zulcss/mmdebstrap
1
0
Fork 0
forked from josch/mmdebstrap
Code Pull requests Activity
1026 commits 1 branch 48 tags 24 MiB
Commit graph

1026 commits

This branch
This branch
All branches
Author SHA1 Message Date
Johannes Schauer Marin Rodrigues
ff9b76ed19
improve debug and error message wording 2023-03-16 22:18:49 +01:00
Jakub Wilk
a719ffd20a
Fix apt.conf permissions 
Having world-writable apt.conf may be exploited by locals users to
execute arbitrary code in the context of the user running mmdebstrap.
 2023-03-16 21:56:16 +01:00
Johannes Schauer Marin Rodrigues
55cae49ec7
let test_unshare_userns error out itself if necessary 2023-03-16 08:14:39 +01:00
Johannes Schauer Marin Rodrigues
055e1719b9
try unsharing before automatically choosing unshare mode 2023-03-15 17:08:12 +01:00
Johannes Schauer Marin Rodrigues
2614924925
make_mirror.sh: clean up more things left over by USE_HOST_APT_CONFIG=yes 2023-03-13 13:22:22 +01:00
Johannes Schauer Marin Rodrigues
901d017099
tests: do not run debug and verbose tests with variant standards for arches affected by #1031276 2023-03-13 13:21:18 +01:00
Johannes Schauer Marin Rodrigues
6b49a2dbbf
coverage.sh: pass any cli args on to coverage.py 2023-03-13 13:20:05 +01:00
Johannes Schauer Marin Rodrigues
034698f8d3
tests/check-for-bit-by-bit-identical-format-output: use the default user check 2023-03-05 19:26:13 +01:00
Johannes Schauer Marin Rodrigues
a184cc003c
tests: run verbose and debug tests with --variant=standard for maximum output 2023-03-05 19:25:13 +01:00
Johannes Schauer Marin Rodrigues
8253daf403
make_mirror.sh: also delete mmdebstrap-*-*.* 2023-03-05 17:43:54 +01:00
Johannes Schauer Marin Rodrigues
dd774b4f20
tests: skip debootstrap tests variant - on oldstable because of #917773 2023-03-05 15:26:37 +01:00
Johannes Schauer Marin Rodrigues
1ffa32f590
caching_proxy.py: only take .deb and by-hash artifacts from the old path 2023-03-05 15:25:42 +01:00
Johannes Schauer Marin Rodrigues
db2be70f88
tests: split out creation of mmdebstrap chroot into its own test to avoid running the same thing multiple times and speed up tests 2023-03-05 15:23:26 +01:00
Johannes Schauer Marin Rodrigues
b214d74129
make_mirror.sh: output contents of sources.list and preferences.d for debugging 2023-03-05 11:07:09 +01:00
Johannes Schauer Marin Rodrigues
c3bcc7b04a
make_mirror.sh: filter out file:// mirrors when USE_HOST_APT_CONFIG=yes 2023-03-05 10:54:51 +01:00
Johannes Schauer Marin Rodrigues
5471b372e2
coverage.txt: mark two more tests Needs-APT-Config: true 2023-03-05 10:09:58 +01:00
Johannes Schauer Marin Rodrigues
cc8dab5be8
add non-free-firmware to docs 2023-03-05 10:02:23 +01:00
Jochen Sprickerhof
84ea1e042b
Fail in --mode=unshare when newuidmap is not available 2023-03-03 23:59:19 +01:00
Johannes Schauer Marin Rodrigues
5885291213
Use an caching apt proxy instead of copying /var/cache/apt/archives/*.deb 
- only download Release files once and not by apt as well as with curl
   and thus avoid a mirror push happening between both downloads
 - no heuristic needed to place the file in their correct mirror
   location
 - no manual checksum checking
 - only throttle download speed when actually downloading and not when
   retrieving files from the cache
 - no translation of filenames between how the epoch colon is stored in
   files in /var/cache/apt/archives versus how it is stored in files on
   the mirrors
 - no special handling of stable update and security mirrors
 - implemented in Python instead of shell and thus an order of magnitude
   faster
 2023-03-03 08:34:39 +01:00
Johannes Schauer Marin Rodrigues
70092c49e8
coverage.txt: #1030638 got fixed 2023-03-02 11:54:03 +01:00
Johannes Schauer Marin Rodrigues
158607b3af
mmdebstrap: improve docs for --keyring 2023-03-02 11:53:43 +01:00
Johannes Schauer Marin Rodrigues
e7f21ce04c
Do not die if reading the number of ext2 blocks failed as that would skip the cleanup action 
Reported-by: Helmut Grohne <helmut@subdivi.de>
 2023-02-23 21:50:55 +01:00
Johannes Schauer Marin Rodrigues
8bdd04fce1
release 1.3.3 2023-02-19 09:36:57 +01:00
Johannes Schauer Marin Rodrigues
aea6fc70d1
make_mirror.sh: add ONLY_DEFAULT_DIST and ONLY_HOSTARCH 2023-02-19 09:19:42 +01:00
Johannes Schauer Marin Rodrigues
b90f1196e5
tests/root-mode-inside-chroot: run test script with -x 2023-02-19 09:17:57 +01:00
Johannes Schauer Marin Rodrigues
2f337767ea
tests/multiple-include: tzdata is producing /etc/timezone again 2023-02-18 23:18:01 +01:00
Johannes Schauer Marin Rodrigues
3c0b992d94
coverage.txt: fakechroot bug #1023286 is not fixed in testing yet 2023-02-18 23:17:35 +01:00
Johannes Schauer Marin Rodrigues
80f8978ecc
coverage.sh: do not fail if files to be cleaned do not exist 2023-02-18 23:17:12 +01:00
Johannes Schauer Marin Rodrigues
2837f5b5d3
coverage.py: support USE_HOST_APT_CONFIG and new Needs-APT-Config field 2023-02-18 23:16:48 +01:00
Johannes Schauer Marin Rodrigues
55f376d04a
tests: more cleanup traps 2023-02-18 23:06:13 +01:00
Johannes Schauer Marin Rodrigues
f3ab0a3d2d
release 1.3.2 2023-02-16 07:33:11 +01:00
Johannes Schauer Marin Rodrigues
fdbb66f75a
coverage.txt: skip check-for-bit-by-bit-identical-format-output in variant standard on armel, armhf and mipsel because of #1031276 2023-02-14 22:19:42 +01:00
Johannes Schauer Marin Rodrigues
46fc269b54
improve documentation of unshare mode 2023-02-14 22:00:19 +01:00
Johannes Schauer Marin Rodrigues
02769190ad
tests/as-debootstrap-unshare-wrapper: bind-mount /proc to work around #1031222 2023-02-13 16:17:21 +01:00
Johannes Schauer Marin Rodrigues
b3810b0fcd
tests/as-debootstrap-unshare-wrapper: run in variants minbase and important 2023-02-13 14:48:01 +01:00
Johannes Schauer Marin Rodrigues
4c5097f59b
skip check-for-bit-by-bit-identical-format-output on 32bit arches because of #1030638 2023-02-13 14:45:28 +01:00
Johannes Schauer Marin Rodrigues
5e07567d5a
move running debootstrap from make_mirror.sh to a test case 2023-02-12 14:05:09 +01:00
Johannes Schauer Marin Rodrigues
3c0990d050
tarfilter, coverage.py: changes for black 23.1.0 2023-02-12 14:05:09 +01:00
Johannes Schauer Marin Rodrigues
8d9a94fca5
if /proc is bind-mounted, make it a (recursive) slave mount so that changes to it (like unmounting) do not propagate to the outside 
Thanks: Helmut Grohne
 2023-02-12 14:05:09 +01:00
Johannes Schauer Marin Rodrigues
b18849caac
Assume that we can always run unshare 
With mount --rbind we can bind-mount /proc in a privileged docker
container as it is used by salsaci.
 2023-02-12 14:05:08 +01:00
Johannes Schauer Marin Rodrigues
ba76c1d3d9
coverage.py: format skipped tests with format_test as well instead of printing a tuple 2023-02-10 13:00:17 +01:00
Johannes Schauer Marin Rodrigues
b474150f27
tests: fall back to diffoscope if cmp failed 2023-02-10 13:00:13 +01:00
Johannes Schauer Marin Rodrigues
a23dd36bb6
fix warning to not talk about bind-mounting 2023-02-10 04:00:11 +01:00
Johannes Schauer Marin Rodrigues
4c64adf6ee
add tests/auto-mode-as-normal-user 2023-02-10 04:00:11 +01:00
Johannes Schauer Marin Rodrigues
b648db0afd
tests: tzdata dropped /etc/timezone 2023-02-10 04:00:10 +01:00
Johannes Schauer Marin Rodrigues
8f8f5bd706
relax apt version regex even further to be able to cope with versions like 2.5.3ubuntu0.1 2023-02-10 04:00:10 +01:00
Johannes Schauer Marin Rodrigues
9ebb3d07ac
unify /proc mounting between root and unshare mode and fall back to rbind-mounting 
This makes unshare mode work on salsaci and debci.
 2023-02-10 03:59:33 +01:00
Johannes Schauer Marin Rodrigues
d9e6d62328
tests: redirect all id output to /dev/null 2023-02-09 10:53:09 +01:00
Johannes Schauer Marin Rodrigues
a2d5573749
tests: drop qemu requirements for tests that only use it to create a user by defaulting to SUDO_USER 2023-02-09 10:53:08 +01:00
Johannes Schauer Marin Rodrigues
98aef0d023
tests: do not run sysctl -w kernel.unprivileged_userns_clone=1 as its the default value since linux 5.10.1 (Dec 2020) 2023-02-01 18:39:27 +01:00