chore: migrate APT repo domain to meta.telcochisel.com

CHANGELOG.md

@@ -103,7 +103,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   - Upgraded to **Ubuntu 24.04 LTS (Noble Numbat)** base with real-time `linux-image-lowlatency` (1000Hz timer, preemptible) as the default boot kernel.
   - Dual-kernel fallback architecture (`linux-image-generic` alongside low-latency kernel).
   - SCTP kernel tuning, unlimited `RLIMIT_MEMLOCK`, and `SCHED_RR` real-time scheduling for drop-free SDR streaming.
-- **Debian Metapackages (`meta.telcosec.net`)**:
+- **Debian Metapackages (`meta.telcochisel.com`)**:
   - Introduced 8 modular domain packages in `debian/control`: `telcochisel-base`, `telcochisel-sdr`, `telcochisel-5g-sa`, `telcochisel-4g-lte`, `telcochisel-sim`, `telcochisel-baseband`, `telcochisel-wireline`, and `telcochisel-all`.
   - Built custom CLI package manager `telcosec-pkg` with interactive curses menu, search, installation, and dependency management.
 - **Hardware & Driver Stacks**:

CONTRIBUTING.md

@@ -43,7 +43,7 @@ TelcoChiselOS/
 ├── data/
 │   └── tools.json             # Canonical single source of truth for the 100-tool catalog
 ├── packages/
-│   ├── metapackages/          # Debian metapackages (telcochisel-*) → meta.telcosec.net
+│   ├── metapackages/          # Debian metapackages (telcochisel-*) → meta.telcochisel.com
 │   ├── telcosec-cli/          # Go operator CLI → `/usr/local/libexec/telcosec`
 │   │                          # PATH: bash wrapper at `/usr/local/bin/telcosec`
 │   │                          # Explicit bash: `telcosec.bash` or TELCOSEC_FORCE_BASH=1

README.md

@@ -57,7 +57,7 @@ flowchart TD
     subgraph L3["3. Unified Operator Architecture"]
         TELCOSEC["telcosec<br/>(Hardware Probe, 5G Core Lifecycle, Guided Scans, Diagnostic Doctor)"]
         TELCOSDR["telcosec-sdr<br/>(Driver Stacks, USBFS Allocation, 10GbE Tuning, Offline FPGA Bitstreams)"]
-        TELCOPKG["telcosec-pkg<br/>(11-Tier Modular Metapackage Client via meta.telcosec.net)"]
+        TELCOPKG["telcosec-pkg<br/>(11-Tier Modular Metapackage Client via meta.telcochisel.com)"]
     end
 
     subgraph L4["4. 100 Pre-Configured Telecom Instruments (10 Domains)"]
@@ -193,7 +193,7 @@ TelcoChisel OS is distributed across four distinct deployment targets to accommo
 
 ### 1. Live ISO (Physical Hardware)
 * **Flagship Field Edition** (`TelcoChisel-2026.2-amd64.iso`, ~5.5 GB): Fully self-contained, air-gapped research lab with all 100 tools pre-compiled, offline UHD FPGA bitstreams, and Conda SDR environment.
-* **Modular Lite Edition** (`TelcoChisel-2026.2-lite-amd64.iso`, ~1.8 GB): Base desktop with core networking and the `telcosec-pkg` client to pull domain suites on demand from `meta.telcosec.net`.
+* **Modular Lite Edition** (`TelcoChisel-2026.2-lite-amd64.iso`, ~1.8 GB): Base desktop with core networking and the `telcosec-pkg` client to pull domain suites on demand from `meta.telcochisel.com`.
 * **Four Boot Modes**:
   1. *TelcoChisel Live (Default)*: Low-latency desktop with auto-configured hardware access.
   2. *Encrypted Persistence*: AES-XTS LUKS-encrypted `casper-rw` partition for secure evidence and PCAP storage.

RELEASES.md

@@ -55,7 +55,7 @@ graph TD
 ### 2. Modular Lite Edition (`lite`)
 - **Artifact**: `TelcoChisel-2026.2-lite-amd64.iso` (~1.8 GB)
 - **Characteristics**: Streamlined footprint for fast deployment and cloud instances.
-- **Includes**: Base XFCE desktop, Wireshark, network analysis tools, and `telcosec-pkg` client to pull domain suites on demand from `meta.telcosec.net`.
+- **Includes**: Base XFCE desktop, Wireshark, network analysis tools, and `telcosec-pkg` client to pull domain suites on demand from `meta.telcochisel.com`.
 
 ---
 

SECURITY.md

@@ -54,7 +54,7 @@ Please include:
 - Flaws in custom TelcoChisel binaries and scripts (`telcosec`, `telcosec-pkg`, `telcosec-create-usb`).
 - Insecure default permissions outside of standard live-mode operation.
 - Vulnerabilities in the Calamares installer integration or LUKS encryption implementation.
-- Infrastructure security of our APT repositories (`meta.telcosec.net`) and portals.
+- Infrastructure security of our APT repositories (`meta.telcochisel.com`) and portals.
 
 ### Out of Scope / Upstream Tools
 - **Bundled Offensive Tools**: TelcoChisel deliberately ships security auditing tools (e.g., 5Ghoul, SigPloit, QCSuper, FirmWire, srsRAN, Open5GS) whose intended purpose is finding and demonstrating vulnerabilities in cellular protocols. Behavior that is part of a tool's normal offensive operation is not considered a TelcoChisel vulnerability.

builder/calamares/branding/telcosec/show.qml

@@ -319,7 +319,7 @@ Rectangle {
                     }
 
                     Text {
-                        text: "telcosec-pkg CLI • meta.telcosec.net • 10 Metapackages • telcochisel.com"
+                        text: "telcosec-pkg CLI • meta.telcochisel.com • 10 Metapackages • telcochisel.com"
                         color: "#e6edf3"
                         font.pixelSize: 13
                         Layout.alignment: Qt.AlignHCenter

builder/docs/index.html

@@ -529,7 +529,7 @@ <h2>Key Platform Capabilities</h2>
                             </svg>
                             Modular 11-Tier Metapackages
                         </div>
-                        <p class="card-desc">Debian repository at <code class="inline-code">meta.telcosec.net</code> with <code class="inline-code">telcosec-pkg</code> CLI to selectively install domain suites across SDR, 5G, SIM, Wireline, and Baseband.</p>
+                        <p class="card-desc">Debian repository at <code class="inline-code">meta.telcochisel.com</code> with <code class="inline-code">telcosec-pkg</code> CLI to selectively install domain suites across SDR, 5G, SIM, Wireline, and Baseband.</p>
                     </div>
                     <div class="card">
                         <div class="card-title">
@@ -856,7 +856,7 @@ <h4>Smartcard, SIM &amp; eSIM Auditing (`telcosec sim`)</h4>
 
                 <h3>5. Modular Metapackage Manager (`telcosec pkg` / `telcosec-pkg`)</h3>
                 <p>
-                    TelcoChisel features a 10-tier modular metapackage repository hosted on Cloudflare Pages (<code class="inline-code">meta.telcosec.net</code>). Operators can inspect, install, and audit modular tool bundles on-demand using either the unified operator CLI (<code class="inline-code">telcosec pkg</code>) or the standalone <code class="inline-code">telcosec-pkg</code> utility:
+                    TelcoChisel features a 10-tier modular metapackage repository hosted on Cloudflare Pages (<code class="inline-code">meta.telcochisel.com</code>). Operators can inspect, install, and audit modular tool bundles on-demand using either the unified operator CLI (<code class="inline-code">telcosec pkg</code>) or the standalone <code class="inline-code">telcosec-pkg</code> utility:
                 </p>
                 <div class="terminal-block">
                     <div class="terminal-header">

builder/scripts/00-install-all-packages.sh

@@ -142,11 +142,11 @@ else
   rm -f "$KISMET_KEY" /etc/apt/sources.list.d/kismet.list
 fi
 
-# TelcoChisel Official APT Repository (Cloudflare Edge CDN: meta.telcosec.net)
+# TelcoChisel Official APT Repository (Cloudflare Edge CDN: meta.telcochisel.com)
 # Distributes official metapackages, SDR hardware rules, and kernel tuning.
 TELCOSEC_KEY=/etc/apt/keyrings/telcochisel-archive-keyring.asc
 TELCOSEC_SOURCES=/etc/apt/sources.list.d/telcochisel.sources
-TELCOSEC_URL="https://meta.telcosec.net"
+TELCOSEC_URL="https://meta.telcochisel.com"
 TELCOSEC_FPR="6326A34C15FEF05FBD63518B4325182E2F0D9DB9"
 
 mkdir -p /etc/apt/keyrings
@@ -155,12 +155,12 @@ if curl -fsSL "${TELCOSEC_URL}/public.gpg" -o "$TELCOSEC_KEY" 2>/dev/null && [ -
   chmod 0644 "$TELCOSEC_KEY"
   cat > "$TELCOSEC_SOURCES" << 'EOF'
 Types: deb
-URIs: https://meta.telcosec.net
+URIs: https://meta.telcochisel.com
 Suites: noble
 Components: main
 Signed-By: /etc/apt/keyrings/telcochisel-archive-keyring.asc
 EOF
-  echo "  TelcoChisel official APT repo added (meta.telcosec.net, fingerprint verified)."
+  echo "  TelcoChisel official APT repo added (meta.telcochisel.com, fingerprint verified)."
   TELCOSEC_REPO_ENABLED=1
 else
   echo "  WARNING: TelcoChisel custom APT repo not reachable or key verification failed — continuing with upstream/source builds."

builder/scripts/bin/telcosec-pkg

@@ -7,12 +7,12 @@
 #   - Install and remove metapackages by name or shorthand alias
 #   - Inspect dependencies, recommends, and tool manifests
 #   - Verify dependency integrity and repair broken states
-#   - Manage official APT repository connection (meta.telcosec.net)
+#   - Manage official APT repository connection (meta.telcochisel.com)
 # =============================================================================
 set -euo pipefail
 
 VERSION="1.2.0"
-TELCOSEC_URL="https://meta.telcosec.net"
+TELCOSEC_URL="https://meta.telcochisel.com"
 TELCOSEC_KEY="/etc/apt/keyrings/telcochisel-archive-keyring.asc"
 TELCOSEC_SOURCES="/etc/apt/sources.list.d/telcochisel.sources"
 TELCOSEC_PREF="/etc/apt/preferences.d/99-telcochisel.pref"
@@ -238,7 +238,7 @@ Commands:
   tools [pkg|alias]          Inspect exact tool manifests included in metapackage tiers
   search <query>             Search metapackages, tool manifests and APT repositories
   check | verify             Audit health of installed metapackages and dependencies
-  repo [status|enable]       Check or configure official APT repo (meta.telcosec.net)
+  repo [status|enable]       Check or configure official APT repo (meta.telcochisel.com)
   version                    Display version and APT repository status
 
 Shorthand Aliases:
@@ -734,18 +734,18 @@ cmd_repo() {
         $SUDO chmod 0644 "$TELCOSEC_KEY"
         cat << 'EOF' | $SUDO tee "$TELCOSEC_SOURCES" >/dev/null
 Types: deb
-URIs: https://meta.telcosec.net
+URIs: https://meta.telcochisel.com
 Suites: noble
 Components: main
 Signed-By: /etc/apt/keyrings/telcochisel-archive-keyring.asc
 EOF
         cat << 'EOF' | $SUDO tee "$TELCOSEC_PREF" >/dev/null
 Package: telcochisel-*
-Pin: origin meta.telcosec.net
+Pin: origin meta.telcochisel.com
 Pin-Priority: 1001
 
 Package: *
-Pin: origin meta.telcosec.net
+Pin: origin meta.telcochisel.com
 Pin-Priority: 990
 EOF
         $SUDO chmod 0644 "$TELCOSEC_PREF"

builder/scripts/lib/packages.sh

@@ -213,7 +213,7 @@ PKGS_ADVANCED=(
   libncurses-dev cargo libcrypt-dev libqt5charts5-dev
 )
 
-# ─── TelcoChisel Official Metapackages (meta.telcosec.net) ───────────────────
+# ─── TelcoChisel Official Metapackages (meta.telcochisel.com) ───────────────────
 PKGS_TELCOCHISEL_META=(
   telcochisel-base
   telcochisel-hardware-sdr
@@ -230,7 +230,7 @@ PKGS_TELCOCHISEL_META=(
 # ─── Modular Lite Edition Base Packages (~1.8 GB ISO) ────────────────────────
 # Minimal footprint: XFCE desktop, Low-Latency kernel, Wireshark,
 # Calamares installer, Python runtime, and telcosec-pkg client to pull
-# modular domain suites (SDR, 5G, SIM, UE, etc.) on-demand from meta.telcosec.net.
+# modular domain suites (SDR, 5G, SIM, UE, etc.) on-demand from meta.telcochisel.com.
 PKGS_LITE_BASE=(
   "${PKGS_BASE[@]}"
   wireshark tshark tcpdump

builder/security/99-telcochisel.pref

@@ -2,9 +2,9 @@
 # Give TelcoChisel package repository high priority so custom tools & metapackages take precedence
 
 Package: telcochisel-*
-Pin: origin meta.telcosec.net
+Pin: origin meta.telcochisel.com
 Pin-Priority: 1001
 
 Package: *
-Pin: origin meta.telcosec.net
+Pin: origin meta.telcochisel.com
 Pin-Priority: 990

docker/descriptions/base.md

@@ -8,7 +8,7 @@
 
 Official headless CLI container image for **TelcoChisel OS** (`v2026.2`), the premier telecom security penetration testing and research distribution developed by **TelcoSec** ([telco-sec.com](https://telco-sec.com) • [telcochisel.com](https://telcochisel.com)).
 
-Built on **Ubuntu 24.04 LTS (Noble Numbat)**, stripped of desktop/manpage bloat, and enrolled in the official [TelcoSec Metapackage Archive](https://meta.telcosec.net).
+Built on **Ubuntu 24.04 LTS (Noble Numbat)**, stripped of desktop/manpage bloat, and enrolled in the official [TelcoSec Metapackage Archive](https://meta.telcochisel.com).
 
 ---
 
@@ -68,4 +68,4 @@ TelcoChisel and TelcoSec tools are designed strictly for authorized telecommunic
 - **Official Website:** [telcosec.net](https://telcosec.net)
 - **Documentation & Research:** [telcosec.net/docs](https://telcosec.net)
 - **GitHub Repository:** [TelcoChisel/TelcoChiselOS](https://github.com/TelcoChisel/TelcoChiselOS)
-- **Official Metapackages:** [meta.telcosec.net](https://meta.telcosec.net)
+- **Official Metapackages:** [meta.telcochisel.com](https://meta.telcochisel.com)

docker/scripts/install-apt-key.sh

@@ -3,7 +3,7 @@
 # builder/scripts/00-install-all-packages.sh and scripts/install-telcochisel-repo.sh).
 set -euo pipefail
 
-TELCOSEC_URL="${TELCOSEC_URL:-https://meta.telcosec.net}"
+TELCOSEC_URL="${TELCOSEC_URL:-https://meta.telcochisel.com}"
 TELCOSEC_KEY="/etc/apt/keyrings/telcochisel-archive-keyring.asc"
 TELCOSEC_SOURCES="/etc/apt/sources.list.d/telcochisel.sources"
 TELCOSEC_FPR="6326A34C15FEF05FBD63518B4325182E2F0D9DB9"

packages/homebrew-tap/README.md

@@ -100,7 +100,7 @@ Formula updates are automated via GitHub Actions:
 ## Documentation & Upstream Repositories
 
 - **TelcoChisel OS Documentation Portal**: [https://telcochisel.com](https://telcochisel.com)
-- **Official Metapackage CDN**: [https://meta.telcosec.net](https://meta.telcosec.net)
+- **Official Metapackage CDN**: [https://meta.telcochisel.com](https://meta.telcochisel.com)
 - **Operator CLI Source Code**: [https://github.com/TelcoChisel/telcosec-cli](https://github.com/TelcoChisel/telcosec-cli)
 - **TelcoChisel OS Distribution**: [https://github.com/TelcoChisel/TelcoChiselOS](https://github.com/TelcoChisel/TelcoChiselOS)
 - **TelcoChisel Organization**: [https://github.com/TelcoChisel](https://github.com/TelcoChisel)

packages/metapackages/debian/changelog

@@ -32,6 +32,6 @@ telcochisel-metapackages (2026.1-1) noble; urgency=medium
 
   * Official release of TelcoChisel Modular Debian Metapackages for Ubuntu 24.04 LTS.
   * Standardized 10 metapackages covering 100 specialized telecom security instruments.
-  * Full integration with telcosec-pkg CLI client and meta.telcosec.net APT repository.
+  * Full integration with telcosec-pkg CLI client and meta.telcochisel.com APT repository.
 
  -- TelcoChisel Engineering Team <ops@telcochisel.com>  Tue, 22 Sep 2026 12:00:00 +0000

packages/telcosec-cli/.github/workflows/deploy-apt.yml

@@ -94,9 +94,9 @@ jobs:
           rm -rf public/conf public/db
 
           # Set custom domain CNAME for Cloudflare Pages
-          echo "meta.telcosec.net" > public/CNAME
+          echo "meta.telcochisel.com" > public/CNAME
 
-      - name: Deploy to Cloudflare Pages (meta.telcosec.net)
+      - name: Deploy to Cloudflare Pages (meta.telcochisel.com)
         if: env.CF_API_TOKEN != '' && (github.event_name != 'workflow_dispatch' || inputs.dry_run != true)
         uses: cloudflare/wrangler-action@v3
         with:

packages/telcosec-cli/README.md

@@ -31,15 +31,15 @@ The official standalone operator CLI and telemetry suite for telecom security en
 
 ### Official APT Repository Installation (Ubuntu 24.04 / 22.04 & Debian 12)
 
-Install `telcosec-cli` via the official Cloudflare Pages-backed APT edge repository (`meta.telcosec.net`):
+Install `telcosec-cli` via the official Cloudflare Pages-backed APT edge repository (`meta.telcochisel.com`):
 
 ```bash
 # 1. Install TelcoSec APT keyring
 sudo mkdir -p /etc/apt/keyrings
-curl -fsSL https://meta.telcosec.net/public.gpg | sudo gpg --dearmor -o /etc/apt/keyrings/telcosec.gpg
+curl -fsSL https://meta.telcochisel.com/public.gpg | sudo gpg --dearmor -o /etc/apt/keyrings/telcosec.gpg
 
 # 2. Add TelcoChisel repository source
-echo "deb [signed-by=/etc/apt/keyrings/telcosec.gpg] https://meta.telcosec.net noble main" | sudo tee /etc/apt/sources.list.d/telcosec.list
+echo "deb [signed-by=/etc/apt/keyrings/telcosec.gpg] https://meta.telcochisel.com noble main" | sudo tee /etc/apt/sources.list.d/telcosec.list
 
 # 3. Update package index and install telcosec-cli
 sudo apt-get update && sudo apt-get install -y telcosec-cli
@@ -119,7 +119,7 @@ sudo make install
 | `telcosec 10g` | `status`, `tune <iface>`, `setup <iface> [preset]`, `probe [ip]` | 10Gbps SFP+ interface optimization for Ettus USRP X310/N310 transceivers. |
 | `telcosec firmware` | | Inspect local offline FPGA bitstream caches for BladeRF (`.rbf`) and USRP (`.bin`). |
 | `telcosec profile` | `lab`, `field`, `status` | Switch operational profiles (Lab Mode vs Field Mode). |
-| `telcosec pkg` | `list [--json]`, `info <alias>`, `install <alias>`, `remove <alias>`, `check`, `repo [status\|enable]` | Official 10-tier modular metapackage manager connecting to meta.telcosec.net. |
+| `telcosec pkg` | `list [--json]`, `info <alias>`, `install <alias>`, `remove <alias>`, `check`, `repo [status\|enable]` | Official 10-tier modular metapackage manager connecting to meta.telcochisel.com. |
 | `telcosec sim` | `status`, `readers`, `atr [hex]`, `trace [list\|sniff]`, `lpac`, `shell` | Smartcard, SIM & eSIM auditing suite (PC/SC, ISO 7816-3 ATR decoder, SIMtrace 2, lpac). |
 | `telcosec 5g-sa` | `start`, `stop`, `status`, `add-sub` | Manage local Open5GS 5G Standalone core network and provision test SIMs. |
 | `telcosec scan` | `sctp`, `sip`, `asleap` | Launch telecom signaling assessment wizards and scanners. |

packages/telcosec-cli/completions/_telcosec

@@ -91,7 +91,7 @@ _telcosec() {
                         'install:Deploy a modular metapackage suite to system'
                         'remove:Remove a metapackage suite from system'
                         'check:Verify installed metapackage integrity and dpkg state'
-                        'repo:Inspect or configure meta.telcosec.net repository'
+                        'repo:Inspect or configure meta.telcochisel.com repository'
                     )
                     metapackages=(
                         'base:Core OS kernel latency tuning, PAM limits, SCTP stack'

packages/telcosec-cli/docs/man/telcosec.1

@@ -108,7 +108,7 @@ Remove a domain suite from the local system.
 Audit installed metapackages and verify dpkg database package consistency.
 .TP
 .BR repo " [" status "|" enable "]"
-Audit or configure enrollment in the official \fBhttps://meta.telcosec.net\fR APT repository and GPG signing keys.
+Audit or configure enrollment in the official \fBhttps://meta.telcochisel.com\fR APT repository and GPG signing keys.
 .RE
 .TP
 .BR sim " [" status "|" readers "|" atr "|" trace "|" lpac "|" shell "]"

packages/telcosec-cli/pkg/packages/operations.go

@@ -14,7 +14,7 @@ import (
 )
 
 const (
-	OfficialRepoURL = "https://meta.telcosec.net"
+	OfficialRepoURL = "https://meta.telcochisel.com"
 	Deb822Sources   = "/etc/apt/sources.list.d/telcochisel.sources"
 	LegacySources   = "/etc/apt/sources.list.d/telcosec.list"
 	ArchiveKeyring  = "/etc/apt/keyrings/telcochisel-archive-keyring.asc"
@@ -161,7 +161,7 @@ func RepoStatus(w io.Writer) error {
 	return nil
 }
 
-// RepoEnable enrolls the host system in the official meta.telcosec.net repository.
+// RepoEnable enrolls the host system in the official meta.telcochisel.com repository.
 // Prefers telcosec-pkg or a local install-telcochisel-repo.sh; otherwise installs
 // the key with fingerprint verification (never curl|bash from floating main).
 func RepoEnable(w io.Writer) error {
@@ -256,8 +256,8 @@ func enableOfficialRepoNative(w io.Writer) error {
 		return fmt.Errorf("write APT sources: %w", err)
 	}
 
-	prefs := "Package: telcochisel-*\nPin: origin meta.telcosec.net\nPin-Priority: 1001\n\n" +
-		"Package: *\nPin: origin meta.telcosec.net\nPin-Priority: 990\n"
+	prefs := "Package: telcochisel-*\nPin: origin meta.telcochisel.com\nPin-Priority: 1001\n\n" +
+		"Package: *\nPin: origin meta.telcochisel.com\nPin-Priority: 990\n"
 	if err := sudoWriteFile(AptPreferences, prefs, "0644"); err != nil {
 		return fmt.Errorf("write APT preferences: %w", err)
 	}

packages/telcosec-cli/pkg/packages/packages_test.go

@@ -152,7 +152,7 @@ func TestOfficialRepoKeyFingerprintPinned(t *testing.T) {
 	if OfficialRepoKeyFingerprint != "6326A34C15FEF05FBD63518B4325182E2F0D9DB9" {
 		t.Fatalf("unexpected OfficialRepoKeyFingerprint: %s", OfficialRepoKeyFingerprint)
 	}
-	if OfficialRepoURL != "https://meta.telcosec.net" {
+	if OfficialRepoURL != "https://meta.telcochisel.com" {
 		t.Fatalf("unexpected OfficialRepoURL: %s", OfficialRepoURL)
 	}
 }