Commit Graph

481 Commits

Author SHA1 Message Date
Erik Sjölund
ec2ce8cd27 Improve security of rest-server.service by restricting network access
This patch improves the overall security assessment score given by
`systemd-analyze security rest-server.service` from "1.3 OK" to "0.6 SAFE"
(when using systemd-analyze version 253)

* Remove `AF_INET AF_INET6` from RestrictAddressFamilies.
  Sockets originating from socket activation are not affected by the
  systemd directive RestrictAddressFamilies.
  See systemd.exec man page.

* Add `PrivateNetwork=yes`
  as recommended for socket-activated services in the systemd.socket man page

* Add dependency on rest-server.socket

Signed-off-by: Erik Sjölund <erik.sjolund@gmail.com>
2023-07-17 08:52:26 +02:00
Michael Eischer
c38e18b708 Let goreleaser use custom release notes
If the changelog generation is disabled in goreleaser, this also ignores
custom release notes passed in via the command line. Thus keep the
default changelog configuration.
2023-07-09 21:32:35 +02:00
Alexander Neumann
76759aa52e Update version for development 2023-07-09 17:21:54 +02:00
Alexander Neumann
4231ef6f20 Generate CHANGELOG.md for 0.12.1 v0.12.1 2023-07-09 17:17:10 +02:00
Alexander Neumann
5b288d488a Move changelog files for 0.12.1 2023-07-09 17:16:24 +02:00
Alexander Neumann
46e3c7248b Set version 2023-07-09 17:15:15 +02:00
Michael Eischer
fdf65f66e7 Merge pull request #243 from MichaelEischer/upgrade-dependencies
upgrade dependencies
2023-07-09 14:22:35 +02:00
Michael Eischer
32ab845151 upgrade dependencies 2023-07-09 14:12:47 +02:00
Michael Eischer
4bf4b62379 Merge pull request #242 from restic/dependabot/go_modules/github.com/prometheus/client_golang-1.16.0
Bump github.com/prometheus/client_golang from 1.15.1 to 1.16.0
2023-07-01 18:40:04 +02:00
dependabot[bot]
bb99f5a426 Bump github.com/prometheus/client_golang from 1.15.1 to 1.16.0
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.15.1 to 1.16.0.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.15.1...v1.16.0)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-01 16:14:06 +00:00
Michael Eischer
38b712c714 Merge pull request #241 from restic/dependabot/go_modules/golang.org/x/crypto-0.10.0
Bump golang.org/x/crypto from 0.9.0 to 0.10.0
2023-07-01 18:13:27 +02:00
dependabot[bot]
5f3faad48d Bump golang.org/x/crypto from 0.9.0 to 0.10.0
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.9.0 to 0.10.0.
- [Commits](https://github.com/golang/crypto/compare/v0.9.0...v0.10.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-06-19 20:02:25 +00:00
Michael Eischer
d6a268ca01 Merge pull request #240 from MichaelEischer/update-changelog-template
Update changelog template with changes from restic
2023-06-17 22:15:39 +02:00
Michael Eischer
d890dbad69 update changelog template with changes from restic 2023-06-17 22:08:58 +02:00
Michael Eischer
3130a4bcdf Merge pull request #239 from MichaelEischer/empty-list
Return empty array if there are no objects to list
2023-06-17 22:07:57 +02:00
Michael Eischer
ff81311a98 add changelog 2023-06-17 22:03:01 +02:00
Michael Eischer
9557efad55 Fix TestListWithUnexpectedFiles test
The test should test both API versions.
2023-06-17 21:57:58 +02:00
Michael Eischer
84a8b210f5 return empty array if there are no objects to list
Previously "null" was returned, which does not match the REST backend
specification.
2023-06-17 21:57:41 +02:00
Michael Eischer
ab45fb59ff Merge pull request #236 from restic/dependabot/go_modules/github.com/minio/sha256-simd-1.0.1
Bump github.com/minio/sha256-simd from 1.0.0 to 1.0.1
2023-05-30 23:13:31 +02:00
dependabot[bot]
3284c4ab73 Bump github.com/minio/sha256-simd from 1.0.0 to 1.0.1
Bumps [github.com/minio/sha256-simd](https://github.com/minio/sha256-simd) from 1.0.0 to 1.0.1.
- [Release notes](https://github.com/minio/sha256-simd/releases)
- [Commits](https://github.com/minio/sha256-simd/compare/v1.0.0...v1.0.1)

---
updated-dependencies:
- dependency-name: github.com/minio/sha256-simd
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-05-29 20:01:27 +00:00
Michael Eischer
0cd077f4ab Merge pull request #231 from MichaelEischer/fix-fsync-warning
Fix inverted condition for fsync warning
2023-05-18 16:36:04 +02:00
Michael Eischer
64ab92761c Merge pull request #234 from restic/dependabot/go_modules/golang.org/x/crypto-0.9.0
Bump golang.org/x/crypto from 0.8.0 to 0.9.0
2023-05-18 16:33:54 +02:00
dependabot[bot]
8ec316cea3 Bump golang.org/x/crypto from 0.8.0 to 0.9.0
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.8.0 to 0.9.0.
- [Commits](https://github.com/golang/crypto/compare/v0.8.0...v0.9.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-05-15 20:00:07 +00:00
Michael Eischer
420c4c6683 Add changelog for fsync warning 2023-05-13 22:05:18 +02:00
Michael Eischer
be14687a9c Print fsync warning only once
The repo.Handler is freshly instantiated for every request such that it
forget that the fsync warning was already printed. Use a single instance
in the Server instead.
2023-05-13 21:50:39 +02:00
Michael Eischer
dbb2d4690c Merge pull request #232 from restic/dependabot/go_modules/github.com/prometheus/client_golang-1.15.1
Bump github.com/prometheus/client_golang from 1.15.0 to 1.15.1
2023-05-13 21:43:53 +02:00
Michael Eischer
0a09c8d633 Improve reproducibility of built archives
The binaries and generate archives should be reproducible now. Note that
this does not apply to the source tarball.
2023-05-10 06:42:01 +02:00
Michael Eischer
dedcb846df Enable multi-platform container builds in goreleaser
This requires `docker-buildx` and `qemu-user-static-binfmt`
2023-05-10 06:42:01 +02:00
dependabot[bot]
781d2241e0 Bump github.com/prometheus/client_golang from 1.15.0 to 1.15.1
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.15.0 to 1.15.1.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.15.0...v1.15.1)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-05-08 20:01:25 +00:00
Michael Eischer
b2e8044fbd Fix inverted condition for fsync warning
The warning should only be printed if fsync is _not_ supported and not
the other way around.
2023-05-08 21:40:23 +02:00
Michael Eischer
30ec84fcb7 Merge pull request #228 from MichaelEischer/update-ci
Update CI configuration and verify changelog entries
2023-05-05 23:05:22 +02:00
Michael Eischer
2a3bca1633 Fix type of changelog entry 2023-04-30 15:21:16 +02:00
Michael Eischer
aeb5e2982f CI: Automatically check changelog entries 2023-04-30 15:18:44 +02:00
Michael Eischer
20c4cdedfc CI: Sync tests with restic 2023-04-30 15:18:28 +02:00
Michael Eischer
c064e4c1ed Merge pull request #217 from HeikoSchlittermann/feat-log-to-stdout
feat: allow logging to stdout, stderr
2023-04-30 14:56:29 +02:00
Michael Eischer
66fe4afb7d Make changelog less technical 2023-04-30 14:51:46 +02:00
Michael Eischer
4576e1bc12 Fix docker container setup for goreleaser
The expected approach is that the binary built by goreleaser is added to
the docker container.
2023-04-28 20:41:30 +02:00
Michael Eischer
e8a839673f Set development version for 0.12.0 2023-04-27 21:41:32 +02:00
Michael Eischer
b34b9f0780 create folder for unreleased changelogs 2023-04-26 21:09:55 +02:00
Alexander Neumann
543d313f7e Fix Changelog file 2023-04-26 21:08:58 +02:00
Alexander Neumann
a98ed25c7b Rename changelog 2023-04-24 21:02:21 +02:00
Alexander Neumann
efe070c66d Add changelog, fix VERSION v0.12.0 2023-04-24 20:59:03 +02:00
Leo R. Lundgren
834a3378e9 doc: Polish changelogs 2023-04-24 13:15:03 +02:00
Heiko Schlittermann (HS12-RIPE)
9f074d8b3a feat: allow logging to stdout
The --log option accepts "-" as filename. This prevents rest-server from
opening the log file, it simply writes to the STDOUT stream provided by
the caller.

**BREAKING** in case use really used "-" to specify a file named "-"
you'll need to update your rest-server invocation to use "./-".
2023-04-24 11:15:38 +02:00
Leo R. Lundgren
94d5861c50 doc: Polish changelogs 2023-04-23 22:28:14 +02:00
Michael Eischer
253bebb096 Merge pull request #225 from restic/dependabot/go_modules/github.com/prometheus/client_golang-1.15.0
Bump github.com/prometheus/client_golang from 1.14.0 to 1.15.0
2023-04-22 11:23:51 +02:00
Michael Eischer
337035c414 Merge pull request #221 from MichaelEischer/skip-files-in-intermediate-directories
Ignore unexpected files in intermediate directories
2023-04-22 11:20:11 +02:00
dependabot[bot]
399f7f1d49 Bump github.com/prometheus/client_golang from 1.14.0 to 1.15.0
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.14.0 to 1.15.0.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.14.0...v1.15.0)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-04-17 20:04:17 +00:00
Michael Eischer
afcdb2f312 Merge pull request #224 from restic/dependabot/go_modules/github.com/spf13/cobra-1.7.0
Bump github.com/spf13/cobra from 1.6.1 to 1.7.0
2023-04-11 22:42:58 +02:00
dependabot[bot]
f97c48d92e Bump github.com/spf13/cobra from 1.6.1 to 1.7.0
Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.6.1 to 1.7.0.
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](https://github.com/spf13/cobra/compare/v1.6.1...v1.7.0)

---
updated-dependencies:
- dependency-name: github.com/spf13/cobra
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-04-11 20:39:21 +00:00