entrusted-0.3.2

This release adds musl-libc support for Linux, on top of few overall fixes/improvements.

Overall changes

• Linux
  • Provide binaries for musl-libc systems (Alpine Linux and others)
  • Drop Linux AppImage format for the Desktop graphical user interface binary (GUI)
  • Make libraries dependencies more explicit (packaging improvements)
• Windows
  • Launch properly the default PDF application instead displaying command prompt
• Live CD
  • Update gVisor to a recent point-release (20231218.0)
  • Update Podman to 4.8.2
  • Update the Linux kernel to 6.6.11
  • Update hardened_malloc to a recent tag (2024010400)

General notes

• The installers or binaries are not signed for Mac OS or Windows, please ignore any warnings
  • On Windows, when you get a warning, please click the button Run anyway
  • On Mac OS, there are 2 "simple" options:
    • You can right-click to open the program from Finder (do it twice)
    • Alternatively, open Terminal and type xattr -r -d com.apple.quarantine /Applications/Entrusted.app
• For the Live CD ISO image, you need at least 1 GB of RAM
  • More memory might be required for "huge" documents (e.g., PDF ebooks)
  • You may need to map or forward port 13000 (Web Interface), based on your virtualization sofware settings

entrusted-0.3.1

The main objective is to start generating all releases artifacts from the GitHub infrastructure going forward.

Overall changes

• Security
  • Implement gVisor as container security platform on the Live CD
• Enhancements
  • Web User Interface: Add tabs to mimic more closely the Desktop interface appearance
  • Desktop User Interface: Add hyperlinks for opening directly PDF results
• Maintenance
  • Update from Debian Bullseye to Debian Bookworm (Live CD and sandbox container image)
  • On Mac OS, only support Docker Desktop as container solution to avoid Apple sandbox issues
  • Trim the Live CD image size by roughly 12% (~800 MB to ~700 MB)
    • Boot manager: Use only Grub as boot manager for both UEFI and BIOS (removal of SysLinux)
    • SSH server: Replace OpenSSH with DropBear
    • Container solution: Replace the default Debian Podman version with podman-static
    • Linux kernel: Compile custom kernel (6.1.42) for removing non-essential modules
  • Address potential conversion crashes with the Live CD (disable Hardened malloc CPU optimizations)
  • Build and releases via GitHub Actions
    • Integrate local shell scripts with GitHub Actions workflows
    • Generate all release artifacts from GitHub (on-demand), instead of from a local virtual machine
    • Publish the "container sandbox" image to Docker Hub (on-demand)
    • Scan for container vulnerabilities in the sandbox container image (on-demand)
    • Run minimal functional test (on-demand)
  • Prepare basic technical underpinnings for allowing other "sandboxing" mechanisms in the future

General notes

• The installers or binaries are not signed for Mac OS or Windows, please ignore any warnings
• On Linux, the graphical interface is an AppImage artifact: it requires Fuse to run
• For the Live CD ISO image, you need at least 1 GB of RAM

entrusted-0.3.0

This release is focused primarily on security concerns, while making reasonable compromises pertaining to usability, user convenience and performance. There is now a Live CD for arm64 along few user-visible features.

Overall changes

• Security
  • Implement custom seccomp security profile for "sandbox container execution"
    • This restricts what the application can do inside the container solution
    • This is enabled in the desktop, command-line and Web interfaces
  • Implement minimal security hardening options for the Live CD (kernel settings, hardened_malloc, SSH, etc.)
• Bug fixes
  • Address more scenarios that could result into known intermittent conversion failures
• Features
  • Experimental Live CD availability for aarch64/arm64
  • Option to cancel conversions that are not yet started
  • Ability to select the PDF result visual quality (low, medium, high)
    • The default value is set to medium (same behavior as in 0.2.6)
    • This can act as a "quick preview" mechanism with "low" settings, followed by a re-conversion
    • Higher visual quality settings impact memory usage, processing time and resulting file size
• Enhancements
  • Allow multiple language selection when creating searchable PDF results (OCR)
  • Set file upload limit to 500 MB for the Web interface (previously relying on unknown defaults…)
  • Improve few visual aspects of the Desktop and Web interfaces
• Maintenance
  • Upgrade software dependencies and cleanup code

General notes

• The installers or binaries are not signed for Mac OS or Windows, please ignore any warnings
• On Linux, the graphical interface is an AppImage artifact: it requires Fuse to run
• On Linux, if you prefer Flatpak, please check out the axtloss flatpaks project page (might not be the latest version)
• For the Live CD ISO image, you need at least 1 GB of RAM

entrusted-0.2.6

Overall changes

• bugfix: Intermittent failures in batch conversions due to container process crashes
• bugfix: Permission denied errors at the end of conversions, under Linux with Docker
• enhancement: More predictable PDF quality and PDF result size
• enhancement: Display overall progress information and final status summary
• enhancement: Add "clickable" hyperlinks in few dialogs (project and release URLs)
• maintenance: Look and feel consistency improvements (Desktop and "Online Service" interfaces)
• maintenance: Web framework change from actix_web to axum for the "Online Service"

General notes

• The installers or binaries are not signed for Mac OS or Windows, please ignore any warnings
• On Linux, the graphical interface is an AppImage artifact: it requires Fuse to run
• On Linux, if you prefer Flatpak, please check out the axtloss flatpaks project page
• For the Live CD ISO image, you need at least 1 GB of RAM

entrusted-0.2.5

This release introduces "highly experimental aarch64/arm64 builds" (Mac OS and Linux binaries, container image).

Overall changes

• aarch64/arm64 support for Linux and Mac OS binaries, as well as the container image
• Small bug fixes for temporary folders handling and other minor improvements
• New button in the Desktop client to manually check for updates

General notes

• The installers or binaries are not signed for Mac OS or Windows, please ignore any warnings
• Linux specifics
  • The GUI is an AppImage artifact, it requires Fuse to run
  • If you prefer Flatpak, please check out the axtloss flatpaks project page
• For the Live CD image, you need at least 1 GB of RAM (sandbox creation, temporary storage, etc.)

entrusted-0.2.4

This is a maintenance release addressing mostly Microsoft Windows specific issues.

Overall changes

• Hide Microsoft Windows command prompts displayed upon conversion (Issue 7)
• Mitigate false positives while changing file modification dates on Windows (Issue 7)
• Remove UNIX/Linux specific code in the "online service" (entrusted-webserver component)
• Improve user interface "responsiveness" with better decoupling of background tasks

General notes

• The installers or binaries are not signed for Mac OS or Windows, please ignore any warnings
• The Linux GUI is an AppImage artifact: it requires Fuse to run
• A Flatpak package is available from axtloss flatpaks
• For the Live CD ISO image, you need at least 1 GB of RAM (Virtual Machine):
  • The allocated RAM for the underlying virtual machine translates into ~75% free disk space
  • The 75% free disk space allows "sandboxed conversions" (~700 MB)

entrusted-0.2.3

This release features new software packages for Debian-like and Redhat-like Linux distributions.

Main changes

• Provide DEB and RPM packages for convenience (tested on recent Ubuntu and Fedora versions so far)
• Mitigate inability to run the program on Fedora (SELinux related problems with container volumes)
• Address erroneous progress information in early conversions stages
• Fix occasional file deletion bug (select and delete from the conversion queue)

General notes

• The installers or binaries are not signed for Mac OS or Windows, please ignore any warnings
• The Linux GUI is an AppImage artifact: it requires Fuse to run
• For the Live CD ISO image, you need at least 1 GB of RAM:
  • The allocated RAM for the underlying virtual machine translates into ~75% free disk space
  • The 75% free disk space allows "sandboxed conversions"): ~700 MB

entrusted-0.2.1

This is a maintenance release:

• Mitigate conversion failures for Office documents (errors while exiting container with an exit code 139)
• Allow custom output files in the Desktop GUI client
• Enable conversions of ODG and RTF documents

General notes

• The installers or binaries are not signed for Mac OS or Windows, please ignore any warnings
• The Linux GUI is an AppImage artifact: it requires Fuse to run
• For the Live CD ISO image, you need at least 1 GB of RAM:
  • The allocated RAM for the underlying virtual machine translates into ~75% free disk space
  • The 75% free disk space allows for the "conversion sandbox creation": ~700 MB

entrusted-0.2.0

"Entrusted" is now able to convert password-protected documents:

• This applies to PDF files and supported Office document formats
• Please not that the resulting PDF documents themselves are not password-protected

Other changes

• Fix long messages truncation bug (Desktop client) resulting into longer conversion times
• Remove read-only container flag for Podman as it occasionally fails conversions
• Add few missing translations and improve code maintenance

General notes

• The installers or binaries are not signed for Mac OS or Windows, please ignore any warnings
• The Linux GUI is an AppImage artifact: it requires Fuse to run
• For the Live CD ISO image, you need at least 1 GB of RAM:
  • The allocated RAM for the underlying virtual machine translates into ~75% free disk space
  • The 75% free disk space allows "conversion sanboxed creation"): ~700 MB

entrusted-0.1.3

This release stabilizes recent changes (preferences and translations), the project is renamed from dangerzone-rust to entrusted

• New application icons and screenshots
• Refactoring of all code references to the previous "Dangerzone" name.

General notes

• Minor visual improvements
• Translation fixes and easier maintenance for the underlying abstractions

General notes

• The installers or binaries are not signed for Mac OS or Windows, just ignore them and trust the application
• The Linux GUI is an AppImage artifact: it requires fuse installed to run
• For the Live CD ISO image, you need at least 1 GB of RAM for a smooth experience: the allocated RAM translates into ~75% equivalent free disk space; enough disk space is required between conversions (temporary container creation)