Raphaël Pinson [Thu, 8 Aug 2019 07:35:03 +0000 (09:35 +0200)]
Add apt::key_options for default apt::key options
sheenaajay [Tue, 30 Jul 2019 10:58:10 +0000 (11:58 +0100)]
Merge pull request #872 from puppetlabs/release
(MODULES-9627) Release merge back v7.1.0
Eimhin Laverty [Tue, 30 Jul 2019 08:16:00 +0000 (09:16 +0100)]
Merge pull request #871 from sheenaajay/releaseprep
MODULES-9626 Release Prep 7.1.0
sheena [Mon, 29 Jul 2019 15:51:45 +0000 (16:51 +0100)]
MODULES-9626 Release Prep 7.1.0
TP Honey [Tue, 16 Jul 2019 08:55:10 +0000 (09:55 +0100)]
Merge pull request #870 from puppetlabs/pdksync_pdksync_heads/
master-0-gb096033
pdksync - pdksync_heads/
master-0-gb096033
lionce [Tue, 16 Jul 2019 07:03:21 +0000 (10:03 +0300)]
Gabriel Filion [Mon, 15 Jul 2019 00:10:55 +0000 (20:10 -0400)]
implement apt.conf.d purging
this module already has parameters that let users purge sources.list.d
and preferences.d. It also has resources to create source files in
sources.list.d and "pins" in preferences.d and also has a resource to
create a configuration file in apt.conf.d. however, for some reason it
can't purge apt.conf.d
purging this directory can help users ensure that systems run exactly
with what puppet knows the system should be configured with.
sheenaajay [Wed, 3 Jul 2019 14:21:02 +0000 (15:21 +0100)]
Merge pull request #867 from eimlav/pdksync_modules-9482
(MODULES-9482) Bump translate dependency upper range
Eimhin Laverty [Wed, 3 Jul 2019 10:30:08 +0000 (11:30 +0100)]
(MODULES-9482) Bump translate dependency upper range
Martijn de Gouw [Thu, 27 Jun 2019 14:58:25 +0000 (16:58 +0200)]
Install gnupg instead of dirmngr
gnupg pulls in dirmngt and gpg, which are needed by apt_key
carabasdaniel [Tue, 25 Jun 2019 15:16:43 +0000 (18:16 +0300)]
Merge pull request #865 from tphoney/FM-7709
(FM-7709) pdksync and remove beaker
tphoney [Tue, 25 Jun 2019 12:26:10 +0000 (13:26 +0100)]
(FM-7709) pdksync and remove beaker
Paula Muir [Thu, 13 Jun 2019 13:57:25 +0000 (14:57 +0100)]
Merge pull request #864 from puppetlabs/litmus
(FM-8215) Convert to using litmus
tphoney [Wed, 12 Jun 2019 10:32:24 +0000 (11:32 +0100)]
more test fixes and pdksync
TP Honey [Wed, 12 Jun 2019 11:51:14 +0000 (12:51 +0100)]
Merge pull request #861 from puppetlabs/pdksync_pdksync-docsupdate
pdksync - MODULES-9057 Fix the module contribution guide link
Florin Dragos [Tue, 11 Jun 2019 14:45:24 +0000 (17:45 +0300)]
Convert to using litmus
sheenaajay [Tue, 11 Jun 2019 09:43:57 +0000 (10:43 +0100)]
Merge pull request #862 from puppetlabs/pdksync_pdksync_heads/
master-0-g7827fc2
pdksync - pdksync_heads/
master-0-g7827fc2
Erick Banks [Mon, 10 Jun 2019 12:32:31 +0000 (13:32 +0100)]
sheena [Wed, 5 Jun 2019 10:11:29 +0000 (11:11 +0100)]
MODULES-9057 fix docs link
lionce [Tue, 14 May 2019 15:19:21 +0000 (18:19 +0300)]
Merge pull request #860 from puppetlabs/release
Release merge-back
carabasdaniel [Mon, 13 May 2019 13:24:18 +0000 (06:24 -0700)]
Merge pull request #859 from lionce/release_prep
MODULES-9066 - release prep v7.0.1
lionce [Mon, 13 May 2019 11:06:00 +0000 (14:06 +0300)]
MODULES-9066 - release prep v7.0.1
carabasdaniel [Fri, 3 May 2019 12:50:43 +0000 (05:50 -0700)]
Merge pull request #858 from lionce/MODULES-9017
(MODULES-9017) - update metadata to support current version of stdlib
lionce [Fri, 3 May 2019 11:35:08 +0000 (14:35 +0300)]
(MODULES-9017) - update metadata to support current version of stdlib
lionce [Thu, 25 Apr 2019 07:39:21 +0000 (10:39 +0300)]
Merge pull request #857 from puppetlabs/release
Release mergeback v7.0.0
carabasdaniel [Wed, 24 Apr 2019 09:11:46 +0000 (02:11 -0700)]
Merge pull request #856 from lionce/release_prep
release prep 7.0.0
lionce [Wed, 24 Apr 2019 08:24:00 +0000 (11:24 +0300)]
release prep 7.0.0
lionce [Fri, 19 Apr 2019 14:15:47 +0000 (17:15 +0300)]
Merge pull request #847 from anarcat/no-backports-key
don't hardcode an old key from official mirrors for Debian backports
sheenaajay [Mon, 15 Apr 2019 11:07:24 +0000 (12:07 +0100)]
Merge pull request #854 from puppetlabs/pdksync_pdksync_f778803
pdksync - (maint) Update pdk-template to
f778803
Eimhin Laverty [Mon, 15 Apr 2019 09:34:12 +0000 (10:34 +0100)]
pdksync - (maint) Update pdk-template to
f778803
TP Honey [Thu, 11 Apr 2019 12:38:26 +0000 (13:38 +0100)]
Merge pull request #853 from puppetlabs/pdksync_MODULES-8444
pdksync - (MODULES-8444) - Raise lower Puppet bound
David Swan [Wed, 10 Apr 2019 15:39:27 +0000 (16:39 +0100)]
(MODULES-8444) - Raise lower Puppet bound
Eimhin Laverty [Wed, 20 Mar 2019 13:40:52 +0000 (13:40 +0000)]
Merge pull request #849 from tuxmea/apt_key_weak_ssl
Allow weak SSL verification for apt_key
Martin Alfke [Wed, 20 Mar 2019 09:18:20 +0000 (10:18 +0100)]
Allow weak SSL verification for apt_key
fixes https://tickets.puppetlabs.com/browse/MODULES-8759
Antoine Beaupré [Mon, 11 Mar 2019 19:48:52 +0000 (15:48 -0400)]
also fix tests
Antoine Beaupré [Mon, 11 Mar 2019 18:38:40 +0000 (14:38 -0400)]
don't hardcode an old key from official mirrors for Debian backports
A1BD8E9D78F7FE5C3E65D8AF8B48AD6246925553 is really this key, on any
modern Debian system:
/etc/apt/trusted.gpg.d/debian-archive-wheezy-automatic.gpg
----------------------------------------------------------
pub rsa4096 2012-04-27 [SC] [expire : 2020-04-25]
A1BD 8E9D 78F7 FE5C 3E65 D8AF 8B48 AD62 4692 5553
uid [ inconnue] Debian Archive Automatic Signing Key (7.0/wheezy) <ftpmaster@debian.org>
It expires in about a year, and is shipped by default in Debian:
$ dpkg -S /etc/apt/trusted.gpg.d/debian-archive-wheezy-automatic.gpg
debian-archive-keyring: /etc/apt/trusted.gpg.d/debian-archive-wheezy-automatic.gpg
With the current configuration, it might attempt to download the key
from the network, which could then be hijacked by a MITM and break
the entire trust chain built by AptSecure.
If the key was used in the sources.list template to pin the
repository, that would be one thing (it's not). But then it would fail
every time that key gets rotated on the Debian server (that is: at
every major release).
So just remove the key: it serves no purpose than enable a possible
MITM attack and creates an additional maintenance burden.
(OpenPGP crypto-geeks will surely point out that the full fingerprint
is used in the specification, and that this is normally not considered
breakable the same way short key IDs are currently known to be easily
breakable. I would counter that a fingerprint is still a checksum of
the original keypair and could *eventually* be found to be vulnerable
to certain attacks. OpenPGP as an ecosystem would likely fall apart at
that point as self-signatures are also using fingerprints (if not long
key IDs) but I'm disgressing: we do not rely on those for Secure Apt
so let's just do the right thing.)
Note that the `Ubuntu` section might be similarly affected, but I do
not have an Ubuntu system to test this with right now.
Finally, it should be noted that running apt-key the way the
puppetlabs module does is completely unsafe. Keys should *NEVER* be
added to the global trust ring in /etc/apt/trusted.gpg.d. Instead,
they should be deployed in /usr/share/keyrings and mapped in the
`sources.list` with an entry like:
deb [signed-by=/usr/share/keyrings/example-archive-keyring.gpg] https://example.net/debian/ main
That conventions are also documented in the Debian wiki here:
https://wiki.debian.org/DebianRepository/UseThirdParty
david22swan [Thu, 7 Mar 2019 14:35:39 +0000 (14:35 +0000)]
Merge pull request #846 from puppetlabs/pdksync_modules-8728
pdksync - Remove .project from .gitignore
Eimhin Laverty [Thu, 7 Mar 2019 12:43:23 +0000 (12:43 +0000)]
(MODULES-8728) Remove .project from .gitignore
david22swan [Mon, 4 Mar 2019 15:19:47 +0000 (15:19 +0000)]
Merge pull request #844 from tphoney/optimize_acceptance_testing
(maint) reduce run time for acceptance testing
tphoney [Thu, 14 Feb 2019 10:23:04 +0000 (10:23 +0000)]
(maint) reduce run time for acceptance testing
Moving acceptance tests to unit tests, this reduces run time for testing.
This gives a 50% reduction in acceptance test times.
david22swan [Thu, 14 Feb 2019 10:08:45 +0000 (10:08 +0000)]
Merge pull request #843 from tphoney/rspec_mock
(maint) use rspec-mock for unit tests
tphoney [Tue, 12 Feb 2019 16:22:24 +0000 (16:22 +0000)]
(maint) use rspec-mock for unit tests
Helen [Tue, 12 Feb 2019 16:02:52 +0000 (16:02 +0000)]
Merge pull request #842 from tphoney/remove_unsupported_code
(maint) Remove uneeded workarounds for ruby/facter
tphoney [Mon, 11 Feb 2019 10:04:00 +0000 (10:04 +0000)]
(maint) Remove uneeded workarounds for ruby/facter
david22swan [Thu, 31 Jan 2019 10:04:58 +0000 (10:04 +0000)]
Merge pull request #841 from puppetlabs/pdksync_pdksync_1
.9.0-0-g7281db5
pdksync - pdksync_1
.9.0-0-g7281db5
lionce [Thu, 31 Jan 2019 09:20:32 +0000 (11:20 +0200)]
david22swan [Wed, 23 Jan 2019 09:20:07 +0000 (09:20 +0000)]
Merge pull request #840 from puppetlabs/release
Release Mergeback 6.3.0
Paula Muir [Mon, 21 Jan 2019 08:42:17 +0000 (08:42 +0000)]
Merge pull request #839 from david22swan/ReleasePrep
(MODULES-8513) - 6.3.0 Release Prep
David Swan [Fri, 18 Jan 2019 14:36:17 +0000 (14:36 +0000)]
(MODULES-8513) - 6.3.0 Release Prep
Helen [Mon, 14 Jan 2019 15:27:28 +0000 (15:27 +0000)]
Merge pull request #838 from puppetlabs/pdksync_pdksync_heads/
master-0-g6814a87
pdksync - pdksync_heads/
master-0-g6814a87
David Swan [Thu, 10 Jan 2019 15:24:24 +0000 (15:24 +0000)]
Eimhin Laverty [Thu, 3 Jan 2019 17:04:29 +0000 (17:04 +0000)]
Merge pull request #836 from antaflos/fix_auth_conf_owner
(MODULES-8418) Fix /etc/apt/auth.conf owner changing endlessly
Andreas Voegele [Mon, 3 Dec 2018 18:49:47 +0000 (19:49 +0100)]
(MODULES-8418) Add parameter $auth_conf_owner
Starting from Debian 9 and Ubuntu 16.04 the user _apt owns the file
/etc/apt/auth.conf. In previous versions it is owned by root.
Set ownership of /etc/apt/auth.conf correctly based on OS version and
add spec tests to cover managing the file's owner under Ubuntu 14.04,
16.04 and 18.04 as well as Debian 7.0, 8.0 and 9.0.
Eimhin Laverty [Thu, 3 Jan 2019 15:57:20 +0000 (15:57 +0000)]
Merge pull request #837 from puppetlabs/pdksync_pdksync_heads/
master-0-g9c815ea
pdksync - pdksync_heads/
master-0-g9c815ea
David Swan [Thu, 3 Jan 2019 14:32:14 +0000 (14:32 +0000)]
Eimhin Laverty [Thu, 20 Dec 2018 10:47:59 +0000 (10:47 +0000)]
Merge pull request #835 from puppetlabs/pdksync_FM-7655
pdksync - (FM-7655) Fix rubygems-update for ruby < 2.3
tphoney [Thu, 20 Dec 2018 10:09:31 +0000 (10:09 +0000)]
(FM-7655) Fix rubygems-update for ruby < 2.3
david22swan [Wed, 19 Dec 2018 14:15:13 +0000 (14:15 +0000)]
Merge pull request #833 from puppetlabs/anchor-tags
(maint) Add HTML anchor tag
Eimhin Laverty [Mon, 17 Dec 2018 12:32:01 +0000 (12:32 +0000)]
Merge pull request #834 from puppetlabs/pdksync_pdksync_heads/
master-0-gbf720df
pdksync - pdksync_heads/
master-0-gbf720df
Eimhin Laverty [Mon, 17 Dec 2018 11:29:26 +0000 (11:29 +0000)]
clairecadman [Fri, 14 Dec 2018 15:46:36 +0000 (15:46 +0000)]
Update README.md
clairecadman [Fri, 14 Dec 2018 15:45:41 +0000 (15:45 +0000)]
(maint) Add HTML anchor tag
The anchor tag helps fix broken links — If the header text changes (gets localized) the link will brake.
Paula Muir [Thu, 13 Dec 2018 17:40:42 +0000 (17:40 +0000)]
Merge pull request #832 from aboks/apt-task
Add support for dist-upgrade & autoremove action
Arnout Boks [Thu, 13 Dec 2018 11:34:24 +0000 (12:34 +0100)]
Add tests for new apt actions
Arnout Boks [Tue, 11 Dec 2018 19:59:55 +0000 (20:59 +0100)]
Add support for dist-upgrade & autoremove action
Ewoud Kohl van Wijngaarden [Fri, 7 Dec 2018 13:10:40 +0000 (14:10 +0100)]
(maint) Remove duplicated fact declarations (#828)
* (maint) Remove duplicated fact declarations
* (maint) Correct lsbdist facts in tests
* (maint) Remove the puppetversion fact in testing
* (maint) - Remove blank line
TP Honey [Fri, 7 Dec 2018 10:04:13 +0000 (10:04 +0000)]
Merge pull request #831 from eimlav/modules-8321
(MODULES-8321) - Add manage_auth_conf parameter
TP Honey [Fri, 7 Dec 2018 10:03:22 +0000 (10:03 +0000)]
Merge pull request #830 from eimlav/modules-8326
(MODULES-8326) - apt-transport-https not ensured properly
Eimhin Laverty [Thu, 6 Dec 2018 16:31:40 +0000 (16:31 +0000)]
(MODULES-8321) - Add manage_auth_conf parameter
Eimhin Laverty [Thu, 6 Dec 2018 13:41:08 +0000 (13:41 +0000)]
(MODULES-8326) - apt-transport-https not ensured properly
Eimhin Laverty [Thu, 22 Nov 2018 09:14:21 +0000 (09:14 +0000)]
Merge pull request #827 from puppetlabs/release
(maint) - 6.2.1 Release mergeback
Paula Muir [Tue, 20 Nov 2018 13:45:12 +0000 (13:45 +0000)]
Merge pull request #826 from eimlav/release-prep
(MODULES-8275) - Release prep for 6.2.1
Eimhin Laverty [Tue, 20 Nov 2018 12:56:51 +0000 (12:56 +0000)]
(MODULES-8275) - Release prep for 6.2.1
Paula Muir [Tue, 20 Nov 2018 12:44:16 +0000 (12:44 +0000)]
Merge pull request #825 from eimlav/dirmngr-fix
(MODULES-8272) - Revert "Autorequire dirmngr in apt_key types"
Eimhin Laverty [Tue, 20 Nov 2018 09:09:49 +0000 (09:09 +0000)]
(MODULES-8272) - Revert "Autorequire dirmngr in apt_key types"
This reverts commit
53ea6e7a789ebec00d463ba78abf09bfe031efd9.
Eimhin Laverty [Mon, 19 Nov 2018 17:22:43 +0000 (17:22 +0000)]
Merge pull request #824 from puppetlabs/release
(maint) - 6.2.0 Release Mergeback
Eimhin Laverty [Mon, 19 Nov 2018 10:13:40 +0000 (10:13 +0000)]
Merge pull request #823 from david22swan/PreRelease
(MODULES-8226) - 6.2.0 Release Prep
David Swan [Thu, 8 Nov 2018 10:24:46 +0000 (10:24 +0000)]
(MODULES-8226) - 6.2.0 Release Prep
Helen [Fri, 16 Nov 2018 14:35:37 +0000 (14:35 +0000)]
Merge pull request #822 from ekohl/apt-key-fixes
Apt-key fixes to properly work on Debian 9
Ewoud Kohl van Wijngaarden [Wed, 14 Nov 2018 16:15:14 +0000 (17:15 +0100)]
Autorequire dirmngr in apt_key types
Ewoud Kohl van Wijngaarden [Wed, 14 Nov 2018 16:13:48 +0000 (17:13 +0100)]
Pass in --no-tty to apt-key
On modern Debian(-based) distros this is needed for gpg to function when
no TTY is available. Since Puppet often runs from cron or a daemon, this
is often the case.
Eimhin Laverty [Wed, 7 Nov 2018 11:44:55 +0000 (11:44 +0000)]
Merge pull request #820 from puppetlabs/pdksync_pdksync_heads/
master-0-gabccfb1
pdksync - pdksync_heads/
master-0-gabccfb1
David Swan [Wed, 7 Nov 2018 10:20:58 +0000 (10:20 +0000)]
david22swan [Fri, 2 Nov 2018 12:22:43 +0000 (12:22 +0000)]
Merge pull request #819 from rodjek/epp-files-lf
(maint) Prefer LF over CRLF line endings for .epp files
david22swan [Wed, 31 Oct 2018 11:59:22 +0000 (11:59 +0000)]
Merge pull request #815 from simondeziel/modules-8081
(MODULES-8081): add support for hkps:// protocol in apt::key
Tim Sharpe [Tue, 23 Oct 2018 09:53:59 +0000 (20:53 +1100)]
(maint) Prefer LF over CRLF line endings for .epp files
TP Honey [Mon, 22 Oct 2018 14:37:03 +0000 (15:37 +0100)]
Merge pull request #818 from eimlav/refresh-changes
(maint) - Minor logic changes related to apt_key refresh param
Eimhin Laverty [Mon, 22 Oct 2018 13:52:31 +0000 (14:52 +0100)]
Test ensure value of key is passed in for apt::source
Eimhin Laverty [Mon, 22 Oct 2018 13:33:47 +0000 (14:33 +0100)]
Added default refresh value to apt::key default unit test
Eimhin Laverty [Mon, 22 Oct 2018 13:33:04 +0000 (14:33 +0100)]
Removed duplicated test
Simon Deziel [Fri, 19 Oct 2018 23:19:21 +0000 (19:19 -0400)]
(MODULES-8081): style improvement to apt_key_provider_spec.rb
Simon Deziel [Fri, 19 Oct 2018 20:36:54 +0000 (16:36 -0400)]
(MODULES-8081): improve variable assignment/condition testing in apt_key_provider_spec.rb
Simon Deziel [Fri, 19 Oct 2018 20:11:08 +0000 (16:11 -0400)]
(MODULES-8081): mention hkps:// protocol in key.pp and s/and/&&/ in apt_key_provider_spec.rb
Eimhin Laverty [Fri, 19 Oct 2018 13:54:30 +0000 (14:54 +0100)]
(maint) - Minor logic changes related to apt_key refresh param
Simon Deziel [Thu, 18 Oct 2018 20:44:17 +0000 (16:44 -0400)]
(MODULES-8081): hkps:// protocol is supported on Ubuntu 18.04 only
Simon Deziel [Wed, 10 Oct 2018 03:52:49 +0000 (23:52 -0400)]
(MODULES-8081): add support for hkps:// protocol in apt::key
Add hkps:// to the list of protocols supported by apt::key
(hkp://, http:// and https://).
Eimhin Laverty [Mon, 8 Oct 2018 16:19:43 +0000 (17:19 +0100)]
Merge pull request #813 from david22swan/Loc_update
(maint) - Localization test updates and Minor syntax refactor
David Swan [Mon, 8 Oct 2018 14:01:25 +0000 (15:01 +0100)]
(maint) - Localization test updates and Minor syntax refactor
Eimhin Laverty [Fri, 5 Oct 2018 15:26:15 +0000 (16:26 +0100)]
Merge pull request #812 from pmcmaw/Update_localization_tests
(maint) - Updating loc tests to include Japanese translations
David Swan [Fri, 5 Oct 2018 10:12:20 +0000 (11:12 +0100)]
(maint) - Update of puppet manifest loc test's
Code Review / puppet-modules / puppetlabs-apt.git / log