[MIR] ubuntu-image

Bug #1687131 reported by Steve Langasek
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
pyparted (Ubuntu)
Fix Released
Undecided
Unassigned
ubuntu-image (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

livecd-rootfs now depends on ubuntu-image, which therefore should be promoted to main.

ubuntu-image is maintained by the Ubuntu Foundations team as upstream. The package already has an SRU exception, <https://wiki.ubuntu.com/UbuntuImageUpdates>, and is kept in sync across stable releases from 16.04 on as well as being available as a snap.

autopkgtests and upstream CI are in place for this package.

foundations-bugs is subscribed to the package and there is no CVE history. The software interacts with local files as a non-privileged user and presents a narrow security attack surface. It delegates security-sensitive operations (cryptographic verification, etc) to 'snap prepare-image' from the snapd package, already in main.

ubuntu-image also pulls in pyparted as a dependency. pyparted is a thin wrapper around libparted, already in main. It is in sync with Debian from 14.04 on and has no open bug reports in Debian; the only bug reports open in Ubuntu are those reported by the ubuntu-image team. Upstream project: https://github.com/rhinstaller/pyparted no major issues open upstream.

No security issues reported at http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=pyparted or http://people.canonical.com/~ubuntu-security/cve/universe.html

Revision history for this message
Steve Langasek (vorlon) wrote :

I am pre-promoting these packages in order to unblock migration of livecd-rootfs and automated image building for artful.

description: updated
Revision history for this message
Mathieu Trudel-Lapierre (cyphermox) wrote :

ubuntu-image looks fine, but should be fixed so the tests are passing and not coming up with errors (as right now one doesn't know if the tests are broken and not really passing, or if they are passing and udevadm is unnecessary):

[...]
test_make_disk_with_bare_parts (ubuntu_image.tests.test_builder.TestModelAssertionBuilder) ... sh: 1: udevadm: not found
sh: 1: udevadm: not found
ok
[...]

Otherwise it looks fine to me, there's a bug subscriber, etc. MIR approved.

Changed in ubuntu-image (Ubuntu):
status: New → Fix Committed
Revision history for this message
Mathieu Trudel-Lapierre (cyphermox) wrote :

pyparted has a bunch of tests and they should really be run as part of the build; I've filed bug 1695058 about this. I would consider it a blocker until the situation is properly assessed. If analysis shows running the tests is impractical (or they're all broken wholesale), then we can revisit.

Revision history for this message
Mathieu Trudel-Lapierre (cyphermox) wrote :

pyparted tests are now run, I did a quick re-review of the package. MIR approved.

Changed in pyparted (Ubuntu):
status: New → Fix Committed
Revision history for this message
Steve Langasek (vorlon) wrote :

pyparted was pre-promoted already, so closing.

Changed in pyparted (Ubuntu):
status: Fix Committed → Fix Released
Changed in ubuntu-image (Ubuntu):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.