Compare commits

..

15 commits

Author SHA1 Message Date
Alex Pyrgiotis
3756be26f9
FIXUP: Remove unnecessary container function 2024-12-09 19:19:22 +02:00
Alex Pyrgiotis
585e23f8d3
fixup! ci: Work with image tarballs that are not tagged as 'latest' 2024-12-09 19:19:22 +02:00
Alex Pyrgiotis
056bd705a7
FIXUP: Formatting 2024-12-09 19:19:22 +02:00
Alex Pyrgiotis
99011f9c46
ci: Work with image tarballs that are not tagged as 'latest'
Now that our image tarball is not tagged as 'latest', we must first grab
the image tag first, and then refer to it. We can grab the tag either
from `share/image-id.txt` (if available) or with:

    docker load dangerzone.rocks/dangerzone --format {{ .Tag }}
2024-12-09 19:19:22 +02:00
Alex Pyrgiotis
c90915a465
FIXUP: Don't require a 'latest' image tag anymore 2024-12-09 19:19:22 +02:00
Alex Pyrgiotis
3bf7310812
FIXUP: Use longer tag description, so that the commit is always shown 2024-12-09 19:19:22 +02:00
Alex Pyrgiotis
7b1a09253c
Move container security arg to proper place
Now that #748 has been merged, we can move the `--userns nomap` argument
to the list with the rest of our security arguments.
2024-12-09 19:19:22 +02:00
Alex Pyrgiotis
27b9de9bf2
Factor out container utilities to separate module 2024-12-09 19:19:22 +02:00
Alex Pyrgiotis
57b49cdb4e
Extend the interface of the isolation provider
Add the following two methods in the isolation provider:
1. `.is_available()`: Mainly used for the Container isolation provider,
   it specifies whether the container runtime is up and running. May be
   used in the future by other similar providers.
2. `.should_wait_install()`: Whether the isolation provider takes a
   while to be installed. Should be `True` only for the Container
   isolation provider, for the time being.
2024-12-09 19:19:21 +02:00
Alex Pyrgiotis
6b899fe759
Fix minor typos in our docs 2024-12-09 19:19:21 +02:00
Alex Pyrgiotis
b078d52fb7
Update our release instructions 2024-12-09 19:19:21 +02:00
Alex Pyrgiotis
e72b89cde9
container: Revamp container image installation
Revamp the container image installation process in a way that does not
involve using image IDs. We don't want to rely on image IDs anymore,
since they are brittle (see
https://github.com/freedomofpress/dangerzone/issues/933). Instead, we
use image tags, as provided in the `image-id.txt` file.  This allows us
to check fast if an image is up to date, and we no longer need to
maintain multiple image IDs from various container runtimes.

Refs #933
Refs #988
Fixes #1020
2024-12-09 19:19:21 +02:00
Alex Pyrgiotis
682436fb25
Build and tag Dangerzone images
Build Dangerzone images and tag them with a unique ID that stems from
the Git reop. Note that using tags as image IDs instead of regular image
IDs breaks the current Dangerzone expectations, but this will be
addressed in subsequent commits.
2024-12-09 19:19:21 +02:00
Alex Pyrgiotis
569e683f31
container: Factor out loading an image tarball 2024-12-09 19:19:21 +02:00
Alex Pyrgiotis
6773962466
container: Manipulate Dangerzone image tags
Add the following methods that allow the `Container` isolation provider
to work with tags for the Dangerzone image:
* `list_image_tag()`
* `delete_image_tag()`
* `add_image_tag()`
2024-12-09 19:19:21 +02:00

Diff content is not available