• a Debian Stretch (or newer) system
  • Tails' devel APT suite enabled
  • the right version of the tails-perl5lib package installed
  • a user that has sudo credentials

Install build and test dependencies

git checkout debian && \
sudo apt install devscripts && \
mk-build-deps -i -r --root-cmd sudo && \
sudo apt install \
   libdist-zilla-perl \
   libdist-zilla-plugin-changelogfromgit-perl \
   libdist-zilla-plugins-cjm-perl \
   libdist-zilla-plugin-installguide-perl \
   libdist-zilla-plugin-localemsgfmt-perl \
   libdist-zilla-plugin-test-perl-critic-perl \
   libdist-zilla-plugin-test-notabs-perl \
   libdist-zilla-plugin-git-perl \

Update POT and PO files

git checkout master && \
    ( cd po && make pot && make update-po ) && \
    git add po && \
    git commit -m 'Update POT and PO files.'

Make an upstream release

git checkout master

Enable new translations in po/PACKAGE and commit.

Export new upstream version number:


Export location of a checkout of the branch of the main Tails Git repository used to prepare the release (typically stable or testing):


Export source date epoch:

export SOURCE_DATE_EPOCH=$(date \
   --utc \
   --date="$(dpkg-parsechangelog \
                --file "$TAILS_GIT_CHECKOUT/debian/changelog" \
                --show-field=Date)" \

Update version number in bin/tails-create-iuk, commit all files that need to be.

perl -pi -E 's,^Version [0-9.]+,Version $ENV{VERSION},' bin/tails-create-iuk && \
   perl -pi -E \
      "s,^our \\\$VERSION = '[0-9.]+';\$,our \\\$VERSION = '$VERSION';," \
      bin/tails-create-iuk && \
   git commit bin/tails-create-iuk -m "tails-iuk $VERSION"

Run the upstream test suite:

# get an authentication token, needed by the test suite
sudo true
# run the tests in closer to real conditions
umask 077

# Run the test suite
NODE_PATH="/path/to/tails.git/submodules/mirror-pool-dispatcher/lib/js" \
PATH="/path/to/tails.git/submodules/mirror-pool-dispatcher/bin:$PATH" \
   LC_ALL=C \
   dzil test

Build an upstream tarball, tag the release, move the tarball out of the build repository and cleanup:

dzil build && \
   git tag -s $VERSION -m "tails-iuk $VERSION" && \
   mv Tails-IUK*.tar.gz .. && git clean -fdx

Update the Debian package

Checkout the branch with Debian package specifics and import the new upstream tarball, update debian/changelog:

git checkout debian && \
   gbp import-orig --upstream-vcs-tag=$VERSION \
      ../Tails-IUK-$VERSION.tar.gz && \
   gbp dch --auto && \
   dch -e

(Do not forget to set the appropriate release.)

Update the packaging (e.g. look at changes in dist.ini), and then update debian/changelog again if needed.

Commit debian/changelog:

git commit debian/changelog \
    -m "$(dpkg-parsechangelog -SSource) ($(dpkg-parsechangelog -SVersion))

Git-Dch: Ignore "

Build a Debian package (use a Stretch chroot with the right version of tails-perl5lib installed), add a signed tag to the repository and push the changes:

gbp buildpackage && \
gbp buildpackage --git-tag-only --git-sign-tags && \
git push --follow-tags origin \
                master:master \
                debian:debian \
                pristine-tar:pristine-tar \

Add the Debian package to Tails

Sign the package:



dupload --to tails $CHANGES_FILE