[Bug 1937303] Re: ubuntu-support-status does mark FIPS packages as unsupported on 18.04

Matthieu Clemenceau 1937303 at bugs.launchpad.net
Wed Jul 28 18:29:38 UTC 2021


** Tags removed: rls-ii-incomings
** Tags added: rls-ff-incoming

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to update-manager in Ubuntu.
https://bugs.launchpad.net/bugs/1937303

Title:
  ubuntu-support-status does mark FIPS packages as unsupported on 18.04

Status in update-manager package in Ubuntu:
  New

Bug description:
  In ubuntu 18.04 with FIPS (via fips or fips-updates stream), ubuntu-
  support-status marks the FIPS packages as unsupported. As these
  packages are used by customers that require support, this message is
  confusing for existing as well as prospectives that test our product.

  ```
  $ sudo ua status
  ...
  fips          yes       n/a       NIST-certified core packages
  fips-updates  yes       enabled   NIST-certified core packages with priority security updates
  ```

  ```
  $ sudo ubuntu-support-status
  [sudo] password for nmav:
  Support status summary of 'ubuntu1804':

  You have 1604 packages (97.8%) supported until dubna 2023 (Canonical -
  5y)

  You have 5 packages (0.3%) that can not/no-longer be downloaded
  You have 31 packages (1.9%) that are unsupported

  Your Hardware Enablement Stack (HWE) is supported until dubna 2023.

  Run with --show-unsupported, --show-supported or --show-all to see more details
  ```

  The following command shows the FIPS-installed packages as
  unsupported:

  ```
  $ sudo ubuntu-support-status --show-unsupported
  Support status summary of 'ubuntu1804':

  You have 1604 packages (97.8%) supported until dubna 2023 (Canonical -
  5y)

  You have 5 packages (0.3%) that can not/no-longer be downloaded
  You have 31 packages (1.9%) that are unsupported

  Your Hardware Enablement Stack (HWE) is supported until dubna 2023.

  No longer downloadable:
  krb5-locales libgssapi-krb5-2 libk5crypto3 libkrb5-3 libkrb5support0

  Unsupported:
  fips-initramfs geany geany-common gnutls-bin gstreamer1.0-gtk3 joe
  kcapi-tools libbrotli1 libgcrypt20 libgcrypt20-dev libgcrypt20-hmac
  libkcapi-dev libkcapi1 libopts25 libssl-dev libssl1.1 libssl1.1-hmac
  libwoff1 linux-fips linux-fips-headers-4.15.0-1060
  linux-headers-4.15.0-1060-fips linux-headers-fips
  linux-image-4.15.0-1060-fips linux-image-fips
  linux-image-hmac-4.15.0-1060-fips linux-modules-4.15.0-1060-fips
  linux-modules-extra-4.15.0-1060-fips openssh-client
  openssh-client-hmac openssl ubuntu-fips
  ```

  All of the packages above are supported via the fips and fips-updates
  ppas.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/update-manager/+bug/1937303/+subscriptions




More information about the foundations-bugs mailing list