Getting your own UPR CD

Ubuntu Privacy Remix is a free project. Anyone finding it useful can use UPR free of charge and is encouraged to send suggestions, bug reports and criticism to us.

The image of the CD can be downloaded here. The UPR developers can neither guarantee that the download servers never get compromised, nor can we guarantee that downloads are not being redirected to other servers by DNS spoofing or similar. The authenticity of the image can be verified using our GPG-Signature.

For additional control, people wanting to build their own CD from scratch can find the Tutorials for this here.


UPR-Downloads

UPR 12.04r1 beta 1

ATTENTION: Not ready for production use! Use version 10.04r3 instead.

Changelog für UPR 12.04r1 beta1

Hybrid-ISO for DVD or USB-Stick (de, en, es, it, fr)

upr-12.04r1beta1.iso

Mirror 1

Mirror 2

Mirror 3

Mirror 4

upr-12.04r1beta1.iso.sig

Mirror 1

Mirror 2

Mirror 3

Mirror 4




Sources and Copyright

Sources for own packages in UPR 12.04r1 beta1

Sources for VirtualBox

Sources for Scribus

Sources for LibreOffice 4

all other sources can be downloaded from the Ubuntu archives.

Support-Files-Archive with Signature (contains text files and artwork which are used in UPR).

All own packages and scripts are licensed under the GPLv2. All own artwork is licensed under the CC-BY-SA license. Robot-Pangolin-Artwork is based on a picture of an anonymous uploader on openwalls.com

UPR 10.04r3

Changelog for UPR 10.04r3

Hybrid-ISO for DVD or USB-Stick (de, en, es, it, fr)

upr-10.04r3.iso

Mirror 1

Mirror 2

Mirror 3

Mirror 4

upr-10.04r3.iso.sig

Mirror 1

Mirror 2

Mirror 3

Mirror 4



UPR 10.04r3 and Tails 0.20

Dualboot DVD/USB with UPR for secure local working and Tails 0.20 for anonymous Internet usage.

upr-10.04r3+tails-0.20.iso

Mirror 1


Mirror 3

Mirror 4

upr-10.04r3+tails-0.20.iso.sig

Mirror 1


Mirror 3

Mirror 4






Attention! Since 10.04r1 we release Hybrid-ISOs. These can be burned on DVDs or written on USB-pendrives. So no special USB-Images are necessary anymore. The image can be written to a USB-pendrive with
dd ( dd if=/media/<device>/upr-10.04r1.iso of=/dev/<device>) or
a special program like USB-Imagewriter under Ubuntu. If you use USB-Imagewriter you have to rename the file from .iso to .img.

Sources and Copyright

Sources for own packages in UPR 10.04r3

Sources for VirtualBox

Sources for Scribus

all other sources can be downloaded from the Ubuntu archives.

Support-Files-Archive with Signature (contains text files and artwork which are used in UPR).

All own packages and scripts are licensed under the GPLv2. All own artwork is licensed under the CC-BY-SA license.

Tcanalyzer

little prorgram to analyze the headers of TrueCrypt volumes (see TrueCrypt analysis)

tcanalyzer

Past releases

UPR 10.04r2

Hybrid-ISO for DVD or USB-Stick (de, en, es, it, fr)

UPR 10.04r1

UPR 10.04r1 Hybrid-ISO for DVD or USB-Stick

(de, en, es, it, fr)

GnuPG Signature for upr-10.04r1.iso


Changelogs

Changelog 12.04r1 beta1:

New Features in UPR 12.04 (Beta 1):

  • Updated base system to Ubuntu 12.04.2, using Kernel 3.5 and X.Org 7.7. Runs on nearly all modern hardware.
  • Furthermore, other than included in Ubuntu 12.04, newer Versions of LibreOffice (4.0 and Scribus (1.4.2)
  • Boots on UEFI machines, including Secure Boot
  • Uses GNOME Classic for maximum compatibility with older hardware
  • Bug fixes and minor new features in the frontends for TrueCrypt and GnuPG

Additional features planned for the final version:

  • Update to Ubuntu 12.04.3 with Kernel 3.8
  • Update LibreOffice to version 4.1
  • Update GIMP to version 2.8
  • Adapt RAM wiping from the TAILS project
  • Include a replacement for the discontinued beagle search

Changelog 10.04r3:

  • Based on Ubuntu 10.0.4

  • Uses a new kernel based on Linux 3.0.26, which adds support for a lot of (newer) hardware.

  • The GPG-Frontend was updated, bugs were fixed and new features added.
  • The handling of TrueCrypt volumes has been further improved. It is now possible to check fully-encrypted drives. New options for fixing more difficult filesystem damages were added.

  • Added multimedia codecs so that now (nearly) all common audio and video formats can be played.
  • VirtualBox OSE was added to allow execution of other operating systems within the secure UPR environment.

  • Bugs have been fixed and small features were added

  • More Details of new features and concepts can be found in the manuals, accessible from the „Help“ Menu. The corresponding sections are marked with „New“.

Changelog 10.04r2:

  • Based on Ubuntu 10.04.3 resp. Packages as of 10/14/2011

  • New program „tellico“, a small database

  • New program „Grsync“ for making backups

  • New program „X-Tile“ to arrange windows

  • TrueCrypt was updated to version 7.0a

  • The GPG-Frontend was updated, bugs were fixed and new features added.

  • The handling of TrueCrypt volumes has been reworked from the ground up. Day-to-day handling of TrueCrypt containers as well as fully-encrypted devices is now done completely within the file manager „Nautilus“. A wizard was added for the creation of TrueCrypt volumes.

  • Lots of bugs have been fixed and small features were added

  • UPR is now distributed in Hybrid-ISO format. USB drives are now the recommended way of using UPR.

  • More Details of new features and concepts can be found in the manuals, accessible from the „Help“ Menu. The corresponding sections are marked with „New“.

Changelog 10.04r1:

Ubuntu Privacy Remix 10.04 is based on Ubuntu 10.04 "Lucid Lynx" and supports more and newer hardware. Still, system requirements remain the same. The UPR kernel has been rebuilt based on the Ubuntu kernel 2.6.32.23. UPR 10.04 shows the same improvements to boot times as Ubuntu 10.04

With UPR 10.04, it is no longer possible to burn the ISO to a CD due to its size, sorry!

We have extended and improved the following features:

  • TrueCrypt has been updated to version 6.3a. Version 7.0 obviously has introduced changes to the container format, at least containers created with it cannot be opened with an earlier version. As we did not find any documantation about these changes and did until now not get any answering on our questions, we keep to Truecrypt 6.3a of which we already reviewed the source code.
  • We have written our own frontend to GnuPG, which replaces seahorse. With it, you can use GPG features like key groups or restoring original filenames. Use it like the seahorse plugins from the context menu (Encrypt, Sign). Settings can be made from "Applications - Security - GnuPG Settings". It is also possible to show all recipient keys of an encrypted file. This frontend is optimized for dealing with large keyrings (>300 keys), key lists can be searched and filtered. For password caching, the "normal" gpg-agent is used, which has fewer bugs than seahorse. For key management, seahorse is still used.
  • The scripts for extended TrueCrypt volumes have been improved. The backup feature during close now can backup other open containers as well and save printer- and wallpaper-configuration.
  • New applications: VYM Mindmapper, xterm (for enabling TrueCrypts "repair filesystem" feature)
  • Simple creation and use of LUKS-encrypted volumes

Known problems:

Sadly, there are still bugs in Ubuntu 10.04 which also affect UPR:

  • Floppy disks cannot be mounted. As a workaround, UPR contains the command "Mount floppy" from the menu "Applications" -> "System Utilities"
  • On some graphics cards, you will see the desktop after booting, but no menu bar. There are two ways to solve this:
    • press "Esc" during boot to show the boot menu, then F6 for extended Options and choose "nomodeset"; then boot
    • After the desktop appears, press Ctrl+Alt+K (added by us, does not work with normal Ubuntu): This will restart the Gnome-Panel, menu bars should appear.

Changelog 9.04_r5

What's new in Ubuntu Privacy Remix 9.04r5, released on 11/01/10:

All software packages including the kernel were updated to their newest version to close security holes and fix bugs.

This represents the final state of Ubuntu 9.04, which has reached End-of-Life by the end of october. This version replaces 9.04r4, which had a serious security flaw and allowed access to the internal hard disks.

Changelog 9.04_r4

What's new in Ubuntu Privacy Remix 9.04r4, released on 09/09/10:

All software packages including the kernel were updated to their newest version to close security holes and fix bugs.

Due to space constraints, Firefox had to be replaced with Midori. This version has  a serious security flaw which allows access to the internal hard disks, and is therefore no longer available.

Changelog 9.04_r3

What's new in Ubuntu Privacy Remix 9.04r3, released on 06/01/10:

All software packages including the kernel were updated to their newest version to close security holes and fix bugs.

USB creator has been included to allow creation of bootable USb drives from within the UPR environment itself.

Changelog 9.04_r2:

What's new in Ubuntu Privacy Remix 9.04r2, released on 09/18/2009:

All software packages including the kernel were updated to their newest version to close security holes and fix bugs.

Small bugfixes and improvements in the scripts for handling extended TrueCrypt-Volumes, including a new progress bar in the backup function during clean-up of old backups.

Beagle-backend-evolution was added in order to allow indexing of contacts, appointments etc.

Changelog 9.04_r1:

What's new in Ubuntu Privacy Remix 9.04, released on 06/25/2009:

Based on Ubuntu 9.04, for changes see the Ubuntu website. Most notable changes are, among others, much better hardware support especially for screens and graphics cards, OpenOffice.org 3.0 and the new notify-osd.

Uses kernel 2.6.28.9 with the same modifications as before; i.e. no network support and no support of local hard disks.

Changes in package / software selection:

  • Added Figaros Password Manager 2
  • Added Templates and documentation for scribus
  • More PPDs for better printing support
  • OpenJDK instead of GIJ as Java Runtime
  • Added GParted for formatting and checking media
  • Beagle replaces Tracker
  • Compiz was removed, desktop effects were disabled due to compatibility reasons
  • Added hamster-applet (Time tracking)
  • Recompiled Truecrypt from source
  • Documentation in PDF format is now on the CD itself (under help menu, in english and german)

New security features of UPR:

The rights of the live session user were restricted, now only commands necessary for the scripts can be executed with admin rights (using sudo). Loading of malicious code, especially drivers/kernel modules, is now a lot more difficult.

Other new features of UPR:

  • Truecrypt containers (with .tc-extension) can be opened by double-clicking
  • The "wipe free space" script now contains an option for multiple passes, which is recommended for floppies
  • The indexing service tracker was replaced by beagle, because tracker cannot index RTF files.
  • The CD can be copied entirely to RAM (in the boot menu press F4 -> "Copy to RAM"). This does not work on every machine and requires at least 1.5 GB RAM

New look:

  • The icon set has been modified so that USB removable drives can be distinguished from truecrypt volumes.
  • The scripts use the new notify osd
  • The seahorse GUI has been split into two parts starting with Ubuntu 8.10. The seconed part is now under System->Settings->Encryption and Keyrings
  • Truecrypt, seahorse and the password manager can now be found in the applications menu -> Security.

Fixed problems:

  • The gnome panel no longer needs to be quit when closing extended truecrypt volumes, making it possible to enable the truecrypt background task again.
  • seahorse can now verify signatures
  • other minor bug fixes

Known problems:

  • The driver for intel graphic chips contained in Ubuntu 9.04 is running in a slower but more compatible mode.
  • The PDF viewer evince resp. the underlying libpoppler still has problems with multi-column selections

Hints for previous users:

  • Settings of OpenOffice.org 2.x in extended truecrypt volumes are not migrated, instead a new profile for OpenOffice.org 3 is created. This is because of known problems when migrating old user profiles.
  • Existing tracker indices in extended truecrypt volumes are preserved, but cannot be used with UPR 9.04. Beagle needs to be set up again for indexing, it is not possible to take over the tracker configuration. 

Changelog 8.04r3

UPR 8.04 stable r3, released on 16.02.2009:

New functions and features:

  • Added nautilus script to do a filesystem check on truecrypt volumes
  • Added nautilus script to wipe free space on any open device (using secure-delete)
  • Added shutdown script to overwrite free memory on shutdown (see article "The Problem of „Cold Boot Attacks“" for details)
  • Added bright&shiny™ progress bar to backups (using gtkrsync)
  • Checksums and signatures on CD now also in SHA-1
  • Added ttf-liberation fonts for increased Windows compatibility
  • Nautilus settings (views etc.) will be saved in extended TC volumes
  • Updated Truecrypt to 6.1a
  • Updated Kernel to 2.6.24-23
  • Updated all other packages up to 02/06/2009

Bug fixes:

  • Close extended TC-Volumes: do not offer backup if closing the backup volume
  • Close extended TC-Volumes: sync before closing
  • Close extended TC-Volumes: remove unclean/incomplete backups
  • Open/Close extended TC-Volumes: execute fsck before mounting to replay journal and fix errors. Note that a forced fsck may still be necessary in some cases.
  • Close extended TC-Volumes: check for open files before closing
  • Close extended TC-Volumes: write mounted volume to ~/.mounted_as_extended_tc_volume, making it possible to mount other ext3 formatted volumes as “normal” volumes.
  • GNOME Desktop: disable startup sound (not a real bug, but annoys most people)
  • OpenOffice.org: remove the (volatile) ubuntu.dic to avoid people adding words to it which are lost after reboot.

Changelog 8.04r2

UPR 8.04 stable r2, released 20.12.1.2008:

1. Removable media is mounted noexec by default
This closes the possibility of infecting the running system with malicious software running from removable media formatted with vfat, ntfs, ext2 or ext3.

2. Security Updates adopted from Ubuntu
All Ubuntu Updates and Security Updates released since the last release until
20081219 are added.

3. Minor bugfixes to the extended Truecrypt volume scripts
This solves https://bugs.launchpad.net/bugs/310533

Changelog 8.04r1

UPR 8.04 stable r1, released 04.12.2008:

1. New UPR-Kernel
The UPR-Kernel was able to mount some RAID-Arrays, because the controllers are identified by the system as a SCSI-controller, even if S/-ATA-Disks are used. For UPR this is a security issue, because removing the ability of mounting local S-/ATA-Disks is part of the concept to seal off users to assure their privacy.
From the new Kernel we removed support for
* all SCSI/IDE/SATA/SAS RAID-controllers
* iSCSI HBAs
* Fibre Chanel Controller
... and some more.
This solves https://bugs.launchpad.net/bugs/301285
The sources, the UPR-Kernel ist based on, were updated to Ubuntu source-package 2.6.24-22.45 because of security fixes.

2. Security Updates adopted from Ubuntu
All Ubuntu Security Updates released since the last release until 0081202 are added.

3. The DTP-Program Scribus was added to UPR.
Scribus-settings are now stored in "extended Truecrypt Volumes"

4. Added saving the /dektop/pgp-branch
of the gconf-database to the Nautilus-Scripts for "extended Truecrypt Volumes":
This solves https://bugs.launchpad.net/bugs/302867


 
.