Updates panel does not prompt for login when U1 account is invalid/deleted

[Dave Morley]

BACKGROUND:
Finding a way to test upgrade from rtm to vivid for testing data.

STEPS:
1. Flash Ubuntu RTM-proposed to a device
2. Setup accounts for as many things as you can
3. Open the browser view some sites to you have some history
4. Take some photos
5. Add some music and videos
6. Enable developer mode
7. From the pc run adb shell
8. now run sudo system-image-cli --switch devel-proposed

EXPECTED:
I expect everything to still be intact

ACTUAL:
Data is still in place, wifi passwords are still in place.
Accounts are all gone, any apps in a custom tarball gone, access to here apgs gone, any device tarballs improvements that are not forwarded to vivid are gone.

/!\ note this is a general bug and may not be the fault of system-image but it seemed and apt place to start.

[Alberto Mardegan (mardy)]

Just FYI, account data is stored in ~/.config/libaccounts-glib/accounts.db and in ~/config/signon/*.db.

[Alberto Mardegan (mardy)]

I've tried to reproduce this bug, with devel-proposed being at image 78. On rtm-proposed, I created a Twitter account and an U1 account, then I installed podbird from the store and added a couple of podcasts.
After the switch, podbird is still installed, and its podcasts are there; the Twitter account is still there, but the U1 account has been removed. Unfortunately I cannot tell if it was removed after the switch, or if it had been removed even before. But for sure, I didn't remove it myself.
The accounts DB doesn't seem corrupt, and I could create an U1 account after the switch. So, it looks like the U1 account was removed in a clean way, but we don't know why. I'm adding ubuntuone-credentials to this bug, for investigation.

[Barry Warsaw (barry)]

This can't be caused by a bug in the system-image client.

[dobey (dobey)]

I'm pretty sure this was due to the previous signon-apparmor-extension issues which should be fixed now in the latest vivid images. Can you please verify if this is still an issue?

[dobey (dobey)]

OK. So this is somewhat expected behavior under certain conditions. If you have an account created with a version of ubuntuone-credentials prior to 14.04+15.04.20150120 on vivid or 14.04+15.04.20150122~rtm on the RTM image, then that account will not have the "unconfined" ACL needed to work correctly with some more recent updates in signon. With such an account, upgrading to an image which has signon version 8.57+15.04.20150204.1-0ubuntu1 or newer on vivid or 8.57+15.04.20150205~rtm-0ubuntu1 or newer on the RTM image, the existing account will no longer be usable. When opening the Updates panel of System Settings, this will result in the existing account being deleted as it is no longer usable. If you were to browse through the store and install an app, the resolution to this would be fluid and straightforward, as the store scope would cause the signon UI for U1 to pop up and require you to log in again, when you tap the Install or Buy buttons. However, the Updates panel in system-settings does not open this UI, and instead shows a button. The solution here is to fix system-settings to open that UI when the existing token is deleted. We must delete the token and require the user to log in again, as a matter of improved security in the newer images. So, I'm moving this to system-settings.

[Launchpad Janitor (janitor)]

This bug was fixed in the package ubuntu-system-settings - 0.3+15.04.20150220-0ubuntu1

---------------
ubuntu-system-settings (0.3+15.04.20150220-0ubuntu1) vivid; urgency=medium

  [ Sebastien Bacher ]
  * system-update: use the correct right-anchoring so the checking-for-
    updates label is not cut, in some locales (LP: #1421967)

  [ Iain Lane ]
  * Drop old example images from debian/copyright - they aren't shipped
    any more

  [ Rodney Dawes ]
  * Handle the credentialsDeleted signal appropriately. (LP: #1413655)
 -- CI Train Bot <email address hidden> Fri, 20 Feb 2015 14:40:43 +0000