7310977343
We can no longer install Poetry via `pip`, since Debian Bookworm now enforces PEP 668, meaning that both `pip install poetry` and `pip install --user poetry` cannot work [1]. Since we use the same installation steps for all of our dev environments, we need to find a common way to install Poetry. Poetry's website provides several ways to install Poetry [2]. Moreover, it also has a special section with CI recommendations [3]. In this section, it strongly suggests to install Poetry via `pipx`, instead of the installer script that you download from the Internet. Follow Poetry's suggestion to install it via `pipx` in CI environments, with one minor change. Do not use `pipx ensurepath`, as that will affect the `.bashrc` of the dev environment, which at some point in the future may be mounted by the dev. Instead, set a PATH environment variable that includes `~/.local/bin`. [1]: https://github.com/freedomofpress/dangerzone/issues/351 [2]: https://python-poetry.org/docs/#installation [3]: https://python-poetry.org/docs/#ci-recommendations Fixes #351 |
||
|---|---|---|
| .circleci | ||
| .github/workflows | ||
| assets | ||
| container | ||
| dangerzone | ||
| dev_scripts | ||
| install | ||
| share | ||
| tests | ||
| .gitignore | ||
| BUILD.md | ||
| CHANGELOG.md | ||
| INSTALL.md | ||
| LICENSE | ||
| Makefile | ||
| poetry.lock | ||
| pyproject.toml | ||
| README.md | ||
| RELEASE.md | ||
| setup-windows.py | ||
| setup.py | ||
| stdeb.cfg | ||
Dangerzone
Take potentially dangerous PDFs, office documents, or images and convert them to a safe PDF.
 |
 |
|---|
Dangerzone works like this: You give it a document that you don't know if you can trust (for example, an email attachment). Inside of a sandbox, Dangerzone converts the document to a PDF (if it isn't already one), and then converts the PDF into raw pixel data: a huge list of RGB color values for each page. Then, in a separate sandbox, Dangerzone takes this pixel data and converts it back into a PDF.
Read more about Dangerzone in the blog post Dangerzone: Working With Suspicious Documents Without Getting Hacked.
Getting started
- Download Dangerzone 0.4.0 for Mac
- Download Dangerzone 0.4.0 for Windows
- See installing Dangerzone for Linux repositories
You can also install Dangerzone for Mac using Homebrew: brew install --cask dangerzone
Some features
- Sandboxes don't have network access, so if a malicious document can compromise one, it can't phone home
- Dangerzone can optionally OCR the safe PDFs it creates, so it will have a text layer again
- Dangerzone compresses the safe PDF to reduce file size
- After converting, Dangerzone lets you open the safe PDF in the PDF viewer of your choice, which allows you to open PDFs and office docs in Dangerzone by default so you never accidentally open a dangerous document
Dangerzone can convert these types of document into safe PDFs:
- PDF (
.pdf) - Microsoft Word (
.docx,.doc) - Microsoft Excel (
.xlsx,.xls) - Microsoft PowerPoint (
.pptx,.ppt) - ODF Text (
.odt) - ODF Spreadsheet (
.ods) - ODF Presentation (
.odp) - ODF Graphics (
.odg) - Jpeg (
.jpg,.jpeg) - GIF (
.gif) - PNG (
.png)
Dangerzone was inspired by Qubes trusted PDF, but it works in non-Qubes operating systems. It uses containers as sandboxes instead of virtual machines (using Docker for macOS, Windows, and Debian/Ubuntu, and podman for Fedora).
Set up a development environment by following these instructions.