dbee214259
support serving the API over unix domain socket
...
`unix://$PATH` as listen argument will bind aptly to a unix domain socket
rather than TCP.
This allows binding the API to a UDS rather than a port.
Since aptly has no concept of authentication or any amount of high level
API hardening one needs to bottle it up in some other manner. Binding
to a localhost port is often a step in the right direction, ultimately is
still a scary insecure setup as any user on that host getting compromised
would mean that the entire archive is compromised as well.
UDS on the other hand are basically files and have their access managed
by regular file permission. As such, binding to a socket is in fact
the least insecure way to listen as you'd have to explicitly open up the
socket permissions to an access qualified group. In the most conservative
scenario that means no one but the aptly user can talk to the API, in a
more practical setup apache might get access as well and proxy the UDS
with authentication or limited to GET operations.
Using UDS allows reducing the attack surface of the API server while
preserving all the flexibility.
2017-02-28 09:58:39 +01:00
92116072c2
Fix and enable broken graph layout tests
2017-01-20 02:19:45 +01:00
4bf27d1dae
Merge branch 'master' into master
2017-01-19 23:07:49 +01:00
7c62a706c4
Disable tests failing due to inappropriate test data
2017-01-17 01:04:07 +01:00
96948d6f18
Basic test of graph layout
2017-01-17 00:46:51 +01:00
345fa02fdc
Allow requesting the unrendered dot graph from the graph endpoint
...
When api/graph.{dot,gv} is requested the raw string for dot gets returned.
This allows client-side rendering rather than server-side. It also makes
the optional dependency on graphivz for dot unnecessary to use the graph
endpoint.
2017-01-13 12:57:42 +01:00
7a8af044ee
0.9.8~dev version.
2016-04-21 12:24:36 +03:00
52f7c83f95
Release 0.9.7.
2016-04-18 12:30:36 +03:00
a29453805c
Publish under root using :. explicit prefix. #339
2016-03-01 12:34:59 +03:00
77be7b9e3b
Support for SHA-512 hashes on publishing/downloads.
2016-02-18 12:01:51 +03:00
f50e008763
Make 'SkipContents' configurable in API. #345
...
Also add global configuration to disable 'skipContents' by
default for all new published repos/snapshots.
2016-02-14 14:49:16 +03:00
fd30b37a0e
Bump version to 0.9.7~dev.
2016-01-24 23:15:23 +03:00
62f44e53fd
Version bump to 0.9.6.
2016-01-24 21:48:33 +03:00
10876b99f5
Check for contents file generation. #142
2015-04-02 01:00:28 +03:00
9e39dbf81e
Version bump to 0.9.6~dev.
2015-03-13 16:07:25 +03:00
7a4feebe6f
Version bump to 0.9.5.
2015-03-13 13:26:39 +03:00
6e1c9afdd9
Bump version to 0.9.5~dev.
2015-03-09 22:26:25 +03:00
4b3b961b69
Version bump to 0.9.1
2015-03-06 15:05:33 +03:00
66e73782e5
Version bump to 0.9.
2015-03-03 21:00:10 +03:00
68f332628d
Tests on publish update/switch and delete. #116
2015-03-03 20:57:40 +03:00
eb0443ed51
Tests for publish list API + verify that publishing actually creates files. #116
2015-03-03 20:35:48 +03:00
4b974b038c
Test for snapshot publishing. #116
2015-03-01 22:36:22 +03:00
2d9ee81c95
Update status code. #116
2015-03-01 22:33:05 +03:00
5c9d4d2844
More tests for repo drop. #116
2015-03-01 22:32:41 +03:00
233ad2528f
Update system tests for new publishing APIs. #116
2015-03-01 19:56:47 +03:00
e33a2a6f96
Reverting, as this change was making API LESS RESTful. My bad.
...
Revert "Make snapshot creation API more RESTful: accept snapshot name from URL. #116 "
This reverts commit 06dc1ef9a4
2015-02-28 19:55:09 +03:00
06dc1ef9a4
Make snapshot creation API more RESTful: accept snapshot name from URL. #116
2015-02-28 19:32:28 +03:00
fb25dec58e
Consistently rename response fields to CamelCase. #116
2015-02-25 22:24:03 +03:00
a582493a6e
Packages show API with tests. #116
2015-02-07 18:50:52 +03:00
930f76887b
Final version of system tests for snapshot API. #168
2015-02-07 18:37:10 +03:00
c1b2e4fabb
Fix for snapshot creation APIs: locking, package existence checks, consistency checks. #168
...
More system tests.
2015-02-06 22:37:57 +03:00
13fc1122f0
Use Python requests URL params instead of manual GET params. #168
2015-02-05 01:56:55 +03:00
cb99cbec58
Fix final system test. #168
2015-02-05 01:53:07 +03:00
b0489117c8
Update system tests for new Package serialization. #168
2015-02-05 01:48:14 +03:00
398303235a
Custom JSON marshalling for PackageDiff, updated test for snapshot diff API. #168
2015-02-05 01:34:02 +03:00
3f6491b8a3
Non-working test on format=details.
2015-01-26 21:06:28 +03:00
9c60421bd6
Python style fixes. #168
2015-01-24 21:53:06 +03:00
ebea4f10a0
Make snapshot diff GET, not POST (as it doesn't change anything in the system). #168
2015-01-24 21:51:33 +03:00
7c3629337c
Merge branch 'snapshot-api' of https://github.com/lebauce/aptly into lebauce-snapshot-api
...
Conflicts:
api/router.go
system/t12_api/__init__.py
2015-01-22 21:29:58 +03:00
a0d7ae28bf
Simple tests for graph generation API. #169
2015-01-13 22:15:06 +03:00
c832a5cdc4
Add missed file. #167
2015-01-13 18:50:09 +03:00
a0fa0becc2
Add system test on version API. #167
2015-01-13 18:49:32 +03:00
98ca0cdf33
Publish repo REST API. #116
2015-01-07 16:11:34 +03:00
dd9fc8e40e
Allow API creation of snapshots using package references
2014-12-18 18:17:43 +01:00
d847cba870
Make repos and snapshots API return JSON objects for packages when asked
2014-12-18 18:16:35 +01:00
d983e10d08
Add snapshots API test suite
2014-12-18 16:33:15 +01:00
726f12c537
Repos APIs: searching for packages, adding and deleting packages from the repo. #116
2014-11-18 00:50:59 +03:00
9072ba5981
Revert part of test that shouldn't have been comitted yet. #140
2014-11-14 00:25:40 +03:00
61e22743af
Fix for stripping part with slashes from component names. #140
...
Now aptly won't strip by default, but if distribution contains slash (like 'wheezy/updates')
and component starts with last part of distribution ('updates/main'), it would be stripped.
2014-11-14 00:13:58 +03:00
74f9787884
Implementation of upload file to local repo APIs. #116
2014-11-11 01:12:52 +03:00
Harald Sitter
jolo
jola5
Andrey Smirnov
Sylvain Baubeau