zerotracepen (4.17)

  • Upgrade Thunderbird to 78.8.0-1~deb10u1

    • Upgrade Tor Browser to 10.0.14-build1 (zerotracepen/zerotracepen!382)

      Commits:

      • Upgrade Tor Browser to 10.0.14-build1.

    • Upgrade tor to 0.4.5.7 (zerotracepen/zerotracepen!380)

      Closes issues:

      • Upgrade tor to 0.4.5.7 (zerotracepen/zerotracepen#18244)

      Commits:

      • Upgrade tor to 0.4.5.7

    • Retry failed upgrade downloads, reusing the previously downloaded data, and
      fallback to the DNS mirror pool (zerotracepen/zerotracepen!379)

      Closes issues:

      • Make it possible to resume an automatic upgrade download (zerotracepen/zerotracepen#15875)
      • Make Zero Trace Pen Upgrader resilient to broken mirrors (zerotracepen/zerotracepen#17615)

      Commits:

      • Zero Trace Pen::IUK::TargetFile::Download: always disable exponential backoff when
        running tests
      • Zero Trace Pen::IUK::LWP::UserAgent::WithProgress: display correct progress status when
        resuming a previously failed download
      • Give Zero Trace Pen::IUK::LWP::UserAgent::WithProgress information that it'll need
      • Refactoring: make temp_file an attribute
      • Refactoring: use more meaningful variable name and document what value it holds
      • GitLab CI: disable test that now requires systemd
      • Retry failed upgrade downloads, reusing the previously downloaded data, and
        fallback to the DNS mirror pool
      • Upgrader hardening: comment out sudo env_keep settings that are not needed in
        production
      • Zero Trace Pen::Download::HTTPS hardening: drop support for SSL_NO_VERIFY
      • Upgrader test suite: remove useless Win32 support code

    • Repair the filesystem on the system partition and avoid breaking it in the
      first place (zerotracepen/zerotracepen!374)

      Closes issues:

      • Deleted obsolete automatic upgrades still occupy disk space ⇒ no automatic
        upgrade possible after a while (zerotracepen/zerotracepen#17902)

      Commits:

      • On boot, repair the filesystem on the system partition
      • Refactoring: move repartitioning code to a function
      • Unmount the system partition on shutdown

    • Upgrade GRUB2 to 2.04-16+ (zerotracepen/zerotracepen!372)

      Closes issues:

      • Upgrade GRUB2 to 2.04-16+ (zerotracepen/zerotracepen#18227)
      • devel branch FTBFS with uBlock 1.33.0+dfsg-1 (zerotracepen/zerotracepen#18191)

      Commits:

      • Bump snapshots of the Debian APT archive to 2021030401

    • Upgrade non-free Linux firmware to 20210208-3 (zerotracepen/zerotracepen!371)

      Closes issues:

      • Upgrade non-free Linux firmware to 20210208-3+ (zerotracepen/zerotracepen#18226)
      • devel branch FTBFS with uBlock 1.33.0+dfsg-1 (zerotracepen/zerotracepen#18191)

      Commits:

      • Revert "Temporarily install the kernel from Bullseye"
      • Refresh uBlock patch
      • Bump snapshots of the Debian APT archive to 2021030101

    • Test suite: relax delay for OpenPGP future expiration date (zerotracepen/zerotracepen!370)

      Commits:

      • Test suite: relax delay for OpenPGP future expiration date

    • Improve security advisory since they don't list vulnerabilities anymore
      (zerotracepen/zerotracepen!369)

      Commits:

      • Help people find the information on their own (#18221)
      • Remove not-so-helpful TOC
      • Simplify and reuse the same wording
      • Don't make people click for nothing (#18221)

    • Clarify error message when starting the Unsafe Browser while offline
      (zerotracepen/zerotracepen!367)

      Closes issues:

      • Clarify error message when the Unsafe Browser was launched without network
        connection (zerotracepen/zerotracepen#12251)

      Commits:

      • Test suite: update to match UI change
      • Clarify error message when starting offline (#12251)

    • Release process: add po4a version sanity checks (zerotracepen/zerotracepen!364)

      Commits:

      • Release process: ensure the RM has the correct version of po4a

    • Upgrade our production and test-only tor configuration (zerotracepen/zerotracepen!363)

      Closes issues:

      • Upgrade our production and test-only tor configuration (zerotracepen/zerotracepen#18216)

      Commits:

      • Test suite: bump PathsNeededToBuildCircuits to 0.67, like Chutney
      • Test suite: drop "TestingBridgeDownloadInitialDelay" customization
      • Test suite: drop "DownloadInitialDelay" testing options that we set to their
        default value
      • Test suite: drop unused second argument for the "DownloadInitialDelay" tor
        testing options
      • Test suite: use the new "DownloadInitialDelay" names for the "DownloadSchedule"
        tor testing options
      • torrc: drop obsolete WarnUnsafeSocks setting
      • torrc: migrate from deprecated {Control,Trans}ListenAddress to
        {Control,Trans}Port address syntax

    • Upgrade tor to 0.4.5.6 (zerotracepen/zerotracepen!361)

      Commits:

      • run_test_suite: abort if the host system's tor is too old
      • Test suite setup doc: ensure we have a recent enough tor
      • Test suite setup doc: update APT pinning to support current QEMU backport
      • Upgrade tor to 0.4.5.6 final

    • Update uBlock Origin patch (zerotracepen/zerotracepen!354)

      Commits:

      • Refresh uBlock patch

    • Resolve "onion-grater race condition" (zerotracepen/zerotracepen!345)

      Closes issues:

      • onion-grater race condition (zerotracepen/zerotracepen#18123)

      Commits:

      • whitespace
      • onioncircuits: longer options are more readable
      • zerotracepen-create-netns: more consistent style
      • zerotracepen-create-netns: avoid bashisms
      • a11y-proxy-netns: explain behavior with comments
      • review tips: is_veth_nic is more readable
      • review tips: clearer behaviour
      • Remove another remain from the reverted TBB experiment.
      • veth exclusion: log to debug
      • don't spoof veth interfaces
      • a11y proxy now can be passed to the right netns
      • onioncircuits is accessible!
      • small cleanup to zerotracepenlib.gnome
      • really: let's forget about TBB and its netns
      • Let's forget about TBB in its netns
      • get_all_ethernet_nics behave even if no real eth
      • update design doc for netns improvements
      • test: tor can bind a non-127.0.0.1 port
      • FIX helper lib to recognize veth appropriately
      • better wording
      • zerotracepen-documentation: fixed when Tor is not ready
      • sudo tor-browser allowed
      • FIX service: run before network.target
      • we need veth: don't blacklist it, it's harmless
      • /stop zerotracepen-create-netns service can stop
      • FIX zerotracepen-create-netns.service
      • TBB: changed onion-grater
      • TBB works + port 9150 drop
      • netns: firewall configuration moved to ferm
      • configure tor and ferm for TBB netns address
      • zerotracepen-create-netns is a systemd.service
      • onion-grater whitelisted in sane_defaults
      • onioncircuits profile adapted to netns
      • onioncircuits wrapper to use netns
      • still a draft, but at least tidier
      • DRAFT of network namespace support

    • Test suite: disable sound forwarding to host (zerotracepen/zerotracepen!333)

      Closes issues:

      • Test suite: consider disabling SPICE audio (zerotracepen/zerotracepen#18122)

      Commits:

      • Test suite: disable sound forwarding to host (Closes: #18122)
Made with ProductLift