1564 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
dependabot[bot]	df3063a825	build(deps): bump anchore/scan-action from 5 to 6 ... Bumps [anchore/scan-action](https://github.com/anchore/scan-action) from 5 to 6. - [Release notes](https://github.com/anchore/scan-action/releases) - [Changelog](https://github.com/anchore/scan-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/anchore/scan-action/compare/v5...v6) --- updated-dependencies: - dependency-name: anchore/scan-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2024-12-16 19:49:37 +02:00
jkarasti	57bb7286ef	Install more type stubs wanted by mypy	2024-12-16 19:49:03 +02:00
Alex Pyrgiotis	fbe05065c9	docs: Update release instructions ... Update our release instructions with a way to run manual tasks via `doit`. Also, add developer documentation on how to use `doit`, and some tips and tricks.	2024-12-10 15:28:16 +02:00
Alex Pyrgiotis	54ffc63c4f	Add build-* targets in Makefile based on doit ... Add Make targets that build release artifacts with doit.	2024-12-10 15:28:16 +02:00
Alex Pyrgiotis	bdc4cf13c4	Add doit configuration options	2024-12-10 15:28:16 +02:00
Alex Pyrgiotis	92d7bd6bee	Automate a large portion of our release tasks ... Create a `dodo.py` file where we define the dependencies and targets of each release task, as well as how to run it. Currently, we have automated all of our Linux and macOS tasks, except for adding Linux packages to the respective APT/YUM repos. The tasks we have automated follow below: build_image Build the container image using ./install/common/build-image.py check_container_runtime Test that the container runtime is ready. clean_container_runtime Clean the storage space of the container runtime. clean_prompt Make sure that the user really wants to run the clean tasks. debian_deb Build a Debian package for Debian Bookworm. debian_env Build a Debian Bookworm dev environment. download_tessdata Download the Tesseract data using ./install/common/download-tessdata.py fedora_env Build Fedora dev environments. fedora_env:40 Build Fedora 40 dev environments fedora_env:41 Build Fedora 41 dev environments fedora_rpm Build Fedora packages for every supported version. fedora_rpm:40 Build a Fedora 40 package fedora_rpm:40-qubes Build a Fedora 40 package for Qubes fedora_rpm:41 Build a Fedora 41 package fedora_rpm:41-qubes Build a Fedora 41 package for Qubes git_archive Build a Git archive of the repo. init_release_dir Create a directory for release artifacts. macos_build_dmg Build the macOS .dmg file for Dangerzone. macos_check_cert Test that the Apple developer certificate can be used. macos_check_system Run macOS specific system checks, as well as the generic ones. poetry_install Setup the Poetry environment Closes #1016	2024-12-10 15:27:20 +02:00
Alex Pyrgiotis	7c5a191a5c	Add doit in Poetry as package dependency ... Add the doit automation tool in our `pyproject.toml` and `poetry.lock` file as a package-related dependency, since we don't want to ship it to our end users.	2024-12-10 11:34:25 +02:00
Alex Pyrgiotis	4bd794dbd1	Allow passing true/false to --use-cache build arg	2024-12-10 11:34:25 +02:00
Alex Pyrgiotis	3eac00b873	ci: Work with image tarballs that are not tagged as 'latest' ... Now that our image tarball is not tagged as 'latest', we must first grab the image tag first, and then refer to it. We can grab the tag either from `share/image-id.txt` (if available) or with: docker load dangerzone.rocks/dangerzone --format {{ .Tag }}	2024-12-10 11:31:39 +02:00
Alex Pyrgiotis	ec9f8835e0	Move container security arg to proper place ... Now that #748 has been merged, we can move the `--userns nomap` argument to the list with the rest of our security arguments.	2024-12-10 11:31:39 +02:00
Alex Pyrgiotis	0383081394	Factor out container utilities to separate module	2024-12-10 11:31:39 +02:00
Alex Pyrgiotis	25fba42022	Extend the interface of the isolation provider ... Add the following two methods in the isolation provider: 1. `.is_available()`: Mainly used for the Container isolation provider, it specifies whether the container runtime is up and running. May be used in the future by other similar providers. 2. `.should_wait_install()`: Whether the isolation provider takes a while to be installed. Should be `True` only for the Container isolation provider, for the time being.	2024-12-10 11:29:00 +02:00
Alex Pyrgiotis	e54567b7d4	Fix minor typos in our docs	2024-12-10 11:29:00 +02:00
Alex Pyrgiotis	2a8355fb88	Update our release instructions	2024-12-10 11:29:00 +02:00
Alex Pyrgiotis	e22c795cb7	container: Revamp container image installation ... Revamp the container image installation process in a way that does not involve using image IDs. We don't want to rely on image IDs anymore, since they are brittle (see https://github.com/freedomofpress/dangerzone/issues/933). Instead, we use image tags, as provided in the `image-id.txt` file. This allows us to check fast if an image is up to date, and we no longer need to maintain multiple image IDs from various container runtimes. Refs #933 Refs #988 Fixes #1020	2024-12-10 11:29:00 +02:00
Alex Pyrgiotis	909560353d	Build and tag Dangerzone images ... Build Dangerzone images and tag them with a unique ID that stems from the Git reop. Note that using tags as image IDs instead of regular image IDs breaks the current Dangerzone expectations, but this will be addressed in subsequent commits.	2024-12-10 11:18:23 +02:00
Alex Pyrgiotis	6a5e76f2b4	Build and tag Dangerzone images ... Build Dangerzone images and tag them with a unique ID that stems from the Git reop. Note that using tags as image IDs instead of regular image IDs breaks the current Dangerzone expectations, but this will be addressed in subsequent commits.	2024-12-10 11:18:23 +02:00
Alex Pyrgiotis	20152fac13	container: Factor out loading an image tarball	2024-12-10 11:18:23 +02:00
Alex Pyrgiotis	6b51d56e9f	container: Manipulate Dangerzone image tags ... Add the following methods that allow the `Container` isolation provider to work with tags for the Dangerzone image: * `list_image_tag()` * `delete_image_tag()` * `add_image_tag()`	2024-12-10 11:18:23 +02:00
Alex Pyrgiotis	309bd12423	Move container-specific method from base class ... Move the `is_runtime_available()` method from the base `IsolationProvider` class, and into the `Dummy` provider class. This method was originally defined in the base class, in order to be mocked in our tests for the `Dummy` provider. There's no reason for the `Qubes` class to have it though, so we can just move it to the `Dummy` provider.	2024-12-09 19:19:21 +02:00
Alex Pyrgiotis	1c0a99fcd2	Update changelog	2024-12-09 18:46:25 +02:00
jkarasti	4b5f4b27d7	Fix: Dangerzone installed using an msi built with WiX Toolset v3 is not uninstalled by an msi built with WiX Toolset v5 ... Workaround for an issue after upgrading from WiX Toolset v3 to v5 where the previous version of Dangerzone is not uninstalled during the upgrade by checking if the older installation exists in "C:\Program Files (x86)\Dangerzone". Also handle a special case for Dangerzone 0.8.0 which allows choosing the install location during install by checking if the registry key for it exists. Note that this seems to allow installing Dangerzone 0.8.0 after installing Dangerzone from this branch. In this case the installer errors until Dangerzone 0.8.0 is uninstalled again	2024-12-09 18:42:12 +02:00
JKarasti	f537d54ed2	Change: Build a 64-bit installer	2024-12-09 18:42:12 +02:00
JKarasti	32641603ee	Docs: Update documentation for WiX Toolset 5	2024-12-09 18:42:12 +02:00
JKarasti	a915ae8442	Change: Update the build-app.bat script to work with WiX Toolset v5 ... - WiX Toolset v3 used to validate the msi package by default. In v5 that has moved to a new command, so add a new validation step to the script. - Also emove the step that uses `insignia.exe` to sign the Dangerzone.msi with the digital signatures from its external cab archives. In WiX Toolset v4 and newer, insignia is replaced with a new command `wix msi inscribe`, but we tell wix to embed the cabinets into the .msi (That's what`EmbedCab="yes"` in the Media / MediaTemplate element does) so singning them separately is not necessary. [0] [0] https://wixtoolset.org/docs/tools/signing/	2024-12-09 18:42:12 +02:00
JKarasti	38a803085f	CI: Use WiX Toolset v5 to build the msi	2024-12-09 18:42:11 +02:00
JKarasti	2053c98c09	Change: Write Dangerzone.wxs inside the script directly ... Also reduce duplication slightly by definig `build_dir`, `cx_freeze_dir` and `dist_dir`	2024-12-09 18:42:11 +02:00
JKarasti	3db1ca1fbb	Fix: Make GUIDs uppercase ... See [1] [1] https://learn.microsoft.com/en-us/windows/win32/msi/guid	2024-12-09 18:42:11 +02:00
JKarasti	3fff16cc7e	Change: Write dangerzone version and upgradecode into Package and SummaryInformation elements directly	2024-12-09 18:42:11 +02:00
JKarasti	8bd9c05832	Refactor: build_dir_xml() function ... - rename for clarity - remove unnecessary checks	2024-12-09 18:42:11 +02:00
JKarasti	41e78c907f	Change: Wrap all files to be included in the .msi in a ComponentGroupRef ... With this, all the files are organised into Components, each of which points to a Directory defined in the StandardDirectory element. This simplifies the Feature element considerable as only thing it needs to include everything in the built msi is a reference to `ApplicationComponents`	2024-12-09 18:42:11 +02:00
JKarasti	265c1dde97	Refactor: Simplify build_data() function ... - Rename variables to be more clear about what they do: - reorganise code - simplify a few checks	2024-12-09 18:42:11 +02:00
JKarasti	ccb302462d	Change: Swap Media element with MediaTemplate ... This is a new default and makes authoring slightly simpler without any functional changes.	2024-12-09 18:42:11 +02:00
JKarasti	4eadc30605	Change: Convert Wix UI extension authoring to WiX Toolset v5 ... Due to limitations of the xml.etree.ElementTree library, add the items in the root element as a dictionary	2024-12-09 18:42:11 +02:00
JKarasti	abb71e0fe5	Change: Wrap ProgramFilesFolder component with a StandardDirectory component	2024-12-09 18:42:11 +02:00
JKarasti	4638444290	Change: Wrap ProgramMenuFolder component with a StandardDirectory component	2024-12-09 18:42:11 +02:00
jkarasti	68da50a6b2	Change: Disable AllowSameVersionUpgrades ... Since running `wix msi validate` with it set to `yes` causes an error.	2024-12-09 18:42:11 +02:00
JKarasti	cc5ba29455	Change: Merge Product into Package element ... - The Keywords and Description items move under a new SummaryInformation element. - Shuffle things around so that elements previously under the product element are now under the Package element. - Rename SummaryCodepage in SummaryInformation to Codepage and remove a duplicate Manufacturer item. - Remove InstallerVersion and let WiX set it to default value. (500 a.k.a Windows 7)	2024-12-09 18:42:11 +02:00
JKarasti	180b9442ab	Change: Rename INSTALLDIR to INSTALLFOLDER ... It's the new default name for it	2024-12-09 18:42:11 +02:00
JKarasti	f349e16523	Change: Update WiX schema namespace ... Also rename `root_el` to `wix_el`. WiX version 5 uses the same namespace.	2024-12-09 18:42:11 +02:00
JKarasti	adddb1ecb7	Change: Stop generating an XML declaration at the top of the WiX authoring ... It's not needed anymore.	2024-12-09 18:42:11 +02:00
JKarasti	8e57d81a74	Fix: Make generated WiX authoring pass WixCop checks ... WixCop.exe is a built in formatting tool that comes with WiX toolset v3. This fixes `wix convert` command not beins able to run	2024-12-09 18:42:11 +02:00
JKarasti	3bcf5fc147	Fix: SyntaxWarning while generating Dangerzone.wxs	2024-12-09 18:42:10 +02:00
Alexis Métaireau	60df4f7e35	docs: Update the release instructions ... This commit makes changes to the release instructions, prefering bash exemples when that's possible. As a result, the QA.md and RELEASE.md files have been separated and a new `generate-release-tasks.py` script is making its apparition.	2024-12-03 15:07:50 +01:00
Alexis Métaireau	9fa3c80404	Update QA script to support Fedora 41	2024-12-03 15:07:50 +01:00
Alexis Métaireau	4bf7f9cbb4	docs: Add a step to download tesseract data in the RELEASE notes	2024-12-03 15:07:49 +01:00
Alexis Métaireau	fdc27c4d3b	CI: check that the changelog is populated on each pull request	2024-12-02 11:57:30 +01:00
Alexis Métaireau	23f5f96220	build: Publish the built artifacts ... - Fedora `.rpm` files - Windows `.msi` - macOS `.app` Are now published as part of the CI pipelines.	2024-12-02 11:35:54 +01:00
Alexis Métaireau	5744215d99	Issue templates: rephrase how we ask docker info to the users ... People might not now if the issue is related to docker or not, and we've had to ask them for additional information after they opened the issue. This makes it clearer that this information might be useful.	2024-11-28 18:04:24 +01:00
Alex Pyrgiotis	c89988654c	Drop checks for the FPF-maintained PySide6 package ... There are various place in our release process (build/installation/release instructions and CI checks) where we make sure that the FPF-maintained PySide6 package works in Fedora 39. Now that Fedora 39 is nearing its EOL date, we can remove those.	2024-11-26 16:06:38 +01:00