aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* apk-tools-2.8.2v2.8.22.8-stableTimo Teräs2018-01-091-1/+1
|
* url: add "Cache-Control: no-cache" header with --force-refreshTimo Teräs2018-01-091-1/+1
| | | | | | fixes #8161 (cherry picked from commit 2da67940d50865d206f6a79165ce7b3de5a90de3)
* split --force to several --force-[type] optionsTimo Teräs2018-01-099-24/+60
| | | | | | | | | | | This unloads --force as several of the things are really not wanted together. E.g. --force-refresh is a lot different from --force-broken-world and doing --force to get the other might introduce unwanted behaviour. --force is still kept for backwards compatibility and it enables most things --force was used for. (cherry picked from commit 039ff3bd466819909a5295a43e40947a9e0b6c16)
* libfetch: add option to set "Cache-Control: no-cache"Timo Teräs2018-01-091-1/+4
| | | | | | ref #8161 (cherry picked from commit f90af35e9c563bd4f865d8d47a7ae357191494db)
* add new umbrella flag --initramfs-diskless-bootHenrik Riomar2018-01-091-0/+6
| | | | | | | This flag enables a group of options used during initramfs tmpfs initial install. (cherry picked from commit e0eff8742f342c2c23e1d7ee081f3afd08cb5169)
* add new flag --no-commit-hooksHenrik Riomar2018-01-093-0/+9
| | | | | | | | | | This flag skips running hook scripts This flag *must* be used during initramfs tmpfs initial install. The reason that this new flag is needed is that the hooks will currently always fail as musl and /bin/sh is missing at this stage on diskless. (cherry picked from commit 23cb10477537a2bbf40ac06a61046f75f2b160c5)
* libfetch: honor https_proxy variable for httpsTimo Teräs2018-01-091-11/+30
| | | | | | fixes #8160 (cherry picked from commit 99e7bb93dfff2f43987b81ce7600ad8fbd0ce64c)
* db: fix triggers to report deleted directoriesTimo Teräs2018-01-092-16/+20
| | | | | | | | | | | This change just changes to keep deleted directory items in the hash with ref count zero and modified flag set. Those entries are reused when needed. The side effect is that fire_triggers() will now see those removed direcotries and reports them. Other enumerators of the directories hash are protected to skip removed directories when appropriate. (cherry picked from commit b0fcc56f221e749271bb2aa13e151699e62b09ac)
* commit: properly analyze packages with provides="$pkgname"Timo Teräs2018-01-093-1/+45
| | | | (cherry picked from commit 667cb6bca799e58f58f22ad868761c022c6600dc)
* solver: fix potential install_if processing failure, fixes #8237Timo Teräs2018-01-093-46/+77
| | | | | | | | | | | In discovery phase, there was logic to not process packages multiple times. However, that logic failed to account the package's depth and install_if state for the name being processed. This caused install_if processing failure in certain topologies of the dependency graph. Adds also a test case that should catch this issue reliably. (cherry picked from commit 8e7fd3e06f300bd76b659db1164da1ee12f16870)
* fetch: print additional error diagnostics in verbose modeTimo Teräs2018-01-091-2/+5
| | | | (cherry picked from commit 97d8aab0c2e53ee82589a591637028294a6ab449)
* apk-tools-2.8.1v2.8.1Timo Teräs2017-10-271-1/+1
|
* build: add 'make tag'Timo Teräs2017-10-271-0/+4
|
* solver: consider virtual provides to exclude non-provides transitivelyTimo Teräs2017-10-272-12/+20
| | | | | | | | | | | this fixes package selection when a 'real' package exists, but would need to be provided by another package with 'virtual provides'. In current package database this can happen with postgresql which is also provided by postgresql-bdr. Normally postgresql would be satisfied by postgresql, but if any package depends on postgresql-bdr and there's no versioned dependency on postgresql this will help apk figure out that postgresql-bdr should be used.
* io: fix skip and splice to detect unexpected end-of-fileTimo Teräs2017-10-122-31/+22
|
* db: handle default root correctly for /procTimo Teräs2017-10-101-1/+1
| | | | | | dbopts->root may be null; use db->root instead fixes #7162
* apk-tools-2.8.0v2.8.0Timo Teräs2017-10-061-1/+1
|
* libfetch: fix certificate host name checkTimo Teräs2017-10-061-1/+1
| | | | | OpenSSL allows passing zero-length to indicate "use strlen". LibreSSL requires using the real length always, so pass the length.
* libfetch: improve openssl/libressl compatibilityTimo Teräs2017-10-064-7/+436
| | | | | | X509_check_host() is introduced in libressl-2.5.0 and openssl-1.0.2 which are not yet universally available. Add support for building against the older versions.
* libfetch: improve ssl connectionsTimo Teräs2017-10-053-6/+111
| | | | | | | | | | | | loosely based on the freebsd implementation, implement https connection settings to override CA, and use client certificate. new files supported in /etc/apk/: ca.pem - if exists, it contains CAs acceptable for https (otherwise system wide CAs are used) crl.pem - if ca.pem is used, this is the (optional) CRL for it cert.pem - used as client authentication certificate (+ key) cert.key - used as client key (can be also inside cert.pem)
* libfetch: remove unwanted code conditionalsTimo Teräs2017-10-057-94/+7
|
* libfetch: fix ssl context leakTimo Teräs2017-10-051-0/+14
| | | | from freebsd
* build and use bundled libfetch nativelyTimo Teräs2017-10-0510-115/+61
|
* import libfetch-2.38 from NetBSDTimo Teräs2017-10-0513-0/+6630
| | | | | | | | | | | | | | | | | | | | ftp://ftp.fu-berlin.de/unix/NetBSD/packages/current-src/pkgsrc/net/libfetch/files libfetch comes (at least) in netbsd and freebsd flavors which differing functionality. Alpine and Arch package netbsd one, but it's not widely packaged across other distributions. We need NetBSD version as it does not use funopen(3) which is not supported in musl, and supports connection pooling. FreeBSD seems to be the orignal and better maintained version with support for SSL CAs, client certificate authentication, proxy authentication, and improved http redirect handling. So this imports NetBSD version, and future commits will pick up the needed improvements from FreeBSD tree. Incidentally, this also fixes #7857 and likes for good.
* package: remove package script after use (fixes #7974)Timo Teräs2017-10-041-6/+9
| | | | | this is a regression introduced in commit 349c61c9 ("add support for pre and post commit hooks")
* info: fix typo in helpDamiano Albani2017-09-271-1/+1
|
* commit: proper singular/plural for 'error(s)' in commit messageTimo Teräs2017-08-231-1/+2
| | | | based on github pull request #5
* fix comparison of unsigned expression < 0 is always falseDmitry Golovin2017-08-232-4/+7
| | | | found by clang
* make preprocessor arguments clang-compatibleDmitry Golovin2017-08-231-1/+1
|
* use labs istead of abs with long argumentDmitry Golovin2017-08-231-1/+1
|
* index: Only rewrite arch if no error is encounteredA. Wilcox2017-07-291-2/+2
|
* database: include POSIX header for ST_* definesA. Wilcox2017-07-291-0/+1
|
* travis: notify on IRCJakub Jirutka2017-07-251-0/+7
|
* tar: use standard header prefixTimo Teräs2017-06-261-1/+9
| | | | | | | APKs have been created with GNU tar so far, which uses the GNU extensions for long names. In order to increase portability support the standard header's 'prefix' portion in case the GNU extensions are not present.
* db: fix current directory instance caching in tar extractionTimo Teräs2017-06-261-1/+1
| | | | | | | Depending how the directory entries are ordered, the cached dir instance might not have been updated correctly. This has not been a problem as the entries have been ordered, but is now triggered on ppc.
* database: mark error on renameat failureA. Wilcox2017-06-261-2/+6
|
* travis: deploy tarballs with static binary to GH ReleasesJakub Jirutka2017-06-231-0/+19
| | | | | The main usage is for alpine-chroot-install and similar scripts, so it can depend on specific *persistent* version.
* travis: update alpine-chroot-install to 0.5.1Jakub Jirutka2017-06-231-2/+2
|
* io: make io vtables const struct, and add accessors for themTimo Teräs2017-06-2313-120/+195
| | | | | This reduces function pointers in heap, and unifies how the io functions are called.
* archive: validate reading of pax and gnu long filename extensionsTimo Teräs2017-06-231-14/+14
| | | | | | | Detect properly if the file stream gets an error during these read operations. Reported-by: Ariel Zelivansky from Twistlock
* archive: fix incorrect bounds checking for memory allocationTimo Teräs2017-06-231-2/+4
| | | | | | | | | | | The value from tar header is unsigned int; keep it casted to unsigned int and size_t instead of (signed) int, otherwise the comparisons fail to do their job properly. Additionally check entry.size against SSIZE_MAX so the rounding up later on is guaranteed to not overflow. Fixes CVE-2017-9669 and CVE-2017-9671. Reported-by: Ariel Zelivansky from Twistlock
* Revert "version: consider pkg-rX and pkg to be the same version"William Pitcock2017-06-231-5/+0
| | | | This reverts commit ee5ce7284aef8679fabcf728dd5bd5a17c965798.
* gitignore: exclude files generated by root-testsJakub Jirutka2017-06-111-0/+4
|
* test: modernize testing APKBUILDsJakub Jirutka2017-06-116-59/+54
|
* test: fix test4.sh, script failure is non-fatalJakub Jirutka2017-06-111-2/+2
| | | | This behaviour has been changed in: 7d5cd2c8a0052a7446515f90d3d0ea5cc2e93efe.
* test: fix running root-tests with QEMU user-mode emulationJakub Jirutka2017-06-111-1/+12
| | | | | Variable QEMU_EMULATOR is set by enter-chroot script from alpine-chroot-install.
* test: run test*.sh with set -xJakub Jirutka2017-06-111-1/+1
|
* test: fix test6.sh, vmlinuz and initramfs are not symlinksJakub Jirutka2017-06-111-2/+2
|
* test: fix test6.sh, replace linux-grsec w/ linux-vanilla, add alpine-keysJakub Jirutka2017-06-111-3/+3
|
* test: exit with non-zero status when some root-test failJakub Jirutka2017-06-111-3/+4
|