aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* B90lintian requires bashism (closes: #604546)Junichi Uekawa2012-05-29
|
* first draft of a useful changelogJunichi Uekawa2012-05-29
|
* For testsuite, do not depend on approx instance. It's not always reliable ↵Junichi Uekawa2012-05-28
| | | | | | and confusing. Just trust autoconfiguration result here.
* policy 3.9.1 probably does not require any change.Junichi Uekawa2012-04-24
| | | | | | | | I wasn't sure if I needed to do something for the following, but maybe not: 7.1 Architecture restrictions and wildcards are also allowed in binary package relationships provided that the binary package is not architecture-independent.
* reviewed upgrading checklist for 3.9.0 compatibility.Junichi Uekawa2012-04-24
|
* release 0.210Junichi Uekawa2012-03-31
|
* Revert "test failure."Junichi Uekawa2012-03-31
| | | | This reverts commit eac13303c66da4e22447c1132b214593a3865130.
* test failure.Junichi Uekawa2012-03-31
|
* prepare 0.210Junichi Uekawa2012-03-31
|
* Having any test fail should make the regression test suite to fail and exit ↵Junichi Uekawa2012-03-31
| | | | with exit value of 1 instead of 0.
* move around echobacktime definition location. (closes: #666440)Junichi Uekawa2012-03-31
| | | | Seems like my regression test was happily claiming to be successful even when things have failed. Hmmm..
* update comments.Junichi Uekawa2012-03-31
|
* 0.209Junichi Uekawa2012-03-30
|
* prepare for releaseJunichi Uekawa2012-03-30
|
* Show current time in create / update operations too. (closes: #613854)Junichi Uekawa2012-03-28
| | | | It's probably useful to see them in the logs.
* Bug#664323: pbuilder: Auto completion is missing --allow-untrusted flagJunichi Uekawa2012-03-25
|
* 0.208Junichi Uekawa2012-03-13
|
* Bug#663283: pbuilder: pbuilder-satisfydepends failed due to --check-key ↵Thorsten Glaser2012-03-13
| | | | | | | | | | | | | | | | | | | | | | | | | deprecation bug Dixi quod… >You should not deprecate an option so suddenly, either. I’m Here’s a possible fix (untested). From 4fce2898d1d2cf292243316dd9f74b7f5f253a3b Mon Sep 17 00:00:00 2001 From: Thorsten Glaser <tg@mirbsd.org> Date: Sat, 10 Mar 2012 02:22:10 +0000 Subject: [PATCH] make --check-key and --allow-untrusted into a toggle of each other MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit so that --check-key A: does not error out (Closes: #663283) B: is silently accepted C: has the ability to un-do a previous --allow-untrusted Signed-off-by: Thorsten Glaser <tg@mirbsd.org>
* fix logging message and conditionality to make it less lines.Junichi Uekawa2012-03-13
| | | | | | I think we don't need the if. I'm not quite convinced ||true to kill the error message is a good idea
* fix space handling in additional-buildresults.Junichi Uekawa2012-03-13
|
* Bug#652634: Allow to copy additional files out of the build directoryGuido Günther2012-03-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | On Sat, Dec 24, 2011 at 05:22:05PM +0900, Junichi Uekawa wrote: > Hi, > > I'd use a shell array for specifying the values; but yes I think I > too wanted this feature at one point. Attached is a patch that uses a shell array and adds some documentation. Please apply if you see fit. > Would list of filename (I will imagine there will be requests for all > sorts of wildcards after release, which is kind of a pain) be useful > or a directory that a post-build script can write to after build be > useful? (I think qemubuilder needed something to do with a specific > directory that you can write to, but I will need to check how I did > it). I'd be great to have this in first and see how others use it. It wouldn't be a problem to introduce an ADDITIONAL_BUILD_RESULTS_DIR later. Cheers, -- Guido >From ad3569e07a9cc64cd5b126193cddf311e48180a6 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Guido=20G=C3=BCnther?= <agx@sigxcpu.org> Date: Mon, 19 Dec 2011 13:31:59 +0100 Subject: [PATCH] Add ADDITIONAL_BUILDRESULTS variable this can be used to copy additional build results out of the build directory. It's useful to e.g. preserve a xml testresult file when using a build system like Jenkins.
* factor out common code for apt key rings.Junichi Uekawa2012-03-13
|
* 0.207Junichi Uekawa2012-03-10
|
* add changelog with git dch -a to prepare for 0.207 release.Junichi Uekawa2012-03-09
|
* make longer lines wrap so reading patch files aren't as painful.Junichi Uekawa2012-03-09
|
* Bug#579028: pbuilder: installs untrusted packages without askingSimon Ruderich2012-03-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Package: pbuilder Version: 0.206 Tags: patch Followup-For: Bug #579028 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Dear Maintainer, The attached patch changes the defaults to always enforce signed repositories and aborts if an untrusted/manipulated package is installed. It adds the new option --keyring (APTKEYRINGS) to add additional keyrings, which are then used to verify the (local) signed repositories. This way no untrusted packages can be installed. To still allow untrusted/unsigned repositories - they are a very bad idea and allow remote attackers performing a MITM to take over the system, including all built packages - the new option - --allow-untrusted (ALLOWUNTRUSTED) was added. I tested it with the official Debian repository, signed and unsigned local repositories and it works fine for me. But I'm only a "normal" pbuilder user, so I might have missed something. Please test the patch. I haven't tested it with cdebootstrap, but it should work as well. The old PBUILDERSATISFYDEPENDSOPT --check-key option was deprecated and is no longer used (it emits a warning now) as validation is the default now. The patch also contains documentation updates for the new options/variables and updates for the NEWS file describing the necessary changes to continue using untrusted packages (but please don't do that - especially as a Debian developer). Please have a look and include the patch as soon as possible to fix this security issue. Regards, Simon - -- System Information: Debian Release: wheezy/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 3.2.0-1-amd64 (SMP w/8 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages pbuilder depends on: ii cdebootstrap 0.5.8+b1 ii coreutils 8.13-3 ii debconf [debconf-2.0] 1.5.41 ii debianutils 4.2.1 ii debootstrap 1.0.38 ii dpkg-dev 1.16.1.2 ii wget 1.13.4-2 Versions of packages pbuilder recommends: pn devscripts 2.11.4 pn fakeroot 1.18.2-1 pn sudo <none> Versions of packages pbuilder suggests: pn cowdancer <none> pn gdebi-core <none> pn pbuilder-uml <none> - -- debconf information excluded -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBCAAGBQJPVWhvAAoJEJL+/bfkTDL5ivAP/iayE8NRQnyk2HW8R+NiRXU3 uavLilwwpmEZyuciu8GxMQIAhT9HYd/DlkhF9I+yBSd30TO3fl0xW7YV9SaIZ+bv IPwnZbHri4KfeV9Zob/gd2jrT9A2QCoFRW0ny4XNCK3NvtWH5KuH+TG2Mq5CQqdN j4VJ3+76oJcbQbU7AUYXfvKDAsEb7gX+VwTEFLS4GrPkni/FIQJ8HHJhlTscyuCD gQANCoRFZHVSMaas3xqi9KYFKgVS4BZ5Z/9FZuLeY5kWBfcbnIhQloVOWTQZIMRI PhnqP1g62XlPu71K3a/Y2RMAcy3Gs6sUbW4OianIr2iskCndejih/MCb+3LmBFCg Ekxi/CcJGrc7a0pV57Qs8Iwkm1siRZZUxcp4xdD3mo9iayoOt4sfFyrvBCYryilQ 7JKpQc3iNoV3EQql6KBu5G+GmFFWHmokpLvVY27n8LgkV2YSb2wrgxqXPfxcYHj7 0j/y2MFw+HOX/d5YSESMLxn9aiZBi7CkMtlMemzqizxlNlL/+OOZiDsi4vdH8L/j Y0c2i9efjNeooc0/B9wASu/Ck8SWV8wW1EcfTag0p9Rp0avy4hoQUmG+MtgQsV0l MQuWWysyxeJFX4Z8ooau82L6sIGC0L073JH6Y/C7uTOz9gKt+e5tV3fnU+pkWpqH oF3CcmlykKX4SYzhUI/e =6EPj -----END PGP SIGNATURE----- >From cadc48fb599d436577a6efedc7f25e175652a3a1 Mon Sep 17 00:00:00 2001 Message-Id: <cadc48fb599d436577a6efedc7f25e175652a3a1.1330997290.git.simon@ruderich.org> From: Simon Ruderich <simon@ruderich.org> Date: Tue, 6 Mar 2012 02:00:48 +0100 Subject: [PATCH] Enforce valid signed repositories by default.
* Bug#660838: pbuilder: Add complete bash_autocompletion for all flags and ↵Maarten Bezemer2012-03-09
| | | | | | | | | | | | | | | | | | | | | | | arguments Package: pbuilder Version: 0.206 Severity: normal Tags: patch Currently, pbuidler only supports bash_completion for the commands (first argument) and filename completion for the .dsc file. This patch adds additional support for all flags and filename/directory completion for flags that require this. The patch is submitted (and accepted) to Ubuntu in two phases, see these bug reports: - https://bugs.launchpad.net/ubuntu/+source/pbuilder/+bug/770529 - https://bugs.launchpad.net/ubuntu/+source/pbuilder/+bug/933339 Please consider to apply this patch. Thanks in advance, Maarten *** bash_completion.debdiff
* Revert "Bug#659581: pbuilder: does not autocomplete filename in all cases ↵Junichi Uekawa2012-03-09
| | | | | | correctly" This reverts commit 8ee2feeca1df91e0a5f1cdb8762ebb5da4f1aaa3.
* Bug#660386: pbuilder: Remove /usr/X11R6/bin from default PATHJunichi Uekawa2012-03-09
| | | | It hasn't been around since squeeze time, should be safe to remove.
* Bug#659703: pbuilder: Typo in error messageMaarten Bezemer2012-03-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | Package: pbuilder Version: 0.206 Severity: minor Tags: patch User: ubuntu-devel@lists.ubuntu.com Usertags: origin-ubuntu precise ubuntu-patch There is a typo in an error message, introduced in http://anonscm.debian.org/gitweb/?p=pbuilder/pbuilder.git;a=commit;h=163e0751e2066cd24ec4de61f30489b5a21161e8 *** /tmp/tmpQkEY6_ This patch corrects the typo. Thanks for considering the patch. -- System Information: Debian Release: wheezy/sid APT prefers oneiric-updates APT policy: (500, 'oneiric-updates'), (500, 'oneiric-security'), (500, 'oneiric'), (100, 'oneiric-backports') Architecture: amd64 (x86_64) Kernel: Linux 3.0.0-15-generic (SMP w/2 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash
* Bug#659581: pbuilder: does not autocomplete filename in all cases correctlyMaarten Bezemer2012-03-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Package: pbuilder Version: 0.204 Severity: normal Tags: patch User: ubuntu-devel@lists.ubuntu.com Usertags: origin-ubuntu precise ubuntu-patch When the pbuilder commands are used without starting with -- the auto completion of filenames does not work. Also, the filename auto completion does not take directories into account. *** /tmp/tmp_zb98I In Ubuntu, the attached patch was applied to achieve the following: * Auto complete filenames not working when not adding -- to the command (LP: #770529) * Add directories to filename auto completion Thanks for considering the patch. -- System Information: Debian Release: wheezy/sid APT prefers oneiric-security APT policy: (990, 'oneiric-security'), (900, 'oneiric-updates'), (500, 'oneiric'), (400, 'oneiric-proposed'), (100, 'oneiric-backports') Architecture: amd64 (x86_64) Kernel: Linux 3.0.0-15-generic (SMP w/8 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash === modified file 'bash_completion.d/pbuilder'
* 0.206Junichi Uekawa2012-01-28
|
* Bug#598316: pbuilder: mirrorsite is not preseedableMatthew Palmer2012-01-27
| | | | | | | | | | | | | | | | | | | tag 598316 +patch usertags 598316 +patch-supplied thanks Attached are three patches fixing the three issues reported in this bug. Hopefully it should be fairly self-explanatory which one is for which. - Matt >From 3631bcda0a9bf0011d02268942ebc7756fd03ada Mon Sep 17 00:00:00 2001 From: Matt Palmer <mpalmer@hezmatt.org> Date: Mon, 13 Dec 2010 17:04:45 +1100 Subject: [PATCH] Allow arbitrary whitespace in sources.list. Ref: #598316 An overly restrictive regex means that people who like very neat sources.list files get penalised. Not any more.
* I think I need to quote PATHJunichi Uekawa2012-01-27
|
* Bug#623321: pdebuild needs to strip debbuildopts -A and -FPeter Eisentraut2012-01-26
| | | | | | | | | | | | Package: pbuilder Version: 0.199+nmu3 Severity: normal Tags: patch pdebuild has some code that strips the options -b and -B from --debbuildopts before calling dpkg-buildpackage -S, because that would conflict. It should do the same for the options -A and -F, because they have the same issue. Patch attached.
* Note that ${HOME} is usually /root if you run with sudo. (closes: #620337)Junichi Uekawa2012-01-26
| | | | It's probably unexpected for the first time.
* Bug#553594: rebuild/buildall tries to download with epoch in filenameSteve M. Robbins2012-01-25
| | | | Here's the patch I forgot yesterday...
* rebuild/buildall tries to download with acepack when building ack Bug#553607:Steve M. Robbins2012-01-25
| | | | | | | | | tags 553607 + patch thanks One-line patch attached, which I have tested. -Steve
* Bug#644507: pbuilder produces a confusing error message about the dcs ↵Junichi Uekawa2011-12-31
| | | | | | | filename if it can't read the dsc file. Make the message say that the file is not found instead of complaining about the validity of file name format, which is irrelevant.
* Bug#606687: ccache support fails in the face of su PATH manglingMatthew Palmer2011-12-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Package: pbuilder Version: 0.199 Severity: normal Tags: patch pbuilder's ccache support relies on being able to modify PATH when building packages. Unfortunately, su's documented behaviour is to reset PATH to a known safe setting (in login.defs), which breaks this (along with any other attempts to manually set PATH in pbuilderrc). Apparently (see irc-log.txt) su has had a bug in it that has failed to mangle PATH, which has kept this bug "hidden". However, the version of login in squeeze definitely resets PATH. The attached patch adjusts the way that commands are called in the su session, preserving the environment and making ccache work. -- System Information: Debian Release: 5.0.3 APT prefers stable APT policy: (500, 'stable'), (1, 'experimental'), (1, 'unstable'), (1, 'testing') Architecture: i386 (i686) Kernel: Linux 2.6.26-2-686 (SMP w/2 CPU cores) Locale: LANG=en_AU, LC_CTYPE=en_AU (charmap=ISO-8859-1) Shell: /bin/sh linked to /bin/bash Versions of packages pbuilder depends on: ii cdebootstrap 0.5.4 Bootstrap a Debian system ii coreutils 6.10-6 The GNU core utilities ii debconf [debconf-2.0] 1.5.24 Debian configuration management sy ii debianutils 2.30 Miscellaneous utilities specific t ii debootstrap 1.0.10lenny1 Bootstrap a basic Debian system ii wget 1.11.4-2+lenny2 retrieves files from the web Versions of packages pbuilder recommends: ii devscripts 2.10.35lenny7 scripts to make the life of a Debi ii fakeroot 1.11 Gives a fake root environment ii sudo 1.6.9p17-3 Provide limited super user privile Versions of packages pbuilder suggests: ii cowdancer 0.47 Copy-on-write directory tree utili pn gdebi-core <none> (no description available) pn pbuilder-uml <none> (no description available) -- debconf information excluded
* release 0.205Junichi Uekawa2011-12-25
|
* pbuilder: [INTL:pt_BR] Brazilian Portuguese debconf templates translation ↵Flamarion Jorge2011-12-24
| | | | (closes: #651265)
* Remove obsolete example files which were used in regression testsuite for ↵Junichi Uekawa2011-12-24
| | | | workarounds. (closes: #633055)
* add dpkg-dev to pbuilder dependency (closes: 623623)Junichi Uekawa2011-12-23
| | | | | | | There's a missing dependency: 'dpkg-architecture' is in dpkg-dev and pbuilder now depends on it. Sort the dependency in alpha order on the way.
* Coding style. Use $() instead of ``Junichi Uekawa2011-12-23
|
* release 0.204Junichi Uekawa2011-12-04
|
* fix test, and use standard lib for output.Junichi Uekawa2011-12-04
|
* installation preparation of packages.Junichi Uekawa2011-12-04
|
* revert change to changelogJunichi Uekawa2011-12-04
|
* Merge branch 'master' of ssh://git.debian.org/git/pbuilder/pbuilderJunichi Uekawa2011-12-04
|\