[SRU] Yoga stable releases

[Corey Bryant]

[Impact]

This release comes with bug fixes that we would like to make available to our users.

The following packages come in this set of point releases:

* cinder 20.0.1
* neutron 20.2.0

[Test Case]
The following SRU process was followed:
https://wiki.ubuntu.com/OpenStack/StableReleaseUpdates

In order to avoid regression of existing consumers, the OpenStack team will run their continuous integration test against the packages that are in -proposed. A successful run of all available tests will be required before the proposed packages can be let into -updates.

The OpenStack team will be in charge of attaching the output summary of the executed tests. The OpenStack team members will not mark ‘verification-done’ until this has happened.

[Regression Potential]
In order to mitigate the regression potential, the results of the
aforementioned tests are attached to this bug.

[Discussion]
The new version of neutron has a dependency on another SRU for pyroute2: https://bugs.launchpad.net/cloud-archive/+bug/1985097

[Corey Bryant (corey.bryant)]

Packages have been uploaded to the jammy unapproved queue.

[Brian Murray (brian-murray)]

Hello Corey, or anyone else affected,

Accepted neutron into jammy-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/neutron/2:20.2.0-0ubuntu1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed-jammy to verification-done-jammy. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-jammy. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

[Brian Murray (brian-murray)]

Hello Corey, or anyone else affected,

Accepted cinder into jammy-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/cinder/2:20.0.1-0ubuntu1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed-jammy to verification-done-jammy. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-jammy. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

[Corey Bryant (corey.bryant)]

Hello Corey, or anyone else affected,

Accepted cinder into yoga-proposed. The package will build now and be available in the Ubuntu Cloud Archive in a few hours, and then in the -proposed repository.

Please help us by testing this new package. To enable the -proposed repository:

  sudo add-apt-repository cloud-archive:yoga-proposed
  sudo apt-get update

Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-yoga-needed to verification-yoga-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-yoga-failed. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

[Corey Bryant (corey.bryant)]

Hello Corey, or anyone else affected,

Accepted neutron into yoga-proposed. The package will build now and be available in the Ubuntu Cloud Archive in a few hours, and then in the -proposed repository.

Please help us by testing this new package. To enable the -proposed repository:

  sudo add-apt-repository cloud-archive:yoga-proposed
  sudo apt-get update

Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-yoga-needed to verification-yoga-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-yoga-failed. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

[Corey Bryant (corey.bryant)]

Regression testing on jammy-proposed was successful:

====== Totals
======
Ran: 182 tests in 1729.6235 sec.
 - Passed: 167
 - Skipped: 12
 - Expected Fail: 0
 - Unexpected Success: 0
 - Failed: 3
Sum of execute time for each test: 591.1904 sec.

Note the 3 failures are known policy issues that are unrelated.

[Corey Bryant (corey.bryant)]

Regression testing on yoga-proposed was successful:

====== Totals
======
Ran: 182 tests in 1499.8790 sec.
 - Passed: 167
 - Skipped: 12
 - Expected Fail: 0
 - Unexpected Success: 0
 - Failed: 3
Sum of execute time for each test: 481.2716 sec.

Note the 3 failures are known policy issues that are unrelated.

[Robie Basak (racb)]

> Regression testing on jammy-proposed was successful

Which package versions of neutron and/or cinder were used, please? How can we be sure that the specific versions being tracked by this bug were used?

I'd appreciate it if this information were in your automated output, to save us both time!

[Corey Bryant (corey.bryant)]

The versions that were tested in jammy-proposed are:
neutron: 2:20.2.0-0ubuntu1
cinder: 2:20.0.1-0ubuntu1

The versions that were tested in yoga-proposed are:
neutron: 2:20.2.0-0ubuntu1~cloud0
cinder: 2:20.0.1-0ubuntu1~cloud0

[Launchpad Janitor (janitor)]

This bug was fixed in the package neutron - 2:20.2.0-0ubuntu1

---------------
neutron (2:20.2.0-0ubuntu1) jammy; urgency=medium

  * New stable point release for OpenStack Yoga (LP: #1985084).
  * d/control: Ensure pyroute2 (Build-)Depends includes
    NetlinkDumpInterrupted exception.

 -- Corey Bryant <email address hidden> Thu, 11 Aug 2022 09:13:32 -0400

[Łukasz Zemczak (sil2100)]

The verification of the Stable Release Update for cinder has completed successfully and the package is now being released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions.

[Launchpad Janitor (janitor)]

This bug was fixed in the package cinder - 2:20.0.1-0ubuntu1

---------------
cinder (2:20.0.1-0ubuntu1) jammy; urgency=medium

  * d/gbp.conf: Create stable/yoga branch.
  * New stable point release for OpenStack Yoga (LP: #1985084).

 -- Corey Bryant <email address hidden> Thu, 11 Aug 2022 13:54:57 -0400

[Nobuto Murata (nobuto)]

The neutron update to jammy actually broke the package installation. It has to be released at the same timing with pyroute2 package, but only neutron one has been released to jammy:
https://bugs.launchpad.net/ubuntu/+source/pyroute2/+bug/1985097

> 2022-09-06 03:38:38.400517 | focal-medium | 2022-09-06 03:38:38 [ERROR] unit-neutron-api-0.log: 2022-09-06 03:35:45 DEBUG unit.neutron-api/0.install logger.go:60 Some packages could not be installed. This may mean that you have
> 2022-09-06 03:38:38.400723 | focal-medium | 2022-09-06 03:38:38 [ERROR] unit-neutron-api-0.log: 2022-09-06 03:35:45 DEBUG unit.neutron-api/0.install logger.go:60 requested an impossible situation or if you are using the unstable
> 2022-09-06 03:38:38.400929 | focal-medium | 2022-09-06 03:38:38 [ERROR] unit-neutron-api-0.log: 2022-09-06 03:35:45 DEBUG unit.neutron-api/0.install logger.go:60 distribution that some required packages have not yet been created
> 2022-09-06 03:38:38.401136 | focal-medium | 2022-09-06 03:38:38 [ERROR] unit-neutron-api-0.log: 2022-09-06 03:35:45 DEBUG unit.neutron-api/0.install logger.go:60 or been moved out of Incoming.
> 2022-09-06 03:38:38.401402 | focal-medium | 2022-09-06 03:38:38 [ERROR] unit-neutron-api-0.log: 2022-09-06 03:35:45 DEBUG unit.neutron-api/0.install logger.go:60 The following information may help to resolve the situation:
> 2022-09-06 03:38:38.401688 | focal-medium | 2022-09-06 03:38:38 [ERROR] unit-neutron-api-0.log: 2022-09-06 03:35:45 DEBUG unit.neutron-api/0.install logger.go:60
> 2022-09-06 03:38:38.401924 | focal-medium | 2022-09-06 03:38:38 [ERROR] unit-neutron-api-0.log: 2022-09-06 03:35:45 DEBUG unit.neutron-api/0.install logger.go:60 The following packages have unmet dependencies:
> 2022-09-06 03:38:38.402137 | focal-medium | 2022-09-06 03:38:38 [ERROR] unit-neutron-api-0.log: 2022-09-06 03:35:45 DEBUG unit.neutron-api/0.install logger.go:60 python3-neutron : Depends: python3-pyroute2 (>= 0.6.4-3ubuntu1~) but 0.6.4-3 is to be installed
> 2022-09-06 03:38:38.402362 | focal-medium | 2022-09-06 03:38:38 [ERROR] unit-neutron-api-0.log: 2022-09-06 03:35:45 WARNING unit.neutron-api/0.install logger.go:60 E: Unable to correct problems, you have held broken packages.

[Corey Bryant (corey.bryant)]

This bug was fixed in the package neutron - 2:20.2.0-0ubuntu1~cloud0
---------------

 neutron (2:20.2.0-0ubuntu1~cloud0) focal-yoga; urgency=medium
 .
   * New upstream release for the Ubuntu Cloud Archive.
 .
 neutron (2:20.2.0-0ubuntu1) jammy; urgency=medium
 .
   * New stable point release for OpenStack Yoga (LP: #1985084).
   * d/control: Ensure pyroute2 (Build-)Depends includes
     NetlinkDumpInterrupted exception.

[James Page (james-page)]

The verification of the Stable Release Update for cinder has completed successfully and the package has now been released to -updates. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions.

[James Page (james-page)]

This bug was fixed in the package cinder - 2:20.3.1-0ubuntu1.4~cloud0
---------------

 cinder (2:20.3.1-0ubuntu1.4~cloud0) focal; urgency=medium
 .
   * SECURITY UPDATE for Ubuntu Cloud Archive. backport to focal.
 .
 cinder (2:20.3.1-0ubuntu1.4) jammy-security; urgency=medium
 .
   * SECURITY UPDATE: Arbitrary file access via custom QCOW2 external data
     (LP: #2059809)
     - debian/patches/CVE-2024-32498.patch: check for external qcow2 data
       file.
     - debian/control: added qemu-utils to Build-Depends so qemu-img is
       available for new tests.
     - CVE-2024-32498
 .
 cinder (2:20.3.1-0ubuntu1.2) jammy; urgency=medium
 .
   [ Jorge Merlino ]
   * Increase size of volume image metadata values to 65535 bytes
     (LP: #1988942)
 .
   [ Heather Lemon ]
   * Start cinder-volume.service after tgt.service started (LP: #1987663)
     - d/cinder-volume.service.conf: drop-in with 'After=' and 'Wants='
       ('Wants=' is not generated by pkgos-gen-systemd-unit currently).
     - d/cinder-volume.install: ship the systemd service drop-in file.
 .
   [ Seyeong Kim ]
   * HPE3PAR: Failing to clone a volume having children (LP: #1994521):
     - d/p/0001-HPE-3PAR-Fix-umanaged-volumes-snapshots-missing.patch
     - d/p/0002-3PAR-Error-out-if-vol-cannot-be-converted-to-base.patch
     - api 4.0.17 is added as it is in the middle of the main patch
       (4.0.18)
 .
 cinder (2:20.3.1-0ubuntu1.1) jammy; urgency=medium
 .
   * Revert driver assisted volume retype (LP: #2019190):
     - d/p/0001-Revert-Driver-assisted-migration-on-retype-when-it-s.patch
 .
 cinder (2:20.3.1-0ubuntu1) jammy; urgency=medium
 .
   * New stable point release for OpenStack Yoga (LP: #2037332).
 .
 cinder (2:20.3.0-0ubuntu1) jammy; urgency=medium
 .
   * New stable point release for OpenStack Yoga (LP: #2025503).
   * d/p/CVE-2023-2088.patch: Dropped. Fixed in point release.
 .
 cinder (2:20.2.0-0ubuntu1.1) jammy-security; urgency=medium
 .
   * SECURITY UPDATE: Unauthorized File Access (LP: #2021980)
     - debian/patches/CVE-2023-2088.patch: Reject unsafe delete
       attachment calls.
     - CVE-2023-2088
 .
 cinder (2:20.2.0-0ubuntu1) jammy; urgency=medium
 .
   * New stable point release for OpenStack Yoga (LP: #2019759).
   * d/p/lp1945500.patch: Dropped. Fixed in stable point release.
 .
 cinder (2:20.1.0-0ubuntu2.2) jammy-security; urgency=medium
 .
   * SECURITY REGRESSION: Regressions in other projects (LP: #2020111)
     - debian/patches/series: Do not apply CVE-2023-2088.patch until
       patches are ready for all upstream OpenStack projects.
     - CVE-2023-2088
 .
 cinder (2:20.1.0-0ubuntu2.1) jammy-security; urgency=medium
 .
   * SECURITY UPDATE: Unauthorized File Access
     - debian/patches/CVE-2023-2088.patch: Reject unsafe delete
       attachment calls.
     - CVE-2023-2088
 .
 cinder (2:20.1.0-0ubuntu2) jammy; urgency=medium
 .
   * d/p/lp1945500.patch: Filter reserved image properties (LP: #1945500).
 .
 cinder (2:20.1.0-0ubuntu1) jammy; urgency=medium
 .
   * New stable point release for OpenStack Yoga (LP: #2004030).
 .
 cinder (2:20.0.1-0ubuntu1) jammy; urgency=medium
 .
   * d/gbp.conf: Create stable/yoga branch.
   * New stable point r...