apt/apt-private, branch 2.9.31Debians commandline package managerhttps://git.kalnischkies.de/apt/atom?h=2.9.312025-02-14T18:45:12Zstring{=> _view} flNotDir(string{=> _view}). Configuration::{Cnd,}Set(Value: string{=> _view})2025-02-14T18:45:12Zнабnabijaczleweli@nabijaczleweli.xyz2025-01-23T19:50:39Zurn:sha1:729a5c8f4fb8c841497d26170e1a47c41617ecd9edit-sources: don't force .list2025-02-07T19:57:10ZChristopher Bockchristopher@bocki.com2025-02-06T18:08:38Zurn:sha1:1df0230b388441245e96ce7b58bd2cad59d53511modernize-sources: Avoid opening /dev/stdout for simulate2025-02-04T15:15:17ZJulian Andres Klodejulian.klode@canonical.com2025-02-04T15:14:13Zurn:sha1:ddfb32fe72ec38f27e0fa2f012c43ade421bdbd8
/dev/stdout may not exist, so let's instead just reference
the std::cout stream.
Reported-by: h01ger on IRC
Measure BootSize as integer2025-02-03T12:40:37ZJulian Andres Klodejulian.klode@canonical.com2025-02-03T12:19:12Zurn:sha1:452586e84ad54ca23dee399bf9809c49e7171f36
I don't know why I used a double here this is awkward.
Also support debian-ports modernization2025-02-02T00:41:21ZSamuel Thibaultsthibault@debian.org2025-02-02T00:37:55Zurn:sha1:f9ff99d699209aa97ba788bad86a15313751c230
That just needs using '-' to replace spaces in Origin to get the keyring file name.
Make notices about .list sources without signed-by less obnoxious2025-01-28T18:48:47ZJulian Andres Klodejulian.klode@canonical.com2025-01-27T16:34:45Zurn:sha1:4059a1544323b945a81e5ef0faea4a3b109f36bfapt: Introduce the modernize-sources command2025-01-28T18:47:00ZJulian Andres Klodejulian.klode@canonical.com2025-01-27T14:51:24Zurn:sha1:9d7a660611e9e134cd6d74a594bde59cad77c8d8
This handles rewriting .list entries to .sources ones; the
only options handled are
- signed-by => Signed-By
- trusted => Trusted
The options to specify architectures, check-valid-until, etc.
are not supported as they are not exposed in the code. We
probably should refactor the parser at some point so we can
actually read the parsed entry rather than the abstract objects
we create from it.
This can be improved further:
- Keyrings from /etc/apt/trusted.gpg.d should be moved to
/etc/apt/keyrings.
- automatic detection by trying to verify using each keyring
in trusted.gpg.d until we find the right one and then using
that for Signed-By rather than leave some sources empty.
apt-secure manual page is in manual section 82025-01-28T18:45:23ZAndreas Rönnquistgusnan@debian.org2025-01-23T14:33:55Zurn:sha1:a725a4af76fed9c4f06188f022f9a8f28ff333bdWarn about missing Signed-By in .list format2025-01-21T11:16:34ZJulian Andres Klodejulian.klode@canonical.com2025-01-20T10:57:33Zurn:sha1:c4e57e200ae40db5e9ada6ec0933b53d249e4a97
Warn about the missing field there and suggest the transition
to deb822 .sources files if we found any non-deb822 source
without signed-by.
Drop SourceListWarnings::NonFreeFirmware messages2025-01-05T22:16:09ZDavid Kalnischkiesdavid@kalnischkies.de2024-12-26T22:14:43Zurn:sha1:1a35028dd9ee4554a1a1f9f77a4dee615fb278ae
They were implemented to help a tiny bit in notifying users even if they
didn't read the Release notes (or didn't realize it would apply to them)
that they likely have to change their sources.list entries, but that
transition is now over for a while, so everyone who should have seen it
has hopefully reacted to it and so all this code now does is waste
space, time and idly waiting for false positives.