| 2022-04-13 11:08:38 |
Robie Basak |
bug |
|
|
added bug |
| 2022-04-13 11:08:54 |
Robie Basak |
summary |
Regression: images ship with modified conffiles |
Regression: images ship with modified configuration file |
|
| 2022-04-20 18:35:09 |
John Chittum |
cloud-images: status |
New |
Triaged |
|
| 2022-04-20 18:35:13 |
John Chittum |
cloud-images: importance |
Undecided |
High |
|
| 2022-06-28 09:38:00 |
Thomas Bechtold |
cloud-images: assignee |
|
Thomas Bechtold (toabctl) |
|
| 2022-06-28 09:38:04 |
Thomas Bechtold |
cloud-images: status |
Triaged |
In Progress |
|
| 2022-06-28 11:31:19 |
Thomas Bechtold |
merge proposal linked |
|
https://code.launchpad.net/~toabctl/livecd-rootfs/+git/livecd-rootfs-1/+merge/425712 |
|
| 2022-06-29 09:20:57 |
Thomas Bechtold |
nominated for series |
|
cloud-images/focal |
|
| 2022-06-29 09:20:57 |
Thomas Bechtold |
bug task added |
|
cloud-images/focal |
|
| 2022-06-29 09:27:58 |
Thomas Bechtold |
bug task deleted |
cloud-images/focal |
|
|
| 2022-06-29 09:28:20 |
Thomas Bechtold |
affects |
cloud-images |
livecd-rootfs |
|
| 2022-06-29 09:54:46 |
Utkarsh Gupta |
nominated for series |
|
livecd-rootfs/trunk |
|
| 2022-06-29 09:54:46 |
Utkarsh Gupta |
bug task added |
|
livecd-rootfs/trunk |
|
| 2022-06-29 09:55:07 |
Utkarsh Gupta |
bug task deleted |
livecd-rootfs/trunk |
|
|
| 2022-06-29 09:59:17 |
Utkarsh Gupta |
bug task added |
|
livecd-rootfs (Ubuntu) |
|
| 2022-06-29 09:59:33 |
Utkarsh Gupta |
livecd-rootfs (Ubuntu): importance |
Undecided |
High |
|
| 2022-06-29 09:59:36 |
Utkarsh Gupta |
livecd-rootfs (Ubuntu): status |
New |
Fix Committed |
|
| 2022-06-29 09:59:47 |
Utkarsh Gupta |
livecd-rootfs (Ubuntu): assignee |
|
Thomas Bechtold (toabctl) |
|
| 2022-06-29 09:59:57 |
Utkarsh Gupta |
nominated for series |
|
Ubuntu Focal |
|
| 2022-06-29 09:59:57 |
Utkarsh Gupta |
bug task added |
|
livecd-rootfs (Ubuntu Focal) |
|
| 2022-06-29 09:59:57 |
Utkarsh Gupta |
nominated for series |
|
Ubuntu Jammy |
|
| 2022-06-29 09:59:57 |
Utkarsh Gupta |
bug task added |
|
livecd-rootfs (Ubuntu Jammy) |
|
| 2022-06-29 09:59:57 |
Utkarsh Gupta |
nominated for series |
|
Ubuntu Impish |
|
| 2022-06-29 09:59:57 |
Utkarsh Gupta |
bug task added |
|
livecd-rootfs (Ubuntu Impish) |
|
| 2022-06-29 10:05:54 |
Utkarsh Gupta |
bug task deleted |
livecd-rootfs (Ubuntu) |
|
|
| 2022-06-29 10:06:02 |
Utkarsh Gupta |
bug task deleted |
livecd-rootfs (Ubuntu Focal) |
|
|
| 2022-06-29 10:06:05 |
Utkarsh Gupta |
bug task deleted |
livecd-rootfs (Ubuntu Impish) |
|
|
| 2022-06-29 10:06:07 |
Utkarsh Gupta |
bug task deleted |
livecd-rootfs (Ubuntu Jammy) |
|
|
| 2022-06-29 10:07:33 |
Utkarsh Gupta |
bug task added |
|
livecd-rootfs (Ubuntu) |
|
| 2022-06-29 10:07:51 |
Utkarsh Gupta |
nominated for series |
|
Ubuntu Focal |
|
| 2022-06-29 10:07:51 |
Utkarsh Gupta |
bug task added |
|
livecd-rootfs (Ubuntu Focal) |
|
| 2022-06-29 10:07:51 |
Utkarsh Gupta |
nominated for series |
|
Ubuntu Jammy |
|
| 2022-06-29 10:07:51 |
Utkarsh Gupta |
bug task added |
|
livecd-rootfs (Ubuntu Jammy) |
|
| 2022-06-29 10:07:51 |
Utkarsh Gupta |
nominated for series |
|
Ubuntu Impish |
|
| 2022-06-29 10:07:51 |
Utkarsh Gupta |
bug task added |
|
livecd-rootfs (Ubuntu Impish) |
|
| 2022-06-29 10:08:46 |
Utkarsh Gupta |
livecd-rootfs (Ubuntu): assignee |
|
Thomas Bechtold (toabctl) |
|
| 2022-06-29 10:08:49 |
Utkarsh Gupta |
livecd-rootfs (Ubuntu): status |
New |
In Progress |
|
| 2022-06-29 10:08:51 |
Utkarsh Gupta |
livecd-rootfs (Ubuntu): importance |
Undecided |
High |
|
| 2022-06-29 10:59:47 |
Luís Infante da Câmara |
livecd-rootfs (Ubuntu): status |
In Progress |
Fix Committed |
|
| 2022-06-29 11:31:06 |
Thomas Bechtold |
description |
This cloud image:
build_name: server
serial: 20220411.2
...ships with a "user-modified" /etc/ssh/sshd_config. This results in a confusing ucf prompt when upgrading from Focal to Jammy.
It looks like this is being done here: https://git.launchpad.net/ubuntu/+source/livecd-rootfs/tree/live-build/ubuntu-cpc/hooks.d/chroot/052-ssh_authentication.chroot
User impact: this messes up automation; it is a common use of cloud images for users to automate their server deployments which generally involves running a dist-upgrade and then bootstrapping some kind of configuration management system.
As well as during an upgrade between releases, this will happen if openssh-server needs to change its /etc/ssh/sshd_config in an SRU or security update. Even users who have not touched /etc/ssh/sshd_config will be told that they have and the default is to keep the user "modified" version, so the change will not be applied.
Workaround: users can use something like: apt-get update && UCF_FORCE_CONFOLD=1 apt-get -y dist-upgrade. Note that to avoid prompts in various other cases users should also set DEBIAN_FRONTEND=noninteractive, run apt-get with -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" and consider redirecting stdin from /dev/null.
Background:
This has happened multiple times before. Please put CI in place to avoid this regressing again. See bug 1485685, bug 1581044, bug 1581046, bug 1323772, bug 1747464. |
This cloud image:
build_name: server
serial: 20220411.2
...ships with a "user-modified" /etc/ssh/sshd_config. This results in a confusing ucf prompt when upgrading from Focal to Jammy.
It looks like this is being done here: https://git.launchpad.net/ubuntu/+source/livecd-rootfs/tree/live-build/ubuntu-cpc/hooks.d/chroot/052-ssh_authentication.chroot
User impact: this messes up automation; it is a common use of cloud images for users to automate their server deployments which generally involves running a dist-upgrade and then bootstrapping some kind of configuration management system.
As well as during an upgrade between releases, this will happen if openssh-server needs to change its /etc/ssh/sshd_config in an SRU or security update. Even users who have not touched /etc/ssh/sshd_config will be told that they have and the default is to keep the user "modified" version, so the change will not be applied.
Workaround: users can use something like: apt-get update && UCF_FORCE_CONFOLD=1 apt-get -y dist-upgrade. Note that to avoid prompts in various other cases users should also set DEBIAN_FRONTEND=noninteractive, run apt-get with -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" and consider redirecting stdin from /dev/null.
Background:
This has happened multiple times before. Please put CI in place to avoid this regressing again. See bug 1485685, bug 1581044, bug 1581046, bug 1323772, bug 1747464.
This needs to be backported to >= Focal so upgrades from Focal to Jammy do not result in the ucf prompt.
[Test Plan]
1) build image (eg. with ubuntu-old-fashioned) with the changes from here
2) check that there is no modification for /etc/ssh/sshd_config via:
$ ucfq openssh-server
3) check that the new configuration file under /etc/ssh/sshd_config.d/10-cloudimg-settings.conf is there and contains the correct setting
[Where problems could occur]
Password authentication could be enabled after that change because sshd does not read the new configuration for whatever reason. This can be checked with "sudo sshd -T|grep passwordauthentication" |
|
| 2022-06-29 11:33:55 |
Thomas Bechtold |
livecd-rootfs (Ubuntu Jammy): status |
New |
In Progress |
|
| 2022-06-29 11:33:58 |
Thomas Bechtold |
livecd-rootfs (Ubuntu Jammy): assignee |
|
Thomas Bechtold (toabctl) |
|
| 2022-06-29 11:34:06 |
Thomas Bechtold |
merge proposal linked |
|
https://code.launchpad.net/~toabctl/livecd-rootfs/+git/livecd-rootfs-1/+merge/425870 |
|
| 2022-06-29 12:46:58 |
Launchpad Janitor |
livecd-rootfs (Ubuntu): status |
Fix Committed |
Fix Released |
|
| 2022-07-06 13:35:41 |
Łukasz Zemczak |
livecd-rootfs (Ubuntu Jammy): status |
In Progress |
Fix Committed |
|
| 2022-07-06 13:35:42 |
Łukasz Zemczak |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2022-07-06 13:35:44 |
Łukasz Zemczak |
bug |
|
|
added subscriber SRU Verification |
| 2022-07-06 13:35:47 |
Łukasz Zemczak |
tags |
|
verification-needed verification-needed-jammy |
|
| 2022-07-06 19:54:33 |
Thomas Bechtold |
tags |
verification-needed verification-needed-jammy |
verification-done-jammy verification-needed |
|
| 2022-07-07 16:42:43 |
Thomas Bechtold |
tags |
verification-done-jammy verification-needed |
verification-needed verification-needed-jammy |
|
| 2022-07-07 17:53:08 |
Robie Basak |
bug task added |
|
cloud-init (Ubuntu) |
|
| 2022-07-07 17:56:26 |
Robie Basak |
tags |
verification-needed verification-needed-jammy |
verification-failed verification-failed-jammy |
|
| 2022-07-11 12:18:02 |
Thomas Bechtold |
tags |
verification-failed verification-failed-jammy |
regression-proposed verification-failed verification-failed-jammy |
|
| 2022-07-11 12:19:32 |
Thomas Bechtold |
merge proposal linked |
|
https://code.launchpad.net/~toabctl/livecd-rootfs/+git/livecd-rootfs-1/+merge/426626 |
|
| 2022-07-11 12:19:45 |
Thomas Bechtold |
merge proposal linked |
|
https://code.launchpad.net/~toabctl/livecd-rootfs/+git/livecd-rootfs-1/+merge/426625 |
|
| 2022-07-11 13:51:39 |
James Falcon |
cloud-init (Ubuntu): importance |
Undecided |
High |
|
| 2022-07-13 03:57:14 |
Chad Smith |
cloud-init (Ubuntu): assignee |
|
Alberto Contreras (aciba) |
|
| 2022-07-14 13:48:29 |
Łukasz Zemczak |
tags |
regression-proposed verification-failed verification-failed-jammy |
regression-proposed verification-needed verification-needed-jammy |
|
| 2022-07-27 18:10:31 |
Launchpad Janitor |
livecd-rootfs (Ubuntu Jammy): status |
Fix Committed |
Fix Released |
|
| 2022-07-27 22:54:32 |
Robie Basak |
livecd-rootfs (Ubuntu Jammy): status |
Fix Released |
Triaged |
|
| 2022-08-04 17:10:14 |
Brett Holman |
cloud-init (Ubuntu): status |
New |
In Progress |
|
| 2022-08-05 21:15:06 |
Chloé Smith |
bug |
|
|
added subscriber Chloé Smith |
| 2022-08-05 22:35:34 |
Chad Smith |
cloud-init (Ubuntu): status |
In Progress |
Fix Committed |
|
| 2022-08-15 20:52:24 |
Launchpad Janitor |
cloud-init (Ubuntu): status |
Fix Committed |
Fix Released |
|
| 2022-08-22 09:48:32 |
Alberto Contreras |
bug |
|
|
added subscriber Alberto Contreras |
| 2022-08-23 08:47:32 |
Thomas Bechtold |
merge proposal linked |
|
https://code.launchpad.net/~toabctl/livecd-rootfs/+git/livecd-rootfs-1/+merge/428777 |
|
| 2022-09-12 11:40:51 |
Utkarsh Gupta |
livecd-rootfs (Ubuntu): status |
Fix Released |
In Progress |
|
| 2022-09-13 18:18:41 |
Brian Murray |
livecd-rootfs (Ubuntu Focal): importance |
Undecided |
High |
|
| 2022-09-13 18:19:42 |
Brian Murray |
cloud-init (Ubuntu Impish): status |
New |
Won't Fix |
|
| 2022-09-13 18:19:45 |
Brian Murray |
livecd-rootfs (Ubuntu Impish): status |
New |
Won't Fix |
|
| 2022-09-13 18:19:48 |
Brian Murray |
livecd-rootfs (Ubuntu Jammy): importance |
Undecided |
High |
|
| 2022-09-13 18:19:53 |
Brian Murray |
cloud-init (Ubuntu Focal): importance |
Undecided |
High |
|
| 2022-09-13 18:19:56 |
Brian Murray |
cloud-init (Ubuntu Jammy): importance |
Undecided |
High |
|
| 2022-09-13 22:59:50 |
Launchpad Janitor |
livecd-rootfs (Ubuntu): status |
In Progress |
Fix Released |
|
| 2023-09-28 09:47:36 |
Ubuntu Archive Robot |
bug |
|
|
added subscriber Steve Langasek |
| 2023-09-28 11:24:35 |
Thomas Bechtold |
livecd-rootfs (Ubuntu Jammy): status |
Triaged |
Fix Committed |
|
| 2023-09-28 11:24:40 |
Thomas Bechtold |
livecd-rootfs (Ubuntu Focal): assignee |
|
Thomas Bechtold (toabctl) |
|
| 2023-09-28 11:24:53 |
Thomas Bechtold |
livecd-rootfs (Ubuntu Focal): status |
New |
In Progress |
|
| 2023-09-28 11:31:51 |
Thomas Bechtold |
cloud-init (Ubuntu Jammy): status |
New |
Fix Released |
|
| 2023-09-28 11:31:53 |
Thomas Bechtold |
cloud-init (Ubuntu Focal): status |
New |
Fix Released |
|
| 2023-10-09 15:03:53 |
Utkarsh Gupta |
merge proposal linked |
|
https://code.launchpad.net/~toabctl/livecd-rootfs/+git/livecd-rootfs-1/+merge/452352 |
|
| 2023-10-09 21:48:01 |
Ubuntu Archive Robot |
bug |
|
|
added subscriber Utkarsh Gupta |
