GitLab

This can be useful e.g. when 2 RMs share the work, to ensure
the work done by the first one is actually pushed somewhere
the second one will find it.

The Jenkins build_IUKs job needs them.

Closes: #17400, #17402

When one has changed files that affect the sidebar, rebuilding is typically
faster than refreshing.

Typically, the RM reaches this step the day before the release,
and we won't import updated translations again until the release,
so let's not pretend that it's still time for translators
to improve stuff for this release.

These calls are not strictly needed but they help every member
of this small git-annex conspiracy to track what is where.

Build system: instead of downloading every localized Tor Browser, use the tarball with all langpacks (refs: #17400)

My goal here is to ensure I import said tarball for 9.0.3 into our Tor Browser
archive tomorrow. This will make it easier to work on #17400 later.

wiki/src/doc/first_steps/persistence/copy.ar.po: updating as wiki/src/doc/first_steps/persistence/copy.de.po has changed.
wiki/src/doc/first_steps/persistence/copy.ca.po: updating as wiki/src/doc/first_steps/persistence/copy.de.po has changed.
wiki/src/doc/first_steps/persistence/copy.id.po: updating as wiki/src/doc/first_steps/persistence/copy.de.po has changed.
wiki/src/doc/first_steps/persistence/copy.pl.po: updating as wiki/src/doc/first_steps/persistence/copy.de.po has changed.
wiki/src/doc/first_steps/persistence/copy.ru.po: updating as wiki/src/doc/first_steps/persistence/copy.de.po has changed.
wiki/src/doc/first_steps/persistence/copy.sr_Latn.po: updating as wiki/src/doc/first_steps/persistence/copy.de.po has changed.
wiki/src/doc/first_steps/persistence/copy.tr.po: updating as wiki/src/doc/first_steps/persistence/copy.de.po has changed.
wiki/src/doc/first_steps/persistence/copy.zh.po: updating as wiki/src/doc/first_steps/persistence/copy.de.po has changed.
wiki/src/doc/first_steps/persistence/copy.zh_TW.po: updating as wiki/src/doc/first_steps/persistence/copy.de.po has changed.
wiki/src/install/expert/usb.ar.po: updating as wiki/src/install/expert/usb.de.po has changed.
wiki/src/install/expert/usb.ca.po: updating as wiki/src/install/expert/usb.de.po has changed.
wiki/src/install/expert/usb.id.po: updating as wiki/src/install/expert/usb.de.po has changed.
wiki/src/install/expert/usb.pl.po: updating as wiki/src/install/expert/usb.de.po has changed.
wiki/src/install/expert/usb.ru.po: updating as wiki/src/install/expert/usb.de.po has changed.
wiki/src/install/expert/usb.sr_Latn.po: updating as wiki/src/install/expert/usb.de.po has changed.
wiki/src/install/expert/usb.tr.po: updating as wiki/src/install/expert/usb.de.po has changed.
wiki/src/install/expert/usb.zh.po: updating as wiki/src/install/expert/usb.de.po has changed.
wiki/src/install/expert/usb.zh_TW.po: updating as wiki/src/install/expert/usb.de.po has changed.

These options are "aimed at preventing possible information leaks and making the
control-flow bugs that depend on uninitialized values more deterministic"¹.
All kmalloc()s effectively become kzalloc()s and all kfree()s effectively become
kzfree()s².

In passing, apart of the defense-in-depth security benefits intended by the
authors of this Linux feature, init_on_free=1 may ensure we clean more kernel
memory at shutdown time.

Benchmarks show:

* a negligible performance hit with init_on_alloc=1
* a 7-25% performance hit with init_on_free=1

Let's see if/how this affects our use cases.

[1] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6471384af2a6530696fc0203bafe4de41a23c9ef
[2] https://outflux.net/blog/archives/2019/11/14/security-things-in-linux-v5-3/

I removed them in 7727622d
but segfault rightfully observed that they can be helpful.

… by commit cced26b6.