walinuxagent on Ubuntu 25.04 is missing python3-legacycrypt dependency

Bug #2106484 reported by Aleksa Svitlica
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
waagent (Debian)
Fix Released
Unknown
walinuxagent (Ubuntu)
New
Undecided
Unassigned

Bug Description

This is related to: https://bugs.launchpad.net/ubuntu/+source/walinuxagent/+bug/2104189

walinuxagent was updated to expect python3-legacycrypt when the Python version is 3.13 or greater (https://github.com/Azure/WALinuxAgent/pull/3070). python3-legacycrypt is in universe so walinuxagent cannot be updated to depend on it without an MIR.

The upstream fix was still taken (https://code.launchpad.net/~aleksa-svitlica/ubuntu/+source/walinuxagent/+git/walinuxagent/+merge/483698) because it includes a stub implementation which means the package builds and the agent runs without python3-legacycrypt. The agent will raise an error if any functionality relying on python3-legacycrypt is used (like changing your password).

There has been discussion in an upstream PR about the possibility of updating walinuxagent to not rely on python3-legacycrypt: https://github.com/Azure/WALinuxAgent/pull/3141

Related branches

Changed in waagent (Debian):
status: Unknown → New
Changed in waagent (Debian):
status: New → Fix Released
Revision history for this message
John Chittum (jchittum) wrote :

upstream moved to python-crypt-r which provides crypt.crypt. it meant fewer changes on their side.

We run into the same problem -- relying on python-crypt-r means doing an MIR all the way through supported suites (and possibly ESM, will need to sync with security on that. i don't know how they handle agents in ESM).

If we are going to take this route, then we need to get the MIR up now. Or we need to work with the walinuxagent team and create an option _without_ packaging changes.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.