lp:~canonical-kernel/+git/kteam-tools

Author: Agathe Porte
Author Date: 2023-08-16 14:52:31 UTC

cranky: docs: bold supported archs for compileselftests

This limitation is easy to miss on a first read.

Signed-off-by: Agathe Porte <agathe.porte@canonical.com>

Author: Agathe Porte
Author Date: 2023-08-16 15:00:41 UTC

cranky: docs: tags pushed warning is expected

Signed-off-by: Agathe Porte <agathe.porte@canonical.com>

Author: Thibf
Author Date: 2023-08-16 13:32:25 UTC

verify-release-ready: improve execution time for tags checks

Going through `git tag --contains <>` is very slow in case where
there is lots of tags, and can be replaced by `git describe --exact-match`
to have faster results

Signed-off-by: Thibault Ferrante <thibault.ferrante@canonical.com>

Author: Cory Todd
Author Date: 2023-07-06 17:55:02 UTC

cranky: docs -- dput-sources auto destination

Update docs for cranky dput-sources to prefer the use of auto over other
destinations.

Signed-off-by: Cory Todd <cory.todd@canonical.com>

Author: Andrea Righi
Author Date: 2023-08-16 07:25:23 UTC

info/kernel-series: update mantic/linux to 6.5

Signed-off-by: Andrea Righi <andrea.righi@canonical.com>

Author: Sean Feole
Author Date: 2023-08-14 19:23:43 UTC

info/kernel-series: Update j/azure-fde meta pkgs

Update the j/linux-azure-fde meta pkgs

j/linux-azure-fde 5.15 src -> linux-azure-fde-lts-22.04 meta
j/linux-azure-6.2-fde src -> linux-azure-fde-edge meta

Signed-off-by: Sean Feole <sean.feole@canonical.com>

Author: Cory Todd
Author Date: 2023-08-14 19:07:18 UTC

stable: publish-tags -- fix private check

The visibility of a repo should be checked symmetrically. We also need to
be warned if k.s.y says not private while launchpad says private.

Signed-off-by: Cory Todd <cory.todd@canonical.com>

Author: Cory Todd
Author Date: 2023-08-14 18:58:28 UTC

info/kernel-series: realtime is private

Mark all supported realtime kernels as private. Tooling requires
these fields to be correct so we can twiddle the protocol URI.
The transition of realtime from public to private is what broke
the publish-tags (sync master branches) tool.

Signed-off-by: Cory Todd <cory.todd@canonical.com>

Author: Cory Todd
Author Date: 2023-08-10 15:05:00 UTC

stable: publish-tags -- inhibit usage

We don't want people running this just yet.

Signed-off-by: Cory Todd <cory.todd@canonical.com>

Author: Sean Feole
Author Date: 2023-08-14 19:26:48 UTC

kernel_devs.conf: added nwager

Signed-off-by: Sean Feole <sean.feole@canonical.com>

Author: Francis Ginther
Author Date: 2023-08-11 21:05:13 UTC

info/kernel-series: Drop f/linux-ibm testing meta-pkg

Drop the testing `meta-pkg` from focal/linux-ibm. It was set to
`linux-ibm` which no longer applies to this kernel (it was swapped with
focal/linux-ibm-5.15).

Signed-off-by: Francis Ginther <francis.ginther@canonical.com>

Author: Cory Todd
Author Date: 2023-07-07 22:53:28 UTC

WIP: kernel-series: schema -- implement schema POC

This introduces a basic schema that can be used to validate our
kernel-series.yaml. This will serve as both a sanity check for
validation as well as a source of information that describes what each
object contributes.

Signed-off-by: Cory Todd <cory.todd@canonical.com>

Author: Magali Lemes do Sacramento
Author Date: 2023-08-11 12:44:56 UTC

info/kernel-series: add routing to j:aws-fips

Signed-off-by: Magali Lemes <magali.lemes@canonical.com>

Author: Manuel Diewald
Author Date: 2023-08-11 12:59:36 UTC

git-tools: Grant execute permission to git-buglink

Signed-off-by: Manuel Diewald <manuel.diewald@canonical.com>

Author: Andy Whitcroft
Author Date: 2023-08-11 15:47:22 UTC

info/kernel-series: jammy:linux-uc22-capilano -- fix routing

Signed-off-by: Andy Whitcroft <apw@canonical.com>

Author: John Cabaj
Author Date: 2023-08-11 14:30:29 UTC

info/kernel-series: Change focal:linux-ibm-5.15 to default and focal:linux-ibm to -lts-20.04

Signed-off-by: John Cabaj <john.cabaj@canonical.com>

Author: Roxana Nicolescu
Author Date: 2023-08-10 07:14:58 UTC

stable-tools: Add missing execute permission to scripts

Signed-off-by: Roxana Nicolescu <roxana.nicolescu@canonical.com>

Author: Philip Cox
Author Date: 2023-08-10 15:26:09 UTC

info/kernel-series: Add m:linux-intel-kobuk

Add m:linux-intel-kobuk based off of m:linux-unstable
for a bringup vehicle for the intel kobuk work.

Signed-off-by: Philip Cox <philip.cox@canonical.com>

Author: Cory Todd
Author Date: 2023-08-10 13:59:46 UTC

cranky:docs -- add note on =devel mode

Explain the intent of =devel mode for KERNEL_SERIES_USE.

Signed-off-by: Cory Todd <cory.todd@canonical.com>

Author: Cory Todd
Author Date: 2023-07-24 18:31:38 UTC

admin-lp-git-permissions: allow Gitea to create tags

We should allow Gitea to create new Ubuntu-* tags. No tag deletion or
alteration should be allowed for people_gitea.

Signed-off-by: Cory Todd <cory.todd@canonical.com>

Author: Cory Todd
Author Date: 2023-07-21 18:27:28 UTC

admin: admin-lp-groups-validate -- add vpn group check

Add check for ckt members having VPN access.

Signed-off-by: Cory Todd <cory.todd@canonical.com>

Author: Magali Lemes do Sacramento
Author Date: 2023-08-09 19:02:27 UTC

info/kernel-series: assign j:linux-fips to Magali

Signed-off-by: Magali Lemes <magali.lemes@canonical.com>

Author: Ian May
Author Date: 2023-08-08 13:24:45 UTC

info/kernel-series: update testing for nvidia-6.2

Remove lowlatency testing as that flavour is not
currently needed for nvidia-6.2

Signed-off-by: Ian May <ian.may@canonical.com>

Author: Thibf
Author Date: 2023-08-02 08:55:20 UTC

info/kernel-series: Add jammy/linux-ein

Signed-off-by: Thibault Ferrante <thibault.ferrante@canonical.com>

Author: Thibf
Author Date: 2023-08-07 16:37:38 UTC

adt-matrix: Add hover information for hinting

To make the wildcard easier to understand for newcomers and more
consistent with the dashboard.

Signed-off-by: Thibault Ferrante <thibault.ferrante@canonical.com>

Author: John Cabaj
Author Date: 2023-08-07 15:39:53 UTC

info/kernel-series: Change focal:linux-ibm-5.15 from -hwe-20.04 to -lts-20.04

Signed-off-by: John Cabaj <john.cabaj@canonical.com>

Author: Cory Todd
Author Date: 2023-08-03 16:18:55 UTC

ktl: kernel_series -- add KERNEL_SERIES_USE=devel

Many users are expecting =local to read from info/kernel-series.yaml.
Creating a full kernel-versions/CYCLE/k.s.y layout for their development
needs is tedious and non-obvious. Add a new KERNEL_SERIES_USE=devel mode
to provide a more intuitive local mode.

=devel implies local and will cause any --cycle argument to be ignored.

Signed-off-by: Cory Todd <cory.todd@canonical.com>

Author: Ian May
Author Date: 2023-08-04 19:19:10 UTC

info/kernel-series: update jammy:nvidia-6.2 parent

Now that we have a jammy:hwe-6.2, it is more useful
to make nvidia-6.2 kernel a derivative of hwe-6.2 instead of
a backport of lunar:nvidia since it is no longer needed.

Signed-off-by: Ian May <ian.may@canonical.com>

Author: Roxana Nicolescu
Author Date: 2023-08-07 09:52:51 UTC

kernel.ubuntu.com/index.html: Update for 2023.08.07 SRU cycle

Update the dates shown on the main web page to the new SRU cycle
dates.

Signed-off-by: Roxana Nicolescu <roxana.nicolescu@canonical.com>

Author: Thadeu Lima de Souza Cascardo
Author Date: 2023-08-01 16:49:03 UTC

security-cycle: Add s2023.07.10 cycle info

Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>

Author: Khaled El Mously
Author Date: 2023-08-02 16:42:55 UTC

kernel-series: Deprecate GKE kernels for focal

There are no more focal-based GKE products

Signed-off-by: Khalid Elmously <khalid.elmously@canonical.com>

Author: Roxana Nicolescu
Author Date: 2023-08-04 09:27:26 UTC

sru-cycle: Add 2023.08.07 cycle info

Signed-off-by: Roxana Nicolescu <roxana.nicolescu@canonical.com>

Author: Magali Lemes do Sacramento
Author Date: 2023-08-02 19:56:27 UTC

info/kernel-series: assign f:linux-fips to Magali

Signed-off-by: Magali Lemes <magali.lemes@canonical.com>

Author: John Cabaj
Author Date: 2023-08-02 17:18:47 UTC

info/kernel-series: Change focal:linux-ibm-5.15 from -edge to -hwe-20.04

Signed-off-by: John Cabaj <john.cabaj@canonical.com>

Author: Cory Todd
Author Date: 2023-08-01 18:58:48 UTC

cranky: fix -- pass cycle to shell-helper list-variants

The cranky update-variants fix requires the cycle paramter in order to
pull in the right changes. Otherwise, the variants listed on the main
tree's tracking-bug cycle will be used which may be incorrect.

Signed-off-by: Cory Todd <cory.todd@canonical.com>

Author: Khaled El Mously
Author Date: 2023-07-31 22:22:37 UTC

kteam-tools: Make 6.2 kernels default for gcp and oracle

Signed-off-by: Khalid Elmously <khalid.elmously@canonical.com>

Author: Paolo Pisati
Author Date: 2023-08-01 10:51:29 UTC

info/kernel-series.info: mantic: derive lowlatency from linux-unstable and disable lrm

Signed-off-by: Paolo Pisati <paolo.pisati@canonical.com>

Author: Paolo Pisati
Author Date: 2023-08-01 10:25:18 UTC

info/kernel-series.info: mantic: derive aws/azure/gcp/ibm/oracle from linux-unstable and disable lrm

Signed-off-by: Paolo Pisati <paolo.pisati@canonical.com>

Author: Roxana Nicolescu
Author Date: 2023-07-24 08:18:40 UTC

info/kernel-series: deprecate unsupported bionic kernels

The following kernels are not supported anymore
- bionic:linux-ibm-gt-5.4
- bionic:linux-raspi2
- bionic:linux-snapdragon
- bionic:linux-dell300x

bionic:interactive-strength-fs0001-kernel snap contract has been
renewed until 2024-11-07.
bionic:abb-dfa-apc2200-kernel snap contract has been renewed until
2023-12-18.

Signed-off-by: Roxana Nicolescu <roxana.nicolescu@canonical.com>

Author: Andy Whitcroft
Author Date: 2023-07-28 21:29:48 UTC

cranky: fix -- update update-dkms-versions to support --remote-branch

Now that we have a flat kernel-versions repository it makes sense to use
branches in the main archive to represent things like the "next" version
of packages. Update the master version of update-dkms-versions applied
by cranky-fix to support --remote-branch

Signed-off-by: Andy Whitcroft <apw@canonical.com>

Author: Cory Todd
Author Date: 2023-07-28 14:00:03 UTC

cranky: pull-sources -- add bash completion

Add bash completion for pull-sources.

Signed-off-by: Cory Todd <cory.todd@canonical.com>

Author: Stefan Bader
Author Date: 2023-07-28 09:22:39 UTC

create-sru-cards: Remove as deprecated

Instead of create-sru-cards the new create-cycle-sprint should be used
as complete replacement. Remove the old command before it attracts dust.

Signed-off-by: Stefan Bader <stefan.bader@canonical.com>

Author: Cory Todd
Author Date: 2023-07-27 15:08:59 UTC

cranky: crl/handle -- include cycle name in lookup failures

When cranky is asked to work on a tree set that depends on changes not
represented in the effective kernel-series cycle an incomplete error
message is shown. Include the cycle name in the error as a hint to the
user that they should either fix the kernel-series@cycle or use the
correct cycle.

Signed-off-by: Cory Todd <cory.todd@canonical.com>

Author: Yuxuan Luo
Author Date: 2023-07-11 23:53:49 UTC

cacheuseonly/cve-check-pending

Add a handy script checking and summarizing the status of all CVE cards
in the `pending` column.

Setup
-----

1. Configure the UCT variable in shell source file.
     Example: export UCT=$HOME/canonical/ubuntu-cve-tracker
2. Configure ~/.netrc for JIRA

Examples
--------

$ cve-check-pending -n 4 -l 3 # Display top 4 CVEs with 5 lines
CVE-2022-42721
CVE-2023-21106
 - jammy_linux-oem-6.0: needed
CVE-2020-36516
 - trusty/esm_linux: ignored (was needed ESM criteria)
CVE-2023-1382
 - esm-infra/xenial_linux: ignored (was needed ESM criteria)
 - bionic_linux: ignored (end of standard support, was needed)
 - esm-infra/bionic_linux: needed
   ...and 34 more
...and 44 more CVE(s)

$ cve-check-pending -r # Display CVEs w/ the most needed/pending first
CVE-2023-1990
 - esm-infra/xenial_linux: ignored (was needed ESM criteria)
 - bionic_linux: ignored (end of standard support, was needed)
   ...and 114 more
CVE-2023-1611
 - esm-infra/xenial_linux: ignored (was needed ESM criteria)
 - bionic_linux: ignored (end of standard support, was needed)
   ...and 112 more
...and 45 more CVE(s)

---- Exceptions ----
CVE-2019-12381: current status is 'ignored'
CVE-2019-12382: current status is 'ignored'

^~~~ CVEs not in `active` or cannot be found in UCT will be
summarized here

Signed-off-by: Yuxuan Luo <yuxuan.luo@canonical.com>

Author: Andy Whitcroft
Author Date: 2023-07-27 12:43:37 UTC

info/sru-cycle: mark s2023.05.15 and 2023.06.12 completed

Signed-off-by: Andy Whitcroft <apw@canonical.com>

Author: Agathe Porte
Author Date: 2023-07-26 14:51:19 UTC

docs: ease review of dependencies

By using continuation and alphabetic ordering.

Signed-off-by: Agathe Porte <agathe.porte@canonical.com>

Author: Stefan Bader
Author Date: 2023-07-26 14:41:00 UTC

create-kernel-tasks: Work around spin 1 Launchpad bug

When looking up workflow trackers to check for exising ones there is a
difference between spin #1 and later ones. The reason why is somewhat
lost in history. While for later spins the library is called with a set
of all cycle tags, we pass an empty list for the initial spin.

This gets translated by the library into a search for all workflow tasks
which have a "kernel-release-tracking-bug-live" tag. Right now this
seems to return about 4000-5000 entries when done via the web page. The
API call however runs into a timeout and returns a Launchpad Oops.

Right now the simplest solution is to modify create-kernel-tasks to pass
in the cycle tag for spin #1 as well. Which also speeds up the runtime a
lot.

Signed-off-by: Stefan Bader <stefan.bader@canonical.com>

Author: Ian May
Author Date: 2023-07-26 20:11:10 UTC

info/kernel-series: update variants for jammy:nvidia hwe kernels

Add an hwe-22.04/hwe-22.04-edge variant

Signed-off-by: Ian May <ian.may@canonical.com>

Author: Cory Todd
Author Date: 2023-07-26 17:49:15 UTC

docs: cranky-the-kernel -- update path to main package

Update all example cranking commands to use the new default path for
main packages which is linux-main.

Signed-off-by: Cory Todd <cory.todd@canonical.com>

Author: Luke Nowakowski-Krijger
Author Date: 2023-06-29 17:01:44 UTC

git-tools: Add git-buglink script

Add git-buglink script used in adding buglinks to patches when
processing upstream stable updates.

Ported from Kamal's stable tools.

Signed-off-by: Luke Nowakowski-Krijger <luke.nowakowskikrijger@canonical.com>

Author: Andrea Righi
Author Date: 2023-07-25 08:23:50 UTC

info/sru-cycle: close old/unused dev cycles

Signed-off-by: Andrea Righi <andrea.righi@canonical.com>

Author: Andrea Righi
Author Date: 2023-07-25 07:57:33 UTC

info/kernel-series: update mantic/linux-unstable to 6.5

Signed-off-by: Andrea Righi <andrea.righi@canonical.com>

Author: Kamal Mostafa
Author Date: 2023-07-24 18:39:21 UTC

cranky: fix: correct dpkg-parsechangelog usage

Fixed incorrect series detection when "UNRELEASED" is at the top of
changelog.

dpkg-parsechangelog needs "-o1" (and also "-c1").

Signed-off-by: Kamal Mostafa <kamal@canonical.com>

Author: Andy Whitcroft
Author Date: 2023-07-24 14:53:49 UTC

info/sru-cycle: close out 2023.04.17 2023.05.15

Signed-off-by: Andy Whitcroft <apw@canonical.com>

Author: Andrei Gherzan
Author Date: 2023-05-24 10:07:43 UTC

cranky: review-master-changes: Fix the case when the base in the changelog is not in the tree

In some cases, the base version referenced in the changelog is not
reachable because another version (later version) of the base already
includes those changes.

For example, cycle 2023.04.17 of kinetic:linux includes the
Ubuntu-5.19.0-43.44 release, on top of which a respin of linux-aws was
done, which pulled in the aws changelog the logs for
Ubuntu-5.19.0-43.44. The next cycle for kinetic:linux (2023.05.15-1)
includes the actual fixes in Ubuntu-5.19.0-43.44 but releases them
Ubuntu-5.19.0-44.45. When trying to crank 2023.05.15-1 for linux-aws,
review-master-changes will fail as it can't match the version in its
changelog (Ubuntu-5.19.0-43.44) for the master kernel with any commits
in the rebased tree over 2023.05.15-1.

This patch changes how "review-master-changes" finds the commit for
computing the diff of changes in "debian.master". Currently, the command
gets the last base version in the changelog, finds its commit message
and tries to match it against the current tree (HEAD). To avoid the
corner case described above (where we don't have a matching commit in
the current tree), we compute "prev_commit" by finding the common
ancestor of the fetched version (from changelog) and current HEAD.

This change assumes that the primary kernels pull in the right changes
from the previous cycle.

Signed-off-by: Andrei Gherzan <andrei.gherzan@canonical.com>

Author: Dimitri John Ledkov
Author Date: 2023-07-24 09:40:47 UTC

kernel-series.yaml: bionic:linux:pc-kernel drop i386 for ESM

i386 architecture is out-of-scope as host arch for ESM

Signed-off-by: Dimitri John Ledkov <dimitri.ledkov@canonical.com>

Author: John Cabaj
Author Date: 2023-07-14 03:54:17 UTC

cranky/docs: remove shell prompt for easier copying from ReadTheDocs

Signed-off-by: John Cabaj <john.cabaj@canonical.com>

Author: Cory Todd
Author Date: 2023-07-13 21:45:13 UTC

WIP: cranky:crl/cycle_ref -- update tests to support spin numbers

Now that spin numbers are supported the tests are invalid.

Signed-off-by: Cory Todd <cory.todd@canonical.com>

Author: Thadeu Lima de Souza Cascardo
Author Date: 2023-06-27 14:34:42 UTC

ktl/kernel_series: use environment to pick a cycle by default

Since commit d62fc2a89ba4 ("ktl/kernel_series: add per-cycle view
support"), it is possible to use a kernel series data for a particular
cycle. That requires, however, that code is changed to accept it as input
and use to instantiate that KernelSeries.

Tools that are not yet prepared for that could still benefit from using
per-cycle data and one simple way to do that is to use an environment
variable. In this case, KERNEL_SERIES_CYCLE.

This was tested with cranky-update-snap and cranky-dput-sources.

Enhances: d62fc2a89ba4 ("ktl/kernel_series: add per-cycle view support")
Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>

Author: Cory Todd
Author Date: 2023-05-19 00:35:31 UTC

cranky: crl/test_cycle_ref mock remote

Since our git repos are fake the remotes that we assign them don't
actually exist. Mock the readonly remote property to None so our tag
fetch call doesn't abort. We want the abort behavior during normal
operation, just not during testing.

Signed-off-by: Cory Todd <cory.todd@canonical.com>

Author: Juerg Haefliger
Author Date: 2023-06-06 06:12:44 UTC

info/kernel-series: add temporary 'esm' routing for bionic

Commit ("info/kernel-series: mark bionic as ESM") marked bionic as ESM
which expects an 'esm' routing entry which is missing:

Traceback (most recent call last):
  File "/vol2/data/git/kteam-tools/cranky/cmds.d/list-routing", line 88, in <module>
    print_table(handle.source.routing)
  File "/vol2/juergh/git/ubuntu/kteam-tools/ktl/kernel_series.py", line 563, in routing
    return KernelRoutingEntry(self._ks, self, data)
  File "/vol2/juergh/git/ubuntu/kteam-tools/ktl/kernel_series.py", line 83, in __init__
    raise ValueError("unable to map routing alias {}, "
ValueError: unable to map routing alias esm, not listed in series routing table

Fix that by adding a temporary 'esm' routing.

Signed-off-by: Juerg Haefliger <juerg.haefliger@canonical.com>
Acked-by: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>
Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>

Author: Tim Gardner
Author Date: 2023-05-04 14:28:50 UTC

kernel-series: Drop obsolete linux-azure-5.13

Signed-off-by: Tim Gardner <tim.gardner@canonical.com>

Author: Cory Todd
Author Date: 2023-05-03 16:18:32 UTC

[WIP]cranky/checkout: always set upstream

BugLink: https://bugs.launchpad.net/bugs/2018292

When using the --cycle option for checkout, no upstream will be set.
This may break some workflows that expect to be able to iterate on
remote refs of the current branch's upstream.

Signed-off-by: Cory Todd <cory.todd@canonical.com>