144 commits

Author	SHA1	Message	Date
Alex Pyrgiotis	ee4c03800e	Fetch repro-build script	2025-02-24 20:52:56 +02:00
Alex Pyrgiotis	1ec3c7cbbc	WIP: chmod g-s	2025-02-21 11:09:51 +02:00
Alex Pyrgiotis	6c96d98c44	WIP: Overhaul build-image and repro-build	2025-02-20 00:55:16 +02:00
Alex Pyrgiotis	79b80f0599	WIP: Bump subuids/subgids	2025-02-18 15:47:01 +02:00
Alex Pyrgiotis	75f240e0ae	WIP: Build with buildx backend	2025-02-06 16:35:09 +02:00
Alex Pyrgiotis	cbdd7d7fff	Reproduce image incuding its Debian archives date	2025-02-06 14:25:29 +02:00
Alex Pyrgiotis	04559863b7	WIP: Add args for platform / commit checks	2025-02-06 14:11:57 +02:00
Alex Pyrgiotis	a5a7bdfed4	FIXUP: Suggest container runtime per platform	2025-02-06 13:45:35 +02:00
Alex Pyrgiotis	3e7b1edc34	Add platform	2025-02-06 13:37:12 +02:00
Alexis Métaireau	c96c0d6eed	Add the ability to download diffoci for multiple platforms	2025-02-05 18:06:53 +01:00
Alexis Métaireau	7bbd260c72	Add a dev_scripts/dangerzone-image	2025-01-29 19:31:30 +01:00
Alexis Métaireau	7991a5cb9c	Some more refactoring	2025-01-29 19:14:40 +01:00
Alexis Métaireau	d0ab34b422	Move regsitry and cosign utilities to dangerzone/updater/*. ... Placing these inside the `dangerzone` python package enables an inclusion with the software itself, and also makes it possible for end-users to attest the image.	2025-01-29 15:08:50 +01:00
Alexis Métaireau	cbd4795bf6	Verify podman/docker images against locally stored signatures	2025-01-28 16:21:29 +01:00
Alexis Métaireau	47252cc31d	Automate the verification of image signatures	2025-01-28 16:21:29 +01:00
Alexis Métaireau	bcd1ec2173	Add an utility to retrieve manifest info	2025-01-28 16:21:29 +01:00
Alexis Métaireau	5817650633	Add a script to verify Github attestations	2025-01-28 16:21:29 +01:00
Alex Pyrgiotis	2557be9bc0	dev_scripts: Add script for enforcing image reproducibility ... Add a dev script for Linux platforms that verifies that a source image can be reproducibly built from the current Git commit. The reproducibility check is enforced by the `diffoci` tool, which is downloaded as part of running the script.	2025-01-27 21:40:27 +02:00
Alexis Métaireau	1298e9c398	build: add build_scripts/env.py to the hashed files ... It contains information that define the build environments, and as such, modifying it should result in a new release of the dev containers.	2025-01-08 06:18:30 +01:00
Alexis Métaireau	00e58a8707	build: add poetry-plugin-export to the dependencies ... Since Poetry 2.0.0, the `export` command has been removed and it's advised to use the "poetry-plugin-export" package instead. This commit adds this dependency to the different places it's needed (debian environments, CI, build instructions, etc).	2025-01-08 06:18:01 +01:00
jkarasti	37ec91aae2	Lint: Fix f-string-missing-placeholders (F541)	2024-12-17 17:44:32 +01:00
jkarasti	cecfe63338	Lint: Fix unused-import (F401)	2024-12-17 17:44:32 +01:00
Alex Pyrgiotis	2a8355fb88	Update our release instructions	2024-12-10 11:29:00 +02:00
Alexis Métaireau	60df4f7e35	docs: Update the release instructions ... This commit makes changes to the release instructions, prefering bash exemples when that's possible. As a result, the QA.md and RELEASE.md files have been separated and a new `generate-release-tasks.py` script is making its apparition.	2024-12-03 15:07:50 +01:00
Alexis Métaireau	9fa3c80404	Update QA script to support Fedora 41	2024-12-03 15:07:50 +01:00
Alex Pyrgiotis	c89988654c	Drop checks for the FPF-maintained PySide6 package ... There are various place in our release process (build/installation/release instructions and CI checks) where we make sure that the FPF-maintained PySide6 package works in Fedora 39. Now that Fedora 39 is nearing its EOL date, we can remove those.	2024-11-26 16:06:38 +01:00
Alex Pyrgiotis	7eaa0cfe50	Drop Fedora 39 support ... Drop Fedora 39 support by removing it from our CI and installation instructions. Closes #999	2024-11-26 16:06:35 +01:00
Alex Pyrgiotis	ce5aca4ba1	dev_scripts: Implement two more steps ... Implement the following steps from the QA docs: 1. Check if the latest Python version that we support is installed. For example, we currently support Python 3.12, so we add code to check that the latest Python 3.12.x version is installed. 2. Download the Tesseract data using our script, both on Windows and Linux.	2024-11-21 18:29:43 +02:00
Alexis Métaireau	4cfc633cdb	Add a script to help generate release notes from merged pull requests	2024-11-20 17:42:59 +01:00
Alexis Métaireau	f540a67d06	Update RELEASE.md to upload container.tar.gz for both i686 and arm64 architectures.	2024-10-30 19:11:24 +01:00
Alexis Métaireau	59e1666c28	Drop support for Ubuntu Mantic (23.10), which is EOL since 11 Jul 2024.	2024-10-30 16:43:50 +01:00
Alex Pyrgiotis	ffcf664a48	Update build instructions	2024-10-17 15:50:10 +03:00
Alex Pyrgiotis	13f5658947	Improve instructions for Fedora 41 ... Update our changelog and release instructions, and add a note for Fedora 41 users in our build instructions to install Python 3.12. Fixes #947	2024-10-15 19:43:28 +03:00
Alex Pyrgiotis	f3fbc33fcd	dev_scripts: Allow building a Fedora 41 dev env ... Use Python 3.12 in Fedora 41 dev environments, since Python 3.13 (default in Fedora 41) does not work with PySide6 from PyPI yet.	2024-10-15 19:43:14 +03:00
Alexis Métaireau	49c3c2c6bb	Add support for 24.10 (oracular) ... Refs #947	2024-10-15 19:41:49 +03:00
Alex Pyrgiotis	8ad95981ea	dev_scripts: Add user fix for Ubuntu 24.10 ... It seems that the container image for Ubuntu 24.10 also ships with a default Ubuntu user with UID 1000, so we need to remove it when creating our dev environment.	2024-10-15 19:41:49 +03:00
Alex Pyrgiotis	8f5ae9d6ad	dev_scripts: Make user networking work in an Ubuntu 24.10 dev environment ... Try installing `passt`, which is responsible for user networking in later Podman releases. If not installed, building the container image within an Ubuntu 24.10 environment fails with: setup network: could not find pasta, the network namespace can't be configured: exec: "pasta": executable file not found in $PATH Note that this package is not available in older Ubuntu versions. In these cases, we should swallow installation failures and continue.	2024-10-15 15:47:58 +03:00
Alex Pyrgiotis	44a6cc0017	dev_scripts: Install pip in dev environments ... Install pip in dev environments, so that we can use it to vendor PyMuPDf in subsequent commits.	2024-10-15 13:09:52 +03:00
Alexis Métaireau	025e5dda51	Switch from CircleCI runners to Github actions. ... As part of this change, the dev (build) and end-user test images names changed from `dangerzone.rocks/*` to `ghcr.io`. A new `--sync` option is provided in the `env.py` command, in order to retrieve the images from the registry, or build and upload otherwise.	2024-10-02 16:47:58 +02:00
Alexis Métaireau	b375a7e96e	dev_scripts: store env data in the user's data dir. ... Previously, these files where stored inside the repository (under `dev_scripts/env/`), which could lead to conflicts with some tooling (black, debian-helper). (Linux only): as a convenience, here is how to move data to the new location: ```bash mkdir -p ~/.local/share/dangerzone-dev mv dev_scripts/envs/ ~/.local/share/dangerzone-dev/. ```	2024-09-11 16:20:27 +02:00
Alexis Métaireau	396c3b56c8	packaging: replace stdeb by pybuild ... As a result, a new `debian` folder is now living in the repository. Debian packaging is now done manually rather than using tools that do the heavy-lifting for us. The `build-deb.py` script has also been updated to use `dpkg-buildpackage`	2024-09-11 16:20:27 +02:00
Alex Pyrgiotis	3002849b7f	Install Thunar in our Dangerzone environments ... Install Thunar in our Dangerzone Linux environments, so that we can use it for our drag-and-drop QA test.	2024-09-10 22:28:31 +03:00
Alex Pyrgiotis	f739761405	dev_scripts: Download FPF's PySide6 RPM only for Fedora 39 ... Download the FPF-maintained python3-pyside6 RPM [1] only when we build an end-user environment for Fedora 39. Else, from Fedora 40 onwards, we can use the official `python3-pyside6` RPM. Refs freedomofpress/maint-dangerzone-pyside6#5 [1]: https://packages.freedom.press/yum-tools-prod/dangerzone/f39/python3-pyside6-6.7.1-1.fc39.x86_64.rpm	2024-08-09 14:40:12 +03:00
Alex Pyrgiotis	c1dbe9c3e3	dev_scripts: Handle Dangerzone packages with patch level != 1 ... Update our `env.py` script to auto-detect the correct Dangerzone package name. This is useful when building an end-user environment, i.e., a container image where we copy the respective Dangerzone .deb/.rpm package and install it via a package manager. To achieve this, we replace the hardcoded patch level (`-1`) in the package name with a glob character (`*`). Then, we check in the respective build directory if there's exactly one match for this pattern. If yes, we return the full path. If not, we raise an exception. Note that this limitation was triggered when we were building RPM packages for the 0.7.0 hotfix release. Refs #880	2024-07-30 18:36:53 +03:00
Alexis Métaireau	df3f8f7cb5	Do not allow uploading the token as an asset	2024-07-24 15:04:09 +03:00
Alex Pyrgiotis	f476102ee9	dev_scripts: Properly skip QA scenarios on Linux ... With the addition of the drag-and-drop QA scenario, the numbering of the QA steps has changed. Mirror this numbering change in the qa.py script as well, which tracks which QA scenarios do not apply to Linux platforms.	2024-06-27 21:47:51 +03:00
Alex Pyrgiotis	58bc9950c5	Remove an errand whitespace character	2024-06-27 21:47:16 +03:00
deeplow	d0e1df5546	Add drag and drop support for document selection	2024-06-27 11:51:41 +02:00
Alexis Métaireau	92ae942661	Use python 3.12 for Windows and macOS builds ... Fixes #848	2024-06-26 19:42:54 +02:00
Alexis Métaireau	c2a47ec46b	Drop support for Fedora 38 ... Fedora 38 is EOL since 21 May 2024, so this removes the specific branches we had checking for it, and updates the related instructions.	2024-06-20 17:08:27 +02:00