** Also affects: cluster-glue (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
High Availability Team, which is subscribed to cluster-glue in Ubuntu.
https://bugs.launchpad.net/bugs/1576812
Title:
[MIR] ipmitool
Status in cluster-glue package in Ubuntu:
New
Status in ipmitool package in Ubuntu:
Won't Fix
Bug description:
Availability: ipmitool is in universe in Precise, Trusty and Xenial.
Rationale: ipmitool is a new Recommends of cluster-glue, which is in
Main. Additionally, ipmitool is a reasonably common program for
systems management, and it makes some sense for it to be in Main.
Security: The security history for the ipmitool package is fairly
quiet.
Reviewing CVEs for ipmitool, I found only one relevant one:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4339 which was
fixed in Debian.
ipmitool installs one binary to /usr/sbin:
/usr/sbin/ipmievd
and one corresponding service:
/etc/init.d/ipmievd
/lib/systemd/system/ipmievd.service
ipmievd itself is a logging daemon that transfer logs from a BMC to
syslog and seems like a low exposure (accounting for the afore-
mentioned CVE).
Quality assurance:
Installation of ipmitool results in an immediately working package.
Site-specific options for accessing a BMC may be necessary, but are
documented in the man-page.
No debconf questions are asked during installation.
https://bugs.launchpad.net/ubuntu/+source/ipmitool indicates no
outstanding long-term bugs exist for ipmitool.
Debian's bug tracker implies no significant bugs exist, excepting possibly
related to whether ipmievd should start by default (due to dependencies on
particular kernel modules).
https://bugs.debian.org/cgi-bin/pkgreport.cgi?pkg=ipmitool
The upstream bug tracker
https://sourceforge.net/p/ipmitool/bugs/?source=navbar mostly contains
feature requests.
ipmitool is well-maintained in Debian and Ubuntu.
ipmitool does not ship a test suite; any test suite it shipped would
also have strict hardware dependencies, I think.
ipmitool uses a debian/watch file and uscan/uupdate function
currently.
I am not sure that the end-user application (ipmitool itself) has been
internationalized yet. Nor does there appear to be a desktop file, but
ipmitool would primarily be used on servers.
Dependencies:
All build and binary dependencies (including Recommends:) are
satisfyable in main.
Standards compliance: The package meets the FHS and Debian Policy
standards.
Maintenance: The Ubuntu Server team will maintain this package.
Background information:
The package descriptions correctly explain the general purpose and
context of the package.
== Original report ==
cluster-glue has added a recommends: against ipmitool, currently in
universe. This looks to me like a reasonable thing to have in main,
but needs to go through the MIR process.
cluster-glue is owned by the server team.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cluster-glue/+bug/1576812/+subscriptions
_______________________________________________
Mailing list: https://launchpad.net/~ubuntu-ha
Post to : [email protected]
Unsubscribe : https://launchpad.net/~ubuntu-ha
More help : https://help.launchpad.net/ListHelp
