Public bug reported: In ubuntu 18.04 with FIPS (via fips or fips-updates stream), ubuntu- support-status marks the FIPS packages as unsupported. As these packages are used by customers that require support, this message is confusing for existing as well as prospectives that test our product.
``` $ sudo ua status ... fips yes n/a NIST-certified core packages fips-updates yes enabled NIST-certified core packages with priority security updates ``` ``` $ sudo ubuntu-support-status [sudo] password for nmav: Support status summary of 'ubuntu1804': You have 1604 packages (97.8%) supported until dubna 2023 (Canonical - 5y) You have 5 packages (0.3%) that can not/no-longer be downloaded You have 31 packages (1.9%) that are unsupported Your Hardware Enablement Stack (HWE) is supported until dubna 2023. Run with --show-unsupported, --show-supported or --show-all to see more details ``` The following command shows the FIPS-installed packages as unsupported: ``` $ sudo ubuntu-support-status --show-unsupported Support status summary of 'ubuntu1804': You have 1604 packages (97.8%) supported until dubna 2023 (Canonical - 5y) You have 5 packages (0.3%) that can not/no-longer be downloaded You have 31 packages (1.9%) that are unsupported Your Hardware Enablement Stack (HWE) is supported until dubna 2023. No longer downloadable: krb5-locales libgssapi-krb5-2 libk5crypto3 libkrb5-3 libkrb5support0 Unsupported: fips-initramfs geany geany-common gnutls-bin gstreamer1.0-gtk3 joe kcapi-tools libbrotli1 libgcrypt20 libgcrypt20-dev libgcrypt20-hmac libkcapi-dev libkcapi1 libopts25 libssl-dev libssl1.1 libssl1.1-hmac libwoff1 linux-fips linux-fips-headers-4.15.0-1060 linux-headers-4.15.0-1060-fips linux-headers-fips linux-image-4.15.0-1060-fips linux-image-fips linux-image-hmac-4.15.0-1060-fips linux-modules-4.15.0-1060-fips linux-modules-extra-4.15.0-1060-fips openssh-client openssh-client-hmac openssl ubuntu-fips ``` All of the packages above are supported via the fips and fips-updates ppas. ** Affects: update-manager (Ubuntu) Importance: Undecided Status: New ** Description changed: In ubuntu 18.04 with FIPS (via fips or fips-updates stream), ubuntu- support-status marks the FIPS packages as unsupported. As these packages are used by customers that require support, this message is confusing for existing as well as prospectives that test our product. ``` $ sudo ua status ... fips yes n/a NIST-certified core packages fips-updates yes enabled NIST-certified core packages with priority security updates ``` ``` $ sudo ubuntu-support-status - [sudo] password for nmav: + [sudo] password for nmav: Support status summary of 'ubuntu1804': You have 1604 packages (97.8%) supported until dubna 2023 (Canonical - 5y) You have 5 packages (0.3%) that can not/no-longer be downloaded You have 31 packages (1.9%) that are unsupported Your Hardware Enablement Stack (HWE) is supported until dubna 2023. Run with --show-unsupported, --show-supported or --show-all to see more details ``` The following command shows the FIPS-installed packages as unsupported: ``` $ sudo ubuntu-support-status --show-unsupported Support status summary of 'ubuntu1804': You have 1604 packages (97.8%) supported until dubna 2023 (Canonical - 5y) You have 5 packages (0.3%) that can not/no-longer be downloaded You have 31 packages (1.9%) that are unsupported Your Hardware Enablement Stack (HWE) is supported until dubna 2023. No longer downloadable: - krb5-locales libgssapi-krb5-2 libk5crypto3 libkrb5-3 libkrb5support0 + krb5-locales libgssapi-krb5-2 libk5crypto3 libkrb5-3 libkrb5support0 - Unsupported: - fips-initramfs geany geany-common gnutls-bin gstreamer1.0-gtk3 joe - kcapi-tools libbrotli1 libgcrypt20 libgcrypt20-dev libgcrypt20-hmac - libkcapi-dev libkcapi1 libopts25 libssl-dev libssl1.1 libssl1.1-hmac - libwoff1 linux-fips linux-fips-headers-4.15.0-1060 - linux-headers-4.15.0-1060-fips linux-headers-fips - linux-image-4.15.0-1060-fips linux-image-fips - linux-image-hmac-4.15.0-1060-fips linux-modules-4.15.0-1060-fips - linux-modules-extra-4.15.0-1060-fips openssh-client - openssh-client-hmac openssl ubuntu-fips + Unsupported: + fips-initramfs geany geany-common gnutls-bin gstreamer1.0-gtk3 joe + kcapi-tools libbrotli1 libgcrypt20 libgcrypt20-dev libgcrypt20-hmac + libkcapi-dev libkcapi1 libopts25 libssl-dev libssl1.1 libssl1.1-hmac + libwoff1 linux-fips linux-fips-headers-4.15.0-1060 + linux-headers-4.15.0-1060-fips linux-headers-fips + linux-image-4.15.0-1060-fips linux-image-fips + linux-image-hmac-4.15.0-1060-fips linux-modules-4.15.0-1060-fips + linux-modules-extra-4.15.0-1060-fips openssh-client + openssh-client-hmac openssl ubuntu-fips ``` + + All of the packages above are supported via the fips and fips-updates + ppas. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1937303 Title: ubuntu-support-status does mark FIPS packages as unsupported on 18.04 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/update-manager/+bug/1937303/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs