Simon McVittie
f0efb2e365
Release to unstable
2022-10-03 10:20:01 +01:00
Simon McVittie
45160fd088
d/watch: Adapt to Github website changes
2022-10-03 10:19:31 +01:00
Simon McVittie
f59d3ae52b
Revert "d/control, d/rules: Disable gjs-based tests on armel"
...
This reverts commit 87c78f16ad .
Adrian Bunk and Mike Hommey were able to fix mozjs102 on armel, so we
can continue to have gjs on that architecture for Debian 12.
2022-09-25 10:28:02 +01:00
Simon McVittie
48f12592f9
Release to unstable
2022-08-31 09:48:01 +01:00
Simon McVittie
f360f428e2
d/control, d/rules: Re-enable gjs tests on s390x
2022-08-31 09:47:24 +01:00
Simon McVittie
87c78f16ad
d/control, d/rules: Disable gjs-based tests on armel
...
It's looking as though mozjs102, and therefore the next gjs release,
will not support armel due to its lack of atomic instructions.
2022-08-31 09:45:39 +01:00
Simon McVittie
ff286cd633
Release to unstable
2022-08-05 10:00:13 +01:00
Simon McVittie
53261afd32
Build with libcurl http backend instead of libsoup2.4
...
This avoids library conflicts during the transition to GNOME 43, in
which core apps and libraries have switched to libsoup3, which conflicts
with libsoup2.4.
We still build-depend on libsoup2.4, because it's used in the test suite
and installed-tests.
Closes : #1016589
2022-08-05 09:59:13 +01:00
Simon McVittie
1d86052342
Release to unstable
2022-07-26 19:01:16 +01:00
Simon McVittie
75515f87a1
Update Lintian overrides
2022-07-26 19:00:52 +01:00
Simon McVittie
83b81989ab
Standards-Version: 4.6.1 (no changes required)
2022-07-26 19:00:43 +01:00
Simon McVittie
b4a9ca65bd
Drop patches that were applied upstream
2022-07-26 18:21:35 +01:00
Simon McVittie
0e9e864d6b
d/copyright: Update
2022-07-26 18:17:30 +01:00
Simon McVittie
bb45de2169
Update ABI symbols
2022-07-26 18:15:41 +01:00
Simon McVittie
14295403b4
New upstream release
2022-07-26 18:15:27 +01:00
Simon McVittie
35e3685924
Update upstream source from tag 'upstream/2022.5'
...
Update to upstream version '2022.5'
with Debian dir d2f2e62c69
2022-07-26 18:09:23 +01:00
Simon McVittie
97f9ef0bb1
New upstream version 2022.5
2022-07-26 18:09:15 +01:00
Colin Walters
15740d042c
Release 2022.5
2022-07-22 15:08:25 -04:00
Colin Walters
f50fe7008c
Merge pull request from GHSA-gqf4-p3gv-g8vw
...
Fix sign ed25519 verify
2022-07-22 15:05:27 -04:00
Luca Bruno
f2ea2f30cc
Merge pull request #2675 from HuijingHei/update-doc
...
Update doc about adding new function to libostree
2022-07-15 18:25:13 +00:00
Colin Walters
6200ec321f
Merge pull request #2676 from render-se/debos-docs
...
add debos to readme distribution build tools
2022-07-15 14:24:25 -04:00
Chris Mucciolo
6cb1227177
docs add debos to readme distribution build tools
2022-07-15 13:24:29 -04:00
Colin Walters
e0417957ea
rust: Add a test case for ed25519
...
Specifically, I verified that *before* the previous patch to the
ed25519 C code, the last bit of code would fail with a SIGSEGV when
trying to read the empty signature.
2022-07-14 17:13:51 -04:00
Colin Walters and Demi Marie Obenour
83e6357186
sign/ed25519: Verify signatures are minimum length
...
The ed25519 signature verification code does not
check that the signature is a minimum/correct length.
As a result, if the signature is too short, libsodium will end up
reading a few bytes out of bounds.
Reported-by: Demi Marie Obenour <demi@invisiblethingslab.com >
Co-authored-by: Demi Marie Obenour <demi@invisiblethingslab.com >
Closes: https://github.com/ostreedev/ostree/security/advisories/GHSA-gqf4-p3gv-g8vw
2022-07-14 17:13:51 -04:00
Huijing Hei
7db2fe8cba
Update doc about adding new function to libostree
2022-07-14 16:05:53 +08:00
Colin Walters
ed1146738b
Merge pull request #2669 from HuijingHei/fix-kargs
...
Fix `ostree admin kargs edit-in-place` fails issue
2022-07-13 16:35:28 -04:00
Colin Walters
a3749efb1a
Merge pull request #2672 from cgwalters/initialize-sysroot-cleanups
...
sysroot: Have `ensure_writable` also always initialize
2022-07-13 16:35:17 -04:00
Colin Walters
035b290210
Merge pull request #2673 from cgwalters/assert-boot
...
sysroot: Add a few more assertions about `boot_fd`
2022-07-13 16:35:10 -04:00
Colin Walters
60853219d5
sysroot: Add a few more assertions about boot_fd
...
These places are all safe, but it would catch bugs in the future
more clearly to trip an assertion here.
2022-07-13 15:38:59 -04:00
Colin Walters
75aa7a22f6
sysroot: Have ensure_writable also always initialize
...
For historical reasons we have a fair bit of distinct sysroot
initialization going on. A lot of code is calling *just* the new
`ensure_writable()` API, which does basically what you'd expect...
except if we're not using a mount namespace.
Which is the case in unit tests and legacy setups.
Change this API to also ensure the sysroot is fully initialized
even in those cases. Specifically we'll have `self->sysroot_fd`.
For now, callers that need `/boot` also need to separately
call `_ensure_boot_fd()`.
2022-07-13 15:35:00 -04:00
Colin Walters
2c71655205
deploy: Ensure sysroot is initialized for kargs in place
...
Even without a mount namespace set up.
2022-07-13 15:32:05 -04:00
Colin Walters
7e7a3df99b
Merge pull request #2671 from matthiasbeyer/readme-rust-bindings-fix
...
Fix link to rust bindings
2022-07-12 16:03:09 -04:00
Huijing Hei
8f24e0826a
Add test to verify ostree admin kargs edit-in-place working
2022-07-12 20:56:18 +08:00
Huijing Hei
7b7b6d741b
Fix ostree admin kargs edit-in-place fails issue
...
Add func to set kernel arguments in place, instead of create new
deployment
Fix https://github.com/ostreedev/ostree/issues/2664
2022-07-12 16:27:00 +08:00
Jonathan Lebon
2f8e31d172
Merge pull request #2668 from cgwalters/sync-cargo-deny
2022-07-11 13:52:53 -04:00
Matthias Beyer
22946e9d96
Fix link to rust bindings
...
ostree-rs was merged into ostree, so link to the rust bindings within
this repository.
Signed-off-by: Matthias Beyer <mail@beyermatthias.de >
2022-07-11 08:55:43 +02:00
Colin Walters
51ac63aa28
Merge pull request #2666 from saqibali-2k/pr/bls-append
...
ostree-repo: bls-append-except-default followup
2022-07-08 09:41:04 -04:00
Colin Walters
d3762be9b3
deny: Sync with rpm-ostree
...
This extends the license set basically and ignores private repos
(which we don't have any yet).
2022-07-08 09:33:18 -04:00
Saqib Ali
d7107e3036
ostree-repo: bls-append-except-default followup
...
This PR is followup from https://github.com/coreos/coreos-assembler/pull/2863
Summary of changes:
- Moved bls-append-except-default parsing logic to reload_sysroot_config()
- Made sure heap allocated memory is being freed
2022-07-07 16:06:11 -04:00
Colin Walters
c93fb71913
Merge pull request #2667 from cgwalters/deploy-require-repo
...
lib: Stop using old `ostree_sysroot_get_repo()` API
2022-07-06 17:13:23 -04:00
Colin Walters
becc18936f
lib: Stop using old ostree_sysroot_get_repo() API
...
It's falliable, and in one place we were actually ignoring
the error and leaving a `NULL` repo object which is just a trap
for people coming along later since it's rarely nullable.
Quite a while ago we switched to loading the repo at the same time
as the sysroot; convert callers in the library to use this infallible
accessor.
Prep for another patch which will use the repo object.
2022-07-06 07:47:57 -04:00
Colin Walters
0d911bf91f
Merge pull request #2632 from saqibali-2k/pr/prune-commit-only
...
lib/prune: speed up pruning by retrieving only commits
2022-06-30 09:08:54 -04:00
Jonathan Lebon
e527cdc582
Merge pull request #2661 from cgwalters/port-cap-std
2022-06-28 16:56:09 -04:00
Saqib Ali
a984871237
lib/prune: speed up pruning by retrieving only commits
...
After landing the new --commit-only functionality, we still noticed
exceedingly long pruning times in large repos. Lets add an optimization
that will only retrieve commit objects when --commit-only flag is used.
2022-06-27 08:04:50 -04:00
Colin Walters
e98988ba17
tests/inst: Port to cap-std
...
Part of an ongoing effort.
2022-06-24 16:23:05 -04:00
Colin Walters
bba9724317
Merge pull request #2660 from cgwalters/fix-load-file-api
...
repo: Metadata return values from `load_file` are not nullable
2022-06-24 14:30:33 -04:00
Jonathan Lebon
40703cad56
Merge pull request #2655 from nikita-dubrovskii/sdboot_rename
2022-06-24 12:49:50 -04:00
Jonathan Lebon
502ad96af2
Merge pull request #2659 from cgwalters/hackaround-cosa-systemd-unit-check
2022-06-24 10:49:19 -04:00
Colin Walters
52d6f4e790
tests/staged-deploy.sh: Hack around cosa systemd unit check
...
https://github.com/coreos/coreos-assembler/pull/2921 broke this
test which is intentionally causing a systemd unit to fail.
As they say, necessity is the mother of invention. They don't
say though that need always causes particularly *beautiful* things
to be invented...
2022-06-24 10:18:53 -04:00
Nikita Dubrovskii
14a7c0c74b
s390x: rename sd-boot to sdboot
...
Signed-off-by: Nikita Dubrovskii <nikita@linux.ibm.com >
2022-06-24 15:15:57 +02:00