autopkgtest (5.48) unstable; urgency=medium

  Security fixes involving many permissiosn changes:
  * Several directories are nowworld-writeable only when used with
    suitably isolating virtualisation servers.  Previously they were
    world-writeable in circumstances where this wasn't safe.
  * autopkgtest-virt-null no longer advertises isolation-machine.
    This was a dangerous lie.  For environments where the caller provides
    isolation, there's a new --fake-capability option to restore the
    previous behaviour.
  * autopkgtest-virt-unshare no longer offers the `downtmp-host`
    capability, since it is not safe for host processes to directly copy
    to and from the testbed which has a different security context.
  * There's a new --insecure option to autopkgtest which enables some old,
    risky, behaviours, in some circumstances.
  * autopkgtest-virt-ssh should not be provided with a way to get root on
    the testbed, unless the whole testbed is fully isolated from any
    untrusted code.  This security restriction was alwsays implied by the
    behaviour, but has now been documented.

 -- Ian Jackson <ijackson@chiark.greenend.org.uk>  Wed, 16 Apr 2025 19:38:57 +0100

autopkgtest (5.0) unstable; urgency=medium

  * autopkgtest 4.0 with its "autopkgtest" program has been around for a
    year, Debian's and Ubuntu's CI moved to that, and the Debian
    9.0 release is behind us. The old "adt-run" and the corresponding
    adt-virt-* and adt-build-* command line interfaces got dropped now.

 -- Martin Pitt <mpitt@debian.org>  Sun, 02 Jul 2017 13:13:11 +0200

autopkgtest (4.0) unstable; urgency=medium

  Please adjust your existing CI system/scripts for the new CLI, tools, and
  API introduced in version 4.0:

  * This release adds a new "autopkgtest" CLI. This provides a simplified CLI
    compared to the now deprecated adt-run; see the changelog for details.
    The old "adt-run" CLI will still be available for some time.
  * The adt-build* tools got renamed to autopkgtest-build*, and now build
    images prefixed with"autopkgtest" instead of "adt". There are
    compatibility symlinks for the old commands, and when being called through
    them, also produce images with the old adt* names.
  * The public ADT_* env variables got renamed to AUTOPKGTEST_*:
    - AUTOPKGTEST_APT_PROXY
    - AUTOPKGTEST_ARTIFACTS
    - AUTOPKGTEST_AUTOPILOT_MODULE
    - AUTOPKGTEST_NORMAL_USER
    - AUTOPKGTEST_REBOOT_MARK
    - AUTOPKGTEST_TMP
    As these are being used in existing tests and tools, they are also
    exported/checked under their old ADT_* name.

 -- Martin Pitt <mpitt@debian.org>  Sun, 05 Jun 2016 19:37:59 +0200