commit fcc1a13ab752ec2c1b203fe48b02ad2529533be3
Merge: 36a764ced b06a2a540
Author: Enrico Zini <enrico@debian.org>
Date: Thu Feb 20 16:16:11 2025 +0000
Merge branch 'workers-task-data' into 'devel'
Send configured_task_data instead of task_data to workers (#508)
See merge request freexian-team/debusine!1602
commit b06a2a540b14a4327823c2b7864204d73a77d848
Author: Enrico Zini <enrico@enricozini.org>
Date: Tue Feb 4 16:36:58 2025 +0100
Send configured_task_data instead of task_data to workers
commit 36a764cedcb396ebeaf31e69c370d69e33cc2db0
Merge: 9e6bf22c1 6abb00ef9
Author: Enrico Zini <enrico@debian.org>
Date: Thu Feb 20 15:19:20 2025 +0000
Merge branch 'apply-configuration' into 'devel'
Compute and apply task configuration (#508)
See merge request freexian-team/debusine!1630
commit 6abb00ef93f264ef07fe0e78d1d5906616ff9742
Author: Enrico Zini <enrico@enricozini.org>
Date: Thu Feb 20 15:03:42 2025 +0100
Move TaskDatabase.configure to WorkRequest.configure_for_worker
commit 3e61ee94c2cd5c4acdf51fa32b8f0ce5f613a43a
Author: Enrico Zini <enrico@enricozini.org>
Date: Thu Feb 20 13:52:14 2025 +0100
Moved part of apply_configuration to debusine_task_configuration
commit d632fd7bddadc7047ac8d596057a06bf486f0d14
Author: Enrico Zini <enrico@enricozini.org>
Date: Thu Feb 20 13:20:47 2025 +0100
Moved collection lookup methods to debusine_task_configuration
commit db216d4b425a495b19819ae4d600b1c36f96500c
Author: Enrico Zini <enrico@enricozini.org>
Date: Thu Feb 20 13:29:21 2025 +0100
Fix tests now that Sbuild task fills configuration_context
commit e4505c927aaf3a95fccd67c71467a2b59c91f807
Author: Enrico Zini <enrico@enricozini.org>
Date: Wed Feb 19 16:40:54 2025 +0100
Refactor to reinstantiate the task after configuration
commit cf33553244a82a29693750c87735f3ac8053c017
Author: Enrico Zini <enrico@enricozini.org>
Date: Wed Feb 12 23:07:21 2025 +0100
Compute and apply task configuration
commit 9e6bf22c1d9edac8e965417f5ad397c92c38b101
Merge: dc91da729 b9c7822c3
Author: Carles Pina i Estany <carles@pina.cat>
Date: Thu Feb 20 08:45:13 2025 +0000
Merge branch 'tasks-add-configuration_context' into 'devel'
Tasks add configuration context (#679)
See merge request freexian-team/debusine!1620
commit b9c7822c3e539549ca15396d39a00ec2c49fe886
Author: Carles Pina i Estany <carles@pina.cat>
Date: Thu Feb 20 08:45:13 2025 +0000
Workflows.compute_dynamic_data: compute "configuration_context"
commit dc91da729611923b8d4075cdc9f6e5f303618a25
Merge: be08bf3c7 b9583d93a
Author: Stefano Rivera <stefanor@debian.org>
Date: Wed Feb 19 19:23:51 2025 +0000
Merge branch 'combine-key-purpose' into 'devel'
De-duplicate KeyPurpose classes
See merge request freexian-team/debusine!1642
commit b9583d93ab219f65ac710a2b87c14b2fcf6d1beb
Author: Stefano Rivera <stefano@freexian.com>
Date: Tue Feb 18 19:46:04 2025 -0400
Move DjangoChoicesEnum to debusine.utils
Refactor it to use classmethod, as we had it from debusine.tasks.models,
and use it to replace the implementations in debusine.tasks.models.
commit be08bf3c7224113fd4185e763dee481d19eaac77
Merge: c352d2dbe c8578526d
Author: Enrico Zini <enrico@debian.org>
Date: Wed Feb 19 17:09:26 2025 +0000
Merge branch 'experiment-workspace-workflow' into 'devel'
Added experiment_workspace workflow (#699)
See merge request freexian-team/debusine!1632
commit c8578526db6e37e79af013bd66119225b21af8ac
Author: Enrico Zini <enrico@enricozini.org>
Date: Thu Feb 13 15:00:01 2025 +0100
Added experiment_workspace workflow
commit c352d2dbe45900f1029967a3bbd24bd770215bad
Merge: f940ad0fc 0f2019ac8
Author: Enrico Zini <enrico@debian.org>
Date: Wed Feb 19 14:59:56 2025 +0000
Merge branch 'preserve-next-on-login' into 'devel'
Preserve redirect URL on login (#717)
See merge request freexian-team/debusine!1640
commit 0f2019ac8d8e0719aedac20581de4e358d7ca32c
Author: Enrico Zini <enrico@enricozini.org>
Date: Tue Feb 18 18:31:13 2025 +0100
Reuse next url validation from LoginView
commit eb8258880debf6d564dec08464e4f000c2fdae72
Author: Enrico Zini <enrico@enricozini.org>
Date: Mon Feb 17 11:15:22 2025 +0100
Store login next url in the session for oidc callback to find it
commit 3c0509fea9d0287c452a032da733f24f447013f2
Author: Enrico Zini <enrico@enricozini.org>
Date: Mon Feb 17 10:55:37 2025 +0100
Refresh login and logout views, and make a LoginView of our own
commit f940ad0fcb3d9cd1aef604d69500231c1e2f253f
Merge: 1bab4095b 6f029da7c
Author: Carles Pina i Estany <carles@pina.cat>
Date: Wed Feb 19 13:31:02 2025 +0000
Merge branch 'reprotest-required' into 'devel'
Revert "CI: allow failure for reprotest"
See merge request freexian-team/debusine!1644
commit 1bab4095bf15129bdbd909fe6603b8b772d58f1b
Merge: fee996dfa 430395d5b
Author: Colin Watson <cjwatson@debian.org>
Date: Wed Feb 19 13:03:26 2025 +0000
Merge branch 'vacuum-storage-generalize' into 'devel'
Generalize vacuum_storage to handle other file backends
See merge request freexian-team/debusine!1635
commit 430395d5b2def30f8562702e3247f29ced58d7c1
Author: Colin Watson <cjwatson@debian.org>
Date: Sun Feb 16 14:42:27 2025 +0000
Rename _fix_files_store_directory to _delete_unreferenced_files
This is a somewhat clearer name for what it does.
commit 6f7edfd00f1958ce2a5a84728aeb9a29472c2a27
Author: Colin Watson <cjwatson@debian.org>
Date: Thu Feb 13 17:29:00 2025 +0000
Generalize vacuum_storage to handle other file backends
The cleanup of orphan files from storage and the report of missing files
that are referenced by the database but not present in storage now go
through the file backend, so they will be able to handle other backends
once they're implemented.
Empty directories are still only cleaned up from local storage (but
that's unlikely to be particularly important for cloud storage), and
there's no concept of a non-local upload directory.
Part of #684.
commit dab111e880a97cbcb7b2c2dfbf3ad1a854201678
Author: Colin Watson <cjwatson@debian.org>
Date: Thu Feb 13 17:20:57 2025 +0000
Move news fragment for #684 to a better place
commit fee996dfa426412235d58d614d0556ef56e84da9
Merge: 8a757f4e9 c7136a57b
Author: Carles Pina i Estany <carles@pina.cat>
Date: Wed Feb 19 08:08:31 2025 +0000
Merge branch 'workflows-add-subject' into 'devel'
Workflows add subject (#679)
See merge request freexian-team/debusine!1621
commit c7136a57bed81a0f3c68915cb34e7a7c81a2132e
Author: Carles Pina i Estany <carles@pina.cat>
Date: Wed Feb 19 08:08:31 2025 +0000
Workflows: add "compute_dynamic_data" method. Compute "subject"
commit 6f029da7c2ae7835290587112ea23d3f943e6da5
Author: Carles Pina i Estany <carles@pina.cat>
Date: Wed Feb 19 08:37:17 2025 +0100
Revert "CI: allow failure for reprotest"
This reverts commit d3b5be1eb5269880bcffc19a7bf9b00ab77e137a.
commit 21299f3b97e238288a9517afc44268344cafd9ee
Author: Stefano Rivera <stefano@freexian.com>
Date: Tue Feb 18 15:36:28 2025 -0400
De-duplicate KeyPurpose classes
We had duplication between debusine.artifacts and debusine.assets, from
the migration from signing key artifacts.
We also had duplication in signing service DB models, but those can use
the same StrEnum, with a little help.
commit 8a757f4e952e0e71195471d7f01242a063e72524
Merge: de02a58c5 d3afaf026
Author: Enrico Zini <enrico@debian.org>
Date: Tue Feb 18 05:01:57 2025 +0000
Merge branch 'offload-issues' into 'devel'
Added pointers for further development to sso code
See merge request freexian-team/debusine!1641
commit de02a58c5e92bdd5267c54dad0e9139e839d94ad
Merge: 6ad60e745 4eb3d723c
Author: Colin Watson <cjwatson@debian.org>
Date: Mon Feb 17 15:46:37 2025 +0000
Merge branch 'refactor-file-backend-add-file' into 'devel'
Move common add_file code into FileBackendInterface
See merge request freexian-team/debusine!1637
commit 4eb3d723c11505b27ffe97f80b0cb3ee9df2ac15
Author: Colin Watson <cjwatson@debian.org>
Date: Sun Feb 16 19:31:11 2025 +0000
Move common add_file code into FileBackendInterface
Following b92a0ee5aecbc1da74ff202ef2d7c3f9094cc106, the implementations
of `add_file` were mostly the same, except for some backend-specific
code to check whether a file that already exists in the store has the
expected contents. Push that down to a new
`FileBackendEntryInterface.same_contents` method, and make
`FileBackendInterface.add_file` generic. This makes it easier to add
new backends.
Part of #685.
commit d3afaf02617e1101b98ac8878b7733071f96f40b
Author: Enrico Zini <enrico@enricozini.org>
Date: Mon Feb 17 16:01:04 2025 +0100
Added pointers for further development
commit 6ad60e745fdd0e1e0f7aae386c26903d60f6909c
Merge: f6de35d20 d3b5be1eb
Author: Carles Pina i Estany <carles@pina.cat>
Date: Mon Feb 17 10:52:12 2025 +0000
Merge branch 'reprotest-optional' into 'devel'
CI: allow failure for reprotest
See merge request freexian-team/debusine!1638
commit d3b5be1eb5269880bcffc19a7bf9b00ab77e137a
Author: Carles Pina i Estany <carles@pina.cat>
Date: Mon Feb 17 10:22:17 2025 +0100
CI: allow failure for reprotest
It's temporary failing with:
The following packages have unmet dependencies:
libclass-xsaccessor-perl : Depends: perl (< 5.40.1~) but 5.40.1-2 is to be installed
commit f6de35d20669bfc0c7c7419e280c959ce2cb4a12
Merge: 4a9438a68 dd737ad80
Author: Enrico Zini <enrico@debian.org>
Date: Sun Feb 16 11:34:45 2025 +0000
Merge branch 'servertask-experiment-workspace' into 'devel'
Add Servertask to create experiment workspaces (#699)
See merge request freexian-team/debusine!1618
commit dd737ad80c102e4c6af77ae80042bfe7394d8733
Author: Enrico Zini <enrico@enricozini.org>
Date: Sat Feb 8 12:59:50 2025 +0100
Implemented server task CreateExperimentWorkspace
commit b5745f20d2dcf2d5cdfa1f8eb10b29155c9f21fb
Author: Enrico Zini <enrico@enricozini.org>
Date: Sun Feb 9 12:25:48 2025 +0100
Added can_create_experiment_workspace permission
commit 4a9438a686caf78cb3e09fec284899c15a5488f2
Merge: 2ccc9c66d 3e1baa1b1
Author: Enrico Zini <enrico@debian.org>
Date: Fri Feb 14 14:17:57 2025 +0000
Merge branch 'clean-taskdatabase-interface' into 'devel'
Clean TaskDatabase interface (#508)
See merge request freexian-team/debusine!1628
commit 2ccc9c66de9b363e831a8f219a5875ff12d88a32
Merge: ff48cdc66 dc7d4659f
Author: Colin Watson <cjwatson@debian.org>
Date: Fri Feb 14 11:37:35 2025 +0000
Merge branch 'fix-migration-conflict' into 'devel'
Fix migration conflict
See merge request freexian-team/debusine!1636
commit dc7d4659f1bd4a8142e17014c8463ad6c03a6a6a
Author: Colin Watson <cjwatson@debian.org>
Date: Fri Feb 14 10:53:40 2025 +0000
Fix migration conflict
commit ff48cdc6615f40d3ce4b16ab9a11b2194d53f9b1
Merge: 5f46b5024 085429443
Author: Colin Watson <cjwatson@debian.org>
Date: Fri Feb 14 10:14:22 2025 +0000
Merge branch 'file-store-total-size-bigint' into 'devel'
Fix incorrect types of FileStore size columns
See merge request freexian-team/debusine!1634
commit 085429443d1a97ec59ca15572f6b2dab7bc18fbe
Author: Colin Watson <cjwatson@debian.org>
Date: Thu Feb 13 18:15:47 2025 +0000
Fix incorrect types of FileStore size columns
These are measured in bytes, so they need more than a signed 32-bit
range.
Because the 0128 and 0130 migrations had already landed, we need to
cheat a bit to cover the case of small systems that successfully applied
the data migration in 0129, as well as the case of larger systems that
failed to apply that data migration and rolled back.
commit 5f46b50240243d79317514856fc2150ecd97c4fb
Merge: 8e3f004ab 5fad0975f
Author: Enrico Zini <enrico@debian.org>
Date: Thu Feb 13 16:21:09 2025 +0000
Merge branch 'delete-expired-work-requests' into 'devel'
Deal with expired work requests, without an internal collection, that are referenced by build logs (#635, #644)
See merge request freexian-team/debusine!1631
commit 8e3f004ab3f81ab2a65f48f4e2998678fc81d7b2
Merge: 4e788857f 7386bb690
Author: Enrico Zini <enrico@debian.org>
Date: Thu Feb 13 13:51:59 2025 +0000
Merge branch 'task-config' into 'devel'
Task configuration building blocks (#508)
See merge request freexian-team/debusine!1627
commit 5fad0975fd7e9f3ed4669edfc82d1953a389371b
Author: Enrico Zini <enrico@enricozini.org>
Date: Thu Feb 13 12:38:02 2025 +0100
Deal with build logs references by work requests that do not have an internal collection
commit fe2678b8e562302d4878c055e1fa01652c825c60
Author: Enrico Zini <enrico@enricozini.org>
Date: Thu Feb 13 12:05:27 2025 +0100
Reproduced #635 in test suite
commit 915ac7bab03461a8aa044f5925001b2fcb2a6a40
Author: Enrico Zini <enrico@enricozini.org>
Date: Thu Feb 13 11:52:49 2025 +0100
Moved scanner for unused work requests to db.models.work_requests
commit 3e1baa1b10bba154fc4bca6e6bab3eae6b5ce7bf
Author: Enrico Zini <enrico@enricozini.org>
Date: Wed Feb 12 22:39:39 2025 +0100
Move configure_on_server to TaskDatabase.configure, to remove database references from BaseTask
commit 2580cc3766048c6b8d9996d59f4b40746336fa1c
Author: Enrico Zini <enrico@enricozini.org>
Date: Wed Feb 12 22:31:35 2025 +0100
Remove ServerSideTaskDatabaseInterface: TaskDatabaseInterface is enough
commit 7386bb6902eebae1a717ce71d7dbf63837ae16e5
Author: Enrico Zini <enrico@enricozini.org>
Date: Wed Feb 12 22:24:48 2025 +0100
Added task configuration computational building blocks
commit 52d0a005fb5b62de1da35ae0553d4ddc87e20401
Author: Enrico Zini <enrico@enricozini.org>
Date: Wed Feb 12 22:10:02 2025 +0100
Split TaskDatabase into its own module
commit 51a67be2557fd5942d81cf5bae6699cef4abb8f0
Author: Enrico Zini <enrico@enricozini.org>
Date: Tue Feb 4 10:46:54 2025 +0100
Enumerate lookup names for a task
commit a72dcaa1fc0e1c876835f5808c7e2f259314f844
Author: Enrico Zini <enrico@enricozini.org>
Date: Mon Feb 3 21:17:19 2025 +0100
Added new fields as per task-configuration implementation plan
commit 4e788857f7df3b9df45247944fac43c132d18950
Merge: 00accec24 26f8e617c
Author: Enrico Zini <enrico@debian.org>
Date: Thu Feb 13 12:34:14 2025 +0000
Merge branch 'announce-698' into 'devel'
Towncrier snippet for #698
See merge request freexian-team/debusine!1629
commit 26f8e617c0fc6d7c7abd49e07620609399559ffd
Author: Enrico Zini <enrico@enricozini.org>
Date: Wed Feb 12 23:01:00 2025 +0100
Towncrier snippet for #698
commit 00accec247ec1e2461cbc6897fef9951c26c39a6
Merge: 00980239b b92a0ee5a
Author: Colin Watson <cjwatson@debian.org>
Date: Thu Feb 13 11:11:57 2025 +0000
Merge branch 'refactor-file-backend-interface' into 'devel'
Factor out FileBackendEntryInterface
See merge request freexian-team/debusine!1626
commit 00980239bd259ee3f16e29ea0bb9f8c4552b4876
Merge: 8ba9a7bf1 3889b4dbf
Author: Enrico Zini <enrico@debian.org>
Date: Wed Feb 12 21:23:55 2025 +0000
Merge branch 'workspace-expire-ui' into 'devel'
Added UI to configure workspaces
See merge request freexian-team/debusine!1625
commit b92a0ee5aecbc1da74ff202ef2d7c3f9094cc106
Author: Colin Watson <cjwatson@debian.org>
Date: Wed Feb 12 21:06:06 2025 +0000
Factor out FileBackendEntryInterface
It's currently hard to make `debusine-admin vacuum_storage` work with
anything other than the local backend because it works directly with
local paths, possibly for files that no longer exist in the database;
`FileBackendInterface` is no help in that case because its interesting
methods all take `File` arguments.
Take a step towards fixing this by factoring out a separate
backend-specific `FileBackendEntryInterface`; this can be constructed
without a database file (although nothing does so yet), and is hashable,
which will allow reimplementing the code in `vacuum_storage` that
compares files in the database with files on disk in a backend-agnostic
way.
There should be no functional change resulting from this commit.
Part of #684.
commit 3889b4dbf8e36bcbb21f4e6ec0e772155d905256
Author: Enrico Zini <enrico@enricozini.org>
Date: Wed Feb 12 15:42:45 2025 +0100
Added basic UI to configure a workspace
commit 67e36bd04af929c0fdb047c2f78dc505521a914b
Author: Enrico Zini <enrico@enricozini.org>
Date: Wed Feb 12 13:04:18 2025 +0100
Add Workspace.can_configure permission
commit 8135fd8466e0b02f71384ca5380318443033c6cb
Author: Enrico Zini <enrico@enricozini.org>
Date: Wed Feb 12 12:48:13 2025 +0100
Show expiration time in workspace detail, if set
commit 8ba9a7bf1a13eccd1106db5c9283e7c923a40f68
Merge: 1693428b0 a4a6f243e
Author: Stefano Rivera <stefanor@debian.org>
Date: Wed Feb 12 13:36:26 2025 +0000
Merge branch 'asset-permissions' into 'devel'
Check signing key permissions before executing signing tasks
Closes #576
See merge request freexian-team/debusine!1587
commit 1693428b07f2941fec59bd6d6c426482d8b34703
Merge: fa72f35cf 17963ba38
Author: Colin Watson <cjwatson@debian.org>
Date: Wed Feb 12 12:31:40 2025 +0000
Merge branch 'file-store-max-size' into 'devel'
Add FileStore.soft_max_size and FileStore.max_size
Closes #682
See merge request freexian-team/debusine!1624
commit 17963ba38bf3bb3f1de132fe2af1f1fab8fbf851
Author: Colin Watson <cjwatson@debian.org>
Date: Wed Feb 12 11:06:38 2025 +0000
Require soft_max_size <= max_size if both are set
Idea from Carles.
commit 69a38e3ddafab71eccdb3eb6e91cf59077fdda65
Author: Colin Watson <cjwatson@debian.org>
Date: Tue Feb 11 19:09:25 2025 +0000
Add FileStore.soft_max_size and FileStore.max_size
`soft_max_size` doesn't do anything yet; we'll handle it in
`debusine-admin vacuum_storage` soon.
`max_size` is checked each time we look for a file store that can accept
an upload, so it needs to be efficient, and summing the size of all the
files in the store is a bit too slow on large stores (I timed it at
around 390 ms on debusine.debian.net). I therefore added
`FileStore.total_size`, maintained by a trigger, allowing us to check
against that quickly.
Fixes: #682
commit 325de0ae29a24f140ee8332d54dc08e7abfea253
Author: Colin Watson <cjwatson@debian.org>
Date: Tue Feb 11 19:05:28 2025 +0000
Fix misplaced news fragment
commit fa72f35cf0d416aad99bf80bc0ee26df2328de21
Merge: bff948be6 33fe5d817
Author: Enrico Zini <enrico@debian.org>
Date: Wed Feb 12 11:29:14 2025 +0000
Merge branch 'workspace-expire' into 'devel'
Add Workspace expiration (#698)
See merge request freexian-team/debusine!1612
commit 33fe5d81757604280d15b2e275bd5d25f360aa8c
Author: Enrico Zini <enrico@enricozini.org>
Date: Wed Feb 12 11:42:48 2025 +0100
Also use DeleteWorkspaces for debusine-admin workspace delete
commit 73a24a079185be0c06d2f464a916c69dfb431d79
Author: Enrico Zini <enrico@enricozini.org>
Date: Thu Feb 6 22:03:35 2025 +0100
Added deletion of expired workspaces to delete_expired
commit 4697382eba13ce6bdf78ca6e5aaa8ac3b6e56bf6
Author: Enrico Zini <enrico@enricozini.org>
Date: Thu Feb 6 17:08:08 2025 +0100
Compute expiration time
commit 75a6939ea5f3d1b15c424ae2d55e8f7ab3dcad18
Author: Enrico Zini <enrico@enricozini.org>
Date: Thu Feb 6 16:41:19 2025 +0100
Add expiry fields for Workspace
commit bff948be6af1e35e721824161961facaccb78d12
Merge: 86fda8a6d 9b2638442
Author: Enrico Zini <enrico@debian.org>
Date: Wed Feb 12 10:40:56 2025 +0000
Merge branch 'ephemeral-groups-cleanup' into 'devel'
Implemented cleanup of unused ephemeral groups (#697)
See merge request freexian-team/debusine!1607
commit 9b26384420f934b7dbcabd1e5dbb8bd4fa0f9e5e
Author: Enrico Zini <enrico@enricozini.org>
Date: Wed Feb 5 15:42:20 2025 +0100
Add deletion of unused ephemeral groups to delete_expired
commit db234ad294a04df67f5e1f733613437f394e8b1c
Author: Enrico Zini <enrico@enricozini.org>
Date: Wed Feb 5 15:12:17 2025 +0100
Add GroupManager.unused_ephemeral
commit 86fda8a6d849dc3f506bbd6b9d573a0f28d3058e
Merge: 37389e65a b35913c7f
Author: Colin Watson <cjwatson@debian.org>
Date: Tue Feb 11 16:48:24 2025 +0000
Merge branch 'migrate-scope-with-no-workspaces' into 'devel'
Fix 0120_scope_file_stores_data to handle scopes with no workspaces
Closes #704
See merge request freexian-team/debusine!1623
commit 37389e65a2c306dc32ed406e5160ecbe5879875a
Merge: 177f5a9fe 2e1fece9f
Author: Colin Watson <cjwatson@debian.org>
Date: Tue Feb 11 15:07:57 2025 +0000
Merge branch 'file-store-instance-wide' into 'devel'
Implement FileStore.instance_wide
See merge request freexian-team/debusine!1622
commit b35913c7f2e5039a3eff2779d2622fe0f1beaa3c
Author: Colin Watson <cjwatson@debian.org>
Date: Tue Feb 11 13:01:33 2025 +0000
Fix 0120_scope_file_stores_data to handle scopes with no workspaces
Fixes: #704
commit 2e1fece9f62a50f8335ff32be71bc503d297f032
Author: Colin Watson <cjwatson@debian.org>
Date: Mon Feb 10 18:43:50 2025 +0000
Add --(no-)instance-wide options to "debusine-admin file_store create"
commit 8e82a9ff641d5fd08d01ea11dc9cbb7a13a6c480
Author: Colin Watson <cjwatson@debian.org>
Date: Mon Feb 10 18:39:00 2025 +0000
Implement FileStore.instance_wide
Database unique constraints can only operate on a single table, so to
implement the constraint on non-instance-wide stores we have to mirror
the `instance_wide` field into `FileStoreInScope`. For proper
integrity, it seems much safer to do this using triggers rather than
relying on keeping it perfectly in sync at the application level. We
use a pair of triggers to copy the field value over when a row in either
table is inserted or updated.
Part of #682.
commit a4a6f243e7b8d37dc562a5e4cc2ff2cb868af10a
Author: Stefano Rivera <stefano@freexian.com>
Date: Mon Feb 10 15:42:22 2025 -0400
Record the user_id as well as the username in the signing audit log
commit 74326001f20078dec7ca0e819a082717856b2220
Author: Stefano Rivera <stefano@freexian.com>
Date: Mon Feb 10 13:08:27 2025 -0400
Implement get_source_artifacts_ids in signing tasks
commit 6ae874a3b2df5392af2a5fda3b70c0e573762724
Author: Stefano Rivera <stefano@freexian.com>
Date: Mon Feb 10 12:31:12 2025 -0400
Implement extra permission checks in the the asset API
Ensure that the objects being queried actually relate to the work
request in question, and that the user can see them.
This way we don't leak any information on private objects through the
signing API.
commit bf2e9fcda28b5447f19834a8230deb2d6f8b12b9
Author: Stefano Rivera <stefano@freexian.com>
Date: Sun Jan 26 19:17:20 2025 -0400
Migrate security model from blueprint into signing service internals document.
commit 872a42d33124cf17b2db6589695365bb23175539
Author: Stefano Rivera <stefano@freexian.com>
Date: Sun Jan 12 20:11:53 2025 -0400
Record username and resource data in audit log for debsign task
commit 297993c135bbfb6c54c6eceddbacfc125d070a39
Author: Stefano Rivera <stefano@freexian.com>
Date: Sun Jan 12 20:04:50 2025 -0400
Check for can_sign permission in debsign task.
commit 7f94ef9e7877b37a43cc9054f309af9f39826d17
Author: Stefano Rivera <stefano@freexian.com>
Date: Sun Jan 12 19:51:40 2025 -0400
Record username and resource data in audit log for sign task
commit f4342ccfe04223b787156b73b08818fbcfeb26cc
Author: Stefano Rivera <stefano@freexian.com>
Date: Sun Jan 12 18:22:33 2025 -0400
Check for can_sign permission in sign task.
commit 452a84ce3c31ed0135ef1633d956605bbd6eeb5b
Author: Stefano Rivera <stefano@freexian.com>
Date: Sun Jan 26 16:06:56 2025 -0400
Support integration-tests-task-signing on i386 and arm64
commit 02c4682f8c52dd2d2fadd9a868ac53398db0f994
Author: Stefano Rivera <stefano@freexian.com>
Date: Sun Jan 26 15:27:38 2025 -0400
Refactor integration-tests-task-signing to be extensible
commit ea8c4affcef8642ca817a51a74d62cddf7bda7ce
Author: Stefano Rivera <stefano@freexian.com>
Date: Sat Jan 25 15:43:56 2025 -0400
Management command to manage asset permissions
commit af5f5ae49b64b27de773e2987fc2acec006de062
Author: Stefano Rivera <stefano@freexian.com>
Date: Sat Jan 25 15:43:22 2025 -0400
Rename WorkspaceRoles to be more general
commit 579cc63c7863e10f91430347533e518c3f2f73d3
Author: Stefano Rivera <stefano@freexian.com>
Date: Sun Jan 12 19:30:09 2025 -0400
Allow recording username and resource data in the signing audit log
commit f3308177ad30b5ddff8002bde70ae1d648f81711
Author: Stefano Rivera <stefano@freexian.com>
Date: Sun Jan 12 16:56:15 2025 -0400
Client for asset permission check API
commit 1d6f482ebbb44e09f2c76903788c260c6446a3f9
Author: Stefano Rivera <stefano@freexian.com>
Date: Fri Jan 10 19:05:24 2025 -0400
Implement a view to check asset permissions (for use by signer workers)
commit 7822be6c605fb2866d48038794cb3dca69437c32
Author: Stefano Rivera <stefano@freexian.com>
Date: Sun Jan 12 17:32:18 2025 -0400
Adjust signing permissions specification
Pass workspace name as a string, not an integer ID. The worker doesn't
know the integer ID, only the name.
commit 7c7159ce6da06c884354673337a699ee0e383e33
Author: Stefano Rivera <stefano@freexian.com>
Date: Fri Jan 10 14:15:08 2025 -0400
Add to playground: create_signing_input_artifact()
commit 5ca78e5eb5bd920982bd72bc8ee5448728a9abeb
Author: Stefano Rivera <stefano@freexian.com>
Date: Fri Jan 10 13:39:11 2025 -0400
Add to playground: create_minimal_binary_package_artifact()
commit 29f1cac8bdd03f17ba1859dcda88e909df214f49
Author: Stefano Rivera <stefano@freexian.com>
Date: Thu Jan 9 17:44:52 2025 -0400
Implement Asset.has_permission() for use by worker APIs
commit 6d04ec7b174666e62d886ad9864fb9ad1fd8e95c
Author: Stefano Rivera <stefano@freexian.com>
Date: Thu Jan 9 16:34:43 2025 -0400
Implement Asset.slug and .get_by_slug()
We'll use these slugs in the URL for checking asset permissions.
commit 596d01f01c8919a8ec18f3adcadae70f33273aef
Author: Colin Watson <cjwatson@debian.org>
Date: Mon Feb 10 18:01:04 2025 +0000
Fix 0003_create_workspace to handle changes to FileStore
The `0003_create_workspace` data migration was written in such a way as
to cause problems when adding fields to `FileStore`, because it assumed
that `default_file_store` would return an object compatible with
`Workspace` at that migration state. Adjust it to be more future-proof.
Automatic checks made by the Debian l10n team found some issues with the translations contained in this package. You should check the l10n status report for more information.
Issues can be things such as missing translations, problematic translated strings, outdated PO files, unknown languages, etc.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/d/debusine.png){kind=link}