Debians commandline package manager https://git.kalnischkies.de/apt/atom?h=main 2026-06-10T13:07:30Z 2026-06-10T13:07:30Z David Kalnischkies david@kalnischkies.de 2026-02-05T21:18:40Z urn:sha1:49e91b96d9faeca50ab0b212174744938d446132 We implement a HTTP-only server here (that is wrapped by stunnel for HTTPS support), so if a TLS handshake reaches us it is always wrong and we can just close the connection immediately instead of accepting it and letting the client run into a timeout as we will never receive the message(s) we expect. This happens e.g. with browsers like Firefox that opportunistically try https first (even if you ask for http and specify a port). 2026-05-20T17:46:35Z Julian Andres Klode jak@debian.org 2026-05-20T17:42:18Z urn:sha1:cae6d486b4294a0ba0a4694171380737c3818aac This is a supported configuration to only use bare Build-Depends and Build-Conflicts. 2026-05-17T18:53:31Z Varun Varma varun.varma@canonical.com 2026-05-14T15:20:28Z urn:sha1:45f1fd73d0b62ce6422365a935abc317718ea142 LP: #2150631 is a bug where trying to access an authentication-locked repo without root sends a 401 error, which is misleading since the authentication information could be in auth.conf.d, but just inaccessible without root. This adds a warning in that scenario, as well as an integration test. 2026-05-17T18:10:59Z Julian Andres Klode jak@debian.org 2026-05-17T18:09:37Z urn:sha1:10a05580e74e2ba5a5768d45c6f9feff216c8689 We accidentally followed "keepauto" and friends earlier, breaking `apt why` for suggested packages. Reported-By: uau on IRC 2026-04-07T09:40:15Z Julian Andres Klode jak@debian.org 2026-02-24T18:25:21Z urn:sha1:f0c71b95ca00bae2b364c4b4858c51d84b002387 A specific CLI version can now be requested using the --cli-version flag, and old versions can be deprecated on a reasonable cadence. Therefore, a warning is no longer necessary. Gbp-Dch: full 2026-04-07T09:39:14Z Simon Johnsson simon.johnsson@canonical.com 2026-02-18T14:37:48Z urn:sha1:e2e4e3ced75bb5e9db28cc35b6ebf371e8e5be94 2026-03-19T09:35:50Z David Kalnischkies david@kalnischkies.de 2026-03-19T09:25:19Z urn:sha1:94ff66799a94576ff8003b99d78be6765e6f4500 Observing a testrun carefully included: ./test-apt-get-satisfy: 101: [: unexpected operator Yes, == is not a valid operator here, should just be =. The result is that we unconditionally skip a single check, hardly so much the end of the world that we need to tell everyone as no tests were failed, but no good anyhow. Fixes: 5e8e69cdd6b512480f3208298725e1e44c80f06e Gbp-Dch: Ignore 2026-02-17T09:28:17Z Julian Andres Klode jak@debian.org 2026-02-17T09:28:17Z urn:sha1:9f3ecca2b32e4fe56a05811392e01416092f85fa Implement the "APT::Get::Upgrade-By-Source-Package" option as the classic solver does. Here this is equally straight forward now: We enqueue optional, but eager, clauses of the form foo=2 -> foo-data=2 for each sibling in the source version, assuming they are currently installed, and the selection is not the current version. This softly enforces upgrades of already installed siblings, but in non-strict-pinning mode it will not affect the selection of new packages to be installed. A more complete solution to version selection by source package also seems feasible, where we change the "priority" of versions in the solver dynamically - currently they are statically evaluated. Such that, when you select foo=2, and something installs foo-data, foo-data would be installed in version 2 even if version 3 were its candidate. 2026-01-31T16:30:20Z Julian Andres Klode jak@debian.org 2025-12-29T17:47:15Z urn:sha1:1fbb857b6b2cbddcea9e8b03aa0c766c72e91f34 Instead of tracking dependencies and reverse dependencies, install classical watchers. This vastly streamlines the propagation code and allows us to easily switch to literals in the next step. This implementation watches _all_ solutions rather than using the modern 2-watched literals scheme or the intermediate head/tail watchers. Ultimately a more effective watcher scheme would be interesting but not a significant priority seeing as most of the solver runtime is spent not in propagation but in problem translation. decision trees -------------- The new watchers produce slightly different decision trees, sometimes subtly changing solutions. Notably in various observed examples in Ubuntu 25.04, courier was installed as an MTA instead of postfix: The old decision tree was: apcupsd:amd64 -> mailutils:amd64=1:3.18-1 -> mailutils:amd64 -> postfix:amd64=3.9.1-10ubuntu1 The new decision tree is: lsb:amd64 -> lsb-core:amd64 -> courier-mta:amd64=1.3.13-1 The difference here being that lsb-core declares a mail-transport-agent dependency whereas mailutils depends on `default-mta | mail-transport-agency`; but both are effectively subject to selection at similar time. Further work is needed to optimize selection. A notable choice may also be to deal with broken packages like lsb-core that declare dependencies solely on a virtual package by reconstructing the default provider for that package utilizing default-* dependencies or similar notions. Likewise in the test suite, explanations are different in some uninstallable cases. backtracking ~~~~~~~~~~~~ The following major changes were observed in the 25.04 test suite: -tmp/regression-remove/07f0a068-36c2-11f0-b7c1-fa163e171f02:18 +tmp/regression-remove/07f0a068-36c2-11f0-b7c1-fa163e171f02:3 -tmp/regression-remove/32078f70-3734-11f0-a75a-fa163ec8ca8c:64 +tmp/regression-remove/32078f70-3734-11f0-a75a-fa163ec8ca8c:19 Other test cases showed little deviation, +/- 1, generally the same amount of backtracking. performance ~~~~~~~~~~~ Running Ubuntu's regression test suite resulted in no significant performance difference being observable. Before: 290s user time; 16.66% solver After: 299s user time; 17.36% solver Tests where run with make -j 8 and solver performance extracted perf report --symbol-filter=ResolveExternal --stdio 2026-01-23T11:04:31Z Julian Andres Klode jak@debian.org 2026-01-23T11:03:04Z urn:sha1:49e80c2d9061372e0ec697be43bcba4c451b7752 We configure all variants the CPU supports as active, but repositories usually do not provide all of them, so let's not be noisy.