-
ubuntu-advantage-tools (34~24.04) noble; urgency=medium
* Backport 34 to noble (LP: #2075543)
ubuntu-advantage-tools (34) oracular; urgency=medium
* d/rules: check that version.py is consistent with changelog (GH: #3154)
* New upstream release 34: (LP: #2075543)
- apt-hook: redirect errors away from users (LP: #2074211, LP: #2055239)
- detach: ensure apt bearer tokens are always cleaned up
- fips-preview: add warnings and prompts similar to fips and fips-updates
- fips and realtime-kernel: add warning when the new kernel may have
different hardware support than the current kernel based on the flavor
(GH: #3115)
- fix: use more reliable api query param when looking up CVE fixes
- help:
+ change help output for base pro command
+ remove service descriptions from output (GH: #3126)
+ show help content when run without a subcommand
- timer: recover from corrupted job status file (LP: #2078737)
- update manpage
-- Grant Orndorff <email address hidden> Fri, 06 Sep 2024 19:58:23 -0400
-
ubuntu-advantage-tools (33.2~24.04.1) noble; urgency=medium
* Declare breaks on the python3-minimal version that is affected by the
py3clean failure when using alternate character set (LP: #2075337)
ubuntu-advantage-tools (33.2~24.04) noble; urgency=medium
* Backport 33.2 to noble (LP: #2069237)
ubuntu-advantage-tools (33.2) oracular; urgency=medium
* d/apparmor: add apt-news access to package information on the system
(LP: #2072489) (GH: #3193)
ubuntu-advantage-tools (33.1) oracular; urgency=medium
* New upstream release 33.1: (LP: #2060769)
- system:
+ always pass C.UTF8 as the language when calling a subprocess
+ ignore utf-8 decode errors on subprocess output
ubuntu-advantage-tools (33) oracular; urgency=medium
* d/apparmor: adjust the esm_cache apparmor profile to allow reading of dpkg
data directory (LP: #2067810) (GH: #3137)
* New upstream release 33 (LP: #2069237)
- apt: use Python bindings instead of apt CLI to query for installed
packages (LP: #2060769) (LP: #2068744)
- beta: drop support for beta services
- contracts: add support for contracts which target a specific series
- fips: change enable functionality to ensure all packages with a FIPS
candidate are upgraded to the FIPS version (GH: #2667)
- fix:
+ add the current_status field to the plan api return object
+ change recommended attach method to magic attach (GH: #3040)
- livepatch: prefer the term 'coverage' instead of 'support' in messaging
(GH: #3063)
- realtime:
+ auto-select the raspi variant when appropriate
+ inform the user when auto-selecting a variant
-- Benjamin Drung <email address hidden> Wed, 07 Aug 2024 21:06:46 +0200
-
ubuntu-advantage-tools (33.2~24.04) noble; urgency=medium
* Backport 33.2 to noble (LP: #2069237)
ubuntu-advantage-tools (33.2) oracular; urgency=medium
* d/apparmor: add apt-news access to package information on the system
(LP: #2072489) (GH: #3193)
ubuntu-advantage-tools (33.1) oracular; urgency=medium
* New upstream release 33.1: (LP: #2060769)
- system:
+ always pass C.UTF8 as the language when calling a subprocess
+ ignore utf-8 decode errors on subprocess output
ubuntu-advantage-tools (33) oracular; urgency=medium
* d/apparmor: adjust the esm_cache apparmor profile to allow reading of dpkg
data directory (LP: #2067810) (GH: #3137)
* New upstream release 33 (LP: #2069237)
- apt: use Python bindings instead of apt CLI to query for installed
packages (LP: #2060769) (LP: #2068744)
- beta: drop support for beta services
- contracts: add support for contracts which target a specific series
- fips: change enable functionality to ensure all packages with a FIPS
candidate are upgraded to the FIPS version (GH: #2667)
- fix:
+ add the current_status field to the plan api return object
+ change recommended attach method to magic attach (GH: #3040)
- livepatch: prefer the term 'coverage' instead of 'support' in messaging
(GH: #3063)
- realtime:
+ auto-select the raspi variant when appropriate
+ inform the user when auto-selecting a variant
-- Lucas Moura <email address hidden> Thu, 18 Jul 2024 11:20:16 -0400
-
ubuntu-advantage-tools (33.1~24.04) noble; urgency=medium
* Backport 33.1 to noble (LP: #2069237)
ubuntu-advantage-tools (33.1) oracular; urgency=medium
* New upstream release 33.1: (LP: #2060769)
- system:
+ always pass C.UTF8 as the language when calling a subprocess
+ ignore utf-8 decode errors on subprocess output
ubuntu-advantage-tools (33) oracular; urgency=medium
* d/apparmor: adjust the esm_cache apparmor profile to allow reading of dpkg
data directory (LP: #2067810) (GH: #3137)
* New upstream release 33 (LP: #2069237)
- apt: use Python bindings instead of apt CLI to query for installed
packages (LP: #2060769) (LP: #2068744)
- beta: drop support for beta services
- contracts: add support for contracts which target a specific series
- fips: change enable functionality to ensure all packages with a FIPS
candidate are upgraded to the FIPS version (GH: #2667)
- fix:
+ add the current_status field to the plan api return object
+ change recommended attach method to magic attach (GH: #3040)
- livepatch: prefer the term 'coverage' instead of 'support' in messaging
(GH: #3063)
- realtime:
+ auto-select the raspi variant when appropriate
+ inform the user when auto-selecting a variant
-- Renan Rodrigo <email address hidden> Sat, 13 Jul 2024 08:55:42 -0300
-
ubuntu-advantage-tools (33~24.04) noble; urgency=medium
* Backport 33 to noble (LP: #2069237)
ubuntu-advantage-tools (33) oracular; urgency=medium
* d/apparmor: adjust the esm_cache apparmor profile to allow reading of dpkg
data directory (LP: #2067810) (GH: #3137)
* New upstream release 33 (LP: #2069237)
- apt: use Python bindings instead of apt CLI to query for installed
packages (LP: #2060769) (LP: #2068744)
- beta: drop support for beta services
- contracts: add support for contracts which target a specific series
- fips: change enable functionality to ensure all packages with a FIPS
candidate are upgraded to the FIPS version (GH: #2667)
- fix:
+ add the current_status field to the plan api return object
+ change recommended attach method to magic attach (GH: #3040)
- livepatch: prefer the term 'coverage' instead of 'support' in messaging
(GH: #3063)
- realtime:
+ auto-select the raspi variant when appropriate
+ inform the user when auto-selecting a variant
-- Renan Rodrigo <email address hidden> Thu, 04 Jul 2024 09:46:26 -0300
-
ubuntu-advantage-tools (32.3.1~24.04) noble; urgency=medium
* Adjust the esm_cache apparmor profile to allow reading of dpkg data
directory (LP: #2067810):
- d/apparmor/ubuntu_pro_esm_cache.jinja2: allow /var/lib/dpkg/** for dpkg
and other profiles
- features/steps/machines.py: trigger the bug in the behave test suite,
which tests the fix
* version.py: update version to 32.3.1
-- Andreas Hasenack <email address hidden> Fri, 07 Jun 2024 14:52:55 -0300
-
ubuntu-advantage-tools (32.3~24.04) noble; urgency=medium
* Backport 32.3 to noble (LP: #2060732)
ubuntu-advantage-tools (32.3) oracular; urgency=medium
* d/apparmor: adjust the profiles to account for usr-merge consequences
(LP: #2067319)
ubuntu-advantage-tools (32.2) oracular; urgency=medium
* d/apparmor: adjust rules for violations found during testing (LP: #2066929)
ubuntu-advantage-tools (32.1) oracular; urgency=medium
* d/apparmor: allow access for /etc/os-release on all supported
profiles (LP: #2065573)
* apport: get path for timer job status from the correct place (LP: #2065616)
ubuntu-advantage-tools (32) oracular; urgency=medium
* d/postinst: ensure migrations happen in correct package postinst (GH: #2982)
* d/apparmor: introduce new ubuntu_pro_esm_cache apparmor policy
* New upstream release 32 (LP: #2060732)
- api:
+ u.pro.attach.token.full_token_attach.v1: add support for attach
with token
+ u.pro.services.disable.v1: add support for disable operation
+ u.pro.services.enable.v1: add support for enable operation
+ u.pro.detach.v1: add support for detach operation
+ u.pro.status.is_attached.v1: add extra fields to API response
+ u.pro.services.dependencies.v1: add support for service dependencies
+ u.pro.security.fix.*.plan.v1: update ESM cache during plan API
if needed
- apt_news: add architectures and packages selectors filters for apt news
- cli:
+ improved cli/log message for unexpected errors (GH: #2600)
+ properly handle setting empty config values (GH: #2925)
- cloud-init: support ubuntu_pro user-data
- collect-logs: update default output file to pro_logs.tar.gz (LP: #2033313)
- config: create public and private config (GH: #2809)
- entitlements:
+ update logic that checks if a service is enabled (LP: #2031192)
- fips: warn/confirm with user if enabling fips downgrades the kernel
- fix: warn users if ESM cache cannot be updated (GH: #2841)
- logging:
+ use journald logging for all systemd services
+ add redundancy to secret redaction
- messaging:
+ add consistent messaging for end of contract state
+ make explicit that unattached enable/disable is a noop (GH: #2487)
+ make explicit that disabling a disabled service is a noop
+ make explicit that enabling an enabled service is a noop
- notices: filter unreadable notices when listing notices (GH: #2898)
-- Renan Rodrigo <email address hidden> Tue, 28 May 2024 15:15:48 -0300
-
ubuntu-advantage-tools (32.2~24.04) noble; urgency=medium
* Backport 32.2 to noble (LP: #2066929)
ubuntu-advantage-tools (32.2) oracular; urgency=medium
* d/apparmor: adjust rules for violations found during testing (LP: #2066929)
ubuntu-advantage-tools (32.1) oracular; urgency=medium
* d/apparmor: allow access for /etc/os-release on all supported
profiles (LP: #2065573)
* apport: get path for timer job status from the correct place (LP: #2065616)
ubuntu-advantage-tools (32) oracular; urgency=medium
* d/postinst: ensure migrations happen in correct package postinst (GH: #2982)
* d/apparmor: introduce new ubuntu_pro_esm_cache apparmor policy
* New upstream release 32 (LP: #2060732)
- api:
+ u.pro.attach.token.full_token_attach.v1: add support for attach
with token
+ u.pro.services.disable.v1: add support for disable operation
+ u.pro.services.enable.v1: add support for enable operation
+ u.pro.detach.v1: add support for detach operation
+ u.pro.status.is_attached.v1: add extra fields to API response
+ u.pro.services.dependencies.v1: add support for service dependencies
+ u.pro.security.fix.*.plan.v1: update ESM cache during plan API
if needed
- apt_news: add architectures and packages selectors filters for apt news
- cli:
+ improved cli/log message for unexpected errors (GH: #2600)
+ properly handle setting empty config values (GH: #2925)
- cloud-init: support ubuntu_pro user-data
- collect-logs: update default output file to pro_logs.tar.gz (LP: #2033313)
- config: create public and private config (GH: #2809)
- entitlements:
+ update logic that checks if a service is enabled (LP: #2031192)
- fips: warn/confirm with user if enabling fips downgrades the kernel
- fix: warn users if ESM cache cannot be updated (GH: #2841)
- logging:
+ use journald logging for all systemd services
+ add redundancy to secret redaction
- messaging:
+ add consistent messaging for end of contract state
+ make explicit that unattached enable/disable is a noop (GH: #2487)
+ make explicit that disabling a disabled service is a noop
+ make explicit that enabling an enabled service is a noop
- notices: filter unreadable notices when listing notices (GH: #2898)
-- Grant Orndorff <email address hidden> Thu, 23 May 2024 12:57:12 -0400
-
ubuntu-advantage-tools (32.1~24.04) noble; urgency=medium
* Backport new upstream release to noble (LP: #2060732)
ubuntu-advantage-tools (32.1) oracular; urgency=medium
* d/apparmor: allow access for /etc/os-release on all supported
profiles (LP: #2065573)
* apport: get path for timer job status from the correct place (LP: #2065616)
ubuntu-advantage-tools (32) oracular; urgency=medium
* d/postinst: ensure migrations happen in correct package postinst (GH: #2982)
* d/apparmor: introduce new ubuntu_pro_esm_cache apparmor policy
* New upstream release 32 (LP: #2060732)
- api:
+ u.pro.attach.token.full_token_attach.v1: add support for attach
with token
+ u.pro.services.disable.v1: add support for disable operation
+ u.pro.services.enable.v1: add support for enable operation
+ u.pro.detach.v1: add support for detach operation
+ u.pro.status.is_attached.v1: add extra fields to API response
+ u.pro.services.dependencies.v1: add support for service dependencies
+ u.pro.security.fix.*.plan.v1: update ESM cache during plan API
if needed
- apt_news: add architectures and packages selectors filters for apt news
- cli:
+ improved cli/log message for unexpected errors (GH: #2600)
+ properly handle setting empty config values (GH: #2925)
- cloud-init: support ubuntu_pro user-data
- collect-logs: update default output file to pro_logs.tar.gz (LP: #2033313)
- config: create public and private config (GH: #2809)
- entitlements:
+ update logic that checks if a service is enabled (LP: #2031192)
- fips: warn/confirm with user if enabling fips downgrades the kernel
- fix: warn users if ESM cache cannot be updated (GH: #2841)
- logging:
+ use journald logging for all systemd services
+ add redundancy to secret redaction
- messaging:
+ add consistent messaging for end of contract state
+ make explicit that unattached enable/disable is a noop (GH: #2487)
+ make explicit that disabling a disabled service is a noop
+ make explicit that enabling an enabled service is a noop
- notices: filter unreadable notices when listing notices (GH: #2898)
-- Lucas Moura <email address hidden> Tue, 14 May 2024 13:48:34 +0200
-
ubuntu-advantage-tools (32~24.04) noble; urgency=medium
* Backport new upstream release to noble (LP: #2060732)
ubuntu-advantage-tools (32) oracular; urgency=medium
* d/postinst: ensure migrations happen in correct package postinst (GH: #2982)
* d/apparmor: introduce new ubuntu_pro_esm_cache apparmor policy
* New upstream release 32 (LP: #2060732)
- api:
+ u.pro.attach.token.full_token_attach.v1: add support for attach
with token
+ u.pro.services.disable.v1: add support for disable operation
+ u.pro.services.enable.v1: add support for enable operation
+ u.pro.detach.v1: add support for detach operation
+ u.pro.status.is_attached.v1: add extra fields to API response
+ u.pro.services.dependencies.v1: add support for service dependencies
+ u.pro.security.fix.*.plan.v1: update ESM cache during plan API
if needed
- apt_news: add architectures and packages selectors filters for apt news
- cli:
+ improved cli/log message for unexpected errors (GH: #2600)
+ properly handle setting empty config values (GH: #2925)
- cloud-init: support ubuntu_pro user-data
- collect-logs: update default output file to pro_logs.tar.gz (LP: #2033313)
- config: create public and private config (GH: #2809)
- entitlements:
+ update logic that checks if a service is enabled (LP: #2031192)
- fips: warn/confirm with user if enabling fips downgrades the kernel
- fix: warn users if ESM cache cannot be updated (GH: #2841)
- logging:
+ use journald logging for all systemd services
+ add redundancy to secret redaction
- messaging:
+ add consistent messaging for end of contract state
+ make explicit that unattached enable/disable is a noop (GH: #2487)
+ make explicit that disabling a disabled service is a noop
+ make explicit that enabling an enabled service is a noop
- notices: filter unreadable notices when listing notices (GH: #2898)
-- Grant Orndorff <email address hidden> Fri, 10 May 2024 12:19:11 -0500
-
ubuntu-advantage-tools (31.2.3) noble; urgency=medium
* daemon: wait for cloud-init.service to fully activate (LP: #2059952)
-- Lucas Moura <email address hidden> Tue, 02 Apr 2024 10:13:32 -0300
-
ubuntu-advantage-tools (31.2.2build1) noble; urgency=medium
* No-change rebuild for CVE-2024-3094
-- Steve Langasek <email address hidden> Sun, 31 Mar 2024 00:15:29 +0000
-
ubuntu-advantage-tools (31.2.2) noble; urgency=medium
* version.py: fix internal version to match ubuntu package version (it was
missed in the previous upload, so 31.2.1 is "burned" now)
-- Andreas Hasenack <email address hidden> Sun, 24 Mar 2024 10:52:02 -0300
-
ubuntu-advantage-tools (31.2.1) noble; urgency=medium
* apt-news.service: ignore apparmor errors when starting (LP: #2057937)
-- Andreas Hasenack <email address hidden> Tue, 19 Mar 2024 11:02:58 -0300
-
ubuntu-advantage-tools (31.2) noble; urgency=medium
* properly rename logrotate conffile to avoid duplicate confiles, keep user changes
and avoid unnecessary prompts (LP: #2055046)
* use mv_conffile on all ubuntu-advantage-tools conffiles to avoid "obsolete" dpkg
conffile statuses
* fix regression in api u.pro.attach.auto.should_auto_attach.v1 so that it works with
the new package names
-- Grant Orndorff <email address hidden> Mon, 26 Feb 2024 11:47:55 -0500
-
ubuntu-advantage-tools (31.1build1) noble; urgency=medium
* No-change rebuild against libapt-pkg6.0t64
-- Steve Langasek <email address hidden> Wed, 28 Feb 2024 19:23:14 +0000
-
ubuntu-advantage-tools (31.1) noble; urgency=medium
* fix unit test that failed on newer version of python
-- Grant Orndorff <email address hidden> Wed, 14 Feb 2024 13:51:44 -0500
-
ubuntu-advantage-tools (31) noble; urgency=medium
* d/*:
- rename ubuntu-advantage-tools to ubuntu-pro-client
- rename ubuntu-advantage-pro to ubuntu-pro-image-auto-attach
* d/apparmor:
- introduce new ubuntu_pro_apt_news apparmor policy
* d/control:
- update descriptions and homepages
- update ubuntu-pro-client-l10n to Depend on same binary version
of ubuntu-pro-client
* d/rules:
- install ubuntu_pro_apt_news apparmor policy
* d/ubuntu-pro-client.prerm:
- removed dependency on python3 by reimplementing in sh (LP: #2021988)
* apport:
- collect logs related to ubuntu_pro_apt_news apparmor policy
* release-upgrades.d/ubuntu-advantage-upgrades.cfg:
- convert APT list files to deb822 files when upgrading to noble
* systemd/apt-news.service:
- add apparmor profile and capability restrictions
* systemd/ubuntu-advantage.service:
- avoid deadlock when started during cloud-config.service (LP: #2050022)
* New upstream release 31 (LP: #2048921)
- api:
+ u.pro.attach.auto.full_auto_attach.v1: new cloud_override param
+ u.pro.status.enabled_services.v1:
* include services in "warning" state
* include "usg"
+ u.pro.security.fix.*.plan.v1: export common objects from
endpoint modules (GH: #2714)
- cli:
+ add autocomplete for api subcommand
+ autocomplete multiple services for enable/disable subcommands
+ if lock is held, cli will retry over the course of a few seconds
- collect-logs:
+ include logs related to ubuntu_pro_apt_news apparmor policy
+ include logs of apt-news.service
+ include logs of esm-cache.service
- enable:
+ use deb822 apt source file format when on noble or later
- fix:
+ avoid insinuating that CVEs were found on the machine (GH: #1522)
+ ignore LSNs when considering related USNs
+ pick CVE description based on what packages are installed
- landscape:
+ don't disable landscape on ubuntu releases where it cannot be
enabled (GH: #2743)
+ no longer assume landscape-client gets removed on disable (GH: #2840)
+ leave client.conf in place instead of renaming
+ require service to be running to consider "enabled"
+ new explanatory message when disabling
- motd: properly pluralize messages about updates (GH: #1579)
- status: show warning when canonical-livepatch command fails
(LP: #2019997)
- timer jobs: jobs-status.json is now world readable (GH: #2601)
-- Grant Orndorff <email address hidden> Tue, 09 Jan 2024 14:24:33 -0500
-
ubuntu-advantage-tools (30.1) noble; urgency=medium
* fix UnboundLocalError in update-check error handling (LP: #2043836)
-- Grant Orndorff <email address hidden> Fri, 17 Nov 2023 14:25:22 -0500
-
ubuntu-advantage-tools (30) noble; urgency=medium
* d/control:
- add python3-apt as a build dependency
- add the new ubuntu-pro-client-l10n binary package
- recommend installing ubuntu-pro-client-l10n
* d/po/*:
- Makefile to build localization files to debian/po/usr/share/locale/
- update POTFILES.in to cover all translatable messages
- remove old unused pot file
- add new complete pot file for "ubuntu-pro" domain
- add first Brazilian Portuguese translations
* d/rules:
- add step to build the translations
* d/tests/control:
- mark autopkgtests as superficial (GH: #2609)
* d/ubuntu-advantage-tools.maintscript:
- remove /etc/ubuntu-advantage/help_data.yaml
* d/ubuntu-pro-client-l10n.install:
- add install file for the new binary package
* New upstream release 30 (LP: #2038461)
- api:
+ add new backwards compatible plan steps to the v1 fix plan endpoints
+ improve information returned from the fix plan endpoints
+ new endpoint: u.pro.security.fix.cve.execute.v1
+ new endpoint: u.pro.security.fix.usn.execute.v1
- apt: improve performance and consistency by refactoring the code to use
the apt_pkg module
- auto-attach: add newline to the MOTD message to separate it from other
MOTD messages
- contract: send information about variants to the contracts server
- enable: update only service specific apt sources when enabling a service
(GH: #1311) (GH: #1482)
- esm: create static files to pin packages from esm-infra and esm-apps with
higher priority (GH: #2580)
- disable:
+ (experimental) add the --purge flag to the disable command, so users
can remove all service related packages when disabling a service
+ show extra warnings when kernels are involved in the purge operation
- files: Reduce race window when creating new files (LP: #2024204)
- fips: add support to Jammy to prepare for when it is available
- fips-preview:
+ add fips-preview as a new entitlement
- github: add issue templates (GH: #2646)
- internationalization:
+ add general internationalization support and templates
+ add initial sentence set for Brazilian Portuguese
- logging:
+ add journald logging for the daemon and systemd timer
+ remove daemon and timer log files
+ standardize the logging calls through the codebase (GH: #2632)
- systemd: change ubuntu-advantage.service type from 'notify' to 'simple',
dropping the dependency on python3-systemd (LP: #2038417) (GH: #2692)
- tests:
+ add scenarios where cloud-init is present but disabled (LP: #1938208)
+ change 'permission' to 'priority' when checking apt priority in tests
(GH: #2719)
-- Renan Rodrigo <email address hidden> Tue, 07 Nov 2023 08:35:37 -0300
-
ubuntu-advantage-tools (29.4) mantic; urgency=medium
* esm: remove static config file that pin packages from esm-infra
and esm-apps
-- Lucas Moura <email address hidden> Wed, 06 Sep 2023 10:50:50 -0300
