Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix remaining issues for 0.6.1 #786

Merged
merged 6 commits into from
May 9, 2024
Merged

Fix remaining issues for 0.6.1 #786

merged 6 commits into from
May 9, 2024

Conversation

apyrgio
Copy link
Contributor

@apyrgio apyrgio commented Apr 23, 2024

Fix various issues that remain for 0.6.1:

  • Add a script for hashing and signing our release assets
  • Add end-user instructions about verifying these signatures
  • Add a release note for installing the latest Python from Python.org on macOS
  • Add some information in our docs about extra packages that will be installed in some user systems from our Linux repos (python3-pyside6 / conmon)

Refs #471
Fixes #767
Closes #761

Note

In order to visualize the changes for the verification instructions, reviewers can take into account the following:

  1. I have updated our v0.6.0 release page with signatures and checksums.
  2. I have sent a PR for our website (Bump download links and verification instructions for v0.6.1 dangerzone.rocks#37), that shows how we can point to our verification instructions.

INSTALL.md Show resolved Hide resolved
INSTALL.md Outdated Show resolved Hide resolved
INSTALL.md Outdated Show resolved Hide resolved
dev_scripts/sign-assets.py Show resolved Hide resolved
dev_scripts/sign-assets.py Show resolved Hide resolved
Add a new script called `sign-assets.py`, which produces the hash of all
the Dangerzone assets for a release (Windows/macOS installers, container
image), and signs them individually.

Also update our RELEASE.md document, to incorporate this script into our
release workflow.
Add a section for our end-users in INSTALL.md, that explains how to
verify that our Dangerzone assets have been signed by our advertised
signing key.

This section explains what are the .asc files that users see next to our
release assets, and how they can verify each asset individually using
GPG. It is heavily inspired by a similar section for OnionShare.

Closes #761
Make our collapsible blocks in our instructions more noticeable, by
enclosing them in an HTML table (<table>).
Inform users that for specific distros and versions, we install some
extra packages (PySide6, conmon), in order to fix some incompatibilities
between Dangerzone and the base system. Provide also a link to the
source / build instructions for the package, as well as any relevant
issues.

Fixes #767
Add a note in our release instructions to install Python from
python.org. This should fix some incompatibilities with older macOS
versions.

Refs #471
@apyrgio apyrgio merged commit 88a2d15 into main May 9, 2024
8 of 19 checks passed
@apyrgio apyrgio deleted the 2024-04-leftovers branch May 9, 2024 14:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Point to our build instructions for our PySide6 and conmon packages Sign releases on github
2 participants