Commit Graph

481 Commits

Author SHA1 Message Date
Erik Sjölund ec2ce8cd27 Improve security of rest-server.service by restricting network access
This patch improves the overall security assessment score given by
`systemd-analyze security rest-server.service` from "1.3 OK" to "0.6 SAFE"
(when using systemd-analyze version 253)

* Remove `AF_INET AF_INET6` from RestrictAddressFamilies.
  Sockets originating from socket activation are not affected by the
  systemd directive RestrictAddressFamilies.
  See systemd.exec man page.

* Add `PrivateNetwork=yes`
  as recommended for socket-activated services in the systemd.socket man page

* Add dependency on rest-server.socket

Signed-off-by: Erik Sjölund <erik.sjolund@gmail.com>
2023-07-17 08:52:26 +02:00
Michael Eischer c38e18b708 Let goreleaser use custom release notes
If the changelog generation is disabled in goreleaser, this also ignores
custom release notes passed in via the command line. Thus keep the
default changelog configuration.
2023-07-09 21:32:35 +02:00
Alexander Neumann 76759aa52e Update version for development 2023-07-09 17:21:54 +02:00
Alexander Neumann 4231ef6f20 Generate CHANGELOG.md for 0.12.1 v0.12.1 2023-07-09 17:17:10 +02:00
Alexander Neumann 5b288d488a Move changelog files for 0.12.1 2023-07-09 17:16:24 +02:00
Alexander Neumann 46e3c7248b Set version 2023-07-09 17:15:15 +02:00
Michael Eischer fdf65f66e7 Merge pull request #243 from MichaelEischer/upgrade-dependencies
upgrade dependencies
2023-07-09 14:22:35 +02:00
Michael Eischer 32ab845151 upgrade dependencies 2023-07-09 14:12:47 +02:00
Michael Eischer 4bf4b62379 Merge pull request #242 from restic/dependabot/go_modules/github.com/prometheus/client_golang-1.16.0
Bump github.com/prometheus/client_golang from 1.15.1 to 1.16.0
2023-07-01 18:40:04 +02:00
dependabot[bot] bb99f5a426 Bump github.com/prometheus/client_golang from 1.15.1 to 1.16.0
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.15.1 to 1.16.0.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.15.1...v1.16.0)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-01 16:14:06 +00:00
Michael Eischer 38b712c714 Merge pull request #241 from restic/dependabot/go_modules/golang.org/x/crypto-0.10.0
Bump golang.org/x/crypto from 0.9.0 to 0.10.0
2023-07-01 18:13:27 +02:00
dependabot[bot] 5f3faad48d Bump golang.org/x/crypto from 0.9.0 to 0.10.0
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.9.0 to 0.10.0.
- [Commits](https://github.com/golang/crypto/compare/v0.9.0...v0.10.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-06-19 20:02:25 +00:00
Michael Eischer d6a268ca01 Merge pull request #240 from MichaelEischer/update-changelog-template
Update changelog template with changes from restic
2023-06-17 22:15:39 +02:00
Michael Eischer d890dbad69 update changelog template with changes from restic 2023-06-17 22:08:58 +02:00
Michael Eischer 3130a4bcdf Merge pull request #239 from MichaelEischer/empty-list
Return empty array if there are no objects to list
2023-06-17 22:07:57 +02:00
Michael Eischer ff81311a98 add changelog 2023-06-17 22:03:01 +02:00
Michael Eischer 9557efad55 Fix TestListWithUnexpectedFiles test
The test should test both API versions.
2023-06-17 21:57:58 +02:00
Michael Eischer 84a8b210f5 return empty array if there are no objects to list
Previously "null" was returned, which does not match the REST backend
specification.
2023-06-17 21:57:41 +02:00
Michael Eischer ab45fb59ff Merge pull request #236 from restic/dependabot/go_modules/github.com/minio/sha256-simd-1.0.1
Bump github.com/minio/sha256-simd from 1.0.0 to 1.0.1
2023-05-30 23:13:31 +02:00
dependabot[bot] 3284c4ab73 Bump github.com/minio/sha256-simd from 1.0.0 to 1.0.1
Bumps [github.com/minio/sha256-simd](https://github.com/minio/sha256-simd) from 1.0.0 to 1.0.1.
- [Release notes](https://github.com/minio/sha256-simd/releases)
- [Commits](https://github.com/minio/sha256-simd/compare/v1.0.0...v1.0.1)

---
updated-dependencies:
- dependency-name: github.com/minio/sha256-simd
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-05-29 20:01:27 +00:00
Michael Eischer 0cd077f4ab Merge pull request #231 from MichaelEischer/fix-fsync-warning
Fix inverted condition for fsync warning
2023-05-18 16:36:04 +02:00
Michael Eischer 64ab92761c Merge pull request #234 from restic/dependabot/go_modules/golang.org/x/crypto-0.9.0
Bump golang.org/x/crypto from 0.8.0 to 0.9.0
2023-05-18 16:33:54 +02:00
dependabot[bot] 8ec316cea3 Bump golang.org/x/crypto from 0.8.0 to 0.9.0
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.8.0 to 0.9.0.
- [Commits](https://github.com/golang/crypto/compare/v0.8.0...v0.9.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-05-15 20:00:07 +00:00
Michael Eischer 420c4c6683 Add changelog for fsync warning 2023-05-13 22:05:18 +02:00
Michael Eischer be14687a9c Print fsync warning only once
The repo.Handler is freshly instantiated for every request such that it
forget that the fsync warning was already printed. Use a single instance
in the Server instead.
2023-05-13 21:50:39 +02:00
Michael Eischer dbb2d4690c Merge pull request #232 from restic/dependabot/go_modules/github.com/prometheus/client_golang-1.15.1
Bump github.com/prometheus/client_golang from 1.15.0 to 1.15.1
2023-05-13 21:43:53 +02:00
Michael Eischer 0a09c8d633 Improve reproducibility of built archives
The binaries and generate archives should be reproducible now. Note that
this does not apply to the source tarball.
2023-05-10 06:42:01 +02:00
Michael Eischer dedcb846df Enable multi-platform container builds in goreleaser
This requires `docker-buildx` and `qemu-user-static-binfmt`
2023-05-10 06:42:01 +02:00
dependabot[bot] 781d2241e0 Bump github.com/prometheus/client_golang from 1.15.0 to 1.15.1
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.15.0 to 1.15.1.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.15.0...v1.15.1)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-05-08 20:01:25 +00:00
Michael Eischer b2e8044fbd Fix inverted condition for fsync warning
The warning should only be printed if fsync is _not_ supported and not
the other way around.
2023-05-08 21:40:23 +02:00
Michael Eischer 30ec84fcb7 Merge pull request #228 from MichaelEischer/update-ci
Update CI configuration and verify changelog entries
2023-05-05 23:05:22 +02:00
Michael Eischer 2a3bca1633 Fix type of changelog entry 2023-04-30 15:21:16 +02:00
Michael Eischer aeb5e2982f CI: Automatically check changelog entries 2023-04-30 15:18:44 +02:00
Michael Eischer 20c4cdedfc CI: Sync tests with restic 2023-04-30 15:18:28 +02:00
Michael Eischer c064e4c1ed Merge pull request #217 from HeikoSchlittermann/feat-log-to-stdout
feat: allow logging to stdout, stderr
2023-04-30 14:56:29 +02:00
Michael Eischer 66fe4afb7d Make changelog less technical 2023-04-30 14:51:46 +02:00
Michael Eischer 4576e1bc12 Fix docker container setup for goreleaser
The expected approach is that the binary built by goreleaser is added to
the docker container.
2023-04-28 20:41:30 +02:00
Michael Eischer e8a839673f Set development version for 0.12.0 2023-04-27 21:41:32 +02:00
Michael Eischer b34b9f0780 create folder for unreleased changelogs 2023-04-26 21:09:55 +02:00
Alexander Neumann 543d313f7e Fix Changelog file 2023-04-26 21:08:58 +02:00
Alexander Neumann a98ed25c7b Rename changelog 2023-04-24 21:02:21 +02:00
Alexander Neumann efe070c66d Add changelog, fix VERSION v0.12.0 2023-04-24 20:59:03 +02:00
Leo R. Lundgren 834a3378e9 doc: Polish changelogs 2023-04-24 13:15:03 +02:00
Heiko Schlittermann (HS12-RIPE) 9f074d8b3a feat: allow logging to stdout
The --log option accepts "-" as filename. This prevents rest-server from
opening the log file, it simply writes to the STDOUT stream provided by
the caller.

**BREAKING** in case use really used "-" to specify a file named "-"
you'll need to update your rest-server invocation to use "./-".
2023-04-24 11:15:38 +02:00
Leo R. Lundgren 94d5861c50 doc: Polish changelogs 2023-04-23 22:28:14 +02:00
Michael Eischer 253bebb096 Merge pull request #225 from restic/dependabot/go_modules/github.com/prometheus/client_golang-1.15.0
Bump github.com/prometheus/client_golang from 1.14.0 to 1.15.0
2023-04-22 11:23:51 +02:00
Michael Eischer 337035c414 Merge pull request #221 from MichaelEischer/skip-files-in-intermediate-directories
Ignore unexpected files in intermediate directories
2023-04-22 11:20:11 +02:00
dependabot[bot] 399f7f1d49 Bump github.com/prometheus/client_golang from 1.14.0 to 1.15.0
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.14.0 to 1.15.0.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.14.0...v1.15.0)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-04-17 20:04:17 +00:00
Michael Eischer afcdb2f312 Merge pull request #224 from restic/dependabot/go_modules/github.com/spf13/cobra-1.7.0
Bump github.com/spf13/cobra from 1.6.1 to 1.7.0
2023-04-11 22:42:58 +02:00
dependabot[bot] f97c48d92e Bump github.com/spf13/cobra from 1.6.1 to 1.7.0
Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.6.1 to 1.7.0.
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](https://github.com/spf13/cobra/compare/v1.6.1...v1.7.0)

---
updated-dependencies:
- dependency-name: github.com/spf13/cobra
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-04-11 20:39:21 +00:00