Back to crowdsec PTS page

Accepted crowdsec 1.0.8-1 (source) into unstable

Hash: SHA512

Format: 1.8
Date: Tue, 02 Mar 2021 00:25:48 +0000
Source: crowdsec
Architecture: source
Version: 1.0.8-1
Distribution: unstable
Urgency: medium
Maintainer: Cyril Brulebois <>
Changed-By: Cyril Brulebois <>
 crowdsec (1.0.8-1) unstable; urgency=medium
   * New upstream stable release.
   * Refresh patches:
      + 0001-use-a-local-machineid-implementation.patch (unfuzzy)
      + 0002-add-compatibility-for-older-sqlite-driver.patch
   * Set cwversion variables through debian/rules (build metadata).
   * Add patch so that upstream's crowdsec.service is correct on Debian:
      + 0003-adjust-systemd-unit.patch
   * Really add lintian overrides for hardening-no-pie warnings.
   * Ship patterns below /etc/crowdsec/patterns: they're supposed to be
     stable over time, and it's advised not to modify them, but let's allow
     for some configurability.
   * Include a snapshot of hub files from the master branch, at commit
     d8a8509bdf: hub1. Further updates for a given crowdsec upstream
     version will be numbered hubN. After a while, they will be generated
     from a dedicated vX.Y.Z branch instead of from master.
   * Implement a generate_hub_tarball target in debian/rules to automate
     generating a tarball for hub files.
   * Add patch to disable geoip-enrich in the hub files as it requires
     downloading some files from the network that aren't under the usual
     MIT license:
      + 0004-disable-geoip-enrich.patch
   * Ship a selection of hub files in /usr/share/crowdsec/hub so that
     crowdsec can be set up without having to download data from the
     collaborative hub (
   * Ditto for some data files (in /usr/share/crowdsec/data).
   * Use DH_GOLANG_EXCLUDES to avoid including extra Go files from the
     hub into the build directory.
   * Implement an extract_hub_tarball target in debian/rules to automate
     extracting hub files from the tarball.
   * Implement an extract_data_tarball target in debian/rules to automate
     extracting data files from the tarball.
   * Ship crowdsec-cli (automated Golang naming) as cscli (upstream's
   * Add patch to adjust the default config:
      + 0005-adjust-config.patch
   * Ship config/config.yaml accordingly, along with the config files it
   * Also adjust the hub_branch variable in config.yaml, pointing to the
     branch related to the current upstream release instead of master.
   * Create /var/lib/crowdsec/{data,hub} directories.
   * Implement configure in postinst to generate credentials files:
     Implement a simple agent setup with a Local API (LAPI), and with an
     automatic registration to the Central API (CAPI). The latter can be
     disabled by creating a /etc/crowdsec/online_api_credentials.yaml file
     containing a comment (e.g. “# no thanks”) before installing this
   * Implement purge in postrm. Drop all of /etc/crowdsec except
     online_api_credentials.yaml if this file doesn't seem to have been
     created during CAPI registration (likely because an admin created the
     file in advance to prevent it). Also remove everything below
     /var/lib/crowdsec/{data,hub}, along with log files.
   * Implement custom enable-online-hub and disable-online-hub actions in
     postinst. The latter is called once automatically to make sure the
     offline hub is ready to use. See README.Debian for details.
   * Also enable all items using the offline hub on fresh installation.
   * Add patch advertising `systemctl restart crowdsec` when updating the
     configuration: reload doesn't work at the moment (#656 upstream).
      + 0006-prefer-systemctl-restart.patch
   * Add patch automating switching from the offline hub to the online hub
     when `cscli hub update` is called:
      + 0007-automatically-enable-online-hub.patch
   * Add lintian override accordingly: uses-dpkg-database-directly.
   * Add ca-certificates to Depends for the CAPI registration.
   * Create /etc/machine-id if it doesn't exist already (e.g. in piuparts
 c95223e1f8a7dbe9ea6880f461434c279522b6a9 4113 crowdsec_1.0.8-1.dsc
 b4578e550c122525141b54f0f340da7d57c66b64 6633 crowdsec_1.0.8.orig-data1.tar.gz
 fc4ea1e240eeeb6d52f9e66532a710eebf7afaf4 328614 crowdsec_1.0.8.orig-hub1.tar.gz
 fbe11b10729fc59e3bd34ff3cd444f14a390c6aa 28991798 crowdsec_1.0.8.orig.tar.gz
 1926be922d664e717cbfcb7f18648d507d5ded81 15028 crowdsec_1.0.8-1.debian.tar.xz
 0a574cbfaae028f935e043a0e59404ebea365541 22413 crowdsec_1.0.8-1_source.buildinfo
 8faba7cf2f401041778043dc6677be0490e8295435e2e5098b0eab3482063c92 4113 crowdsec_1.0.8-1.dsc
 5162c01310629e0546229a40902d586fddd713208ff5a65fda7660eadd4fa06a 6633 crowdsec_1.0.8.orig-data1.tar.gz
 8928fbff222c2401296b22f65b7e4373fac5f6793aa8eb5b587076e675e98f48 328614 crowdsec_1.0.8.orig-hub1.tar.gz
 69eaff551eab31fc83207f9f8388ab0ccb4e2caeb7386cce5da79d4752f56b40 28991798 crowdsec_1.0.8.orig.tar.gz
 87f6a8765306766fd2b1938b4f9a83301cf689211c92ffc829a72fc0234fde03 15028 crowdsec_1.0.8-1.debian.tar.xz
 2e1202a95709a4da81835127cc132639c8d839f93e63071be47ced7a9ab55977 22413 crowdsec_1.0.8-1_source.buildinfo
 6a5511cd55dc081949239aed78a48082 4113 golang optional crowdsec_1.0.8-1.dsc
 c9a40e5a33657fd69d51cf87f814b184 6633 golang optional crowdsec_1.0.8.orig-data1.tar.gz
 12fe8aa6f1f1d09fee6e524657661f52 328614 golang optional crowdsec_1.0.8.orig-hub1.tar.gz
 1029b77760e3f6b33d40c9f02c770244 28991798 golang optional crowdsec_1.0.8.orig.tar.gz
 1a59e5ff6e71d1833ed461f709452752 15028 golang optional crowdsec_1.0.8-1.debian.tar.xz
 e136491d0b70a35671f3e5ef5eb5d8f4 22413 golang optional crowdsec_1.0.8-1_source.buildinfo