Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Test suite: set -o pipefail, in lib | Ian Jackson | 2015-06-07 |
| | |||
* | Test suite: Prepare for pipefail in t-git-get-ref | Ian Jackson | 2015-06-07 |
| | |||
* | Test suite: Prepare for pipefail in t-apply-diff | Ian Jackson | 2015-06-07 |
| | |||
* | Test suite: t-git-get-ref: check that argument starts with ref/ | Ian Jackson | 2015-06-07 |
| | |||
* | Test suite: Fix call to t-refs-notexist to have refs/ | Ian Jackson | 2015-06-07 |
| | |||
* | Test suite: Fully test replay attack prevention | Ian Jackson | 2015-05-31 |
| | |||
* | Test suite: Make it possible to call t-policy more than once (moving t-dsd ↵ | Ian Jackson | 2015-05-31 |
| | | | | out of it) | ||
* | Infra: dgit-repos-server; In NOFFCHECK but not FRESHREPO case, do not ↵ | Ian Jackson | 2015-05-31 |
| | | | | request wrong ref name | ||
* | dgit: Gate sending "previously" on deliberately_not_fast_forward not $forceflag | Ian Jackson | 2015-05-31 |
| | | | | | | | $forceflag will only be set if we actually think the ref is not fast forwarding. But the --deliberately flags may cause a repo reset which will require us to mention the previous state, even if the push appears to be ff. | ||
* | Push replay prevention protocol: Rename "supersedes" to "previously", as not ↵ | Ian Jackson | 2015-05-31 |
| | | | | necessarily actually superseded | ||
* | Test suite: add some replay prevention tests | Ian Jackson | 2015-05-31 |
| | |||
* | Infra: Document dgit-repos-policy-trusting a bit | Ian Jackson | 2015-05-31 |
| | |||
* | Infra: Add dgit-repos-policy-trusting | Ian Jackson | 2015-05-31 |
| | | | | | | | | Also add the --deliberately-fresh-repo deliberately, both to the manpage and to dgit's idea of non-fast-forward-ness. Rename the dgit test only deliberatelies to start with TEST-dgit-only- rather than having the -dgit-only at the end. | ||
* | Test suite: move t-commit and break out t-policy (nfc) | Ian Jackson | 2015-05-31 |
| | |||
* | Infra: Allow FRESHREPO to override "tag already exists" | Ian Jackson | 2015-05-31 |
| | | | | drs-push-rejects test needs updating too. | ||
* | Infra: dgit-repos-server: Fix some typos in debug messages | Ian Jackson | 2015-05-31 |
| | |||
* | Infra: Make replay prevention file contain tags (by searching for right ref ↵ | Ian Jackson | 2015-05-31 |
| | | | | names) | ||
* | Infra: document DELIBERATELIES parameter to policy hook | Ian Jackson | 2015-05-31 |
| | |||
* | Test suite: Provide t-rm-dput-dropping | Ian Jackson | 2015-05-31 |
| | | | | | This is needed if tests reuse versions, which we are perhaps going to have to do to test out the replay prevention. | ||
* | Test suite: finalise replay prevention | Ian Jackson | 2015-05-31 |
| | |||
* | infra: Finish replay prevention | Ian Jackson | 2015-05-31 |
| | |||
* | Dgit.pm: git_for_each_ref: Provide optional $git_dir argument | Ian Jackson | 2015-05-31 |
| | |||
* | Infra: New approach to reply prevention hhen NOFFCHECK, involving removed ↵ | Ian Jackson | 2015-05-31 |
| | | | | tags file | ||
* | dgit: Declare a "supersedes" in the signed tag for all previous refs/heads ↵ | Ian Jackson | 2015-05-31 |
| | | | | and refs/tags in the repo, when deliberately_not_fast_forward | ||
* | dgit: Break out deliberately_not_fast_forward (nfc) | Ian Jackson | 2015-05-31 |
| | |||
* | dgit-repos-policy-debian: better debugging for tainted object checking | Ian Jackson | 2015-05-31 |
| | |||
* | New approach to replay prevention - WIP | Ian Jackson | 2015-05-31 |
| | |||
* | New approach to replay prevention - WIP | Ian Jackson | 2015-05-31 |
| | |||
* | Test suite: Abstract t-tstunt-parsechangelog | Ian Jackson | 2015-05-31 |
| | |||
* | Test suite: Use stunt Dpkg::Changelog::Parse | Ian Jackson | 2015-05-31 |
| | | | | | | This saves a further 13s. Overalll the stunt changelog machinery saves 28s out of 100s (in my example case, the current debpolicy-newreject). | ||
* | Test suite: Allow for t-stunt to override Perl modules | Ian Jackson | 2015-05-31 |
| | |||
* | Test suite: Use stunt dpkg-parsechangelog | Ian Jackson | 2015-05-31 |
| | | | | | | | | | | This program takes 16ms instead of ~700ms on my computer. This saves 15s out of 100s for the debpolicy-newreject test (in its current state). Currently this is only used by various things in devscripts because dpkg-source uses /usr/lib/dpkg/parsechangelog/debian directly via a Perl module Dpkg::Changelog::Parse. | ||
* | Test suite: Provide new t-stunt facility | Ian Jackson | 2015-05-31 |
| | |||
* | policy: Improve taint message recorded in db by --deliberately-not-fast-forward | Ian Jackson | 2015-05-31 |
| | |||
* | git_get_ref: Move to Dgit.pm and reimplement | Ian Jackson | 2015-05-31 |
| | | | | | | | | | | | | | Use git for-each-ref --format=%(objectname) [r]efs/whatever This pattern won't match literally as a prefix because a ref name cannot contain [, so it must match according to fnmatch. whatever cannot contain fnmatch metacharacters because they're not valid in ref names. This is a better idiom because it might directly look up the ref in question (although currently it probably doesn't). | ||
* | Dgit.pm: git_for_each_ref: do not insist that first component after refs/ ↵ | Ian Jackson | 2015-05-31 |
| | | | | matches \w+ | ||
* | Break out ensuredir and make mkrepotmp use it | Ian Jackson | 2015-05-31 |
| | |||
* | Dgit.pm: git_for_each_tag_referring provides referred-to object id too | Ian Jackson | 2015-05-31 |
| | |||
* | Move is_fast_fwd into Dgit.pm | Ian Jackson | 2015-05-31 |
| | |||
* | Move git_rev_parse into Dgit.pm (renaming it from rev_parse | Ian Jackson | 2015-05-31 |
| | |||
* | Move various useful functions into Dgit.pm. Necessitates some slightly ↵ | Ian Jackson | 2015-05-31 |
| | | | | fancy footwork with $::us | ||
* | Dgit.pm: Move debugging earlier in file (pure code motion) | Ian Jackson | 2015-05-31 |
| | |||
* | Tests: debpolicy-newreject: Attempt push while still in new | Ian Jackson | 2015-05-31 |
| | |||
* | Tests: Introduce t-set-using-tmp and use it in lib and adhoc | Ian Jackson | 2015-05-31 |
| | |||
* | dgit: Allow --deliberately-not-fast-forward to override dgit's fast forward ↵ | Ian Jackson | 2015-05-31 |
| | | | | check | ||
* | Check for deliberatelies correctly (in-memory data structures have full name) | Ian Jackson | 2015-05-31 |
| | |||
* | Dgit.pm: Fix next's in git_for_each_tag_referring which should be returns | Ian Jackson | 2015-05-31 |
| | |||
* | Dgit.pm: Add debugging to git_for_each_... | Ian Jackson | 2015-05-31 |
| | |||
* | Infra: Exit statuses: work around bizarre behaviour of perl die wrt $?, and ↵ | Ian Jackson | 2015-05-31 |
| | | | | de-reserve policy hook status flag 0x80 | ||
* | Dgit.pm: Introduce $deliberately_re and use it everywhere | Ian Jackson | 2015-05-31 |
| |