Comment 0 for bug 2002861

[Availability]
- The package isc-kea is already in Ubuntu universe.
- The package isc-kea build for the architectures it is designed to work on.
- It currently builds and works for architetcures: amd64, arm64, armhf, ppc64el, riscv64, and s390x
- Link to package [[https://launchpad.net/ubuntu/+source/isc-kea|isc-kea]]

[Rationale]
- The package isc-kea is required in Ubuntu main because isc-dhcp was retired on October 5th, 2022, as described in https://www.isc.org/blogs/isc-dhcp-eol/. ISC now suggests to use their new DHCP software (isc-kea) for DHCP solutions:
  "Network and system administrators deploying DHCP in new environments should look beyond ISC DHCP for a solution, as it would be irresponsible to invest in new deployments of this software which is now end-of-life. Naturally, ISC suggests new users consider our Kea DHCP server".
- The package isc-kea will generally be useful for a large part of our user base
- The package isc-kea is required in Ubuntu main no later than the 23.10 release so we can make sure it is ready and reliable for the next LTS release.

[Security]
- Had 5 security issues in the past
  - https://ubuntu.com/security/CVE-2015-8373
    - Fixed in a previous version as per https://kb.isc.org/docs/aa-01318
  - https://ubuntu.com/security/CVE-2018-5739
    - Fixed in a previous version as per https://kb.isc.org/docs/aa-01626
  - https://ubuntu.com/security/CVE-2019-6472
    - Fixed in a previous version as per https://kb.isc.org/docs/cve-2019-6472
  - https://ubuntu.com/security/CVE-2019-6473
    - Fixed in a previous version as per https://kb.isc.org/docs/cve-2019-6473
  - https://ubuntu.com/security/CVE-2019-6474
    - Fixed in a previous version as per https://kb.isc.org/docs/cve-2019-6474
  - The current bionic version may be affected by the 2019 CVEs.
- no `suid` or `sgid` binaries
- The following binaries are shipped in /usr/sbin/:
  kea-admin package:
    kea-admin
    perfdhcp
  kea-common package:
    kea-lfc
    keactrl
  kea-ctrl-agent package:
    kea-ctrl-agent
    kea-shell
  kea-dhcp-ddns-server package:
    kea-dhcp-ddns
  kea-dhcp4-server package:
    kea-dhcp4
  kea-dhcp6-server package:
    kea-dhcp6
The binaries above do not have suid or sgid bits set and are indeed related to administrative tasks. Hence, these binaries should not cause issues.

- Package does install services, timers or recurring jobs:
  The following services are installed:
    debian/kea-dhcp6-server.service: DHCP server systemd unit
    debian/kea-dhcp4-server.service: DHCP server systemd unit
    debian/kea-dhcp-ddns-server.service: Dynamic DNS service
    debian/kea-ctrl-agent.service: REST API service for DHCP server management
- The DHCPv4 server will listen on port 67 UDP in order to be functional when responding to default DHCPv4 clients.
- Packages does not contain extensions to security-sensitive software (filters, scanners, plugins, UI skins, ...).

[Quality assurance - function/usage]
- The package works well right after install, however, users do need to read the documentation to properly set the DHCP server due to how network specific a proper setup must be. This means that the default configuration does not set any lease or other rules for the DHCP server.

[Quality assurance - maintenance]
- The package is maintained well in Debian/Ubuntu and has not too many and long term critical bugs open
- Ubuntu https://bugs.launchpad.net/ubuntu/+source/isc-kea/+bug
- Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=isc-kea
- The package has important open bugs, namely https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1014929, which does not have a straightforward fix (this is also reported in https://bugs.launchpad.net/ubuntu/+source/isc-kea/+bug/1863100).
- The package does not deal with exotic hardware we cannot support

[Quality assurance - testing]
- The package runs a test suite on build time, if it fails it makes the build fail, link to build log: https://launchpadlibrarian.net/640150940/buildlog_ubuntu-lunar-amd64.isc-kea_2.2.0-1_BUILDING.txt.gz

TODO-A: - The package runs an autopkgtest, and is currently passing on
TODO-A: this TBD list of architectures, link to test logs TBD

- The package does have not failing autopkgtests right now

[Quality assurance - packaging]
- debian/watch is present and works. It also covers the exclusion of development versions by only considering the even minor release numbers, as per the ISC version numbering policy at https://kb.isc.org/docs/aa-00896#kea-updated-as-of-122022
- debian/control defines a correct Maintainer field

- This package does not yield massive lintian Warnings, Errors
- Link to a recent build log of the package: https://launchpadlibrarian.net/640150940/buildlog_ubuntu-lunar-amd64.isc-kea_2.2.0-1_BUILDING.txt.gz
- The output for `lintian --pedantic` is available in a separate comment below
- Lintian overrides are present, but ok because they refer to either false positives or trivial issues for which we would not like to carry patches for (e.g., long lines in source files).

- This package does not rely on obsolete or about to be demoted packages.
- This package has no python2 or GTK2 dependencies

- In the future, the package will be installed by default (replacing isc-dhcp), but it does not ask debconf
  questions higher than medium

- Packaging and build is easy, link to d/rules: https://git.launchpad.net/ubuntu/+source/isc-kea/tree/debian/rules

[UI standards]
- Application is not end-user facing (does not need translation)

[Dependencies]
- Most dependencies are already in main. The only exception is liblog4cplus-2.0.5 (from log4cplus) which is in universe (this is a dependency for the kea-common package).
TODO: its MIR is at TBD

[Standards compliance]
- This package correctly follows FHS and Debian Policy

[Maintenance/Owner]
- Owning Team will be the Server team.
- The Server team is not yet, but will subscribe to the package before promotion
- This does not use static builds
- This does not use vendored code
- This does not use vendored code
- This package is not rust based

- The package successfully built during the most recent test rebuild: https://launchpad.net/ubuntu/+archive/test-rebuild-20221215-lunar-normal/+sourcepub/14230879/+listing-archive-extra

[Background information]
- The Package description explains the package well
- Upstream Name is Kea
- Link to upstream project: https://www.isc.org/kea/, hosted at https://gitlab.isc.org/isc-projects/kea