$ ./change-override -c main -S google-guest-agent
Override component to main
google-guest-agent 20200617.00-0ubuntu5 in groovy: universe/devel -> main
google-guest-agent 20200617.00-0ubuntu5 in groovy amd64:
universe/devel/optional/100% -> main
google-guest-agent 20200617.00-0ubuntu5 in groovy
Since the ACK from the Security Team arrived I'm moving the state to Fix
Committed per https://wiki.ubuntu.com/MainInclusionProcess .
@alexmurray thanks for the review!
@paelzer Enabling vendored tests is a tricky question in multiple ways.
The test dependencies may not be present (even in the
Regarding the vendored packages, I have updated our CVE tracker to try
and capture as many of these as possible in https://git.launchpad.net
/ubuntu-cve-tracker/commit/?id=e31511491f1d3258c609e449ecab26765ecf0f9f
- this should allow the security team to automatically have CVEs that
are in one of
Alex Murray (alexmurray) can you please rereview given the change of
vendored packages?
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1891929
Title:
[MIR] google-guest-agent
To manage
** Also affects: gce-compute-image-packages (Ubuntu)
Importance: Undecided
Status: New
** Changed in: gce-compute-image-packages (Ubuntu)
Status: New => Invalid
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
** Merge proposal linked:
https://code.launchpad.net/~rbalint/ubuntu-seeds/+git/platform/+merge/391747
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1891929
Title:
[MIR] google-guest-agent
To
Compared to the old review we had these open topics:
1. confine services - you evaluated it (thanks a lot) and outlined why it can't
be done
due to conceptual issues. Ok if the security Team is.
2. Dependencies - well, now all vendored as shown in bug 1896246 and ok as
exception
Thanks for
Summary:
- bug 1896246 essentially is a switch to fully vendorize and done
- there in
https://bugs.launchpad.net/ubuntu/+source/google-osconfig-agent/+bug/1896246/comments/2
security signs off on that approach
- thereby bug 1894731 is essentially dead and I updated it to reflect that
That
Thank you for the review.
I've updated the package to ship the Go build dependencies by
vendorizing them in 20200617.00-0ubuntu4. As far as I know the Security
Team approved that, but please take a new look at the package.
Google-shutdown-scripts.service and google-startup-scripts.service run
All reviews are in, this still wait on:
- feedback or best an implementation of the MIR review question "Would be nice
to have the services more confined via systemd"
- all dependencies to be resolved in bug 1894731
For now it is incomplete at least missing feedback, so I'm re-assigning
to
** Description changed:
[Availability]
Google-guest-agent is in universe and only depends on packages provided in
main or by the source package itself. The package is new in Groovy, but it
replaces part of old gce-compute-image-packages. The package builds for all
architectures.
** Description changed:
[Availability]
Google-guest-agent is in universe and only depends on packages provided in
main or by the source package itself. The package is new in Groovy, but it
replaces part of old gce-compute-image-packages. The package builds for all
architectures.
** Description changed:
[Availability]
Google-guest-agent is in universe and only depends on packages provided in
main or by the source package itself. The package is new in Groovy, but it
replaces part of old gce-compute-image-packages. The package builds for all
architectures.
I used debtree to collect all transitive dependencies:
debtree -b --no-alternatives --no-version google-guest-agent
** Attachment added: "Transitive dependency graph"
** Description changed:
[Availability]
Google-guest-agent is in universe and only depends on packages provided in
main or by the source package itself. The package is new in Groovy, but it
replaces part of old gce-compute-image-packages. The package builds for all
architectures.
@didrocks Could the Security Team please start the security review while
I'm preparing MIRs for the build dependencies?
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1891929
Title:
[MIR]
** Tags added: id-5e458d59714e8202f34cf300
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1891929
Title:
[MIR] google-guest-agent
To manage notifications about this bug go to:
Thank you for the review! I've fixed the copyright in
20200617.00-0ubuntu3. I'm continuing with the MIRs of the dependencies,
I indeed missed this golang-specific requirement.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
** Changed in: google-guest-agent (Ubuntu)
Assignee: Didier Roche (didrocks) => (unassigned)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1891929
Title:
[MIR] google-guest-agent
To manage
[Summary]
- All dependencies should be filed as MIR (and their dependencies).
- Would be nice to have the services more confined via systemd.
- Once done and dependencies are ACKed, this is fine by me, but will need a
security review.
[Duplication]
OK:
Nothing to add over the top request as it’s
** Changed in: google-guest-agent (Ubuntu)
Assignee: (unassigned) => Didier Roche (didrocks)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1891929
Title:
[MIR] google-guest-agent
To manage
** Description changed:
- WIP, I'm seeking for approval to subscribe Foundations to the package
-
[Availability]
Google-guest-agent is in universe and only depends on packages provided in
main or by the source package itself. The package is new in Groovy, but it
replaces part of old
22 matches
Mail list logo
