Public bug reported: The test-upstream test of crypto-policies runs sshd -t which tests if /run/sshd is present and fails if the autopkgtest testbed upgrades openssh, because openssh's postinstall only restarts ssh.socket (not ssh.service which has /run/sshd as its run time directory). This was noticed due to the ongoing openssh sru [1] and its failing crypto- policies reverse dependency tests.
[ Impact ] * crypto-policies dep8 tests are run due to being a reverse dependency for important packages such as openssh. Instead of hinting these tests to be ignored/skipped we would like to fix them. [ Test Plan ] * Run: autopkgtest --test-name=test-upstream --apt- pocket=proposed=src:openssh,crypto-policies --apt-upgrade crypto- policies -- lxd autopkgtest/ubuntu/resolute/amd64 * This needs a relatively up to date autopkgtest lxd image, if the testbed reboots it will mask the issue * The same crypto-policies and openssh combination should be requested on autopkgtest.ubuntu.com * Smoke test: Run sudo update-crypto-policies and verify that it returns successfully and sets the system policy to DEFAULT [ Where problems could occur ] * If the dep8 test changes itself are wrong, they could mask issues in future test runs. * crypto-policies configures global defaults for core services and packages, so unintended side effects of this change could theoretically break TLS handshakes and essential system tools. [ Other Info ] * The proposed change already exists in other dep8 tests of crypto- policies * This failure was discussed on matrix at https://matrix.to/#/!zVbG2kYqB5rAz72laEmcg7SawLeS297XkMB_ThMJBbA/$DncnQYtSsdcFExxypWh3tc_PDlZpzSPKqn6HCfw7dao?via=ubuntu.com&via=matrix.org&via=matrix.debian.social * This exact issue was fixed for the other dep8 tests in https://bugs.launchpad.net/ubuntu/+source/crypto-policies/+bug/2143545 * I expect this upload to be staged [1]: https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/2150273 ** Affects: crypto-policies (Ubuntu) Importance: Undecided Assignee: Finn Gärtner (finnrg) Status: New ** Affects: crypto-policies (Ubuntu Resolute) Importance: Undecided Assignee: Finn Gärtner (finnrg) Status: New ** Affects: crypto-policies (Ubuntu Stonking) Importance: Undecided Assignee: Finn Gärtner (finnrg) Status: New ** Also affects: crypto-policies (Ubuntu Resolute) Importance: Undecided Status: New ** Also affects: crypto-policies (Ubuntu Stonking) Importance: Undecided Status: New ** Changed in: crypto-policies (Ubuntu Resolute) Assignee: (unassigned) => Finn Gärtner (finnrg) ** Changed in: crypto-policies (Ubuntu Stonking) Assignee: (unassigned) => Finn Gärtner (finnrg) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2169024 Title: [SRU] test-upstream autopkgtest failing for OpenSSH upgrades To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/crypto-policies/+bug/2169024/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
