summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Release 2.9.262.9.26Julian Andres Klode2025-01-2858-3708/+4854
| | | | | This reflows the documentation po files now using the latest gettext.
* Merge branch 'modernize-sources' into 'main'Julian Andres Klode2025-01-2817-55/+482
|\ | | | | | | | | apt: Introduce the modernize-sources command See merge request apt-team/apt!438
| * doc: Update codenames for trixie, plucky as stableJulian Andres Klode2025-01-281-5/+5
| |
| * Update debian, ubuntu example default sources to best practicesJulian Andres Klode2025-01-285-21/+90
| |
| * vendor: debian, ubuntu: Set signed-by/Signed-By in examplesJulian Andres Klode2025-01-283-11/+15
| |
| * doc: Deprecate legacy one-line-style format harderJulian Andres Klode2025-01-281-1/+5
| | | | | | | | | | | | Schedule the removal not before 2029. Gbp-Dch: full
| * Make notices about .list sources without signed-by less obnoxiousJulian Andres Klode2025-01-282-20/+41
| |
| * apt: Introduce the modernize-sources commandJulian Andres Klode2025-01-285-0/+315
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This handles rewriting .list entries to .sources ones; the only options handled are - signed-by => Signed-By - trusted => Trusted The options to specify architectures, check-valid-until, etc. are not supported as they are not exposed in the code. We probably should refactor the parser at some point so we can actually read the parsed entry rather than the abstract objects we create from it. This can be improved further: - Keyrings from /etc/apt/trusted.gpg.d should be moved to /etc/apt/keyrings. - automatic detection by trying to verify using each keyring in trusted.gpg.d until we find the right one and then using that for Signed-By rather than leave some sources empty.
| * metaindex: Support loading without filenameJulian Andres Klode2025-01-282-0/+14
|/
* Merge branch 'fix_manual_section' into 'main'Julian Andres Klode2025-01-283-4/+4
|\ | | | | | | | | apt-secure manual page is in manual section 8 See merge request apt-team/apt!434
| * apt-secure manual page is in manual section 8Andreas Rönnquist2025-01-283-4/+4
|/
* Merge branch 'intermediate_client_certificates' into 'main'Julian Andres Klode2025-01-241-1/+1
|\ | | | | | | | | Fix regression that prevented sending intermediate client certificates See merge request apt-team/apt!437
| * Fix regression that prevented sending intermediate client certificatesSam Hartman2025-01-231-1/+1
|/ | | | | | | | | | | The change from the GNUTLS backend to the OpenSSL backend only loads the first certificate from a client certificate file. As a result it is no longer possible to send intermediate client certificates to the server to assist in certificate verification. Instead call ssl_ctx_use_certificate_chain_file so intermediate certificates can be sent. Signed-off-by: Sam Hartman <hartmans@debian.org>
* Release 2.9.252.9.25Julian Andres Klode2025-01-225-6/+12
|
* Merge branch 'no-fail-missing-parts' into 'main'Julian Andres Klode2025-01-223-2/+69
|\ | | | | | | | | sqv, gpgv: Do not fail if Dir::Etc::Trusted is set and trusted.gpg.d is missing See merge request apt-team/apt!433
| * sqv, gpgv: Do not fail if Dir::Etc::Trusted is set and trusted.gpg.d is missingJulian Andres Klode2025-01-223-2/+69
|/ | | | | | | | | | This should remain a warning case for now. So push the errors to a stack and see if we can find any file. Explictly warn again if Dir::Etc::trusted is set, as it is like _super_ deprecated. Reported-By: Cyril Brulebois <kibi@debian.org> in Bug#1032131
* Release 2.9.242.9.24Julian Andres Klode2025-01-2149-410/+940
|
* Merge branch 'trust-deprecation' into 'main'Julian Andres Klode2025-01-218-139/+28
|\ | | | | | | | | Warn about missing Signed-By in .list format See merge request apt-team/apt!431
| * Unset Dir::Etc::trustedJulian Andres Klode2025-01-211-1/+0
| | | | | | | | | | | | | | | | | | | | | | The trusted.gpg file has been deprecated since February 2022 and can no longer be managed easily without apt-key, so we should not be falling back to it by default. We do not remove the actual code to fall back to it, such that code that passes Dir::Etc::trusted explicitly continues to work for the time being (with the warnings in update), as the overhead is now rather trivial.
| * Remove superseded warning about trusted.gpg fallbackJulian Andres Klode2025-01-214-135/+6
| | | | | | | | | | | | | | | | | | | | This warning has been superseded by the missing sources.list notice (which will also become a warning shortly) Adjust the sqv exit to avoid introducing a new spurious "No good signature" that we did not reach before. moo
| * Warn about missing Signed-By in .list formatJulian Andres Klode2025-01-213-3/+22
|/ | | | | | Warn about the missing field there and suggest the transition to deb822 .sources files if we found any non-deb822 source without signed-by.
* gitlab-ci: Use platform: linux/i386 instead of i386/debian imageJulian Andres Klode2025-01-201-2/+4
| | | | This is more generic, allowing us to use jak's runner again.
* Release 2.9.232.9.23Julian Andres Klode2025-01-175-6/+18
|
* Workaround gcc 14.2.0-9 regression in no-tree-slp-vectorize on GravitonJulian Andres Klode2025-01-171-1/+1
| | | | | | | | | | | | | | | gcc 14.2.0-9 causes vector instructions to be emitted in the constructor when it is being inlined into BaseHttpMethod::Loop(), which seemingly only on Graviton instances, causes the field to be initialized to 0 (Chunked) instead of 2 (Closes), causing the code to fail later when it tries to interpret file data as the chunk size. It's plausible we are missing some register saving here - that is, the q31 register overrides an x register. Work around this by making Closes element 0, such that 0 initialisation results in the correct Closes value. Reported-By: Myon on IRC
* Grep for more evil in test as a signature can contain evilDavid Kalnischkies2025-01-171-2/+2
| | | | | | | | The test was failing for me as the PGP signature contained "GeviljGB" which is clearly not the evil we are looking for. Sadly, reproducing this is hard, but random failures of the test suite are annoying, so lets grep for a bit longer strings that can't happen in the signature block to avoid this particular problem.
* Write Pre-Depends with a dash again in EDSPDavid Kalnischkies2025-01-172-6/+25
| | | | | | | | | | | | | | For some reason ~ that I don't know and can't come up with on the spot ~ we output the Pre-Depends field as PreDepends in the translated user-visible output and I accidentally copied that over to the untranslated variant that replaced the embedded copy (with a dash) in the EDSP generator. Code-copies and implementation details littered all over the place are apparently sometimes a good bug-free thing, too… Regression-of: 6828ae2c2f9268c8187f0fa91b3c464ed84a8476 Closes: #1093254
* Release 2.9.222.9.22Julian Andres Klode2025-01-1450-51/+347
|
* .gitlab-ci.yml: Request i386 test on x86 tag onlyJulian Andres Klode2025-01-141-0/+1
| | | | | | This allows us to register workers that can only run amd64 images like mine which runs on podman and podman does not allow pulling i386/ without specifying --arch i386
* methods/connect: Avoid unused argument warningJulian Andres Klode2025-01-141-1/+1
|
* proxy: Avoids triggering bounds check in std::string_viewJulian Andres Klode2025-01-141-1/+1
| | | | | Check for empty string_view instead of first byte being '\0'; this otherwise breaks when compiling with higher ABI version.
* t/i/test-method-gpgv-legacy-keyring: Switch to http, extendJulian Andres Klode2025-01-141-28/+41
| | | | | Add some more test cases where only one of the sources is bad; and switch to htp to make the order more reliable.
* Merge branch 'check-missing-dpkg-bin' into 'main'Julian Andres Klode2025-01-142-3/+11
|\ | | | | | | | | apt-pkg/deb/debsystem.cc: Fall back to "dpkg" when Dir::Bin::dpkg is not found See merge request apt-team/apt!419
| * apt-pkg/deb/debsystem.cc: Fall back to "dpkg" when Dir::Bin::dpkg is not foundBalint Reczey2024-12-302-3/+11
| | | | | | | | | | | | The custom dpkg binary may be removed by apt and that breaks the end of the operation. This can be observed when using eatmydata as dpkg and removing the symlink to eatmydata when removing the apt-eatmydata package.
* | Merge branch 'remove-gdb-minimal' into 'main'Julian Andres Klode2025-01-141-1/+1
|\ \ | | | | | | | | | | | | d/t/control: Don't depend on gdb-minimal. See merge request apt-team/apt!429
| * | d/t/control: Don't depend on gdb-minimal.Sergio Durigan Junior2025-01-111-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | gdb-minimal will soon be dropped from the archive; it doesn't offer any advantages over the gdb binary package. Just depend on gdb directly. Signed-off-by: Sergio Durigan Junior <sergiodj@debian.org>
* | | Merge branch 'fix/cleanup' into 'main'Julian Andres Klode2025-01-14149-2984/+2162
|\ \ \ | | | | | | | | | | | | | | | | Drop unused and obsolete macros as well as documentation See merge request apt-team/apt!428
| * | | Change multi sources.list entry example from FTP to HTTPSDavid Kalnischkies2025-01-0511-136/+141
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | As the FTP method is dropped it is probably better to use an example that actually works. We use https here as that requires no other text changes as there is a HTTPS session to reuse similar to FTP usage ~ that is the case for our HTTP, too, but the concept of a session isn't usually known there and servers who close the connection after every request are more common.
| * | | Remove leftovers from ftp and rsh/ssh methods removalDavid Kalnischkies2025-01-0520-1476/+964
| | | | | | | | | | | | | | | | References: fd3684cdbc165ceaa635ed19fcbd231f509b0179
| * | | Move apt-extractexamples desc line from apt-utils to aptDavid Kalnischkies2025-01-051-2/+2
| | | | | | | | | | | | | | | | | | | | References: f4e0e9daf221e840e122b0ffa97007aa512020a6 Closes: #1091344
| * | | Remove leftovers of the apt-key removalDavid Kalnischkies2025-01-0528-155/+57
| | | | | | | | | | | | | | | | References: a00fbbdb28cc31e78882301c2efe7218583ab4cb
| * | | Drop SourceListWarnings::NonFreeFirmware messagesDavid Kalnischkies2025-01-0547-298/+88
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | They were implemented to help a tiny bit in notifying users even if they didn't read the Release notes (or didn't realize it would apply to them) that they likely have to change their sources.list entries, but that transition is now over for a while, so everyone who should have seen it has hopefully reacted to it and so all this code now does is waste space, time and idly waiting for false positives.
| * | | Drop unused short form APT_IGNORE_DEPRECATEDDavid Kalnischkies2025-01-051-6/+1
| | | | | | | | | | | | | | | | | | | | | | | | Even the long form isn't used much (or currently not at all), but given that the short form is not really working even if it would be used… lets drop it and use the long form if we have to.
| * | | Drop usage of APT_MUSTCHECKDavid Kalnischkies2025-01-056-15/+15
| | | | | | | | | | | | | | | | | | | | nodiscard is a C++17 feature and already used (not just due to my recent changes) in our codebase, so lets drop the last remaining holdouts.
| * | | Drop usage of APT_UNUSEDDavid Kalnischkies2025-01-052-3/+3
| | | |
| * | | Drop APT_DEPRECATED usageDavid Kalnischkies2025-01-055-15/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | C++14 includes the standard attribute, so we can use that instead. Note that we drop the deprecation of {Pkg,Dep}Iterator::operator<< as this is ignored (a friends declaration must be a definition to have attributes) very noisily by GCC >= 12 and the methods can be somewhat useful in debugging if you are to lazy to get APT::Pretty{Pkg,Dep}.
| * | | Drop APT_NORETURN usageDavid Kalnischkies2025-01-057-12/+15
| | | | | | | | | | | | | | | | | | | | [[noreturn]] is a C++11 feature and so we can just use it unconditionally.
| * | | Drop unused FLAG macro and friendsDavid Kalnischkies2025-01-051-6/+4
| | | | | | | | | | | | | | | | | | | | They are rather generic names for macros and have no usage in our codebase at all, so lets remove them for good now.
| * | | Drop the remaining usage of APT_ARRAY_SIZEDavid Kalnischkies2025-01-053-13/+7
| | | | | | | | | | | | | | | | | | | | | | | | That macro is not that useful as it might perhaps once was. Lets prepare dropping it now in favour of more standard ways of working with arrays now.
| * | | Add pkgCache::{Priority,DepType}_NoL10n to avoid duplicationDavid Kalnischkies2025-01-054-34/+37
| | | | | | | | | | | | | | | | | | | | | | | | We don't have many places, but lets reduce the amount of duplicating these short strings, so that we may find all the places we have to change if that ever happens.
| * | | Drop usage of macro APT_OVERRIDE for simple overrideDavid Kalnischkies2025-01-0557-811/+810
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We were rather inconsistent in using it and as our public headers contain deduction guides (a c++17 feature) it seems silly to try to hide a c++11 feature in a macro, so lets stop this charade and drop the macro and while we are changing all these lines lets apply [[nodiscard]] (another c++17 feature) and other suggestions from clang-tidy and formatting for a little more consistency.
generated by cgit v1.2.3-70-g09d2 (git 2.46.0) at 2026-10-14 05:12:23 +0000