-
Notifications
You must be signed in to change notification settings - Fork 687
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Bumps tor version 0.3.5.8 -> 0.4.0.5 #4661
Conversation
Updates the fetch-tor-packages logic to pull in current stable LTS [0] versions of Tor. The prior 0.3.x versions are no longer available from upstream tor repo, so they cannot be fetched. Includes updates to test vars, as well. [0] https://trac.torproject.org/projects/tor/wiki/org/teams/NetworkTeam/CoreTorReleases
@conorsch I just now approved the PR for the git LFS repository, and then sadly figured out that I don't have merge rights in that repository. |
Fixed! Please try again, @kushaldas. |
@conorsch worked :) Now I will wait for 15 minutes and then restart the CI job. |
Codecov Report
@@ Coverage Diff @@
## develop #4661 +/- ##
========================================
Coverage 82.67% 82.67%
========================================
Files 45 45
Lines 3122 3122
Branches 338 338
========================================
Hits 2581 2581
Misses 454 454
Partials 87 87 Continue to review full report at Codecov.
|
Kicking the Python2 app tests. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
- Review the tor release schedule (above) and confirm 0.4.0.x is the series we want to target
- Review and merge Adds tor 0.4.0.5 deb packages securedrop-apt-test#9
- Confirm 0.4.0.5 packages are available in https://apt-test.freedom.press/pool/main/t/tor/ (takes ~15m)
- Restart CI on this PR (so the new tor packages are used)
- Spin up staging VMs, confirm running tor 0.4.05
- Confirm Source & Journalist Interface working well over Onion URLs
Finally the CI is green. Approved 🌈
Status
Ready for review.
Description of Changes
Fixes #4658.
Changes proposed in this pull request:
Updates the fetch-tor-packages logic to pull in current stable LTS [0]
versions of Tor. The prior 0.3.x versions are no longer available from
upstream tor repo, so they cannot be fetched.
Includes updates to test vars, as well.
[0] https://trac.torproject.org/projects/tor/wiki/org/teams/NetworkTeam/CoreTorReleases
Testing
We should also confirm that tor-over-ssh works fine on 0.4.x, but that can wait until dedicated QA period.
Deployment
Yes, significant version change to tor. Must be tested thoroughly prior to release of SD 1.0.0.
Checklist
If you made changes to the server application code:
make lint
) and tests (make -C securedrop test
) pass in the development containerIf you made changes to
securedrop-admin
:make -C admin test
) pass in the admin development containerIf you made changes to the system configuration:
If you made non-trivial code changes:
If you made changes to documentation:
make docs-lint
) passed locally