/srv/irclogs.ubuntu.com/2022/02/15/#ubuntu-server.txt

=== not_phunyguy is now known as phunyguy
=== genii is now known as genii-meeting
=== genii-meeting is now known as genii-core
=== _9pfs is now known as _9pfs-isleaving
=== _9pfs-isleaving is now known as _9pfs
knaccchey all, I am trying to figure out if it's possible to tell which unattentded-upgrades packages require a reboot. I can monitor for the existence of the /var/run/reboot-required file, and I can scan the OVAL XML feed to see which CVEs have a severity of high, but I can't tell which fixes will only be in place if there is a reboot. It would be nice to be able to check whether I can benefit05:44
knacccfrom a reboot before taking the server down temporarily.05:44
cpaelzergood morning06:17
utkarsh2102o/06:19
cpaelzerknaccc: while /var/run/reboot-required is the yes/no there also is /var/run/reboot-required.pkgs06:19
cpaelzerknaccc: that would tell you which packages triggered it06:19
cpaelzerknaccc: so you might not know the individual file, but at least the individual packages06:19
cpaelzerand well, dpkg -L $pkg for this list of packages would then even give you the list of files06:20
cpaelzerknaccc: is that what you were looking for?06:20
knaccccpaelzer perfect, thank you! i can cross-reference that against the CVEs and then figure out if i need the reboot06:20
kenyonI'd say only kernels and libc need reboots, almost everything else you can restart, and `checkrestart` from the debian-goodies package tells you what needs a restart06:31
knaccckenyon wow, that's really great, thanks!06:42
cpaelzerand in addition to checkrestart there is needrestart (which some prefer others don't)06:45
cpaelzerthe latter even is default to infom you after an upgrade in more recent releases06:45
knacccoh wow, and it has a nice gui06:50
cpaelzerit does, but it an also be used non interactively if needed06:58
cpaelzerbryceh: You seem to have hit this on triage. FYI this is a common issue on indep build depends on non x86  https://bugs.launchpad.net/ubuntu/+source/qemu/+bug/196059207:05
ubottuLaunchpad bug 1960592 in qemu (Ubuntu) "`apt build-dep qemu-system-ppc` fails" [Undecided, Incomplete]07:05
bryceh@cpaelzer, ok well I leave qemu expertise to you :-)07:14
mirespace_good morning08:19
=== mirespace_ is now known as mirespace
=== lotuspsychje_ is now known as lotuspsychje
=== MJCD is now known as HotStepdad69
=== HotStepdad69 is now known as MJCD
athosgood morning :)12:03
athossergiodj: all OCI builds are now complete. I am tagging the images now14:04
ahasenackathos: iirc you need sponsoring for bind9?14:15
athosahasenack: yes, I will; bind9 is not under https://people.canonical.com/~ubuntu-archive/packagesets/jammy/ubuntu-server14:29
ahasenackk14:29
ahasenackathos: ok to sponsor then? Anything else to do?14:29
ahasenack(from your side)14:29
athosahasenack: yes, please (nothing from my side)14:30
ahasenackok14:30
ahasenackmdeslaur: hi, wondering how you generated the dfsg tarball for your samba cve updates, when you went ahead of debian14:54
ahasenack2:4.13.17~dfsg-0ubuntu114:54
ahasenackgbp? uscan? manually?14:54
ahasenackit's 3 exclusions: 'source4/heimdal/lib/wind/rfc*txt', 'source4/ldap_server/devdocs', '*chm',14:54
mdeslaurahasenack: I did it manually, those three exclusions, is there anything wrong with it?14:56
ahasenacknope14:56
ahasenackit's just I'm going to do it again (4.15.5) :)14:56
mdeslauroh, sweet :)14:57
ahasenackuscan almost gets it, but it doesn't know about '*.chm'14:57
ahasenacksince it's not in debian/copyright14:57
ahasenack(Files-Excluded)14:57
ahasenacknot even sure it can be there, without a path14:57
mdeslauryeah, I tried a couple of things, and lost patience and just removed the files by hand15:00
ahasenacknice ~dfsg trick (instead of +dfsg)15:01
orndorffgrantrbasak: Hi I know you're +1 maintenance so you don't need to prioritize this this week, but I wanted to make sure you saw my request for your review on https://github.com/canonical/ubuntu-advantage-client/pull/1930 :)15:01
ubottuPull 1930 in canonical/ubuntu-advantage-client "daemon: auto-attach when pro license added on gcp" [Open]15:01
ahasenackI hadn't thought of that in the previous times I had to do repacking15:01
mdeslauryeah! I just thought about doing that recently15:02
mdeslaurand nothing in debian/rules or anywhere else was trying to parse the version15:02
rbasakorndorffgrant: yes, and I was hoping to get to it this week only +1 maintenance :-/15:02
rbasakSorry15:02
orndorffgrantAll good!15:03
ahasenackSuccessfully repacked ../samba-4.15.5.tar.gz as ../samba_4.15.5~dfsg.orig.tar.xz, deleting 39 files from it.15:04
ahasenackmight have worked15:04
ahasenack(uscan)15:04
ahasenackbut need to check *.chm15:04
ahasenackoh, and it missed the "1"15:04
ahasenackdfsg115:04
ahasenackhmpf15:04
ahasenackok, lunch time15:04
sergiodjathos: thanks15:37
=== genii-core is now known as genii
brycehlena, btw iirc there's code in the mysql packaging that munges obsolete conf values.  I never tinkered with that but my guess is that'd be the solution for that bug with ancient config params.  I recall seeing other bugs like that in the past, but presumably they've either been fixed or expired.16:27
lenabryceh: yeah rbasak showed it to me, thanks! I'll look into expire-logs-days and see if it should be added alongside query_cache_limit16:41
=== lotuspsychje_ is now known as lotuspsychje
utkarsh2102uh, I added a patch to fix this. :)18:12
athosj/3318:37
athos:|18:37
=== arif-ali_ is now known as arif-ali
ahasenackrbasak: hi, git-ubuntu just "exploded" a little in jammy for me (granted, git-ubuntu.recontruct-changelog): https://pastebin.ubuntu.com/p/KT8Fr55GF2/21:07
ahasenackfyi21:07
ahasenackI have proposed enabled, I'm guessing it's related to the perl transition21:07
rbasakahasenack: that's odd. I wonder if it's using your system's Perl instead of the one inside the snap.21:15
ahasenackrbasak: I have perl-base 5.34.0-3ubuntu1, which is the proposed one21:17
ahasenackjammy release has 5.32.1-3ubuntu321:17
ahasenackmust be it21:17
=== genii is now known as genii-core
=== _9pfs is now known as _9pfsbot
=== _9pfsbot is now known as _9pfs
=== _9pfs is now known as __9pfs
=== __9pfs is now known as _9pfs

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!