[RFE] Add feature to control the patches(series) that will be downloaded by canonical-livepatch-server-admin

Bug #1980258 reported by Pedro Victor Lourenço Fragola
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Canonical Livepatch On-Prem
New
Undecided
Unassigned

Bug Description

It is currently not possible to control which patches will be downloaded during the initial livepatch sync.

In many cases customers don't need patches for specific kernel versions and want to limit which patches to download.

The ideal would be to be able to control the sync by Ubuntu series using the canonical-livepatch-server-admin.

Revision history for this message
Gordon Hill (ghill) wrote :

You can specify which flavor on the Charmhub install with eg. juju config livepatch sync_flavors generic.
I would still like to narrow that down further to just the kernel version, like sync_version 5.15.0-*.

Revision history for this message
Gordon Hill (ghill) wrote :

Followup, on canonical-livepatch-server latest/edge rev 30 (charm) and canonical-livepatch-server-admin latest/candidate rev 15 (snap) (requires schema-upgrade on the server), the new supported-kernels feature looks like it can be used to narrow down which kernels are in scope.
The list starts populated, and unfortunately the admin tool does not accept wildcards, but you can trim the list with:
canonical-livepatch-server-admin supported-kernels remove "4.4" amd64 gcp xenial

I wrote a script with three nested for/in loops to remove the excess and now "livepatch-admin supported-kernels list" returns precisely the one kernel that I am using.

This feature does not seem to reach charm config, where it might be expected to be found alongside the earlier sync_flavors setting.

However, running livepatch-admin sync trigger just goes and downloads 5546 of them anyway, so it seems likely that I just do not understand this feature.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.