Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove (sys/sd)-whonix default prompt #2278

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

deeplow
Copy link
Contributor

@deeplow deeplow commented Nov 4, 2024

Status

Ready for review

Removes out-of-the-box INFO-level Whonix systemcheck prompts. This is helpful for GUI tests. Furthermore, it should of no consequence to an end-user, since:

  • Derivative repo: it simply informs about the installed debian repositories.
  • Updates check: whonix-gateway-17 update checks are already enforced by our updater

Description

Fixes #2277

Test Plan

  • CI passes
  • Visual Review
  • Test Code
    • be on a system with the workstation uninstalled (or not installed at all)
    • build client packages
    • copy to and install securedrop-whonix-config package in whonix-gateway-17 template and shut it down
    • make dev in workstation
    • confirm that sd-whonix does not show any confirmation prompts

Checklist

If these changes modify code paths involving cryptography, the opening of files in VMs or network (via the RPC service) traffic, Qubes testing in the staging environment is required. For fine tuning of the graphical user interface, testing in any environment in Qubes is required. Please check as applicable:

  • I have tested these changes in the appropriate Qubes environment
  • I do not have an appropriate Qubes OS workstation set up (the reviewer will need to test these changes)
  • These changes should not need testing in Qubes

If these changes add or remove files other than client code, the AppArmor profile may need to be updated. Please check as applicable:

  • I have updated the AppArmor profile
  • No update to the AppArmor profile is required for these changes
  • I don't know and would appreciate guidance

If these changes modify the database schema, you should include a database migration. Please check as applicable:

  • I have written a migration and upgraded a test database based on main and confirmed that the migration is self-contained and applies cleanly
  • I have written a migration but have not upgraded a test database based on main and would like the reviewer to do so
  • I need help writing a database migration
  • No database schema changes are needed

Removes out-of-the-box INFO Whonix systemcheck prompts. This is
helpful for GUI tests. Furthermore, it should of no consequence
to an end-user, since:
- Derivative repo: it simply informs about the installed debian
repositories.
- Updates check: whonix-gateway-17 update checks are already
enforced by our updater [1]

Fixes https://github.com/freedomofpress/securedrop-client#2277

[1]: https://github.com/freedomofpress/securedrop-workstation/blob/f493665/sdw_updater/Updater.py#L51
@deeplow deeplow requested a review from a team as a code owner November 4, 2024 17:00
@legoktm legoktm self-assigned this Nov 4, 2024
Copy link
Member

@legoktm legoktm left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

See comments, one thing for you to fix and one thing I'll work on. Otherwise this looks great.

@@ -50,7 +50,7 @@ Package: securedrop-whonix-config
Section: admin
Architecture: all
# FIXME: s/tor/anon-gw-anonymizer-config/ (requires Whonix repositories in piuparts)
Depends: ${misc:Depends}, securedrop-qubesdb-tools, tor
Depends: ${misc:Depends}, securedrop-qubesdb-tools, tor, systemcheck
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is correct, but this is what's causing the piuparts jobs to fail (see the TODO). Let me work on that for you.

@@ -1 +1,2 @@
whonix-config/app_journalist.auth_private.tmpl /usr/share/securedrop-whonix-config
whonix-config/etc/systemcheck.d/50_securedrop.conf /etc/systemcheck.d/
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Since we're shipping a file in /etc/, we need to adapt the conffiles hack (see debian/rules) for the securedrop-whonix-config package as well.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: Ready For Review
Development

Successfully merging this pull request may close these issues.

Supress non-actionable (sys/sd)-whonix messages
2 participants