apt, branch 2.9.20Debians commandline package managerhttps://git.kalnischkies.de/apt/atom?h=2.9.202024-12-28T22:00:49ZRelease 2.9.202024-12-28T22:00:49ZJulian Andres Klodejulian.klode@canonical.com2024-12-28T22:00:49Zurn:sha1:44c378faa2b56ebeae7473bec2afe7c283acec75Re-include std:: symbols in the symbols file as optional again2024-12-28T21:57:59ZJulian Andres Klodejulian.klode@canonical.com2024-12-28T21:57:59Zurn:sha1:e709637b3a87048d3dfaf51525d7a42e5bb8e135
This will restore most of the symbols from before and ensure
reverse dependencies not depending on new symbols can migrate.
It also ensures we see any missing symbols.
symbols: Merge 2.9.19 and fix version for InsertErrno2024-12-23T21:08:57ZJulian Andres Klodejulian.klode@canonical.com2024-12-23T21:08:57Zurn:sha1:560ef5de0197a0ec1ac293cf91a983748a6b379b
Somehow InsertErrno was wrongly formatted as
symbol 0.8.11.4 1
and that caused dedup to miss-handle it. The 2.9.19 merge
fixes that but kept "1" as the version, change it to say
0.8.11.4 instead.
Release 2.9.192024-12-23T11:23:44ZJulian Andres Klodejulian.klode@canonical.com2024-12-23T11:23:44Zurn:sha1:e126f608c877b5febb1a43d01cb3c662c598e8f2Merge branch 'symbols'2024-12-23T11:14:49ZJulian Andres Klodejulian.klode@canonical.com2024-12-23T11:14:49Zurn:sha1:e938c60061daff799113c4dbf6a8a41454f71126Symbols: Merge stable, noble, testing, unstable2024-12-23T11:13:26ZJulian Andres Klodejulian.klode@canonical.com2024-12-23T10:56:41Zurn:sha1:225776b787f8e75b235a1ae080aae53dcc9e177e
Hand edit 2.7.14build2 to 2.7.14
The funny 999:0misbuilt version number gets auto-reduced to
the current version when building which is sad, but it works.
Merge branch 'sqv' into 'main'2024-12-23T11:13:08ZJulian Andres Klodejak@debian.org2024-12-23T11:13:08Zurn:sha1:d6c6187b1469df800e3067ffc273e21a7f80c1c6
methods: Add new sqv method
See merge request apt-team/apt!409abicheck: Add symbol-merge.py helper2024-12-23T10:56:33ZJulian Andres Klodejulian.klode@canonical.com2024-12-22T23:34:11Zurn:sha1:6710ec715f12a6c76af5a09f6e3054b07e45bb3d
This allows merging symbol diffs from the various build logs
debian: Plug sqv into the package build2024-12-22T22:52:05ZJulian Andres Klodejulian.klode@canonical.com2024-12-20T11:03:26Zurn:sha1:f5a24acea31248f98db51d7a2fd1d7b2198bb177
Our goal is for each platform to have one blessed OpenPGP verification
system: Platforms that support sqv get sqv, platforms that don't get
gpgv. To do so we hardcode the architecture list at build time.
At build time we check if /usr/bin/sqv exists, which is the condition
that apt uses to see if it should build with sqv support.
We use a slight hack here to build with sqv on the official Debian
buildds but use gpgv on Ubuntu by abusing the fact that Ubuntu
resolves alternative build dependencies, and gpgv is installed
in the buildd image.
debian: Add default policy to allow SHA-1 self-signatures until 20262024-12-22T22:52:05ZJulian Andres Klodejulian.klode@canonical.com2024-12-20T10:21:29Zurn:sha1:153653d449efe121487641303d43ac523b9b17fb
Many repositories still have SHA-1 self-signatures, and they are not
security relevant for APT repositories in the first place since we
do not use a web of trust model, but rather a set of trusted keyrings,
and the subkey can essentially be always considered trusted even if
it cannot be verified.