• a Debian Stretch (or newer) system
  • Tails' devel APT suite enabled
  • the right version of the tails-perl5lib package installed
  • a user that has sudo credentials

Install build and test dependencies

git checkout master && \
sudo apt install \
   devscripts \
   dh-make-perl \
   libdist-zilla-app-command-authordebs-perl && \
dzil authordebs --install && \
git checkout debian && \
mk-build-deps -i -r --root-cmd sudo

Update POT and PO files

git checkout master && \
    ( cd po && make pot && make update-po ) && \
    git add po && \
    git commit -m 'Update POT and PO files.'

Make an upstream release

git checkout master

Enable new translations in po/PACKAGE and commit.

Export new upstream version number:


Export location of a checkout of the branch of the main Tails Git repository used to prepare the release (typically stable or testing):


Export source date epoch:

export SOURCE_DATE_EPOCH=$(date --utc +%s)

Update version number in bin/tails-create-iuk, commit all files that need to be.

perl -pi -E 's,^Version [0-9.]+,Version $ENV{VERSION},' bin/tails-create-iuk && \
   perl -pi -E \
      "s,^our \\\$VERSION = '[0-9.]+';\$,our \\\$VERSION = '$VERSION';," \
      bin/tails-create-iuk && \
   git commit bin/tails-create-iuk -m "tails-iuk $VERSION"

Run the upstream test suite:

# get an authentication token, needed by the test suite
sudo true
# run the tests in closer to real conditions
umask 077

# Run the test suite
NODE_PATH="${TAILS_GIT_CHECKOUT}/submodules/mirror-pool-dispatcher/lib/js" \
PATH="${TAILS_GIT_CHECKOUT}/submodules/mirror-pool-dispatcher/bin:$PATH" \
   LC_ALL=C \
   dzil test

Build an upstream tarball, tag the release, move the tarball out of the build repository and cleanup:

dzil build && \
   git tag -s $VERSION -m "tails-iuk $VERSION" && \
   mv Tails-IUK*.tar.gz .. && git clean -fdx

Update the Debian package

Checkout the branch with Debian package specifics and import the new upstream tarball, update debian/changelog:

git checkout debian && \
   gbp import-orig --upstream-vcs-tag=$VERSION \
      ../Tails-IUK-$VERSION.tar.gz && \
   gbp dch --auto --spawn-editor=always

(Do not forget to set the appropriate release.)

Update the packaging (e.g. look at changes in dist.ini), and then update debian/changelog again if needed.

Commit debian/changelog:

git commit debian/changelog \
    -m "$(echo "$(dpkg-parsechangelog -SSource) ($(dpkg-parsechangelog -SVersion))\n\nGit-Dch: Ignore\n")"

Build a Debian package (use a Stretch/amd64 chroot, that has stretch-backports enabled and on top of that: either tails-perl5lib installed or the Tails APT repository configured):

gbp buildpackage && \
gbp buildpackage --git-tag-only --git-sign-tags && \
git push --follow-tags origin \
                master:master \
                debian:debian \
                pristine-tar:pristine-tar \

Add the Debian package to Tails

Sign the package:



dupload --to tails $CHANGES_FILE