zerotracepen (6.2)

  • Upgrade to Tor Browser 13.0.14 based on 115.10 (zerotracepen/zerotracepen!1489)

    Closes issues:

    • Upgrade to Tor Browser 13.0.14 based on 115.10 (zerotracepen/zerotracepen#20330)

    Commits:

    • Add reference to which issue the Tor Browser upgrade is about
    • Upgrade Tor Browser to 13.0.14-build1 (refs: zerotracepen#20330)
    • Test suite: Adapt AppArmor regex for Linux 6.2+ (zerotracepen/zerotracepen!1461)

      Closes issues:

      • AppArmor regex in common_steps.rb soon to become obsolete (zerotracepen/zerotracepen#20277)

      Commits:

      • Drop unnecessary -E from grep's arguments
      • Test suite: Adapt AppArmor regex for Linux 6.2+
    • fixing linenumbers of ublock autoupdate patch (zerotracepen/zerotracepen!1485)

      Commits:

      • fixing linenumbers of ublock autoupdate patch
    • Test suite: Enter passphrase via Dogtail (zerotracepen/zerotracepen!1466)

      Closes issues:

      • Step 'I change the passphrase of the Persistent Storage back to the original'
        is fragile (zerotracepen/zerotracepen#20296)

      Commits:

      • Test suite: Enter passphrase via Dogtail
    • Fix scenario "I can launch various apps via GNOME Activities Overview"
      (zerotracepen/zerotracepen!1465)

      Closes issues:

      • Scenario "I can launch various apps via GNOME Activities Overview" is fragile
        (zerotracepen/zerotracepen#20295)

      Commits:

      • Test suite: Make closing window more robust
      • Test suite: Fix flaky step "I close the window via Alt+F4"
      • Test suite: Fix check if app was closed
      • Test suite: Fix some apps not closed in scenario
    • Disable magic SysRq hacks (zerotracepen/zerotracepen!1491)

      Closes issues:

      • Lock screen bypass via sysrq (zerotracepen/zerotracepen#20334)

      Commits:

      • Disable magic SysRq hacks
    • Resolve "Upgrade Linux to 6.1.85" (zerotracepen/zerotracepen!1490)

      Closes issues:

      • Upgrade Linux to 6.1.85 (zerotracepen/zerotracepen#20316)

      Commits:

      • upgrade to kernel 6.1.85
    • Hardening: Unconditionally disable Speculative Store Bypass (zerotracepen/zerotracepen!1488)

      Closes issues:

      • Improve protection against Spectre v4 with spec_store_bypass_disable=on
        (zerotracepen/zerotracepen#20335)

      Commits:

      • Hardening: Unconditionally disable Speculative Store Bypass
    • Resolve "Upgrade to tor 0.4.8.11" (zerotracepen/zerotracepen!1487)

      Closes issues:

      • Upgrade to tor 0.4.8.11 (zerotracepen/zerotracepen#20339)

      Commits:

      • upgrading tor
    • GitLab CI: Fix Ruff CI Job (again) (zerotracepen/zerotracepen!1486)

      Closes issues:

      • Ruff CI job still broken (zerotracepen/zerotracepen#20338)

      Commits:

      • GitLab CI: Fix bin/test-utils/ruff failing when no files were changed
      • GitLab CI: Fix Ruff CI Job (again)
    • zerotracepen-unblock-network: Skip all known non-network-related subsystems
      (zerotracepen/zerotracepen!1482)

      Closes issues:

      • No network when "udevadm settle" failed despite successful MAC spoofing
        (zerotracepen/zerotracepen#20045)

      Commits:

      • zerotracepen-unblock-network: Terminate udevadm trigger after 120 seconds
      • zerotracepen-unblock-network: Log the subsystem of all devices
      • zerotracepen-unblock-network: Don't skip rfkill subsystem
      • zerotracepen-unblock-network: Skip all known non-network-related subsystems
      • zerotracepen-unblock-network: Print which devices were triggered
      • zerotracepen-unblock-network: Call udevadm trigger just once
      • zerotracepen-unblock-network: Only wait for triggered udev events
      • zerotracepen-unblock-network: Only synchronize the relevant filesystem
      • Simplify zerotracepen-unblock-network
      • zerotracepen-unblock-network: Add shellcheck comment
    • tps-frontend: Fix and improve error dialog (zerotracepen/zerotracepen!1480)

      Closes issues:

      • tps-frontend: "Failed to set text" when formatting markup in error dialog
        (zerotracepen/zerotracepen#20328)

      Commits:

      • tps-frontend: Extract open_documentation function
      • tps-frontend: Hide unexpected error messages behind a "Dezerotracepen" expander
      • tps-frontend: Show error message if documentation can't be opened
      • tps-frontend: Escape error message for markup parser
    • Upgrader: make "Upgrade later" the default option (zerotracepen/zerotracepen!1478)

      Closes issues:

      • Make "Upgrade Later" the default option in the first popup of Zero Trace Pen Upgrader
        (zerotracepen/zerotracepen#20105)

      Commits:

      • Update alignment
      • Upgrader: make "Upgrade later" the default option
      • Upgrader: make dialog method support defaulting to cancel
    • List all languages that have at least 25% of strings translated on the Welcome
      Screen (zerotracepen/zerotracepen!1476)

      Closes issues:

      • Design and implement new criterion for listing languages in the Welcome Screen
        (zerotracepen/zerotracepen#20019)

      Commits:

      • Remove dead code
      • Delete PO files with invalid translations
      • Update PO files
      • Revert "generate-languages-list: workaround the fact we can't distinguish
        reviewed translations from non-reviewed ones"
      • import-translations: Import PO files that have at least 25% of strings
        translated
    • auto/config: don't set TAILS_GIT_BASE_COMMIT when building from tags
      (zerotracepen/zerotracepen!1475)

      Closes issues:

      • 6.1 not reproducible anymore (zerotracepen/zerotracepen#20311)

      Commits:

      • Consistently use spaces for indentation
      • auto/config: don't set TAILS_GIT_BASE_COMMIT when building from tags
    • Disable the NVIDIA shader cache in browsers and add explanations for browser
      environment variables (zerotracepen/zerotracepen!1472)

      Closes issues:

      • Consider disabling Nvidia shader cache (zerotracepen/zerotracepen#20278)

      Commits:

      • Point to the docs for more context.
      • Disable NVIDIA shader cache in browsers (refs: zerotracepen/zerotracepen#20278)
      • Document browser env vars we skip when syncing with start-browser
      • Add explanations for browser env vars from upstream start-browser that we do
        not set
      • Add explanations for browser environment variables
    • Test suite: make pause() verbosely run pry in the caller's context
      (zerotracepen/zerotracepen!1471)

      Closes issues:

      • Make pause() verbosely run pry in the caller's context (zerotracepen/zerotracepen#20305)

      Commits:

      • Appease rubocop
      • Test suite: add breakpoint alias for pause
      • Test suite: make pry quiet in the "I pause" step
      • Test suite: make pause() verbosely run pry in the caller's context
    • Test suite: support redefining steps during a run for development purposes
      (zerotracepen/zerotracepen!1470)

      Closes issues:

      • Support redefining steps during a run for development purposes
        (zerotracepen/zerotracepen#20304)

      Commits:

      • make rubocop happy
      • guard against unwanted redefinitions
      • Test suite: move patch code after guard
      • Appease rubocop
      • Test suite: make reload_code work in class contexts
      • Add another test suite hacking example
      • Test suite: simplify and fix issue with --guess
      • Appease rubocop
      • Test suite: remove scenario and step definitions used for experiment
      • Test suite: support redefining steps during a run for development purposes
      • Test suite: improve experiment on hot-reloading step definitions
      • Test suite: make --interactive-debuggin with for failures in @source-tagged
        scenarios
      • Test suite: experiments on hot-reloading step definitions
    • explain reproducibility test results are not blocking (zerotracepen/zerotracepen!1469)

      Commits:

      • Release process: check early that there are enough manual testers
      • Move document
      • Make notifying the TR a release process task for the RM instead of manual test
      • moving some TR documentation from test to release process
      • explain reproducibility test results are not blocking
    • Improve wording (zerotracepen/zerotracepen!1468)

      Closes issues:

      • Rename "Language & Region" as "Language & Formats" (zerotracepen/zerotracepen#20204)

      Commits:

      • Improve wording
    • Test suite: make find() not wait for 10 seconds (zerotracepen/zerotracepen!1467)

      Closes issues:

      • Suppress some output from the test suite screen matching machinery
        (zerotracepen/zerotracepen#20315)
      • Drop Screen#find() (zerotracepen/zerotracepen#20303)
      • wait_vanish does nothing (zerotracepen/zerotracepen#20302)

      Commits:

      • Test suite: debug log duration of Screen#wait*
      • Test suite: make wait() spam the debug log less
      • Test suite: debug log consistently in wait/find_any/wait_any/wait_vanish
      • Test suite: suppress some debug logging when find():ing images
      • Test suite: wait a bit before clicking
      • Test suite: fix wait_vanish()
      • Test suite: implement wait_vanish() with find()
      • Test suite: rename method to follow ruby ?-convention
      • Test suite: make find() not wait for 10 seconds
    • Test suite: Work around VM sometimes restarting after shutdown
      (zerotracepen/zerotracepen!1460)

      Closes issues:

      • Step 'I shutdown Zero Trace Pen and wait for the computer to power off' sometimes fails
        by rebooting instead (zerotracepen/zerotracepen#12132)
      • Test suite: VM sometimes restarts after shutdown (zerotracepen/zerotracepen#20245)

      Commits:

      • Test suite: Work around VM sometimes restarting after shutdown
    • Test suite: Fix unexpected return (zerotracepen/zerotracepen!1458)

      Closes issues:

      • Returning from step definition in usb.rb raises an unexpected return (LocalJumpError) (zerotracepen/zerotracepen#20276)

      Commits:

      • Test suite: Fix unexpected return
    • Refactor code to get boot device (zerotracepen/zerotracepen!1454)

      Commits:

      • Refactor code to get boot device
    • GitLab CI: bin/test-utils/ruff also checks uncommitted/untracked changes
      (zerotracepen/zerotracepen!1449)

      Commits:

      • GitLab CI: Use is-file-type script again in bin/test-utils/ruff
      • GitLab CI: Improve bin/test-utils/ruff
    • Detect I/O failures on Zero Trace Pen partition(s) (zerotracepen/zerotracepen!1427)

      Closes issues:

      • Detect SquashFS and I/O errors while Zero Trace Pen is running (zerotracepen/zerotracepen#5856)

      Commits:

      • execute_successfully will stop the test if it returns a exit code != 0.
      • Revert "Fix systemd dependencies."
      • Use better wording in hardware_failure.feature
      • Use the device name not the device path.
      • Move comment.
      • Use the get_boot_device from zerotracepenlib.
      • We know the boot device from beginning, so no need to use update_pattern.
      • rename IOErrorPattern class.
      • remove partion detection errors.
      • critical target error is triggered on the device not on the partition.
      • Don't use EXT4-fs fake errors, as we use only hardware issues.
      • Only detect hardware issues and no filesystem ons.
      • test failurs on different devices.
      • Need to do a new UDisk sync in order to get the cleartext_device.
      • Add debug information.
      • Detect I/O failures on Zero Trace Pen partition.
      • black format.
      • Fix systemd dependencies.
      • Make zerotracepen-report-disk-ioerrors translatable.
      • Test the zerotracepen-detect-disk-ioerrors service.
      • rename detect-squashfs-errors to detect-disk-ioerrors.
      • rename zerotracepen-detect-disk-errors -> zerotracepen-detect-disk-resize-errors.