[Bug 2039209] [NEW] last-minute surprise /var/cache/swcatalog/cache/C-os-catalog.xb in mantic images

[Steve Langasek]

Public bug reported:

Our last respin of the Ubuntu Desktop ISO for mantic to pick up a new
version of the ubuntu-desktop-installer snap also unexpectedly increased
the total image size by 50MiB.

Tracked this down to the addition of a new file under /var/cache:

$ du -sh /mnt/*/var/cache/swcatalog/cache/C-os-catalog.xb 
8.4M	/mnt/2/var/cache/swcatalog/cache/C-os-catalog.xb
$

This file gets compressed, but we get a SEPARATE copy of it in each of
the per-language squashfs layers on the system.

Previously, this file WAS present in the minimal.enhanced-
secureboot.squashfs, however something has changed to cause this file to
be different in each of the per-language layers on top of this.

A copy also ended up in casper/minimal.standard.live.squashfs that had
not been there before.

I think the image builds should enforce a whitelist of files allowed
under /var/cache and fail the build for unexpected contents for each
given squashfs layer.

** Affects: livecd-rootfs (Ubuntu)
     Importance: High
         Status: New


** Tags: foundations-todo

** Changed in: livecd-rootfs (Ubuntu)
   Importance: Undecided => High

** Tags added: foundations-todo

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to livecd-rootfs in Ubuntu.
https://bugs.launchpad.net/bugs/2039209

Title:
  last-minute surprise /var/cache/swcatalog/cache/C-os-catalog.xb in
  mantic images

Status in livecd-rootfs package in Ubuntu:
  New

Bug description:
  Our last respin of the Ubuntu Desktop ISO for mantic to pick up a new
  version of the ubuntu-desktop-installer snap also unexpectedly
  increased the total image size by 50MiB.

  Tracked this down to the addition of a new file under /var/cache:

  $ du -sh /mnt/*/var/cache/swcatalog/cache/C-os-catalog.xb 
  8.4M	/mnt/2/var/cache/swcatalog/cache/C-os-catalog.xb
  $

  This file gets compressed, but we get a SEPARATE copy of it in each of
  the per-language squashfs layers on the system.

  Previously, this file WAS present in the minimal.enhanced-
  secureboot.squashfs, however something has changed to cause this file
  to be different in each of the per-language layers on top of this.

  A copy also ended up in casper/minimal.standard.live.squashfs that had
  not been there before.

  I think the image builds should enforce a whitelist of files allowed
  under /var/cache and fail the build for unexpected contents for each
  given squashfs layer.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/livecd-rootfs/+bug/2039209/+subscriptions