Public bug reported:

[Availability]

fence-agents is present in the Ubuntu archive since Precise, it builds
fine and tests pass in all supported architectures. It was promoted in
Precise:

https://bugs.launchpad.net/ubuntu/+source/fence-agents/+bug/897492

In Trusty it was demoted, not sure about the reason.

[Rationale]

The fence-agents package provides a set of scripts used to fence
(STONITH) nodes in a Corosync/Pacemaker cluster. It has been heavily
used in HA solutions and the Ubuntu Server team is starting to support
some of those scripts in the fence-agents-supported binary package. The
supported agents have been tested daily via Jenkins jobs. The idea is to
have fence-agents-common and fence-agents-supported binary packages in
main.

[Security]

A couple of CVEs were reported against fence-agents:

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10153
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0104

They are already fixed in the archive, CVE-2014-0104 in version 4.0.17-1
and CVE-2019-10153 in version 4.3.3-2.

[Quality assurance]

The package is quite simple, no configuration file is needed and it
works out-of-the-box. There is no outstanding bug reported upstream, nor
in Debian and Ubuntu. The Debian maintainer is very active and willing
to collaborate with us.

Upstream does not provide a test suite but all the scripts are tested
during build time to check if they at least can load everything needed.
We also have some DEP-8 tests in place (they do not cover most of the
scripts). But thinking about the quality of the package, all the agents
shipped in the fence-agents-supported binary package are going to have
automated tests running daily in our testing infrastructure.

[UI standards]

N/A

[Dependencies]

The binaries to be promoted to main are: fence-agents-common and fence-
agents-supported. All their runtime dependencies are in main already
which are python3-pexpect and python3-pycurl.

[Standards compliance]

There is one error reported by lintian:

E: fence-agents-common: dir-or-file-in-var-run var/run/cluster/

This directory is created by the package because a couple of agents
expect this directory:

agents/mpath/fence_mpath.py
184:    options["--store-path"] = "/var/run/cluster"

agents/scsi/fence_scsi.py
16:STORE_PATH = "/var/run/cluster/fence_scsi"

Those two fence agents are not in the supported list yet but a bug was
filed upstream to get it fixed:

https://github.com/ClusterLabs/fence-agents/issues/405

[Maintenance]

This package has been maintained by the Ubuntu Server team and this will
continue to apply as part of the work on the HA (High Availability)
stack.

[Background information]

In Impish, two new binary packages were created: fence-agents-common and
fence-agents-supported. The -common package contains the common files
used by supported and unsupported agents, and the -supported contains
the agents supported by the Ubuntu Server team.

** Affects: fence-agents (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1927004

Title:
  [MIR] fence-agents

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/fence-agents/+bug/1927004/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to