securedrop icon indicating copy to clipboard operation
securedrop copied to clipboard

Published 20 hours ago • verified publisher icon freedomofpress

Support grsec kernel previews for instances on non-HCL hardware.

Open eloquence opened this issue 1 year ago • 2 comments

In order to facilitate pre-release testing for new kernels, it would be helpful to have a preview component on apt.freedom.press, and an associated release/testing procedure which admins can follow to verify basic kernel functionality on their hardware before said kernel is included with a release.

eloquence avatar Aug 01 '22 16:08 eloquence

This preview component now exists. (https://github.com/freedomofpress/securedrop-debian-packages-lfs/pull/96) We are testing a manual verification procedure as part of the upcoming SecureDrop 2.4.2 release. The documentation is currently on the wiki; if we decide to canonicalize it for future releases, we may want to move it into the official documentation.

https://github.com/freedomofpress/securedrop/wiki/Previewing-new-SecureDrop-kernel

eloquence avatar Aug 02 '22 22:08 eloquence

Said manual procedure could probably be made into an Ansible playbook (and then added as a securedrop-admin command).

zenmonkeykstop avatar Aug 03 '22 14:08 zenmonkeykstop