1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
|
#!/bin/sh
set -e
TESTDIR="$(readlink -f "$(dirname "$0")")"
. "$TESTDIR/framework"
setupenvironment
configarchitecture 'i386'
confighashes 'SHA512'
configcompression '.' 'gz'
insertpackage 'unstable' 'foo' 'all' '1.0'
insertpackage 'unstable' 'bar' 'i386' '1.0'
setupaptarchive --no-update
changetowebserver
# make Packages *only* accessible by-hash for this test
makebyhashonly() {
local NORMAL="$(readlink -f "./aptarchive/dists/unstable/main/${1}")"
local BYHASH="${NORMAL}/by-hash/SHA512"
mkdir -p "${BYHASH}"
find "${NORMAL}/" -maxdepth 1 -name "${2}*" -exec mv '{}' "$BYHASH" \;
ln -s "${BYHASH}/${2}.gz" "${BYHASH}/$(sha512sum "${BYHASH}/${2}.gz" | cut -f1 -d' ')"
}
makebyhashonly 'binary-i386' 'Packages'
makebyhashonly 'binary-all' 'Packages'
makebyhashonly 'source' 'Sources'
ensureitsbroken() {
rm -rf rootdir/var/lib/apt/lists
# we moved the Packages file away, normal update won't work
testfailure aptget update "$@"
# ensure we do not know about "foo"
testfailureequal "Reading package lists...
Building dependency tree...
E: Unable to locate package foo" aptget install -q -s foo
}
ensureitsbroken
ensureitsbroken -o Acquire::By-Hash=1
ensureitworks() {
rm -rf rootdir/var/lib/apt/lists
testsuccess aptget update "$@" -o Acquire::Languages=none
testfailure grep '^Ign' rootdir/tmp/testsuccess.output
rm -rf rootdir/var/lib/apt/lists
testsuccess aptget update "$@"
cp -f rootdir/tmp/testsuccess.output rootdir/tmp/aptupdate.output
testsuccess grep '^Ign' rootdir/tmp/aptupdate.output
testsuccessequal "Inst foo (1.0 unstable [all])
Conf foo (1.0 unstable [all])" aptget install -qq -s foo
testsuccessequal "Inst bar (1.0 unstable [i386])
Conf bar (1.0 unstable [i386])" aptget install -qq -s bar
}
msgmsg 'Test by-hash via' 'config option'
ensureitworks -o Acquire::By-Hash=force
msgmsg 'Test by-hash via' 'release option'
cp -a aptarchive/dists aptarchive/dists.bak
# add magic string to Release file ...
sed -i '/^Suite: / a \
Acquire-By-Hash: yes' aptarchive/dists/unstable/Release
signreleasefiles
ensureitworks
ensureitsbroken -o Acquire::By-Hash=0
msgmsg 'Test by-hash via' 'sources option'
sed -i "s#^\(deb\(-src\)\?\) #\1 [by-hash=yes] #" rootdir/etc/apt/sources.list.d/*
ensureitworks
#ensureitsbroken -o Acquire::By-Hash=0
rm -rf aptarchive/dists
cp -a aptarchive/dists.bak aptarchive/dists
#ensureitworks -o Acquire::By-Hash=force
ensureitsbroken -o Acquire::By-Hash=1
ensureitsbroken -o Acquire::By-Hash=0
sed -i "s#^\(deb\(-src\)\?\) \[by-hash=yes\] #\1 [by-hash=force] #" rootdir/etc/apt/sources.list.d/*
ensureitworks
#ensureitsbroken -o Acquire::By-Hash=0
msgmsg 'Test InRelease by-hash via' 'sources option'
rm -rf aptarchive/dists
cp -a aptarchive/dists.bak aptarchive/dists
mkdir -p aptarchive/dists/unstable/by-hash/SHA256
inrelease_hash=$(sha256sum aptarchive/dists/unstable/InRelease | awk '{print $1}')
mv aptarchive/dists/unstable/InRelease aptarchive/dists/unstable/by-hash/SHA256/$inrelease_hash
#ensureitworks -o Acquire::By-Hash=force
ensureitsbroken -o Acquire::By-Hash=1
ensureitsbroken -o Acquire::By-Hash=0
sed -i "s#^\(deb\(-src\)\?\) \[by-hash=force\] #\1 [by-hash=force inrelease-path=by-hash/SHA256/$inrelease_hash] #" rootdir/etc/apt/sources.list.d/*
ensureitworks
#ensureitsbroken -o Acquire::By-Hash=0
msgmsg 'Test InRelease by-hash with' 'no fallback'
rm -rf aptarchive/dists
cp -a aptarchive/dists.bak aptarchive/dists
testfailureequal "Err:1 http://localhost:${APTHTTPPORT} unstable InRelease
404 Not Found
Reading package lists...
E: Failed to fetch http://localhost:${APTHTTPPORT}/dists/unstable/InRelease 404 Not Found" aptget update
|
