-
Notifications
You must be signed in to change notification settings - Fork 39
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Remove (sys/sd)-whonix default prompt #2278
base: main
Are you sure you want to change the base?
Conversation
Removes out-of-the-box INFO Whonix systemcheck prompts. This is helpful for GUI tests. Furthermore, it should of no consequence to an end-user, since: - Derivative repo: it simply informs about the installed debian repositories. - Updates check: whonix-gateway-17 update checks are already enforced by our updater [1] Fixes https://github.com/freedomofpress/securedrop-client#2277 [1]: https://github.com/freedomofpress/securedrop-workstation/blob/f493665/sdw_updater/Updater.py#L51
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
See comments, one thing for you to fix and one thing I'll work on. Otherwise this looks great.
@@ -50,7 +50,7 @@ Package: securedrop-whonix-config | |||
Section: admin | |||
Architecture: all | |||
# FIXME: s/tor/anon-gw-anonymizer-config/ (requires Whonix repositories in piuparts) | |||
Depends: ${misc:Depends}, securedrop-qubesdb-tools, tor | |||
Depends: ${misc:Depends}, securedrop-qubesdb-tools, tor, systemcheck |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is correct, but this is what's causing the piuparts jobs to fail (see the TODO). Let me work on that for you.
@@ -1 +1,2 @@ | |||
whonix-config/app_journalist.auth_private.tmpl /usr/share/securedrop-whonix-config | |||
whonix-config/etc/systemcheck.d/50_securedrop.conf /etc/systemcheck.d/ |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Since we're shipping a file in /etc/, we need to adapt the conffiles hack (see debian/rules
) for the securedrop-whonix-config package as well.
Status
Ready for review
Removes out-of-the-box
INFO
-level Whonix systemcheck prompts. This is helpful for GUI tests. Furthermore, it should of no consequence to an end-user, since:Description
Fixes #2277
Test Plan
securedrop-whonix-config
package in whonix-gateway-17 template and shut it downmake dev
in workstationChecklist
If these changes modify code paths involving cryptography, the opening of files in VMs or network (via the RPC service) traffic, Qubes testing in the staging environment is required. For fine tuning of the graphical user interface, testing in any environment in Qubes is required. Please check as applicable:
If these changes add or remove files other than client code, the AppArmor profile may need to be updated. Please check as applicable:
If these changes modify the database schema, you should include a database migration. Please check as applicable:
main
and confirmed that the migration is self-contained and applies cleanlymain
and would like the reviewer to do so