Wren Linux

Log

The latest commits, newest first.

e3a65ecb0be52026-11-11Signed: the commits below are reviewed
5e038f0f07542026-11-11docs: keys-and-encryption.md - do you still need full disk encryption?
ac7e86ff10702026-11-11HANDOFF.md: wallets (Feather, Electrum) persist on the safe VM's vault
c59d439c3dd92026-11-11vps-client.sh: --domain sends the current setup-vps.sh, not the stale copy
63bf23ef17092026-11-11setup-vps.sh: reload Tor, don't restart it, so a rerun keeps the onion up
e80072ac2b122026-11-11whonix.sh: install the whonix-noscript/-javascript/-full names
f83b0692e98e2026-11-11whonix: dispatch to a Workstation by the name it is run as
3831ab996e322026-11-11HANDOFF.md: park the AI security-watchdog idea with caveats
f9e29e9fa0a52026-11-11HANDOFF.md: Whonix two-Workstation (safe + unsafe) design
7469054e06fa2026-11-11HANDOFF.md: faster-tests findings - do build-deb before parallelism
dbf2dde24ded2026-11-11HANDOFF.md: the Whonix Tor Browser lock is done
8b5563c675122026-11-11Docs: describe the Workstation's locked Safest Tor Browser level
49963fa2f8972026-11-11test.sh --timings: time each test group, slowest first
b89c7bb82f022026-11-11claude-vm status: show the VM's CPUs, memory, disk and account
51f5b4cbce1c2026-11-11HANDOFF.md: the faster-tests plan, in phases (item 6)
f75789e25c0b2026-11-11Whonix Workstation: lock Tor Browser's Safest level too
b7664947b7252026-11-11Finish retiring sparrow-wallet: drop its launcher and key-sheet line
5296037c6e1a2026-11-11Retire the SimpleX Chat desktop extra
517f807c49e62026-11-11Retire sparrow-wallet and hardware-wallet
10481a6f1e162026-11-11HANDOFF.md: the Tor Browser levels are done, Whonix side still open
a5a35c64deb22026-11-11tor-browser-unsafe: a second Tor Browser at Safer, in its own user
d9dd8e63aae02026-11-11Tor Browser's AppArmor fixes move into the lib, broadened to two users
de01e771477b2026-11-11Tor Browser's install and profile machinery moves into lib/browser-sandbox.sh
84537493cc222026-11-11Tor Browser: the Safest level locked by the browser's own policy file
5e7e2ae885492026-11-11HANDOFF.md: a locked slider shown on the real Tor Browser 16.0.1
c8bb546e48732026-11-11Tor Browser 16.0.1 checked: what a locked security level can and can't rest on
55cf2e76375a2026-11-11HANDOFF.md: what was done on 2026-11-11, what is next, the rewrite
4326d3e027952026-11-11.gitignore: Python's compiled files
fc0256c76b922026-11-11Release tool: no GitHub CI check, no GitHub user name, no unknown options
d864664f55322026-11-11Docs: Wren Linux isn't on GitHub; no .github, no CI
dcb69d3ca87d2026-11-11CLAUDE.md: the owner wants no personal data about themselves recorded
51bcc1b0f8da2026-11-11Retire udiskie, seahorse, electrum, feather-wallet; get-iso loses Kali, Parrot, Arch
179e501338e82026-11-11apt over Tor: an extra in Install apps, asked as "Network privacy"
4c6f6f033f502026-11-11HANDOFF.md: the suite is done; ask whether the owner pulled
adb4e8a9ebcf2026-11-11HANDOFF.md: Tor Browser's level locked, a safest and an unsafe launcher
bd87df5efa642026-11-11HANDOFF.md: the owner's prompt sound, in the queue with the up-front questions
fe459cf5c6d42026-11-10HANDOFF.md: where things stand on 2026-11-11, what was decided, the queue
ada16da682562026-11-10Install apps: grouped by what they are for, how secure as three circles
0f28ba1ee7ec2026-11-10Retire mullvad-browser-regular: the sandboxed one is the same browser
02fdd83330a72026-11-10wren-signer in Python: the second security-critical command moved
f43a4aaa9b142026-11-10vps-client --backup: what else to back up, each with its command, and RESTORE.txt
e5ead7e83d482026-11-10vps-client --backup, and --reconnect --from the backup
afd722141a002026-11-10update.sh without a server: says so, and still offers what this copy changed
51a73fe0ebaa2026-11-10wren-learn: bash's manual opens in a window of its own, beside the list
29f275387c6c2026-11-10Site: a page of code is wider, so most lines show whole
a6e053e1dbda2026-11-10vps-client --reconnect: this computer again, for a server set up before
943dc1c4e2f72026-11-10CLAUDE.md: two setup-vps checks fail in claude-vm, not one, for the same reason
9a9ce4fa7c392026-11-10wren-key makes, renews and restores the key only at a quiet moment
750539e51a9a2026-11-10wren-watch in Python: the first security-critical command moved
cad50d28d8cb2026-11-10Whonix update: a nameserver line it can't put back is said, not lost
9d5c75962d7b2026-11-10Signing key: say when the primary key passes through your own programs
7e5bd5b0b6f22026-11-10Site: code coloured as vim colours it on a dark background
ebf032e514902026-11-10Site: code keeps its lines whole, numbered, each line a link; prose wraps
e13de6fd04492026-11-10Publishing to Wren Linux's own server: its first push, and --origin
f19e7cf3011a2026-11-10vps-client: the warning before Continue?, shorter and plainer
eb15d8a251782026-11-10vps-client: a gong each time it waits for you, if asked for at the start
462a54e5f2292026-11-10Site: the docs as pages, made safe by building them, and a Docs page
8d3aa493fade2026-11-10vps-client: a change left unconfirmed is waited out, counted down, then run again
c3660be33d292026-11-10vps-client: the SSH key's passphrase once, into an ssh-agent of the run's own
713280f5d3352026-11-10vps-client: says which secret each prompt wants, and not to walk away; logins get a minute