dwarves-dfsg from updates is required to build security updates of kernels please release dwarves-dfsg to security

[Dimitri John Ledkov]

dwarves-dfsg from updates is required to build security updates of kernels please release dwarves-dfsg to security

Please publish dwarves-dfsg focal-updates 1.21-0ubuntu1~20.04 to focal-security

Please publish dwarves-dfsg bionic-updates 1.21-0ubuntu1~18.04 to bionic-security

[Seth Arnold (seth-arnold)]

Given the conversations in:

- https://bugs.launchpad.net/ubuntu/+source/dwarves-dfsg/+bug/1951438
- https://bugs.launchpad.net/ubuntu/+source/dwarves-dfsg/+bug/1912811

I think it'd be nice to have a better idea of what has changed, why it is necessary now, how these have been tested in -updates in the last nine-ish months, etc.

(perhaps you've already had this conversation and I'm unaware of it, in which case sorry for the trouble; I'm throwing in questions I think I'd ask if I were the one to do the lever-pulling, in an attempt to reduce conversation round-trips.)

Thanks

[Dimitri John Ledkov (xnox)]

As you have seen in the above conversations, libbpf was not updated in the SRUs. Instead dwarves-dfsg was SRUed with a vendored copy of libbpf statically linked, such that only it uses updated libbpf as it expects latest one.

The package from -updates was binary copied into build-depends PPA used to build all kernels since forever, and all kernels that we have build for -security pocket have been using dwarves-dfsg from -updates effectively.

However, it means locally users cannot rebuild src:linux package in a local chroot with release & -security suites alone.

The tooling is end-developer targeted one, and the only/primary users of it are people working with kernel bpf. And most likely they are using the up to date version from -updates already.

Please binary copy / release dwarves-dfsg from -updates to -security to allow users to rebuild kernels locally against the -security pocket only.