AFAICS ceph-iscsi still needs tcmu, which is ready except waiting for
https://github.com/open-iscsi/tcmu-runner/issues/582
AFAICS no one continue on that yet, I'm updating the case to better reflect
that.
James please re-assign as-needed to get these steps done.
** Changed in: tcmu (Ubuntu)
I've added the bug subscription for ceph-iscsi.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1854362
Title:
[MIR] ceph-iscsi, tcmu, python-configshell-fb, python-rtslib-fb,
urwid, targetcli-fb
T
This was kind of forgotten, James/Chris don't you need that anymore.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1854362
Title:
[MIR] ceph-iscsi, tcmu, python-configshell-fb, python-rtslib-fb,
u
This was an ack and thereby ceph-iscsi this is ready as well
** Changed in: ceph-iscsi (Ubuntu)
Status: Confirmed => In Progress
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1854362
Title:
Please make the change that pulls in ceph-iscsi and ensure you are
subscribed to the package to "own" it as the archive admins will
rightfully insist on that before promotion :-)
@Jamespage - I think this is up to you to push now right?
--
You received this bug notification because you are a mem
I reviewed ceph-iscsi 3.4-0ubuntu2 as checked into focal. This shouldn't
be considered a full audit but rather a quick gauge of maintainability.
ceph-iscsi is a set of tools for managing LIO gateways for Ceph. It
consists of 2 services providing REST APIs - one for obtaining gateway
node statistic
Override component to main
urwid 2.1.0-4 in groovy: universe/python -> main
python-urwid-doc 2.1.0-4 in groovy amd64: universe/doc/optional/100% -> main
python-urwid-doc 2.1.0-4 in groovy arm64: universe/doc/optional/100% -> main
python-urwid-doc 2.1.0-4 in groovy armhf: universe/doc/optional/100%
Override component to main
python-rtslib-fb 2.1.73-1ubuntu2 in groovy: universe/misc -> main
python3-rtslib-fb 2.1.73-1ubuntu2 in groovy amd64:
universe/python/optional/100% -> main
python3-rtslib-fb 2.1.73-1ubuntu2 in groovy arm64:
universe/python/optional/100% -> main
python3-rtslib-fb 2.1.73-1
Override component to main
python-configshell-fb 1:1.1.28-1ubuntu1 in groovy: universe/misc -> main
python3-configshell-fb 1:1.1.28-1ubuntu1 in groovy amd64:
universe/python/optional/100% -> main
python3-configshell-fb 1:1.1.28-1ubuntu1 in groovy arm64:
universe/python/optional/100% -> main
pytho
Override component to main
targetcli-fb 1:2.1.53-1ubuntu1 in groovy: universe/misc -> main
targetcli-fb 1:2.1.53-1ubuntu1 in groovy amd64: universe/admin/optional/100% ->
main
targetcli-fb 1:2.1.53-1ubuntu1 in groovy arm64: universe/admin/optional/100% ->
main
targetcli-fb 1:2.1.53-1ubuntu1 in gr
The expected four packages for use case II show up in component
mismatches after the seed change:
python-configshell-fb: python3-configshell-fb
MIR: #1854362 (In Progress)
[Reverse-Depends: targetcli-fb (Uploader: rafaeldtinoco)]
python-rtslib-fb: python3-rtslib-fb
MIR: #1854362 (In Progress)
[Rev
Subscriptions are ok.
I have pinged the security Team on ceph-iscsi and Rafael agreed to make
the seed change.
@rafael - as soon as the seed change is active and shows up in component
mismatches please subscribe ubuntu-archive here to resolve.
--
You received this bug notification because you a
ceph-iscsi is still in security review, but other than that for use case II
everything is indeed ready. I was updating the bug states.
That is the set of python-configshell-fb + python-rtslib-fb + targetcli-fb +
tcmu + urwid
@Radael - would you mind doing a seed change for these to happen?
P.S.
** Changed in: tcmu (Ubuntu)
Assignee: Ubuntu Security Team (ubuntu-security) => (unassigned)
** Changed in: tcmu (Ubuntu)
Status: Confirmed => In Progress
** Changed in: targetcli-fb (Ubuntu)
Status: Confirmed => In Progress
** Changed in: python-rtslib-fb (Ubuntu)
Sta
CURRENT STATUS
Targets:
- I: ceph-iscsi
- II: targetcli-fb
Summary for the current state:
I: ceph-iscsi
[.] MIR ack (if everything else is)
I/II: python-configshell-fb (linux-blocks-teams) - DONE
[.] MIR ack
[.] Security ack - needs DEP8 inclusion
For Debian, Suggested:
-
CURRENT STATUS
Targets:
- I: ceph-iscsi
- II: targetcli-fb
Summary for the current state:
I: ceph-iscsi
[-] MIR ack (if everything else is)
I/II: python-configshell-fb (linux-blocks-teams) - DONE
[.] MIR ack
[.] Security ack - needs DEP8 inclusion
For Debian, Suggested:
-
For the tcmu DBUS fix:
"""
- The dbus policy allows all users to call
org.kernel.TCMUService1.HandlerManager1.RegisterHandler, which doesn't seem
desirable. I don't think there is a direct security impact from this, as
external handlers need to be privileged in order to own the type-sp
CURRENT STATUS
Targets:
- I: ceph-iscsi
- II: targetcli-fb
Summary for the current state:
I: ceph-iscsi
[-] MIR ack (if everything else is)
I/II: python-configshell-fb
[.] MIR ack
[.] Security ack - needs DEP8 inclusion
Suggesting:
-
https://salsa.debian.org/linux-blocks
● targetclid.service - Targetcli daemon
Loaded: loaded (/etc/systemd/system/targetclid.service; disabled; vendor
preset: enabled)
Active: active (running) since Wed 2020-06-24 20:28:02 UTC; 957ms ago
TriggeredBy: ● targetclid.socket
Docs: man:targetclid(8)
Main PID: 22495 (targ
For targetcli-fb:
https://salsa.debian.org/linux-blocks-team/targetcli-
fb/-/merge_requests/8
I'm now waiting Ritesh to accept my merge request updating it to 2.1.53
and fixing the binary package (including documentation, new systemd
units, etc).
--
You received this bug notification because yo
Targets:
- I: ceph-iscsi
- II: targetcli-fb
Summary for the current state:
I: ceph-iscsi
[-] MIR ack (if everything else is)
I/II: python-configshell-fb
[.] MIR ack
[+] Security ack - needs DEP8 inclusion
I/II: python-rtslib-fb
[+] MIR ack - needs packaging/lintian fixes
[
Okay, I'm back to this now.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1854362
Title:
[MIR] ceph-iscsi, tcmu, python-configshell-fb, python-rtslib-fb,
urwid, targetcli-fb
To manage notificatio
I've asked Rafael to look after the TODOs that were identified for
python-rtslib-fb.
Assigning the task.
** Changed in: python-configshell-fb (Ubuntu)
Assignee: (unassigned) => Rafael David Tinoco (rafaeldtinoco)
--
You received this bug notification because you are a member of Ubuntu
Bugs
I reviewed python-rtslib-fb 2.1.71-0ubuntu1 as checked into focal. This
shouldn't be considered a full audit but rather a quick gauge of
maintainability.
python-rtslib-fb is a programmatic interface to the Linux kernel's LIO
target. Working with Python objects causes writes to the kernel's
/sy
Lintian pointed out a mistake in the python-rtslib-fb packaging:
W: python3-rtslib-fb: binary-without-manpage usr/bin/targetctl
W: python3-rtslib-fb:
maintainer-script-should-not-use-update-alternatives-remove postrm:6
W: python-rtslib-fb source: debhelper-compat-file-is-missing
W: python-rtsl
On 02/04/2020 01:04, Alex Murray wrote:
> Upstream have merged in a fix for the world-writable targetcli-fb daemon
> socket - https://github.com/open-iscsi/targetcli-fb/issues/162 - and
> assigned CVE-2020-10699 for it - but there has been no official release.
> With this fix in place, I would be h
Funny, our tooling also collected these lintian messages, in a different
spot:
python3-rtslib-fb_2.1.71-0ubuntu1_all.deb:
W: python3-rtslib-fb: binary-without-manpage usr/bin/targetctl
W: python3-rtslib-fb:
maintainer-script-should-not-use-update-alternatives-remove postrm:6
Thanks
--
You rec
I'm starting to look at python-rstlib-fb and lintian (from bionic)
reported:
Output of lintian:
W: python-rtslib-fb source: debhelper-compat-file-is-missing
W: python-rtslib-fb source: package-uses-deprecated-debhelper-compat-version 1
E: python-rtslib-fb source: package-uses-debh
Upstream have merged in a fix for the world-writable targetcli-fb daemon
socket - https://github.com/open-iscsi/targetcli-fb/issues/162 - and
assigned CVE-2020-10699 for it - but there has been no official release.
With this fix in place, I would be happy to change the NACK to an ACK
for targetcli-
See https://github.com/open-iscsi/tcmu-runner/issues/582 for the dbus-
policy-without-send-destination lintian warning.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1854362
Title:
[MIR] ceph-iscsi,
I reviewed tcmu 1.5.2-5build1 as checked into focal. This shouldn't be
considered a full audit but rather a quick gauge of maintainability.
tcmu is the userspace side of the kernel's LIO TCM in userspace backstore,
which allows backstores for LIO (the kernel's SCSI target) to live outside
of the
** Changed in: targetcli-fb (Ubuntu)
Assignee: Alex Murray (alexmurray) => (unassigned)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1854362
Title:
[MIR] ceph-iscsi, tcmu, python-configshell-f
I reviewed targetcli-fb 1:2.1.51-0ubuntu1 as checked into focal. This
shouldn't be considered a full audit but rather a quick gauge of
maintainability.
targetcli-fb is a python package for configuring and managing the LIO
(Linux IO) generic SCSI target.
- CVE History:
- None
- Build-Depends
** Changed in: targetcli-fb (Ubuntu)
Assignee: Ubuntu Security Team (ubuntu-security) => Alex Murray
(alexmurray)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1854362
Title:
[MIR] ceph-iscsi,
@Christian: for the record, Chris Coulson is looking at tcmu.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1854362
Title:
[MIR] ceph-iscsi, tcmu, python-configshell-fb, python-rtslib-fb,
urwid, t
Targetcli got into -proposed:
https://bugs.launchpad.net/ubuntu/+source/targetcli-fb/1:2.1.51-0ubuntu1
Subscribing security for targetcli-fb MIR security analysis.
** Changed in: targetcli-fb (Ubuntu)
Assignee: Rafael David Tinoco (rafaeldtinoco) => (unassigned)
** Changed in: targetcli-fb
Ok, Im uploading targetcli-fb based on our discussions after you fixed
the todos:
https://code.launchpad.net/~rafaeldtinoco/ubuntu/+source/targetcli-
fb/+git/targetcli-fb/+merge/379938
And will assign security team to targetcli-fb after uploaded.
Thanks a lot @Christian.
--
You received this b
@Rafael
- I fixed the todos on targetcli and am pushing to the branch that I linked in
your MP
- I've broken the rtslib-fb-targetctl into an extra bug
=> once you have re-reviewed targetcli and uploaded it we can set that
to security as well.
--
You received this bug notification because you ar
I split the service change for rtslib-fb into https://bugs.launchpad.net
/rtslib-fb/+bug/1865037 as the MIR and security review isn't dependent
on it.
** Changed in: python-rtslib-fb (Ubuntu)
Assignee: Rafael David Tinoco (rafaeldtinoco) => Ubuntu Security Team
(ubuntu-security)
--
You rec
Updating my small summary of this morning after the MIR reviews.
Targets:
- I: ceph-iscsi
- II: targetcli-fb
Current state:
I: ceph-iscsi - MIR ack, Security in-queue
I/II: python-configshell-fb - MIR ack, Security ack - READY
I/II: python-rtslib-fb - MIR ack, needs Security review (not yet queue
Updating my small summary of this morning after the MIR reviews.
Targets:
- I: ceph-iscsi
- II: targetcli-fb
Current state:
I: ceph-iscsi - MIR ack, Security in-queue
I/II: python-configshell-fb - MIR ack, Security ack - READY
I/II: python-rtslib-fb - MIR ack, fixes needed (@Rafael), then securit
Rafael was working on updating targetcli and I was reviewing/helping
with that.
TODOs:
@Rafael
- install state of rtslib-fb-targetctl.service still is bad in containers
Unless you find any idea why this would ever make sense in a container (I
don't)
you can start by adding
ConditionVirtua
I reviewed urwid 2.0.1-2build3 as checked into focal. This shouldn't be
considered a full audit but rather a quick gauge of maintainability.
urwid is a console-based display and user interface framework/library
for python 2.7 and 3.4+
- CVE History:
- none found
- Build-Depends?
- nothing
** Changed in: urwid (Ubuntu)
Assignee: Maria Emilia Torino (emitorino) => Ubuntu Security Team
(ubuntu-security)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1854362
Title:
[MIR] ceph-iscsi,
I also uploaded the requested versions of configshell-fb and rtslib-fb
to get things up-to-date for the release feature freeze.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1854362
Title:
[MIR] cep
Seeing:
ceph-iscsi | 3.4-0ubuntu1 | focal/universe | source, all
thanks James!
You also said
[12:22] cpaelzer, rafaeldtinoco: rtslib and configshell are
straight updates - have those ready for upload
=> That sounds great. I'd almost encourage you to upload it right away. To
later catch up I'd
ceph-iscsi:
ubuntu-openstack added as bug subscriber.
package updated to 3.4 as requested (thanks for spotting that).
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1854362
Title:
[MIR] ceph-iscsi,
Re "tcmu 32 bit Werror" - I supplied a patch for the actual error raised
on 32 bit archs but the Debian maintainer rejected my change to not
disable that compiler feature (-Werror)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https:
Updating my small summary of this morning after the MIR reviews.
I still doubt (even more now) we can make it for 20.04, but lets see how things
go and decide to punt to 20.10 when we really missed it.
Targets:
- I: ceph-iscsi
- II: targetcli-fb
Current state:
I: ceph-iscsi - MIR ack, Update to
## ceph-iscsi ##
[Summary]
MIR Team conditional ack. To be complete I'd recommend an update to v3.4 and I'd
request a security review. The updates are important, but no blocker for the
security review therefore I'm assigning the security Team.
TODOs:
@Jamespage - bug subscriber
I guess openstack
## python3-rtslib-fb ##
[Summary]
MIR Team conditional-Ack. Good packaging in general, but we need the steps
below to be completed before being really ready for promotion:
(Note: this is Very similar to targetcli-fb)
@rafaeldtinoco - please update python-rtslib-fb
- update targetcli-fb to 2.1.71
^^ The above was for targetcli-fb ^^
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1854362
Title:
[MIR] ceph-iscsi, tcmu, python-configshell-fb, python-rtslib-fb,
urwid, targetcli-fb
To manage no
[Summary]
MIR Team conditional-Ack. Good packaging in general, but we need the steps
below to be completed before being really ready for promotion:
@rafaeldtinoco - please update targetcli-fb
- update targetcli-fb to 2.1.51
- fix d/watch to detect the non *fb* versions
- as usual work with Deb
Thanks for the summary, lets tackle the remaining tasks.
I still doubt we can make it for 20.04, but lets see how things go and decide
to punt to 20.10 when we really missed it.
Targets:
- I: ceph-iscsi
- II: targetcli-fb
(smaller) Summary for the current state (I updated bug tasks accordingly)
** Changed in: python-configshell-fb (Ubuntu)
Status: Confirmed => In Progress
** Changed in: python-rtslib-fb (Ubuntu)
Assignee: Mathieu Trudel-Lapierre (cyphermox) => Rafael David Tinoco
(rafaeldtinoco)
--
You received this bug notification because you are a member of Ubuntu
Bugs,
@rafaelftinoco - as the security team, we don't necessarily do a
security review for all MIRs - only those which are deemed security
relevant - and so we normally wait for the MIR team to do their review
first and then if they request a security review, then we add it to our
queue. So for now we on
##
## SUMMARY (please correct me if I'm wrong)
##
python-rtslib-fb- lib: object API for managing Linux LIO kernel
target
python-configshell-fb - lib: framework for building CLI-based apps
MIR #1)
ceph-iscsi - LIO gateways for Ceph (logic and CLI
tools)
deps:
Thanks a lot Alex. I'll add some DEP8 tests to python-configshell-fb.
Already created a card for it.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1854362
Title:
[MIR] ceph-iscsi, tcmu, python-confi
I reviewed python-configshell-fb 1.1.fb25-1.1 as checked into focal. This
shouldn't be considered a full audit but rather a quick gauge of
maintainability.
python-configshell-fb provides a python library which is used for building
CLI based user-interfaces. Upstream appears healthy and responsive
** Description changed:
== ceph-iscsi ==
[Availability]
In universe
[Rationale]
Provides iSCSI gateway to a Ceph cluster, allowing clients which don't
understand RBD to use Ceph storage.
[Security]
No security history found.
[Quality assurance]
Package runs tests dur
60 matches
Mail list logo
