apt, branch 2.9.17Debians commandline package managerhttps://git.kalnischkies.de/apt/atom?h=2.9.172024-12-07T16:14:35ZRelease 2.9.172024-12-07T16:14:35ZJulian Andres Klodejak@debian.org2024-12-07T16:14:35Zurn:sha1:93325e6c0eedfa16246f7ec0498ed6b3e4c6f553Merge branch 'bye-apt-key' into 'main'2024-12-07T16:09:10ZJulian Andres Klodejak@debian.org2024-12-07T16:09:10Zurn:sha1:4063d96cdd9df79e1ca25410be30571d57296779
Stop using apt-key for verification and move apt-key to test/
See merge request apt-team/apt!406methods/gpgv: Remove apt-key mentions2024-12-07T14:14:34ZJulian Andres Klodejak@debian.org2024-12-07T14:07:35Zurn:sha1:2bb8a2c71c12063e52220c3a3839e063f11a319dRemove the apt-key manual page and add documentation to apt-secure2024-12-07T14:14:34ZJulian Andres Klodejak@debian.org2024-11-23T20:02:41Zurn:sha1:f7f4a4cb5c99f2bfe7a2398c406048c92c9c93b2
We move the user configuration section to the top of the manual
page as that is going to be what most are interested in and rewrite
it to cover all the modern ways to configure keys in a succinct
way.
Stop installing apt-key, make it a test suite helper2024-12-07T14:14:34ZJulian Andres Klodejak@debian.org2024-11-23T19:36:28Zurn:sha1:4b1665fc9df8b42832681adf88985ac762aedf9fgpgv: Drop references to apt-key2024-12-07T14:14:33ZJulian Andres Klodejulian.klode@canonical.com2024-12-04T10:12:34Zurn:sha1:2f9775ed580656214e62e7916ee896776fabc9e7Merge branch 'gpgv-merge-keyring' into 'main'2024-12-04T10:10:13ZJulian Andres Klodejak@debian.org2024-12-04T10:10:13Zurn:sha1:9dbb3a242f4f7a53c3678fd4f37e03ccc8479113
gpgv: Merge all keyrings into a single one again
See merge request apt-team/apt!408gpgv: Merge all keyrings into a single one again2024-12-04T09:14:44ZJulian Andres Klodejulian.klode@canonical.com2024-12-04T08:56:58Zurn:sha1:48e5af8b5df391e62657b604b2b54885f7ce1c02
gpgv is quite picky, it takes at most 40 keyrings but it also doesn't
even take keyrings with : in the name, generating an ERROR message
instead.
So instead let's always merge the configured keyrings for the source
into a single one.
While we are at it, since we are merging now, let's also add some
rudimentary error checking to what we write into the merged keyring:
If copying into it fails, we should abort.
Reported-by: SuShY on IRC
solver3: Reject all non-candidates outright for strict pinning2024-12-03T08:44:18ZJulian Andres Klodejulian.klode@canonical.com2024-11-02T11:45:07Zurn:sha1:8f317d97c9fb821e839342ae445c824207678eb7
Reimplement strict pinning by rejecting the non-candidates when
translating the problem from the depcache to the solver. This is
substantially better than restricting the list of alternatives for
an or group to only include allowed ones for debugging purposes,
albeit a bit slower.
solver3: Add a missing debug level check2024-12-03T08:44:18ZJulian Andres Klodejulian.klode@canonical.com2024-12-03T08:43:34Zurn:sha1:3e5977ed7b4e6291fcd67df193a501754ec1de7f