rockdrilla/mmdebstrap
1
0
Fork 0
forked from josch/mmdebstrap
Code Issues Pull requests Projects Releases Wiki Activity
1026 commits 2 branches 0 tags 17 MiB
Commit graph

1026 commits

This branch
This branch
All branches
Author SHA1 Message Date
Johannes Schauer Marin Rodrigues
ff9b76ed19
improve debug and error message wording 2023-03-16 22:18:49 +01:00
Jakub Wilk
a719ffd20a
Fix apt.conf permissions 
Having world-writable apt.conf may be exploited by locals users to
execute arbitrary code in the context of the user running mmdebstrap.
 2023-03-16 21:56:16 +01:00
Johannes Schauer Marin Rodrigues
55cae49ec7
let test_unshare_userns error out itself if necessary 2023-03-16 08:14:39 +01:00
Johannes Schauer Marin Rodrigues
055e1719b9
try unsharing before automatically choosing unshare mode 2023-03-15 17:08:12 +01:00
Johannes Schauer Marin Rodrigues
2614924925
make_mirror.sh: clean up more things left over by USE_HOST_APT_CONFIG=yes 2023-03-13 13:22:22 +01:00
Johannes Schauer Marin Rodrigues
901d017099
tests: do not run debug and verbose tests with variant standards for arches affected by #1031276 2023-03-13 13:21:18 +01:00
Johannes Schauer Marin Rodrigues
6b49a2dbbf
coverage.sh: pass any cli args on to coverage.py 2023-03-13 13:20:05 +01:00
Johannes Schauer Marin Rodrigues
034698f8d3
tests/check-for-bit-by-bit-identical-format-output: use the default user check 2023-03-05 19:26:13 +01:00
Johannes Schauer Marin Rodrigues
a184cc003c
tests: run verbose and debug tests with --variant=standard for maximum output 2023-03-05 19:25:13 +01:00
Johannes Schauer Marin Rodrigues
8253daf403
make_mirror.sh: also delete mmdebstrap-*-*.* 2023-03-05 17:43:54 +01:00
Johannes Schauer Marin Rodrigues
dd774b4f20
tests: skip debootstrap tests variant - on oldstable because of #917773 2023-03-05 15:26:37 +01:00
Johannes Schauer Marin Rodrigues
1ffa32f590
caching_proxy.py: only take .deb and by-hash artifacts from the old path 2023-03-05 15:25:42 +01:00
Johannes Schauer Marin Rodrigues
db2be70f88
tests: split out creation of mmdebstrap chroot into its own test to avoid running the same thing multiple times and speed up tests 2023-03-05 15:23:26 +01:00
Johannes Schauer Marin Rodrigues
b214d74129
make_mirror.sh: output contents of sources.list and preferences.d for debugging 2023-03-05 11:07:09 +01:00
Johannes Schauer Marin Rodrigues
c3bcc7b04a
make_mirror.sh: filter out file:// mirrors when USE_HOST_APT_CONFIG=yes 2023-03-05 10:54:51 +01:00
Johannes Schauer Marin Rodrigues
5471b372e2
coverage.txt: mark two more tests Needs-APT-Config: true 2023-03-05 10:09:58 +01:00
Johannes Schauer Marin Rodrigues
cc8dab5be8
add non-free-firmware to docs 2023-03-05 10:02:23 +01:00
Jochen Sprickerhof
84ea1e042b
Fail in --mode=unshare when newuidmap is not available 2023-03-03 23:59:19 +01:00
Johannes Schauer Marin Rodrigues
5885291213
Use an caching apt proxy instead of copying /var/cache/apt/archives/*.deb 
- only download Release files once and not by apt as well as with curl
   and thus avoid a mirror push happening between both downloads
 - no heuristic needed to place the file in their correct mirror
   location
 - no manual checksum checking
 - only throttle download speed when actually downloading and not when
   retrieving files from the cache
 - no translation of filenames between how the epoch colon is stored in
   files in /var/cache/apt/archives versus how it is stored in files on
   the mirrors
 - no special handling of stable update and security mirrors
 - implemented in Python instead of shell and thus an order of magnitude
   faster
 2023-03-03 08:34:39 +01:00
Johannes Schauer Marin Rodrigues
70092c49e8
coverage.txt: #1030638 got fixed 2023-03-02 11:54:03 +01:00
Johannes Schauer Marin Rodrigues
158607b3af
mmdebstrap: improve docs for --keyring 2023-03-02 11:53:43 +01:00
Johannes Schauer Marin Rodrigues
e7f21ce04c
Do not die if reading the number of ext2 blocks failed as that would skip the cleanup action 
Reported-by: Helmut Grohne <helmut@subdivi.de>
 2023-02-23 21:50:55 +01:00
Johannes Schauer Marin Rodrigues
8bdd04fce1
release 1.3.3 2023-02-19 09:36:57 +01:00
Johannes Schauer Marin Rodrigues
aea6fc70d1
make_mirror.sh: add ONLY_DEFAULT_DIST and ONLY_HOSTARCH 2023-02-19 09:19:42 +01:00
Johannes Schauer Marin Rodrigues
b90f1196e5
tests/root-mode-inside-chroot: run test script with -x 2023-02-19 09:17:57 +01:00
Johannes Schauer Marin Rodrigues
2f337767ea
tests/multiple-include: tzdata is producing /etc/timezone again 2023-02-18 23:18:01 +01:00
Johannes Schauer Marin Rodrigues
3c0b992d94
coverage.txt: fakechroot bug #1023286 is not fixed in testing yet 2023-02-18 23:17:35 +01:00
Johannes Schauer Marin Rodrigues
80f8978ecc
coverage.sh: do not fail if files to be cleaned do not exist 2023-02-18 23:17:12 +01:00
Johannes Schauer Marin Rodrigues
2837f5b5d3
coverage.py: support USE_HOST_APT_CONFIG and new Needs-APT-Config field 2023-02-18 23:16:48 +01:00
Johannes Schauer Marin Rodrigues
55f376d04a
tests: more cleanup traps 2023-02-18 23:06:13 +01:00
Johannes Schauer Marin Rodrigues
f3ab0a3d2d
release 1.3.2 2023-02-16 07:33:11 +01:00
Johannes Schauer Marin Rodrigues
fdbb66f75a
coverage.txt: skip check-for-bit-by-bit-identical-format-output in variant standard on armel, armhf and mipsel because of #1031276 2023-02-14 22:19:42 +01:00
Johannes Schauer Marin Rodrigues
46fc269b54
improve documentation of unshare mode 2023-02-14 22:00:19 +01:00
Johannes Schauer Marin Rodrigues
02769190ad
tests/as-debootstrap-unshare-wrapper: bind-mount /proc to work around #1031222 2023-02-13 16:17:21 +01:00
Johannes Schauer Marin Rodrigues
b3810b0fcd
tests/as-debootstrap-unshare-wrapper: run in variants minbase and important 2023-02-13 14:48:01 +01:00
Johannes Schauer Marin Rodrigues
4c5097f59b
skip check-for-bit-by-bit-identical-format-output on 32bit arches because of #1030638 2023-02-13 14:45:28 +01:00
Johannes Schauer Marin Rodrigues
5e07567d5a
move running debootstrap from make_mirror.sh to a test case 2023-02-12 14:05:09 +01:00
Johannes Schauer Marin Rodrigues
3c0990d050
tarfilter, coverage.py: changes for black 23.1.0 2023-02-12 14:05:09 +01:00
Johannes Schauer Marin Rodrigues
8d9a94fca5
if /proc is bind-mounted, make it a (recursive) slave mount so that changes to it (like unmounting) do not propagate to the outside 
Thanks: Helmut Grohne
 2023-02-12 14:05:09 +01:00
Johannes Schauer Marin Rodrigues
b18849caac
Assume that we can always run unshare 
With mount --rbind we can bind-mount /proc in a privileged docker
container as it is used by salsaci.
 2023-02-12 14:05:08 +01:00
Johannes Schauer Marin Rodrigues
ba76c1d3d9
coverage.py: format skipped tests with format_test as well instead of printing a tuple 2023-02-10 13:00:17 +01:00
Johannes Schauer Marin Rodrigues
b474150f27
tests: fall back to diffoscope if cmp failed 2023-02-10 13:00:13 +01:00
Johannes Schauer Marin Rodrigues
a23dd36bb6
fix warning to not talk about bind-mounting 2023-02-10 04:00:11 +01:00
Johannes Schauer Marin Rodrigues
4c64adf6ee
add tests/auto-mode-as-normal-user 2023-02-10 04:00:11 +01:00
Johannes Schauer Marin Rodrigues
b648db0afd
tests: tzdata dropped /etc/timezone 2023-02-10 04:00:10 +01:00
Johannes Schauer Marin Rodrigues
8f8f5bd706
relax apt version regex even further to be able to cope with versions like 2.5.3ubuntu0.1 2023-02-10 04:00:10 +01:00
Johannes Schauer Marin Rodrigues
9ebb3d07ac
unify /proc mounting between root and unshare mode and fall back to rbind-mounting 
This makes unshare mode work on salsaci and debci.
 2023-02-10 03:59:33 +01:00
Johannes Schauer Marin Rodrigues
d9e6d62328
tests: redirect all id output to /dev/null 2023-02-09 10:53:09 +01:00
Johannes Schauer Marin Rodrigues
a2d5573749
tests: drop qemu requirements for tests that only use it to create a user by defaulting to SUDO_USER 2023-02-09 10:53:08 +01:00
Johannes Schauer Marin Rodrigues
98aef0d023
tests: do not run sysctl -w kernel.unprivileged_userns_clone=1 as its the default value since linux 5.10.1 (Dec 2020) 2023-02-01 18:39:27 +01:00