first commit

2026-09-05 12:14:36 +03:00
commit 5930fd7ab5
8 changed files with 217 additions and 0 deletions
@@ -0,0 +1,36 @@
+# EP Eraser
+
+EP Eraser is a small Debian Live image for securely retiring SATA/NVMe SSDs and rotational HDDs. It boots into a text console inspired by DBAN, but uses device-specific erase methods instead of overwriting every disk indiscriminately.
+
+## Safety model
+
+- The tool requires an exact device name and a typed `ERASE` confirmation.
+- It refuses mounted devices, the live boot device, read-only devices, and devices with mounted descendants.
+- SSDs use `blkdiscard --secure` where supported, with NVMe sanitize as an option.
+- HDDs use a three-pass `shred` overwrite followed by a device-state/status check.
+- Every operation is logged to `/var/log/ep-eraser.log` and a summary is written to the target's parent device metadata only when supported.
+
+No software can guarantee recovery resistance for every controller, reserved area, remapped sector, or damaged drive. For high-assurance disposal, combine this image with the drive vendor's sanitize command or physical destruction according to your organization's policy.
+
+## Build
+
+Build from Debian/Ubuntu, WSL, or Docker. The builder must run as root because `live-build` creates a chroot.
+
+```sh
+sudo ./build.sh
+```
+
+The output is `build/ep-eraser-amd64.hybrid.iso`. Write it to a USB drive with a tool such as Rufus or `dd`. Verify the output checksum before deployment.
+
+To build without installing packages on the host, use Docker from Linux or WSL:
+
+```sh
+docker build -t ep-eraser-builder .
+docker run --rm -v "$PWD:/work" ep-eraser-builder
+```
+
+## Use
+
+Boot the target machine from the image, inspect the disk list, and choose the exact device path. The program detects rotational media and presents the appropriate operation. Reboot after completion; do not remove the USB device until the result is shown.
+
+This project intentionally does not include an automatic wipe-all mode.