zerotracepen (5.15)

  • Resolve "Upgrade Tor Browser to 12.5.1" (zerotracepen/zerotracepen!1195)

    Closes issues:

    • Upgrade Tor Browser to 12.5.1 (zerotracepen/zerotracepen#19724)

    Commits:

    • Fetch Tor Browser from our own archive
    • Upgrade Tor Browser to 12.5.1-build1

    • onion-grater: fix the stream ownership check (zerotracepen/zerotracepen!1184)

      Closes issues:

      • onion-grater stream ownership check is very buggy resulting in restrict-stream-
        events being broken (zerotracepen/zerotracepen#19741)

      Commits:

      • spare typing
      • turn on debug automatically based on cmdline
      • no stream belongs to pid-based matching
      • onion-grater: log events dropped by restrict-stream-events
      • onion-grater: only use address comparison for event ownership
      • Test suite: test that Tor Browser's circuit view is working
      • Upgrade Tor Browser to 12.5-build2
      • Test suite: wait longer for Unsafe Browser's zenity dialogs
      • Browsers: deal with another extension directory from TBB 12.5 (refs:
        zerotracepen/zerotracepen#19724)
      • Browsers: update to new fontconfig path for Tor Browser 12.5 (refs
        zerotracepen/zerotracepen#19742)
      • Test suite: remove useless torified_browsing.rb
      • Test suite: adapt test to Tor Browser's new file download UX (refs:
        zerotracepen/zerotracepen#19724)
      • Test suite: embed old image next to match in automatic image bumping mode
      • Defer lyrebird → obfs4proxy renaming
      • Upgrade Tor Browser to 12.5.0-build1 (refs: zerotracepen/zerotracepen#19724)
      • Browsers: add new locales supported by Tor Browser 12.5 (refs:
        zerotracepen/zerotracepen#19724)
      • Upgrade Tor Browser to 12.5a7 (refs: zerotracepen/zerotracepen#19724)
      • onion-grater: fix the stream ownership check (refs: zerotracepen/zerotracepen#19741)

    • Upgrade Tor Browser to 12.5 (zerotracepen/zerotracepen!1182)

      Commits:

      • Upgrade Tor Browser to 12.5-build2
      • Test suite: wait longer for Unsafe Browser's zenity dialogs
      • Browsers: deal with another extension directory from TBB 12.5 (refs:
        zerotracepen/zerotracepen#19724)
      • Browsers: update to new fontconfig path for Tor Browser 12.5 (refs
        zerotracepen/zerotracepen#19742)
      • Test suite: remove useless torified_browsing.rb
      • Test suite: adapt test to Tor Browser's new file download UX (refs:
        zerotracepen/zerotracepen#19724)
      • Test suite: embed old image next to match in automatic image bumping mode
      • Defer lyrebird → obfs4proxy renaming
      • Upgrade Tor Browser to 12.5.0-build1 (refs: zerotracepen/zerotracepen#19724)
      • Browsers: add new locales supported by Tor Browser 12.5 (refs:
        zerotracepen/zerotracepen#19724)
      • Upgrade Tor Browser to 12.5a7 (refs: zerotracepen/zerotracepen#19724)

    • Test suite: avoid writing to script while it may be executing
      (zerotracepen/zerotracepen!1189)

      Closes issues:

      • "Scenario: I can use a network with captive portal" frequently fails: OSError:
        [Errno 26] Text file busy: '/etc/NetworkManager/dispatcher.d/00-firewall.sh'
        (RemoteShell::ServerFailure) (zerotracepen/zerotracepen#19736)

      Commits:

      • Test suite: avoid writing to script while it may be executing

    • Release calendar available from website (zerotracepen/zerotracepen!1188)

      Commits:

      • Apply 2 suggestion(s) to 2 file(s)
      • update instructions for updating calendar
      • contribute/calendar points to actual calendar
      • Revert "Remove our public calendar"

    • tps: Fix LUKS upgraded each boot on some systems (zerotracepen/zerotracepen!1181)

      Closes issues:

      • Persistent Storage upgraded on every login (zerotracepen/zerotracepen#19734)

      Commits:

      • tps: add more debug logging for #19728 and #19734
      • tps: calculate available RAM just as cryptsetup does in is_upgraded()
      • reports memory and cpu, too
      • include information about disks
      • Whisperback: more usb information
      • decrease the argon2id minimum memory requirement
      • debug memory cost
      • make debug-for-5.15 expire automatically
      • Enable debug logging in the tps backend by default
      • tps: clarify the whole situation around create() using a lower PBDKF memory
        cost that we fix with an upgrade at next boot
      • tps: use constant instead of magic number
      • tps: also set --pbkdf-force-iterations when createing a new volume
      • tps: Fix LUKS upgraded each boot on some systems

    • Test suite: Fix flaky step "the displayed clock is less than (\d+) minutes
      incorrect" (zerotracepen/zerotracepen!1180)

      Closes issues:

      • Flaky test "the displayed clock is less than (\d+) minutes incorrect"
        (zerotracepen/zerotracepen#19727)

      Commits:

      • Run rubocop
      • Test suite: Fix flaky step "the displayed clock is less than (\d+) minutes
        incorrect"
      • Test suite: Fix usage of backslashes in arguments to Dogtail

    • Support authenticated v3 Onion Services in Tor Browser (zerotracepen/zerotracepen!1160)

      Closes issues:

      • Support authenticated v3 Onion Services in Tor Browser (zerotracepen/zerotracepen#17816)

      Commits:

      • Revert bits about persistent onion auth keys
      • Tor Browser: hide UI related to persisting onion auth keys
      • Tor Browser: also allow viewing and removing onion auth keys.
      • ONION_CLIENT_AUTH_ADD must take arguments.
      • Use upper case as we normally do.
      • Tor: enable ClientOnionAuthDir to be able to remember onion auth keys (refs:
        zerotracepen/zerotracepen#17816)
      • Onion Grater: update Tor Browser to allow onion authentication (refs:
        zerotracepen/zerotracepen#17816)
      • Tor: enable ExtendedErrors for Tor Browser's SocksPort

    • Welcome Screen: Bump UpgradeLUKS timeout to 240s (zerotracepen/zerotracepen!1190)

      Commits:

      • workaround for zerotracepen#19871
      • Welcome Screen: Bump UpgradeLUKS timeout to 240s

    • Upgrade to Linux 6.1.37-1 (zerotracepen/zerotracepen!1196)

      Closes issues:

      • Install the Linux kernel from Bookworm (zerotracepen/zerotracepen#19669)
      • Upgrade to Linux 6.1.37-1 (zerotracepen/zerotracepen#19670)

      Commits:

      • Document workaround
      • Fix heading level
      • Update the snapshot of the Debian archive to 2023070701
      • Upgrade to Linux 6.1.37-1 from bookworm-security
      • Stop tracking sid when we can get the package we want from Bookworm
      • APT: add fallback pinning for Debian-Security
      • APT: add Bookworm sources

    • automailer parsing fixed (zerotracepen/zerotracepen!1193)

      Commits:

      • simpler and more effective body parsing

    • zerotracepen-installer open wrong URI (zerotracepen/zerotracepen!1191)

      Closes issues:

      • Honor the "debug" kernel cmdline option in Zero Trace Pen Installer (zerotracepen/zerotracepen#12396)
      • Zero Trace Pen Installer open wrong documentation URI (zerotracepen/zerotracepen#19870)

      Commits:

      • rename function to reflect what it does
      • verbose is explicitly disabled
      • doctest clarifies
      • zerotracepen-documentation de-localize input links
      • zerotracepen-documentation supports URLs as arguments
      • zerotracepen-documentation --dry-run
      • zerotracepen-installer honors debug cmdline
      • refactor debug activation in zerotracepen installer

    • Fix gitlab-triage-post-release (zerotracepen/zerotracepen!1186)

      Closes issues:

      • Multiple failures in gitlab-triage-post-release (zerotracepen/zerotracepen#19723)

      Commits:

      • prevent running with unset variables
      • let's ignore milestone.due_date
      • expand yaml alias

    • onion-grater: fix getinfo circuit-status leak (zerotracepen/zerotracepen!1185)

      Closes issues:

      • onion-grater leaks info about unassociated circuits to Tor Browser
        (zerotracepen/zerotracepen#19740)

      Commits:

      • onion-grater: refactor
      • onion-grater: add comments per reviewer request
      • onion-grater: log events dropped by restrict-stream-events
      • onion-grater: only use address comparison for event ownership
      • Test suite: test that Tor Browser's circuit view is working
      • WIP fix for refs: zerotracepen/zerotracepen#19740
      • onion-grater: fix the stream ownership check (refs: zerotracepen/zerotracepen#19741)

    • TCA: Fix error not displayed after QR code scanning failure (zerotracepen/zerotracepen!1183)

      Closes issues:

      • Error not displayed after QR code scanning failure: "TypeError: 'dict' object
        is not callable" for "_" (zerotracepen/zerotracepen#19737)

      Commits:

      • TCA: Fix error not displayed after QR code scanning failure

    • Replace connect-drop executable (zerotracepen/zerotracepen!1177)

      Commits:

      • simplify --debug handling
      • fix: forward INHERIT_FD to zerotracepen-installer
      • get env var: raise if not present
      • fix: forward INHERIT_FD to tps-frontend
      • Fix python3-gi missing in test-zerotracepenlib job
      • connect-socket: Use parser default value for --debug option
      • Inline connect-drop-zerotracepen-installer in zerotracepen-installer
      • Inline connect-drop-tps in zerotracepen-persistent-storage
      • Replace connect-drop with connect-socket
      • run-tca-in-netns: Support setting logging level to debug
      • tps-frontend: Fix comment

    • Welcome Screen: Fix search (zerotracepen/zerotracepen!1176)

      Closes issues:

      • Improve search in language and keyboard selection widgets (zerotracepen/zerotracepen#19200)

      Commits:

      • Welcome Screen: Also search the language code
      • Welcome Screen: Support multiple search strings
      • Welcome Screen: Fix search

    • post-RM doc updates (zerotracepen/zerotracepen!1174)

      Commits:

      • use automailer at least once in the doc
      • notmuch supported
      • make sending emails easier multi-MUA
      • blog.torproject.org: link to old MR
      • let's validate using check-po-msgfmt, too
      • I just want to copy-paste
      • discard non-diff lines
      • more readable output

    • Rename tps executables (zerotracepen/zerotracepen!1172)

      Closes issues:

      • Rename tps to tpsd (zerotracepen/zerotracepen#19430)

      Commits:

      • Rename tps -> tpsd
      • Rename tps-frontend-wrapper -> zerotracepen-persistent-storage

    • tps: Rename mount -> binding (zerotracepen/zerotracepen!1171)

      Closes issues:

      • Use the term "binding" instead of "mount" in tps backend code
        (zerotracepen/zerotracepen#19721)

      Commits:

      • Update PO files.
      • tps: Rename mount -> binding

    • tps: Make sure that the header correctly unlocks the partition
      (zerotracepen/zerotracepen!1167)

      Closes issues:

      • Investigate LUKS header restore failure (zerotracepen/zerotracepen#19718)

      Commits:

      • tps: Fix error case in which LUKS header backup is not restored
      • tps: Fix comments
      • tps: Fix typo
      • tps: Remove unused imports
      • tps: Remove unused D-Bus method TestPassphrase
      • tps: Don't include UUID in LUKS header backup path
      • tps: Make sure that the header correctly unlocks the partition

    • Dogtail: re-enable showingOnly by default (zerotracepen/zerotracepen!1166)

      Closes issues:

      • Re-enable showingOnly by default in the test suite (zerotracepen/zerotracepen#19717)

      Commits:

      • Test suite: fix another Dogtail configuration issue
      • Test suite: simplify
      • Test suite: deal with test relying on showingOnly not being enabled
      • Test suite: drop useless require
      • Test suite: deal with test relying on showingOnly not being enabled
      • Test suite: actually "simulate" a failing connection during time sync
      • Test suite: drop all explicit showingOnly: true arguments
      • Dogtail: disable debugging output
      • Dogtail: enable showingOnly by default (refs: zerotracepen/zerotracepen#19771)

    • test: user can install w/o cloning (zerotracepen/zerotracepen!1165)

      Closes issues:

      • Zero Trace Pen Installer: test that the user can install without cloning
        (zerotracepen/zerotracepen#19716)

      Commits:

      • rename scenarios consistently
      • remove useless step
      • Apply 1 suggestion(s) to 1 file(s)
      • test: user can install w/o cloning

    • Upgrade Linux on devel branch to 6.1.27-1 (zerotracepen/zerotracepen!1151)

      Commits:

      • Upgrade to Linux 6.1.27-1 (devel branch)

    • Display the Zero Trace Pen version in the boot loader entry (zerotracepen/zerotracepen!1137)

      Closes issues:

      • Display the Zero Trace Pen version number during boot (Boot Loader Menu or Welcome
        Screen) (zerotracepen/zerotracepen#16796)

      Commits:

      • Display the Zero Trace Pen version number in all GRUB menu entries
      • Add comment
      • Display the Zero Trace Pen version in the boot loader entry
Made with ProductLift