[Bug 1870244] Re: ec2metadata does not speak EC2 IMDSv2
Hi Karol, my plan is to work at this in January, following the new backporting process [1]. https://wiki.ubuntu.com/UbuntuBackports -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1870244 Title: ec2metadata does not speak EC2 IMDSv2 To manage notifications about this bug go to: https://bugs.launchpad.net/cloud-utils/+bug/1870244/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1870244] Re: ec2metadata does not speak EC2 IMDSv2
Hi Paride - I think your idea to put this fix in -backports pockets sounds good. Do you have any idea when the backport for bionic will be ready? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1870244 Title: ec2metadata does not speak EC2 IMDSv2 To manage notifications about this bug go to: https://bugs.launchpad.net/cloud-utils/+bug/1870244/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1870244] Re: ec2metadata does not speak EC2 IMDSv2
I put some more thought on the possibility of SRUing this to Bionic and Focal, and my conclusion is that it's probably not a good idea to attempt a SRU. The rationale is: 1. This doesn't clearly fit into the SRU requirements [1], as we're not fixing a bug, but enabling a new feature. I agree it's a fairly important security features, and it may fit under the "we sometimes want to introduce new features" case, however I'm not *really* sure [2] is a totally safe change, as it touches the currently used code path. 2. Now we SRU support for IMDSv2. Then, for example, how long before before we also want support for the "new" ec2metadata fields [3]? I understand the clouds are a moving target, and maybe cloud-utils should be granted a SRU exception, like cloud-init has. Another solution consists in publishing the newer versions of cloud- utils to the -backports pockets (bionic-backports and focal-backports in this case). This is easy to do and will enable users to use the new features when needed, even if without the guarantees given by the SRU process [1]. Any opinion for or against proceeding with backports is welcome! [1] https://wiki.ubuntu.com/StableReleaseUpdates [2] https://github.com/canonical/cloud-utils/commit/2dabc1a177a18525da07983c1365673e7f91efbb [3] https://github.com/canonical/cloud-utils/commit/558b5d005c801b9b3c8b8603f0144de82997ed17 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1870244 Title: ec2metadata does not speak EC2 IMDSv2 To manage notifications about this bug go to: https://bugs.launchpad.net/cloud-utils/+bug/1870244/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1870244] Re: ec2metadata does not speak EC2 IMDSv2
** No longer affects: cloud-utils (Ubuntu Hirsute) ** Also affects: cloud-utils (Ubuntu Bionic) Importance: Undecided Status: New ** Changed in: cloud-utils (Ubuntu Bionic) Status: New => Triaged ** Changed in: cloud-utils (Ubuntu Bionic) Assignee: (unassigned) => Paride Legovini (paride) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1870244 Title: ec2metadata does not speak EC2 IMDSv2 To manage notifications about this bug go to: https://bugs.launchpad.net/cloud-utils/+bug/1870244/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
Re: [Bug 1870244] Re: ec2metadata does not speak EC2 IMDSv2
Would it also make sense to backport to all still-supported LTS releases? That way companies still using LTS can take advantage of this important AWS security feature without first having to upgrade all their instances. Just a thought… On Mon, Sep 6, 2021 at 8:00 AM Paride Legovini <1870...@bugs.launchpad.net> wrote: > This should be fairly simple to SRU to Focal and Hirsute. I added bug > tasks for those and assigned myself. > > ** Also affects: cloud-utils (Ubuntu) >Importance: Undecided >Status: New > > ** Also affects: cloud-utils (Ubuntu Focal) >Importance: Undecided >Status: New > > ** Also affects: cloud-utils (Ubuntu Hirsute) >Importance: Undecided >Status: New > > ** Changed in: cloud-utils (Ubuntu Focal) >Status: New => Triaged > > ** Changed in: cloud-utils (Ubuntu Hirsute) >Status: New => Triaged > > ** Changed in: cloud-utils (Ubuntu) >Status: New => Fix Released > > ** Changed in: cloud-utils (Ubuntu Focal) > Assignee: (unassigned) => Paride Legovini (paride) > > ** Changed in: cloud-utils (Ubuntu Hirsute) > Assignee: (unassigned) => Paride Legovini (paride) > > -- > You received this bug notification because you are subscribed to the bug > report. > https://bugs.launchpad.net/bugs/1870244 > > Title: > ec2metadata does not speak EC2 IMDSv2 > > To manage notifications about this bug go to: > https://bugs.launchpad.net/cloud-utils/+bug/1870244/+subscriptions > > -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1870244 Title: ec2metadata does not speak EC2 IMDSv2 To manage notifications about this bug go to: https://bugs.launchpad.net/cloud-utils/+bug/1870244/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1870244] Re: ec2metadata does not speak EC2 IMDSv2
This should be fairly simple to SRU to Focal and Hirsute. I added bug tasks for those and assigned myself. ** Also affects: cloud-utils (Ubuntu) Importance: Undecided Status: New ** Also affects: cloud-utils (Ubuntu Focal) Importance: Undecided Status: New ** Also affects: cloud-utils (Ubuntu Hirsute) Importance: Undecided Status: New ** Changed in: cloud-utils (Ubuntu Focal) Status: New => Triaged ** Changed in: cloud-utils (Ubuntu Hirsute) Status: New => Triaged ** Changed in: cloud-utils (Ubuntu) Status: New => Fix Released ** Changed in: cloud-utils (Ubuntu Focal) Assignee: (unassigned) => Paride Legovini (paride) ** Changed in: cloud-utils (Ubuntu Hirsute) Assignee: (unassigned) => Paride Legovini (paride) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1870244 Title: ec2metadata does not speak EC2 IMDSv2 To manage notifications about this bug go to: https://bugs.launchpad.net/cloud-utils/+bug/1870244/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs