# Setec Labs Security Update — Ubuntu 22.10 Kinetic
# Release: 2026-03
# Target: Ubuntu 22.10 (Kinetic Kudu)
# Author: seteclabs.io
#
# !! WARNING: Ubuntu 22.10 reached End of Life on July 20, 2023 !!
# No further security patches are available from Canonical.
# This .sec file provides upgrade guidance only.

[packages]
# IMPORTANT: 22.10 repos are archived. Update sources first if needed.
# sed -i 's|archive.ubuntu.com|old-releases.ubuntu.com|g' /etc/apt/sources.list
# sed -i 's|security.ubuntu.com|old-releases.ubuntu.com|g' /etc/apt/sources.list
apt-get update -qq
apt-get install -y --only-upgrade openssl libssl3
apt-get install -y --only-upgrade openssh-server openssh-client
apt-get install -y --only-upgrade curl libcurl4
apt-get install -y --only-upgrade sudo

[sysctl]
# Minimal hardening — upgrade ASAP
net.ipv4.tcp_syncookies = 1
net.ipv4.conf.all.rp_filter = 1
net.ipv4.conf.all.accept_redirects = 0
net.ipv4.conf.all.send_redirects = 0
kernel.randomize_va_space = 2
fs.protected_hardlinks = 1
fs.protected_symlinks = 1

[services]
systemctl restart ssh

[files]
chmod 600 /etc/ssh/sshd_config

[custom]
# Display EOL warning prominently
bash:-:echo '=========================================='
bash:-:echo 'WARNING: Ubuntu 22.10 is END OF LIFE'
bash:-:echo 'No security patches since July 2023!'
bash:-:echo '=========================================='
bash:-:echo ''
bash:-:echo 'Recommended upgrade path:'
bash:-:echo '  22.10 -> 23.04 -> 23.10 -> 24.04 LTS'
bash:-:echo ''
bash:-:echo 'Or fresh install Ubuntu 24.04 LTS (recommended)'
bash:-:echo ''
bash:-:echo 'To begin upgrade: do-release-upgrade'
bash:-:echo '=========================================='