Merge ~ahasenack/ubuntu/+source/ubuntu-advantage-tools:trusty-nonx86-ua-fix into ubuntu/+source/ubuntu-advantage-tools:ubuntu/trusty-devel

[Andreas Hasenack]

Cherry-pick of https://github.com/CanonicalLtd/ubuntu-advantage-client/commit/7353260d1a49279fb10069fd0c18011b25a1d0d8 to completely unconfigure esm during postinst on architectures other than i386 and amd64.

Bileto ticket to run DEP8 tests: https://bileto.ubuntu.com/#/ticket/3839 (still ongoing)

It has an associated ppa (still building).

[Christian Ehrhardt  (paelzer)]

- PPA built fine
- Changes are small and LGTM
- The SRU template on this looks complete as well
- Andreas assigned the review to you Chad, so mine is just a comment.

@Chad
If Andreas and you have made a deal how to sponsor this while he is off, then great.
If not let us know once review and tests are fully complete.

[Bryce Harrington (bryce)]

In The [Regression Potential] section, "It there is a change..." s/b "If there is a change..."

You might also want to add discussion about what types of symptoms testers should watch for, such as failures during apt-get update, and what types of output to look for running `ua status` (i.e. seeing 'enabled' displayed for esm-infra on architectures it shouldn't, etc.)

As to the code changes for this merge proposal, I have no improvements to suggest, they look good.

Bileto appears to have run successfully, and tests are green.

I'm setting up an lxc container to test things before uploading.

review: Approve

[Bryce Harrington (bryce)]

The first test case gave a warning about a missing .json file, don't know if that's expected or not, but the test seemed to complete ok otherwise:

-- BEGIN test 1c: Confirm ua-contract architecture deltas don't unattach/disable esm on supported platforms
Introduce a fake architecture delta by modifying the cache machine token
sed: can't read /var/lib/ubuntu-advantage/private/machine-access-esm-infra.json: No such file or directory
Successfully refreshed your subscription
SERVICE ENTITLED STATUS DESCRIPTION
cc-eal yes n/a Common Criteria EAL2 Provisioning Packages
cis-audit no — Center for Internet Security Audit Tools
esm-infra yes disabled UA Infra: Extended Security Maintenance
fips yes n/a NIST-certified FIPS modules
fips-updates yes n/a Uncertified security updates to FIPS modules
livepatch yes n/a Canonical Livepatch service

Enable services with: ua enable <service>

     Account: <email address hidden>
Subscription: <email address hidden>

[Bryce Harrington (bryce)]

The second test seems to have hit a network issue of some sort:

++ openstack server show test-trusty -f json
++ jq -r .addresses
++ awk -F = '{print $NF}'
+ VM_IP=10.48.129.245
+ echo 'Wait for cloud-init to finish startup on trusty: 10.48.129.245'
Wait for cloud-init to finish startup on trusty: 10.48.129.245
+ RUNLEVEL=NOTSET
+ '[' 'N 2' = NOTSET ']'
+ echo -n .
.+ sleep 5
++ ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o LogLevel=ERROR ubuntu@10.48.129.245 runlevel
ssh: connect to host 10.48.129.245 port 22: Connection timed out
+ RUNLEVEL=

[Bryce Harrington (bryce)]

Verified git ubuntu build and build-source work, also uploaded to a PPA - https://launchpad.net/~bryce/+archive/ubuntu/ubuntu-advantage-tools-review-mp375564/+packages

$ git ubuntu tag --upload
$ git push pkg upload/19.6_ubuntu14.04.4
$ dput ubuntu ../ubuntu-advantage-tools_19.6~ubuntu14.04.4_source.changes
Checking signature on .changes
gpg: ../ubuntu-advantage-tools_19.6~ubuntu14.04.4_source.changes: Valid signature from E603B2578FB8F0FB
Checking signature on .dsc
gpg: ../ubuntu-advantage-tools_19.6~ubuntu14.04.4.dsc: Valid signature from E603B2578FB8F0FB
Uploading to ubuntu (via ftp to upload.ubuntu.com):
  Uploading ubuntu-advantage-tools_19.6~ubuntu14.04.4.dsc: done.
  Uploading ubuntu-advantage-tools_19.6~ubuntu14.04.4.tar.gz: done.
  Uploading ubuntu-advantage-tools_19.6~ubuntu14.04.4_source.changes: done.
Successfully uploaded packages.

(It looks like the reason test #2 is failing is due to something wrong in my local openstack configuration. Not really sure how to debug it, but hopefully others can verify the tests against proposed during the SRU verification process.)

review: Approve

diff --git a/debian/changelog b/debian/changelog
index ad6d0b3..effe086 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+ubuntu-advantage-tools (19.6~ubuntu14.04.4) trusty; urgency=medium
+
+  * d/postinst: only configure ESM on supported architectures (LP: #1851858)
+
+ -- Andreas Hasenack <[e-mail]>  Thu, 14 Nov 2019 14:34:50 -0300
+
 ubuntu-advantage-tools (19.6~ubuntu14.04.3) trusty; urgency=medium
 
   * d/postinst: rename existing ubuntu-esm-precise.list file to trusty.
diff --git a/debian/postinst b/debian/postinst
index 95b35c8..c6fc6f9 100644
--- a/debian/postinst
+++ b/debian/postinst
@@ -17,6 +17,8 @@ ESM_INFRA_APT_SOURCE_FILE_TRUSTY="$APT_SRC_DIR/ubuntu-esm-infra-trusty.list"
 ESM_APT_PREF_FILE_TRUSTY="/etc/apt/preferences.d/ubuntu-esm-trusty"
 ESM_INFRA_APT_PREF_FILE_TRUSTY="/etc/apt/preferences.d/ubuntu-esm-infra-trusty"
 
+MYARCH="$(dpkg --print-architecture)"
+ESM_SUPPORTED_ARCHS="i386 amd64"
 
 unconfigure_esm() {
     rm -f $APT_TRUSTED_KEY_DIR/ubuntu-esm*gpg  # Remove previous esm keys
@@ -78,8 +80,15 @@ case "$1" in
       rm -rf /var/cache/ubuntu-advantage-tools
 
       if [ "14.04" = "$VERSION_ID" ]; then
-        configure_esm
+        if echo "$ESM_SUPPORTED_ARCHS" | grep -qw "$MYARCH"; then
+          # 14.04 and supported arch
+          configure_esm
+        else
+          # 14.04 and unsupported arch
+          unconfigure_esm
+        fi
       else
+        # not 14.04, regardless of arch
         unconfigure_esm
       fi
       if [ ! -f /var/log/ubuntu-advantage.log ]; then