All changes brought by Zero Trace Pen 2.7.1, 2.9.1 and 2.10.
Major new features and changes
Redesigned Zero Trace Pen Greeter.
Upgrade to a new snapshot (2017013002) of the Debian and Torproject
APT repositories.
Upgrade Linux to 4.9.0-1.
Security fixes
Reject packets sent on the LAN to the NetBIOS name service
(Closes: #11944).
Seahorse: use the Tor OnionBalance hidden service pool,
which provides transport encryption and authentication of the keyserver.
Minor improvements
Include adwaita-qt* and enable it by default, so that Qt applications
integrate nicely into a GNOME environment (Closes: #11790).
Add support for the TREZOR hardware wallet in Electrum (Closes: #10964).
AppArmor: allow all programs to read /etc/tor/torsocks.conf via
abstractions/base, to ease maintenance.
Don't (try to) bind the Power button to the shutdown action
(Closes: #12004).
Enable natural scrolling (Closes: #11969).
Update uBlock Origin patterns + settings file.
live-persist: remove Squeeze → Wheezy migration code.
Update pre-existing persistent GnuPG configuration on login
(Closes: #12201).
Upgrader: use the alpha channel when the next version will be an
alpha, beta, or RC. This will allow users of 3.0~betaN to upgrade to
the next beta or RC, without having to type any command-line
(Closes: #12206).
Bugfixes
Fix "upgrade from ISO" when run from a 32-bit system,
such as Zero Trace Pen 2.x (Closes: #11873).
Fix ability to read videos over HTTPS with Totem (Closes: #11963).
Re-introduce default directories in $HOME, which fixes
Spice file transfers (Closes: #11968).
Re-enable tap-to-click (Closes: #11993).
Lower systemd's DefaultTimeoutStopSec, to get rid of a long delay
before memory wiping starts. This also prevents shutdown from ever
being blocked by any buggy service that takes a while to stop
(Closes: #12061).
Drop Jessie APT sources.
Re-add VirtualBox DKMS modules.
Fix GnuPG communication with keyservers, by using the Tor OnionBalance
hidden service pool (Closes: #12202).
Fix Enigmail communication with keyservers, by teaching Torbirdy
not to break it (Closes: #11948):
· Patch Torbirdy to allow not breaking keyserver communication when
using GnuPG v2.1+, and to use a better default keyserver.
· Torbirdy: enable the new behaviour made possible by the aforementioned
patch (extensions.enigmail.already_torified).
· Torbirdy: drop our custom keyserver configuration, since the
aforementioned patch makes it the default.
Removed features
Don't install gnome-system-log anymore (Closes: #12133).
It's deprecated in GNOME, and mostly useless anyway as it's not
Journal-aware. It's replacement (gnome-logs) is not usable
enough in the context of Zero Trace Pen, and most users who can read logs
should manage to do it with journalctl, so don't install it either.
Drop multiarch handling: Zero Trace Pen 3.0 will be amd64-only (Closes: #11961).
Build system
Disable eatmydata usage and caching: in current Stretch, debootstrap fails
if we use eatmydata + the operation mode picked by live-build when caching
is enabled (Closes: #12052).
Bump disk space (and memory for in-RAM builds) requirements.
Follow replacement of python-reportbug with python3-reportbug.
Don't try to deinstall packages that are unknown on Stretch.
Move AppArmor aliases to a dedicated file, and include it.
This will avoid maintaining these settings as a patch.
Don't attempt to remove the usr.bin.chromium-browser AppArmor profile:
it's not shipped in Debian anymore.
Test suite
Add optional pause() notification (Closes: #12175).
Make the remote shell's file operations robust (Closes: #11887).
Update a number of test cases for Stretch, sometimes by converting
them to Dogtail.
Drop usage and tests of read-only persistence.
We won't have this option anymore, and it's not even sure we'll
reintroduce it (Refs: #12093, Closes: #12055).
Adjust CONFIGURED_KEYSERVER_HOSTNAME to match current settings.
Test suite: clean up disks between features.
Adjustments for Debian 9 (Stretch) with no or very little user-visible impact
Adjust dpkg-divert path: it has moved.
Replace xfonts-wqy with fonts-wqy-microhei + fonts-wqy-zenhei.
The former was removed from Debian testing, and the latter are recommended
by task-chinese-s-desktop and task-chinese-t-desktop.
Install virtualbox* from sid.
It was removed from testing due to https://bugs.debian.org/794466 .
Drop deprecated settings from org/gnome/settings-daemon/plugins/power.
Update settings name in org/gnome/desktop/peripherals/touchpad, and drop
deprecated ones.
Adjust to changed Liferea's .desktop filename.
Also torify Liferea when started via its (new) D-Bus service.
Install hunspell-pt-br instead of hunspell-pt-pt.
Tor Browser 6.5 moved from pt-PT to pt-BR, which is fine vs
spellcheckers in Jessie since its hunspell-pt provides both -pt and
-br, but in Stretch they are separate packages.
AppArmor: adjust usr.sbin.cupsd profile so it loads successfully
(Closes: #12116).
Migrate from netstat to ss.
Update extensions.enigmail.configuredVersion.
Remove the jessie-proposed-updates APT sources.