kills the live session mid-install. sf-remove-live-user used to run pkill -KILL -u shadow inside the target chroot to remove the live-session account — but a chroot does not isolate the process table, and the live desktop session runs as the same uid inside and outside the chroot, so the signal killed the running installer session instead. This aborted every install at job 23/43, 100% of the time, and left a half-installed system with the live shadow account still present (published password, passwordless sudo). The script now edits the target's account database files directly (/etc/passwd, /etc/shadow, /etc/group, /etc/gshadow), removes the home directory, sudoers drop-in, and SDDM autologin config, then verifies every one of those artefacts is actually gone and fails loudly if not.
• Install-blocking bug found during our own verification of the fix above: Calamares' packages.conf referenced two packages, live-task-localisation and live-task-recommended, that don't exist in this build — aborting every install attempt at the package-removal step, independent of issue #3. Fixed by dropping the two nonexistent entries.
• shadowfetch-firstboot.service no longer runs during a live session (was setting the hardware clock and fetching Flatpak themes on a visitor's machine before the firewall was even up).

Both fixes were verified end-to-end with a full scripted Calamares install in QEMU — reaching "All done," rebooting into the installed system, and confirming the live shadow account is fully absent — with zero manual workarounds on the final build.

Verify

sha256sum -c SHA256SUMS
gpg --verify shadowfetch-2.1.3-amd64.iso.asc shadowfetch-2.1.3-amd64.iso

Signing key: 8F13 CE15 35EE 1F4A 2916 A1F7 3C5C 900B 7BE8 0CA1