{"push_id":2660398550,"size":54,"distinct_size":54,"ref":"refs/heads/develop","head":"fdb54d36fbf31d67d66473b0400dac2a20312287","before":"2b273ba7cb986681c31da20b7dbcbe1df3e02ec0","commits":[{"sha":"9193ea8566552dd67ea75148f13b96a5afb74f1f","author":{"name":"kstohr","email":"53429af694ab4c585283d99bd4fe0fe8f61aa8f8@users.noreply.github.com"},"message":"added link to ssh instructions","distinct":true,"url":"https://api.github.com/repos/conorsch/securedrop/commits/9193ea8566552dd67ea75148f13b96a5afb74f1f"},{"sha":"e433cdcf00441bd138c7f6d559d3544f09a53b50","author":{"name":"heartsucker","email":"24344c7dfc8c5bcfa048e0bce2fa56822478d5c6@autistici.org"},"message":"better clean up of files in on removal/purge","distinct":true,"url":"https://api.github.com/repos/conorsch/securedrop/commits/e433cdcf00441bd138c7f6d559d3544f09a53b50"},{"sha":"9242974bcaf70a29259fcd27a202a43eab1de7ef","author":{"name":"Mickael E","email":"eb3c105ad8cd86bfd95733d7f85e279af00eb940@freedom.press"},"message":"Bump kernels to 4.4.135","distinct":true,"url":"https://api.github.com/repos/conorsch/securedrop/commits/9242974bcaf70a29259fcd27a202a43eab1de7ef"},{"sha":"ddecd9233cf43fba68d1dccda823173e44ea0656","author":{"name":"Mickael E","email":"eb3c105ad8cd86bfd95733d7f85e279af00eb940@freedom.press"},"message":"Add postinst to securedrop-grsec to preverve boot order\n\nFor SecureDrop instances running 3.14.79, the postinst hook will, for instances where kernels are rolled back, specify the canonical name rather than ordinal name for the default kernel to boot. In cases where instances are rolled back, an update to 4.4.135 will likely result in the instance not booting due to the position of the kernels changing in the grub configuration.","distinct":true,"url":"https://api.github.com/repos/conorsch/securedrop/commits/ddecd9233cf43fba68d1dccda823173e44ea0656"},{"sha":"cbf00fe19387de42a8d83c76f75d1853338425a7","author":{"name":"Mickael E","email":"eb3c105ad8cd86bfd95733d7f85e279af00eb940@freedom.press"},"message":"Add 4.4.115 and linux-firmware-image to dependencies\n\n- Adding the 4.4.115 kernel will prevent the 4.4.115 kernel image to be autoremoved from the servers. If there is a problem with 4.4.135 kernels, we would like to provide the ability to admins to roll back.\n- Add linux-firmware-image to the list of dependencies to expand hardware support.","distinct":true,"url":"https://api.github.com/repos/conorsch/securedrop/commits/cbf00fe19387de42a8d83c76f75d1853338425a7"},{"sha":"d19ac6aa1f186a9f1a4eed5e8ecb3e1d8e72ad7a","author":{"name":"Mickael E","email":"eb3c105ad8cd86bfd95733d7f85e279af00eb940@freedom.press"},"message":"Staging VMs should point to apt-test for kernel testing\n\nBecause 4.4.135 kernels are not live on apt.freedom.press, this introduces logic to use apt-test repos for staging VMs.\n\n* When (and only when) the environment is staging, the apt-test.key is added to the keyring\n* Staging group vars override the apt-test repo\n* Increase timeout for the grsec installation test\n* fix tests to check for a environment-specific variable for the apt repository URL","distinct":true,"url":"https://api.github.com/repos/conorsch/securedrop/commits/d19ac6aa1f186a9f1a4eed5e8ecb3e1d8e72ad7a"},{"sha":"350ca231a5839677dab35f0ff97ec9fb558e7be0","author":{"name":"Conor Schaefer","email":"92053a0ea29d3a95c7f6d0021e7464a2159ae789@freedom.press"},"message":"Reorgs conditional logic for apt-test key in staging\n\nLet's make sure that the apt-test key is installed *only* in staging,\nvia vars, rather than referencing hardcoded group_names. Given the\ncurrent backend layout, we need to make sure that *both* the prod and\napt-test keys are present in the apt keyring on staging, since the\ntor-apt repo doesn't have a long-lived staging machine.","distinct":true,"url":"https://api.github.com/repos/conorsch/securedrop/commits/350ca231a5839677dab35f0ff97ec9fb558e7be0"},{"sha":"eebfbf002f624154ef3847bd37e16243e702ec74","author":{"name":"Conor Schaefer","email":"92053a0ea29d3a95c7f6d0021e7464a2159ae789@freedom.press"},"message":"Tightens up apt-test key testinfra tests\n\nOnly the filepath for the repo changes; we can still use the same assert\nlogic, based on the testvars, to validate the file contents.","distinct":true,"url":"https://api.github.com/repos/conorsch/securedrop/commits/eebfbf002f624154ef3847bd37e16243e702ec74"},{"sha":"f69fa862df227edf7ec7b0ad3e254afc42ec1155","author":{"name":"redshiftzero","email":"ce2e028af11e2044175219057c86bc1f3d51e88d@freedom.press"},"message":"Merge pull request #3494 from freedomofpress/kernel-update-4.4.135\n\nUpdate kernels to 4.4.135","distinct":true,"url":"https://api.github.com/repos/conorsch/securedrop/commits/f69fa862df227edf7ec7b0ad3e254afc42ec1155"},{"sha":"fbb7926a24dcc40db1449bd2fb6ce4a4fc40ba67","author":{"name":"Mickael E","email":"eb3c105ad8cd86bfd95733d7f85e279af00eb940@freedom.press"},"message":"Update Docker builder image","distinct":true,"url":"https://api.github.com/repos/conorsch/securedrop/commits/fbb7926a24dcc40db1449bd2fb6ce4a4fc40ba67"},{"sha":"6720a3905a8f48c74fada42770cbe3ce2f8b2560","author":{"name":"redshiftzero","email":"ce2e028af11e2044175219057c86bc1f3d51e88d@freedom.press"},"message":"Break issue template into bug report and feature request\n\nGitHub has a nice feature that presents a question to users\nif there are multiple issue templates:\n\nhttps://help.github.com/articles/about-issue-and-pull-request-templates/\n\nThis will make it a bit nicer for contributors to use our template to\nsubmit bug reports and feature requests.","distinct":true,"url":"https://api.github.com/repos/conorsch/securedrop/commits/6720a3905a8f48c74fada42770cbe3ce2f8b2560"},{"sha":"88bcd969bc367f277744528536b78650a3b0f6ce","author":{"name":"redshiftzero","email":"ce2e028af11e2044175219057c86bc1f3d51e88d@freedom.press"},"message":"Update PR template to add checkbox for test plan\n\nIn the retro for 0.7.0, we discussed being more rigorous about\ntest plans. Part of this is team members writing test plans, ensuring\nthat reviewers carefully evaluate the test plan and whether it covers\nall important cases, and multiple people running through the test\nplan. Part of this is ideally the PR submitter writing a test plan\nand validating that their PR passes the test plan prior (just to\nreduce back and forth a bit).","distinct":true,"url":"https://api.github.com/repos/conorsch/securedrop/commits/88bcd969bc367f277744528536b78650a3b0f6ce"},{"sha":"e9b779e128b9721a77734568aca4cc0a91225d04","author":{"name":"redshiftzero","email":"ce2e028af11e2044175219057c86bc1f3d51e88d@freedom.press"},"message":"Merge pull request #3523 from freedomofpress/update-builder-20180613\n\nUpdate Docker builder image","distinct":true,"url":"https://api.github.com/repos/conorsch/securedrop/commits/e9b779e128b9721a77734568aca4cc0a91225d04"},{"sha":"cde9ad834e4ff3a38c9b5a8fd12944efc39acaef","author":{"name":"Loic Dachary","email":"b6eae37fc74638590e3f9030895d42446505d41b@dachary.org"},"message":"Merge pull request #3525 from freedomofpress/docs-pr-issue-templates\n\nUpdate issue / PR templates","distinct":true,"url":"https://api.github.com/repos/conorsch/securedrop/commits/cde9ad834e4ff3a38c9b5a8fd12944efc39acaef"},{"sha":"6604554828600b05ee2028c560f5b39fe135e675","author":{"name":"Mickael E","email":"eb3c105ad8cd86bfd95733d7f85e279af00eb940@freedom.press"},"message":"Update builder image","distinct":true,"url":"https://api.github.com/repos/conorsch/securedrop/commits/6604554828600b05ee2028c560f5b39fe135e675"},{"sha":"f641072b84203afad01a294aa49df0de100649e9","author":{"name":"redshiftzero","email":"ce2e028af11e2044175219057c86bc1f3d51e88d@freedom.press"},"message":"Merge pull request #3529 from freedomofpress/update-builder-20180614\n\nUpdate builder image","distinct":true,"url":"https://api.github.com/repos/conorsch/securedrop/commits/f641072b84203afad01a294aa49df0de100649e9"},{"sha":"b1564693960b6febcff0c0dd3e812995a410cd98","author":{"name":"redshiftzero","email":"ce2e028af11e2044175219057c86bc1f3d51e88d@freedom.press"},"message":"Molecule builder tests: Skip test_ensure_no_updates_avail in CI\n\nThis test checks for security updates in the build container.\nWhile this is good, security updates are needed several times a\nweek, and sometimes multiple time in the same day. It is critical\nto update when we are building test or production debian packages,\nand otherwise we should not block CI.","distinct":true,"url":"https://api.github.com/repos/conorsch/securedrop/commits/b1564693960b6febcff0c0dd3e812995a410cd98"},{"sha":"021b054712a4b40c6ab7169aebab82f49f42a2f6","author":{"name":"Michael Sheinberg","email":"ab83488be9f03d0154b09239987374f9a9a8427d@gmail.com"},"message":"Merge pull request #3531 from freedomofpress/stopgap-builder-test\n\nMolecule builder tests: Skip test_ensure_no_updates_avail in CI","distinct":true,"url":"https://api.github.com/repos/conorsch/securedrop/commits/021b054712a4b40c6ab7169aebab82f49f42a2f6"},{"sha":"aa098047ce44cc5d8193ccf1a64e1c8409a30344","author":{"name":"Kushal Das","email":"43bfbb322dc68f859cd7f240ffa89fc18432796d@freedom.press"},"message":"Fixes #3459 integration test for check_for_updates\n\nIt also updates the Dockerfile to include git command.","distinct":true,"url":"https://api.github.com/repos/conorsch/securedrop/commits/aa098047ce44cc5d8193ccf1a64e1c8409a30344"},{"sha":"4dba9ba113d01e3a23d776071e863a5aa48623f0","author":{"name":"Kushal Das","email":"43bfbb322dc68f859cd7f240ffa89fc18432796d@freedom.press"},"message":"Fixes #3460 `securedrop-admin update` integration test","distinct":true,"url":"https://api.github.com/repos/conorsch/securedrop/commits/4dba9ba113d01e3a23d776071e863a5aa48623f0"}]}
{"actor":{"display_login":"conorsch"}}