summaryrefslogtreecommitdiff
path: root/debian
Commit message (Collapse)AuthorAgeFilesLines
* Release 1.6~rc11.6_rc1Julian Andres Klode2018-04-152-1/+27
|
* Merge branch 'pu/zstd' into 'master'Julian Andres Klode2018-04-151-0/+1
|\ | | | | | | | | pu/zstd See merge request apt-team/apt!8
| * apt-pkg: Add support for zstdJulian Andres Klode2018-03-121-0/+1
| | | | | | | | | | | | | | zstd is a compression algorithm developed by facebook. At level 19, it is about 6% worse in size than xz -6, but decompression is multiple times faster, saving about 40% install time, especially with eatmydata on cloud instances.
* | set our two libapt libraries to prio:optionalDavid Kalnischkies2018-04-071-0/+2
| | | | | | | | | | | | The override file already implements this, so we just adapt to reality. Reported-By: lintian excessive-priority-for-library-package
* | remove duplicate changelog lines from 1.6~beta1 entryDavid Kalnischkies2018-04-071-9/+0
| | | | | | | | Whatever caused it, lets fix it.
* | Turn off seccomp sandboxing by defaultJulian Andres Klode2018-04-061-0/+8
| | | | | | | | | | | | LP: #1732030 Closes: #890489 Fixes meefik/linuxdeploy#869
* | Fix debian/NEWS entry for 1.6~beta1Julian Andres Klode2018-03-131-2/+2
|/
* Release 1.6~beta11.6_beta1Julian Andres Klode2018-02-261-0/+28
|
* apt.conf.autoremove: Add linux-cloud-tools to listJulian Andres Klode2018-02-231-0/+1
| | | | LP: #1698159
* Merge branch 'pu/not-valid-before' into 'master'Julian Andres Klode2018-02-191-0/+16
|\ | | | | | | | | Check that Date of Release file is not in the future See merge request apt-team/apt!3
| * Check that Date of Release file is not in the futureJulian Andres Klode2018-02-191-0/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | By restricting the Date field to be in the past, an attacker cannot just create a repository from the future that would be accepted as a valid update for a repository. This check can be disabled by Acquire::Check-Date set to false. This will also disable Check-Valid-Until and any future date related checking, if any - the option means: "my computers date cannot be trusted." Modify the tests to allow repositories to be up to 10 hours in the future, so we can keep using hours there to simulate time changes.
* | tests: install aptitude for test-method-mirrorDavid Kalnischkies2018-02-191-1/+1
|/ | | | | | | | This is an optional dependency for the test, but the skipping of the test is very noisy and checking that an unchanged aptitude isn't downright exploding with our libapt isn't a bad idea either. Gbp-Dch: Ignore
* Release 1.6~alpha71.6_alpha7Julian Andres Klode2018-01-181-0/+26
|
* Point people to salsa.d.o instead of anonscm.d.o for gitJulian Andres Klode2018-01-181-2/+2
|
* Drop obsolete Suggests on python-aptJulian Andres Klode2018-01-181-2/+1
| | | | | | | | This has not been used for a while. It was added for apt-mark in 7b4159cf2a4b7de10622c7e4e29247067358a3ab, but apt-mark has been rewritten in C++ quite some time ago. Closes: #887607
* apt-compat.cron.daily: Correctly handle undetermined power statusJulian Andres Klode2018-01-101-3/+3
| | | | | | | | If on_ac_power exits with 255 the script would fail at this point because set -e was set, but it should continue, as 255 means the power status could not be determined. LP: #1742378
* Release 1.6~alpha61.6_alpha6Julian Andres Klode2018-01-031-0/+51
|
* add apt-transport-mirror manpageDavid Kalnischkies2018-01-031-0/+1
| | | | | The mirror method is undocumented since 0.7.24, now with the reimplementation it is high time to get something written about it.
* document https options in new apt-transport-https manpageDavid Kalnischkies2018-01-031-0/+1
| | | | | | Same reasoning as with the previous commit for http with the added benefit of moving the hard to discover and untranslated example config into a manpage which could be translated.
* document http options in new apt-transport-http manpageDavid Kalnischkies2018-01-031-0/+1
| | | | | | We had documentation for the http transport in our "catch-all" apt.conf manpage, but it seems benefitial to document transports in their own manpage instead of pushing them all into one.
* apt.daily: fix several "shellcheck" annotationsChristian Göttsche2018-01-021-29/+29
| | | | | | | | | Various corrections, mostly quoting, which shouldn't be a problem for us as we tend to act in "sane" environments, but just to be sure. [commit message written by committer] References: Debian bugreport #849636
* apt.daily: remove unused dbus signal for apt updateDavid Kalnischkies2018-01-021-9/+0
| | | | | | | | | | | | | | | | | The signal was introduced with the introduction of the script itself, but seems to have never got any user as all references to it I can find are references to other code appearing in the cronjob. It is also the wrong place nowadays as the cronjob is just one place an update can be triggered by, so if notifications about an update being run are desired it is better to use a hook which will be called by all update calls (script, cron, user, …). Removing this code solves also the problem of improving the check to avoid running into problems with security systems like SELinux. References: 0c1326826fd23ce859db8e923c37b7199c6da2c8 Closes: 849636
* update libapt-pkg symbols fileDavid Kalnischkies2017-12-131-11/+7
| | | | | Beside adding the relatively new Item::Proxy method we are also slightly preparing for gcc-8.
* Run wrap-and-sortJulian Andres Klode2017-11-191-4/+6
| | | | Clean up the control file a bit.
* Add Breaks: aptitude (<< 0.8.10) for gzip method removalJulian Andres Klode2017-11-161-1/+1
| | | | | aptitude used to use gzip:// for changelog URLs, but is now fixed to use store.
* Release 1.6~alpha51.6_alpha5Julian Andres Klode2017-11-121-0/+11
|
* [amend] Use a versioned breaks for a-t-https in apt1.6_alpha4Julian Andres Klode2017-11-051-1/+1
| | | | | | | We need to use a versioned breaks again, otherwise the transitional package would not be installable. Gbp-Dch: ignore
* Release 1.6~alpha4Julian Andres Klode2017-11-051-0/+8
|
* Add ${misc:Depends} to apt-transport-https dependsJulian Andres Klode2017-11-051-1/+1
| | | | | | Makes lintian happy, but is basically useless Gbp-Dch: ignore
* Re-introduce a transitional apt-transport-httpsJulian Andres Klode2017-11-051-0/+9
| | | | | This fixes issues with debootstrap. The package will disappear after the release of buster.
* debian: Bump Standards-Version to 4.1.1Julian Andres Klode2017-10-291-1/+1
| | | | No further changes required.
* debian: Set Rules-Requires-Root: noJulian Andres Klode2017-10-291-0/+1
| | | | We don't need fakeroot for building!
* Release 1.6~alpha31.6_alpha3Julian Andres Klode2017-10-281-0/+15
|
* debian/tests/control: Add dpkg so we get triggered by itJulian Andres Klode2017-10-261-1/+1
| | | | | | We do want to get our autopkgtests triggered by dpkg uploads in Ubuntu, but this does not happen because we don't have an explicit dependency on it. Add one.
* Release 1.6~alpha21.6_alpha2Julian Andres Klode2017-10-261-0/+11
|
* Release 1.6~alpha11.6_alpha1Julian Andres Klode2017-10-232-2/+30
|
* Sandbox methods with seccomp-BPF; except cdrom, gpgv, rshJulian Andres Klode2017-10-222-0/+14
| | | | | | | | | | | | This reduces the number of syscalls to about 140 from about 350 or so, significantly reducing security risks. Also change prepare-release to ignore the architecture lists in the build dependencies when generating the build-depends package for travis. We might want to clean up things a bit more and/or move it somewhere else.
* Drop curl method and apt-transport-https packageJulian Andres Klode2017-09-244-25/+1
| | | | | This automatically removes any old apt-transport-https, as apt now Breaks it unversioned.
* Drop obsolute Testsuite: autopkgtest headerJulian Andres Klode2017-09-241-1/+0
|
* Drop obsolete dh-systemd build-depJulian Andres Klode2017-09-241-1/+0
|
* Bump Standards-Version to 4.1.0Julian Andres Klode2017-09-241-1/+1
|
* Release 1.51.5Julian Andres Klode2017-09-241-0/+6
|
* Release 1.5~rc41.5_rc4Julian Andres Klode2017-09-131-0/+10
|
* apt-daily: Do not Wants=network-online, and add some more After=Julian Andres Klode2017-09-111-2/+1
| | | | | | | | | We now wait for being online ourselves, so all we need to wait on is for services we are using to be online first. This avoids severe boot slowdowns by other services having specified an After=network-online.target without a Wants=. Gbp-Dch: Full
* Release 1.5~rc31.5_rc3Julian Andres Klode2017-09-101-0/+8
|
* Release 1.5~rc21.5_rc2Julian Andres Klode2017-09-091-0/+32
|
* Directly link against libudev on Linux systemsJulian Andres Klode2017-09-091-0/+1
| | | | | | | | | | | | | | | | | | | We previously dlopen()ed it, but it seems painful to do that without any real gain, except for possibly not having libudev in the address space and not having code #ifdefed for Linux. The latter means that we are a bit more likely to break stuff for non-Linux systems now if we play with udev, but at least we don't end up with it silently breaking because of a libudev ABI break. The existing function pointers in the struct were renamed and kept for compat purposes. Fixes Debian/apt#48 Also adjust prepare-release to strip [linux-any] from build-depends for travis.
* apt-daily: Pull in network-online.target in service, not timerJulian Andres Klode2017-09-092-2/+2
| | | | | There's no real point in pulling it in in the timer already, and it it somewhat saver to do so in the service.
* apt-daily: Wait for network before daily updatesJulian Andres Klode2017-09-091-0/+1
| | | | | | | | | | Introduce a new helper, apt-helper wait-online that uses NetworkManager and/or systemd-networkd to wait for them reporting online, with a time out of 30 seconds; and run that helper before running the daily update script. LP: #1699850 Gbp-Dch: Full
* Actually install apt_auth.conf manual pageJulian Andres Klode2017-09-011-0/+1
| | | | | | | | Seems we forgot to update the packaging when adding the manual page. Once we have translations for it, we need to add them as well... Closes: #873934