zerotracepen (4.15)

Upgrade Thunderbird to 1:78.6.0-1~deb10u1

• Upgrade Tor Browser to 10.0.9, based on Firefox 78.7 (zerotracepen/zerotracepen!331)

Closes issues:

• Upgrade Tor Browser to 10.0.9, based on Firefox 78.7 (zerotracepen/zerotracepen#18100)

Commits:

• Fetch Tor Browser from our own archive.
• Upgrade Tor Browser to 10.0.9-build2.

• Test suite: support path of tcpdump in current sid (zerotracepen/zerotracepen!328)

Closes issues:

• Test suite broken on current sid: "No such file or directory -
  /usr/sbin/tcpdump" (zerotracepen/zerotracepen#18126)

Commits:

• Test suite: support path of tcpdump in current sid

• Update CAs trusted to connect to our website (zerotracepen/zerotracepen!327)

Closes issues:

• Upgrader fails to check upgrades: CA changed for our website
  (zerotracepen/zerotracepen#18127)
• Remove AddTrust_External_Root.pem from our website CA bundle
  (zerotracepen/zerotracepen#11811)

Commits:

• Fix shell syntax
• Reference issue and add another related XXX
• Don't ship individual Let's Encrypt intermediate certificates files in the
  image
• Move Let's Encrypt intermediate certificates outside of the system-wide CA
  store
• Upgrader: trust current and upcoming Let's Encrypt intermediate certificates
• Add current and upcoming Let's Encrypt intermediate certificates
• Remove AddTrust_External_Root.pem from our website CA bundle (refs: #11811).

• Upgrade Linux to 5.9.15-1~bpo10+1 (stable branch) (zerotracepen/zerotracepen!325)

Closes issues:

• Upgrade to Linux 5.9.15 (zerotracepen/zerotracepen#18104)
• Install Intel SOF Firmware and Topology binaries from Debian
  (zerotracepen/zerotracepen#18096)
• USB tethering is broken with iOS 14 => Need kernel upgrade (zerotracepen/zerotracepen#18097)

Commits:

• Refresh uBlock patch
• Install Intel SOF Firmware and Topology binaries from Debian
• Upgrade Linux to 5.9.15-1~bpo10+1
• Update APT snapshot for the "debian" archive to 2021011501

• Upgrade firmware-linux to 20201218-1

• Migrate blueprints to GitLab wiki (zerotracepen/zerotracepen!323)

• Fix stream isolation test suite after !306 (zerotracepen/zerotracepen!319)

Closes issues:

• Test suite: update wrt. recent htpdate changes (zerotracepen/zerotracepen#18095)

Commits:

• fix stream isolation test suite after !306

• Refresh uBlock patch to fix devel branch FTBFS (zerotracepen/zerotracepen!318)

Commits:

• Refresh uBlock patch

• Test suite: improve error reporting for GuestFS problems and user mistakes
  (zerotracepen/zerotracepen!317)

Commits:

• Test suite: error out early if images to be tested are directories
• Test suite: log all guestfs events, not only "trace" level messages

• Make 'Upgrading the system' dialog appear faster (zerotracepen/zerotracepen!316)

Closes issues:

• Make "Upgrading the system" dialog appear faster (zerotracepen/zerotracepen#18051)

Commits:

• Upgrader test suite: adjust to match UI changes
• Warn in advance about the network connection being disabled (#18051)
• Avoid ambiguous future tense
• Lint.
• Upgrader: don't declare variable in conditional statement
• Upgrader: adjust test suite to user interaction changes
• Fix typo
• Make 'Upgrading the system' dialog appear faster

• Make writing Zero Trace Pen.module more robust (zerotracepen/zerotracepen!315)

Closes issues:

• Make writing Zero Trace Pen.module more robust (zerotracepen/zerotracepen#17906)

Commits:

• Make writing Zero Trace Pen.module more robust

• Fix support for Ledger hardware wallet, by upgrading python3-btchip
  (zerotracepen/zerotracepen!313)

Closes issues:

• "No hardware device detected" with Ledger Nano S wallet in Electrum
  (zerotracepen/zerotracepen#18080)

Commits:

• Fix support for Ledger hardware wallet, by upgrading python3-btchip

• Test expiration date for all keys trusted by APT (zerotracepen/zerotracepen!310)

Closes issues:

• Test expiration date for all keys trusted by APT (zerotracepen/zerotracepen#18094)

Commits:

• Test suite: improve Gherkin phrasing
• Test suite: check expiration date for all trusted APT keys

• Log more info upon curl failure in htpdate (zerotracepen/zerotracepen!306)

Commits:

• htpdate: make output more useful on name resolution errors
• htpdate: include stdout and stderr of curl(1) upon failure
• htpdate: remove misleading comment

• Clarify that this message is about the size of the USB stick (#18073)
  (zerotracepen/zerotracepen!305)

Closes issues:

• Improve error message when the USB stick is too small (zerotracepen/zerotracepen#18073)

Commits:

• Add comment to explain the unit being used
• Display too small boot device size in GB, not GiB
• Display too small boot device size with 1 digit of precision after the decimal
  point
• Make displayed number and unit match
• Only use variable after we've assigned it a value
• Clarify that this message is about the size of the USB stick (#18073)

• Thunderbird: drop obsolete patch. (zerotracepen/zerotracepen!304)

Commits:

• Thunderbird: drop obsolete patch.

• Make build reproducibility verification easier (zerotracepen/zerotracepen!303)

Commits:

• Don't trust any random key that has a UID which contains "deb.zerotracepen.boum.org"
• Make formatting consistent with other command lines
• Minor rephrasing
• Fix typo
• Use numbered list: order matters
• Reorder instructions to avoid a step essentially depend on the next one
• contribute/build.mdwn: add instruction for importing deb.zerotracepen.boum.org key
• release_process/test/reproducibility.mdwn: add -p to mkdir
• Rakefile: add option to scp to disable agent

• Test suite: differentiate between tordate and htpdate errors (zerotracepen/zerotracepen!295)

Commits:

• Test suite: split exception.
• Test suite: use more specific exception.
• We can have TimeSyncingError due to tordate, so no htpdate log exists.
• Rename variable and rearrange code to fix scoping issues.
• Test suite: differentiate between tordate and htpdate errors.

• Add "Don't Show Again" button to the notification when starting Zero Trace Pen in a VM
  (zerotracepen/zerotracepen!284)

Closes issues:

• Add "Don't Show Again" button to notifications where appropriate
  (zerotracepen/zerotracepen#10553)

Commits:

• swap buttons in zerotracepen-virt-notify-user
• Refresh translations.
• zerotracepen-documentation: drop yelp dependency.
• Revert "Patch libdesktop-notify-perl to accept an array ref for actions."
• zerotracepen-documentation: let Gnome start Tor Browser so it can quit.
• zerotracepen-virt-notify-user: port form Perl to Python.
• Simply
• Improve button labels
• Apply 1 suggestion(s) to 1 file(s)
• Apply 1 suggestion(s) to 1 file(s)
• zerotracepen-virt-notify-user: make action IDs globally unique again.
• Simplify.
• zerotracepen-virt-notify-user: make action buttons ordering deterministic.
• Patch libdesktop-notify-perl to accept an array ref for actions.
• live-persist: always enable support for "Don't ask again" (refs: #10553).
• zerotracepen-virt-notify-user: only show "Don't ask again" if feature is available
  (refs: #10553).
• zerotracepen-virt-notify-user: add "Don't ask again" button PoC (refs: #10553).
• Add tooling for "Don't ask me again" feature for notifications etc.