summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Release 2.7.132.7.13Julian Andres Klode2024-02-2848-107/+142
|
* prepare-release: Adjust for t64 suffixJulian Andres Klode2024-02-281-4/+5
|
* Merge branch 'gpgv-improvements' into 'main'Julian Andres Klode2024-02-287-18/+111
|\ | | | | | | | | Assert >=2048-bit RSA keys, Ed25519, Ed448, and some improvements to diagnostic reporting See merge request apt-team/apt!322
| * Temporarily downgrade key assertions to "soon worthless"Julian Andres Klode2024-02-282-12/+5
| | | | | | | | | | This will only issue warnings instead of errors while we continue cleaning up our repositories.
| * Rename 'weak digest algorithm' to 'weak algorithm'Julian Andres Klode2024-02-283-4/+4
| | | | | | | | This allows us to render public key algorithms as weak as well.
| * Implement gpgv --assert-pubkey-algo=>=rsa2048,ed25519,ed448Julian Andres Klode2024-02-286-5/+75
| | | | | | | | | | | | | | | | | | | | | | | | The assertion can be overriden using apt::key::assert-pubkey-algo, the default is the most opinionated one. This will inform the user during apt-cdrom add as we do not pass --quiet to user, so adjust test case. Add a simple test case for it to test-method-gpgv. LP: #2055193
| * gpgv: Add a reason to worthless signersJulian Andres Klode2024-02-282-10/+31
| |
| * gpgv: Surface [GNUPG:] ERROR and [GNUPG:] WARNING status messagesJulian Andres Klode2024-02-281-0/+9
| |
* | Merge branch 'gitlab-fix' into 'main'Julian Andres Klode2024-02-282-2/+3
|\ \ | | | | | | | | | | | | Do not require versioned dpkg-dev on CI See merge request apt-team/apt!332
| * | Do not require versioned dpkg-dev on CIJulian Andres Klode2024-02-282-2/+3
|/ / | | | | | | | | Annotate the Build-Depends with a <!pkg.apt.ci> profile and use that in prepare-release when doing build-dep.
* | Merge tag '2.7.12+nmu1'Julian Andres Klode2024-02-285-6/+15
|\ \ | | | | | | | | | Import 2.7.12+nmu1
| * | Import Debian version 2.7.12+nmu12.7.12+nmu1Steve Langasek2024-02-285-6/+15
| |/ | | | | | | | | | | | | apt (2.7.12+nmu1) unstable; urgency=medium . * Non-maintainer upload. * Rename libraries for 64-bit time_t transition. Closes: #1061896
* | Merge branch 'configure-index-manpage' into 'main'Julian Andres Klode2024-02-231-1/+1
|\ \ | | | | | | | | | | | | Show correct location of configure-index in man page See merge request apt-team/apt!330
| * | Show correct location of configure-index in man pageWesley Schwengle2024-02-201-1/+1
| |/ | | | | | | | | | | | | | | The man page uses examples/configure-index.gz for the configure-index file, but this isn't a .gz file. Remove the .gz so users can find the correct file. Signed-off-by: Wesley Schwengle <wesleys@opperschaap.net>
* | Merge branch 'main' into 'main'Julian Andres Klode2024-02-231-1/+1
|\ \ | |/ |/| | | | | Fix spelling mistake in zh_CN.po See merge request apt-team/apt!331
| * Fix spelling mistake in zh_CN.poYuan Tao2024-02-241-1/+1
|/
* Release 2.7.122.7.12Julian Andres Klode2024-02-2017-31/+639
| | | | | I also unfuzzied the translation strings for the 23.10->24.04 apt-key deprecation change.
* Release 2.7.12Julian Andres Klode2024-02-201-0/+29
|
* Merge branch 'auto-snapshot' into 'main'Julian Andres Klode2024-02-202-9/+62
|\ | | | | | | | | Automatically enable snapshots where supported See merge request apt-team/apt!328
| * test-snapshot: Add test case for automatic snapshotJulian Andres Klode2024-02-201-6/+32
| | | | | | | | | | | | 1. repository not supporting snapshots, implicit Enabled 2. repository not supporting snapshots, Enabled: yes 3. URL-based lookup, implicit Enabled
| * test-snapshot: Fix a test caseJulian Andres Klode2024-02-201-1/+1
| | | | | | | | | | | | This was accidentally using testfailure instead of testfailureequal, hence trying to run the output string as a command :(
| * Delete SHADOWED metaIndex if we don't actually use snapshotsJulian Andres Klode2024-02-201-0/+7
| | | | | | | | | | | | | | | | This adds a bit more code but avoids any surprises later on by having both the shadowed and non-shadowed meta index in the list. Gbp-Dch: ignore
| * Automatically enable snapshots where supportedJulian Andres Klode2024-02-202-2/+22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Convert sources.list Snapshot option from opt-in to automatic. If we can find a snapshot server, Snapshot: yes is assumed if a snapshot is specified. On the implementation side, we record automatic snapshot enablement by adding a '?' suffix to the snapshot timestamp, if any is specified, this avoids introducing bugs into the code where we could end up with an empty snapshot. This has an annoying internal implementation caveat: Since we call GetDebReleaseIndexBy() with the SHADOWED option emplaced, if we do not find a server, we need to remove the SHADOWED option again, but we already have inserted a shadowed release index into the list. This will simply insert the release index a second time without the SHADOWED option which in preliminary testing works fine, but it would arguably be more correct to also remove the release index again if we have created it. FIXME: This only has one test case: A source with supported snapshot server is auto-discovered. We should also add a test case where we cannot detect a server and then don't fail in automatic mode.
* | Move systemd units to /usr/libJulian Andres Klode2024-02-201-2/+2
|/ | | | Closes: #1054137
* Merge branch 'modernize-stdlib' into 'main'Julian Andres Klode2024-02-20141-346/+342
|\ | | | | | | | | Modernize standard library includes See merge request apt-team/apt!329
| * Modernize standard library includesJulian Andres Klode2024-02-20141-346/+342
|/ | | | | | This was automated with sed and git-clang-format, and then I had to fix up the top of policy.cc by hand as git-clang-format accidentally indented it by two spaces.
* Bump Ubuntu apt-key deprecation notice to 24.04Julian Andres Klode2024-02-201-1/+1
| | | | | While it was initially on the road map for 24.04 it got replaced with the disable 1024R keys feature.
* Merge branch 'main' into 'main'Julian Andres Klode2024-02-201-1/+2
|\ | | | | | | | | apt.8: summarise remaining verbs (Closes: #827785) See merge request apt-team/apt!315
| * apt.8: summarise remaining verbs (Closes: #827785)наб2023-12-281-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The following were undocumented // package stuff {"auto-remove", &DoInstall, nullptr}, {"autopurge",&DoInstall, nullptr}, // system wide stuff // misc {"moo", &DoMoo, nullptr}, // for compat with muscle memory {"dist-upgrade", &DoDistUpgrade, nullptr}, {"showsrc",&ShowSrcPackage, nullptr}, {"depends",&Depends, nullptr}, {"rdepends",&RDepends, nullptr}, {"policy",&Policy, nullptr}, {"build-dep", &DoBuildDep,nullptr}, {"clean", &DoClean, nullptr}, {"distclean", &DoDistClean, nullptr}, {"dist-clean", &DoDistClean, nullptr}, {"autoclean", &DoAutoClean, nullptr}, {"auto-clean", &DoAutoClean, nullptr}, {"source", &DoSource, nullptr}, {"download", &DoDownload, nullptr}, {"changelog", &DoChangelog, nullptr}, {"info", &ShowPackage, nullptr}, And there's good reason for some of it, but I unironically didn't know where apt changelog lived. It's unsearchable. So the following are now simple links with no paragraphs: // query // package stuff // system wide stuff // misc // for compat with muscle memory {"showsrc",&ShowSrcPackage, nullptr}, {"depends",&Depends, nullptr}, {"rdepends",&RDepends, nullptr}, {"policy",&Policy, nullptr}, {"build-dep", &DoBuildDep,nullptr}, {"clean", &DoClean, nullptr}, {"distclean", &DoDistClean, nullptr}, {"autoclean", &DoAutoClean, nullptr}, {"source", &DoSource, nullptr}, {"download", &DoDownload, nullptr}, {"changelog", &DoChangelog, nullptr},
* | Merge branch 'distclean-doc' into 'main'Julian Andres Klode2024-02-201-1/+8
|\ \ | | | | | | | | | | | | Document 'dist-clean' See merge request apt-team/apt!317
| * | Document 'dist-clean'Gábor Németh2024-01-101-1/+8
| | | | | | | | | | | | cf. https://salsa.debian.org/apt-team/apt/-/merge_requests/312#note_453588
* | | Merge branch 'prevent_read_conf_inf_loop' into 'main'Julian Andres Klode2024-02-201-1/+1
|\ \ \ | | | | | | | | | | | | | | | | Prevent infinite loop in `ReadConfigFile` See merge request apt-team/apt!314
| * | | Prevent infinite loop in `ReadConfigFile`Adam Saponara2023-12-291-1/+1
| | |/ | |/| | | | | | | | | | Break the loop on failure. Without this, the function goes into an infinite loop if `FName` is a directory.
* | | Merge branch 'apt-key-handle-crlf-keyrings' into 'main'Julian Andres Klode2024-02-201-1/+2
|\ \ \ | | | | | | | | | | | | | | | | apt-key: remove carriage returns from armored keyrings before dearmoring See merge request apt-team/apt!309
| * | | apt-key: remove carriage returns from armored keyrings before dearmoringKenyon Ralph2023-11-291-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Without this, the awk script returns nothing if the armored keyring uses Windows/DOS-style CRLF line endings (since awk is designed for processing Unix text files). This would result in a NO_PUBKEY error during the signature verification part of an apt-get update.
* | | | Merge branch 'testing-clang' into 'main'Julian Andres Klode2024-02-201-0/+2
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | Fix bug where ./git-clang-format.sh errors incorrectly See merge request apt-team/apt!325
| * | | | Fix bug where ./git-clang-format.sh errors incorrectlyWesley Schwengle2024-01-251-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When running the following command twice: ./git-clang-format.sh $(git merge-base HEAD @{u}) The tool previously errored with the following message: patch: **** Only garbage was found in the patch input. This is because on a second run there is nothing to patch. Fix that small issue by excluding the line 'clang-format did not modify any files' and the line 'no modified files to format' Signed-off-by: Wesley Schwengle <wesleys@opperschaap.net>
* | | | | Merge branch 'keep-kernel-size' into 'main'Julian Andres Klode2024-02-203-13/+76
|\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | Configure the amount of kernels to keep See merge request apt-team/apt!324
| * | | | | Add documentation of autoremove to apt.conf (5)Wesley Schwengle2024-01-261-0/+55
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit adds documentation for: APT::Protect-Kernels, APT::NeverAutoRemove::*, APT::VersionedKernelPackages. This is to inform users about the newly introduced NeverAutoRemove::KernelCount feature. Signed-off-by: Wesley Schwengle <wesleys@opperschaap.net>
| * | | | | Configure the amount of kernels to keepWesley Schwengle2024-01-242-13/+21
| |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit introduces the following configuration for keeping a configurable amount of kernels: APT::NeverAutoRemove::KernelCount The logic dictates that the running kernel and the latest kernel are not autoremoved. In case the running kernel is the latest kernel, the previous kernel is kept. Any count lower than two is therefore disregarded. This is in line with the previous behavior. The default is therefore similar to: APT::NeverAutoRemove::KernelCount 2; This will be ignored and we will still keep two: APT::NeverAutoRemove::KernelCount 1; This will keep 3 kernels (including the runnig, and most recent) APT::NeverAutoRemove::KernelCount 3; Signed-off-by: Wesley Schwengle <wesleys@opperschaap.net>
* | | | | Merge branch 'homar-typo' into 'main'Julian Andres Klode2024-02-202-4/+4
|\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | Typos in integration tests See merge request apt-team/apt!313
| * | | | | Typos in integration testsGábor Németh2024-01-092-4/+4
| | |_|_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Corrected 'und' -> 'and' in the fake package's description. As a result, the MD5 checksum of this string is changed from 36ef2ec58c83bc4fdbe9fe958dd9c107 to 5022766cbc9bf07d1abea2c41a72646f which in turn reduced the size of the resulting Packages.gz by one. Therefore the accepted answer in the test case is updated too.
* | | | | Release 2.7.112.7.11Julian Andres Klode2024-02-1359-60/+577
| | | | |
* | | | | Merge branch 'phasing-api' into 'main'Julian Andres Klode2024-02-1317-122/+227
|\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | Add public phased update API and separate message list See merge request apt-team/apt!327
| * | | | | Show a separate list of upgrades deferred due to phasingJulian Andres Klode2024-02-136-12/+68
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This introduces a new line: The following upgrades have been deferred due to phasing This is any kept back package that is also phasing. This may not be 100% accurate as we have kept it back due to other reasons in an install command, for example, but we don't track for which packages we applied phasing in reality. If additional packages are kept back that are not phasing, show a a notice "N: Some packages may have been kept back due to phasing." LP: #1988819
| * | | | | Add the ?security patternJulian Andres Klode2024-02-134-0/+18
| | | | | |
| * | | | | Add a new ?phasing patternJulian Andres Klode2024-02-134-0/+20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This selects all packages that are being kept back due to phasing on your system.
| * | | | | Add public phased update APIJulian Andres Klode2024-02-138-110/+121
|/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This moves the functions of the PhasedUpgrader class into various other classes so they can be publicly exposed. This introduces three new functions: pkgDepCache::PhasingApplied() tells you whether phasing should be applied to the package. pkgProblemResolver::KeepPhasedUpdates() keeps back updates that have phasing applied. pkgCache::VerIterator::IsSecurityUpdate() determines whether this version contains security fixes.
* | / / / For phasing, check if current version is a security update, not just ↵Julian Andres Klode2024-02-132-34/+60
| |/ / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | previous ones We only considered an update a security update if a previous update is a security update but not the update in question itself. LP: #2051181
* | | | Support -a for setting host architecture in apt-get source -bDavid Kalnischkies2024-01-191-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It is documented and the code supports it, but the command line parsing actually refuses -a/--host-architecture=arch … probably a sign how much "apt-get source -b" is (not) used in practice. Setting via -o APT::Get::Host-Architecture=arch (which -a is just a shorthand for) works as it did before and can be used if backward compatibility is important.