download built images at SourceForge

This is hybrid live cd/usb openSUSE Tumbleweed rolling spin aimed to be fully functional out-of-the-box yet slim desktop system for hackers of all sorts: technical, humanitarian, artistic, social and so on. It's built on "one user-friendliest method for fulfilling every need" principle.
It DOES NOT guarantee best security defaults, so users with sensitive needs are advised to direct their attention to something like TAILS, CAINE or Whonix, however it should be quite adequate as an installation basis for everyday use and comes with pre-configured data proxying via Tor & I2P and DNSCrypt.

I recommend using smart SATA boxes and usb drives with legacy (floppy / CD / virtual partition) emulation as the replacement for disks, like:
⊘ IODD / Zalman ZM-* series
⊘ The IsoStick
⊘ or just using it on any fast USB stick

It provides:

• complete toolkit that created it
• fresh stable kernel based on ones from Kernel:stable repo
  configured for low latency and maximum hardware support
• fresh video stack with open OpenCL support from X11 repo with option
  to switch to bleeding edge from pontostroy (git & kernel rc's) repoes
• LXQt slim desktop environment
• international (Google Noto set) collection of fonts
  and universal iBus input method by default
• LibreOffice, GIMP, Okular and fresh GoldenDict;
  CoolReader3-Qt, kchmviewer and pdfcrack
• codecs, font antialiasing and texture compression support
  without artificial restrictions
• MPV super-player with its SMplayer GUI;
  SubtitleComposer and Aegisub subtitle editors, Trackma anime/manga tracker
• professional sound handling with JACK
  (PA & ALSA, both with OSS emulation, run as JACK's clients)
• Strawberry (Clementine/Amarok fork) audio player, Audacity audio editor/recorder;
  GStreamer with FFMPEG and JACK output by default
• professional colour management facilities
  (consisting of colord{-kde}, xiccd, argyllCMS and dispcalGUI)
• printer (via cups), scanner (via x/sane)
  and analogue video input (via tvtime) support
• professional screencasting tool SimpleScreenRecorder with native JACK support
• wide range of gamepad utilities such as qjoypad and jstest-gtk;
  RetroArch, universal meta-emulator that encompasses other "emulation cores"; Mednafen, small yet feature-rich JACK-enabled multi-system emulator; emulator pack of OpenMSX, PPSSPP, PCSX-R, PCSX 2, Dolphin, Mupen64Plus, Yabause
• professional virtualization with libvirt & KVM / LXC
  (featuring userland virt-manager, Docker and SPICE flowing out-of-the-box)
• Windows® compatibility through Wine 32 & 64 with VKD3D & DXVK for DX9-12 on VK;
  Steam installer/launcher is present
• professional networking tools and rich connectivity options
• OpenVAS/ex-Nessus and ClamAV security systems are present (inactive)
• anti-censorship kit: Tor&I2P/Privoxy, DNSCrypt-proxy/Unbound, proxychains-ng and VPN
  (Privoxy is also I2P-aware, all i2p-links will be proxy-chained into it;
  Unbound and/or DNSCrypt use multiple DNSSEC-capable instances for different resolvers)
• WeeChat CLI multiprotocol and Gajim XMPP IM clients;
  LinPhone for P2P HD A/V multiuser {S/Z}RTP-encrypted telephony;
  Tox network client for Tor/BitTorrent-like P2P A/V telephony (or so they say);
  RetroShare client for P2P GPG-enabled communication and filesharing & GNUnet;
• fresh Mozilla Firefox browser and Thunderbird e-mail client;
  fresh PPAPI Flash abomination with excellent NPAPI shim, all JACK-ready
• qBitTorrent, aMule, Filezilla & lftp, wget & aria2/fe and httrack for file transfer
• QSyncthingTray for encrypted P2P directory synchronization
• mc, zsh, android-tools, wgetpaste/pastebinit and other console tools
• perf, stress-ng, sysbench, bandwidth, gfio benchmarks
• networking tools:
  • interconnecting: hostapd, miredo-client, minicom and rancid
  • looking: {arp-,ike-,ssl}scan, iptraf-ng, nethogs, upnp-inspector, mtr{-gtk}, lft
  • touching: wireshark-qt, {ze}nmap, wapiti, xprobe2, scapy & {f,h,n}ping, aircrack-ng, kismet, reaver
  • filesharing: retroshare, nfs-kernel-server, pure-ftpd, samba
  • controlling: nftables, netsniff-ng and BCC for NF and BPF firewalling and performance tracing
• filesystem tools:
  • SCSI/PATA/SATA/NVMe hardware access: lsscsi & sg3_utils, hdparm & hddtemp, sdparm, nvme-cli & ndctl
  • management: gparted, {f/g}disk, gptfdisk-fixparts, guestfs-tools, snapper, disktype, qdirstat
  • recovery/imaging: fsarchiver, ddrescue, testdisk, photorec, foremost, ext4magic
  • deduplication: duperemove, fslint (+ digikam's image deduplication with fingerprinting)
  • support for pretty much all filesystems known to man, in kernel or via FUSE
  • rEFInd bootloader and U/EFI manipulation via efitools and UEFITool
• security/forensics tools:
  • autopsy/sleuthkit, scalpel, plaso/log2timeline & Windows®-gutting toolkit, volatility3, chkrootkit/rkhunter, ntpassw/dchntpw/ophcrack, lynis
• encryption tools:
  • YaST partitioner's built-in crypt{setup,config} / LUKS encryption capabilities
  • veracrypt (TrueCrypt fork), aespipe, emount/zuluCrypt, seahorse/gnome-keyring, keepassxc
• bunch of repos pre-configured (but disabled) for recent though mostly stable updates
• useful things that I've put there but forgot to mention

It does NOT provide:

— whole KDE or Gnome (because of how fat the former and how ugly the later are)
— accessibility features (because I have no idea how to setup them right)
but there is onboard virtual keyboard
— security hardening (because it requires strict and thorough testing
in all usage scenarios which are manifold)

Notes:

⊙ the first thing you should do on freshly loaded system is to look at keepnote's HSF note
⊙ use locate to search for files fast and apropos to search for commands based on their manual's description
⊙ Firefox and Thunderbird are set up to use Tor by default, *_proxy variables are also globally set, DNS queries are encrypted and funneled to OpenDNS by default
⊙ popular Microsoft fonts are included for web & document compatibility. they may be removed in future

⊙ can be put on flash USB sticks and such from within itself by

• simple dd bs=<your flash's write block size, like 64K> if=<image or even cdrom device that you have booted it on> of=/dev/<target_device>,
• glamorous GUI tools like SUSE's imagewriter (included) or Ubuntu's win32diskimager
• (unetbootin is NOT recommended due to its outdatedness and broken device selection)
• but be wary that it will format all redundant space as ext4 for its R/W support
• you may need to disable "Secure Boot" DRM and enable "BIOS-compatibility mode" to boot via U/EFI

⊙ DE-specific apps are included for the lack of adequate analogues

• KDE:
  • krusader (dolphin + konqueror + mc in one package and more ? yes, please)
  • yakuake (handy console), will be replaced with finalterm once it matures
  • kate/kwrite (great simple editor)
  • okular (useful doc viewer, integrated in Firefox via kparts-plugin)
  • kchmviewer (MS chm viewer), because sometimes okular screws up
  • gwenview5 + digikam5/showfoto (highly-capable image viewers)
  • k3b (rich disk burner), because some people still are into this stuff)
• GNOME:
  • nm-applet (this is the only NM GUI that can launch in any DE)
  • blueman (bluez5 control)
  • gparted (The F/OSS disk editor), even though it can be substituted with YaST
  • pasystray (PulseAudio control) and all its dependencies
  • easytag (The audio file tag editor)
  • seahorse (gpg GUI)
  • gcr-viewer (crypto file viewer)

⊙ Some specialty apps that were not included but you may be interested in installing manually

• music works
  • ardour, rosegarden, qtractor, hydrogen, mixxx, rakarrack, OpenOctaveMidi, vmpk
• video editing
  • cinelerra, LiVES, openshot, avidemux, kino
• 3D modeling
  • blender
• design
  • OpenCASCADE, geda-gaf, librecad, qcad, openscad, kicad, FreeCAD, QCADesigner
• publishing
  • scribus
• office works utilities
  • chm2pdf
  • djvu2pdf/pdf2djvu
• painting
  • cinepaint, mtpaint
• vector drawing
  • sk1
• font creation
  • fontforge
• OCR (image_of_text-to-real_text conversion)
  • tesseract-{gui} / gocr{-gui} / orcad / ocropus (OCR systems)
  • djvubind or ocrodjvu/img2djvu (DjVu-centric wrappers for OCR systems)
• telephony
  • sflphone-client-gnome (SIP client that natively supports JACK and has many features... and glitches)
  • blink (supposedly is "the best real-time communications client using SIP protocol". ALSA-only and crash-prone)
  • ekiga (simple but ALSA-only)
  • yate-qt4 (lots of features with no GUI for them)
  • jitsi (Jack-of-all-trades and JAVA-fatass)
• multimedia
  • SMplayer GUI for mpv & mplayer (allows extreme fine-tuning but is full of legacy code)
  • VLC (the king of media players but it's interface sucks)
  • QMPlay2 (vlc-like player with better GUI but without JACK support)

Building:

• ∀ every build comes with its building source in '/home/hacker/Hackeurs Sans Frontieres - build sources - ${VERSION_CONFIG}_${BUILD_DATE}.tar.xz'

• ∀ you can build your own image by:

  1. using openSUSE
  2. having "kiwi" and "kiwi-desc-isoboot" packages installed
  3. editing files, starting from 'source/*' and 'create_appliance.sh'. or not
  4. running create_appliance.sh
  5. waiting quite a bit

• ∀ the process of development for this project is like this:

  1. future release version is set in 'config/version'
  2. desired functional changes are made
  3. package lists are sorted via config/sort.sh, gitignore is generated via data/common-userfiles_1-generate-gitignore.sh and then changes are committed
  4. image is build via create_appliance.sh
  5. image is booted on real hardware and tested, maybe also in virtual hardware
  6. bugs and insufficiencies are noted/reported/filed
  7. fixes made
  8. new image is tested and steps 6-7-8 are repeated until condition is satisfactory
  9. the image that deemed satisfactory is considered as current release, git tag -a is issued with "future", now current, version
  10. everything is repeated