1. 07 Jun, 2021 2 commits
  2. 06 Jun, 2021 1 commit
  3. 30 May, 2021 2 commits
  4. 25 May, 2021 4 commits
  5. 23 May, 2021 3 commits
  6. 22 May, 2021 1 commit
  7. 19 May, 2021 1 commit
  8. 11 May, 2021 1 commit
  9. 27 Apr, 2021 3 commits
  10. 19 Apr, 2021 4 commits
  11. 17 Apr, 2021 2 commits
  12. 02 Apr, 2021 1 commit
    • sajolida's avatar
      Remove Poedit (#18236) · 56f5ade8
      sajolida authored
      We're keeping config/chroot_local-includes/etc/skel/.poedit on purpose
      for people who might add it back using Additional Software.
      56f5ade8
  13. 01 Apr, 2021 1 commit
  14. 31 Mar, 2021 2 commits
  15. 29 Mar, 2021 1 commit
  16. 22 Mar, 2021 1 commit
  17. 20 Mar, 2021 2 commits
    • intrigeri's avatar
      APT: use non-onion HTTPS sources for Debian repositories · ec836747
      intrigeri authored
      We've observed too much unreliability with Debian's onion APT sources,
      so let's switch to APT sources that should be more reliable.
      
      Still, to avoid re-introducing fragility wrt. attacks like
      https://www.debian.org/security/2016/dsa-3733 (see refs #8143), we need APT
      sources that support HTTPS, which is not that common.
      
      My initial intent was to use https://deb.debian.org/, but we lack support for
      SRV records, so that service would HTTP redirect us to one of the CDN instances.
      So I figured skipping this redirection step could be more reliable,
      hence the hard-coding of the Fastly CDN repository sources.
      
      I'm not too worried about things breaking any time soon due to this hard-coding:
      
       - The Fastly CDN has backed deb.debian.org since it exists.
       - This configuration is explicitly documented on https://deb.debian.org/.
      
      So I would expect we would learn about a decommission plan for
      cdn-fastly.deb.debian.org sufficiently in advance to update our config
      in Tails releases before this APT source stops working.
      
      refs #17993
      ec836747
    • intrigeri's avatar
      Upgrade Tor Browser to 10.0.14-build1. · 28a87107
      intrigeri authored
      28a87107
  18. 19 Mar, 2021 1 commit
    • anonym's avatar
      Build system: by default, merge the base branch early when building (#12557) · 1724b361
      anonym authored
      Previously, when we run `rake build` in a non-base branch it will be
      run at the Git state before the base branch merge, resulting in mixed
      Git state. And since the merge happens in auto/build it will obviously
      also be run in an pre-merge state. This can cause all sorts of subtle
      build errors.
      
      So let's move this merge earlier, into the Rakefile, so only changes
      there can be mixed. Also, this builds a foundation for completely
      eliminating this mixed state (soon!).
      1724b361
  19. 17 Mar, 2021 6 commits
  20. 16 Mar, 2021 1 commit