apt/apt-private/private-update.cc, branch 2.9.28Debians commandline package managerhttps://git.kalnischkies.de/apt/atom?h=2.9.282025-01-28T18:48:47ZMake notices about .list sources without signed-by less obnoxious2025-01-28T18:48:47ZJulian Andres Klodejulian.klode@canonical.com2025-01-27T16:34:45Zurn:sha1:4059a1544323b945a81e5ef0faea4a3b109f36bfapt-secure manual page is in manual section 82025-01-28T18:45:23ZAndreas Rönnquistgusnan@debian.org2025-01-23T14:33:55Zurn:sha1:a725a4af76fed9c4f06188f022f9a8f28ff333bdWarn about missing Signed-By in .list format2025-01-21T11:16:34ZJulian Andres Klodejulian.klode@canonical.com2025-01-20T10:57:33Zurn:sha1:c4e57e200ae40db5e9ada6ec0933b53d249e4a97
Warn about the missing field there and suggest the transition
to deb822 .sources files if we found any non-deb822 source
without signed-by.
Drop SourceListWarnings::NonFreeFirmware messages2025-01-05T22:16:09ZDavid Kalnischkiesdavid@kalnischkies.de2024-12-26T22:14:43Zurn:sha1:1a35028dd9ee4554a1a1f9f77a4dee615fb278ae
They were implemented to help a tiny bit in notifying users even if they
didn't read the Release notes (or didn't realize it would apply to them)
that they likely have to change their sources.list entries, but that
transition is now over for a while, so everyone who should have seen it
has hopefully reacted to it and so all this code now does is waste
space, time and idly waiting for false positives.
apt-private/private-update.cc: APT::StringView -> std::string_view2024-11-12T19:36:17Zнабnabijaczleweli@nabijaczleweli.xyz2024-11-12T16:59:25Zurn:sha1:e33add3c2afa33a6f81b2eaed1fdcd29dc28790fapt update: Show upgradable package count in bold2024-04-19T18:49:05ZJulian Andres Klodejulian.klode@canonical.com2024-04-15T15:45:47Zurn:sha1:3f5e368ba800f823b36931ced783d450ec621264update: Add notice about missing Signed-By in deb822 sources2023-06-27T17:21:47ZJulian Andres Klodejulian.klode@canonical.com2023-06-27T17:14:43Zurn:sha1:aba813975abb880f8b27d659147f7760c02f99e7
We want to gently steer users towards having Signed-By for each
source such that we can retire a shared keyring across sources
which improves resilience against configuration issues and
incompetent malicious actors.
Add apt install,upgrade,... -U,--update options2023-05-02T13:16:54ZJulian Andres Klodejulian.klode@canonical.com2023-04-11T14:37:51Zurn:sha1:3625351722e67903dc34993fe318e50863bd2d31
This runs update before opening the cache and sources.list for
installing/upgrading.
Suggest using non-free-firmware in update for Debian2023-02-04T16:56:41ZDavid Kalnischkiesdavid@kalnischkies.de2023-01-29T22:24:43Zurn:sha1:9712edf6151308148518058bfbd5ccd937509143
In an ideal world everyone would read release notes, but if the last
sources.list change is any indication a lot of people wont. This is
even more a problem in so far as apt isn't producing errors for
invalid repositories, but instead carries on as normal even through it
will not be able to install upgrades for the moved packages.
This commit implements two scenarios and prints a notice in those cases
pointing to the release notes:
a) User has 'non-free' but not 'non-free-firmware'
b) User has a firmware package which isn't available from anywhere
Both only happen if we are talking about a repository which identifies
itself as one of Debian and is for a release codenamed bookworm (or
sid). Note that as (usually) apt/oldstable is used to upgrade to the
new stable release these suggestions only show for users after they
have upgraded to bookworm on apt command line usage after that.
Replace whitelist/blacklist with allowlist/denylist2020-08-04T10:12:11ZJulian Andres Klodejulian.klode@canonical.com2020-07-14T14:34:20Zurn:sha1:7d8bb855487d6821b0cd6bf5d2270ed8fda3d1a3