[Bug 1508120] Re: please break out embedded code copies into archive packages

2016-03-31 Thread Jamie Strandboge
MY last comment was confusing. Let me retry: In https://bugs.launchpad.net/ubuntu/+source/juju- core/+bug/1545913/comments/12 I mentioned that the number of embedded copies is reduced in juju2 on 16.04 and juju2 is using archive -dev packages for many of the copies listed in this bug. Great! :)

[Bug 1508120] Re: please break out embedded code copies into archive packages

2016-03-31 Thread Jamie Strandboge
In https://bugs.launchpad.net/ubuntu/+source/juju- core/+bug/1545913/comments/12 I mentioned that a number of the embedded copies are now being used in the juju 2 packaging (thanks!). I've also asked that the remaining 15 embedded copies be enumerated with the plan to address them. -- You

[Bug 1545913] Re: [FFe] juju-core 2.0

2016-03-31 Thread Jamie Strandboge
"The security team has requested changes to the current juju packaging with the ultimate goal of breaking out the embedded non-juju golang dependencies. As part of this FFE, the juju-core package depends upon all currently packaged golang depends that are already in the archive. The remaining

[Bug 1560315] Re: [needs packaging] juju2 beta is not in xenial

2016-03-23 Thread Jamie Strandboge
The agreement between the juju core team, MIR, foundations and security teams for 16.04 was that the juju would: 1. test out use of -buildmode=shared/-linkshared for 16.04, but not be committed to using them since the feature is new 2. the number of embedded copies that juju uses as part of

[Bug 1554761] [NEW] missing rules for block-iscsi.so and block-dmg.so

2016-03-08 Thread Jamie Strandboge
Public bug reported: The libvirt-qemu policy has: # for rbd /etc/ceph/ceph.conf r, /usr/lib/x86_64-linux-gnu/qemu/block-rbd.so rm, # for curl /usr/lib/x86_64-linux-gnu/qemu/block-curl.so rm, but starting VMs on up to date xenial resulted in: [114243.449268] audit: type=1400

[Bug 1552441] [NEW] [xenial] @{PROC}/sys/net/ipv4/ip_local_port_range denial

2016-03-02 Thread Jamie Strandboge
Public bug reported: [ 1630.599818] audit: type=1400 audit(1456762040.165:24): apparmor="DENIED" operation="open" profile="/usr/sbin/named" name="/proc/sys/net/ipv4/ip_local_port_range" pid=33948 comm="named" requested_mask="r" denied_mask="r" fsuid=113 ouid=0 Fix is:

[Bug 1552441] Re: [xenial] @{PROC}/sys/net/ipv4/ip_local_port_range denial

2016-03-02 Thread Jamie Strandboge
** Patch added: "bind9_9.10.3.dfsg.P2-4ubuntu1.debdiff" https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/1552441/+attachment/4587024/+files/bind9_9.10.3.dfsg.P2-4ubuntu1.debdiff -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to

[Bug 1543794] Re: isc-dhcp-server fails to start on second & further attempts with 'Can't open /var/lib/dhcp/dhcpd.leases for append'

2016-03-01 Thread Jamie Strandboge
** Changed in: isc-dhcp (Ubuntu) Status: In Progress => Fix Committed -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/1543794 Title: isc-dhcp-server fails to start on second &

[Bug 1543794] Re: isc-dhcp-server fails to start on second & further attempts with 'Can't open /var/lib/dhcp/dhcpd.leases for append'

2016-03-01 Thread Jamie Strandboge
** Changed in: isc-dhcp (Ubuntu) Status: Confirmed => In Progress ** Changed in: isc-dhcp (Ubuntu) Assignee: (unassigned) => Jamie Strandboge (jdstrand) -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to the bug report.

[Bug 1548685] Re: System hangs, because NTPD drift file is blocked by AppArmor.

2016-02-24 Thread Jamie Strandboge
Thank you for using Ubuntu and reporting a bug. /var/lib/ntp.drift is not an Ubuntu default for the drift file. Eg, on a 14.04 and 16.04 system: $ grep drift /etc/ntp.conf driftfile /var/lib/ntp/ntp.drift Since this is a site-specific setting, you have the choice of either adjusting

[Bug 1546455] Re: Many instances of 'apparmor="DENIED" operation="create" profile="/usr/sbin/ntpd" pid=15139 comm="ntpd" family="unspec" sock_type="dgram" protocol=0' in syslog

2016-02-17 Thread Jamie Strandboge
** Changed in: ntp (Ubuntu) Status: In Progress => Fix Committed -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to ntp in Ubuntu. https://bugs.launchpad.net/bugs/1546455 Title: Many instances of 'apparmor="DENIED"

[Bug 1546455] Re: Many instances of 'apparmor="DENIED" operation="create" profile="/usr/sbin/ntpd" pid=15139 comm="ntpd" family="unspec" sock_type="dgram" protocol=0' in syslog

2016-02-17 Thread Jamie Strandboge
I'm going to upload a fix for ntp, but there is an apparmor bug that is preventing it from working, so adding an apparmor task. ** Changed in: ntp (Ubuntu) Assignee: Kick In (kick-d) => Jamie Strandboge (jdstrand) ** Changed in: ntp (Ubuntu) Status: Confirmed => In Progress *

[Bug 1546455] Re: Many instances of 'apparmor="DENIED" operation="create" profile="/usr/sbin/ntpd" pid=15139 comm="ntpd" family="unspec" sock_type="dgram" protocol=0' in syslog

2016-02-17 Thread Jamie Strandboge
I see that ntp is now using AF_UNSPEC in a number of places. I tried the following rules: # ntp uses AF_INET, AF_INET6 and AF_UNSPEC network dgram, network stream, which should fix it, but still get denials. I then tried all of the following: network udp, network tcp, network dgram,

[Bug 1541529] Re: can no longer create 15.04 ubuntu-core stable kvm images with ubuntu-device-flash

2016-02-03 Thread Jamie Strandboge
I noticed in dmesg output the following at the time of the error: Feb 3 12:00:27 lily kernel: [ 956.113096] device-mapper: table: 252:0: linear: dm-linear: Device lookup failed Feb 3 12:00:27 lily kernel: [ 956.113101] device-mapper: ioctl: error adding target to table Feb 3 12:00:27 lily

[Bug 1541529] Re: can no longer create 15.04 ubuntu-core stable kvm images with ubuntu-device-flash

2016-02-03 Thread Jamie Strandboge
Turns out, my mirror was out of date and I had kpartx 0.5.0-7ubuntu10 installed, which was buggy, but uploading to 0.5.0-7ubuntu12 resolves the issue. ** Changed in: multipath-tools (Ubuntu) Status: New => Fix Released ** No longer affects: goget-ubuntu-touch (Ubuntu) ** No longer

[Bug 1482765] Re: [MIR] neutron-vpnaas

2016-01-21 Thread Jamie Strandboge
Is this still needed for 16.04? -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to neutron-vpnaas in Ubuntu. https://bugs.launchpad.net/bugs/1482765 Title: [MIR] neutron-vpnaas To manage notifications about this bug go to:

[Bug 1501651] Re: ARM chroot issues: fatal error: rt_sigaction failure

2015-12-17 Thread Jamie Strandboge
FYI, I ran into this trying to use snapcraft in an armhf schroot. AIUI, ubuntu-snappy will need to be rebuilt against golang 2:1.5.1-0ubuntu2.1 for snapcraft to be able to run 'snappy build' in the schroot. -- You received this bug notification because you are a member of Ubuntu Server Team,

[Bug 1511830] Re: apparmor denies VM startup when image is network mounted

2015-11-02 Thread Jamie Strandboge
As Christian mentioned, just need to adjust the virt-aa-helper policy. Removing the apparmor task. ** No longer affects: apparmor (Ubuntu) -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to libvirt in Ubuntu.

[Bug 1509404] [NEW] snappy build does not allow abstract sockets with 'listen-stream'

2015-10-23 Thread Jamie Strandboge
Public bug reported: systemd socket activation (http://www.freedesktop.org/software/systemd/man/systemd.socket.html) was added to the service yaml some time ago. ListenStream= in the systemd unit supports both file-based sockets (start with '/') and abstract sockets (start with '@'). However,

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-10-20 Thread Jamie Strandboge
Remaining 15.10 issues fixed in juju-core 1.24.6-0ubuntu2. ** Changed in: juju-core (Ubuntu) Status: New => Fix Committed ** Changed in: juju-core (Ubuntu) Assignee: Matthias Klose (doko) => (unassigned) -- You received this bug notification because you are a member of Ubuntu

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-10-20 Thread Jamie Strandboge
golang-x-text now builds fine. Marking Fix Committed. ** Changed in: golang-x-text (Ubuntu) Status: New => Fix Committed -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to golang-go.net-dev in Ubuntu.

[Bug 1508120] [NEW] please break out embedded code copies into archive packages

2015-10-20 Thread Jamie Strandboge
Public bug reported: In the MIR bug 1267393 it was brought up that juju-core uses many embedded code copies and a condition for MIR acceptance was to use archive packages instead. Unfortunately, this work was not completed in time for 15.10, however the juju-core team committed to fixing this up

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-10-20 Thread Jamie Strandboge
$ ./change-override -c main -t golang-juju-loggo golang-github-bmizerany-assert golang-github-bmizerany-pat golang-go-dbus golang-golang-x-net-dev golang-pretty golang-text golang-x-text Override component to main golang-juju-loggo 0.0~git20150318-0ubuntu1 in wily: universe/devel -> main

[Bug 1508122] [NEW] please transition to shared libraries

2015-10-20 Thread Jamie Strandboge
Public bug reported: As part of the golang MIR (bug 1267393), golang 1.6 is going to gain shared library support and 1.6 has been targeted for the 16.04 release. The Ubuntu go maintainers (ie, Foundations and currently juju teams) committed to enabling shared library support by default for

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-10-20 Thread Jamie Strandboge
juju-local was already in main, but juju-core is seeded and was not. $ ./change-override -c main juju-core Override component to main juju-core 1.24.6-0ubuntu2 in wily amd64: universe/devel/extra/100% -> main juju-core 1.24.6-0ubuntu2 in wily arm64: universe/devel/extra/100% -> main juju-core

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-10-20 Thread Jamie Strandboge
$ ./change-override -c main -S golang-race-detector-runtime Override component to main golang-race-detector-runtime 0.0+svn229396-0ubuntu1 in wily: universe/devel -> main golang-race-detector-runtime 0.0+svn229396-0ubuntu1 in wily amd64: universe/devel/extra/100% -> main Override [y|N]? y 2

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-10-20 Thread Jamie Strandboge
golang-race-detector-runtime is a Recommends of golang. I looked at it-- packaging is fine, pulls in no new depends, builds fine and has a testsuite. ** Also affects: golang-race-detector-runtime (Ubuntu) Importance: Undecided Status: New ** Changed in: golang-race-detector-runtime

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-10-20 Thread Jamie Strandboge
golang-text packaging looks fine, testsuite enabled in the build, builds on wily. Marking Fix Committed. ** Changed in: golang-text (Ubuntu) Status: New => Fix Committed -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-10-20 Thread Jamie Strandboge
$ ./change-override -c main -t juju-core Override component to main juju-core 1.24.6-0ubuntu2 in wily: universe/devel -> main Override [y|N]? y 1 publication overridden. ** Changed in: juju-core (Ubuntu) Status: Fix Committed => Fix Released -- You received this bug notification because

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-10-20 Thread Jamie Strandboge
golang-pretty packaging looks fine. Testsuite enabled in the build. Builds on wily. Marking Fix Committed. ** Changed in: golang-pretty (Ubuntu) Status: New => Fix Committed -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-10-19 Thread Jamie Strandboge
@pitti Thanks for creating the bug. IMO the bare minimum and the first step is simply to rebuild (many of these golang packages do have in-build testsuites too). More stuff could then be added later. -- You received this bug notification because you are a member of Ubuntu Server Team, which is

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-10-19 Thread Jamie Strandboge
@Martin Packman: can you get the fixed version of golang-x-text uploaded to wily? As for backport packaging for current stables, like trusty, you are free to do whatever you want with those (following whatever archive processes you would normally follow). Ie, juju on trusty is not officially

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-10-17 Thread Jamie Strandboge
Per comment#128, marking golang-go.crypto Fix Committed. ** Changed in: golang-go.crypto (Ubuntu) Status: Incomplete => Fix Committed -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to golang-github-bmizerany-pat in Ubuntu.

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-10-17 Thread Jamie Strandboge
"We have manually tested the packaging change, but it is not yet included in our automated testing and release process. We have work in progress to break out our series-independent packaging branch. That said, the merge should not be considered blocked on our verification." IIUC, this means that

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-10-17 Thread Jamie Strandboge
"This package is not a dependency of juju. It's used by golang.org/x/net/html/charset only, so is just pulled in as a side effect of taking the debian package. My preference would be to drop the juju packaging dependency on golang-go.net-dev for 1.24 instead." Are you saying you want to use the

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-10-17 Thread Jamie Strandboge
Per comment #128, marking golang-gocheck and golang-goyaml as 'Won't Fix'. Go ahead and use the embedded copy for 15.10 but please ensure the transition for these is completed for 16.04. ** Changed in: golang-gocheck (Ubuntu) Status: Incomplete => Won't Fix ** Changed in: golang-goyaml

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-10-17 Thread Jamie Strandboge
"I would appreciate if someone who has a clear understanding for the work pitti is requesting (such as pitti himself) could file the bug and subscribe me. We'll happily update our packaging to use any such new mechanism if it's provided." I'll see if I can find someone to help you. -- You

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-10-16 Thread Jamie Strandboge
Actually, golang-go.crypto needs a bug subscriber. Marking incomplete. Once that is done, this can be moved back to Fix Committed. ** Changed in: golang-go.crypto (Ubuntu) Status: Fix Committed => Incomplete -- You received this bug notification because you are a member of Ubuntu Server

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-10-16 Thread Jamie Strandboge
@doko "I'm still sceptical about how to track third party libaries, i.e. if they are included as a dependency, or built form the vendorized copies. dh-golang tries to do that, and sets the "Built-Using" attribute for the binary packages. If juju-core doesn't want, or cannot use dh-golang, that

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-10-16 Thread Jamie Strandboge
Based on Steve's comment in 118, I'm marking golang as Fix Committed. ** Changed in: golang (Ubuntu) Status: Incomplete => Fix Committed -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to golang-github-bmizerany-pat in Ubuntu.

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-10-16 Thread Jamie Strandboge
@slangasek: I agree on your point regarding juju-mongodb. It is fine for support and I filed bug 1506989 for perftools and bug 1506990 for architectures. Between that, the security team ACK and doko's review, marking as Fix Committed. ** Changed in: juju-mongodb (Ubuntu) Status: New =>

[Bug 1506993] [NEW] please rename package to conform to Debian Go packaging guidelines

2015-10-16 Thread Jamie Strandboge
Public bug reported: MIR bug 1267393 discovered: mterry: "Its name is wrong [1]. It should be golang-github-juju-loggo and golang-github-juju-loggo-dev. We should fix in Ubuntu so that if it's ever packaged in Debian, we'll be aligned. [1] http://pkg-go.alioth.debian.org/packaging.html " I

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-10-16 Thread Jamie Strandboge
Ok, this is a very complicated MIR with so many comments it is difficult to track. I went through the bug and came up with the following list of remaining items. If I missed something, please comment. Hopefully, no one has to look before this comment on if everything is done. :) * security team

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-10-16 Thread Jamie Strandboge
I see this is assigned to the security team. I already gave our ACK. Based on doko's comments, marking Incomplete. ** Changed in: juju-mongodb (Ubuntu) Status: New => Incomplete ** Changed in: juju-mongodb (Ubuntu) Assignee: Ubuntu Security Team (ubuntu-security) => (unassigned) --

[Bug 1506990] [NEW] please drop architecture list in debian/control

2015-10-16 Thread Jamie Strandboge
Public bug reported: This came up as part of the MIR review in bug 1267393. In the interest of time, I am filing it on their behalf. doko: "the package should be built for the upcoming s390x architecture as well." slangasek: "Yes, it should; the architecture list in debian/control should just

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-10-16 Thread Jamie Strandboge
golang-go-dbus only ships a dev package with source code so does not need Built-Using (I updated the MIRteam wiki page to calrify this). Based on mterry's comments, golang-go-dbus is ok. ** Changed in: golang-go-dbus (Ubuntu) Status: Incomplete => Fix Committed -- You received this bug

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-10-16 Thread Jamie Strandboge
"- debian/control should have Built-Using: ${misc:Built-Using} on the golang-github-bmizerany-assert-dev package" This isn't needed for -dev packages. Marking Fix Committed. ** Changed in: golang-github-bmizerany-assert (Ubuntu) Status: Incomplete => Fix Committed -- You received this

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-10-16 Thread Jamie Strandboge
ntu) Assignee: Jamie Strandboge (jdstrand) => (unassigned) -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to golang-github-bmizerany-pat in Ubuntu. https://bugs.launchpad.net/bugs/1267393 Title: [MIR] juju-core, juju-mongodb, gccgo,

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-10-16 Thread Jamie Strandboge
@mterry, I agree with doko and slangasek that we should block migration if APIs fail and I particularly like pitti's comment in 99. Also, you said: "I get that you're saying it's good because we don't have to waste security-update-time fixing reverse-depends." The upstream Go community as a

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-10-16 Thread Jamie Strandboge
@doko: "While not required, it is good to see that shared library support is being worked on, and targeted for the upcoming 1.6. release." It is only not required for 15.10, it is a condition of this MIR (that the juju and foundations teams already agreed to) that we gain shared library support

[Bug 1506989] [NEW] please have google-perftools support other architectures

2015-10-16 Thread Jamie Strandboge
Public bug reported: This came up as part of the MIR review in bug 1267393. In the interest of time, I am filing it on their behalf. doko: "google-perftools is available on all archs. Is there a need to disable that for some architectures?" slangasek: "It's not available on arm64 in trusty, so

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-10-16 Thread Jamie Strandboge
"* security team commitments: develop a process for the list of packages to notify the juju team on when there is a security update. This is not a precondition of this MIR, but a request of the juju team" FYI, we have this list and have the tooling update in our backlog. -- You received this

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-10-16 Thread Jamie Strandboge
juju-mongodb has security team ACK so long as the builds use --disable- scripting in perpetuity. I verified the wily version is correctly using --disable-scripting in debian/rules (if I build without '--disable-scripting', I see src/third_party/v8 being built and build with --disable-scripting, I

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-10-16 Thread Jamie Strandboge
golang-x-text FTBFS due to testsuite failure: === RUN TestNumericCompare --- FAIL: TestNumericCompare (0.02s) collate_test.go:119: Compare("\U00011730", "0") = 1; want 0 FAIL FAILgolang.org/x/text/collate/colltab 1.473s -- You received this bug notification because you are a

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-10-16 Thread Jamie Strandboge
"golang-juju-loggo needs some fixes: - It's missing Built-Using: ${misc:Built-Using}" You can ignore this, but please do fix the package name. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to golang-github-bmizerany-pat in Ubuntu.

[Bug 1482765] Re: [MIR] neutron-vpnaas

2015-10-14 Thread Jamie Strandboge
This will not be reviewed in time for 15.10. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to neutron-vpnaas in Ubuntu. https://bugs.launchpad.net/bugs/1482765 Title: [MIR] neutron-vpnaas To manage notifications about this bug go

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-10-13 Thread Jamie Strandboge
** Changed in: golang-go.crypto (Ubuntu) Assignee: (unassigned) => Jamie Strandboge (jdstrand) -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to golang-github-bmizerany-pat in Ubuntu. https://bugs.launchpad.net/bugs/1267393 Ti

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-10-07 Thread Jamie Strandboge
Thanks! What about the embedded code copes question in comments #68 and #69. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to golang in Ubuntu. https://bugs.launchpad.net/bugs/1267393 Title: [MIR] juju-core, juju-mongodb, gccgo,

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-10-07 Thread Jamie Strandboge
I of course meant 'copies' in that last comment. To clarify what I'm thinking about wrt to juju embedded copies> the source package can ship various embedded code copies but the archive build should use archive golang-*-dev packages whenever possible and where it makes sense (see comment #68 for

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-09-11 Thread Jamie Strandboge
One more comment on broken out libs (whether static or shared), juju- core might want to consider expanding autopkgtests to uncover regressions caused by dependencies. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to golang in Ubuntu.

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-09-11 Thread Jamie Strandboge
Yesterday slangasek and I met with the juju team regarding the path forward for transitioning to shared libraries and Alexis will be commenting on that later. Unrelated to that, juju is using many embedded code copies and juju-core will need to be adjusted to build with many of these broken out

[Bug 1482765] Re: [MIR] neutron-vpnaas

2015-09-09 Thread Jamie Strandboge
FYI, it's possible this may not be done for 15.10 based on other outstanding higher priority MIRs (juju, golang, fwupdate, lxd, angular.js (MAAS)) -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to neutron-vpnaas in Ubuntu.

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-09-08 Thread Jamie Strandboge
Per https://wiki.ubuntu.com/MainInclusionProcess, marking Incomplete since we need commitments from various folks before granting security team signoff. ** Changed in: golang (Ubuntu) Status: Confirmed => Incomplete -- You received this bug notification because you are a member of Ubuntu

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-09-04 Thread Jamie Strandboge
In addition to Seth's review, I can say that juju needs to make some packaging changes to meet the MIR requirements I set forth in the last comment. Specifically: * should use golang now for all supported archs (!powerpc) * should move embedded libraries out to proper packages * should use

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-09-04 Thread Jamie Strandboge
Based on the above, I think the gccgo tasks can be close? -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to golang in Ubuntu. https://bugs.launchpad.net/bugs/1267393 Title: [MIR] juju-core, juju-mongodb, gccgo, golang To manage

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

2015-09-04 Thread Jamie Strandboge
I did not perform a code or packaging review for golang. I did reevaluate the current situation wrt static linking and under what conditions, if any, golang and packages depending on it would be supportable in main. In general, statically compiled binaries are not suitable for the Ubuntu archive

[Bug 1487609] [NEW] FTBFS on wily

2015-08-21 Thread Jamie Strandboge
Public bug reported: == ERROR: test_run_server (test.unit.common.test_wsgi.TestWSGI) -- Traceback (most recent call last): File

[Bug 1483071] Re: Error creating new VM with OVMF

2015-08-11 Thread Jamie Strandboge
This is a problem with virt-aa-helper.c. Basically, in valid_path() this: /* override the above with these */ const char * const override[] = { /sys/devices/pci, /* for hostdev pci devices */ /etc/libvirt-sandbox/services/ /* for virt-sandbox service config */

[Bug 1450642] Re: seccomp missing many new syscalls

2015-05-14 Thread Jamie Strandboge
Test cases pass with packages in vivid-proposed: * in build testsuite results are same between previous build and this for all archs: PASS * scmp_sys_resolver 1024: PASS * scmp_sys_resolver getrandom: PASS * autopkgtests: PASS * lxc (amd64 and i386 only): PASS * docker framework

[Bug 1450642] Re: seccomp missing many new syscalls

2015-05-08 Thread Jamie Strandboge
2.1.1-1ubuntu1~vivid2 uploaded. I'll upload 2.1.1-1ubuntu1 to wily in a few minutes. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to libseccomp in Ubuntu. https://bugs.launchpad.net/bugs/1450642 Title: seccomp missing many new

[Bug 1450642] Re: seccomp missing many new syscalls

2015-05-05 Thread Jamie Strandboge
** Also affects: libseccomp (Ubuntu Wily) Importance: Undecided Assignee: Jamie Strandboge (jdstrand) Status: In Progress ** Also affects: libseccomp (Ubuntu Vivid) Importance: Undecided Status: New ** Changed in: libseccomp (Ubuntu Vivid) Status: New

[Bug 1450642] Re: seccomp missing many new syscalls

2015-05-05 Thread Jamie Strandboge
** Changed in: libseccomp (Ubuntu Wily) Status: In Progress = Fix Committed -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to libseccomp in Ubuntu. https://bugs.launchpad.net/bugs/1450642 Title: seccomp missing many new

[Bug 1450642] Re: seccomp missing many new syscalls

2015-05-05 Thread Jamie Strandboge
Uploaded the same version to wily (it is in unapproved). -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to libseccomp in Ubuntu. https://bugs.launchpad.net/bugs/1450642 Title: seccomp missing many new syscalls To manage notifications

[Bug 1450642] Re: seccomp missing many new syscalls

2015-05-04 Thread Jamie Strandboge
** Description changed: - Several syscalls were discovered to be missing when using the launcher - on snappy. These should be added so we may properly support seccomp - filtering. + [Impact] + Several syscalls were discovered to be missing when using the launcher on snappy. These should be added

[Bug 1450642] [NEW] seccomp missing many new syscalls

2015-04-30 Thread Jamie Strandboge
/commit/2d09a74c7f04d29ae740db1e2187ff1a1886b2c3 ** Affects: snappy-ubuntu Importance: Undecided Status: In Progress ** Affects: libseccomp (Ubuntu) Importance: Undecided Assignee: Jamie Strandboge (jdstrand) Status: In Progress ** Changed in: libseccomp (Ubuntu

[Bug 1292234] Re: qcow2 image corruption on non-extent filesystems (ext3)

2015-02-11 Thread Jamie Strandboge
Woohoo! *Huge* thanks. This was a tricky one :) -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to qemu in Ubuntu. https://bugs.launchpad.net/bugs/1292234 Title: qcow2 image corruption on non-extent filesystems (ext3) To manage

[Bug 1406220] Re: openvpn assert failure: *** Error in `/usr/sbin/openvpn': malloc(): smallbin double linked list corrupted: 0x00007fa766e09fb0 ***

2015-02-09 Thread Jamie Strandboge
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openvpn in Ubuntu. https://bugs.launchpad.net/bugs/1406220 Title: openvpn assert failure: *** Error in `/usr/sbin/openvpn':

[Bug 1407695] Re: [MIR] python-saml2, python-repoze.who, xmlsec1

2015-01-12 Thread Jamie Strandboge
** Changed in: xmlsec1 (Ubuntu) Assignee: Jamie Strandboge (jdstrand) = Seth Arnold (seth-arnold) -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to python-pysaml2 in Ubuntu. https://bugs.launchpad.net/bugs/1407695 Title: [MIR

[Bug 1381450] Re: [MIR] conntrack, libnetfilter-queue, libnetfilter-cttimeout, libnetfilter-cthelper

2015-01-08 Thread Jamie Strandboge
** Changed in: conntrack (Ubuntu) Assignee: Jamie Strandboge (jdstrand) = Seth Arnold (seth-arnold) -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to libnetfilter-cthelper in Ubuntu. https://bugs.launchpad.net/bugs/1381450 Title

[Bug 1404648] Re: security issues in ntp

2014-12-21 Thread Jamie Strandboge
Thanks for the bug. These issues are being tracked here: http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-9293.html http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-9294.html http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-9295.html

[Bug 1292234] Re: qcow2 image corruption in trusty (qemu 1.7 and 2.0 candidate)

2014-12-01 Thread Jamie Strandboge
Actually, for me it is just ext3 without LVM. $ sudo tune2fs -l /dev/sda3 | grep -i features Filesystem features: has_journal ext_attr resize_inode dir_index filetype needs_recovery sparse_super large_file -- You received this bug notification because you are a member of Ubuntu Server

[Bug 1292234] Re: qcow2 image corruption in trusty (qemu 1.7 and 2.0 candidate)

2014-11-20 Thread Jamie Strandboge
FYI, I was able to reproduce this last night and uploaded forhallyn- trusty-amd64.img.corrupted.gz to https://chinstrap.canonical.com/~jamie/lp1292234/ for comparison with forhallyn-trusty-amd64.img.gz. -- You received this bug notification because you are a member of Ubuntu Server Team, which

[Bug 1380038] Re: SSL problems: doesn't check certificate chain and hostname when ssl connecting

2014-10-31 Thread Jamie Strandboge
Thank you for reporting a bug in Ubuntu. Has this issue been files/forwarded upstream? ** Changed in: pacemaker (Ubuntu) Status: New = Incomplete -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to pacemaker in Ubuntu.

[Bug 1374730] Re: X509 certificate verification problem

2014-10-31 Thread Jamie Strandboge
Thank you for reporting a bug in Ubuntu. Has this issue been files/forwarded upstream? ** Changed in: keepalived (Ubuntu) Status: New = Incomplete -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to keepalived in Ubuntu.

[Bug 1383415] Re: Incorrect use of SSL options

2014-10-31 Thread Jamie Strandboge
** Changed in: spamassassin (Ubuntu) Status: New = Confirmed -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to spamassassin in Ubuntu. https://bugs.launchpad.net/bugs/1383415 Title: Incorrect use of SSL options To manage

[Bug 1383136] Re: empty password could succeed if passdb static was used

2014-10-31 Thread Jamie Strandboge
** Changed in: dovecot (Ubuntu) Status: New = Triaged -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dovecot in Ubuntu. https://bugs.launchpad.net/bugs/1383136 Title: empty password could succeed if passdb static was used

[Bug 1380235] Re: Potential Vulnerability for X509 Certificate Verification

2014-10-31 Thread Jamie Strandboge
Thank you for reporting a bug in Ubuntu. Has this issue been files/forwarded upstream? ** Changed in: spamassassin (Ubuntu) Status: New = Incomplete -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to spamassassin in Ubuntu.

[Bug 1383704] Re: Can't switch off SSLv3 cipher groups in haproxy

2014-10-31 Thread Jamie Strandboge
** Changed in: haproxy (Ubuntu) Status: New = Triaged -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to haproxy in Ubuntu. https://bugs.launchpad.net/bugs/1383704 Title: Can't switch off SSLv3 cipher groups in haproxy To

[Bug 969299] Re: Don't require use of mediate_deleted with LXC (was: apparmor prevents dpkg-divert and localedef from working in a container)

2014-10-23 Thread Jamie Strandboge
** Tags added: aa-kernel ** Also affects: linux (Ubuntu) Importance: Undecided Status: New ** Changed in: linux (Ubuntu Precise) Status: New = Won't Fix ** Changed in: linux (Ubuntu) Importance: Undecided = Medium ** Changed in: linux (Ubuntu) Status: New = Confirmed

[Bug 1349433] Re: AppArmor breaks seccomp @ Apache mpm-itk

2014-10-23 Thread Jamie Strandboge
** Tags added: aa-kernel -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to mailman in Ubuntu. https://bugs.launchpad.net/bugs/1349433 Title: AppArmor breaks seccomp @ Apache mpm-itk To manage notifications about this bug go to:

[Bug 1349868] Re: [MIR] new build dependencies for ceilometer

2014-10-22 Thread Jamie Strandboge
** Changed in: libsmi (Ubuntu) Status: New = In Progress -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/1349868 Title: [MIR] new build dependencies for ceilometer To manage

[Bug 1349868] Re: [MIR] new build dependencies for ceilometer

2014-10-22 Thread Jamie Strandboge
python-pysnmp4-apps packaging looks fine. There is no testsuite. Conditional ACK provided there is a bug subscriber. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/1349868 Title:

[Bug 1349868] Re: [MIR] new build dependencies for ceilometer

2014-10-22 Thread Jamie Strandboge
libsmi packaging looks fine and ticks all the boxes except for the issues Seth mentioned. Needs a bug subscriber and to enable the testsuite. Considering the time, I would find it acceptable to enable the test suite in an SRU. ** Changed in: python-pysnmp4-apps (Ubuntu) Status: New = Fix

[Bug 1349868] Re: [MIR] new build dependencies for ceilometer

2014-10-22 Thread Jamie Strandboge
python-pysnmp4 packaging looks fine too. There is no testsuite. Conditional ACK provided there is a bug subscriber, pending security review. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to the bug report.

[Bug 1349868] Re: [MIR] new build dependencies for ceilometer

2014-10-22 Thread Jamie Strandboge
** Changed in: python-pysnmp4 (Ubuntu) Status: New = Fix Committed ** Changed in: libsmi (Ubuntu) Assignee: (unassigned) = Matthias Klose (doko) -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to the bug report.

[Bug 840925] Re: Please make /dev/kvm world-accessible in 45-qemu-kvm.rules

2014-10-14 Thread Jamie Strandboge
** Changed in: kvm (Ubuntu) Assignee: Jamie Strandboge (jdstrand) = (unassigned) ** Changed in: kvm (Ubuntu) Status: Incomplete = Won't Fix -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to kvm in Ubuntu. https

[Bug 1320221] Re: Apparmor blocks creating external snaphshot

2014-10-14 Thread Jamie Strandboge
We don't want to add all of /var. Either the images can be stored in the standard location or the profile can be adjusted by the administrator. ** Changed in: libvirt (Ubuntu) Status: Confirmed = Won't Fix -- You received this bug notification because you are a member of Ubuntu Server

[Bug 1349868] Re: [MIR] new build dependencies for ceilometer

2014-10-14 Thread Jamie Strandboge
python-pysnmp4-mibs doesn't have a testsuite, but otherwise packaging looks good. There is no Debian delta. ** Changed in: python-pysnmp4-mibs (Ubuntu) Status: New = Fix Committed ** Changed in: python-pysnmp4-mibs (Ubuntu) Assignee: Jamie Strandboge (jdstrand) = (unassigned

[Bug 1349868] Re: [MIR] new build dependencies for ceilometer

2014-10-14 Thread Jamie Strandboge
** Changed in: libsmi (Ubuntu) Assignee: Jamie Strandboge (jdstrand) = Seth Arnold (seth-arnold) -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/1349868 Title: [MIR] new build

[Bug 1357103] Re: apparmor denied a golang build inside a container

2014-10-10 Thread Jamie Strandboge
I'm going to mark as Fix Released for now then. Please open a new bug if you see this again. ** Changed in: linux (Ubuntu) Status: Incomplete = Fix Released -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to lxc in Ubuntu.

  1   2   3   4   5   6   7   8   9   10   >