zerotracepen (4.15)

  • Upgrade Thunderbird to 1:78.6.0-1~deb10u1

    • Upgrade Tor Browser to 10.0.9, based on Firefox 78.7 (zerotracepen/zerotracepen!331)

      Closes issues:

      • Upgrade Tor Browser to 10.0.9, based on Firefox 78.7 (zerotracepen/zerotracepen#18100)

      Commits:

      • Fetch Tor Browser from our own archive.
      • Upgrade Tor Browser to 10.0.9-build2.
    • Test suite: support path of tcpdump in current sid (zerotracepen/zerotracepen!328)

      Closes issues:

      • Test suite broken on current sid: "No such file or directory -
        /usr/sbin/tcpdump" (zerotracepen/zerotracepen#18126)

      Commits:

      • Test suite: support path of tcpdump in current sid
    • Update CAs trusted to connect to our website (zerotracepen/zerotracepen!327)

      Closes issues:

      • Upgrader fails to check upgrades: CA changed for our website
        (zerotracepen/zerotracepen#18127)
      • Remove AddTrust_External_Root.pem from our website CA bundle
        (zerotracepen/zerotracepen#11811)

      Commits:

      • Fix shell syntax
      • Reference issue and add another related XXX
      • Don't ship individual Let's Encrypt intermediate certificates files in the
        image
      • Move Let's Encrypt intermediate certificates outside of the system-wide CA
        store
      • Upgrader: trust current and upcoming Let's Encrypt intermediate certificates
      • Add current and upcoming Let's Encrypt intermediate certificates
      • Remove AddTrust_External_Root.pem from our website CA bundle (refs: #11811).
    • Upgrade Linux to 5.9.15-1~bpo10+1 (stable branch) (zerotracepen/zerotracepen!325)

      Closes issues:

      • Upgrade to Linux 5.9.15 (zerotracepen/zerotracepen#18104)
      • Install Intel SOF Firmware and Topology binaries from Debian
        (zerotracepen/zerotracepen#18096)
      • USB tethering is broken with iOS 14 => Need kernel upgrade (zerotracepen/zerotracepen#18097)

      Commits:

      • Refresh uBlock patch
      • Install Intel SOF Firmware and Topology binaries from Debian
      • Upgrade Linux to 5.9.15-1~bpo10+1
      • Update APT snapshot for the "debian" archive to 2021011501
    • Upgrade firmware-linux to 20201218-1

    • Migrate blueprints to GitLab wiki (zerotracepen/zerotracepen!323)

    • Fix stream isolation test suite after !306 (zerotracepen/zerotracepen!319)

      Closes issues:

      • Test suite: update wrt. recent htpdate changes (zerotracepen/zerotracepen#18095)

      Commits:

      • fix stream isolation test suite after !306
    • Refresh uBlock patch to fix devel branch FTBFS (zerotracepen/zerotracepen!318)

      Commits:

      • Refresh uBlock patch
    • Test suite: improve error reporting for GuestFS problems and user mistakes
      (zerotracepen/zerotracepen!317)

      Commits:

      • Test suite: error out early if images to be tested are directories
      • Test suite: log all guestfs events, not only "trace" level messages
    • Make 'Upgrading the system' dialog appear faster (zerotracepen/zerotracepen!316)

      Closes issues:

      • Make "Upgrading the system" dialog appear faster (zerotracepen/zerotracepen#18051)

      Commits:

      • Upgrader test suite: adjust to match UI changes
      • Warn in advance about the network connection being disabled (#18051)
      • Avoid ambiguous future tense
      • Lint.
      • Upgrader: don't declare variable in conditional statement
      • Upgrader: adjust test suite to user interaction changes
      • Fix typo
      • Make 'Upgrading the system' dialog appear faster
    • Make writing Zero Trace Pen.module more robust (zerotracepen/zerotracepen!315)

      Closes issues:

      • Make writing Zero Trace Pen.module more robust (zerotracepen/zerotracepen#17906)

      Commits:

      • Make writing Zero Trace Pen.module more robust
    • Fix support for Ledger hardware wallet, by upgrading python3-btchip
      (zerotracepen/zerotracepen!313)

      Closes issues:

      • "No hardware device detected" with Ledger Nano S wallet in Electrum
        (zerotracepen/zerotracepen#18080)

      Commits:

      • Fix support for Ledger hardware wallet, by upgrading python3-btchip
    • Test expiration date for all keys trusted by APT (zerotracepen/zerotracepen!310)

      Closes issues:

      • Test expiration date for all keys trusted by APT (zerotracepen/zerotracepen#18094)

      Commits:

      • Test suite: improve Gherkin phrasing
      • Test suite: check expiration date for all trusted APT keys
    • Log more info upon curl failure in htpdate (zerotracepen/zerotracepen!306)

      Commits:

      • htpdate: make output more useful on name resolution errors
      • htpdate: include stdout and stderr of curl(1) upon failure
      • htpdate: remove misleading comment
    • Clarify that this message is about the size of the USB stick (#18073)
      (zerotracepen/zerotracepen!305)

      Closes issues:

      • Improve error message when the USB stick is too small (zerotracepen/zerotracepen#18073)

      Commits:

      • Add comment to explain the unit being used
      • Display too small boot device size in GB, not GiB
      • Display too small boot device size with 1 digit of precision after the decimal
        point
      • Make displayed number and unit match
      • Only use variable after we've assigned it a value
      • Clarify that this message is about the size of the USB stick (#18073)
    • Thunderbird: drop obsolete patch. (zerotracepen/zerotracepen!304)

      Commits:

      • Thunderbird: drop obsolete patch.
    • Make build reproducibility verification easier (zerotracepen/zerotracepen!303)

      Commits:

      • Don't trust any random key that has a UID which contains "deb.zerotracepen.boum.org"
      • Make formatting consistent with other command lines
      • Minor rephrasing
      • Fix typo
      • Use numbered list: order matters
      • Reorder instructions to avoid a step essentially depend on the next one
      • contribute/build.mdwn: add instruction for importing deb.zerotracepen.boum.org key
      • release_process/test/reproducibility.mdwn: add -p to mkdir
      • Rakefile: add option to scp to disable agent
    • Test suite: differentiate between tordate and htpdate errors (zerotracepen/zerotracepen!295)

      Commits:

      • Test suite: split exception.
      • Test suite: use more specific exception.
      • We can have TimeSyncingError due to tordate, so no htpdate log exists.
      • Rename variable and rearrange code to fix scoping issues.
      • Test suite: differentiate between tordate and htpdate errors.
    • Add "Don't Show Again" button to the notification when starting Zero Trace Pen in a VM
      (zerotracepen/zerotracepen!284)

      Closes issues:

      • Add "Don't Show Again" button to notifications where appropriate
        (zerotracepen/zerotracepen#10553)

      Commits:

      • swap buttons in zerotracepen-virt-notify-user
      • Refresh translations.
      • zerotracepen-documentation: drop yelp dependency.
      • Revert "Patch libdesktop-notify-perl to accept an array ref for actions."
      • zerotracepen-documentation: let Gnome start Tor Browser so it can quit.
      • zerotracepen-virt-notify-user: port form Perl to Python.
      • Simply
      • Improve button labels
      • Apply 1 suggestion(s) to 1 file(s)
      • Apply 1 suggestion(s) to 1 file(s)
      • zerotracepen-virt-notify-user: make action IDs globally unique again.
      • Simplify.
      • zerotracepen-virt-notify-user: make action buttons ordering deterministic.
      • Patch libdesktop-notify-perl to accept an array ref for actions.
      • live-persist: always enable support for "Don't ask again" (refs: #10553).
      • zerotracepen-virt-notify-user: only show "Don't ask again" if feature is available
        (refs: #10553).
      • zerotracepen-virt-notify-user: add "Don't ask again" button PoC (refs: #10553).
      • Add tooling for "Don't ask me again" feature for notifications etc.