= Hack call: 14:00 UTC = * Progress update on the privileged actions conversion (sunil) * MR complete and tested * Tested on cloud VM, vagrant * Test failures already noted in existing issues. * i2p * users * Snapshots restoration issue * Removes 3500 lines of code * Splitting plinth into modules * Logos * Don't split git repository * Build multiple Debian binary packages * Public website to show all apps * apps.freedombox.org? * like https://apps.gnome.org/ * prettier representation than https://wiki.debian.org/FreedomBox/Features * Preparing for stable release * Milestone: https://salsa.debian.org/groups/freedombox-team/-/issues/?milestone_title=Debian+Bookworm * Debian installer issue * Network effects * We are not on Github. * We were on Github before, but it did not bring too many developers. * Probably other efforts are needed in addition. * Gitea instance mirrored from Gitlab? * self-hosting just multiplies the account signup problem * Code is mirrored to Github: * https://github.com/freedombox/FreedomBox * Add mirroring of issues and MRs. * https://salsa.debian.org/help/user/project/repository/mirror/index.md * concept explainer: https://indieweb.org/POSSE * It takes a few days to get a Salsa account. * Moderation queue to avoid spam * Salsa is good for visibility within Debian. * SSO between Salsa and discussion forum. * Debian firmware vote * Winning option is that official installer will include non-free firmware * Includes micro-code updates * Include non-free firmware in our images * So far only raspi-firmware uploaded to the new section http://deb.debian.org/debian/dists/unstable/non-free-firmware/source/Sources.xz * Tasks: * Switch raspberry pi images to new section. * Update freedom-maker to use non-free-firmware instead of non-free * Remove non-free label from raspberry pi images. * Include non-free-firmware in all images. * Upgrade existing systems to add non-free-firmware. * firmware-linux-nonfree metapackage * https://tracker.debian.org/pkg/firmware-nonfree * wifi firmware * Clean up wiki pages that discourage use of non-free firmware. * keep it for pre-purchase decisions though? * Matrix fail2ban - MR updated * Disabling user account does not disable system account * https://salsa.debian.org/freedombox-team/freedombox/-/issues/2277 * LDAP flag to mark account as disabled? * Check ldapscripts * Prepend '!' before password * only applies to admin accounts * Remove account login restriction to admin users * Causes issues for system daemons with their own accounts. * ejabberd package is seriously affected. * desktop users cannot login to their machine. * Security concern is bypassing apache authentication. * firewall/apparmor rule to only allow apache to contact services * Only users in ssh group can ssh login. * https://salsa.debian.org/freedombox-team/freedombox/-/issues/1852 * SD card issue * Can be closed. * Read-only file systems * Atomic updates * Secure boot * How to do this for Debian or !FreedomBox? * Run apps in containers for isolation. * systemd partition merging