<feed xmlns='http://www.w3.org/2005/Atom'>
<title>apt/test/integration, branch 2.9.15</title>
<subtitle>Debians commandline package manager</subtitle>
<id>https://git.kalnischkies.de/apt/atom?h=2.9.15</id>
<link rel='self' href='https://git.kalnischkies.de/apt/atom?h=2.9.15'/>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/'/>
<updated>2024-11-28T18:01:36Z</updated>
<entry>
<title>Directly call gpgv instead of apt-key</title>
<updated>2024-11-28T18:01:36Z</updated>
<author>
<name>Julian Andres Klode</name>
<email>jak@debian.org</email>
</author>
<published>2024-11-23T18:59:24Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=325b0c89358dae042ebfe0ba6dcbcc43253927a6'/>
<id>urn:sha1:325b0c89358dae042ebfe0ba6dcbcc43253927a6</id>
<content type='text'>
</content>
</entry>
<entry>
<title>test-apt-cdrom: Hande assert-pubkey-algo like other gpgv messages</title>
<updated>2024-11-24T13:21:24Z</updated>
<author>
<name>Julian Andres Klode</name>
<email>jak@debian.org</email>
</author>
<published>2024-11-24T13:20:00Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=d4f64227803185a1eeaf92392820b684d7a11753'/>
<id>urn:sha1:d4f64227803185a1eeaf92392820b684d7a11753</id>
<content type='text'>
Not all gpgv implementations support that flag and we no longer
default to gpgv; so we may not have support for it, so let's just
handle it like other gpgv messages.
</content>
</entry>
<entry>
<title>Collect unprinted Ign errors for display in Err output</title>
<updated>2024-11-22T20:05:35Z</updated>
<author>
<name>David Kalnischkies</name>
<email>david@kalnischkies.de</email>
</author>
<published>2024-11-22T17:59:48Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=a732f74400147a9993358b4778335715a0d5e20e'/>
<id>urn:sha1:a732f74400147a9993358b4778335715a0d5e20e</id>
<content type='text'>
Instead of deciding if the first or the last error in a retry chain is
the best one to display if the entire chain fails in the end we teach
our progress reporting to collect the ignored errors (if it hasn't shown
them) and print them all together in the Err line.

We de-duplicate the collection which makes it harder to match the Ign
line with the error messages, but for these cases its probably better to
enable direct display of the text anyhow – and repeating the same message
multiple times is boring and probably not that helpful for a user
wanting to know why all the downloads failed even they asked apt to
retry 429 times…

References: 841243df877b39dfcb907a7fab9c4e8b4f65d715
</content>
</entry>
<entry>
<title>Merge branch 'fix/partialfilemirror' into 'main'</title>
<updated>2024-11-22T16:12:34Z</updated>
<author>
<name>Julian Andres Klode</name>
<email>jak@debian.org</email>
</author>
<published>2024-11-22T16:12:34Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=1818699c1bc8a5be2d6542fe3212f26af7fa912a'/>
<id>urn:sha1:1818699c1bc8a5be2d6542fe3212f26af7fa912a</id>
<content type='text'>
Support uncompressed indexes from partial file:/ mirrors

See merge request apt-team/apt!235</content>
</entry>
<entry>
<title>test: Ensure we test both gpgv-g10code and gpgv-sq</title>
<updated>2024-11-22T15:44:02Z</updated>
<author>
<name>Julian Andres Klode</name>
<email>julian.klode@canonical.com</email>
</author>
<published>2024-11-22T15:20:05Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=e983d98c4fcd952ffcbc010b185455913c8af650'/>
<id>urn:sha1:e983d98c4fcd952ffcbc010b185455913c8af650</id>
<content type='text'>
</content>
</entry>
<entry>
<title>test: Accept empty output from gpgv/apt-key</title>
<updated>2024-11-22T15:44:02Z</updated>
<author>
<name>Julian Andres Klode</name>
<email>julian.klode@canonical.com</email>
</author>
<published>2024-11-21T19:10:47Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=de3f663d823f9c185514af69296d011e22161479'/>
<id>urn:sha1:de3f663d823f9c185514af69296d011e22161479</id>
<content type='text'>
Our internal code always generates ENODATA for empty output and
this is checked by the previous commit, so this is entirely safe.
</content>
</entry>
<entry>
<title>test-releasefile-verification: Test empty/invalid signatures</title>
<updated>2024-11-22T15:44:02Z</updated>
<author>
<name>Julian Andres Klode</name>
<email>julian.klode@canonical.com</email>
</author>
<published>2024-11-21T19:01:57Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=d2e34a441bad904798bf62fb850d4fb5b1b90656'/>
<id>urn:sha1:d2e34a441bad904798bf62fb850d4fb5b1b90656</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Accept BADSIG instead of EXPSIG for expired signatures</title>
<updated>2024-11-22T15:20:36Z</updated>
<author>
<name>Julian Andres Klode</name>
<email>julian.klode@canonical.com</email>
</author>
<published>2024-11-21T17:51:10Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=222301d7a36a09db80a8832cd16db41f7946a9ea'/>
<id>urn:sha1:222301d7a36a09db80a8832cd16db41f7946a9ea</id>
<content type='text'>
Sequioa emits KEYEXPIRED + BADSIG instead of EXPSIG + VALIDSIG
</content>
</entry>
<entry>
<title>test-releasefile-verification: Fix signature time</title>
<updated>2024-11-22T15:20:36Z</updated>
<author>
<name>Julian Andres Klode</name>
<email>julian.klode@canonical.com</email>
</author>
<published>2024-11-21T17:49:28Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=27012a496a9da78f26e9e412a7118dbe00e5c1ec'/>
<id>urn:sha1:27012a496a9da78f26e9e412a7118dbe00e5c1ec</id>
<content type='text'>
The key was only generated in 2010 and only bound in 2016,
so we cannot have signatures from before then, so update
the key accordingly, and change the default expiry to 2017.
</content>
</entry>
<entry>
<title>Look at non by-hash paths in copy and file methods</title>
<updated>2024-11-22T12:40:10Z</updated>
<author>
<name>David Kalnischkies</name>
<email>david@kalnischkies.de</email>
</author>
<published>2022-05-09T09:42:48Z</published>
<link rel='alternate' type='text/html' href='https://git.kalnischkies.de/apt/commit/?id=7adf8c1fa8d519b8b57292763eb7703e7d3cc580'/>
<id>urn:sha1:7adf8c1fa8d519b8b57292763eb7703e7d3cc580</id>
<content type='text'>
Ideally copy and file mirrors would support by-hash as well, but its
harder to setup and maintain especially if you want to cache an online
mirror who has by-hash enabled.

We can avoid unneeded roundtrips (in the best case) and entire cache
misses (in the usual worst case) by "just" telling methods that the URI
we passed it has the requested file perhaps also in other paths.

This is done in pseudo-relative paths as we would otherwise need to
teach redirection code to rewrite those URIs as well. A method like http
can easily ignore this value and await explicit instructions to look at
that file, but inspecting the path in local sources via file or copy is
(comparatively) free, so we just do it immediately. If that ends up
being the wrong version of the file as by-hash would have protected us
from we are in this feature branch now falling back to other mirrors
which are like the ones online and in support of by-hash.
</content>
</entry>
</feed>
