1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54
|
autopkgtest (5.48) unstable; urgency=medium
Security fixes involving many permission changes:
* Several directories are now world-writeable only when used with
suitably isolating virtualisation servers. Previously they were
world-writeable in circumstances where this wasn't safe.
* autopkgtest-virt-null no longer advertises isolation-machine.
This was a dangerous lie. For environments where the caller provides
isolation, there's a new --fake-capability option to restore the
previous behaviour.
* autopkgtest-virt-unshare no longer offers the `downtmp-host`
capability, since it is not safe for host processes to directly copy
to and from the testbed which has a different security context.
* There's a new --insecure option to autopkgtest which enables some old,
risky, behaviours, in some circumstances.
* autopkgtest-virt-ssh should not be provided with a way to get root on
the testbed, unless the whole testbed is fully isolated from any
untrusted code. This security restriction was always implied by the
behaviour, but has now been documented.
-- Ian Jackson <ijackson@chiark.greenend.org.uk> Wed, 16 Apr 2025 19:38:57 +0100
autopkgtest (5.0) unstable; urgency=medium
* autopkgtest 4.0 with its "autopkgtest" program has been around for a
year, Debian's and Ubuntu's CI moved to that, and the Debian
9.0 release is behind us. The old "adt-run" and the corresponding
adt-virt-* and adt-build-* command line interfaces got dropped now.
-- Martin Pitt <mpitt@debian.org> Sun, 02 Jul 2017 13:13:11 +0200
autopkgtest (4.0) unstable; urgency=medium
Please adjust your existing CI system/scripts for the new CLI, tools, and
API introduced in version 4.0:
* This release adds a new "autopkgtest" CLI. This provides a simplified CLI
compared to the now deprecated adt-run; see the changelog for details.
The old "adt-run" CLI will still be available for some time.
* The adt-build* tools got renamed to autopkgtest-build*, and now build
images prefixed with"autopkgtest" instead of "adt". There are
compatibility symlinks for the old commands, and when being called through
them, also produce images with the old adt* names.
* The public ADT_* env variables got renamed to AUTOPKGTEST_*:
- AUTOPKGTEST_APT_PROXY
- AUTOPKGTEST_ARTIFACTS
- AUTOPKGTEST_AUTOPILOT_MODULE
- AUTOPKGTEST_NORMAL_USER
- AUTOPKGTEST_REBOOT_MARK
- AUTOPKGTEST_TMP
As these are being used in existing tests and tools, they are also
exported/checked under their old ADT_* name.
-- Martin Pitt <mpitt@debian.org> Sun, 05 Jun 2016 19:37:59 +0200
|