Release v20.2 to unstable

-----BEGIN PGP SIGNATURE-----
 
 iQJKBAABCgA0FiEEfWrbdQ+RCFWJSEvmd8DHXntlCAgFAl5B93MWHGp2YWxsZXJv
 eUBtYWlsYm94Lm9yZwAKCRB3wMdee2UICDGwEACX8F8fHHD++j/ULpk1O4LUxdfr
 D6MZ1002rdNmVaDSBK8hv6AKF+M4EStkhzwAe5iiUK82Fh6SaGhN1xHymAUMw7Q6
 IJp0F05Psj6LZFjTF03qmfdr8tCYysF8xN9LBLeEIFqJ7jUQU7p3DIXNRAXq01Uk
 rPeA3ibuhLw/i40W3AGEm1R1pQx3zTs6LljiyIB37arS9ply0skT2w3+Kw6mnera
 oWXSH2aVQ/jX5Sa/7W9EDhYhVRqcw106uWQ+Fmv9LhscNpOIOvCHQ9r0+7LR1En1
 Bu3ATt2UAOiFWU0N0Meb0M0cmRG4EmTiJ9jwm6AZVBG7iBIIU9tmeiOrBj1APU38
 FlqsoxuRmMp6KaJT+bkfsVU0M/4e4Q5gP12dAzVEhw34jfsyQGqK+hyrxuGBbXCZ
 ojxUmU24AW6iC4TfSf0WVvuSNl2oyuZWwhtBBOFVlMZmDp2G4zywTcLzwmbXfpfL
 PBfIC0pC0r0G7n8oHOmIVkaL70y8RvjshkZOpPkx1mlFXCDfkeJv6xjfd5zFPznA
 QpOiGFCzzPBVgWzf0rCXor01TKNMs+1b72jZjJCCf4kJZO4v5JtE/6LuTScCa+m4
 mp/KtTeEWqfqeIAP5xbg5yys4ITJMukThvN9w9A78tkhE5sbgS5vUA4+rgfzoFpR
 /QTFnqPwVBag8zH9jg==
 =j/pz
 -----END PGP SIGNATURE-----
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQJKBAABCgA0FiEEfWrbdQ+RCFWJSEvmd8DHXntlCAgFAl5F7HgWHGp2YWxsZXJv
 eUBtYWlsYm94Lm9yZwAKCRB3wMdee2UICARdEADA3rnauM4zKzUBlGmkTvhNPsDy
 pce/7jfv917d1xTtDXx1GRbnFmOVXdlOzJqxRU0EN59YCnOKQVr+iN4TS0H0OJzc
 /eIEPNb+95l2L+M4ouTrBr8NiqBd4UtxWGECzhTnxg3rcnCZnXJaqritKz3g/sIF
 +CEqLKNVDRFPWYZYkKxlmIjvn8L4KKlqK1Ckvv9/bLg+EcU73OWk21TUG29qFFoU
 XclxcT36utVn1zibeyc0zZcFCjJkyVqjx4/DkR2Ie+jOllJ7AMX9K0LEayljwq1b
 BEt33qxb1XmZQRjITybCmgV6LmDxobkCI4Qm/BSTdk2oKZT2Q8Lii64DUUSqboKS
 wgmUh78X58A2eIi6jhB7LhEnTj4n6uGXi6MLgoSOOPvPubmIyuPGkjIm+JcSzDFi
 q5TkSHc0Zufr/j8MwjGND8vurfahYcM49Tv9NIZYbtfdTK/4M+jBMqr/KN4qCu80
 3qelayZCcHVFLPDyU9XqUg59z4Dq1nlCRNMiSCbCb0Nv2bccD3XYe0RFvQErz4gd
 Z68mYy3dYbX2nGHS3D0XxskSIs+TOcQkoEKTLysRgeD0jOrb0HmXD/NmCxZ/pFBc
 1IEBqnpNQpovWgLc/aEmOc5eCBMxf7ATjl1mBSXCJUOm0E3G5mXGlNQNY6/xBg3k
 h+WlGID9BcixPUTr4w==
 =WCr8
 -----END PGP SIGNATURE-----

Merge tag 'v20.2' into debian/buster-backports

Release v20.2 to unstable

Signed-off-by: James Valleroy <jvalleroy@mailbox.org>

Vagrantfile

@@ -16,13 +16,16 @@
 # You should have received a copy of the GNU Affero General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
 #
+
+require 'etc'
+
 Vagrant.configure(2) do |config|
   config.vm.box = "freedombox/plinth-dev"
   config.vm.network "forwarded_port", guest: 443, host: 4430
   config.vm.network "forwarded_port", guest: 445, host: 4450
   config.vm.synced_folder ".", "/vagrant", owner: "plinth", group: "plinth"
   config.vm.provider "virtualbox" do |vb|
-    vb.cpus = 2
+    vb.cpus = Etc.nprocessors
     vb.memory = 2048
     vb.linked_clone = true
   end
@@ -48,6 +51,7 @@ Vagrant.configure(2) do |config|
     apt-mark unhold freedombox
     # Install ncurses-term
     DEBIAN_FRONTEND=noninteractive apt-get install -y ncurses-term
+    echo 'alias run-develop="sudo -u plinth /vagrant/run --develop"' >> /home/vagrant/.bashrc
   SHELL
   config.vm.provision "tests", run: "never", type: "shell", path: "functional_tests/install.sh"
   config.vm.post_up_message = "FreedomBox virtual machine is ready

actions/deluge

@@ -58,7 +58,6 @@ LockPersonality=yes
 NoNewPrivileges=yes
 PrivateDevices=yes
 PrivateTmp=yes
-PrivateUsers=yes
 ProtectControlGroups=yes
 ProtectKernelLogs=yes
 ProtectKernelModules=yes

actions/infinoted

@@ -101,7 +101,6 @@ NoNewPrivileges=yes
 PrivateDevices=yes
 PrivateMounts=yes
 PrivateTmp=yes
-PrivateUsers=yes
 ProtectControlGroups=yes
 ProtectHome=yes
 ProtectKernelLogs=yes

actions/searx

@@ -21,6 +21,7 @@ Configuration helper for searx.
 
 import argparse
 import os
+import pathlib
 import secrets
 import shutil
 
@@ -142,14 +143,26 @@ def write_settings(settings):
         yaml.dump(settings, settings_file)
 
 
+def _get_example_settings_file():
+    searx_doc_dir = pathlib.Path('/usr/share/doc/searx/examples/')
+    if (searx_doc_dir / 'settings.yml').exists():
+        return searx_doc_dir / 'settings.yml'
+
+    return searx_doc_dir / 'settings.yml.gz'
+
+
 def subcommand_setup(_):
     """Post installation actions for Searx"""
     _copy_uwsgi_configuration()
     _update_uwsgi_configuration()
 
     if not os.path.exists(SETTINGS_FILE):
-        example_settings_file = '/usr/share/doc/searx/examples/settings.yml.gz'
-        gunzip(example_settings_file, SETTINGS_FILE)
+        example_settings_file = _get_example_settings_file()
+        if example_settings_file.suffix == '.gz':
+            gunzip(str(example_settings_file), SETTINGS_FILE)
+        else:
+            pathlib.Path(SETTINGS_FILE).parent.mkdir(mode=0o755)
+            shutil.copy(example_settings_file, SETTINGS_FILE)
 
     settings = read_settings()
     _generate_secret_key(settings)

debian/changelog

@@ -1,3 +1,69 @@
+plinth (20.2) unstable; urgency=medium
+
+  [ Veiko Aasa ]
+  * networks: Support virtual Ethernet (veth) devices
+  * diagnostics: Show firewall service status
+  * users: Fix functional test delete user
+  * storage: Show disks if FreedomBox is running in an unprivileged container
+  * service: Stop service not before but after disabling it
+  * users: More precise username validation
+  * sso, users: Turn off autocapitalization on the username field
+  * users: Add unit tests for views
+  * help: Fix anchor hidden under navbar
+
+  [ Joseph Nuthalapati ]
+  * tests: Use the latest version of geckodriver
+  * vagrant: Add alias for run --develop
+  * l10n: Add blocktrans trimmed tag on a block
+  * l10n: Add missing trimmed to blocktrans blocks
+  * vagrant: Allocate cpus equal to the no. of cores
+  * Translated using Weblate (Telugu)
+  * searx: Fix installation issue for 0.16.0
+
+  [ Sunil Mohan Adapa ]
+  * firewall: Show Run Diagnostics button in app
+  * help: Eliminate redundant HTML attribute in template
+  * glib: Create a new module to deal with all things glib
+  * glib: Introduce method to schedule an operation at regular intervals
+  * web_framework: Set the timezone to UTC
+  * log: Ability to log SQL queries (disabled by default)
+  * tests: Allow adding test templates
+  * models: Add model for storing notifications
+  * notification: New API for showing better notifications
+  * notification: Add tests for notification API
+  * views: A view to dismiss notifications
+  * notification: Show a drop down from main navbar for notifications
+  * storage: Show low disk space warning using notifications API
+  * upgrades: Show notification when FreedomBox is updated
+  * storage: In develop mode check for low disk space more frequently
+
+  [ Thomas Vincent ]
+  * Translated using Weblate (French)
+
+  [ Allan Nordhøy ]
+  * Translated using Weblate (Norwegian Bokmål)
+
+  [ Ralf Barkow ]
+  * Translated using Weblate (German)
+
+  [ Luis A. Arizmendi ]
+  * Translated using Weblate (Spanish)
+
+  [ James Valleroy ]
+  * users: Make help text translatable
+  * security: Add Sandbox Coverage to report page
+  * bind: Add CapabilityBoundingSet and ReadWritePaths to service file
+  * matrixsynapse: Enable systemd sandboxing
+  * security: Drop PrivateUsers=yes from all service files
+  * locale: Update translation strings
+  * doc: Fetch latest manual
+
+  [ Michael Breidenbach ]
+  * Translated using Weblate (German)
+  * Translated using Weblate (Swedish)
+
+ -- James Valleroy <jvalleroy@mailbox.org>  Mon, 10 Feb 2020 19:22:55 -0500
+
 plinth (20.1~bpo10+1) buster-backports; urgency=medium
 
   * Rebuild for buster-backports.

doc/manual/en/freedombox-manual.raw.xml

@@ -2573,7 +2573,7 @@ echo "UPDATE users SET admin=1 WHERE name='@username:domainname'" | sudo sqlite3
           <ulink url="https://username:password@my.freedombox.rocks/gitweb/myrepo"/>
         </para>
         <para>Your username and password will be encrypted. Someone monitoring the network traffic will notice the domain name only.</para>
-        <para><emphasis role="strong">Note:</emphasis> If using this method, your password will be stored in plain text in the local repository's .git/config file. For this reason, you should create a <ulink url="https://wiki.debian.org/FreedomBox/Manual/FreedomBox#">FreedomBox</ulink> user who has only access to the gitweb and not to use an admin account. </para>
+        <para><emphasis role="strong">Note:</emphasis> If using this method, your password will be stored in plain text in the local repository's .git/config file. For this reason, you should create a FreedomBox user who has only access to the gitweb and never use an admin account. </para>
       </section>
       <section>
         <title>Mirroring</title>
@@ -10056,6 +10056,59 @@ wget https://www.thinkpenguin.com/files/ath9k_firmware_free-version/htc_7010.fw]
     <section>
       <title>Release Notes</title>
       <para>The following are the release notes for each FreedomBox version. </para>
+      <section>
+        <title>FreedomBox 20.2 (2020-02-10)</title>
+        <itemizedlist>
+          <listitem>
+            <para>networks: Support virtual Ethernet (veth) devices </para>
+          </listitem>
+          <listitem>
+            <para>diagnostics: Show firewall service status </para>
+          </listitem>
+          <listitem>
+            <para>storage: Show disks if FreedomBox is running in an unprivileged container </para>
+          </listitem>
+          <listitem>
+            <para>service: Stop service not before but after disabling it </para>
+          </listitem>
+          <listitem>
+            <para>users: Use more precise username validation </para>
+          </listitem>
+          <listitem>
+            <para>sso, users: Turn off autocapitalization on the username field </para>
+          </listitem>
+          <listitem>
+            <para>help: Fix anchor hidden under navbar </para>
+          </listitem>
+          <listitem>
+            <para>searx: Fix installation issue for 0.16.0 </para>
+          </listitem>
+          <listitem>
+            <para>firewall: Show Run Diagnostics button in app </para>
+          </listitem>
+          <listitem>
+            <para>glib: Introduce method to schedule an operation at regular intervals </para>
+          </listitem>
+          <listitem>
+            <para>notification: Show a drop down from main navbar for notifications </para>
+          </listitem>
+          <listitem>
+            <para>storage: Show low disk space warning using notifications API </para>
+          </listitem>
+          <listitem>
+            <para>upgrades: Show notification when FreedomBox is updated </para>
+          </listitem>
+          <listitem>
+            <para>security: Add Sandbox Coverage to report page </para>
+          </listitem>
+          <listitem>
+            <para>matrixsynapse: Enable systemd sandboxing </para>
+          </listitem>
+          <listitem>
+            <para>locale: Update translations for Telugu, French, Norwegian Bokmål, German, Spanish, and Swedish </para>
+          </listitem>
+        </itemizedlist>
+      </section>
       <section>
         <title>FreedomBox 20.1 (2020-01-27)</title>
         <itemizedlist>
@@ -10093,25 +10146,7 @@ wget https://www.thinkpenguin.com/files/ath9k_firmware_free-version/htc_7010.fw]
             <para>bind: Enable sandboxing for bind service </para>
           </listitem>
           <listitem>
-            <para>Translated using Weblate (Dutch) </para>
-          </listitem>
-          <listitem>
-            <para>Translated using Weblate (Norwegian Bokmål) </para>
-          </listitem>
-          <listitem>
-            <para>Translated using Weblate (German) </para>
-          </listitem>
-          <listitem>
-            <para>Translated using Weblate (Spanish) </para>
-          </listitem>
-          <listitem>
-            <para>Translated using Weblate (Swedish) </para>
-          </listitem>
-          <listitem>
-            <para>Translated using Weblate (French) </para>
-          </listitem>
-          <listitem>
-            <para>Translated using Weblate (Greek) </para>
+            <para>locale: Updated translations for Dutch, Norwegian Bokmål, German, Spanish, Swedish, French, and Greek </para>
           </listitem>
         </itemizedlist>
       </section>

doc/manual/es/freedombox-manual.raw.xml

@@ -2433,10 +2433,10 @@ echo "UPDATE users SET admin=1 WHERE name='@miusuario:dominio'" | sudo sqlite3 /
         <para>Actualmente el GitWeb de FreedomBox solo soporta remotos HTTP. Para evitar tener que introducir la contraseña cada vez que haces pull/push al repositorio puedes editar tu remoto para incluír credenciales. </para>
         <para>
           <emphasis>Ejemplo:</emphasis>
-          <ulink url="https://usuario@contrasena:mi.freedombox.mola/gitweb/mirepo"/>
+          <ulink url="https://usuario:contrasena@mi.freedombox.mola/gitweb/mirepo"/>
         </para>
         <para>Tu nombre de usuario y contraseña se cifrarán. Quien monitorize el tráfico de la red solo apreciará el nombre de dominio.</para>
-        <para><emphasis role="strong">Nota:</emphasis> Al usar este método tu contraseña se almacenará en claro en el fichero <code>.git/config</code> del repositorio local. </para>
+        <para><emphasis role="strong">Nota:</emphasis> Al usar este método tu contraseña se almacenará en claro en el fichero <code>.git/config</code> del repositorio local. Por este motivo debes crear un usuario FreedomBox que solo tenga acceso a gitweb y no usar nunca una cuenta de administrador. </para>
       </section>
       <section>
         <title>Réplicas Espejo</title>
@@ -2901,9 +2901,20 @@ echo "nuevacontraseña" | su mumble-server -s /bin/sh -c "/usr/sbin/murmurd -ini
         </section>
         <section>
           <title>Editar Contenido del Wiki</title>
+          <para>FreedomBox monta MediaWiki con un editor básico con una barra de herramientas con opciones de uso habitual como negrita, cursiva etc. Haz clic en la sección <emphasis>Avanzadas</emphasis> para acceder a más opciones como cabaceras, listas con viñetas, etc. </para>
+          <para>
+            <inlinemediaobject>
+              <imageobject>
+                <imagedata fileref="https://wiki.debian.org/es/FreedomBox/Manual/MediaWiki?action=AttachFile&amp;do=get&amp;target=mediawiki-toolbar.png"/>
+              </imageobject>
+              <textobject>
+                <phrase>mediawiki-toolbar.png</phrase>
+              </textobject>
+            </inlinemediaobject>
+          </para>
           <section>
             <title>Editor Visual</title>
-            <para>Como su nombre indica, el nuevo <emphasis>Editor Visual</emphasis> de MediaWiki ofrece un interfaz de usuario visual (<emphasis>WYSIWYG</emphasis>) para crear páginas del wiki. Por desgracia aún no está disponible en la versión actual de MediaWiki en Debian. Una solución temporal posible sería escribir tu contenido con el Editor Visual del <ulink url="https://en.wikipedia.org/wiki/Wikipedia:Sandbox">borrador de Wikipedia</ulink>, cambiar el modo de edición a texto y copiarlo a tu wiki. </para>
+            <para>Como su nombre indica, el nuevo <emphasis>Editor Visual</emphasis> de MediaWiki ofrece un interfaz de usuario visual (<emphasis>WYSIWYG</emphasis>) para crear páginas del wiki. Pero esta funcionalidad está todavía en pruebas y MediaWiki no la trae de serie. Una solución temporal posible sería escribir tu contenido con el Editor Visual del <ulink url="https://en.wikipedia.org/wiki/Wikipedia:Sandbox">borrador de Wikipedia</ulink>, cambiar el modo de edición a texto y copiarlo a tu wiki. </para>
           </section>
           <section>
             <title>Otros Formatos</title>
@@ -3062,7 +3073,7 @@ echo "nuevacontraseña" | su mumble-server -s /bin/sh -c "/usr/sbin/murmurd -ini
           <ulink url="https://username:password@my.freedombox.rocks/gitweb/myrepo"/>
         </para>
         <para>Your username and password will be encrypted. Someone monitoring the network traffic will notice the domain name only.</para>
-        <para><emphasis role="strong">Note:</emphasis> If using this method, your password will be stored in plain text in the local repository's .git/config file. For this reason, you should create a <ulink url="https://wiki.debian.org/es/FreedomBox/Manual/FreedomBox#">FreedomBox</ulink> user who has only access to the gitweb and not to use an admin account. </para>
+        <para><emphasis role="strong">Note:</emphasis> If using this method, your password will be stored in plain text in the local repository's .git/config file. For this reason, you should create a FreedomBox user who has only access to the gitweb and never use an admin account. </para>
       </section>
       <section>
         <title>Mirroring</title>
@@ -9920,6 +9931,59 @@ wget https://www.thinkpenguin.com/files/ath9k_firmware_free-version/htc_7010.fw]
     <section>
       <title>Release Notes</title>
       <para>The following are the release notes for each FreedomBox version. </para>
+      <section>
+        <title>FreedomBox 20.2 (2020-02-10)</title>
+        <itemizedlist>
+          <listitem>
+            <para>networks: Support virtual Ethernet (veth) devices </para>
+          </listitem>
+          <listitem>
+            <para>diagnostics: Show firewall service status </para>
+          </listitem>
+          <listitem>
+            <para>storage: Show disks if FreedomBox is running in an unprivileged container </para>
+          </listitem>
+          <listitem>
+            <para>service: Stop service not before but after disabling it </para>
+          </listitem>
+          <listitem>
+            <para>users: Use more precise username validation </para>
+          </listitem>
+          <listitem>
+            <para>sso, users: Turn off autocapitalization on the username field </para>
+          </listitem>
+          <listitem>
+            <para>help: Fix anchor hidden under navbar </para>
+          </listitem>
+          <listitem>
+            <para>searx: Fix installation issue for 0.16.0 </para>
+          </listitem>
+          <listitem>
+            <para>firewall: Show Run Diagnostics button in app </para>
+          </listitem>
+          <listitem>
+            <para>glib: Introduce method to schedule an operation at regular intervals </para>
+          </listitem>
+          <listitem>
+            <para>notification: Show a drop down from main navbar for notifications </para>
+          </listitem>
+          <listitem>
+            <para>storage: Show low disk space warning using notifications API </para>
+          </listitem>
+          <listitem>
+            <para>upgrades: Show notification when FreedomBox is updated </para>
+          </listitem>
+          <listitem>
+            <para>security: Add Sandbox Coverage to report page </para>
+          </listitem>
+          <listitem>
+            <para>matrixsynapse: Enable systemd sandboxing </para>
+          </listitem>
+          <listitem>
+            <para>locale: Update translations for Telugu, French, Norwegian Bokmål, German, Spanish, and Swedish </para>
+          </listitem>
+        </itemizedlist>
+      </section>
       <section>
         <title>FreedomBox 20.1 (2020-01-27)</title>
         <itemizedlist>
@@ -9957,25 +10021,7 @@ wget https://www.thinkpenguin.com/files/ath9k_firmware_free-version/htc_7010.fw]
             <para>bind: Enable sandboxing for bind service </para>
           </listitem>
           <listitem>
-            <para>Translated using Weblate (Dutch) </para>
-          </listitem>
-          <listitem>
-            <para>Translated using Weblate (Norwegian Bokmål) </para>
-          </listitem>
-          <listitem>
-            <para>Translated using Weblate (German) </para>
-          </listitem>
-          <listitem>
-            <para>Translated using Weblate (Spanish) </para>
-          </listitem>
-          <listitem>
-            <para>Translated using Weblate (Swedish) </para>
-          </listitem>
-          <listitem>
-            <para>Translated using Weblate (French) </para>
-          </listitem>
-          <listitem>
-            <para>Translated using Weblate (Greek) </para>
+            <para>locale: Updated translations for Dutch, Norwegian Bokmål, German, Spanish, Swedish, French, and Greek </para>
           </listitem>
         </itemizedlist>
       </section>