[Bug 1759280] Re: [FFe] version 17: FIPS updates

Andreas Hasenack andreas at canonical.com
Tue Mar 27 15:08:35 UTC 2018


Also attaching the build log, because that ppa I linked to in the
description will be gone after the upload is done.

** Description changed:

  Please update ubuntu-advantage-tools to version 17. These are the changes:
    * Added enable-fips-updates command. This command enables the fips-updates repository to install updates to FIPS modules. The updated modules from fips-updates repository are non-certified.
    * Add repository pinning for FIPS packages
    * Check that all prerequisite packages are installed when enabling FIPS
    * Support returning the status for a single service
  
  All but the last bit are about FIPS, which is not enabled for Bionic. We
  would like to have it in bionic to allow us to SRU it to xenial, where
  fips is enabled and supported.
  
  The last change (status for a single service) is mostly a cosmetic general feature:
  $ ua status fips
  esm: disabled (not available)
  fips: disabled (not available)
  livepatch: disabled
  
  vs
  
  $ ua status fips
  fips: disabled (not available)
+ 
+ 
+ Build log: https://launchpad.net/~ahasenack/+archive/ubuntu/ua-tools-fips-updates-1759280/+build/14502245
+ Notice that tests are run at package build time

** Attachment added: "buildlog_ubuntu-bionic-amd64.ubuntu-advantage-tools_17_ppa1_BUILDING.txt.gz"
   https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/1759280/+attachment/5092420/+files/buildlog_ubuntu-bionic-amd64.ubuntu-advantage-tools_17_ppa1_BUILDING.txt.gz

** Description changed:

  Please update ubuntu-advantage-tools to version 17. These are the changes:
    * Added enable-fips-updates command. This command enables the fips-updates repository to install updates to FIPS modules. The updated modules from fips-updates repository are non-certified.
    * Add repository pinning for FIPS packages
    * Check that all prerequisite packages are installed when enabling FIPS
    * Support returning the status for a single service
  
  All but the last bit are about FIPS, which is not enabled for Bionic. We
  would like to have it in bionic to allow us to SRU it to xenial, where
  fips is enabled and supported.
  
  The last change (status for a single service) is mostly a cosmetic general feature:
  $ ua status fips
  esm: disabled (not available)
  fips: disabled (not available)
  livepatch: disabled
  
  vs
  
  $ ua status fips
  fips: disabled (not available)
  
- 
  Build log: https://launchpad.net/~ahasenack/+archive/ubuntu/ua-tools-fips-updates-1759280/+build/14502245
  Notice that tests are run at package build time
+ 
+ PPA for testing: https://launchpad.net/~ahasenack/+archive/ubuntu/ua-
+ tools-fips-updates-1759280

-- 
You received this bug notification because you are a member of Ubuntu
Server, which is subscribed to ubuntu-advantage-tools in Ubuntu.
https://bugs.launchpad.net/bugs/1759280

Title:
  [FFe] version 17: FIPS updates

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-tools/+bug/1759280/+subscriptions



More information about the Ubuntu-server-bugs mailing list