SRU of LXD 3.0.3

[Stéphane Graber]

LXD upstream released LXD 3.0.3 as a bugfix release with following changelog:

 - doc: add note about ignoring mount options
 - shared/idmap: test fcaps support
 - Add a few missing rows.Close() calls
 - lxd/patches: Profiles are in the cluster db
 - lxd/storage/ceph: Only freeze container if running
 - lxc: Only target if --target is passed
 - shared: Return decompressor in DetectCompression
 - lxd/containers: Don't return nil on Storage calls
 - tests: Fix mode of proxy.sh
 - shared/api: Don't re-define fields
 - lxd/storage/btrfs: Fix clearing quotas
 - lxd/containers: Also use apply_quota for CEPH
 - lxd/containers: Simplify and fix pool update logic
 - Add NodeIsOutdated() db API to check is a node is outdated
 - Trigger whatever is in the LXD_CLUSTER_UPDATE var is node is outdated
 - lxd/images: Add missing cleanup code
 - lxd/containers: Fix bad function name
 - tests: Avoid err == nil pattern
 - lxd: Don't mask database errors
 - Honor the CC environment variable when invoking go install
 - client: Avoid err == nil pattern
 - lxd/profiles: Don't list snapshots in UsedBy
 - Make database queries timeout after 10s if cluster db is unavail
 - tests: Fix pki with newer easyrsa
 - lxd/db: Fix internal DB test
 - doc: Fix and improve the description
 - operations: return true if operation is done before timeout
 - lxd/containers: Avoid root device name conflict
 - lxd/import: Add root disk if needed
 - global: Advertise rsync features
 - lxd/db: Use NoSuchObject consistently
 - proxy: Only log errors
 - lxd/import: Don't delete container on import failure
 - i18n: Update translation templates
 - Support --domain flag for lxc remote
 - Add configurable macaroon expiry
 - Support Candid domain validation
 - Update Candid docs
 - Update i18n
 - lxd: Rename API endpoints
 - network_linux: add netns_getifaddrs()
 - main_checkfeature: check kernel for netnsid support
 - network: add NetworkGetCounters()
 - container_lxc: switch to NetnsGetifaddrs()
 - shared: Add network state API
 - api: Add extended cluster join API
 - lxd/init: Fix struct conflict
 - lxc: Identify snapshots when listed
 - shared/version: Support detecting ChromeOS versions
 - lxd/containers: Force bring up of SRIOV parent
 - netns_getifaddrs: fix argument passing
 - netnsid_getifaddrs: fix check for netnsid support
 - doc: Fix storage API endpoints
 - container_lxc: handle network retrieval smarter
 - shared: Add storage volume snapshot support
 - client: Add storage volume snapshot support
 - netns_getifaddrs: don't print useless info
 - shared/api: Fix StorageVolumeSource struct
 - Makefile: Set LDFLAGS for dqlite
 - lxd: Fix handling of CGroup-V2 systems
 - tree-wide: pass -std=gnu11 -Wvla
 - lxd/containers: Rework exec FD handling
 - Added optional ?target=<member> to /containers POST documentation
 - lxd/storage/lvm: Don't un-necessarily start/stop storage
 - lxd/storage/ceph: Don't un-necessarily mount snapshots
 - lxd/containers: Fix cleanup on create failure
 - shared/network: Don't crash on VPN devices
 - lxd/containers: Fix bad nvidia information parsing
 - netns_getifaddrs: fix network stats retrieval
 - network: Fix counters on non-ethernet interfaces
 - doc: Add configuration for readthedocs
 - storage: Fix error strings
 - lxd/storage/btrfs: Don't fail deleting pools on misisng disk
 - Split code in 2 seperate files
 - network: provide #ifdefs for RTM_* requests
 - Document LVM support for storage quotas
 - candid: Cleanup code a bit
 - network: fix netns_get_nsid() signature
 - apparmor: Allow cgroupv2 in cgns
 - candid: Fix client when using https candid server
 - lxd-p2c: Fix static build
 - config: Add support for PEM encrypted keys
 - lxc: Setup password helper
 - lxc/config: Only setup needed connection args
 - lxc/config: More TLS optimizations
 - i18n: Update translation templates
 - macro: add SOL_NETLINK
 - macro: add NETLINK_DUMP_STRICT_CHK
 - netns_ifaddrs: check for NETLINK_DUMP_STRICT_CHK
 - Fix Potential Event Race
 - devices: Fix bad disk limits
 - Fix root disk limits on container startup
 - checkfeature: Rework structure
 - checkfeature: simplify is_netnsid_aware() check
 - checkfeature: Avoid double line break
 - checkfeature: dial logging down from to debug
 - lxc/progress: Add terminal detection
 - doc: Rework backup documentation
 - client: Add GetNetworkState
 - client: Add extended cluster join API
 - client: Add UseProject
 - shared/api: Add projects
 - client: Add support for projects
 - lxc/config: Add support for projects
 - Change query.SelectObjects signature to support a prepared statement
 - Add query.SelectURIs convenience for getting API resource URIs
 - Add cluster statements registry
 - api: Add Project.Config reference
 - Improve some error messages around container creation
 - Lookup for the "target" API parameter only in the URL query string
 - Automatically add ?project=x query param to image server
 - Improve error reporting when creating a container
 - Change ContainerStorageRead() to take a container object instead of its name
 - Improve error messages around LVM volume creation
 - Change Storage.ContainerUmount to accept a container vs a container name
 - lxd/init: Update for current client package
 - lxc/progress: Don't print empty lines
 - candid: Improve domain validation and pubkey
 - lxd/images: Fix parsing of public property
 - client: Always use the "do()" wrapper
 - client: Fix URLs with missing project/target
 - Improve error messages
 - lxd/containers: Fix cluster shutdown
 - i18n: Update Japanese translation
 - idmap: use global variable for vfs3 fcaps support
 - checkfeature: check for vfs3 fscaps support
 - lxd/db: Fix bad limits.cpu
 - shared: Add limits.cpu validator
 - doc: add the appropriate titles to some documents
 - shared/network: Allow TLS1.3
 - global: Implement LXD_INSECURE_TLS env variable
 - netns_getifaddrs: simplify
 - Fix bad check for recursive mounts
 - Prevent event listeners from lying around even after Disconnect()
 - client: Support creating project-bound container using an image on another node
 - client: Filter lifecycle and operations events by project
 - client: Make container backups code honor projects
 - client: Make GET /profiles return only profiles for the project
 - Bump Go versions and use '.x' to always get latest patch versions
 - Update build instruction
 - doc: Bump to 1.10 or higher everywhere
 - Don't expire lxd.log by accident
 - lxd/storage: Fix importing preseed dump
 - lxd/migration: Use current idmap instead of next
 - lxd/db: Send raft/dqlite logging to debug
 - lxd/daemon: Clarify early loggging
 - checkfeature: Don't log error on missing feature
 - lxd/daemon: Improve logging of inherited fds
 - shared/logging: Improve logfile output
 - lxd/daemon: Don't mention MAAS unless configured
 - exec: Expose command, env and mode in metadata
 - client: Fix cancelation of image download
 - Detect and shrink large boltdb files
 - lxd/daemon: Fix build
 - loop: retry on EBUSY
 - lxd/storage: Improve loop device errors
 - lxd/containers: Detect root disk pool changes
 - doc: Update cloud-init network documentation
 - client: Fix error handling in operations
 - lxd/containers: Prevent duplicate profiles
 - lxc/copy: --container-only is meaningless for snapshots
 - shared/api: Add support for incremental container copy
 - client: Add support for incremental container copy
 - doc: Add kernel.keys.maxkeys to production-setup
 - lxd/storage/dir: Don't fail when quota are set
 - lxd: Handle AppArmor policy cache directory
 - test: Support AppArmor policy cache directory
 - lxd/containers: Respect optional=true for disks
 - use empty usb vendorid to pass through all usb devices
 - doc: Add usb_optional_vendorid API extension
 - lxc/image: Fix rootfs file handling on snap
 - lxd/containers: Properly clear static leases
 - shared/api: Support copy between projects
 - client: Support copy between projects
 - lxc/config: Allow overriding the current project
 - rsync: Tweak transfer options (delete & compress)
 - lxd/daemon: Improve logging of kernel features
 - lxd: Register background tasks as operations
 - lxc: Switch all progress op handling to cancelable
 - Increase go-dqlite client timeout when not-clustered
 - lxd: Rework task handling
 - lxd/migration: Fix CRIU rsync option negotiation
 - lxd/storage/btrfs: Tweak errors
 - lxd/init: Better handle disk sizes
 - lxd/db: Avoid un-needed query on container move
 - i18n: Update translation templates
 - Add StorageVolumeIsAvailable to check if a Ceph volume can be attached
 - Wire StorageVolumeIsAvailable to containerValidDevices
 - Add integration test

Just like Ubuntu itself, upstream releases long term support releases, as is 3.0 and then periodic point releases including all the accumulated bugfixes.

Only the latest upstream release gets full support from the upstream developers, everyone else is expected to first update to it before receiving any kind of support.

This should qualify under the minor upstream bugfix release allowance of the SRU policy, letting us SRU this without paperwork for every single change included in this upstream release.

Once the SRU hits -updates, we will be backporting this to xenial-backports as well, making sure we have the same version everywhere.

[Stéphane Graber (stgraber)]

Uploaded to bionic

[Brian Murray (brian-murray)]

Hello Stéphane, or anyone else affected,

Accepted lxd into bionic-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/lxd/3.0.3-0ubuntu1~18.04.1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested and change the tag from verification-needed-bionic to verification-done-bionic. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-bionic. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

[Stéphane Graber (stgraber)]

Tested the upgrade on a running system, containers weren't restarted as part of the upgrade (expected), new containers after upgrade worked properly and containers worked as expected post-reboot.

[Launchpad Janitor (janitor)]

This bug was fixed in the package lxd - 3.0.3-0ubuntu1~18.04.1

---------------
lxd (3.0.3-0ubuntu1~18.04.1) bionic; urgency=medium

  * New upstream bugfix release (LP: #1804876)
    - doc: add note about ignoring mount options
    - shared/idmap: test fcaps support
    - Add a few missing rows.Close() calls
    - lxd/patches: Profiles are in the cluster db
    - lxd/storage/ceph: Only freeze container if running
    - lxc: Only target if --target is passed
    - shared: Return decompressor in DetectCompression
    - lxd/containers: Don't return nil on Storage calls
    - tests: Fix mode of proxy.sh
    - shared/api: Don't re-define fields
    - lxd/storage/btrfs: Fix clearing quotas
    - lxd/containers: Also use apply_quota for CEPH
    - lxd/containers: Simplify and fix pool update logic
    - Add NodeIsOutdated() db API to check is a node is outdated
    - Trigger whatever is in the LXD_CLUSTER_UPDATE var is node is outdated
    - lxd/images: Add missing cleanup code
    - lxd/containers: Fix bad function name
    - tests: Avoid err == nil pattern
    - lxd: Don't mask database errors
    - Honor the CC environment variable when invoking go install
    - client: Avoid err == nil pattern
    - lxd/profiles: Don't list snapshots in UsedBy
    - Make database queries timeout after 10s if cluster db is unavail
    - tests: Fix pki with newer easyrsa
    - lxd/db: Fix internal DB test
    - doc: Fix and improve the description
    - operations: return true if operation is done before timeout
    - lxd/containers: Avoid root device name conflict
    - lxd/import: Add root disk if needed
    - global: Advertise rsync features
    - lxd/db: Use NoSuchObject consistently
    - proxy: Only log errors
    - lxd/import: Don't delete container on import failure
    - i18n: Update translation templates
    - Support --domain flag for lxc remote
    - Add configurable macaroon expiry
    - Support Candid domain validation
    - Update Candid docs
    - Update i18n
    - lxd: Rename API endpoints
    - network_linux: add netns_getifaddrs()
    - main_checkfeature: check kernel for netnsid support
    - network: add NetworkGetCounters()
    - container_lxc: switch to NetnsGetifaddrs()
    - shared: Add network state API
    - api: Add extended cluster join API
    - lxd/init: Fix struct conflict
    - lxc: Identify snapshots when listed
    - shared/version: Support detecting ChromeOS versions
    - lxd/containers: Force bring up of SRIOV parent
    - netns_getifaddrs: fix argument passing
    - netnsid_getifaddrs: fix check for netnsid support
    - doc: Fix storage API endpoints
    - container_lxc: handle network retrieval smarter
    - shared: Add storage volume snapshot support
    - client: Add storage volume snapshot support
    - netns_getifaddrs: don't print useless info
    - shared/api: Fix StorageVolumeSource struct
    - Makefile: Set LDFLAGS for dqlite
    - lxd: Fix handling of CGroup-V2 systems
    - tree-wide: pass -std=gnu11 -Wvla
    - lxd/containers: Rework exec FD handling
    - Added optional ?target=<member> to /containers POST documentation
    - lxd/storage/lvm: Don't un-necessarily start/stop storage
    - lxd/storage/ceph: Don'...

[Stéphane Graber (stgraber)]

The verification of the Stable Release Update for lxd has completed successfully and the package has now been released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions.