apt/doc/examples, branch 1.7.0_alpha1

Lower default timeout from 120s to 30s

2018-05-24T12:31:31Z

120s is an insanely high default time out, lower it to 30s to make things a bit nicer.

Remove obsolete RCS keywords

2018-05-07T11:41:31Z

Prompted-by: Jakub Wilk

apt-pkg: Add support for zstd

2018-03-12T07:56:59Z

zstd is a compression algorithm developed by facebook. At level 19, it is about 6% worse in size than xz -6, but decompression is multiple times faster, saving about 40% install time, especially with eatmydata on cloud instances.

Merge branch 'pu/not-valid-before' into 'master'

2018-02-19T15:06:06Z

Check that Date of Release file is not in the future See merge request apt-team/apt!3

Check that Date of Release file is not in the future

2018-02-19T15:05:01Z

By restricting the Date field to be in the past, an attacker cannot just create a repository from the future that would be accepted as a valid update for a repository. This check can be disabled by Acquire::Check-Date set to false. This will also disable Check-Valid-Until and any future date related checking, if any - the option means: "my computers date cannot be trusted." Modify the tests to allow repositories to be up to 10 hours in the future, so we can keep using hours there to simulate time changes.

ensure correct file permissions for auxfiles

2018-02-19T14:56:09Z

The interesting takeaway here is perhaps that 'chmod +w' is effected by the umask – obvious in hindsight of course. The usual setup helps with hiding that applying that recursively on all directories (and files) isn't correct. Ensuring files will not be stored with the wrong permissions even if in strange umask contexts is trivial in comparison. Fixing the test also highlighted that it wasn't bulletproof as apt will automatically fix the permissions of the directories it works with, so for this test we actually need to introduce a shortcut in the code. Reported-By: Ubuntu autopkgtest CI

add apt-helper drop-privs command…

2018-02-19T14:56:09Z

document https options in new apt-transport-https manpage

2018-01-03T17:55:41Z

Same reasoning as with the previous commit for http with the added benefit of moving the hard to discover and untranslated example config into a manpage which could be translated.

Add rapid "happy eyeballs" connection fallback (RFC 8305)

2018-01-03T14:31:36Z

Try establishing connections in alternating address families in rapid intervals of 250 ms, adding more connections to the wait list until one succeeds (RFC 8305, happy eyeballs 2). It is important that WaitAndCheckErrors() waits until it has a successful connection, a time out, or all connections failed - otherwise the timing between tries might be wrong, and the final long wait might exit early because one connection failed without trying the others. Timing wise, this only works correctly on Linux, as select() counts down there. But we rely on that in some other places too, so this is not the time to fix that. Timeouts are only reported in the final long wait - the short inner waits are expected to time out more often, and multiple times, we do not want to report them. Closes: #668948 LP: #1308200 Gbp-Dch: paragraph

Print syscall number and arch to stderr when trapped by seccomp

2017-10-25T22:02:33Z

This should help debugging crashes. The signal handler is a C++11 lambda, yay! Special care has been taken to only use signal handler -safe functions inside there.