summaryrefslogtreecommitdiff
path: root/debian/control
Commit message (Collapse)AuthorAgeFilesLines
* Sandbox methods with seccomp-BPF; except cdrom, gpgv, rshJulian Andres Klode2017-10-221-0/+1
| | | | | | | | | | | | This reduces the number of syscalls to about 140 from about 350 or so, significantly reducing security risks. Also change prepare-release to ignore the architecture lists in the build dependencies when generating the build-depends package for travis. We might want to clean up things a bit more and/or move it somewhere else.
* Drop curl method and apt-transport-https packageJulian Andres Klode2017-09-241-19/+1
| | | | | This automatically removes any old apt-transport-https, as apt now Breaks it unversioned.
* Drop obsolute Testsuite: autopkgtest headerJulian Andres Klode2017-09-241-1/+0
|
* Drop obsolete dh-systemd build-depJulian Andres Klode2017-09-241-1/+0
|
* Bump Standards-Version to 4.1.0Julian Andres Klode2017-09-241-1/+1
|
* Directly link against libudev on Linux systemsJulian Andres Klode2017-09-091-0/+1
| | | | | | | | | | | | | | | | | | | We previously dlopen()ed it, but it seems painful to do that without any real gain, except for possibly not having libudev in the address space and not having code #ifdefed for Linux. The latter means that we are a bit more likely to break stuff for non-Linux systems now if we play with udev, but at least we don't end up with it silently breaking because of a libudev ABI break. The existing function pointers in the struct were renamed and kept for compat purposes. Fixes Debian/apt#48 Also adjust prepare-release to strip [linux-any] from build-depends for travis.
* Handle GCC 7 std::string operator ABI breakJulian Andres Klode2017-08-171-0/+1
| | | | | | | | | | We now require gcc 7 on the packaging side, and add an appropriate symbol to our symbols file. Also adjust prepare-release to ignore g++ version requirements when setting up build dependencies on CI. Closes: #871275
* remove reference to a-t-debtorrent in descriptionDavid Kalnischkies2017-07-261-2/+2
| | | | | | | debtorrent and its helper apt-transport-debtorrent were removed from Debian in 2013 based on the bugreports #730459 and #731281. As they aren't available, we shouldn't make references to them anymore. a-t-tor is picked as replacement for the example.
* Switch to 'http' as the default https methodJulian Andres Klode2017-06-301-4/+9
| | | | | The old curl based method is still available as 'curl', 'curl+http', and 'curl+https'.
* Build-Depend on debhelper (>= 10) to shut up lintianJulian Andres Klode2017-06-291-1/+1
|
* Bump Standards-Version (and wrap-and-sort a bit)Julian Andres Klode2017-06-291-3/+3
|
* Demote gnupg to SuggestsJulian Andres Klode2017-06-291-1/+2
| | | | | stretch was the migration release for gpg->gpgv basically, so let's demote it now.
* Have apt Recommend ca-certificatesJulian Andres Klode2017-06-291-1/+1
| | | | | The http method needs ca-certificates for TLS support, so enable it.
* methods: Add HTTPS support to http method, using GnuTLSJulian Andres Klode2017-06-281-0/+1
| | | | | | | | | | | | | | The http method will eventually replace the curl-based https method, but for now, this is an opt-in experiment that can be enabled by setting Dir::Bin::Methods::https to "http". Known issues: - We do not support HTTPS proxies yet - We do not support proxying HTTPS connections yet (CONNECT) - IssuerCert and SslForceVersion are unsupported Gbp-Dch: Full
* follow the googletest merge in build-dependsDavid Kalnischkies2016-11-251-1/+1
|
* re-add apt breaks/replaces apt-utils (<< 1.3~exp2~)David Kalnischkies2016-09-011-0/+2
| | | | | | | | | The recently added (increased actually) Breaks were accidently dropped while our set of mostly old and outdated breaks was cleaned up. Regression-From: 20d2f4a4f164cd9026dad698e471c95d7c28973b Previously-Add-In: ab07af708e49c9219940ffd3e20a01c763267e03 Closes: #836220
* debian: Run wrap-and-sortJulian Andres Klode2016-08-191-16/+39
| | | | | Manually clean up the apt.maintscript, it moved stuff from before the comment to after the comment...
* debian: Drop outdated stuffJulian Andres Klode2016-08-191-3/+0
| | | | | The README.source is not usable anymore, and the Build-Conflicts andd Breaks/Replaces are not needed anymore.
* debian: Switch to debhelper 10Julian Andres Klode2016-08-191-1/+1
| | | | | | | | | | | debhelper 10 is much nicer with the installation part from a dirty tree, so you can just fix some stuff breaking the install step and then continue building with debuild -b -nc until you have fixed all your stuff. It also has some other advantages, of course, like some bug fixes in shell escaping for maintscript, or systemd helper changes.
* add the gpg-classic variant to the gpgv/gnupg or-groupDavid Kalnischkies2016-08-171-2/+2
| | | | | | We need to support partial upgrades anyhow, so we have to deal with the different versions and your tests try to ensure that we do, so we shouldn't make any explicit higher requirements.
* Change anonscm.d.o links to /git/apt/apt.git and httpsJulian Andres Klode2016-08-131-1/+1
| | | | | | This also fixes Debian/apt#20, but is slightly more complete. I think /git also looks better than /cgit, so let's switch the Vcs entry in control over too.
* CMake: Bump minimum required version to 3.4.0Julian Andres Klode2016-08-101-1/+1
| | | | | The SOURCE_DIR property is used for the translation building and was introduced in cmake 3.4
* Build-depend on pkg-configJulian Andres Klode2016-08-061-1/+1
|
* CMake: debian: Switch packaging over to CMake and dh 9Julian Andres Klode2016-08-061-1/+1
| | | | | | | | | | | This new packaging is much easier to read, although the duplication in the install files is a bit annoying. We should probably also get rid of the movefiles for solvers, planners, and https method; but then we have to keep track of which methods exist in the apt package. Another disadvantage is that building only the documentation packages also requires building the code, as there's no way to turn off code building in the project.
* debian/control: Use versioned provides for same-ver library depsJulian Andres Klode2016-08-061-1/+3
| | | | | | | This simplifies the design a bit, as we do not need to read the major ABI version number from some file / command. Gbp-Dch: ignore
* add myself to UploadersDavid Kalnischkies2016-06-271-1/+2
|
* Add a apt suggests powermgmt-baseNicolas Le Cam2016-06-271-1/+1
| | | | debian/apt.apt-compat.cron.daily is using on_ac_power utility
* move 'dump' solver from apt-utils to apt packageDavid Kalnischkies2016-06-081-2/+2
|
* use https instead of git for Vcs-GitDavid Kalnischkies2016-05-241-1/+1
| | | | | Reported-By: lintian: vcs-field-uses-insecure-uri Git-Dch: Ignore
* no-change bump of Standards-Version to 3.9.8David Kalnischkies2016-05-241-1/+1
| | | | We don't have no menu file.
* move gnupg|gnupg2 from apt Depends to RecommendsDavid Kalnischkies2016-05-011-1/+2
| | | | | | | | | | | | apt doesn't need gnupg in its main execution paths to function, especially the Release file verification is done with gpgv only. It is only used by apt-key for advanced key management functionality most user will never use nor need. The intend is to demote it eventually to Suggests, but we opt here for a staged downgrade as there are still third-party repositories out there which require apt-key functionality without depending on gnupg (or apt for that matter).
* Use systemd.timer instead of a cron jobMichael Vogt2016-04-011-1/+1
| | | | | | | | | | | | | | | | | | | | | | The rational is that we need to spread the load on the mirrors that apt update and unattended-upgrades cause. To do so, we leverage the RandomizeDelay feature of systemd. The other advantage is that the timer is not run at a fixed daily.daily time but instead every 24h. This also fixes the problem that the randomized deplay in the current apt.cron.daily causes other cron jobs to be deplayed. A compatibility cron job is also provided for systems that do not use systemd. Note that the time is fired two times a day, but the logic inside of apt.systemd.daily will ensure (via stamp files) that the servers are hit at most every 24h. Firing two times a day helps with the worst case update time and it also helps with systems that are not always on. LP: #246381, #727685 Closes: #600262, #709675, #663290
* debian/control: Set Standards-Version to 3.9.7Julian Andres Klode2016-03-061-1/+1
| | | | | | | We do not follow the recommendation with regards to placement of documentation in apt-doc, as we install in apt-doc, but it's only a recommendation and I don't want think we should move them.
* Drop the g++ build-dep, transition is doneJulian Andres Klode2016-02-031-2/+1
| | | | | | It's not cross-satisfiable. Reported-by: Helmut Grohne
* Version the build-depends on liblz4-dev to >= 0.0~r126Julian Andres Klode2016-01-091-1/+1
| | | | | We need r126 of lz4, as this introduces the lz4frame.h header.
* Bump dpkg-dev and debhelper build-dep to make lintian happyJulian Andres Klode2016-01-091-1/+1
| | | | | | | This is not really needed anymore, as those are in stable, but as they are versioned already, let's just do it. Gbp-Dch: ignore
* Do not break apt-file (<< 3.0~exp1~), 2.X works fineJulian Andres Klode2016-01-091-1/+1
| | | | | There's no point in breaking all older apt-file versions just because one old experimental upload was broken.
* Break apt-file (<< 3.0~exp1~)Julian Andres Klode2016-01-081-1/+1
| | | | Gbp-Dch: ignore
* libapt-pkg5.0: Add Breaks appstream (<< 0.9.0-3~)Julian Andres Klode2016-01-081-1/+1
| | | | | | This ensures that a compatible version of appstream is installed, that is, one that disables lz4 compression for its data.
* FileFd: (native) LZ4 supportJulian Andres Klode2016-01-071-1/+1
| | | | | Implement native support for LZ4 compression, using the official lz4 library.
* Allow building without libgtest-dev under <nocheck> build profileHelmut Grohne2016-01-031-1/+1
| | | | | | | | | | | | | | I'd like to avoid pulling libgtest-dev into the bootstrap set. Fortunately, libgtest-dev is only used for testing apt and apt correctly implements DEB_BUILD_OPTIONS=nocheck now. So this bug is about getting rid of the Build-Depends. Simply removing it (by adding a build profile) is not sufficient however as configure fails hard, so an additional bit is necessary to cover for that. Closes: #809726
* Add bash-completion support for the "apt" commandMichael Vogt2016-01-021-1/+1
| | | | | | | | | | | | | The apt bash-completion support was submited to the bash-completion package as a patch in May 2014. It is still not included to this date and because it is an important feature for many users it is now part of apt until the bash-completion package is mantained more actively again. Note that the "Relaces" line is only required for Ubuntu it will have no effect on Debian. Closes: #747094
* add a apt breaks (apt-utils << 1.1.3) for partial-upgradesDavid Kalnischkies2015-12-011-1/+1
| | | | | | | | You could think a0bf789783ea283914d059aea0f4d0f77d6bbaaf would be enough, but it turns out its only half of the puzzle. Closes: 806765 Suggested-By: Julian Andres Klode <jak@debian.org>
* add apt-utils Depends apt (= ${binary:Version})David Kalnischkies2015-11-291-1/+1
| | | | | | As we ship some tools in apt-utils which depend on our private library we have to ensure that apt-utils depends on a proper apt version. An exact version is probably a bit much, but the simplest way out.
* unbreak the copy-method claiming hashsum mismatch since ~exp9David Kalnischkies2015-11-041-1/+1
| | | | | | | | | | | | | | | | Commit 653ef26c70dc9c0e2cbfdd4e79117876bb63e87d broke the camels back in sofar that everything works in terms of our internal use of copy:/, but external use is completely destroyed. This is kinda the reverse of what happened in "parallel" in the sid branch, where external use was mostly fine, internal and external exploded on the GzipIndexes option. We fix this now by rewriting our internal use by letting copy:/ only do what the name suggests it does: Copy files and not uncompress them on-the-fly. Then we teach copy and the uncompressors how to deal with /dev/null and use it as destination file in case we don't want to store the uncompressed files on disk. Closes: 799158
* dereference redirect in Vcs-Browser URI to cgitDavid Kalnischkies2015-09-141-1/+1
| | | | Git-Dch: Ignore
* remove Christian Perrier from Uploaders as requestedDavid Kalnischkies2015-08-311-1/+1
| | | | | Closes: #783337 Thanks: Christian for all the l10n, code & social contributions!
* add a libapt-pkg recommends aptDavid Kalnischkies2015-08-271-0/+1
| | | | | | | | | | | | For many usecases like the acquire system libapt-pkg actually needs tools and config found in the apt package. apt tends to be installed everywhere libapt-pkg appears usually anyhow, but just in case to nudge users (and tools) in the right direction. Note that this isn't and shouldn't be a hard depends as there are usecases working perfectly without 'apt' and as this is such an esoteric problem incurring the costs arising from a Depends-Breaks-loop isn't deemd as worth it.
* Re-add support for G++ 4.8 and configure travis to use itJulian Andres Klode2015-08-171-1/+1
| | | | | | This makes tests work again! Gbp-Dch: ignore
* debian/control: Remove XS- from Testsuite and bump Standards-VersionJulian Andres Klode2015-08-141-2/+2
| | | | Thanks: Lintian