Erik Sjölund
ec2ce8cd27
Improve security of rest-server.service by restricting network access
...
This patch improves the overall security assessment score given by
`systemd-analyze security rest-server.service` from "1.3 OK" to "0.6 SAFE"
(when using systemd-analyze version 253)
* Remove `AF_INET AF_INET6` from RestrictAddressFamilies.
Sockets originating from socket activation are not affected by the
systemd directive RestrictAddressFamilies.
See systemd.exec man page.
* Add `PrivateNetwork=yes`
as recommended for socket-activated services in the systemd.socket man page
* Add dependency on rest-server.socket
Signed-off-by: Erik Sjölund <erik.sjolund@gmail.com >
2023-07-17 08:52:26 +02:00
Michael Eischer
c38e18b708
Let goreleaser use custom release notes
...
If the changelog generation is disabled in goreleaser, this also ignores
custom release notes passed in via the command line. Thus keep the
default changelog configuration.
2023-07-09 21:32:35 +02:00
Alexander Neumann
76759aa52e
Update version for development
2023-07-09 17:21:54 +02:00
Alexander Neumann
4231ef6f20
Generate CHANGELOG.md for 0.12.1
v0.12.1
2023-07-09 17:17:10 +02:00
Alexander Neumann
5b288d488a
Move changelog files for 0.12.1
2023-07-09 17:16:24 +02:00
Alexander Neumann
46e3c7248b
Set version
2023-07-09 17:15:15 +02:00
Michael Eischer
fdf65f66e7
Merge pull request #243 from MichaelEischer/upgrade-dependencies
...
upgrade dependencies
2023-07-09 14:22:35 +02:00
Michael Eischer
32ab845151
upgrade dependencies
2023-07-09 14:12:47 +02:00
Michael Eischer
4bf4b62379
Merge pull request #242 from restic/dependabot/go_modules/github.com/prometheus/client_golang-1.16.0
...
Bump github.com/prometheus/client_golang from 1.15.1 to 1.16.0
2023-07-01 18:40:04 +02:00
dependabot[bot]
bb99f5a426
Bump github.com/prometheus/client_golang from 1.15.1 to 1.16.0
...
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang ) from 1.15.1 to 1.16.0.
- [Release notes](https://github.com/prometheus/client_golang/releases )
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prometheus/client_golang/compare/v1.15.1...v1.16.0 )
---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-07-01 16:14:06 +00:00
Michael Eischer
38b712c714
Merge pull request #241 from restic/dependabot/go_modules/golang.org/x/crypto-0.10.0
...
Bump golang.org/x/crypto from 0.9.0 to 0.10.0
2023-07-01 18:13:27 +02:00
dependabot[bot]
5f3faad48d
Bump golang.org/x/crypto from 0.9.0 to 0.10.0
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.9.0 to 0.10.0.
- [Commits](https://github.com/golang/crypto/compare/v0.9.0...v0.10.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-06-19 20:02:25 +00:00
Michael Eischer
d6a268ca01
Merge pull request #240 from MichaelEischer/update-changelog-template
...
Update changelog template with changes from restic
2023-06-17 22:15:39 +02:00
Michael Eischer
d890dbad69
update changelog template with changes from restic
2023-06-17 22:08:58 +02:00
Michael Eischer
3130a4bcdf
Merge pull request #239 from MichaelEischer/empty-list
...
Return empty array if there are no objects to list
2023-06-17 22:07:57 +02:00
Michael Eischer
ff81311a98
add changelog
2023-06-17 22:03:01 +02:00
Michael Eischer
9557efad55
Fix TestListWithUnexpectedFiles test
...
The test should test both API versions.
2023-06-17 21:57:58 +02:00
Michael Eischer
84a8b210f5
return empty array if there are no objects to list
...
Previously "null" was returned, which does not match the REST backend
specification.
2023-06-17 21:57:41 +02:00
Michael Eischer
ab45fb59ff
Merge pull request #236 from restic/dependabot/go_modules/github.com/minio/sha256-simd-1.0.1
...
Bump github.com/minio/sha256-simd from 1.0.0 to 1.0.1
2023-05-30 23:13:31 +02:00
dependabot[bot]
3284c4ab73
Bump github.com/minio/sha256-simd from 1.0.0 to 1.0.1
...
Bumps [github.com/minio/sha256-simd](https://github.com/minio/sha256-simd ) from 1.0.0 to 1.0.1.
- [Release notes](https://github.com/minio/sha256-simd/releases )
- [Commits](https://github.com/minio/sha256-simd/compare/v1.0.0...v1.0.1 )
---
updated-dependencies:
- dependency-name: github.com/minio/sha256-simd
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-05-29 20:01:27 +00:00
Michael Eischer
0cd077f4ab
Merge pull request #231 from MichaelEischer/fix-fsync-warning
...
Fix inverted condition for fsync warning
2023-05-18 16:36:04 +02:00
Michael Eischer
64ab92761c
Merge pull request #234 from restic/dependabot/go_modules/golang.org/x/crypto-0.9.0
...
Bump golang.org/x/crypto from 0.8.0 to 0.9.0
2023-05-18 16:33:54 +02:00
dependabot[bot]
8ec316cea3
Bump golang.org/x/crypto from 0.8.0 to 0.9.0
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.8.0 to 0.9.0.
- [Commits](https://github.com/golang/crypto/compare/v0.8.0...v0.9.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-05-15 20:00:07 +00:00
Michael Eischer
420c4c6683
Add changelog for fsync warning
2023-05-13 22:05:18 +02:00
Michael Eischer
be14687a9c
Print fsync warning only once
...
The repo.Handler is freshly instantiated for every request such that it
forget that the fsync warning was already printed. Use a single instance
in the Server instead.
2023-05-13 21:50:39 +02:00
Michael Eischer
dbb2d4690c
Merge pull request #232 from restic/dependabot/go_modules/github.com/prometheus/client_golang-1.15.1
...
Bump github.com/prometheus/client_golang from 1.15.0 to 1.15.1
2023-05-13 21:43:53 +02:00
Michael Eischer
0a09c8d633
Improve reproducibility of built archives
...
The binaries and generate archives should be reproducible now. Note that
this does not apply to the source tarball.
2023-05-10 06:42:01 +02:00
Michael Eischer
dedcb846df
Enable multi-platform container builds in goreleaser
...
This requires `docker-buildx` and `qemu-user-static-binfmt`
2023-05-10 06:42:01 +02:00
dependabot[bot]
781d2241e0
Bump github.com/prometheus/client_golang from 1.15.0 to 1.15.1
...
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang ) from 1.15.0 to 1.15.1.
- [Release notes](https://github.com/prometheus/client_golang/releases )
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prometheus/client_golang/compare/v1.15.0...v1.15.1 )
---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-05-08 20:01:25 +00:00
Michael Eischer
b2e8044fbd
Fix inverted condition for fsync warning
...
The warning should only be printed if fsync is _not_ supported and not
the other way around.
2023-05-08 21:40:23 +02:00
Michael Eischer
30ec84fcb7
Merge pull request #228 from MichaelEischer/update-ci
...
Update CI configuration and verify changelog entries
2023-05-05 23:05:22 +02:00
Michael Eischer
2a3bca1633
Fix type of changelog entry
2023-04-30 15:21:16 +02:00
Michael Eischer
aeb5e2982f
CI: Automatically check changelog entries
2023-04-30 15:18:44 +02:00
Michael Eischer
20c4cdedfc
CI: Sync tests with restic
2023-04-30 15:18:28 +02:00
Michael Eischer
c064e4c1ed
Merge pull request #217 from HeikoSchlittermann/feat-log-to-stdout
...
feat: allow logging to stdout, stderr
2023-04-30 14:56:29 +02:00
Michael Eischer
66fe4afb7d
Make changelog less technical
2023-04-30 14:51:46 +02:00
Michael Eischer
4576e1bc12
Fix docker container setup for goreleaser
...
The expected approach is that the binary built by goreleaser is added to
the docker container.
2023-04-28 20:41:30 +02:00
Michael Eischer
e8a839673f
Set development version for 0.12.0
2023-04-27 21:41:32 +02:00
Michael Eischer
b34b9f0780
create folder for unreleased changelogs
2023-04-26 21:09:55 +02:00
Alexander Neumann
543d313f7e
Fix Changelog file
2023-04-26 21:08:58 +02:00
Alexander Neumann
a98ed25c7b
Rename changelog
2023-04-24 21:02:21 +02:00
Alexander Neumann
efe070c66d
Add changelog, fix VERSION
v0.12.0
2023-04-24 20:59:03 +02:00
Leo R. Lundgren
834a3378e9
doc: Polish changelogs
2023-04-24 13:15:03 +02:00
Heiko Schlittermann (HS12-RIPE)
9f074d8b3a
feat: allow logging to stdout
...
The --log option accepts "-" as filename. This prevents rest-server from
opening the log file, it simply writes to the STDOUT stream provided by
the caller.
**BREAKING** in case use really used "-" to specify a file named "-"
you'll need to update your rest-server invocation to use "./-".
2023-04-24 11:15:38 +02:00
Leo R. Lundgren
94d5861c50
doc: Polish changelogs
2023-04-23 22:28:14 +02:00
Michael Eischer
253bebb096
Merge pull request #225 from restic/dependabot/go_modules/github.com/prometheus/client_golang-1.15.0
...
Bump github.com/prometheus/client_golang from 1.14.0 to 1.15.0
2023-04-22 11:23:51 +02:00
Michael Eischer
337035c414
Merge pull request #221 from MichaelEischer/skip-files-in-intermediate-directories
...
Ignore unexpected files in intermediate directories
2023-04-22 11:20:11 +02:00
dependabot[bot]
399f7f1d49
Bump github.com/prometheus/client_golang from 1.14.0 to 1.15.0
...
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang ) from 1.14.0 to 1.15.0.
- [Release notes](https://github.com/prometheus/client_golang/releases )
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prometheus/client_golang/compare/v1.14.0...v1.15.0 )
---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-04-17 20:04:17 +00:00
Michael Eischer
afcdb2f312
Merge pull request #224 from restic/dependabot/go_modules/github.com/spf13/cobra-1.7.0
...
Bump github.com/spf13/cobra from 1.6.1 to 1.7.0
2023-04-11 22:42:58 +02:00
dependabot[bot]
f97c48d92e
Bump github.com/spf13/cobra from 1.6.1 to 1.7.0
...
Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra ) from 1.6.1 to 1.7.0.
- [Release notes](https://github.com/spf13/cobra/releases )
- [Commits](https://github.com/spf13/cobra/compare/v1.6.1...v1.7.0 )
---
updated-dependencies:
- dependency-name: github.com/spf13/cobra
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-04-11 20:39:21 +00:00