1. 03 Apr, 2019 3 commits
    • Ritesh Raj Sarraf's avatar
    • Frédéric Dalleau's avatar
      Import Debian changes 2018.9.1-1co2 · 3283d314
      Frédéric Dalleau authored
      ostree (2018.9.1-1co2) unstable; urgency=medium
        [ Sjoerd Simons ]
        * Correct installation of ostree-boot files
      ostree (2018.9.1-1co1) unstable; urgency=medium
        * Rebase Apertis ostree patches on top of buster
          - 0001-u-boot-Add-fdtdir-option-when-generating-uEnv.txt.patch
          - Add-fdtdir-bootconfig-entry.patch
          - sysroot-Also-deploy-device-tree-files.patch
          - tests-sysroot-Test-deployment-of-dtb-files.patch
          - u-boot-distro-configuration-loader.patch
          - Add-test-for-distro-u-boot.patch
          - 0001-Add-bootloader-configuration-for-sd-boot.patch
          - Add-in-rollback-generation.patch
          - Determine-whether-boot-resides-on-the-partition.patch
          - Disable-u-boot-distro-test.patch
      ostree (2018.9.1-1) unstable; urgency=medium
        * d/tests/build: Mark as superficial (see #904979)
        * New upstream release
          - d/libostree-1-1.symbols: Update
        * Skip installation of new ostree-finalize-staged.path unit, which
          should be in ostree-boot when added (see #824650)
        * Override lintian warning for /usr/share/ostree/trusted.gpg.d/README-gpg
          not being in /usr/share/doc: it documents the directory in which it is
      ostree (2018.8-2) unstable; urgency=medium
        [ Simon McVittie ]
        * ostree-tests: Remove gjs dependency on s390x.
          mozjs60 doesn't work on s390x, so gjs is in danger of being removed
          from that architecture (see #909536). The test that uses JS is
          automatically skipped if the interpreter is missing.
          (Closes: #910286)
        * Standards-Version: 4.2.1 (no changes required)
        [ Ondřej Nový ]
        * d/tests: Use AUTOPKGTEST_TMP instead of ADTTMP
        * d/changelog: Remove trailing whitespaces
      ostree (2018.8-1) unstable; urgency=medium
        * New upstream release
          - d/p/debian/Skip-test-pull-repeated-during-CI.patch:
            Drop, applied upstream
          - d/copyright: Update
        * Standards-Version: 4.2.0 (no changes required)
      ostree (2018.7-2) unstable; urgency=medium
        * d/p/debian/Skip-test-pull-repeated-during-CI.patch:
          Skip a test that is non-deterministic and can spuriously fail,
          which is not suitable for build-time testing or gating migration in
      ostree (2018.7-1) unstable; urgency=medium
        * New upstream release
          - d/libostree-1-1.symbols: Update
          - Drop all patches, applied upstream
          - d/copyright: Remove details of Rust files not included in this
        * d/p/lib-pull-Fix-minor-memleak-in-error-path.patch:
          Apply a memory leak fix from upstream
        * Use upstream default ${libexecdir} now that Debian Policy allows
          /usr/libexec (via FHS 3.0)
        * Standards-Version: 4.1.5 (no changes required)
      ostree (2018.6-3) unstable; urgency=medium
        * d/p/avahi-Fail-immediately-if-we-can-t-talk-to-D-Bus-or-Avahi.patch:
          Mark as applied upstream
        * d/p/OstreeRepoFinderConfig-Fix-guint-gsize-confusion.patch:
          Add patch to fix incorrect type aliasing that caused assertion
          failures on 64-bit big-endian platforms (Closes: #902209)
      ostree (2018.6-2) unstable; urgency=medium
        * d/p/lib-repo-Fix-32-bit-format-string-error.patch:
          Apply patch from upstream to fix FTBFS on 32-bit architectures
          (Closes: #902194)
      ostree (2018.6-1) unstable; urgency=medium
        * New upstream release with support for peer-to-peer software
          collections, required by Flatpak's peer-to-peer app sharing feature
          - d/copyright: Update
          - d/libostree-1-1.symbols: Update
          - Build-depend on Avahi libraries
        * d/rules: Explicitly enable various desired libraries
        * d/p/avahi-Fail-immediately-if-we-can-t-talk-to-D-Bus-or-Avahi.patch:
          Add patch to avoid Flatpak test failures with this ostree if Avahi
          (or dbus-daemon --system) is not available on the build/test system
      ostree (2018.5-2) unstable; urgency=medium
        * d/tests/gnome-desktop-testing: Skip libostree/test-concurrency.py.test
          during autopkgtest. It does not appear to be completely reliable.
          (See #901170)
      ostree (2018.5-1) unstable; urgency=medium
        * New upstream release
          - d/copyright: Upstream clarified that only doc/ is CC-BY-SA-3.0 or
            GFDL-1.3-or-later, and doc/ isn't included in dist tarballs, so
            remove those licenses
          - d/libostree-1-1.symbols: Update (and sort)
          - d/p/Don-t-write-to-parent-repo.patch: Drop, applied upstream
          - d/ostree-boot.install: Add new systemd service
          - d/rules: Remove lib/systemd/system/ostree-finalize-staged.service
            until we build ostree-boot
        * ostree-tests: Add Lintian override for library-not-linked-against-libc.
          libreaddir-rand.so genuinely doesn't use any libc ABIs directly, only
          via GLib.
        * Standards-Version: 4.1.4 (no changes required)
      ostree (2018.4-2) unstable; urgency=medium
        * d/p/Don-t-write-to-parent-repo.patch:
          Add patch from upstream to prevent trying to write to a parent
          repository, fixing installation of Flatpak apps and runtimes into
          the system-wide repository (Closes: #895883)
      ostree (2018.4-1) unstable; urgency=medium
        * New upstream release
        * Update symbols file
        * Drop all patches, including one that was previously considered to
          be Debian-specific (moving to Python 3 for tests)
        * d/copyright: Update
      ostree (2018.2-1) unstable; urgency=medium
        * New upstream release
          - d/copyright: Update
          - d/libostree-1-1.symbols: Update
        * Mark patches as forwarded
        * Add gnupg to build-time test dependencies (and ostree-tests
          dependencies) as it is no longer transitively build-essential
      ostree (2018.1-1) unstable; urgency=medium
        * New upstream release
          - d/copyright: Update
          - d/patches: Remove, applied upstream
          - d/libostree-1-1.symbols: Update
        * Move Vcs-* to salsa.debian.org
          Make tests compatible with Python 3
        * d/control, d/p/debian/Use-Python-3-for-tests.patch:
          Switch build-time tests and autopkgtests to Python 3
      ostree (2017.15-2) unstable; urgency=medium
        * d/p/2018.1/tests-Don-t-assume-uid-primary-gid.patch: Mark as applied
          upstream in 2018.1
        * d/p/2018.1/tests-Assert-that-byte-order-[etc.].patch:
          Add patch to fix test failures on big-endian machines
          (Closes: #886218)
        * Temporarily disable gjs tests. gjs is not currently installable on
          buildds due to the glibc transition and a long dependency chain
          involving systemd-shim being preferred over systemd-sysv, which
          ends with libnih1 Depends: libc6 (<< 2.26).
      ostree (2017.15-1) unstable; urgency=medium
        * New upstream release
          - d/libostree-1-1.symbols: Update
        * d/rules: Stop forcing C.UTF-8 locale: the tests now do this internally
        * Standards-Version: 4.1.3 (no changes required)
        * d/p/tests-Don-t-assume-uid-primary-gid.patch: Mark as forwarded
      ostree (2017.14-1) unstable; urgency=medium
        * New upstream release
          - d/libostree-1-1.symbols: Update
        * Standards-Version: 4.1.2 (no changes required)
        * d/p/tests-Don-t-assume-uid-primary-gid.patch:
          Add patch to fix automated test failure when uid != primary gid
      ostree (2017.13-1) unstable; urgency=medium
        * New upstream release
          - d/patches: Drop all patches
          - d/copyright: Update
          - Update symbols file
        * d/control: Require dh-exec 0.23~, for build-profile support.
          Strictly speaking we might only need 0.15, but I'm not going to
          test versions older than the jessie backport.
        * Set Rules-Requires-Root to no
        * Standards-Version: 4.1.1 (no changes required)
      ostree (2017.12-2) unstable; urgency=medium
        * Disable gtk-doc if we are not going to build libostree-doc,
          in particular for architecture-specific builds. Note that it remains
          in Build-Depends (not Build-Depends-Indep) because it is also needed
          for gtkdocize during dh_autoreconf.
          - In particular this might fix FTBFS on sparc64, where highlight(1)
        * d/p/2017.13/lib-core-Init-struct-stat-buffer.patch,
          Add various bugfix patches from upstream
          - In particular, dealing with the possibility that EOPNOTSUPP != ENOTSUP
            should fix test failures on hppa.
        * d/p/2017.13/tests-Add-test-pull-bareuseronly.patch:
          Add more test coverage from upstream
          - d/rules: Make the new test executable
        * d/test.sh: Clean up ostree-trivial-httpd processes
        * d/test.sh: Don't repeat build-time tests if they fail once. They seem
          to be somewhat reliable now.
      ostree (2017.12-1) unstable; urgency=medium
        * New upstream release
          - Drop all current patches, applied upstream
          - Update symbols file
        * Add some post-release bug fix patches
        * Simplify autopkgtest now that test-local-pull seems to be stable
        * Unexport HTTP proxy variables in autopkgtest to work around lack of
          support for no_proxy, which breaks the tests on Ubuntu autopkgtest.
          We don't actually need Internet access, so this is OK.
        * debian/test.sh: Unexport HTTP proxy variables for build-time tests
        * Make build-time test failures fatal if they fail at least twice
          out of 5 tries (previously they had to fail at least 3 times)
        * Add patch to reinstate test-libglnx-shutil.c, which was missed out
          of the upstream tarball
      ostree (2017.11-2) unstable; urgency=medium
        * Replace patch with the version applied upstream in 2017.12
        * Standards-Version: 4.1.0 (no changes)
        * Add a patch to fix FTBFS in non-English locales
        * Add a patch to fix FTBFS if building as root with umask != 022,
          which for some reason debomatic does (Closes: #876138)
        * Add a patch from upstream to fix undefined behaviour with
          O_RDONLY|O_CREAT in rofiles-fuse
      ostree (2017.11-1) unstable; urgency=medium
        * New upstream release
          - Drop all current patches, applied upstream
          - Update symbols file
        * Adjust Description and Upstream-Name to emphasize libostree
        * Classify new ostree-tmpfiles.conf as part of ostree-boot, and so
          don't install it yet
        * Stop copying an old ostree-trivial-httpd.xml from debian/dist/
          into source tree. Upstream distributes it again, and has since
        * Add a patch to fix JavaScript tests with gjs 1.50.0, which is
          more strict about 'let'
        * Stop providing "ostree trivial-httpd" CLI, following upstream
          default behaviour. flatpak used to use it in its tests, but
          the version in stable no longer does.
      ostree (2017.10-1) unstable; urgency=medium
        * New upstream release
          - Update symbols file
          - Install new bash completions
        * Use dh_missing --fail-missing instead of dh_install --fail-missing
        * Only run tests when building architecture-dependent packages.
          The tests aren't so interesting that we want to run them again
          when splitting -arch/-indep builds.
        * Add patches to make the tests pass again when /var/tmp is on tmpfs,
          which does not support user xattrs
        * Add patch to remove useless #! from bash completions
        * Make build-time test failures fatal again, but only if they are
          reproducible (at least 3 times out of 5) for now
      ostree (2017.9-1) unstable; urgency=medium
        * New upstream release
          - Drop backported patch
          - Update symbols file
        * debian/rules: Adjust a comment to avoid Lintian thinking this is a
          dh_make template
    • Ritesh Raj Sarraf's avatar
      Import Upstream version 2018.9.1 · f037cf36
      Ritesh Raj Sarraf authored
  2. 28 Sep, 2018 3 commits
  3. 27 Sep, 2018 2 commits
  4. 19 Sep, 2018 2 commits
  5. 23 Aug, 2018 1 commit
  6. 22 Aug, 2018 1 commit
  7. 21 Aug, 2018 3 commits
  8. 20 Aug, 2018 4 commits
  9. 19 Aug, 2018 3 commits
    • Will Thompson's avatar
      repo: remove outdated note from write_config() docs · 2b198693
      Will Thompson authored
      Since 9dc6ddce it has not been true that
      'new_config' was simply ref'd: it's serialized, and then re-parsed into
      a new GKeyFile.
      Closes: #1707
      Approved by: jlebon
    • Will Thompson's avatar
      man/ostree.repo-config: improve min-free-space-* docs · ada5716f
      Will Thompson authored
      0 is not a valid value (the units are required), and 1MB is taken to
      mean 1048576 bytes, not 1000000 bytes (unlike other human-readable sizes
      in libostree, which are formatted by g_format_size(), and hence use
      power-of-10 units). It's probably a bit late to change this latter
      point, but the documentation should mention it.
      Define 'MB' etc. more precisely; include the byte counts in the
      examples; and improve the formatting of the min-free-space-* paragraphs.
      Signed-off-by: default avatarWill Thompson <wjt@endlessm.com>
      Closes: #1706
      Approved by: mwleeds
    • Jonathan Lebon's avatar
      ci: Bump rpm-ostree tag we build for tests · 57dbd176
      Jonathan Lebon authored
      The latest rpm-ostree release no longer requires `python3-devel` so `dnf
      builddep` here is no longer pulling it in, subsequently causing issues
      when building an older rpm-ostree release. Let's just bump the release
      tag so we don't have to also start keeping track of older dependencies.
      Closes: #1708
      Approved by: cgwalters
  10. 14 Aug, 2018 7 commits
    • Dan Nicholson's avatar
      repo: Add OSTREE_REPO_TEST_ERROR=invalid-cache env var · 4e6b13e8
      Dan Nicholson authored
      Add an invalid-cache test error flag to ensure that the code that checks
      for and recovers from a corrupted summary cache is hit. This helps make
      sure that the recovery path is actually used without resorting to
      Closes: #1698
      Approved by: cgwalters
    • Dan Nicholson's avatar
      tests: Test for recovery from corrupted summary cache · 1b5cb52d
      Dan Nicholson authored
      Check that recovery from a corrupted summary cache (cached summary
      doesn't match cached signature) works.
      Closes: #1698
      Approved by: cgwalters
    • Dan Nicholson's avatar
      lib/pull: Fetch summary if cached version doesn't match signature · e5061f54
      Dan Nicholson authored
      If for some reason the cached summary doesn't match the cached signature
      then fetch the remote summary and verify again. Since commit c4c2b5eb
      this is unlikely to happen since the summary will only be cached if it
      matches the signature. However, if the summary cache has been corrupted
      for any other reason then it's best to be safe and fetch the remote
      summary again.
      This is essentially the corollary to c4c2b5eb. Where that commit helps
      you from getting into the corrupted summary cache in the first place,
      this helps you get out of it. Without this the client can get wedged
      until a prune or the remote server republishes the summary.
      Closes: #1698
      Approved by: cgwalters
    • Dan Nicholson's avatar
      lib/pull: Add debug message when loading summary from cache · 1c69f1ed
      Dan Nicholson authored
      This helps when debugging issues with the cached summary handling.
      Closes: #1698
      Approved by: cgwalters
    • Dan Nicholson's avatar
      tests: Add tests for remote summary update races · ce4eb12f
      Dan Nicholson authored
      There have been subtle bugs in the past when a client pulls while the
      remote server is updating the summary. The client may get the old
      summary and new signature or vice versa. Add tests to simulate this
      behavior to make sure there aren't regressions in the future.
      Closes: #1698
      Approved by: cgwalters
    • Stefan Agner's avatar
      Avoid race condition in case tests directory does not exist · 4a389b30
      Stefan Agner authored
      Make sure the tests directory exists before symlinking files
      into it.
      Closes: #1703
      Closes: #1704
      Approved by: cgwalters
    • Alexander Larsson's avatar
      ostree_repo_pull_from_remotes_async: Fix leak of options · 0a53af80
      Alexander Larsson authored
      copy_option() unnecessarily passed ownership of the value
      to g_variant_dict_insert_value, but that already refs, so it was leaked.
      Closes: #1702
      Approved by: cgwalters
  11. 13 Aug, 2018 2 commits
  12. 01 Aug, 2018 5 commits
    • Jonathan Lebon's avatar
      lib/commit: Only auto-update summary if refs were written · 521e0ec3
      Jonathan Lebon authored
      Closes: #1693
      Approved by: mwleeds
    • Jonathan Lebon's avatar
      lib/config: Deprecate commit-update-summary option · 72a54fa8
      Jonathan Lebon authored
      Now that we have `auto-update-summary`, there is no point in having
      `commit-update-summary`. The latter also only had an effect through
      the `commit` CLI command, whereas the former is embedded directly in
      There is one corner case that slips through: `commit` would update the
      summary file even if orphan commits were created, which we no longer do
      here. I can't imagine anyone relying on this, so it seems safe to drop.
      Closes: #1689
      Closes: #1693
      Approved by: mwleeds
    • Jonathan Lebon's avatar
      lib/config: Rename change-update-summary to auto-... · 786ee6bd
      Jonathan Lebon authored
      Mildly bikeshed, though I find the name `auto-update-summary` to be
      easier to grok than `change-update-summary`. I think it's because it can
      be read as "verb-verb-noun" rather than "noun-verb-noun".
      Closes: #1693
      Approved by: mwleeds
    • Jonathan Lebon's avatar
      lib/refs: Use GLNX_HASH_TABLE_FOREACH_KV helper · 3e96ec98
      Jonathan Lebon authored
      Closes: #1693
      Approved by: mwleeds
    • Matthew Leeds's avatar
      lib/repo-pull: Use correct keyring for dynamic remotes · daa57b46
      Matthew Leeds authored
      Normally, a configured remote will only serve refs with one associated
      collection ID, but temporary remotes such as USB drives or LAN peers can
      serve refs from multiple collection IDs which may use different GPG
      keyrings. So the OstreeRepoFinderMount and OstreeRepoFinderAvahi classes
      create dynamic OstreeRemote objects for each (uri, keyring) pair. So if
      for example the USB mounted at /mnt/usb serves content from the
      configured remotes "eos-apps" and "eos-sdk", the OstreeRepoFinderResult
      array returned by ostree_repo_find_remotes_async() will have one result
      with a remote called something like
      file_mnt_usb_eos-apps.trustedkeys.gpg and the list of refs on the USB
      that came from eos-apps, and another result with a remote
      file_mnt_usb_eos-sdk.trustedkeys.gpg and the list of refs from eos-sdk.
      Unfortunately while OstreeRepoFinderMount and OstreeRepoFinderAvahi
      correctly only include refs in a result if the ref uses the associated
      keyring, the find_remotes_cb() function used to clean up the set of
      results looks at the remote summary file and includes every ref that's
      in the intersection with the requested refs, regardless of whether it
      uses a different remote's keyring. This leads to an error when you try
      to pull from a USB containing refs from different collection IDs: the
      pull using the wrong collection ID will error out with "Refspec not
      found" and the result with the correct keyring will then be ignored "as
      it has no relevant refs or they have already been pulled." So the pull
      ultimately fails.
      This commit fixes the issue by filtering refs coming from a dynamic
      remote, so that only ones with the collection ID associated with the
      keyring remote are examined. This only needs to be done for dynamic
      remotes because you should be able to pull any ref from a configured
      remote using its keyring. It's also only done when looking at the
      collection map in the summary file, because LAN/USB remotes won't have a
      "main" collection ID set (OSTREE_SUMMARY_COLLECTION_ID).
      Closes: #1695
      Approved by: pwithnall
  13. 31 Jul, 2018 1 commit
    • Colin Walters's avatar
      ostree-remount.service: RemainAfterExit=yes · dcd15229
      Colin Walters authored
      This is standard practice for units like this; e.g. it's what
      `systemd-remount-fs.service` does.  I think it may be part of
      or the whole cause for
      I haven't reproduced the problem exactly but it seems to me that
      if the unit starts and is GC'd, then when systemd goes to execute
      a later unit it might end up restarting it.
      A noticeable side effect of this is that `systemctl status ostree-remount`
      exits with code `0` as expected.
      Closes: #1697
      Approved by: jlebon
  14. 30 Jul, 2018 3 commits
    • bubblemelon's avatar
      bin/refs: Clarify --create error message · 61c37aa4
      bubblemelon authored
      Fix ref create error when existing rev not specified.
      Closes: #1690
      Approved by: jlebon
    • Matthew Leeds's avatar
      config: Add a core/change-update-summary option · 6869bada
      Matthew Leeds authored
      This commits adds and implements a boolean repo config option called
      "change-update-summary" which updates the summary file every time a ref
      changes (additions, updates, and deletions).
      The main impetus for this feature is that the `ostree create-usb` and
      `flatpak create-usb` commands depend on the repo summary being up to
      date. On the command line you can work around this by asking the user to
      run `ostree summary --update` but in the case of GNOME Software calling
      out to `flatpak create-usb` this wouldn't work because it's running as a
      user and the repo is owned by root. That strategy also means flatpak
      can't update the repo metadata refs for fear of invalidating the
      Another use case for this relates to LAN updates. Specifically, the
      component of eos-updater that generates DNS-SD records advertising ostree
      refs depends on the repo summary being up to date.
      Since ostree_repo_regenerate_summary() now takes an exclusive lock, this
      should be safe to enable. However it's not enabled by default because of
      the performance cost, and because it's more useful on clients than
      servers (which likely have another mechanism for updating the summary).
      Fixes https://github.com/ostreedev/ostree/issues/1664
      Closes: #1681
      Approved by: jlebon
    • Matthew Leeds's avatar
      lib/repo: Take exclusive lock while generating summary · fb36b62f
      Matthew Leeds authored
      This ensures that commits aren't deleted and refs aren't added, removed,
      or updated while the summary is being generated. This is in preparation
      for adding a repo config option that will automatically regenerate the
      summary on every ref change.
      Closes: #1681
      Approved by: jlebon