summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Release 2.9.242.9.24Julian Andres Klode2025-01-2149-410/+940
|
* Merge branch 'trust-deprecation' into 'main'Julian Andres Klode2025-01-218-139/+28
|\ | | | | | | | | Warn about missing Signed-By in .list format See merge request apt-team/apt!431
| * Unset Dir::Etc::trustedJulian Andres Klode2025-01-211-1/+0
| | | | | | | | | | | | | | | | | | | | | | The trusted.gpg file has been deprecated since February 2022 and can no longer be managed easily without apt-key, so we should not be falling back to it by default. We do not remove the actual code to fall back to it, such that code that passes Dir::Etc::trusted explicitly continues to work for the time being (with the warnings in update), as the overhead is now rather trivial.
| * Remove superseded warning about trusted.gpg fallbackJulian Andres Klode2025-01-214-135/+6
| | | | | | | | | | | | | | | | | | | | This warning has been superseded by the missing sources.list notice (which will also become a warning shortly) Adjust the sqv exit to avoid introducing a new spurious "No good signature" that we did not reach before. moo
| * Warn about missing Signed-By in .list formatJulian Andres Klode2025-01-213-3/+22
|/ | | | | | Warn about the missing field there and suggest the transition to deb822 .sources files if we found any non-deb822 source without signed-by.
* gitlab-ci: Use platform: linux/i386 instead of i386/debian imageJulian Andres Klode2025-01-201-2/+4
| | | | This is more generic, allowing us to use jak's runner again.
* Release 2.9.232.9.23Julian Andres Klode2025-01-175-6/+18
|
* Workaround gcc 14.2.0-9 regression in no-tree-slp-vectorize on GravitonJulian Andres Klode2025-01-171-1/+1
| | | | | | | | | | | | | | | gcc 14.2.0-9 causes vector instructions to be emitted in the constructor when it is being inlined into BaseHttpMethod::Loop(), which seemingly only on Graviton instances, causes the field to be initialized to 0 (Chunked) instead of 2 (Closes), causing the code to fail later when it tries to interpret file data as the chunk size. It's plausible we are missing some register saving here - that is, the q31 register overrides an x register. Work around this by making Closes element 0, such that 0 initialisation results in the correct Closes value. Reported-By: Myon on IRC
* Grep for more evil in test as a signature can contain evilDavid Kalnischkies2025-01-171-2/+2
| | | | | | | | The test was failing for me as the PGP signature contained "GeviljGB" which is clearly not the evil we are looking for. Sadly, reproducing this is hard, but random failures of the test suite are annoying, so lets grep for a bit longer strings that can't happen in the signature block to avoid this particular problem.
* Write Pre-Depends with a dash again in EDSPDavid Kalnischkies2025-01-172-6/+25
| | | | | | | | | | | | | | For some reason ~ that I don't know and can't come up with on the spot ~ we output the Pre-Depends field as PreDepends in the translated user-visible output and I accidentally copied that over to the untranslated variant that replaced the embedded copy (with a dash) in the EDSP generator. Code-copies and implementation details littered all over the place are apparently sometimes a good bug-free thing, too… Regression-of: 6828ae2c2f9268c8187f0fa91b3c464ed84a8476 Closes: #1093254
* Release 2.9.222.9.22Julian Andres Klode2025-01-1450-51/+347
|
* .gitlab-ci.yml: Request i386 test on x86 tag onlyJulian Andres Klode2025-01-141-0/+1
| | | | | | This allows us to register workers that can only run amd64 images like mine which runs on podman and podman does not allow pulling i386/ without specifying --arch i386
* methods/connect: Avoid unused argument warningJulian Andres Klode2025-01-141-1/+1
|
* proxy: Avoids triggering bounds check in std::string_viewJulian Andres Klode2025-01-141-1/+1
| | | | | Check for empty string_view instead of first byte being '\0'; this otherwise breaks when compiling with higher ABI version.
* t/i/test-method-gpgv-legacy-keyring: Switch to http, extendJulian Andres Klode2025-01-141-28/+41
| | | | | Add some more test cases where only one of the sources is bad; and switch to htp to make the order more reliable.
* Merge branch 'check-missing-dpkg-bin' into 'main'Julian Andres Klode2025-01-142-3/+11
|\ | | | | | | | | apt-pkg/deb/debsystem.cc: Fall back to "dpkg" when Dir::Bin::dpkg is not found See merge request apt-team/apt!419
| * apt-pkg/deb/debsystem.cc: Fall back to "dpkg" when Dir::Bin::dpkg is not foundBalint Reczey2024-12-302-3/+11
| | | | | | | | | | | | The custom dpkg binary may be removed by apt and that breaks the end of the operation. This can be observed when using eatmydata as dpkg and removing the symlink to eatmydata when removing the apt-eatmydata package.
* | Merge branch 'remove-gdb-minimal' into 'main'Julian Andres Klode2025-01-141-1/+1
|\ \ | | | | | | | | | | | | d/t/control: Don't depend on gdb-minimal. See merge request apt-team/apt!429
| * | d/t/control: Don't depend on gdb-minimal.Sergio Durigan Junior2025-01-111-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | gdb-minimal will soon be dropped from the archive; it doesn't offer any advantages over the gdb binary package. Just depend on gdb directly. Signed-off-by: Sergio Durigan Junior <sergiodj@debian.org>
* | | Merge branch 'fix/cleanup' into 'main'Julian Andres Klode2025-01-14149-2984/+2162
|\ \ \ | | | | | | | | | | | | | | | | Drop unused and obsolete macros as well as documentation See merge request apt-team/apt!428
| * | | Change multi sources.list entry example from FTP to HTTPSDavid Kalnischkies2025-01-0511-136/+141
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | As the FTP method is dropped it is probably better to use an example that actually works. We use https here as that requires no other text changes as there is a HTTPS session to reuse similar to FTP usage ~ that is the case for our HTTP, too, but the concept of a session isn't usually known there and servers who close the connection after every request are more common.
| * | | Remove leftovers from ftp and rsh/ssh methods removalDavid Kalnischkies2025-01-0520-1476/+964
| | | | | | | | | | | | | | | | References: fd3684cdbc165ceaa635ed19fcbd231f509b0179
| * | | Move apt-extractexamples desc line from apt-utils to aptDavid Kalnischkies2025-01-051-2/+2
| | | | | | | | | | | | | | | | | | | | References: f4e0e9daf221e840e122b0ffa97007aa512020a6 Closes: #1091344
| * | | Remove leftovers of the apt-key removalDavid Kalnischkies2025-01-0528-155/+57
| | | | | | | | | | | | | | | | References: a00fbbdb28cc31e78882301c2efe7218583ab4cb
| * | | Drop SourceListWarnings::NonFreeFirmware messagesDavid Kalnischkies2025-01-0547-298/+88
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | They were implemented to help a tiny bit in notifying users even if they didn't read the Release notes (or didn't realize it would apply to them) that they likely have to change their sources.list entries, but that transition is now over for a while, so everyone who should have seen it has hopefully reacted to it and so all this code now does is waste space, time and idly waiting for false positives.
| * | | Drop unused short form APT_IGNORE_DEPRECATEDDavid Kalnischkies2025-01-051-6/+1
| | | | | | | | | | | | | | | | | | | | | | | | Even the long form isn't used much (or currently not at all), but given that the short form is not really working even if it would be used… lets drop it and use the long form if we have to.
| * | | Drop usage of APT_MUSTCHECKDavid Kalnischkies2025-01-056-15/+15
| | | | | | | | | | | | | | | | | | | | nodiscard is a C++17 feature and already used (not just due to my recent changes) in our codebase, so lets drop the last remaining holdouts.
| * | | Drop usage of APT_UNUSEDDavid Kalnischkies2025-01-052-3/+3
| | | |
| * | | Drop APT_DEPRECATED usageDavid Kalnischkies2025-01-055-15/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | C++14 includes the standard attribute, so we can use that instead. Note that we drop the deprecation of {Pkg,Dep}Iterator::operator<< as this is ignored (a friends declaration must be a definition to have attributes) very noisily by GCC >= 12 and the methods can be somewhat useful in debugging if you are to lazy to get APT::Pretty{Pkg,Dep}.
| * | | Drop APT_NORETURN usageDavid Kalnischkies2025-01-057-12/+15
| | | | | | | | | | | | | | | | | | | | [[noreturn]] is a C++11 feature and so we can just use it unconditionally.
| * | | Drop unused FLAG macro and friendsDavid Kalnischkies2025-01-051-6/+4
| | | | | | | | | | | | | | | | | | | | They are rather generic names for macros and have no usage in our codebase at all, so lets remove them for good now.
| * | | Drop the remaining usage of APT_ARRAY_SIZEDavid Kalnischkies2025-01-053-13/+7
| | | | | | | | | | | | | | | | | | | | | | | | That macro is not that useful as it might perhaps once was. Lets prepare dropping it now in favour of more standard ways of working with arrays now.
| * | | Add pkgCache::{Priority,DepType}_NoL10n to avoid duplicationDavid Kalnischkies2025-01-054-34/+37
| | | | | | | | | | | | | | | | | | | | | | | | We don't have many places, but lets reduce the amount of duplicating these short strings, so that we may find all the places we have to change if that ever happens.
| * | | Drop usage of macro APT_OVERRIDE for simple overrideDavid Kalnischkies2025-01-0557-811/+810
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We were rather inconsistent in using it and as our public headers contain deduction guides (a c++17 feature) it seems silly to try to hide a c++11 feature in a macro, so lets stop this charade and drop the macro and while we are changing all these lines lets apply [[nodiscard]] (another c++17 feature) and other suggestions from clang-tidy and formatting for a little more consistency.
| * | | Try stomping a little less on global macro namespaceDavid Kalnischkies2025-01-051-3/+3
| | | |
* | | | abicheck: Add some workarounds to avoid errorsJulian Andres Klode2025-01-142-0/+18
| |/ / |/| |
* | | ssl: Explictly return -1 (error) or 0 (server closed connection)Julian Andres Klode2025-01-081-5/+9
| | | | | | | | | | | | | | | | | | SSL_read() and SSL_write may return 0 for errors, whereas our callers only expect -1 for errors and 0 for closed connections, so map this accordingly.
* | | ssl: Set an error when we receive SSL_ERROR_SYSCALLJulian Andres Klode2025-01-081-0/+1
|/ / | | | | | | | | | | | | | | | | | | | | | | The OpenSSL docs say: > For socket I/O on Unix systems, consult errno for details but also: > This value can also be returned for other errors, > check the error queue for details. This means it's possible errno isn't set, in which case we may appear to have reached an EOF when we did not.
* | Resolve autopkgtest failures caused by dpkg >= 1.22.12David Kalnischkies2025-01-053-8/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Streamlining the rules around the Section field and especially what happens if its isn't present are a good idea in general, but for testing proposes we want a package without a section ~ something dpkg and co do not want us to have for good reasons (outside of tests). While a real nosection package would interact with more of our code, for this test we don't really need a real one and so we can adopt to the new reality of encountering such packages only if they are already installed instead of trying to build a sectionless package by hand. The other failure is a simple and trivial string change around the formatting of the version number in dpkg error message about file overrides, which we can resolve by just not looking at the version to sidestep dealing with the formatting difference. References: https://lists.debian.org/debian-dpkg/2024/12/msg00010.html Closes: #1092090
* | Ensure we can build with APT_PKG_ABI > 601Julian Andres Klode2025-01-053-3/+8
| | | | | | | | | | There were some references to APT::StringView that don't make much sense anymore.
* | debian/changelog: v3 signature packet, not v3 subkeyJulian Andres Klode2025-01-021-1/+1
| | | | | | | | I typoed that.
* | Release 2.9.212.9.21Julian Andres Klode2025-01-016-7/+27
| | | | | | | | | | | | We updated po/ with libunistring 1.3 as before, but had no doc changes since the manual update with libunstring 1.2, so no churn there. Hooray.
* | Run update-po4aJulian Andres Klode2025-01-0110-68/+200
| | | | | | | | With libunistring5 to avoid https://bugs.debian.org/1091871
* | Unfuzzy documentation translationsJulian Andres Klode2025-01-0110-238/+238
| | | | | | | | | | | | | | | | | | | | | | s#ftp://ftp.debian.org#ftp://example.org#g s#at ftp.debian.org#at ftp.example.org# s#debian-non-US/ stable/(non-US/)?#debian/ stable/#g s#debian-non-US/ unstable/(non-US/)?#debian/ unstable/#g s#stable/ Packages#stable/main Packages#g s#http://ftp.de.debian.org/debian,#http://deb.debian.org/debian,#g s#testing non-US#testing# s#ftp.debian.org#ftp.example.org#
* | Merge branch 'improve-sqv-testsuite' into 'main'Julian Andres Klode2025-01-014-5/+7
|\ \ | | | | | | | | | | | | test: Check "${METHODSDIR}/sqv" not "/usr/bin/sqv" See merge request apt-team/apt!424
| * | test: Check "${METHODSDIR}/sqv" not "/usr/bin/sqv"Julian Andres Klode2025-01-014-5/+7
|/ / | | | | | | | | This is the correct check to find out whether we have built with sqv support.
* | Merge branch 'openssl-directory' into 'main'Julian Andres Klode2025-01-011-1/+1
|\ \ | | | | | | | | | | | | http: seccomp: Allow reading directories See merge request apt-team/apt!421
| * | http: seccomp: Allow reading directoriesJulian Andres Klode2025-01-011-1/+1
| | | | | | | | | | | | | | | | | | This is needed by OpenSSL. Closes: #1091351
* | | Merge branch 'sqv-error-propagation' into 'main'Julian Andres Klode2025-01-012-5/+31
|\ \ \ | | | | | | | | | | | | | | | | sqv: Avoid propagating errors between files See merge request apt-team/apt!422
| * | | sqv: Avoid propagating errors between filesJulian Andres Klode2025-01-012-5/+31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We inadvertently did not discard pending errors when the fallback to Dir::Etc::trusted succeeded, do so. Also add some quick safety checks to make sure we enter the verification in a good state, and that if somehow errors are pending after a verification we return false. Closes: #1091679
generated by cgit v1.2.3-70-g09d2 (git 2.46.0) at 2026-10-14 06:40:39 +0000