FFe: Sync freeradius 3.0.21+dfsg-1 (main) from Debian sid (main)

[Oibaf]

Please sync freeradius 3.0.21+dfsg-1 (main) from Debian sid (main)

Explanation of FeatureFreeze exception:
New minor release with some small features and some bug fixes:
https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_0_21
Notable, now freeradius run as unprivileged user.
Backported for testing in my PPA:
https://launchpad.net/~oibaf/+archive/ubuntu/test/+packages?field.name_filter=freeradius&field.status_filter=published&field.series_filter=focal

Changelog entries since current focal version 3.0.20+dfsg-3build1:

freeradius (3.0.21+dfsg-1) unstable; urgency=medium

  [ Bernhard Schmidt ]
  * New upstream version 3.0.21+dfsg
  * Sync freeradius.service with upstream, notable changes
    - run as unprivileged user freerad
    - use RuntimeDirectory (Closes: #954911)
    - set ReadOnlyDirectories to the configuration (Closes: #955206)
    - set some Protect* settings
    - enable reloading the configuration
  * Enable the control-socket site in autopkgtest and attempt a connection
    to validate the fix for #954911
  * Reenable collectd integration, it does not pull in the world anymore
    on sid, thanks to Bernd Zeimetz (Closes: #948996)

  [ Sven Hartge ]
  * d/freeradius.service: Drop manual chown, not necessary

 -- Bernhard Schmidt <email address hidden> Wed, 01 Apr 2020 14:21:17 +0200

[Christian Ehrhardt  (paelzer)]

We are not too far behind) at:
3.0.20+dfsg-3build1
New:
3.0.21+dfsg-1

So the upgrade really just this new version (no others in between).

This really seems mostly a fix release and a good one to have in 20.04 for the reduced permissions.
Thanks for the bug!

The one thing worth to double check was if the collectd enabling pulls in any universe packages.
But it does not, the only thing added is libcrypt1 which is in main already.

+1 from me personally, but still up to the release team to FFe-accept before we can sync it.

[Oibaf (oibaf)]

Indeed. I also suggested syncing collectd in bug 1870339. So we'll also share the same Debian tested config.

[Christian Ehrhardt  (paelzer)]

FYI - blocked by a component mismatch - I'm prepping a merge that avoids this for now.

[Launchpad Janitor (janitor)]

This bug was fixed in the package freeradius - 3.0.21+dfsg-1ubuntu1

---------------
freeradius (3.0.21+dfsg-1ubuntu1) groovy; urgency=medium

  * d/control: Drop collectd integration for being in universe (LP: #1878778)
  * Merging this will also satisfy (LP: #1870340) asking for 3.0.21+dfsg-1

freeradius (3.0.21+dfsg-1) unstable; urgency=medium

  [ Bernhard Schmidt ]
  * New upstream version 3.0.21+dfsg
  * Sync freeradius.service with upstream, notable changes
    - run as unprivileged user freerad
    - use RuntimeDirectory (Closes: #954911)
    - set ReadOnlyDirectories to the configuration (Closes: #955206)
    - set some Protect* settings
    - enable reloading the configuration
  * Enable the control-socket site in autopkgtest and attempt a connection
    to validate the fix for #954911
  * Reenable collectd integration, it does not pull in the world anymore
    on sid, thanks to Bernd Zeimetz (Closes: #948996)

  [ Sven Hartge ]
  * d/freeradius.service: Drop manual chown, not necessary

 -- Christian Ehrhardt <email address hidden> Fri, 15 May 2020 10:27:59 +0200

[Bryce Harrington (bryce)]

Debian has also dropped collectd now (at least for now), in 3.0.21+dfsg-2.

I verified that collectd was the only delta on our end, and so I'll go ahead and sync the package. If Debian returns collectd at some point, then we may need to re-disable it if it hangs in migration again in the future.