Tails

#1 Updated by hostile0101 2017-07-12 14:50:59

So all users from post-USSR countries cannot connect to internet directly from cable.

#3 Updated by geb 2017-07-13 16:03:56

Hi,

Thanks mercedes508 for the triage. I told hostile0101 to submit this bug and put me as assignee (he already sent a mail in tails-dev https://mailman.boum.org/pipermail/tails-dev/2017-July/011552.html and we also discussed it on xmpp:tails@conference.riseup.net)

I gave a quick look:

• Installing pppoe don’t require any additional dependency and is only ~250KB https://packages.debian.org/stretch/pppoe
• Once configured (with nm-connection-editor) the configuration is persistent (if persistence of network configuration is enabled).
• As said in Bug #11028 & Bug #11267 user have to launch nm-connection-editor in the terminal to be able to configure pppoe.
• Tails firewall rules (https://git-tails.immerda.ch/tails/tree/config/chroot_local-includes/etc/ferm/ferm.conf) seems to be network interface agnostic, so adding ppp/pppoe support should not raise any security issue here.
• I was not able to confirm if installing pppoe is enought to have it working.

Do you think inclusion can be considered ? If so I would be pleased to handle it.

#6 Updated by intrigeri 2017-07-13 18:24:50

mercedes508 wrote:
> Sorry but I kind of doubt if affects all users from such a wide region of the world.

The initial report might be exagerating, but we’ve been told similar things before, so let’s take this use case seriously :)

#8 Updated by mercedes508 2017-07-14 13:03:37

intrigeri wrote:
> mercedes508 wrote:
> > Sorry but I kind of doubt if affects all users from such a wide region of the world.
>
> The initial report might be exagerating, but we’ve been told similar things before, so let’s take this use case seriously :)

I didn’t reject it, just mitigating the affected user set.

#10 Updated by intrigeri 2017-07-17 17:33:34

See “How to submit your changes” on https://tails.boum.org/contribute/merge_policy/.

And since it’s your first code contribution (I think), just to be clear I’d like to ask: what kind of tests did you perform? Building an ISO, starting it, diff’ing the resulting packages list against 3.0.1’s, anything else? (I gather you can’t test the PPPoE functionality yourself, so well.)

#11 Updated by geb 2017-07-18 15:53:30

Hi,

I did not test it, thats why I did not dare changing the fields like if it is ready.

As I did not have a Tails build environnement ready (and won’t be able to have one before weeks), I wanted to test it with nighlybuild:

- verify that the package files are present https://packages.debian.org/stretch/all/pppoeconf/filelist

- compare the installed packages list, more probably compared with an another nighly build of the devel branch (even if it is unlikely pppoe will install any other dependency https://packages.debian.org/stretch/pppoe)
- hostile0101 also proposed a couple of time to test if it is working for him once a test iso is ready
Do you think it will be good ?

However, almost 24 hours after I pushed my branch in git.immerda.ch/geb/tails, I sill don’t find the ISO in https://nightly.tails.boum.org/. Should the branch being imported in git.immerda.ch/tails for the nightlybuild to occur ? If so would it be possible to ask for it ?

Do you have any other suggestion / recommendation ?

Thanks a lot in advance, and sorry for the inconvenience

#12 Updated by intrigeri 2017-07-18 17:42:17

> I did not test it, thats why I did not dare changing the fields like if it is ready.

OK, thanks for clarifying :)

> As I did not have a Tails build environnement ready (and won’t be able to have one before weeks), I wanted to test it with nighlybuild:
> - verify that the package files are present https://packages.debian.org/stretch/all/pppoeconf/filelist
> - compare the installed packages list, more probably compared with an another nighly
> build of the devel branch (even if it is unlikely pppoe will install any other
> dependency https://packages.debian.org/stretch/pppoe)
> - hostile0101 also proposed a couple of time to test if it is working for him once a test iso is ready
> Do you think it will be good ?

This sounds great!

> However, almost 24 hours after I pushed my branch in git.immerda.ch/geb/tails, I sill don’t find the ISO in https://nightly.tails.boum.org/.

That’s expected: we don’t provide arbitrary code execution on our CI infrastructure to anyone who happens to have a Tails Git repo hosted at immerda.

> Should the branch being imported in git.immerda.ch/tails for the nightlybuild to occur ?

Yes.

> If so would it be possible to ask for it ?

I wanted to push your branch there but apparently someone did that already. I’ve just triggered a build manually to speed things up a bit, so an ISO should land on nightly.t.b.o in ~1 hour :)

#13 Updated by bertagaz 2017-07-18 17:52:49

intrigeri wrote:
> I wanted to push your branch there but apparently someone did that already. I’ve just triggered a build manually to speed things up a bit, so an ISO should land on nightly.t.b.o in ~1 hour :)

I just did push that branch and was replying. :)

#14 Updated by intrigeri 2017-08-13 16:51:16

What’s the status here?

#19 Updated by geb 2017-09-16 15:00:28

Intrigeri:
> I don’t get why a testing report posted here would be any better than the one we’ve got already […]

Anonym:
> Couldn’t test but I trust the report geb received!

Great, Thanks. I was just thinking it would be valuable to have the test report here, instead of an (already lost?) xmmp chat session, but I am glad you don’t consider it as a blocker :).

Thanks,