1440 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Alex Pyrgiotis	2bd065f6e9	Merge 396d53b130 into 2f438c09f1	2024-12-04 16:05:30 +00:00
Alex Pyrgiotis	2f438c09f1	FIXUP: Use longer tag description, so that the commit is always shown	2024-12-04 17:37:45 +02:00
Alex Pyrgiotis	eefe7c15ce	Move container security arg to proper place ... Now that #748 has been merged, we can move the `--userns nomap` argument to the list with the rest of our security arguments.	2024-12-04 17:36:38 +02:00
Alex Pyrgiotis	e7cd6e3138	Factor out container utilities to separate module	2024-12-04 17:30:34 +02:00
Alex Pyrgiotis	9b244b8d83	Extend the interface of the isolation provider ... Add the following two methods in the isolation provider: 1. `.is_available()`: Mainly used for the Container isolation provider, it specifies whether the container runtime is up and running. May be used in the future by other similar providers. 2. `.should_wait_install()`: Whether the isolation provider takes a while to be installed. Should be `True` only for the Container isolation provider, for the time being.	2024-12-04 16:50:27 +02:00
Alex Pyrgiotis	ca63d571c7	Fix minor typos in our docs	2024-12-04 16:37:35 +02:00
Alex Pyrgiotis	e51407ef50	Update our release instructions	2024-12-04 16:37:21 +02:00
Alex Pyrgiotis	396d53b130	Add doit configuration options	2024-12-04 14:23:04 +02:00
Alex Pyrgiotis	2f29095b31	docs: Update release instructions ... Update our release instructions with a way to run manual tasks via `doit`. Also, add developer documentation on how to use `doit`, and some tips and tricks.	2024-12-04 14:23:04 +02:00
Alex Pyrgiotis	52eae7cd00	Automate a large portion of our release tasks ... Create a `dodo.py` file where we define the dependencies and targets of each release task, as well as how to run it. Currently, we have automated all of our Linux and macOS tasks, except for adding Linux packages to the respective APT/YUM repos. The tasks we have automated follow below: build_image Build the container image using ./install/common/build-image.py check_container_runtime Test that the container runtime is ready. clean_container_runtime Clean the storage space of the container runtime. clean_prompt Make sure that the user really wants to run the clean tasks. debian_deb Build a Debian package for Debian Bookworm. debian_env Build a Debian Bookworm dev environment. download_tessdata Download the Tesseract data using ./install/common/download-tessdata.py fedora_env Build Fedora dev environments. fedora_env:40 Build Fedora 40 dev environments fedora_env:41 Build Fedora 41 dev environments fedora_rpm Build Fedora packages for every supported version. fedora_rpm:40 Build a Fedora 40 package fedora_rpm:40-qubes Build a Fedora 40 package for Qubes fedora_rpm:41 Build a Fedora 41 package fedora_rpm:41-qubes Build a Fedora 41 package for Qubes git_archive Build a Git archive of the repo. init_release_dir Create a directory for release artifacts. macos_build_dmg Build the macOS .dmg file for Dangerzone. macos_check_cert Test that the Apple developer certificate can be used. macos_check_system Run macOS specific system checks, as well as the generic ones. poetry_install Setup the Poetry environment Closes #1016	2024-12-04 14:23:04 +02:00
Alex Pyrgiotis	ece58cba06	Add doit in Poetry as package dependency ... Add the doit automation tool in our `pyproject.toml` and `poetry.lock` file as a package-related dependency, since we don't want to ship it to our end users.	2024-12-04 14:23:04 +02:00
Alex Pyrgiotis	eec4e6a5c3	Allow passing true/false to --use-cache build arg	2024-12-04 14:23:04 +02:00
Alex Pyrgiotis	02261b112e	Fix some small typos in our release docs	2024-12-04 14:13:26 +02:00
Alex Pyrgiotis	f400205c74	Update our release instructions	2024-12-04 06:31:43 +02:00
Alex Pyrgiotis	5b1fe4d7ad	container: Revamp container image installation ... Revamp the container image installation process in a way that does not involve using image IDs. We don't want to rely on image IDs anymore, since they are brittle (see https://github.com/freedomofpress/dangerzone/issues/933). Instead, we use image tags, as provided in the `image-id.txt` file. This allows us to check fast if an image is up to date, and we no longer need to maintain multiple image IDs from various container runtimes. Refs #933 Refs #988 Fixes #1020	2024-12-04 06:28:27 +02:00
Alex Pyrgiotis	53214d33d8	Build and tag Dangerzone images ... Build Dangerzone images and tag them with a unique ID that stems from the Git reop. Note that using tags as image IDs instead of regular image IDs breaks the current Dangerzone expectations, but this will be addressed in subsequent commits.	2024-12-04 06:28:27 +02:00
Alex Pyrgiotis	7f7fe43711	container: Factor out loading an image tarball	2024-12-04 06:28:27 +02:00
Alex Pyrgiotis	f31fbfefc6	container: Manipulate Dangerzone image tags ... Add the following methods that allow the `Container` isolation provider to work with tags for the Dangerzone image: * `list_image_tag()` * `delete_image_tag()` * `add_image_tag()`	2024-12-04 06:28:27 +02:00
Alex Pyrgiotis	96e64deae7	Move container-specific method from base class ... Move the `is_runtime_available()` method from the base `IsolationProvider` class, and into the `Dummy` provider class. This method was originally defined in the base class, in order to be mocked in our tests for the `Dummy` provider. There's no reason for the `Qubes` class to have it though, so we can just move it to the `Dummy` provider.	2024-12-04 06:28:27 +02:00
Alexis Métaireau	60df4f7e35	docs: Update the release instructions ... This commit makes changes to the release instructions, prefering bash exemples when that's possible. As a result, the QA.md and RELEASE.md files have been separated and a new `generate-release-tasks.py` script is making its apparition.	2024-12-03 15:07:50 +01:00
Alexis Métaireau	9fa3c80404	Update QA script to support Fedora 41	2024-12-03 15:07:50 +01:00
Alexis Métaireau	4bf7f9cbb4	docs: Add a step to download tesseract data in the RELEASE notes	2024-12-03 15:07:49 +01:00
Alexis Métaireau	fdc27c4d3b	CI: check that the changelog is populated on each pull request	2024-12-02 11:57:30 +01:00
Alexis Métaireau	23f5f96220	build: Publish the built artifacts ... - Fedora `.rpm` files - Windows `.msi` - macOS `.app` Are now published as part of the CI pipelines.	2024-12-02 11:35:54 +01:00
Alexis Métaireau	5744215d99	Issue templates: rephrase how we ask docker info to the users ... People might not now if the issue is related to docker or not, and we've had to ask them for additional information after they opened the issue. This makes it clearer that this information might be useful.	2024-11-28 18:04:24 +01:00
Alex Pyrgiotis	c89988654c	Drop checks for the FPF-maintained PySide6 package ... There are various place in our release process (build/installation/release instructions and CI checks) where we make sure that the FPF-maintained PySide6 package works in Fedora 39. Now that Fedora 39 is nearing its EOL date, we can remove those.	2024-11-26 16:06:38 +01:00
Alex Pyrgiotis	7eaa0cfe50	Drop Fedora 39 support ... Drop Fedora 39 support by removing it from our CI and installation instructions. Closes #999	2024-11-26 16:06:35 +01:00
Alexis Métaireau	9d69e3b261	CI: Do not scan release assets for mac silicon for now.	2024-11-25 18:54:46 +01:00
Alex Pyrgiotis	1d2a91e8c5	FIXUP: Small fixes	2024-11-21 18:55:33 +02:00
Alex Pyrgiotis	82c29b2098	Make README.md point to INSTALL.md for instructions ... Our repo's README.md should point to our INSTALL.md for installation instructions, and not the other way around. This fixes an issue with INSTALL.md pointing to a stale README.md version. Updating our README before tagging is not possible, since the latest version is the one that our users visit, and it can't point to download links that do not exist. Fixes #1003	2024-11-21 18:55:33 +02:00
Alex Pyrgiotis	ce5aca4ba1	dev_scripts: Implement two more steps ... Implement the following steps from the QA docs: 1. Check if the latest Python version that we support is installed. For example, we currently support Python 3.12, so we add code to check that the latest Python 3.12.x version is installed. 2. Download the Tesseract data using our script, both on Windows and Linux.	2024-11-21 18:29:43 +02:00
Alex Pyrgiotis	13f38cc8a9	Update our description	2024-11-21 18:29:43 +02:00
Alex Pyrgiotis	57df6fdfe5	Increase the size of the dz qube to 5GiB ... Increase the size of the `dz` qube in our build instructions. We increase it from 2GiB (default), to 5GiB (suggested), in order to cater for some extra space that our build instructions need (e.g., the download of the Tesseract data).	2024-11-21 18:29:43 +02:00
Alexis Métaireau	20354e7c11	CI: Use grep + cut rather than jq to get the version number ... Github macOS runners don't come with `jq` pre-installed.	2024-11-21 12:34:15 +01:00
Alexis Métaireau	d722800a4b	Update Lock file	2024-11-20 17:42:59 +01:00
Alexis Métaireau	4cfc633cdb	Add a script to help generate release notes from merged pull requests	2024-11-20 17:42:59 +01:00
Alexis Métaireau	944d58dd8d	CI: Update container scanning to account for the arm64 architecture.	2024-11-20 17:12:20 +01:00
Alexis Métaireau	f3806b96af	Reapply "Disable gVisor's DirectFS feature."" ... This reverts commit 68f8338d20. Fixes #982	2024-11-20 16:41:56 +01:00
Alexis Métaireau	c4bb7c28c8	Unpin gVisor, now that upstream is able to support Linux Yama Mode 2 ... Fixes #298	2024-11-20 16:41:55 +01:00
Alexis Métaireau	630083bdea	CI: Only run the CI on pull requests, and on the "main" branch ... Previously, the actions were duplicated, due to the fact when developing we often create feature branches and open pull requests. This new setup requires us to open pull requests to trigger the CI.	2024-11-20 15:56:28 +01:00
Alexis Métaireau	504a9e1df2	tests: mark the hancom office suite tests for rerun on failures ... It seem that these tests are flaky, and as a result our CI pipeline is failing from time to time. This will rerun it automatically when there is an error. See https://github.com/freedomofpress/dangerzone/issues/968 for more information	2024-11-19 18:00:47 +01:00
jkarasti	a54a8f2057	Chore: Refresh lock file	2024-11-13 17:49:53 +02:00
jkarasti	35abd14f5f	Fix: Executables built with cx_freeze broken after On-Host Pixels to PDF conversion ... On-Host Pixels to PDF conversion uncovered an incompatibility between pymupdf and cx_freeze. This bumps cx_freeze to 7.2.5 which includes the fix.	2024-11-13 17:49:53 +02:00
jkarasti	1bd18a175b	Revert "Fix: Error with cx_freeze when building the windows executables" ... This reverts commit 95d7d8a4d9.	2024-11-13 17:49:52 +02:00
Alex Pyrgiotis	96aa56a6dc	Remove version prefix v from container filename	2024-11-06 13:53:52 +02:00
Alex Pyrgiotis	91932046f5	ci: Use the new container filename in our assets ... The filename of the container image tarball that we published in our release assets has changed from `container.tar.gz` to `container-0.8.0-i686.tar.gz`. Change the scan action accordingly.	2024-11-06 13:41:37 +02:00
Alex Pyrgiotis	c8411de433	Update download links for 0.8.0 assets	2024-11-06 13:36:30 +02:00
Alex Pyrgiotis	95150bcfc1	Minor changelog fixes	2024-11-04 16:12:05 +02:00
Alexis Métaireau	bae109717c	Prepare the CHANGELOG for 0.8.0	2024-11-04 14:49:18 +01:00
Alexis Métaireau	00480551ca	build: use the version-less container released-asset for now	2024-10-31 18:27:53 +01:00