[Bug 1977860] Re: Backport 1.18.1 to 18.04, 20.04 and 22.04 LTS

[Lucas Kanashiro]

** Description changed:

  [Rationale for update in 22.04]
  As requested by sil2100, we don’t want upgrade from 20.04 LTS downgrading the Golang 1.18 version. Hence updating this package too to 1.18.3 which includes multile security fixes compared to 1.18.1:
  
  - go1.18.2 (released 2022-05-10) includes security fixes to the syscall
  package, as well as bug fixes to the compiler, runtime, the go command,
  and the crypto/x509, go/types, net/http/httptest, reflect, and
  sync/atomic packages. See the Go 1.18.2 milestone on our issue tracker
  for details.
  
  -  go1.18.3 (released 2022-06-01) includes security fixes to the
  crypto/rand, crypto/tls, os/exec, and path/filepath packages, as well as
  bug fixes to the compiler, and the crypto/tls and text/template/parse
  packages. See the Go 1.18.3 milestone on our issue tracker for details.
  
- 
  [Rationale for new package in 20.04]
  
  As part of our entreprise desktop offering, we need to backport a recent version of ADSys to 20.04 LTS.
  This version depends on a recent Go version for embedding and more (golang 1.18), thus we need to backport Go 1.18 as a new separate binary package, as it’s already the case for current adsys and the backport of 1.16.
  
+ The latest docker.io version in Lunar requires Golang 1.18 to be
+ backported to Focal.
+ 
+ [Rationale for new package in 18.04]
+ 
+ The latest docker.io version in Lunar requires Golang 1.18 to be
+ backported to Bionic.
+ 
  [Test Plan]
  
-  1. Ensure Golang 1.16 is published in -proposed
-  2. Start a build with a package, requiring Golang 1.18 (dependency + PATH set to Golang 1.18 go binary).
-  3. Ensure the package builds successfully.
-  4. Run go version <your binary> which should display: "go1.18.x" (x being the version uploaded).
+ A smoke test, like this:
+ 
+ $ apt install golang-1.16-go
+ $ PATH=/usr/lib/go-1.16/bin:$PATH
+ $ go version
+ < check it's 1.16 >
+ $ cat > trivial.go
+ package main
+ func main() {}
+ $ go run trivial.go
+ $ cat > trivialcgo.go
+ package main
+ import "C"
+ func main() {}
+ $ go run trivialcgo.go
+ 
+ Then we should verify if docker.io/20.10.21-0ubuntu1 from Lunar builds
+ in Focal/Bionic with the golang-1.18 from -proposed. In order to do
+ that, edit d/control to b-d on golang-1.18-go instead of golang-go, and
+ also add the path containing the new binaries to the $PATH in d/rules
+ (export PATH := $(PATH):/usr/lib/go-1.16/bin/). Uploaded it to a PPA
+ with -proposed enabled and check if it builds on all architectures.
  
  [Where problems could occur]
   * Package depending on this Go version would not be able to compile.
   * As this is a separate, versionned, new package, no impact on existing ones.
   * FYI, we already built ADSys against this Go version in our ppa: https://launchpad.net/~didrocks/+archive/ubuntu/ppa
+ 
+ It's a new package so should not impact any existing behavior. I'm not
+ at all proposing to update the default version of Go in a stable
+ release. FWIW golang-1.18 is already co-installable with other golang
+ versions in other releases.

** Changed in: golang-1.18 (Ubuntu Bionic)
       Status: New => In Progress

** Changed in: golang-1.18 (Ubuntu Focal)
       Status: Fix Committed => In Progress

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to golang-1.18 in Ubuntu.
https://bugs.launchpad.net/bugs/1977860

Title:
  Backport 1.18.1 to 18.04, 20.04 and 22.04 LTS

Status in golang-1.18 package in Ubuntu:
  Fix Released
Status in golang-1.18 source package in Bionic:
  In Progress
Status in golang-1.18 source package in Focal:
  In Progress
Status in golang-1.18 source package in Jammy:
  Incomplete

Bug description:
  [Rationale for update in 22.04]
  As requested by sil2100, we don’t want upgrade from 20.04 LTS downgrading the Golang 1.18 version. Hence updating this package too to 1.18.3 which includes multile security fixes compared to 1.18.1:

  - go1.18.2 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime, the go
  command, and the crypto/x509, go/types, net/http/httptest, reflect,
  and sync/atomic packages. See the Go 1.18.2 milestone on our issue
  tracker for details.

  -  go1.18.3 (released 2022-06-01) includes security fixes to the
  crypto/rand, crypto/tls, os/exec, and path/filepath packages, as well
  as bug fixes to the compiler, and the crypto/tls and
  text/template/parse packages. See the Go 1.18.3 milestone on our issue
  tracker for details.

  [Rationale for new package in 20.04]

  As part of our entreprise desktop offering, we need to backport a recent version of ADSys to 20.04 LTS.
  This version depends on a recent Go version for embedding and more (golang 1.18), thus we need to backport Go 1.18 as a new separate binary package, as it’s already the case for current adsys and the backport of 1.16.

  The latest docker.io version in Lunar requires Golang 1.18 to be
  backported to Focal.

  [Rationale for new package in 18.04]

  The latest docker.io version in Lunar requires Golang 1.18 to be
  backported to Bionic.

  [Test Plan]

  A smoke test, like this:

  $ apt install golang-1.16-go
  $ PATH=/usr/lib/go-1.16/bin:$PATH
  $ go version
  < check it's 1.16 >
  $ cat > trivial.go
  package main
  func main() {}
  $ go run trivial.go
  $ cat > trivialcgo.go
  package main
  import "C"
  func main() {}
  $ go run trivialcgo.go

  Then we should verify if docker.io/20.10.21-0ubuntu1 from Lunar builds
  in Focal/Bionic with the golang-1.18 from -proposed. In order to do
  that, edit d/control to b-d on golang-1.18-go instead of golang-go,
  and also add the path containing the new binaries to the $PATH in
  d/rules (export PATH := $(PATH):/usr/lib/go-1.16/bin/). Uploaded it to
  a PPA with -proposed enabled and check if it builds on all
  architectures.

  [Where problems could occur]
   * Package depending on this Go version would not be able to compile.
   * As this is a separate, versionned, new package, no impact on existing ones.
   * FYI, we already built ADSys against this Go version in our ppa: https://launchpad.net/~didrocks/+archive/ubuntu/ppa

  It's a new package so should not impact any existing behavior. I'm not
  at all proposing to update the default version of Go in a stable
  release. FWIW golang-1.18 is already co-installable with other golang
  versions in other releases.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/golang-1.18/+bug/1977860/+subscriptions