[Bug 1895137] Re: [MIR] rpi-eeprom; raspberrypi-userland
Override component to main rpi-eeprom 11.3-1ubuntu1 in hirsute: multiverse/misc -> main rpi-eeprom 11.3-1ubuntu1 in hirsute arm64: multiverse/misc/optional/100% -> main rpi-eeprom 11.3-1ubuntu1 in hirsute armhf: multiverse/misc/optional/100% -> main 3 publications overridden. ** Changed in: rpi-eeprom (Ubuntu) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1895137 Title: [MIR] rpi-eeprom; raspberrypi-userland To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/raspberrypi-userland/+bug/1895137/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1895137] Re: [MIR] rpi-eeprom; raspberrypi-userland
Override component to main raspberrypi-userland 0~20200520+git2fe4ca3-0ubuntu3 in hirsute: universe/libs -> main libraspberrypi-bin 0~20200520+git2fe4ca3-0ubuntu3 in hirsute arm64: universe/misc/optional/100% -> main libraspberrypi-bin 0~20200520+git2fe4ca3-0ubuntu3 in hirsute armhf: universe/misc/optional/100% -> main libraspberrypi-dev 0~20200520+git2fe4ca3-0ubuntu3 in hirsute arm64: universe/libdevel/optional/100% -> main libraspberrypi-dev 0~20200520+git2fe4ca3-0ubuntu3 in hirsute armhf: universe/libdevel/optional/100% -> main libraspberrypi0 0~20200520+git2fe4ca3-0ubuntu3 in hirsute arm64: universe/libs/optional/100% -> main libraspberrypi0 0~20200520+git2fe4ca3-0ubuntu3 in hirsute armhf: universe/libs/optional/100% -> main 7 publications overridden. ** Changed in: raspberrypi-userland (Ubuntu) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1895137 Title: [MIR] rpi-eeprom; raspberrypi-userland To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/raspberrypi-userland/+bug/1895137/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1895137] Re: [MIR] rpi-eeprom; raspberrypi-userland
Set the states to be ready for the AAs per [1]. This should resolve soon'ish. [1]: https://wiki.ubuntu.com/MainInclusionProcess?action=show=MIRTeam#Process_states -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1895137 Title: [MIR] rpi-eeprom; raspberrypi-userland To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/raspberrypi-userland/+bug/1895137/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1895137] Re: [MIR] rpi-eeprom; raspberrypi-userland
Ok clarified, and good - thanks Dave! All former concerns are resolved AFAICS. Therefore since all else was ready let use mark this ready for promotion (and after all this also is one of the cases that we kind of "already support but want to make official"). ** Changed in: raspberrypi-userland (Ubuntu) Assignee: Matthias Klose (doko) => (unassigned) ** Changed in: rpi-eeprom (Ubuntu) Status: In Progress => Fix Committed ** Changed in: raspberrypi-userland (Ubuntu) Status: New => Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1895137 Title: [MIR] rpi-eeprom; raspberrypi-userland To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/raspberrypi-userland/+bug/1895137/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1895137] Re: [MIR] rpi-eeprom; raspberrypi-userland
We have assigned doko to re-review, but he is too often lost in too important bugs (e.g. today in https://bugs.launchpad.net/ubuntu/+source/fakeroot/+bug/1915250). So I want to help here by doing the re-review. The builds of https://bugs.launchpad.net/ubuntu/+source/rpi-eeprom/+bug/1895137/comments/15 are in hirsute by now. raspberrypi-userland | 0~20200520+git2fe4ca3-0ubuntu3 | hirsute/universe | source Now we need to check if all concerns were adressed: per CL they are: 3 * d/copyright audit 4 * Added d/p/no-specific-libgps.patch to use whatever libgps the system 5 provides 6 * Excluded the various /usr/bin/containers_* test binaries from 7 libraspberrypi-bin 8 * Added d/librasperrypi0.symbols file 9 * Fixed pkgconfig paths in d/p/fix-multiarch-dir.patch I checked the changes between this and the former versions - symbols are really present now for libraspberrypi0 - this was a bit ugly (one pkg, many libs - no versioned names, ..) - but eventully the .symbols made sense, covered all - also I see why we need the dev-pkg-without-shlib-symlink and shlib-without-versioned-soname overrides unless we want to mess with the common filenames - copyright was massively updated - containers* is removed after dh_install - test binaries are moved - There are a few more fixes, none look concerning This really looks mostly good by now. Remaining Questions: - multi-arch: foreign was requested, same it became - reason? I've pinged Dave to clarify ... -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1895137 Title: [MIR] rpi-eeprom; raspberrypi-userland To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/raspberrypi-userland/+bug/1895137/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1895137] Re: [MIR] rpi-eeprom; raspberrypi-userland
** Changed in: raspberrypi-userland (Ubuntu) Assignee: (unassigned) => Matthias Klose (doko) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1895137 Title: [MIR] rpi-eeprom; raspberrypi-userland To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/raspberrypi-userland/+bug/1895137/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1895137] Re: [MIR] rpi-eeprom; raspberrypi-userland
** Changed in: raspberrypi-userland (Ubuntu) Status: In Progress => New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1895137 Title: [MIR] rpi-eeprom; raspberrypi-userland To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/raspberrypi-userland/+bug/1895137/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1895137] Re: [MIR] rpi-eeprom; raspberrypi-userland
** Changed in: raspberrypi-userland (Ubuntu) Status: Incomplete => In Progress -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1895137 Title: [MIR] rpi-eeprom; raspberrypi-userland To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/raspberrypi-userland/+bug/1895137/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1895137] Re: [MIR] rpi-eeprom; raspberrypi-userland
Comment #16 was inappropriately added due to the following in the linux- firmware-raspi2 changelog: * Replaced postinst with flash-kernel trigger (relates to LP: #1895137) So please ignore it, sorry for the noise! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1895137 Title: [MIR] rpi-eeprom; raspberrypi-userland To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/raspberrypi-userland/+bug/1895137/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1895137] Re: [MIR] rpi-eeprom; raspberrypi-userland
The userland packages in the following PPA should address all points raised by doko in the review in comment #13: https://launchpad.net/~waveform/+archive/ubuntu/userland I'm happy to attach a debdiff if that's preferable, but given the scale of the changes I'm not sure that'd be easier to review. Not mentioned in the changelog is that file conflicts have now been checked and verified as not applicable. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1895137 Title: [MIR] rpi-eeprom; raspberrypi-userland To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/raspberrypi-userland/+bug/1895137/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1895137] Re: [MIR] rpi-eeprom; raspberrypi-userland
FYI in MIR meeting of today: [16:44] waveform: I wanted to know if this is incomplete as in "ack I'll do it at some point" or as in "we'll give u then" [16:44] cpaelzer, that's basically done - I've just got to update the bug -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1895137 Title: [MIR] rpi-eeprom; raspberrypi-userland To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/raspberrypi-userland/+bug/1895137/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1895137] Re: [MIR] rpi-eeprom; raspberrypi-userland
raspberrypi-userland: things which have to be fixed: - the debian/copyright is incomplete. an fgrep -ri copyright shows missing copyright holders, although these might not be extensive. Please also check for possible missing copyright holders which are not covered by the simple check above. - host_applications/linux/apps/hello_pi/hello_video/README not mentioned in d/copyright, and no license given. If the license is not clear, it should be removed from the source package. - having an upstream not caring about ABI stability is one thing, however that's not what Ubuntu requires for main inclusion. Especially for this, symbols files are required. - libraspberrypi-bin.lintian-overrides says: "The container binaries are undocumented and don't support -h so I've no idea what they do". How can we support these if we don't know what these do, and why they are included? - did you check for conflicting files in /usr/bin and /usr/include? some names look pretty generic things which should be fixed: - the library packages should be marked as M-A: foreign - there are a few (test?) binaries in /usr/bin, polluting the name space, which don't even have man pages. Wouldn't it be more appropriate to move those into some package specific libdir? ** Changed in: raspberrypi-userland (Ubuntu) Status: New => Incomplete ** Changed in: raspberrypi-userland (Ubuntu) Assignee: Matthias Klose (doko) => (unassigned) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1895137 Title: [MIR] rpi-eeprom; raspberrypi-userland To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/raspberrypi-userland/+bug/1895137/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1895137] Re: [MIR] rpi-eeprom; raspberrypi-userland
Thanks Seth, > Security team ACK for promoting rpi-eeprom to restricted CONDITIONAL > on another team stating that they will provide testing resources and > periodically import updated versions as appropriate. Foundations team will handle regular importing of updated versions, and SRUing to all supported releases. Devices certification team will handle provision of testing resources and periodic testing of all supported releases. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1895137 Title: [MIR] rpi-eeprom; raspberrypi-userland To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/raspberrypi-userland/+bug/1895137/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1895137] Re: [MIR] rpi-eeprom; raspberrypi-userland
I reviewed rpi-eeprom version 9.0-1ubuntu1 as checked into groovy. This isn't a full security audit but a very quick gauge of maintainability. Because this is an architecture-specific review, the usual tooling doesn't work for this case. This is a slight problem for maintenance, because the security team may not have sufficient hardware for update preparation or update testing. We will probably need to rely upon other teams to provide testing facilities. The firmwares themselves are blackboxes similar to intel-microcode or amd64-microcode. The only recourse we have in the face of regressions is reverting updates and the same will hold with this package as well. I'm also concerned about the update frequency given in the debian/changelog file or releases.md file. The security team does not have the bandwidth to track these updates ourselves. It is unlikely each one has security relevance, but if Canonical gets too far behind on these packages, the Ubuntu security team may have trouble importing new versions. So, I would like some assurances that another team will be SRUing new versions of the package for all supported releases on an appropriate time-scale to manage the risks associated with high-rate-of-change projects. Security team ACK for promoting rpi-eeprom to restricted CONDITIONAL on another team stating that they will provide testing resources and periodically import updated versions as appropriate. Thanks ** Changed in: rpi-eeprom (Ubuntu) Assignee: Ubuntu Security Team (ubuntu-security) => (unassigned) ** Changed in: rpi-eeprom (Ubuntu) Status: Triaged => In Progress -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1895137 Title: [MIR] rpi-eeprom; raspberrypi-userland To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/raspberrypi-userland/+bug/1895137/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
