Roman Lebedev
a4cc9211d6
InRelease file: support Signed-By field
...
https://wiki.debian.org/DebianRepository/Format#Signed-By says:
> **Signed-By**
> An optional field containing a comma separated list of
> OpenPGP key fingerprints to be used for validating
> the next Release file. The fingerprints must consist
> only of hex digits and may not contain spaces.
> The fingerprint specifies either the key the Release file
> must be signed with or the key the signature key must be
> a subkey of. The later match can be disabled by appending
> an exclamation mark to the fingerprint.
>
> If the field is present, a client should only accept future updates
> to the repository that are signed with keys listed in the field.
> The field should be ignored if the Valid-Until field is not present
> or if it is expired.
For both the CLI tools and JSON, the field is taken as a string verbatim.
When specified, we must also provide `Valid-Until` field,
and i'm not sure there is an 'infinity' value for it,
so 100 years will have to do?
Fixes https://github.com/aptly-dev/aptly/issues/1497
2025-12-30 06:06:48 +03:00
André Roth
22bc2f9d0f
system-tests: improve sorted compare
...
sort both aptly output and gold file. output original output for
debugging on failure.
* Makefile: enable CAPTURE=1 env variable for capturing gold files
* docker-system-test: use AWS env vars for S3 tests
* fix system tests timing issue with order of gpg logs in publish tests
2025-04-25 00:51:59 +02:00
André Roth
5e91b10c8c
improve test to check for source pkgs with different name
2024-12-11 05:33:38 +01:00
Christoph Fiehe
f8f28e9554
Fixing tests and fix cleanup.
...
Signed-off-by: Christoph Fiehe <c.fiehe@eurodata.de >
2024-10-22 16:58:15 +02:00
André Roth
2a2e35c096
add test for publishing distribution with slash (/)
2024-04-11 19:37:51 +02:00
André Roth
d7cc9b89d1
system tests: use repository mirrors on S3 for reproducibility
...
no direct internet download from apt repositories,
which over time will change or cease to exist.
also migrate to gpg2 on newer ubuntu.
2024-02-05 13:04:45 +01:00
Mauro Regli
d1102e2e9c
Fix: Pipeline dependency on deb.debian.org, replace with archive
...
This should fix some tests, as a lot of them are dependent on
deb.debian.org which no longer supports Debian 9 "Stretch".
Instead we use archive.debian.org which will continue to contain
"Stretch" packages for a long time.
2023-05-15 11:15:48 +02:00
Sjoerd Simons
f61514edaf
Allow disabling bzip2 compression for index files
...
Using bzip2 generates smaller index files (roughly 20% smaller Packages
files) but it comes with a big performance penalty. When publishing a
debian mirror snapshot (amd64, arm64, armhf, source) without contents
skipping bzip speeds things up around 1.8 times.
```
$ hyperfine -w 1 -L skip-bz2 true,false -m 3 -p "aptly -config aptly.conf publish drop bullseye || true" "aptly -config aptly.conf publish snapshot --skip-bz2={skip-bz2} --skip-contents --skip-signing bullseye"
Benchmark 1: aptly -config aptly.conf publish snapshot --skip-bz2=true --skip-contents --skip-signing bullseye
Time (mean ± σ): 35.567 s ± 0.307 s [User: 39.366 s, System: 10.075 s]
Range (min … max): 35.311 s … 35.907 s 3 runs
Benchmark 2: aptly -config aptly.conf publish snapshot --skip-bz2=false --skip-contents --skip-signing bullseye
Time (mean ± σ): 64.740 s ± 0.135 s [User: 68.565 s, System: 10.129 s]
Range (min … max): 64.596 s … 64.862 s 3 runs
Summary
'aptly -config aptly.conf publish snapshot --skip-bz2=true --skip-contents --skip-signing bullseye' ran
1.82 ± 0.02 times faster than 'aptly -config aptly.conf publish snapshot --skip-bz2=false --skip-contents --skip-signing bullseye'
```
Allow skipping bz2 creation for setups where faster publishing is more
important then Package file size.
Signed-off-by: Sjoerd Simons <sjoerd@collabora.com >
2022-06-22 11:25:45 +02:00
Lorenzo Bolla
1361bf20dd
Revive skipped tests
2022-02-08 11:18:50 +01:00
Lorenzo Bolla
035d5314b0
Convert tests to Python 3
...
Fix #938
2022-01-27 15:06:33 +01:00
Lorenzo Bolla
787cc8e3ee
Fix system tests
2022-01-27 09:30:14 +01:00
Lorenzo Bolla
3201244d9b
Fix tests and fixtures relying on expired pgp keys
...
PGP tests relied on expired gpg keys: upgrade with newer Debian keys from
https://ftp-master.debian.org/keys.html .
Download new fixtures files from http://ftp.debian.org/debian/dists/buster/
2021-02-08 10:52:27 +01:00
Raúl Benencia
7a5ac3dbc2
Tests for custom and default suite
2019-09-06 23:42:56 +03:00
Andrey Smirnov
26098f6c8d
Print redirects being followed, drop mirror.yandex.ru.
...
Use CDN-backed Debian mirror to make tests run faster hopefully for
everyone. Redirects might be important to know what exactly is going on
when items are being downloaded.
2019-08-07 21:10:04 +03:00
Andrey Smirnov
2c91bcdc30
Bump Go versions for Travis, fix tests
...
Replace gometalinter with golangci-lint.
Fix system tests (wheezy is gone, replace with stretch).
Fix linter warnings.
2019-07-04 00:16:12 +03:00
Andrey Smirnov
61e00b5fbd
Test updates for Travis CI
...
Travis is running Trusty with GPG 2.0.x, which is
much different from 2.1.x.
Add tests for default key signing.
Add test for gpg1/2 in functional.
2018-10-10 01:34:58 +03:00
Oliver Sauder
e23e30eb44
Merge branch 'master' into with_installer
2018-09-21 13:26:15 +02:00
Andrey Smirnov
747b9752ce
Keep checksum of not compressed index file even if it's not uploaded
...
Fixes : #756
2018-07-14 00:17:36 +03:00
Oliver Sauder
b7323db31b
Add detached signature to installer hashsum file
2018-07-06 15:02:37 +02:00
Oliver Sauder
108b0ea226
Add support to mirror non package installer files
2018-07-06 15:02:37 +02:00
Andrey Smirnov
5b85522400
Implement 'legacy' Contents indexes to match Ubuntu <=16.04
...
Another index is created which unifies data for all the components.
This certainly requires more resources as we have to build yet another
index.
2018-04-11 00:57:15 +03:00
Oliver Sauder
b4f3573d11
Add acquire by hash when updating publish
2017-11-30 09:46:02 +01:00
Oliver Sauder
2bd0b786ea
Extend publish snapshot test with acquire by hash
2017-11-30 09:46:02 +01:00
Andrey Smirnov
a584b2e058
Fix bug with PoolPath field being overwritten on mirror update
...
While updating mirror, if package file is already in pool path,
field `PoolPath` was left as empty which results in package file
being unavailable later on while publishing.
2017-08-11 20:05:55 +03:00
Oliver Sauder
e3f1880ad4
Added support for NotAutomatic, ButAutomaticUpgrades and Origin fields
2017-07-05 15:08:02 +02:00
Andrey Smirnov
c798db8056
Add system's requirements.txt, enforce flake8 linter
...
Fix style issues in functional tests.
2017-04-28 00:05:11 +03:00
Andrey Smirnov
60cca0245b
Fix system tests.
2016-03-20 22:01:41 +03:00
Andrey Smirnov
a4e573bb07
Fix system tests after squeeze->squeeze-lts move.
2016-03-02 13:25:12 +03:00
Andrey Smirnov
77be7b9e3b
Support for SHA-512 hashes on publishing/downloads.
2016-02-18 12:01:51 +03:00
Andrey Smirnov
933b019f71
Fix -skip-contents + system tests. #142
2015-04-05 21:55:41 +03:00
Andrey Smirnov
4e3284cd98
Check contents of contents index being generated. #142
2015-04-02 01:19:51 +03:00
Andrey Smirnov
e0f284d68f
Check that contents files are generated. #142
2015-04-02 00:45:08 +03:00
Andrey Smirnov
99f6ffe1ca
Fix system test for content generation. #142
2015-04-02 00:29:49 +03:00
Andrey Smirnov
4b50f817d7
Fix system tests. #108
2014-09-30 23:09:57 +04:00
Andrey Smirnov
6514b87e3e
Add keyring for publish. #108
2014-09-30 21:25:52 +04:00
Andrey Smirnov
fae6e977c3
System tests for publishing snapshot from mirror with .udebs. #108
2014-09-30 19:40:16 +04:00
Andrey Smirnov
b365e5e0b2
System test: regular publish doesn't generate debian-installer files. #108
2014-09-27 02:15:08 +04:00
Andrey Smirnov
bb6593d21e
Add -force-overwrite flag to publish update, switch, snapshot and repo commands. #90
...
Includes new and updated system tests.
2014-08-05 17:01:18 +04:00
Andrey Smirnov
81af5882b9
Test on per-component/arch Release contents. #61
2014-06-07 17:19:02 +04:00
Andrey Smirnov
e554d8befa
Update tests with introduction of Release files under each arch/component. #61
2014-06-07 17:01:37 +04:00
Andrey Smirnov
68fbb0cbb9
Fix tests, don't break pool contents. #36
2014-06-06 03:00:29 +04:00
Andrey Smirnov
1957c811e8
Tests for multi-component and aptly publish list/snapshot/repo, aptly serve. #36
2014-06-06 02:09:13 +04:00
Andrey Smirnov
e1dbab6988
Allow publishing of empty snapshots and local repos. #55
2014-05-31 21:13:30 +04:00
Andrey Smirnov
b85f46547b
Allow to customize Origin/Label during publishing. #29
2014-04-15 11:47:21 +04:00
Andrey Smirnov
ec866eb403
Pool would be modified by repo add, so create copy.
2014-03-26 22:29:43 +04:00
Andrey Smirnov
53e73c52a4
Tests for guessing publishing defaults from local repo params. #12
2014-03-26 21:40:17 +04:00
Andrey Smirnov
1a88876e63
GPG may suddenly decide to re-validate its trustdb, resulting in any
...
call to `gpg` resulting in exit code 2.
Don't allow GPG to validate trustdb when invoked in automated fashion.
2014-03-25 18:42:03 +04:00
Andrey Smirnov
32717e92ba
First round of support for localRepos as source for publishing. Also more intelligent algo to get publishing defaults. #10 #12
2014-03-19 16:43:42 +04:00
Andrey Smirnov
9e26207659
System test for publishing local repos.
2014-02-27 21:10:40 +04:00
Andrey Smirnov
532c85eaa6
Test for publihsing snapshot with sources.
2014-02-18 00:49:17 +04:00