The Tor Project issueshttps://gitlab.torproject.org/groups/tpo/-/issues2021-04-08T18:58:01Zhttps://gitlab.torproject.org/tpo/tpa/team/-/issues/40089Find a way to decouple external prom/grafana configuration from puppet2021-04-08T18:58:01ZHiroFind a way to decouple external prom/grafana configuration from puppetI think we should have a way to keep prom/grafana config files out of puppet and into a separated git repository that people can access otherwise the process of adding an endpoint to prometheus will always be somehow "painful" for contri...I think we should have a way to keep prom/grafana config files out of puppet and into a separated git repository that people can access otherwise the process of adding an endpoint to prometheus will always be somehow "painful" for contributors that do not have puppet access/knowledge.anarcatanarcathttps://gitlab.torproject.org/tpo/tpa/team/-/issues/32824Upgrade tpo onions to v3.2021-04-20T20:54:20ZcypherpunksUpgrade tpo onions to v3.https://onion.torproject.org/
Please upgrade to v3 and notify us by writing a blog. Thankshttps://onion.torproject.org/
Please upgrade to v3 and notify us by writing a blog. Thanksweasel (Peter Palfrader)weasel (Peter Palfrader)2021-06-15https://gitlab.torproject.org/tpo/tpa/team/-/issues/40212remove metrics-bugs mailing list2021-04-20T15:24:33Zanarcatremove metrics-bugs mailing listanarcatanarcathttps://gitlab.torproject.org/tpo/tpa/team/-/issues/40223Please create exitmap user/group on carinatum to run our exitmap tests there2021-04-26T19:41:25ZGeorg KoppenPlease create exitmap user/group on carinatum to run our exitmap tests thereWe like to have a similar setup to our doctor running environment to finally get the exitmap scans running on TPO infra as well. We think `carinatum` would be a good host for that task and the setup should be similar to the `doctor` one....We like to have a similar setup to our doctor running environment to finally get the exitmap scans running on TPO infra as well. We think `carinatum` would be a good host for that task and the setup should be similar to the `doctor` one. I am not sure about all of the things that need to happen for that on the sysadmin side but I guess we need at least:
1. Something like /srv/exitmap.torproject.org/ where our `exitmap` code and dependencies live
2. An `exitmap` user/group who was access to 1.
3. A way for @dgoulet and @gk to change into the `exitmap` user with something like `sudo -u exitmap bash`anarcatanarcathttps://gitlab.torproject.org/tpo/web/blog/-/issues/40045Add telegram logo2023-01-25T21:53:27ZGusAdd telegram logoPlease add the Tor Project official telegram channel (https://t.me/torproject) on the blog footer as we have on the main website (torproject.org).Please add the Tor Project official telegram channel (https://t.me/torproject) on the blog footer as we have on the main website (torproject.org).https://gitlab.torproject.org/tpo/tpa/team/-/issues/41426deploy GitLab postgresql server from our existing infrastructure2024-01-31T17:39:15Zanarcatdeploy GitLab postgresql server from our existing infrastructurewe should consider deploying the PostgreSQL database server ~~and Prometheus monitoring~~ (done) from our existing puppet recipes instead of using the omnibus versions.
pgsql, in particular, is causing us troubles because our normal bac...we should consider deploying the PostgreSQL database server ~~and Prometheus monitoring~~ (done) from our existing puppet recipes instead of using the omnibus versions.
pgsql, in particular, is causing us troubles because our normal backup procedures do not work.
~~prometheus is also causing issues because we cannot reuse our export/realize resources in puppet (see https://gitlab.torproject.org/tpo/tpa/services/-/issues/34420, https://gitlab.torproject.org/tpo/tpa/services/-/issues/33921)~~ fixedanarcatanarcathttps://gitlab.torproject.org/tpo/community/outreach/-/issues/40003Tor talk about onion services and privacy to Instituto Federal (Brasil)2020-11-30T02:11:53ZGusTor talk about onion services and privacy to Instituto Federal (Brasil)Date: November 25 - 2000 - 2100 (Brasil)
I will talk about "Desenvolvimento Web com Privacidade por Design & Onion Services" to the grad students of Instituto Federal during the "9ª Semana Acadêmica de Sistemas para Internet".Date: November 25 - 2000 - 2100 (Brasil)
I will talk about "Desenvolvimento Web com Privacidade por Design & Onion Services" to the grad students of Instituto Federal during the "9ª Semana Acadêmica de Sistemas para Internet".GusGus2020-11-25https://gitlab.torproject.org/tpo/community/outreach/-/issues/40004Virtual class "Surveillance Capitalism and Privacy" with students in Sao Paulo2020-11-30T20:40:56ZGusVirtual class "Surveillance Capitalism and Privacy" with students in Sao PauloInspired by "The Social Dilemma", teachers from a school invited me to do a class about "Surveillance Capitalism and Privacy".
This will happen next Monday, November 30, 1500 local time (1800 UTC).Inspired by "The Social Dilemma", teachers from a school invited me to do a class about "Surveillance Capitalism and Privacy".
This will happen next Monday, November 30, 1500 local time (1800 UTC).GusGus2020-11-30https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/33533Rebase Tor Browser esr68 patches on top of esr782020-08-07T14:25:05ZAlex CatarineuRebase Tor Browser esr68 patches on top of esr78- [x] #31918
- [x] #33734
- [x] #33737
- [x] #33856
- [x] #33862
- [x] #33890
- [x] torbutton#33892
- [x] #34145
- [x] #34209
- [x] #40010
- [x] #40022
- [x] #40025
- [x] #40035
- [x] #40036
- [x] #40037
- [x] #40039
- [x] #40040
- [x...- [x] #31918
- [x] #33734
- [x] #33737
- [x] #33856
- [x] #33862
- [x] #33890
- [x] torbutton#33892
- [x] #34145
- [x] #34209
- [x] #40010
- [x] #40022
- [x] #40025
- [x] #40035
- [x] #40036
- [x] #40037
- [x] #40039
- [x] #40040
- [x] #40041
- [x] #40074
- [x] #40076Sponsor 58 - Tor Browser Security, Performance, & Usability Improvementshttps://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/34013Bump node version to v10.21.02020-07-18T00:04:08ZGeorg KoppenBump node version to v10.21.0Update our node version to what is used in mozilla-central.Update our node version to what is used in mozilla-central.Georg KoppenGeorg Koppenhttps://gitlab.torproject.org/tpo/community/support/-/issues/40004[RT] Create a new article to say that YouTube is unhappy with Tor Browser and...2020-10-07T12:52:38ZGus[RT] Create a new article to say that YouTube is unhappy with Tor Browser and what users can doAfter Tor Browser 10.0 release, we're receiving some emails from users reporting that YouTube is not working, see https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40140. We need to create a new RT article to answer the...After Tor Browser 10.0 release, we're receiving some emails from users reporting that YouTube is not working, see https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40140. We need to create a new RT article to answer these users.GusGushttps://gitlab.torproject.org/tpo/applications/tor-browser-spec/-/issues/40015FF79-81 network audit2022-01-31T07:23:15ZMatthew FinkelFF79-81 network auditLet's look at:
- [x] Gecko/GeckoView
- tor-browser@56ab7e2d173accfa5cde46659c7b801c8dab2a3e until tor-browser@cb11d5556759bd5bf174fbac719f51b2f02e2f0b
- [x] Fenix
- fenix@b54949e58f9fda3698ada3e64b9f4337177d84f0 until fenix@b54949e58...Let's look at:
- [x] Gecko/GeckoView
- tor-browser@56ab7e2d173accfa5cde46659c7b801c8dab2a3e until tor-browser@cb11d5556759bd5bf174fbac719f51b2f02e2f0b
- [x] Fenix
- fenix@b54949e58f9fda3698ada3e64b9f4337177d84f0 until fenix@b54949e58f9fda3698ada3e64b9f4337177d84f0
-Tor Browser: 11.0 Issues with previous releaseGeorg KoppenGeorg Koppenhttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40340Rebase 10.5 patches onto 78.8.0esr2021-02-19T22:12:34ZMatthew FinkelRebase 10.5 patches onto 78.8.0esrbace0d2a46cabd36f5bdc738c000f15ae4a4225cbace0d2a46cabd36f5bdc738c000f15ae4a4225cTor Browser: 10.5https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40116Allow building single-arch Android builds2022-05-24T15:11:05ZMatthew FinkelAllow building single-arch Android buildsCurrently, `fenix` and `android-components` depend on `geckoview` with pkg_type `merge_aars`, this requires that `geckoview` and `fenix` are built for all arches. However, we should be able to build only one package for one arch.Currently, `fenix` and `android-components` depend on `geckoview` with pkg_type `merge_aars`, this requires that `geckoview` and `fenix` are built for all arches. However, we should be able to build only one package for one arch.Pier Angelo VendramePier Angelo Vendramehttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40239Review GeckoView Changelog for gv842020-12-16T03:46:37ZGeorg KoppenReview GeckoView Changelog for gv84Tor Browser: 10.0https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/33556Add TBB project for android-components2020-09-01T19:48:44ZShane IsbellAdd TBB project for android-componentsContains dependent libraries of Fenix
Source: !https://github.com/mozilla-mobile/android-componentsContains dependent libraries of Fenix
Source: !https://github.com/mozilla-mobile/android-componentsTor Browser: 10.0Georg KoppenGeorg Koppenhttps://gitlab.torproject.org/tpo/applications/tor-browser-spec/-/issues/40008Merge FF84 network audit2020-12-01T21:24:02ZMatthew FinkelMerge FF84 network auditTor Browser: 10.0https://gitlab.torproject.org/tpo/tpa/team/-/issues/40287provision new OSUOSL ARM servers2021-06-17T20:21:21Zanarcatprovision new OSUOSL ARM serverswe have 32GB of RAM and 14 CPUs of ARM virtual machines to provision in their openstack cluster (thanks!!!). this should probably be used for gitlab runners to replace the retired jenkins / build-arm-10 builder (tpo/tpa/team#40284).
pre...we have 32GB of RAM and 14 CPUs of ARM virtual machines to provision in their openstack cluster (thanks!!!). this should probably be used for gitlab runners to replace the retired jenkins / build-arm-10 builder (tpo/tpa/team#40284).
pre-req checklist:
1. [x] partitions: setup /swapfile
2. [x] upgrades
3. [x] hostname fixed (had `.novalocal` suffix)
4. [ ] reverse DNS
5. [x] root password
6. [x] DNS works
main procedure:
1. [x] nextcloud spreadsheet
2. [x] tsa-misc
3. [x] puppet bootstrap
4. [x] nagios
6. [x] DNSWL (n/a)
5. [x] rebootanarcatanarcat2021-06-30https://gitlab.torproject.org/tpo/tpa/team/-/issues/40279Configure new server for Shadow experiments (chi-node-14)2021-06-16T20:25:30ZGabagaba@torproject.orgConfigure new server for Shadow experiments (chi-node-14)Please setup the new donated server the same as you did for [shadow 01](https://gitlab.torproject.org/tpo/tpa/team/-/issues/40248).
Dell PowerEdge R640 server with two Intel(R) Xeon(R) Gold 6230 CPU @ 2.10GHz processors (40 cores total)...Please setup the new donated server the same as you did for [shadow 01](https://gitlab.torproject.org/tpo/tpa/team/-/issues/40248).
Dell PowerEdge R640 server with two Intel(R) Xeon(R) Gold 6230 CPU @ 2.10GHz processors (40 cores total), 1536 GB of RAM, 2x 900GB SSD hard drives and an integrated Intel(R) X550 4-port 10G Ethernet NIC.
install checklist:
1. [x] BIOS upgrades (@lavamind)
* [x] Upgraded BIOS from 2.10.2 to [2.11.2](https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=92rfg&oscode=naa&productcode=poweredge-r640)
* [x] Upgraded iDRAC9 from 4.40.10.00 to [4.40.40.00](https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=1r1y2)
2. [x] burn-in (@lavamind):
* [x] Hardware Diagnostics mechanism integrated into the system's "Lifecycle controller"
* [x] memtest86 (stopped at test 13, no flaw found yet)
3. [x] BIOS configuration:
* [x] serial console access (@lavamind)
* [x] disable PXE (slows down boot)
* [x] SSH RACDM access (@lavamind)
* [x] admin iDRAC password change (@lavamind)
4. [x] automated install procedure from new-machine-cymru (@anarcat), missing:
* [x] <del>iSCSI servers access</del> (not necessary?)
5. [x] post-install procedure checklist
1. [x] partitions
1. [x] upgrades
1. [x] FQDN
1. [x] public IP
1. [x] hostname config
1. [x] working resolver
1. [x] root and LUKS passwords set in `tor-passwords.git`
6. [x] post-install procedure:
1. [x] add to spreadsheet
1. [x] tsa-misc
1. [x] ldap-vi
1. [x] alberti puppet
1. [x] bootstrap puppet
1. [x] reboot
1. [x] add to nagios
1. [x] dnswl (N/A)
1. [x] mandos
7. [x] CI runner setup (@anarcat)Sponsor 61 - Making the Tor network faster & more reliable for users in Internet-repressive placesJérôme Charaouilavamind@torproject.orgJérôme Charaouilavamind@torproject.orghttps://gitlab.torproject.org/tpo/network-health/metrics/library/-/issues/40001Support OnionPerf analysis file version 3.02020-08-07T19:26:47ZKarsten LoesingSupport OnionPerf analysis file version 3.0As discussed in tpo/metrics/onionperf#33974, we'll have to update metrics-lib to support OnionPerf analysis file version 3.0. Assigning to me.As discussed in tpo/metrics/onionperf#33974, we'll have to update metrics-lib to support OnionPerf analysis file version 3.0. Assigning to me.OnionPerf: Scalability, Performance, Establishing Basline MetricsKarsten LoesingKarsten Loesing