v0.2.7-alpha

• added hardened USBGuard conf
• added rpm-ostree cancel -q before all rpm-ostree operations to avoid unwanted errors
• fixed password not updating
• re-implemented password expiry for other users
• minor bug fixes and UX updates

v0.2.6-alpha

Various fixes and UX improvements

v0.2.5-alpha

• moved from changing boot paramaters in GRUB config to using rpm-ostree kargs
• increased number of hardening measures to kernel (modules and boot parameters)
• re-enabled hidepid, plus additional noexec mounts for /tmp and /dev/shm
• major overhaul of user interactions for firstboot script
• changed password expiry to only change human user passwords

v0.2.1-alpha

• Added SELinux and CPU vulnerability checks at the end of firstboot script
• Hardened Chrony using GrapheneOS config

v0.2-alpha

What's Changed

• v0.1.1 by @solidc0re in #3
• v0.2 alpha by @solidc0re in #4

Full Changelog: v0.1.1-alpha...v0.2-alpha

version 0.1.1 alpha

Fixed dnscrypt-proxy download verification

version 0.1 alpha

Extensive hardening scripts for immutable Fedora variants.

First alpha release. Use only if you know what you're doing. All changes instigated by the script are revertable, however please be aware that the uninstall script isn't fully tested.