The Tor Project issueshttps://gitlab.torproject.org/groups/tpo/-/issues2023-01-02T02:36:40Zhttps://gitlab.torproject.org/tpo/tpa/team/-/issues/40994Request for limited root access on gitlab-dev as per TPA-RFC072023-01-02T02:36:40Zmicahmicah@torproject.orgRequest for limited root access on gitlab-dev as per TPA-RFC07```
As detailed in [TPA-RFC-7](https://gitlab.torproject.org/tpo/tpa/team/-/wikis/policy/tpa-rfc-7-root), I am hereby requesting time-limited root access to the gitlab-dev server in order to test the patch work necessary for tpo/tpa/gitl...```
As detailed in [TPA-RFC-7](https://gitlab.torproject.org/tpo/tpa/team/-/wikis/policy/tpa-rfc-7-root), I am hereby requesting time-limited root access to the gitlab-dev server in order to test the patch work necessary for tpo/tpa/gitlab#23.
I currently have (sudo) git access to perform actions there, however I will need to do a few things as root in order to accomplish this quest:
. disable puppet on the system so it wont enforce a state that I would modify as detailed below (requires root)
. configure gitlab email sending to test the patch (requires editing /etc/gitlab/gitlab.rb as root)
. disable email sending on the server to keep the server from sending confusing and incorrect notifications to users (requires root)
. be able to process the unsent mail in order to determine if the patch has properly worked (requires root)
. remove any queued mails that would be sent out by gitlab that should not be sent (requires root)
All of the above I could coordinate with TPA folks and ask them to do them when I get to those stages, but due to the limited time windows I have to do the work, having this access (temporarily) would facilitate a much speedier result.
-----BEGIN PGP MESSAGE-----
owFtVE2o3FQUTmtFDNS6kAdikfN4CDMyydh5v3bVeT+Fh1KK6Kr+cJOcTG4nuSe9
9+aFgAVX/nTVhS5cuBMEV/pAwYV00YWgiG7cVFy4EEXQre2qnpvMvE6tAwMhnHO+
n/OdXD/5kOcvBQP85dCe/+3Yd39GXnz9swtjAwlaIXNMQCq49PLFcfDS+Z1g87Ve
Zm1pzg6HE2lzEYWWdKnpMsY2JD0Z2pL4L4YWRTEMhrWcSjMsKZdx494HOo2DzUAT
2f4A9kEUkKHGqAGNVyo0VqoJWFlgkMtCWkZ3pSDiGI0BS2AzhA45SPAADOoD1I4i
6YQfXAVPactKYeMMatJTUOj6hW4gJS6acezmrIxWQ/D9fYgrrVHZvIFMHCD0TJVQ
34EtwJeoeULBb6wkZRyOxgFkVKPjsQ+1zHOGY+JcnRAISLHmMtZlQJhOziJdnk1F
mUuTuSoDrQtnfT+ERBoR5ayjKku0QKpVZRpjsQBDwMRqUhZQMaUYGcpYYZGrhHVM
qMoTKCiRaeOQj/YZYU419JzhUmNHqc94MalUTio9Nxiw4Aa2WCXtVh6w9t4ITGS7
uSHaeGbrPB86msvuL2i6f/RcWrdMBpoilouvUk3FUbXjWRn3JJRLZ0y8t9iCIitT
GYvZZggq7jb/IzRirxwJt09N3WoZq1KMYKFltrghNg51IRWCTBfUZyyL2zkRnBiX
Mrb2QSyNBXGYhGrcZiuucfNNt6RuRZGTycBUWeBDmJnfFpisrWBlR1X/hfDHHDjq
iInIYXGS266YWIJULhK1tBnwDXP886lpfRNm6nqKWU7bxzpD9RH3Tzhu7a2RQReq
CZoBREwvqXB+hPP7dMfK81VCteHW9nSORra+DNzLNkEu37Nb6nGIS9JCy7zpz4xI
RSxz2WZYQFGxx6bkS5K8BtZb5Tb03/3phLfke1eXlk9cu3zt5vLfr3554fiTX8y/
Xw8f54/XxTeeeMvjX+j1pDEV6iAt9Tn2sEtGyCtT5aQMU5naLCNtOIwqVGi3xhvj
rfHO6ujM3t76zvbG2t5zozPPb6+Pdkc7G+u7u9ujzbW1jb11z3/08TnicnHM+7H5
5IUPN39/+4OlWy8mf/y89a344dMbTz9y2//rmYOVlf2vvLtv/tM71z/1/uvfvHfp
xlN3qmc/vrl66pXDdz4//PXW6enX3z/2Lw==
=eyB2
-----END PGP MESSAGE-----
```https://gitlab.torproject.org/tpo/web/tpo/-/issues/352Add release page for Tor Browser 12.0 under /releases2022-12-07T15:31:21ZdonutsAdd release page for Tor Browser 12.0 under /releasesdonutsdonutshttps://gitlab.torproject.org/tpo/network-health/team/-/issues/276Write a small UI in Python for displaying and sorting relay annotations2023-06-14T16:53:07ZGeorg KoppenWrite a small UI in Python for displaying and sorting relay annotationsWe could think about re-using parts of the [`python-website`](https://gitlab.torproject.org/tpo/network-health/metrics/python-website) project maybe.We could think about re-using parts of the [`python-website`](https://gitlab.torproject.org/tpo/network-health/metrics/python-website) project maybe.https://gitlab.torproject.org/tpo/tpa/team/-/issues/40978Set up a domain front on fastly for conjure2023-01-04T20:59:21ZCecylia BocovichSet up a domain front on fastly for conjureWe're deploying a new Conjure PT that has a registration step similar to snowflake. I've reached out to the maintainers of the registration server to ask if we can have our users use their domain front, but they are sometimes slow to res...We're deploying a new Conjure PT that has a registration step similar to snowflake. I've reached out to the maintainers of the registration server to ask if we can have our users use their domain front, but they are sometimes slow to respond. In the meantime can we set up our own (if we have the budget for it)?
The front should point to https://registration.refraction.network
cc @gaba @armaanarcatanarcathttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41468backport 1600437 : Disable CBC-mode ECDSA ciphers and stop advertising ECDSA+...2023-11-20T16:45:31ZThorinbackport 1600437 : Disable CBC-mode ECDSA ciphers and stop advertising ECDSA+SHA1following on from #40183
- FF109+ [1600437](https://bugzilla.mozilla.org/show_bug.cgi?id=1600437)
- [patch](https://hg.mozilla.org/mozilla-central/rev/d0ac295c1b62)
IDK if this makes any difference really, but it's more than just pref f...following on from #40183
- FF109+ [1600437](https://bugzilla.mozilla.org/show_bug.cgi?id=1600437)
- [patch](https://hg.mozilla.org/mozilla-central/rev/d0ac295c1b62)
IDK if this makes any difference really, but it's more than just pref flips. And we could drop the two prefs added in https://gitlab.torproject.org/tpo/applications/tor-browser/-/merge_requests/433
these two
```js
pref("security.ssl3.ecdhe_ecdsa_aes_256_sha", false, locked);
pref("security.ssl3.ecdhe_ecdsa_aes_128_sha", false, locked);
```Pier Angelo VendramePier Angelo Vendramehttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41452WebExtension "Content Script"2023-01-05T15:17:01ZP9LmZu22jmVbWebExtension "Content Script"Recently TorBrowser disallows running "content scripts" from the WebExtension API. I understand that content scripts can read user data and therefore are generally excluded in TorBrowser. But is there any way to disable this protection? ...Recently TorBrowser disallows running "content scripts" from the WebExtension API. I understand that content scripts can read user data and therefore are generally excluded in TorBrowser. But is there any way to disable this protection? In about:config I didn't find a solution unfortunately.
Version 11.5.7https://gitlab.torproject.org/tpo/tpa/team/-/issues/40958disk failure in chi-san-012022-11-21T15:15:48Zanarcatdisk failure in chi-san-01```
Date: Thu, 20 Oct 2022 01:07:33 +0000
From: nagios@hetzner-hel1-01.torproject.org
To: anarcat+rapports@orangeseeds.org
Subject: ** PROBLEM Service Alert: chi-san-01/SAN health status is CRITICAL **
***** Icinga *****
Notification T...```
Date: Thu, 20 Oct 2022 01:07:33 +0000
From: nagios@hetzner-hel1-01.torproject.org
To: anarcat+rapports@orangeseeds.org
Subject: ** PROBLEM Service Alert: chi-san-01/SAN health status is CRITICAL **
***** Icinga *****
Notification Type: PROBLEM
Service: SAN health status
Host: chi-san-01
Address: chi-san-01
State: CRITICAL
Date/Time: Thu Oct 20 01:07:33 UTC 2022
Additional Info:
ERROR - Storage array health status = fixing. (SMcli return code 0) (The following failures have been found:Degraded Virtual Disk...)
```anarcatanarcathttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41416Update notification for alpha channel takes user to non-alpha upgrade page2023-01-31T20:30:44ZTornUpdate notification for alpha channel takes user to non-alpha upgrade pageIt seems like if a user is on the alpha channel, the upgrade page link, contained in the top right hand pop up window, that appears upon auto-update failure, should be for the alpha upgrade page.
(This has come up due to auto-update fai...It seems like if a user is on the alpha channel, the upgrade page link, contained in the top right hand pop up window, that appears upon auto-update failure, should be for the alpha upgrade page.
(This has come up due to auto-update failing on many occasions on different versions, requiring manual replace instead. Have wondered whether this could be due to location of app in slightly non-standard path, or some permissions setting in the Application Support folder, but otherwise don't know why it never works any more.)https://gitlab.torproject.org/tpo/tpa/team/-/issues/40951review and retire old lists2023-06-28T14:38:24Zanarcatreview and retire old listswhile removing the tor-teachers list (#40947) i wondered how many active lists we actually did have left. so i took a look...
we have 65 lists:
```
root@eugeni:/var/lib/mailman# sudo -u list ./bin/list_lists | head -1
65 matching maili...while removing the tor-teachers list (#40947) i wondered how many active lists we actually did have left. so i took a look...
we have 65 lists:
```
root@eugeni:/var/lib/mailman# sudo -u list ./bin/list_lists | head -1
65 matching mailing lists found:
```
out of those, only 54 have archives, so those are the only ones we can guess at how active they are:
```
root@eugeni:/var/lib/mailman# ls -lt $(for list in $(ls lists) ; do echo archives/private/$list.mbox/$list.mbox; done) 2>/dev/null | wc -l
54
```
out of that, only 35 lists have public archives:
```
root@eugeni:/var/lib/mailman# ls -lt $(for list in $(ls lists) ; do echo archives/public/$list/index.html; done) 2>/dev/null | wc -l
35
```
and those are the lists that haven't been posted to since january 2022:
```
root@eugeni:/var/lib/mailman# ls -lt $(for list in $(ls lists) ; do echo archives/public/$list/index.html; done) 2>/dev/null | sed '0,/2022 archives/d'
-rw-rw-r-- 1 www-data list 4518 Jan 19 2022 archives/public/tor-relays-fr/index.html
-rw-rw-r-- 1 root list 9238 Oct 17 2021 archives/public/tor-relays-universities/index.html
-rw-rw-r-- 1 root list 33055 Aug 14 2021 archives/public/tbb-bugs/index.html
-rw-rw-r-- 1 root list 26537 May 28 2021 archives/public/ooni-dev/index.html
-rw-rw-r-- 1 root list 4912 Feb 23 2021 archives/public/ooni-operators/index.html
-rw-rw-r-- 1 root list 3654 Jan 6 2021 archives/public/tor-access/index.html
-rw-rw-r-- 1 root list 1105 Nov 9 2020 archives/public/ooni-bugs/index.html
-rw-rw-r-- 1 root list 6175 Jun 2 2020 archives/public/tor-scaling/index.html
-rw-rw-r-- 1 root list 4095 Sep 24 2019 archives/public/tor-users/index.html
-rw-rw-r-- 1 root list 37721 Sep 17 2018 archives/public/tor-wiki-changes/index.html
-rw-rw-r-- 1 root list 2383 Sep 4 2018 archives/public/regional-nyc/index.html
-rw-rw-r-- 1 root list 17248 Aug 21 2015 archives/public/tor-censorship-events/index.html
```
... it's kind of an arbitrary metric... i wanted to look at "this year", but this was an easier sed pattern.
it's twelve lists. from there, it looksl ike the following lists are prime candidates for removal:
* [x] tbb-bugs: @richard, is that still in use?
* [ ] ooni-dev: do the oon folks still use this?
* [ ] ooni-operators: same
* [ ] ooni-bugs: that one surely isn't relevant anymore
* [ ] tor-users: is that still a thing? no post since 2019!?
* [x] tor-wiki-changes: i bet this is empty since we moved to gitlab
* [ ] regional-nyc: hey what's up NYC?
* [ ] tor-censorship-events: ooni does this now?
i'm not sure what to do about those:
* [ ] tor-relays-fr
* [ ] tor-relays-universities
* [ ] tor-access
* [x] tor-scalinganarcatanarcathttps://gitlab.torproject.org/tpo/web/donate-static/-/issues/96Duplicated phrase on main page2022-12-12T22:11:48ZemmapeelDuplicated phrase on main pageOn the main page the phrase `We're experiencing issues with certain browsers donating by credit card. Please see the FAQ for help.` Appears twice.
Screenshot:
![duplicated-phrase](/uploads/0958688829e9f6db4120cde791acad8a/duplicated-ph...On the main page the phrase `We're experiencing issues with certain browsers donating by credit card. Please see the FAQ for help.` Appears twice.
Screenshot:
![duplicated-phrase](/uploads/0958688829e9f6db4120cde791acad8a/duplicated-phrase.png)https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41367TB-Alpha freezes after prolonged open - Gtk-WARNING **: Could not load a pixbuf2022-10-22T23:18:15ZshanzhanzTB-Alpha freezes after prolonged open - Gtk-WARNING **: Could not load a pixbuf<!--
* Use this issue template for reporting a new bug.
-->
### Summary
TB-Alpha version 12.0a3 freeze/extreme slowness after long opening (couple of hours)
Logs doesnt show exact issue but might be useful
### Steps to reproduce:
1. O...<!--
* Use this issue template for reporting a new bug.
-->
### Summary
TB-Alpha version 12.0a3 freeze/extreme slowness after long opening (couple of hours)
Logs doesnt show exact issue but might be useful
### Steps to reproduce:
1. Open TB-Alpha for couple of hours
2. Extreme slowness to the level it looks like freezed.
### What is the current bug behavior?
TB-Alpha freeze if kept open
### What is the expected behavior?
Shouldn't freeze
### Environment
Debian GNU/Linux 11
**Which installation method did you use?
Downloaded from TPO-Website
### Relevant logs and/or screenshots
```
Fontconfig warning: "/home/user/.tb/tor-browser/Browser/TorBrowser/Data/fontconfig/fonts.conf", line 118: unknown element "blank"
Crash Annotation GraphicsCriticalError: |[0][GFX1-]: No GPUs detected via PCI (t=0.488177) [GFX1-]: No GPUs detected via PCI
Crash Annotation GraphicsCriticalError: |[0][GFX1-]: No GPUs detected via PCI (t=0.488177) |[1][GFX1-]: glxtest: process failed (received signal 11) (t=0.488696) [GFX1-]: glxtest: process failed (received signal 11)
Missing chrome or resource URL: resource://gre/modules/L10nRegistry.jsm
Missing chrome or resource URL: resource://gre/modules/L10nRegistry.sys.mjs
(Tor Browser:23320): Gtk-WARNING **: 16:00:30.109: Could not load a pixbuf from /org/gtk/libgtk/theme/Adwaita/assets/check-symbolic.svg.
This may indicate that pixbuf loaders or the mime database could not be found.
```
### Might be useful related bugs from FF
* https://bugzilla.mozilla.org/show_bug.cgi?id=1634590
* https://access.redhat.com/solutions/5210221 (I have [libgdk-pixbuf2.0-0](https://packages.debian.org/bullseye/libgdk-pixbuf2.0-0) installed but didnt solve the issue)https://gitlab.torproject.org/tpo/tpa/team/-/issues/40916gitlab sending its mails from surprising host "gitlab-02" sometimes2022-10-11T18:51:03ZRoger Dingledinegitlab sending its mails from surprising host "gitlab-02" sometimesHere is one of my remaining mysteries for the weekend: on Thursday night when I changed ldap to fwd my arma@tpo mail to mit.edu rather than seul.org, I started getting my gitlab mails From <git@gitlab-02.torproject.org>. Tonight when I c...Here is one of my remaining mysteries for the weekend: on Thursday night when I changed ldap to fwd my arma@tpo mail to mit.edu rather than seul.org, I started getting my gitlab mails From <git@gitlab-02.torproject.org>. Tonight when I changed it back to not go through mit, they resumed being From <git@gitlab.torproject.org>.
Is there some exception we have in place for some destinations? Do we send from either and our June instructions (https://lists.torproject.org/pipermail/tor-project/2022-June/003421.html) have become no longer accurate?
Not a big deal since I can batch-tag and batch-move them in mutt, but in case your response is "wait wtf", now you know. :)
Oh, I should also say that my spamassassin assigns the "HEADER_FROM_DIFFERENT_DOMAINS" tag to the gitlab-02 mails, which makes them more spammy in its eyes.
I can send full email headers for each type if you want them.anarcatanarcathttps://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/issues/40203Restore firewall rules on snowflake-01 (minus conntrack)2023-10-06T03:11:45ZDavid Fifielddcf@torproject.orgRestore firewall rules on snowflake-01 (minus conntrack)In tpo/anti-censorship/pluggable-transports/snowflake#40189 we disabled conntrack
by removing the firewall rules.
We should restore a sensible firewall configuration,
minus the conntrack rules,
if it proves not to harm performance.
/cc ...In tpo/anti-censorship/pluggable-transports/snowflake#40189 we disabled conntrack
by removing the firewall rules.
We should restore a sensible firewall configuration,
minus the conntrack rules,
if it proves not to harm performance.
/cc @linusLinus Nordberglinus@torproject.orgLinus Nordberglinus@torproject.orghttps://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake-webext/-/issues/59Snowflake is off - Could not connect to the bridge.2023-03-08T12:05:04ZcypherpunksSnowflake is off - Could not connect to the bridge.I am getting the "Snowflake is off - Could not connect to the bridge" message when I use the webextension in Opera, Chrome and the one that I have embedded on my website. I have tried to bin my extension and then download and activate it...I am getting the "Snowflake is off - Could not connect to the bridge" message when I use the webextension in Opera, Chrome and the one that I have embedded on my website. I have tried to bin my extension and then download and activate it again and I still get the same message. It has worked fine for four days before crashing.
What to do and try now?
Best
Ehttps://gitlab.torproject.org/tpo/tpa/team/-/issues/40908reverse DNS broken at cymru2022-10-11T14:13:27Zanarcatreverse DNS broken at cymrui just opened a ticket with cymru named "URGENT: reverse DNS for 38.229.82.0/24 broken", it was assigned the ticket number CST-316.
i noticed this while trying to launch gettor-rdsys (#40789), mails would fail to route to eugeni with:
...i just opened a ticket with cymru named "URGENT: reverse DNS for 38.229.82.0/24 broken", it was assigned the ticket number CST-316.
i noticed this while trying to launch gettor-rdsys (#40789), mails would fail to route to eugeni with:
```
host eugeni.torproject.org[49.12.57.136] said: 450 4.7.25 Client host rejected: cannot find your hostname, [38.229.82.36] (in reply to RCPT TO command)
```
and indeed reverse DNS is broken on that IP... hell, here's a copy of the ticket i sent to cymru:
> ```
> anarcat@curie:~$ host 38.229.82.36
> Host 36.82.229.38.in-addr.arpa. not found: 3(NXDOMAIN)
> anarcat@curie:~[1]$
> ```
>
> It looks like the entire zone delegation was removed:
>
> ```
> anarcat@curie:~$ dig -x 38.229.82.36
>
> ; <<>> DiG 9.16.33-Debian <<>> -x 38.229.82.36
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56474
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 1232
> ;; QUESTION SECTION:
> ;36.82.229.38.in-addr.arpa. IN PTR
>
> ;; AUTHORITY SECTION:
> 82.229.38.in-addr.arpa. 3355 IN SOA ns1.cymru.com. empty.empty. 39 3600 600 1209600 3600
>
> ;; Query time: 52 msec
> ;; SERVER: 1.1.1.1#53(1.1.1.1)
> ;; WHEN: Wed Sep 28 10:24:27 EDT 2022
> ;; MSG SIZE rcvd: 114
> ```
>
> 38.229.82.0/24 used to be delegated to tor's nameservers, which are:
>
> ```
> torproject.org. 86400 IN NS ns1.torproject.org.
> torproject.org. 86400 IN NS ns3.torproject.org.
> torproject.org. 86400 IN NS ns4.torproject.org.
> torproject.org. 86400 IN NS ns5.torproject.org.
> torproject.org. 86400 IN NS nsp.dnsnode.net.
> ```
>
> this is causing an outage on our end as servers in that cluster are
> having trouble delivering mail.anarcatanarcat2022-10-11https://gitlab.torproject.org/tpo/tpa/team/-/issues/40893Set up machine/VM to run Tor Weather on2022-12-21T07:25:43ZGeorg KoppenSet up machine/VM to run Tor Weather onWe just finished the [GSoC project to re-write Tor Weather](https://gitlab.torproject.org/sarthikg/tor-weather) and we would like to deploy the result now with weather.torproject.org as the respective domain.
@sarthikg: could you make a...We just finished the [GSoC project to re-write Tor Weather](https://gitlab.torproject.org/sarthikg/tor-weather) and we would like to deploy the result now with weather.torproject.org as the respective domain.
@sarthikg: could you make a list of things we'd need to have available on a new machine/in a new VM to have Tor Weather running properly? And maybe some spec that VM/machine? Thanks!
/cc @hirohttps://gitlab.torproject.org/tpo/tpa/team/-/issues/40873Sending gitlab comments by emails is not working2022-12-05T15:19:19ZboklmSending gitlab comments by emails is not workingI wrote some comment for tpo/applications/tor-browser-build!509 by answering an email a few days ago (on 2022-08-22), and today answered a comment on #40872 by email, but they did not get posted. So it looks like sending comments by emai...I wrote some comment for tpo/applications/tor-browser-build!509 by answering an email a few days ago (on 2022-08-22), and today answered a comment on #40872 by email, but they did not get posted. So it looks like sending comments by emails is not working anymore.anarcatanarcathttps://gitlab.torproject.org/tpo/tpa/team/-/issues/40851Add dan and ma1 to correct groups2022-08-18T21:33:19ZPier Angelo VendrameAdd dan and ma1 to correct groups@dan and @ma1 need to be on the right groups to access the build servers. Could you add them, please?
The additional groups of my account are:
```
tbb-nightlies tb-tester tb-builder
```
We're not sure about what the first two do, though.@dan and @ma1 need to be on the right groups to access the build servers. Could you add them, please?
The additional groups of my account are:
```
tbb-nightlies tb-tester tb-builder
```
We're not sure about what the first two do, though.anarcatanarcathttps://gitlab.torproject.org/tpo/tpa/team/-/issues/40839crm-int-01 disk space issues2022-10-12T22:36:52Zanarcatcrm-int-01 disk space issuescrm-int-01 disk usage has been pretty flaky historically, but we've had especially bad situations recently, where it completely ran out of disk space two weeks ago, leading to a full crash (#34098).
let's fix this situation.
disk usage...crm-int-01 disk usage has been pretty flaky historically, but we've had especially bad situations recently, where it completely ran out of disk space two weeks ago, leading to a full crash (#34098).
let's fix this situation.
disk usage history in the last year of crm-int-01:
![image](/uploads/f58ba5e501f3ed4389d3954da16a6870/image.png)
AKA:
* 20GB was added to /srv in december
* space on / has always been tight
* cleanups were done in october and december, but it's still increasing linearily
* /srv is irregular and unpredictable
conclusion:
* let's double the size of `/` to give us another year or more
* let's take up the available space in the PV for `/srv` and advise with service admin
also, regarding service-specific stuff (AKA /cc @eric), here are the big disk sinks i could find:
- [x] 12GB: mysql watchdog table in the prod database (!): maybe it should be purged regularly?
- [x] 3.6GB: `/srv/crm.torproject.org/htdocs-staging/sites/all/modules/custom/tor_donation/donation_processor.log`: is there a way we could rotate that logfile somehow? do you want me to hook a logrotate in there? what service generates this? it looks like we have records starting from 2021-05-27 in there, more than a year ago!
- [x] 3GB: `/srv/openflows/opt/openflows/ebudsbacks/torcivicrm.torproject.org`
- [x] 1.4GB: `/home/ericg`anarcatanarcathttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41079Remove "make Tor Browser the default browser" from settings2022-07-26T17:38:59ZWofWcawofwca@protonmail.comRemove "make Tor Browser the default browser" from settings![image](/uploads/ff88bc19e120f2aabe6f1a9116bb4cd5/image.png)
A.k.a. "Always check if Tor Browser is your default browser", "Tor Browser is not your default browser", "Make Default..."
From what [I've heard](https://gitlab.torproject.o...![image](/uploads/ff88bc19e120f2aabe6f1a9116bb4cd5/image.png)
A.k.a. "Always check if Tor Browser is your default browser", "Tor Browser is not your default browser", "Make Default..."
From what [I've heard](https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40655), it's not possible to make Tor the default browser (sigh), so this thing doesn't do anything and confuses users.
Apparently there is the `HAVE_SHELL_SERVICE` that controls whether it is shown. Maybe we could add a new condition and rename it, or simply set it to `false`, but the latter could break [other stuff](https://gitlab.torproject.org/tpo/applications/tor-browser/-/blob/a9f1b8620a9c5b6b36bdcec3eb75b63e6dce4cb0/browser/base/content/nsContextMenu.js#L607-616)
* https://gitlab.torproject.org/tpo/applications/tor-browser/-/blob/a9f1b8620a9c5b6b36bdcec3eb75b63e6dce4cb0/browser/components/preferences/main.inc.xhtml#L40-61
* https://gitlab.torproject.org/tpo/applications/tor-browser/-/blob/a9f1b8620a9c5b6b36bdcec3eb75b63e6dce4cb0/browser/components/preferences/main.js#L1295-1299