zerotracepen (5.15)

  • Resolve "Upgrade Tor Browser to 12.5.1" (zerotracepen/zerotracepen!1195)

    Closes issues:

    • Upgrade Tor Browser to 12.5.1 (zerotracepen/zerotracepen#19724)

    Commits:

    • Fetch Tor Browser from our own archive
    • Upgrade Tor Browser to 12.5.1-build1
    • onion-grater: fix the stream ownership check (zerotracepen/zerotracepen!1184)

    Closes issues:

    • onion-grater stream ownership check is very buggy resulting in restrict-stream-
      events being broken (zerotracepen/zerotracepen#19741)

    Commits:

    • spare typing
    • turn on debug automatically based on cmdline
    • no stream belongs to pid-based matching
    • onion-grater: log events dropped by restrict-stream-events
    • onion-grater: only use address comparison for event ownership
    • Test suite: test that Tor Browser's circuit view is working
    • Upgrade Tor Browser to 12.5-build2
    • Test suite: wait longer for Unsafe Browser's zenity dialogs
    • Browsers: deal with another extension directory from TBB 12.5 (refs:
      zerotracepen/zerotracepen#19724)
    • Browsers: update to new fontconfig path for Tor Browser 12.5 (refs
      zerotracepen/zerotracepen#19742)
    • Test suite: remove useless torified_browsing.rb
    • Test suite: adapt test to Tor Browser's new file download UX (refs:
      zerotracepen/zerotracepen#19724)
    • Test suite: embed old image next to match in automatic image bumping mode
    • Defer lyrebird → obfs4proxy renaming
    • Upgrade Tor Browser to 12.5.0-build1 (refs: zerotracepen/zerotracepen#19724)
    • Browsers: add new locales supported by Tor Browser 12.5 (refs:
      zerotracepen/zerotracepen#19724)
    • Upgrade Tor Browser to 12.5a7 (refs: zerotracepen/zerotracepen#19724)
    • onion-grater: fix the stream ownership check (refs: zerotracepen/zerotracepen#19741)
    • Upgrade Tor Browser to 12.5 (zerotracepen/zerotracepen!1182)

    Commits:

    • Upgrade Tor Browser to 12.5-build2
    • Test suite: wait longer for Unsafe Browser's zenity dialogs
    • Browsers: deal with another extension directory from TBB 12.5 (refs:
      zerotracepen/zerotracepen#19724)
    • Browsers: update to new fontconfig path for Tor Browser 12.5 (refs
      zerotracepen/zerotracepen#19742)
    • Test suite: remove useless torified_browsing.rb
    • Test suite: adapt test to Tor Browser's new file download UX (refs:
      zerotracepen/zerotracepen#19724)
    • Test suite: embed old image next to match in automatic image bumping mode
    • Defer lyrebird → obfs4proxy renaming
    • Upgrade Tor Browser to 12.5.0-build1 (refs: zerotracepen/zerotracepen#19724)
    • Browsers: add new locales supported by Tor Browser 12.5 (refs:
      zerotracepen/zerotracepen#19724)
    • Upgrade Tor Browser to 12.5a7 (refs: zerotracepen/zerotracepen#19724)
    • Test suite: avoid writing to script while it may be executing
      (zerotracepen/zerotracepen!1189)

    Closes issues:

    • "Scenario: I can use a network with captive portal" frequently fails: OSError:
      [Errno 26] Text file busy: '/etc/NetworkManager/dispatcher.d/00-firewall.sh'
      (RemoteShell::ServerFailure) (zerotracepen/zerotracepen#19736)

    Commits:

    • Test suite: avoid writing to script while it may be executing
    • Release calendar available from website (zerotracepen/zerotracepen!1188)

    Commits:

    • Apply 2 suggestion(s) to 2 file(s)
    • update instructions for updating calendar
    • contribute/calendar points to actual calendar
    • Revert "Remove our public calendar"
    • tps: Fix LUKS upgraded each boot on some systems (zerotracepen/zerotracepen!1181)

    Closes issues:

    • Persistent Storage upgraded on every login (zerotracepen/zerotracepen#19734)

    Commits:

    • tps: add more debug logging for #19728 and #19734
    • tps: calculate available RAM just as cryptsetup does in is_upgraded()
    • reports memory and cpu, too
    • include information about disks
    • Whisperback: more usb information
    • decrease the argon2id minimum memory requirement
    • debug memory cost
    • make debug-for-5.15 expire automatically
    • Enable debug logging in the tps backend by default
    • tps: clarify the whole situation around create() using a lower PBDKF memory
      cost that we fix with an upgrade at next boot
    • tps: use constant instead of magic number
    • tps: also set --pbkdf-force-iterations when createing a new volume
    • tps: Fix LUKS upgraded each boot on some systems
    • Test suite: Fix flaky step "the displayed clock is less than (\d+) minutes
      incorrect" (zerotracepen/zerotracepen!1180)

    Closes issues:

    • Flaky test "the displayed clock is less than (\d+) minutes incorrect"
      (zerotracepen/zerotracepen#19727)

    Commits:

    • Run rubocop
    • Test suite: Fix flaky step "the displayed clock is less than (\d+) minutes
      incorrect"
    • Test suite: Fix usage of backslashes in arguments to Dogtail
    • Support authenticated v3 Onion Services in Tor Browser (zerotracepen/zerotracepen!1160)

    Closes issues:

    • Support authenticated v3 Onion Services in Tor Browser (zerotracepen/zerotracepen#17816)

    Commits:

    • Revert bits about persistent onion auth keys
    • Tor Browser: hide UI related to persisting onion auth keys
    • Tor Browser: also allow viewing and removing onion auth keys.
    • ONION_CLIENT_AUTH_ADD must take arguments.
    • Use upper case as we normally do.
    • Tor: enable ClientOnionAuthDir to be able to remember onion auth keys (refs:
      zerotracepen/zerotracepen#17816)
    • Onion Grater: update Tor Browser to allow onion authentication (refs:
      zerotracepen/zerotracepen#17816)
    • Tor: enable ExtendedErrors for Tor Browser's SocksPort
    • Welcome Screen: Bump UpgradeLUKS timeout to 240s (zerotracepen/zerotracepen!1190)

    Commits:

    • workaround for zerotracepen#19871
    • Welcome Screen: Bump UpgradeLUKS timeout to 240s
    • Upgrade to Linux 6.1.37-1 (zerotracepen/zerotracepen!1196)

    Closes issues:

    • Install the Linux kernel from Bookworm (zerotracepen/zerotracepen#19669)
    • Upgrade to Linux 6.1.37-1 (zerotracepen/zerotracepen#19670)

    Commits:

    • Document workaround
    • Fix heading level
    • Update the snapshot of the Debian archive to 2023070701
    • Upgrade to Linux 6.1.37-1 from bookworm-security
    • Stop tracking sid when we can get the package we want from Bookworm
    • APT: add fallback pinning for Debian-Security
    • APT: add Bookworm sources
    • automailer parsing fixed (zerotracepen/zerotracepen!1193)

    Commits:

    • simpler and more effective body parsing
    • zerotracepen-installer open wrong URI (zerotracepen/zerotracepen!1191)

    Closes issues:

    • Honor the "debug" kernel cmdline option in Zero Trace Pen Installer (zerotracepen/zerotracepen#12396)
    • Zero Trace Pen Installer open wrong documentation URI (zerotracepen/zerotracepen#19870)

    Commits:

    • rename function to reflect what it does
    • verbose is explicitly disabled
    • doctest clarifies
    • zerotracepen-documentation de-localize input links
    • zerotracepen-documentation supports URLs as arguments
    • zerotracepen-documentation --dry-run
    • zerotracepen-installer honors debug cmdline
    • refactor debug activation in zerotracepen installer
    • Fix gitlab-triage-post-release (zerotracepen/zerotracepen!1186)

    Closes issues:

    • Multiple failures in gitlab-triage-post-release (zerotracepen/zerotracepen#19723)

    Commits:

    • prevent running with unset variables
    • let's ignore milestone.due_date
    • expand yaml alias
    • onion-grater: fix getinfo circuit-status leak (zerotracepen/zerotracepen!1185)

    Closes issues:

    • onion-grater leaks info about unassociated circuits to Tor Browser
      (zerotracepen/zerotracepen#19740)

    Commits:

    • onion-grater: refactor
    • onion-grater: add comments per reviewer request
    • onion-grater: log events dropped by restrict-stream-events
    • onion-grater: only use address comparison for event ownership
    • Test suite: test that Tor Browser's circuit view is working
    • WIP fix for refs: zerotracepen/zerotracepen#19740
    • onion-grater: fix the stream ownership check (refs: zerotracepen/zerotracepen#19741)
    • TCA: Fix error not displayed after QR code scanning failure (zerotracepen/zerotracepen!1183)

    Closes issues:

    • Error not displayed after QR code scanning failure: "TypeError: 'dict' object
      is not callable" for "_" (zerotracepen/zerotracepen#19737)

    Commits:

    • TCA: Fix error not displayed after QR code scanning failure
    • Replace connect-drop executable (zerotracepen/zerotracepen!1177)

    Commits:

    • simplify --debug handling
    • fix: forward INHERIT_FD to zerotracepen-installer
    • get env var: raise if not present
    • fix: forward INHERIT_FD to tps-frontend
    • Fix python3-gi missing in test-zerotracepenlib job
    • connect-socket: Use parser default value for --debug option
    • Inline connect-drop-zerotracepen-installer in zerotracepen-installer
    • Inline connect-drop-tps in zerotracepen-persistent-storage
    • Replace connect-drop with connect-socket
    • run-tca-in-netns: Support setting logging level to debug
    • tps-frontend: Fix comment
    • Welcome Screen: Fix search (zerotracepen/zerotracepen!1176)

    Closes issues:

    • Improve search in language and keyboard selection widgets (zerotracepen/zerotracepen#19200)

    Commits:

    • Welcome Screen: Also search the language code
    • Welcome Screen: Support multiple search strings
    • Welcome Screen: Fix search
    • post-RM doc updates (zerotracepen/zerotracepen!1174)

    Commits:

    • use automailer at least once in the doc
    • notmuch supported
    • make sending emails easier multi-MUA
    • blog.torproject.org: link to old MR
    • let's validate using check-po-msgfmt, too
    • I just want to copy-paste
    • discard non-diff lines
    • more readable output
    • Rename tps executables (zerotracepen/zerotracepen!1172)

    Closes issues:

    • Rename tps to tpsd (zerotracepen/zerotracepen#19430)

    Commits:

    • Rename tps -> tpsd
    • Rename tps-frontend-wrapper -> zerotracepen-persistent-storage
    • tps: Rename mount -> binding (zerotracepen/zerotracepen!1171)

    Closes issues:

    • Use the term "binding" instead of "mount" in tps backend code
      (zerotracepen/zerotracepen#19721)

    Commits:

    • Update PO files.
    • tps: Rename mount -> binding
    • tps: Make sure that the header correctly unlocks the partition
      (zerotracepen/zerotracepen!1167)

    Closes issues:

    • Investigate LUKS header restore failure (zerotracepen/zerotracepen#19718)

    Commits:

    • tps: Fix error case in which LUKS header backup is not restored
    • tps: Fix comments
    • tps: Fix typo
    • tps: Remove unused imports
    • tps: Remove unused D-Bus method TestPassphrase
    • tps: Don't include UUID in LUKS header backup path
    • tps: Make sure that the header correctly unlocks the partition
    • Dogtail: re-enable showingOnly by default (zerotracepen/zerotracepen!1166)

    Closes issues:

    • Re-enable showingOnly by default in the test suite (zerotracepen/zerotracepen#19717)

    Commits:

    • Test suite: fix another Dogtail configuration issue
    • Test suite: simplify
    • Test suite: deal with test relying on showingOnly not being enabled
    • Test suite: drop useless require
    • Test suite: deal with test relying on showingOnly not being enabled
    • Test suite: actually "simulate" a failing connection during time sync
    • Test suite: drop all explicit showingOnly: true arguments
    • Dogtail: disable debugging output
    • Dogtail: enable showingOnly by default (refs: zerotracepen/zerotracepen#19771)
    • test: user can install w/o cloning (zerotracepen/zerotracepen!1165)

    Closes issues:

    • Zero Trace Pen Installer: test that the user can install without cloning
      (zerotracepen/zerotracepen#19716)

    Commits:

    • rename scenarios consistently
    • remove useless step
    • Apply 1 suggestion(s) to 1 file(s)
    • test: user can install w/o cloning
    • Upgrade Linux on devel branch to 6.1.27-1 (zerotracepen/zerotracepen!1151)

    Commits:

    • Upgrade to Linux 6.1.27-1 (devel branch)
    • Display the Zero Trace Pen version in the boot loader entry (zerotracepen/zerotracepen!1137)

    Closes issues:

    • Display the Zero Trace Pen version number during boot (Boot Loader Menu or Welcome
      Screen) (zerotracepen/zerotracepen#16796)

    Commits:

    • Display the Zero Trace Pen version number in all GRUB menu entries
    • Add comment
    • Display the Zero Trace Pen version in the boot loader entry