[FFe] Update authd to current version

Bug #2060546 reported by Didier Roche-Tolomelli
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
authd (Ubuntu)
Won't Fix
Undecided
Unassigned

Bug Description

Authd is a new package in noble, in universe.

This package is not shipped by default, we made many improvements and fixes in the current version. We don’t plan to seed it this release, despite the MIR being approved.

Update contains a lot of vendoring updates, and code changes (using a C wrapper to wrap around the Go code in the PAM module to fix some instability), multiple thousands of line due to the C wrapper in particular. The diff itself will not be meaningful.

Part of meaningful fixes are the default group being added and ssh precheck API. Full changelog is available at https://github.com/ubuntu/authd/pull/237/files.

It also fixes a vulnerability by depending on latest Go and latest x/net/http.

This is the code level we are testing and relying on.

summary: - Update authd to current version
+ [FFe] Update authd to current version
description: updated
Revision history for this message
Łukasz Zemczak (sil2100) wrote :

Did you perform a build of the new package somewhere for us to inspect?

Revision history for this message
Łukasz Zemczak (sil2100) wrote :

As per our discussion, +1 on this FFe.

Changed in authd (Ubuntu):
status: New → Triaged
Revision history for this message
Didier Roche-Tolomelli (didrocks) wrote :

We decided to remove the authd package in noble for the time being.

The current implementation (in particular the one in the PAM module) is not up to our standard in terms of quality and what we are confortable to support in the long term. Rather than releasing as is and having risky SRUs in the future changing a large part of the implementation, we decided against this and rather polishing the code, securing it, adding even more tests and releasing all that as a new package SRUed to the 24.04 LTS in the coming months.

That way, we won’t risk to regress any potential users and we will use an architecture we are more confortable supporting for the next 5/10 years of the LTS release.
It means that when we reintroduce it, we will rerequest a new MIR too as the PAM module will largely change and we want to ensure we follow the process and quality standard we expect for the Ubuntu distribution.

Changed in authd (Ubuntu):
status: Triaged → Won't Fix
Revision history for this message
Didier Roche-Tolomelli (didrocks) wrote :

Removing packages from noble:
 authd 0.2.1 in noble
  authd 0.2.1 in noble amd64
  authd 0.2.1 in noble arm64
  authd 0.2.1 in noble armhf
  authd 0.2.1 in noble ppc64el
  authd 0.2.1 in noble riscv64
  authd 0.2.1 in noble s390x
Comment: Removing from noble for now. See the rationale in LP: #2060546
Remove [y|N]? y
1 package successfully removed.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.