GitLab

Updated to a version based on upstream's 1.157.4-1, built from commit
b0a4265f9f30bad945da of amnesia's custom live-initramfs Git repository.

DNS queries about pool.ntp.org are made using the DHCP-provided nameservers,
when possible, in the script that sets the clock:
/etc/NetworkManager/dispatcher.d/50-ntp.sh.

Else, we use OpenDNS as Incognito does.

However, we really need /etc/resolv.conf to be setup in a way that makes the
rest of the system use the local (torified) DNS cache. This is achieved thanks
to the − properly configured − resolvconf package. Our custom dhclient
configuration can then be dropped: it was only useful to supersede
DHCP-provided nameservers, which we do not want to do anymore since we need this
information, as explained above.

As live-helper manages /etc/resolv.conf in a way that makes it too hard for us
to ensure the image ends up with the needed symlink to
/etc/resolvconf/run/resolv.conf, this symlink mangling is done at boot time,
thanks to a live-initramfs script:
config/chroot_local-includes/usr/share/initramfs-tools/scripts/live-bottom/00resolv_conf

Due to the weird environment we run in, we already install our own custom hook
(namely /etc/NetworkManager/dispatcher.d/50-ntp.sh) via
config/chroot_local-includes.

This was done by adapting Incognito's /etc/NetworkManager/dispatcher.d/50-ntp.sh
to use local DNS servers obtained through DHCP if possible, or the

... slightly modified to silently abort when ntpdate is not available,
in order to keep our Git repository in a working state.

(Lenny's APT lacks an autoremove action)

... our amnesiabranding extension does it better.

We now use the latest stable Tor packages provided by the Tor project.

... by removing the default setting in user.js, that overrides the one set by
the extension.