Backported changes for 0.5.2 bugfix release#2940

Merged

43 commits merged intorelease/0.5.2from backported-changes-for-0.5.2

Jan 27, 2018

+656-771

Commits on Jan 26, 2018

i18n: add new languages securedrop-confiure.yml

Loic Dachary
authored and
redshiftzero
committed
Replace aging PyCrypto library with PyCryptodome
redshiftzero
committed
Partial implementation of OSSEC iptables fix

msheiny
authored and
redshiftzero
committed
Breaks out postfix config into discrete role

Conor Schaefer
authored and
redshiftzero
committed
Ports OSSEC pubkey import to "become" pragma

Conor Schaefer
authored and
redshiftzero
committed
Creates "ossec-register" common workflow

Conor Schaefer
authored and
redshiftzero
committed
Creates combined "ossec" role for both hosts

Conor Schaefer
authored and
redshiftzero
committed
Updates playbooks with new OSSEC role logic

Conor Schaefer
authored and
redshiftzero
committed
Add fix for iptables OSSEC monitor temporary rules

msheiny
authored and
redshiftzero
committed
Add temporary iptables to the top of the chain

msheiny
authored and
redshiftzero
committed
Configure Postfix after OSSEC

Conor Schaefer
authored and
redshiftzero
committed
Make registration detection less stringent

msheiny
authored and
redshiftzero
committed
Purge existing agents from app + mon

msheiny
authored and
redshiftzero
committed
Clean-up systems with multiple agents

msheiny
authored and
redshiftzero
committed
Reenables OSSEC connectivity config test

Conor Schaefer
authored and
redshiftzero
committed
Adds test for max_fail_percentage Ansible option

Conor Schaefer
authored and
redshiftzero
committed
Adds Makefile target "ansible-config-lint"

Conor Schaefer
authored and
redshiftzero
committed
Implements max_fail_percentage in all playbooks

Conor Schaefer
authored and
redshiftzero
committed
Removes unused "upgrade" playbook

Conor Schaefer
authored and
redshiftzero
committed
Adds test for any_errors_fatal Ansible option

Conor Schaefer
authored and
redshiftzero
committed
Implements any_errors_fatal in all playbooks

Conor Schaefer
authored and
redshiftzero
committed
Closes #2927 , do not fail CI on vulnerable package :(. This change is TEMPORARY until Ansible in securedrop/requirements/ansible.in is upgraded to 2.4

emkll
authored and
redshiftzero
committed
Remove regular staging-test in bid to keep complexity down

msheiny
authored and
redshiftzero
committed
CI - Do not skip ec2 tear-down if keypair rm dies

msheiny
authored and
redshiftzero
committed
REVERTME -- Temporary testing region in branch

msheiny
authored and
redshiftzero
committed
Use Xenial to install gettext 0.19.*
redshiftzero
committed
Remove Travis CI and run pages-layout tests on Circle CI
redshiftzero
committed
Docs: Remove Travis CI from developer documentation.
redshiftzero
committed
CI - Break-out test XML cleanup/merge from script

msheiny
authored and
redshiftzero
committed
Dump raw application and testinfra output in CI

msheiny
authored and
redshiftzero
committed
CI - Add app/testinfra results into combinedf junit

msheiny
authored and
redshiftzero
committed
CI - also dump raw artifacts in test-with-rebase

msheiny
authored and
redshiftzero
committed
CI - Potential fix for Circle to parse errors

msheiny
authored and
redshiftzero
committed
Fix syntax on application tests pytest command
redshiftzero
committed
CI - Temporarily skip junit for test script calls

msheiny
authored and
redshiftzero
committed

Commits on Jan 27, 2018

Merge pull request #2886 from freedomofpress/use-xenial-gettext

msheiny
authored and
redshiftzero
committed
Merge branch 'backport-pr-2796' into backported-changes-for-0.5.2
redshiftzero
committed
Merge branch 'backport-pr-2903' into backported-changes-for-0.5.2
redshiftzero
committed
Merge branch 'backport-pr-2748' into backported-changes-for-0.5.2
redshiftzero
committed
Merge branch 'backport-pr-2922' into backported-changes-for-0.5.2
redshiftzero
committed
Merge branch 'backport-pr-2928' into backported-changes-for-0.5.2
redshiftzero
committed
Fixes broken ansible-config tests

Conor Schaefer
authored and
redshiftzero
committed
Reimplements Ansible fail-fast playbook options

Conor Schaefer
authored and
redshiftzero
committed