Hack call: 14:00 UTC
- Progress update on the privileged actions conversion (sunil)
- MR complete and tested
- Tested on cloud VM, vagrant
- Test failures already noted in existing issues.
- i2p
- users
- Snapshots restoration issue
- Removes 3500 lines of code
- Splitting plinth into modules
- Logos
- Don't split git repository
- Build multiple Debian binary packages
- Public website to show all apps
- apps.freedombox.org?
prettier representation than https://wiki.debian.org/FreedomBox/Features
- MR complete and tested
- Preparing for stable release
Milestone: https://salsa.debian.org/groups/freedombox-team/-/issues/?milestone_title=Debian+Bookworm
- Debian installer issue
- Network effects
- We are not on Github.
- We were on Github before, but it did not bring too many developers.
- Probably other efforts are needed in addition.
- Gitea instance mirrored from Gitlab?
- self-hosting just multiplies the account signup problem
- Code is mirrored to Github:
- Add mirroring of issues and MRs.
https://salsa.debian.org/help/user/project/repository/mirror/index.md
concept explainer: https://indieweb.org/POSSE
- It takes a few days to get a Salsa account.
- Moderation queue to avoid spam
- Salsa is good for visibility within Debian.
- SSO between Salsa and discussion forum.
- We are not on Github.
- Debian firmware vote
- Winning option is that official installer will include non-free firmware
- Includes micro-code updates
- Include non-free firmware in our images
So far only raspi-firmware uploaded to the new section http://deb.debian.org/debian/dists/unstable/non-free-firmware/source/Sources.xz
- Tasks:
- Switch raspberry pi images to new section.
- Update freedom-maker to use non-free-firmware instead of non-free
- Remove non-free label from raspberry pi images.
- Include non-free-firmware in all images.
- Upgrade existing systems to add non-free-firmware.
- firmware-linux-nonfree metapackage
- wifi firmware
- Clean up wiki pages that discourage use of non-free firmware.
- keep it for pre-purchase decisions though?
- Matrix fail2ban - MR updated
- Disabling user account does not disable system account
https://salsa.debian.org/freedombox-team/freedombox/-/issues/2277
- LDAP flag to mark account as disabled?
- Check ldapscripts
- Prepend '!' before password
- only applies to admin accounts
- Remove account login restriction to admin users
- Causes issues for system daemons with their own accounts.
- ejabberd package is seriously affected.
- desktop users cannot login to their machine.
- Security concern is bypassing apache authentication.
- firewall/apparmor rule to only allow apache to contact services
- Only users in ssh group can ssh login.
https://salsa.debian.org/freedombox-team/freedombox/-/issues/1852
- SD card issue
- Can be closed.
- Read-only file systems
- Atomic updates
- Secure boot
How to do this for Debian or FreedomBox?
- Run apps in containers for isolation.
- systemd partition merging