Patch filters are not getting applied properly

[Muhammad Ahmad]

After deploying livepatch-server with some patch filters in charm config (sync_flavors, sync_minimum_kernel_version), not all the filters are getting enforced.

If we observe the list of patches downloaded by livepatch-server in postgress/local-storage, we are seeing that it is conforming to 'sync_flavors' filter but not the 'sync_minimum_kernel_version'.

How to reproduce:

1- Deploy livepatch-server with the following charm options:
     sync_flavors=generic
     sync_minimum_kernel_version=5.15.0

2- Run the sync-trigger action:
     livepatch-admin sync trigger --format yaml --wait

3- Using the livepatch-admin CLI, observe that the patches for kernel versions older than 5.15.0 are
   getting downloaded:
     livepatch-admin storage refresh
     livepatch-admin storage patches

This is causing unnecessary patches to be downloaded and wastage of db storage-space/performance.

[Muhammad Ahmad (ahmadfsbd)]

The config in /etc/livepatchd.yaml looks ok but we have patches for older kernel versions getting downloaded:

patch_sync:
  enabled: true
  flavors:
  - generic
  id: ab1867e3-4b8b-4875-8f4a-adee5e44ac18
  interval: 1h
  machine_count_strategy: unit
  minimum_kernel_version: 5.15.0
  proxy:
    enabled: false
  send_machine_reports: false

[Kian Parvin (kian-parvin)]

Hi,

Thanks for the report. Can you let us know the charm version you have deployed with `juju status`.

[Muhammad Ahmad (ahmadfsbd)]

Hi,

livepatch active 1 canonical-livepatch-server latest/stable 39 no ✓ Livepatch server running.

[Kian Parvin (kian-parvin)]

Thanks, looks like the min-kernel-version config parameter is not being passed correctly. Will update here as the fix and QA progresses.

[Kian Parvin (kian-parvin)]

A fix has been released to the latest/stable channel of the Livepatch server charm. The new charm revision is 51.