-
ubuntu-advantage-tools (29.4~22.04) jammy; urgency=medium
* Backport new upstream release: (LP: #2029144) to jammy
ubuntu-advantage-tools (29.4) mantic; urgency=medium
* esm: remove static config file that pin packages from esm-infra
and esm-apps
ubuntu-advantage-tools (29.3) mantic; urgency=medium
* api: fix circular import that prevents enabled_services
endpoint from being imported
ubuntu-advantage-tools (29.2) mantic; urgency=medium
* d/ubuntu-advantage-tools.postinst:
- replace deb-systemd-invoke back to systemctl
* proxy: alert user if ca-certificates is not installed when using
a TLS-in-TLS proxy
ubuntu-advantage-tools (29.1) mantic; urgency=medium
* anbox: allow enabling service on container using the --access-only flag
ubuntu-advantage-tools (29) mantic; urgency=medium
* d/control:
- update links for the project github page
* d/copyright:
- bump date to 2023
- update upstream-name and source
* d/ubuntu-advantage-tools.{postinst,postrm}:
- rename repo GPG keys from -advantage to -pro (GH: #1539)
- replace calls to systemctl for deb-systemd-invoke
* d/README.source:
- add file with basic explanation on the source code (GH: #2463)
* New upstream release 29 (LP: #2029144)
- anbox-cloud: add support for service
- api
+ new endpoint: u.pro.security.fix.plan.cve.v1
+ new endpoint: u.pro.security.fix.plan.usn.v1
+ new endpoint: u.apt_news.current_news.v1
+ add more data explaining the decision made for
u.pro.security.status.reboot_required.v1 endpoint
- contract:
+ send activityInfo after cli attach, enable and disable
+ start recording when the machine has attached to a Pro subscription
+ more reliable detection when running on a docker container
- esm: create static files to pin packages from esm-infra and esm-apps with
higher priority (GH: #2580)
- fix: ignore non-USN items on related usns
- landscape: add support for the service
- logging: update to ubuntupro logging namespace
- proxy: add support for TLS-in-TLS proxy (LP: #1999909)
- snapd: look for the snapd package instead of the snap command
- system: try/except logic to remove files and folders (LP: #2025731)
-- Lucas Moura <email address hidden> Mon, 11 Sep 2023 12:28:29 -0300
-
ubuntu-advantage-tools (29.3~22.04) jammy; urgency=medium
* Backport new upstream release: (LP: #2029144) to jammy
ubuntu-advantage-tools (29.3) mantic; urgency=medium
* api: fix circular import that prevents enabled_services
endpoint from being imported
ubuntu-advantage-tools (29.2) mantic; urgency=medium
* d/ubuntu-advantage-tools.postinst:
- replace deb-systemd-invoke back to systemctl
* proxy: alert user if ca-certificates is not installed when using
a TLS-in-TLS proxy
ubuntu-advantage-tools (29.1) mantic; urgency=medium
* anbox: allow enabling service on container using the --access-only flag
ubuntu-advantage-tools (29) mantic; urgency=medium
* d/control:
- update links for the project github page
* d/copyright:
- bump date to 2023
- update upstream-name and source
* d/ubuntu-advantage-tools.{postinst,postrm}:
- rename repo GPG keys from -advantage to -pro (GH: #1539)
- replace calls to systemctl for deb-systemd-invoke
* d/README.source:
- add file with basic explanation on the source code (GH: #2463)
* New upstream release 29 (LP: #2029144)
- anbox-cloud: add support for service
- api
+ new endpoint: u.pro.security.fix.plan.cve.v1
+ new endpoint: u.pro.security.fix.plan.usn.v1
+ new endpoint: u.apt_news.current_news.v1
+ add more data explaining the decision made for
u.pro.security.status.reboot_required.v1 endpoint
- contract:
+ send activityInfo after cli attach, enable and disable
+ start recording when the machine has attached to a Pro subscription
+ more reliable detection when running on a docker container
- esm: create static files to pin packages from esm-infra and esm-apps with
higher priority (GH: #2580)
- fix: ignore non-USN items on related usns
- landscape: add support for the service
- logging: update to ubuntupro logging namespace
- proxy: add support for TLS-in-TLS proxy (LP: #1999909)
- snapd: look for the snapd package instead of the snap command
- system: try/except logic to remove files and folders (LP: #2025731)
-- Lucas Moura <email address hidden> Mon, 28 Aug 2023 11:41:13 -0300
-
ubuntu-advantage-tools (28.1~22.04) jammy; urgency=medium
* Backport new upstream release: (LP: #2017949) to jammy
ubuntu-advantage-tools (28.1) mantic; urgency=medium
* New upstream release 28.1 (LP: #2017949)
- fips: ensure shim-signed is updated to the version in the fips repo
if necessary
- status: fix bug where an existing status cache could influence the
simulated status output
ubuntu-advantage-tools (28) mantic; urgency=medium
* d/ubuntu-advantage-tools.postinst:
- more specific regex for ua_config warning
* d/source/lintian-overrides
- adjust missing-build-dependency-for-dh-addon systemd override to work
for the different but related error message on jammy onwards
* New upstream release 28 (LP: #2017949)
- api:
+ new endpoint: u.pro.status.is_attached.v1
+ new endpoint: u.pro.status.enabled_services.v1
- apport: collect default log files if present for bug reports
- apt messaging: add bionic-specific urls
- auto-attach:
+ check for new Azure UBUNTU_PRO license on-boot of non-pro instances
+ exit 4 if attach succeeds but service enablement fails
- cli:
+ avoid unnecessary network calls during autocomplete (GH: #2556)
+ warn users to not rely on human-readable output in scripts
- config: no longer load uaclient.conf from current working directory
- fix:
+ add support for --no-related flag
+ separate target USN from related USNs
- general:
+ logs to user cache directory when run as non-root
+ fix bug where non-root commands failed with file permission error
accessing /tmp/ubuntu-advantage (GH: #2567)
+ use system environment vars by default in sub processes (GH: #2527)
+ fall back to /usr/lib/os-release for release info
+ start logging to default log file until config is loaded
+ remove small timeout from contract checking request
+ avoid crashes when processing unicode text (LP: #2019729)
- livepatch:
+ use uname.machine for kernel arch when checking support
(GH: #2517)
+ display tailored warning messages for granular support statuses
- realtime-kernel: add support for intel-iotg variant
- reboot-required: new criteria for "yes-kernel-livepatches-applied"
livepatch status must be either "applied" or "nothing-to-apply" and
livepatch support status must say "supported"
- security-status:
+ always show available/installed counts for esm packages
+ include hint to run apt-get update for up-to-date info (GH: #2443)
+ improve visibility of installed and available updates (GH: #2442)
+ change package info message hint to recommend apt-cache show
+ avoids unnecessary network calls (LP: #2015286, GH: #2536)
- systemd: update service unit for reboot_cmds to not run if not attached
- status:
+ add hint for pro status --all
+ better message if no services are available (LP: #1994923)
- timer: only run timer when attached
-- Grant Orndorff <email address hidden> Mon, 26 Jun 2023 20:49:48 -0400
-
ubuntu-advantage-tools (28~22.04) jammy; urgency=medium
* Backport new upstream release: (LP: #2017949) to jammy
ubuntu-advantage-tools (28) mantic; urgency=medium
* d/ubuntu-advantage-tools.postinst:
- more specific regex for ua_config warning
* d/source/lintian-overrides
- adjust missing-build-dependency-for-dh-addon systemd override to work
for the different but related error message on jammy onwards
* New upstream release 28 (LP: #2017949)
- api:
+ new endpoint: u.pro.status.is_attached.v1
+ new endpoint: u.pro.status.enabled_services.v1
- apport: collect default log files if present for bug reports
- apt messaging: add bionic-specific urls
- auto-attach:
+ check for new Azure UBUNTU_PRO license on-boot of non-pro instances
+ exit 4 if attach succeeds but service enablement fails
- cli:
+ avoid unnecessary network calls during autocomplete (GH: #2556)
+ warn users to not rely on human-readable output in scripts
- config: no longer load uaclient.conf from current working directory
- fix:
+ add support for --no-related flag
+ separate target USN from related USNs
- general:
+ logs to user cache directory when run as non-root
+ fix bug where non-root commands failed with file permission error
accessing /tmp/ubuntu-advantage (GH: #2567)
+ use system environment vars by default in sub processes (GH: #2527)
+ fall back to /usr/lib/os-release for release info
+ start logging to default log file until config is loaded
+ remove small timeout from contract checking request
+ avoid crashes when processing unicode text (LP: #2019729)
- livepatch:
+ use uname.machine for kernel arch when checking support
(GH: #2517)
+ display tailored warning messages for granular support statuses
- realtime-kernel: add support for intel-iotg variant
- reboot-required: new criteria for "yes-kernel-livepatches-applied"
livepatch status must be either "applied" or "nothing-to-apply" and
livepatch support status must say "supported"
- security-status:
+ always show available/installed counts for esm packages
+ include hint to run apt-get update for up-to-date info (GH: #2443)
+ improve visibility of installed and available updates (GH: #2442)
+ change package info message hint to recommend apt-cache show
+ avoids unnecessary network calls (LP: #2015286, GH: #2536)
- systemd: update service unit for reboot_cmds to not run if not attached
- status:
+ add hint for pro status --all
+ better message if no services are available (LP: #1994923)
- timer: only run timer when attached
-- Grant Orndorff <email address hidden> Thu, 22 Jun 2023 17:05:56 -0400
-
ubuntu-advantage-tools (27.14.4~22.04) jammy; urgency=medium
* Backport new upstream release: (LP: #2011477) to jammy
ubuntu-advantage-tools (27.14.4) lunar; urgency=medium
* timer: disable update_contract_info job (LP: #2015302)
* livepatch: prevent livepatch from auto-enabling and subsequently failing
on non-amd64 systems (LP: #2015241)
ubuntu-advantage-tools (27.14.3) lunar; urgency=medium
* livepatch: prevent livepatch from auto-enabling and subsequently failing
on interim releases (LP: #2013409)
ubuntu-advantage-tools (27.14.2~23.04.1) lunar; urgency=medium
* status:
- always use dpkg instead of lscpu for fetching architecture
information (LP: #2012735)
ubuntu-advantage-tools (27.14.1~23.04.1) lunar; urgency=medium
* New upstream release 27.14.1
- apt: fix a configuration leak in the apt.get_pkg_candidate_version
function (LP: #2012642)
ubuntu-advantage-tools (27.14~23.04.1) lunar; urgency=medium
* d/ubuntu-advantage-tools.{postinst,postrm,preinst}:
- migrate certain settings out of uaclient.conf to a new file managed by
the pro config subcommand (LP: #2004280)
* d/ubuntu-advantage-tools.postinst:
- refactor PREVIOUS_PKG_VER as a global variable
- simplify how we add notices
* New upstream release 27.14 (LP: #2011477)
- api: new u.unattended_upgrades.status.v1 endpoint for querying status of
unattended upgrades
- apt:
+ remove legacy apt-hook
+ deliver json apt-hook for interim releases
+ fix cloud identification logic in json apt-hook
+ make all calls to esm-cache isolated from system configuration
(LP: #2008280)
+ only set up the esm cache on supported systems (LP: #2004018)
- fix:
+ format the output to be more readable (LP: #1926182)
+ add option to attach during a fix without a token
+ verify if fixed version can be installed before trying (LP: #2006705)
- livepatch: show warning if current kernel is not supported
- locks: alert user about corrupted lock files (LP: #1996931)
- logging: logs are now formatted as jsonlines
- motd: remove esm-apps announcement
- notices: new representation on disk as separate files (LP: #1987738)
- realtime: remove ubuntu-realtime package on disablement
- status:
+ removed contract info update check network call
+ no longer includes warnings about notices when non-root (LP: #2006138)
+ unattached status sends virt type to contract server for better
resource availability calculation
- timer jobs: add daily job to check for contract updates
- yaml: always import distro-provided pyyaml (LP: #2007234, LP: #2007241)
-- Renan Rodrigo <email address hidden> Thu, 06 Apr 2023 10:48:43 -0300
-
ubuntu-advantage-tools (27.13.6~22.04.1) jammy; urgency=medium
* Backport new upstream release: (LP: #2008814) to jammy
ubuntu-advantage-tools (27.13.6~23.04.1) lunar; urgency=medium
* apt-news:
- make sure systems which never ran a pro command get the apt-news message
displayed (LP: #2008814)
-- Renan Rodrigo <email address hidden> Tue, 28 Feb 2023 16:17:51 -0300
-
ubuntu-advantage-tools (27.13.5~22.04.1) jammy; urgency=medium
* Backport new upstream release
ubuntu-advantage-tools (27.13.5~23.04.1) lunar; urgency=medium
* d/ubuntu-advantage-tools.postinst:
- fix version for cleaning the esm-apps stale unauthenticated files
(LP: #2006765)
ubuntu-advantage-tools (27.13.4~23.04.1) lunar; urgency=medium
* d/ubuntu-advantage-tools.postinst:
- remove stale esm-apps unauthenticated caches (LP: #2004193)
* apt-hook:
- Change esm-apps advertisement message on apt upgrade to
make it clearer that the service is providing more upgrades
and not restricting user to only get updates if esm-apps
is enabled (LP: #2006510)
* contract:
- make code aware that the effective date is not a required field
in the machine-token.json file (LP: #2006351)
* esm_cache
- do not fail if we cannot extract information from
/etc/os-release file (LP: #2006508)
* security-status:
- consider packages without a candidate as 'unknown' (LP: #2006049)
* status:
- treat null effective contract dates as unknown/expired
(LP: #2004650)
* timer:
- recycle invalid jobs-status.json file if we detect it is
corrupted (LP: #2006261)
-- Renan Rodrigo <email address hidden> Thu, 09 Feb 2023 14:36:10 -0300
-
ubuntu-advantage-tools (27.13.4~22.04.1) jammy; urgency=medium
* Backport new upstream release
ubuntu-advantage-tools (27.13.4~23.04.1) lunar; urgency=medium
* d/ubuntu-advantage-tools.postinst:
- remove stale esm-apps unauthenticated caches (LP: #2004193)
* apt-hook:
- Change esm-apps advertisement message on apt upgrade to
make it clearer that the service is providing more upgrades
and not restricting user to only get updates if esm-apps
is enabled (LP: #2006510)
* contract:
- make code aware that the effective date is not a required field
in the machine-token.json file (LP: #2006351)
* esm_cache
- do not fail if we cannot extract information from
/etc/os-release file (LP: #2006508)
* security-status:
- consider packages without a candidate as 'unknown' (LP: #2006049)
* status:
- treat null effective contract dates as unknown/expired
(LP: #2004650)
* timer:
- recycle invalid jobs-status.json file if we detect it is
corrupted (LP: #2006261)
-- Lucas Moura <email address hidden> Tue, 07 Feb 2023 17:44:11 -0300
-
ubuntu-advantage-tools (27.13.3~22.04.1) jammy; urgency=medium
* Backport new upstream release: (LP: #2004130 and LP: #2004279) to
jammy
ubuntu-advantage-tools (27.13.3~23.04.1) lunar; urgency=medium
* d/ubuntu-advantage-tools.preinst: (LP: #2004279)
- correct second set of md5sums to continue avoiding a dpkg conf prompt
if the only change to the original config file was to the apt_news flag
- restore correct default uaclient.conf when upgrading from 27.13.X and
the only conf change is apt_news
* esm-cache.service:
- Catch errors when esm.ubuntu.com is unreachable to avoid causing crash
reports and degraded systemd status from this non-critical service
(LP: #2004130)
-- Grant Orndorff <email address hidden> Tue, 31 Jan 2023 10:08:06 -0500
-
ubuntu-advantage-tools (27.13.2~22.04.1) jammy; urgency=medium
* Backport new upstream release: (LP: #2003977) to jammy
ubuntu-advantage-tools (27.13.2~23.04.1) lunar; urgency=medium
* d/ubuntu-advantage-tools.{postinst,postrm,preinst}:
- avoid a dpkg conf prompt if the only change to the original config file
was to the apt_news flag (LP: #2003977)
* apt-hook:
- only run the pro client pre-update hook services when the apt update is
executed as root user (LP: #2004057)
-- Renan Rodrigo <email address hidden> Fri, 27 Jan 2023 20:14:10 -0300
-
ubuntu-advantage-tools (27.13.1~22.04.1) jammy; urgency=medium
* Backport new upstream release: (LP: #2003018) to jammy
ubuntu-advantage-tools (27.13.1~23.04.1) lunar; urgency=medium
* apt: better isolate apt esm cache by only fetching necessary
configuration from the system apt
ubuntu-advantage-tools (27.13~23.04.1) lunar; urgency=medium
* d/bash-completion:
- enable autocomplete for the 'pro' command (GH: #2280)
* d/control:
- update the package description
* d/postinst:
- remove unauthenticated esm repos from Xenial systems (LP: #1990378)
* New upstream release 27.13 (LP: #2003018)
- apt:
+ remove logic which added repositories and pinned them to 'never' to
enable access to esm package lists
+ add functionality to create and update a local apt esm cache with
the lists for esm-infra and esm-apps
- apt-hook: update the cpp hook to use the local esm apt cache
- apt-news:
+ fetch and display APT News in apt upgrade
+ show contract expiration notices in the apt news output
- attach: support attaching without being able to install snapd
(LP: #1997514)
- cli:
+ do not show invalid subcommands in autocomplete (GH: #2279)
+ add support for attaching through the web portal, without a token
- config: add apt_news_url option
- docs: reorganize documentation and correct information
- esm-apps: release the service as GA
- jobs:
+ remove the update_status job
+ remove unused job which checks for the system EOL
- messaging: do not fail if the apt-hook executable is not present
(LP: #1994480)
- motd: announce esm-apps as GA
- security-status:
+ use the local esm cache to report updates when the services are
disabled
+ redesign output to properly show support (LP: #2002407)
- services: add new service to update the local esm caches
- ros: release the service as GA
- bug fixes:
+ report reboot_required even if 'livepatch status' fails
+ do not create unexpected environment variables when the autocomplete
script runs
+ contract requests do not cause 'pro status' to fail
+ remove auto-attach motd message if any failure happens
+ log when 'cloud-id' fails
+ always honor the metering job timer config
+ write files atomically
-- Lucas Moura <email address hidden> Mon, 23 Jan 2023 12:28:48 -0300
-
ubuntu-advantage-tools (27.13~22.04.1) jammy; urgency=medium
* Backport new upstream release: (LP: #2003018) to jammy
ubuntu-advantage-tools (27.13~23.04.1) lunar; urgency=medium
* d/bash-completion:
- enable autocomplete for the 'pro' command (GH: #2280)
* d/control:
- update the package description
* d/postinst:
- remove unauthenticated esm repos from Xenial systems (LP: #1990378)
* New upstream release 27.13 (LP: #2003018)
- apt:
+ remove logic which added repositories and pinned them to 'never' to
enable access to esm package lists
+ add functionality to create and update a local apt esm cache with
the lists for esm-infra and esm-apps
- apt-hook: update the cpp hook to use the local esm apt cache
- apt-news:
+ fetch and display APT News in apt upgrade
+ show contract expiration notices in the apt news output
- attach: support attaching without being able to install snapd
(LP: #1997514)
- cli:
+ do not show invalid subcommands in autocomplete (GH: #2279)
+ add support for attaching through the web portal, without a token
- config: add apt_news_url option
- docs: reorganize documentation and correct information
- esm-apps: release the service as GA
- jobs:
+ remove the update_status job
+ remove unused job which checks for the system EOL
- messaging: do not fail if the apt-hook executable is not present
(LP: #1994480)
- motd: announce esm-apps as GA
- security-status:
+ use the local esm cache to report updates when the services are
disabled
+ redesign output to properly show support (LP: #2002407)
- services: add new service to update the local esm caches
- ros: release the service as GA
- bug fixes:
+ report reboot_required even if 'livepatch status' fails
+ do not create unexpected environment variables when the autocomplete
script runs
+ contract requests do not cause 'pro status' to fail
+ remove auto-attach motd message if any failure happens
+ log when 'cloud-id' fails
+ always honor the metering job timer config
+ write files atomically
-- Renan Rodrigo <email address hidden> Thu, 19 Jan 2023 12:27:30 -0300
-
ubuntu-advantage-tools (27.12~22.04.1) jammy; urgency=medium
* Backport new upstream release: (LP: #1996424) to jammy
ubuntu-advantage-tools (27.12~23.04.1) lunar; urgency=medium
* New upstream release 27.12 (LP: #1996424):
- auto-attach:
+ retry auto-attach for up to one month on Ubuntu Pro cloud instances
+ make a best effort to auto-attach when using the API
- enable: show deduplicated list of supported arches (GH: #917)
- fips: remove cloud package override logic from the client
- messaging: verify contract expiration date on contract server before
outputting expired message on MOTD
- realtime-kernel: make service non-beta
- reboot-required:
+ add API support to show if the system requires a reboot
(u.pro.security.status.reboot_required.v1)
+ add cli command for the functionality (pro system reboot-required)
- security-status:
+ add API support to report standard updates (u.pro.packages.updates.v1)
+ add API support to show CVEs patched by Livepatch
(u.pro.security.status.livepatch_cves.v1)
+ add API support to show packages summary information
(u.pro.packages.summary.v1)
+ list packages in oci manifest format (u.security.package_manifest.v1)
- systemd: do not attempt to auto-attach if a machine-token is present
-- Lucas Moura <email address hidden> Tue, 22 Nov 2022 10:06:26 -0300
-
ubuntu-advantage-tools (27.11.3~22.04.1) jammy; urgency=medium
* Backport new upstream release: (LP: #1993006) to jammy
-- Grant Orndorff <email address hidden> Tue, 25 Oct 2022 12:46:23 -0400
-
ubuntu-advantage-tools (27.11.2~22.04.1) jammy; urgency=medium
* Backport new upstream release: (LP: #1991173) to jammy
ubuntu-advantage-tools (27.11.2~22.10.1) kinetic; urgency=medium
* New upstream release 27.11.2: (LP: #1991173)
- esm: add the --beta flag back to esm-apps
- messaging: show Ubuntu Pro beta message in apt output
- security-status: don't show esm-apps information when the service is not
enabled
- ros: add the --beta flag back to ros and ros-updates
ubuntu-advantage-tools (27.11.1~22.10.1) kinetic; urgency=medium
* New upstream release 27.11.1: (LP: #1990907)
- Fix release upgrade when ESM packages are installed
+ d/postinst: remove series information from the APT preferences template
+ esm: remove series information from the APT preferences file
ubuntu-advantage-tools (27.11~22.10.1) kinetic; urgency=medium
* d/control:
- Update VCS references
* d/links:
- add usr/bin/pro as an alias to ubuntu-advantage
* d/postinst:
- include root_mode parameter when creating UAConfig instances
- change calls to add_notice to notice_file.add
- create public machine-token file if it does not exist
* New upstream release 27.11 (LP: #1989279)
- api:
+ new `pro api` command to access the public client API
+ 'version' endpoint returning version information
+ 'should auto attach' endpoint informing if a system should run
auto-attach on startup
+ 'full auto attach' endpoint performing auto-attach
+ 'magic attach' endpoints for the Magic Attach flow
- auto-attach:
+ better errors for invalid pro images (GH: #2180, #1833)
+ don't detach on already auto-attached instances
+ no-op when ubuntu-advantage information is present on cloud-init
userdata
+ change systemd unit to run after cloud-config
- cli:
+ cli: better error message on unrecognized flags (GH: #672)
- collect-logs:
+ can now be executed as a non-root user
+ is executed automatically and result is appended when using apport to
report a bug
- docs: now formatted to be built with sphinx, and published in readthedocs
- enable:
+ new access-only flag for usecases where auto-install is undesired
+ fix apt auth line replacement (LP: #1985863)
- esm-apps: generally available as non-beta as part of Ubuntu Pro
- fix: check if livepatch has already fixed a CVE before attempting a fix
- jobs: new timer job to check if the release reached end of support
- pro:
+ Ubuntu Pro is released as a product
+ make `pro` the recommended executable for the client
+ client, apt and motd messages updated/rewritten to show Pro
information
+ base URL changed from /advantage to /pro
+ ESM services renamed as part of Pro
- ros: released as a non-beta entitlement
- security-status
+ does not require the --format flag anymore
+ human readable output added based on ubuntu-security-status
+ machine readable output contains CVEs fixed by Livepatch
+ package counts include all esm-infra and esm-apps repositories
- status:
+ don't show unavailable services by default (GH: #2156, #2159)
+ expiry date formatted based on timezone (GH: #695)
+ non-root users get the current status instead of a cached version
+ --wait flag now working for non-root users
- version: warn about new available versions of the client in CLI command
output and API calls
-- Renan Rodrigo <email address hidden> Thu, 29 Sep 2022 18:23:50 -0300
-
ubuntu-advantage-tools (27.11.1~22.04.1) jammy; urgency=medium
* Backport new upstream release: (LP: #1990907) to jammy
ubuntu-advantage-tools (27.11.1~22.10.1) kinetic; urgency=medium
* New upstream release 27.11.1: (LP: #1990907)
- Fix release upgrade when ESM packages are installed
+ d/postinst: remove series information from the APT preferences template
+ esm: remove series information from the APT preverences file
ubuntu-advantage-tools (27.11~22.10.1) kinetic; urgency=medium
* d/control:
- Update VCS references
* d/links:
- add usr/bin/pro as an alias to ubuntu-advantage
* d/postinst:
- include root_mode parameter when creating UAConfig instances
- change calls to add_notice to notice_file.add
- create public machine-token file if it does not exist
* New upstream release 27.11 (LP: #1989279)
- api:
+ new `pro api` command to access the public client API
+ 'version' endpoint returning version information
+ 'should auto attach' endpoint informing if a system should run
auto-attach on startup
+ 'full auto attach' endpoint performing auto-attach
+ 'magic attach' endpoints for the Magic Attach flow
- auto-attach:
+ better errors for invalid pro images (GH: #2180, #1833)
+ don't detach on already auto-attached instances
+ no-op when ubuntu-advantage information is present on cloud-init
userdata
+ change systemd unit to run after cloud-config
- cli:
+ cli: better error message on unrecognized flags (GH: #672)
- collect-logs:
+ can now be executed as a non-root user
+ is executed automatically and result is appended when using apport to
report a bug
- docs: now formatted to be built with sphinx, and published in readthedocs
- enable:
+ new access-only flag for usecases where auto-install is undesired
+ fix apt auth line replacement (LP: #1985863)
- esm-apps: generally available as non-beta as part of Ubuntu Pro
- fix: check if livepatch has already fixed a CVE before attempting a fix
- jobs: new timer job to check if the release reached end of support
- pro:
+ Ubuntu Pro is released as a product
+ make `pro` the recommended executable for the client
+ client, apt and motd messages updated/rewritten to show Pro
information
+ base URL changed from /advantage to /pro
+ ESM services renamed as part of Pro
- ros: released as a non-beta entitlement
- security-status
+ does not require the --format flag anymore
+ human readable output added based on ubuntu-security-status
+ machine readable output contains CVEs fixed by Livepatch
+ package counts include all esm-infra and esm-apps repositories
- status:
+ don't show unavailable services by default (GH: #2156, #2159)
+ expiry date formatted based on timezone (GH: #695)
+ non-root users get the current status instead of a cached version
+ --wait flag now working for non-root users
- version: warn about new available versions of the client in CLI command
output and API calls
-- Renan Rodrigo <email address hidden> Tue, 27 Sep 2022 17:29:25 -0300
-
ubuntu-advantage-tools (27.11~22.04.1) jammy; urgency=medium
* Backport new upstream release: (LP: #1989279) to jammy
-- Renan Rodrigo <email address hidden> Wed, 21 Sep 2022 11:02:57 -0300
-
ubuntu-advantage-tools (27.10.1~22.04.1) jammy; urgency=medium
* Backport new upstream release: (LP: #1980990) to jammy
ubuntu-advantage-tools (27.10.1~22.10.1) kinetic; urgency=medium
* apt-hook: Fix missing import warning when compiling
ubuntu-advantage-tools (27.10~22.10.1) kinetic; urgency=medium
* d/control:
- Drop golang dependencies
* d/rules:
- Only install APT hooks on LTS series
* New upstream release 27.10 (LP: #1980990)
- apt-hook: replace golang with cpp for json-hook
- cli
+ properly sort services for detach/attach (GH: #1831)
+ collect-logs include rotated log files
+ display UA features directly on status
- daemon: do not try enabling daemon during auto-attach (LP: #1980865)
- fix:
+ update ua portal url when asking for attach
+ add --dry-run option
- gcp-pro: better error message for metadata endpoint error
- requests: Add default timeout for web requests
- timer: log when job start running
- security-status: include download size of package updates
-- Lucas Moura <email address hidden> Tue, 12 Jul 2022 15:10:11 -0300
-
ubuntu-advantage-tools (27.9~22.04.1) jammy; urgency=medium
* Backport new upstream release: (LP: #1973099) to jammy
-- Grant Orndorff <email address hidden> Wed, 18 May 2022 15:44:25 -0400
-
ubuntu-advantage-tools (27.8~22.04.1) jammy; urgency=medium
* New upstream release 27.8 (LP: #1969125)
- entitlements: apply overrides from the contract response
- fips:
+ unhold fips packages when enabling fips-updates
+ Automatically disable fips service before enabling fips-updates
+ unhold more packages when enabling fips
- lib: fix upgrade script for unsupported releases (LP: #1968067)
- realtime: add support for realtime kernel beta service on Jammy
ubuntu-advantage-tools (27.7.1~22.04.1) jammy; urgency=medium
* fips:
- make fips service incompatible with fips-updates
- unhold more packages when enabling fips
-- Lucas Moura <email address hidden> Wed, 13 Apr 2022 18:17:02 -0300
-
ubuntu-advantage-tools (27.7~22.04.1) jammy; urgency=medium
* d/changelog:
- fix changelog trailer line for 27.4.1
* d/logrotate:
- make new logs world readable
* d/tools.postinst:
- refactor to catch exception from entitlement_factory
- no longer always set log file to only root readable
- when creating log file for the first time, make world readable
- adapt postinst for new messages module
* New upstream release 27.7 (LP: #1964028)
- attach: --attach-config option for customizing auto-enabled services
and supplying token via a file
- auto-attach: fix bug where auto-attach caused a manually attached
machine to detach
- cli:
+ support --format=json for attach
+ support --format=json for detach
+ support --format=json for enable
+ support --format=json for disable
- contract: include activity info when updating contract
- detach: no longer contacts contract server on detach
- fips: allow fips on containers
- fix: support USNs that don't have related CVEs
- logs: make all newly created logs world-readable
- security-status:
+ show already installed esm package counts
+ include APT origin for each potential update
+ bump schema version to "0.1"
+ remove previously required --beta flag
- status:
+ include blocked_by information in service status when format=json
+ --simulate-with-token now reports expired tokens as errors
+ --simulate-with-token now returns errors in the specified format
-- Grant Orndorff <email address hidden> Mon, 07 Mar 2022 13:14:57 -0500
-
ubuntu-advantage-tools (27.6~22.04.1) jammy; urgency=medium
* New upstream release 27.6 (LP: #1958556)
- cli: only request available resources from contract server when needed
- fips:
+ allow enabling FIPS on focal clouds
+ update prompt messages
- jobs: disable license-check job on GCP after attach
- message: fix how apt and motd messages are updated after ua commands
-- Lucas Moura <email address hidden> Thu, 20 Jan 2022 12:36:39 -0300
-
ubuntu-advantage-tools (27.5~22.04.1) jammy; urgency=medium
* d/control:
- Update homepage URL
* d/tools.postinst:
- Refactor to use valid_services
* d/tools.postrm:
- Use a wildcard to remove ua related gpg files
* New upstream release 27.5 (LP: #1956456)
- aws: add support for the IPv6 metadata endpoint
- cis: update URL for the documentation
- cli:
+ add endpoint to simulate the status using a specific contract token
+ fix return code when attaching an already attached machine (GH: #1867)
+ fix security-status to consider all possible origins to show updates
+ include cloud build.info in the collect-logs tarball
+ only show services which exist in the contracts server in ua status
- docs: fix typos and wrong/outdated information
- livepatch: always use the full path in livepatch calls (LP: #1951954)
- logs:
+ improve rules to redact sensitive information from all log files
+ redact sensitive information from older unredacted log files
+ log errors from external software execution, for debugging purposes
- usg:
+ support the presentedAs affordance from the contract server, showing
services in the CLI with the appropriate names
+ replace the CIS entitlement by USG on Focal and onwards
-- Renan Rodrigo <email address hidden> Tue, 04 Jan 2022 17:30:26 -0300
-
ubuntu-advantage-tools (27.4.2~22.04.1) jammy; urgency=medium
* d/tools.postinst:
- Fix check_service_is_enabled function when the machine is
unattached (LP: #1951705)
-- Lucas Moura <email address hidden> Tue, 23 Nov 2021 09:20:56 -0300
-
ubuntu-advantage-tools (27.4.1~22.04.1) jammy; urgency=medium
* jobs: do not run the status job for unattached users
-- Lucas Moura <email address hidden> Thu, 11 Nov 2021 17:53:08 -0300
-
ubuntu-advantage-tools (27.4~22.04.1) jammy; urgency=medium
* d/rules:
- Remove conftest file from the package
* d/tools.postinst:
- hardcode python binary to run python scripts (LP: #1930121)
- undo unnecessary log file creation
* d/tools.prerm:
- hardcode python binary to run python scripts (LP: #1930121)
* New upstream release 27.4 (LP: #1949634)
- cc-eal: remove beta flag
- cli:
+ attach will save machine-id during operation
+ detach won't ask unnecessary questions
+ new security-status subcommand lists potentially available
security and ESM updates (beta)
- fix:
+ exit 0 when fix is successfully applied and completed
+ exit 1 when fix cannot be applied
+ exit 2 when fix requires a reboot to complete
+ check reboot-required.pkgs for better reboot suggestions
- livepatch: allow livepatch and fips-updates at the same time
- metering:
+ update how activity info is parsed
+ update contract response structure
+ enable job by default
- proxy: no_proxy defaults for link-local IMDS routes
- util:
+ cache get_platform_info calls
+ fix machine-id fallback path on get_machine_id
-- Lucas Moura <email address hidden> Fri, 29 Oct 2021 15:35:57 -0300
-
ubuntu-advantage-tools (27.3~21.10.1) impish; urgency=medium
* d/tools.postinst:
- consider cloud to be "none" on any cloud-id error
- purge old ua-messaging.timer/service files
- keep ua-timer.timer disabled if ua-messaging.timer was disabled by
the user
- properly configure both ubuntu-advantage-timer and
ubuntu-advantage-licence-check logs
* d/tools.postrm:
- remove ubuntu-advantage-timer and ubuntu-advantage-license-check logs
during purge
* systemd:
- remove ua-messaging.timer/service
- add new ua-timer.timer that runs every 6 hours
- add new ua-license_check.timer that runs every 5 minutes only if
activated by ua-license-check.path
* New upstream release 27.3 (LP: #1942929)
- ros:
+ add beta support to enable ros and ros-updates
+ add support for "required services" so that esm-infra and esm-apps
get auto-enabled when enabling ros or ros-updates
+ add support for "dependent services" so that user gets prompted to
disable ros/ros-updates if they disable esm-infra/esm-apps
- fips:
+ allow fips on GCP bionic now that optimized kernel is ready
+ disallow enabling fips on focal on clouds until cloud-optimized focal
fips-certified kernel is ready (LP: #1939449, LP: #1939932)
+ print warning about generic fips kernel if cloud-id fails
- cloud:
+ rely only on cloud-id to determine cloud type (LP: #1940131)
+ catch errors when determining cloud type
(LP: #1938207, LP: #1944676) (GH: #1541)
- azure:
+ bump IMDS API version to support Azure published images
- cli:
+ collect-logs command that creates a tar file with debug-relevant logs
and status info (GH: #463)
+ clean locks on exceptions more thoroughly to avoid false "Operation in
progress" status messages
+ retain past service state after detach
+ shows better error message when a port value in a proxy is invalid
- non-unicode locale support:
+ remove unicode-only characters from help file
+ don't print unicode-only characters in ua fix if non-utf8 locale
(GH: #1463)
- logrotate:
+ add logrotate functionality for ubuntu-advantage-timer.log.
+ Fix root:root logrotate permissions.
- ua-timer.timer:
+ introduce a single systemd timer to handle ua recurring jobs
+ timer runs every 2 hours to support most frequent timer job
+ recurring job intervals are configurable in uaclient.conf
+ individual jobs are disabled if their interval is set to 0
- status job:
+ update ua status every 12 hours
- messaging job:
+ update APT/MOTD ESM messaging every 6 hours
- metering job:
+ disabled until infrastructure is ready
+ for attached machines only, periodically update contract server with
status information for proper contract metering
- ua-license-check.timer:
+ only runs on LTS GCP instances that are not attached
+ runs every 5 minutes to check if gcp instance has license required to
auto-attach
- logs:
+ fixes duplicate logging (GH: #553)
- tests and support:
+ remove groovy integration tests
+ various improvements to integration tests
-- Grant Orndorff <email address hidden> Tue, 21 Sep 2021 09:02:06 -0400
-
ubuntu-advantage-tools (27.2.2~21.10.1) impish; urgency=medium
* d/tools.postinst:
- Do not fail in postinst if cloud-init did not run.
This fixes the regression introduced in 27.2.1. (LP: #1936833)
-- Lucas Moura <email address hidden> Tue, 27 Jul 2021 10:09:18 -0300
