Fix-committed: #17278

Merge remote-tracking branch 'origin/feature/17621-keep-latest-screenshot' into stable (Closes: #17621)

The default configuration lives in /usr/share/tor/tor-service-defaults-torrc
nowadays.

sajolida authored May 11, 2020 and intrigeri committed May 15, 2020

- Our torrc is not outdated
- Previous links were both broken
- Our torrc is not for a "typical Tor user"
- Our torrc still works for much newer versions of Tor
- Our users are not supposed to edit this file

These variables have not been used
since 463388f4.

I'd like to keep saving this extra debugging data for a while,
but let's minimize the impact when scenarios in other features fail.

We currently set DefaultTimeoutStopSec=5s. I assume that in most cases, deleting
overlayfs directories from memory should be super fast, but I'd rather not bet
on this for security matters.

Give tails-synchronize-data-to-new-persistent-volume-on-shutdown.service more time to do its job (refs: #17278)

We currently set DefaultTimeoutStopSec=5s, which means copying just the APT
lists (215MB currently), not even taking into account the actual additional
packages installed by the user, would need to happen at no less than 43MB/s for
the ExecStop= to succeed.

Most real-world bare metal USB sticks don't provide anything close
to this write rate.

I can't reproduce the problems caused by this bug when running the test suite on
my laptop, but it does happen regularly on lizard: even virtual USB stick backed
by tmpfs are not always fast enough there.

I've observed cases when that service started, copied part of the data,
but after the next boot:

 - Not all the data can be found on the persistent volume.
 - The flag file that indicates that this service has finished its job
   is not present.

At this point I don't know whether this service was killed before
it could finish its job, or this service did copy the data but
it was not sync'ed to disk. Let's eliminate the second possibility
and make it easier to reason on this problem.

I guess we could revert this commit once we're confident we have fixed
the main bugs in this area.

I guess we could revert this commit once we're confident we have fixed
the main bugs in this area.

The Journal saved on failure has been called *.journal for years.

Let's not require developers to change their habits,
and let's not break tooling that may rely on this.

I'll need this to debug #17278.

I'll need something similar to debug #17278.

We have already masked apt-daily.timer (#12390), but apt-daily-upgrade.timer was
left enabled. AFAICT it's a no-op by default, but better safe than sorry.

Finally, drop masking of apt-daily.timer: APT::Periodic::Enable effectively
makes apt-daily*.timer no-ops.

refs: #17278

Merge remote-tracking branch 'origin/bugfix/17668-fix-unlock-veracrypt-volume-error-dialog' into stable (Closes: #17668)

Merge remote-tracking branch 'origin/bugfix/17623-allow-connecting-via-virt-viewer' into stable (Closes: #17623)

Closes: #17677

I, for now, don't know by heart what "-V" does in this context.

Merge remote-tracking branch 'origin/stable' into bugfix/15146-overlayfs-memory-erasure+force-all-tests

wiki/src/news/version_4.6.ar.po: updating as wiki/src/news/version_4.6.de.po has changed.
wiki/src/news/version_4.6.ca.po: updating as wiki/src/news/version_4.6.de.po has changed.
wiki/src/news/version_4.6.id.po: updating as wiki/src/news/version_4.6.de.po has changed.
wiki/src/news/version_4.6.pl.po: updating as wiki/src/news/version_4.6.de.po has changed.
wiki/src/news/version_4.6.ru.po: updating as wiki/src/news/version_4.6.de.po has changed.
wiki/src/news/version_4.6.sr_Latn.po: updating as wiki/src/news/version_4.6.de.po has changed.
wiki/src/news/version_4.6.tr.po: updating as wiki/src/news/version_4.6.de.po has changed.
wiki/src/news/version_4.6.zh.po: updating as wiki/src/news/version_4.6.de.po has changed.
wiki/src/news/version_4.6.zh_TW.po: updating as wiki/src/news/version_4.6.de.po has changed.
wiki/src/partners.ar.po: updating as wiki/src/partners.de.po has changed.
wiki/src/partners.ca.po: updating as wiki/src/partners.de.po has changed.
wiki/src/partners.id.po: updating as wiki/src/partners.de.po has changed.
wiki/src/partners.pl.po: updating as wiki/src/partners.de.po has changed.
wiki/src/partners.ru.po: updating as wiki/src/partners.de.po has changed.
wiki/src/partners.sr_Latn.po: updating as wiki/src/partners.de.po has changed.
wiki/src/partners.tr.po: updating as wiki/src/partners.de.po has changed.
wiki/src/partners.zh.po: updating as wiki/src/partners.de.po has changed.
wiki/src/partners.zh_TW.po: updating as wiki/src/partners.de.po has changed.