apt/methods/aptmethod.h, branch 1.8.1 Debians commandline package manager https://git.kalnischkies.de/apt/atom?h=1.8.1 2019-02-05T11:50:05Z aptmethod.h: Do not have gcc warning about ignoring write() result 2019-02-05T11:50:05Z Julian Andres Klode julian.klode@canonical.com 2019-02-05T11:48:46Z urn:sha1:e435312f0692996232fc12786be59513a2536489 This is a special case here, a best effort write, so there's no point in having warnings about it for every method. Add support for /etc/apt/auth.conf.d/*.conf (netrcparts) 2018-12-04T16:48:41Z Julian Andres Klode julian.klode@canonical.com 2018-12-03T16:39:03Z urn:sha1:bbfcc05c1978decd28df9681fd73e2a7d9a8c2a5 This allows us to install matching auth files for sources.list.d files, for example; very useful. This converts aptmethod's authfd from one FileFd to a vector of pointers to FileFd, as FileFd cannot be copied, and move operators are hard. Allow restart_syscall() syscall in seccomp sandboxes 2018-04-06T12:18:25Z Julian Andres Klode julian.klode@canonical.com 2018-04-06T12:18:25Z urn:sha1:da385be6c38c5f79b7ee6d175f855c08090d959f Closes: #891644 Turn off seccomp sandboxing by default 2018-04-06T12:17:26Z Julian Andres Klode julian.klode@canonical.com 2018-04-06T11:53:20Z urn:sha1:e688a4f4890c04021468932e57e17891853c8443 LP: #1732030 Closes: #890489 Fixes meefik/linuxdeploy#869 reimplement and simplify mirror:// method 2018-01-03T17:55:41Z David Kalnischkies david@kalnischkies.de 2017-10-27T16:39:36Z urn:sha1:57fa854e4cdb060e87ca265abd5a83364f9fa681 Embedding an entire acquire stack and HTTP logic in the mirror method made it rather heavy weight and fragile. This reimplement goes the other way by doing only the bare minimum in the method itself and instead redirect the actual download of files to their proper methods. The reimplementation drops the (in the real world) unused query-string feature as it isn't really implementable in the new architecture. report transient errors as transient errors 2017-12-13T22:56:29Z David Kalnischkies david@kalnischkies.de 2017-10-25T22:57:26Z urn:sha1:47c0bdc310c8cd62374ca6e6bb456dd183bdfc07 The Fail method for acquire methods has a boolean parameter indicating the transient-nature of a reported error. The problem with this is that Fail is called very late at a point where it is no longer easily identifiable if an error is indeed transient or not, so some calls were and some weren't and the acquire system would later mostly ignore the transient flag and guess by using the FailReason instead. Introducing a tri-state enum we can pass the information about fatal or transient errors through the callstack to generate the correct fails. Do not attempt seccomp under qemu-user and drop EFAULT workaround 2017-11-12T16:45:13Z Julian Andres Klode jak@debian.org 2017-11-12T16:45:13Z urn:sha1:243acdee176dd90cb2838690cb5abbd64d4da905 qemu-user passes prctl()-based seccomp through to the kernel, umodified. That's bad, as it blocks the wrong syscalls. We ignored EFAULT which fixed the problem for targets with different pointer sizes from the host, but was a bad hack. In order to identify qemu we can rely on the fact that qemu-user prints its version and exits with 0 if QEMU_VERSION is set to an unsupported value. If we run a command that should fail in such an environment, and it exits with 0, then we are running in qemu-user. apt-helper is an obvious command to run. The tests ensure it exits with 1, and it only prints usage information. We also could not use /bin/false because apt might just as well be from a foreign arch while /bin/false is not. Closes: #881519 seccomp: Allow clock_nanosleep() and nanosleep() syscalls 2017-10-27T19:58:27Z Julian Andres Klode jak@debian.org 2017-10-27T19:58:27Z urn:sha1:cfb6061b82daa67def0349938bf6267c37e9906d We sleep in http.cc, so we should allow the sleeping syscalls. seccomp: Allow ipc() for fakeroot, and allow sysinfo() for sort 2017-10-26T18:54:28Z Julian Andres Klode jak@debian.org 2017-10-26T15:42:58Z urn:sha1:b514128890d5cf96a76393e8d261d79e0be7f0e4 Sorting apparently calls sysconf() which calls sysinfo() to get free pages or whatever. Closes: #879814, #879826 Print syscall number and arch to stderr when trapped by seccomp 2017-10-25T22:02:33Z Julian Andres Klode jak@debian.org 2017-10-25T21:16:09Z urn:sha1:39656a6f79e48f86d31c53a939481c07aceca352 This should help debugging crashes. The signal handler is a C++11 lambda, yay! Special care has been taken to only use signal handler -safe functions inside there.