summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Build for bookwormspline-bookwormJonah Brüchert2024-02-141-1/+1
|
* Add back base64 compatJonah Brüchert2024-02-131-0/+17
|
* sphinx: Fix sidebar templatesJonah Brüchert2024-02-131-1/+1
|
* debian: Re-enable sphinxJonah Brüchert2024-02-131-3/+2
|
* sphinx: Fix pickleJonah Brüchert2024-02-131-3/+17
|
* Apply changes from the magically working debian packageJonah Brüchert2024-02-0110-91/+79
|
* utils: fix is_string when called with bytestringMichael Laß2024-01-311-10/+12
| | | | | ord() cannot be called on bytes. Hence, encoded strings need to be handled separately.
* bcfg2-lint: correctly parse threshold optionMichael Laß2024-01-311-3/+3
| | | | We need to convert from str to float before doing the comparison.
* Hotfix for Python 3.10Michael Laß2024-01-310-0/+0
|
* Fix assumptions for earlier python versionsJohannes Kampmeyer2024-01-311-2/+8
|
* Add client support for python 3.5+Johannes Kampmeyer2024-01-311-1/+4
| | | | | | | Starting with python 3.7 ssl.SSLSocket was removed. Simply calling wrap_socket is the proposed fix here. Starting with python 3.5 ssl.PROTOCOL_TLSv1 was removed, so we switch to PROTOCOL_TLS, which should result in the highest possible TLS connection. Modern OSes do no longer support SSLv2/3 so it is okayish to ignore those. This should fix #415
* Add changelog entryJonah Brüchert2024-01-271-0/+6
|
* Fix compat with python 3.11Jonah Brüchert2024-01-271-1/+1
|
* Hack packaging to build on py3Jonah Brüchert2024-01-273-29/+24
|
* debian: Bump versionsplineAlexander Sulfrian2022-02-141-0/+9
|
* SSLCA: SSLCAFormat is now a GeneratorAlexander Sulfrian2022-02-141-20/+27
| | | | | We do not need to create files for the different certificat formats, because all data could and should be recreated from the current certificate files.
* SSLCA: Verify all certsAlexander Sulfrian2022-02-141-9/+11
| | | | | Even verify self signed certificates to recreate the certificate if it is expired.
* SSLCA: Add generator for custom cert/key formatsAlexander Sulfrian2022-02-142-0/+266
| | | | | This generator will not generate a new ssl key or ssl cert, but it will generate a custom format of already existing ssl keys and certs.
* SSLCA: Allow to create self signed certificatesAlexander Sulfrian2022-02-142-10/+24
|
* debian: Bump version and compatAlexander Sulfrian2022-01-303-2/+48
|
* Cfg: Block for FAM events after creating filesAlexander Sulfrian2022-01-302-3/+4
| | | | | | | After a CfgCreator wrote a file, it should block until the fam events are processed. The newly created files might be required by another Cfg plugin (like CfgPrivateKeyCreator and CfgPublicKeyCreator) and the fam events should be processed before the other plugin is invoked.
* SSLCA: root_ca is a BooleanOptionAlexander Sulfrian2022-01-301-2/+1
| | | | This will fix: 'bool' object has no attribute 'lower'
* Merge branch 'debconf'Alexander Sulfrian2022-01-3011-6/+601
|\
| * debconf: Verify seen valueAlexander Sulfrian2022-01-301-3/+6
| |
| * debconf: Support removing of conf entriesAlexander Sulfrian2022-01-302-2/+15
| |
| * debconf: Add ability to ignore conf settingsAlexander Sulfrian2022-01-302-0/+12
| |
| * debconf: Save current_value for reportingAlexander Sulfrian2022-01-301-10/+10
| |
| * debconf: Add ConfEntry to ReportingAlexander Sulfrian2022-01-306-5/+400
| |
| * debconf: Only start communicate process on demandAlexander Sulfrian2022-01-301-2/+3
| |
| * debconf: Find extra entriesAlexander Sulfrian2022-01-302-13/+23
| | | | | | | | | | Extra debconf entries, are entries that were seen but that are not specified in the configuration.
| * debconf: Add client toolAlexander Sulfrian2022-01-301-0/+102
| |
| * debconf: Add schemaAlexander Sulfrian2022-01-293-0/+59
| |
* | Merge branch 'packages'Alexander Sulfrian2022-01-2319-44/+471
|\ \
| * | PkgVars: Add support for multiple valuesAlexander Sulfrian2022-01-232-4/+10
| | | | | | | | | | | | | | | If multiple values specified for one package all values are joined together in a set.
| * | PkgVars: Add new plugin to set vars for packagesAlexander Sulfrian2022-01-236-8/+137
| | | | | | | | | | | | | | | This plugins allows the setting of varius flags per package. It should be used f.e. to specify pinnings for debian packages.
| * | Packages: Allow to filter provided packagesAlexander Sulfrian2022-01-231-1/+6
| | | | | | | | | | | | | | | The provides packages of a source should be filtered by the Blacklist or Whitelist tags for the source.
| * | Packages: Add possibility to customize User-AgentAlexander Sulfrian2022-01-231-4/+10
| | | | | | | | | | | | Some mirror might block the default python urllib User-Agent.
| * | Packages: Add repo options to additional_dataAlexander Sulfrian2022-01-231-0/+2
| | |
| * | Packages: Add 'pin' attributeAlexander Sulfrian2022-01-232-2/+14
| | |
| * | Packages: Add priority to sources and sort themAlexander Sulfrian2022-01-233-2/+19
| | |
| * | Packages: Add "pyapt" source typeAlexander Sulfrian2022-01-173-9/+105
| | | | | | | | | | | | | | | | | | | | | | | | Pyapt is a new source that is using the apt python bindings to parse the Packages files from debian repositories. Compared to the python implementation it is faster and more robust. It will use the dependencies of the newest version of a package from a specific source (because it can use the python bindings to compare the version numbers).
| * | Packages: Support different compression methodsAlexander Sulfrian2022-01-1711-20/+174
| |/ | | | | | | | | | | | | The new Reader classes implement different compression methods for the files parsed by the Packages backends. Each source can specify a default compression format. The user can configure a compression format per Source and the filename and extension for the metadata files are generated automatically.
* | Merge branch 'fix/partial-chain-validation'Alexander Sulfrian2022-01-161-7/+4
|\ \
| * | SSLCA: Fix certificate validationAlexander Sulfrian2022-01-161-7/+4
| |/ | | | | | | | | | | | | | | | | | | | | We should favour "-trusted" over "-CAfile" because it will skip the system-wide CAs and ensure that the certificate is relay validated against the specified CA. For validation against an intermediate certificate, only an additional "-partial_chain" is required. With "-untrusted" we previously added an unstrusted intermediate certificate only and validated the cert against default system wide installed CAs.
* | Merge branch 'supgid-filter'Alexander Sulfrian2022-01-161-4/+23
|\ \
| * | POSIXUsers: Add filters for supplementary gidsAlexander Sulfrian2022-01-161-4/+23
| |/ | | | | | | | | | | There are now separate filters for supplementary groups of a managed POSIXUser. If neither a blacklist or a whitelist for the supplementary groups is set, it will default to the same lists like the gid filters.
* | Merge branch 'add-directory-ignore'Alexander Sulfrian2022-01-162-1/+6
|\ \
| * | Server: Ignore directories containing a .bcfg2-ignore fileAlexander Sulfrian2015-04-182-1/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The DirectoryBacked helper now does not recurse into directories that contains a .bcfg2-ignore file. This makes it possible to ignore some directories for most plugins (Bundler, Defaults, Pkgmgr, Properties, PuppetENC, TemplateHelper, Trigger). You can store for example a python module used by a TemplateHelper in the same directory, without getting strange error messages while TemplateHelper is trying to import each single file of this module.
* | | Client: Add dummy package client toolAlexander Sulfrian2022-01-162-0/+17
| | | | | | | | | | | | This is a no-op client tool to ignore all packages.
* | | Packages: Add 'dummy' packages backendAlexander Sulfrian2022-01-163-1/+37
| | | | | | | | | | | | This backend will not add any packages.