Colin Walters
0ff4bee743
sysroot: Add a public #define OSTREE_PATH_BOOTED
...
This is public API. Motivated by
https://github.com/coreos/rpm-ostree/pull/3325/files#diff-56528694f6f3213d6fb88d872f77291412dceec263b57166519843b13eca9a4dR30
2022-01-12 12:47:11 -05:00
Colin Walters
8aeceb9b88
Merge pull request #2514 from lucab/ups/drop-setenv
...
libostree/sepolicy: get rid of a g_setenv() call
2022-01-12 06:51:14 -05:00
Joseph Marrero Corchado
6567d82525
Merge pull request #2515 from cgwalters/cliwrap-lib
...
main: Also support CLI extensions in `/usr/libexec/libostree/ext`
2022-01-11 21:01:20 -05:00
Colin Walters
998154f8ff
main: Also support CLI extensions in /usr/libexec/libostree/ext
...
In fixing https://github.com/coreos/rpm-ostree/pull/3323
I felt that it was a bit ugly we're installing `/usr/bin/ostree-container`.
It's kind of an implementation detail. We want users to use
`ostree container`.
Let's support values outside of $PATH too.
For example, this also ensures that TAB completion for `ost` expands
to `ostree ` with a space.
2022-01-11 20:13:33 -05:00
Luca BRUNO
840cd7ab2d
libostree/sepolicy: get rid of a g_setenv() call
...
This removes a 'g_setenv()' call, which could potentially be unsafe
in a multi-thread context.
The current libselinux codebase does not seem to check for
`LIBSELINUX_DISABLE_PCRE_PRECOMPILED`, so I think this has no effects
nowadays.
Additionally, I could not find any reference to it in libselinux
git history, so I'm not sure if it ever played any role at all.
My current understanding is that this is coming from version
incompatibilities between an older libselinux in the build environment
and a newer policy (with precompiled regexs) in the target.
But from the ML discussion I found, I think it eventually got
solved in a different way, possibly by avoiding the policy binary
caches.
Refs:
* https://www.spinics.net/lists/selinux/msg14822.html
* https://github.com/ostreedev/ostree/pull/2513#discussion_r781042884
2022-01-11 15:56:13 +00:00
Luca Bruno
7cc8481907
Merge pull request #2513 from lucab/ups/setenv-error
...
ostree: check g_setenv return value
2022-01-10 17:38:50 +00:00
Luca BRUNO
0bdba574d7
ostree: check g_setenv return value
...
This adds proper return-value checks on g_setenv calls.
It fixes a static analysis warning highlighted by Coverity.
2022-01-10 13:33:36 +00:00
Luca Bruno
92025018f6
Merge pull request #2512 from lucab/ups/variant-builder-error-memleak
...
libotutil: avoid leaking builder memory on error
2022-01-10 13:32:25 +00:00
Simon McVittie
313909dd80
Release to experimental
2022-01-10 12:42:25 +00:00
Simon McVittie
336f3b8c55
ostree Breaks flatpak-builder (<< 1.2.1-2~)
...
Previous versions relied on being able to use FUSE 2 options that are no
longer supported by FUSE 3, so prepare a lockstep transition.
2022-01-10 12:42:04 +00:00
Luca BRUNO
0b1a085692
libotutil: avoid leaking builder memory on error
...
This swaps the order of a couple of input sanity checks, in order
to fix a minor memory leak due to an early-return on the error
path.
Memory for the result is now allocated only after input has been
sanity-checked.
It fixes a static analysis warning highlighted by Coverity.
2022-01-10 09:30:11 +00:00
Simon McVittie
c128e91bc3
Release to experimental
2022-01-07 10:44:58 +00:00
Simon McVittie
3172dd9cc7
Update syntax of Lintian overrides for newer Lintian
2022-01-07 10:44:45 +00:00
Simon McVittie
3c7db4e811
Refresh patch series
...
Gbp-Dch: ignore
2022-01-07 10:41:46 +00:00
Simon McVittie
285a482083
Build using FUSE 3
2022-01-07 10:41:26 +00:00
Simon McVittie
97e4b7ad92
New upstream release
2022-01-07 10:41:10 +00:00
Simon McVittie
286a307f64
Update upstream source from tag 'upstream/2022.1'
...
Update to upstream version '2022.1'
with Debian dir 8a98c57b6b
2022-01-07 10:35:26 +00:00
Simon McVittie
13edc15773
New upstream version 2022.1
2022-01-07 10:35:19 +00:00
Luca Bruno
6cb097fb5e
Merge pull request #2509 from ostreedev/release-2022.1
...
Release 2022.1
2022-01-05 14:32:55 +00:00
Luca BRUNO
9d3ef89230
configure: post-release version bump
2022-01-05 10:03:59 +00:00
Luca BRUNO
6c903ab0b6
Release 2022.1
2022-01-05 10:03:03 +00:00
Dan Nicholson
8e3323fa2f
Merge pull request #2506 from lucab/ups/dependabot-config
...
github: add dependabot config
2022-01-04 06:17:08 -07:00
Luca BRUNO
2bfdcea2c5
github: add dependabot config
...
This adds a configuration file for dependabot, taking care of automatic
updates for all git submodules.
2022-01-04 10:34:30 +00:00
Luca Bruno
a3555f4d12
Merge pull request #2376 from smcv/fuse3
...
rofiles-fuse: Build using FUSE 3 if possible, falling back to FUSE 2
2022-01-04 10:27:14 +00:00
Simon McVittie and Luca BRUNO
43859b58f6
rofiles-fuse: Build using FUSE 3 if possible, falling back to FUSE 2
...
This adds build-time configuration logic to automatically detect
and switch between libfuse 2.x and 3.x.
Signed-off-by: Simon McVittie <smcv@collabora.com >
Co-authored-by: Luca BRUNO <luca.bruno@coreos.com >
2022-01-04 09:41:38 +00:00
Colin Walters
4d47733f98
Merge pull request #2505 from lucab/ups/bsdiff-error-throw
...
lib/static-delta: throw a proper error on bspatch failure
2022-01-03 16:57:52 -05:00
Colin Walters
371c2f12a6
Merge pull request #2504 from lucab/ups/bsdiff-CVE-2014-9862
...
bsdiff: bump submodule, pick up fix for CVE-2014-9862
2022-01-03 13:20:55 -05:00
Luca BRUNO
eae35b7f6e
lib/static-delta: throw a proper error on bspatch failure
...
This makes sure that a populated GError is returned when bsdiff
patching fails. The human-friendly label also helps in debugging.
2022-01-03 17:38:51 +00:00
Luca BRUNO
97399c166d
bsdiff: bump submodule, pick up fix for CVE-2014-9862
...
This updates the bsdiff submodule to latest upstream revision, in
order to pick up additional bound checks for CVE-2014-9862.
Update submodule: bsdiff
Ref:
* https://www.x41-dsec.de/lab/advisories/x41-2020-006-bspatch/
2022-01-03 16:13:01 +00:00
Colin Walters
a27ccc96fd
Merge pull request #2503 from lucab/ups/libostree-content-writer-header
...
lib: use ostree-content-writer header
2022-01-03 10:14:48 -05:00
Luca BRUNO
cf814284e0
lib: use ostree-content-writer header
...
This installs and exposes the content of `ostree-content-writer.h`,
so that library consumers can properly reference symbols defined
in that header.
2022-01-03 14:20:58 +00:00
Dan Nicholson
b1ddc6c248
Merge pull request #2502 from cgwalters/analyzer
...
two minor clang-analyzer fixes
2021-12-21 16:03:45 -07:00
Colin Walters
d2f5a0476f
tests: Fix clang-analyzer not seeing through g_error()
...
Basically due to the glib structured logging rework we lost the
`noreturn` attribute on `g_error()`.
This is fixed in glib as of https://gitlab.gnome.org/GNOME/glib/-/commit/f97ff20adf4eb7b952dd83e2c13046fe9e282f50
But we might as well just throw an error here.
2021-12-21 15:14:34 -05:00
Colin Walters
27c14f2be6
soup-uri: Fix clang-analyzer warning by dropping dead code
...
Fixes `Argument with 'nonnull' attribute passed null` by making
the code not exist at all anymore.
In upstream libsoup this code is gone too; it uses `GUri` from glib
which we probably could now too, but one thing at a time.
2021-12-21 15:13:56 -05:00
Luca Bruno
998863e74d
Merge pull request #2501 from lucab/ups/test-cli-extensions-tweak
...
tests/cli-extensions: tweak test logic
2021-12-21 14:08:48 +00:00
Luca BRUNO
5dbe37ce78
tests/cli-extensions: tweak test logic
...
This updates the test logic for CLI extensions, actually checking
for functional output from the subcommand.
It also cleans up some environmental leftover.
2021-12-21 10:18:30 +00:00
Colin Walters
7c6719995d
Merge pull request #2500 from lucab/ups/cli-extensions
...
main: add support for CLI extensions via external binaries
2021-12-20 13:47:31 -05:00
Luca BRUNO
513b3c09a5
main: add support for CLI extensions via external binaries
...
This adds some logic to detect and dispatch unknown subcommands to
extensions available in `$PATH`. Additional commands can be
implemented by adding relevant `ostree-$verb` binaries to the system.
As an example, if a `/usr/bin/ostree-extcommand` extension is provided,
the execution of `ostree extcommand --help` will be dispatched to that
as `ostree-extcommand extcommand --help`.
2021-12-20 10:00:02 +00:00
Simon McVittie
6138568601
Use debian/latest branch for packaging
2021-12-13 12:10:35 +00:00
Simon McVittie
afc491e41e
Release to unstable
2021-12-13 11:39:56 +00:00
Simon McVittie
61ba306e34
New upstream release
...
- Drop patch that was applied upstream
2021-12-13 11:39:39 +00:00
Simon McVittie
f5a8ff4d20
Update upstream source from tag 'upstream/2021.6'
...
Update to upstream version '2021.6'
with Debian dir 1fe0a45676
2021-12-13 11:29:29 +00:00
Simon McVittie
3f5d22676d
New upstream version 2021.6
2021-12-13 11:29:22 +00:00
Colin Walters
365559eaa8
Merge pull request #2498 from lucab/ups/test-assert-strings
...
tests: assert mandatory values are present
2021-12-10 13:25:03 -05:00
Luca BRUNO
f44eaf7e8c
tests: assert mandatory values are present
...
This adds a couple of string assertions to make sure that
the test run is sane.
2021-12-10 11:33:35 +00:00
Colin Walters
b56786c415
Merge pull request #2496 from lucab/ups/repo-asserts
...
lib/repo: fix problematic invariant checks
2021-12-07 19:58:23 -05:00
Colin Walters
490f515e18
Merge pull request #2494 from jmarrero/fsf-address
...
Update FSF license notices to use URL instead of address
2021-12-07 15:51:48 -05:00
Luca BRUNO
58bdfb90c9
lib/repo: do no return a NULL on failure
...
This turns an existing check into an assert. The previously returned
NULL may result in confusing callers, as none of them is checking for
that.
2021-12-07 16:24:56 +00:00
Luca BRUNO
4a0ebe507f
lib/repo: do no return an arbitrary mode on failure
...
This turns the existing check into an assert. Otherwise, the previous
code may return an arbitrary repo mode (bare) on failure.
2021-12-07 16:23:02 +00:00
Luca BRUNO
f1e24945fa
lib/repo: assert that writable state and error agree
...
This adds an assertion to check that writable stable and error
are in sync. The subsequent logic uses them interchangeably.
2021-12-07 16:21:21 +00:00