[Bug 2052809] Re: [MIR] bpftrace

[Christian Ehrhardt ]

Doesn't this also need the one in -updates and -proposed to be moved to
main or it might later fall out of it again when the universe version
migrates?

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to bpftrace in Ubuntu.
https://bugs.launchpad.net/bugs/2052809

Title:
  [MIR] bpftrace

Status in bpftrace package in Ubuntu:
  Fix Released

Bug description:
  [Availability]
  - The package bpftrace is already in Ubuntu universe.
  - The package bpftrace build for the architectures it is designed to work on.
  - It currently builds and works for architectures: any
  - Link to package https://launchpad.net/ubuntu/+source/bpftrace

  [Rationale]
  - The package bpftrace is to be supported in Ubuntu main as part of Canonical's
    effort to make Ubuntu a great platform for performance engineering.
  - There is no other/better way to solve this that is already in main or
    should go universe->main instead of this.
  - The package bpftrace is required in Ubuntu main as part of the Noble Numbat
    realease, and hence should be promoted to main before NN feature freeze.

  [Security]
  - No CVEs/security issues in this software in the past
  - No `suid` or `sgid` binaries
  - Binary has *.bt in sbin, this is no problem because these are bpf tracers for
    various things, and are part of the expected functionality of the package
  - Package does not install services, timers or recurring jobs
  - Security has been kept in mind and common isolation/risk-mitigation
    patterns are in place utilizing the following features:
    the package is a debugging tool, and cannot be fully isolated.
  - Packages does not open privileged ports (ports < 1024).
  - Package does not expose any external endpoints
  - Packages does not contain extensions to security-sensitive software
    (filters, scanners, plugins, UI skins, ...)

  [Quality assurance - function/usage]
  - The package works well right after install

  [Quality assurance - maintenance]
  - The package is maintained well in Debian/Ubuntu/Upstream and does
    not have too many, long-term & critical, open bugs
    - Ubuntu https://bugs.launchpad.net/ubuntu/+source/bpftrace/+bug
    - Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=bpftrace
    - Upstream's bug tracker: https://github.com/bpftrace/bpftrace/issues/
  - The package does not deal with exotic hardware we cannot support

  [Quality assurance - testing]
  - The package does not run a test at build time
  - The package does not run an autopkgtest
  - The package does have not failing autopkgtests right now

  [Quality assurance - packaging]
  - debian/watch is present and works
  - debian/control defines a correct Maintainer field
  - This package does not yield massive lintian Warnings, Errors
  - Please link to a recent build log of the package:
    https://launchpadlibrarian.net/711817587/buildlog_ubuntu-noble-amd64.bpftrace_0.20.1-1_BUILDING.txt.gz
  - Please attach the full output you have got from `lintian --pedantic` as an
    extra post to this bug:
    ```
    W: bpftrace source: superfluous-file-pattern resources/*.h [debian/copyright:19]
    P: bpftrace source: silent-on-rules-requiring-root [debian/control]
    ```
  - Lintian overrides are present, but ok because unstripped binaries are
    necessary for bpftrace to function
  - This package does not rely on obsolete or about to be demoted packages.
  - This package has no python2 or GTK2 dependencies
  - The package will not be installed by default
  - Packaging and build is easy, link to debian/rules:
    ```
    #!/usr/bin/make -f

    %:
      dh $@

    override_dh_auto_configure:
      dh_auto_configure -- -DBUILD_TESTING:BOOL=ON -DUSE_SYSTEM_BPF_BCC=1

    STRIP_CMD=strip --keep-symbol=BEGIN_trigger --keep-symbol=END_trigger --remove-section=.comment --remove-section=.note
    override_dh_strip:
      dh_strip -Xbpftrace -Xbpftrace-aotrt
      $(STRIP_CMD) debian/bpftrace/usr/bin/bpftrace
      $(STRIP_CMD) debian/bpftrace/usr/bin/bpftrace-aotrt

    override_dh_auto_install:
      dh_auto_install
      rm -rf debian/bpftrace/usr/share/bpftrace/tools/doc

      # Move binaries to /usr/sbin
      mkdir -p debian/bpftrace/usr/sbin
      mv debian/bpftrace/usr/share/bpftrace/tools/*.bt debian/bpftrace/usr/sbin
      rm -rf debian/bpftrace/usr/share/bpftrace/tools/old
      rmdir debian/bpftrace/usr/share/bpftrace/tools \
            debian/bpftrace/usr/share/bpftrace
    ```

  [UI standards]
  - Application is not end-user facing (does not need translation)

  [Dependencies]
  - There are further dependencies that are not yet in main, MIR for bpfcc is at
    LP: #2052813

  [Standards compliance]
  - This package correctly follows FHS and Debian Policy

  [Maintenance/Owner]
  - The owning team will be Foundations and I have their acknowledgement for
    that commitment
  - The future owning team is not yet subscribed, but will subscribe to
    the package before promotion
  - This does not use static builds
  - This does not use vendored code
  - This package is not rust based
  - The package has been built in the archive more recently than the last
    test rebuild

  [Background information]
  - The Package description explains the package well
  - Upstream Name is bpftrace
  - Link to upstream project: https://github.com/bpftrace/bpftrace
  - This is part of an effort by Canonical to provide performance tooling

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/bpftrace/+bug/2052809/+subscriptions