Re: Tuesday Bug Triage Report (2022-09-27)

2022-09-28 Thread Robie Basak
Well done on your first triage, and good job with writing up the report.
It's particularly valuable as it enables wider feedback on this list.

On Wed, Sep 28, 2022 at 10:08:58AM +0200, Michał Małoszewski wrote:
> *https://pad.lv/1980466  - (Confirmed)
>  [mysql-8.0]- mysql_secure_installation can not set root
> password and end…*
> Here I was very careful when I've noticed that it's mysql issue. I have
> added workaround for it in the comment sections.
> @Robie Basak , @Lena Voytek
>  could you take a look at this bug and maybe
> suggest or prompt if there is a way to improve the workaround or the
> solution in general.

I don't think running mysql_secure_installation makes sense on Ubuntu
(or Debian) - certainly not straight after installation - because
package maintainer scripts arrange to set secure defaults themselves.
Setting a root password reduces security because by default only Unix
socket authentication is permitted, which is guaranteed, rather than
relying on a secret that could be guessed or brute forced.

However I can understand how a user, guided by upstream or external
docs, would think that's an appropriate step that should be followed,
then see it fail, and then think that there's a bug. That's a poor UX,
and a poor UX is a valid bug.

I wonder if we should perhaps stop shipping mysql_secure_installation
entirely? Or, if it does something useful that someone might want to
run, then what can be adjusted to make this a better UX for users who
fall into this trap? This might be worth discussing with upstream.

> *https://pad.lv/1990863  - (New)
> [openssh]  - conversion from sshd service to socket is too
> bumpy*
> Here I didn't comment that one because I was unsure about it. I mean: I
> think that this person should list the steps to reproduce it easily apart
> from writing the scope of the problem.
> Honestly, in my opinion that description is a bit overwhelming.
> Lucas asked for more information, especifically their changes in the config
> file so we can better investigate the upgrade path they are going through.

I'm familiar with this. Steve is working on the move to socket
activation, so I commented and also subscribed Steve.


signature.asc
Description: PGP signature
-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam

Re: Tuesday Bug Triage Report (2022-09-27)

2022-09-28 Thread Miriam Espana Acebal
Congrats on your first Triage Report, Michał!

On Wed, Sep 28, 2022 at 10:10 AM Michał Małoszewski <
michal.maloszew...@canonical.com> wrote:

> Hi all,
>
> Here is my first triage report.
> I've added my comment to each bug url below to show you my way of thinking
> and that the results didn't come out of the blue.
> My report's been reviewed by Lucas, who was in charge of the bug triage
> that day.
>
> Bugs last updated on 2022-09-26 (Monday)
> Date range identified as: "Tuesday triage"
> Found 7 bugs
>
> *https://pad.lv/1978064  - +(Confirmed)
>  [libvirt]   - [Libvirt} IceLake CPU model not
> recognized*
> So here, Lena takes care of that bug and the last comment has been added
> +- 13 hours ago.
> The status in each release is marked well. (The comments show it)
> Nothing to add here.
>
> *https://pad.lv/1983605  - *+(Triaged)
> [exim4]  - exim4 autopkgtest failure on ppc64el*
> The bug verified by Sergio and last comment from Bryce some hours ago. I
> have nothing to add here.
>
> *https://pad.lv/1990668  - +(Incomplete)
> [python-oauthlib]   - package python3-oauthlib 3.2.0-1ubuntu0.1 failed
> to install…*
> I have nothing to add here. Bug reported 4 days ago by Luis Rodriguez and
> it was checked by Sergio. Waiting for feedback.
>
> *https://pad.lv/1980466  - (Confirmed)
>  [mysql-8.0]- mysql_secure_installation can not set root
> password and end…*
> Here I was very careful when I've noticed that it's mysql issue. I have
> added workaround for it in the comment sections.
> @Robie Basak , @Lena Voytek
>  could you take a look at this bug and maybe
> suggest or prompt if there is a way to improve the workaround or the
> solution in general.
>
> *https://pad.lv/1982727  - *(Won't Fix)
>  [iotop]- IOTOP can not work due to
> CONFIG_TASK_DELAY_ACCT not enable…*
> (I take care of that bug and I have added comment from my recent status)
>
> *https://pad.lv/1990853  - (New)
> [libvirt]   - uvt-kvm: error: libvirt: Requested
> operation is not valid: …*
> This bug reporter seems to be really self-confident and his karma is
> really high. So honestly what I would do here is to try to reproduce what
> he has written and think about new steps or ping someone who is experienced
> in that kind of things.
> Lucas reproduced the bug and added a comment there with more detailed
> steps. Also a new task for uvtool was added by Lucas and marked as Triaged.
> Bug added to our backlog.
>
> *https://pad.lv/1990863  - (New)
> [openssh]  - conversion from sshd service to socket is too
> bumpy*
> Here I didn't comment that one because I was unsure about it. I mean: I
> think that this person should list the steps to reproduce it easily apart
> from writing the scope of the problem.
> Honestly, in my opinion that description is a bit overwhelming.
> Lucas asked for more information, especifically their changes in the
> config file so we can better investigate the upgrade path they are going
> through.
>
> Best Regards,
> Michał Małoszewski
> --
> ubuntu-server mailing list
> ubuntu-server@lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
> More info: https://wiki.ubuntu.com/ServerTeam



-- 
Miriam España Acebal
Software Engineer I - Ubuntu PublicCloud/Server
Canonical Ltd.
-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam

Tuesday Bug Triage Report (2022-09-27)

2022-09-28 Thread Michał Małoszewski
Hi all,

Here is my first triage report.
I've added my comment to each bug url below to show you my way of thinking
and that the results didn't come out of the blue.
My report's been reviewed by Lucas, who was in charge of the bug triage
that day.

Bugs last updated on 2022-09-26 (Monday)
Date range identified as: "Tuesday triage"
Found 7 bugs

*https://pad.lv/1978064  - +(Confirmed)
 [libvirt]   - [Libvirt} IceLake CPU model not
recognized*
So here, Lena takes care of that bug and the last comment has been added +-
13 hours ago.
The status in each release is marked well. (The comments show it)
Nothing to add here.

*https://pad.lv/1983605  - *+(Triaged)
[exim4]  - exim4 autopkgtest failure on ppc64el*
The bug verified by Sergio and last comment from Bryce some hours ago. I
have nothing to add here.

*https://pad.lv/1990668  - +(Incomplete)
[python-oauthlib]   - package python3-oauthlib 3.2.0-1ubuntu0.1 failed
to install…*
I have nothing to add here. Bug reported 4 days ago by Luis Rodriguez and
it was checked by Sergio. Waiting for feedback.

*https://pad.lv/1980466  - (Confirmed)
 [mysql-8.0]- mysql_secure_installation can not set root
password and end…*
Here I was very careful when I've noticed that it's mysql issue. I have
added workaround for it in the comment sections.
@Robie Basak , @Lena Voytek
 could you take a look at this bug and maybe
suggest or prompt if there is a way to improve the workaround or the
solution in general.

*https://pad.lv/1982727  - *(Won't Fix)
 [iotop]- IOTOP can not work due to
CONFIG_TASK_DELAY_ACCT not enable…*
(I take care of that bug and I have added comment from my recent status)

*https://pad.lv/1990853  - (New)
[libvirt]   - uvt-kvm: error: libvirt: Requested
operation is not valid: …*
This bug reporter seems to be really self-confident and his karma is really
high. So honestly what I would do here is to try to reproduce what he has
written and think about new steps or ping someone who is experienced in
that kind of things.
Lucas reproduced the bug and added a comment there with more detailed
steps. Also a new task for uvtool was added by Lucas and marked as Triaged.
Bug added to our backlog.

*https://pad.lv/1990863  - (New)
[openssh]  - conversion from sshd service to socket is too
bumpy*
Here I didn't comment that one because I was unsure about it. I mean: I
think that this person should list the steps to reproduce it easily apart
from writing the scope of the problem.
Honestly, in my opinion that description is a bit overwhelming.
Lucas asked for more information, especifically their changes in the config
file so we can better investigate the upgrade path they are going through.

Best Regards,
Michał Małoszewski
-- 
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam