Differences between revisions 13 and 18 (spanning 5 versions)
Revision 13 as of 2014-05-08 08:18:55
Size: 10054
Comment: Add link to Firewall page
Revision 18 as of 2015-02-02 22:48:06
Size: 13080
Editor: ?StevenHamilton
Comment:
Deletions are marked like this. Additions are marked like this.
Line 24: Line 24:
== Version 0.3 (Not yet released) ==

This version is currently under development.

=== New Services ===
== Version 0.3 (2015-01-20) ==

=== Notable Features ===
Line 31: Line 29:
 * [[FreedomBox/Firewall]]: firewall is on by default and is automatically managed.  * [[FreedomBox/Firewall|Firewall]]: firewall is on by default and is automatically managed.
 * Add BeagleBone support. We now have images for BeagleBone, RaspberryPi, VirtualBox i386/amd64, and DreamPlug.
 * Ability to enable and use Tor Hidden Services. Works with Ejabberd/JWChat and ownCloud services.
 * Enable Tor obfsproxy with scramblesuit.
 * Drop well-known root password (an account with sudo capabilities still exists for now but will be removed soon).
 * Switch to unstable as suite of choice for easier development.
 * Newer images are built with systemd by default (due to Debian change).
 * Install and operate firewall automatically (uses firewalld).
 * Major restructuring of Plinth UI using Python3, Django web development framework and Bootstrap3. Code quality is much better and UI is more polished.
 * Introduced packaging framework in Plinth UI for on-demand application installation.

==== freedom-maker ====

 * Newer images use systemd by default
 * VirtualBox images for amd64 architecture also
 * Default to btrfs filesytem where supported
 * Images for BeagleBone
 * Use Grub for virtualbox images
 * Use eatmydata to speed up build process
 * Switch to Debian Unstable as suite of choice
 * Drop well-known root password (an account with sudo capabilities still exists for now)

==== freedombox-setup ====

 * Add BeagleBone support
 * Enable scramblesuite for obfsproxy
 * Enable obfsproxy
 * Updates to testsuite
 * Pull documentation from Wiki and build it
 * Enable Tor transparent proxy
 * Update tests in testsuite

==== Plinth 0.4.1 ====

 * Ability to enable and see status of Tor Hidden Services.
 * Fully migrated to Django and removed all code that was re-inventing web frameworks.
 * Migrated to Python 3.
 * Ability to write and distribute Plinth modules outside of Plinth repository: FreedomBox Apps.
 * Improved security using Django authentication and forms.
 * Reorganized source code to look more like a Python application.
 * Use Python setup.py instead of custom Makefiles.
 * Setting up Plinth for development is easier.
 * Removed dependency on withsqlite package with help from Django models.
 * Removed duplicated code in Twitter bootstrap JS/CSS by depending on proper Debian packages.
 * Removed stubs and TODOish messages in UI in preparation of proper public (developer) release.
 * Code quality clean-ups.
 * Updated documentation on setting up and using Plinth from source.

==== Plinth 0.4.4 ====

 * Update to Bootstrap3 and improve styling in general
 * Fix issue with Apache configuration
 * Improvements to working behind a proxy server
 * Introduce package management framework
 * Show progress bar while installing ownCloud
 * Tested JWChat/ownCloud on .onion addresses
 * Test coverage measurement
 * Rewamped first boot wizard
 * Proper user management with editing and setting passwords
 * Remove expert mode
 * Seperate out domain name vs. hostname configuration
 * Fix issues with ejabberd configuration update on hostname change
 * Fix issue with hostname changes
 * Debian packaging related fixes
 * Many bug fixes and code cleanups
Line 42: Line 104:
=== Other New Features ===

Line 51: Line 110:
In addition to the [[FreedomBox/DreamPlug|DreamPlug]], Raspberry Pi and VirtualBox (x86) images are now provided. In addition to the [[FreedomBox/Hardware/DreamPlug|DreamPlug]], Raspberry Pi and VirtualBox (x86) images are now provided.
Line 81: Line 140:
 1. Plug your Ethernet cable in to your computer and eth1 on your [[FreedomBox/DreamPlug|DreamPlug]].  1. Plug your Ethernet cable in to your computer and eth1 on your [[FreedomBox/Hardware/DreamPlug|DreamPlug]].

This page contains the release notes for each FreedomBox version.

Release notes for the FreedomBox project

Version 0.3 (2015-01-20)

Notable Features

  • Tor Bridges: All boxes now act as non-exit Tor bridges, routing traffic for the Tor network.
  • ?Firewall: firewall is on by default and is automatically managed.

  • Add ?BeagleBone support. We now have images for ?BeagleBone, RaspberryPi, VirtualBox i386/amd64, and ?DreamPlug.

  • Ability to enable and use Tor Hidden Services. Works with Ejabberd/JWChat and ownCloud services.
  • Enable Tor obfsproxy with scramblesuit.
  • Drop well-known root password (an account with sudo capabilities still exists for now but will be removed soon).
  • Switch to unstable as suite of choice for easier development.
  • Newer images are built with systemd by default (due to Debian change).
  • Install and operate firewall automatically (uses firewalld).
  • Major restructuring of Plinth UI using Python3, Django web development framework and Bootstrap3. Code quality is much better and UI is more polished.
  • Introduced packaging framework in Plinth UI for on-demand application installation.

freedom-maker

  • Newer images use systemd by default
  • VirtualBox images for amd64 architecture also

  • Default to btrfs filesytem where supported
  • Images for ?BeagleBone

  • Use Grub for virtualbox images
  • Use eatmydata to speed up build process
  • Switch to Debian Unstable as suite of choice
  • Drop well-known root password (an account with sudo capabilities still exists for now)

freedombox-setup

  • Add ?BeagleBone support

  • Enable scramblesuite for obfsproxy
  • Enable obfsproxy
  • Updates to testsuite
  • Pull documentation from Wiki and build it
  • Enable Tor transparent proxy
  • Update tests in testsuite

Plinth 0.4.1

  • Ability to enable and see status of Tor Hidden Services.
  • Fully migrated to Django and removed all code that was re-inventing web frameworks.
  • Migrated to Python 3.
  • Ability to write and distribute Plinth modules outside of Plinth repository: FreedomBox Apps.

  • Improved security using Django authentication and forms.
  • Reorganized source code to look more like a Python application.
  • Use Python setup.py instead of custom Makefiles.
  • Setting up Plinth for development is easier.
  • Removed dependency on withsqlite package with help from Django models.
  • Removed duplicated code in Twitter bootstrap JS/CSS by depending on proper Debian packages.
  • Removed stubs and TODOish messages in UI in preparation of proper public (developer) release.
  • Code quality clean-ups.
  • Updated documentation on setting up and using Plinth from source.

Plinth 0.4.4

  • Update to Bootstrap3 and improve styling in general
  • Fix issue with Apache configuration
  • Improvements to working behind a proxy server
  • Introduce package management framework
  • Show progress bar while installing ownCloud
  • Tested JWChat/ownCloud on .onion addresses
  • Test coverage measurement
  • Rewamped first boot wizard
  • Proper user management with editing and setting passwords
  • Remove expert mode
  • Seperate out domain name vs. hostname configuration
  • Fix issues with ejabberd configuration update on hostname change
  • Fix issue with hostname changes
  • Debian packaging related fixes
  • Many bug fixes and code cleanups

Firewall

Firewall is a network security system that controls the incoming and outgoing network traffic. Keeping a firewall enabled and properly configured reduces risk of security threat from the Internet.

The operation of the firewall is automatic. When you enable a service it is automatically permitted in the firewall and you disable a service is automatically disabled in the firewall.

Automatic management of firewall in FreedomBox is handled by Plinth web user interface using FirewallD.

Version 0.2 (2014-03-16)

FIXME: fill in.

New Architectures

In addition to the ?DreamPlug, Raspberry Pi and VirtualBox (x86) images are now provided.

New Services

These services are new as of this release:

  • Configuration Management UI
  • Instant Messaging
  • OwnCloud

  • dnsmasq
  • Low-Level Configuration Management
  • Service Announcement
  • LDAP Server
  • LXC Support
  • Source Packages

See ?the user documentation for instruction on how to use them.

Configuration Management UI

The FreedomBox now has an administrative interface, Plinth.

To use it:

  1. Start your FreedomBox.

  2. After Plinth is configured, log in.

To configure it:

  1. Start your FreedomBox.

  2. Plug your Ethernet cable in to your computer and eth1 on your ?DreamPlug.

  3. Connect to Plinth.

  4. Set up the user name and password you'll use to log into Plinth.

Instant Messaging

The FreedomBox now supports instant messaging via XMPP, using JWChat.

To use it:

  1. Start your FreedomBox.

  2. Register a new Jabber account.

  3. Log in to your Jabber account.

OwnCloud

  • (with 4GB images)

(What is this? What is it for? How do we use it?)

dnsmasq

(What is this? What is it for? How do we use it?)

Low-Level Configuration Management

Etckeeper is now used for configuration management: after every major system operation, the system automatically takes a configuration snapshot so configuration changes can be reversed, as necessary.

Service Announcement

Avahi Service Announcement and mDNS Name Resolution.

(What is this? What is it for? How do we use it?)

LDAP server

(What is this? What is it for? How do we use it?)

LXC support

(What is this? What is it for? How do we use it?)

Source Packages

Source Packages for each installed package are now stored in the /usr/src/packages/ directory.

Changes since 0.1 release

  • The privoxy setup is now the default from Debian.

Version 0.1 (2013-02-26)

I am pleased to announce our first FreedomBox software release. The FreedomBox 0.1 image is available here (.torrent) (sha512sum: 867f5bf462102daef82a34165017b9e67ed8e09116fe46edd67730541bbfb731083850ab5e28ee40bdbc5054cb64e4d0e46a201797f27e0b8f0d2881ef083b40).

This 0.1 version is primarily a developer release, which means that it focuses on architecture and infrastructure rather than finish work. The exception to this is privoxy-freedombox, the web proxy discussed in previous updates, which people can begin using right now to make their web browsing more secure and private and which will very soon be available on non-FreedomBox systems. More information on that tool at the end of this post.

  • What have we accomplished?
    • This first release completes a number of important milestones for the project.
    • Full hardware support in Debian
      • A big part of the vision for the FreedomBox project revolves around the "Boxs", tiny plug servers that are capable of running full size computing loads cheaply and with little use of electricity. In many respects these are wireless routers given the brains of a smart phone. If you want to change the software on a router or smart phone today you normally need to worry about bootloader images, custom roms, and a whole collection of specialized build and install tools. We wanted to the FreedomBox to move beyond this fragmented environment and, with the help of some embedded device experts, we have managed to make our development hardware into a fully supported Debian platform. That means that anyone with a device can install Debian on it just like a laptop or desktop computer. This support is very important for ensuring that the work we do on the FreedomBox is as portable and reusable as possible.

    • Basic software tools selected
      • There is a lot of great free software out there to choose from and we put a lot of thought into which elements would be included in our basic tool kit. This includes the user interface system

        "plinth" that I outlined in a recent kickstarter update as well as basic cryptography tools like gpg and a one named "monkeysphere" that leverages gpg as an authentication tool. All of these are now bundled together and installed on the release image. This common working environment will simplify development going forward.

    • Box-to-box communication design
      • Some goals of the FreedomBox can be accomplished with one user and one FreedomBox but many, like helping someone route around repressive government firewalls, will require groups of people and groups of boxes working together. One of our greatest architectural challenges has been finding a way for boxes to communicate securely without so slowing down or breaking network access as to make the system unpleasant to use. We have now outlined and built the first version of our proposed solution: Freedom-buddy. Freedom-buddy uses the world class TOR network so that boxes can find each other regardless of location or restrictive firewall and then allows the boxes to negotiate secure direct connections to each other for actually sending large or time sensitive data. We believe this blended approach will be most effective at improving the security and usability of personal-server communications and all the services we plan to build into those servers.

    • Web cleaning
      • Our first service, a piece of software you can use today to start making your web browsing more secure and private, is called "privoxy-freedombox". This software combines the functionality of

        the [https://adblockplus.org/en/|Adblock Plus]] ad blocker, the Easy Privacy filtering list, and the (?HTTPS Everywhere) website redirection plugin into a single piece of software to run on your FreedomBox. Combining these different plugins into software for your FreedomBox means that you can use them with almost any browser or mobile device using a standard web proxy connection. Because of our focus on building the FreedomBox as part of Debian this software will soon be available to anyone running a Debian system regardless of whether you are using our target DreamPlug hardware, a laptop, or a large rack server somewhere. As you read this packages should already be available in the

        Raspbian repositories, which is the optimized version of Debian used on the Raspberry Pi hardware. Hopefully we will get that onto the main Debian mirrors over the next month; if you are interested in building it for yourself in the meantime, the source is available from gitorious. As we build additional components for the FreedomBox we will continue to work on making them widely available.

  • What is next?
    • As you may have seen, our Project Lead, Bdale Garbee, is about to begin a well earned

      early retirement from his long time role as Open Source & Linux Chief Technologist at Hewlett-Packard. Over the coming month Bdale and the rest of the Foundation team will be putting together plans for the next stage of FreedomBox development and the road to a 1.0 release. News and updates will follow at freedomboxfoundation.org (rss).


CategoryFreedomBox