debian/freedombox.postinst

@@ -0,0 +1,13 @@
+#!/bin/sh
+
+set -e
+
+# Due to a change in sudo, now it runs PAM modules even on password-less
+# invocations. This leads to plinth not being able to run root privileges. This
+# is because of our own restrictions in /etc/security/access.conf. Since Plinth
+# is locked out after upgrade, we need to do this in postinst.
+sed -i 's+-:ALL EXCEPT root fbx (admin) (sudo):ALL+-:ALL EXCEPT root fbx plinth (admin) (sudo):ALL+' /etc/security/access.conf
+
+#DEBHELPER#
+
+exit 0

plinth/cfg.py

@@ -45,10 +45,10 @@ box_name = 'FreedomBox'
 # Other globals
 develop = False
 
-config_files: list[str] = []
+config_files = []
 
 
-def expand_to_dot_d_paths(file_paths: list[str]) -> list[str]:
+def expand_to_dot_d_paths(file_paths):
     """Expand a list of file paths to include file.d/* also."""
     final_list = []
     for file_path in file_paths:
@@ -65,7 +65,7 @@ def expand_to_dot_d_paths(file_paths: list[str]) -> list[str]:
     return final_list
 
 
-def get_develop_config_path() -> str:
+def get_develop_config_path():
     """Return config path of current source folder for development mode."""
     root_directory = os.path.dirname(os.path.realpath(__file__))
     root_directory = os.path.realpath(root_directory)
@@ -73,7 +73,7 @@ def get_develop_config_path() -> str:
     return config_path
 
 
-def get_config_paths() -> list[str]:
+def get_config_paths():
     """Get default config paths."""
     return [
         '/usr/share/freedombox/freedombox.config',
@@ -82,14 +82,14 @@ def get_config_paths() -> list[str]:
     ]
 
 
-def read() -> None:
+def read():
     """Read all configuration files."""
     config_paths = get_config_paths()
     for config_path in expand_to_dot_d_paths(config_paths):
         read_file(config_path)
 
 
-def read_file(config_path: str):
+def read_file(config_path):
     """Read and merge into defaults a single configuration file."""
     if not os.path.isfile(config_path):  # Does not throw exceptions
         # Ignore missing configuration files
@@ -101,9 +101,9 @@ def read_file(config_path: str):
     parser = configparser.ConfigParser(
         defaults={
             'parent_dir':
-                str(pathlib.Path(config_path).parent.resolve()),
+                pathlib.Path(config_path).parent.resolve(),
             'parent_parent_dir':
-                str(pathlib.Path(config_path).parent.parent.resolve()),
+                pathlib.Path(config_path).parent.parent.resolve(),
         })
     parser.read(config_path)  # Ignores all read errors
 
@@ -123,7 +123,6 @@ def read_file(config_path: str):
     )
 
     for section, name, datatype in config_items:
-        value: int | str | bool
         try:
             value = parser.get(section, name)
         except (configparser.NoSectionError, configparser.NoOptionError):

plinth/locale/et/LC_MESSAGES/django.po

@@ -8,7 +8,7 @@ msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
 "POT-Creation-Date: 2026-07-29 02:26+0000\n"
-"PO-Revision-Date: 2026-08-11 10:51+0000\n"
+"PO-Revision-Date: 2026-01-09 20:01+0000\n"
 "Last-Translator: Priit Jõerüüt <jrthwlate@users.noreply.hosted.weblate.org>\n"
 "Language-Team: Estonian <https://hosted.weblate.org/projects/freedombox/"
 "freedombox/et/>\n"
@@ -17,7 +17,7 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=n != 1;\n"
-"X-Generator: Weblate 2026.9.dev0\n"
+"X-Generator: Weblate 5.15.1\n"
 
 #: plinth/config.py:103
 #, python-brace-format
@@ -167,7 +167,7 @@ msgstr "Veebiliides (Plinth) {box_name}"
 
 #: plinth/modules/apache/__init__.py:129
 msgid "Web app protected by FreedomBox"
-msgstr "Veebirakendust kaitseb FreedomBox"
+msgstr ""
 
 #: plinth/modules/apache/components.py:234
 #, python-brace-format
@@ -398,8 +398,10 @@ msgid "Passphrase"
 msgstr "Salafraas"
 
 #: plinth/modules/backups/forms.py:187
+#, fuzzy
+#| msgid "Passphrase; Only needed when using encryption."
 msgid "Only needed when using encryption."
-msgstr "Seda on vaja vaid krüptimise kasutamisel."
+msgstr "Salafraasi on vaja vaid krüptimise kasutamisel."
 
 #: plinth/modules/backups/forms.py:190
 msgid "Confirm Passphrase"
@@ -943,7 +945,7 @@ msgstr ""
 #: plinth/modules/bepasty/forms.py:33
 #: plinth/modules/bepasty/templates/bepasty.html:32
 msgid "Comment"
-msgstr "Kommentaar"
+msgstr "Komentaar"
 
 #: plinth/modules/bepasty/forms.py:34
 msgid "Any comment to help you remember the purpose of this password."
@@ -5923,8 +5925,10 @@ msgid "OpenID Connect Provider"
 msgstr ""
 
 #: plinth/modules/oidc/templates/oauth2_provider/authorize.html:14
+#, fuzzy
+#| msgid "Application installed."
 msgid "Application"
-msgstr "Rakendus"
+msgstr "Rakendus on paigaldatud."
 
 #: plinth/modules/oidc/templates/oauth2_provider/authorize.html:22
 msgid "Authorize App"
@@ -6880,7 +6884,7 @@ msgstr ""
 
 #: plinth/modules/security/templates/security_report.html:45
 msgid "App Name"
-msgstr "Rakenduse nimi"
+msgstr "Rakendus"
 
 #: plinth/modules/security/templates/security_report.html:46
 msgid "Current Vulnerabilities"
@@ -8690,8 +8694,10 @@ msgid "Log in with passkey"
 msgstr ""
 
 #: plinth/modules/users/templates/users_passkey_edit.html:19
+#, fuzzy
+#| msgid "Update setup"
 msgid "Update Passkey"
-msgstr "Uuenda pääsuvõtit"
+msgstr "Uuenda seadistust"
 
 #: plinth/modules/users/templates/users_passkeys.html:30
 msgid "Adding passkey failed: "
@@ -8720,20 +8726,26 @@ msgstr ""
 
 #: plinth/modules/users/templates/users_passkeys.html:83
 #: plinth/modules/users/templates/users_passkeys.html:85
+#, fuzzy
+#| msgid "Add password"
 msgid "Add passkey"
-msgstr "Lisa pääsuvõti"
+msgstr "Lisa salasõna"
 
 #: plinth/modules/users/templates/users_passkeys.html:93
+#, fuzzy
+#| msgid "Domain"
 msgid "For Domain"
-msgstr "Domeeni jaoks"
+msgstr "Domeen"
 
 #: plinth/modules/users/templates/users_passkeys.html:94
 msgid "Added"
 msgstr ""
 
 #: plinth/modules/users/templates/users_passkeys.html:95
+#, fuzzy
+#| msgid "Create User"
 msgid "Last Used"
-msgstr "Viimati kasutatud"
+msgstr "Lisa kasutaja"
 
 #: plinth/modules/users/templates/users_passkeys.html:126
 msgid "No passkeys added to user account."
@@ -8748,8 +8760,10 @@ msgid "You will need this passkey's device to add it back again."
 msgstr ""
 
 #: plinth/modules/users/templates/users_passkeys.html:152
+#, fuzzy
+#| msgid "Delete user"
 msgid "Delete passkey"
-msgstr "Kustuta pääsuvõti"
+msgstr "Kustuta kasutaja"
 
 #: plinth/modules/users/templates/users_passkeys.html:155
 #: plinth/modules/users/templates/users_update.html:72
@@ -8826,8 +8840,10 @@ msgid "Password changed successfully."
 msgstr "Salasõna muutmine õnnestus."
 
 #: plinth/modules/users/views.py:420
+#, fuzzy
+#| msgid "A library with this name already exists."
 msgid "Passkey with that identifier already exists."
-msgstr "Sellise tunnusega pääsuvõti on juba olemas."
+msgstr "Sellise nimega raamatukogu on juba olemas."
 
 #: plinth/modules/users/views.py:431
 msgid "Edit Passkey"
@@ -8861,8 +8877,10 @@ msgid "Invalid key."
 msgstr "Vigane võti."
 
 #: plinth/modules/wireguard/forms.py:63
+#, fuzzy
+#| msgid "IP address"
 msgid "Not a valid IP address."
-msgstr "Pole korrektne IP-aadress."
+msgstr "IP-aadress"
 
 #: plinth/modules/wireguard/forms.py:69
 #: plinth/modules/wireguard/templates/wireguard.html:29
@@ -8965,8 +8983,10 @@ msgid "Value"
 msgstr ""
 
 #: plinth/modules/wireguard/templates/wireguard.html:33
+#, fuzzy
+#| msgid "Endpoint"
 msgid "Endpoint(s)"
-msgstr "Otspunkt(id)"
+msgstr "Otspunkt"
 
 #: plinth/modules/wireguard/templates/wireguard.html:41
 #, python-format
@@ -9013,8 +9033,10 @@ msgid "Add Allowed Client"
 msgstr ""
 
 #: plinth/modules/wireguard/templates/wireguard.html:103
+#, fuzzy
+#| msgid "Password changed successfully."
 msgid "WireGuard server not started yet."
-msgstr "WireGuardi server pole veel käivitatud."
+msgstr "Salasõna muutmine õnnestus."
 
 #: plinth/modules/wireguard/templates/wireguard.html:107
 #: plinth/modules/wireguard/templates/wireguard.html:109
@@ -9050,16 +9072,20 @@ msgid "Add Connection to Server"
 msgstr ""
 
 #: plinth/modules/wireguard/templates/wireguard_add_client.html:21
+#, fuzzy
+#| msgid "IP address to use for client:"
 msgid "IP address that will be assigned to this client"
-msgstr "IP-aadress, mis määratakse selle kliendi jaoks"
+msgstr "IP-aadress kasutamiseks kliendi jaoks:"
 
 #: plinth/modules/wireguard/templates/wireguard_add_client.html:31
 msgid "Add Client"
 msgstr ""
 
 #: plinth/modules/wireguard/templates/wireguard_auto_add_client.html:26
+#, fuzzy
+#| msgid "Privacy"
 msgid "Private Key"
-msgstr "Privaatvõti"
+msgstr "Privaatsus"
 
 #: plinth/modules/wireguard/templates/wireguard_auto_add_client.html:29
 msgid "Click to reveal"
@@ -9074,8 +9100,10 @@ msgid "Save the private key now. This page shows it only once!"
 msgstr ""
 
 #: plinth/modules/wireguard/templates/wireguard_auto_add_client.html:41
+#, fuzzy
+#| msgid "Configuration"
 msgid "Client configuration file"
-msgstr "Kliendi seadistustefail"
+msgstr "Seadistused"
 
 #: plinth/modules/wireguard/templates/wireguard_auto_add_client.html:43
 msgid ""
@@ -9084,8 +9112,10 @@ msgid ""
 msgstr ""
 
 #: plinth/modules/wireguard/templates/wireguard_auto_add_client.html:49
+#, fuzzy
+#| msgid "warning"
 msgid "Warning:"
-msgstr "Hoiatus:"
+msgstr "hoiatus"
 
 #: plinth/modules/wireguard/templates/wireguard_auto_add_client.html:50
 msgid ""
@@ -9254,8 +9284,10 @@ msgid "Server deleted."
 msgstr ""
 
 #: plinth/modules/wireguard/views.py:408
+#, fuzzy
+#| msgid "Password changed successfully."
 msgid "WireGuard server started successfully."
-msgstr "WireGuardi serveri käivitamine õnnestus."
+msgstr "Salasõna muutmine õnnestus."
 
 #: plinth/modules/wireguard/views.py:412
 msgid "Failed to start WireGuard server: {}"
@@ -9596,8 +9628,10 @@ msgid " System"
 msgstr ""
 
 #: plinth/templates/base.html:179 plinth/templates/base.html:180
+#, fuzzy
+#| msgid "Manage Passwords"
 msgid "Manage passkeys"
-msgstr "Halda pääsuvõtmeid"
+msgstr "Halda salasõnu"
 
 #: plinth/templates/base.html:186 plinth/templates/base.html:187
 msgid "Change password"
@@ -9624,8 +9658,10 @@ msgid "Add new app"
 msgstr ""
 
 #: plinth/templates/cards.html:48
+#, fuzzy
+#| msgid "Backup app before uninstall"
 msgid "Available for install"
-msgstr "Saadaval paigalduseks"
+msgstr "Enne rakenduse eemaldamist palun tee varukoopia"
 
 #: plinth/templates/clients-button.html:16
 msgid "Launch web client"

plinth/locale/fr/LC_MESSAGES/django.po

@@ -8,7 +8,7 @@ msgstr ""
 "Project-Id-Version: FreedomBox UI\n"
 "Report-Msgid-Bugs-To: \n"
 "POT-Creation-Date: 2026-07-29 02:26+0000\n"
-"PO-Revision-Date: 2026-08-11 10:51+0000\n"
+"PO-Revision-Date: 2026-07-06 15:01+0000\n"
 "Last-Translator: Coucouf <coucouf@coucouf.fr>\n"
 "Language-Team: French <https://hosted.weblate.org/projects/freedombox/"
 "freedombox/fr/>\n"
@@ -17,7 +17,7 @@ msgstr ""
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=n > 1;\n"
-"X-Generator: Weblate 2026.9.dev0\n"
+"X-Generator: Weblate 2026.7.1.dev0\n"
 
 #: plinth/config.py:103
 #, python-brace-format
@@ -3029,7 +3029,7 @@ msgstr ""
 
 #: plinth/modules/first_boot/__init__.py:47
 msgid "First Boot"
-msgstr "Premier démarrage"
+msgstr ""
 
 #: plinth/modules/first_boot/__init__.py:68
 msgid "Setup complete! Next steps:"
@@ -3053,15 +3053,19 @@ msgid "See next steps"
 msgstr "Voir les prochaines étapes"
 
 #: plinth/modules/first_boot/forms.py:14
-#, python-brace-format
+#, fuzzy, python-brace-format
+#| msgid ""
+#| "Enter the secret generated during FreedomBox installation. This secret "
+#| "can also be obtained by running the command \"sudo cat /var/lib/plinth/"
+#| "firstboot-wizard-secret\" on your {box_name}"
 msgid ""
 "Enter the secret generated during {box_name} installation. This secret can "
 "be obtained by running the command \"sudo cat /var/lib/plinth/firstboot-"
 "wizard-secret\" on your {box_name}"
 msgstr ""
-"Entrez le code secret généré durant l’installation de la {box_name}. Il peut "
-"être obtenu en lançant la commande « sudo cat /var/lib/plinth/firstboot-"
-"wizard-secret » sur votre {box_name}."
+"Entrez le code secret généré durant l’installation de la FreedomBox. Il peut "
+"également être obtenu en lançant la commande « sudo cat /var/lib/plinth/"
+"firstboot-wizard-secret » sur votre {box_name}"
 
 #: plinth/modules/first_boot/forms.py:19
 msgid "Firstboot Wizard Secret"
@@ -4773,15 +4777,10 @@ msgid ""
 "game. It allows users to build and explore 3D worlds, interact with others, "
 "and engage in various activities such as crafting, mining, and combat."
 msgstr ""
-"Luanti (précédemment nommé Minetest) est un jeu bac-à-sable de construction "
-"de blocs multijoueur à monde infini. Il propose la construction et "
-"l’exploration de mondes en 3D, l’interaction à plusieurs et la possibilité "
-"de s’adonner à des activités telles que l’artisanat, l’extraction de "
-"ressources et le combat."
 
 #: plinth/modules/minetest/__init__.py:36
 msgid "Luanti offers several educational benefits, including:"
-msgstr "Luanti a plusieurs intérêts éducatifs, notamment :"
+msgstr ""
 
 #: plinth/modules/minetest/__init__.py:37
 msgid ""
@@ -4790,11 +4789,6 @@ msgid ""
 "exploration.</li><li>Fostering social interaction and collaboration among "
 "players.</li></ul>"
 msgstr ""
-"<ul><li>le développement de la représentation dans l’espace et des capacités "
-"de résolution de problèmes ;</li><li>la stimulation de la créativité et de "
-"l’expression personnelle au travers de la construction et de "
-"l’exploration ;</li><li>l’incitation à la collaboration et aux interactions "
-"sociales entres joueuses et joueurs.</li></ul>"
 
 #: plinth/modules/minetest/__init__.py:43
 #, python-brace-format
@@ -4805,12 +4799,6 @@ msgid ""
 "please refer to the official <a href=\"https://docs.luanti.org/\">Minetest "
 "documentation</a> or online resources."
 msgstr ""
-"Pour commencer à jouer, installez le <a href=\"https://www.luanti.org/"
-"downloads/\">client Luanti</a> sur vos appareils et connectez-vous au "
-"serveur Luanti en utilisant l’IP de la {box_name} et le port part défaut "
-"(30000). Pour plus d’informations, référez-vous à la <a href=\"https://"
-"docs.luanti.org/\">documentation Luanti</a> officielle ou aux nombreuses "
-"ressources disponibles en ligne."
 
 #: plinth/modules/minetest/__init__.py:68 plinth/modules/minetest/manifest.py:9
 msgid "Luanti"
@@ -4826,7 +4814,7 @@ msgid ""
 "instance of time."
 msgstr ""
 "Vous permet de modifier le nombre maximum de joueurs autorisés à se "
-"connecter à Luanti en même temps."
+"connecter à minetest en même temps."
 
 #: plinth/modules/minetest/forms.py:19
 msgid "Enable creative mode"
@@ -11160,12 +11148,16 @@ msgid "Log in"
 msgstr "S’identifier"
 
 #: plinth/templates/cards.html:28
+#, fuzzy
+#| msgid "Add a new peer"
 msgid "Add new app"
-msgstr "Ajouter une nouvelle appli"
+msgstr "Ajouter un nouveau pair"
 
 #: plinth/templates/cards.html:48
+#, fuzzy
+#| msgid "Available Domains"
 msgid "Available for install"
-msgstr "Disponibles à l’installation"
+msgstr "Domaines disponibles"
 
 #: plinth/templates/clients-button.html:16
 msgid "Launch web client"

plinth/modules/diagnostics/__init__.py

@@ -9,7 +9,6 @@ import logging
 import pathlib
 import threading
 from copy import deepcopy
-from typing import Any
 
 import psutil
 from django.urls import reverse_lazy
@@ -41,7 +40,7 @@ _description = [
 
 logger = logging.Logger(__name__)
 
-current_results: dict[str, Any] = {}
+current_results = {}
 results_lock = threading.Lock()
 
 

plinth/modules/homeassistant/__init__.py

@@ -45,6 +45,7 @@ _description = [
           'quality, privacy and legal reviews are done by the upstream '
           'project and not by Debian/{box_name}. Updates are performed '
           'following an independent cycle.'), box_name=_(cfg.box_name)),
+    format_lazy(_alert, _('Caution:'), _('This app is experimental.')),
 ]
 
 

plinth/modules/matrixsynapse/tests/test_functional.py

@@ -17,8 +17,7 @@ class TestMatrixSynapseApp(functional.BaseAppTests):
     diagnostics_delay = 1
 
     @pytest.fixture(scope='class', autouse=True)
-    @classmethod
-    def fixture_setup(cls, session_browser):
+    def fixture_setup(self, session_browser):
         """Setup the app."""
         functional.login(session_browser)
         functional.domain_add(session_browser, 'mydomain.example')

plinth/modules/samba/tests/test_functional.py

@@ -21,8 +21,7 @@ class TestSambaApp(functional.BaseAppTests):
     has_web = False
 
     @pytest.fixture(scope='class', autouse=True)
-    @classmethod
-    def fixture_setup(cls, session_browser):
+    def fixture_setup(self, session_browser):
         """Setup the app."""
         functional.login(session_browser)
         functional.networks_set_firewall_zone(session_browser, 'internal')

plinth/modules/storage/udisks2.py

@@ -3,7 +3,6 @@
 
 import logging
 import threading
-from typing import Any
 
 from plinth import cfg
 from plinth.utils import import_from_gi
@@ -41,7 +40,7 @@ _ERRORS: dict[str, str] = {
     'Failed': 'org.freedesktop.UDisks2.Error.Failed',
 }
 
-_jobs: dict[str, Any] = {}
+_jobs = {}
 
 logger = logging.getLogger(__name__)
 

plinth/settings.py

@@ -26,6 +26,7 @@ See: https://docs.djangoproject.com/en/dev/ref/settings/
 
 """
 
+import django
 from django.utils.translation import gettext_lazy as _
 
 ALLOWED_HOSTS = ['*']
@@ -239,6 +240,9 @@ TEMPLATES = [
 
 TIME_ZONE = 'UTC'
 
+if django.VERSION <= (4, 0):
+    USE_L10N = True
+
 USE_TZ = True
 
 # Overridden by configuration setting use_x_forwarded_host

plinth/tests/functional/__init__.py

@@ -837,13 +837,12 @@ class BaseAppTests:
         install(session_browser, self.app_name)
 
     @pytest.fixture(autouse=True, scope='class', name='disable_after_tests')
-    @classmethod
-    def fixture_disable_after_tests(cls, session_browser):
+    def fixture_disable_after_tests(self, session_browser):
         """Disable the app after running tests."""
         yield
-        if cls.disable_after_tests and is_installed(session_browser,
-                                                    cls.app_name):
-            app_disable(session_browser, cls.app_name)
+        if self.disable_after_tests and is_installed(session_browser,
+                                                     self.app_name):
+            app_disable(session_browser, self.app_name)
 
     @pytest.fixture(autouse=True, name='background')
     def fixture_background(self, session_browser, disable_after_tests):

pyproject.toml

@@ -9,12 +9,6 @@ classifiers = [
     "Environment :: No Input/Output (Daemon)",
     "Environment :: Web Environment",
     "Framework :: Django",
-    "Framework :: Django :: 5",
-    "Framework :: Django :: 5.0",
-    "Framework :: Django :: 5.1",
-    "Framework :: Django :: 5.2",
-    "Framework :: Django :: 6",
-    "Framework :: Django :: 6.0",
     "Intended Audience :: End Users/Desktop",
     "Natural Language :: English",
     "Operating System :: POSIX :: Linux",