livepatch status is less user-friendly once it gets kernel-upgrade-required "cannot send status to server: bad server status 403"
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Canonical Livepatch Client |
Confirmed
|
Wishlist
|
Unassigned |
Bug Description
I believe it's a known issue, but I couldn't find an existing bug.
Once the livepatch status gets kernel-
[after initial status check]
status:
- kernel: 4.15.0-
running: true
livepatch:
checkState: checked
patchState: kernel-
version: "59.1"
fixes: |-
* CVE-2011-1079
* CVE-2018-20976
[refresh manually]
$ sudo canonical-livepatch refresh
[status after refresh]
status:
- kernel: 4.15.0-
running: true
livepatch:
checkState: check-failed
checkInfo: 'cannot send status to server: bad server status 403 (URL: https:/
{"error": "Not checking for new patches based on reported livepatch state. State:
kernel-
patchState: kernel-
This is not so user-friendly, and could be improved.
CVE References
- 2011-1079
- 2018-20976
- 2018-21008
- 2019-10126
- 2019-10207
- 2019-11477
- 2019-11478
- 2019-11815
- 2019-11833
- 2019-11884
- 2019-12614
- 2019-12818
- 2019-12819
- 2019-12984
- 2019-13233
- 2019-13272
- 2019-13648
- 2019-14283
- 2019-14284
- 2019-14814
- 2019-14821
- 2019-14835
- 2019-15030
- 2019-15031
- 2019-15098
- 2019-17666
- 2019-2101
- 2019-3846
Nov 15 02:01:33 livepatch canonical- livepatch[ 7195]: error in livepatch check state: needs-check livepatch[ 7195]: Checking with livepatch service. livepatch[ 7195]: updating last-check livepatch[ 7195]: touched last check livepatch[ 7195]: Applying update 59.1 for 4.15.0- 58.64-generic livepatch[ 7195]: Applied patch version 59.1 to 4.15.0- 58.64-generic livepatch[ 7195]: Client.Check livepatch[ 7195]: Checking with livepatch service. livepatch[ 7195]: Module already inserted. livepatch[ 7195]: during refresh: cannot check: cannot send status to server: bad server status 403 (URL: https:/ /livepatch. canonical. com/api/ machine/ b7a6c33062c9427 ab25dd5a95c9353 bf): {"error": "Not checking for new patches based on reported livepatch state. State: kernel- upgrade- required" } livepatch[ 7195]: error in livepatch check state: check-failed livepatch[ 7195]: error in livepatch check state: check-failed
Nov 15 02:01:33 livepatch canonical-
Nov 15 02:01:34 livepatch canonical-
Nov 15 02:01:34 livepatch canonical-
Nov 15 02:01:50 livepatch canonical-
Nov 15 02:02:01 livepatch canonical-
Nov 15 02:04:52 livepatch canonical-
Nov 15 02:04:52 livepatch canonical-
Nov 15 02:04:54 livepatch canonical-
Nov 15 02:04:54 livepatch canonical-
Nov 15 02:04:54 livepatch canonical-
Nov 15 02:05:02 livepatch canonical-