| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
tagged snapshots.
|
|
|
|
| |
snapshots either.
|
| |
|
|\
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Conflicts:
features/images/I2P_router_console.png
features/images/TailsInstallerNoDevice.png
features/images/TorBrowserAddressBar.png
features/images/USBSuggestsInstall.png
features/images/UnsafeBrowserAdvancedSettings.png
features/images/UnsafeBrowserEditPreferences.png
features/images/UnsafeBrowserProxyRefused.png
features/images/UnsafeBrowserWindow.png
features/step_definitions/unsafe_browser.rb
|
| |\
| | |
| | |
| | | |
Fix-committed: #9748
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
It was introduced (#9381) for reasons that ended up being wrong (#9594).
Here, we also remove amd64 APT sources and dpkg's support for amd64 as a foreign
architecture. We'll need them again when we want to ship Linux 4.x, but once
we're there we can perhaps enable amd64 sources only for selected APT
repositories, to avoid re-introducing #9381.
Reverts:
e9d2e345fc931c59e84ab8064306356a32e5f07b
181c6d268d0f43d7ca8869eab295887f2422036b
e1d331aa9a06b4a115f9f2aee713ea6a40d3e3d8
Will-fix: #9748
|
| |\ \
| | |/ |
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
It's what Debian's default GRUB configuration does. This fixes screen freezing
after the switch to inteldrmfb, at least on the Toshiba Encore 2 WT8-1 tablet.
Refs: #8471
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Ideally:
* either this configuration should be generated automatically from
the syslinux one;
* or, we should use GRUB's syslinux_configfile command (from the syslinuxcfg
module) to load and interpret the syslinux configuration;
* or, worst case, we should have a documented process to update the
GRUB configuration whenever we change anything that affects
the syslinux one.
Also, this initial configuration has some drawbacks:
* it has a security issue, see XXX in grub.cfg;
* the failsafe mode is incomplete, because I currently need that one
to debug stuff.
Refs: #8471
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
This reverts commit 441892f6197efbe014cfb54fc6f9d43ed7e425bb.
The two 32-bit UEFI systems I've tried booting on only support the fallback UEFI
path, that's not an option for us with 32-bit syslinux UEFI, as explained in the
commit we're presently reverting.
I also tried, and failed, to convince GRUB2 installed in the fallback location
(EFI/BOOT/bootia32.efi) to chainload into 32-bit syslinux UEFI.
So I'm giving up with using syslinux for 32-bit UEFI.
Refs: #8471
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Note that we install it in BOOT/TAILS32 (while the 64-bit boot loader lives in
the BOOT/EFI fallback directory), since syslinux module files have the same name
regardless of the architecture, so we cannot simply put them all in the
same directory.
The drawback is that some buggy UEFI firmware may pick the wrong bootloader,
that's not made for their architecture. Or, that they present the user with
confusing choice between "EFI" and "TAILS32". We'll see.
Of course, alternatively we could try to rename the 32-bit module files, so we
can put them in BOOT/EFI as well; this would require adjusting the configuration
files accordingly, in order to 1. load the 32-bit modules when the UEFI firmware
is 32-bit; and 2. convince syslinux to load a different configuration file
depending on the UEFI firmware's architecture (*not* the CPU architecture,
beware!).
Refs: #8471
|
|\ \ \
| | |/
| |/| |
|
| | |
| | |
| | |
| | | |
Will-fix: #9381
|
| |/ |
|
|\ \
| |/
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Conflicts:
auto/build
config/chroot_apt/preferences
config/chroot_local-packageslists/tails-common.list
config/chroot_local-patches/gdm-background.diff
features/images/UnsafeBrowserStartVerification.png
features/step_definitions/apt.rb
features/step_definitions/evince.rb
po/POTFILES.in
wiki/src/contribute/design/memory_erasure.mdwn
wiki/src/support/known_issues.mdwn
|
| |\
| | |
| | |
| | |
| | |
| | | |
devel
Fix-committed: #8756
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
live-build does not include source packages in the index of locally available
packages. This makes since, since we don't include deb-src lines for other
repositories. And then, as reported on
https://labs.riseup.net/code/issues/8724#note-12, whenever ones uses the
config/chroot_local-packages feature, the build fails.
Therefore, when we generate temporary deb-src entries, skip the repository that
indexes locally available packages. This should only be problematic if one wants
to provide the syslinux source package there, which is unlikely, and in any case
way less important than repairing config/chroot_local-packages for the general
case (binary packages).
|
|\ \ \
| |/ /
| | |
| | | |
feature/jessie
|
| |/
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
(Will-Fix: #8715).
live-build expects to be the only one that manages APT sources.
Since feature/8194-APT-socks was merged, we're breaking this assumption of its,
by mangling APT sources under live-build's feet via chroot_local-hooks.
More specifically, if:
* $LB_MIRROR_CHROOT != $LB_MIRROR_BINARY or
$LB_MIRROR_CHROOT_SECURITY != $LB_MIRROR_BINARY_SECURITY,
as is the case when building with Vagrant or when following our manual
build setup instructions accurately (live-build defaults to
ftp.de.debian.org for some of its APT configuration),
or:
* one has dropped .deb's in config/chroot_local-packages, as contributors
without write access to our APT repository may want to do,
then after completing the chroot_local-hooks stage, lb_chroot_sources would
rewrite APT sources to match what we have previously configured (see the check
at lines 490-498 in live-build 2.x tree), and therefore the ISO image would have
http:// URLs configured instead of the expected tor+http://.
Therefore, let's mangle APT sources configuration at boot time instead.
|
|\ \
| |/
| |
| |
| |
| |
| |
| | |
Conflicts:
config/chroot_apt/preferences
config/chroot_local-hooks/52-update-rc.d
config/chroot_local-includes/etc/polipo/config
config/chroot_local-patches/torsocks_gobby-0.5.patch
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
from HTTP to SOCKS.
Don't run apt-get update in the chroot again after reconfiguring APT sources
for runtime.
This is broken by the move to torsocks. Back when we used a HTTP proxy, the
HTTP_PROXY environment variable passed by the build environment was overriding
the APT proxy configured for runtime. This is not the case anymore, and now that
APT run tries to use both the tor+http shim and the HTTP proxy used in the build
environment, which is rejected by torsocks.
Besides, the build process works just fine without this "apt-get update" run,
so let's just drop it.
|
| |\ |
|
| | | |
|
| | | |
|
| |/
|/| |
|
|/
|
|
|
|
|
|
|
| |
(Closes: #7691).
If we don't do this, APT can't download lists from the Internet. And then, in
some situations, it lacks the information needed to install dpkg-dev. I'm not
sure why it can even work in some other cases, but in any case, this hook
makes oh so much sense to me with this modification.
|
|
|
|
|
|
|
|
| |
The APT config mangling is made in the chroot, as that's where all keys
corresponding to the configured APT repos can be found, and the APT pinning has
been setup. Note that, when this hook runs, the SquashFS has been generated
already, so modifying the content of the chroot at this point should not affect
the resulting ISO much.
|
| |
|
|
|
|
|
| |
This in turn allows Tails Installer to use this binary and MBR, which is
critical for avoiding problems (such as #7345) on "Upgrade from ISO".
|
|\ |
|
| |
| |
| |
| | |
on Wheezy (Closes: #7025).
|
| | |
|
| | |
|
| |
| |
| |
| |
| | |
Else, with syslinux 6.x, the boot fails with "ldlinux.c32 not found"
and similar.
|
| |
| |
| |
| |
| | |
We do this for all our other hooks, and I have just seen a case when it
silently broke.
|
|/
|
|
|
|
|
|
|
|
| |
This requires to:
1. Copy files around for compatibility between live-build 2.x and syslinux
3:6.03~pre1+dfsg-1. Ugly, yes.
2. Install isolinux and syslinux-common explicitly, since it is the ones that
ship isolinux.bin and the *.c32 modules in syslinux 6.x packaging, and are
merely recommends.
|
| |
|
|
|
|
| |
required for UEFI boot on 64-bit hardware.
|
|\ |
|
| | |
|
|\ \
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Conflicts:
config/chroot_local-hooks/50-virtualbox
config/chroot_local-hooks/52-update-rc.d
config/chroot_local-includes/etc/init.d/tails-wipe-memory-on-media-removal
vagrant/provision/assets/build-tails
|
| |/
| |
| |
| |
| | |
Ensure that all local hooks start with 'set -e'. This should prevent errors
to slip through the build process.
|
| |
| |
| |
| |
| |
| | |
We don't want to install it from the build system since the
syslinux versions may differ, introducing subtle desynchronization
induced breakage.
|
|/ |
|
| |
|
| |
|
|
|
|
|
| |
This branch is about using syslinux to select other kind of options.
tails-greeter allows choosing a !English language.
|
| |
|
|
|
|
| |
This is according to an Iranian Tails user.
|
|
|
|
| |
according to the number of items in it.
|