Code

Migrate to static config#3850

Code

Closed

heartsucker wants to merge 72 commits intodevelopfreedomofpress/securedrop:developfrom static-configfreedomofpress/securedrop:static-configCopy head branch name to clipboard

+1,111-773

Commits

Commits on Mar 20, 2019

• added migration helper tool

  heartsucker

  committed
  532f139

• added config migration to postinst

  heartsucker

  committed
  94b89e7

• added migration script / config to apparmor profile

  heartsucker

  committed
  513c543

• hardcode SECUREDROP_DATA_ROOT

  heartsucker

  committed
  c5aecd2

• hardcode SECUREDROP_ROOT

  heartsucker

  committed
  e07d459

• hardcode DATABASE_FILE via property

  heartsucker

  committed
  d9fb148

• alter tests to not force-override database file path

  heartsucker

  committed
  915ff17

• remove DATABASE_ENGINE config option

  heartsucker

  committed
  9be57fb

• load json config file

  heartsucker

  committed
  6fd66b3

• set dev config to generate json

  heartsucker

  committed
  c1b1de2

• create flask configs from json config

  heartsucker

  committed
  627cf78

• hardcode ADJECTIVES via property

  heartsucker

  committed
  a58ce03

• hardcode NOUNS via property

  heartsucker

  committed
  546dd2f

• hardcode GPG_KEY_DIR via property

  heartsucker

  committed
  4cb16a7

• alter tests to not force-override gpg key dir path

  heartsucker

  committed
  eca66a1

• hardcode {JOURNALIST,SOURCE}_TEMPLATES_DIR via property

  heartsucker

  committed
  ebcf579

• hardcode SESSION_EXPIRATION_MINUTES

  heartsucker

  committed
  85d41e8

• remove getattr on session expiration as it is no longer needed

  heartsucker

  committed
  523798b

• hardcode TEMP_DIR via property

  heartsucker

  committed
  c91815c

• alter tests to not force-override temp dir path

  heartsucker

  committed
  30933c6

• hardcode STORE_DIR via property

  heartsucker

  committed
  21a09cf

• alter tests to not force-override store dir path

  heartsucker

  committed
  434501c

• hardcode TRANSLATION_DIRS

  heartsucker

  committed
  3b73348

• hardcode WORD_LIST via property

  heartsucker

  committed
  8e3ee7d

• hardcode WORKER_PIDFILE

  heartsucker

  committed
  7bb07ef

• read DEFAULT_LOCALE from json config with default

  heartsucker

  committed
  0b918fe

• read SUPPORTED_LOCALES from json config with default

  heartsucker

  committed
  ace15ee

• read JOURNALIST_KEY from json config

  heartsucker

  committed
  c93f5e5

• read SCRYPT_ID_PEPPER from json config

  heartsucker

  committed
  aa0bea3

• read SCRYPT_PARAMS from json config

  heartsucker

  committed
  7857d73

• set env in sdconfig

  heartsucker

  committed
  8b55349

• read CUSTOM_HEADER_IMAGE from json config

  heartsucker

  committed
  3ad67cf

• remove "import config" from sdconfig.py

  heartsucker

  committed
  fa1c8c1

• update tests to not assign DATABASE_FILE

  heartsucker

  committed
  7cd16b7

• update crypto_utils to handle the case of unicode strings

  heartsucker

  committed
  535b5c6

• don't allow i18n test to generate it's own config

  heartsucker

  committed
  5974847

• avoid importing {source,journalist}.py during tests

  heartsucker

  committed
  3a5faa0

• sudo mkdir/rmdir during tests

  heartsucker

  committed
  56426d1

• removed example config.py

  heartsucker

  committed
  c639162

• removed deprecated DEFAULT_LOCALE test

  heartsucker

  committed
  c452434

• updated test to check fingerprint in config.json

  heartsucker

  committed
  0e67ef5

• configure config.json via ansible

  heartsucker

  committed
  918eb58

• update translation task to not use config.py

  heartsucker

  committed
  784c3b9

• added config.json to backup script

  heartsucker

  committed
  ff8cb8c

• update packaging config check to include json config

  heartsucker

  committed
  151bcd0

• removed {has,get}attr calls on config to clean up code

  heartsucker

  committed
  2a513b0

• remove broken test because attribute is always defined

  heartsucker

  committed
  99e7a74

• added config migration to restore script

  heartsucker

  committed
  5b02a9b

• fix file lock

  heartsucker

  committed
  1b17475

• added test for file locking

  heartsucker

  committed
  b87068c

• remove global config variable, force injection everywhere

  heartsucker

  committed
  da9f287

• split SDConfig into {Source,Jouralist}InterfaceConfig

  heartsucker

  committed
  4df763d

• update code to work with split configs

  heartsucker

  committed
  080e76a

• update tests to work with split configs

  heartsucker

  committed
  86df87e

• rename migrate_config.py to populate_config.py

  heartsucker

  committed
  0a8eff2

• added secret generation logic to populate_config

  heartsucker

  committed
  857b051

• update apparmor rules for the app configs

  heartsucker

  committed
  b9bc26e

• full tests of simple case config migration / generation

  heartsucker

  committed
  11d505a

• test idempotence of secret generation

  heartsucker

  committed
  62fa9b6

• test config population with missing config.py

  heartsucker

  committed
  086374c

• update read/write permis for /etc/securedrop

  heartsucker

  committed
  f2772af

• update backup script to use new files, avoid errors

  Show description for 58fe9ce
  heartsucker

  committed
  58fe9ce

• updated tests for configs in deb packages

  heartsucker

  committed
  3eee206

• added tests for config defaults

  heartsucker

  committed
  4c4bdfa

• update testinfra tests for multiple configs

  heartsucker

  committed
  0e2a366

• added additional type annotations to config class

  heartsucker

  committed
  d0e22ea

• add defaults to configs to appeas mypy

  heartsucker

  committed
  f79c976

• ensure configs have correct permissions in ansible

  heartsucker

  committed
  8e232ee

• use comma separated list for support locale option

  heartsucker

  committed
  d775cc6

• ensure journalist key fingerprint is written to configs

  heartsucker

  committed
  8d02a0d

• ensure supported locales is a list

  heartsucker

  committed
  56dacb9

• ensure old config values are read with correct priority

  heartsucker

  committed
  0ee5747