summaryrefslogtreecommitdiff
path: root/debian
Commit message (Collapse)AuthorAgeFilesLines
* Release 2.9.202.9.20Julian Andres Klode2024-12-281-0/+7
|
* Re-include std:: symbols in the symbols file as optional againJulian Andres Klode2024-12-281-1/+279
| | | | | | | This will restore most of the symbols from before and ensure reverse dependencies not depending on new symbols can migrate. It also ensures we see any missing symbols.
* symbols: Merge 2.9.19 and fix version for InsertErrnoJulian Andres Klode2024-12-231-2/+2
| | | | | | | | | | Somehow InsertErrno was wrongly formatted as symbol 0.8.11.4 1 and that caused dedup to miss-handle it. The 2.9.19 merge fixes that but kept "1" as the version, change it to say 0.8.11.4 instead.
* Release 2.9.192.9.19Julian Andres Klode2024-12-232-0/+34
|
* Merge branch 'symbols'Julian Andres Klode2024-12-231-119/+74
|\
| * Symbols: Merge stable, noble, testing, unstableJulian Andres Klode2024-12-231-119/+74
| | | | | | | | | | | | | | Hand edit 2.7.14build2 to 2.7.14 The funny 999:0misbuilt version number gets auto-reduced to the current version when building which is sad, but it works.
* | debian: Plug sqv into the package buildJulian Andres Klode2024-12-223-2/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Our goal is for each platform to have one blessed OpenPGP verification system: Platforms that support sqv get sqv, platforms that don't get gpgv. To do so we hardcode the architecture list at build time. At build time we check if /usr/bin/sqv exists, which is the condition that apt uses to see if it should build with sqv support. We use a slight hack here to build with sqv on the official Debian buildds but use gpgv on Ubuntu by abusing the fact that Ubuntu resolves alternative build dependencies, and gpgv is installed in the buildd image.
* | debian: Add default policy to allow SHA-1 self-signatures until 2026Julian Andres Klode2024-12-222-0/+3
|/ | | | | | | | Many repositories still have SHA-1 self-signatures, and they are not security relevant for APT repositories in the first place since we do not use a web of trust model, but rather a set of trusted keyrings, and the subkey can essentially be always considered trusted even if it cannot be verified.
* hashes, methods: Add OpenSSL backendsJulian Andres Klode2024-12-221-2/+1
| | | | | | | | | | | | | | | | | | | | Introduce an OpenSSL::Crypto backend for the hashes library and an OpenSSL::SSL backend for the TLS support in our https method. Many thanks to curl for showing the way with how to handle a CRL file. There are some memory leaks here with the TlsFd itself as well as the proxy support; and we should reorganize the code to generate the ssl object as late as possible. A peculiar aspect of OpenSSL is that SSL_has_pending() returns 1 even if SSL_read() will fail to read anything and return the equivalent of EAGAIN. We work around this here by also peeking ahead 1 byte. I was running a very high RTT connection from Germany to Australia for testing, and with the peeking it's using negligible amounts of CPU; before that, it was busy looping at 100%. Bad OpenSSL!
* Remove gnupg and versioned gpgv test dependsJulian Andres Klode2024-12-201-2/+1
|
* Use sq in the test suite, remove apt-keyJulian Andres Klode2024-12-191-0/+2
| | | | | | | | | | | | | Remove the test case for MD5 and expired signatures, as we can't create them (can't set signing digest, and can't set signature expiry). Tests for them have been added to test-method-gpgv instead. We override sq in a function with cert-store and key-store set to none. This supports both sq 0.40 and sq 1.0.
* Release 2.9.182.9.18Julian Andres Klode2024-12-191-0/+14
|
* Introduce automatic pager for read commandsJulian Andres Klode2024-12-181-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Automatically show the output of `show`, `policy`, `list`, `search`, `showsrc` in a pager. The pager setup is inspired by git's pager setup. Notably, the pager is found using APT_PAGER and PAGER variables. We wait for the pager to be setup somewhat correctly by using a notify pipe to figure out whether execvp() was succesful - then the pipe will read EOF as the other end got closed by CLOEXEC during exec - or not, then the pipe will contain an errno. We set up the correct handlers for signals and exit to close the fds and wait for the pager. Notably inside the signal handler we cannot flush our streams, only close them, so there is some duplication. We call the InitOutputPager() function from inside the various Do...() functions rather than setting it up generally in InitOutput(). Doing so allows us to first render the progress without a pager, and then setup the pager for the content only which improves user experience. When we setup a pager we also take care to disable standard input, as we should not be prompting users while a pager is running (the pager will be reading from the tty directly). We do this by dup2-ing() a /dev/null over it; if we just close()d the fd, another open() might reuse the fd number and problems could occur.
* Release 2.9.172.9.17Julian Andres Klode2024-12-071-0/+16
|
* Remove the apt-key manual page and add documentation to apt-secureJulian Andres Klode2024-12-071-2/+0
| | | | | | | We move the user configuration section to the top of the manual page as that is going to be what most are interested in and rewrite it to cover all the modern ways to configure keys in a succinct way.
* Stop installing apt-key, make it a test suite helperJulian Andres Klode2024-12-071-1/+0
|
* Release 2.9.162.9.16Julian Andres Klode2024-11-291-0/+8
|
* Release 2.9.152.9.15Julian Andres Klode2024-11-282-0/+32
|
* Release 2.9.142.9.14Julian Andres Klode2024-11-221-0/+39
| | | | | Oh well I accidentally committed everything from my work email today but I'm off today ...
* test: Ensure we test both gpgv-g10code and gpgv-sqJulian Andres Klode2024-11-221-0/+1
|
* Release 2.9.132.9.13Julian Andres Klode2024-11-201-0/+19
|
* tests: Temporarily disable valgrind-if-available on armhf and ppc64elJulian Andres Klode2024-11-201-1/+1
|
* Release 2.9.122.9.12Julian Andres Klode2024-11-181-0/+16
|
* Release 2.9.112.9.11Julian Andres Klode2024-11-141-0/+40
|
* Merge branch 'json-config' into 'main'Julian Andres Klode2024-11-141-0/+1
|\ | | | | | | | | JSON: Pass options to hooks in hello message See merge request apt-team/apt!389
| * test: Prettify JSON tests using jqJulian Andres Klode2024-11-121-0/+1
| | | | | | | | | | | | | | | | This also ensures that our JSON is actually correct JSON. echo may fail now with EPIPE, given that it is multiline, so wrap it in 2>/dev/null
* | Only run valgrind in tests if valgrind available on hostнаб2024-11-111-1/+1
| |
* | Move apt-extracttemplates to /usr/lib/apt in 'apt' packageJulian Andres Klode2024-11-113-1/+3
| | | | | | | | | | | | | | | | | | This is useful on every system and only was in apt-utils for historical reasons. Move it to the main apt package, and also move it out of the path. Add a symbolic link in /usr/bin to apt-utils and keep the manual pages in tere.
* | Apply messaging fixes from Robert KrátkýJulian Andres Klode2024-11-071-4/+4
| |
* | Remove ftp, rsh, ssh methods (disabled since 1.8)Julian Andres Klode2024-11-071-0/+12
|/ | | | | | | | | These methods have been unsupported and disabled since 1.8, remove them for the 3.0 cleanup. Please migrate to http instead. If you need ad-hoc access to a remote repository, you can run `python3 -m http.server` on that machine and use SSH port forwarding to run http over ssh.
* Release 2.9.102.9.10Julian Andres Klode2024-10-221-0/+22
|
* Release 2.9.92.9.9Julian Andres Klode2024-10-171-0/+19
|
* Release 2.9.82.9.8Julian Andres Klode2024-08-121-0/+13
|
* Release 2.9.72.9.7Julian Andres Klode2024-07-301-0/+26
|
* Release 2.9.62.9.6Julian Andres Klode2024-07-021-0/+16
|
* Release 2.9.52.9.5Julian Andres Klode2024-06-131-0/+23
|
* Release 2.9.42.9.4Julian Andres Klode2024-05-251-0/+27
|
* Release 2.9.32.9.3Julian Andres Klode2024-05-141-0/+52
|
* Release 2.9.22.9.2Julian Andres Klode2024-04-221-0/+40
|
* Release 2.9.12.9.1Julian Andres Klode2024-04-141-0/+20
|
* Release 2.9.02.9.0Julian Andres Klode2024-04-121-0/+32
|
* Release 2.7.142.7.14Julian Andres Klode2024-03-221-0/+32
|
* Add an artificial Conflicts: against libnettle8Steve Langasek2024-03-221-1/+2
| | | | | | to force upgrades in launchpad buildd chroots Gbp-Dch: full
* Release 2.7.132.7.13Julian Andres Klode2024-02-281-0/+21
|
* Do not require versioned dpkg-dev on CIJulian Andres Klode2024-02-281-1/+2
| | | | | Annotate the Build-Depends with a <!pkg.apt.ci> profile and use that in prepare-release when doing build-dep.
* Import Debian version 2.7.12+nmu12.7.12+nmu1Steve Langasek2024-02-285-6/+15
| | | | | | | apt (2.7.12+nmu1) unstable; urgency=medium . * Non-maintainer upload. * Rename libraries for 64-bit time_t transition. Closes: #1061896
* Release 2.7.12Julian Andres Klode2024-02-201-0/+29
|
* Move systemd units to /usr/libJulian Andres Klode2024-02-201-2/+2
| | | | Closes: #1054137
* Release 2.7.112.7.11Julian Andres Klode2024-02-131-0/+16
|
* Add public phased update APIJulian Andres Klode2024-02-131-0/+4
| | | | | | | | | | | | | | | | This moves the functions of the PhasedUpgrader class into various other classes so they can be publicly exposed. This introduces three new functions: pkgDepCache::PhasingApplied() tells you whether phasing should be applied to the package. pkgProblemResolver::KeepPhasedUpdates() keeps back updates that have phasing applied. pkgCache::VerIterator::IsSecurityUpdate() determines whether this version contains security fixes.
generated by cgit v1.2.3-70-g09d2 (git 2.46.0) at 2026-10-14 16:53:29 +0000