nik/FreedomBox
1
0
Fork 0
mirror of https://github.com/freedombox/FreedomBox.git synced 2026-07-29 12:09:37 +00:00
Code Issues Packages Projects Releases Wiki Activity
10,480 Commits 11 Branches 423 Tags 315 MiB
Commit Graph

10480 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
James Valleroy
91f958659c
Release v26.9.1~bpo13+1 to trixie-backports 
Signed-off-by: James Valleroy <jvalleroy@mailbox.org>
debian/26.9.1_bpo13+1 		2026-06-19 07:41:50 -04:00
James Valleroy
d1172e325f freedombox release 26.9.1 for unstable 
[dgit distro=debian split]
 [dgit please-upload source=freedombox version=26.9.1]
 -----BEGIN PGP SIGNATURE-----
 
 iQJKBAABCgA0FiEEfWrbdQ+RCFWJSEvmd8DHXntlCAgFAmowoyIWHGp2YWxsZXJv
 eUBtYWlsYm94Lm9yZwAKCRB3wMdee2UICErOD/96aySUruprrfrLrha2tAPX36Jy
 jfZJzhUNhKK9fv7ydRL53eKlvM4PQZcklGRy8sp4CwM0mUSbPXSVXNN3BJjpIsYV
 TrTpYstcyvHL2tC+bDztfBBTUHdwMr0bwctPmj9XKvLqwKmgNjQwxBiYEJYrfu+R
 wAZYWbx7U5E1W83AgCSxG3sI+Lgv64mhkd8vsBdjFzD5Yg1gna6cJIF4sWWquZmJ
 e14GCCsihgh7Stm+yykPOsKtwsVxDOPJqyxuNXRLshBY9jfp1xGCK4iZly/f/E1a
 VAxN/70HyCKmk57bAfN+JjkZG1VYNhQX2ylu5vbUEh73BjomeUr0AG3XVK6EYxKe
 H/HQZBSk4wxQRkO2+Pv7xN0BFORIPN3BrE6NV1rl9UDY5GQQa8rnlC0Vrc5ZKRlB
 Kzk/FANrUwOQWLZC5nwQdiZLCDW60DFtRD79Es40aD5p2N1fOSLqC8FkdaAInjoJ
 AXS2aoEsA3wu0OKgtAGhpxJeWcFx+aw6GxP4UC/k4HikEXijknLsPsnVG+I6T9Tr
 SdCd3q5+5t0LNE6TpyVRc4ZfaMJ1ANd76tuBFWKtx3If+qp/DstBfKYmBIPu9bmT
 KcoOVuuPD3TSNve0fdfLpu8Z9XpD5X3/gBXEpK4pXVv8549aRbalRtl2aR53yCHZ
 wesEVXTimaQg9F+noQ==
 =3mTD
 -----END PGP SIGNATURE-----
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQJKBAABCgA0FiEEfWrbdQ+RCFWJSEvmd8DHXntlCAgFAmo1KtYWHGp2YWxsZXJv
 eUBtYWlsYm94Lm9yZwAKCRB3wMdee2UICHcMD/9BlvHoPy1zHVW2HaXurMLeYeFN
 q8PjbeOJ2+V28QylhDE88MVNi1F+Dw2MeRogvY2xsr7tg2+XU2MiwLdDrwoFSmH3
 heGLEs9AFLfiBy0n/i9q/h9Hm5VVCT43UB1IU4dxawtF3MEw5UyrO8vDayOPUR1U
 IkumQ2XD591rVyKE8KnzXKnBDLXjsw1OX1zfMvDtcq+28ETFqsuAKQNYViOSVNiN
 ZmgMdhqXPni6Qhxq55UQcUFMrp1WccEhT5hizkfeM8i0+gQnaNFmJJBhSkGlWpin
 gcT7yYOelhrHy264V0G+eSTY74MKdL/9XKZ7cnmFHGDL8Y00D4TVbw9z+umOKnFs
 CjAJ4LERvcUYnLgmWg9KSdGyGI/Nj1qnL5WFmx7t9J+vOczR7JWg1WxyIoRr21G0
 ctUS5TzOV8+kZ9UeIjjneU4b3flujCpfeyxSvRyaDQF65vLUEsQILdXpfJI/TNxP
 +NHcYvxG+PJXxGod+5Srp3zVmv9IQdDCCCp4CvhbPxunXMippbv/aDcJjnI4jf+6
 skZYaI2BeVBGWXOCBj1g/6drmrvBK0SYi5sQI9Hrmr9O2MeCiv2cxddnqgS8C4d6
 3BJR4t2RVeQqp53h4Cud0fPD62ZbauoAZFjOa8ihD+XdafTzhZ3CyeGBUqp0mFmj
 ClLbbyHVnw0lo1IfMw==
 =fqXr
 -----END PGP SIGNATURE-----

Merge tag 'debian/26.9.1' into debian/trixie-backports

freedombox release 26.9.1 for unstable
 2026-06-19 07:41:06 -04:00
James Valleroy
350466940f
Release v26.9.1 to unstable 
Signed-off-by: James Valleroy <jvalleroy@mailbox.org>
debian/26.9.1 		2026-06-15 20:46:51 -04:00
James Valleroy
dff6698647
doc: Fetch latest manual 
Signed-off-by: James Valleroy <jvalleroy@mailbox.org>
 2026-06-15 20:44:27 -04:00
James Valleroy
ceaccd7baf
wireguard: Get config for both download and qr actions 
Re-arrange imports

Signed-off-by: James Valleroy <jvalleroy@mailbox.org>
 2026-06-15 20:15:14 -04:00
James Valleroy
629cc866b6
wireguard: Move segno import inside method 
Signed-off-by: James Valleroy <jvalleroy@mailbox.org>
 2026-06-15 20:15:14 -04:00
Sunil Mohan Adapa
efcdc8cb5c
matrixsynapse: Allow installing new dependencies 
Fixes: #2556

Should be merged after fix for https://bugs.debian.org/1122841 is in unstable.

- This fixes issue with Matrix Synapse app not being installable from current
unstable.

- matrix-synapse package depends on older version of python3-typing-extensions.
This causes the daemon to fail during startup when older version is installed.
This was reported as https://bugs.debian.org/1122841. After this bug is fixed
and a newer version of matrix-synapse is uploaded, the patch will work as
expected. An alternative was to allow unattended-upgrades to upgrade
python3-typing-extensions from unstable, but has to be done very carefully and
with a lot of testing.

Tests:

- Install Matrix Synapse apps works. This request installation of the latest
version python3-typing-extensions from unstable. The daemon is running properly
after installation.

Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
 2026-06-15 20:12:24 -04:00
Coucouf
0188ad38f7
Translated using Weblate (French) 
Currently translated at 100.0% (1942 of 1942 strings)
 2026-06-13 22:01:20 +02:00
Pierfrancesco Passerini
1086d52851
Translated using Weblate (Italian) 
Currently translated at 100.0% (1942 of 1942 strings)
 2026-06-13 22:01:17 +02:00
James Valleroy
fbbb2efa0f
Release v26.9~bpo13+1 to trixie-backports 
Signed-off-by: James Valleroy <jvalleroy@mailbox.org>
 2026-06-08 18:48:02 -04:00
James Valleroy
cb24ee74e2 freedombox release 26.9 for unstable 
[dgit distro=debian split]
 [dgit please-upload source=freedombox version=26.9]
 -----BEGIN PGP SIGNATURE-----
 
 iQJKBAABCgA0FiEEfWrbdQ+RCFWJSEvmd8DHXntlCAgFAmoeNOMWHGp2YWxsZXJv
 eUBtYWlsYm94Lm9yZwAKCRB3wMdee2UICLHcD/9d8DDZj1oBNw6Oxbhiw8osrnUu
 PcWG361SmDmOBHyrXHIJ6vkq2BF8NIxJWLK6eewGTQ/r6hAo0JkSUM7JSQxkCBn1
 k8h+hCt5gSaNOuefd8ECX+2oUD/X/7ooO3Tv6+1nFCu+icCZ6F0dAZsrJZQ/6Tb9
 nqMt9g/iGkkKkH3J3qSxSUlm00Zhq++jkOjk3Dvra4uvzOHr91ESCCAGGGYu0OOS
 azABrCeoMPFSma3ZH7jXEZOypIuhGzn5f+FQrJm/3xZxsrfu4Lbjr9GW+Cw9SfJi
 LqYN0nuMsbq3q6fcZ92ih8dBgmYQQkvUfD1r9lJVXM+h4LZ7CTkSJquq3GlwLpTF
 m4lxcGSnHDcCcCtuNdGPsBucEcA5SNwQrZPKDZc1W5LqhoZw5R4w/g6DW4cJ1ycL
 SSpw+gsT6X88EuLK6VqwIl7k/hxhnKXzfYRPabQOB0/pes7mupeKzVPkSuXJzU/D
 uXnRmRaRz7Qj1MDdT5COF8O96xcrLrfjAFm3L5gOVEkw4GoAf6TqTpJYgkJoc+1t
 yf9+Lcx+4D/FaTXuwDfcRsgSxZOQJRZch/kZLH6itGsgml+se9hEZU7E8MX52W3i
 kPHvd8RSRSVvUAj22Dj+jOxXiRXSbE+24XvDnP+nYdI4a9PzmDe9T6hYAAzemiAi
 983I+rdwAVqNZSk/cw==
 =jI6v
 -----END PGP SIGNATURE-----
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQJKBAABCgA0FiEEfWrbdQ+RCFWJSEvmd8DHXntlCAgFAmonRogWHGp2YWxsZXJv
 eUBtYWlsYm94Lm9yZwAKCRB3wMdee2UICP0/EADO3W+AMXtEIz7BAdcFLEAxhQF2
 6IfeuHiXZW84RqjigmUXe9ipKjJDL+8Iw1+r89DKNsdIwzkPZr8L89s9Ip5q0Twe
 HLqeuHG9j+kL/t7JphL1tmQ+dy5ABzmW7n8vXLYN7W6vjpJGxlFxc1E/r047CU+a
 ee53gK65f9nZPTHv5Nn+g50vcallG0M0jzk/AifhaaITtfxKAP4J923lbicGvuVi
 ZcLzDyFjWA+VfGsE77u4WRLWz9O6VCPvXX7f2TFWVseyUL6N3BFVBJcLIwT2Eec1
 pazXM89cqFd7PIYD3GTsztOMgnOB7EaXBijDn2MqNVekfHoqohSum72bsfaBzwon
 fz5RC1/zvFll2V0ondYRjRwvgPDXsPnCnC86lhMXDLkuimLjcaIOiLBAkbkJh3J8
 e7TlVx9d2RXlKRKDbfmaoPAzwRh5pbvEmxQc/h5gjFf77G2lcq/FphK6CMZpAq/9
 yWmUbXUwcfACr3mo8zxQKWSkWFCbFBwsQxYZbXFaYuZ8IZ5R7iLOshguXL1+XWhE
 nzyjLE84bT4s87iHBp1mz9OZYk+67hANcvlG1wTYviKIAZvVkwYLoG3s0Zoiomms
 HPo6NLscwe2KhxxUv6aFLJr1JjCJ46cxFNHhInR5wC9zGv+HBuqeDdwEGnft1oR6
 YRPL19zZXExuLsBFDw==
 =Z/5j
 -----END PGP SIGNATURE-----

Merge tag 'debian/26.9' into debian/trixie-backports

freedombox release 26.9 for unstable
 2026-06-08 18:47:31 -04:00
Pierfrancesco Passerini
3616ceb68d
Translated using Weblate (Italian) 
Currently translated at 99.6% (1936 of 1942 strings)
 2026-06-08 13:01:02 +00:00
Jiří Podhorecký
274dabb741
Translated using Weblate (Czech) 
Currently translated at 100.0% (1942 of 1942 strings)
 2026-06-04 20:01:02 +02:00
Besnik Bleta
9d24b4161a
Translated using Weblate (Albanian) 
Currently translated at 99.6% (1936 of 1942 strings)
 2026-06-03 05:01:05 +00:00
Burak Yavuz
d9a825ee36
Translated using Weblate (Turkish) 
Currently translated at 100.0% (1942 of 1942 strings)
 2026-06-03 05:01:03 +00:00
大王叫我来巡山
76efffb4e9
Translated using Weblate (Chinese (Simplified Han script)) 
Currently translated at 60.9% (1184 of 1942 strings)
 2026-06-03 05:01:02 +00:00
James Valleroy
2590661fc8
Release v26.9 to unstable 
Signed-off-by: James Valleroy <jvalleroy@mailbox.org>
debian/26.9 		2026-06-01 21:20:28 -04:00
James Valleroy
bd733d4816
doc: Fetch latest manual 
Signed-off-by: James Valleroy <jvalleroy@mailbox.org>
 2026-06-01 21:17:30 -04:00
James Valleroy
88e886046f
locale: Update translation strings 
Signed-off-by: James Valleroy <jvalleroy@mailbox.org>
 2026-06-01 20:52:26 -04:00
Frederico Gomes
ad1b420397
wireguard: Enable FB to connect to a server using IPv6 
This MR enables FreedomBox to connect as a "client" to a WireGuard
"server" using IPv6.

- Validate IPv4/6 with ip_interface
- Created helper functions to build NM settings for IPv4/6
- Modify get_settings to include settings for either IP version 4 or 6
- Created helper function to get NM address info
- Modify get_nm_info to work with IPv4 and IPv6
- Modified tests to use validate_ip_address_with_network
- Added IPv6 valid and invalid patterns to tests

Tested:

- IPv4 works unchanged
- IPv6 parsing + NM settings generation works
- IPv6 display in Show Server UI

Not tested:

- Needs IPv6 WireGuard server for full connectivity test

Closes: #1762

Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
 2026-05-26 18:41:20 -04:00
James Valleroy
9fd7a3b3af
debian/control: Add !nocheck for python3-segno 
Tests:

- Succesfully build with nocheck profile:

gbp buildpackage --git-pbuilder --git-pbuilder-options="--profiles nocheck"

Signed-off-by: James Valleroy <jvalleroy@mailbox.org>
 2026-05-23 09:34:02 -04:00
Frederico Gomes
ea48448a72
wireguard: Added functional test for auto add client flow 
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
 2026-05-23 08:55:51 -04:00
Frederico Gomes
050a5366c1
wireguard: Bump version 
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
 2026-05-23 08:55:48 -04:00
Frederico Gomes
bc34a50a24
wireguard: Include python3-segno in app packages 
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
 2026-05-23 08:55:46 -04:00
Frederico Gomes
ff2ac949cf
mypy: Added override for segno 
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
 2026-05-23 08:55:43 -04:00
Frederico Gomes
941a597bc9
wireguard: Add security warning in template 
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
 2026-05-23 08:55:38 -04:00
Frederico Gomes
5f25fc56a5
wireguard: Create URL for client config QR action 
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
 2026-05-23 08:55:34 -04:00
Frederico Gomes
fa4e6002b3
wireguard: Add Show QR Code button 
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
 2026-05-23 08:55:31 -04:00
Frederico Gomes
f9984ea9e4
themes-icons: Add QR Code icon 
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
 2026-05-23 08:55:27 -04:00
Frederico Gomes
18d6f2d5db
wireguard: Add action for QR code generation 
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
 2026-05-23 08:55:21 -04:00
Frederico Gomes
68e28cdebc
build-dependencies: Add python3-segno 
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
 2026-05-23 08:54:58 -04:00
Frederico Gomes
79c978e03a
wireguard: Add client config file section and download button 
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
 2026-05-23 08:54:53 -04:00
Frederico Gomes
ce2ce04979
wireguard: Create URL for client config download action 
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
 2026-05-23 08:54:48 -04:00
Frederico Gomes
8e9b2a0631
wireguard: Create view to handle client config actions 
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
 2026-05-23 08:54:32 -04:00
Frederico Gomes
60a6ac2a0d
wireguard: Create mixin for reusing generated client conf 
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
 2026-05-23 08:54:09 -04:00
Frederico Gomes
bb6729a99a
wireguard: Create function for building conf files 
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
 2026-05-23 08:54:03 -04:00
Frederico Gomes
81e60dff0e
wireguard: Add template to show generated client info 
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
 2026-05-23 08:52:09 -04:00
Frederico Gomes
8cbcd39bb2
wireguard: Add empty form for AutoAddClientView 
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
 2026-05-23 08:51:59 -04:00
Frederico Gomes
77a91fc357
wireguard/theme: Add icon to auto add client button 
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
 2026-05-23 08:51:48 -04:00
Frederico Gomes
ebac5e86a3
wireguard: Add auto add client button 
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
 2026-05-23 08:51:34 -04:00
Frederico Gomes
0a67183fe4
wireguard: Add URL for AutoAddClientView 
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
 2026-05-23 08:51:29 -04:00
Frederico Gomes
36e1dd9e74
wireguard: Create AutoAddClientView 
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
 2026-05-23 08:50:52 -04:00
Frederico Gomes
5fe11cedb6
wireguard: add wrapper function that generates client key pair 
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
 2026-05-23 08:50:35 -04:00
jay
3d96f41053
Translated using Weblate (Dutch) 
Currently translated at 93.9% (1813 of 1929 strings)
 2026-05-21 18:11:36 +00:00
Hosted Weblate user 151773
511de5e106
Translated using Weblate (German) 
Currently translated at 99.3% (1916 of 1929 strings)
 2026-05-21 18:11:33 +00:00
James Valleroy
a40a8af714
Release v26.8~bpo13+1 to trixie-backports 
Signed-off-by: James Valleroy <jvalleroy@mailbox.org>
debian/26.8_bpo13+1 		2026-05-18 18:35:53 -04:00
James Valleroy
e79674811a freedombox release 26.8 for unstable 
[dgit distro=debian split]
 [dgit please-upload source=freedombox version=26.8]
 -----BEGIN PGP SIGNATURE-----
 
 iQJKBAABCgA0FiEEfWrbdQ+RCFWJSEvmd8DHXntlCAgFAmoChaYWHGp2YWxsZXJv
 eUBtYWlsYm94Lm9yZwAKCRB3wMdee2UICMaqD/9UGAU4F5QRqIxV4fuVbABUg3/H
 Gp+IYMsyCPrRPqbLw1tVRDpYfEDFvEIT7QsGwOKG0vZ9B7+LbtgC4KP5Sk/BzxQ0
 pFzdUnsnPULAsOZ0TpizuqD4i3Pm4EIj3OBymFscGvjSHHs6DF8TGjt1WEbAfy1O
 0BL9k4gjLuJ8KxwNXVaOtaJMUMhC9Wj+hVnL0RK96HB5xS2jCcotKBHJ5v8L26Ef
 jAGL7pmcQuuMqtXR7i+6USMPZSRMRhfKfUcRV3mHAr7PEjBayd5/u+O7T3lbwDx9
 H/opk6ct7o4pS+U77q/rgR+XiTjG1FZ9UixphGaqmRbXYj8OmWwOsMK6DnNK7sej
 m0v/pF9Qdp4URkkfa8hG0uRwEMRO2EftQ/g7KEaIFm/5YpdLQwW0xpOFHEr2wzaJ
 UGHsAV9BqFUfrgvUrF/E5pYMpDV7tcAANqMoERxzhxQVt/yZA6a7e6osV81a2jeX
 HpTmObrNj1ySL4QrnGoLkQtmh9JKmPk5sklrItu22dEhgEcH523u9YYN0wJpJpAn
 bdcPTy9uDq7N1461Pk5Y9SuklvOc4sfT4EslR2axf0FlVpicFhqIUpuYYK1hO5CP
 8RGXVqh91wvMRPn37hn1nSBWvpmS4Vg2/FrLhYjvjyQC+LTZ6dQuPS+XfcwqPQnq
 +c+jx4mrYAEJTm/UmQ==
 =b6zC
 -----END PGP SIGNATURE-----
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQJKBAABCgA0FiEEfWrbdQ+RCFWJSEvmd8DHXntlCAgFAmoLlCcWHGp2YWxsZXJv
 eUBtYWlsYm94Lm9yZwAKCRB3wMdee2UICHWAEACa2NG/rgB5I6c5rppZgrdGJDv5
 CIxIEzItTgFDiDlM13ZChu7seMamu4/m4vlF1W11b5n0tvowHFgQT37+4xO0T8hW
 o3jaGupWQvRM6PmwGY98u8c2WnpiRScSPSNl5yP1U7Ct6EDyC+2Jwiv24wH6FOTP
 /Eso6SrBVuODCDb6GfFBFs/HVnuYEd8AqhJ0lT+kJFJscvRVcExIGVOt5RGWKIK7
 bAi9minhj0pzScsznh4z0oGDu6XkzTgMO5Aqp2wV9ycFIq64zdQ1FH7g+iIl7Fpn
 9Pt9jLhR0SqoUxBGx6iTv6j6L5koYw4zUpX93V72nNu1cFe7zAcq9TJ5TPwjlqV1
 nDWYrqHhyCj8fQY9dyJPNfFr8/IG87oFMg2kyJpS/GOu0d9SKWwT8fvLA/msDwKo
 7LQYbXBCwFP6rs1zIggBYRWeYhpTrrTpIn6bcjX5XDtAptE7fLuxdZRKmKMNU3FK
 Zc7Q25b6QVVJrXsh5/zz3ol72XMvXc+sP/vn584pw2Dy44M0ZI1dVrzkyWpc+wIn
 bExea7Qe4cRP9qyfidkOWTEvdeapYXHkKcH6yBSMnIpx+dlZfoKiS+/cwGUYivW3
 JQ9FQh8imLM5ip4/rH/APyR1VNsvatflCqeT3gTjsTBzlqIvj1HVm77doTq0puLe
 IwnIovauU2T7ehk/6A==
 =KMLe
 -----END PGP SIGNATURE-----

Merge tag 'debian/26.8' into debian/trixie-backports

freedombox release 26.8 for unstable
 2026-05-18 18:35:15 -04:00
Luca Boccassi
9abe624265
Install and use sysusers.d/tmpfiles.d config files 
sysusers.d/tmpfiles.d config files allow a package to use
declarative configuration instead of manually written maintainer
scripts. This also allows image-based systems to be created
with /usr/ only, and also allows for factory resetting a system
and recreating /etc/ on boot.

https://www.freedesktop.org/software/systemd/man/latest/sysusers.d.html
https://www.freedesktop.org/software/systemd/man/latest/tmpfiles.d.html

Tests:

- /var/lib/plinth and /var/lib/plinth/sessions/ are created on package install.
  Ownership is plinth:plinth. 0755 is permissions.

- /var/lib/plinth/firstboot-wizard-secret file is created on package install.
  Ownership is plinth:plinth. 0400 is permissions. During first wizard,
  providing the secret works.

- /var/lib/plinth/backups-data is owned by root:root.

- When upgrading from old package to new the permissions don't change.

- When reinstalling the new package, the permissions do not change.

- User is created same as before.
  plinth❌987:987:FreedomBox service:/var/lib/plinth:/usr/sbin/nologin
- Group is created same as before.
  plinth❌987:
- id plinth
  uid=987(plinth) gid=987(plinth) groups=987(plinth)

- Upgrading from old package to new does not change user and group records.

- Reinstalling new version does not change user and group records.

[sunil: Don't recursively change ownership for /var/lib/plinth/]
[sunil: Change ownership specifically for /var/lib/plinth/firstboot-wizard-secret]
Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Reviewed-by: Sunil Mohan Adapa <sunil@medhas.org>
Tested-by: Sunil Mohan Adapa <sunil@medhas.org>
 2026-05-13 15:37:45 -07:00
Luca Boccassi
a4b3d53141
Stop deleting system user on remove/purge 
This is widely considered bad practice, as the kernel recycles
UIDs/GIDs. So any potential leftover file/directory can then
become owned by the next user/group that gets added, with
unpredictable consequences.
 2026-05-13 15:37:41 -07:00
Sunil Mohan Adapa
529bbf77df
bepasty: Don't remove old system user and group 
As removing a system user and group is considered a bad practice.  Old unused
system accounts are mostly harmless.

Tests:

- Bepasty functional tests pass.

- Installing bepasty and uploading a file works.

Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
 2026-05-13 15:37:38 -07:00