GitLab

Now the old iptables binary is server at /sbin/iptables-legacy.
Then, using the update-alternatives system one can choose which binary is going
to provide the actual /sbin/iptables tool, either iptables-legacy or
the newer iptables-compat (nf_tables compat).

The compat version is given more priority by default.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

They produce stderr, allow them to prevent autopkgtest failures.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

I deleted the Debian patch to add our custom manpage which is included upstream
in the last release. Instruct debhelper to pick the upstream one.

Closes: #889649
Reported-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Generate changelog entry.

Git-Dch: Ignore
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Reported by lintian.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Bump compliance with standards.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

This manpage is now included in the upstream tarball.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

It has been included upstream in the last 1.6.2 release.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Let's use the new Debian salsa service.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Using the 'gbp dch' tool.

Git-Dch: Ignore
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

When building the package:

[...]
   dh_install
   dh_installdocs
   dh_installchangelogs
   dh_installman
   dh_perl
   dh_link
   dh_strip_nondeterminism
   dh_compress
dh_compress: symlink(iptables-apply.8.gz, debian/iptables/usr/share/man/man8/ip6tables-apply.8.gz) failed: File exists
dh_compress: Aborting due to earlier error
debian/rules:10: recipe for target 'binary' failed
make: *** [binary] Error 255
dpkg-buildpackage: error: fakeroot debian/rules binary gave error exit status 2
[...]
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Add patch by James Cowgill <jcowgill@debian.org>.

By the time of this commit, the patch has been sent upstream, but upstream
has not applied it to master yet.

Closes: #859775
Thanks: James Cowgill for the patch
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

No changes required per checklist:
 https://www.debian.org/doc/debian-policy/upgrading-checklist.html#s-4.0.0

Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

As reported by the Debian package tracker hinter.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

The affected packages cannot satisfy their cross build dependencies,
because their dependency on iptables-dev is unsatisfiable. In general,
Architecture: all packages can never satisfy cross build dependencies
unless marked Multi-Arch: foreign. In this case, such a marking would be
fatal, as it masks out the architecture constraint. Those packages would
be requesting iptables headers for the host architecture and receiving
them for the build architecture. Thus iptables-dev needs to be switched
to Architecture: any.

Alternatively, all those affected packages need to switch their dependency
to the real packages and iptables-dev should be removed.

Closes: #865464
Signed-off-by: Helmut Grohne <helmutg@debian.org>
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Generate entry using 'gbp dch'.

Git-Dch: Ignore
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Switch the maintainer to the new netfilter packaging team.

Reference:
 http://ral-arturo.org/2016/11/30/debian-netfilter-team.html

Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Generate entry for an experimental upload.

Git-Dch: Ignore
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Using gbp dch.

Git-Dch: Ignore
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Refresh this patch with upstream changes.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Refresh this patch with upstream changes.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Refresh this patch with upstream changes.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

These basic tests checks whether the binaries are at their proper locations
and can run with no issues (for example, basic linkage issues).
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Using gbp dch.

Git-Dch: Ignore
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

The problem with this package and libxtables11 not being co-installable
was introduced in the first snapshot version which did not get the
SONAME bumped for the package name. But older versions should still be
co-installable as they have different SONAMES. Change the direction
of the verioned dependencies to cover this.

In addition using a >= should be safe here as long as a libxtables11
is not reintroduced.

Closes: #845800
Signed-off-by: Guillem Jover <guillem@debian.org>
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

* Add symbols files for all libraries
  - d/shlibs.local: remove, obsoleted by symbols files

Closes: #845309
Signed-off-by: Simon McVittie <smcv@debian.org>
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

The URL changed. Now instead of pkg-netfilter/pkg-netfilter, we have
pkg-netfilter/pkg-iptables.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

It's a shorter url, we can use the same for Vcs-Git and Vcs-Browser and
the webgui is more ux friendly :)

Adds '-- development files' to the short description in order to differ from
libxtables12 one.

This allows multiple builds without trashing the buildenv with modified
files, eg.: building with debuild.
Please note that gbp buildpackage is not affected by this because it does
build packages from another directory, ../build-area.

Export DEB_BUILD_MAINT_OPTIONS = hardening=+all

dh-autoreconf is now a dependency of debhelper.

Git-Dch: Ignore
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Use <= rather than << as reported by Alessandro.

Closes: #845278
Reported-by: Alessandro Ghedini <alessandro@cloudflare.com>
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Using gbp dch.

Git-Dch: Ignore
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

[...]
Preparing to unpack .../libxtables12_1.6.0+snapshot20161117-2_amd64.deb ...
Unpacking libxtables12:amd64 (1.6.0+snapshot20161117-2) ...
dpkg: error processing archive
/var/cache/apt/archives/libxtables12_1.6.0+snapshot20161117-2_amd64.deb
(--unpack):
 trying to overwrite '/usr/lib/x86_64-linux-gnu/libxtables.so.12.0.0',
which is also in package libxtables11:amd64 1.6.0+snapshot20161117-1
dpkg-deb: error: subprocess paste was killed by signal (Broken pipe)
Errors were encountered while processing:
 /var/cache/apt/archives/libxtables12_1.6.0+snapshot20161117-2_amd64.deb
E: Sub-process /usr/bin/dpkg returned an error code (1)
[...]

Closes: #845278
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Using gbp dch.

Git-Dch: Ignore
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Bump soname to don't brean reverse dependencies.

Closes: #844755
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>