[SRU] ubuntu-advantage-tools (34 -> 35) Xenial, Bionic, Focal, Jammy, Noble, Oracular
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
ubuntu-advantage-tools (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned | ||
Xenial |
Fix Released
|
Undecided
|
Unassigned | ||
Bionic |
Fix Released
|
Undecided
|
Unassigned | ||
Focal |
Fix Released
|
Undecided
|
Unassigned | ||
Jammy |
Fix Released
|
Undecided
|
Unassigned | ||
Noble |
Fix Released
|
Undecided
|
Unassigned | ||
Oracular |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
[ Impact ]
This release brings both bug-fixes and new features for the Pro Client, and we would like to make sure all of our supported customers have access to these improvements on all releases.
The most important changes are:
- We are introducing API and CLI features that allow users to visualize the CVEs that affects machine.
For the API, we are introducing a new endpoint:
* u.pro.security.
For the CLI commands, we are also introducing two new commands:
* pro cves: Show the CVEs that affects the machine
* pro cve: Show information about a specific CVE
- We are now supporting for pro auto-attach on LXD container/VMs. If the host is attached to a Pro subscription, running pro auto-attach on the LXD container/VM should also attach it to the Pro subscription used by the host.
We are also introducing a configuration that allow user to specify if all LXD container/VMs should auto-attach on boot or not.
[ Test Plan ]
The following development and SRU process was followed:
https:/
The Pro Client developers will be in charge of attaching the artifacts of the appropriate test runs to the bug, and will not mark ‘verification-done’ until this has happened.
[ Where problems could occur ]
In order to mitigate the regression potential of the changes in this version, the results of the integration tests suite runs are attached to this bug.
Other considerations are:
- We are adding new dep8 tests for this Pro release. The main goal of those tests is to spot any problems on python3-apt related changes, as the test rely heavily on that package functionality to work. Those tests could cause package breakages we have not anticipated.
- We have refactored the enforcement of the onlySeries contract directive. This directive states that some contracts should only be valid on certain ubuntu releases. Since a ubuntu release can only really fully change after a reboot, we are now only checking the onlySeries ubuntu release requirement on reboot. Failing to do so would make it possible to attach a machine to a contract in a series it's not entitled to, or to deny a machine that should be able to attach on a specific series. Our integration tests cover the onlySeries scenarios to help checking this works right.
- We are now guaranteeing that our ESM cache exists when a user runs pro security-status. This is not only to guarantee that command display the most accurate information possible, but to avoid apt related warning to show up if the directory doesn't yet exists
- We are creating a new package status for u.pro.packages.
- We saw warning on Noble generated by our apt news feature. That was caused because the _apt user didn't had access to the folder we were storing the apt news content at. We have now changed the directory ownership to the _apt user to silence the warning. We have double checked with the APT team if changing the ownership of the directory would pose a risk of someone else changing the content of APT news, but they stated that this is not a concern.
- We dropped the dependency on python3-
- We bumped the C++ standards to C++17. If this would not be available on older releases, then the apt-hook builds would break. We tested it and it compiles correctly.
[ Other Info ]
Many changes in this release are refactors, test improvements, among other code-quality improvement changes. So there are many commits that don't bring functionality changes.
[ Changelog ]
* d/tests/usage: add more scenarios to dep8 tests
* d/control: drop strict dependency on python3-
* d/rules: add conditional python3-
* New upstream release 35: (LP: #2083973)
- api:
+ new endpoints:
* u.pro.attach.
token
* u.pro.security.
+ u.pro.packages.
+ fixes for u.unattended_
* do not crash when a Unattended-Upgrade config is missing
* do not report unattended-upgrade disabled if any config is false
* report missing Unattended-Upgrade configs as turned off
- apt:
+ always ensure the ESM cache is present (GH: #3132)
+ silence warnings when fetching apt-news (GH: #3209, LP: #2070095)
+ update logging for apt errors (GH: #3299)
+ only run the apt upgrade hook when run as root (LP: #2084677)
- auto-attach:
+ aws: skip operation if no product codes found
+ gcp: add minimal image license codes
- cli:
+ add support for vulnerability commands:
* pro cves: List cves in the machine
* pro cve: Show information about a specific cve
+ deduplicate entries in 'pro help' output (LP: #2091327)
- config: add option lxd_guest_attach to control LXD integration with Pro
- contract:
+ check onlySeries on reboot (GH: #3189)
+ collect cpu type for activity info
- landscape:
+ update message if service not available through Pro (GH: #3331)
- livepatch: do not enable livepatch on wsl (GH: #3156)
- lxd: allow pro auto-attach to work on a LXD container
-- Renan Rodrigo <email address hidden> Thu, 20 Feb 2025 12:00:14 -0300
ubuntu-
* apt-hook: set C++ standards version to c++17 for APT 2.9.30 compatibility
(LP: #2098862)
* tests: remove argparse error tests from unit tests (LP: #2098862)
-- Renan Rodrigo <email address hidden> Wed, 19 Feb 2025 11:53:40 -0300
ubuntu-
* No change rebuild against libapt-pkg7.0.
-- Julian Andres Klode <email address hidden> Mon, 17 Feb 2025 22:47:04 +0100
ubuntu-
* check-versions-
formats
* version.py: bump to 34.1.2
-- Andreas Hasenack <email address hidden> Fri, 04 Oct 2024 17:06:07 -0300
ubuntu-
* Bump version.py.
-- Robie Basak <email address hidden> Fri, 04 Oct 2024 20:34:56 +0100
ubuntu-
* Drop direct dependency on python3-
mismatch (LP: #2083665)
-- Robie Basak <email address hidden> Fri, 04 Oct 2024 17:51:47 +0100
summary: |
- [SRU] ubuntu-advantage-tools (34 -> 35) Xenial, Bionic, Focal, Jammy, - Noble + [SRU] ubuntu-advantage-tools (34 -> 35) Xenial, Bionic, Focal, Jammy, + Noble, Oracular |
tags: | added: block-proposed |
[ Impact ]
This release brings both bug-fixes and new features for the Pro Client, and we would like to make sure all of our supported customers have access to these improvements on all releases.
The most important changes are:
- We are introducing API and CLI features that allow users to visualize the vulnerability issues (CVEs/USNs) that affects machine.
For the API, we are introducing three new endpoints:
* u.pro.security. vulnerabilities .cve.v1: Show the fixable CVEs that affects the machine vulnerabilities .usn.v1: Show the fixable USNs that affects the machine updates_ with_cves. v1: Show the available package updates and the CVEs that these updates would fix
* u.pro.security.
* u.pro.package.
For the CLI commands, we are also introducing three new commands:
* pro vulnerability list: Show the fixable CVEs in the system
* pro vulnerability show: Show information about an affected vulnerability issue in the machine
* pro update: Update the vulnerability data in the machine
All of these commands also support a manifest file as input. Today, the only manifest file format we support is the created by the Pro client through: u.security. package_ manifest. v1
- We are now supporting for pro auto-attach on LXD container/VMs. If the host is attached to a Pro subscription, running pro auto-attach on the LXD container/VM should also attach it to the Pro subscription used by the host.
We are also introducing a configuration that allow user to specify if all LXD container/VMs should auto-attach on boot or not.
- We are introducing several new API endpoints to provide information about Pro:
* u.pro.config.v1: Show the Pro configuration in the machine ion.v1: Show information about the Pro subscription notices. v1: Show the active Pro notices in the machine info.v1: Show the Pro token information list.v1: Show the services provided by Pro
* u.pro.subscript
in the machine
* u.pro.status.
* u.pro.token_
* u.pro.services.
[ Test Plan ]
The following development and SRU process was followed: /wiki.ubuntu. com/UbuntuAdvan tageToolsUpdate s
https:/
The Pro Client developers will be in charge of attaching the artifacts of the appropriate test runs to the bug, and will not mark ‘verification-done’ until this has happened.
[ Where problems could occur ]
In order to mitigate the regression potential of the changes in this version, the results of the integration tests suite runs are attached to this bug.
Other considerations are:
- We are adding new dep8 tests for this Pro release. The main goal of those tests is to spot any problems on python3-apt related changes, as the test rely heavily on that package functionality to work. Those tests could cause package breakages we have not anticipated.
- We have refactored the enforcement of tthe onlySeries contract directice. This directive states that some contracts should only be valid on certain ubuntu releases. Since a ubuntu release can only really fully change after a reboot, we are now only checking the onlySeries ubuntu release requirement on reboot.
- We are now guaranteeing that our ESM cache exis...