apparmor is not provided in the Ubuntu Cloud Archive so we can remove
that target from this bug as it is a little misleading. The fix has been
released to Focal and Jammy hence why deploying Openstack Yoga on either
of those (using focal-yoga uca or jammy-updates) gets you the fixed
apparmor. Hope
** Changed in: cloud-archive/yoga
Status: Confirmed => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1988270
Title:
AppArmor fails to start with
** Also affects: cloud-archive/xena
Importance: Undecided
Status: New
** Also affects: cloud-archive/antelope
Importance: Undecided
Assignee: Heather Lemon (hypothetical-lemon)
Status: Confirmed
** No longer affects: cloud-archive/xena
--
You received this bug
### VERIFICATION DONE FOCAL ###
# previous apparmor version
apt-cache policy apparmor
package name: apparmor
package version: 2.13.3-7ubuntu5.1
series: Focal
kernel: Linux 5.4.0-136-generic
# before enabling -proposed
generate focal-yoga instance
juju ssh nova-compute/0
# verify no
** Changed in: cloud-archive/zed
Assignee: Heather Lemon (hypothetical-lemon) => (unassigned)
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1988270
Title:
AppArmor
** Changed in: cloud-archive/yoga
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1988270
Title:
AppArmor fails to start with Yoga UCA
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: apparmor (Ubuntu Jammy)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: apparmor (Ubuntu Focal)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
@jjohansen,
I've tested both versions and the fix works.
Is this is the correct place to track the bug? Or is there
another SRU open?
Do I need to delete my patch or should I just leave it there?
Thank You,
Heather Lemon
--
You received this bug notification because you are a member of
@hypothetical-lemon you can try the fix if you want it is in the ppa
https://launchpad.net/~georgiag/+archive/ubuntu/mqueue-sru.
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
@hypothetical-lemon yes we plan to SRU the fix to focal however a fix is
only needed in the userspace. The fix is in the apparmor userspace
policy compiler, the kernel is just enforcing what the compiler is
incorrectly telling it to enforce.
--
You received this bug notification because you are
@jjohansen
Are you planning to add this fix to the kernel (focal) as well?
Thank You,
Heather Lemon
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1988270
Title:
remove the extra quilt .pc additions from the top of the patch
** Patch added: "updated patch file to remove quilt .pc lines"
https://bugs.launchpad.net/cloud-archive/+bug/1988270/+attachment/5625273/+files/lp1988270-focalyoga-libvirt-removecapability-revision1.debdiff
--
You received this
oh and of course kinetic/zed too
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1988270
Title:
AppArmor fails to start with Yoga UCA libvirt profile on Focal
Status in
@hypothetical-lemon to get this into focal-yoga it will need to be fixed
in Jammy first. As I understand it the problem is focal-specific to
either the package needs to be selective on which config it applies
based on series or perhaps the uca itself needs fixing to support this
on focal.
** Also
@paelzer sorry missed your question earlier, yes this is known. The
newer capability support for apparmor is being backported to focal.
Hopefully we will see the SRU for it this week.
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is
** Description changed:
+
+ [ Impact ]
+
+ AppArmor fails to start with yoga-focal uca libvirt profile
+
+
+ [ Test Plan ]
+
+ generate yoga-focal openstack instance
+ juju ssh nova-compute/0
+ sudo systemctl restart apparmor
+ journalctl -xe
+
+ # Error message
+ ct 04 15:55:32
When building the debuild there are a few files that got touched like
this one,
diff -Nru libvirt-8.0.0/debian/.pc/.quilt_patches
libvirt-8.0.0/debian/.pc/.quilt_patches
--- libvirt-8.0.0/debian/.pc/.quilt_patches 1970-01-01 00:00:00.0
+
+++
** Changed in: cloud-archive
Assignee: (unassigned) => Heather Lemon (hypothetical-lemon)
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1988270
Title:
AppArmor
** Tags added: sts
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1988270
Title:
AppArmor fails to start with Yoga UCA libvirt profile on Focal
Status in Ubuntu Cloud
Focal:
- apparmor 2.13.3-7ubuntu5.1
- kernel5.4.0-109-generic
- libvirt:
a) base 6.0.0-0ubuntu8.16
b) server-backport 8.0.0-1ubuntu7.2~backport20.04.202210042317~ubuntu20.04.1
c) UCA Yoga 8.0.0-1ubuntu7.1~cloud0
With none did a restart trigger an issue as reported.
libvirtd is
I'll have a look for the same in server-backports ppa, but it might be
as easy as the old apparmor not knowing about these and failing. If that
is true we might need to remove them on the backports.
@Security - is there more to know about these particular features (will
they come to focal, is
22 matches
Mail list logo