[Group.of.nepali.translators] [Bug 1883315] Re: Showing esm update as installable when esm is disabled
** Also affects: update-notifier (Ubuntu Impish)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1883315
Title:
Showing esm update as installable when esm is disabled
Status in update-notifier package in Ubuntu:
New
Status in update-notifier source package in Xenial:
In Progress
Status in update-notifier source package in Bionic:
New
Status in update-notifier source package in Focal:
New
Status in update-notifier source package in Groovy:
New
Status in update-notifier source package in Hirsute:
New
Status in update-notifier source package in Impish:
New
Bug description:
I came across a scenario where the output of `/usr/lib/update-notifier
/apt-check --human-readable` is showing some (not all) esm updates as
being installable when esm itself is disabled:
ubuntu@trusty-desktop:~$ sudo /usr/lib/update-notifier/apt-check
--human-readable
UA Infrastructure Extended Security Maintenance (ESM) is not enabled.
456 updates can be installed immediately.
10 of these updates are provided through UA Infrastructure ESM.
378 of these updates are security updates.
To see these additional updates run: apt list --upgradable
Enable UA Infrastructure ESM to receive 127 additional security updates.
See https://ubuntu.com/advantage or run: sudo ua status
If you look carefully, you will see that it's contradicting itself by saying
esm is enabled and disabled at the same time:
- 10 ESM updates can be installed immediately
- ESM is disabled, and if you enable ESM you will get 127 additional updates
I believe this comes from apt_check.py:253:
# now check for security updates that are masked by a
# canidate version from another repo (-proposed or -updates)
for ver in pkg.version_list:
if (inst_ver and apt_pkg.version_compare(ver.ver_str,
inst_ver.ver_str) <= 0):
#print("skipping '%s' " % ver.VerStr)
continue
if isESMUpgrade(ver):
esm_updates += 1
if isSecurityUpgrade(ver):
security_updates += 1
break
I believe that is ignoring the fact that ESM is disabled. I added a pdb to
check which package it was considering as an esm update, and the first response
was dbus, which is in this peculiar state in the archive:
ubuntu@trusty-desktop:~$ apt-cache policy dbus
dbus:
Installed: 1.6.18-0ubuntu4.3
Candidate: 1.6.18-0ubuntu4.5
Version table:
1.6.18-0ubuntu4.5+esm1 0
-32768 https://esm.ubuntu.com/ubuntu/ trusty-infra-security/main amd64
Packages
1.6.18-0ubuntu4.5 0
500 http://br.archive.ubuntu.com/ubuntu/ trusty-updates/main amd64
Packages
1.6.18-0ubuntu4.4 0
500 http://security.ubuntu.com/ubuntu/ trusty-security/main amd64
Packages
*** 1.6.18-0ubuntu4.3 0
100 /var/lib/dpkg/status
1.6.18-0ubuntu4 0
500 http://br.archive.ubuntu.com/ubuntu/ trusty/main amd64 Packages
Maybe we just need to guard that isESMUpgrade(ver) call with "if
have_esm and isESMUpgrade(ver)"?
The other place in the code a bit up from the above which also
increments esm_updates isn't run in this scenario, so the 10 packages
must come from the check I highlighted above.
Other info:
update-notifier 0.154.1ubuntu8 from trusty-updates
ubuntu-advantage-tools 19.6~ubuntu14.04.4 from trusty-updates
ua is attached, but esm disabled:
ubuntu@trusty-desktop:~$ ua status
SERVICE ENTITLED STATUSDESCRIPTION
cc-ealyes n/a Common Criteria EAL2 Provisioning Packages
cis-audit no— Center for Internet Security Audit Tools
esm-infra yes disabled UA Infra: Extended Security Maintenance
fips yes n/a NIST-certified FIPS modules
fips-updates yes n/a Uncertified security updates to FIPS modules
livepatch yes disabled Canonical Livepatch service
Enable services with: ua enable
Account: andreas.hasen...@canonical.com
Subscription: andreas.hasen...@canonical.com
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/update-notifier/+bug/1883315/+subscriptions
___
Mailing list: https://launchpad.net/~group.of.nepali.translators
Post to : group.of.nepali.translators@lists.launchpad.net
Unsubscribe : https://launchpad.net/~group.of.nepali.translators
More help : https://help.launchpad.net/ListHelp
[Group.of.nepali.translators] [Bug 1924766] Re: update-notifier does not handle ESM Apps in the apt-check script
** Also affects: update-notifier (Ubuntu Impish) Importance: Undecided Status: New -- You received this bug notification because you are a member of नेपाली भाषा समायोजकहरुको समूह, which is subscribed to Xenial. Matching subscriptions: Ubuntu 16.04 Bugs https://bugs.launchpad.net/bugs/1924766 Title: update-notifier does not handle ESM Apps in the apt-check script Status in update-notifier package in Ubuntu: New Status in update-notifier source package in Xenial: In Progress Status in update-notifier source package in Bionic: New Status in update-notifier source package in Focal: New Status in update-notifier source package in Groovy: New Status in update-notifier source package in Hirsute: New Status in update-notifier source package in Impish: New Bug description: [Impact] When ESM Apps goes into production we want to be able to advertise it to our users through MOTD. Currently, update-notifier apt-check does not take into consideration the exclusive packages of ESM Apps, which is a problem. [Test case] To reproduce the issue, you can: 1. Launch a xenial vm 2. Install the latest version of uaclient from the stable ppa: https://launchpad.net/~ua-client/+archive/ubuntu/stable/ 3. Change the following line on `/etc/ubuntu-advantage/uaclient.conf` from contract_url: 'https://contracts.canonical.com' To: contract_url: 'https://contracts.staging.canonical.com' 4. Attach a staging token to uaclient thorough: ua attach YOUR_STAGING_TOKEN 5. Run /usr/lib/update-notifier/apt-check --human-readable 6. Verify that no mention to ESM Apps is made and that update-notifier puts all of the ESM packages in the same bucket To verify that the error is fixed: 1.Perform all the stages above until step 4 2 Install the new update-notifier from this ppa: https://launchpad.net/~lamoura/+archive/ubuntu/update-notifier-test-ppa 3. Verify now that ESM Apps is reflected in the message [Where problems could occur] The changes in this package should only be seen when MOTD is getting a new message. If that script fails for some reason, it seems that MOTD will only not present the message, which is doesn't seem to be a system critical issue. [Discussion] With ESM Apps going to production soon, we have decided to update the messages delivered by update-notifier apt-check to address the package count of ESM Apps and the possibility of installing more upgrades if the user has ESM Apps disabled. We are also updating other parts of the messaging as well. First, we only display ESM Infra status on ESM distros. However, we will keep showing the ESM Infra package count on all of them. For ESM Apps, we are only performing the alerts (For example, that you might have x packages updates if ESM Apps is installed) if the user is on a LTS distro. Finally, we are also addressing this bug here: https://bugs.launchpad.net/ubuntu/+source/update-notifier/+bug/1883315 Where we were incorrectly counting ESM packages even if the user did not have access to those services. == Changelog == + data/apt-check - Make distinction of ESM Apps and ESM Infra when doing package count - Only count ESM packages if the user has access to the service (LP #1883315) - Only display ESM Infra alerts if the distro is ESM To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/update-notifier/+bug/1924766/+subscriptions ___ Mailing list: https://launchpad.net/~group.of.nepali.translators Post to : group.of.nepali.translators@lists.launchpad.net Unsubscribe : https://launchpad.net/~group.of.nepali.translators More help : https://help.launchpad.net/ListHelp
[Group.of.nepali.translators] [Bug 1926175] [NEW] something something precise (test bug)
Public bug reported: something something precise (test bug) ** Affects: linux-gcp (Ubuntu) Importance: Undecided Status: Fix Released ** Affects: linux-gcp (Ubuntu Precise) Importance: Undecided Status: Won't Fix ** Affects: linux-gcp (Ubuntu Trusty) Importance: Undecided Status: In Progress ** Affects: linux-gcp (Ubuntu Xenial) Importance: Undecided Status: Invalid ** Also affects: linux-gcp (Ubuntu Xenial) Importance: Undecided Status: New ** Also affects: linux-gcp (Ubuntu Precise) Importance: Undecided Status: New ** Also affects: linux-gcp (Ubuntu Trusty) Importance: Undecided Status: New ** Changed in: linux-gcp (Ubuntu) Status: New => Fix Released ** Changed in: linux-gcp (Ubuntu Xenial) Status: New => Fix Released ** Changed in: linux-gcp (Ubuntu Xenial) Status: Fix Released => Invalid ** Changed in: linux-gcp (Ubuntu Precise) Status: New => Won't Fix ** Changed in: linux-gcp (Ubuntu Trusty) Status: New => In Progress -- You received this bug notification because you are a member of नेपाली भाषा समायोजकहरुको समूह, which is subscribed to Xenial. Matching subscriptions: Ubuntu 16.04 Bugs https://bugs.launchpad.net/bugs/1926175 Title: something something precise (test bug) Status in linux-gcp package in Ubuntu: Fix Released Status in linux-gcp source package in Precise: Won't Fix Status in linux-gcp source package in Trusty: In Progress Status in linux-gcp source package in Xenial: Invalid Bug description: something something precise (test bug) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux-gcp/+bug/1926175/+subscriptions ___ Mailing list: https://launchpad.net/~group.of.nepali.translators Post to : group.of.nepali.translators@lists.launchpad.net Unsubscribe : https://launchpad.net/~group.of.nepali.translators More help : https://help.launchpad.net/ListHelp
