security unembargoes leads to security.u.c overload because primary archive does not have a copy of the debs

[Jonathan Davies]

When packages are copied from the security P3A to -security, they are copied by a cron-job from -security to -updates (which takes place ~20 minutes later).

It would be desirable if this -updates copy would happen at the same time as the -security copy.

Usually when important security updates go out (such as the kernel and openoffice) - security.u.c becomes over-loaded and I manually force an external mirror push[1] - to divert some of the traffic from security.u.c to the local mirrors themselves.

Unfortunately, because of this delay and bug #36535 - the changes to the Packages.gz take about an hour or so to be published in -updates for this to effectively work.

[1]: https://wiki.ubuntu.com/Mirrors/PushMirroring

[Julian Edwards (julian-edwards)]

Thinking about this more, it's a very Ubuntu-specific thing to be doing directly in Launchpad.

it might be a good idea if the Security team's script did whatever the cron job is doing at the same time it unembargoes the packages. It's a simple pocket-copy operation.

What do you think?

[Robert Collins (lifeless)]

So i think there is a genuine issue here, we shouldn't expire this - though I also lead towards 'security team script should tell LP what to do at the same time' as Julian suggests.

[William Grant (wgrant)]

The security team's scripts do this.