• 2.0-18 46618bd0e4

    amnesia released this 2026-07-11 17:53:48 +02:00 | 20 commits to main since this release

    lainos-utils ~ Changelog (2.0-10 through 2.0-18)

    New Tools

    • snowflake (renamed from lainos-snowflake) ~ toggle to enable/disable the Snowflake pluggable transport bridge, disguising Tor traffic. Writes a working bridge configuration on first use, toggles it on subsequent runs.
    • obfs4 (renamed from lainos-obfs4) ~ same pattern, for the obfs4 pluggable transport.
    • wifi-toggle ~ full on/off control of WiFi: stops/starts iwd and blocks/unblocks the radio at the hardware level via rfkill, so "off" means the radio is actually inactive, not just disconnected.
    • wifi-autostart (renamed from lainos-wifi-autostart) ~ controls whether iwd starts automatically at boot.
    • lainos-sdwdate (renamed from lainos-sdwdate-toggle) ~ toggle between chrony (default) and sdwdate (Tor-based time sync).
    • lainos-privacy-help ~ opens a new, dedicated privacy guide for sensitive work sessions, installed to /usr/share/lainos/lainos-privacy-guide.md.

    Behavior Changes

    • lainos-secure-messaging (LESME) no longer writes obfs4 bridge configuration. Previously appended bridge lines to /etc/tor/torrc unconditionally on every run, with no duplicate-check, and no coordination with the new obfs4/snowflake toggles. Bridge configuration is now handled exclusively by obfs4/snowflake, avoiding two independent mechanisms managing overlapping torrc state. LESME still disables Tor from starting at boot and stops it, as before.

    Bug Fixes

    • snowflake: fixed hardcoded binary path (/usr/bin/snowflake-client, which doesn't exist) to the correct /usr/bin/snowflake-pt-client, found via a live crash loop visible in nyx (Tor repeatedly failing to launch the managed proxy).
    • snowflake/obfs4: fixed a sed logic bug in both scripts' enable/disable toggling that stripped the # from the block's START/END marker lines themselves, not just the configuration lines between them. This corrupted torrc into an invalid state (Unknown option '---') and prevented Tor from starting at all. Fixed and verified through full enable/disable/enable cycles on both scripts.
    • lainos-sdwdate: removed set -e, which caused the script to exit early whenever rc-service status returned a non-zero exit code for a stopped service (normal, expected behavior).
    • kloak: fixed the wrapper script self-referencing itself via a bare doas kloak PATH lookup instead of calling /usr/bin/kloak directly.

    Documentation

    • User guide updated: new "Pluggable Transports ~ Bridges," "Time Sync ~ sdwdate," and "Privacy Guide for Sensitive Work" sections; WiFi section updated with wifi-toggle/wifi-autostart; stale note about LESME auto-configuring obfs4 removed.
    • New dedicated Privacy Guide for Sensitive Work, with a visual diagram and a specific command sequence (start Tor/bridge → sdwdate → WiFi radio on → connect) ordered so time sync and Tor are both already running before the network interface ever comes up.
    • Integrated the main user guide into the package (previously referenced by lainos-help but the file didn't exist).
    • Documented lainos-hardened-malloc, lainos-help, and lainos-sdwdate in the README's utility table.
    Downloads