[Bug 1719671] Re: [SRU] include recent version containing fips and livepatch
** Description changed: ** description still being worked on, not done yet ** - This bug has some history that may be confusing if the comments are read - linearly. Basically it started out as a Feature Freeze Exception, that's - why we have build logs and unit test runs attached. + This bug has some history that may be confusing from the comments. + Basically it started out as a Feature Freeze Exception, that's why we + have build logs, git logs and unit test runs attached. Also, the "rename" that is mentioned elsewhere did not happen with this package: the ubuntu-advantage name was kept, no new aliases were added. This will happen in a later SRU, with a later version of the package. - I uploaded new tarballs and debdiff with these changes from what was here before, just in case you the reader have looked at this before: + I uploaded new tarballs and debdiff with these changes from what was here before, just in case you, the reader, have looked at the previous description: * tarball with correct directory entry. The previous one had "v10" instead of "10" as the base version * updated most recent changelog entry, just saying this is a backport of version 10. No need to say it has fips support, which neglected to mention the livepatch support. All that is in the previous d/changelog entries - [IMPACT] Most recent version of ubuntu-advantage-tool on github includes fips and livepatch enablement. The fips enablement will allow customers to easily install and configure Canonical's FIPS certified modules on xenial, whereas livepatch allows xenial and trusty customers to patch the running kernel without a reboot. This SRU will cover both new features. In addition to the new features themselves, a new "status" command was added that will give a short summary about the available modules and their status, at a glance. Note: FIPS certified modules are only available for xenial. Livepatch is supported on xenial and trusty. The tool will refuse to enable either service on an unsupported ubuntu release. Without this updated package, customers of those services have to enable them manually by following a series of steps. [FIPS DESCRIPTION] When "ubuntu-advantage enable-fips " is issued from commandline, - configure the private PPA where the FIPS modules are located - install the FIPS modules from this PPA to the local machine from where the script is run - configure the bootloader to enable fips Upon successful completion of these steps, the customer then gets a message stating to reboot the machine to complete the fips enablement process. Without the script, customers must perform the steps manually. [LIVEPATCH DESCRIPTION] Livepatch allows customers to apply kernel patches to a running system without rebooting it. The current instructions live in http://ubuntu.com/livepatch and boil down to: - install snapd if it's not installed already. On trusty this means a new kernel as well. - install the canonical-livepatch snap - obtain a livepatch token from Canonical - run the enable command with the given token The ubuntu-advantage-tools package simplifies this process by just requesting the token and performing all the other steps on behalf of the user. It also conveniently checks the running kernel and instructs the user to reboot into a newer kernel if needed to finish the installation (this is the case when running trusty). [FIX] Add fips and livepatch support to the ubuntu-adadvantage-tools package. See debdiff below. [LIVEPATCH TESTCASES] TRUSTY 0. Install the new ubuntu-advantage-tools package to add livepatch support. 1. Collect status before enabling livepatch type on commandline: ubuntu-advantage status expect: livepatch: disabled esm: disabled (not available) fips: disabled (not available) 2. Enable livepatch visit https://ubuntu.com/livepatch and obtain a token type on commandline, sudo ubuntu-advantage enable-livepatch You may be required to install a newer kernel. In that case, expect the following output: Installing missing dependency snapd... OK Installing the canonical-livepatch snap. This may take a few minutes depending on your bandwidth. canonical-livepatch 7.24 from 'canonical' installed Your currently running kernel (3.13.0-133-generic) is too old to support snaps. Version 4.4.0 or higher is needed. Please reboot your system into a supported kernel version and run the following command one more time to complete the installation: sudo ubuntu-advantage enable-livepatch Once you reboot and re-run the specified command, expect: Enabling Livepatch with the given token, stand by... Successfully enabled device. Using machine-token: Use "canonical-livepatch status" to verify current patch status. 3. Verify livepatch status type
[Bug 1721607] Re: please update to latest upstream release 7.0.24
Just an FYI that I have uploaded an update to php7.0 for x and z and php7.1 for aa (which should get copied to bb, but bb will end up with 7.2 before release), but not as a security update. It will go through the normal SRU process before being available. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php7.0 in Ubuntu. https://bugs.launchpad.net/bugs/1721607 Title: please update to latest upstream release 7.0.24 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/php7.0/+bug/1721607/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1719671] Re: [SRU] include recent version containing fips and livepatch
** Description changed: This bug has some history that may be confusing from the comments. Basically it started out as a Feature Freeze Exception, that's why we have build logs, git logs and unit test runs attached. Also, the "rename" that is mentioned elsewhere did not happen with this package: the ubuntu-advantage name was kept, no new aliases were added. This will happen in a later SRU, with a later version of the package. I uploaded new tarballs and debdiff with these changes from what was here before, just in case you, the reader, have looked at the previous description: * tarball with correct directory entry. The previous one had "v10" instead of "10" as the base version * updated most recent changelog entry, just saying this is a backport of version 10. No need to say it has fips support, which neglected to mention the livepatch support. All that is in the previous d/changelog entries + + PPA with built packages for t, x and z: + https://launchpad.net/~ahasenack/+archive/ubuntu/ua-tools-sru-1719671 + (ppa:ahasenack/ua-tools-sru-1719671 - no ~ppaN suffix, sorry) [IMPACT] Most recent version of ubuntu-advantage-tool on github includes fips and livepatch enablement. The fips enablement will allow customers to easily install and configure Canonical's FIPS certified modules on xenial, whereas livepatch allows xenial and trusty customers to patch the running kernel without a reboot. This SRU will cover both new features. In addition to the new features themselves, a new "status" command was added that will give a short summary about the available modules and their status, at a glance. Note: FIPS certified modules are only available for xenial. Livepatch is supported on xenial and trusty. The tool will refuse to enable either service on an unsupported ubuntu release. Without this updated package, customers of those services have to enable them manually by following a series of steps. [FIPS DESCRIPTION] When "ubuntu-advantage enable-fips " is issued from commandline, - configure the private PPA where the FIPS modules are located - install the FIPS modules from this PPA to the local machine from where the script is run - configure the bootloader to enable fips Upon successful completion of these steps, the customer then gets a message stating to reboot the machine to complete the fips enablement process. Without the script, customers must perform the steps manually. [LIVEPATCH DESCRIPTION] Livepatch allows customers to apply kernel patches to a running system without rebooting it. The current instructions live in http://ubuntu.com/livepatch and boil down to: - install snapd if it's not installed already. On trusty this means a new kernel as well. - install the canonical-livepatch snap - obtain a livepatch token from Canonical - run the enable command with the given token The ubuntu-advantage-tools package simplifies this process by just requesting the token and performing all the other steps on behalf of the user. It also conveniently checks the running kernel and instructs the user to reboot into a newer kernel if needed to finish the installation (this is the case when running trusty). [FIX] Add fips and livepatch support to the ubuntu-adadvantage-tools package. See debdiff below. [LIVEPATCH TESTCASES] TRUSTY 0. Install the new ubuntu-advantage-tools package to add livepatch support. 1. Collect status before enabling livepatch type on commandline: ubuntu-advantage status expect: livepatch: disabled esm: disabled (not available) fips: disabled (not available) 2. Enable livepatch visit https://ubuntu.com/livepatch and obtain a token type on commandline, sudo ubuntu-advantage enable-livepatch You may be required to install a newer kernel. In that case, expect the following output: Installing missing dependency snapd... OK Installing the canonical-livepatch snap. This may take a few minutes depending on your bandwidth. canonical-livepatch 7.24 from 'canonical' installed Your currently running kernel (3.13.0-133-generic) is too old to support snaps. Version 4.4.0 or higher is needed. Please reboot your system into a supported kernel version and run the following command one more time to complete the installation: sudo ubuntu-advantage enable-livepatch Once you reboot and re-run the specified command, expect: Enabling Livepatch with the given token, stand by... Successfully enabled device. Using machine-token: Use "canonical-livepatch status" to verify current patch status. 3. Verify livepatch status type on commandline, ubuntu-advantage status expect an output like the following, livepatch: enabled client-version: "7.23" architecture: x86_64 cpu-model: Intel Core Processor (Skylake)
[Bug 1725980] Re: package libheimntlm0-heimdal:i386 1.7~git20150920+dfsg-4ubuntu1.16.04.1 failed to install/upgrade: package is in a very bad inconsistent state; you should reinstall it before attemp
Thanks for filing this bug in Ubuntu. Could you please try these commands and see if they help solve the problem: sudo apt update sudo apt install --reinstall libheimntlm0-heimdal:i386 sudo apt -f install Please let us know how it goes. Thanks! -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to heimdal in Ubuntu. https://bugs.launchpad.net/bugs/1725980 Title: package libheimntlm0-heimdal:i386 1.7~git20150920+dfsg- 4ubuntu1.16.04.1 failed to install/upgrade: package is in a very bad inconsistent state; you should reinstall it before attempting configuration To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/heimdal/+bug/1725980/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1726231] Re: package samba 2:4.5.8+dfsg-0ubuntu0.17.04.7 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1
Thanks for filing this bug in Ubuntu. The logs indeed indicate that one of the samba service, "smbd", is failing to start, but do not state why. To help determine why it's failing, could you please attach the following to this bug: - /etc/samba/smb.conf - /var/log/samba/log* <--- files that start with the "log" word. You can put them together in a zip file or tarball. If you want you can also run the testparm utility: it will inspect your samba configuration file (/etc/samba/smb.conf) looking for common mistakes and report to you what it finds. Thanks! ** Changed in: samba (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to samba in Ubuntu. https://bugs.launchpad.net/bugs/1726231 Title: package samba 2:4.5.8+dfsg-0ubuntu0.17.04.7 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1726231/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1719671] Re: [SRU] include recent version containing fips and livepatch
xenial debdiff ** Patch added: "xenial-v2v10.debdiff" https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/1719671/+attachment/4989121/+files/xenial-v2v10.debdiff -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to ubuntu-advantage-tools in Ubuntu. https://bugs.launchpad.net/bugs/1719671 Title: [SRU] include recent version containing fips and livepatch To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/1719671/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1719671] Re: [SRU] include recent version containing fips and livepatch
zesty debdiff ** Patch added: "zesty-v2v10.debdiff" https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/1719671/+attachment/4989122/+files/zesty-v2v10.debdiff ** Description changed: ** description still being worked on, not done yet ** This bug has some history that may be confusing if the comments are read linearly. Basically it started out as a Feature Freeze Exception, that's why we have build logs and unit test runs attached. Also, the "rename" that is mentioned elsewhere did not happen with this package: the ubuntu-advantage name was kept, no new aliases were added. This will happen in a later SRU, with a later version of the package. - - For the SRU, what we need is: - * new tarball - * new debdiff, but note that binary file changes won't be shown in the debdiff + I uploaded new tarballs and debdiff with these changes from what was here before, just in case you the reader have looked at this before: + * tarball with correct directory entry. The previous one had "v10" instead of "10" as the base version + * updated most recent changelog entry, just saying this is a backport of version 10. No need to say it has fips support, which neglected to mention the livepatch support. All that is in the previous d/changelog entries + [IMPACT] Most recent version of ubuntu-advantage-tool on github includes fips and livepatch enablement. The fips enablement will allow customers to easily install and configure Canonical's FIPS certified modules on xenial, whereas livepatch allows xenial and trusty customers to patch the running kernel without a reboot. This SRU will cover both new features. In addition to the new features themselves, a new "status" command was added that will give a short summary about the available modules and their status, at a glance. Note: FIPS certified modules are only available for xenial. Livepatch is supported on xenial and trusty. The tool will refuse to enable either service on an unsupported ubuntu release. Without this updated package, customers of those services have to enable them manually by following a series of steps. [FIPS DESCRIPTION] When "ubuntu-advantage enable-fips " is issued from commandline, - configure the private PPA where the FIPS modules are located - install the FIPS modules from this PPA to the local machine from where the script is run - configure the bootloader to enable fips Upon successful completion of these steps, the customer then gets a message stating to reboot the machine to complete the fips enablement process. Without the script, customers must perform the steps manually. [LIVEPATCH DESCRIPTION] Livepatch allows customers to apply kernel patches to a running system without rebooting it. The current instructions live in http://ubuntu.com/livepatch and boil down to: - install snapd if it's not installed already. On trusty this means a new kernel as well. - install the canonical-livepatch snap - obtain a livepatch token from Canonical - run the enable command with the given token The ubuntu-advantage-tools package simplifies this process by just requesting the token and performing all the other steps on behalf of the user. It also conveniently checks the running kernel and instructs the user to reboot into a newer kernel if needed to finish the installation (this is the case when running trusty). [FIX] Add fips and livepatch support to the ubuntu-adadvantage-tools package. See debdiff below. [LIVEPATCH TESTCASES] TRUSTY 0. Install the new ubuntu-advantage-tools package to add livepatch support. 1. Collect status before enabling livepatch type on commandline: ubuntu-advantage status expect: livepatch: disabled esm: disabled (not available) fips: disabled (not available) 2. Enable livepatch visit https://ubuntu.com/livepatch and obtain a token type on commandline, sudo ubuntu-advantage enable-livepatch You may be required to install a newer kernel. In that case, expect the following output: Installing missing dependency snapd... OK Installing the canonical-livepatch snap. This may take a few minutes depending on your bandwidth. canonical-livepatch 7.24 from 'canonical' installed Your currently running kernel (3.13.0-133-generic) is too old to support snaps. Version 4.4.0 or higher is needed. Please reboot your system into a supported kernel version and run the following command one more time to complete the installation: sudo ubuntu-advantage enable-livepatch Once you reboot and re-run the specified command, expect: Enabling Livepatch with the given token, stand by... Successfully enabled device. Using machine-token: Use "canonical-livepatch status" to verify current patch status. 3. Verify livepatch status type on commandline,
[Bug 1719671] Re: [SRU] include recent version containing fips and livepatch
trusty debdiff ** Patch added: "trusty-v2v10.debdiff" https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/1719671/+attachment/4989120/+files/trusty-v2v10.debdiff -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to ubuntu-advantage-tools in Ubuntu. https://bugs.launchpad.net/bugs/1719671 Title: [SRU] include recent version containing fips and livepatch To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/1719671/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1719671] Re: [SRU] include recent version containing fips and livepatch
xenial tarball ** Attachment added: "ubuntu-advantage-tools_10~ubuntu0.16.04.1.tar.xz" https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/1719671/+attachment/4989105/+files/ubuntu-advantage-tools_10~ubuntu0.16.04.1.tar.xz -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to ubuntu-advantage-tools in Ubuntu. https://bugs.launchpad.net/bugs/1719671 Title: [SRU] include recent version containing fips and livepatch To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/1719671/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1719671] Re: [SRU] include recent version containing fips and livepatch
zesty tarball ** Attachment added: "ubuntu-advantage-tools_10~ubuntu0.17.04.1.tar.xz" https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/1719671/+attachment/4989106/+files/ubuntu-advantage-tools_10~ubuntu0.17.04.1.tar.xz ** Patch removed: "v2v10-zesty.debdiff" https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/1719671/+attachment/4973833/+files/v2v10-zesty.debdiff ** Patch removed: "v2v10.xenial.debdiff" https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/1719671/+attachment/4973809/+files/v2v10-xenial.debdiff -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to ubuntu-advantage-tools in Ubuntu. https://bugs.launchpad.net/bugs/1719671 Title: [SRU] include recent version containing fips and livepatch To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/1719671/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1719671] Re: [SRU] include recent version containing fips and livepatch
trusty tarball ** Attachment removed: "ubuntu-advantage-tools_10~ubuntu0.16.04.1.tar.xz" https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/1719671/+attachment/4973827/+files/ubuntu-advantage-tools_10~ubuntu0.16.04.1.tar.xz ** Attachment removed: "ubuntu-advantage-tools_10~ubuntu0.17.04.1.tar.xz" https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/1719671/+attachment/4973837/+files/ubuntu-advantage-tools_10~ubuntu0.17.04.1.tar.xz ** Attachment added: "ubuntu-advantage-tools_10~ubuntu0.14.04.1.tar.xz" https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/1719671/+attachment/4989104/+files/ubuntu-advantage-tools_10~ubuntu0.14.04.1.tar.xz -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to ubuntu-advantage-tools in Ubuntu. https://bugs.launchpad.net/bugs/1719671 Title: [SRU] include recent version containing fips and livepatch To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/1719671/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1719671] Re: [SRU] include recent version containing fips and livepatch
** Description changed: ** description still being worked on, not done yet ** + + This bug has some history that may be confusing if the comments are read + linearly. Basically it started out as a Feature Freeze Exception, that's + why we have build logs and unit test runs attached. + + Also, the "rename" that is mentioned elsewhere did not happen with this + package: the ubuntu-advantage name was kept, no new aliases were added. + This will happen in a later SRU, with a later version of the package. + + + For the SRU, what we need is: + * new tarball + * new debdiff, but note that binary file changes won't be shown in the debdiff [IMPACT] Most recent version of ubuntu-advantage-tool on github includes fips and livepatch enablement. The fips enablement will allow customers to easily install and configure Canonical's FIPS certified modules on xenial, whereas livepatch allows xenial and trusty customers to patch the running kernel without a reboot. This SRU will cover both new features. In addition to the new features themselves, a new "status" command was added that will give a short summary about the available modules and their status, at a glance. Note: FIPS certified modules are only available for xenial. Livepatch is supported on xenial and trusty. The tool will refuse to enable either service on an unsupported ubuntu release. Without this updated package, customers of those services have to enable them manually by following a series of steps. [FIPS DESCRIPTION] When "ubuntu-advantage enable-fips " is issued from commandline, - configure the private PPA where the FIPS modules are located - install the FIPS modules from this PPA to the local machine from where the script is run - configure the bootloader to enable fips Upon successful completion of these steps, the customer then gets a message stating to reboot the machine to complete the fips enablement process. Without the script, customers must perform the steps manually. [LIVEPATCH DESCRIPTION] Livepatch allows customers to apply kernel patches to a running system without rebooting it. The current instructions live in http://ubuntu.com/livepatch and boil down to: - install snapd if it's not installed already. On trusty this means a new kernel as well. - install the canonical-livepatch snap - obtain a livepatch token from Canonical - run the enable command with the given token The ubuntu-advantage-tools package simplifies this process by just requesting the token and performing all the other steps on behalf of the user. It also conveniently checks the running kernel and instructs the user to reboot into a newer kernel if needed to finish the installation (this is the case when running trusty). [FIX] Add fips and livepatch support to the ubuntu-adadvantage-tools package. See debdiff below. [LIVEPATCH TESTCASES] TRUSTY 0. Install the new ubuntu-advantage-tools package to add livepatch support. 1. Collect status before enabling livepatch type on commandline: - ubuntu-advantage status + ubuntu-advantage status expect: livepatch: disabled esm: disabled (not available) fips: disabled (not available) 2. Enable livepatch visit https://ubuntu.com/livepatch and obtain a token type on commandline, sudo ubuntu-advantage enable-livepatch You may be required to install a newer kernel. In that case, expect the following output: - Installing missing dependency snapd... OK - Installing the canonical-livepatch snap. - This may take a few minutes depending on your bandwidth. - canonical-livepatch 7.24 from 'canonical' installed - - Your currently running kernel (3.13.0-133-generic) is too old to - support snaps. Version 4.4.0 or higher is needed. - - Please reboot your system into a supported kernel version - and run the following command one more time to complete the - installation: - - sudo ubuntu-advantage enable-livepatch + Installing missing dependency snapd... OK + Installing the canonical-livepatch snap. + This may take a few minutes depending on your bandwidth. + canonical-livepatch 7.24 from 'canonical' installed + + Your currently running kernel (3.13.0-133-generic) is too old to + support snaps. Version 4.4.0 or higher is needed. + + Please reboot your system into a supported kernel version + and run the following command one more time to complete the + installation: + + sudo ubuntu-advantage enable-livepatch Once you reboot and re-run the specified command, expect: - Enabling Livepatch with the given token, stand by... - Successfully enabled device. Using machine-token: - Use "canonical-livepatch status" to verify current patch status. - + Enabling Livepatch with the given token, stand by... + Successfully enabled device. Using machine-token: +
[Bug 1719671] Re: [SRU] include recent version containing fips and livepatch
** Changed in: ubuntu-advantage-tools (Ubuntu Trusty) Status: New => In Progress ** Changed in: ubuntu-advantage-tools (Ubuntu Xenial) Status: New => In Progress ** Changed in: ubuntu-advantage-tools (Ubuntu Zesty) Status: New => In Progress ** Changed in: ubuntu-advantage-tools (Ubuntu Trusty) Assignee: (unassigned) => Andreas Hasenack (ahasenack) ** Changed in: ubuntu-advantage-tools (Ubuntu Xenial) Assignee: (unassigned) => Andreas Hasenack (ahasenack) ** Changed in: ubuntu-advantage-tools (Ubuntu Zesty) Assignee: (unassigned) => Andreas Hasenack (ahasenack) -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to ubuntu-advantage-tools in Ubuntu. https://bugs.launchpad.net/bugs/1719671 Title: [SRU] include recent version containing fips and livepatch To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/1719671/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1719671] Re: [SRU] include recent version containing fips and livepatch
** Description changed: ** description still being worked on, not done yet ** [IMPACT] Most recent version of ubuntu-advantage-tool on github includes fips and livepatch enablement. The fips enablement will allow customers to easily install and configure Canonical's FIPS certified modules on xenial, whereas livepatch allows xenial and trusty customers to patch the running kernel without a reboot. This SRU will cover both new features. In addition to the new features themselves, a new "status" command was added that will give a short summary about the available modules and their status, at a glance. Note: FIPS certified modules are only available for xenial. Livepatch is supported on xenial and trusty. The tool will refuse to enable either service on an unsupported ubuntu release. Without this updated package, customers of those services have to enable them manually by following a series of steps. [FIPS DESCRIPTION] When "ubuntu-advantage enable-fips " is issued from commandline, - configure the private PPA where the FIPS modules are located - install the FIPS modules from this PPA to the local machine from where the script is run - configure the bootloader to enable fips Upon successful completion of these steps, the customer then gets a message stating to reboot the machine to complete the fips enablement process. Without the script, customers must perform the steps manually. [LIVEPATCH DESCRIPTION] Livepatch allows customers to apply kernel patches to a running system without rebooting it. The current instructions live in http://ubuntu.com/livepatch and boil down to: - install snapd if it's not installed already. On trusty this means a new kernel as well. - install the canonical-livepatch snap - obtain a livepatch token from Canonical - run the enable command with the given token The ubuntu-advantage-tools package simplifies this process by just requesting the token and performing all the other steps on behalf of the user. It also conveniently checks the running kernel and instructs the user to reboot into a newer kernel if needed to finish the installation (this is the case when running trusty). [FIX] Add fips and livepatch support to the ubuntu-adadvantage-tools package. See debdiff below. [LIVEPATCH TESTCASES] + ZESTY + 0. Install the new ubuntu-advantage-tools package to add livepatch support. + + 1. Collect status before enabling livepatch + + type on commandline: + ubuntu-advantage status + + expect the livepatch service to be unavailable: + livepatch: disabled (not available) + + esm: disabled (not available) + + fips: disabled (not available) + + 2. Ensure that livepatch cannot be enabled on Zesty. + You can use a dummy set of credentials like "foobar" as the token: + + type on commandline, + sudo ubuntu-advantage enable-livepatch foobar + + expect, + Sorry, but Canonical Livepatch is not supported on zesty + + + TRUSTY + 0. Install the new ubuntu-advantage-tools package to add livepatch support. + + 1. Collect status before enabling livepatch + + type on commandline: + ubuntu-advantage status + + expect: + livepatch: disabled + + esm: disabled (not available) + + fips: disabled (not available) + + 2. Enable livepatch + + visit https://ubuntu.com/livepatch and obtain a token + + type on commandline, + sudo ubuntu-advantage enable-livepatch + + You may be required to install a newer kernel. In that case, expect the + following output: + Installing missing dependency snapd... OK + Installing the canonical-livepatch snap. + This may take a few minutes depending on your bandwidth. + canonical-livepatch 7.24 from 'canonical' installed + + Your currently running kernel (3.13.0-133-generic) is too old to + support snaps. Version 4.4.0 or higher is needed. + + Please reboot your system into a supported kernel version + and run the following command one more time to complete the + installation: + + sudo ubuntu-advantage enable-livepatch + + Once you reboot and re-run the specified command, expect: + Enabling Livepatch with the given token, stand by... + Successfully enabled device. Using machine-token: + Use "canonical-livepatch status" to verify current patch status. + + + 3. Verify livepatch status + + type on commandline, + ubuntu-advantage status + + expect an output like the following, + livepatch: enabled + client-version: "7.23" + architecture: x86_64 + cpu-model: Intel Core Processor (Skylake) + last-check: 2017-10-23T15:10:45.640938255Z + boot-time: 2017-10-23T15:10:13Z + uptime: 1m19s + status: + - kernel: 4.4.0-97.120~14.04.1-generic + running: true + livepatch: + checkState: checked + patchState: nothing-to-apply +
[Bug 1691109] Re: qemu-kvm not working as nested inside ESX 6.0
@paelzer No we don't - sorry. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to qemu in Ubuntu. https://bugs.launchpad.net/bugs/1691109 Title: qemu-kvm not working as nested inside ESX 6.0 To manage notifications about this bug go to: https://bugs.launchpad.net/cloud-archive/+bug/1691109/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1096002] Re: Multipath does not work with EMC 5300 Storage
Reassigning to the Linux package as that's where this driver resides (libiscsi is a pure userspace implementation of the iSCSI client protocol). ** Package changed: libiscsi (Ubuntu) => linux (Ubuntu) -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to libiscsi in Ubuntu. https://bugs.launchpad.net/bugs/1096002 Title: Multipath does not work with EMC 5300 Storage To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1096002/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
