summaryrefslogtreecommitdiff
path: root/test/integration
Commit message (Collapse)AuthorAgeFilesLines
...
| * | | | | | | | add gzip test and todoMichael Vogt2014-08-012-2/+14
| | | | | | | | |
| * | | | | | | | make errors more consistentMichael Vogt2014-08-011-13/+3
| | | | | | | | |
| * | | | | | | | check hashes of compressed files as wellMichael Vogt2014-08-011-12/+17
| | | | | | | | |
| * | | | | | | | fix transactionid passingMichael Vogt2014-08-011-1/+0
| | | | | | | | |
| * | | | | | | | mve MetaKey into pkgAcqBaseIndexMichael Vogt2014-08-011-1/+3
| | | | | | | | |
| * | | | | | | | fail early (again) on gpg sig failuresMichael Vogt2014-07-311-6/+5
| | | | | | | | |
| * | | | | | | | ensure InRelease->Release is transactional as wellMichael Vogt2014-07-311-0/+18
| | | | | | | | |
| * | | | | | | | make test_unauthenticated_to_invalid_inrelease workMichael Vogt2014-07-311-4/+5
| | | | | | | | |
| * | | | | | | | Rework TransactionID stuffMichael Vogt2014-07-311-0/+180
| | | | | | | | |
| * | | | | | | | Download Release first, then Release.gpgMichael Vogt2014-07-211-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The old way of handling this was that pkgAcqMetaIndex was responsible to check/move both Release and Release.gpg in place. This breaks the assumption of the transaction that each pkgAcquire::Item has a single File that its responsible for.
| * | | | | | | | add pkgAcquire::TransactionHasError()Michael Vogt2014-07-211-0/+23
| | | | | | | | |
* | | | | | | | | make expected-size a maximum-size check as this is what we want at this pointMichael Vogt2014-10-071-0/+7
| | | | | | | | |
* | | | | | | | | fix test-cve-2013-1051-InRelease-parsing (fails now in the method)Michael Vogt2014-10-071-1/+1
| | | | | | | | |
* | | | | | | | | make http size check workMichael Vogt2014-10-0666-345/+3745
|\ \ \ \ \ \ \ \ \ | | |_|_|_|_|_|/ / | |/| | | | | | |
| * | | | | | | | ensure world-readability for trusted.gpg in postinstDavid Kalnischkies2014-10-021-0/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | apt-key creates trusted.gpg if it needs it with 644 nowadays, but before it ensured this, it was gpg creating it, which gives it by default 600. Not a problem as long as our gpgv is run as root, but now that we drop privileges we have to ensure that we can also read trusted.gpg files created by earlier apt-key versions. Closes: 647001
| * | | | | | | | support parsing of all hashes for pdiffDavid Kalnischkies2014-09-301-6/+42
| | |_|_|_|_|/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The fileformat of a pdiff index stores currently only SHA1 hashes. With this change, we look for all other hashes we support as well and take what we get, so that we can work after the release of jessie to get right of SHA1 if we want to. Note that the completely patched file is and was checked against the hashes collected from the Release file, so this transition isn't mission critical.
| * | | | | | | Test if TMPDIR is a directory in apt-key and if not unset itMichael Vogt2014-09-291-0/+1
| | |_|_|_|/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | This prevents a failure in mktemp -d - it will blindly trust TMPDIR and not use something else if the dir is not there.
| * | | | | | Merge branch 'debian/sid' into debian/experimentalMichael Vogt2014-09-293-125/+136
| |\ \ \ \ \ \ | | | |_|_|_|/ | | |/| | | | | | | | | | | | | | | | | | Conflicts: apt-pkg/acquire-item.cc
| | * | | | | rewrite compressed indexes test to check with all compressorsDavid Kalnischkies2014-09-253-122/+135
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Git-Dch: Ignore
| | * | | | | generalize Acquire::GzipIndexMichael Vogt2014-09-212-12/+10
| | | | | | |
| * | | | | | cleanup partial directory of lists in apt-get cleanDavid Kalnischkies2014-09-271-0/+34
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Not really the intended usecase for apt-get clean, but users expect it to help them in recovery and it can't really hurt as this directory should be empty if everything was fine and proper anyway. Closes: #762889
| * | | | | | allow fetcher setup without directory creationDavid Kalnischkies2014-09-273-9/+38
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | apt-get download and changelog as well as apt-helper reuse the acquire system for their own proposes without requiring the directories the fetcher wants to create, which is a problem if you run them as non-root and the directories do not exist as it greets you with: E: Archives directory /var/cache/apt/archives/partial is missing. - Acquire (13: Permission denied) Closes: 762898
| * | | | | | add gnupg and gnupg2 as test-dependencyDavid Kalnischkies2014-09-271-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | apt can work with both, so it has an or-dependency on them, but the tests want to play with both of them. Git-Dch: Ignore
| * | | | | | ensure apt-key del handles 16-byte key idsJames McCoy2014-09-271-0/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The original patch does not apply against the rewritten apt-key, but an additional test doesn't hurt. Closes: 754436
| * | | | | | add --readonly option for apt-key advDavid Kalnischkies2014-09-271-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Some advanced commands can be executed without the keyring being modified like --verify, so this adds an option to disable the mergeback and uses it for our gpg calling code. Git-Dch: Ignore
| * | | | | | use only one --keyring in gpg interactionsDavid Kalnischkies2014-09-271-18/+39
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We were down to at most two keyrings before, but gnupg upstream plans dropping support for multiple keyrings in the longrun, so with a single keyring we hope to be future proof – and 'apt-key adv' isn't a problem anymore as every change to the keys is merged back, so we have now the same behavior as before, but support an unlimited amount of trusted.gpg.d keyrings.
| * | | | | | add --secret-keyring option for apt-keyDavid Kalnischkies2014-09-271-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For some advanced usecases it might be handy to specify the secret keyring to be used (e.g. as it is used in the testcases), but specifying it via a normal option for gnupg might not be available forever: http://lists.gnupg.org/pipermail/gnupg-users/2013-August/047180.html Git-Dch: Ignore
| * | | | | | allow to specify fingerprints in 'apt-key del'David Kalnischkies2014-09-272-1/+9
| | | | | | |
| * | | | | | add a test for apt-key export{,all}David Kalnischkies2014-09-271-0/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Git-Dch: Ignore
| * | | | | | use apt-key to wrap gpg calls in testcasesDavid Kalnischkies2014-09-271-31/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | beside testing apt-key a bit it also avoids duplicating gpghome setup code in apt-key and the test framework Git-Dch: Ignore
| * | | | | | support gnupg2 as drop-in replacement for gnupgDavid Kalnischkies2014-09-271-83/+108
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If both are available APT will still prefer gpg over gpg2 as it is a bit more lightweight, but it shouldn't be a problem to use one or the other (at least at the moment, who knows what will happen in the future).
| * | | | | | use apt-key adv (+ gnupg) instead of gpgv for verifyDavid Kalnischkies2014-09-274-2/+35
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | apt-key does the keyring merge as we need it, so we just call it instead of reimplementing it to do the merging before gpgv. This means we don't use gpgv anymore (we never depended on it explicitly - bad style), but it also means that the message in apt-cdrom add is a bit less friendly as it says loudly "untrusted key", but for a one-time command its okay.
| * | | | | | fix progress output for (dist-)upgrade calculationDavid Kalnischkies2014-09-2723-0/+42
| | |_|_|_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Previously, we had a start and a done of the calculation printed by higher-level code, but this got intermixed by progress reporting from an external solver or the output of autoremove code… The higherlevel code is now only responsible for instantiating a progress object of its choosing (if it wants progress after all) and the rest will be handled by the upgrade code. Either it is used to show the progress of the external solver or the internal solver will give some hints about its overall progress. The later isn't really a proper progress as it will jump forward after each substep, but that is at least a bit better than before without any progress indication. Fixes also the 'strange' non-display of this progress line in -q=1, while all others are shown, which is reflected by all testcase changes.
| * | | | | fix testsMichael Vogt2014-09-232-3/+4
| | |_|_|/ | |/| | |
| * | | | Merge branch 'debian/sid' into debian/experimentalMichael Vogt2014-09-2313-16/+231
| |\| | | | | |_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: apt-pkg/acquire-item.cc apt-pkg/acquire-item.h apt-pkg/cachefilter.h configure.ac debian/changelog
| | * | relax grep to support newer curl output formatDavid Kalnischkies2014-09-201-1/+6
| | | | | | | | | | | | | | | | Git-Dch: Ignore
| | * | Fix regression when copy: is used for a relative pathMichael Vogt2014-09-191-4/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When we do a ReverifyAfterIMS() we use the copy: method to verify the hashes again. If the user uses -o Dir=./something/relative this fails because we use the URI class in copy.cc that strips away the leading relative part. By not using URI this is fixed. Closes: #762160
| | * | test/integration/test-apt-update-file: improve testMichael Vogt2014-09-192-0/+17
| | | |
| | * | improve test for commit daff4aMichael Vogt2014-09-171-0/+7
| | | |
| | * | Fix regression for file:/// uris from CVE-2014-0487Michael Vogt2014-09-171-0/+27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Do not run ReverifyAfterIMS() for local file URIs as this will causes apt to mess around in the file:/// uri space. This is wrong in itself, but it will also cause a incorrect verification failure when the archive and the lists directory are on different partitions as rename().
| | * | SECURITY UPDATE for CVE-2014-{0488,0487,0489}Michael Vogt2014-09-163-3/+105
| | | | | | | | | | | | | | | | | | | | | | | | incorrect invalidating of unauthenticated data (CVE-2014-0488) incorect verification of 304 reply (CVE-2014-0487) incorrect verification of Acquire::Gzip indexes (CVE-2014-0489)
| | * | don't call pager in non-terminals for changelogDavid Kalnischkies2014-09-091-3/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Most pagers are nice and default to running non-interactively if they aren't connected to a terminal and we relied on that. On ci.debian.net the configured pager is printing a header out of nowhere though, so if we are printing to a non-terminal we call "cat" instead. In the rework we also "remove" the dependency on sensible-utils in sofar as we call some alternatives if calling the utils fail. This seems to be the last problem preventing a "PASS" status on ci.debian.net, so we close the associated bugreport. Closes: 755040
| | * | fix progress report for upgrade and reinstallDavid Kalnischkies2014-09-081-0/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | APT treats upgrades like installs and dpkg is very similar in this, but prints still a slightly different processing message indicating that it is really an upgrade which we hadn't parsed so far, but this wasn't really visible as we quickly moved on to a 'known' state. More problematic was the reinstall case as apt hadn't recognized this for the package name detection, so that reinstalls had no progress since we introduced MultiArch.
| | * | fix and non-silent fail dpkg-overwrite error testDavid Kalnischkies2014-09-071-1/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Commit cbcdd3ee9d86379d1b3a44e41ae8b17dc23111d0 removes the space at the end of the debfile name dpkg send to us and we previously had included in the pmerror message we printed on the statusfd. Git-Dch: Ignore
| | * | detect terminal output with 'test -t' in testsDavid Kalnischkies2014-09-072-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Instead of trying to inspect /proc and the fds inside we use "test -t 1" instead as this is available and working on kfreebsd as well – not that something breaks if we wouldn't, but we like color. Git-Dch: Ignore
| | * | do use an 'unknown' arch-specification in testDavid Kalnischkies2014-09-071-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Using 'kfreebsd' here makes the test fail on a kfreebsd system (obviously), so we just use something totally madeup in the hope that this is less like to conflict in the future. Git-Dch: Ignore
| | * | implement --full in apt searchDavid Kalnischkies2014-09-071-1/+15
| | | |
| | * | support regular expressions in 'apt search'David Kalnischkies2014-09-072-1/+22
| | | | | | | | | | | | | | | | | | | | apt-cache search supported this since ever and in the code for apt was a fixme indicating this should be added here as well, so here we go.
| * | | Merge branch 'debian/sid' into debian/experimentalMichael Vogt2014-09-058-30/+2639
| |\| | | | |/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: apt-pkg/acquire-item.cc configure.ac debian/changelog doc/apt-verbatim.ent doc/po/apt-doc.pot doc/po/de.po doc/po/es.po doc/po/fr.po doc/po/it.po doc/po/ja.po doc/po/pt.po po/ar.po po/ast.po po/bg.po po/bs.po po/ca.po po/cs.po po/cy.po po/da.po po/de.po po/dz.po po/el.po po/es.po po/eu.po po/fi.po po/fr.po po/gl.po po/hu.po po/it.po po/ja.po po/km.po po/ko.po po/ku.po po/lt.po po/mr.po po/nb.po po/ne.po po/nl.po po/nn.po po/pl.po po/pt.po po/pt_BR.po po/ro.po po/ru.po po/sk.po po/sl.po po/sv.po po/th.po po/tl.po po/tr.po po/uk.po po/vi.po po/zh_CN.po po/zh_TW.po test/integration/test-ubuntu-bug-346386-apt-get-update-paywall
| | * Fix incorrect upgradable listing in "apt list" (thanks to Michael Musenbrock)Michael Vogt2014-09-051-0/+34
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The "apt list" command was using only the pkgDepCache but not the pkgPolicy to figure out if a package is upgradable. This lead to incorrect display of upgradable package when the user used the policy to pin-down packages. Thanks to Michael Musenbrock for the initial patch. Closes: #753297