3 # Integration between git and Debian-style archives
5 # Copyright (C)2013-2017 Ian Jackson
6 # Copyright (C)2017 Sean Whitton
8 # This program is free software: you can redistribute it and/or modify
9 # it under the terms of the GNU General Public License as published by
10 # the Free Software Foundation, either version 3 of the License, or
11 # (at your option) any later version.
13 # This program is distributed in the hope that it will be useful,
14 # but WITHOUT ANY WARRANTY; without even the implied warranty of
15 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 # GNU General Public License for more details.
18 # You should have received a copy of the GNU General Public License
19 # along with this program. If not, see <http://www.gnu.org/licenses/>.
23 use Debian::Dgit qw(:DEFAULT :playground);
29 use Dpkg::Control::Hash;
31 use File::Temp qw(tempdir);
34 use Dpkg::Compression;
35 use Dpkg::Compression::Process;
40 use List::MoreUtils qw(pairwise);
41 use Text::Glob qw(match_glob);
42 use Fcntl qw(:DEFAULT :flock);
47 our $our_version = 'UNRELEASED'; ###substituted###
48 our $absurdity = undef; ###substituted###
50 our @rpushprotovsn_support = qw(4 3 2); # 4 is new tag format
61 our $dryrun_level = 0;
63 our $buildproductsdir = '..';
69 our $existing_package = 'dpkg';
71 our $changes_since_version;
73 our $overwrite_version; # undef: not specified; '': check changelog
75 our $quilt_modes_re = 'linear|smash|auto|nofix|nocheck|gbp|dpm|unapplied';
77 our $split_brain_save;
78 our $we_are_responder;
79 our $we_are_initiator;
80 our $initiator_tempdir;
81 our $patches_applied_dirtily = 00;
85 our $chase_dsc_distro=1;
87 our %forceopts = map { $_=>0 }
88 qw(unrepresentable unsupported-source-format
89 dsc-changes-mismatch changes-origs-exactly
90 import-gitapply-absurd
91 import-gitapply-no-absurd
92 import-dsc-with-dgit-field);
94 our %format_ok = map { $_=>1 } ("1.0","3.0 (native)","3.0 (quilt)");
96 our $suite_re = '[-+.0-9a-z]+';
97 our $cleanmode_re = 'dpkg-source(?:-d)?|git|git-ff|check|none';
98 our $orig_f_comp_re = qr{orig(?:-$extra_orig_namepart_re)?};
99 our $orig_f_sig_re = '\\.(?:asc|gpg|pgp)';
100 our $orig_f_tail_re = "$orig_f_comp_re\\.tar(?:\\.\\w+)?(?:$orig_f_sig_re)?";
102 our $git_authline_re = '^([^<>]+) \<(\S+)\> (\d+ [-+]\d+)$';
103 our $splitbraincache = 'dgit-intern/quilt-cache';
104 our $rewritemap = 'dgit-rewrite/map';
106 our @dpkg_source_ignores = qw(-i(?:^|/)\.git(?:/|$) -I.git);
108 our (@git) = qw(git);
109 our (@dget) = qw(dget);
110 our (@curl) = (qw(curl --proto-redir), '-all,http,https', qw(-L));
111 our (@dput) = qw(dput);
112 our (@debsign) = qw(debsign);
113 our (@gpg) = qw(gpg);
114 our (@sbuild) = qw(sbuild);
116 our (@dgit) = qw(dgit);
117 our (@aptget) = qw(apt-get);
118 our (@aptcache) = qw(apt-cache);
119 our (@dpkgbuildpackage) = (qw(dpkg-buildpackage), @dpkg_source_ignores);
120 our (@dpkgsource) = (qw(dpkg-source), @dpkg_source_ignores);
121 our (@dpkggenchanges) = qw(dpkg-genchanges);
122 our (@mergechanges) = qw(mergechanges -f);
123 our (@gbp_build) = ('');
124 our (@gbp_pq) = ('gbp pq');
125 our (@changesopts) = ('');
127 our %opts_opt_map = ('dget' => \@dget, # accept for compatibility
130 'debsign' => \@debsign,
132 'sbuild' => \@sbuild,
136 'apt-get' => \@aptget,
137 'apt-cache' => \@aptcache,
138 'dpkg-source' => \@dpkgsource,
139 'dpkg-buildpackage' => \@dpkgbuildpackage,
140 'dpkg-genchanges' => \@dpkggenchanges,
141 'gbp-build' => \@gbp_build,
142 'gbp-pq' => \@gbp_pq,
143 'ch' => \@changesopts,
144 'mergechanges' => \@mergechanges);
146 our %opts_opt_cmdonly = ('gpg' => 1, 'git' => 1);
147 our %opts_cfg_insertpos = map {
149 scalar @{ $opts_opt_map{$_} }
150 } keys %opts_opt_map;
152 sub parseopts_late_defaults();
153 sub setup_gitattrs(;$);
154 sub check_gitattrs($$);
161 our $supplementary_message = '';
162 our $need_split_build_invocation = 0;
163 our $split_brain = 0;
167 return unless forkcheck_mainprocess();
168 print STDERR "! $_\n" foreach $supplementary_message =~ m/^.+$/mg;
171 our $remotename = 'dgit';
172 our @ourdscfield = qw(Dgit Vcs-Dgit-Master);
176 if (!defined $absurdity) {
178 $absurdity =~ s{/[^/]+$}{/absurd} or die;
182 my ($v,$distro) = @_;
183 return $tagformatfn->($v, $distro);
186 sub debiantag_maintview ($$) {
187 my ($v,$distro) = @_;
188 return "$distro/".dep14_version_mangle $v;
191 sub madformat ($) { $_[0] eq '3.0 (quilt)' }
193 sub lbranch () { return "$branchprefix/$csuite"; }
194 my $lbranch_re = '^refs/heads/'.$branchprefix.'/([^/.]+)$';
195 sub lref () { return "refs/heads/".lbranch(); }
196 sub lrref () { return "refs/remotes/$remotename/".server_branch($csuite); }
197 sub rrref () { return server_ref($csuite); }
207 return "${package}_".(stripepoch $vsn).$sfx
212 return srcfn($vsn,".dsc");
215 sub changespat ($;$) {
216 my ($vsn, $arch) = @_;
217 return "${package}_".(stripepoch $vsn)."_".($arch//'*').".changes";
220 sub upstreamversion ($) {
232 return unless forkcheck_mainprocess();
233 foreach my $f (@end) {
235 print STDERR "$us: cleanup: $@" if length $@;
239 sub badcfg { print STDERR "$us: invalid configuration: @_\n"; exit 12; }
241 sub forceable_fail ($$) {
242 my ($forceoptsl, $msg) = @_;
243 fail $msg unless grep { $forceopts{$_} } @$forceoptsl;
244 print STDERR "warning: overriding problem due to --force:\n". $msg;
248 my ($forceoptsl) = @_;
249 my @got = grep { $forceopts{$_} } @$forceoptsl;
250 return 0 unless @got;
252 "warning: skipping checks or functionality due to --force-$got[0]\n";
255 sub no_such_package () {
256 print STDERR "$us: package $package does not exist in suite $isuite\n";
260 sub deliberately ($) {
262 return !!grep { $_ eq "--deliberately-$enquiry" } @deliberatelies;
265 sub deliberately_not_fast_forward () {
266 foreach (qw(not-fast-forward fresh-repo)) {
267 return 1 if deliberately($_) || deliberately("TEST-dgit-only-$_");
271 sub quiltmode_splitbrain () {
272 $quilt_mode =~ m/gbp|dpm|unapplied/;
275 sub opts_opt_multi_cmd {
277 push @cmd, split /\s+/, shift @_;
283 return opts_opt_multi_cmd @gbp_pq;
286 sub dgit_privdir () {
287 our $dgit_privdir_made //= ensure_a_playground 'dgit';
290 #---------- remote protocol support, common ----------
292 # remote push initiator/responder protocol:
293 # $ dgit remote-push-build-host <n-rargs> <rargs>... <push-args>...
294 # where <rargs> is <push-host-dir> <supported-proto-vsn>,... ...
295 # < dgit-remote-push-ready <actual-proto-vsn>
302 # > supplementary-message NBYTES # $protovsn >= 3
307 # > file parsed-changelog
308 # [indicates that output of dpkg-parsechangelog follows]
309 # > data-block NBYTES
310 # > [NBYTES bytes of data (no newline)]
311 # [maybe some more blocks]
320 # > param head DGIT-VIEW-HEAD
321 # > param csuite SUITE
322 # > param tagformat old|new
323 # > param maint-view MAINT-VIEW-HEAD
325 # > param buildinfo-filename P_V_X.buildinfo # zero or more times
326 # > file buildinfo # for buildinfos to sign
328 # > previously REFNAME=OBJNAME # if --deliberately-not-fast-forward
329 # # goes into tag, for replay prevention
332 # [indicates that signed tag is wanted]
333 # < data-block NBYTES
334 # < [NBYTES bytes of data (no newline)]
335 # [maybe some more blocks]
339 # > want signed-dsc-changes
340 # < data-block NBYTES [transfer of signed dsc]
342 # < data-block NBYTES [transfer of signed changes]
344 # < data-block NBYTES [transfer of each signed buildinfo
345 # [etc] same number and order as "file buildinfo"]
353 sub i_child_report () {
354 # Sees if our child has died, and reap it if so. Returns a string
355 # describing how it died if it failed, or undef otherwise.
356 return undef unless $i_child_pid;
357 my $got = waitpid $i_child_pid, WNOHANG;
358 return undef if $got <= 0;
359 die unless $got == $i_child_pid;
360 $i_child_pid = undef;
361 return undef unless $?;
362 return "build host child ".waitstatusmsg();
367 fail "connection lost: $!" if $fh->error;
368 fail "protocol violation; $m not expected";
371 sub badproto_badread ($$) {
373 fail "connection lost: $!" if $!;
374 my $report = i_child_report();
375 fail $report if defined $report;
376 badproto $fh, "eof (reading $wh)";
379 sub protocol_expect (&$) {
380 my ($match, $fh) = @_;
383 defined && chomp or badproto_badread $fh, "protocol message";
391 badproto $fh, "\`$_'";
394 sub protocol_send_file ($$) {
395 my ($fh, $ourfn) = @_;
396 open PF, "<", $ourfn or die "$ourfn: $!";
399 my $got = read PF, $d, 65536;
400 die "$ourfn: $!" unless defined $got;
402 print $fh "data-block ".length($d)."\n" or die $!;
403 print $fh $d or die $!;
405 PF->error and die "$ourfn $!";
406 print $fh "data-end\n" or die $!;
410 sub protocol_read_bytes ($$) {
411 my ($fh, $nbytes) = @_;
412 $nbytes =~ m/^[1-9]\d{0,5}$|^0$/ or badproto \*RO, "bad byte count";
414 my $got = read $fh, $d, $nbytes;
415 $got==$nbytes or badproto_badread $fh, "data block";
419 sub protocol_receive_file ($$) {
420 my ($fh, $ourfn) = @_;
421 printdebug "() $ourfn\n";
422 open PF, ">", $ourfn or die "$ourfn: $!";
424 my ($y,$l) = protocol_expect {
425 m/^data-block (.*)$/ ? (1,$1) :
426 m/^data-end$/ ? (0,) :
430 my $d = protocol_read_bytes $fh, $l;
431 print PF $d or die $!;
436 #---------- remote protocol support, responder ----------
438 sub responder_send_command ($) {
440 return unless $we_are_responder;
441 # called even without $we_are_responder
442 printdebug ">> $command\n";
443 print PO $command, "\n" or die $!;
446 sub responder_send_file ($$) {
447 my ($keyword, $ourfn) = @_;
448 return unless $we_are_responder;
449 printdebug "]] $keyword $ourfn\n";
450 responder_send_command "file $keyword";
451 protocol_send_file \*PO, $ourfn;
454 sub responder_receive_files ($@) {
455 my ($keyword, @ourfns) = @_;
456 die unless $we_are_responder;
457 printdebug "[[ $keyword @ourfns\n";
458 responder_send_command "want $keyword";
459 foreach my $fn (@ourfns) {
460 protocol_receive_file \*PI, $fn;
463 protocol_expect { m/^files-end$/ } \*PI;
466 #---------- remote protocol support, initiator ----------
468 sub initiator_expect (&) {
470 protocol_expect { &$match } \*RO;
473 #---------- end remote code ----------
476 if ($we_are_responder) {
478 responder_send_command "progress ".length($m) or die $!;
479 print PO $m or die $!;
489 $ua = LWP::UserAgent->new();
493 progress "downloading $what...";
494 my $r = $ua->get(@_) or die $!;
495 return undef if $r->code == 404;
496 $r->is_success or fail "failed to fetch $what: ".$r->status_line;
497 return $r->decoded_content(charset => 'none');
500 our ($dscdata,$dscurl,$dsc,$dsc_checked,$skew_warning_vsn);
502 sub act_local () { return $dryrun_level <= 1; }
503 sub act_scary () { return !$dryrun_level; }
506 if (!$dryrun_level) {
507 progress "$us ok: @_";
509 progress "would be ok: @_ (but dry run only)";
514 printcmd(\*STDERR,$debugprefix."#",@_);
517 sub runcmd_ordryrun {
525 sub runcmd_ordryrun_local {
534 my ($first_shell, @cmd) = @_;
535 return qw(sh -ec), $first_shell.'; exec "$@"', 'x', @cmd;
538 our $helpmsg = <<END;
540 dgit [dgit-opts] clone [dgit-opts] package [suite] [./dir|/dir]
541 dgit [dgit-opts] fetch|pull [dgit-opts] [suite]
542 dgit [dgit-opts] build [dpkg-buildpackage-opts]
543 dgit [dgit-opts] sbuild [sbuild-opts]
544 dgit [dgit-opts] push [dgit-opts] [suite]
545 dgit [dgit-opts] push-source [dgit-opts] [suite]
546 dgit [dgit-opts] rpush build-host:build-dir ...
547 important dgit options:
548 -k<keyid> sign tag and package with <keyid> instead of default
549 --dry-run -n do not change anything, but go through the motions
550 --damp-run -L like --dry-run but make local changes, without signing
551 --new -N allow introducing a new package
552 --debug -D increase debug level
553 -c<name>=<value> set git config option (used directly by dgit too)
556 our $later_warning_msg = <<END;
557 Perhaps the upload is stuck in incoming. Using the version from git.
561 print STDERR "$us: @_\n", $helpmsg or die $!;
566 @ARGV or badusage "too few arguments";
567 return scalar shift @ARGV;
571 not_necessarily_a_tree();
574 print $helpmsg or die $!;
578 our $td = $ENV{DGIT_TEST_DUMMY_DIR} || "DGIT_TEST_DUMMY_DIR-unset";
580 our %defcfg = ('dgit.default.distro' => 'debian',
581 'dgit.default.default-suite' => 'unstable',
582 'dgit.default.old-dsc-distro' => 'debian',
583 'dgit-suite.*-security.distro' => 'debian-security',
584 'dgit.default.username' => '',
585 'dgit.default.archive-query-default-component' => 'main',
586 'dgit.default.ssh' => 'ssh',
587 'dgit.default.archive-query' => 'madison:',
588 'dgit.default.sshpsql-dbname' => 'service=projectb',
589 'dgit.default.aptget-components' => 'main',
590 'dgit.default.dgit-tag-format' => 'new,old,maint',
591 'dgit.dsc-url-proto-ok.http' => 'true',
592 'dgit.dsc-url-proto-ok.https' => 'true',
593 'dgit.dsc-url-proto-ok.git' => 'true',
594 'dgit.default.dsc-url-proto-ok' => 'false',
595 # old means "repo server accepts pushes with old dgit tags"
596 # new means "repo server accepts pushes with new dgit tags"
597 # maint means "repo server accepts split brain pushes"
598 # hist means "repo server may have old pushes without new tag"
599 # ("hist" is implied by "old")
600 'dgit-distro.debian.archive-query' => 'ftpmasterapi:',
601 'dgit-distro.debian.git-check' => 'url',
602 'dgit-distro.debian.git-check-suffix' => '/info/refs',
603 'dgit-distro.debian.new-private-pushers' => 't',
604 'dgit-distro.debian/push.git-url' => '',
605 'dgit-distro.debian/push.git-host' => 'push.dgit.debian.org',
606 'dgit-distro.debian/push.git-user-force' => 'dgit',
607 'dgit-distro.debian/push.git-proto' => 'git+ssh://',
608 'dgit-distro.debian/push.git-path' => '/dgit/debian/repos',
609 'dgit-distro.debian/push.git-create' => 'true',
610 'dgit-distro.debian/push.git-check' => 'ssh-cmd',
611 'dgit-distro.debian.archive-query-url', 'https://api.ftp-master.debian.org/',
612 # 'dgit-distro.debian.archive-query-tls-key',
613 # '/etc/ssl/certs/%HOST%.pem:/etc/dgit/%HOST%.pem',
614 # ^ this does not work because curl is broken nowadays
615 # Fixing #790093 properly will involve providing providing the key
616 # in some pacagke and maybe updating these paths.
618 # 'dgit-distro.debian.archive-query-tls-curl-args',
619 # '--ca-path=/etc/ssl/ca-debian',
620 # ^ this is a workaround but works (only) on DSA-administered machines
621 'dgit-distro.debian.git-url' => 'https://git.dgit.debian.org',
622 'dgit-distro.debian.git-url-suffix' => '',
623 'dgit-distro.debian.upload-host' => 'ftp-master', # for dput
624 'dgit-distro.debian.mirror' => 'http://ftp.debian.org/debian/',
625 'dgit-distro.debian-security.archive-query' => 'aptget:',
626 'dgit-distro.debian-security.mirror' => 'http://security.debian.org/debian-security/',
627 'dgit-distro.debian-security.aptget-suite-map' => 's#-security$#/updates#',
628 'dgit-distro.debian-security.aptget-suite-rmap' => 's#$#-security#',
629 'dgit-distro.debian-security.nominal-distro' => 'debian',
630 'dgit-distro.debian.backports-quirk' => '(squeeze)-backports*',
631 'dgit-distro.debian-backports.mirror' => 'http://backports.debian.org/debian-backports/',
632 'dgit-distro.ubuntu.git-check' => 'false',
633 'dgit-distro.ubuntu.mirror' => 'http://archive.ubuntu.com/ubuntu',
634 'dgit-distro.test-dummy.ssh' => "$td/ssh",
635 'dgit-distro.test-dummy.username' => "alice",
636 'dgit-distro.test-dummy.git-check' => "ssh-cmd",
637 'dgit-distro.test-dummy.git-create' => "ssh-cmd",
638 'dgit-distro.test-dummy.git-url' => "$td/git",
639 'dgit-distro.test-dummy.git-host' => "git",
640 'dgit-distro.test-dummy.git-path' => "$td/git",
641 'dgit-distro.test-dummy.archive-query' => "dummycatapi:",
642 'dgit-distro.test-dummy.archive-query-url' => "file://$td/aq/",
643 'dgit-distro.test-dummy.mirror' => "file://$td/mirror/",
644 'dgit-distro.test-dummy.upload-host' => 'test-dummy',
648 our @gitcfgsources = qw(cmdline local global system);
649 our $invoked_in_git_tree = 1;
651 sub git_slurp_config () {
652 # This algoritm is a bit subtle, but this is needed so that for
653 # options which we want to be single-valued, we allow the
654 # different config sources to override properly. See #835858.
655 foreach my $src (@gitcfgsources) {
656 next if $src eq 'cmdline';
657 # we do this ourselves since git doesn't handle it
659 $gitcfgs{$src} = git_slurp_config_src $src;
663 sub git_get_config ($) {
665 foreach my $src (@gitcfgsources) {
666 my $l = $gitcfgs{$src}{$c};
667 confess "internal error ($l $c)" if $l && !ref $l;
668 printdebug"C $c ".(defined $l ?
669 join " ", map { messagequote "'$_'" } @$l :
673 @$l==1 or badcfg "multiple values for $c".
674 " (in $src git config)" if @$l > 1;
682 return undef if $c =~ /RETURN-UNDEF/;
683 printdebug "C? $c\n" if $debuglevel >= 5;
684 my $v = git_get_config($c);
685 return $v if defined $v;
686 my $dv = $defcfg{$c};
688 printdebug "CD $c $dv\n" if $debuglevel >= 4;
692 badcfg "need value for one of: @_\n".
693 "$us: distro or suite appears not to be (properly) supported";
696 sub not_necessarily_a_tree () {
697 # needs to be called from pre_*
698 @gitcfgsources = grep { $_ ne 'local' } @gitcfgsources;
699 $invoked_in_git_tree = 0;
702 sub access_basedistro__noalias () {
703 if (defined $idistro) {
706 my $def = cfg("dgit-suite.$isuite.distro", 'RETURN-UNDEF');
707 return $def if defined $def;
708 foreach my $src (@gitcfgsources, 'internal') {
709 my $kl = $src eq 'internal' ? \%defcfg : $gitcfgs{$src};
711 foreach my $k (keys %$kl) {
712 next unless $k =~ m#^dgit-suite\.(.*)\.distro$#;
714 next unless match_glob $dpat, $isuite;
718 return cfg("dgit.default.distro");
722 sub access_basedistro () {
723 my $noalias = access_basedistro__noalias();
724 my $canon = cfg("dgit-distro.$noalias.alias-canon",'RETURN-UNDEF');
725 return $canon // $noalias;
728 sub access_nomdistro () {
729 my $base = access_basedistro();
730 my $r = cfg("dgit-distro.$base.nominal-distro",'RETURN-UNDEF') // $base;
731 $r =~ m/^$distro_re$/ or badcfg
732 "bad syntax for (nominal) distro \`$r' (does not match /^$distro_re$/)";
736 sub access_quirk () {
737 # returns (quirk name, distro to use instead or undef, quirk-specific info)
738 my $basedistro = access_basedistro();
739 my $backports_quirk = cfg("dgit-distro.$basedistro.backports-quirk",
741 if (defined $backports_quirk) {
742 my $re = $backports_quirk;
743 $re =~ s/[^-0-9a-z_\%*()]/\\$&/ig;
745 $re =~ s/\%/([-0-9a-z_]+)/
746 or $re =~ m/[()]/ or badcfg "backports-quirk needs \% or ( )";
747 if ($isuite =~ m/^$re$/) {
748 return ('backports',"$basedistro-backports",$1);
751 return ('none',undef);
756 sub parse_cfg_bool ($$$) {
757 my ($what,$def,$v) = @_;
760 $v =~ m/^[ty1]/ ? 1 :
761 $v =~ m/^[fn0]/ ? 0 :
762 badcfg "$what needs t (true, y, 1) or f (false, n, 0) not \`$v'";
765 sub access_forpush_config () {
766 my $d = access_basedistro();
770 parse_cfg_bool('new-private-pushers', 0,
771 cfg("dgit-distro.$d.new-private-pushers",
774 my $v = cfg("dgit-distro.$d.readonly", 'RETURN-UNDEF');
777 $v =~ m/^[ty1]/ ? 0 : # force readonly, forpush = 0
778 $v =~ m/^[fn0]/ ? 1 : # force nonreadonly, forpush = 1
779 $v =~ m/^[a]/ ? '' : # auto, forpush = ''
780 badcfg "readonly needs t (true, y, 1) or f (false, n, 0) or a (auto)";
783 sub access_forpush () {
784 $access_forpush //= access_forpush_config();
785 return $access_forpush;
789 die "$access_forpush ?" if ($access_forpush // 1) ne 1;
790 badcfg "pushing but distro is configured readonly"
791 if access_forpush_config() eq '0';
793 $supplementary_message = <<'END' unless $we_are_responder;
794 Push failed, before we got started.
795 You can retry the push, after fixing the problem, if you like.
797 parseopts_late_defaults();
801 parseopts_late_defaults();
804 sub supplementary_message ($) {
806 if (!$we_are_responder) {
807 $supplementary_message = $msg;
809 } elsif ($protovsn >= 3) {
810 responder_send_command "supplementary-message ".length($msg)
812 print PO $msg or die $!;
816 sub access_distros () {
817 # Returns list of distros to try, in order
820 # 0. `instead of' distro name(s) we have been pointed to
821 # 1. the access_quirk distro, if any
822 # 2a. the user's specified distro, or failing that } basedistro
823 # 2b. the distro calculated from the suite }
824 my @l = access_basedistro();
826 my (undef,$quirkdistro) = access_quirk();
827 unshift @l, $quirkdistro;
828 unshift @l, $instead_distro;
829 @l = grep { defined } @l;
831 push @l, access_nomdistro();
833 if (access_forpush()) {
834 @l = map { ("$_/push", $_) } @l;
839 sub access_cfg_cfgs (@) {
842 # The nesting of these loops determines the search order. We put
843 # the key loop on the outside so that we search all the distros
844 # for each key, before going on to the next key. That means that
845 # if access_cfg is called with a more specific, and then a less
846 # specific, key, an earlier distro can override the less specific
847 # without necessarily overriding any more specific keys. (If the
848 # distro wants to override the more specific keys it can simply do
849 # so; whereas if we did the loop the other way around, it would be
850 # impossible to for an earlier distro to override a less specific
851 # key but not the more specific ones without restating the unknown
852 # values of the more specific keys.
855 # We have to deal with RETURN-UNDEF specially, so that we don't
856 # terminate the search prematurely.
858 if (m/RETURN-UNDEF/) { push @rundef, $_; last; }
861 foreach my $d (access_distros()) {
862 push @cfgs, map { "dgit-distro.$d.$_" } @realkeys;
864 push @cfgs, map { "dgit.default.$_" } @realkeys;
871 my (@cfgs) = access_cfg_cfgs(@keys);
872 my $value = cfg(@cfgs);
876 sub access_cfg_bool ($$) {
877 my ($def, @keys) = @_;
878 parse_cfg_bool($keys[0], $def, access_cfg(@keys, 'RETURN-UNDEF'));
881 sub string_to_ssh ($) {
883 if ($spec =~ m/\s/) {
884 return qw(sh -ec), 'exec '.$spec.' "$@"', 'x';
890 sub access_cfg_ssh () {
891 my $gitssh = access_cfg('ssh', 'RETURN-UNDEF');
892 if (!defined $gitssh) {
895 return string_to_ssh $gitssh;
899 sub access_runeinfo ($) {
901 return ": dgit ".access_basedistro()." $info ;";
904 sub access_someuserhost ($) {
906 my $user = access_cfg("$some-user-force", 'RETURN-UNDEF');
907 defined($user) && length($user) or
908 $user = access_cfg("$some-user",'username');
909 my $host = access_cfg("$some-host");
910 return length($user) ? "$user\@$host" : $host;
913 sub access_gituserhost () {
914 return access_someuserhost('git');
917 sub access_giturl (;$) {
919 my $url = access_cfg('git-url','RETURN-UNDEF');
922 my $proto = access_cfg('git-proto', 'RETURN-UNDEF');
923 return undef unless defined $proto;
926 access_gituserhost().
927 access_cfg('git-path');
929 $suffix = access_cfg('git-url-suffix','RETURN-UNDEF');
932 return "$url/$package$suffix";
935 sub parsecontrolfh ($$;$) {
936 my ($fh, $desc, $allowsigned) = @_;
937 our $dpkgcontrolhash_noissigned;
940 my %opts = ('name' => $desc);
941 $opts{allow_pgp}= $allowsigned || !$dpkgcontrolhash_noissigned;
942 $c = Dpkg::Control::Hash->new(%opts);
943 $c->parse($fh,$desc) or die "parsing of $desc failed";
944 last if $allowsigned;
945 last if $dpkgcontrolhash_noissigned;
946 my $issigned= $c->get_option('is_pgp_signed');
947 if (!defined $issigned) {
948 $dpkgcontrolhash_noissigned= 1;
949 seek $fh, 0,0 or die "seek $desc: $!";
950 } elsif ($issigned) {
951 fail "control file $desc is (already) PGP-signed. ".
952 " Note that dgit push needs to modify the .dsc and then".
953 " do the signature itself";
962 my ($file, $desc, $allowsigned) = @_;
963 my $fh = new IO::Handle;
964 open $fh, '<', $file or die "$file: $!";
965 my $c = parsecontrolfh($fh,$desc,$allowsigned);
966 $fh->error and die $!;
972 my ($dctrl,$field) = @_;
973 my $v = $dctrl->{$field};
974 return $v if defined $v;
975 fail "missing field $field in ".$dctrl->get_option('name');
979 my $c = Dpkg::Control::Hash->new(name => 'parsed changelog');
980 my $p = new IO::Handle;
981 my @cmd = (qw(dpkg-parsechangelog), @_);
982 open $p, '-|', @cmd or die $!;
984 $?=0; $!=0; close $p or failedcmd @cmd;
988 sub commit_getclogp ($) {
989 # Returns the parsed changelog hashref for a particular commit
991 our %commit_getclogp_memo;
992 my $memo = $commit_getclogp_memo{$objid};
993 return $memo if $memo;
995 my $mclog = dgit_privdir()."clog";
996 runcmd shell_cmd "exec >$mclog", @git, qw(cat-file blob),
997 "$objid:debian/changelog";
998 $commit_getclogp_memo{$objid} = parsechangelog("-l$mclog");
1001 sub parse_dscdata () {
1002 my $dscfh = new IO::File \$dscdata, '<' or die $!;
1003 printdebug Dumper($dscdata) if $debuglevel>1;
1004 $dsc = parsecontrolfh($dscfh,$dscurl,1);
1005 printdebug Dumper($dsc) if $debuglevel>1;
1010 sub archive_query ($;@) {
1011 my ($method) = shift @_;
1012 fail "this operation does not support multiple comma-separated suites"
1014 my $query = access_cfg('archive-query','RETURN-UNDEF');
1015 $query =~ s/^(\w+):// or badcfg "invalid archive-query method \`$query'";
1018 { no strict qw(refs); &{"${method}_${proto}"}($proto,$data,@_); }
1021 sub archive_query_prepend_mirror {
1022 my $m = access_cfg('mirror');
1023 return map { [ $_->[0], $m.$_->[1], @$_[2..$#$_] ] } @_;
1026 sub pool_dsc_subpath ($$) {
1027 my ($vsn,$component) = @_; # $package is implict arg
1028 my $prefix = substr($package, 0, $package =~ m/^l/ ? 4 : 1);
1029 return "/pool/$component/$prefix/$package/".dscfn($vsn);
1032 sub cfg_apply_map ($$$) {
1033 my ($varref, $what, $mapspec) = @_;
1034 return unless $mapspec;
1036 printdebug "config $what EVAL{ $mapspec; }\n";
1038 eval "package Dgit::Config; $mapspec;";
1043 #---------- `ftpmasterapi' archive query method (nascent) ----------
1045 sub archive_api_query_cmd ($) {
1047 my @cmd = (@curl, qw(-sS));
1048 my $url = access_cfg('archive-query-url');
1049 if ($url =~ m#^https://([-.0-9a-z]+)/#) {
1051 my $keys = access_cfg('archive-query-tls-key','RETURN-UNDEF') //'';
1052 foreach my $key (split /\:/, $keys) {
1053 $key =~ s/\%HOST\%/$host/g;
1055 fail "for $url: stat $key: $!" unless $!==ENOENT;
1058 fail "config requested specific TLS key but do not know".
1059 " how to get curl to use exactly that EE key ($key)";
1060 # push @cmd, "--cacert", $key, "--capath", "/dev/enoent";
1061 # # Sadly the above line does not work because of changes
1062 # # to gnutls. The real fix for #790093 may involve
1063 # # new curl options.
1066 # Fixing #790093 properly will involve providing a value
1067 # for this on clients.
1068 my $kargs = access_cfg('archive-query-tls-curl-ca-args','RETURN-UNDEF');
1069 push @cmd, split / /, $kargs if defined $kargs;
1071 push @cmd, $url.$subpath;
1075 sub api_query ($$;$) {
1077 my ($data, $subpath, $ok404) = @_;
1078 badcfg "ftpmasterapi archive query method takes no data part"
1080 my @cmd = archive_api_query_cmd($subpath);
1081 my $url = $cmd[$#cmd];
1082 push @cmd, qw(-w %{http_code});
1083 my $json = cmdoutput @cmd;
1084 unless ($json =~ s/\d+\d+\d$//) {
1085 failedcmd_report_cmd undef, @cmd;
1086 fail "curl failed to print 3-digit HTTP code";
1089 return undef if $code eq '404' && $ok404;
1090 fail "fetch of $url gave HTTP code $code"
1091 unless $url =~ m#^file://# or $code =~ m/^2/;
1092 return decode_json($json);
1095 sub canonicalise_suite_ftpmasterapi {
1096 my ($proto,$data) = @_;
1097 my $suites = api_query($data, 'suites');
1099 foreach my $entry (@$suites) {
1101 my $v = $entry->{$_};
1102 defined $v && $v eq $isuite;
1103 } qw(codename name);
1104 push @matched, $entry;
1106 fail "unknown suite $isuite" unless @matched;
1109 @matched==1 or die "multiple matches for suite $isuite\n";
1110 $cn = "$matched[0]{codename}";
1111 defined $cn or die "suite $isuite info has no codename\n";
1112 $cn =~ m/^$suite_re$/ or die "suite $isuite maps to bad codename\n";
1114 die "bad ftpmaster api response: $@\n".Dumper(\@matched)
1119 sub archive_query_ftpmasterapi {
1120 my ($proto,$data) = @_;
1121 my $info = api_query($data, "dsc_in_suite/$isuite/$package");
1123 my $digester = Digest::SHA->new(256);
1124 foreach my $entry (@$info) {
1126 my $vsn = "$entry->{version}";
1127 my ($ok,$msg) = version_check $vsn;
1128 die "bad version: $msg\n" unless $ok;
1129 my $component = "$entry->{component}";
1130 $component =~ m/^$component_re$/ or die "bad component";
1131 my $filename = "$entry->{filename}";
1132 $filename && $filename !~ m#[^-+:._~0-9a-zA-Z/]|^[/.]|/[/.]#
1133 or die "bad filename";
1134 my $sha256sum = "$entry->{sha256sum}";
1135 $sha256sum =~ m/^[0-9a-f]+$/ or die "bad sha256sum";
1136 push @rows, [ $vsn, "/pool/$component/$filename",
1137 $digester, $sha256sum ];
1139 die "bad ftpmaster api response: $@\n".Dumper($entry)
1142 @rows = sort { -version_compare($a->[0],$b->[0]) } @rows;
1143 return archive_query_prepend_mirror @rows;
1146 sub file_in_archive_ftpmasterapi {
1147 my ($proto,$data,$filename) = @_;
1148 my $pat = $filename;
1151 $pat =~ s#[^-+_.0-9a-z/]# sprintf '%%%02x', ord $& #ge;
1152 my $info = api_query($data, "file_in_archive/$pat", 1);
1155 #---------- `aptget' archive query method ----------
1158 our $aptget_releasefile;
1159 our $aptget_configpath;
1161 sub aptget_aptget () { return @aptget, qw(-c), $aptget_configpath; }
1162 sub aptget_aptcache () { return @aptcache, qw(-c), $aptget_configpath; }
1164 sub aptget_cache_clean {
1165 runcmd_ordryrun_local qw(sh -ec),
1166 'cd "$1"; find -atime +30 -type f -print0 | xargs -0r rm --',
1170 sub aptget_lock_acquire () {
1171 my $lockfile = "$aptget_base/lock";
1172 open APTGET_LOCK, '>', $lockfile or die "open $lockfile: $!";
1173 flock APTGET_LOCK, LOCK_EX or die "lock $lockfile: $!";
1176 sub aptget_prep ($) {
1178 return if defined $aptget_base;
1180 badcfg "aptget archive query method takes no data part"
1183 my $cache = $ENV{XDG_CACHE_DIR} // "$ENV{HOME}/.cache";
1186 ensuredir "$cache/dgit";
1188 access_cfg('aptget-cachekey','RETURN-UNDEF')
1189 // access_nomdistro();
1191 $aptget_base = "$cache/dgit/aptget";
1192 ensuredir $aptget_base;
1194 my $quoted_base = $aptget_base;
1195 die "$quoted_base contains bad chars, cannot continue"
1196 if $quoted_base =~ m/["\\]/; # apt.conf(5) says no escaping :-/
1198 ensuredir $aptget_base;
1200 aptget_lock_acquire();
1202 aptget_cache_clean();
1204 $aptget_configpath = "$aptget_base/apt.conf#$cachekey";
1205 my $sourceslist = "source.list#$cachekey";
1207 my $aptsuites = $isuite;
1208 cfg_apply_map(\$aptsuites, 'suite map',
1209 access_cfg('aptget-suite-map', 'RETURN-UNDEF'));
1211 open SRCS, ">", "$aptget_base/$sourceslist" or die $!;
1212 printf SRCS "deb-src %s %s %s\n",
1213 access_cfg('mirror'),
1215 access_cfg('aptget-components')
1218 ensuredir "$aptget_base/cache";
1219 ensuredir "$aptget_base/lists";
1221 open CONF, ">", $aptget_configpath or die $!;
1223 Debug::NoLocking "true";
1224 APT::Get::List-Cleanup "false";
1225 #clear APT::Update::Post-Invoke-Success;
1226 Dir::Etc::SourceList "$quoted_base/$sourceslist";
1227 Dir::State::Lists "$quoted_base/lists";
1228 Dir::Etc::preferences "$quoted_base/preferences";
1229 Dir::Cache::srcpkgcache "$quoted_base/cache/srcs#$cachekey";
1230 Dir::Cache::pkgcache "$quoted_base/cache/pkgs#$cachekey";
1233 foreach my $key (qw(
1236 Dir::Cache::Archives
1237 Dir::Etc::SourceParts
1238 Dir::Etc::preferencesparts
1240 ensuredir "$aptget_base/$key";
1241 print CONF "$key \"$quoted_base/$key\";\n" or die $!;
1244 my $oldatime = (time // die $!) - 1;
1245 foreach my $oldlist (<$aptget_base/lists/*Release>) {
1246 next unless stat_exists $oldlist;
1247 my ($mtime) = (stat _)[9];
1248 utime $oldatime, $mtime, $oldlist or die "$oldlist $!";
1251 runcmd_ordryrun_local aptget_aptget(), qw(update);
1254 foreach my $oldlist (<$aptget_base/lists/*Release>) {
1255 next unless stat_exists $oldlist;
1256 my ($atime) = (stat _)[8];
1257 next if $atime == $oldatime;
1258 push @releasefiles, $oldlist;
1260 my @inreleasefiles = grep { m#/InRelease$# } @releasefiles;
1261 @releasefiles = @inreleasefiles if @inreleasefiles;
1262 die "apt updated wrong number of Release files (@releasefiles), erk"
1263 unless @releasefiles == 1;
1265 ($aptget_releasefile) = @releasefiles;
1268 sub canonicalise_suite_aptget {
1269 my ($proto,$data) = @_;
1272 my $release = parsecontrol $aptget_releasefile, "Release file", 1;
1274 foreach my $name (qw(Codename Suite)) {
1275 my $val = $release->{$name};
1277 printdebug "release file $name: $val\n";
1278 $val =~ m/^$suite_re$/o or fail
1279 "Release file ($aptget_releasefile) specifies intolerable $name";
1280 cfg_apply_map(\$val, 'suite rmap',
1281 access_cfg('aptget-suite-rmap', 'RETURN-UNDEF'));
1288 sub archive_query_aptget {
1289 my ($proto,$data) = @_;
1292 ensuredir "$aptget_base/source";
1293 foreach my $old (<$aptget_base/source/*.dsc>) {
1294 unlink $old or die "$old: $!";
1297 my $showsrc = cmdoutput aptget_aptcache(), qw(showsrc), $package;
1298 return () unless $showsrc =~ m/^package:\s*\Q$package\E\s*$/mi;
1299 # avoids apt-get source failing with ambiguous error code
1301 runcmd_ordryrun_local
1302 shell_cmd 'cd "$1"/source; shift', $aptget_base,
1303 aptget_aptget(), qw(--download-only --only-source source), $package;
1305 my @dscs = <$aptget_base/source/*.dsc>;
1306 fail "apt-get source did not produce a .dsc" unless @dscs;
1307 fail "apt-get source produced several .dscs (@dscs)" unless @dscs==1;
1309 my $pre_dsc = parsecontrol $dscs[0], $dscs[0], 1;
1312 my $uri = "file://". uri_escape $dscs[0];
1313 $uri =~ s{\%2f}{/}gi;
1314 return [ (getfield $pre_dsc, 'Version'), $uri ];
1317 sub file_in_archive_aptget () { return undef; }
1319 #---------- `dummyapicat' archive query method ----------
1321 sub archive_query_dummycatapi { archive_query_ftpmasterapi @_; }
1322 sub canonicalise_suite_dummycatapi { canonicalise_suite_ftpmasterapi @_; }
1324 sub file_in_archive_dummycatapi ($$$) {
1325 my ($proto,$data,$filename) = @_;
1326 my $mirror = access_cfg('mirror');
1327 $mirror =~ s#^file://#/# or die "$mirror ?";
1329 my @cmd = (qw(sh -ec), '
1331 find -name "$2" -print0 |
1333 ', qw(x), $mirror, $filename);
1334 debugcmd "-|", @cmd;
1335 open FIA, "-|", @cmd or die $!;
1338 printdebug "| $_\n";
1339 m/^(\w+) (\S+)$/ or die "$_ ?";
1340 push @out, { sha256sum => $1, filename => $2 };
1342 close FIA or die failedcmd @cmd;
1346 #---------- `madison' archive query method ----------
1348 sub archive_query_madison {
1349 return archive_query_prepend_mirror
1350 map { [ @$_[0..1] ] } madison_get_parse(@_);
1353 sub madison_get_parse {
1354 my ($proto,$data) = @_;
1355 die unless $proto eq 'madison';
1356 if (!length $data) {
1357 $data= access_cfg('madison-distro','RETURN-UNDEF');
1358 $data //= access_basedistro();
1360 $rmad{$proto,$data,$package} ||= cmdoutput
1361 qw(rmadison -asource),"-s$isuite","-u$data",$package;
1362 my $rmad = $rmad{$proto,$data,$package};
1365 foreach my $l (split /\n/, $rmad) {
1366 $l =~ m{^ \s*( [^ \t|]+ )\s* \|
1367 \s*( [^ \t|]+ )\s* \|
1368 \s*( [^ \t|/]+ )(?:/([^ \t|/]+))? \s* \|
1369 \s*( [^ \t|]+ )\s* }x or die "$rmad ?";
1370 $1 eq $package or die "$rmad $package ?";
1377 $component = access_cfg('archive-query-default-component');
1379 $5 eq 'source' or die "$rmad ?";
1380 push @out, [$vsn,pool_dsc_subpath($vsn,$component),$newsuite];
1382 return sort { -version_compare($a->[0],$b->[0]); } @out;
1385 sub canonicalise_suite_madison {
1386 # madison canonicalises for us
1387 my @r = madison_get_parse(@_);
1389 "unable to canonicalise suite using package $package".
1390 " which does not appear to exist in suite $isuite;".
1391 " --existing-package may help";
1395 sub file_in_archive_madison { return undef; }
1397 #---------- `sshpsql' archive query method ----------
1400 my ($data,$runeinfo,$sql) = @_;
1401 if (!length $data) {
1402 $data= access_someuserhost('sshpsql').':'.
1403 access_cfg('sshpsql-dbname');
1405 $data =~ m/:/ or badcfg "invalid sshpsql method string \`$data'";
1406 my ($userhost,$dbname) = ($`,$'); #';
1408 my @cmd = (access_cfg_ssh, $userhost,
1409 access_runeinfo("ssh-psql $runeinfo").
1410 " export LC_MESSAGES=C; export LC_CTYPE=C;".
1411 " ".shellquote qw(psql -A), $dbname, qw(-c), $sql);
1413 open P, "-|", @cmd or die $!;
1416 printdebug(">|$_|\n");
1419 $!=0; $?=0; close P or failedcmd @cmd;
1421 my $nrows = pop @rows;
1422 $nrows =~ s/^\((\d+) rows?\)$/$1/ or die "$nrows ?";
1423 @rows == $nrows+1 or die "$nrows ".(scalar @rows)." ?";
1424 @rows = map { [ split /\|/, $_ ] } @rows;
1425 my $ncols = scalar @{ shift @rows };
1426 die if grep { scalar @$_ != $ncols } @rows;
1430 sub sql_injection_check {
1431 foreach (@_) { die "$_ $& ?" if m{[^-+=:_.,/0-9a-zA-Z]}; }
1434 sub archive_query_sshpsql ($$) {
1435 my ($proto,$data) = @_;
1436 sql_injection_check $isuite, $package;
1437 my @rows = sshpsql($data, "archive-query $isuite $package", <<END);
1438 SELECT source.version, component.name, files.filename, files.sha256sum
1440 JOIN src_associations ON source.id = src_associations.source
1441 JOIN suite ON suite.id = src_associations.suite
1442 JOIN dsc_files ON dsc_files.source = source.id
1443 JOIN files_archive_map ON files_archive_map.file_id = dsc_files.file
1444 JOIN component ON component.id = files_archive_map.component_id
1445 JOIN files ON files.id = dsc_files.file
1446 WHERE ( suite.suite_name='$isuite' OR suite.codename='$isuite' )
1447 AND source.source='$package'
1448 AND files.filename LIKE '%.dsc';
1450 @rows = sort { -version_compare($a->[0],$b->[0]) } @rows;
1451 my $digester = Digest::SHA->new(256);
1453 my ($vsn,$component,$filename,$sha256sum) = @$_;
1454 [ $vsn, "/pool/$component/$filename",$digester,$sha256sum ];
1456 return archive_query_prepend_mirror @rows;
1459 sub canonicalise_suite_sshpsql ($$) {
1460 my ($proto,$data) = @_;
1461 sql_injection_check $isuite;
1462 my @rows = sshpsql($data, "canonicalise-suite $isuite", <<END);
1463 SELECT suite.codename
1464 FROM suite where suite_name='$isuite' or codename='$isuite';
1466 @rows = map { $_->[0] } @rows;
1467 fail "unknown suite $isuite" unless @rows;
1468 die "ambiguous $isuite: @rows ?" if @rows>1;
1472 sub file_in_archive_sshpsql ($$$) { return undef; }
1474 #---------- `dummycat' archive query method ----------
1476 sub canonicalise_suite_dummycat ($$) {
1477 my ($proto,$data) = @_;
1478 my $dpath = "$data/suite.$isuite";
1479 if (!open C, "<", $dpath) {
1480 $!==ENOENT or die "$dpath: $!";
1481 printdebug "dummycat canonicalise_suite $isuite $dpath ENOENT\n";
1485 chomp or die "$dpath: $!";
1487 printdebug "dummycat canonicalise_suite $isuite $dpath = $_\n";
1491 sub archive_query_dummycat ($$) {
1492 my ($proto,$data) = @_;
1493 canonicalise_suite();
1494 my $dpath = "$data/package.$csuite.$package";
1495 if (!open C, "<", $dpath) {
1496 $!==ENOENT or die "$dpath: $!";
1497 printdebug "dummycat query $csuite $package $dpath ENOENT\n";
1505 printdebug "dummycat query $csuite $package $dpath | $_\n";
1506 my @row = split /\s+/, $_;
1507 @row==2 or die "$dpath: $_ ?";
1510 C->error and die "$dpath: $!";
1512 return archive_query_prepend_mirror
1513 sort { -version_compare($a->[0],$b->[0]); } @rows;
1516 sub file_in_archive_dummycat () { return undef; }
1518 #---------- tag format handling ----------
1520 sub access_cfg_tagformats () {
1521 split /\,/, access_cfg('dgit-tag-format');
1524 sub access_cfg_tagformats_can_splitbrain () {
1525 my %y = map { $_ => 1 } access_cfg_tagformats;
1526 foreach my $needtf (qw(new maint)) {
1527 next if $y{$needtf};
1533 sub need_tagformat ($$) {
1534 my ($fmt, $why) = @_;
1535 fail "need to use tag format $fmt ($why) but also need".
1536 " to use tag format $tagformat_want->[0] ($tagformat_want->[1])".
1537 " - no way to proceed"
1538 if $tagformat_want && $tagformat_want->[0] ne $fmt;
1539 $tagformat_want = [$fmt, $why, $tagformat_want->[2] // 0];
1542 sub select_tagformat () {
1544 return if $tagformatfn && !$tagformat_want;
1545 die 'bug' if $tagformatfn && $tagformat_want;
1546 # ... $tagformat_want assigned after previous select_tagformat
1548 my (@supported) = grep { $_ =~ m/^(?:old|new)$/ } access_cfg_tagformats();
1549 printdebug "select_tagformat supported @supported\n";
1551 $tagformat_want //= [ $supported[0], "distro access configuration", 0 ];
1552 printdebug "select_tagformat specified @$tagformat_want\n";
1554 my ($fmt,$why,$override) = @$tagformat_want;
1556 fail "target distro supports tag formats @supported".
1557 " but have to use $fmt ($why)"
1559 or grep { $_ eq $fmt } @supported;
1561 $tagformat_want = undef;
1563 $tagformatfn = ${*::}{"debiantag_$fmt"};
1565 fail "trying to use unknown tag format \`$fmt' ($why) !"
1566 unless $tagformatfn;
1569 #---------- archive query entrypoints and rest of program ----------
1571 sub canonicalise_suite () {
1572 return if defined $csuite;
1573 fail "cannot operate on $isuite suite" if $isuite eq 'UNRELEASED';
1574 $csuite = archive_query('canonicalise_suite');
1575 if ($isuite ne $csuite) {
1576 progress "canonical suite name for $isuite is $csuite";
1578 progress "canonical suite name is $csuite";
1582 sub get_archive_dsc () {
1583 canonicalise_suite();
1584 my @vsns = archive_query('archive_query');
1585 foreach my $vinfo (@vsns) {
1586 my ($vsn,$vsn_dscurl,$digester,$digest) = @$vinfo;
1587 $dscurl = $vsn_dscurl;
1588 $dscdata = url_get($dscurl);
1590 $skew_warning_vsn = $vsn if !defined $skew_warning_vsn;
1595 $digester->add($dscdata);
1596 my $got = $digester->hexdigest();
1598 fail "$dscurl has hash $got but".
1599 " archive told us to expect $digest";
1602 my $fmt = getfield $dsc, 'Format';
1603 $format_ok{$fmt} or forceable_fail [qw(unsupported-source-format)],
1604 "unsupported source format $fmt, sorry";
1606 $dsc_checked = !!$digester;
1607 printdebug "get_archive_dsc: Version ".(getfield $dsc, 'Version')."\n";
1611 printdebug "get_archive_dsc: nothing in archive, returning undef\n";
1614 sub check_for_git ();
1615 sub check_for_git () {
1617 my $how = access_cfg('git-check');
1618 if ($how eq 'ssh-cmd') {
1620 (access_cfg_ssh, access_gituserhost(),
1621 access_runeinfo("git-check $package").
1622 " set -e; cd ".access_cfg('git-path').";".
1623 " if test -d $package.git; then echo 1; else echo 0; fi");
1624 my $r= cmdoutput @cmd;
1625 if (defined $r and $r =~ m/^divert (\w+)$/) {
1627 my ($usedistro,) = access_distros();
1628 # NB that if we are pushing, $usedistro will be $distro/push
1629 $instead_distro= cfg("dgit-distro.$usedistro.diverts.$divert");
1630 $instead_distro =~ s{^/}{ access_basedistro()."/" }e;
1631 progress "diverting to $divert (using config for $instead_distro)";
1632 return check_for_git();
1634 failedcmd @cmd unless defined $r and $r =~ m/^[01]$/;
1636 } elsif ($how eq 'url') {
1637 my $prefix = access_cfg('git-check-url','git-url');
1638 my $suffix = access_cfg('git-check-suffix','git-suffix',
1639 'RETURN-UNDEF') // '.git';
1640 my $url = "$prefix/$package$suffix";
1641 my @cmd = (@curl, qw(-sS -I), $url);
1642 my $result = cmdoutput @cmd;
1643 $result =~ s/^\S+ 200 .*\n\r?\n//;
1644 # curl -sS -I with https_proxy prints
1645 # HTTP/1.0 200 Connection established
1646 $result =~ m/^\S+ (404|200) /s or
1647 fail "unexpected results from git check query - ".
1648 Dumper($prefix, $result);
1650 if ($code eq '404') {
1652 } elsif ($code eq '200') {
1657 } elsif ($how eq 'true') {
1659 } elsif ($how eq 'false') {
1662 badcfg "unknown git-check \`$how'";
1666 sub create_remote_git_repo () {
1667 my $how = access_cfg('git-create');
1668 if ($how eq 'ssh-cmd') {
1670 (access_cfg_ssh, access_gituserhost(),
1671 access_runeinfo("git-create $package").
1672 "set -e; cd ".access_cfg('git-path').";".
1673 " cp -a _template $package.git");
1674 } elsif ($how eq 'true') {
1677 badcfg "unknown git-create \`$how'";
1681 our ($dsc_hash,$lastpush_mergeinput);
1682 our ($dsc_distro, $dsc_hint_tag, $dsc_hint_url);
1686 dgit_privdir(); # ensures that $dgit_privdir_made is based on $maindir
1687 $playground = fresh_playground 'dgit/unpack';
1690 sub mktree_in_ud_here () {
1691 playtree_setup $gitcfgs{local};
1694 sub git_write_tree () {
1695 my $tree = cmdoutput @git, qw(write-tree);
1696 $tree =~ m/^\w+$/ or die "$tree ?";
1700 sub git_add_write_tree () {
1701 runcmd @git, qw(add -Af .);
1702 return git_write_tree();
1705 sub remove_stray_gits ($) {
1707 my @gitscmd = qw(find -name .git -prune -print0);
1708 debugcmd "|",@gitscmd;
1709 open GITS, "-|", @gitscmd or die $!;
1714 print STDERR "$us: warning: removing from $what: ",
1715 (messagequote $_), "\n";
1719 $!=0; $?=0; close GITS or failedcmd @gitscmd;
1722 sub mktree_in_ud_from_only_subdir ($;$) {
1723 my ($what,$raw) = @_;
1724 # changes into the subdir
1727 die "expected one subdir but found @dirs ?" unless @dirs==1;
1728 $dirs[0] =~ m#^([^/]+)/\.$# or die;
1732 remove_stray_gits($what);
1733 mktree_in_ud_here();
1735 my ($format, $fopts) = get_source_format();
1736 if (madformat($format)) {
1741 my $tree=git_add_write_tree();
1742 return ($tree,$dir);
1745 our @files_csum_info_fields =
1746 (['Checksums-Sha256','Digest::SHA', 'new(256)', 'sha256sum'],
1747 ['Checksums-Sha1', 'Digest::SHA', 'new(1)', 'sha1sum'],
1748 ['Files', 'Digest::MD5', 'new()', 'md5sum']);
1750 sub dsc_files_info () {
1751 foreach my $csumi (@files_csum_info_fields) {
1752 my ($fname, $module, $method) = @$csumi;
1753 my $field = $dsc->{$fname};
1754 next unless defined $field;
1755 eval "use $module; 1;" or die $@;
1757 foreach (split /\n/, $field) {
1759 m/^(\w+) (\d+) (\S+)$/ or
1760 fail "could not parse .dsc $fname line \`$_'";
1761 my $digester = eval "$module"."->$method;" or die $@;
1766 Digester => $digester,
1771 fail "missing any supported Checksums-* or Files field in ".
1772 $dsc->get_option('name');
1776 map { $_->{Filename} } dsc_files_info();
1779 sub files_compare_inputs (@) {
1784 my $showinputs = sub {
1785 return join "; ", map { $_->get_option('name') } @$inputs;
1788 foreach my $in (@$inputs) {
1790 my $in_name = $in->get_option('name');
1792 printdebug "files_compare_inputs $in_name\n";
1794 foreach my $csumi (@files_csum_info_fields) {
1795 my ($fname) = @$csumi;
1796 printdebug "files_compare_inputs $in_name $fname\n";
1798 my $field = $in->{$fname};
1799 next unless defined $field;
1802 foreach (split /\n/, $field) {
1805 my ($info, $f) = m/^(\w+ \d+) (?:\S+ \S+ )?(\S+)$/ or
1806 fail "could not parse $in_name $fname line \`$_'";
1808 printdebug "files_compare_inputs $in_name $fname $f\n";
1812 my $re = \ $record{$f}{$fname};
1814 $fchecked{$f}{$in_name} = 1;
1816 fail "hash or size of $f varies in $fname fields".
1817 " (between: ".$showinputs->().")";
1822 @files = sort @files;
1823 $expected_files //= \@files;
1824 "@$expected_files" eq "@files" or
1825 fail "file list in $in_name varies between hash fields!";
1828 fail "$in_name has no files list field(s)";
1830 printdebug "files_compare_inputs ".Dumper(\%fchecked, \%record)
1833 grep { keys %$_ == @$inputs-1 } values %fchecked
1834 or fail "no file appears in all file lists".
1835 " (looked in: ".$showinputs->().")";
1838 sub is_orig_file_in_dsc ($$) {
1839 my ($f, $dsc_files_info) = @_;
1840 return 0 if @$dsc_files_info <= 1;
1841 # One file means no origs, and the filename doesn't have a "what
1842 # part of dsc" component. (Consider versions ending `.orig'.)
1843 return 0 unless $f =~ m/\.$orig_f_tail_re$/o;
1847 sub is_orig_file_of_vsn ($$) {
1848 my ($f, $upstreamvsn) = @_;
1849 my $base = srcfn $upstreamvsn, '';
1850 return 0 unless $f =~ m/^\Q$base\E\.$orig_f_tail_re$/;
1854 # This function determines whether a .changes file is source-only from
1855 # the point of view of dak. Thus, it permits *_source.buildinfo
1858 # It does not, however, permit any other buildinfo files. After a
1859 # source-only upload, the buildds will try to upload files like
1860 # foo_1.2.3_amd64.buildinfo. If the package maintainer included files
1861 # named like this in their (otherwise) source-only upload, the uploads
1862 # of the buildd can be rejected by dak. Fixing the resultant
1863 # situation can require manual intervention. So we block such
1864 # .buildinfo files when the user tells us to perform a source-only
1865 # upload (such as when using the push-source subcommand with the -C
1866 # option, which calls this function).
1868 # Note, though, that when dgit is told to prepare a source-only
1869 # upload, such as when subcommands like build-source and push-source
1870 # without -C are used, dgit has a more restrictive notion of
1871 # source-only .changes than dak: such uploads will never include
1872 # *_source.buildinfo files. This is because there is no use for such
1873 # files when using a tool like dgit to produce the source package, as
1874 # dgit ensures the source is identical to git HEAD.
1875 sub test_source_only_changes ($) {
1877 foreach my $l (split /\n/, getfield $changes, 'Files') {
1878 $l =~ m/\S+$/ or next;
1879 # \.tar\.[a-z0-9]+ covers orig.tar and the tarballs in native packages
1880 unless ($& =~ m/(?:\.dsc|\.diff\.gz|\.tar\.[a-z0-9]+|_source\.buildinfo)$/) {
1881 print "purportedly source-only changes polluted by $&\n";
1888 sub changes_update_origs_from_dsc ($$$$) {
1889 my ($dsc, $changes, $upstreamvsn, $changesfile) = @_;
1891 printdebug "checking origs needed ($upstreamvsn)...\n";
1892 $_ = getfield $changes, 'Files';
1893 m/^\w+ \d+ (\S+ \S+) \S+$/m or
1894 fail "cannot find section/priority from .changes Files field";
1895 my $placementinfo = $1;
1897 printdebug "checking origs needed placement '$placementinfo'...\n";
1898 foreach my $l (split /\n/, getfield $dsc, 'Files') {
1899 $l =~ m/\S+$/ or next;
1901 printdebug "origs $file | $l\n";
1902 next unless is_orig_file_of_vsn $file, $upstreamvsn;
1903 printdebug "origs $file is_orig\n";
1904 my $have = archive_query('file_in_archive', $file);
1905 if (!defined $have) {
1907 archive does not support .orig check; hope you used --ch:--sa/-sd if needed
1913 printdebug "origs $file \$#\$have=$#$have\n";
1914 foreach my $h (@$have) {
1917 foreach my $csumi (@files_csum_info_fields) {
1918 my ($fname, $module, $method, $archivefield) = @$csumi;
1919 next unless defined $h->{$archivefield};
1920 $_ = $dsc->{$fname};
1921 next unless defined;
1922 m/^(\w+) .* \Q$file\E$/m or
1923 fail ".dsc $fname missing entry for $file";
1924 if ($h->{$archivefield} eq $1) {
1928 "$archivefield: $h->{$archivefield} (archive) != $1 (local .dsc)";
1931 die "$file ".Dumper($h)." ?!" if $same && @differ;
1934 push @found_differ, "archive $h->{filename}: ".join "; ", @differ
1937 printdebug "origs $file f.same=$found_same".
1938 " #f._differ=$#found_differ\n";
1939 if (@found_differ && !$found_same) {
1941 "archive contains $file with different checksum",
1944 # Now we edit the changes file to add or remove it
1945 foreach my $csumi (@files_csum_info_fields) {
1946 my ($fname, $module, $method, $archivefield) = @$csumi;
1947 next unless defined $changes->{$fname};
1949 # in archive, delete from .changes if it's there
1950 $changed{$file} = "removed" if
1951 $changes->{$fname} =~ s/^.* \Q$file\E$(?:)\n//m;
1952 } elsif ($changes->{$fname} =~ m/^.* \Q$file\E$(?:)\n/m) {
1953 # not in archive, but it's here in the .changes
1955 my $dsc_data = getfield $dsc, $fname;
1956 $dsc_data =~ m/^(.* \Q$file\E$)\n/m or die "$dsc_data $file ?";
1958 $extra =~ s/ \d+ /$&$placementinfo /
1959 or die "$fname $extra >$dsc_data< ?"
1960 if $fname eq 'Files';
1961 $changes->{$fname} .= "\n". $extra;
1962 $changed{$file} = "added";
1967 foreach my $file (keys %changed) {
1969 "edited .changes for archive .orig contents: %s %s",
1970 $changed{$file}, $file;
1972 my $chtmp = "$changesfile.tmp";
1973 $changes->save($chtmp);
1975 rename $chtmp,$changesfile or die "$changesfile $!";
1977 progress "[new .changes left in $changesfile]";
1980 progress "$changesfile already has appropriate .orig(s) (if any)";
1984 sub make_commit ($) {
1986 return cmdoutput @git, qw(hash-object -w -t commit), $file;
1989 sub make_commit_text ($) {
1992 my @cmd = (@git, qw(hash-object -w -t commit --stdin));
1994 print Dumper($text) if $debuglevel > 1;
1995 my $child = open2($out, $in, @cmd) or die $!;
1998 print $in $text or die $!;
1999 close $in or die $!;
2001 $h =~ m/^\w+$/ or die;
2003 printdebug "=> $h\n";
2006 waitpid $child, 0 == $child or die "$child $!";
2007 $? and failedcmd @cmd;
2011 sub clogp_authline ($) {
2013 my $author = getfield $clogp, 'Maintainer';
2014 if ($author =~ m/^[^"\@]+\,/) {
2015 # single entry Maintainer field with unquoted comma
2016 $author = ($& =~ y/,//rd).$'; # strip the comma
2018 # git wants a single author; any remaining commas in $author
2019 # are by now preceded by @ (or "). It seems safer to punt on
2020 # "..." for now rather than attempting to dequote or something.
2021 $author =~ s#,.*##ms unless $author =~ m/"/;
2022 my $date = cmdoutput qw(date), '+%s %z', qw(-d), getfield($clogp,'Date');
2023 my $authline = "$author $date";
2024 $authline =~ m/$git_authline_re/o or
2025 fail "unexpected commit author line format \`$authline'".
2026 " (was generated from changelog Maintainer field)";
2027 return ($1,$2,$3) if wantarray;
2031 sub vendor_patches_distro ($$) {
2032 my ($checkdistro, $what) = @_;
2033 return unless defined $checkdistro;
2035 my $series = "debian/patches/\L$checkdistro\E.series";
2036 printdebug "checking for vendor-specific $series ($what)\n";
2038 if (!open SERIES, "<", $series) {
2039 die "$series $!" unless $!==ENOENT;
2048 Unfortunately, this source package uses a feature of dpkg-source where
2049 the same source package unpacks to different source code on different
2050 distros. dgit cannot safely operate on such packages on affected
2051 distros, because the meaning of source packages is not stable.
2053 Please ask the distro/maintainer to remove the distro-specific series
2054 files and use a different technique (if necessary, uploading actually
2055 different packages, if different distros are supposed to have
2059 fail "Found active distro-specific series file for".
2060 " $checkdistro ($what): $series, cannot continue";
2062 die "$series $!" if SERIES->error;
2066 sub check_for_vendor_patches () {
2067 # This dpkg-source feature doesn't seem to be documented anywhere!
2068 # But it can be found in the changelog (reformatted):
2070 # commit 4fa01b70df1dc4458daee306cfa1f987b69da58c
2071 # Author: Raphael Hertzog <hertzog@debian.org>
2072 # Date: Sun Oct 3 09:36:48 2010 +0200
2074 # dpkg-source: correctly create .pc/.quilt_series with alternate
2077 # If you have debian/patches/ubuntu.series and you were
2078 # unpacking the source package on ubuntu, quilt was still
2079 # directed to debian/patches/series instead of
2080 # debian/patches/ubuntu.series.
2082 # debian/changelog | 3 +++
2083 # scripts/Dpkg/Source/Package/V3/quilt.pm | 4 +++-
2084 # 2 files changed, 6 insertions(+), 1 deletion(-)
2087 vendor_patches_distro($ENV{DEB_VENDOR}, "DEB_VENDOR");
2088 vendor_patches_distro(Dpkg::Vendor::get_current_vendor(),
2089 "Dpkg::Vendor \`current vendor'");
2090 vendor_patches_distro(access_basedistro(),
2091 "(base) distro being accessed");
2092 vendor_patches_distro(access_nomdistro(),
2093 "(nominal) distro being accessed");
2096 sub generate_commits_from_dsc () {
2097 # See big comment in fetch_from_archive, below.
2098 # See also README.dsc-import.
2100 changedir $playground;
2102 my @dfi = dsc_files_info();
2103 foreach my $fi (@dfi) {
2104 my $f = $fi->{Filename};
2105 die "$f ?" if $f =~ m#/|^\.|\.dsc$|\.tmp$#;
2106 my $upper_f = "$maindir/../$f";
2108 printdebug "considering reusing $f: ";
2110 if (link_ltarget "$upper_f,fetch", $f) {
2111 printdebug "linked (using ...,fetch).\n";
2112 } elsif ((printdebug "($!) "),
2114 fail "accessing ../$f,fetch: $!";
2115 } elsif (link_ltarget $upper_f, $f) {
2116 printdebug "linked.\n";
2117 } elsif ((printdebug "($!) "),
2119 fail "accessing ../$f: $!";
2121 printdebug "absent.\n";
2125 complete_file_from_dsc('.', $fi, \$refetched)
2128 printdebug "considering saving $f: ";
2130 if (link $f, $upper_f) {
2131 printdebug "linked.\n";
2132 } elsif ((printdebug "($!) "),
2134 fail "saving ../$f: $!";
2135 } elsif (!$refetched) {
2136 printdebug "no need.\n";
2137 } elsif (link $f, "$upper_f,fetch") {
2138 printdebug "linked (using ...,fetch).\n";
2139 } elsif ((printdebug "($!) "),
2141 fail "saving ../$f,fetch: $!";
2143 printdebug "cannot.\n";
2147 # We unpack and record the orig tarballs first, so that we only
2148 # need disk space for one private copy of the unpacked source.
2149 # But we can't make them into commits until we have the metadata
2150 # from the debian/changelog, so we record the tree objects now and
2151 # make them into commits later.
2153 my $upstreamv = upstreamversion $dsc->{version};
2154 my $orig_f_base = srcfn $upstreamv, '';
2156 foreach my $fi (@dfi) {
2157 # We actually import, and record as a commit, every tarball
2158 # (unless there is only one file, in which case there seems
2161 my $f = $fi->{Filename};
2162 printdebug "import considering $f ";
2163 (printdebug "only one dfi\n"), next if @dfi == 1;
2164 (printdebug "not tar\n"), next unless $f =~ m/\.tar(\.\w+)?$/;
2165 (printdebug "signature\n"), next if $f =~ m/$orig_f_sig_re$/o;
2169 $f =~ m/^\Q$orig_f_base\E\.([^._]+)?\.tar(?:\.\w+)?$/;
2171 printdebug "Y ", (join ' ', map { $_//"(none)" }
2172 $compr_ext, $orig_f_part
2175 my $input = new IO::File $f, '<' or die "$f $!";
2179 if (defined $compr_ext) {
2181 Dpkg::Compression::compression_guess_from_filename $f;
2182 fail "Dpkg::Compression cannot handle file $f in source package"
2183 if defined $compr_ext && !defined $cname;
2185 new Dpkg::Compression::Process compression => $cname;
2186 @compr_cmd = $compr_proc->get_uncompress_cmdline();
2187 my $compr_fh = new IO::Handle;
2188 my $compr_pid = open $compr_fh, "-|" // die $!;
2190 open STDIN, "<&", $input or die $!;
2192 die "dgit (child): exec $compr_cmd[0]: $!\n";
2197 rmtree "_unpack-tar";
2198 mkdir "_unpack-tar" or die $!;
2199 my @tarcmd = qw(tar -x -f -
2200 --no-same-owner --no-same-permissions
2201 --no-acls --no-xattrs --no-selinux);
2202 my $tar_pid = fork // die $!;
2204 chdir "_unpack-tar" or die $!;
2205 open STDIN, "<&", $input or die $!;
2207 die "dgit (child): exec $tarcmd[0]: $!";
2209 $!=0; (waitpid $tar_pid, 0) == $tar_pid or die $!;
2210 !$? or failedcmd @tarcmd;
2213 (@compr_cmd ? ($?==SIGPIPE || failedcmd @compr_cmd)
2215 # finally, we have the results in "tarball", but maybe
2216 # with the wrong permissions
2218 runcmd qw(chmod -R +rwX _unpack-tar);
2219 changedir "_unpack-tar";
2220 remove_stray_gits($f);
2221 mktree_in_ud_here();
2223 my ($tree) = git_add_write_tree();
2224 my $tentries = cmdoutput @git, qw(ls-tree -z), $tree;
2225 if ($tentries =~ m/^\d+ tree (\w+)\t[^\000]+\000$/s) {
2227 printdebug "one subtree $1\n";
2229 printdebug "multiple subtrees\n";
2232 rmtree "_unpack-tar";
2234 my $ent = [ $f, $tree ];
2236 Orig => !!$orig_f_part,
2237 Sort => (!$orig_f_part ? 2 :
2238 $orig_f_part =~ m/-/g ? 1 :
2246 # put any without "_" first (spec is not clear whether files
2247 # are always in the usual order). Tarballs without "_" are
2248 # the main orig or the debian tarball.
2249 $a->{Sort} <=> $b->{Sort} or
2253 my $any_orig = grep { $_->{Orig} } @tartrees;
2255 my $dscfn = "$package.dsc";
2257 my $treeimporthow = 'package';
2259 open D, ">", $dscfn or die "$dscfn: $!";
2260 print D $dscdata or die "$dscfn: $!";
2261 close D or die "$dscfn: $!";
2262 my @cmd = qw(dpkg-source);
2263 push @cmd, '--no-check' if $dsc_checked;
2264 if (madformat $dsc->{format}) {
2265 push @cmd, '--skip-patches';
2266 $treeimporthow = 'unpatched';
2268 push @cmd, qw(-x --), $dscfn;
2271 my ($tree,$dir) = mktree_in_ud_from_only_subdir("source package");
2272 if (madformat $dsc->{format}) {
2273 check_for_vendor_patches();
2277 if (madformat $dsc->{format}) {
2278 my @pcmd = qw(dpkg-source --before-build .);
2279 runcmd shell_cmd 'exec >/dev/null', @pcmd;
2281 $dappliedtree = git_add_write_tree();
2284 my @clogcmd = qw(dpkg-parsechangelog --format rfc822 --all);
2285 debugcmd "|",@clogcmd;
2286 open CLOGS, "-|", @clogcmd or die $!;
2291 printdebug "import clog search...\n";
2294 my $stanzatext = do { local $/=""; <CLOGS>; };
2295 printdebug "import clogp ".Dumper($stanzatext) if $debuglevel>1;
2296 last if !defined $stanzatext;
2298 my $desc = "package changelog, entry no.$.";
2299 open my $stanzafh, "<", \$stanzatext or die;
2300 my $thisstanza = parsecontrolfh $stanzafh, $desc, 1;
2301 $clogp //= $thisstanza;
2303 printdebug "import clog $thisstanza->{version} $desc...\n";
2305 last if !$any_orig; # we don't need $r1clogp
2307 # We look for the first (most recent) changelog entry whose
2308 # version number is lower than the upstream version of this
2309 # package. Then the last (least recent) previous changelog
2310 # entry is treated as the one which introduced this upstream
2311 # version and used for the synthetic commits for the upstream
2314 # One might think that a more sophisticated algorithm would be
2315 # necessary. But: we do not want to scan the whole changelog
2316 # file. Stopping when we see an earlier version, which
2317 # necessarily then is an earlier upstream version, is the only
2318 # realistic way to do that. Then, either the earliest
2319 # changelog entry we have seen so far is indeed the earliest
2320 # upload of this upstream version; or there are only changelog
2321 # entries relating to later upstream versions (which is not
2322 # possible unless the changelog and .dsc disagree about the
2323 # version). Then it remains to choose between the physically
2324 # last entry in the file, and the one with the lowest version
2325 # number. If these are not the same, we guess that the
2326 # versions were created in a non-monotic order rather than
2327 # that the changelog entries have been misordered.
2329 printdebug "import clog $thisstanza->{version} vs $upstreamv...\n";
2331 last if version_compare($thisstanza->{version}, $upstreamv) < 0;
2332 $r1clogp = $thisstanza;
2334 printdebug "import clog $r1clogp->{version} becomes r1\n";
2336 die $! if CLOGS->error;
2337 close CLOGS or $?==SIGPIPE or failedcmd @clogcmd;
2339 $clogp or fail "package changelog has no entries!";
2341 my $authline = clogp_authline $clogp;
2342 my $changes = getfield $clogp, 'Changes';
2343 $changes =~ s/^\n//; # Changes: \n
2344 my $cversion = getfield $clogp, 'Version';
2347 $r1clogp //= $clogp; # maybe there's only one entry;
2348 my $r1authline = clogp_authline $r1clogp;
2349 # Strictly, r1authline might now be wrong if it's going to be
2350 # unused because !$any_orig. Whatever.
2352 printdebug "import tartrees authline $authline\n";
2353 printdebug "import tartrees r1authline $r1authline\n";
2355 foreach my $tt (@tartrees) {
2356 printdebug "import tartree $tt->{F} $tt->{Tree}\n";
2358 $tt->{Commit} = make_commit_text($tt->{Orig} ? <<END_O : <<END_T);
2361 committer $r1authline
2365 [dgit import orig $tt->{F}]
2373 [dgit import tarball $package $cversion $tt->{F}]
2378 printdebug "import main commit\n";
2380 open C, ">../commit.tmp" or die $!;
2381 print C <<END or die $!;
2384 print C <<END or die $! foreach @tartrees;
2387 print C <<END or die $!;
2393 [dgit import $treeimporthow $package $cversion]
2397 my $rawimport_hash = make_commit qw(../commit.tmp);
2399 if (madformat $dsc->{format}) {
2400 printdebug "import apply patches...\n";
2402 # regularise the state of the working tree so that
2403 # the checkout of $rawimport_hash works nicely.
2404 my $dappliedcommit = make_commit_text(<<END);
2411 runcmd @git, qw(checkout -q -b dapplied), $dappliedcommit;
2413 runcmd @git, qw(checkout -q -b unpa), $rawimport_hash;
2415 # We need the answers to be reproducible
2416 my @authline = clogp_authline($clogp);
2417 local $ENV{GIT_COMMITTER_NAME} = $authline[0];
2418 local $ENV{GIT_COMMITTER_EMAIL} = $authline[1];
2419 local $ENV{GIT_COMMITTER_DATE} = $authline[2];
2420 local $ENV{GIT_AUTHOR_NAME} = $authline[0];
2421 local $ENV{GIT_AUTHOR_EMAIL} = $authline[1];
2422 local $ENV{GIT_AUTHOR_DATE} = $authline[2];
2424 my $path = $ENV{PATH} or die;
2426 # we use ../../gbp-pq-output, which (given that we are in
2427 # $playground/PLAYTREE, and $playground is .git/dgit/unpack,
2430 foreach my $use_absurd (qw(0 1)) {
2431 runcmd @git, qw(checkout -q unpa);
2432 runcmd @git, qw(update-ref -d refs/heads/patch-queue/unpa);
2433 local $ENV{PATH} = $path;
2436 progress "warning: $@";
2437 $path = "$absurdity:$path";
2438 progress "$us: trying slow absurd-git-apply...";
2439 rename "../../gbp-pq-output","../../gbp-pq-output.0"
2444 die "forbid absurd git-apply\n" if $use_absurd
2445 && forceing [qw(import-gitapply-no-absurd)];
2446 die "only absurd git-apply!\n" if !$use_absurd
2447 && forceing [qw(import-gitapply-absurd)];
2449 local $ENV{DGIT_ABSURD_DEBUG} = $debuglevel if $use_absurd;
2450 local $ENV{PATH} = $path if $use_absurd;
2452 my @showcmd = (gbp_pq, qw(import));
2453 my @realcmd = shell_cmd
2454 'exec >/dev/null 2>>../../gbp-pq-output', @showcmd;
2455 debugcmd "+",@realcmd;
2456 if (system @realcmd) {
2457 die +(shellquote @showcmd).
2459 failedcmd_waitstatus()."\n";
2462 my $gapplied = git_rev_parse('HEAD');
2463 my $gappliedtree = cmdoutput @git, qw(rev-parse HEAD:);
2464 $gappliedtree eq $dappliedtree or
2466 gbp-pq import and dpkg-source disagree!
2467 gbp-pq import gave commit $gapplied
2468 gbp-pq import gave tree $gappliedtree
2469 dpkg-source --before-build gave tree $dappliedtree
2471 $rawimport_hash = $gapplied;
2476 { local $@; eval { runcmd qw(cat ../../gbp-pq-output); }; }
2481 progress "synthesised git commit from .dsc $cversion";
2483 my $rawimport_mergeinput = {
2484 Commit => $rawimport_hash,
2485 Info => "Import of source package",
2487 my @output = ($rawimport_mergeinput);
2489 if ($lastpush_mergeinput) {
2490 my $oldclogp = mergeinfo_getclogp($lastpush_mergeinput);
2491 my $oversion = getfield $oldclogp, 'Version';
2493 version_compare($oversion, $cversion);
2495 @output = ($rawimport_mergeinput, $lastpush_mergeinput,
2496 { Message => <<END, ReverseParents => 1 });
2497 Record $package ($cversion) in archive suite $csuite
2499 } elsif ($vcmp > 0) {
2500 print STDERR <<END or die $!;
2502 Version actually in archive: $cversion (older)
2503 Last version pushed with dgit: $oversion (newer or same)
2506 @output = $lastpush_mergeinput;
2508 # Same version. Use what's in the server git branch,
2509 # discarding our own import. (This could happen if the
2510 # server automatically imports all packages into git.)
2511 @output = $lastpush_mergeinput;
2519 sub complete_file_from_dsc ($$;$) {
2520 our ($dstdir, $fi, $refetched) = @_;
2521 # Ensures that we have, in $dstdir, the file $fi, with the correct
2522 # contents. (Downloading it from alongside $dscurl if necessary.)
2523 # If $refetched is defined, can overwrite "$dstdir/$fi->{Filename}"
2524 # and will set $$refetched=1 if it did so (or tried to).
2526 my $f = $fi->{Filename};
2527 my $tf = "$dstdir/$f";
2531 my $checkhash = sub {
2532 open F, "<", "$tf" or die "$tf: $!";
2533 $fi->{Digester}->reset();
2534 $fi->{Digester}->addfile(*F);
2535 F->error and die $!;
2536 $got = $fi->{Digester}->hexdigest();
2537 return $got eq $fi->{Hash};
2540 if (stat_exists $tf) {
2541 if ($checkhash->()) {
2542 progress "using existing $f";
2546 fail "file $f has hash $got but .dsc".
2547 " demands hash $fi->{Hash} ".
2548 "(perhaps you should delete this file?)";
2550 progress "need to fetch correct version of $f";
2551 unlink $tf or die "$tf $!";
2554 printdebug "$tf does not exist, need to fetch\n";
2558 $furl =~ s{/[^/]+$}{};
2560 die "$f ?" unless $f =~ m/^\Q${package}\E_/;
2561 die "$f ?" if $f =~ m#/#;
2562 runcmd_ordryrun_local @curl,qw(-f -o),$tf,'--',"$furl";
2563 return 0 if !act_local();
2566 fail "file $f has hash $got but .dsc".
2567 " demands hash $fi->{Hash} ".
2568 "(got wrong file from archive!)";
2573 sub ensure_we_have_orig () {
2574 my @dfi = dsc_files_info();
2575 foreach my $fi (@dfi) {
2576 my $f = $fi->{Filename};
2577 next unless is_orig_file_in_dsc($f, \@dfi);
2578 complete_file_from_dsc('..', $fi)
2583 #---------- git fetch ----------
2585 sub lrfetchrefs () { return "refs/dgit-fetch/".access_basedistro(); }
2586 sub lrfetchref () { return lrfetchrefs.'/'.server_branch($csuite); }
2588 # We fetch some parts of lrfetchrefs/*. Ideally we delete these
2589 # locally fetched refs because they have unhelpful names and clutter
2590 # up gitk etc. So we track whether we have "used up" head ref (ie,
2591 # whether we have made another local ref which refers to this object).
2593 # (If we deleted them unconditionally, then we might end up
2594 # re-fetching the same git objects each time dgit fetch was run.)
2596 # So, each use of lrfetchrefs needs to be accompanied by arrangements
2597 # in git_fetch_us to fetch the refs in question, and possibly a call
2598 # to lrfetchref_used.
2600 our (%lrfetchrefs_f, %lrfetchrefs_d);
2601 # $lrfetchrefs_X{lrfetchrefs."/heads/whatever"} = $objid
2603 sub lrfetchref_used ($) {
2604 my ($fullrefname) = @_;
2605 my $objid = $lrfetchrefs_f{$fullrefname};
2606 $lrfetchrefs_d{$fullrefname} = $objid if defined $objid;
2609 sub git_lrfetch_sane {
2610 my ($url, $supplementary, @specs) = @_;
2611 # Make a 'refs/'.lrfetchrefs.'/*' be just like on server,
2612 # at least as regards @specs. Also leave the results in
2613 # %lrfetchrefs_f, and arrange for lrfetchref_used to be
2614 # able to clean these up.
2616 # With $supplementary==1, @specs must not contain wildcards
2617 # and we add to our previous fetches (non-atomically).
2619 # This is rather miserable:
2620 # When git fetch --prune is passed a fetchspec ending with a *,
2621 # it does a plausible thing. If there is no * then:
2622 # - it matches subpaths too, even if the supplied refspec
2623 # starts refs, and behaves completely madly if the source
2624 # has refs/refs/something. (See, for example, Debian #NNNN.)
2625 # - if there is no matching remote ref, it bombs out the whole
2627 # We want to fetch a fixed ref, and we don't know in advance
2628 # if it exists, so this is not suitable.
2630 # Our workaround is to use git ls-remote. git ls-remote has its
2631 # own qairks. Notably, it has the absurd multi-tail-matching
2632 # behaviour: git ls-remote R refs/foo can report refs/foo AND
2633 # refs/refs/foo etc.
2635 # Also, we want an idempotent snapshot, but we have to make two
2636 # calls to the remote: one to git ls-remote and to git fetch. The
2637 # solution is use git ls-remote to obtain a target state, and
2638 # git fetch to try to generate it. If we don't manage to generate
2639 # the target state, we try again.
2641 printdebug "git_lrfetch_sane suppl=$supplementary specs @specs\n";
2643 my $specre = join '|', map {
2646 my $wildcard = $x =~ s/\\\*$/.*/;
2647 die if $wildcard && $supplementary;
2650 printdebug "git_lrfetch_sane specre=$specre\n";
2651 my $wanted_rref = sub {
2653 return m/^(?:$specre)$/;
2656 my $fetch_iteration = 0;
2659 printdebug "git_lrfetch_sane iteration $fetch_iteration\n";
2660 if (++$fetch_iteration > 10) {
2661 fail "too many iterations trying to get sane fetch!";
2664 my @look = map { "refs/$_" } @specs;
2665 my @lcmd = (@git, qw(ls-remote -q --refs), $url, @look);
2669 open GITLS, "-|", @lcmd or die $!;
2671 printdebug "=> ", $_;
2672 m/^(\w+)\s+(\S+)\n/ or die "ls-remote $_ ?";
2673 my ($objid,$rrefname) = ($1,$2);
2674 if (!$wanted_rref->($rrefname)) {
2676 warning: git ls-remote @look reported $rrefname; this is silly, ignoring it.
2680 $wantr{$rrefname} = $objid;
2683 close GITLS or failedcmd @lcmd;
2685 # OK, now %want is exactly what we want for refs in @specs
2687 !m/\*$/ && !exists $wantr{"refs/$_"} ? () :
2688 "+refs/$_:".lrfetchrefs."/$_";
2691 printdebug "git_lrfetch_sane fspecs @fspecs\n";
2693 my @fcmd = (@git, qw(fetch -p -n -q), $url, @fspecs);
2694 runcmd_ordryrun_local @fcmd if @fspecs;
2696 if (!$supplementary) {
2697 %lrfetchrefs_f = ();
2701 git_for_each_ref(lrfetchrefs, sub {
2702 my ($objid,$objtype,$lrefname,$reftail) = @_;
2703 $lrfetchrefs_f{$lrefname} = $objid;
2704 $objgot{$objid} = 1;
2707 if ($supplementary) {
2711 foreach my $lrefname (sort keys %lrfetchrefs_f) {
2712 my $rrefname = 'refs'.substr($lrefname, length lrfetchrefs);
2713 if (!exists $wantr{$rrefname}) {
2714 if ($wanted_rref->($rrefname)) {
2716 git-fetch @fspecs created $lrefname which git ls-remote @look didn't list.
2720 warning: git fetch @fspecs created $lrefname; this is silly, deleting it.
2723 runcmd_ordryrun_local @git, qw(update-ref -d), $lrefname;
2724 delete $lrfetchrefs_f{$lrefname};
2728 foreach my $rrefname (sort keys %wantr) {
2729 my $lrefname = lrfetchrefs.substr($rrefname, 4);
2730 my $got = $lrfetchrefs_f{$lrefname} // '<none>';
2731 my $want = $wantr{$rrefname};
2732 next if $got eq $want;
2733 if (!defined $objgot{$want}) {
2735 warning: git ls-remote suggests we want $lrefname
2736 warning: and it should refer to $want
2737 warning: but git fetch didn't fetch that object to any relevant ref.
2738 warning: This may be due to a race with someone updating the server.
2739 warning: Will try again...
2741 next FETCH_ITERATION;
2744 git-fetch @fspecs made $lrefname=$got but want git ls-remote @look says $want
2746 runcmd_ordryrun_local @git, qw(update-ref -m),
2747 "dgit fetch git fetch fixup", $lrefname, $want;
2748 $lrfetchrefs_f{$lrefname} = $want;
2753 if (defined $csuite) {
2754 printdebug "git_lrfetch_sane: tidying any old suite lrfetchrefs\n";
2755 git_for_each_ref("refs/dgit-fetch/$csuite", sub {
2756 my ($objid,$objtype,$lrefname,$reftail) = @_;
2757 next if $lrfetchrefs_f{$lrefname}; # $csuite eq $distro ?
2758 runcmd_ordryrun_local @git, qw(update-ref -d), $lrefname;
2762 printdebug "git_lrfetch_sane: git fetch --no-insane emulation complete\n",
2763 Dumper(\%lrfetchrefs_f);
2766 sub git_fetch_us () {
2767 # Want to fetch only what we are going to use, unless
2768 # deliberately-not-ff, in which case we must fetch everything.
2770 my @specs = deliberately_not_fast_forward ? qw(tags/*) :
2772 (quiltmode_splitbrain
2773 ? (map { $_->('*',access_nomdistro) }
2774 \&debiantag_new, \&debiantag_maintview)
2775 : debiantags('*',access_nomdistro));
2776 push @specs, server_branch($csuite);
2777 push @specs, $rewritemap;
2778 push @specs, qw(heads/*) if deliberately_not_fast_forward;
2780 my $url = access_giturl();
2781 git_lrfetch_sane $url, 0, @specs;
2784 my @tagpats = debiantags('*',access_nomdistro);
2786 git_for_each_ref([map { "refs/tags/$_" } @tagpats], sub {
2787 my ($objid,$objtype,$fullrefname,$reftail) = @_;
2788 printdebug "currently $fullrefname=$objid\n";
2789 $here{$fullrefname} = $objid;
2791 git_for_each_ref([map { lrfetchrefs."/tags/".$_ } @tagpats], sub {
2792 my ($objid,$objtype,$fullrefname,$reftail) = @_;
2793 my $lref = "refs".substr($fullrefname, length(lrfetchrefs));
2794 printdebug "offered $lref=$objid\n";
2795 if (!defined $here{$lref}) {
2796 my @upd = (@git, qw(update-ref), $lref, $objid, '');
2797 runcmd_ordryrun_local @upd;
2798 lrfetchref_used $fullrefname;
2799 } elsif ($here{$lref} eq $objid) {
2800 lrfetchref_used $fullrefname;
2803 "Not updating $lref from $here{$lref} to $objid.\n";
2808 #---------- dsc and archive handling ----------
2810 sub mergeinfo_getclogp ($) {
2811 # Ensures thit $mi->{Clogp} exists and returns it
2813 $mi->{Clogp} = commit_getclogp($mi->{Commit});
2816 sub mergeinfo_version ($) {
2817 return getfield( (mergeinfo_getclogp $_[0]), 'Version' );
2820 sub fetch_from_archive_record_1 ($) {
2822 runcmd @git, qw(update-ref -m), "dgit fetch $csuite",
2823 'DGIT_ARCHIVE', $hash;
2824 cmdoutput @git, qw(log -n2), $hash;
2825 # ... gives git a chance to complain if our commit is malformed
2828 sub fetch_from_archive_record_2 ($) {
2830 my @upd_cmd = (@git, qw(update-ref -m), 'dgit fetch', lrref(), $hash);
2834 dryrun_report @upd_cmd;
2838 sub parse_dsc_field_def_dsc_distro () {
2839 $dsc_distro //= cfg qw(dgit.default.old-dsc-distro
2840 dgit.default.distro);
2843 sub parse_dsc_field ($$) {
2844 my ($dsc, $what) = @_;
2846 foreach my $field (@ourdscfield) {
2847 $f = $dsc->{$field};
2852 progress "$what: NO git hash";
2853 parse_dsc_field_def_dsc_distro();
2854 } elsif (($dsc_hash, $dsc_distro, $dsc_hint_tag, $dsc_hint_url)
2855 = $f =~ m/^(\w+)\s+($distro_re)\s+($versiontag_re)\s+(\S+)(?:\s|$)/) {
2856 progress "$what: specified git info ($dsc_distro)";
2857 $dsc_hint_tag = [ $dsc_hint_tag ];
2858 } elsif ($f =~ m/^\w+\s*$/) {
2860 parse_dsc_field_def_dsc_distro();
2861 $dsc_hint_tag = [ debiantags +(getfield $dsc, 'Version'),
2863 progress "$what: specified git hash";
2865 fail "$what: invalid Dgit info";
2869 sub resolve_dsc_field_commit ($$) {
2870 my ($already_distro, $already_mapref) = @_;
2872 return unless defined $dsc_hash;
2875 defined $already_mapref &&
2876 ($already_distro eq $dsc_distro || !$chase_dsc_distro)
2877 ? $already_mapref : undef;
2881 my ($what, @fetch) = @_;
2883 local $idistro = $dsc_distro;
2884 my $lrf = lrfetchrefs;
2886 if (!$chase_dsc_distro) {
2888 "not chasing .dsc distro $dsc_distro: not fetching $what";
2893 ".dsc names distro $dsc_distro: fetching $what";
2895 my $url = access_giturl();
2896 if (!defined $url) {
2897 defined $dsc_hint_url or fail <<END;
2898 .dsc Dgit metadata is in context of distro $dsc_distro
2899 for which we have no configured url and .dsc provides no hint
2902 $dsc_hint_url =~ m#^([-+0-9a-zA-Z]+):# ? $1 :
2903 $dsc_hint_url =~ m#^/# ? 'file' : 'bad-syntax';
2904 parse_cfg_bool "dsc-url-proto-ok", 'false',
2905 cfg("dgit.dsc-url-proto-ok.$proto",
2906 "dgit.default.dsc-url-proto-ok")
2908 .dsc Dgit metadata is in context of distro $dsc_distro
2909 for which we have no configured url;
2910 .dsc provides hinted url with protocol $proto which is unsafe.
2911 (can be overridden by config - consult documentation)
2913 $url = $dsc_hint_url;
2916 git_lrfetch_sane $url, 1, @fetch;
2921 my $rewrite_enable = do {
2922 local $idistro = $dsc_distro;
2923 access_cfg('rewrite-map-enable', 'RETURN-UNDEF');
2926 if (parse_cfg_bool 'rewrite-map-enable', 'true', $rewrite_enable) {
2927 if (!defined $mapref) {
2928 my $lrf = $do_fetch->("rewrite map", $rewritemap) or return;
2929 $mapref = $lrf.'/'.$rewritemap;
2931 my $rewritemapdata = git_cat_file $mapref.':map';
2932 if (defined $rewritemapdata
2933 && $rewritemapdata =~ m/^$dsc_hash(?:[ \t](\w+))/m) {
2935 "server's git history rewrite map contains a relevant entry!";
2938 if (defined $dsc_hash) {
2939 progress "using rewritten git hash in place of .dsc value";
2941 progress "server data says .dsc hash is to be disregarded";
2946 if (!defined git_cat_file $dsc_hash) {
2947 my @tags = map { "tags/".$_ } @$dsc_hint_tag;
2948 my $lrf = $do_fetch->("additional commits", @tags) &&
2949 defined git_cat_file $dsc_hash
2951 .dsc Dgit metadata requires commit $dsc_hash
2952 but we could not obtain that object anywhere.
2954 foreach my $t (@tags) {
2955 my $fullrefname = $lrf.'/'.$t;
2956 # print STDERR "CHK $t $fullrefname ".Dumper(\%lrfetchrefs_f);
2957 next unless $lrfetchrefs_f{$fullrefname};
2958 next unless is_fast_fwd "$fullrefname~0", $dsc_hash;
2959 lrfetchref_used $fullrefname;
2964 sub fetch_from_archive () {
2965 ensure_setup_existing_tree();
2967 # Ensures that lrref() is what is actually in the archive, one way
2968 # or another, according to us - ie this client's
2969 # appropritaely-updated archive view. Also returns the commit id.
2970 # If there is nothing in the archive, leaves lrref alone and
2971 # returns undef. git_fetch_us must have already been called.
2975 parse_dsc_field($dsc, 'last upload to archive');
2976 resolve_dsc_field_commit access_basedistro,
2977 lrfetchrefs."/".$rewritemap
2979 progress "no version available from the archive";
2982 # If the archive's .dsc has a Dgit field, there are three
2983 # relevant git commitids we need to choose between and/or merge
2985 # 1. $dsc_hash: the Dgit field from the archive
2986 # 2. $lastpush_hash: the suite branch on the dgit git server
2987 # 3. $lastfetch_hash: our local tracking brach for the suite
2989 # These may all be distinct and need not be in any fast forward
2992 # If the dsc was pushed to this suite, then the server suite
2993 # branch will have been updated; but it might have been pushed to
2994 # a different suite and copied by the archive. Conversely a more
2995 # recent version may have been pushed with dgit but not appeared
2996 # in the archive (yet).
2998 # $lastfetch_hash may be awkward because archive imports
2999 # (particularly, imports of Dgit-less .dscs) are performed only as
3000 # needed on individual clients, so different clients may perform a
3001 # different subset of them - and these imports are only made
3002 # public during push. So $lastfetch_hash may represent a set of
3003 # imports different to a subsequent upload by a different dgit
3006 # Our approach is as follows:
3008 # As between $dsc_hash and $lastpush_hash: if $lastpush_hash is a
3009 # descendant of $dsc_hash, then it was pushed by a dgit user who
3010 # had based their work on $dsc_hash, so we should prefer it.
3011 # Otherwise, $dsc_hash was installed into this suite in the
3012 # archive other than by a dgit push, and (necessarily) after the
3013 # last dgit push into that suite (since a dgit push would have
3014 # been descended from the dgit server git branch); thus, in that
3015 # case, we prefer the archive's version (and produce a
3016 # pseudo-merge to overwrite the dgit server git branch).
3018 # (If there is no Dgit field in the archive's .dsc then
3019 # generate_commit_from_dsc uses the version numbers to decide
3020 # whether the suite branch or the archive is newer. If the suite
3021 # branch is newer it ignores the archive's .dsc; otherwise it
3022 # generates an import of the .dsc, and produces a pseudo-merge to
3023 # overwrite the suite branch with the archive contents.)
3025 # The outcome of that part of the algorithm is the `public view',
3026 # and is same for all dgit clients: it does not depend on any
3027 # unpublished history in the local tracking branch.
3029 # As between the public view and the local tracking branch: The
3030 # local tracking branch is only updated by dgit fetch, and
3031 # whenever dgit fetch runs it includes the public view in the
3032 # local tracking branch. Therefore if the public view is not
3033 # descended from the local tracking branch, the local tracking
3034 # branch must contain history which was imported from the archive
3035 # but never pushed; and, its tip is now out of date. So, we make
3036 # a pseudo-merge to overwrite the old imports and stitch the old
3039 # Finally: we do not necessarily reify the public view (as
3040 # described above). This is so that we do not end up stacking two
3041 # pseudo-merges. So what we actually do is figure out the inputs
3042 # to any public view pseudo-merge and put them in @mergeinputs.
3045 # $mergeinputs[]{Commit}
3046 # $mergeinputs[]{Info}
3047 # $mergeinputs[0] is the one whose tree we use
3048 # @mergeinputs is in the order we use in the actual commit)
3051 # $mergeinputs[]{Message} is a commit message to use
3052 # $mergeinputs[]{ReverseParents} if def specifies that parent
3053 # list should be in opposite order
3054 # Such an entry has no Commit or Info. It applies only when found
3055 # in the last entry. (This ugliness is to support making
3056 # identical imports to previous dgit versions.)
3058 my $lastpush_hash = git_get_ref(lrfetchref());
3059 printdebug "previous reference hash=$lastpush_hash\n";
3060 $lastpush_mergeinput = $lastpush_hash && {
3061 Commit => $lastpush_hash,
3062 Info => "dgit suite branch on dgit git server",
3065 my $lastfetch_hash = git_get_ref(lrref());
3066 printdebug "fetch_from_archive: lastfetch=$lastfetch_hash\n";
3067 my $lastfetch_mergeinput = $lastfetch_hash && {
3068 Commit => $lastfetch_hash,
3069 Info => "dgit client's archive history view",
3072 my $dsc_mergeinput = $dsc_hash && {
3073 Commit => $dsc_hash,
3074 Info => "Dgit field in .dsc from archive",
3078 my $del_lrfetchrefs = sub {
3081 printdebug "del_lrfetchrefs...\n";
3082 foreach my $fullrefname (sort keys %lrfetchrefs_d) {
3083 my $objid = $lrfetchrefs_d{$fullrefname};
3084 printdebug "del_lrfetchrefs: $objid $fullrefname\n";
3086 $gur ||= new IO::Handle;
3087 open $gur, "|-", qw(git update-ref --stdin) or die $!;
3089 printf $gur "delete %s %s\n", $fullrefname, $objid;
3092 close $gur or failedcmd "git update-ref delete lrfetchrefs";
3096 if (defined $dsc_hash) {
3097 ensure_we_have_orig();
3098 if (!$lastpush_hash || $dsc_hash eq $lastpush_hash) {
3099 @mergeinputs = $dsc_mergeinput
3100 } elsif (is_fast_fwd($dsc_hash,$lastpush_hash)) {
3101 print STDERR <<END or die $!;
3103 Git commit in archive is behind the last version allegedly pushed/uploaded.
3104 Commit referred to by archive: $dsc_hash
3105 Last version pushed with dgit: $lastpush_hash
3108 @mergeinputs = ($lastpush_mergeinput);
3110 # Archive has .dsc which is not a descendant of the last dgit
3111 # push. This can happen if the archive moves .dscs about.
3112 # Just follow its lead.
3113 if (is_fast_fwd($lastpush_hash,$dsc_hash)) {
3114 progress "archive .dsc names newer git commit";
3115 @mergeinputs = ($dsc_mergeinput);
3117 progress "archive .dsc names other git commit, fixing up";
3118 @mergeinputs = ($dsc_mergeinput, $lastpush_mergeinput);
3122 @mergeinputs = generate_commits_from_dsc();
3123 # We have just done an import. Now, our import algorithm might
3124 # have been improved. But even so we do not want to generate
3125 # a new different import of the same package. So if the
3126 # version numbers are the same, just use our existing version.
3127 # If the version numbers are different, the archive has changed
3128 # (perhaps, rewound).
3129 if ($lastfetch_mergeinput &&
3130 !version_compare( (mergeinfo_version $lastfetch_mergeinput),
3131 (mergeinfo_version $mergeinputs[0]) )) {
3132 @mergeinputs = ($lastfetch_mergeinput);
3134 } elsif ($lastpush_hash) {
3135 # only in git, not in the archive yet
3136 @mergeinputs = ($lastpush_mergeinput);
3137 print STDERR <<END or die $!;
3139 Package not found in the archive, but has allegedly been pushed using dgit.
3143 printdebug "nothing found!\n";
3144 if (defined $skew_warning_vsn) {
3145 print STDERR <<END or die $!;
3147 Warning: relevant archive skew detected.
3148 Archive allegedly contains $skew_warning_vsn
3149 But we were not able to obtain any version from the archive or git.
3153 unshift @end, $del_lrfetchrefs;
3157 if ($lastfetch_hash &&
3159 my $h = $_->{Commit};
3160 $h and is_fast_fwd($lastfetch_hash, $h);
3161 # If true, one of the existing parents of this commit
3162 # is a descendant of the $lastfetch_hash, so we'll
3163 # be ff from that automatically.
3167 push @mergeinputs, $lastfetch_mergeinput;
3170 printdebug "fetch mergeinfos:\n";
3171 foreach my $mi (@mergeinputs) {
3173 printdebug " commit $mi->{Commit} $mi->{Info}\n";
3175 printdebug sprintf " ReverseParents=%d Message=%s",
3176 $mi->{ReverseParents}, $mi->{Message};
3180 my $compat_info= pop @mergeinputs
3181 if $mergeinputs[$#mergeinputs]{Message};
3183 @mergeinputs = grep { defined $_->{Commit} } @mergeinputs;
3186 if (@mergeinputs > 1) {
3188 my $tree_commit = $mergeinputs[0]{Commit};
3190 my $tree = cmdoutput @git, qw(cat-file commit), $tree_commit;
3191 $tree =~ m/\n\n/; $tree = $`;
3192 $tree =~ m/^tree (\w+)$/m or die "$dsc_hash tree ?";
3195 # We use the changelog author of the package in question the
3196 # author of this pseudo-merge. This is (roughly) correct if
3197 # this commit is simply representing aa non-dgit upload.
3198 # (Roughly because it does not record sponsorship - but we
3199 # don't have sponsorship info because that's in the .changes,
3200 # which isn't in the archivw.)
3202 # But, it might be that we are representing archive history
3203 # updates (including in-archive copies). These are not really
3204 # the responsibility of the person who created the .dsc, but
3205 # there is no-one whose name we should better use. (The
3206 # author of the .dsc-named commit is clearly worse.)
3208 my $useclogp = mergeinfo_getclogp $mergeinputs[0];
3209 my $author = clogp_authline $useclogp;
3210 my $cversion = getfield $useclogp, 'Version';
3212 my $mcf = dgit_privdir()."/mergecommit";
3213 open MC, ">", $mcf or die "$mcf $!";
3214 print MC <<END or die $!;
3218 my @parents = grep { $_->{Commit} } @mergeinputs;
3219 @parents = reverse @parents if $compat_info->{ReverseParents};
3220 print MC <<END or die $! foreach @parents;
3224 print MC <<END or die $!;
3230 if (defined $compat_info->{Message}) {
3231 print MC $compat_info->{Message} or die $!;
3233 print MC <<END or die $!;
3234 Record $package ($cversion) in archive suite $csuite
3238 my $message_add_info = sub {
3240 my $mversion = mergeinfo_version $mi;
3241 printf MC " %-20s %s\n", $mversion, $mi->{Info}
3245 $message_add_info->($mergeinputs[0]);
3246 print MC <<END or die $!;
3247 should be treated as descended from
3249 $message_add_info->($_) foreach @mergeinputs[1..$#mergeinputs];
3253 $hash = make_commit $mcf;
3255 $hash = $mergeinputs[0]{Commit};
3257 printdebug "fetch hash=$hash\n";
3260 my ($lasth, $what) = @_;
3261 return unless $lasth;
3262 die "$lasth $hash $what ?" unless is_fast_fwd($lasth, $hash);
3265 $chkff->($lastpush_hash, 'dgit repo server tip (last push)')
3267 $chkff->($lastfetch_hash, 'local tracking tip (last fetch)');
3269 fetch_from_archive_record_1($hash);
3271 if (defined $skew_warning_vsn) {
3272 printdebug "SKEW CHECK WANT $skew_warning_vsn\n";
3273 my $gotclogp = commit_getclogp($hash);
3274 my $got_vsn = getfield $gotclogp, 'Version';
3275 printdebug "SKEW CHECK GOT $got_vsn\n";
3276 if (version_compare($got_vsn, $skew_warning_vsn) < 0) {
3277 print STDERR <<END or die $!;
3279 Warning: archive skew detected. Using the available version:
3280 Archive allegedly contains $skew_warning_vsn
3281 We were able to obtain only $got_vsn
3287 if ($lastfetch_hash ne $hash) {
3288 fetch_from_archive_record_2($hash);
3291 lrfetchref_used lrfetchref();
3293 check_gitattrs($hash, "fetched source tree");
3295 unshift @end, $del_lrfetchrefs;
3299 sub set_local_git_config ($$) {
3301 runcmd @git, qw(config), $k, $v;
3304 sub setup_mergechangelogs (;$) {
3306 return unless $always || access_cfg_bool(1, 'setup-mergechangelogs');
3308 my $driver = 'dpkg-mergechangelogs';
3309 my $cb = "merge.$driver";
3310 confess unless defined $maindir;
3311 my $attrs = "$maindir_gitcommon/info/attributes";
3312 ensuredir "$maindir_gitcommon/info";
3314 open NATTRS, ">", "$attrs.new" or die "$attrs.new $!";
3315 if (!open ATTRS, "<", $attrs) {
3316 $!==ENOENT or die "$attrs: $!";
3320 next if m{^debian/changelog\s};
3321 print NATTRS $_, "\n" or die $!;
3323 ATTRS->error and die $!;
3326 print NATTRS "debian/changelog merge=$driver\n" or die $!;
3329 set_local_git_config "$cb.name", 'debian/changelog merge driver';
3330 set_local_git_config "$cb.driver", 'dpkg-mergechangelogs -m %O %A %B %A';
3332 rename "$attrs.new", "$attrs" or die "$attrs: $!";
3335 sub setup_useremail (;$) {
3337 return unless $always || access_cfg_bool(1, 'setup-useremail');
3340 my ($k, $envvar) = @_;
3341 my $v = access_cfg("user-$k", 'RETURN-UNDEF') // $ENV{$envvar};
3342 return unless defined $v;
3343 set_local_git_config "user.$k", $v;
3346 $setup->('email', 'DEBEMAIL');
3347 $setup->('name', 'DEBFULLNAME');
3350 sub ensure_setup_existing_tree () {
3351 my $k = "remote.$remotename.skipdefaultupdate";
3352 my $c = git_get_config $k;
3353 return if defined $c;
3354 set_local_git_config $k, 'true';
3357 sub open_main_gitattrs () {
3358 confess 'internal error no maindir' unless defined $maindir;
3359 my $gai = new IO::File "$maindir_gitcommon/info/attributes"
3361 or die "open $maindir_gitcommon/info/attributes: $!";
3365 sub is_gitattrs_setup () {
3366 my $gai = open_main_gitattrs();
3367 return 0 unless $gai;
3369 return 1 if m{^\[attr\]dgit-defuse-attrs\s};
3371 $gai->error and die $!;
3375 sub setup_gitattrs (;$) {
3377 return unless $always || access_cfg_bool(1, 'setup-gitattributes');
3379 if (is_gitattrs_setup()) {
3381 [attr]dgit-defuse-attrs already found in .git/info/attributes
3382 not doing further gitattributes setup
3386 my $af = "$maindir_gitcommon/info/attributes";
3387 ensuredir "$maindir_gitcommon/info";
3388 open GAO, "> $af.new" or die $!;
3389 print GAO <<END or die $!;
3391 [attr]dgit-defuse-attrs $negate_harmful_gitattrs
3392 # ^ see GITATTRIBUTES in dgit(7) and dgit setup-new-tree in dgit(1)
3394 my $gai = open_main_gitattrs();
3398 print GAO $_, "\n" or die $!;
3400 $gai->error and die $!;
3402 close GAO or die $!;
3403 rename "$af.new", "$af" or die "install $af: $!";
3406 sub setup_new_tree () {
3407 setup_mergechangelogs();
3412 sub check_gitattrs ($$) {
3413 my ($treeish, $what) = @_;
3415 return if is_gitattrs_setup;
3418 my @cmd = (@git, qw(ls-tree -lrz --), "${treeish}:");
3420 my $gafl = new IO::File;
3421 open $gafl, "-|", @cmd or die $!;
3424 s/^\d+\s+\w+\s+\w+\s+(\d+)\t// or die;
3426 next unless m{(?:^|/)\.gitattributes$};
3428 # oh dear, found one
3430 dgit: warning: $what contains .gitattributes
3431 dgit: .gitattributes have not been defused. Recommended: dgit setup-new-tree.
3436 # tree contains no .gitattributes files
3437 $?=0; $!=0; close $gafl or failedcmd @cmd;
3441 sub multisuite_suite_child ($$$) {
3442 my ($tsuite, $merginputs, $fn) = @_;
3443 # in child, sets things up, calls $fn->(), and returns undef
3444 # in parent, returns canonical suite name for $tsuite
3445 my $canonsuitefh = IO::File::new_tmpfile;
3446 my $pid = fork // die $!;
3450 $us .= " [$isuite]";
3451 $debugprefix .= " ";
3452 progress "fetching $tsuite...";
3453 canonicalise_suite();
3454 print $canonsuitefh $csuite, "\n" or die $!;
3455 close $canonsuitefh or die $!;
3459 waitpid $pid,0 == $pid or die $!;
3460 fail "failed to obtain $tsuite: ".waitstatusmsg() if $? && $?!=256*4;
3461 seek $canonsuitefh,0,0 or die $!;
3462 local $csuite = <$canonsuitefh>;
3463 die $! unless defined $csuite && chomp $csuite;
3465 printdebug "multisuite $tsuite missing\n";
3468 printdebug "multisuite $tsuite ok (canon=$csuite)\n";
3469 push @$merginputs, {
3476 sub fork_for_multisuite ($) {
3477 my ($before_fetch_merge) = @_;
3478 # if nothing unusual, just returns ''
3481 # returns 0 to caller in child, to do first of the specified suites
3482 # in child, $csuite is not yet set
3484 # returns 1 to caller in parent, to finish up anything needed after
3485 # in parent, $csuite is set to canonicalised portmanteau
3487 my $org_isuite = $isuite;
3488 my @suites = split /\,/, $isuite;
3489 return '' unless @suites > 1;
3490 printdebug "fork_for_multisuite: @suites\n";
3494 my $cbasesuite = multisuite_suite_child($suites[0], \@mergeinputs,
3496 return 0 unless defined $cbasesuite;
3498 fail "package $package missing in (base suite) $cbasesuite"
3499 unless @mergeinputs;
3501 my @csuites = ($cbasesuite);
3503 $before_fetch_merge->();
3505 foreach my $tsuite (@suites[1..$#suites]) {
3506 $tsuite =~ s/^-/$cbasesuite-/;
3507 my $csubsuite = multisuite_suite_child($tsuite, \@mergeinputs,
3513 # xxx collecte the ref here
3515 $csubsuite =~ s/^\Q$cbasesuite\E-/-/;
3516 push @csuites, $csubsuite;
3519 foreach my $mi (@mergeinputs) {
3520 my $ref = git_get_ref $mi->{Ref};
3521 die "$mi->{Ref} ?" unless length $ref;
3522 $mi->{Commit} = $ref;
3525 $csuite = join ",", @csuites;
3527 my $previous = git_get_ref lrref;
3529 unshift @mergeinputs, {
3530 Commit => $previous,
3531 Info => "local combined tracking branch",
3533 "archive seems to have rewound: local tracking branch is ahead!",
3537 foreach my $ix (0..$#mergeinputs) {
3538 $mergeinputs[$ix]{Index} = $ix;
3541 @mergeinputs = sort {
3542 -version_compare(mergeinfo_version $a,
3543 mergeinfo_version $b) # highest version first
3545 $a->{Index} <=> $b->{Index}; # earliest in spec first
3551 foreach my $mi (@mergeinputs) {
3552 printdebug "multisuite merge check $mi->{Info}\n";
3553 foreach my $previous (@needed) {
3554 next unless is_fast_fwd $mi->{Commit}, $previous->{Commit};
3555 printdebug "multisuite merge un-needed $previous->{Info}\n";
3559 printdebug "multisuite merge this-needed\n";
3560 $mi->{Character} = '+';
3563 $needed[0]{Character} = '*';
3565 my $output = $needed[0]{Commit};
3568 printdebug "multisuite merge nontrivial\n";
3569 my $tree = cmdoutput qw(git rev-parse), $needed[0]{Commit}.':';
3571 my $commit = "tree $tree\n";
3572 my $msg = "Combine archive branches $csuite [dgit]\n\n".
3573 "Input branches:\n";
3575 foreach my $mi (sort { $a->{Index} <=> $b->{Index} } @mergeinputs) {
3576 printdebug "multisuite merge include $mi->{Info}\n";
3577 $mi->{Character} //= ' ';
3578 $commit .= "parent $mi->{Commit}\n";
3579 $msg .= sprintf " %s %-25s %s\n",
3581 (mergeinfo_version $mi),
3584 my $authline = clogp_authline mergeinfo_getclogp $needed[0];
3586 " * marks the highest version branch, which choose to use\n".
3587 " + marks each branch which was not already an ancestor\n\n".
3588 "[dgit multi-suite $csuite]\n";
3590 "author $authline\n".
3591 "committer $authline\n\n";
3592 $output = make_commit_text $commit.$msg;
3593 printdebug "multisuite merge generated $output\n";
3596 fetch_from_archive_record_1($output);
3597 fetch_from_archive_record_2($output);
3599 progress "calculated combined tracking suite $csuite";
3604 sub clone_set_head () {
3605 open H, "> .git/HEAD" or die $!;
3606 print H "ref: ".lref()."\n" or die $!;
3609 sub clone_finish ($) {
3611 runcmd @git, qw(reset --hard), lrref();
3612 runcmd qw(bash -ec), <<'END';
3614 git ls-tree -r --name-only -z HEAD | \
3615 xargs -0r touch -h -r . --
3617 printdone "ready for work in $dstdir";
3621 # in multisuite, returns twice!
3622 # once in parent after first suite fetched,
3623 # and then again in child after everything is finished
3625 badusage "dry run makes no sense with clone" unless act_local();
3627 my $multi_fetched = fork_for_multisuite(sub {
3628 printdebug "multi clone before fetch merge\n";
3632 if ($multi_fetched) {
3633 printdebug "multi clone after fetch merge\n";
3635 clone_finish($dstdir);
3638 printdebug "clone main body\n";
3640 canonicalise_suite();
3641 my $hasgit = check_for_git();
3642 mkdir $dstdir or fail "create \`$dstdir': $!";
3644 runcmd @git, qw(init -q);
3648 my $giturl = access_giturl(1);
3649 if (defined $giturl) {
3650 runcmd @git, qw(remote add), 'origin', $giturl;
3653 progress "fetching existing git history";
3655 runcmd_ordryrun_local @git, qw(fetch origin);
3657 progress "starting new git history";
3659 fetch_from_archive() or no_such_package;
3660 my $vcsgiturl = $dsc->{'Vcs-Git'};
3661 if (length $vcsgiturl) {
3662 $vcsgiturl =~ s/\s+-b\s+\S+//g;
3663 runcmd @git, qw(remote add vcs-git), $vcsgiturl;
3665 clone_finish($dstdir);
3669 canonicalise_suite();
3670 if (check_for_git()) {
3673 fetch_from_archive() or no_such_package();
3674 printdone "fetched into ".lrref();
3678 my $multi_fetched = fork_for_multisuite(sub { });
3679 fetch() unless $multi_fetched; # parent
3680 return if $multi_fetched eq '0'; # child
3681 runcmd_ordryrun_local @git, qw(merge -m),"Merge from $csuite [dgit]",
3683 printdone "fetched to ".lrref()." and merged into HEAD";
3686 sub check_not_dirty () {
3687 foreach my $f (qw(local-options local-patch-header)) {
3688 if (stat_exists "debian/source/$f") {
3689 fail "git tree contains debian/source/$f";
3693 return if $ignoredirty;
3695 git_check_unmodified();
3698 sub commit_admin ($) {
3701 runcmd_ordryrun_local @git, qw(commit -m), $m;
3704 sub commit_quilty_patch () {
3705 my $output = cmdoutput @git, qw(status --porcelain);
3707 foreach my $l (split /\n/, $output) {
3708 next unless $l =~ m/\S/;
3709 if ($l =~ m{^(?:\?\?| M) (.pc|debian/patches)}) {
3713 delete $adds{'.pc'}; # if there wasn't one before, don't add it
3715 progress "nothing quilty to commit, ok.";