-
ubuntu-advantage-tools (32.3~23.10) mantic; urgency=medium
* Backport 32.3 to mantic (LP: #2060732)
ubuntu-advantage-tools (32.3) oracular; urgency=medium
* d/apparmor: adjust the profiles to account for usr-merge consequences
(LP: #2067319)
ubuntu-advantage-tools (32.2) oracular; urgency=medium
* d/apparmor: adjust rules for violations found during testing (LP: #2066929)
ubuntu-advantage-tools (32.1) oracular; urgency=medium
* d/apparmor: allow access for /etc/os-release on all supported
profiles (LP: #2065573)
* apport: get path for timer job status from the correct place (LP: #2065616)
ubuntu-advantage-tools (32) oracular; urgency=medium
* d/postinst: ensure migrations happen in correct package postinst (GH: #2982)
* d/apparmor: introduce new ubuntu_pro_esm_cache apparmor policy
* New upstream release 32 (LP: #2060732)
- api:
+ u.pro.attach.token.full_token_attach.v1: add support for attach
with token
+ u.pro.services.disable.v1: add support for disable operation
+ u.pro.services.enable.v1: add support for enable operation
+ u.pro.detach.v1: add support for detach operation
+ u.pro.status.is_attached.v1: add extra fields to API response
+ u.pro.services.dependencies.v1: add support for service dependencies
+ u.pro.security.fix.*.plan.v1: update ESM cache during plan API
if needed
- apt_news: add architectures and packages selectors filters for apt news
- cli:
+ improved cli/log message for unexpected errors (GH: #2600)
+ properly handle setting empty config values (GH: #2925)
- cloud-init: support ubuntu_pro user-data
- collect-logs: update default output file to pro_logs.tar.gz (LP: #2033313)
- config: create public and private config (GH: #2809)
- entitlements:
+ update logic that checks if a service is enabled (LP: #2031192)
- fips: warn/confirm with user if enabling fips downgrades the kernel
- fix: warn users if ESM cache cannot be updated (GH: #2841)
- logging:
+ use journald logging for all systemd services
+ add redundancy to secret redaction
- messaging:
+ add consistent messaging for end of contract state
+ make explicit that unattached enable/disable is a noop (GH: #2487)
+ make explicit that disabling a disabled service is a noop
+ make explicit that enabling an enabled service is a noop
- notices: filter unreadable notices when listing notices (GH: #2898)
-- Renan Rodrigo <email address hidden> Tue, 28 May 2024 15:15:45 -0300
-
ubuntu-advantage-tools (32.2~23.10) mantic; urgency=medium
* Backport 32.2 to mantic (LP: #2066929)
ubuntu-advantage-tools (32.2) oracular; urgency=medium
* d/apparmor: adjust rules for violations found during testing (LP: #2066929)
ubuntu-advantage-tools (32.1) oracular; urgency=medium
* d/apparmor: allow access for /etc/os-release on all supported
profiles (LP: #2065573)
* apport: get path for timer job status from the correct place (LP: #2065616)
ubuntu-advantage-tools (32) oracular; urgency=medium
* d/postinst: ensure migrations happen in correct package postinst (GH: #2982)
* d/apparmor: introduce new ubuntu_pro_esm_cache apparmor policy
* New upstream release 32 (LP: #2060732)
- api:
+ u.pro.attach.token.full_token_attach.v1: add support for attach
with token
+ u.pro.services.disable.v1: add support for disable operation
+ u.pro.services.enable.v1: add support for enable operation
+ u.pro.detach.v1: add support for detach operation
+ u.pro.status.is_attached.v1: add extra fields to API response
+ u.pro.services.dependencies.v1: add support for service dependencies
+ u.pro.security.fix.*.plan.v1: update ESM cache during plan API
if needed
- apt_news: add architectures and packages selectors filters for apt news
- cli:
+ improved cli/log message for unexpected errors (GH: #2600)
+ properly handle setting empty config values (GH: #2925)
- cloud-init: support ubuntu_pro user-data
- collect-logs: update default output file to pro_logs.tar.gz (LP: #2033313)
- config: create public and private config (GH: #2809)
- entitlements:
+ update logic that checks if a service is enabled (LP: #2031192)
- fips: warn/confirm with user if enabling fips downgrades the kernel
- fix: warn users if ESM cache cannot be updated (GH: #2841)
- logging:
+ use journald logging for all systemd services
+ add redundancy to secret redaction
- messaging:
+ add consistent messaging for end of contract state
+ make explicit that unattached enable/disable is a noop (GH: #2487)
+ make explicit that disabling a disabled service is a noop
+ make explicit that enabling an enabled service is a noop
- notices: filter unreadable notices when listing notices (GH: #2898)
-- Grant Orndorff <email address hidden> Thu, 23 May 2024 12:57:11 -0400
-
ubuntu-advantage-tools (32.1~23.10) mantic; urgency=medium
* Backport new upstream release to mantic (LP: #2060732)
ubuntu-advantage-tools (32.1) oracular; urgency=medium
* d/apparmor: allow access for /etc/os-release on all supported
profiles (LP: #2065573)
* apport: get path for timer job status from the correct place (LP: #2065616)
ubuntu-advantage-tools (32) oracular; urgency=medium
* d/postinst: ensure migrations happen in correct package postinst (GH: #2982)
* d/apparmor: introduce new ubuntu_pro_esm_cache apparmor policy
* New upstream release 32 (LP: #2060732)
- api:
+ u.pro.attach.token.full_token_attach.v1: add support for attach
with token
+ u.pro.services.disable.v1: add support for disable operation
+ u.pro.services.enable.v1: add support for enable operation
+ u.pro.detach.v1: add support for detach operation
+ u.pro.status.is_attached.v1: add extra fields to API response
+ u.pro.services.dependencies.v1: add support for service dependencies
+ u.pro.security.fix.*.plan.v1: update ESM cache during plan API
if needed
- apt_news: add architectures and packages selectors filters for apt news
- cli:
+ improved cli/log message for unexpected errors (GH: #2600)
+ properly handle setting empty config values (GH: #2925)
- cloud-init: support ubuntu_pro user-data
- collect-logs: update default output file to pro_logs.tar.gz (LP: #2033313)
- config: create public and private config (GH: #2809)
- entitlements:
+ update logic that checks if a service is enabled (LP: #2031192)
- fips: warn/confirm with user if enabling fips downgrades the kernel
- fix: warn users if ESM cache cannot be updated (GH: #2841)
- logging:
+ use journald logging for all systemd services
+ add redundancy to secret redaction
- messaging:
+ add consistent messaging for end of contract state
+ make explicit that unattached enable/disable is a noop (GH: #2487)
+ make explicit that disabling a disabled service is a noop
+ make explicit that enabling an enabled service is a noop
- notices: filter unreadable notices when listing notices (GH: #2898)
-- Lucas Moura <email address hidden> Tue, 14 May 2024 13:48:34 +0200
-
ubuntu-advantage-tools (32~23.10) mantic; urgency=medium
* Backport new upstream release to mantic (LP: #2060732)
ubuntu-advantage-tools (32) oracular; urgency=medium
* d/postinst: ensure migrations happen in correct package postinst (GH: #2982)
* d/apparmor: introduce new ubuntu_pro_esm_cache apparmor policy
* New upstream release 32 (LP: #2060732)
- api:
+ u.pro.attach.token.full_token_attach.v1: add support for attach
with token
+ u.pro.services.disable.v1: add support for disable operation
+ u.pro.services.enable.v1: add support for enable operation
+ u.pro.detach.v1: add support for detach operation
+ u.pro.status.is_attached.v1: add extra fields to API response
+ u.pro.services.dependencies.v1: add support for service dependencies
+ u.pro.security.fix.*.plan.v1: update ESM cache during plan API
if needed
- apt_news: add architectures and packages selectors filters for apt news
- cli:
+ improved cli/log message for unexpected errors (GH: #2600)
+ properly handle setting empty config values (GH: #2925)
- cloud-init: support ubuntu_pro user-data
- collect-logs: update default output file to pro_logs.tar.gz (LP: #2033313)
- config: create public and private config (GH: #2809)
- entitlements:
+ update logic that checks if a service is enabled (LP: #2031192)
- fips: warn/confirm with user if enabling fips downgrades the kernel
- fix: warn users if ESM cache cannot be updated (GH: #2841)
- logging:
+ use journald logging for all systemd services
+ add redundancy to secret redaction
- messaging:
+ add consistent messaging for end of contract state
+ make explicit that unattached enable/disable is a noop (GH: #2487)
+ make explicit that disabling a disabled service is a noop
+ make explicit that enabling an enabled service is a noop
- notices: filter unreadable notices when listing notices (GH: #2898)
-- Grant Orndorff <email address hidden> Fri, 10 May 2024 12:19:11 -0500
-
ubuntu-advantage-tools (31.2.3~23.10) mantic; urgency=medium
* Backport new upstream release to mantic (LP: #2059952)
ubuntu-advantage-tools (31.2.3) noble; urgency=medium
* daemon: wait for cloud-init.service to fully activate (LP: #2059952)
-- Lucas Moura <email address hidden> Fri, 05 Apr 2024 10:09:10 -0300
-
ubuntu-advantage-tools (31.2.2~23.10) mantic; urgency=medium
* version.py: match version from d/changelog (LP: #2058934)
ubuntu-advantage-tools (31.2.1~23.10) mantic; urgency=medium
* apt-news.service: ignore apparmor errors when starting (LP: #2057937)
-- Andreas Hasenack <email address hidden> Mon, 25 Mar 2024 11:56:18 -0300
-
ubuntu-advantage-tools (31.2~23.10) mantic; urgency=medium
* Backport new upstream release (LP: #2048921)
ubuntu-advantage-tools (31.2) noble; urgency=medium
* properly rename logrotate conffile to avoid duplicate confiles, keep user changes
and avoid unnecessary prompts (LP: #2055046)
* use mv_conffile on all ubuntu-advantage-tools conffiles to avoid "obsolete" dpkg
conffile statuses
* fix regression in api u.pro.attach.auto.should_auto_attach.v1 so that it works with
the new package names
ubuntu-advantage-tools (31.1) noble; urgency=medium
* fix unit test that failed on newer version of python
ubuntu-advantage-tools (31) noble; urgency=medium
* d/*:
- rename ubuntu-advantage-tools to ubuntu-pro-client
- rename ubuntu-advantage-pro to ubuntu-pro-image-auto-attach
* d/apparmor:
- introduce new ubuntu_pro_apt_news apparmor policy
* d/control:
- update descriptions and homepages
- update ubuntu-pro-client-l10n to Depend on same binary version
of ubuntu-pro-client
* d/rules:
- install ubuntu_pro_apt_news apparmor policy
* d/ubuntu-pro-client.prerm:
- removed dependency on python3 by reimplementing in sh (LP: #2021988)
* apport:
- collect logs related to ubuntu_pro_apt_news apparmor policy
* release-upgrades.d/ubuntu-advantage-upgrades.cfg:
- convert APT list files to deb822 files when upgrading to noble
* systemd/apt-news.service:
- add apparmor profile and capability restrictions
* systemd/ubuntu-advantage.service:
- avoid deadlock when started during cloud-config.service (LP: #2050022)
* New upstream release 31 (LP: #2048921)
- api:
+ u.pro.attach.auto.full_auto_attach.v1: new cloud_override param
+ u.pro.status.enabled_services.v1:
* include services in "warning" state
* include "usg"
+ u.pro.security.fix.*.plan.v1: export common objects from
endpoint modules (GH: #2714)
- cli:
+ add autocomplete for api subcommand
+ autocomplete multiple services for enable/disable subcommands
+ if lock is held, cli will retry over the course of a few seconds
- collect-logs:
+ include logs related to ubuntu_pro_apt_news apparmor policy
+ include logs of apt-news.service
+ include logs of esm-cache.service
- enable:
+ use deb822 apt source file format when on noble or later
- fix:
+ avoid insinuating that CVEs were found on the machine (GH: #1522)
+ ignore LSNs when considering related USNs
+ pick CVE description based on what packages are installed
- landscape:
+ don't disable landscape on ubuntu releases where it cannot be
enabled (GH: #2743)
+ no longer assume landscape-client gets removed on disable (GH: #2840)
+ leave client.conf in place instead of renaming
+ require service to be running to consider "enabled"
+ new explanatory message when disabling
- motd: properly pluralize messages about updates (GH: #1579)
- status: show warning when canonical-livepatch command fails
(LP: #2019997)
- timer jobs: jobs-status.json is now world readable (GH: #2601)
ubuntu-advantage-tools (30.1) noble; urgency=medium
* fix UnboundLocalError in update-check error handling (LP: #2043836)
-- Grant Orndorff <email address hidden> Thu, 29 Feb 2024 09:03:11 -0500
-
ubuntu-advantage-tools (31.1~23.10) mantic; urgency=medium
* Backport new upstream release (LP: #2048921)
ubuntu-advantage-tools (31.1) noble; urgency=medium
* fix unit test that failed on newer version of python
ubuntu-advantage-tools (31) noble; urgency=medium
* d/*:
- rename ubuntu-advantage-tools to ubuntu-pro-client
- rename ubuntu-advantage-pro to ubuntu-pro-image-auto-attach
* d/apparmor:
- introduce new ubuntu_pro_apt_news apparmor policy
* d/control:
- update descriptions and homepages
- update ubuntu-pro-client-l10n to Depend on same binary version
of ubuntu-pro-client
* d/rules:
- install ubuntu_pro_apt_news apparmor policy
* d/ubuntu-pro-client.prerm:
- removed dependency on python3 by reimplementing in sh (LP: #2021988)
* apport:
- collect logs related to ubuntu_pro_apt_news apparmor policy
* release-upgrades.d/ubuntu-advantage-upgrades.cfg:
- convert APT list files to deb822 files when upgrading to noble
* systemd/apt-news.service:
- add apparmor profile and capability restrictions
* systemd/ubuntu-advantage.service:
- avoid deadlock when started during cloud-config.service (LP: #2050022)
* New upstream release 31 (LP: #2048921)
- api:
+ u.pro.attach.auto.full_auto_attach.v1: new cloud_override param
+ u.pro.status.enabled_services.v1:
* include services in "warning" state
* include "usg"
+ u.pro.security.fix.*.plan.v1: export common objects from
endpoint modules (GH: #2714)
- cli:
+ add autocomplete for api subcommand
+ autocomplete multiple services for enable/disable subcommands
+ if lock is held, cli will retry over the course of a few seconds
- collect-logs:
+ include logs related to ubuntu_pro_apt_news apparmor policy
+ include logs of apt-news.service
+ include logs of esm-cache.service
- enable:
+ use deb822 apt source file format when on noble or later
- fix:
+ avoid insinuating that CVEs were found on the machine (GH: #1522)
+ ignore LSNs when considering related USNs
+ pick CVE description based on what packages are installed
- landscape:
+ don't disable landscape on ubuntu releases where it cannot be
enabled (GH: #2743)
+ no longer assume landscape-client gets removed on disable (GH: #2840)
+ leave client.conf in place instead of renaming
+ require service to be running to consider "enabled"
+ new explanatory message when disabling
- motd: properly pluralize messages about updates (GH: #1579)
- status: show warning when canonical-livepatch command fails
(LP: #2019997)
- timer jobs: jobs-status.json is now world readable (GH: #2601)
ubuntu-advantage-tools (30.1) noble; urgency=medium
* fix UnboundLocalError in update-check error handling (LP: #2043836)
-- Grant Orndorff <email address hidden> Thu, 15 Feb 2024 09:39:55 -0500
-
ubuntu-advantage-tools (30~23.10) mantic; urgency=medium
* Backport new upstream release to mantic (LP: #2038461)
ubuntu-advantage-tools (30) noble; urgency=medium
* d/control:
- add python3-apt as a build dependency
- add the new ubuntu-pro-client-l10n binary package
- recommend installing ubuntu-pro-client-l10n
* d/po/*:
- Makefile to build localization files to debian/po/usr/share/locale/
- update POTFILES.in to cover all translatable messages
- remove old unused pot file
- add new complete pot file for "ubuntu-pro" domain
- add first Brazilian Portuguese translations
* d/rules:
- add step to build the translations
* d/tests/control:
- mark autopkgtests as superficial (GH: #2609)
* d/ubuntu-advantage-tools.maintscript:
- remove /etc/ubuntu-advantage/help_data.yaml
* d/ubuntu-pro-client-l10n.install:
- add install file for the new binary package
* New upstream release 30 (LP: #2038461)
- api:
+ add new backwards compatible plan steps to the v1 fix plan endpoints
+ improve information returned from the fix plan endpoints
+ new endpoint: u.pro.security.fix.cve.execute.v1
+ new endpoint: u.pro.security.fix.usn.execute.v1
- apt: improve performance and consistency by refactoring the code to use
the apt_pkg module
- auto-attach: add newline to the MOTD message to separate it from other
MOTD messages
- contract: send information about variants to the contracts server
- enable: update only service specific apt sources when enabling a service
(GH: #1311) (GH: #1482)
- esm: create static files to pin packages from esm-infra and esm-apps with
higher priority (GH: #2580)
- disable:
+ (experimental) add the --purge flag to the disable command, so users
can remove all service related packages when disabling a service
+ show extra warnings when kernels are involved in the purge operation
- files: Reduce race window when creating new files (LP: #2024204)
- fips: add support to Jammy to prepare for when it is available
- fips-preview:
+ add fips-preview as a new entitlement
- github: add issue templates (GH: #2646)
- internationalization:
+ add general internationalization support and templates
+ add initial sentence set for Brazilian Portuguese
- logging:
+ add journald logging for the daemon and systemd timer
+ remove daemon and timer log files
+ standardize the logging calls through the codebase (GH: #2632)
- systemd: change ubuntu-advantage.service type from 'notify' to 'simple',
dropping the dependency on python3-systemd (LP: #2038417) (GH: #2692)
- tests:
+ add scenarios where cloud-init is present but disabled (LP: #1938208)
+ change 'permission' to 'priority' when checking apt priority in tests
(GH: #2719)
-- Renan Rodrigo <email address hidden> Tue, 07 Nov 2023 16:23:34 +0200
-
ubuntu-advantage-tools (29.4) mantic; urgency=medium
* esm: remove static config file that pin packages from esm-infra
and esm-apps
-- Lucas Moura <email address hidden> Wed, 06 Sep 2023 10:50:50 -0300
-
ubuntu-advantage-tools (29.3) mantic; urgency=medium
* api: fix circular import that prevents enabled_services
endpoint from being imported
-- Lucas Moura <email address hidden> Fri, 25 Aug 2023 14:26:37 -0300
-
ubuntu-advantage-tools (29.2) mantic; urgency=medium
* d/ubuntu-advantage-tools.postinst:
- replace deb-systemd-invoke back to systemctl
* proxy: alert user if ca-certificates is not installed when using
a TLS-in-TLS proxy
-- Lucas Moura <email address hidden> Thu, 17 Aug 2023 19:45:48 -0300
-
ubuntu-advantage-tools (29.1) mantic; urgency=medium
* anbox: allow enabling service on container using the --access-only flag
-- Lucas Moura <email address hidden> Thu, 10 Aug 2023 11:08:46 -0300
-
ubuntu-advantage-tools (29) mantic; urgency=medium
* d/control:
- update links for the project github page
* d/copyright:
- bump date to 2023
- update upstream-name and source
* d/ubuntu-advantage-tools.{postinst,postrm}:
- rename repo GPG keys from -advantage to -pro (GH: #1539)
- replace calls to systemctl for deb-systemd-invoke
* d/README.source:
- add file with basic explanation on the source code (GH: #2463)
* New upstream release 29 (LP: #2029144)
- anbox-cloud: add support for service
- api
+ new endpoint: u.pro.security.fix.plan.cve.v1
+ new endpoint: u.pro.security.fix.plan.usn.v1
+ new endpoint: u.apt_news.current_news.v1
+ add more data explaining the decision made for
u.pro.security.status.reboot_required.v1 endpoint
- contract:
+ send activityInfo after cli attach, enable and disable
+ start recording when the machine has attached to a Pro subscription
+ more reliable detection when running on a docker container
- esm: create static files to pin packages from esm-infra and esm-apps with
higher priority (GH: #2580)
- fix: ignore non-USN items on related usns
- landscape: add support for the service
- logging: update to ubuntupro logging namespace
- proxy: add support for TLS-in-TLS proxy (LP: #1999909)
- snapd: look for the snapd package instead of the snap command
- system: try/except logic to remove files and folders (LP: #2025731)
-- Lucas Moura <email address hidden> Mon, 31 Jul 2023 15:46:23 +0000
-
ubuntu-advantage-tools (28.1) mantic; urgency=medium
* New upstream release 28.1 (LP: #2017949)
- fips: ensure shim-signed is updated to the version in the fips repo
if necessary
- status: fix bug where an existing status cache could influence the
simulated status output
-- Grant Orndorff <email address hidden> Mon, 26 Jun 2023 15:05:11 -0400
-
ubuntu-advantage-tools (28) mantic; urgency=medium
* d/ubuntu-advantage-tools.postinst:
- more specific regex for ua_config warning
* d/source/lintian-overrides
- adjust missing-build-dependency-for-dh-addon systemd override to work
for the different but related error message on jammy onwards
* New upstream release 28 (LP: #2017949)
- api:
+ new endpoint: u.pro.status.is_attached.v1
+ new endpoint: u.pro.status.enabled_services.v1
- apport: collect default log files if present for bug reports
- apt messaging: add bionic-specific urls
- auto-attach:
+ check for new Azure UBUNTU_PRO license on-boot of non-pro instances
+ exit 4 if attach succeeds but service enablement fails
- cli:
+ avoid unnecessary network calls during autocomplete (GH: #2556)
+ warn users to not rely on human-readable output in scripts
- config: no longer load uaclient.conf from current working directory
- fix:
+ add support for --no-related flag
+ separate target USN from related USNs
- general:
+ logs to user cache directory when run as non-root
+ fix bug where non-root commands failed with file permission error
accessing /tmp/ubuntu-advantage (GH: #2567)
+ use system environment vars by default in sub processes (GH: #2527)
+ fall back to /usr/lib/os-release for release info
+ start logging to default log file until config is loaded
+ remove small timeout from contract checking request
+ avoid crashes when processing unicode text (LP: #2019729)
- livepatch:
+ use uname.machine for kernel arch when checking support
(GH: #2517)
+ display tailored warning messages for granular support statuses
- realtime-kernel: add support for intel-iotg variant
- reboot-required: new criteria for "yes-kernel-livepatches-applied"
livepatch status must be either "applied" or "nothing-to-apply" and
livepatch support status must say "supported"
- security-status:
+ always show available/installed counts for esm packages
+ include hint to run apt-get update for up-to-date info (GH: #2443)
+ improve visibility of installed and available updates (GH: #2442)
+ change package info message hint to recommend apt-cache show
+ avoids unnecessary network calls (LP: #2015286, GH: #2536)
- systemd: update service unit for reboot_cmds to not run if not attached
- status:
+ add hint for pro status --all
+ better message if no services are available (LP: #1994923)
- timer: only run timer when attached
-- Grant Orndorff <email address hidden> Thu, 27 Apr 2023 16:34:55 -0400
-
ubuntu-advantage-tools (27.14.4) lunar; urgency=medium
* timer: disable update_contract_info job (LP: #2015302)
* livepatch: prevent livepatch from auto-enabling and subsequently failing
on non-amd64 systems (LP: #2015241)
-- Renan Rodrigo <email address hidden> Tue, 04 Apr 2023 17:56:07 -0300
