2014-04-28 07:54:28 |
Clint Byrum |
bug |
|
|
added bug |
2014-04-28 07:55:34 |
Clint Byrum |
bug |
|
|
added subscriber Ubuntu Server Team |
2014-04-28 08:14:41 |
Steve Kowalik |
bug |
|
|
added subscriber Steve Kowalik |
2014-04-28 13:57:08 |
Scott Moser |
bug task added |
|
maas (Ubuntu) |
|
2014-04-28 13:57:24 |
Scott Moser |
bug task added |
|
maas |
|
2014-04-28 13:57:58 |
Scott Moser |
maas: status |
New |
Confirmed |
|
2014-04-28 13:58:01 |
Scott Moser |
iputils (Ubuntu): status |
New |
Confirmed |
|
2014-04-28 13:58:05 |
Scott Moser |
maas (Ubuntu): status |
New |
Confirmed |
|
2014-04-28 13:58:09 |
Scott Moser |
maas: importance |
Undecided |
High |
|
2014-04-28 13:58:11 |
Scott Moser |
iputils (Ubuntu): importance |
Undecided |
High |
|
2014-04-28 13:58:14 |
Scott Moser |
maas (Ubuntu): importance |
Undecided |
High |
|
2014-04-28 13:58:48 |
Scott Moser |
tags |
|
cloud-images cloud-images-build |
|
2014-04-28 13:59:03 |
Scott Moser |
bug |
|
|
added subscriber Ben Howard |
2014-04-28 14:05:28 |
Ryan Beisner |
bug |
|
|
added subscriber Ryan Beisner |
2014-04-28 14:06:04 |
Scott Moser |
bug task added |
|
curtin |
|
2014-04-28 14:07:49 |
Scott Moser |
bug task added |
|
curtin (Ubuntu) |
|
2014-04-28 14:08:04 |
Scott Moser |
curtin: status |
New |
Confirmed |
|
2014-04-28 14:08:07 |
Scott Moser |
curtin (Ubuntu): status |
New |
Confirmed |
|
2014-04-28 14:08:09 |
Scott Moser |
curtin: importance |
Undecided |
High |
|
2014-04-28 14:08:12 |
Scott Moser |
curtin (Ubuntu): importance |
Undecided |
High |
|
2014-04-28 14:11:21 |
Scott Moser |
attachment added |
|
example attempt to save and restore xattrs with tar https://bugs.launchpad.net/ubuntu/+source/curtin/+bug/1313550/+attachment/4099485/+files/xattr-save-ping |
|
2014-04-28 15:18:46 |
Scott Moser |
bug task added |
|
lxc (Ubuntu) |
|
2014-04-28 15:19:16 |
Scott Moser |
lxc (Ubuntu): status |
New |
Confirmed |
|
2014-04-28 15:19:19 |
Scott Moser |
lxc (Ubuntu): importance |
Undecided |
High |
|
2014-04-28 15:31:35 |
Scott Moser |
attachment added |
|
updated xattr-save-ping that works https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1313550/+attachment/4099531/+files/xattr-save-ping |
|
2014-04-28 16:02:39 |
Scott Moser |
bug task added |
|
tar (Ubuntu) |
|
2014-04-28 16:02:56 |
Scott Moser |
tar (Ubuntu): status |
New |
Fix Released |
|
2014-04-28 16:03:02 |
Scott Moser |
tar (Ubuntu): importance |
Undecided |
Medium |
|
2014-04-28 16:03:18 |
Scott Moser |
nominated for series |
|
Ubuntu Precise |
|
2014-04-28 16:03:18 |
Scott Moser |
bug task added |
|
iputils (Ubuntu Precise) |
|
2014-04-28 16:03:18 |
Scott Moser |
bug task added |
|
tar (Ubuntu Precise) |
|
2014-04-28 16:03:18 |
Scott Moser |
bug task added |
|
lxc (Ubuntu Precise) |
|
2014-04-28 16:03:18 |
Scott Moser |
bug task added |
|
maas (Ubuntu Precise) |
|
2014-04-28 16:03:18 |
Scott Moser |
bug task added |
|
curtin (Ubuntu Precise) |
|
2014-04-28 16:03:18 |
Scott Moser |
nominated for series |
|
Ubuntu Saucy |
|
2014-04-28 16:03:18 |
Scott Moser |
bug task added |
|
iputils (Ubuntu Saucy) |
|
2014-04-28 16:03:18 |
Scott Moser |
bug task added |
|
tar (Ubuntu Saucy) |
|
2014-04-28 16:03:18 |
Scott Moser |
bug task added |
|
lxc (Ubuntu Saucy) |
|
2014-04-28 16:03:18 |
Scott Moser |
bug task added |
|
maas (Ubuntu Saucy) |
|
2014-04-28 16:03:18 |
Scott Moser |
bug task added |
|
curtin (Ubuntu Saucy) |
|
2014-04-28 16:04:31 |
Scott Moser |
tar (Ubuntu Precise): status |
New |
Confirmed |
|
2014-04-28 16:04:31 |
Scott Moser |
tar (Ubuntu Precise): assignee |
|
Serge Hallyn (serge-hallyn) |
|
2014-04-28 16:04:44 |
Scott Moser |
tar (Ubuntu Precise): importance |
Undecided |
High |
|
2014-04-28 16:05:08 |
Scott Moser |
nominated for series |
|
Ubuntu Trusty |
|
2014-04-28 16:05:08 |
Scott Moser |
bug task added |
|
iputils (Ubuntu Trusty) |
|
2014-04-28 16:05:08 |
Scott Moser |
bug task added |
|
tar (Ubuntu Trusty) |
|
2014-04-28 16:05:08 |
Scott Moser |
bug task added |
|
lxc (Ubuntu Trusty) |
|
2014-04-28 16:05:08 |
Scott Moser |
bug task added |
|
maas (Ubuntu Trusty) |
|
2014-04-28 16:05:08 |
Scott Moser |
bug task added |
|
curtin (Ubuntu Trusty) |
|
2014-04-28 16:05:50 |
Scott Moser |
tar (Ubuntu Trusty): importance |
Undecided |
High |
|
2014-04-28 16:05:50 |
Scott Moser |
tar (Ubuntu Trusty): status |
New |
Fix Released |
|
2014-04-28 16:06:59 |
Scott Moser |
bug task deleted |
iputils (Ubuntu Precise) |
|
|
2014-04-28 16:07:11 |
Scott Moser |
bug task deleted |
iputils (Ubuntu Saucy) |
|
|
2014-04-28 16:08:04 |
Scott Moser |
bug task deleted |
curtin (Ubuntu Precise) |
|
|
2014-04-28 18:02:50 |
Launchpad Janitor |
branch linked |
|
lp:~smoser/vmbuilder/automated-ec2-builds-tar-xattr |
|
2014-04-28 18:06:58 |
Nobuto Murata |
bug |
|
|
added subscriber Nobuto MURATA |
2014-04-28 18:27:15 |
Launchpad Janitor |
branch linked |
|
lp:~smoser/curtin/lp1313550 |
|
2014-04-28 18:34:07 |
Scott Moser |
bug task deleted |
maas (Ubuntu Precise) |
|
|
2014-04-28 18:35:31 |
Scott Moser |
tar (Ubuntu Saucy): status |
New |
Confirmed |
|
2014-04-28 18:36:10 |
Scott Moser |
maas (Ubuntu Trusty): status |
New |
Confirmed |
|
2014-04-28 18:36:26 |
Scott Moser |
maas (Ubuntu Saucy): status |
New |
Confirmed |
|
2014-04-28 18:36:44 |
Scott Moser |
lxc (Ubuntu Trusty): status |
New |
Confirmed |
|
2014-04-28 18:37:02 |
Scott Moser |
lxc (Ubuntu Trusty): importance |
Undecided |
High |
|
2014-04-28 18:37:17 |
Scott Moser |
maas (Ubuntu Saucy): importance |
Undecided |
High |
|
2014-04-28 18:37:30 |
Scott Moser |
maas (Ubuntu Trusty): importance |
Undecided |
High |
|
2014-04-28 18:37:43 |
Scott Moser |
lxc (Ubuntu Precise): importance |
Undecided |
High |
|
2014-04-28 18:37:57 |
Scott Moser |
lxc (Ubuntu Precise): status |
New |
Confirmed |
|
2014-04-28 18:38:13 |
Scott Moser |
lxc (Ubuntu Saucy): importance |
Undecided |
High |
|
2014-04-28 18:38:13 |
Scott Moser |
lxc (Ubuntu Saucy): status |
New |
Confirmed |
|
2014-04-28 18:38:44 |
Scott Moser |
bug task deleted |
iputils (Ubuntu Trusty) |
|
|
2014-04-28 18:38:58 |
Scott Moser |
curtin (Ubuntu Saucy): importance |
Undecided |
High |
|
2014-04-28 18:38:58 |
Scott Moser |
curtin (Ubuntu Saucy): status |
New |
Confirmed |
|
2014-04-28 18:39:12 |
Scott Moser |
curtin (Ubuntu Trusty): importance |
Undecided |
High |
|
2014-04-28 18:39:12 |
Scott Moser |
curtin (Ubuntu Trusty): status |
New |
Confirmed |
|
2014-04-28 18:39:27 |
Scott Moser |
tar (Ubuntu Saucy): importance |
Undecided |
High |
|
2014-04-28 18:44:24 |
Scott Moser |
description |
With trusty, /bin/ping relies on having extended attributes and kernel capabilities to gain the cap_net_raw+p capability. This allows removing the suid bit.
However, the tarball cloud images do not preserve the extended attributes, and thus /bin/ping does not work on a system derived from them. |
With trusty, /bin/ping relies on having extended attributes and kernel capabilities to gain the cap_net_raw+p capability. This allows removing the suid bit.
However, the tarball cloud images do not preserve the extended attributes, and thus /bin/ping does not work on a system derived from them.
Summary of problem per package:
* lxc: ubuntu cloud template needs to extract
* download template needs to extract with xattr flags
* server side download creation tools need xattr flags
* [unconfirmed] tarball caches need creation and extraction with xattr flags
* tar: need the '--xattr' and '--acl' flags backported
* maas: uec2roottgz needs to use xattr/acl flags
* curtin: extraction needs to use xattr/acl flags.
* cloud-image-build: needs to create -root.tar.gz with xattr/acl flags |
|
2014-04-28 20:23:00 |
Serge Hallyn |
tar (Ubuntu Precise): assignee |
Serge Hallyn (serge-hallyn) |
|
|
2014-04-29 22:24:52 |
Serge Hallyn |
attachment added |
|
tar-xattr.debdiff https://bugs.launchpad.net/ubuntu/+source/iputils/+bug/1313550/+attachment/4100853/+files/tar-xattr.debdiff |
|
2014-04-30 00:26:00 |
Ubuntu Foundations Team Bug Bot |
tags |
cloud-images cloud-images-build |
cloud-images cloud-images-build patch |
|
2014-05-07 21:50:44 |
Adam Conrad |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
2014-05-07 21:50:50 |
Adam Conrad |
bug |
|
|
added subscriber SRU Verification |
2014-05-07 21:50:53 |
Adam Conrad |
tags |
cloud-images cloud-images-build patch |
cloud-images cloud-images-build patch verification-needed |
|
2014-05-07 22:08:45 |
Launchpad Janitor |
branch linked |
|
lp:ubuntu/trusty-proposed/iputils |
|
2014-05-07 22:12:33 |
Stéphane Graber |
tags |
cloud-images cloud-images-build patch verification-needed |
cloud-images cloud-images-build patch verification-done |
|
2014-05-07 22:12:55 |
Adam Conrad |
removed subscriber Ubuntu Stable Release Updates Team |
|
|
|
2014-05-07 22:18:12 |
Launchpad Janitor |
iputils (Ubuntu): status |
Confirmed |
Fix Released |
|
2014-05-08 13:57:24 |
Bekir Dogan |
bug |
|
|
added subscriber Bekir Dogan |
2014-05-08 13:57:27 |
Bekir Dogan |
removed subscriber Bekir Dogan |
|
|
|
2014-06-09 15:03:18 |
Launchpad Janitor |
branch linked |
|
lp:curtin |
|
2014-10-21 20:54:15 |
Launchpad Janitor |
branch linked |
|
lp:~smoser/ubuntu/trusty/curtin/sru-utopic-level |
|
2014-10-21 20:57:10 |
Scott Moser |
curtin (Ubuntu Saucy): status |
Confirmed |
Won't Fix |
|
2014-10-24 21:57:07 |
Newell Jensen |
description |
With trusty, /bin/ping relies on having extended attributes and kernel capabilities to gain the cap_net_raw+p capability. This allows removing the suid bit.
However, the tarball cloud images do not preserve the extended attributes, and thus /bin/ping does not work on a system derived from them.
Summary of problem per package:
* lxc: ubuntu cloud template needs to extract
* download template needs to extract with xattr flags
* server side download creation tools need xattr flags
* [unconfirmed] tarball caches need creation and extraction with xattr flags
* tar: need the '--xattr' and '--acl' flags backported
* maas: uec2roottgz needs to use xattr/acl flags
* curtin: extraction needs to use xattr/acl flags.
* cloud-image-build: needs to create -root.tar.gz with xattr/acl flags |
With trusty, /bin/ping relies on having extended attributes and kernel capabilities to gain the cap_net_raw+p capability. This allows removing the suid bit.
However, the tarball cloud images do not preserve the extended attributes, and thus /bin/ping does not work on a system derived from them.
Summary of problem per package:
* lxc: ubuntu cloud template needs to extract
* download template needs to extract with xattr flags
* server side download creation tools need xattr flags
* [unconfirmed] tarball caches need creation and extraction with xattr flags
* tar: need the '--xattr' and '--acl' flags backported
* maas: uec2roottgz needs to use xattr/acl flags
* curtin: extraction needs to use xattr/acl flags.
* cloud-image-build: needs to create -root.tar.gz with xattr/acl flags
SRU curtin
==========
[Impact]
As the original bug report description mentions, curtin's extraction needs to use xattr/acl flags.
[Test Case]
To reproduce this bug, use curtin extraction without the extended file attributes.
[Regression Potential]
TBD |
|
2014-10-24 22:03:14 |
Newell Jensen |
description |
With trusty, /bin/ping relies on having extended attributes and kernel capabilities to gain the cap_net_raw+p capability. This allows removing the suid bit.
However, the tarball cloud images do not preserve the extended attributes, and thus /bin/ping does not work on a system derived from them.
Summary of problem per package:
* lxc: ubuntu cloud template needs to extract
* download template needs to extract with xattr flags
* server side download creation tools need xattr flags
* [unconfirmed] tarball caches need creation and extraction with xattr flags
* tar: need the '--xattr' and '--acl' flags backported
* maas: uec2roottgz needs to use xattr/acl flags
* curtin: extraction needs to use xattr/acl flags.
* cloud-image-build: needs to create -root.tar.gz with xattr/acl flags
SRU curtin
==========
[Impact]
As the original bug report description mentions, curtin's extraction needs to use xattr/acl flags.
[Test Case]
To reproduce this bug, use curtin extraction without the extended file attributes.
[Regression Potential]
TBD |
With trusty, /bin/ping relies on having extended attributes and kernel capabilities to gain the cap_net_raw+p capability. This allows removing the suid bit.
However, the tarball cloud images do not preserve the extended attributes, and thus /bin/ping does not work on a system derived from them.
Summary of problem per package:
* lxc: ubuntu cloud template needs to extract
* download template needs to extract with xattr flags
* server side download creation tools need xattr flags
* [unconfirmed] tarball caches need creation and extraction with xattr flags
* tar: need the '--xattr' and '--acl' flags backported
* maas: uec2roottgz needs to use xattr/acl flags
* curtin: extraction needs to use xattr/acl flags.
* cloud-image-build: needs to create -root.tar.gz with xattr/acl flags
SRU curtin
==========
[Impact]
As the original bug report description mentions, curtin's extraction needs to use xattr/acl flags.
[Test Case]
To reproduce this bug, use curtin extraction without the extended file attributes.
[Regression Potential]
Since the patch for this bug fix *looks* to see if there are extended file attributes, it should work in the event that they are there or are not there or are. More specifically, if tar cmd supports xattrs, curtin will return the required flags to extract them. This lowers the probability of introducing a regression. |
|
2014-10-27 15:03:13 |
Scott Moser |
description |
With trusty, /bin/ping relies on having extended attributes and kernel capabilities to gain the cap_net_raw+p capability. This allows removing the suid bit.
However, the tarball cloud images do not preserve the extended attributes, and thus /bin/ping does not work on a system derived from them.
Summary of problem per package:
* lxc: ubuntu cloud template needs to extract
* download template needs to extract with xattr flags
* server side download creation tools need xattr flags
* [unconfirmed] tarball caches need creation and extraction with xattr flags
* tar: need the '--xattr' and '--acl' flags backported
* maas: uec2roottgz needs to use xattr/acl flags
* curtin: extraction needs to use xattr/acl flags.
* cloud-image-build: needs to create -root.tar.gz with xattr/acl flags
SRU curtin
==========
[Impact]
As the original bug report description mentions, curtin's extraction needs to use xattr/acl flags.
[Test Case]
To reproduce this bug, use curtin extraction without the extended file attributes.
[Regression Potential]
Since the patch for this bug fix *looks* to see if there are extended file attributes, it should work in the event that they are there or are not there or are. More specifically, if tar cmd supports xattrs, curtin will return the required flags to extract them. This lowers the probability of introducing a regression. |
With trusty, /bin/ping relies on having extended attributes and kernel capabilities to gain the cap_net_raw+p capability. This allows removing the suid bit.
However, the tarball cloud images do not preserve the extended attributes, and thus /bin/ping does not work on a system derived from them.
Summary of problem per package:
* lxc: ubuntu cloud template needs to extract
* download template needs to extract with xattr flags
* server side download creation tools need xattr flags
* [unconfirmed] tarball caches need creation and extraction with xattr flags
* tar: need the '--xattr' and '--acl' flags backported
* maas: uec2roottgz needs to use xattr/acl flags
* curtin: extraction needs to use xattr/acl flags.
* cloud-image-build: needs to create -root.tar.gz with xattr/acl flags
Related Bugs:
* bug 1382632: horizon insecure key file permissions
* bug 1386237: tar strange behavior with --acl
* bug 1313550: ping broken (xattrs lost in tar extraction) |
|
2014-10-27 15:19:39 |
Scott Moser |
description |
With trusty, /bin/ping relies on having extended attributes and kernel capabilities to gain the cap_net_raw+p capability. This allows removing the suid bit.
However, the tarball cloud images do not preserve the extended attributes, and thus /bin/ping does not work on a system derived from them.
Summary of problem per package:
* lxc: ubuntu cloud template needs to extract
* download template needs to extract with xattr flags
* server side download creation tools need xattr flags
* [unconfirmed] tarball caches need creation and extraction with xattr flags
* tar: need the '--xattr' and '--acl' flags backported
* maas: uec2roottgz needs to use xattr/acl flags
* curtin: extraction needs to use xattr/acl flags.
* cloud-image-build: needs to create -root.tar.gz with xattr/acl flags
Related Bugs:
* bug 1382632: horizon insecure key file permissions
* bug 1386237: tar strange behavior with --acl
* bug 1313550: ping broken (xattrs lost in tar extraction) |
With trusty, /bin/ping relies on having extended attributes and kernel capabilities to gain the cap_net_raw+p capability. This allows removing the suid bit.
However, the tarball cloud images do not preserve the extended attributes, and thus /bin/ping does not work on a system derived from them.
Summary of problem per package:
* lxc: ubuntu cloud template needs to extract
* download template needs to extract with xattr flags
* server side download creation tools need xattr flags
* [unconfirmed] tarball caches need creation and extraction with xattr flags
* tar: need the '--xattr' and '--acl' flags backported
* maas: uec2roottgz needs to use xattr/acl flags
* curtin: extraction needs to use xattr/acl flags.
* cloud-image-build: needs to create -root.tar.gz with xattr/acl flags
Related Bugs:
* bug 1382632: horizon insecure key file permissions
* bug 1386237: tar strange behavior with --acl and xattr
* bug 1313550: ping broken (xattrs lost in tar extraction) |
|
2014-10-30 20:14:00 |
Brian Murray |
curtin (Ubuntu Trusty): status |
Confirmed |
Fix Committed |
|
2014-10-30 20:14:05 |
Brian Murray |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
2014-10-30 20:14:10 |
Brian Murray |
tags |
cloud-images cloud-images-build patch verification-done |
cloud-images cloud-images-build patch |
|
2014-10-30 20:14:11 |
Brian Murray |
tags |
cloud-images cloud-images-build patch |
cloud-images cloud-images-build patch verification-needed |
|
2014-10-30 20:33:42 |
Launchpad Janitor |
branch linked |
|
lp:ubuntu/trusty-proposed/curtin |
|
2014-12-05 06:36:28 |
Rolf Leggewie |
lxc (Ubuntu Saucy): status |
Confirmed |
Won't Fix |
|
2014-12-05 06:36:33 |
Rolf Leggewie |
maas (Ubuntu Saucy): status |
Confirmed |
Won't Fix |
|
2014-12-05 06:36:38 |
Rolf Leggewie |
tar (Ubuntu Saucy): status |
Confirmed |
Won't Fix |
|
2014-12-17 17:20:56 |
Larry Michel |
tags |
cloud-images cloud-images-build patch verification-needed |
cloud-images cloud-images-build patch verification-done |
|
2015-01-05 18:09:12 |
Launchpad Janitor |
curtin (Ubuntu Trusty): status |
Fix Committed |
Fix Released |
|
2015-06-15 15:33:50 |
Launchpad Janitor |
branch linked |
|
lp:~smoser/maas/lp-1313550 |
|
2015-06-18 10:51:48 |
Raphaël Badin |
branch linked |
|
lp:~rvb/maas/lp-1313550 |
|
2015-06-18 13:07:27 |
MAAS Lander |
maas: status |
Confirmed |
Fix Committed |
|
2015-06-18 15:37:03 |
Scott Moser |
curtin: status |
Confirmed |
Fix Committed |
|
2015-06-18 15:37:27 |
Scott Moser |
curtin (Ubuntu): status |
Confirmed |
Fix Released |
|
2015-06-18 15:37:38 |
Scott Moser |
bug task deleted |
curtin (Ubuntu Saucy) |
|
|
2015-11-09 17:35:57 |
Stéphane Graber |
lxc (Ubuntu Precise): status |
Confirmed |
Won't Fix |
|
2015-11-09 17:36:20 |
Stéphane Graber |
bug task deleted |
lxc (Ubuntu Precise) |
|
|
2015-11-09 17:36:28 |
Stéphane Graber |
bug task deleted |
lxc (Ubuntu Saucy) |
|
|
2015-11-09 17:36:44 |
Stéphane Graber |
lxc (Ubuntu Trusty): status |
Confirmed |
Triaged |
|
2015-11-09 17:36:55 |
Stéphane Graber |
lxc (Ubuntu): status |
Confirmed |
Triaged |
|
2015-11-09 17:37:14 |
Stéphane Graber |
nominated for series |
|
Ubuntu Wily |
|
2015-11-09 17:37:14 |
Stéphane Graber |
bug task added |
|
iputils (Ubuntu Wily) |
|
2015-11-09 17:37:14 |
Stéphane Graber |
bug task added |
|
tar (Ubuntu Wily) |
|
2015-11-09 17:37:14 |
Stéphane Graber |
bug task added |
|
lxc (Ubuntu Wily) |
|
2015-11-09 17:37:14 |
Stéphane Graber |
bug task added |
|
maas (Ubuntu Wily) |
|
2015-11-09 17:37:14 |
Stéphane Graber |
bug task added |
|
curtin (Ubuntu Wily) |
|
2015-11-09 17:37:14 |
Stéphane Graber |
nominated for series |
|
Ubuntu Vivid |
|
2015-11-09 17:37:14 |
Stéphane Graber |
bug task added |
|
iputils (Ubuntu Vivid) |
|
2015-11-09 17:37:14 |
Stéphane Graber |
bug task added |
|
tar (Ubuntu Vivid) |
|
2015-11-09 17:37:14 |
Stéphane Graber |
bug task added |
|
lxc (Ubuntu Vivid) |
|
2015-11-09 17:37:14 |
Stéphane Graber |
bug task added |
|
maas (Ubuntu Vivid) |
|
2015-11-09 17:37:14 |
Stéphane Graber |
bug task added |
|
curtin (Ubuntu Vivid) |
|
2015-11-09 17:37:28 |
Stéphane Graber |
lxc (Ubuntu Vivid): importance |
Undecided |
High |
|
2015-11-09 17:37:28 |
Stéphane Graber |
lxc (Ubuntu Vivid): status |
New |
Triaged |
|
2015-11-09 17:37:40 |
Stéphane Graber |
lxc (Ubuntu Wily): importance |
Undecided |
High |
|
2015-11-09 17:37:40 |
Stéphane Graber |
lxc (Ubuntu Wily): status |
New |
Triaged |
|
2015-11-09 17:38:13 |
Stéphane Graber |
bug task deleted |
iputils (Ubuntu Vivid) |
|
|
2015-11-09 17:38:20 |
Stéphane Graber |
bug task deleted |
iputils (Ubuntu Wily) |
|
|
2015-11-09 17:38:28 |
Stéphane Graber |
bug task deleted |
curtin (Ubuntu Vivid) |
|
|
2015-11-09 17:38:34 |
Stéphane Graber |
bug task deleted |
curtin (Ubuntu Wily) |
|
|
2015-11-09 17:38:50 |
Stéphane Graber |
bug task deleted |
tar (Ubuntu Vivid) |
|
|
2015-11-09 17:38:59 |
Stéphane Graber |
bug task deleted |
tar (Ubuntu Wily) |
|
|
2016-01-22 16:08:32 |
Andres Rodriguez |
maas: status |
Fix Committed |
Fix Released |
|
2016-04-12 16:12:30 |
Serge Hallyn |
lxc (Ubuntu): status |
Triaged |
Invalid |
|
2016-04-12 16:12:45 |
Serge Hallyn |
lxc (Ubuntu Trusty): status |
Triaged |
Invalid |
|
2016-04-12 16:13:01 |
Serge Hallyn |
bug task deleted |
lxc (Ubuntu Trusty) |
|
|
2016-04-12 16:13:08 |
Serge Hallyn |
bug task deleted |
lxc (Ubuntu Vivid) |
|
|
2016-04-12 16:13:17 |
Serge Hallyn |
bug task deleted |
lxc (Ubuntu Wily) |
|
|
2016-04-12 16:19:14 |
Scott Moser |
maas (Ubuntu Wily): status |
New |
Fix Released |
|
2016-04-12 16:20:15 |
Scott Moser |
maas (Ubuntu): status |
Confirmed |
Fix Released |
|
2016-04-12 16:20:54 |
Scott Moser |
maas (Ubuntu Vivid): status |
New |
Confirmed |
|
2016-07-12 17:56:48 |
Mathew Hodson |
bug task deleted |
lxc (Ubuntu) |
|
|
2016-07-12 17:57:40 |
Mathew Hodson |
maas (Ubuntu Vivid): importance |
Undecided |
High |
|
2016-07-12 17:57:54 |
Mathew Hodson |
maas (Ubuntu Wily): importance |
Undecided |
High |
|
2016-07-12 17:58:08 |
Mathew Hodson |
maas (Ubuntu Vivid): status |
Confirmed |
Won't Fix |
|
2017-09-28 13:41:05 |
Christian Ehrhardt |
maas (Ubuntu Trusty): status |
Confirmed |
Fix Released |
|
2017-12-15 22:08:33 |
Scott Moser |
curtin: status |
Fix Committed |
Fix Released |
|
2018-06-01 15:20:10 |
Scott Moser |
description |
With trusty, /bin/ping relies on having extended attributes and kernel capabilities to gain the cap_net_raw+p capability. This allows removing the suid bit.
However, the tarball cloud images do not preserve the extended attributes, and thus /bin/ping does not work on a system derived from them.
Summary of problem per package:
* lxc: ubuntu cloud template needs to extract
* download template needs to extract with xattr flags
* server side download creation tools need xattr flags
* [unconfirmed] tarball caches need creation and extraction with xattr flags
* tar: need the '--xattr' and '--acl' flags backported
* maas: uec2roottgz needs to use xattr/acl flags
* curtin: extraction needs to use xattr/acl flags.
* cloud-image-build: needs to create -root.tar.gz with xattr/acl flags
Related Bugs:
* bug 1382632: horizon insecure key file permissions
* bug 1386237: tar strange behavior with --acl and xattr
* bug 1313550: ping broken (xattrs lost in tar extraction) |
With trusty, /bin/ping relies on having extended attributes and kernel capabilities to gain the cap_net_raw+p capability. This allows removing the suid bit.
However, the tarball cloud images do not preserve the extended attributes, and thus /bin/ping does not work on a system derived from them.
Summary of problem per package:
* lxc: ubuntu cloud template needs to extract
* download template needs to extract with xattr flags
* server side download creation tools need xattr flags
* [unconfirmed] tarball caches need creation and extraction with xattr flags
* tar: need the '--xattr' and '--acl' flags backported
* maas: uec2roottgz needs to use xattr/acl flags
* curtin: extraction needs to use xattr/acl flags.
* cloud-image-build: needs to create -root.tar.gz with xattr/acl flags
Related Bugs:
* bug 1382632: horizon insecure key file permissions
* bug 1386237: tar strange behavior with --acl and xattr
* bug 1313550: ping broken (xattrs lost in tar extraction)
* bug 1302192: capabilities not preserved on installation |
|
2021-10-14 01:12:35 |
Steve Langasek |
tar (Ubuntu Precise): status |
Confirmed |
Won't Fix |
|