<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">I've added a merge proposal for sru-release</div><div class="gmail_quote"> <a href="https://code.launchpad.net/~smoser/ubuntu-archive-tools/package-sets/+merge/348334">https://code.launchpad.net/~smoser/ubuntu-archive-tools/package-sets/+merge/348334</a></div><div class="gmail_quote"><br></div><div class="gmail_quote">I believe it will improve the situation by insisting on order and that some</div><div class="gmail_quote">packages will go in together.</div><div class="gmail_quote"><br></div><div class="gmail_quote">Also, I did dig a bit more, and it looks like the core of the issue in my</div><div class="gmail_quote">original post can be seen at</div><div class="gmail_quote"> <a href="https://launchpad.net/ubuntu/+source/linux-meta-hwe/4.13.0.45.64/+publishinghistory">https://launchpad.net/ubuntu/+source/linux-meta-hwe/4.13.0.45.64/+publishinghistory</a></div><div class="gmail_quote"> <a href="https://launchpad.net/ubuntu/+source/linux-hwe/4.13.0-45.50%7E16.04.1/+publishinghistory">https://launchpad.net/ubuntu/+source/linux-hwe/4.13.0-45.50%7E16.04.1/+publishinghistory</a></div><div class="gmail_quote"><br></div><div class="gmail_quote">linux-meta-hwe went into security 11 minutes before linux-hwe.</div><div class="gmail_quote"><br></div><div class="gmail_quote"><br></div><div class="gmail_quote"><br></div><div class="gmail_quote">let</div><div class="gmail_quote">On Wed, Jun 13, 2018 at 12:39 PM, Scott Moser <span dir="ltr"><<a href="mailto:smoser@ubuntu.com" target="_blank" id="gmail-tmpid_4517">smoser@ubuntu.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">We have a curtin test that runs (simplified)<br>
  apt-get update<br>
  apt-get install linux-image-generic-hwe-16.04<br>
The jenkins run [1] failed on Monday (06-11), console log at [2] with<br>
the following:<br>
<br>
|  Some packages could not be installed. This may mean that you have<br>
|  requested an impossible situation or if you are using the unstable<br>
|  distribution that some required packages have not yet been created<br>
|  or been moved out of Incoming.<br>
|  The following information may help to resolve the situation:<br>
|  The following packages have unmet dependencies:<br>
|   linux-image-generic-hwe-16.04 :<br>
|      Depends: linux-image-4.13.0-45-generic but it is not installable<br>
|      Depends: linux-image-extra-4.13.0-45-<wbr>generic but it is not installable<br>
|      Recommends: thermald but it is not going to be installed<br>
|  E: Unable to correct problems, you have held broken packages.<br>
<br>
So it would appear that we hit an unfortunate race when<br>
linux-meta-hwe [3] was in xenial-updates but linux-hwe [4] was not.<br>
<br>
Per the email time stamps in those messages there was a 4 second window<br>
when this could have occurred.  We hit this issue around 15:36, around 20<br>
minutes after the time stamp on the xenial-changes email (15:14).<br>
I realize that you probably can't trust those timestamps 100%, that<br>
the publisher runs on some cycle, and that archive sync is non-atomic.<br>
<br>
If the email messages are to be believed, linux-meta-hwe [3]<br>
was accepted before linux-hwe [4].  linux-meta-hwe depends on a specific<br>
version of linux-hwe, but linux-hwe has no dependency on linux-meta-hwe.<br>
It seems that at very least linux-hwe should be let in before<br>
linux-meta-hwe.<br>
We've seen similar issues with grub2 and grub2-signed.  I believe those<br>
two are co-dependent making them trickier.<br>
<br>
This is a stable release that had its canonical archive<br>
in a broken state.  Can anything be done to stop this from occurring?<br>
<br>
Scott<br>
<br>
--<br>
[1] <a href="https://jenkins.ubuntu.com/server/view/cloud-init,%20curtin,%20streams/job/curtin-vmtest-daily-x/120/" rel="noreferrer" target="_blank" id="gmail-tmpid_9113">https://jenkins.ubuntu.com/<wbr>server/view/cloud-init,%<wbr>20curtin,%20streams/job/<wbr>curtin-vmtest-daily-x/120/</a><br>
[2] <a href="http://paste.ubuntu.com/p/23JwPy76tY/" rel="noreferrer" target="_blank" id="gmail-tmpid_4267">http://paste.ubuntu.com/p/<wbr>23JwPy76tY/</a><br>
[3] <a href="https://lists.ubuntu.com/archives/xenial-changes/2018-June/021385.html" rel="noreferrer" target="_blank" id="gmail-tmpid_4592">https://lists.ubuntu.com/<wbr>archives/xenial-changes/2018-<wbr>June/021385.html</a><br>
[4] <a href="https://lists.ubuntu.com/archives/xenial-changes/2018-June/021386.html" rel="noreferrer" target="_blank" id="gmail-tmpid_2518">https://lists.ubuntu.com/<wbr>archives/xenial-changes/2018-<wbr>June/021386.html</a><br>
</blockquote></div><br></div></div>