1411 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Alex Pyrgiotis	82c29b2098	Make README.md point to INSTALL.md for instructions ... Our repo's README.md should point to our INSTALL.md for installation instructions, and not the other way around. This fixes an issue with INSTALL.md pointing to a stale README.md version. Updating our README before tagging is not possible, since the latest version is the one that our users visit, and it can't point to download links that do not exist. Fixes #1003	2024-11-21 18:55:33 +02:00
Alex Pyrgiotis	ce5aca4ba1	dev_scripts: Implement two more steps ... Implement the following steps from the QA docs: 1. Check if the latest Python version that we support is installed. For example, we currently support Python 3.12, so we add code to check that the latest Python 3.12.x version is installed. 2. Download the Tesseract data using our script, both on Windows and Linux.	2024-11-21 18:29:43 +02:00
Alex Pyrgiotis	13f38cc8a9	Update our description	2024-11-21 18:29:43 +02:00
Alex Pyrgiotis	57df6fdfe5	Increase the size of the dz qube to 5GiB ... Increase the size of the `dz` qube in our build instructions. We increase it from 2GiB (default), to 5GiB (suggested), in order to cater for some extra space that our build instructions need (e.g., the download of the Tesseract data).	2024-11-21 18:29:43 +02:00
Alexis Métaireau	20354e7c11	CI: Use grep + cut rather than jq to get the version number ... Github macOS runners don't come with `jq` pre-installed.	2024-11-21 12:34:15 +01:00
Alexis Métaireau	d722800a4b	Update Lock file	2024-11-20 17:42:59 +01:00
Alexis Métaireau	4cfc633cdb	Add a script to help generate release notes from merged pull requests	2024-11-20 17:42:59 +01:00
Alexis Métaireau	944d58dd8d	CI: Update container scanning to account for the arm64 architecture.	2024-11-20 17:12:20 +01:00
Alexis Métaireau	f3806b96af	Reapply "Disable gVisor's DirectFS feature."" ... This reverts commit 68f8338d20. Fixes #982	2024-11-20 16:41:56 +01:00
Alexis Métaireau	c4bb7c28c8	Unpin gVisor, now that upstream is able to support Linux Yama Mode 2 ... Fixes #298	2024-11-20 16:41:55 +01:00
Alexis Métaireau	630083bdea	CI: Only run the CI on pull requests, and on the "main" branch ... Previously, the actions were duplicated, due to the fact when developing we often create feature branches and open pull requests. This new setup requires us to open pull requests to trigger the CI.	2024-11-20 15:56:28 +01:00
Alexis Métaireau	504a9e1df2	tests: mark the hancom office suite tests for rerun on failures ... It seem that these tests are flaky, and as a result our CI pipeline is failing from time to time. This will rerun it automatically when there is an error. See https://github.com/freedomofpress/dangerzone/issues/968 for more information	2024-11-19 18:00:47 +01:00
jkarasti	a54a8f2057	Chore: Refresh lock file	2024-11-13 17:49:53 +02:00
jkarasti	35abd14f5f	Fix: Executables built with cx_freeze broken after On-Host Pixels to PDF conversion ... On-Host Pixels to PDF conversion uncovered an incompatibility between pymupdf and cx_freeze. This bumps cx_freeze to 7.2.5 which includes the fix.	2024-11-13 17:49:53 +02:00
jkarasti	1bd18a175b	Revert "Fix: Error with cx_freeze when building the windows executables" ... This reverts commit 95d7d8a4d9.	2024-11-13 17:49:52 +02:00
Alex Pyrgiotis	96aa56a6dc	Remove version prefix v from container filename	2024-11-06 13:53:52 +02:00
Alex Pyrgiotis	91932046f5	ci: Use the new container filename in our assets ... The filename of the container image tarball that we published in our release assets has changed from `container.tar.gz` to `container-0.8.0-i686.tar.gz`. Change the scan action accordingly.	2024-11-06 13:41:37 +02:00
Alex Pyrgiotis	c8411de433	Update download links for 0.8.0 assets	2024-11-06 13:36:30 +02:00
Alex Pyrgiotis	95150bcfc1	Minor changelog fixes	2024-11-04 16:12:05 +02:00
Alexis Métaireau	bae109717c	Prepare the CHANGELOG for 0.8.0	2024-11-04 14:49:18 +01:00
Alexis Métaireau	00480551ca	build: use the version-less container released-asset for now	2024-10-31 18:27:53 +01:00
Alexis Métaireau	32deea10c4	Bump version to 0.8.0	2024-10-31 14:22:13 +01:00
Alexis Métaireau	f540a67d06	Update RELEASE.md to upload container.tar.gz for both i686 and arm64 architectures.	2024-10-30 19:11:24 +01:00
Alex Pyrgiotis	68f8338d20	Revert "Disable gVisor's DirectFS feature." ... This reverts commit 73b0f8b7d4. Unfortunately, disabling DirectFS causes a problem in Linux systems that enable Yama mode 2. Turns out that Tails is such a system, so we have to revert this change, if we want to support it. Refs #982	2024-10-30 19:10:26 +01:00
Alex Pyrgiotis	d561878e03	tests: Restore previously mocked function ... Restore the `isolation_provider.base.kill_process_group()` function, which was previously mocked, at the end of the `test_linger_unkillable()` test. This function is initially mocked, in order to simulate a hang process. After the mocking completes, the test needs the original function once more, in order to actually kill the spawned process.	2024-10-30 16:45:45 +01:00
Alexis Métaireau	59e1666c28	Drop support for Ubuntu Mantic (23.10), which is EOL since 11 Jul 2024.	2024-10-30 16:43:50 +01:00
jkarasti	95d7d8a4d9	Fix: Error with cx_freeze when building the windows executables	2024-10-30 17:41:15 +02:00
jkarasti	ed2791bbbc	Revert: "fix win build failure due to package autodiscovery" ... This reverts commit 4d9f729654. The error described in #178 doesen't happen anymore so this workaround is not needed.	2024-10-30 17:41:15 +02:00
Alexis Métaireau	c1cf16a705	chore: remove unused imports	2024-10-30 01:21:39 +01:00
Alexis Métaireau	281432fcaa	build: pin the PyMuPDF version to 1.24.11 ... This is the last PyMuPDF version to have support for python 3.8, which is required for Ubuntu Focal (20.04)	2024-10-30 01:21:39 +01:00
Alexis Métaireau	71cc4b37e5	feat: show a deprecation warning for Ubuntu Focal (20.04)	2024-10-30 01:21:38 +01:00
Alex Pyrgiotis	5ed4a048a0	qubes: Do not close stderr ... Do not close stderr as part of the Qubes termination logic, since we need to read the debug logs. This shouldn't affect typical termination scenarios, since we expect our disposable qube to be either busy reading from stdin, or writing to stdout. If this is not the case, then forcefully killing the `qrexec-client-vm` process should unblock the qube.	2024-10-22 20:33:29 +03:00
Alex Pyrgiotis	50627d375c	Fix a small typo	2024-10-22 19:07:09 +03:00
Alex Pyrgiotis	8172195f95	tests: Add a doc with multimedia elements ... Add a doc that contains an MP4 video in it, which has an audio and video stream. This type of document could not be converted with the latest Dangerzone releases, because PyMuPDF threw this error in the container's stdout: MuPDF error: unsupported error: cannot create appearance stream for Screen annotations This error message was treated literally by our client code, which parsed the first few bytes in order to find out the page height/width. This resulted to a misleading Dangerzone error, e.g.: A page exceeded the maximum height This issue started occurring since 0.6.0, which added streaming support, and was fixed by commit 3f86e7b465. That fix was not accompanied by a test document that would ensure we would not have this regression from now on, so we add it in this commit. Refs #877 Closes #917	2024-10-22 17:31:39 +03:00
Alex Pyrgiotis	f5242078a9	macos: Remove some stale entitlements ... Remove some macOS entitlements that are not necessary for the current iteration of Dangerzone. Those are the ability to run as a hypervisor, and the ability to accept network connections. They are a relic from when we were experimenting with VMs, instead of relying on Docker Desktop.	2024-10-21 19:16:03 +03:00
dependabot[bot]	e68a43bbbf	build(deps): bump actions/stale from 5 to 9 ... Bumps [actions/stale](https://github.com/actions/stale) from 5 to 9. - [Release notes](https://github.com/actions/stale/releases) - [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/stale/compare/v5...v9) --- updated-dependencies: - dependency-name: actions/stale dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2024-10-21 14:19:30 +03:00
dependabot[bot]	10fb631b8e	build(deps): bump actions/setup-python from 4 to 5 ... Bumps [actions/setup-python](https://github.com/actions/setup-python) from 4 to 5. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/v4...v5) --- updated-dependencies: - dependency-name: actions/setup-python dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2024-10-21 14:16:38 +03:00
Alexis Métaireau	796ca79289	Automate the closing of stale issues	2024-10-17 19:28:07 +02:00
Alexis Métaireau	a95b612e78	Catch installation errors and display them. ... Fixes #193	2024-10-17 16:20:56 +02:00
Alex Pyrgiotis	03b3c9eba8	debian: Add Tesseract languages as a dependency	2024-10-17 15:50:12 +03:00
Alex Pyrgiotis	0ea8e71f15	ci: Check OCR in Debian/Fedora tests	2024-10-17 15:50:12 +03:00
Alex Pyrgiotis	4398986970	tests: Improve test for top-level conversion errors	2024-10-17 15:50:12 +03:00
Alex Pyrgiotis	1ca867c295	tests: Remove provider_wait fixtures	2024-10-17 15:50:12 +03:00
Alex Pyrgiotis	6e55e43fef	Make Dummy isolation provider more realistic ... Make the Dummy isolation provider follow the rest of the isolation providers and perform the second part of the conversion on the host. The first part of the conversion is just a dummy script that reads a file from stdin and prints pixels to stdout.	2024-10-17 15:50:12 +03:00
Alex Pyrgiotis	703bb0e42a	Remove dead docs	2024-10-17 15:50:12 +03:00
Alex Pyrgiotis	7ea7c8a0cc	Remove dead code	2024-10-17 15:50:12 +03:00
Alex Pyrgiotis	f42bb23229	Update the way we get debug logs ... Move the logic for grabbing debug logs to a new place, now that we have merged the two conversion stages (doc to pixels, pixels to PDF).	2024-10-17 15:50:12 +03:00
Alex Pyrgiotis	e34c36f7bc	Perform on-host pixels to PDF conversion ... Extend the base isolation provider to immediately convert each page to a PDF, and optionally use OCR. In contract with the way we did things previously, there are no more two separate stages (document to pixels, pixels to PDF). We now handle each page individually, for two main reasons: 1. We don't want to buffer pixel data, either on disk or in memory, since they take a lot of space, and can potentially leave traces. 2. We can perform these operations in parallel, saving time. This is more evident when OCR is not used, where the time to convert a page to pixels, and then back to a PDF are comparable.	2024-10-17 15:50:12 +03:00
Alex Pyrgiotis	08f5ef6558	Update .deb/.rpm dependencies ... Update .deb/.rpm specs to include PyMuPDF as a required package.	2024-10-17 15:50:11 +03:00
Alex Pyrgiotis	57475b369f	Make PyMuPDF a main Dangerzone dependency ... The PyMuPDF package was previously mainly used within the Dangerzone container, as well as on Qubes. With on-host conversion, PyMuPDF will be used in all supported platforms by default. For this reason, we can promote it to a main dependency.	2024-10-17 15:50:11 +03:00