Commit cd1eb0c4 authored by Noah Hilverling's avatar Noah Hilverling

Initial commit

parents
Pipeline #7300 failed with stages
in 31 minutes and 27 seconds
stages:
- build
- test
- upload
variables:
DOCKER_IMAGE_BASE: registry.icinga.com/build-docker
.build: &build
stage: build
tags:
- docker
image: ${DOCKER_IMAGE_BASE}/${DOCKER_IMAGE}
script:
- icinga-build-package
cache:
key: "${CI_JOB_NAME}"
paths:
- ccache/
artifacts:
paths:
- build/*
expire_in: 1 week
.test: &test
stage: test
tags:
- docker
image: ${DOCKER_IMAGE_BASE}/${DOCKER_IMAGE}
script:
- find build/
- icinga-build-test
.upload: &upload
stage: upload
tags:
- docker
image: ${DOCKER_IMAGE_BASE}/upload
script:
- find build/
- icinga-build-upload-aptly
only:
- tags
###################################
# Debian
###################################
build/debian/buster:
<<: *build
variables:
DOCKER_IMAGE: debian/buster
test/debian/buster:
<<: *test
variables:
DOCKER_IMAGE: debian/buster
dependencies:
- build/debian/buster
upload/debian/buster:
<<: *upload
dependencies:
- build/debian/buster
###################################
# Ubuntu
###################################
build/ubuntu/bionic:
<<: *build
variables:
DOCKER_IMAGE: ubuntu/bionic
test/ubuntu/bionic:
<<: *test
variables:
DOCKER_IMAGE: ubuntu/bionic
dependencies:
- build/ubuntu/bionic
upload/ubuntu/bionic:
<<: *upload
dependencies:
- build/ubuntu/bionic
*.c
*.service
redis (4:4.0.2-3) unstable; urgency=medium
This version drops the Debian-specific support for the
/etc/redis/redis-{server,sentinel}.{pre,post}-{up,down}.d directories in
favour of using systemd's ExecStartPre, ExecStartPost, ExecStopPre,
ExecStopPost commands.
-- Chris Lamb <lamby@debian.org> Wed, 11 Oct 2017 22:55:00 -0400
# -*- sh -*-
#
# Bash completion function for the 'redis-cli' command.
#
# Steve
# --
# http://www.steve.org.uk
#
_redis-cli()
{
COMPREPLY=()
cur=${COMP_WORDS[COMP_CWORD]}
prev=${COMP_WORDS[COMP_CWORD-1]}
#
# All known commands accepted. Sorted.
#
opts='bgrewriteaof bgsave dbsize debug decr decrby del echo exists expire expireat flushall flushdb get getset incr incrby info keys lastsave lindex llen lpop lpush lrange lrem lset ltrim mget move mset msetnx ping randomkey rename renamenx rewriteaof rpop rpoplpush rpush sadd save scard sdiff sdiffstore select set setnx shutdown sinter sinterstore sismember slaveof smembers smove sort spop srandmember srem sunion sunionstore ttl type zadd zcard zincrby zrange zrangebyscore zrem zremrangebyscore zrevrange zscore'
#
# Only complete on the first term.
#
if [ $COMP_CWORD -eq 1 ]; then
COMPREPLY=( $(compgen -W "${opts}" -- ${cur}) )
return 0
fi
}
complete -F _redis-cli redis-cli
#!/bin/sh
for BINARY in redis-server redis-sentinel
do
for MODE in default templated
do
case "${BINARY}" in
redis-server)
NAME="redis"
;;
redis-sentinel)
NAME="sentinel"
;;
esac
case "${MODE}" in
default)
EXTRA="Alias=${NAME}.service"
TARGET="debian/${BINARY}.service"
NAMESPACED="${NAME}"
DESCRIPTION="Advanced key-value store"
;;
templated)
EXTRA=""
TARGET="debian/${BINARY}@.service"
NAMESPACED="${NAME}-%i"
DESCRIPTION="Advanced key-value store (%I)"
;;
esac
: >${TARGET}
if [ "${MODE}" = "templated" ]
then
cat >> ${TARGET} <<EOF
# Templated service file for ${BINARY}(1)
#
# Each instance of ${BINARY} requires its own configuration file:
#
# $ cp /etc/redis/${NAME}.conf /etc/redis/${NAME}-myname.conf
# $ chown redis:redis /etc/redis/${NAME}-myname.conf
#
# Ensure each instance is using their own database:
#
# $ sed -i -e 's@^dbfilename .*@dbfilename dump-myname.rdb@' /etc/redis/${NAME}-myname.conf
#
# We then listen exlusively on UNIX sockets to avoid TCP port collisions:
#
# $ sed -i -e 's@^port .*@port 0@' /etc/redis/${NAME}-myname.conf
# $ sed -i -e 's@^\\(# \\)\\{0,1\\}unixsocket .*@unixsocket /var/run/${NAME}-myname/${BINARY}.sock@' /etc/redis/${NAME}-myname.conf
#
# ... and ensure we are logging, etc. in a unique location:
#
# $ sed -i -e 's@^logfile .*@logfile /var/log/redis/${BINARY}-myname.log@' /etc/redis/${NAME}-myname.conf
# $ sed -i -e 's@^pidfile .*@pidfile /run/redis-myname/${BINARY}.pid@' /etc/redis/${NAME}-myname.conf
#
# We can then start the service as follows, validating we are using our own
# configuration:
#
# $ systemctl start ${BINARY}@myname.service
# $ redis-cli -s /var/run/${NAME}-myname/${BINARY}.sock info | grep config_file
#
# -- Chris Lamb <lamby@debian.org> Mon, 09 Oct 2017 22:17:24 +0100
EOF
fi
cat >> ${TARGET} <<EOF
[Unit]
Description=${DESCRIPTION}
After=network.target
Documentation=http://redis.io/documentation, man:${BINARY}(1)
[Service]
Type=forking
ExecStart=/usr/bin/${BINARY} /etc/redis/${NAMESPACED}.conf
ExecStop=/bin/kill -s TERM \$MAINPID
PIDFile=/run/${NAMESPACED}/${BINARY}.pid
TimeoutStopSec=0
Restart=always
User=redis
Group=redis
RuntimeDirectory=${NAMESPACED}
RuntimeDirectoryMode=2755
UMask=007
PrivateTmp=yes
LimitNOFILE=65535
PrivateDevices=yes
ProtectHome=yes
ReadOnlyDirectories=/
ReadWriteDirectories=-/var/lib/redis
ReadWriteDirectories=-/var/log/redis
ReadWriteDirectories=-/var/run/${NAMESPACED}
NoNewPrivileges=true
CapabilityBoundingSet=CAP_SETGID CAP_SETUID CAP_SYS_RESOURCE
MemoryDenyWriteExecute=true
ProtectKernelModules=true
ProtectKernelTunables=true
ProtectControlGroups=true
RestrictRealtime=true
RestrictNamespaces=true
RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
# ${BINARY} can write to its own config file when in cluster mode so we
# permit writing there by default. If you are not using this feature, it is
# recommended that you replace the following lines with "ProtectSystem=full".
ProtectSystem=true
ReadWriteDirectories=-/etc/redis
[Install]
WantedBy=multi-user.target
EOF
if [ "${EXTRA}" != "" ]
then
echo "${EXTRA}" >> "${TARGET}"
fi
done
done
<
redis (5:5.0.6-1) unstable; urgency=medium
* New upstream release.
<https://groups.google.com/forum/#!topic/redis-db/qTRdgyEbyYU>
* Specify "Rules-Requires-Root: no">.
-- Chris Lamb <lamby@debian.org> Fri, 27 Sep 2019 16:48:24 +0100
redis (5:5.0.5-2) unstable; urgency=medium
* Sourceful upload to unstable to ensure testing migration.
* Bump Standards-Version to 4.4.0.
* Don't build release tags in gitlab-ci.yml.
-- Chris Lamb <lamby@debian.org> Sat, 20 Jul 2019 17:14:37 -0300
redis (5:5.0.5-1) unstable; urgency=medium
* New upstream release.
<https://groups.google.com/forum/#!topic/redis-db/jSAtf64lIW4>
-- Chris Lamb <lamby@debian.org> Wed, 22 May 2019 10:03:21 +0100
redis (5:5.0.4-1) unstable; urgency=medium
* New upstream release.
<https://groups.google.com/forum/#!topic/redis-db/aXusvS8da8g>
-- Chris Lamb <lamby@debian.org> Mon, 18 Mar 2019 14:20:46 -0400
redis (5:5.0.3-4) unstable; urgency=medium
[ Helmut Grohne ]
* Fix cross build failure by building the non-bundled Lua libraries via
dh_auto_build. (Closes: #919862)
-- Chris Lamb <lamby@debian.org> Sun, 20 Jan 2019 22:23:41 +0000
redis (5:5.0.3-3) unstable; urgency=medium
* Fix FTBFS on hurd-i386 by updating patch to aof.c to avoid MAXPATHLEN
reference.
* debian/control:
- Add missing Pre-Depends on ${misc:Pre-Depends}.
- Bump Standards-Version to 4.3.0.
* Bump debhelper compat level to 12.
-- Chris Lamb <lamby@debian.org> Tue, 01 Jan 2019 17:47:28 +0000
redis (5:5.0.3-2) unstable; urgency=medium
* Pass --no-as-needed to ensure linking to the Lua libraries on systems with
--as-needed as the default. (Closes: #916831)
-- Chris Lamb <lamby@debian.org> Fri, 21 Dec 2018 13:18:37 +0000
redis (5:5.0.3-1) unstable; urgency=medium
* New upstream release.
- Drop 0009-Don-t-treat-unsupported-protocols-as-fatal-errors.patch as it
was merged upstream.
- Refresh all patches.
-- Chris Lamb <lamby@debian.org> Tue, 18 Dec 2018 23:48:16 +0000
redis (5:5.0.2-1) unstable; urgency=medium
* New upstream release.
-- Chris Lamb <lamby@debian.org> Sun, 25 Nov 2018 19:04:10 +0100
redis (5:5.0.1-2) unstable; urgency=medium
* Refresh patches.
* Ensure that lack of IPv6 support does not prevent Redis from starting on
Debian where we bind to the ::1 interface by default. (Closes: #900284,
#914354)
-- Chris Lamb <lamby@debian.org> Fri, 23 Nov 2018 18:03:53 +0100
redis (5:5.0.1-1) unstable; urgency=medium
* New upstream release.
* Ensure that Debian-supplied Lua libraries are available using "require"
during Lua scripting to prevent an issue where we could not use the (eg.)
cjson library anymore library anymore. This was a regression introduced in
5:5.0~rc4-3. Thanks to Nicolas Le Manchet <nicolas@lemanchet.fr> for the
report and testcase. (Closes: #913185)
* Refer to /run directly in .service files; /var/run is now merely a symlink
pointing to /run and thus it is now considered best practice to use /run
directly.
* debian/rules:
- Document why we run make in the deps/lua/src directory.
- Add documentation for LUA_LIBS_{DEBIAN,BUNDLED}.
- Call $(MAKE) instead of "make".
- Re-order targets to match usual order.
-- Chris Lamb <lamby@debian.org> Sun, 11 Nov 2018 20:09:51 +0100
redis (5:5.0.0-2) unstable; urgency=medium
* Update our patch to sentinel.conf to ensure the correct runtime PID file
location. (Closes: #911407)
* Listen on ::1 interfaces too for redis-sentinel to match redis-server.
* Also run the new "LOLWUT" command in the redis-cli autopkgtest.
-- Chris Lamb <lamby@debian.org> Fri, 19 Oct 2018 22:36:40 -0400
redis (5:5.0.0-1) unstable; urgency=medium
* New upstream stable release to unstable.
<https://groups.google.com/forum/#!topic/redis-db/l0OXDAlwosU>
* Refresh patches.
* Update Vcs-Git.
-- Chris Lamb <lamby@debian.org> Thu, 18 Oct 2018 21:56:02 -0400
redis (5:5.0~rc5-2) experimental; urgency=medium
* Use the system hiredis now that #907259 has landed. (Closes: #907258)
-- Chris Lamb <lamby@debian.org> Wed, 03 Oct 2018 19:54:17 +0100
redis (5:5.0~rc5-1) experimental; urgency=medium
* New upstream release.
- Drop 0004-SOURCE_DATE_EPOCH.patch; merged upstream.
* debian/watch: Use releases from <https://github.com/antirez/redis/releases>
(not Git) to find RC/beta releases, etc.
-- Chris Lamb <lamby@debian.org> Mon, 24 Sep 2018 21:24:48 +0100
redis (5:5.0~rc4-4) experimental; urgency=medium
* Stop playing whack-a-mole with nondeterminstic testsuite and run with
"|| true" on all architectures. (Closes: #908540)
* Drop ${shlibs:Depends} substvars on "Architecture: any" binary packages.
* Add upstream URIs for patches to support non-embedded jemalloc and Lua.
* Bump Standards-Version to 4.2.1.
-- Chris Lamb <lamby@debian.org> Sat, 15 Sep 2018 19:44:35 +0100
redis (5:5.0~rc4-3) experimental; urgency=medium
* Add support for (and use) a USE_SYSTEM_LUA flag. (Closes: #901669)
* Add support for (and use) a USE_SYSTEM_JEMALLOC flag.
* Refresh 0003-dpkg-buildflags patch.
* Append "-b debian/experimental" to Vcs-Git line to fix "unpushed changes"
vcswatch.cgi false-positives.
-- Chris Lamb <lamby@debian.org> Sun, 26 Aug 2018 14:37:25 +0200
redis (5:5.0~rc4-2) experimental; urgency=medium
* Drop a non-determinstic "dump" test.
-- Chris Lamb <lamby@debian.org> Tue, 07 Aug 2018 11:04:16 +0800
redis (5:5.0~rc4-1) experimental; urgency=medium
* New upstream RC release.
<https://groups.google.com/forum/#!topic/redis-db/aXusvS8da8g>
- Refresh 0002-use-system-jemalloc.patch
- Refresh 0003-dpkg-buildflags.patch
- Refresh 0006-Drop-tests-with-timing-issues.patch
- Refresh 0009-Drop-memory-efficiency-tests-on-advice-from-upstream.patch
-- Chris Lamb <lamby@debian.org> Tue, 07 Aug 2018 11:04:14 +0800
redis (5:4.0.11-3) unstable; urgency=medium
* Stop playing whack-a-mole with nondeterminstic testsuite and run with
"|| true" on all architectures. (Closes: #908540)
* Drop ${shlibs:Depends} substvars on "Architecture: any" binary packages.
* Bump Standards-Version to 4.2.1.
-- Chris Lamb <lamby@debian.org> Sat, 15 Sep 2018 19:55:23 +0100
redis (5:4.0.11-2) unstable; urgency=medium
* Revert "Move to debhelper-compat (= 11) in Build-Depends." as dak will
REJECT with "missing-build-dependency debhelper".
-- Chris Lamb <lamby@debian.org> Mon, 06 Aug 2018 11:42:41 +0800
redis (5:4.0.11-1) unstable; urgency=medium
* New upstream release.
<https://groups.google.com/forum/#!topic/redis-db/aXusvS8da8g>
* Bump Standards-Version to 4.2.0.
* Move to debhelper-compat (= 11) in Build-Depends.
-- Chris Lamb <lamby@debian.org> Mon, 06 Aug 2018 11:42:38 +0800
redis (5:4.0.10-2) unstable; urgency=medium
[ Daniel Shahaf ]
* redis-benchmark(1): Fix default of -n argument. (Closes: #903044)
[ Chris Lamb ]
* Add CVE entries to (released) changelog entry.
* Bump Standards-Version to 4.1.5.
-- Chris Lamb <lamby@debian.org> Thu, 05 Jul 2018 22:14:45 +0200
redis (5:4.0.10-1) unstable; urgency=medium
* CVE-2018-11218, CVE-2018-11219: New upstream security release.
<https://github.com/antirez/redis/issues/5017> for more information.
(Closes: #901495)
-- Chris Lamb <lamby@debian.org> Thu, 14 Jun 2018 08:37:09 +0200
redis (5:4.0.9-4) unstable; urgency=medium
* Update Vcs-* headers to point to salsa.debian.org.
* Move to HTTPS Homepage URI.
* wrap-and-sort -sa.
-- Chris Lamb <lamby@debian.org> Sat, 09 Jun 2018 20:11:35 +0100
redis (5:4.0.9-3) unstable; urgency=medium
* Make /var/log/redis, etc. owned by root:adm, not root:root. Thanks to
Thomas Goirand. (Closes: #900496)
-- Chris Lamb <lamby@debian.org> Fri, 01 Jun 2018 08:56:48 +0100
redis (5:4.0.9-2) unstable; urgency=medium
* Ignore test failures on problematic archs.
* Bump Standards-Version to 4.1.4.
-- Chris Lamb <lamby@debian.org> Tue, 08 May 2018 23:08:36 -0700
redis (5:4.0.9-1) unstable; urgency=medium
* New upstream release.
* Refresh all patches.
-- Chris Lamb <lamby@debian.org> Mon, 02 Apr 2018 20:37:12 +0100
redis (5:4.0.8-2) unstable; urgency=medium
* Also listen on ::1 for IPv6 by default. (Closes: #891432)
-- Chris Lamb <lamby@debian.org> Sun, 25 Feb 2018 14:59:55 +0000
redis (5:4.0.8-1) unstable; urgency=medium
* New upstream release.
<https://groups.google.com/forum/#!topic/redis-db/FGplxMEGEMo>
* Update lintian overrides after rename of
debian-watch-may-check-gpg-signature →
debian-watch-does-not-check-gpg-signature.
* Drop "recursive" argument to chown in postinst script to prevent hardlink
vulnerability.
-- Chris Lamb <lamby@debian.org> Mon, 05 Feb 2018 17:09:44 +0000
redis (5:4.0.7-1) unstable; urgency=medium
* New upstream release.
<https://groups.google.com/forum/#!topic/redis-db/gngqHoh-kRM>
* Refresh patches.
-- Chris Lamb <lamby@debian.org> Wed, 24 Jan 2018 22:10:06 +1100
redis (5:4.0.6-5) unstable; urgency=medium
* Update redis-sentinel's symlink to usr/bin/redis-check-rdb to match
redis-server. This avoids a dangling symlink (and thus a broken package) if
redis-server is not installed. (Closes: #884321)
* Move to debhelper compat level 11.
- Drop reference to --with=systemd - systemd-sequence is no longer provided
in compat >= 11.
* Use https URI for copyright format specification in debian/copyright.
-- Chris Lamb <lamby@debian.org> Sat, 20 Jan 2018 11:21:11 +1100
redis (5:4.0.6-4) unstable; urgency=medium
* Re-add procps to Build-Depends. (Closes: #887075)
-- Chris Lamb <lamby@debian.org> Sat, 13 Jan 2018 19:01:56 +0530
redis (5:4.0.6-3) unstable; urgency=medium
* Use --clients argument to runtest to force single-threaded operation over
using taskset.
* Bump Standards-Version to 4.1.3.
-- Chris Lamb <lamby@debian.org> Sat, 13 Jan 2018 12:55:27 +0530
redis (5:4.0.6-2) unstable; urgency=medium
* Replace redis-sentinel's main dependency with redis-tools from
redis-server, necessarily moving the creating/deletion of the "redis" user
and associated data and log directories to redis-tools. (Closes: #884321)
* Add stub manpages for redis-sentinel, redis-check-aof and redis-check-rdb.
* Bump Standards-Version to 4.1.2.
-- Chris Lamb <lamby@debian.org> Thu, 14 Dec 2017 10:08:30 +0000
redis (5:4.0.6-1) unstable; urgency=medium
* New upstream bugfix release.
-- Chris Lamb <lamby@debian.org> Tue, 05 Dec 2017 13:00:47 +0000
redis (5:4.0.5-1) unstable; urgency=medium
* New upstream release.
* debian/control: Use "metapackage" over "meta-package".
* debian/patches:
- Drop 0008-CVE-2017-15047-Fix-buffer-overflows-occurring-readin.
- Refresh.
-- Chris Lamb <lamby@debian.org> Sat, 02 Dec 2017 18:54:58 +0000
redis (4:4.0.2-9) unstable; urgency=medium
* Also update aof.c for MAXPATHLEN issues. (Closes: #881684)
-- Chris Lamb <lamby@debian.org> Thu, 16 Nov 2017 10:21:37 +0900
redis (4:4.0.2-8) unstable; urgency=medium
* Use get_current_dir_name over PATHMAX, etc. (Closes: #881684)
* Don't rely on taskset existing for kFreeBSD-*. (Closes: #881683)
* Drop "memory efficiency" tests on advice from upstream. (Closes: #881682)
* Correct BSD-3-clause -> BSD-2-clause for Marc Alexander Lehmann's
attribution in debian/copyright.
* Let package be bin-NMUable.
-- Chris Lamb <lamby@debian.org> Thu, 16 Nov 2017 03:50:00 +0900
redis (4:4.0.2-7) unstable; urgency=medium
* Add a "redis" metapackage. (Closes: #876475)
* Drop conditionally exporting FORCE_LIBC_MALLOC; upstreamed since 2.6.0-1.
-- Chris Lamb <lamby@debian.org> Sun, 12 Nov 2017 08:54:24 +0000
redis (4:4.0.2-6) unstable; urgency=medium
* Correct locations of redis-sentinel pidfiles. Thanks to Nicolas Payart for
the patch. (Closes: #880980)
-- Chris Lamb <lamby@debian.org> Mon, 06 Nov 2017 22:02:19 +0000
redis (4:4.0.2-5) unstable; urgency=medium
* CVE-2017-15047: Replace existing patch with upstream-blessed version that
covers another case. (Closes: #878076)
-- Chris Lamb <lamby@debian.org> Tue, 31 Oct 2017 11:13:40 +0100
redis (4:4.0.2-4) unstable; urgency=medium
* CVE-2017-15047: Add input validity checking to redis cluster config slot
numbers. (Closes: #878076)
* Drop debian/bin/generate-parts script now we aren't calling it.
* Correct Bash-esque in NEWS.
* Upstream are not providing signed tarballs, so ignore the
"debian-watch-may-check-gpg-signature" Lintian tag,
* Drop trailing whitespace in debian/changelog.
* Use HTTPS URI in debian/watch.
-- Chris Lamb <lamby@debian.org> Mon, 30 Oct 2017 10:32:04 +0000
redis (4:4.0.2-3) unstable; urgency=medium
* Drop Debian-specific support for
/etc/redis/redis-{server,sentinel}.{pre,post}-{up,down}.d and remove them
if unchanged.
* Include systemd redis-server@.service and redis-sentinel@.service template
files to easily run multiple instances. (Closes: #877702)
* Patch redis.conf and sentinel.conf with quilt instead of maintaining our
own versions under debian/.
* Refresh all patches.
* Bump Standards-Version to 4.1.1.
-- Chris Lamb <lamby@debian.org> Thu, 12 Oct 2017 14:54:27 -0400
redis (4:4.0.2-2) unstable; urgency=medium
* Update 0004-redis-check-rdb test to ensure that redis.rdb exists before
testing it.