[Bug 2016593] Re: FFE: update google-guest-agent from 20220622.00-0ubuntu to 20230330.00-0ubuntu1

Utkarsh Gupta 2016593 at bugs.launchpad.net
Wed Apr 26 12:45:46 UTC 2023 

** Description changed:

+ [FFE]
+ =====
+ 
  One of your cloud partners have informed us that there is a customer
  issue blocking on this update, so we are attempting to expedite it ahead
  of (despite) Lunar’s release.
  
  This package is in universe and is not seeded so there'll be no need to
  re-spin the images.
  
  Here's the changelog diff:
  
-   * New upstream version 20230330.00.
-     - correct expired key handling (#175)
-     - Expired key tests (#176)
-     - add members to OWNERS (#178) 
-     - Workload certs (#177)
-     - Workload certificate refresh (#182)
-     - update workload_cert permissions (#180) 
-     - write workload cert status file (#184)
-     - add workload cert refresh to preset (#185) 
-     - Updates to gce-workload-cert-refresh (#186)
-     - Fix typo with wsfc agent (#189)
-     - Validate user key for whitespace chars (#188)
-     - Windows: retry adding MDS route (#194)
-     - Updating logging module so cloud logs are flushed prior to exit
-       (#196)
-     - Update owners file (#199) 
-     - Update OWNERS (#201) 
-     - Allow a comment part of a pub ssh key to have an arbitrary format
-       (#198)
+   * New upstream version 20230330.00.
+     - correct expired key handling (#175)
+     - Expired key tests (#176)
+     - add members to OWNERS (#178)
+     - Workload certs (#177)
+     - Workload certificate refresh (#182)
+     - update workload_cert permissions (#180)
+     - write workload cert status file (#184)
+     - add workload cert refresh to preset (#185)
+     - Updates to gce-workload-cert-refresh (#186)
+     - Fix typo with wsfc agent (#189)
+     - Validate user key for whitespace chars (#188)
+     - Windows: retry adding MDS route (#194)
+     - Updating logging module so cloud logs are flushed prior to exit
+       (#196)
+     - Update owners file (#199)
+     - Update OWNERS (#201)
+     - Allow a comment part of a pub ssh key to have an arbitrary format
+       (#198)
  
  Upstream diff: https://github.com/GoogleCloudPlatform/guest-
  agent/compare/20220622.00...20230330.00
  
  There's no big feature here but an accumulation of small fixes, et al.
  There are some CVEs in the vendored dependencies which will also be
  included in this update.
  
  Let us know if you need any more information. Thank you!
+ 
+ [SRU]
+ =====
+ 
+ [Impact]
+ 
+ This package is provided by Google for installation within guests that
+ run on Google Compute Engine. It is part of a collection of tools and
+ daemons, that ensure that the Ubuntu images published to GCE run
+ properly on their platform.
+ 
+ Cloud platforms evolve at a rate that can't be handled in six-month
+ increments, and they will often develop features that they would like to
+ be available to customers who don't want to upgrade from earlier Ubuntu
+ releases. As such, updating this package to more recent upstream
+ releases is required within all Ubuntu releases, so they continue to
+ function properly in their environment.
+ 
+ [Test Case]
+ 
+ When a new version of this package is uploaded to -proposed, the
+ following will be done:
+ 
+  * an image based on -proposed will be built for GCE and published to the ubuntu-os-cloud-devel project
+  * the GCE team will be asked to validate that the new package addresses the issues it is expected to address, and that the image passes their internal image validation.
+  * Each test image will be launched, and we will validate:
+  ** the package version(s)
+  ** that the correct ssh keys have been imported
+  ** that the google specific services are running successfully
+ 
+ If all the testing indicates that the image containing the new package
+ is acceptable, verification will be considered to be done.
+ 
+ [Other Information]
+ 
+ This bug is used for tracking of releasing the new upstream version for
+ all supported series, as per the approved policy mentioned in the
+ following MRE:
+ 
+ https://wiki.ubuntu.com/gce-compute-image-packages-Updates
+ 
+ The updated package is not built for riscv64 on Focal, but it is not
+ used on riscv64 either, thus please release the SRU without the risc64
+ binaries.
+ 
+ The package does not build for powerpc on Xenial, but this is OK since
+ it is not used on powerpc either.

** Summary changed:

- FFE: update google-guest-agent from 20220622.00-0ubuntu to 20230330.00-0ubuntu1
+ FFe+SRU: update google-guest-agent from 20220622.00-0ubuntu to 20230330.00-0ubuntu1

** Also affects: google-guest-agent (Ubuntu Bionic)
   Importance: Undecided
       Status: New

** Also affects: google-guest-agent (Ubuntu Jammy)
   Importance: Undecided
       Status: New

** Also affects: google-guest-agent (Ubuntu Kinetic)
   Importance: Undecided
       Status: New

** Also affects: google-guest-agent (Ubuntu Focal)
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to google-guest-agent in Ubuntu.
https://bugs.launchpad.net/bugs/2016593

Title:
  FFe+SRU: update google-guest-agent from 20220622.00-0ubuntu to
  20230330.00-0ubuntu1

Status in google-guest-agent package in Ubuntu:
  Fix Released
Status in google-guest-agent source package in Bionic:
  New
Status in google-guest-agent source package in Focal:
  New
Status in google-guest-agent source package in Jammy:
  New
Status in google-guest-agent source package in Kinetic:
  New

Bug description:
  [FFE]
  =====

  One of your cloud partners have informed us that there is a customer
  issue blocking on this update, so we are attempting to expedite it
  ahead of (despite) Lunar’s release.

  This package is in universe and is not seeded so there'll be no need
  to re-spin the images.

  Here's the changelog diff:

    * New upstream version 20230330.00.
      - correct expired key handling (#175)
      - Expired key tests (#176)
      - add members to OWNERS (#178)
      - Workload certs (#177)
      - Workload certificate refresh (#182)
      - update workload_cert permissions (#180)
      - write workload cert status file (#184)
      - add workload cert refresh to preset (#185)
      - Updates to gce-workload-cert-refresh (#186)
      - Fix typo with wsfc agent (#189)
      - Validate user key for whitespace chars (#188)
      - Windows: retry adding MDS route (#194)
      - Updating logging module so cloud logs are flushed prior to exit
        (#196)
      - Update owners file (#199)
      - Update OWNERS (#201)
      - Allow a comment part of a pub ssh key to have an arbitrary format
        (#198)

  Upstream diff: https://github.com/GoogleCloudPlatform/guest-
  agent/compare/20220622.00...20230330.00

  There's no big feature here but an accumulation of small fixes, et al.
  There are some CVEs in the vendored dependencies which will also be
  included in this update.

  Let us know if you need any more information. Thank you!

  [SRU]
  =====

  [Impact]

  This package is provided by Google for installation within guests that
  run on Google Compute Engine. It is part of a collection of tools and
  daemons, that ensure that the Ubuntu images published to GCE run
  properly on their platform.

  Cloud platforms evolve at a rate that can't be handled in six-month
  increments, and they will often develop features that they would like
  to be available to customers who don't want to upgrade from earlier
  Ubuntu releases. As such, updating this package to more recent
  upstream releases is required within all Ubuntu releases, so they
  continue to function properly in their environment.

  [Test Case]

  When a new version of this package is uploaded to -proposed, the
  following will be done:

   * an image based on -proposed will be built for GCE and published to the ubuntu-os-cloud-devel project
   * the GCE team will be asked to validate that the new package addresses the issues it is expected to address, and that the image passes their internal image validation.
   * Each test image will be launched, and we will validate:
   ** the package version(s)
   ** that the correct ssh keys have been imported
   ** that the google specific services are running successfully

  If all the testing indicates that the image containing the new package
  is acceptable, verification will be considered to be done.

  [Other Information]

  This bug is used for tracking of releasing the new upstream version
  for all supported series, as per the approved policy mentioned in the
  following MRE:

  https://wiki.ubuntu.com/gce-compute-image-packages-Updates

  The updated package is not built for riscv64 on Focal, but it is not
  used on riscv64 either, thus please release the SRU without the risc64
  binaries.

  The package does not build for powerpc on Xenial, but this is OK since
  it is not used on powerpc either.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/google-guest-agent/+bug/2016593/+subscriptions

More information about the foundations-bugs mailing list