zerotracepen (4.17)

  • Upgrade Thunderbird to 78.8.0-1~deb10u1

    • Upgrade Tor Browser to 10.0.14-build1 (zerotracepen/zerotracepen!382)

    Commits:

    • Upgrade Tor Browser to 10.0.14-build1.
    • Upgrade tor to 0.4.5.7 (zerotracepen/zerotracepen!380)

    Closes issues:

    • Upgrade tor to 0.4.5.7 (zerotracepen/zerotracepen#18244)

    Commits:

    • Upgrade tor to 0.4.5.7
    • Retry failed upgrade downloads, reusing the previously downloaded data, and
      fallback to the DNS mirror pool (zerotracepen/zerotracepen!379)

    Closes issues:

    • Make it possible to resume an automatic upgrade download (zerotracepen/zerotracepen#15875)
    • Make Zero Trace Pen Upgrader resilient to broken mirrors (zerotracepen/zerotracepen#17615)

    Commits:

    • Zero Trace Pen::IUK::TargetFile::Download: always disable exponential backoff when
      running tests
    • Zero Trace Pen::IUK::LWP::UserAgent::WithProgress: display correct progress status when
      resuming a previously failed download
    • Give Zero Trace Pen::IUK::LWP::UserAgent::WithProgress information that it'll need
    • Refactoring: make temp_file an attribute
    • Refactoring: use more meaningful variable name and document what value it holds
    • GitLab CI: disable test that now requires systemd
    • Retry failed upgrade downloads, reusing the previously downloaded data, and
      fallback to the DNS mirror pool
    • Upgrader hardening: comment out sudo env_keep settings that are not needed in
      production
    • Zero Trace Pen::Download::HTTPS hardening: drop support for SSL_NO_VERIFY
    • Upgrader test suite: remove useless Win32 support code
    • Repair the filesystem on the system partition and avoid breaking it in the
      first place (zerotracepen/zerotracepen!374)

    Closes issues:

    • Deleted obsolete automatic upgrades still occupy disk space ⇒ no automatic
      upgrade possible after a while (zerotracepen/zerotracepen#17902)

    Commits:

    • On boot, repair the filesystem on the system partition
    • Refactoring: move repartitioning code to a function
    • Unmount the system partition on shutdown
    • Upgrade GRUB2 to 2.04-16+ (zerotracepen/zerotracepen!372)

    Closes issues:

    • Upgrade GRUB2 to 2.04-16+ (zerotracepen/zerotracepen#18227)
    • devel branch FTBFS with uBlock 1.33.0+dfsg-1 (zerotracepen/zerotracepen#18191)

    Commits:

    • Bump snapshots of the Debian APT archive to 2021030401
    • Upgrade non-free Linux firmware to 20210208-3 (zerotracepen/zerotracepen!371)

    Closes issues:

    • Upgrade non-free Linux firmware to 20210208-3+ (zerotracepen/zerotracepen#18226)
    • devel branch FTBFS with uBlock 1.33.0+dfsg-1 (zerotracepen/zerotracepen#18191)

    Commits:

    • Revert "Temporarily install the kernel from Bullseye"
    • Refresh uBlock patch
    • Bump snapshots of the Debian APT archive to 2021030101
    • Test suite: relax delay for OpenPGP future expiration date (zerotracepen/zerotracepen!370)

    Commits:

    • Test suite: relax delay for OpenPGP future expiration date
    • Improve security advisory since they don't list vulnerabilities anymore
      (zerotracepen/zerotracepen!369)

    Commits:

    • Help people find the information on their own (#18221)
    • Remove not-so-helpful TOC
    • Simplify and reuse the same wording
    • Don't make people click for nothing (#18221)
    • Clarify error message when starting the Unsafe Browser while offline
      (zerotracepen/zerotracepen!367)

    Closes issues:

    • Clarify error message when the Unsafe Browser was launched without network
      connection (zerotracepen/zerotracepen#12251)

    Commits:

    • Test suite: update to match UI change
    • Clarify error message when starting offline (#12251)
    • Release process: add po4a version sanity checks (zerotracepen/zerotracepen!364)

    Commits:

    • Release process: ensure the RM has the correct version of po4a
    • Upgrade our production and test-only tor configuration (zerotracepen/zerotracepen!363)

    Closes issues:

    • Upgrade our production and test-only tor configuration (zerotracepen/zerotracepen#18216)

    Commits:

    • Test suite: bump PathsNeededToBuildCircuits to 0.67, like Chutney
    • Test suite: drop "TestingBridgeDownloadInitialDelay" customization
    • Test suite: drop "DownloadInitialDelay" testing options that we set to their
      default value
    • Test suite: drop unused second argument for the "DownloadInitialDelay" tor
      testing options
    • Test suite: use the new "DownloadInitialDelay" names for the "DownloadSchedule"
      tor testing options
    • torrc: drop obsolete WarnUnsafeSocks setting
    • torrc: migrate from deprecated {Control,Trans}ListenAddress to
      {Control,Trans}Port address syntax
    • Upgrade tor to 0.4.5.6 (zerotracepen/zerotracepen!361)

    Commits:

    • run_test_suite: abort if the host system's tor is too old
    • Test suite setup doc: ensure we have a recent enough tor
    • Test suite setup doc: update APT pinning to support current QEMU backport
    • Upgrade tor to 0.4.5.6 final
    • Update uBlock Origin patch (zerotracepen/zerotracepen!354)

    Commits:

    • Refresh uBlock patch
    • Resolve "onion-grater race condition" (zerotracepen/zerotracepen!345)

    Closes issues:

    • onion-grater race condition (zerotracepen/zerotracepen#18123)

    Commits:

    • whitespace
    • onioncircuits: longer options are more readable
    • zerotracepen-create-netns: more consistent style
    • zerotracepen-create-netns: avoid bashisms
    • a11y-proxy-netns: explain behavior with comments
    • review tips: is_veth_nic is more readable
    • review tips: clearer behaviour
    • Remove another remain from the reverted TBB experiment.
    • veth exclusion: log to debug
    • don't spoof veth interfaces
    • a11y proxy now can be passed to the right netns
    • onioncircuits is accessible!
    • small cleanup to zerotracepenlib.gnome
    • really: let's forget about TBB and its netns
    • Let's forget about TBB in its netns
    • get_all_ethernet_nics behave even if no real eth
    • update design doc for netns improvements
    • test: tor can bind a non-127.0.0.1 port
    • FIX helper lib to recognize veth appropriately
    • better wording
    • zerotracepen-documentation: fixed when Tor is not ready
    • sudo tor-browser allowed
    • FIX service: run before network.target
    • we need veth: don't blacklist it, it's harmless
    • /stop zerotracepen-create-netns service can stop
    • FIX zerotracepen-create-netns.service
    • TBB: changed onion-grater
    • TBB works + port 9150 drop
    • netns: firewall configuration moved to ferm
    • configure tor and ferm for TBB netns address
    • zerotracepen-create-netns is a systemd.service
    • onion-grater whitelisted in sane_defaults
    • onioncircuits profile adapted to netns
    • onioncircuits wrapper to use netns
    • still a draft, but at least tidier
    • DRAFT of network namespace support
    • Test suite: disable sound forwarding to host (zerotracepen/zerotracepen!333)

    Closes issues:

    • Test suite: consider disabling SPICE audio (zerotracepen/zerotracepen#18122)

    Commits:

    • Test suite: disable sound forwarding to host (Closes: #18122)
Made with ProductLift