Commit Graph

8510 Commits

Author SHA1 Message Date
Thomas Waldmann 871da25865
remove bountysource badge 2023-10-10 20:31:21 +02:00
TW 75d8abc47b
Merge pull request #7862 from ThomasWaldmann/misc-updates-master
misc. updates (master)
2023-10-10 19:48:32 +02:00
Thomas Waldmann f7e8462bd0
vagrant: use generic/debian9 box, fixes #7579
the debian/stretch64 was broken and never fixed.
2023-10-10 17:41:58 +02:00
Thomas Waldmann 3fdbd541db
update development.lock.txt
there was some breakage with py312, so better use current tooling.
2023-10-10 17:41:16 +02:00
Thomas Waldmann 82440a2a38
github CI: test on py312 (w/o -dev) 2023-10-10 17:38:39 +02:00
Thomas Waldmann fc0dbe2913
vagrant: install py312 via pyenv 2023-10-10 17:37:34 +02:00
Thomas Waldmann 26be8a6fe9
allow setuptools_scm >= 8 again
8.0.4 got a fix, so we can allow it again.
2023-10-10 17:35:03 +02:00
TW adfab2b6d7
Merge pull request #7859 from debuglevel/patch-1
feat(docs): use virtualenv on Cygwin
2023-10-10 14:12:01 +02:00
Marc Kohaupt a6b016f894
feat(docs): use virtualenv on Cygwin
Hint for Cygwin users to make sure they use a virtual environment.
Not using a virtual environment will be likely troublesome if there is already a Python installed on Windows.
2023-10-09 12:35:33 +02:00
TW d4ea88433c
Merge pull request #7855 from ytec-nl/master
Prevent CLI argument issues in scripts/glibc_check.py
2023-10-09 01:16:00 +02:00
Ceesjan Luiten 7afa8d4626 Prevent CLI argument issues 2023-10-07 19:58:41 +02:00
TW 8fc0944950
Merge pull request #7830 from ThomasWaldmann/typed-repoobjs
replace TAMs by typed repo objects, fixes #7670
2023-09-30 21:46:51 +02:00
TW 4a688ee4f4
Merge pull request #7851 from ThomasWaldmann/allow-msgpack107-master
allow msgpack 1.0.7 (master)
2023-09-28 15:36:40 +02:00
Thomas Waldmann cdcab4df68
allow msgpack 1.0.7 2023-09-28 14:31:03 +02:00
TW e4669ec316
Merge pull request #7843 from ThomasWaldmann/offline-docs-master
readthedocs: also build offline docs, fixes #7835
2023-09-25 15:23:36 +02:00
Thomas Waldmann 80b08aff35
readthedocs: also build offline docs, fixes #7835 2023-09-25 15:21:50 +02:00
Thomas Waldmann bd1d734591
docs: removed TAMs, introduce typed repo objects 2023-09-24 20:11:00 +02:00
Thomas Waldmann d1fde11645
tests: borg check must not add a spoofed archive to manifest
also: do a small optimisation in borg check:

if the type of the repo object is not ROBJ_ARCHIVE_META, we
can skip the object, it can not contain valid archive meta data.

if the type is correct, this is already a sufficient check, so
we can be quite sure that there will be valid archive metadata
in the object.
2023-09-24 20:10:58 +02:00
Thomas Waldmann 6b4697b479
tests: borg check notices/repairs a spoofed manifest 2023-09-24 20:10:57 +02:00
Thomas Waldmann 170380c657
raise IntegrityError if ro_type is not as expected 2023-09-24 20:10:56 +02:00
Thomas Waldmann cb4676048a
remove remainders of TAM support 2023-09-24 20:10:54 +02:00
Thomas Waldmann 1cf62d8fc7
remove manifest TAMs 2023-09-24 20:10:53 +02:00
Thomas Waldmann 6a68ad5cd6
remove archive TAMs 2023-09-24 20:10:51 +02:00
Thomas Waldmann 1b6f928917
ro_type: typed repo objects, see #7670
writing: put type into repoobj metadata
reading: check wanted type against type we got

repoobj metadata is encrypted and authenticated.
repoobj data is encrypted and authenticated, also (separately).
encryption and decryption of both metadata and data get the
same "chunk ID" as AAD, so both are "bound" to that (same) ID.

a repo-side attacker can neither see cleartext metadata/data,
nor successfully tamper with it (AEAD decryption would fail).

also, a repo-side attacker could not replace a repoobj A with a
differently typed repoobj B without borg noticing:
- the metadata/data is cryptographically bound to its ID.
  authentication/decryption would fail on mismatch.
- the type check would fail.

thus, the problem (see CVEs in changelog) solved in borg 1 by the
manifest and archive TAMs is now already solved by the type check.
2023-09-24 20:10:50 +02:00
TW 506718e82f
Merge pull request #7837 from ThomasWaldmann/remove-recreate-recompress
Remove recreate --recompress option
2023-09-24 18:16:35 +02:00
Thomas Waldmann 0fcd3e9479
add_chunk: remove overwrite parameter 2023-09-23 00:10:35 +02:00
Thomas Waldmann 15c24cbe7e
recreate: remove --recompress option
For many use cases, the repo-wide "rcompress" is more efficient.

Also, recreate --recompress calls add_chunk with overwrite=True,
which is unsupported with the AdHocCache.
2023-09-23 00:01:39 +02:00
TW a9e625d11f
Merge pull request #7834 from ThomasWaldmann/fix-unreadable-dir-cleanup-master
fix post-test permission issues
2023-09-21 00:34:04 +02:00
Thomas Waldmann 2195558eea
fix post-test permission issues 2023-09-20 22:45:57 +02:00
TW 84fc938e3c
Merge pull request #7832 from ThomasWaldmann/exclude-compiled-files
pyproject.toml: exclude source files which have been compiled, fixes #7828
2023-09-18 01:51:28 +02:00
Thomas Waldmann 4b1dac78f5
pyproject.toml: exclude source files which have been compiled, fixes #7828 2023-09-18 01:03:57 +02:00
TW c686dc84ae
Merge pull request #7824 from ThomasWaldmann/rel200b7
release 2.0.0b7
2023-09-14 23:52:32 +02:00
Thomas Waldmann a7067ebbaa
vagrant: upgrade source dependencies of stretch VM 2023-09-14 22:41:44 +02:00
Thomas Waldmann 75f8391bb6
vagrant: upgrade to pyinstaller 5.13.2 2023-09-14 19:26:01 +02:00
Thomas Waldmann b2e8ad0257
vagrant: upgrade to python 3.11.5 2023-09-14 17:01:54 +02:00
Thomas Waldmann 3f75950226
build_usage / build_man 2023-09-14 15:52:08 +02:00
Thomas Waldmann 7e15b6488a
update CHANGES 2023-09-14 15:48:18 +02:00
TW 4e8cc050c2
Merge pull request #7823 from ThomasWaldmann/allow-msgpack-106-master
allow msgpack 1.0.6 (which has py312 wheels), fixes #7810
2023-09-14 15:34:52 +02:00
Thomas Waldmann 12e224613e
test_is_slow_msgpack: skip test on expected slow msgpack environments 2023-09-14 14:47:30 +02:00
Thomas Waldmann 95e75b90f1
allow msgpack 1.0.6 (which has py312 wheels), fixes #7810 2023-09-14 13:47:31 +02:00
TW 2943d1c11e
Merge pull request #7592 from ThomasWaldmann/py312
support / test on Python 3.12
2023-09-14 04:38:57 +02:00
Thomas Waldmann bc9ce99e9b
allow msgpack 1.0.6(rc1) 2023-09-14 04:08:25 +02:00
Thomas Waldmann 1ed7f29572
avoid tarfile deprecation warning for py312 2023-09-14 03:04:36 +02:00
Thomas Waldmann c4327c2819
add wheel to build-system requirements 2023-09-14 03:04:35 +02:00
Thomas Waldmann 1175fbcfd9
support / test on Python 3.12 2023-09-14 03:04:28 +02:00
TW 6bb24ded05
Merge pull request #7817 from bket/openssl-3.0
OpenBSD only: switch to OpenSSL-3.0
2023-09-12 17:36:30 +02:00
TW 9986bcc9c2
Merge pull request #7819 from ThomasWaldmann/remove-twine-master
remove twine from requirements
2023-09-12 17:02:13 +02:00
Thomas Waldmann 34b33d2706
remove twine from requirements
twine is only needed at release time, no need
for all developers or all test runs to install
this.

also, some requirement of twine needs a rust
compiler, so if there is no rust compiler,
automated runs will abort due to that.
2023-09-12 16:02:10 +02:00
Björn Ketelaars 83d4fca4d2 OpenBSD only: switch to OpenSSL-3.0 2023-09-11 21:43:35 +02:00
TW a089448841
Merge pull request #7811 from ThomasWaldmann/update-locked-requirements-master
update requirements.d/development.lock.txt
2023-09-05 15:47:42 +02:00