commit ad1b4203977ce22edef8b028ce05528bf7f5ace9
Author: Frederico Gomes <fredericojfgomes@gmail.com>
Date: Thu Apr 30 19:10:16 2026 +0100
wireguard: Enable FB to connect to a server using IPv6
This MR enables FreedomBox to connect as a "client" to a WireGuard
"server" using IPv6.
- Validate IPv4/6 with ip_interface
- Created helper functions to build NM settings for IPv4/6
- Modify get_settings to include settings for either IP version 4 or 6
- Created helper function to get NM address info
- Modify get_nm_info to work with IPv4 and IPv6
- Modified tests to use validate_ip_address_with_network
- Added IPv6 valid and invalid patterns to tests
Tested:
- IPv4 works unchanged
- IPv6 parsing + NM settings generation works
- IPv6 display in Show Server UI
Not tested:
- Needs IPv6 WireGuard server for full connectivity test
Closes: #1762
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
commit 9fd7a3b3afccaceb8fc06daa99632e0a725cb817
Author: James Valleroy <jvalleroy@mailbox.org>
Date: Sat May 23 08:56:32 2026 -0400
debian/control: Add !nocheck for python3-segno
Tests:
- Succesfully build with nocheck profile:
gbp buildpackage --git-pbuilder --git-pbuilder-options="--profiles nocheck"
Signed-off-by: James Valleroy <jvalleroy@mailbox.org>
commit ea48448a72fd4828fda4717376fc6e86999f62dd
Author: Frederico Gomes <fredericojfgomes@gmail.com>
Date: Tue Apr 21 19:50:28 2026 +0100
wireguard: Added functional test for auto add client flow
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
commit 050a5366c19c726487602251c8e6c3afa7b23685
Author: Frederico Gomes <fredericojfgomes@gmail.com>
Date: Mon Apr 20 17:40:18 2026 +0100
wireguard: Bump version
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
commit bc34a50a24e7c852a90edaec0bdf6ed40985b6ac
Author: Frederico Gomes <fredericojfgomes@gmail.com>
Date: Sun Apr 19 20:10:12 2026 +0100
wireguard: Include python3-segno in app packages
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
commit ff2ac949cf379ad453ac6bea5952a81ba4e1524e
Author: Frederico Gomes <fredericojfgomes@gmail.com>
Date: Wed Mar 25 19:57:58 2026 +0000
mypy: Added override for segno
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
commit 941a597bc9cb7ae4d8eabb49b21cdc12af84eca3
Author: Frederico Gomes <fredericojfgomes@gmail.com>
Date: Wed Mar 25 15:56:41 2026 +0000
wireguard: Add security warning in template
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
commit 5f25fc56a556a251da828ac138d1ee3364d320d0
Author: Frederico Gomes <fredericojfgomes@gmail.com>
Date: Mon May 18 01:42:30 2026 +0100
wireguard: Create URL for client config QR action
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
commit fa4e6002b32098a3b69f482524b3816978b5b3dc
Author: Frederico Gomes <fredericojfgomes@gmail.com>
Date: Tue Mar 24 11:04:49 2026 +0000
wireguard: Add Show QR Code button
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
commit f9984ea9e4ea34757c7673ed4ff111f7d7a58b00
Author: Frederico Gomes <fredericojfgomes@gmail.com>
Date: Tue Mar 24 11:03:00 2026 +0000
themes-icons: Add QR Code icon
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
commit 18d6f2d5db2309c28a02ce7107271a642cbd68dc
Author: Frederico Gomes <fredericojfgomes@gmail.com>
Date: Tue Mar 24 11:01:42 2026 +0000
wireguard: Add action for QR code generation
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
commit 68e28cdebcc603c0fc07953b53954e612cc8aea4
Author: Frederico Gomes <fredericojfgomes@gmail.com>
Date: Tue Mar 24 10:59:18 2026 +0000
build-dependencies: Add python3-segno
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
commit 79c978e03a6a87324b2faa756f7e22949cdea7ee
Author: Frederico Gomes <fredericojfgomes@gmail.com>
Date: Sun Mar 22 19:23:22 2026 +0000
wireguard: Add client config file section and download button
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
commit ce2ce04979b6dfd97f870493e40531b80e69595e
Author: Frederico Gomes <fredericojfgomes@gmail.com>
Date: Sun Mar 22 18:50:53 2026 +0000
wireguard: Create URL for client config download action
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
commit 8e9b2a0631a47736c10ad4f19999415f842951a9
Author: Frederico Gomes <fredericojfgomes@gmail.com>
Date: Sun Mar 22 18:14:46 2026 +0000
wireguard: Create view to handle client config actions
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
commit 60a6ac2a0d5a6d4fca707f92eab2828fa0789245
Author: Frederico Gomes <fredericojfgomes@gmail.com>
Date: Sun Mar 22 17:48:40 2026 +0000
wireguard: Create mixin for reusing generated client conf
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
commit bb6729a99a1dba583794f03e3bbba152dbf45c5f
Author: Frederico Gomes <fredericojfgomes@gmail.com>
Date: Sun Mar 22 13:03:14 2026 +0000
wireguard: Create function for building conf files
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
commit 81e60dff0e132858cef2a5c43b13acd47ae7c401
Author: Frederico Gomes <fredericojfgomes@gmail.com>
Date: Sat Mar 21 15:03:55 2026 +0000
wireguard: Add template to show generated client info
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
commit 8cbcd39bb276a5420a0276921a5f54b631335e00
Author: Frederico Gomes <fredericojfgomes@gmail.com>
Date: Sat Mar 21 13:09:59 2026 +0000
wireguard: Add empty form for AutoAddClientView
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
commit 77a91fc35716aeb0d60c5a5cfae3965b916fa0c9
Author: Frederico Gomes <fredericojfgomes@gmail.com>
Date: Sat Mar 21 12:45:09 2026 +0000
wireguard/theme: Add icon to auto add client button
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
commit ebac5e86a30689d4fd1f966ff1738a1bc9b7d5d5
Author: Frederico Gomes <fredericojfgomes@gmail.com>
Date: Sat Mar 21 12:42:59 2026 +0000
wireguard: Add auto add client button
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
commit 0a67183fe4c2a247ca206ce6be9ab44d83fd8a64
Author: Frederico Gomes <fredericojfgomes@gmail.com>
Date: Sat Mar 21 12:12:40 2026 +0000
wireguard: Add URL for AutoAddClientView
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
commit 36e1dd9e7419dfbad83c2280c0f628a4d288ff69
Author: Frederico Gomes <fredericojfgomes@gmail.com>
Date: Sat Mar 21 12:03:22 2026 +0000
wireguard: Create AutoAddClientView
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
commit 5fe11cedb6be546df778169be99c8809b9d8b818
Author: Frederico Gomes <fredericojfgomes@gmail.com>
Date: Fri Mar 13 11:47:21 2026 +0000
wireguard: add wrapper function that generates client key pair
Signed-off-by: Frederico Gomes <fredericojfgomes@gmail.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
commit 3d96f41053568fb78b0113980530940360d1ee25
Author: jay <jj8z@proton.me>
Date: Wed May 20 22:25:53 2026 +0200
Translated using Weblate (Dutch)
Currently translated at 93.9% (1813 of 1929 strings)
commit 511de5e106ff10720b4ce8c4deefea05f98cebd4
Author: Hosted Weblate user 151773 <paul.schell87@gmail.com>
Date: Wed May 20 20:05:27 2026 +0200
Translated using Weblate (German)
Currently translated at 99.3% (1916 of 1929 strings)
commit 9abe624265d1ede86c2bd38be544405ee9be0d5b
Author: Luca Boccassi <luca.boccassi@gmail.com>
Date: Thu May 7 22:24:42 2026 +0100
Install and use sysusers.d/tmpfiles.d config files
sysusers.d/tmpfiles.d config files allow a package to use
declarative configuration instead of manually written maintainer
scripts. This also allows image-based systems to be created
with /usr/ only, and also allows for factory resetting a system
and recreating /etc/ on boot.
https://www.freedesktop.org/software/systemd/man/latest/sysusers.d.html
https://www.freedesktop.org/software/systemd/man/latest/tmpfiles.d.html
Tests:
- /var/lib/plinth and /var/lib/plinth/sessions/ are created on package install.
Ownership is plinth:plinth. 0755 is permissions.
- /var/lib/plinth/firstboot-wizard-secret file is created on package install.
Ownership is plinth:plinth. 0400 is permissions. During first wizard,
providing the secret works.
- /var/lib/plinth/backups-data is owned by root:root.
- When upgrading from old package to new the permissions don't change.
- When reinstalling the new package, the permissions do not change.
- User is created same as before.
plinth:x:987:987:FreedomBox service:/var/lib/plinth:/usr/sbin/nologin
- Group is created same as before.
plinth:x:987:
- id plinth
uid=987(plinth) gid=987(plinth) groups=987(plinth)
- Upgrading from old package to new does not change user and group records.
- Reinstalling new version does not change user and group records.
[sunil: Don't recursively change ownership for /var/lib/plinth/]
[sunil: Change ownership specifically for /var/lib/plinth/firstboot-wizard-secret]
Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
Reviewed-by: Sunil Mohan Adapa <sunil@medhas.org>
Tested-by: Sunil Mohan Adapa <sunil@medhas.org>
commit a4b3d53141c934ab847f07c4fd6d5b4082d92690
Author: Luca Boccassi <luca.boccassi@gmail.com>
Date: Thu May 7 22:23:40 2026 +0100
Stop deleting system user on remove/purge
This is widely considered bad practice, as the kernel recycles
UIDs/GIDs. So any potential leftover file/directory can then
become owned by the next user/group that gets added, with
unpredictable consequences.
commit 529bbf77df9194d73ce888972db44a0377eeafc8
Author: Sunil Mohan Adapa <sunil@medhas.org>
Date: Wed May 13 13:36:25 2026 -0700
bepasty: Don't remove old system user and group
As removing a system user and group is considered a bad practice. Old unused
system accounts are mostly harmless.
Tests:
- Bepasty functional tests pass.
- Installing bepasty and uploading a file works.
Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
commit e48ff1afbc3183bfda142e84113868baac9562bf
Author: Sunil Mohan Adapa <sunil@medhas.org>
Date: Wed May 13 13:44:32 2026 -0700
infinoted: Use systemd-sysusers for creating a system user account
- Drop dependency on 'adduser' package.
Tests:
- Functional tests for infinoted work.
- Installing infinoted app works. The system user and group are created with
proper UID/GID, shell, gecos, and home directory.
Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
commit f4be9039d276468caef06c78ddfdbeace6cbaaa7
Author: Sunil Mohan Adapa <sunil@medhas.org>
Date: Wed May 13 13:38:59 2026 -0700
syncthing: Use systemd-sysusers for creating a system user account
- Drop dependency on 'adduser' package.
Tests:
- Functional tests for syncthing work.
- Installing syncthing app works. The system user and group are created with
proper UID/GID, shell, gecos, and home directory.
Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org>
There is 1 open security issue in bookworm.
You can find information about how to handle this issue in the security team's documentation.
Automatic checks made by the Debian l10n team found some issues with the translations contained in this package. You should check the l10n status report for more information.
Issues can be things such as missing translations, problematic translated strings, outdated PO files, unknown languages, etc.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/f/freedombox.png){kind=link}