NBS kernel removals: round two

Dimitri John Ledkov dimitri.ledkov at canonical.com
Thu Jun 1 20:34:12 UTC 2023


On Thu, 1 Jun 2023 at 21:08, Steve Langasek <steve.langasek at ubuntu.com> wrote:
>
> Hi folks,
>
> Well, we found out that removing all NBS kernel packages for stable series
> was not altogether without its problems for users.  We have modified the
> removal policy going forward in response to feedback.
>
> Meanwhile, in preparation for the move of bionic from standard support to
> ESM, the Release Team has noticed that NBS cleanup for ESM releases has so
> far been deferred until the releases go fully EOL.
>
> At this point, the *newest* kernel image in trusty-security is missing 3
> years of security updates.  I believe it's therefore reasonable to require
> that users doing deployments of trusty today should do so using a kernel
> that is *no more than* 3 years out of date, before immediately enabling
> Ubuntu Pro and upgrading to a recent kernel security release.
>
> Consequently, I will be removing all kernel packages older than linux
> 3.13.0-170.220 from trusty-{updates,security} next week.
>

I believe 3.13.0-165-generic is required to be published, as that's
the one that is used by
http://archive.ubuntu.com/ubuntu/dists/trusty-updates/main/installer-amd64/current/images/netboot/mini.iso
 and all the related boot artifacts.

Also please ensure that 4.4.0-142 remains published too, as that one
is used by the hwe-mini.iso and related boot artifacts.

We should realistically continue to support the usage of the last
installer we built
https://launchpad.net/ubuntu/+source/debian-installer/20101020ubuntu318.46

Apart from those two, all others can be cleaned up. Or set the above
versions as the ceilings for removals of generic & lts-xenial kernels.

-- 
okurrr,

Dimitri



More information about the ubuntu-devel mailing list