[Bug 1870244] Re: ec2metadata does not speak EC2 IMDSv2

2021-12-16 Thread Paride Legovini
Hi Karol, my plan is to work at this in January, following the new
backporting process [1].

https://wiki.ubuntu.com/UbuntuBackports

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1870244

Title:
  ec2metadata does not speak EC2 IMDSv2

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-utils/+bug/1870244/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1870244] Re: ec2metadata does not speak EC2 IMDSv2

2021-12-16 Thread Karol H
Hi Paride - I think your idea to put this fix in -backports pockets
sounds good. Do you have any idea when the backport for bionic will be
ready?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1870244

Title:
  ec2metadata does not speak EC2 IMDSv2

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-utils/+bug/1870244/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1870244] Re: ec2metadata does not speak EC2 IMDSv2

2021-09-07 Thread Paride Legovini
I put some more thought on the possibility of SRUing this to Bionic and
Focal, and my conclusion is that it's probably not a good idea to
attempt a SRU. The rationale is:

1. This doesn't clearly fit into the SRU requirements [1], as we're not
fixing a bug, but enabling a new feature. I agree it's a fairly
important security features, and it may fit under the "we sometimes want
to introduce new features" case, however I'm not *really* sure [2] is a
totally safe change, as it touches the currently used code path.

2. Now we SRU support for IMDSv2. Then, for example, how long before
before we also want support for the "new" ec2metadata fields [3]?

I understand the clouds are a moving target, and maybe cloud-utils
should be granted a SRU exception, like cloud-init has.

Another solution consists in publishing the newer versions of cloud-
utils to the -backports pockets (bionic-backports and focal-backports in
this case). This is easy to do and will enable users to use the new
features when needed, even if without the guarantees given by the SRU
process [1].

Any opinion for or against proceeding with backports is welcome!

[1] https://wiki.ubuntu.com/StableReleaseUpdates
[2] 
https://github.com/canonical/cloud-utils/commit/2dabc1a177a18525da07983c1365673e7f91efbb
[3] 
https://github.com/canonical/cloud-utils/commit/558b5d005c801b9b3c8b8603f0144de82997ed17

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1870244

Title:
  ec2metadata does not speak EC2 IMDSv2

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-utils/+bug/1870244/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1870244] Re: ec2metadata does not speak EC2 IMDSv2

2021-09-07 Thread Paride Legovini
** No longer affects: cloud-utils (Ubuntu Hirsute)

** Also affects: cloud-utils (Ubuntu Bionic)
   Importance: Undecided
   Status: New

** Changed in: cloud-utils (Ubuntu Bionic)
   Status: New => Triaged

** Changed in: cloud-utils (Ubuntu Bionic)
 Assignee: (unassigned) => Paride Legovini (paride)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1870244

Title:
  ec2metadata does not speak EC2 IMDSv2

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-utils/+bug/1870244/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Re: [Bug 1870244] Re: ec2metadata does not speak EC2 IMDSv2

2021-09-06 Thread Reed Loden
Would it also make sense to backport to all still-supported LTS releases?
That way companies still using LTS can take advantage of this important AWS
security feature without first having to upgrade all their instances. Just
a thought…

On Mon, Sep 6, 2021 at 8:00 AM Paride Legovini <1870...@bugs.launchpad.net>
wrote:

> This should be fairly simple to SRU to Focal and Hirsute. I added bug
> tasks for those and assigned myself.
>
> ** Also affects: cloud-utils (Ubuntu)
>Importance: Undecided
>Status: New
>
> ** Also affects: cloud-utils (Ubuntu Focal)
>Importance: Undecided
>Status: New
>
> ** Also affects: cloud-utils (Ubuntu Hirsute)
>Importance: Undecided
>Status: New
>
> ** Changed in: cloud-utils (Ubuntu Focal)
>Status: New => Triaged
>
> ** Changed in: cloud-utils (Ubuntu Hirsute)
>Status: New => Triaged
>
> ** Changed in: cloud-utils (Ubuntu)
>Status: New => Fix Released
>
> ** Changed in: cloud-utils (Ubuntu Focal)
>  Assignee: (unassigned) => Paride Legovini (paride)
>
> ** Changed in: cloud-utils (Ubuntu Hirsute)
>  Assignee: (unassigned) => Paride Legovini (paride)
>
> --
> You received this bug notification because you are subscribed to the bug
> report.
> https://bugs.launchpad.net/bugs/1870244
>
> Title:
>   ec2metadata does not speak EC2 IMDSv2
>
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/cloud-utils/+bug/1870244/+subscriptions
>
>

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1870244

Title:
  ec2metadata does not speak EC2 IMDSv2

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-utils/+bug/1870244/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1870244] Re: ec2metadata does not speak EC2 IMDSv2

2021-09-06 Thread Paride Legovini
This should be fairly simple to SRU to Focal and Hirsute. I added bug
tasks for those and assigned myself.

** Also affects: cloud-utils (Ubuntu)
   Importance: Undecided
   Status: New

** Also affects: cloud-utils (Ubuntu Focal)
   Importance: Undecided
   Status: New

** Also affects: cloud-utils (Ubuntu Hirsute)
   Importance: Undecided
   Status: New

** Changed in: cloud-utils (Ubuntu Focal)
   Status: New => Triaged

** Changed in: cloud-utils (Ubuntu Hirsute)
   Status: New => Triaged

** Changed in: cloud-utils (Ubuntu)
   Status: New => Fix Released

** Changed in: cloud-utils (Ubuntu Focal)
 Assignee: (unassigned) => Paride Legovini (paride)

** Changed in: cloud-utils (Ubuntu Hirsute)
 Assignee: (unassigned) => Paride Legovini (paride)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1870244

Title:
  ec2metadata does not speak EC2 IMDSv2

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-utils/+bug/1870244/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs