updated

opsec/livemode/index.html

@@ -63,6 +63,15 @@
   					<a href="../index.html">Previous Page</a></br></br><p><img src="../../assets/img/user.png" width="50px" height="50px"> <ba>nihilist@mainpc - 2024-11-03</ba></p>
 <h1>Using the Host-OS in live-mode to prepare for long-term Sensitive Use </h1>
 <img src="../deniability/7.png" class="imgRz">
+<p><h2><u>OPSEC Recommendations:</u></h2></p>
+<ol>
+    <li><p>Hardware : (Personal Computer / Laptop)</p></li>
+    <li><p>System Harddrive: not LUKS encrypted <a href="https://www.kicksecure.com/wiki/Ram-wipe">[1]</a></p></li>
+    <li><p>Non-System Harddrive: 500Gb (will be used to contain our <a href="../veracrypt/index.html">Veracrypt</a> encrypted volumes)</p></li>
+    <li><p>Host OS: <a href="../linux/index.html">Linux</a></p></li>
+    <li><p>Hypervisor: <a href="../hypervisorsetup/index.html">QEMU/KVM</a></p></li>
+</ol>
+
           
 	       </div>
 			</div><!-- /row -->
@@ -127,9 +136,9 @@ Fetched 101 kB in 1s (73.7 kB/s)
 Reading package lists... Done
 
 </code></pre>
-<p>Then we install the grub-live package</p>
+<p>Then we install the grub-live package, and the ram-wipe package <b>(warning, the ram-wipe package may cause your system to fail to boot in case if you encrypted the system drive using LUKS, click <a href="https://www.kicksecure.com/wiki/Ram-wipe">here</a> for more details on this)</b>. Therefore i recommend having the <a href="../linux/index.html">Host OS</a> system drive not encrypted until dracut supports LUKS encryption, but it shouldn't matter though, as the actual VMs that we'll be running will be on a non-system drive, which will be manually kept in <a href="../veracrypt/index.html">deniable encryption</a>.</p>
 <pre><code class="nim">
-root@debian-tests:~# sudo apt-get install grub-live -y
+root@debian-tests:~#  apt install grub-live ram-wipe -y
 
 </pre></code>