summaryrefslogtreecommitdiffstats
path: root/config
Commit message (Collapse)AuthorAgeFilesLines
* libdvd-css should not be checkedfeature/11420-verify-libdvdcssAustin English2016-05-221-1/+1
|
* config/chroot_local-hooks/59-libdvd-pkg: verify libdvdcss package installationAustin English2016-05-221-0/+7
|
* Revert "Install the nmh package."anonym2016-05-221-1/+0
| | | | | | | | | This reverts commit f3ffa32d961a99918500fc04d9f5a9fd3c50105b. The supported Claws-Mail-to-Icedove migration period is over, so let's drop the dependency we installed specifically for that. Fix-committed: #10457
* Merge remote-tracking branch ↵anonym2016-05-222-18/+0
|\ | | | | | | | | | | 'origin/feature/11075-remove-power-menu-entries' into devel Fix-committed: #11075
| * Merge remote-tracking branch 'origin/devel' into ↵sajolida2016-05-162-0/+6
| |\ | | | | | | | | | feature/11075-remove-power-menu-entries
| * | Remove 'Reboot' and 'Power Off' entries from Applications → System Tools ↵sajolida2016-05-162-18/+0
| | | | | | | | | | | | | | | | | | | | | | | | (Will-fix: #11075) These entries were added in 8b7dac2 for the Windows camouflage. But we don't have the Windows camouflage anymore and they are cruft with the default theme.
* | | Adapt APT preferences to our snapshot system.anonym2016-05-221-2/+2
| | |
* | | Merge remote-tracking branch 'origin/devel' into feature/11303-mesa-backportanonym2016-05-2220-157/+144
|\ \ \
| * \ \ Merge remote-tracking branch 'origin/feature/5926-freezable-APT-repository' ↵anonym2016-05-2212-129/+129
| |\ \ \ | | | | | | | | | | | | | | | into devel
| | * | | Pin our custom APT repo to the same level as Debian ones, and explicitly pin ↵intrigeri2016-05-211-1/+25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | higher the packages we want to pull from our custom APT repo, when needed. See the "Freeze exceptions" section of the freezable APT repository design for the reason behind this. Note that we don't add explicit pinning for: * packages that are not available in any other configured APT repository than our custom APT one: i2p, i2p-router, libjbigi-jni, tails-iuk, tails-perl5lib, tails-persistence-setup, whisperback * packages that have newer version, in our custom APT repo, than the ones in other APT repositories pinned to 990 (Debian Jessie): lib*-mesa*, libgbm1, libxatracker2 ... the idea being to rely on sane defaults settings & behaviour as much as possible, and to encode only exceptions in this file. And regarding the packages we do explicitly pin here: * grub*: if 2.02~beta2-22+deb8u2 ever exists, it would be higher than our custom package, so we need to pin ours * onioncircuits, tails-installer: they are available from Debian (jessie-backports) as well, but for now let's always pull them from our custom APT repo; this might change some day, depending on the outcome of the discussion on #11361
| | * | | At boot time, reset APT sources.list to the live upstream ones.intrigeri2016-05-171-0/+68
| | | | | | | | | | | | | | | | | | | | | | | | | A running Tails' APT must be pointed at the official, live upstream archive, and not to a Tails-specific and already obsolete snapshot.
| | * | | Merge remote-tracking branch 'origin/devel' into ↵intrigeri2016-05-172-0/+6
| | |\ \ \ | | | | |/ | | | |/| | | | | | feature/5926-freezable-APT-repository
| | * | | Adjust APT to also support Debian Security, as presented in our tagged APT ↵intrigeri2016-05-161-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | snapshots. Here I'm effectively replacing an unused entry (in the regular Debian archive, there is no such thing as o=Debian,n=jessie/updates) with something that matches both our time-based and tagged snapshots. The regular Debian Security archive is already covered by the o=Debian,n=jessie pinning entry we have anyway.
| | * | | Merge remote-tracking branch 'origin/devel' into ↵intrigeri2016-05-141-0/+3
| | |\ \ \ | | | | |/ | | | |/| | | | | | feature/5926-freezable-APT-repository
| | * | | Fix regression in time-based snapshots, introduced when adding support for ↵intrigeri2016-05-142-4/+8
| | | | | | | | | | | | | | | | | | | | tagged snapshots.
| | * | | Drop module-assistant hook and its cleanup.intrigeri2016-05-142-41/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We've not been using it since 2010. When building using tagged APT snapshots, module-assistant is found is no configured APT repository, and apt-get fails hard when we try to remove a package it doesn't know about.
| | * | | Don't try to remove packages that are not installed during the build.intrigeri2016-05-141-6/+2
| | | | | | | | | | | | | | | | | | | | | | | | | This fails when building from a tagged snapshot, as apt-get fails hard when trying to remove a package it doesn't know about.
| | * | | Don't try to temporarily enable deb-src for torproject from tagged APT ↵intrigeri2016-05-142-4/+4
| | | | | | | | | | | | | | | | | | | | snapshots either.
| | * | | Use APT codenames (e.g. "stretch") instead of suites, to be compatible with ↵intrigeri2016-05-143-3/+3
| | | | | | | | | | | | | | | | | | | | our tagged APT snapshots.
| | * | | Drop Debian experimental APT source: we don't use it.intrigeri2016-05-142-2/+0
| | | | | | | | | | | | | | | | | | | | | | | | | And unused APT sources break building from (partial) tagged APT snapshots, that only include the dists we are pulling at least one package from.
| | * | | Merge branch 'feature/10748-gen-packages-manifest' into ↵intrigeri2016-05-121-0/+11
| | |\ \ \ | | | | | | | | | | | | | | | | | | feature/5926-freezable-APT-repository
| | * | | | Don't try to fetch deb-src for torproject, bis.intrigeri2016-05-111-0/+2
| | | | | |
| | * | | | Add explicit APT pinning for libdvd-pkg.intrigeri2016-05-111-0/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | So far, it was magically pulled from jessie-backports merely because we forgot to add a general pinning level of -10 for backports in config/chroot_apt/preferences, unlike what we've done for all our other APT sources. And now it's broken, because in our APT snapshots system, backports have o=Debian, and not o=Debian Backports anymore. So, let's remove this exception, and pin the package explicitly.
| | * | | | Don't attempt to fetch deb-src for torproject: they don't provide anything ↵intrigeri2016-05-111-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | useful in there, so we don't snapshot them.
| | * | | | APT pinning: with our snapshots system, backports have o=Debian.intrigeri2016-05-111-6/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ... and here as well, add a sanity check to warn the developer early if they used "o=Debian Backports". We could easily fix that for time-based snapshots, but for tagged snapshots it's a different story: when we pull packages from time-based snapshots into tagged snapshots, we have no means to know what was the Origin they were pulled from initially. Granted, we *could* handle backports as a different archive (just like we have to do for debian-security), but it doesn't feel worth the hassle.
| | * | | | APT pinning: use n=sid instead of a=unstable, to be compatible with our ↵intrigeri2016-05-111-16/+16
| | | | | | | | | | | | | | | | | | | | | | | | time-based APT snapshots system.
| | * | | | Merge branch 'feature/10748-gen-packages-manifest' into ↵intrigeri2016-05-1119-6263/+9495
| | |\ \ \ \ | | | | | | | | | | | | | | | | | | | | | feature/5926-freezable-APT-repository
| | * \ \ \ \ Merge branch 'feature/build-from-snapshots' into ↵intrigeri2016-03-255-66/+9
| | |\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | feature/5926-freezable-APT-repository
| | | * | | | | Drop useless APT pinning for Linux.intrigeri2016-03-251-64/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It breaks stuff with out APT snapshots, since our debian-security mirror has "Codename: jessie/updates". To fix that, we would need to duplicate all these sections. Let's not bother and rely on the default pinning for Jessie and jessie/updates, that will do the right thing.
| | | * | | | | Thaw APT snapshots.intrigeri2016-03-253-3/+3
| | | | | | | |
| | | * | | | | Bump pointers to APT snapshots.intrigeri2016-03-253-3/+3
| | | | | | | |
| | | * | | | | Adjust pinning to also match our debian-security mirror's InRelease.intrigeri2016-03-251-0/+4
| | | | | | | |
| | | * | | | | Drop reference to time-based APT snapshot of our own, custom APT repository.intrigeri2016-03-251-1/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Our custom APT repository (<http://deb.tails.boum.org/>) is not part of the first iteration of this system: it's not needed, since we already have a process to manage it, including creating snapshots labeled with the Git tag.
| | | * | | | | Bump time-based APT snapshots.intrigeri2016-03-244-4/+4
| | | | | | | |
| | | * | | | | Bump snapshot ID.intrigeri2016-03-241-1/+1
| | | | | | | |
| | | * | | | | Merge remote-tracking branch 'origin/stable' into feature/build-from-snapshotsintrigeri2016-03-244-585/+773
| | | |\ \ \ \ \
| | * | \ \ \ \ \ Merge remote-tracking branch 'origin/stable' into ↵intrigeri2016-03-247-5777/+6971
| | |\ \ \ \ \ \ \ | | | | |/ / / / / | | | |/| | | | | | | | | | | | | | feature/5926-freezable-APT-repository
| | * | | | | | | Merge remote-tracking branch 'origin/testing' into ↵intrigeri2016-03-0348-1151/+2782
| | |\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | feature/5926-freezable-APT-repository
| | * \ \ \ \ \ \ \ Merge remote-tracking branch 'origin/stable' into ↵intrigeri2016-03-033-18/+18
| | |\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | feature/5926-freezable-APT-repository
| | * \ \ \ \ \ \ \ \ Merge remote-tracking branch 'origin/devel' into ↵intrigeri2016-02-1379-5907/+9247
| | |\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | feature/5926-freezable-APT-repository
| | * \ \ \ \ \ \ \ \ \ Merge branch 'devel' into feature/5926-freezable-APT-repositoryintrigeri2015-12-18234-6934/+8626
| | |\ \ \ \ \ \ \ \ \ \
| | * | | | | | | | | | | Extract list of (origin, reference) from the build configuration.intrigeri2015-12-134-0/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For now, we hard-code arbitrary snapshot serial numbers in the build configuration. They at least allow us to write and test the code that reads them from the configuration tree. refs: #10748
| | * | | | | | | | | | | Don't include /debootstrap in the SquashFS.intrigeri2015-12-131-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We won't need it once the files we need in there have been retrieved by the build system. Refs: #5926
| | * | | | | | | | | | | Fix shebang.intrigeri2015-12-131-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | IIRC it's not used in practice (live-config *sources* these hooks), but still. Refs: #5926
| | * | | | | | | | | | | Merge remote-tracking branch 'kibi/pu/stable-v1' into ↵intrigeri2015-12-132-0/+12
| | |\ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | feature/5926-freezable-APT-repository
| | | * | | | | | | | | | | Restore original apt-get at boot time.Cyril Brulebois2015-10-271-0/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It would probably be a better idea to perform this operation only once at build time but it requires hooking into the very last minute before ISO image building, so that all APT operations go through the wrapper, before removing it. Signed-off-by: Cyril Brulebois <cyril@debamax.com>
| | | * | | | | | | | | | | Pull monkeysphere from stretch to avoid failing to install under eatmydata.Cyril Brulebois2015-10-251-0/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Cyril Brulebois <cyril@debamax.com>
| | * | | | | | | | | | | | Merge remote-tracking branch 'origin/stable' into ↵intrigeri2015-12-131-13/+11
| | |\ \ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | feature/5926-freezable-APT-repository
| | * \ \ \ \ \ \ \ \ \ \ \ \ Merge remote-tracking branch 'origin/stable' into ↵intrigeri2015-11-0629-5430/+9056
| | |\ \ \ \ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | feature/5926-freezable-APT-repository
| | * | | | | | | | | | | | | | Add skeleton for scripts and config directories we'll need.intrigeri2015-10-271-0/+0
| | | |_|/ / / / / / / / / / / | | |/| | | | | | | | | | | |