[Bug 1920836] Re: Show Extended Security Maintenence status
Chad Smith
1920836 at bugs.launchpad.net
Tue Nov 2 23:35:07 UTC 2021
# Focal desktop results: SUCCESS
1. # install proposed
$ cat > setup_proposed.sh <<EOF
#!/bin/bash
mirror=http://archive.ubuntu.com/ubuntu
echo deb \$mirror \$(lsb_release -sc)-proposed main | tee /etc/apt/sources.list.d/proposed.list
apt-get update -q
apt-get install -qy software-properties-gtk software-properties-common python3-software-properties
EOF
$ IP=`uvt-kvm ip ubuntu20.04`
$ scp setup_proposed.sh csmith@$IP:.
csmith at csmith-Standard-PC-Q35-ICH9-2009:~$ lsb_release -sc
focal
csmith at csmith-Standard-PC-Q35-ICH9-2009:~$ apt policy software-properties-gtk
software-properties-gtk:
Installed: 0.99.9.8
Candidate: 0.99.9.8
Version table:
*** 0.99.9.8 500
500 http://archive.ubuntu.com/ubuntu focal-proposed/main amd64 Packages
500 http://archive.ubuntu.com/ubuntu focal-proposed/main i386 Packages
100 /var/lib/dpkg/status
0.98.9.5 500
500 http://us.archive.ubuntu.com/ubuntu focal-updates/main amd64 Packages
500 http://us.archive.ubuntu.com/ubuntu focal-updates/main i386 Packages
0.98.9.2 500
500 http://security.ubuntu.com/ubuntu focal-security/main amd64 Packages
500 http://security.ubuntu.com/ubuntu focal-security/main i386 Packages
0.98.9 500
500 http://us.archive.ubuntu.com/ubuntu focal/main amd64 Packages
500 http://us.archive.ubuntu.com/ubuntu focal/main i386 Packages
csmith at csmith-Standard-PC-Q35-ICH9-2009:~$ [ -f /var/lib/ubuntu-advantage-tools/status.json ] && echo "status.json PRESENT" || echo "status.json ABSENT"
status.json ABSENT
csmith at csmith-Standard-PC-Q35-ICH9-2009:~$ software-properties-gtk
# no errors
3. Updates tab in "Software & Updates" dialog
Basic Security Maintenance Extended... # Link goes to https://ubuntu.com/security/esm
Active until 04/23/2025
4. Cancel button
# no errors on software-properties-gtk console
5. Attach and validate
csmith at csmith-Standard-PC-Q35-ICH9-2009:~$ sudo ua attach <REDACTED>
[sudo] password for csmith:
Enabling default service esm-apps
Updating package lists
UA Apps: ESM enabled
Enabling default service esm-infra
Updating package lists
UA Infra: ESM enabled
Enabling default service livepatch
Canonical livepatch enabled.
This machine is now attached to 'server-team-ua-client-ci-uaa'
SERVICE ENTITLED STATUS DESCRIPTION
cis yes disabled Center for Internet Security Audit Tools
esm-apps yes enabled UA Apps: Extended Security Maintenance (ESM)
esm-infra yes enabled UA Infra: Extended Security Maintenance (ESM)
fips yes disabled NIST-certified core packages
fips-updates yes disabled NIST-certified core packages with priority security updates
livepatch yes enabled Canonical Livepatch service
NOTICES
Operation in progress: ua attach
Enable services with: ua enable <service>
Account: UA Client Test
Subscription: server-team-ua-client-ci-uaa
Valid until: 9999-12-31 00:00:00+00:00
Technical support level: essential
csmith at csmith-Standard-PC-Q35-ICH9-2009:~$ software-properties-gtk
# no token expiry error messages
6. Click Updates tab and validate:
Extended Security Maintenance
Active until 12/31/1999
** Tags removed: verification-needed-focal
** Tags added: verification-done-focal
--
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to software-properties in Ubuntu.
https://bugs.launchpad.net/bugs/1920836
Title:
Show Extended Security Maintenence status
Status in software-properties package in Ubuntu:
Fix Released
Status in software-properties source package in Xenial:
New
Status in software-properties source package in Bionic:
Fix Committed
Status in software-properties source package in Focal:
Fix Committed
Status in software-properties source package in Hirsute:
Fix Committed
Bug description:
[Impact]
There is not currently a graphical method of determining if a system is subscribed to [Extended Security Maintenance](https://ubuntu.com/security/esm) updates. This is resolved by adding some [new UI](https://wiki.ubuntu.com/SoftwareUpdates#Extended_Security_Maintenance) to the software properties application.
[Test Case]
1. Install latest version of Ubuntu advantage:
$ sudo add-apt-repository ppa:ua-client/stable
$ sudo apt update
$ sudo apt upgrade
2. Open Software Properties
3. Go to Updates tab.
Expected result:
Information is shown that indicates if this system is using Extended Security Maintenance updates, when updates will supported until, and a link to upgrade to ESM.
Observed result:
No ESM information currently shown.
[Where problems could occur]
- Software properties could hit a bug getting a response from the ua app. The current code carefully checks if and what is returned, falling back to a safe default behavior.
- Launching software properties could trigger a bug in the ua app.
- Software properties could show incorrect information, causing confusion for the user. The solution uses information from distro-info and the ua app which means software-properties contains no data about ESM, and instead relies on these apps that can be updated if things change.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/software-properties/+bug/1920836/+subscriptions
More information about the foundations-bugs
mailing list