RedSeek Rescue v1.8.1

Fixed

• mount-windows.sh: Fixed invalid local declaration outside function in BitLocker handling loop.
• rescue-gui.sh: Fixed interactive reset-password.sh execution deadlock by opening interactive terminal.
• rescue-prompt.txt: Fixed invalid --quick / --full flag references for diagnose.sh.
• ANALIZA_REPO_REDSEEK.md: Added full architectural analysis document.

RedSeek Rescue v1.8.0

RedSeek Rescue v1.8.0 - fix config.yaml write with real API key at boot, auto-setup, hooks fix

RedSeek Rescue v1.5.0

RedSeek Rescue v1.5.0

Local Offline AI Fallback

• Qwen 2.5 1.5B Instruct (GGUF Q4_K_M) + llama-server in ISO
• Hermes config cu provider local la localhost:8080/v1
• DeepSeek API key prompt la boot
• Fallback automat offline AI

⚠️ ISO >2GB — impartit in 3 parti

Descarca toate 3 partile, apoi recombina:
cat redseek-rescue-v1.5.0-part-* > redseek-rescue-v1.5.0.iso
sha256sum redseek-rescue-v1.5.0.iso

RedSeek Rescue v1.4.18

RedSeek Rescue v1.4.18

Bump version

• Password credentials configured in chroot hooks
• Line ending enforcement (Unix LF)
• CHANGELOG updated

v1.4.17 — Critical boot freeze & crash fixes

v1.4.17 — 2026-07-12

Fixed (Critical Boot Hangs & Crashes)

• 🔴 rescue-playbook.sh — run scripts directly instead of $(). Fixes boot freeze by letting the user interact with the hidden BitLocker decryption prompt.
• 🔴 registry-tools.sh — defined $SYSTEM_HIVE (via find_ci) and $FORCE_MODE to fix crash on unbound variables under set -u.
• 🔴 build.sh (.profile) — added trap ERR to drop safely to a recovery shell if any boot script crashes, preventing infinite getty login loops.
• 🟠 auto-diagnose.sh — refactored to source utils.sh, check root, read version dynamically, and handle failures cleanly.
• 🟠 rescue-gui.sh — added DISPLAY/WAYLAND_DISPLAY graphical check to prevent Zenity from crashing on minimal text-only consoles.
• 🟡 .gitattributes — added to force eol=lf line endings on all .sh and .bats files, preventing Windows CRLF translation errors on boot.

Full changelog: https://github.com/rednicv/redseek-rescue/blob/main/CHANGELOG.md

RedSeek Rescue v1.4.16

RedSeek Rescue v1.4.16

Fix: login functional

• username=rescue adaugat in toate 3 intrările GRUB
• ISO bootabil BIOS + UEFI

Security (Opus 4.6 audit)

• Shell injection fix in parse-evtx.sh, registry-tools.sh
• WiFi password no longer exposed in /proc/*/cmdline
• mktemp + trap in make-iso.sh

RedSeek Rescue v1.4.15

RedSeek Rescue v1.4.15

Login fix:

• username=rescue in GRUB cmdline
• Autologin TTY1 ca rescue
• Parola rescue/rescue setata de systemd service la boot
• rc-local service enabled

Bootabil:

BIOS + UEFI ✅

RedSeek Rescue v1.4.14

RedSeek Rescue v1.4.14

Bug-uri reparate (audit Opus 4.8)

• Crash detection functional
• Bucla infinita SSH reparata
• SSH PermitRootLogin prohibit-password
• pip3 compatibil Ubuntu Noble
• apt-get update adaugat

Bootabil

• BIOS (El Torito) ✅
• UEFI (GPT) ✅
• ISO: 1.9 GB

Audit final

• Opus: 9/10
• Pro: 8.5/10 initial

RedSeek Rescue v1.7.0

Production-ready build with 9 security fixes. QEMU-tested on Ubuntu Noble 24.04. BIOS+UEFI hybrid ISO.

Fixes:

• WSL2 fail-fast
• Registry dirty hive dual-layer detection
• PII sanitization before AI
• Persistent backups on NTFS
• RO-aware playbook scripts
• WinRE partition trap fix
• GRUB 2.12 compatibility

RedSeek Rescue v1.6.0

RedSeek Rescue v1.6.0 — Secure Boot, QEMU Smoke Test, Snapshot Enforcement

🔒 Secure Boot Support (NEW)

• shim-signed (Microsoft-trusted bootloader) + MOK key enrollment
• GRUB signed with sbsign using auto-generated MOK key
• EFI/BOOT/BOOTx64.EFI → shim, EFI/BOOT/grubx64.efi → signed GRUB
• EFI/BOOT/mok/MOK.crt included in efiboot.img for enrollment
• Zero-config: auto-detects if shim + sbsigntool are installed
• Fallback: non-SecureBoot mode if packages missing

🧪 QEMU Smoke Tests (NEW)

• BIOS boot test: qemu-system-x86_64, 30s timeout, serial capture
• UEFI boot test: OVMF bios, 30s timeout
• Runs on every automated build (tag v*)

🛡️ Mandatory Snapshot Enforcement (NEW)

• require_snapshot() in utils.sh — blocks destructive ops without backup
• reset-password.sh, registry-tools.sh, repair-boot.sh protected
• snapshot-system.sh creates sentinel file after backup

✅ Previous features include:

• 24 defensive scripts with Safe by Design architecture
• AI + Offline hybrid (Hermes + DeepSeek)
• Fallback offline playbook with JSON report
• BitLocker, VSS, registry, boot repair, password recovery
• CI/CD with ShellCheck, bats tests, auto-build ISO
• Enterprise .github templates, banners, test framework