Merge ~mateus-morais/ubuntu/+source/open-iscsi:merge-lp2040361-noble into ubuntu/+source/open-iscsi:debian/sid

[Mateus Rodrigues de Morais]

Merging open-iscsi 2.1.9-3 into Noble.

PPA: https://launchpad.net/~mateus-morais/+archive/ubuntu/open-iscsi-merge

Autopkgtest results:
- amd64: https://autopkgtest.ubuntu.com/results/autopkgtest-noble-mateus-morais-open-iscsi-merge/noble/amd64/o/open-iscsi/20231214_121346_4c753@/log.gz
- arm64: https://autopkgtest.ubuntu.com/results/autopkgtest-noble-mateus-morais-open-iscsi-merge/noble/arm64/o/open-iscsi/20231214_123506_fbf3e@/log.gz
- armhf: https://autopkgtest.ubuntu.com/results/autopkgtest-noble-mateus-morais-open-iscsi-merge/noble/armhf/o/open-iscsi/20231211_213812_85c16@/log.gz
- ppc64el: https://autopkgtest.ubuntu.com/results/autopkgtest-noble-mateus-morais-open-iscsi-merge/noble/ppc64el/o/open-iscsi/20231214_121048_9d038@/log.gz
- s390x: https://autopkgtest.ubuntu.com/results/autopkgtest-noble-mateus-morais-open-iscsi-merge/noble/s390x/o/open-iscsi/20231214_121229_f18aa@/log.gz

This also includes two fixes for issues that appeared when running PPA autopkgtests:

- commit 7b679fb: server images have recently started having separate /boot partitions, which the test script didn't anticipate and ended up looking for kernel and initrd in an empty /boot directory. This fixes that by manually mounting the /boot partition, so that kernel and initrd are visible.

- commit ec3f26f: this is a weird issue that caused the /etc/iscsi/initiatorname.iscsi file to still contain GenerateName=yes even after the package was installed and configured. Technically, the postinst script should already replace that with an actual name during postinst configure, but that was not happening. So making the test purge the package and reinstall it fixed the issue.

[Simon Quigley (tsimonq2)]

review: Approve

diff --git a/debian/README.Debian b/debian/README.Debian
index f0c2568..43c7c81 100644
--- a/debian/README.Debian
+++ b/debian/README.Debian
@@ -57,7 +57,7 @@ iSCSI Qualified Names (IQN) and initiatorname.iscsi
 The initiatorname.iscsi file defines the iSCSI Qualified Name (IQN) of the iSCSI 
 initiator. This IQN is used by the initiator to identify itself to the target.
 
-Example: InitiatorName=iqn.1993-08.org.debian:01:lnx-debian
+Example: InitiatorName=iqn.2004-10.com.ubuntu:01:lnx-debian
 
 While this name can be adjusted to suit your needs, once set, it should not be 
 changed. If you later change the InitiatorName, existing access control lists 
@@ -100,7 +100,7 @@ options in your initramfs:
 
    Example Syntax:
 
-   ISCSI_INITIATOR="iqn.1993-08.org.debian:01:9b3e5634fdb9"
+   ISCSI_INITIATOR="iqn.2004-10.com.ubuntu:01:9b3e5634fdb9"
    ISCSI_TARGET_NAME=iqn.2008-01.com.example:storage.foo
    ISCSI_TARGET_IP=192.168.1.1
    ISCSI_TARGET_PORT=3260
diff --git a/debian/changelog b/debian/changelog
index 7a092a5..ef294ff 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,27 @@
+open-iscsi (2.1.9-3ubuntu1) noble; urgency=medium
+
+  * Merge with Debian unstable (LP: #2040361). Remaining changes:
+    - d/README.Debian, d/extra/startup-checks.sh, d/open-iscsi.postinst:
+      Apply Ubuntu branding to iqn initiator name
+    - debian/tests: Add Ubuntu autopkgtest suite:
+      + d/t/README-boot-test.md: document test design
+      + d/t/control: register testsuite
+      + d/t/get-image: helper to fetch an ubuntu cloud image
+      + d/t/patch-image: helper to modify an ubuntu cloud image
+      + d/test-open-iscsi.py, d/t/testlib.py: various qa regression tests
+      + d/t/testsuite: helper to invoke qa regression tests
+      + d/t/tgt-boot-test: test using tgt to boot from iscsi
+      + d/t/xkvm: helper to spawn a VM
+    - d/p/fix-format-overflow-warnings.patch: Fix format overflow warnings
+      seen when building with -O3 to avoid FTBFS on ppc64el
+  * d/t/patch-image: fixed kernel detection by manually mounting /boot when
+    downloaded image contains a separate /boot partition
+  * d/t/install: fixed test by forcing a package reinstall so that
+    /etc/iscsi/initiatorname.iscsi can have expected value from the
+    postinst script
+
+ -- Mateus Rodrigues de Morais <[e-mail]>  Thu, 14 Dec 2023 10:08:38 -0300
+
 open-iscsi (2.1.9-3) unstable; urgency=medium
 
   * Release to unstable.
@@ -32,6 +56,30 @@ open-iscsi (2.1.8-2) unstable; urgency=medium
 
  -- Chris Hofstaedtler <[e-mail]>  Sun, 27 Aug 2023 12:10:27 +0200
 
+open-iscsi (2.1.8-1ubuntu2) mantic; urgency=medium
+
+  * Fix format overflow warnings seen when building with
+    -O3 to avoid FTBFS on ppc64el (LP: #2036884)
+
+ -- Graham Inggs <[e-mail]>  Fri, 22 Sep 2023 15:42:55 +0000
+
+open-iscsi (2.1.8-1ubuntu1) lunar; urgency=low
+
+  * Merge from Debian unstable. Remaining changes:
+    - debian/tests: Add Ubuntu autopkgtest suite:
+      + d/t/README-boot-test.md: document test design
+      + d/t/control: register testsuite
+      + d/t/get-image: helper to fetch an ubuntu cloud image
+      + d/t/patch-image: helper to modify an ubuntu cloud image
+      + d/test-open-iscsi.py, d/t/testlib.py: various qa regression tests
+      + d/t/testsuite: helper to invoke qa regression tests
+      + d/t/tgt-boot-test: test using tgt to boot from iscsi
+      + d/t/xkvm: helper to spawn a VM
+    - d/README.Debian, d/extra/startup-checks.sh, d/open-iscsi.postinst:
+      Apply Ubuntu branding to iqn initiator name
+
+ -- Steve Langasek <[e-mail]>  Mon, 07 Nov 2022 15:10:10 -0800
+
 open-iscsi (2.1.8-1) unstable; urgency=medium
 
   [ Chris Hofstaedtler ]
@@ -44,6 +92,33 @@ open-iscsi (2.1.8-1) unstable; urgency=medium
 
  -- Chris Hofstaedtler <[e-mail]>  Wed, 19 Oct 2022 15:59:32 +0000
 
+open-iscsi (2.1.7-2ubuntu1) kinetic; urgency=low
+
+  * Merge from Debian unstable. Remaining changes:
+    - debian/tests: Add Ubuntu autopkgtest suite:
+      + d/t/README-boot-test.md: document test design
+      + d/t/control: register testsuite
+      + d/t/get-image: helper to fetch an ubuntu cloud image
+      + d/t/patch-image: helper to modify an ubuntu cloud image
+      + d/test-open-iscsi.py, d/t/testlib.py: various qa regression tests
+      + d/t/testsuite: helper to invoke qa regression tests
+      + d/t/tgt-boot-test: test using tgt to boot from iscsi
+      + d/t/xkvm: helper to spawn a VM
+    - d/README.Debian, d/extra/startup-checks.sh, d/open-iscsi.postinst:
+      Apply Ubuntu branding to iqn initiator name
+  * Dropped changes, no longer needed:
+    - debian/open-iscsi-udeb.start: Apply Ubuntu branding
+    - Stop producing udebs on i386 where we no longer have d-i or a kernel.
+  * Dropped changes, included in Debian:
+    - d/p/lp1979692-fix-gcc12-ftbfs-0*.patch: Fix FTBFS with GCC 12.
+    - d/rules: remove duplicated dh_installsystemd section
+  * Dropped changes, no longer needed:
+    - d/control: Transition from libopeniscsiusr0.2.0 to libopeniscsiusr;
+      not needed, the referenced version is no longer in any supported
+      release and the transitional package is in the previous LTS.
+
+ -- Steve Langasek <[e-mail]>  Tue, 16 Aug 2022 08:32:36 -0700
+
 open-iscsi (2.1.7-2) unstable; urgency=medium
 
   * [09dfaec] Enable hardening build flags
@@ -69,6 +144,86 @@ open-iscsi (2.1.7-1) unstable; urgency=medium
 
  -- Chris Hofstaedtler <[e-mail]>  Fri, 29 Jul 2022 19:59:11 +0000
 
+open-iscsi (2.1.5-1ubuntu2) kinetic; urgency=medium
+
+  * d/p/lp1979692-fix-gcc12-ftbfs-0*.patch: Fix FTBFS with GCC 12.
+    (LP: #1979692)
+
+ -- Sergio Durigan Junior <[e-mail]>  Thu, 23 Jun 2022 17:28:56 -0400
+
+open-iscsi (2.1.5-1ubuntu1) jammy; urgency=medium
+
+  * Merge with Debian unstable (LP: #1946835). Remaining changes:
+    - debian/tests: Add Ubuntu autopkgtest suite:
+      + d/t/README-boot-test.md: document test design
+      + d/t/control: register testsuite
+      + d/t/get-image: helper to fetch an ubuntu cloud image
+      + d/t/patch-image: helper to modify an ubuntu cloud image
+      + d/test-open-iscsi.py, d/t/testlib.py: various qa regression tests
+      + d/t/testsuite: helper to invoke qa regression tests
+      + d/t/tgt-boot-test: test using tgt to boot from iscsi
+      + d/t/xkvm: helper to spawn a VM
+    - Stop producing udebs on i386 where we no longer have d-i or a kernel.
+    - d/README.Debian, d/extra/startup-checks.sh, d/open-iscsi-udeb.start,
+      d/open-iscsi.postinst: Apply Ubuntu branding to iqn initiator name
+    - d/control: Transition from libopeniscsiusr0.2.0 to libopeniscsiusr
+    - d/t/test-open-iscsi.py: adopt to resolvectl (systemd v249 compat)
+  * Dropped changes, included in Debian:
+    - d/iscsid.service: Let iscsid systemd job run in privileged containers
+      but not in unprivileged ones
+    - debian/extra/initramfs.local-top: handle iSCSI iBFT DHCP to correctly
+      run ipconfig to gather all DHCP config info, including DNS search
+      domain, which iBFT can't provide.
+    - Remove initramfs interfaces stamp in case no iscsi devs mounted
+      If iscsi root was requested, but no iscsi devices were mounted, remove
+      the initramfs interfaces stamp file. Meaning, that on shutdown there is
+      no 30s delay, whilst trying to re-establish iscsi login to perform a
+      logout.
+    - add IPv6 support
+      + Source /run/net6-*.conf when needed.
+      + debian/extra/initramfs.local-top: handle IPv6 configs being shipped
+        in DEVICE6 or /run/net6-*.conf in the initramfs, so we can fill in
+        /run/initramfs/open-iscsi.interface
+    - d/rules, d/open-iscsi.finalrd, d/control: ship the finalrd iscsi
+      logout hook and recommend finalrd and busybox for the logout hook
+      to work.
+    - Make iscsid socket-activated to only activate it as needed:
+      + debian/open-iscsi.service: do not start or check iscsid.service
+      + debian/rules: install and enable iscsid.socket
+      + debian/open-iscsi.postinst:
+        + run restart logic only if service is running on upgrade
+        + drop no longer reachable upgrade path that affects iscsid
+        + disable iscsid.service on upgrade
+        + handle iscsid.socket to be started if the service is not running yet
+      + d/iscsi-disk.rules: Add a udev rule so that iscsid.service will be
+        run when udev disks are attached.
+      + d/iscsid.service: Remove ExecStop= directive.
+      + debian/tests/install: fix tests to work with socket activation
+      + debian/patches/lp1755858-default-iscsid_conf-to-iscsid_socket.patch
+    - debian/open-iscsi.service: Start open-iscsi systemd job when either
+      /etc/iscsi/nodes or /sys/class/iscsi_session have content.
+    - Prevent network interface that contains iscsi root from bouncing
+      during boot or going down during shutdown if the system is using
+      resolvconf or ifupdown:
+      + d/iscsi-network-interface.rules
+      + d/extra/net-interface-handler
+    - debian/extra/initramfs.hook: add ib_iser to the list of modules
+      included in the initramfs, so that we can in principle support
+      iscsi root on infiniband.
+    - debian/open-iscsi.kmod drop: (LP 1833586)
+      no static module list is needed if we let iscsid load modules itself.
+    - d/extra/initramfs.local-{top,bottom}: move removal of
+      open-iscsi.interface file from local-top to local-bottom,
+      and fix shell quoting issue that would result in /run/initramfs/
+      open-iscsi.interface always being removed (LP 1872813)
+    - d/rules: Don't FTBFS due to warnings new in gcc10 regarding bounds and
+      initialization, because upstream's gcc10 support is incomplete. This
+      change can be dropped when upstream has completed their gcc support.
+  * Added changes
+    - d/rules: remove duplicated dh_installsystemd section
+
+ -- Dave Jones <[e-mail]>  Wed, 19 Jan 2022 11:38:12 +0000
+
 open-iscsi (2.1.5-1) unstable; urgency=medium
 
   * [150470c] New upstream version 2.1.5
@@ -162,6 +317,91 @@ open-iscsi (2.1.4-1) unstable; urgency=low
 
  -- Ritesh Raj Sarraf <[e-mail]>  Thu, 02 Sep 2021 18:07:51 +0530
 
+open-iscsi (2.1.4-0ubuntu3) jammy; urgency=medium
+
+  * No-change rebuild against openssl3
+
+ -- Simon Chopin <[e-mail]>  Wed, 01 Dec 2021 16:08:23 +0000
+
+open-iscsi (2.1.4-0ubuntu2) jammy; urgency=medium
+
+  * [a0e81aa] d/t/test-open-iscsi.py: adopt to resolvectl (systemd v249 compat)
+
+ -- Lukas Märdian <[e-mail]>  Mon, 22 Nov 2021 11:42:18 +0100
+
+open-iscsi (2.1.4-0ubuntu1) impish; urgency=medium
+
+  * Merge with Debian unstable (LP: #1934290). Remaining changes:
+    - debian/tests: Add Ubuntu autopkgtest suite:
+      + d/t/README-boot-test.md: document test design
+      + d/t/control: register testsuite
+      + d/t/get-image: helper to fetch an ubuntu cloud image
+      + d/t/patch-image: helper to modify an ubuntu cloud image
+      + d/test-open-iscsi.py, d/t/testlib.py: various qa regression tests
+      + d/t/testsuite: helper to invoke qa regression tests
+      + d/t/tgt-boot-test: test using tgt to boot from iscsi
+      + d/t/xkvm: helper to spawn a VM
+      Note: this suite should be replaced by LIO that replaced TGT in main.
+    - d/iscsid.service: Let iscsid systemd job run in privileged containers
+      but not in unprivileged ones
+    - debian/extra/initramfs.local-top: handle iSCSI iBFT DHCP to correctly
+      run ipconfig to gather all DHCP config info, including DNS search
+      domain, which iBFT can't provide.
+    - Remove initramfs interfaces stamp in case no iscsi devs mounted
+      If iscsi root was requested, but no iscsi devices were mounted, remove
+      the initramfs interfaces stamp file. Meaning, that on shutdown there is
+      no 30s delay, whilst trying to re-establish iscsi login to perform a
+      logout.
+    - add IPv6 support
+      + Source /run/net6-*.conf when needed.
+      + debian/extra/initramfs.local-top: handle IPv6 configs being shipped
+        in DEVICE6 or /run/net6-*.conf in the initramfs, so we can fill in
+        /run/initramfs/open-iscsi.interface
+    - d/rules, d/open-iscsi.finalrd, d/control: ship the finalrd iscsi
+      logout hook and recommend finalrd and busybox for the logout hook
+      to work.
+    - Make iscsid socket-activated to only activate it as needed:
+      + debian/open-iscsi.service: do not start or check iscsid.service
+      + debian/rules: install and enable iscsid.socket
+      + debian/open-iscsi.postinst:
+        + run restart logic only if service is running on upgrade
+        + drop no longer reachable upgrade path that affects iscsid
+        + disable iscsid.service on upgrade
+        + handle iscsid.socket to be started if the service is not running yet
+      + d/iscsi-disk.rules: Add a udev rule so that iscsid.service will be
+        run when udev disks are attached.
+      + d/iscsid.service: Remove ExecStop= directive.
+      + debian/tests/install: fix tests to work with socket activation
+      + debian/patches/lp1755858-default-iscsid_conf-to-iscsid_socket.patch
+    - debian/open-iscsi.service: Start open-iscsi systemd job when either
+      /etc/iscsi/nodes or /sys/class/iscsi_session have content.
+    - Prevent network interface that contains iscsi root from bouncing
+      during boot or going down during shutdown if the system is using
+      resolvconf or ifupdown:
+      + d/iscsi-network-interface.rules
+      + d/extra/net-interface-handler
+    - debian/extra/initramfs.hook: add ib_iser to the list of modules
+      included in the initramfs, so that we can in principle support
+      iscsi root on infiniband.
+    - debian/open-iscsi.kmod drop: (LP 1833586)
+      no static module list is needed if we let iscsid load modules itself.
+    - Stop producing udebs on i386 where we no longer have d-i or a kernel.
+    - d/extra/initramfs.local-{top,bottom}: move removal of
+      open-iscsi.interface file from local-top to local-bottom,
+      and fix shell quoting issue that would result in /run/initramfs/
+      open-iscsi.interface always being removed (LP 1872813)
+    - d/rules: Don't FTBFS due to warnings new in gcc10 regarding bounds and
+      initialization, because upstream's gcc10 support is incomplete. This
+      change can be dropped when upstream has completed their gcc support.
+    - d/README.Debian, d/extra/startup-checks.sh, d/open-iscsi-udeb.start,
+      d/open-iscsi.postinst: Apply Ubuntu branding to iqn initiator name
+  * Added changes
+    - merge bug fix release 2.1.4 from upstream
+    - Revert "Add patches from upstream" [upstream in 2.1.4]
+    - d/control: Transition from libopeniscsiusr0.2.0 to libopeniscsiusr
+
+ -- Christian Ehrhardt <[e-mail]>  Thu, 01 Jul 2021 14:13:08 +0200
+
 open-iscsi (2.1.3-5) unstable; urgency=medium
 
   [ Cyril Brulebois ]
@@ -197,6 +437,119 @@ open-iscsi (2.1.3-2) unstable; urgency=medium
 
  -- Chris Hofstaedtler <[e-mail]>  Sun, 07 Feb 2021 19:23:13 +0000
 
+open-iscsi (2.1.3-1ubuntu6) hirsute; urgency=medium
+
+  * d/open-iscsi.finalrd: fix UID resolution issues in logout (LP: #1922976)
+    Thanks to Michael Brown
+
+ -- Christian Ehrhardt <[e-mail]>  Thu, 18 Mar 2021 09:44:07 +0100
+
+open-iscsi (2.1.3-1ubuntu5) hirsute; urgency=medium
+
+  * make d/t/testuite python3 compatible (LP: #1919461)
+    - backport changes from qa-regression-testing since we diverged
+      - various tests: make py3 compliant, fix formatting a bit
+      - tests: convert deprecated assertEquals() to assertEqual()
+      - Remove all references to python-utils
+    - d/t/testlib.py: update to last state from
+      git+ssh://git.launchpad.net/qa-regression-testing
+    - d/t/{control,testsuite}: bump to use python3
+    - d/t/test-open-iscsi.py: switch shebang to python3
+    - d/t/test-open-iscsi.py: adapt to updated testlib
+  * Add patches from upstream [this is from Debian upload 2.1.3-2]:
+    - Fix memory leak in iscsiadm, Fix iscsiadm segfault when exiting, and
+    - Fix iscsistart login issue when target is delayed. The last one should
+    - fix iscsi-root with delayed network (Closes: #980085)
+
+ -- Christian Ehrhardt <[e-mail]>  Thu, 18 Mar 2021 09:44:07 +0100
+
+open-iscsi (2.1.3-1ubuntu4) hirsute; urgency=medium
+
+  * Rebuild again so s390x pick up the right debhelper
+
+ -- Sebastien Bacher <[e-mail]>  Wed, 24 Feb 2021 16:29:41 +0100
+
+open-iscsi (2.1.3-1ubuntu3) hirsute; urgency=medium
+
+  * No-change rebuild to drop the udeb package.
+
+ -- Matthias Klose <[e-mail]>  Mon, 22 Feb 2021 10:35:42 +0100
+
+open-iscsi (2.1.3-1ubuntu2) hirsute; urgency=medium
+
+  * Apply Ubuntu branding to iqn initiator name.
+
+ -- Dimitri John Ledkov <[e-mail]>  Wed, 17 Feb 2021 00:05:22 +0000
+
+open-iscsi (2.1.3-1ubuntu1) hirsute; urgency=medium
+
+  * Merge with Debian unstable. Remaining changes:
+    - debian/tests: Add Ubuntu autopkgtest suite:
+      - README-boot-test.md
+      - tgt-boot-test: tests
+      - test-open-iscsi.py
+      - testlib.py
+      - get-image
+      - patch-image
+      - testsuite
+      - xkvm
+    - d/iscsid.service: Let iscsid systemd job run in privileged containers
+      but not in unprivileged ones
+    - d/extra/initramfs.local-top: handle iSCSI iBFT DHCP to correctly
+      run ipconfig to gather all DHCP config info, including DNS search
+      domain, which iBFT can't provide.
+    - Remove initramfs interfaces stamp in case no iscsi devs mounted.
+      If iscsi root was requested, but no iscsi devices were mounted, remove
+      the initramfs interfaces stamp file. Meaning, that on shutdown there is
+      no 30s delay, whilst trying to re-establish iscsi login to perform a
+      logout.
+    - add IPv6 support
+      - Source /run/net6-*.conf when needed.
+      - d/extra/initramfs.local-top: handle IPv6 configs being shipped in
+        DEVICE6 or /run/net6-*.conf in the initramfs, so we can fill in
+        .interface
+    - d/rules, d/open-iscsi.finalrd, d/control: ship the finalrd iscsi logout
+      hook and recommend finalrd and busybox for the logout hook to work.
+    - Make iscsid socket-activated to only activate it as needed:
+      - debian/open-iscsi.service: do not start or check iscsid.service
+      - debian/rules: install and enable iscsid.socket
+      - debian/open-iscsi.postinst:
+        - run restart logic only if service is running on upgrade
+        - drop no longer reachable upgrade path that affects iscsid
+        - disable iscsid.service on upgrade
+        - handle iscsid.socket to be started if the service is not running yet
+      - d/iscsi-disk.rules: Add a udev rule so that iscsid.service will be
+        run when udev disks are attached.
+      - d/iscsid.service: Remove ExecStop= directive.
+      - debian/tests/install: fix tests to work with socket activation
+      - debian/patches/lp1755858-default-iscsid_conf-to-iscsid_socket.patch
+        [updated to match 2.1.2]
+    - debian/open-iscsi.service: Start open-iscsi systemd job when either
+      /etc/iscsi/nodes or /sys/class/iscsi_session have content.
+    - Prevent network interface that contains iscsi root from bouncing
+      during boot or going down during shutdown if the system is using
+      resolvconf or ifupdown:
+      - d/iscsi-network-interface.rules
+      - d/extra/net-interface-handler
+    - d/extra/initramfs.hook: add ib_iser to the list of modules included in
+      the initramfs, so that we can in principle support iscsi root on
+      infiniband.
+    - d/open-iscsi.kmod drop: (LP #1833586)
+      no static module list is needed if we let iscsid load modules itself.
+    - Stop producing udebs on i386 where we no longer have d-i or a kernel.
+    - d/extra/initramfs.local-{top,bottom}: move removal of
+      open-iscsi.interface file from local-top to local-bottom, and fix shell
+      quoting issue that would result in /run/initramfs/ open-iscsi.interface
+      always being removed (LP #1872813)
+    - debian/control, debian/rules: Fix libopeniscsiusr binary package
+      name (LP 1892228).
+    - d/rules: Don't FTBFS due to warnings new in gcc10 regarding bounds
+      and initialization, because upstream's gcc10 support is incomplete.
+      This change can be dropped when upstream has completed their gcc
+      support.
+
+ -- Christian Ehrhardt <[e-mail]>  Tue, 19 Jan 2021 13:29:46 +0100
+
 open-iscsi (2.1.3-1) unstable; urgency=medium
 
   * [afee47d] New upstream version 2.1.3
@@ -215,6 +568,75 @@ open-iscsi (2.1.2-2) unstable; urgency=medium
 
  -- Chris Hofstaedtler <[e-mail]>  Sun, 06 Dec 2020 23:25:11 +0000
 
+open-iscsi (2.1.2-1ubuntu1) hirsute; urgency=medium
+
+  * Merge with Debian unstable. Remaining changes:
+    - debian/tests: Add Ubuntu autopkgtest suite:
+      - README-boot-test.md
+      - tgt-boot-test: tests
+      - test-open-iscsi.py
+      - testlib.py
+      - get-image
+      - patch-image
+      - testsuite
+      - xkvm
+    - d/iscsid.service: Let iscsid systemd job run in privileged containers
+      but not in unprivileged ones
+    - d/extra/initramfs.local-top: handle iSCSI iBFT DHCP to correctly
+      run ipconfig to gather all DHCP config info, including DNS search
+      domain, which iBFT can't provide.
+    - Remove initramfs interfaces stamp in case no iscsi devs mounted.
+      If iscsi root was requested, but no iscsi devices were mounted, remove
+      the initramfs interfaces stamp file. Meaning, that on shutdown there is
+      no 30s delay, whilst trying to re-establish iscsi login to perform a
+      logout.
+    - add IPv6 support
+      - Source /run/net6-*.conf when needed.
+      - d/extra/initramfs.local-top: handle IPv6 configs being shipped in
+        DEVICE6 or /run/net6-*.conf in the initramfs, so we can fill in
+        .interface
+    - d/rules, d/open-iscsi.finalrd, d/control: ship the finalrd iscsi logout
+      hook and recommend finalrd and busybox for the logout hook to work.
+    - Make iscsid socket-activated to only activate it as needed:
+      - debian/open-iscsi.service: do not start or check iscsid.service
+      - debian/rules: install and enable iscsid.socket
+      - debian/open-iscsi.postinst:
+        - run restart logic only if service is running on upgrade
+        - drop no longer reachable upgrade path that affects iscsid
+        - disable iscsid.service on upgrade
+        - handle iscsid.socket to be started if the service is not running yet
+      - d/iscsi-disk.rules: Add a udev rule so that iscsid.service will be
+        run when udev disks are attached.
+      - d/iscsid.service: Remove ExecStop= directive.
+      - debian/tests/install: fix tests to work with socket activation
+      - debian/patches/lp1755858-default-iscsid_conf-to-iscsid_socket.patch
+        [updated to match 2.1.2]
+    - debian/open-iscsi.service: Start open-iscsi systemd job when either
+      /etc/iscsi/nodes or /sys/class/iscsi_session have content.
+    - Prevent network interface that contains iscsi root from bouncing
+      during boot or going down during shutdown if the system is using
+      resolvconf or ifupdown:
+      - d/iscsi-network-interface.rules
+      - d/extra/net-interface-handler
+    - d/extra/initramfs.hook: add ib_iser to the list of modules included in
+      the initramfs, so that we can in principle support iscsi root on
+      infiniband.
+    - d/open-iscsi.kmod drop: (LP #1833586)
+      no static module list is needed if we let iscsid load modules itself.
+    - Stop producing udebs on i386 where we no longer have d-i or a kernel.
+    - d/extra/initramfs.local-{top,bottom}: move removal of
+      open-iscsi.interface file from local-top to local-bottom, and fix shell
+      quoting issue that would result in /run/initramfs/ open-iscsi.interface
+      always being removed (LP #1872813)
+    - debian/control, debian/rules: Fix libopeniscsiusr binary package
+      name (LP 1892228).
+    - d/rules: Don't FTBFS due to warnings new in gcc10 regarding bounds
+      and initialization, because upstream's gcc10 support is incomplete.
+      This change can be dropped when upstream has completed their gcc
+      support.
+
+ -- Christian Ehrhardt <[e-mail]>  Thu, 03 Dec 2020 14:44:39 +0100
+
 open-iscsi (2.1.2-1) unstable; urgency=medium
 
   * [7f10701] New upstream version 2.1.2
@@ -236,6 +658,86 @@ open-iscsi (2.1.1-2) unstable; urgency=medium
 
  -- Ritesh Raj Sarraf <[e-mail]>  Fri, 14 Aug 2020 12:32:16 +0530
 
+open-iscsi (2.1.1-1ubuntu2) groovy; urgency=medium
+
+  * debian/control, debian/rules: Fix libopeniscsiusr binary package
+    name (LP: #1892228).
+  * debian/rules: Fix deprecated warning for dh_installinit that
+    --no-restart-on-upgrade has been replaced by --no-stop-on-upgrade,
+    which is equivalent in functionality (ref deb #837528).
+
+ -- Rafael David Tinoco <[e-mail]>  Wed, 19 Aug 2020 19:08:47 +0000
+
+open-iscsi (2.1.1-1ubuntu1) groovy; urgency=medium
+
+  * New upstream version 2.1.1
+  * d/rules: Don't FTBFS due to warnings new in gcc10 regarding bounds
+    and initialization, because upstream's gcc10 support is incomplete.
+    This change can be dropped when upstream has completed their gcc
+    support.
+  * Merge with Debian unstable (LP: #1891374). Remaining changes:
+    - debian/tests: Add Ubuntu autopkgtest suite:
+      - README-boot-test.md
+      - tgt-boot-test: tests
+      - test-open-iscsi.py
+      - testlib.py
+      - get-image
+      - patch-image
+      - testsuite
+      - xkvm
+    - d/iscsid.service: Let iscsid systemd job run in privileged containers
+      but not in unprivileged ones
+    - d/extra/initramfs.local-top: handle iSCSI iBFT DHCP to correctly
+      run ipconfig to gather all DHCP config info, including DNS search
+      domain, which iBFT can't provide.
+    - Remove initramfs interfaces stamp in case no iscsi devs mounted.
+      If iscsi root was requested, but no iscsi devices were mounted, remove
+      the initramfs interfaces stamp file. Meaning, that on shutdown there is
+      no 30s delay, whilst trying to re-establish iscsi login to perform a
+      logout.
+    - add IPv6 support
+      - Source /run/net6-*.conf when needed.
+      - d/extra/initramfs.local-top: handle IPv6 configs being shipped in
+        DEVICE6 or /run/net6-*.conf in the initramfs, so we can fill in
+        .interface
+    - d/rules, d/open-iscsi.finalrd, d/control: ship the finalrd iscsi logout
+      hook and recommend finalrd and busybox for the logout hook to work.
+    - Make iscsid socket-activated to only activate it as needed:
+      - debian/open-iscsi.service: do not start or check iscsid.service
+      - debian/rules: install and enable iscsid.socket
+      - debian/open-iscsi.postinst:
+        - run restart logic only if service is running on upgrade
+        - drop no longer reachable upgrade path that affects iscsid
+        - disable iscsid.service on upgrade
+        - handle iscsid.socket to be started if the service is not running yet
+      - d/iscsi-disk.rules: Add a udev rule so that iscsid.service will be
+        run when udev disks are attached.
+      - d/iscsid.service: Remove ExecStop= directive.
+      - debian/tests/install: fix tests to work with socket activation
+      - debian/patches/lp1755858-default-iscsid_conf-to-iscsid_socket.patch
+    - debian/open-iscsi.service: Start open-iscsi systemd job when either
+      /etc/iscsi/nodes or /sys/class/iscsi_session have content.
+    - Prevent network interface that contains iscsi root from bouncing
+      during boot or going down during shutdown if the system is using
+      resolvconf or ifupdown:
+      - d/iscsi-network-interface.rules
+      - d/extra/net-interface-handler
+    - d/extra/initramfs.hook: add ib_iser to the list of modules included in
+      the initramfs, so that we can in principle support iscsi root on
+      infiniband.
+    - d/open-iscsi.kmod drop: (LP #1833586)
+      no static module list is needed if we let iscsid load modules itself.
+    - Stop producing udebs on i386 where we no longer have d-i or a kernel.
+    - Use python2 instead of python in the autopkg tests: Next step for
+      open-iscsi is to revist all iscsi-root feature and autopkgtests, so
+      keep python2 to avoid re-work later.
+    - d/extra/initramfs.local-{top,bottom}: move removal of
+      open-iscsi.interface file from local-top to local-bottom, and fix shell
+      quoting issue that would result in /run/initramfs/ open-iscsi.interface
+      always being removed (LP #1872813)
+
+ -- Rafael David Tinoco <[e-mail]>  Thu, 13 Aug 2020 04:29:43 +0000
+
 open-iscsi (2.1.1-1) experimental; urgency=medium
 
   [ Rafael David Tinoco ]
@@ -280,6 +782,98 @@ open-iscsi (2.1.1-1) experimental; urgency=medium
 
  -- Ritesh Raj Sarraf <[e-mail]>  Tue, 23 Jun 2020 20:38:47 +0530
 
+open-iscsi (2.0.874-7.1ubuntu6.1) focal; urgency=medium
+
+   [ Ben Swartzlander ]
+   * allow open-iscsi to disable auto-scan feature (LP: #1877617)
+     - d/p/lp1877617-Allow-disabling-auto-LUN-scans.patch
+     - d/p/lp1877617-Fix-manual-LUN-scans-feature.patch
+
+ -- Rafael David Tinoco <[e-mail]>  Mon, 11 May 2020 02:03:33 +0000
+
+open-iscsi (2.0.874-7.1ubuntu6) focal; urgency=medium
+
+  * d/extra/initramfs.local-{top,bottom}: move removal of open-iscsi.interface
+    file from local-top to local-bottom, and fix shell quoting issue that
+    would result in /run/initramfs/open-iscsi.interface always being removed
+    (LP: #1872813)
+
+ -- Daniel Watkins <[e-mail]>  Tue, 14 Apr 2020 16:54:37 -0400
+
+open-iscsi (2.0.874-7.1ubuntu5) focal; urgency=medium
+
+  * Use python2 instead of python in the autopkg tests.
+
+ -- Matthias Klose <[e-mail]>  Thu, 30 Jan 2020 10:14:16 +0100
+
+open-iscsi (2.0.874-7.1ubuntu3) eoan; urgency=medium
+
+  * Stop producing udebs on i386 where we no longer have d-i or a kernel.
+
+ -- Adam Conrad <[e-mail]>  Wed, 09 Oct 2019 14:10:37 -0600
+
+open-iscsi (2.0.874-7.1ubuntu2) eoan; urgency=medium
+
+  * debian/open-iscsi.kmod: drop; no static module list is needed if we let
+    iscsid load modules itself.  LP: #1833586.
+  * debian/extra/initramfs.hook: add ib_iser to the list of modules
+    included in the initramfs, so that we can in principle support iscsi
+    root on infiniband.
+
+ -- Steve Langasek <[e-mail]>  Thu, 20 Jun 2019 13:48:46 -0700
+
+open-iscsi (2.0.874-7.1ubuntu1) eoan; urgency=low
+
+  * Merge from Debian unstable.  Remaining changes:
+    - debian/tests: Add Ubuntu autopkgtest.
+    - debian/iscsi-network-interface.rules, debian/net-interface-handler,
+      debian/open-iscsi.install:
+      Prevent network interface that contains iscsi root from bouncing
+      during boot or going down during shutdown if the system is using
+      resolvconf or ifupdown.
+    - Let iscsid systemd job run in privileged containers but not in
+      unprivileged ones
+    - Start open-iscsi systemd job when either /etc/iscsi/nodes or
+      /sys/class/iscsi_session have content
+    - add IPv6 support
+      + Source /run/net6-*.conf when needed.
+      + debian/extra/initramfs.local-top: handle IPv6 configs being
+        shipped in DEVICE6 or /run/net6-*.conf in the initramfs, so we
+        can fill in /run/initramfs/open-iscsi.interface
+    - make iscsid socket-activated to only activate it as needed
+      + debian/iscsid.socket: systemd socket file for iscsid
+      + debian/open-iscsi.service: do not start or check iscsid.service
+      + debian/rules: install and enable iscsid.socket
+      + debian/patches/iscid-conf-use-systemd.socket-patch: default to the
+        socket
+      + debian/open-iscsi.postinst:
+        * run restart logic only if service is running on upgrade
+        * drop no longer reachable upgrade path that affects iscsid
+        * disable iscsid.service on upgrade
+        * handle iscsid.socket to be started if the service is not running
+          yet
+      + d/iscsi-disk.rules: Add a udev rule so that iscsid.service will be
+        run when udev disks are attached.
+      + d/iscsid.service: Remove ExecStop= directive.
+      + debian/tests/install: fix tests to work with socket activation
+    - Ship finalrd logout hook.
+    - debian/extra/initramfs.local-top: handle iSCSI iBFT DHCP to correctly
+      run ipconfig to gather all DHCP config info, including DNS search
+      domain, which iBFT can't provide.
+    - If iscsi root was requested, but no iscsi devices were mounted, remove
+      the initramfs interfaces stamp file. Meaning, that on shutdown there
+      is no 30s delay, whilst trying to re-establish iscsi login to perform
+      a logout.
+  * Dropped changes, included in Debian:
+    - Fix fail to build from source due to undefined reference to
+      minor
+  * Drop breaks on never-released version of finalrd.
+  * debian/net-interface-handler: drop upstart support, unused since bionic.
+  * Drop cleanup of upstart jobs, no longer needed post bionic.
+  * debian/tests/daemon: drop, unused.
+
+ -- Steve Langasek <[e-mail]>  Mon, 29 Apr 2019 16:13:37 -0700
+
 open-iscsi (2.0.874-7) unstable; urgency=medium
 
   * [eeda27c] Enable back pristine-tar as we have now committed it
@@ -295,6 +889,158 @@ open-iscsi (2.0.874-6) unstable; urgency=medium
 
  -- Ritesh Raj Sarraf <[e-mail]>  Fri, 05 Oct 2018 11:31:19 +0530
 
+open-iscsi (2.0.874-5ubuntu15) disco; urgency=medium
+
+  * d/iscsid.service: Remove ExecStop= directive. Letting systemd
+    handle termination prevents restart failures. (LP: #1821255)
+
+ -- Heitor R. Alves de Siqueira <[e-mail]>  Thu, 28 Mar 2019 10:21:24 -0300
+
+open-iscsi (2.0.874-5ubuntu14) disco; urgency=medium
+
+  * debian/iscsi-disk.rules: Fix bug with LVM on top of iscsi devices.
+    (LP: #1807978)
+
+ -- Scott Moser <[e-mail]>  Tue, 11 Dec 2018 19:01:14 -0500
+
+open-iscsi (2.0.874-5ubuntu13) disco; urgency=medium
+
+  [ Robert C Jennings & Dimitri John Ledkov ]
+  * If iscsi root was requested, but no iscsi devices were mounted, remove
+    the initramfs interfaces stamp file. Meaning, that on shutdown there
+    is no 30s delay, whilst trying to re-establish iscsi login to perform
+    a logout. LP: #1800681
+
+ -- Dimitri John Ledkov <[e-mail]>  Sun, 09 Dec 2018 22:29:20 +0000
+
+open-iscsi (2.0.874-5ubuntu12) disco; urgency=medium
+
+  [Scott Moser]
+  * debian/extra/initramfs.local-top: handle iSCSI iBFT DHCP to correctly
+    run ipconfig to gather all DHCP config info, including DNS search
+    domain, which iBFT can't provide.  (LP: #1806777)
+
+ -- Dan Streetman <[e-mail]>  Wed, 05 Dec 2018 11:28:12 -0500
+
+open-iscsi (2.0.874-5ubuntu11) disco; urgency=medium
+
+  * debian/tests/test-open-iscsi.py: Fix called process error.
+    If no image was available for a release, a NameError exception would be
+    raised.
+
+ -- Scott Moser <[e-mail]>  Wed, 14 Nov 2018 16:50:29 -0500
+
+open-iscsi (2.0.874-5ubuntu10) disco; urgency=medium
+
+  * d/iscsi-disk.rules, d/tests: Add a udev rule so that iscsid.service
+    will be run when udev disks are attached.  (LP: #1802354)
+  * debian/tests: improve tgt boot test
+     - disable snapd and snap.seeded services to avoid unnecessary
+       resource consumption during tests.
+     - save artifacts from the test run.
+
+ -- Scott Moser <[e-mail]>  Wed, 14 Nov 2018 16:05:46 -0500
+
+open-iscsi (2.0.874-5ubuntu9) cosmic; urgency=medium
+
+  * d/net-interface-handler: replace 'domainsearch' with the correct
+    configuration option 'search' in net-interface-handler (LP: #1791108)
+
+ -- Victor Tapia <[e-mail]>  Mon, 17 Sep 2018 15:58:34 +0200
+
+open-iscsi (2.0.874-5ubuntu8) cosmic; urgency=medium
+
+  * d/tests: insert some debug units in an attempt to diagnose any
+    occurences of bug 1788188.
+  * Fix fail to build from source due to undefined reference to
+    minor (LP: #1791154)
+
+ -- Scott Moser <[e-mail]>  Tue, 21 Aug 2018 13:33:06 -0400
+
+open-iscsi (2.0.874-5ubuntu7) cosmic; urgency=medium
+
+  * d/tests: make interactive use of tgt-boot-test more usable by
+    only using 'timeout' from the test harness.
+  * debian/tests/README-boot-test.md: minor doc fixes and whitespace.
+  * d/net-interface-handler: Apply changes only for the iscsi-root interface.
+    (LP: #1785108)
+
+ -- Scott Moser <[e-mail]>  Tue, 07 Aug 2018 16:37:13 -0400
+
+open-iscsi (2.0.874-5ubuntu6) cosmic; urgency=medium
+
+  * Ship finalrd logout hook.
+
+ -- Dimitri John Ledkov <[e-mail]>  Fri, 03 Aug 2018 15:03:51 +0100
+
+open-iscsi (2.0.874-5ubuntu5) cosmic; urgency=medium
+
+  * Harden dep8 tests against effects due to slow execution on Launchpad
+    infrastructure (LP: #1732028).
+    - debian/tests/patch-image: remove problematic fstab entries
+    - debian/tests/tgt-boot-test: ran xkvm in verbose mode
+
+ -- Christian Ehrhardt <[e-mail]>  Thu, 19 Jul 2018 18:22:39 +0200
+
+open-iscsi (2.0.874-5ubuntu4) cosmic; urgency=medium
+
+  * debian/tests/install: ignore the potential stderr of the probing command
+    that is meant to activate iscsid indirectly via the socket.
+
+ -- Christian Ehrhardt <[e-mail]>  Wed, 30 May 2018 15:42:12 +0200
+
+open-iscsi (2.0.874-5ubuntu3) cosmic; urgency=medium
+
+  * make iscsid socket activated to only activate it as-needed (LP: #1755858)
+    - debian/iscsid.socket: systemd socket file for iscsid
+    - debian/open-iscsi.service: do not start or check iscsid.service
+    - debian/rules: install and enable iscsid.socket
+    - debian/patches/iscid-conf-use-systemd.socket-patch: default to the socket
+    - debian/open-iscsi.postinst:
+      + run restart logic only if service is running on upgrade
+      + drop no more reachable upgrade path that affects iscsid
+      + disable iscsid.service on upgrade
+      + handle iscsid.socket to be started if the service is not running yet
+    - debian/tests/install: fix tests to work with socket activation
+
+ -- Christian Ehrhardt <[e-mail]>  Wed, 23 May 2018 15:50:01 +0200
+
+open-iscsi (2.0.874-5ubuntu2) bionic; urgency=medium
+
+  * debian/tests:
+     - tgt-boot-test: Use 'timeout' to force a 60m timeout of the boot test.
+     - README-boot-test.md: document environment variables BOOT_TIMEOUT
+       and _USE_KVM.
+
+ -- Scott Moser <[e-mail]>  Wed, 21 Feb 2018 13:19:17 -0500
+
+open-iscsi (2.0.874-5ubuntu1) bionic; urgency=low
+
+  * Merge with Debian unstable. Remaining changes:
+    - debian/tests: Add Ubuntu autopkgtests.
+    - debian/iscsi-network-interface.rules, debian/net-interface-handler,
+      debian/open-iscsi.install:
+      Prevent network interface that contains iscsi root from bouncing
+      during boot or going down during shutdown.
+      Integrates with resolvconf and initramfs code that writes
+      /run/initramfs/open-iscsi.interface
+    - debian/open-iscsi.maintscript: clean up the obsolete
+      iscsi-network-interface upstart job, file on upgrade.
+    - Let iscsid systemd job run in privileged containers but not in
+      unprivileged ones
+    - Start open-iscsi systemd job when either /etc/iscsi/nodes or
+      /sys/class/iscsi_session have content
+      Based on patch by Nish Aravamudan, thanks! (LP #1576341)
+    - add IPv6 support
+      + add support for IPV6{DOMAINSEARCH,DNS0,DNS1} to net-interface-handler
+        LP #1621507
+      + Source /run/net6-*.conf when needed.
+      + debian/extra/initramfs.local-top: handle IPv6 configs being
+        shipped in DEVICE6 or /run/net6-*.conf in the initramfs, so we
+        can fill in /run/initramfs/open-iscsi.interface (LP #1621507)
+
+ -- Dimitri John Ledkov <[e-mail]>  Fri, 12 Jan 2018 14:00:59 +0000
+
 open-iscsi (2.0.874-5) unstable; urgency=high
 
   * [aeb86f7] Fix multiple security issues in iscsiuio. (CVE-2017-17840)
@@ -302,6 +1048,74 @@ open-iscsi (2.0.874-5) unstable; urgency=high
 
  -- Christian Seiler <[e-mail]>  Sat, 23 Dec 2017 11:30:44 +0100
 
+open-iscsi (2.0.874-4ubuntu5) bionic; urgency=medium
+
+  * debian/tests/patch-image: mount auxilary filesystems before upgrading
+    packages. Fixes ADT tests, when triggered by packages, that need
+    /proc, /dev, etc mounted to complete the upgrade.
+
+ -- Dimitri John Ledkov <[e-mail]>  Wed, 03 Jan 2018 12:21:05 +0000
+
+open-iscsi (2.0.874-4ubuntu4) bionic; urgency=medium
+
+  * debian/tests/test-open-iscsi.py: skip test if cloud image is unavailable.
+    This solves flaky tests in restricted network environments as well as in
+    the short period after opening a new release (LP: #1731907).
+
+ -- Christian Ehrhardt <[e-mail]>  Thu, 16 Nov 2017 12:06:34 +0100
+
+open-iscsi (2.0.874-4ubuntu3) artful; urgency=medium
+
+  * debian/tests/xkvm: do not use kvm (-enable-kvm) by default if
+    operating inside a vm.  nested kvm is finicky.
+
+ -- Scott Moser <[e-mail]>  Wed, 11 Oct 2017 18:14:08 -0400
+
+open-iscsi (2.0.874-4ubuntu2) artful; urgency=medium
+
+  * debian/tests/test-open-iscsi.py: query systemd-resolved if present.
+    Ubuntu images now have systemd-resolved managing /etc/resolv.conf
+    so support test if that is the case (LP: #1715468).
+
+ -- Scott Moser <[e-mail]>  Wed, 06 Sep 2017 16:20:16 -0400
+
+open-iscsi (2.0.874-4ubuntu1) artful; urgency=medium
+
+  * Merge with Debian unstable. Remaining changes:
+    - debian/tests: Add Ubuntu autopkgtests.
+    - debian/iscsi-network-interface.rules, debian/net-interface-handler,
+      debian/open-iscsi.install:
+      Prevent network interface that contains iscsi root from bouncing
+      during boot or going down during shutdown.
+      Integrates with resolvconf and initramfs code that writes
+      /run/initramfs/open-iscsi.interface
+    - debian/open-iscsi.maintscript: clean up the obsolete
+      iscsi-network-interface upstart job, file on upgrade.
+    - Let iscsid systemd job run in privileged containers but not in
+      unprivileged ones
+    - Start open-iscsi systemd job when either /etc/iscsi/nodes or
+      /sys/class/iscsi_session have content
+      Based on patch by Nish Aravamudan, thanks! (LP #1576341)
+    - add IPv6 support
+      + add support for IPV6{DOMAINSEARCH,DNS0,DNS1} to net-interface-handler
+        LP #1621507
+      + Source /run/net6-*.conf when needed.
+      + debian/extra/initramfs.local-top: handle IPv6 configs being
+        shipped in DEVICE6 or /run/net6-*.conf in the initramfs, so we
+        can fill in /run/initramfs/open-iscsi.interface (LP #1621507)
+  * Drop:
+    - d/extra/initramfs.local-top: When booting from iBFT,
+      set the PROTO= entry in /run/net-*.conf accordingly,
+      so that other tools, such as cloud-init, can use that
+      information. (cloud-init fails if the current PROTO=none
+      is used.) (LP: #1684039) (Closes: #866213)
+      [ Fixed in Debian 2.0.874-4 ]
+  * d/t/test-open-iscsi.py: drop test_daemon test
+    - With the updates to the systemd units, the services do not run
+      unless iSCSI is configured.
+
+ -- Nishanth Aravamudan <[e-mail]>  Tue, 08 Aug 2017 16:16:27 -0700
+
 open-iscsi (2.0.874-4) unstable; urgency=medium
 
   * [0347300] initramfs: populate PROTO= entry in /run/net-*.conf from iBFT
@@ -316,6 +1130,64 @@ open-iscsi (2.0.874-3) unstable; urgency=medium
 
  -- Christian Seiler <[e-mail]>  Sun, 18 Jun 2017 22:01:22 +0200
 
+open-iscsi (2.0.874-2ubuntu3) artful; urgency=medium
+
+  * d/t/test-open-iscsi.py: drop test_daemon test
+    - With the updates to the systemd units, the services do not run
+      unless iSCSI is configured.
+
+ -- Nishanth Aravamudan <[e-mail]>  Tue, 08 Aug 2017 16:05:29 -0700
+
+open-iscsi (2.0.874-2ubuntu2) artful; urgency=medium
+
+  * d/extra/initramfs.local-top: When booting from iBFT,
+    set the PROTO= entry in /run/net-*.conf accordingly,
+    so that other tools, such as cloud-init, can use that
+    information. (cloud-init fails if the current PROTO=none
+    is used.) (LP: #1684039) (Closes: #866213)
+
+ -- Eric Desrochers <[e-mail]>  Wed, 05 Jul 2017 09:02:12 -0400
+
+open-iscsi (2.0.874-2ubuntu1) artful; urgency=medium
+
+  [ Nishanth Aravamudan ]
+  * Merge with Debian unstable. Remaining changes:
+    - debian/tests: Add Ubuntu autopkgtests.
+    - debian/iscsi-network-interface.rules, debian/net-interface-handler,
+      debian/open-iscsi.install:
+      Prevent network interface that contains iscsi root from bouncing
+      during boot or going down during shutdown.
+      Integrates with resolvconf and initramfs code that writes
+      /run/initramfs/open-iscsi.interface
+    - debian/open-iscsi.maintscript: clean up the obsolete
+      iscsi-network-interface upstart job, file on upgrade.
+    - add IPv6 support
+      + add support for IPV6{DOMAINSEARCH,DNS0,DNS1} to net-interface-handler
+        LP #1621507
+      + Source /run/net6-*.conf when needed.
+      + debian/extra/initramfs.local-top: handle IPv6 configs being
+        shipped in DEVICE6 or /run/net6-*.conf in the initramfs, so we
+        can fill in /run/initramfs/open-iscsi.interface (LP #1621507)
+  * Drop:
+    - Make systemd job not run in containers (LP #1576341)
+      [ This prevents running iscsi in privileged containers.
+        Fixed differently in this upload. ]
+    - Cherry-pick from Debian git repository (Christian Seiler):
+      + open-iscsi-udeb: drop Depends: libnss-files-udeb
+        (Closes #819685)
+      [ Fixed in Debian ]
+     - d/extra/initramfs.local-top whitespace change
+     [ previously undocumented ]
+
+  [ Balint Reczey ]
+  * Let iscsid systemd job run in privileged containers but not in
+    unprivileged ones
+  * Start open-iscsi systemd job when either /etc/iscsi/nodes or
+    /sys/class/iscsi_session have content
+    Based on patch by Nish Aravamudan, thanks! (LP #1576341)
+
+ -- Nishanth Aravamudan <[e-mail]>  Tue, 09 May 2017 09:24:23 -0700
+
 open-iscsi (2.0.874-2) unstable; urgency=medium
 
   [ Christian Seiler ]
@@ -455,6 +1327,155 @@ open-iscsi (2.0.873+git0.3b4b4500-15) unstable; urgency=medium
 
  -- Christian Seiler <[e-mail]>  Fri, 20 May 2016 09:52:46 +0200
 
+open-iscsi (2.0.873+git0.3b4b4500-14ubuntu17) zesty; urgency=medium
+
+  * debian/tests:
+    - README-boot-test.md: mention limited space caveat.
+    - patch-image: fix handling of ADT_TEST_TRIGGERS if source package
+      built more than one binary package.
+    - test-open-iscsi.py: change to rely on patch-image
+      adding package 'open-iscsi' rather than passing it in itself.
+
+ -- Scott Moser <[e-mail]>  Thu, 16 Feb 2017 15:47:58 -0500
+
+open-iscsi (2.0.873+git0.3b4b4500-14ubuntu16) zesty; urgency=medium
+
+  * debian/tests: many improvements to the open-iscsi and tgt boot test.
+    - only run test on amd64. just avoid timeout errors or other unrelated
+      issues causing failure.
+    - debian/tests/README-boot-test.md: add doc describing the tgt-boot-test
+    - rename get-maas-eph to get-image
+    - use a cloud image instead of a maas image for booting.  The value in
+      this is that we can then install open-iscsi inside the image and get an
+      updated initramfs.
+    - use subprocess.check_call rather than subprocess.call so that we
+      actually catch errors.
+    - update xkvm to what is in curtin/tools/xkvm
+    - improve updating of images to consider ADT_TEST_TRIGGERS if set.
+
+ -- Scott Moser <[e-mail]>  Tue, 14 Feb 2017 17:07:00 -0500
+
+open-iscsi (2.0.873+git0.3b4b4500-14ubuntu15) zesty; urgency=medium
+
+  * debian/tests/tgt-boot-test: set HOST_IP harder for the testsuite test.
+
+ -- Mathieu Trudel-Lapierre <[e-mail]>  Sun, 29 Jan 2017 13:05:47 -0500
+
+open-iscsi (2.0.873+git0.3b4b4500-14ubuntu14) zesty; urgency=medium
+
+  * Make systemd job not run in containers (LP: #1576341)
+
+ -- Serge Hallyn <[e-mail]>  Sun, 15 Jan 2017 23:08:29 -0600
+
+open-iscsi (2.0.873+git0.3b4b4500-14ubuntu13) zesty; urgency=medium
+
+  * Fix syntax error in previous changes. LP: #1621507
+
+ -- LaMont Jones <[e-mail]>  Fri, 09 Dec 2016 12:35:45 +0100
+
+open-iscsi (2.0.873+git0.3b4b4500-14ubuntu12) zesty; urgency=medium
+
+  * debian/tests/tgt-boot-test: set HOST_IP to 10.0.2.2; it's suboptimal but
+    given the test setup this will allow the right IPs to be used to bring up
+    the iscsi target in the xkvm.
+
+ -- Mathieu Trudel-Lapierre <[e-mail]>  Thu, 08 Dec 2016 11:00:12 +0100
+
+open-iscsi (2.0.873+git0.3b4b4500-14ubuntu11) zesty; urgency=medium
+
+  * debian/tests/tgt-boot-test: drop -serial stdio altogether since running
+    the VM in -nographics mode will already output to stdout.
+
+ -- Mathieu Trudel-Lapierre <[e-mail]>  Tue, 22 Nov 2016 11:27:55 -0500
+
+open-iscsi (2.0.873+git0.3b4b4500-14ubuntu10) zesty; urgency=medium
+
+  * debian/tests/tgt-boot-test: always log qemu serial to stdio so we can
+    actually see what is going on during the tests.
+
+ -- Mathieu Trudel-Lapierre <[e-mail]>  Thu, 17 Nov 2016 11:01:27 -0500
+
+open-iscsi (2.0.873+git0.3b4b4500-14ubuntu9) zesty; urgency=medium
+
+  [ LaMont Jones ]
+  * Clean up net-interface-handler
+  * Source /run/net6-*.conf when needed.
+
+  [ Mathieu Trudel-Lapierre ]
+  * debian/extra/initramfs.local-top: handle IPv6 configs being shipped in
+    DEVICE6 or /run/net6-*.conf in the initramfs, so we can fill in
+    /run/initramfs/open-iscsi.interface (LP: #1621507)
+
+ -- Mathieu Trudel-Lapierre <[e-mail]>  Thu, 03 Nov 2016 16:30:37 -0600
+
+open-iscsi (2.0.873+git0.3b4b4500-14ubuntu8) yakkety; urgency=medium
+
+  * debian/tests/xkvm: don't --enable-kvm.
+
+ -- Mathieu Trudel-Lapierre <[e-mail]>  Wed, 05 Oct 2016 12:58:21 -0400
+
+open-iscsi (2.0.873+git0.3b4b4500-14ubuntu7) yakkety; urgency=medium
+
+  * debian/tests/test-open-iscsi.py: glob to pick up open-iscsi.deb, which may
+    be named differently depending on how autopkgtests are run.
+
+ -- Mathieu Trudel-Lapierre <[e-mail]>  Wed, 05 Oct 2016 09:56:25 -0400
+
+open-iscsi (2.0.873+git0.3b4b4500-14ubuntu6) yakkety; urgency=medium
+
+  * debian/tests/test-open-iscsi.py: install the open-iscsi binary into a test
+    MAAS image, so we can check bootability. Download the open-iscsi explicitly
+    to /tmp before trying to copy it; so that we don't need to depend on ugly
+    internal autopkgtest paths.
+
+ -- Mathieu Trudel-Lapierre <[e-mail]>  Tue, 04 Oct 2016 09:05:56 -0400
+
+open-iscsi (2.0.873+git0.3b4b4500-14ubuntu5) yakkety; urgency=medium
+
+  * debian/tests/control: add build-needed since some of the new tests
+    appear to require that (so they can reach open-iscsi.deb which is a build
+    artifact from building in autopkgtest).
+
+ -- Mathieu Trudel-Lapierre <[e-mail]>  Mon, 03 Oct 2016 16:10:54 -0400
+
+open-iscsi (2.0.873+git0.3b4b4500-14ubuntu4) yakkety; urgency=medium
+
+  * add support for IPV6{DOMAINSEARCH,DNS0,DNS1} to net-interface-handler
+    LP: #1621507
+
+ -- LaMont Jones <[e-mail]>  Tue, 20 Sep 2016 08:05:41 -0600
+
+open-iscsi (2.0.873+git0.3b4b4500-14ubuntu3) xenial; urgency=medium
+
+  * Cherry-pick from Debian git repository (Christian Seiler):
+    - open-iscsi-udeb: drop Depends: libnss-files-udeb (Closes: #819685)
+
+ -- Colin Watson <[e-mail]>  Fri, 15 Apr 2016 16:54:26 +0100
+
+open-iscsi (2.0.873+git0.3b4b4500-14ubuntu2) xenial; urgency=medium
+
+  * debian/tests: add two new tests.  One to verify net-interface-handler is
+    installed executable, and one to actually test that /etc/resolv.conf is
+    updated with dhcp dns responses.
+
+ -- Diogo Matsubara <[e-mail]>  Wed, 09 Mar 2016 12:56:42 -0300
+
+open-iscsi (2.0.873+git0.3b4b4500-14ubuntu1) xenial; urgency=medium
+
+  * Merge from debian. Remaining changes:
+    - debian/tests: Add Ubuntu autopkgtest.
+    - debian/iscsi-network-interface.rules, debian/net-interface-handler,
+      debian/open-iscsi.install:
+      Prevent network interface that contains iscsi root from bouncing
+      during boot or going down during shutdown.
+      Integrates with resolvconf and initramfs code that writes
+      /run/initramfs/open-iscsi.interface
+    - debian/open-iscsi.maintscript: clean up the obsolete
+      iscsi-network-interface upstart job, file on upgrade.
+  * make debian/net-interface-handler executable (LP: #1553017)
+
+ -- Scott Moser <[e-mail]>  Fri, 04 Mar 2016 13:17:45 -0500
+
 open-iscsi (2.0.873+git0.3b4b4500-14) unstable; urgency=medium
 
   [ Christian Seiler ]
@@ -467,6 +1488,21 @@ open-iscsi (2.0.873+git0.3b4b4500-14) unstable; urgency=medium
 
  -- Christian Seiler <[e-mail]>  Thu, 03 Mar 2016 18:47:46 +0100
 
+open-iscsi (2.0.873+git0.3b4b4500-13ubuntu1) xenial; urgency=medium
+
+  * Merge from Debian (LP: #1546877). Remaining changes:
+    - debian/tests: Add Ubuntu autopkgtest.
+    - debian/iscsi-network-interface.rules, debian/net-interface-handler,
+      debian/open-iscsi.install:
+      Prevent network interface that contains iscsi root from bouncing
+      during boot or going down during shutdown.
+      Integrates with resolvconf and initramfs code that writes
+      /run/initramfs/open-iscsi.interface
+    - debian/open-iscsi.maintscript: clean up the obsolete
+      iscsi-network-interface upstart job, file on upgrade.
+
+ -- Scott Moser <[e-mail]>  Thu, 18 Feb 2016 00:53:37 -0500
+
 open-iscsi (2.0.873+git0.3b4b4500-13) unstable; urgency=medium
 
   [ Christian Seiler ]
@@ -688,6 +1724,115 @@ open-iscsi (2.0.873+git0.3b4b4500-1) unstable; urgency=low
 
  -- Ritesh Raj Sarraf <[e-mail]>  Tue, 05 Nov 2013 21:45:47 +0530
 
+open-iscsi (2.0.873-3ubuntu13) wily; urgency=medium
+
+  * debian/net-interface-handler: Create the resolvconf dir, to avoid failure
+    when resolvconf did not start yet; the udev rules run in parallel with
+    it. (LP: #1501033)
+
+ -- Martin Pitt <[e-mail]>  Tue, 06 Oct 2015 07:05:48 +0200
+
+open-iscsi (2.0.873-3ubuntu12) wily; urgency=medium
+
+  * Drop debian/ifup@.service.conf again, it ceased to work with net.agent in
+    wily and the whole idea of net-interface-handler is to *stop* ifupdown
+    from fiddling with the iscsi interface. Replace with udev rules
+    (debian/iscsi-network-interface.rules) which achieves this without relying
+    on ifupdown or a particular init system. (LP: #1463461)
+  * Drop debian/open-iscsi.iscsi-network-interface.upstart as well, obsolete
+    now. Also clean it up on upgrades.
+
+ -- Martin Pitt <[e-mail]>  Thu, 11 Jun 2015 11:58:29 +0200
+
+open-iscsi (2.0.873-3ubuntu11) vivid; urgency=medium
+
+  * Factor out logic from debian/open-iscsi.iscsi-network-interface.upstart
+    into debian/net-interface-handler, and install the latter in debian/rules.
+  * Add debian/ifup@.service.conf: Drop-in for ifup@.service to run
+    net-interface-handler under systemd. (LP: #1432829)
+
+ -- Martin Pitt <[e-mail]>  Fri, 27 Mar 2015 09:51:05 +0100
+
+open-iscsi (2.0.873-3ubuntu10) vivid; urgency=medium
+
+  * Start open-iscsi after installation and make sure initiatorname is
+    generated. (Patch backported from Debian)
+  * debian/tests/daemon: Stop calling the init.d script as we expect the
+    daemon to start automatically now.
+
+ -- Martin Pitt <[e-mail]>  Fri, 06 Mar 2015 13:17:26 +0100
+
+open-iscsi (2.0.873-3ubuntu9) trusty; urgency=medium
+
+  * Add missing python test dependency.
+
+ -- Martin Pitt <[e-mail]>  Wed, 26 Feb 2014 16:07:37 +0100
+
+open-iscsi (2.0.873-3ubuntu8) trusty; urgency=medium
+
+  * open-iscsi-udeb: Enable builds on armhf, arm64, ppc64el, x32 (LP: #1274203)
+
+ -- dann frazier <[e-mail]>  Wed, 29 Jan 2014 12:34:45 -0700
+
+open-iscsi (2.0.873-3ubuntu7) saucy; urgency=low
+
+  * Use dh_autotools-dev to update config.sub|guess.
+
+ -- Dmitrijs Ledkovs <[e-mail]>  Fri, 11 Oct 2013 17:03:37 +0100
+
+open-iscsi (2.0.873-3ubuntu6) saucy; urgency=low
+
+  * debian/tests: Add autopkgtest.
+
+ -- Yolanda <[e-mail]>  Mon, 27 May 2013 10:39:35 +0200
+
+open-iscsi (2.0.873-3ubuntu5) quantal-proposed; urgency=low
+
+  * Ensure all udev events have been processed before trying to configure
+    iscsi networking in the initramfs (LP: #1066945): 
+    - debian/extra/initramfs.local-top: Restore wait_for_udev call before
+      configure_networking to ensure network devices are present.
+
+ -- James Page <[e-mail]>  Wed, 17 Oct 2012 12:37:43 +0100
+
+open-iscsi (2.0.873-3ubuntu4) quantal-proposed; urgency=low
+
+  * Generate initiator name on install, not first boot, ensuring that the
+    initramfs built during install contains a valid iSCSI initiator name
+    resulting in a iSCSI based root volume that will actually boot
+    (LP: #1057635):
+    - debian/{rules,initiatorname.iscsi}: Don't install a default
+      initiatorname.iscsi.
+    - debian/open-iscsi.postinst: Generate initiatorname.iscsi on install.
+
+ -- James Page <[e-mail]>  Mon, 15 Oct 2012 12:42:53 +0100
+
+open-iscsi (2.0.873-3ubuntu3) quantal; urgency=low
+
+  * debian/open-iscsi.iscsi-network-interface.upstart: fix bad syntax
+    in 'post-stop'
+
+ -- Scott Moser <[e-mail]>  Mon, 17 Sep 2012 16:50:22 -0400
+
+open-iscsi (2.0.873-3ubuntu2) quantal; urgency=low
+
+  * debian/extra/initramfs.local-top: start writing
+    /run/initramfs/open-iscsi.interface file again (LP: #1050480)
+  * debian/open-iscsi.iscsi-network-interface.upstart: integrate with
+    resolvconf (LP: #1050487)
+
+ -- Scott Moser <[e-mail]>  Mon, 17 Sep 2012 15:46:26 -0400
+
+open-iscsi (2.0.873-3ubuntu1) quantal; urgency=low
+
+  * Merge from Debian. Remaining changes: (LP: #961114, LP: #677333)
+    - Add upstart job iscsi-network-interface
+    - Migrate from /var/run and /lib/init/rw to /run, from /var/lock to
+      /run/lock.
+  * Turn open-iscsi-utils into a transitional package
+
+ -- Stéphane Graber <[e-mail]>  Tue, 10 Jul 2012 13:53:52 -0400
+
 open-iscsi (2.0.873-3) unstable; urgency=low
 
   * [4939401] Fix build to install udeb stuff only on supported architectures
@@ -862,6 +2007,239 @@ open-iscsi (2.0.871-1) unstable; urgency=low
 
  -- Ritesh Raj Sarraf <[e-mail]>  Sat, 06 Feb 2010 20:28:23 +0530
 
+open-iscsi (2.0.871-0ubuntu9) oneiric-proposed; urgency=low
+
+  * Make sure the upstart job triggers ifupdown's upstart script to avoid
+    waiting 2 minutes at boot time for network to come up. (LP: #870214)
+
+ -- Stéphane Graber <[e-mail]>  Tue, 11 Oct 2011 22:31:39 +0100
+
+open-iscsi (2.0.871-0ubuntu8) oneiric; urgency=low
+
+  * Disable open-iscsi init script when root is on iscsi (LP: #838809)
+
+ -- Stéphane Graber <[e-mail]>  Thu, 15 Sep 2011 10:01:12 -0400
+
+open-iscsi (2.0.871-0ubuntu7) oneiric; urgency=low
+
+  * Migrate from /var/run and /lib/init/rw to /run, from /var/lock to
+    /run/lock, and from /dev/.initramfs to /run/initramfs.
+
+ -- Colin Watson <[e-mail]>  Thu, 14 Jul 2011 17:01:42 +0100
+
+open-iscsi (2.0.871-0ubuntu6) oneiric; urgency=low
+
+  * Fix initramfs iSCSI login (many thanks to Amos Hayes for lending me a
+    test system; LP: #728088):
+    - Write out /dev/.initramfs/open-iscsi.interface in the same subshell as
+      configure_networking, so that we can get at the value of DEVICE.
+    - Wait for udev to settle before attempting to configure networking.
+
+ -- Colin Watson <[e-mail]>  Fri, 27 May 2011 23:27:31 +0100
+
+open-iscsi (2.0.871-0ubuntu5) maverick; urgency=low
+
+  * Include <sys/types.h> and <sys/stat.h> in usr/iscsi_sysfs.c for S_*
+    macros (LP: #600953).
+
+ -- Colin Watson <[e-mail]>  Fri, 02 Jul 2010 17:08:14 +0100
+
+open-iscsi (2.0.871-0ubuntu4) lucid; urgency=low
+
+  * Revert ISCSI_NETDEVICE change; it's normally better to select the
+    interface by MAC address (LP: #473036).
+
+ -- Colin Watson <[e-mail]>  Fri, 05 Feb 2010 12:06:06 -0800
+
+open-iscsi (2.0.871-0ubuntu3) lucid; urgency=low
+
+  * If ISCSI_NETDEVICE is set, configure that interface in the initramfs
+    (LP: #473036).
+
+ -- Colin Watson <[e-mail]>  Fri, 22 Jan 2010 17:01:17 +0000
+
+open-iscsi (2.0.871-0ubuntu2) lucid; urgency=low
+
+  * Fix handling of ISCSI_USERNAME, ISCSI_PASSWORD, ISCSI_IN_USERNAME, and
+    ISCSI_IN_PASSWORD in iscsi.initramfs (closes: #525053).
+
+ -- Colin Watson <[e-mail]>  Mon, 14 Dec 2009 12:24:42 +0000
+
+open-iscsi (2.0.871-0ubuntu1) lucid; urgency=low
+
+  * New upstream release.
+  * If the root filesystem is on iSCSI, prevent the network interface used
+    for it from being brought up or down automatically (LP: #457767).
+  * Backport from upstream:
+    - Allow updating of discovery records (Hannes Reinecke).
+    - Fix discovery record use, rather than always using iscsid.conf
+      settings (Mike Christie).
+
+ -- Colin Watson <[e-mail]>  Thu, 10 Dec 2009 18:19:20 +0000
+
+open-iscsi (2.0.870.1-0ubuntu12) karmic; urgency=low
+
+  * debian/open-iscsi-udeb.finish-install: Stop checking
+    disk-detect/iscsi/enable, as that template doesn't exist any more.
+
+ -- Colin Watson <[e-mail]>  Fri, 02 Oct 2009 18:49:18 +0100
+
+open-iscsi (2.0.870.1-0ubuntu11) karmic; urgency=low
+
+  * open-iscsi-utils Replaces: old versions of open-iscsi.
+  * SECURITY UPDATE: temporary file vulnerability (LP: #408915)
+    - utils/iscsi_discovery: store iscsiadm -m discovery result in a
+      variable rather than writing it to an insecurely-created temporary
+      file
+    - CVE-2009-1297
+
+ -- Colin Watson <[e-mail]>  Mon, 24 Aug 2009 23:42:10 +0100
+
+open-iscsi (2.0.870.1-0ubuntu10) karmic; urgency=low
+
+  * debian/control, debian/open-iscsi-utils.install,
+    open-iscsi-utils.manpages : create a new binary package which
+    contains /sbin/iscsiadm, needed for some packages to build against
+    (eg, libvirt), but not containing the init script, LP: #414986
+
+ -- Dustin Kirkland <[e-mail]>  Tue, 18 Aug 2009 08:11:34 -0500
+
+open-iscsi (2.0.870.1-0ubuntu9) karmic; urgency=low
+
+  * debian/open-iscsi.init: don't exit with error if
+    /lib/init/rw/sendsigs.omit.d/ doesn't exist (LP: #414986)
+
+ -- Jamie Strandboge <[e-mail]>  Mon, 17 Aug 2009 14:12:01 -0500
+
+open-iscsi (2.0.870.1-0ubuntu8) karmic; urgency=low
+
+  * Make sure network devices are always included in the initramfs if
+    booting with / on iSCSI.
+  * Retry initramfs network configuration for a while until it works (LP:
+    #237460).
+
+ -- Colin Watson <[e-mail]>  Tue, 11 Aug 2009 13:05:43 +0100
+
+open-iscsi (2.0.870.1-0ubuntu7) karmic; urgency=low
+
+  [ Colin Watson ]
+  * debian/open-iscsi-udeb.postinst, debian/open-iscsi-udeb.templates:
+    Remove; this is being taken over by disk-detect and partman-iscsi.
+  * debian/control: Remove XB-Installer-Menu-Item.
+
+  [ Mathias Gug ]
+  * debian/open-iscsi.postinst: Fix backwards use of update-rc.d (LP:
+    #306678).
+  * debian/open-iscsi.init: Overwrite existing pid file symlinks in
+    /lib/init/rw/sendsigs.omit.d/.
+
+ -- Colin Watson <[e-mail]>  Mon, 10 Aug 2009 13:28:41 +0100
+
+open-iscsi (2.0.870.1-0ubuntu6) karmic; urgency=low
+
+  * utils/iscsi_discovery: Fix several bashisms (test ==, &> redirection,
+    trap with numeric signals).
+
+ -- Colin Watson <[e-mail]>  Tue, 04 Aug 2009 12:30:44 +0100
+
+open-iscsi (2.0.870.1-0ubuntu5) karmic; urgency=low
+
+  * utils/iscsi_discovery: replace uses of awk with other shell voodoo, so
+    that this works in the installer.  LP: #236640.
+  * debian/rules, debian/open-iscsi-udeb.dirs: install the open-isci-udeb
+    finish script to /usr/lib/finish-install.d, not to /lib/finish-install.d.
+  * debian/open-iscsi-udeb.finish-install: copy the config from the root
+    to the correct directory in the target.
+
+ -- Steve Langasek <[e-mail]>  Tue, 07 Jul 2009 22:10:17 -0700
+
+open-iscsi (2.0.870.1-0ubuntu4) karmic; urgency=low
+
+  * debian/extra/initramfs.hook: iscsistart is in /sbin, not /usr/sbin (LP:
+    #364616).
+
+ -- Colin Watson <[e-mail]>  Thu, 02 Jul 2009 14:12:25 +0100
+
+open-iscsi (2.0.870.1-0ubuntu3) jaunty; urgency=low
+
+  * Invoke iscsi-iname using normal $PATH lookup rather than using an
+    incorrect explicit path (see LP #236640).
+
+ -- Colin Watson <[e-mail]>  Thu, 09 Apr 2009 16:49:08 +0100
+
+open-iscsi (2.0.870.1-0ubuntu2) jaunty; urgency=low
+
+  * debian/control: Drop udeb dependency on crypto-modules; as best as I can
+    tell, this is required for crc32c support, which is now built-in to the
+    Ubuntu kernels.
+
+ -- Dustin Kirkland <[e-mail]>  Tue, 03 Feb 2009 11:20:35 +0100
+
+open-iscsi (2.0.870.1-0ubuntu1) jaunty; urgency=low
+
+  * New upstream release:
+   - Support 2.6.26/27 kernels (LP: #289470).
+   - Fix iscsid shutdown (LP: #181188).
+  * Merge from Debian. Remaining Ubuntu changes:
+   - Note: Debian version isn't 870~rc3 but 869.2 which leads to a big
+     .diff.gz file. Only files in debian/ have been considered for this merge
+     since debian hasn't patched the source.
+   - debian/control, debian/rules, debian/open-iscsi-udeb*:
+     + Add open-iscsi-udeb.
+   - debian/open-iscsi.dirs:
+     + rename dirs to open-iscsi.dirs because of open-iscsi-udeb addition.
+     + drop network/if-up.d/ directory since we're using symlinks instead.
+     + utilities installed in /bin,/sbin rather than /usr/bin,/usr/sbin.
+   - debian/open-iscsi.init:
+     + utilities installed in /bin,/sbin rather than /usr/bin,/usr/sbin.
+     + lsb log messages.
+     + Don't generate initiatorname name (moved to postinst).
+     + Support for being called from ifup/ifdown scripts.
+     + Refactor start functions:
+       - move daemon start to startdaemon function.
+       - call udevadm settle rather then udevsettle (which doesn't do anything
+         useful).
+       - don't exit if the daemon is already running during sanitychecks.
+         Instead check in startdaemon if the daemon needs to be started.
+       - only start automatic targets if necessary.
+       - add waitfordevices function: called during rcS, waits for all 
+         automatic targets to be ready. Iscsi targets are considered as
+         local block devices - they don't need to be marked with _netdev in
+         fstab. (LP: #227848) 
+       - start targets if not run from rcS.
+     + Check status of iscsid daemon in addition to listing the iscsi sessions 
+       when status action is called.  
+     + Add iscsid to the list of processes that should not be killed by
+       sendsigs during shutdown (LP: #192080).
+     + Add starttargets, stoptargets and restarttargets to usage message.
+   - debian/rules:
+     + Install utilities /bin,/sbin rather than /usr/bin,/usr/sbin.
+     + Start open-iscsi at S25 (waiting for devices created by ifupdown
+       calls and before local filesystems are checked and mounted)
+     + stop at S41 (after local filesystems are unmounted). Don't use 
+       umountiscsi.sh script from debian. (LP: #192080).
+   - debian/initiatorname.iscsi, debian/open-iscsi.postinst:
+     + Generate the random initiatorname during postinstall rather than in the
+     init script.
+     + Don't ship a default initiatorname.iscsi file.
+   - debian/open-iscsi.postinst:
+     + fix init script ordering on upgrades.
+   - debian/open-iscsi.links:
+     + symlink open-iscsi init script in if-up.d and if-down.d directory so
+       that the iscsi subsystem is started/stopped when network interfaces 
+       are configured.
+   - debian/open-iscsi.postrm:
+     + delete iscsi configuration when the package is purged.
+   - utils/iscsi_discovery: De-bashify iscsi_discovery.
+   - usr/idbm.c: Fix build failure with new glibc. LP: #299843.
+  * Dropped:
+   - Exit without error if /sys is not available. Otherwise, it's not possible
+     to use this package as a build-dependency (in Debian).
+   - Drop upstream url in long description now that it's in the Homepage
+     field (in Debian).
+
+ -- Mathias Gug <[e-mail]>  Mon, 01 Dec 2008 10:45:03 -0500
+
 open-iscsi (2.0.870~rc3-0.6) unstable; urgency=low
 
   * Non-maintainer upload.
@@ -961,6 +2339,47 @@ open-iscsi (2.0.869~rc4-1) experimental; urgency=low
 
  -- Philipp Hug <[e-mail]>  Sat, 12 Apr 2008 15:53:12 +0200
 
+open-iscsi (2.0.865-1ubuntu5) jaunty; urgency=low
+
+  * Fix build failure with new glibc. LP: #299843.
+
+ -- Matthias Klose <[e-mail]>  Thu, 27 Nov 2008 15:58:15 +0100
+
+open-iscsi (2.0.865-1ubuntu4) intrepid; urgency=low
+
+  * Exit without error if /sys is not available. Otherwise, it's not possible
+    to use this package as a build-dependency.
+
+ -- Soren Hansen <[e-mail]>  Fri, 02 May 2008 00:57:02 +0200
+
+open-iscsi (2.0.865-1ubuntu3) hardy; urgency=low
+
+  * Migration of /usr/{bin,sbin,lib} -> to /{bin,sbin,lib}. 
+    (LP: #208441)
+  * Push the shutdown scripts back. (LP: #196748)
+  * Update control to 3.7.3.
+  * Updated the maintainer according to spec. 
+
+ -- Chuck Short <[e-mail]>  Wed, 09 Apr 2008 18:09:28 -0400
+
+open-iscsi (2.0.865-1ubuntu2) hardy; urgency=low
+
+  * Fixed init script to point to the right iscsiadm. (LP: #206520) 
+
+ -- Chuck Short <[e-mail]>  Tue, 25 Mar 2008 09:53:08 -0400
+
+open-iscsi (2.0.865-1ubuntu1) hardy; urgency=low
+
+  * Add open-iscsi-udeb.
+  * Include iscsi_discovery.
+  * De-bashify iscsi_discovery.
+  * Start open-iscsi in single user mode.
+  * Properly lsb-ify init script.
+  * Modify Maintainer value to match the DebianMaintainerField
+    specification.
+
+ -- Soren Hansen <[e-mail]>  Fri, 08 Feb 2008 11:56:11 +0100
+
 open-iscsi (2.0.865-1) unstable; urgency=low
 
   * New upstream release
@@ -1023,3 +2442,4 @@ open-iscsi (1.0.485-0unreleased) dapper; urgency=low
   * Put database into /var/lib/open-iscsi
 
  -- Philipp Hug <[e-mail]>  Mon,  6 Mar 2006 19:20:17 +0000
+
diff --git a/debian/control b/debian/control
index df9c66d..0d6915d 100644
--- a/debian/control
+++ b/debian/control
@@ -1,7 +1,8 @@
 Source: open-iscsi
 Section: net
 Priority: optional
-Maintainer: Debian iSCSI Maintainers <[e-mail]>
+Maintainer: Ubuntu Developers <[e-mail]>
+XSBC-Original-Maintainer: Debian iSCSI Maintainers <[e-mail]>
 Uploaders:
  Ritesh Raj Sarraf <[e-mail]>,
  Christian Seiler <[e-mail]>,
diff --git a/debian/extra/startup-checks.sh b/debian/extra/startup-checks.sh
index 5b25b6f..fc91fe2 100755
--- a/debian/extra/startup-checks.sh
+++ b/debian/extra/startup-checks.sh
@@ -33,7 +33,7 @@ if grep -q "^GenerateName=yes" $NAMEFILE ; then
 		exit 1
 	fi
 	# Generate a unique InitiatorName and save it
-	INAME=`/usr/sbin/iscsi-iname -p iqn.1993-08.org.debian:01`
+	INAME=`/sbin/iscsi-iname -p iqn.2004-10.com.ubuntu:01`
 	if [ "$INAME" != "" ] ; then
 		echo "## DO NOT EDIT OR REMOVE THIS FILE!" > $NAMEFILE
 		echo "## If you remove this file, the iSCSI daemon will not start." >> $NAMEFILE
diff --git a/debian/open-iscsi.postinst b/debian/open-iscsi.postinst
index 0067515..21a20f1 100644
--- a/debian/open-iscsi.postinst
+++ b/debian/open-iscsi.postinst
@@ -20,7 +20,7 @@ case "$1" in
         # Generate a unique iSCSI InitiatorName
         NAMEFILE=/etc/iscsi/initiatorname.iscsi
         if [ ! -e $NAMEFILE ] && [ -z "$2" ] ; then
-            INAME=$(iscsi-iname -p iqn.1993-08.org.debian:01)
+            INAME=$(iscsi-iname -p iqn.2004-10.com.ubuntu:01)
             if [ -n "$INAME" ] ; then
                 echo "## DO NOT EDIT OR REMOVE THIS FILE!" > $NAMEFILE
                 echo "## If you remove this file, the iSCSI daemon will not start." >> $NAMEFILE
diff --git a/debian/patches/fix-format-overflow-warnings.patch b/debian/patches/fix-format-overflow-warnings.patch
new file mode 100644
index 0000000..456e5e1
--- /dev/null
+++ b/debian/patches/fix-format-overflow-warnings.patch
@@ -0,0 +1,30 @@
+Description: fix format overflow warnings
+Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/open-iscsi/+bug/2036884
+Forwarded: https://github.com/open-iscsi/open-iscsi/pull/413
+Forwarded: https://github.com/open-iscsi/open-iscsi/pull/425
+Author: Chris Leech <[e-mail]>
+Author: Graham Inggs <[e-mail]>
+Last-Update: 2023-09-22
+
+--- a/usr/discoveryd.c
++++ b/usr/discoveryd.c
+@@ -153,8 +153,8 @@
+  	 */
+ 	list_for_each_entry_safe(rec, tmp_rec, &iscsi_targets, list) {
+ 		log_debug(7, "Trying to match %s %s to %s %s %s",
+-	 		   targetname, iname, rec->name, rec->conn[0].address,
+-			    rec->iface.name);
++	 		   targetname ? targetname : "(null)", iname ? iname : "(null)",
++			    rec->name, rec->conn[0].address, rec->iface.name);
+ 		if (targetname && strcmp(rec->name, targetname))
+ 			continue;
+ 
+@@ -169,7 +169,7 @@
+ 		}
+ 
+ 		log_debug(5, "Matched %s %s, checking if in new targets.",
+-			  targetname, iname);
++			  targetname ? targetname : "(null)",  iname ? iname : "(null)");
+ 		if (!idbm_find_rec_in_list(new_rec_list, rec->name,
+ 					   rec->conn[0].address,
+ 					   rec->conn[0].port, &rec->iface)) {
diff --git a/debian/patches/series b/debian/patches/series
index 138a4b7..1b40fc2 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1,3 +1,4 @@
 debian/lp1755858-default-iscsid_conf-to-iscsid_socket.patch
 debian/multiarch-path.patch
 exec_prefix.patch
+fix-format-overflow-warnings.patch
diff --git a/debian/tests/README-boot-test.md b/debian/tests/README-boot-test.md
new file mode 100644
index 0000000..e45bbf0
--- /dev/null
+++ b/debian/tests/README-boot-test.md
@@ -0,0 +1,139 @@
+## open-iscsi boot test
+The purpose of this test (`CloudImageTest`) is to test the boot of a system
+using an iscsi root target.  In order to accomplish that, the tests does
+
+  1. Download Ubuntu cloud image
+  2. installs the open-iscsi deb inside
+  3. collect kernel and initramfs from inside
+  4. register the image as a read-only iscsi target served by tgt
+  5. boot kernel and initramfs with a command line to use the image as root.
+     And additionally attach a local disk for collecting output.
+  6. provide user-data that executes commands, colects files and writes them
+     to the output disk and then shuts the system down.
+  7. extract the collected files from the output disk and inspect them.
+
+The `CloudImageTest` uses qemu user networking.
+
+
+## Caveats
+
+  1. It depends on a cloud-image being present.
+
+     Cloud-images are often not available for the first few weeks of a cycle.
+     If no cloud-image of 'REL' is available, then boot-test will skip.
+     If 'REL' is not known in distro-info-data, then test will fail.
+
+     This means that uploads of open-iscsi (or its dependencies) will not
+     be properly tested until a cloud-image is available, and will fail
+     until distro-info-data is uploaded.
+
+  2. Installation of large packages via patch-image may fail.
+     An ubuntu image downloaded has only a small amount of extra space.
+     Installation of a new kernel into the target would probably fail.
+
+     If this becomes a problem, we could grow the disk like done at
+       https://gist.github.com/smoser/6a048a0e2795b48221fc44962202fa14
+
+
+### testing manually ###
+The test case in `debian/tests/test-open-iscsi.py` uses some helper tools.
+
+  * **patch-image**: this is used to install packages into the pristine image
+     and collect the kernel and initramfs out of the image.  This allows us to
+     test the portions of open-iscsi that update the initramfs.  Without
+     using the updated initramfs we wouldn't really be testing the new
+     open-iscsi.
+
+     It will upgrade any packages inside that are mentioned in
+     ADT_TEST_TRIGGERS environment.  It will also install open-iscsi if
+     it is not in that list.
+
+     It installs packages into the target by copying the host system's
+     /etc/apt content in, and also includes copying local (file://) apt
+     repos into the target.  This is necessary for the autopackage test
+     environment that adds local package repositories to sources.list.d.
+
+     It may also make other changes to the image to workaround bugs.
+     See --help output for list of bugs.
+
+  * **get-image**: This downloads an image from cloud-images.ubuntu.com.  See
+     its Usage for more information.  it downloads via stream data and verifies
+     download.  One thing to note is that it does not overwrite existing files.
+
+  * **tgt-boot-test**: this registers an image in tgt locally, and then boots
+     kernel and initramfs to mount that.  It knows how to build iscsi kernel
+     command lines.
+
+     By default, the xkvm process that is started will be allowed `60m` to
+     complete.  This can be adjusted by setting `BOOT_TIMEOUT` in the
+     environment.
+
+  * **xkvm**: this is a helper/wrapper around qemu.  It is taken from the curtin
+     projects tools/ directory.  It allows some simplified command lines, and
+     most usefully, the '--netdev=<bridge>' argument will create a tun/tap
+     device and attach it to the bridge.
+
+     If the host system is not bare metal, kvm will not be
+     enabled in the guest that is lauched.  To force use of kvm, set
+     _USE_KVM=1 in the environment.  See 'should_try_kvm' in xkvm for details.
+
+Testing manually looks like this:
+
+    ## set up path to include debian/tests directory.
+    $ PATH=$PWD/debian/tests:$PATH
+
+    ## Get the image you want.  This creates out.d/disk.img and disk.img.dist
+    $ get-image xenial.d xenial
+
+    ## patch the image with an open-iscsi, which creates xenial.d/kernel
+    ## and xenial.d/initrd from the kernel and initramfs inside the image.
+    $ apt-get download open-iscsi
+    $ deb=$(ls open-iscsi_*.deb | tail -n 1)
+    $ sudo ./debian/tests/patch-image \
+         --kernel=xenial.d/kernel --initrd=xenial.d/initrd
+         xenial.d/disk.img "$deb"
+
+    ## Boot the system, log in, look around.
+    $ tgt-boot-test -v xenial.d/disk.img xenial.d/kernel xenial.d/initrd
+
+
+### Features of tgt-boot-test ###
+
+tgt-boot-test does a number of useful things.
+
+ * determines the host address that the guest will use.
+   This should support ipv6 and ipv4 addresses on bridges, and
+   knows values that qemu's user networking uses.  Flags passed to `--netdev`
+   are read intelligently.  This can be overriden with `--host-addr`, but
+   it does a good job of determining what the right values are.
+
+ * provides a nocloud metadata service with a python web server that
+   supports ipv4 and ipv6.
+
+ * provides the ability to provide additional kernel command line options
+   or to provide a 'template' that references variables it knows such as
+   {iserver} (iscsi server) or {seed_url}.
+
+ * Sets ubuntu (passw0rd) and root password (root) and imports users
+   ssh keys to the ubuntu user.
+
+One thing to note is that yakkety's version of qemu does not run an ipv6
+dhcp server on its user-network, so a stateful dhclient request will not
+work.
+
+In order to create a bridge easily with a ipv6 dhcp server, you can use
+lxd at sufficent version (https://github.com/lxc/lxd/issues/2481).
+Assuming that bug is fixed, to create an ipv6 only bridge:
+
+    $ netname="ipv6-only"
+    $ lxc network create $netname
+    $ lxc network unset $netname ipv4.address
+    $ lxc network unset $netname ipv4.nat
+    $ lxc network set $netname ipv6.dhcp.stateful true
+
+Then, you can use tgt-boot-test with that:
+
+    $ PATH=$PWD/debian/tests:$PATH
+    $ ./debian/tests/tgt-boot-test -vv --netdev=ipv6-only \
+       --cmdline-ip="ip=off ip6=dhcp" \
+       disk.img kernel initramfs
diff --git a/debian/tests/control b/debian/tests/control
index 4285726..31aa114 100644
--- a/debian/tests/control
+++ b/debian/tests/control
@@ -1,6 +1,10 @@
 Tests: install
 Restrictions: needs-root, isolation-machine, breaks-testbed
 
+Tests: testsuite
+Restrictions: needs-root isolation-machine breaks-testbed
+Depends: open-iscsi, python3, tgt, qemu-system, ubuntu-cloudimage-keyring, simplestreams, python3-netifaces, distro-info, cloud-image-utils, dctrl-tools, rsync
+
 Tests: nested
 Restrictions: needs-root, isolation-machine, breaks-testbed, allow-stderr
 Depends:
diff --git a/debian/tests/get-image b/debian/tests/get-image
new file mode 100755
index 0000000..41b903c
--- /dev/null
+++ b/debian/tests/get-image
@@ -0,0 +1,227 @@
+#!/bin/bash
+Usage() {
+   cat <<EOF
+${0##*/} out-directory release
+
+By default, the cloud image for 'release' is downloaded from the
+daily cloud image stream.
+
+Additional arguments can change behavior of what is downloaded.
+Some supported arguments:
+   * cloud-daily: use daily stream [default]
+   * cloud-release: use release stream rather than daily stream.
+   * maas-release, maas-daily: download maas images instead of cloud-image
+   * hwe-N: download the hwe kernel from release 'N' instead of default
+     this is only respected if maas stream is used.
+   * YYYYMMDD[.X] : download the specific build version
+
+example:
+ ${0##*/} xenial_dir xenial cloud-daily
+EOF
+}
+TEMP_D=""
+
+NO_IMAGE_AVAILABLE_RC=3
+
+cleanup() {
+   [ ! -d "${TEMP_D}" ] || rm -Rf "${TEMP_D}"
+}
+VERBOSITY=1
+inargs() {
+  local n=$1 x="";
+  shift;
+  for x in "$@"; do [ "$n" = "$x" ] && return 0; done;
+  return 1
+}
+debug() { [ $1 -ge $VERBOSITY ] || return 0; shift; echo "$@" 1>&2; }
+error() { echo "$@" 1>&2; }
+fail() { [ $# -eq 0 ] || error "$@"; exit 1; }
+
+VERBOSITY=0
+TEMP_D=$(mktemp -d ${TMPDIR:-/tmp}/${0##*/}.XXXXXX) || exit 1
+trap cleanup EXIT
+
+arches=( ppc64el i386 amd64 )
+releases=( $(ubuntu-distro-info --all) )
+mbase="http://maas.ubuntu.com/images/ephemeral-v2"
+cbase="http://cloud-images.ubuntu.com"
+def_stream_type="cloud"
+stream_src=""
+curbase="$mbase"
+def_rel="xenial"
+vername=""
+
+[ "$1" = "-h" -o "$1" = "--help" ] && { Usage; exit 0; }
+[ $# -lt 2 ] && { Usage 1>&2; exit 1; }
+out_d="$1"
+shift
+
+myarch=$(uname -m)
+case "$myarch" in
+   ppc64*) def_arch="ppc64el";;
+   i?86) def_arch="i386";;
+   x86_64) def_arch="amd64";;
+   arm*) def_arch="armel";;
+esac
+
+pt=( )
+for x in "$@"; do
+   inargs "$x" "${arches[@]}" && pt[${#pt[@]}]=arch=$x && arch="$x" && continue
+   inargs "$x" "${releases[@]}" && pt[${#pt[@]}]="release=$x" && release=$x && continue
+   [ "$x" = "released" -o "$x" = "release" ] && x="releases"
+   case "$x" in
+      cloud-released|cloud-release) x="cloud-releases";;
+      maas-released|maas-release) x="maas-releases";;
+   esac
+
+   case "$x" in
+      maas|cloud) stream_type="$x";;
+      cloud-daily|maas-daily|cloud-releases|maas-releases)
+          stream_type="${x%-*}"
+          stream_sub=${x#*-};;
+      http://*) stream=$x;;
+      hwe-*) subarch="$x";;
+      subarch=*) subarch=${x#*=};;
+      *=*) pt[${#pt[@]}]="$x";;
+      *~*) pt[${#pt[@]}]="$x";;
+      [0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]|[0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9].[0-9])
+         pt[${#pt[@]}]="version_name=$x"
+         vername="$x";;
+      *) fail "Confused by input token '$x'";;
+   esac
+done
+
+[ -n "$stream_type" ] || stream_type="${def_stream_type}"
+if [ -z "$stream" ]; then
+    stream_sub=${stream_sub:-daily}
+    case "$stream_type" in
+        maas) stream="$mbase/$stream_sub";;
+        cloud) stream="$cbase/$stream_sub";;
+        *) fail "unknown stream_type '$stream_type'";;
+    esac
+fi
+
+[ -n "$arch" ] || pt[${#pt[@]}]="arch=$def_arch"
+
+if [ "$stream_type" = "maas" ]; then
+    if [ -z "$subarch" ]; then
+        t=${release#?}
+        first_letter=${release%${t}}
+        subarch="hwe-${first_letter}"
+        error "selected subarch=${subarch} for $release"
+    fi
+    pt[${#pt[@]}]="subarch=$subarch"
+    ofmt="%(sha256)s %(ftype)s %(subarch)s %(item_url)s"
+else
+    ofmt="%(sha256)s %(ftype)s %(item_url)s"
+fi
+
+OIFS="$IFS"
+mkdir -p "$out_d"
+case "$stream" in
+   *.json) :;;
+   *) keyring="/usr/share/keyrings/ubuntu-cloudimage-keyring.gpg";;
+esac
+
+needs=""
+[ -n "$keyring" -a ! -f "$keyring" ] &&
+   needs="${needs} ubuntu-cloudimage-keyring"
+
+for pair in sstream-query:simplestreams tgt-admin:tgt; do
+   cmd=${pair%:*}
+   pkg=${pair#*:}
+   command -v "$cmd" >/dev/null 2>&1 || needs="$needs $pkg"
+done
+
+if [ -n "${needs# }" ]; then
+   error "missing dependencies"
+   fail "sudo apt-get install -qy ${needs# }"
+fi
+
+qcmd=( sstream-query ${keyring:+"--keyring=$keyring"} ${vername:---max=1}
+       --output-format="$ofmt" "${stream}" datatype="image-downloads" 
+       "${pt[@]}" )
+echo "${qcmd[@]}"
+"${qcmd[@]}" > "${TEMP_D}/qout"
+roots=$(awk '$2 == "root-image.gz" || $2 == "disk1.img" { print $2 }' \
+        "${TEMP_D}/qout" | sort -u | wc -l)
+if [ "$roots" = "0" ]; then
+   error "No image available for $release in $stream${pt:+ (${pt[*]})}"
+   exit ${NO_IMAGE_AVAILABLE_RC}
+elif [ "$roots" != "1" ]; then
+   error "query resulted in '$roots' root images. expect 1 and only 1"
+   error "cmd was ${qcmd[*]}"
+   cat "${TEMP_D}/qout"
+   fail
+fi
+
+set -f
+while read line; do
+    set -- $line
+    if [ "$stream_type" = "maas" ]; then
+        sha256="$1"; ftype="$2"; subarch="$3"; url="$4"
+    else
+        sha256="$1"; ftype="$2"; url="$3"
+    fi
+    case "$ftype" in
+        boot-kernel|boot-initrd|root-image.gz|disk1.img) :;;
+        *) continue
+    esac
+    if [ "$ftype" = "root-image.gz" ]; then
+       fname="$ftype"
+       image_src="$out_d/$fname"
+       image="$out_d/root-image"
+    elif [ "$ftype" = "disk1.img" ]; then
+       fname="disk.img.dist"
+       image_src="$out_d/$fname"
+       image="$out_d/disk.img"
+    else
+       fname="$subarch/$ftype"
+    fi
+    out_f="${out_d}/$fname"
+    if [ -f "$out_f" ]; then
+        debug 1 "reusing existing '$out_f' rather than downloading $url."
+        continue
+    fi
+    [ -d "${out_f%/*}" ] || mkdir -p "${out_f%/*}"
+    tmp="${out_f}.tmp"
+    wget --progress=dot:mega -O "$tmp" "$url" || {
+        error "Failed to download $url to $tmp."
+        rm -f "$tmp"
+        exit 3
+    }
+    debug 1 "checksumming $tmp from $url"
+    out=$(sha256sum "$tmp") || {
+        error "Failed to checksum $tmp"
+        rm -f "$tmp"
+        exit 3;
+    }
+    found=${out%  *}
+    if [ "$found" != "$sha256" ]; then
+        error "$tmp from $url found sha256 of $found. expected $sha256."
+        ls -l "$tmp" 1>&2
+        rm -f "$tmp"
+        exit 3
+    fi
+    mv "$tmp" "$out_f" || fail "failed renaming $tmp to $out_f"
+    echo "$fname" "$url" >> "$out_d/contents"
+done < "${TEMP_D}/qout"
+
+if [ ! -f "$image" ]; then
+    case "$image_src" in
+        */root-image.gz)
+           debug 1 "decompressing $image_src"
+           zcat "$image_src" > "$image.tmp" &&
+             mv "$image.tmp" "$image" ||
+             { rm -f "$image.tmp"; exit 1; }
+           ;;
+        */disk.img.dist)
+           debug 1 "converting qcow2 in $image_src -> raw in $image"
+           qemu-img convert -O raw "$image_src" "$image.tmp" &&
+               mv "$image.tmp" "$image" ||
+               { rm -f "$image.tmp"; exit 1; }
+           ;;
+    esac
+fi
+
+# vi: ts=4 expandtab
diff --git a/debian/tests/install b/debian/tests/install
index 5077b7b..22a5cea 100755
--- a/debian/tests/install
+++ b/debian/tests/install
@@ -18,7 +18,7 @@ die_with_file()
   exit 1
 }
 
-DEBIAN_FRONTEND=noninteractive apt-get -y install open-iscsi </dev/null
+DEBIAN_FRONTEND=noninteractive apt-get -y purge open-iscsi && apt-get -y install open-iscsi </dev/null
 
 [ -d /etc/iscsi ] || die "/etc/iscsi not a directory"
 
diff --git a/debian/tests/patch-image b/debian/tests/patch-image
new file mode 100755
index 0000000..f8d6988
--- /dev/null
+++ b/debian/tests/patch-image
@@ -0,0 +1,381 @@
+#!/bin/bash
+
+VERBOSITY=1
+TEMP_D=""
+
+error() { echo "$@" 1>&2; }
+fail() { local r=$?;  [ $r -eq 0 ] && r=1; failrc "$r" "$@"; }
+failrc() { local r=$1; shift; [ $# -eq 0 ] || error "$@"; exit $r; }
+
+Usage() {
+    cat <<EOF
+Usage: ${0##*/} [options] image [packages]
+  Patch image, upgrading [packages].
+    --kernel FILE             copy kernel out to FILE
+    --initrd FILE             copy initrd out to FILE
+
+    --krd-only                only copy out kernel/initrd do not change image.
+                              this is incompatible with 'packages'
+                              it is a short-cut to specifying all the '--no-*'
+                              options below.
+
+    --no-copy-apt             do not copy host's apt repos in.
+
+  image modifications:
+    --no-update-fstab         do not modify fstab (LP: #1732028)
+
+  if no packages are provided, and ADT_TEST_TRIGGERS is set
+  in environment, then it will be read for the list of packages.
+  to override that behavior pass package 'none'.
+EOF
+
+}
+
+bad_Usage() { Usage 1>&2; [ $# -eq 0 ] || error "$@"; return 1; }
+cleanup() {
+    [ -z "${TEMP_D}" -o ! -d "${TEMP_D}" ] || rm -Rf "${TEMP_D}"
+}
+
+debug() {
+    local level=${1}; shift;
+    [ "${level}" -gt "${VERBOSITY}" ] && return
+    error "${@}"
+}
+
+adt_test_triggers_to_bin_pkgs() {
+    # ADT_TEST_TRIGGERS is space delimited <src>/version
+    # returns a scalar '_RET', caller has to expand
+    local tok src="" ver="" binpkgs=""
+    for tok in "$@"; do
+        src=${tok%/*}
+        ver=${tok#*/}
+        bin_packages_from_source_pkg "$src" "$ver" || return
+        if [ -z "${_RET}" ]; then
+            error "$tok: (source=$src ver=$ver) No packages available!"
+            return 1
+        fi
+        binpkgs="${binpkgs} ${_RET}"
+    done
+    _RET=${binpkgs# }
+}
+
+bin_packages_from_source_pkg() {
+    local pkg=$1 ver=${2} cmd="" out="" p="" ret=""
+    if ! command -v grep-aptavail >/dev/null; then
+        error "No command grep-aptavail: apt-get install dctrl-tools"
+        return 1
+    fi
+    cmd=( grep-aptavail --show-field=Package
+        --exact-match --field=Source:Package "$pkg" )
+    if [ -n "$ver" ]; then
+       cmd=( "${cmd[@]}" --and --field=Version "$ver" )
+    fi
+    out=$("${cmd[@]}" | sed 's,Package: ,,')
+    ret=""
+    for p in $out; do
+        ret="$ret ${p#Package: }${ver:+=${ver}}"
+    done
+    # if no version was provided, we could have multiple results
+    _RET=$(set -f; for i in ${ret}; do echo "$i"; done | sort -u)
+}
+
+update_fstab() {
+    # update_fstab(path) modify the fstab at path
+    # to remove problematic entries (LP: #1732028)
+    local fstab="$1"
+    if [ ! -e "$fstab.patch-image-dist" ]; then
+        cp "$fstab" "$fstab.patch-image-dist" ||
+            { error "failed backing up $fstab to $fstab.dist"; return 1; }
+    fi
+    sed -i '/^LABEL=UEFI/s/^/#/' "$fstab"
+}
+
+cat_debug_script() {
+    cat <<"EOF"
+#!/bin/sh
+set -f
+NAME=${1:-debug-pid-$$}
+[ "$(id -u)" = "0" ] && log="/run/${NAME}.log" || log="/tmp/${NAME}.log"
+
+msg() {
+   echo "===" "$@" "===" 1>&2
+}
+showcmd() {
+    msg "showcmd$" "$@"
+    "$@"
+}
+
+main() {
+    issues=$(journalctl | egrep "[.]mount: ")
+    if [ -z "$issues" ]; then
+        msg "$NAME:" "MOUNT ISSUES FOUND: NO"
+    else
+        msg "$NAME:" "MOUNT ISSUES FOUND: YES"
+    fi
+    showcmd systemctl list-units --no-pager --all --full "*.mount"
+    showcmd systemctl cat --no-pager --all --full "*.mount"
+    showcmd systemctl status --no-pager --all --full "*.mount"
+    showcmd cat /etc/fstab
+    showcmd cat /proc/1/mountinfo
+}
+
+main > "$log" 2>&1
+echo "============ $NAME ============="
+cat "$log"
+EOF
+}
+
+add_systemd_job() {
+    local target="$1" name="$2" after="$3" start="$4"
+    local spath="lib/systemd/system/xdebug-$name.service"
+    debug 1 "writing $name to $target/$spath"
+    cat > "$target/$spath" <<EOF
+[Unit]
+Description=Execute xdebug ${name}
+After=${after}
+
+[Service]
+Type=oneshot
+ExecStart=${start} ${name}
+RemainAfterExit=yes
+StandardOutput=journal+console
+
+[Install]
+WantedBy=multi-user.target
+EOF
+    [ $? -eq 0 ] || { error "failed writing $target/$spath"; return 1; }
+    local wantsdir="$target/etc/systemd/system/multi-user.target.wants"
+    ln -s "/$spath" "$wantsdir/" ||
+        { error "failed ln -s '/$spath' '$wantsdir/'"; return 1; }
+}
+
+insert_debug_1788188() {
+    # This is an attempt to collect more debug information in the
+    # event that the tests trigger LP: #1788188.
+    local target="$1"
+    [ "$target" = "/" -o -z "$target" ] &&
+        { error "target was / in insert_debug"; return 1; }
+    local script="usr/local/bin/debug-mounts"
+    cat_debug_script > "$target/$script" &&
+        chmod 755 "$target/$script" ||
+       { error "failed writing $target/script"; return 1; }
+    local name=""
+    ( set +f;
+      rm -f "$target/lib/systemd/system/xdebug"-*.service \
+            "$target/etc/systemd/system/"*.wants/xdebug*.service )
+    add_systemd_job "$target" network network-online.target "/$script" &&
+        add_systemd_job "$target" local-fs local-fs.target "/$script" ||
+        { error "failed adding systemd jobs"; return 1; }
+}
+
+main() {
+    local short_opts="hv"
+    local long_opts="help,no-copy-apt,initrd:,kernel:,verbose"
+    local getopt_out="" orig_args=""
+    orig_args=( "$@" )
+    getopt_out=$(getopt --name "${0##*/}" \
+        --options "${short_opts}" --long "${long_opts}" -- "$@") &&
+        eval set -- "${getopt_out}" ||
+        { bad_Usage; return; }
+
+    local cur="" next=""
+    local kernel="" initrd="" copy_apt=true krd_only=false
+    local update_fstab=true
+
+    while [ $# -ne 0 ]; do
+        cur="$1"; next="$2";
+        case "$cur" in
+            -h|--help) Usage ; exit 0;;
+               --krd-only) krd_only=true; shift;;
+               --no-copy-apt) copy_apt=false; shift;;
+               --no-update-fstab) update_fstab=false; shift;;
+               --kernel) kernel=$next; shift;;
+               --initrd) initrd=$next; shift;;
+            -v|--verbose) VERBOSITY=$((${VERBOSITY}+1));;
+            --) shift; break;;
+        esac
+        shift;
+    done
+
+    [ $# -ne 0 ] || { bad_Usage "must provide at least image"; return; }
+
+    [ "$(id -u)" = "0" ] || fail "not root"
+    target="$1"
+    shift
+    if [ -f "$target" ]; then
+        local nargs=""
+        nargs=( "${orig_args[@]}" )
+        # replace the first occurance of target in orig args with _MOUNTPOINT_
+        for((i=0;i<${#nargs[@]};i++)); do
+            [ "${nargs[$i]}" = "$target" ] && nargs[$i]=_MOUNTPOINT_ && break
+        done
+        debug 1 "mic $target -- $0 ${nargs[*]}"
+        IMAGE="$target" exec mount-image-callback \
+            --system-resolvconf "$target" -- "$0" "${nargs[@]}"
+    fi
+
+    if [ ! -d "$target" ]; then
+        fail "$target: not a directory or file"
+    fi
+
+    local tsrc=${IMAGE:-${target}}
+    local packages=( )
+    packages=( "$@" )
+
+    if $krd_only; then
+        if [ "${#packages[@]}" != 0 -a "${packages[*]}" != "none" ]; then
+            error "--krd-only is incompatible with packages."
+            return 1
+        fi
+        debug 1 "--krd-only provided no changes will be done."
+        copy_apt=false
+        update_fstab=false
+        packages=( "none" )
+    fi
+
+    if [ "${#packages[@]}" = "1" -a "${packages[0]}" = "none" ]; then
+        packages=( )
+    elif [ "${#packages[@]}" -eq 0 -a -n "${ADT_TEST_TRIGGERS}" ]; then
+        adt_test_triggers_to_bin_pkgs ${ADT_TEST_TRIGGERS} ||
+            fail "failed to find binary packages " \
+                "from ADT_TEST_TRIGGERS=$ADT_TEST_TRIGGERS"
+        packages=( $_RET )
+        debug 1 "read ADT_TEST_TRIGGERS=$ADT_TEST_TRIGGERS to set" \
+            "packages=${packages[*]}"
+    else
+        local opackages="" debs="" pkg=""
+        opackages=( "${packages[@]}" )
+        packages=( )
+        debs=( )
+        for pkg in "${opackages[@]}"; do
+            [ -f "${pkg}" ] && debs[${#debs[@]}]="$pkg" ||
+                packages[${packages[@]}]="$pkg"
+        done
+        if [ "${#packages[@]}" -eq 0 -a "${#debs[@]}" -eq 0 ]; then
+            packages=( open-iscsi )
+            debug 1 "no packages or debs given, using packages=${packages[*]}"
+        fi
+    fi
+
+    # if open-iscsi is not in the packages list above, we handle it specifically
+    # so that even if the image did not have open-iscsi, it will get it.
+    local pkg="" mypkg="open-iscsi"
+    for pkg in "${packages[@]}"; do
+        case "$pkg" in
+            open-iscsi|open-iscsi/*) mypkg="none";;
+        esac
+    done
+
+    TEMP_D=$(mktemp -d "${TMPDIR:-/tmp}/${0##*/}.XXXXXX") ||
+        fail "failed to make tempdir"
+    trap cleanup EXIT
+
+    if $copy_apt; then
+        local distdir="${target}/etc/apt.dist.${0##*/}"
+        if [ ! -d "$distdir" ]; then
+            mv "$target/etc/apt" "$distdir" ||
+                fail "failed to backup /etc/apt in $tsrc"
+        fi
+        cp -a /etc/apt "$target/etc/" ||
+            fail "failed to replace /etc/apt in $tsrc"
+
+        # find file:// repos in apt sources and copy them in
+        local file_repos=""
+        file_repos=$(
+            fm='s,.*[[:space:]]file:///*\([^[[:space:]]*\).*,/\1,p'
+            shopt -s nullglob
+            for f in /etc/apt/sources.list /etc/apt/sources.list.d/*.list; do
+                sed -n -e 's/#.*//' -e "$fm" "$f"
+            done
+        )
+        local dir="" bdir="" tdir=""
+        for dir in ${file_repos}; do
+            tdir="${target}$(dirname $dir)/$(basename ${dir})"
+            if [ -d "$dir" ]; then
+                debug 1 "copying $dir -> $tdir"
+                mkdir -p "$tdir" ||
+                    fail "failed to create $tdir"
+                rsync --delete -a "$dir/" "$tdir" ||
+                    fail "failed copy from $dir/ to $tdir"
+            fi
+        done
+    fi
+
+    if $update_fstab; then
+        update_fstab "$target/etc/fstab" ||
+            { error "failed updating /etc/fstab in target"; return 1; }
+    fi
+
+    insert_debug_1788188 "$target" || return 1
+
+    mount -o bind /sys "$target"/sys || :
+    mount -o bind /proc "$target"/proc || :
+    mount -o bind /dev "$target"/dev || :
+    mount -o bind /dev/pts "$target"/dev/pts || :
+
+    debug 1 "${#packages[@]} packages: ${packages[*]}"
+    if [ "${#packages[@]}" != "0" ]; then
+        DEBIAN_FRONTEND=noninteractive chroot "$target" sh -exc '
+            mypkg=$1
+            shift
+            apt-get update -q
+            if [ "$mypkg" != "none" ]; then
+                apt-get install -qy "$mypkg"
+            fi
+            apt-get install -qy --only-upgrade "$@"' \
+                chroot-inst "$mypkg" "${packages[@]}" ||
+            fail "failed to install ${packages[*]} in $target"
+    fi
+
+    debug 1 "${#debs[@]} debs: ${debs[*]}"
+    if [ "${#debs[@]}" != "0" ]; then
+        local tmpd=""
+        tmpd=$(mktemp -d "${target}/tmp/${0##*/}.XXXXXX")
+        cp "${debs[@]}" "$tmpd"
+        DEBIAN_FRONTEND=noninteractive chroot "$target" sh -exc \
+            'cd "$1"; shift; dpkg -i *.deb' debinstalls "${tmpd#${target}}"
+        rm -Rf "${tmpd}"
+    fi
+
+    umount "$target"/dev/pts || :
+    umount "$target"/dev || :
+    umount "$target"/proc || :
+    umount "$target"/sys || :
+
+    local kpath="" ipath=""
+    if [ -z "$(ls -A "$target"/boot)" ]; then
+        # If /boot is empty, most likely there is a separate
+        # /boot partition in the image. This assumes it to be
+        # the last one in the list of partitions.
+        local device="$(find /dev/nbd*p* | sort | tail -n 1)"
+        mount "$device" "$target"/boot
+    fi
+    for f in "$target/boot/"*; do
+        case "${f##*/}" in
+            *.signed) continue;;
+            vmlinu?-*) kpath="$f";;
+            initrd.img-*) ipath="$f";;
+        esac
+    done
+
+    if [ -n "$kernel" ]; then
+        [ -n "$kpath" ] || fail "unable to find kernel in $tsrc"
+        debug 1 "using kernel ${kpath#${target}}"
+        cp "$kpath" "$kernel" ||
+            fail "failed copy $kpath to $kernel"
+        [ -z "$IMAGE" ] || chown "--reference=$IMAGE" "$kernel"
+    fi
+
+    if [ -n "$initrd" ]; then
+        [ -n "$ipath" ] || fail "unable to find initrd in $tsrc"
+        debug 1 "using initrd ${ipath#${target}}"
+        cp "$ipath" "$initrd" ||
+            fail "failed copy $ipath to $initrd"
+        [ -z "$IMAGE" ] || chown "--reference=$IMAGE" "$initrd"
+    fi
+
+}
+
+main "$@"
+
+# vi: ts=4 expandtab
diff --git a/debian/tests/test-open-iscsi.py b/debian/tests/test-open-iscsi.py
new file mode 100644
index 0000000..e241be9
--- /dev/null
+++ b/debian/tests/test-open-iscsi.py
@@ -0,0 +1,427 @@
+#!/usr/bin/python3
+#
+#    test-open-iscsi.py quality assurance test script for open-iscsi
+#    Copyright (C) 2011 Canonical Ltd.
+#    Author: Jamie Strandboge <[e-mail]>
+#
+#    This program is free software: you can redistribute it and/or modify
+#    it under the terms of the GNU General Public License version 3,
+#    as published by the Free Software Foundation.
+#
+#    This program is distributed in the hope that it will be useful,
+#    but WITHOUT ANY WARRANTY; without even the implied warranty of
+#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+#    GNU General Public License for more details.
+#
+#    You should have received a copy of the GNU General Public License
+#    along with this program. If not, see <http://www.gnu.org/licenses/>.
+#
+# packages required for test to run:
+# QRT-Packages: open-iscsi
+# packages where more than one package can satisfy a runtime requirement:
+# QRT-Alternates: 
+# files and directories required for the test to run:
+# QRT-Depends: 
+# privilege required for the test to run (remove line if running as user is okay):
+# QRT-Privilege: root
+
+'''
+    In general, this test should be run in a virtual machine (VM) or possibly
+    a chroot and not on a production machine. While efforts are made to make
+    these tests non-destructive, there is no guarantee this script will not
+    alter the machine. You have been warned.
+
+    How to run in a clean VM:
+    $ sudo apt-get -y install <QRT-Packages> && sudo ./test-PKG.py -v'
+
+    How to run in a clean schroot named 'lucid':
+    $ schroot -c lucid -u root -- sh -c 'apt-get -y install <QRT-Packages> && ./test-PKG.py -v'
+
+
+    NOTES:
+    - currently only tested on Ubuntu 8.04
+'''
+
+from __future__ import print_function
+
+from netifaces import gateways, AF_INET
+import unittest, subprocess, sys, os, glob
+import shutil
+import testlib
+import textwrap
+from tempfile import mkdtemp
+import time
+
+# There are setup based on README.multipurpose-vm. Feel free to override.
+remote_server = ''
+username = 'ubuntu'
+password = 'passwd'
+username_in = 'ubuntu'
+password_in = 'ubuntupasswd'
+initiatorname = 'iqn.2009-10.com.example.hardy-multi:iscsi-01'
+
+COLLECT_USER_DATA = """\
+#cloud-config
+bukket:
+ - &get_resolved_status |
+   if [ "${1:--}" != "-" ]; then
+      exec >"$1" 2>&1
+   fi
+   if ! command -v resolvectl >/dev/null 2>&1; then
+       echo "resolvectl: not available."
+       exit
+   fi
+   if ! ( resolvectl --help | grep -q -- status ); then
+       echo "resolvectl: no status."
+       exit
+   fi
+   resolvectl status --no-pager
+
+ - &get_iscsid_status |
+   [ "${1:--}" != "-" ] && exec >"$1" 2>&1
+   udevadm settle
+   systemctl is-active iscsid.service
+   systemctl status --no-pager --full iscsid.service
+
+ - &add_and_remove_tuntap |
+   #!/bin/sh
+   # LP: #1785108 would break dns when any device was removed.
+   tapdev="mytap0"
+   echo ==== Adding $tapdev ====
+   ip tuntap add mode tap user root $tapdev
+   udevadm settle
+   echo ==== Removing $tapdev ====
+   ip tuntap del mode tap $tapdev
+   udevadm settle
+
+ - &collect_debug_mounts |
+   [ "${1:--}" != "-" ] && exec >"$1" 2>&1
+   [ -x /usr/local/bin/debug-mounts ] || exit 0
+   /usr/local/bin/debug-mounts
+
+runcmd:
+ - [ sh, -c, *add_and_remove_tuntap ]
+ - [ mkdir, -p, /output ]
+ - [ cp, /etc/resolv.conf, /output ]
+ - [ sh, -c, *get_resolved_status, --, /output/systemd-resolve-status.txt ]
+ - [ sh, -c, *get_iscsid_status, --, /output/iscsid-status.txt ]
+ - [ sh, -c, *collect_debug_mounts, --, /output/debug-mounts.txt ]
+ - [ sh, -c, 'journalctl --boot=0 --output=short-monotonic > /output/journal.txt' ]
+ - [ sh, -c, 'dpkg-query --show > /output/manifest.txt' ]
+ - [ tar, -C, /output, -cf, /dev/disk/by-id/virtio-output-disk, . ]
+
+power_state:
+ mode: poweroff
+ message: cloud-init finished. Shutting down.
+ timeout: 60
+"""
+
+try:
+    from private.qrt.OpenIscsi import PrivateOpenIscsiTest
+except ImportError:
+    class PrivateOpenIscsiTest(object):
+        '''Empty class'''
+    print("Skipping private tests", file=sys.stdout)
+
+class OpenIscsiTest(testlib.TestlibCase, PrivateOpenIscsiTest):
+    '''Test my thing.'''
+
+    def setUp(self):
+        '''Set up prior to each test_* function'''
+        self.pidfile = "/var/run/iscsid.pid"
+        self.exe = "/sbin/iscsid"
+        self.daemon = testlib.TestDaemon("open-iscsi")
+        self.initiatorname_iscsi = '/etc/iscsi/initiatorname.iscsi'
+        self.iscsid_conf = '/etc/iscsi/iscsid.conf'
+
+    def tearDown(self):
+        '''Clean up after each test_* function'''
+        global remote_server
+        global initiatorname
+
+        # If remote server is setup, convert back to manual, logout, remove
+        # testlib configs and restart (in that order)
+        if remote_server != '':
+            testlib.cmd(['iscsiadm', '-m', 'node', '--targetname', initiatorname, '-p', '%s:3260' % remote_server, '--op=update', '--name', 'node.startup', '--value=manual'])
+            testlib.cmd(['iscsiadm', '-m', 'node', '--targetname', initiatorname, '-p', '%s:3260' % remote_server, '--op=update', '--name',  'node.conn[0].startup', '--value=manual'])
+            testlib.cmd(['iscsiadm', '-m', 'node', '--targetname', initiatorname, '-p', '%s:3260' % remote_server, '--logout'])
+
+        testlib.config_restore(self.initiatorname_iscsi)
+        testlib.config_restore(self.iscsid_conf)
+        self.daemon.restart()
+
+    def test_discovery_with_server(self):
+        '''Test iscsi_discovery to remote server'''
+        global remote_server
+        global username
+        global password
+        global username_in
+        global password_in
+        global initiatorname
+
+        if remote_server == '':
+            return self._skipped("--remote-server not specified")
+
+        contents = '''
+InitiatorName=%s
+InitiatorAlias=ubuntu
+''' % (initiatorname)
+        testlib.config_replace(self.initiatorname_iscsi, contents, True)
+
+        contents = '''
+node.session.auth.authmethod = CHAP
+node.session.auth.username = %s
+node.session.auth.password = %s
+node.session.auth.username_in = %s
+node.session.auth.password_in = %s
+
+discovery.sendtargets.auth.authmethod = CHAP
+discovery.sendtargets.auth.username = %s
+discovery.sendtargets.auth.password = %s
+discovery.sendtargets.auth.username_in = %s
+discovery.sendtargets.auth.password_in = %s
+''' % (username, password, username_in, password_in, username, password, username_in, password_in)
+        testlib.config_replace(self.iscsid_conf, contents, True)
+
+        self.assertTrue(self.daemon.restart())
+        time.sleep(2)
+        self.assertTrue(self.daemon.status()[0])
+
+        rc, report = testlib.cmd(["/sbin/iscsi_discovery", remote_server])
+        expected = 0
+        result = 'Got exit code %d, expected %d\n' % (rc, expected)
+        self.assertEqual(expected, rc, result + report)
+        for i in ['starting discovery to %s' % remote_server,
+                  'Testing iser-login to target %s portal %s' % (initiatorname, remote_server),
+                  'starting to test tcp-login to target %s portal %s' % (initiatorname, remote_server),
+                  'discovered 1 targets at %s, connected to 1' % remote_server]:
+            result = "Could not find '%s' in report:\n" % i
+            self.assertTrue(i in report, result + report)
+
+    def test_net_interface_handler_execute_bit(self):
+        '''Test /lib/open-iscsi/net-interface-handler is executable.'''
+        nih_path = '/lib/open-iscsi/net-interface-handler'
+        self.assertTrue(os.access(nih_path, os.X_OK))
+
+class CloudImageTest(testlib.TestlibCase, PrivateOpenIscsiTest):
+    '''Test the cloud image can boot on iscsi root.
+
+    See README-boot-test.md for more information.
+    '''
+
+    @classmethod
+    def setUpClass(cls):
+        reason = (
+            "Skipped Cloud Image test on {arch}. whitelisted are: {whitelist}")
+        whitelisted = os.environ.get('WHITELIST_ARCHES', 'amd64').split(",")
+        curarch = testlib.manager.dpkg_arch
+        if testlib.manager.dpkg_arch not in whitelisted:
+            raise unittest.SkipTest(
+                reason.format(arch=curarch, whitelist=whitelisted))
+
+        here = os.path.dirname(os.path.abspath(__file__))
+        os.environ['PATH'] = "%s:%s" % (here, os.environ['PATH'])
+        release = os.environ.get(
+            "ISCSI_TEST_RELEASE", testlib.ubuntu_release())
+        image_d = os.path.join(here, '{}.d'.format(release))
+        # Download MAAS ephemeral image.
+        info = {'release': release,
+                'image_d': image_d,
+                'root_image': os.path.join(image_d, 'disk.img'),
+                'kernel': os.path.join(image_d, 'kernel'),
+                'initrd': os.path.join(image_d, 'initrd')}
+        try:
+            get_image(info['image_d'], release)
+        except subprocess.CalledProcessError as e:
+            if e.return_code != 3:
+                raise e
+            raise unittest.SkipTest(
+                "Cloud Image not available for release '%s'." % release)
+        if os.environ.get("NO_PATCH_IMAGE", "0") == "0":
+            patch_image(info['root_image'],
+                        kernel=info['kernel'], initrd=info['initrd'])
+        cls.info = info
+        cls.here = here
+
+    def tearDown(self):
+        super(CloudImageTest, self).tearDown()
+        if os.path.exists(self.tmpdir):
+            shutil.rmtree(self.tmpdir)
+
+    def setUp(self):
+        super(CloudImageTest, self).setUp()
+        self.tmpdir = mkdtemp()
+        udp = os.path.join(self.tmpdir, 'user-data')
+        with open(udp, "w") as fp:
+            fp.write(COLLECT_USER_DATA)
+        self.info['user-data'] = udp
+
+    def create_output_disk(self):
+        path = os.path.join(self.tmpdir, 'output-disk.img')
+        subprocess.check_call([
+            'qemu-img', 'create', '-f',  'raw', path, '10M'])
+        return path
+
+    def extract_files(self, path):
+        # get contents in a dictionary of tarball at 'path'
+        tmpdir = mkdtemp()
+        try:
+            subprocess.check_call(['tar', '-C', tmpdir, '-xf', path])
+            flist = {}
+            prefix = len(tmpdir) + 1
+            for root, dirs, files in os.walk(tmpdir):
+                for fname in files:
+                    fpath = os.path.join(root, fname)
+                    key = fpath[prefix:]
+                    with open(fpath, "r") as fp:
+                        flist[key] = fp.read()
+            return flist
+        finally:
+            shutil.rmtree(tmpdir)
+
+    def test_tgt_boot(self):
+        tgt_boot_cmd = os.path.join(self.here, 'tgt-boot-test')
+        # Add self.here to PATH so xkvm will be available to tgt-boot-test
+        dns_addr = '10.1.1.4'
+        rel_dir = '{}.d'.format(self.info['release'])
+        dns_search = 'example.com'
+        info = {'host': '10.1.1.2', 'dns': dns_addr,
+                'dnssearch': dns_search, 'network': '10.1.1.0/24'}
+        netdev = ("--netdev=user,net={network},host={host},dns={dns},"
+                  "dnssearch={dnssearch}").format(**info)
+
+        artifacts_dir = os.environ.get('AUTOPKGTEST_ARTIFACTS')
+        if artifacts_dir and not os.path.isdir(artifacts_dir):
+            os.makedirs(artifacts_dir)
+
+        output_disk = self.create_output_disk()
+        cmd = [
+            tgt_boot_cmd, '-v', netdev,
+            '--disk=%s,serial=output-disk' % output_disk,
+            '--user-data-add=%s' % self.info['user-data'],
+            self.info['root_image'], self.info['kernel'],
+            self.info['initrd']]
+        sys.stderr.write(' '.join(cmd) + "\n")
+
+        env = os.environ.copy()
+        env['BOOT_TIMEOUT'] = env.get('BOOT_TIMEOUT', '60m')
+        subprocess.check_call(cmd, env=env)
+
+        if artifacts_dir:
+            tgz = os.path.join(artifacts_dir, "tgt-collected.tar.gz")
+            shutil.copy(output_disk, tgz)
+            print("Copied output_disk '%s' to artifacts dir '%s'" %
+                  (output_disk, tgz))
+
+        files = self.extract_files(output_disk)
+        print("collected files: %s" % files.keys())
+        resolvconf = files.get('resolv.conf', "NO_RESOLVCONF_FOUND")
+        resolve_status = files.get('systemd-resolve-status.txt')
+
+        resolvconf_id = 'generated by resolvconf'
+        resolved_addr = "127.0.0.53"
+        if resolvconf_id in resolvconf:
+            print("resolvconf manages resolvconf.\n")
+            self.assertIn(
+                dns_addr, resolvconf,
+                msg = ("%s not in resolvconf contents: \n%s" %
+                       (dns_addr, resolvconf)))
+            if dns_search in resolvconf:
+                print("%s was found in resolv.conf." % dns_search)
+            elif resolved_addr in resolvconf and dns_search in resolve_status:
+                # zesty has resolvconf and systemd-resolved.
+                print("%s was in resolve_status and %s in resolv.conf" %
+                      (resolved_addr, dns_search))
+            else:
+                raise AssertionError(
+                    "%s domain is not being searched." % dns_search)
+
+        else:
+            print("systemd-resolved managing resolve.conf\n")
+            self.assertIn(
+                resolved_addr, resolvconf,
+                msg="%s not in resolved resolv.conf: %s" % (resolved_addr,
+                                                            resolvconf))
+            self.assertIn(dns_addr, resolve_status,
+                msg=("%s not in resolvectl status: %s" %
+                     (dns_addr, resolve_status)))
+            self.assertIn(dns_search, resolve_status,
+                msg=("search addr '%s' not in resolvectl status: %s" %
+                     (dns_search, resolve_status)))
+
+        # iscsid-status.txt has first line output from
+        # 'systemctl is-active iscsid.service' and then 'systemcl status'
+        iscsid_status = files.get('iscsid-status.txt')
+        is_active = iscsid_status.splitlines()[0]
+        self.assertEqual(
+            "active", is_active,
+            msg=("Expected iscsid.service active, found '%s'.\n%s\n" %
+                 (is_active, iscsid_status)))
+
+
+def get_image(top_d, release):
+    cmd = ['get-image', top_d, 'cloud-daily', release]
+    subprocess.check_call(cmd)
+
+
+def patch_image(image, packages=None, kernel=None, initrd=None):
+    '''Patch root-image with dep8 built open-iscsi package.'''
+
+    if packages is None:
+        # an empty 'packages' to patch-image still installs open-iscsi
+        packages = []
+
+    cmd = ['patch-image', image]
+    if kernel:
+        cmd.append('--kernel=%s' % kernel)
+    if initrd:
+        cmd.append('--initrd=%s' % initrd)
+    cmd.extend(packages)
+
+    subprocess.check_call(cmd)
+
+
+if __name__ == '__main__':
+    import optparse
+    parser = optparse.OptionParser()
+    parser.add_option("-v", "--verbose", dest="verbose", help="Verbose", action="store_true")
+    parser.add_option("-s", "--remote-server", dest="remote_server", help="Specify host with available iSCSI volumes", metavar="HOST")
+
+    parser.add_option("-n", "--initiatorname", dest="initiatorname", help="Specify initiatorname for use with --remote-server", metavar="NAME")
+
+    parser.add_option("--password", dest="password", help="Specify password for use with --remote-server", metavar="PASS")
+    parser.add_option("--password-in", dest="password_in", help="Specify password_in for use with --remote-server", metavar="PASS")
+
+    parser.add_option("--username", dest="username", help="Specify username for use with --remote-server", metavar="USER")
+    parser.add_option("--username-in", dest="username_in", help="Specify username_in for use with --remote-server", metavar="USER")
+
+    (options, args) = parser.parse_args()
+
+    if options.remote_server:
+        remote_server = options.remote_server
+
+        if options.username:
+            username = options.username
+        if options.password:
+            password = options.password
+        if options.username_in:
+            username_in = options.username_in
+        if options.password_in:
+            password_in = options.password_in
+        if options.initiatorname:
+            initiatorname = options.initiatorname
+        print("Connecting to remote server with:")
+        print(" host = %s " % remote_server)
+        print(' initiatorname = %s' % initiatorname)
+        print(' username = %s' % username)
+        print(' password = %s' % password)
+        print(' username_in = %s' % username_in)
+        print(' password_in = %s' % password_in)
+
+    suite = unittest.TestSuite()
+    suite.addTest(unittest.TestLoader().loadTestsFromTestCase(OpenIscsiTest))
+    suite.addTest(unittest.TestLoader().loadTestsFromTestCase(
+        CloudImageTest))
+    rc = unittest.TextTestRunner(verbosity=2).run(suite)
+    if not rc.wasSuccessful():
+        sys.exit(1)
diff --git a/debian/tests/testlib.py b/debian/tests/testlib.py
new file mode 100644
index 0000000..dce4252
--- /dev/null
+++ b/debian/tests/testlib.py
@@ -0,0 +1,1488 @@
+from __future__ import print_function
+#
+#    testlib.py quality assurance test script
+#    Copyright (C) 2008-2016 Canonical Ltd.
+#
+#    This library is free software; you can redistribute it and/or
+#    modify it under the terms of the GNU Library General Public
+#    License as published by the Free Software Foundation; either
+#    version 2 of the License.
+#
+#    This library is distributed in the hope that it will be useful,
+#    but WITHOUT ANY WARRANTY; without even the implied warranty of
+#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+#    Library General Public License for more details.
+#
+#    You should have received a copy of the GNU Library General Public
+#    License along with this program.  If not, see
+#    <http://www.gnu.org/licenses/>.
+#
+
+'''Common classes and functions for package tests.'''
+
+import crypt
+import glob
+import grp
+import gzip
+import os
+import os.path
+import platform
+import pwd
+import random
+import re
+import shutil
+import socket
+import string
+import subprocess
+import sys
+import tempfile
+import time
+import unittest
+
+from stat import ST_SIZE
+
+# Don't make python-pexpect mandatory
+try:
+    import pexpect
+except ImportError:
+    pass
+
+import warnings
+warnings.filterwarnings('ignore', message=r'.*apt_pkg\.TagFile.*', category=DeprecationWarning)
+try:
+    import apt_pkg
+    # cope with apt_pkg api changes.
+    if 'init_system' in dir(apt_pkg):
+        apt_pkg.init_system()
+    else:
+        apt_pkg.InitSystem()
+except:
+    # On non-Debian system, fall back to simple comparison without debianisms
+    class apt_pkg(object):
+        @staticmethod
+        def version_compare(one, two):
+            list_one = one.split('.')
+            list_two = two.split('.')
+            while len(list_one) > 0 and len(list_two) > 0:
+                try:
+                    if int(list_one[0]) > int(list_two[0]):
+                        return 1
+                    if int(list_one[0]) < int(list_two[0]):
+                        return -1
+                except:
+                    # ugh, non-numerics in the version, fall back to
+                    # string comparison, which will be wrong for e.g.
+                    # 3.2 vs 3.16rc1
+                    if list_one[0] > list_two[0]:
+                        return 1
+                    if list_one[0] < list_two[0]:
+                        return -1
+                list_one.pop(0)
+                list_two.pop(0)
+            return 0
+
+        @staticmethod
+        def VersionCompare(one, two):
+            return apt_pkg.version_compare(one, two)
+
+bogus_nxdomain = "208.69.32.132"
+
+# http://www.chiark.greenend.org.uk/ucgi/~cjwatson/blosxom/2009-07-02-python-sigpipe.html
+# This is needed so that the subprocesses that produce endless output
+# actually quit when the reader goes away.
+import signal
+def subprocess_setup():
+    # Python installs a SIGPIPE handler by default. This is usually not what
+    # non-Python subprocesses expect.
+    signal.signal(signal.SIGPIPE, signal.SIG_DFL)
+
+
+class TimedOutException(Exception):
+    def __init__(self, value="Timed Out"):
+        self.value = value
+
+    def __str__(self):
+        return repr(self.value)
+
+
+def _restore_backup(path):
+    pathbackup = path + '.autotest'
+    if os.path.exists(pathbackup):
+        shutil.move(pathbackup, path)
+
+
+def _save_backup(path):
+    pathbackup = path + '.autotest'
+    if os.path.exists(path) and not os.path.exists(pathbackup):
+        shutil.copy2(path, pathbackup)
+        # copy2 does not copy ownership, so do it here.
+        # Reference: http://docs.python.org/library/shutil.html
+        a = os.stat(path)
+        os.chown(pathbackup, a[4], a[5])
+
+
+def config_copydir(path):
+    if os.path.exists(path) and not os.path.isdir(path):
+        raise OSError("'%s' is not a directory" % (path))
+    _restore_backup(path)
+
+    pathbackup = path + '.autotest'
+    if os.path.exists(path):
+        shutil.copytree(path, pathbackup, symlinks=True)
+
+
+def config_replace(path, contents, append=False):
+    '''Replace (or append) to a config file'''
+    _restore_backup(path)
+    if os.path.exists(path):
+        _save_backup(path)
+        if append:
+            with open(path) as fh:
+                contents = fh.read() + contents
+    with open(path, 'w') as fh:
+        fh.write(contents)
+
+
+def config_comment(path, field):
+    _save_backup(path)
+    contents = ""
+    with open(path) as fh:
+        for line in fh:
+            if re.search("^\s*%s\s*=" % (field), line):
+                line = "#" + line
+            contents += line
+
+    with open(path + '.new', 'w') as new_fh:
+        new_fh.write(contents)
+    os.rename(path + '.new', path)
+
+
+def config_set(path, field, value, spaces=True):
+    _save_backup(path)
+    contents = ""
+    if spaces:
+        setting = '%s = %s\n' % (field, value)
+    else:
+        setting = '%s=%s\n' % (field, value)
+    found = False
+    with open(path) as fh:
+        for line in fh:
+            if re.search("^\s*%s\s*=" % (field), line):
+                found = True
+                line = setting
+            contents += line
+    if not found:
+        contents += setting
+
+    with open(path + '.new', 'w') as new_config:
+        new_config.write(contents)
+    os.rename(path + '.new', path)
+
+
+def config_patch(path, patch, depth=1):
+    '''Patch a config file'''
+    _restore_backup(path)
+    _save_backup(path)
+
+    handle, name = mkstemp_fill(patch)
+    rc = subprocess.call(['/usr/bin/patch', '-p%s' % depth, path], stdin=handle, stdout=subprocess.PIPE)
+    os.unlink(name)
+    if rc != 0:
+        raise Exception("Patch failed")
+
+
+def config_restore(path):
+    '''Rename a replaced config file back to its initial state'''
+    _restore_backup(path)
+
+
+def timeout(secs, f, *args):
+    def handler(signum, frame):
+        raise TimedOutException()
+
+    old = signal.signal(signal.SIGALRM, handler)
+    result = None
+    signal.alarm(secs)
+    try:
+        result = f(*args)
+    finally:
+        signal.alarm(0)
+        signal.signal(signal.SIGALRM, old)
+
+    return result
+
+
+def require_nonroot():
+    if os.geteuid() == 0:
+        print("This series of tests should be run as a regular user with sudo access, not as root.", file=sys.stderr)
+        sys.exit(1)
+
+
+def require_root():
+    if os.geteuid() != 0:
+        print("This series of tests should be run with root privileges (e.g. via sudo).", file=sys.stderr)
+        sys.exit(1)
+
+
+def require_sudo():
+    if os.geteuid() != 0 or os.environ.get('SUDO_USER', None) is None:
+        print("This series of tests must be run under sudo.", file=sys.stderr)
+        sys.exit(1)
+    if os.environ['SUDO_USER'] == 'root':
+        print('Please run this test using sudo from a regular user. (You ran sudo from root.)', file=sys.stderr)
+        sys.exit(1)
+
+
+def random_string(length, lower=False):
+    '''Return a random string, consisting of ASCII letters, with given
+    length.'''
+
+    s = ''
+    selection = string.ascii_letters
+    if lower:
+        selection = string.ascii_lowercase
+    maxind = len(selection) - 1
+    for l in range(length):
+        s += selection[random.randint(0, maxind)]
+    return s
+
+
+def mkstemp_fill(contents, suffix='', prefix='testlib-', dir=None):
+    '''As tempfile.mkstemp does, return a (file, name) pair, but with
+    prefilled contents.'''
+
+    handle, name = tempfile.mkstemp(suffix=suffix, prefix=prefix, dir=dir)
+    os.close(handle)
+    handle = open(name, "w+")
+    handle.write(contents)
+    handle.flush()
+    handle.seek(0)
+
+    return handle, name
+
+
+def create_fill(path, contents, mode=0o644):
+    '''Safely create a page'''
+    # make the temp file in the same dir as the destination file so we
+    # don't get invalid cross-device link errors when we rename
+    handle, name = mkstemp_fill(contents, dir=os.path.dirname(path))
+    handle.close()
+    os.rename(name, path)
+    os.chmod(path, mode)
+
+
+def login_exists(login):
+    '''Checks whether the given login exists on the system.'''
+
+    try:
+        pwd.getpwnam(login)
+        return True
+    except KeyError:
+        return False
+
+
+def group_exists(group):
+    '''Checks whether the given login exists on the system.'''
+
+    try:
+        grp.getgrnam(group)
+        return True
+    except KeyError:
+        return False
+
+
+def is_empty_file(path):
+    '''test if file is empty, returns True if so'''
+    with open(path) as fh:
+        return (len(fh.read()) == 0)
+
+
+def recursive_rm(dirPath, contents_only=False):
+    '''recursively remove directory'''
+    names = os.listdir(dirPath)
+    for name in names:
+        path = os.path.join(dirPath, name)
+        if os.path.islink(path) or not os.path.isdir(path):
+            os.unlink(path)
+        else:
+            recursive_rm(path)
+    if not contents_only:
+        os.rmdir(dirPath)
+
+
+def check_pidfile(exe, pidfile):
+    '''Checks if pid in pidfile is running'''
+    if not os.path.exists(pidfile):
+        return False
+
+    # get the pid
+    try:
+        with open(pidfile, 'r') as fd:
+            pid = fd.readline().rstrip('\n')
+    except:
+        return False
+
+    return check_pid(exe, pid)
+
+
+def check_pid(exe, pid):
+    '''Checks if pid is running'''
+    cmdline = "/proc/%s/cmdline" % (str(pid))
+    if not os.path.exists(cmdline):
+        return False
+
+    # get the command line
+    try:
+        with open(cmdline, 'r') as fd:
+            tmp = fd.readline().split('\0')
+    except:
+        return False
+
+    # this allows us to match absolute paths or just the executable name
+    if re.match('^' + exe + '$', tmp[0]) or \
+       re.match('.*/' + exe + '$', tmp[0]) or \
+       re.match('^' + exe + ': ', tmp[0]) or \
+       re.match('^\(' + exe + '\)', tmp[0]):
+        return True
+
+    return False
+
+
+def check_port(port, proto, ver=4):
+    '''Check if something is listening on the specified port.
+       WARNING: for some reason this does not work with a bind mounted /proc
+    '''
+    assert (port >= 1)
+    assert (port <= 65535)
+    assert (proto.lower() == "tcp" or proto.lower() == "udp")
+    assert (ver == 4 or ver == 6)
+
+    fn = "/proc/net/%s" % (proto)
+    if ver == 6:
+        fn += str(ver)
+
+    rc, report = cmd(['cat', fn])
+    assert (rc == 0)
+
+    hport = "%0.4x" % port
+
+    if re.search(': [0-9a-f]{8}:%s [0-9a-f]' % str(hport).lower(), report.lower()):
+        return True
+    return False
+
+
+def get_arch():
+    '''Get the current architecture'''
+    rc, report = cmd(['uname', '-m'])
+    assert (rc == 0)
+    return report.strip()
+
+
+def get_multiarch_tuple():
+    '''Get the current debian multiarch tuple'''
+
+    # XXX dpkg-architecture on Ubuntu 12.04 requires -q be adjacent to
+    # the variable name
+    rc, report = cmd(['dpkg-architecture', '-qDEB_HOST_MULTIARCH'])
+    assert (rc == 0)
+    return report.strip()
+
+
+def get_bits():
+    '''return the default architecture number of bits (32 or 64, usually)'''
+    return platform.architecture()[0][0:2]
+
+
+def get_memory():
+    '''Gets total ram and swap'''
+    meminfo = "/proc/meminfo"
+    memtotal = 0
+    swaptotal = 0
+    if not os.path.exists(meminfo):
+        return (False, False)
+
+    try:
+        fd = open(meminfo, 'r')
+        for line in fd.readlines():
+            splitline = line.split()
+            if splitline[0] == 'MemTotal:':
+                memtotal = int(splitline[1])
+            elif splitline[0] == 'SwapTotal:':
+                swaptotal = int(splitline[1])
+        fd.close()
+    except:
+        return (False, False)
+
+    return (memtotal, swaptotal)
+
+
+def is_running_in_vm():
+    '''Check if running under a VM'''
+    # add other virtualization environments here
+    for search in ['QEMU Virtual CPU']:
+        rc, report = cmd_pipe(['dmesg'], ['grep', search])
+        if rc == 0:
+            return True
+    return False
+
+
+def ubuntu_release():
+    '''Get the Ubuntu release'''
+    f = "/etc/lsb-release"
+    try:
+        size = os.stat(f)[ST_SIZE]
+    except:
+        return "UNKNOWN"
+
+    if size > 1024 * 1024:
+        raise IOError('Could not open "%s" (too big)' % f)
+
+    with open("/etc/lsb-release", 'r') as fh:
+        lines = fh.readlines()
+
+    pat = re.compile(r'DISTRIB_CODENAME')
+    for line in lines:
+        if pat.search(line):
+            return line.split('=')[1].rstrip('\n').rstrip('\r')
+
+    return "UNKNOWN"
+
+
+def cmd(command, input=None, stderr=subprocess.STDOUT, stdout=subprocess.PIPE, stdin=None, timeout=None, env=None, shell=False, text=True):
+    '''Try to execute given command (array) and return its stdout, or return
+    a textual error if it failed.'''
+
+    try:
+        sp = subprocess.Popen(command, stdin=stdin, stdout=stdout, stderr=stderr, close_fds=True, preexec_fn=subprocess_setup, env=env, universal_newlines=text, shell=shell)
+        if sys.version_info[0] >= 3 and sys.version_info[1] > 3:
+            out, outerr = sp.communicate(input, timeout=timeout)
+        else:
+            out, outerr = sp.communicate(input)
+    except OSError as e:
+        return [127, str(e)]
+
+    # Handle redirection of stdout
+    if out is None:
+        out = ''
+    # Handle redirection of stderr
+    if outerr is None:
+        outerr = ''
+    if text == False:
+        out = str(out)
+    return [sp.returncode, out + outerr]
+
+
+def cmd_pipe(command1, command2, input=None, stderr=subprocess.STDOUT, stdin=None):
+    '''Try to pipe command1 into command2.'''
+    try:
+        sp1 = subprocess.Popen(command1, stdin=stdin, stdout=subprocess.PIPE, stderr=stderr, close_fds=True)
+        sp2 = subprocess.Popen(command2, stdin=sp1.stdout, stdout=subprocess.PIPE, stderr=stderr, close_fds=True, universal_newlines=True)
+    except OSError as e:
+        return [127, str(e)]
+
+    out = sp2.communicate(input)[0]
+    # ensure we don't leak open files and that sp1 is stopped
+    sp1.stdout.close()
+    sp1.wait()
+    return [sp2.returncode, out]
+
+
+def cwd_has_enough_space(cdir, total_bytes):
+    '''Determine if the partition of the current working directory has 'bytes'
+       free.'''
+    rc, df_output = cmd(['df'])
+    if rc != 0:
+        result = 'df failed, got exit code %d, expected %d\n' % (rc, 0)
+        raise OSError(result)
+    if rc != 0:
+        return False
+
+    kb = total_bytes / 1024
+
+    mounts = dict()
+    for line in df_output.splitlines():
+        if '/' not in line:
+            continue
+        tmp = line.split()
+        mounts[tmp[5]] = int(tmp[3])
+
+    cdir = os.getcwd()
+    while cdir != '/':
+        if cdir not in mounts:
+            cdir = os.path.dirname(cdir)
+            continue
+        return kb < mounts[cdir]
+
+    return kb < mounts['/']
+
+
+def get_md5(filename):
+    '''Gets the md5sum of the file specified'''
+
+    (rc, report) = cmd(["/usr/bin/md5sum", "-b", filename])
+    expected = 0
+    assert (expected == rc)
+
+    return report.split(' ')[0]
+
+
+def dpkg_compare_installed_version(pkg, check, version):
+    '''Gets the version for the installed package, and compares it to the
+       specified version.
+    '''
+    (rc, report) = cmd(["/usr/bin/dpkg", "-s", pkg])
+    assert (rc == 0)
+    assert ("Status: install ok installed" in report)
+    installed_version = ""
+    for line in report.splitlines():
+        if line.startswith("Version: "):
+            installed_version = line.split()[1]
+
+    assert (installed_version != "")
+
+    (rc, report) = cmd(["/usr/bin/dpkg", "--compare-versions", installed_version, check, version])
+    assert (rc == 0 or rc == 1)
+    if rc == 0:
+        return True
+    return False
+
+
+def _run_apt_command(pkg_list, apt_cmd='install'):
+    env = os.environ.copy()
+    env['DEBIAN_FRONTEND'] = 'noninteractive'
+    # debugging version, but on precise doesn't actually run dpkg
+    # command = ['apt-get', '-y', '--force-yes', '-o', 'Dpkg::Options::=--force-confold', '-o', 'Debug::pkgDPkgPM=true', apt_cmd]
+    command = ['apt-get', '-y', '--force-yes', '-o', 'Dpkg::Options::=--force-confold', apt_cmd]
+    command.extend(pkg_list)
+    rc, report = cmd(command)
+    return rc, report
+
+
+# note: for the following install_* functions, you probably want the
+# versions in the TestlibCase class (see below)
+def install_builddeps(src_pkg):
+    rc, report = _run_apt_command([src_pkg], 'build-dep')
+    assert(rc == 0)
+
+
+def install_package(package):
+    rc, report = _run_apt_command([package], 'install')
+    assert(rc == 0)
+
+
+def install_packages(pkg_list):
+    rc, report = _run_apt_command(pkg_list, 'install')
+    assert(rc == 0)
+
+
+def prepare_source(source, builder, cached_src, build_src, patch_system):
+    '''Download and unpack source package, installing necessary build depends,
+       adjusting the permissions for the 'builder' user, and returning the
+       directory of the unpacked source. Patch system can be one of:
+       - cdbs
+       - dpatch
+       - quilt
+       - quiltv3
+       - None (not the string)
+
+       This is normally used like this:
+
+       def setUp(self):
+           ...
+           self.topdir = os.getcwd()
+           self.cached_src = os.path.join(os.getcwd(), "source")
+           self.tmpdir = tempfile.mkdtemp(prefix='testlib', dir='/tmp')
+           self.builder = testlib.TestUser()
+           testlib.cmd(['chgrp', self.builder.login, self.tmpdir])
+           os.chmod(self.tmpdir, 0o775)
+
+       def tearDown(self):
+           ...
+           self.builder = None
+           self.topdir = os.getcwd()
+           if os.path.exists(self.tmpdir):
+               testlib.recursive_rm(self.tmpdir)
+
+       def test_suite_build(self):
+           ...
+           build_dir = testlib.prepare_source('foo', \
+                                         self.builder, \
+                                         self.cached_src, \
+                                         os.path.join(self.tmpdir, \
+                                           os.path.basename(self.cached_src)),
+                                         "quilt")
+           os.chdir(build_dir)
+
+           # Example for typical build, adjust as necessary
+           print("")
+           print("  make clean")
+           rc, report = testlib.cmd(['sudo', '-u', self.builder.login, 'make', 'clean'])
+
+           print("  configure")
+           rc, report = testlib.cmd(['sudo', '-u', self.builder.login, './configure', '--prefix=%s' % self.tmpdir, '--enable-debug'])
+
+           print("  make (will take a while)")
+           rc, report = testlib.cmd(['sudo', '-u', self.builder.login, 'make'])
+
+           print("  make check (will take a while)",)
+           rc, report = testlib.cmd(['sudo', '-u', self.builder.login, 'make', 'check'])
+           expected = 0
+           result = 'Got exit code %d, expected %d\n' % (rc, expected)
+           self.assertEqual(expected, rc, result + report)
+
+        def test_suite_cleanup(self):
+            ...
+            if os.path.exists(self.cached_src):
+                testlib.recursive_rm(self.cached_src)
+
+       It is up to the caller to clean up cached_src and build_src (as in the
+       above example, often the build_src is in a tmpdir that is cleaned in
+       tearDown() and the cached_src is cleaned in a one time clean-up
+       operation (eg 'test_suite_cleanup()) which must be run after the build
+       suite test (obviously).
+       '''
+
+    # Make sure we have a clean slate
+    assert (os.path.exists(os.path.dirname(build_src)))
+    assert (not os.path.exists(build_src))
+
+    cdir = os.getcwd()
+    if os.path.exists(cached_src):
+        shutil.copytree(cached_src, build_src)
+        os.chdir(build_src)
+    else:
+        # Only install the build dependencies on the initial setup
+        install_builddeps(source)
+        os.makedirs(build_src)
+        os.chdir(build_src)
+
+        # These are always needed
+        pkgs = ['build-essential', 'dpkg-dev', 'fakeroot']
+        install_packages(pkgs)
+
+        rc, report = cmd(['apt-get', 'source', source])
+        assert (rc == 0)
+        shutil.copytree(build_src, cached_src)
+        print("(unpacked %s)" % os.path.basename(glob.glob('%s_*.dsc' % source)[0]), end=' ')
+
+    unpacked_dir = os.path.join(build_src, glob.glob('%s-*' % source)[0])
+
+    # Now apply the patches. Do it here so that we don't mess up our cached
+    # sources.
+    os.chdir(unpacked_dir)
+    assert (patch_system in ['cdbs', 'dpatch', 'quilt', 'quiltv3', None])
+    if patch_system is not None and patch_system != "quiltv3":
+        if patch_system == "quilt":
+            os.environ.setdefault('QUILT_PATCHES', 'debian/patches')
+            rc, report = cmd(['quilt', 'push', '-a'])
+            assert (rc == 0)
+        elif patch_system == "cdbs":
+            rc, report = cmd(['./debian/rules', 'apply-patches'])
+            assert (rc == 0)
+        elif patch_system == "dpatch":
+            rc, report = cmd(['dpatch', 'apply-all'])
+            assert (rc == 0)
+
+    cmd(['chown', '-R', '%s:%s' % (builder.uid, builder.gid), build_src])
+    os.chdir(cdir)
+
+    return unpacked_dir
+
+
+def get_changelog_version(source_dir):
+    '''Extract a package version from a changelog'''
+    package_version = ""
+
+    changelog_file = os.path.join(source_dir, "debian/changelog")
+
+    if os.path.exists(changelog_file):
+        changelog = open(changelog_file, 'r')
+        header = changelog.readline().split()
+        package_version = header[1].strip('()')
+
+    return package_version
+
+
+def _aa_status():
+    '''Get aa-status output'''
+    exe = "/usr/sbin/aa-status"
+    assert (os.path.exists(exe))
+    if os.geteuid() == 0:
+        return cmd([exe])
+    return cmd(['sudo', exe])
+
+
+def is_apparmor_loaded(path):
+    '''Check if profile is loaded'''
+    rc, report = _aa_status()
+    if rc != 0:
+        return False
+
+    for line in report.splitlines():
+        if line.endswith(path):
+            return True
+    return False
+
+
+def is_apparmor_confined(path):
+    '''Check if application is confined'''
+    rc, report = _aa_status()
+    if rc != 0:
+        return False
+
+    for line in report.splitlines():
+        if re.search('%s \(' % path, line):
+            return True
+    return False
+
+
+def check_apparmor(path, first_ubuntu_release, is_running=True):
+    '''Check if path is loaded and confined for everything higher than the
+       first Ubuntu release specified.
+
+       Usage:
+        rc, report = testlib.check_apparmor('/usr/sbin/foo', 8.04, is_running=True)
+        if rc < 0:
+            return self._skipped(report)
+
+        expected = 0
+        result = 'Got exit code %d, expected %d\n' % (rc, expected)
+        self.assertEqual(expected, rc, result + report)
+     '''
+    global manager
+    rc = -1
+
+    if manager.lsb_release["Release"] < first_ubuntu_release:
+        return (rc, "Skipped apparmor check")
+
+    if not os.path.exists('/sbin/apparmor_parser'):
+        return (rc, "Skipped (couldn't find apparmor_parser)")
+
+    rc = 0
+    msg = ""
+    if not is_apparmor_loaded(path):
+        rc = 1
+        msg = "Profile not loaded for '%s'" % path
+
+    # this check only makes sense it the 'path' is currently executing
+    if is_running and rc == 0 and not is_apparmor_confined(path):
+        rc = 1
+        msg = "'%s' is not running in enforce mode" % path
+
+    return (rc, msg)
+
+
+def get_gcc_version(gcc, full=True):
+    gcc_version = 'none'
+    if not gcc.startswith('/'):
+        gcc = '/usr/bin/%s' % (gcc)
+    if os.path.exists(gcc):
+        gcc_version = 'unknown'
+        lines = cmd([gcc, '-v'])[1].strip().splitlines()
+        version_lines = [x for x in lines if x.startswith('gcc version')]
+        if len(version_lines) == 1:
+            gcc_version = " ".join(version_lines[0].split()[2:])
+    if not full:
+        return gcc_version.split()[0]
+    return gcc_version
+
+
+def is_kdeinit_running():
+    '''Test if kdeinit is running'''
+    # applications that use kdeinit will spawn it if it isn't running in the
+    # test. This is a problem because it does not exit. This is a helper to
+    # check for it.
+    rc, report = cmd(['ps', 'x'])
+    if 'kdeinit4 Running' not in report:
+        print("kdeinit not running (you may start/stop any KDE application then run this script again)", file=sys.stderr)
+        return False
+    return True
+
+
+def get_pkgconfig_flags(libs=[]):
+    '''Find pkg-config flags for libraries'''
+    assert (len(libs) > 0)
+    rc, pkg_config = cmd(['pkg-config', '--cflags', '--libs'] + libs)
+    expected = 0
+    if rc != expected:
+        print('Got exit code %d, expected %d\n' % (rc, expected), file=sys.stderr)
+    assert(rc == expected)
+    return pkg_config.split()
+
+
+def cap_to_name(cap_num):
+    '''given an integer, return the capability name'''
+    rc, output = cmd(['capsh', '--decode=%x' % cap_num])
+    expected = 0
+    if rc != expected:
+        print('capsh: got exit code %d, expected %d\n' % (rc, expected), file=sys.stderr)
+    cap_name = output.strip().split('=')[1]
+    return cap_name
+
+
+def enumerate_capabilities():
+    i = 0
+    cap_list = []
+    done = False
+    while not done:
+        cap_name = cap_to_name(pow(2, i))
+        if cap_name == str(i):
+            done = True
+        else:
+            cap_list.append(cap_name)
+            i += 1
+        if i > 64:
+            done = True
+    return cap_list
+
+
+def _run_snap_install(snapname, track="latest/stable", classic=False):
+    # crude, but effective
+    if os.path.exists(os.path.join("/snap", snapname)):
+        return 0, ""
+
+    command = ["snap", "install", "--channel=%s" % track, snapname]
+    if classic:
+        command.append("--classic")
+    rc, report = cmd(command)
+    return rc, report
+
+
+def _run_snap_remove(snapname):
+    # crude, but effective
+    if not os.path.exists(os.path.join("/snap", snapname)):
+        return 0, ""
+
+    command = ["snap", "remove", "--purge", snapname]
+    rc, report = cmd(command)
+    return rc, report
+
+
+def install_snap(self, snapname, track="latest/stable", classic=False):
+    rc, report = _run_snap_install(snapname, track, classic)
+    self.assertEqual(0, rc, "Failed to install snap %s\nOutput:\n%s" %
+                            (snapname, report))
+
+
+def remove_snap(self, snapname):
+    rc, report = _run_snap_remove(snapname)
+    self.assertEqual(0, rc, "Failed to install snap %s\nOutput:\n%s" %
+                            (snapname, report))
+
+
+class TestDaemon:
+    '''Helper class to manage daemons consistently'''
+    def __init__(self, service_name):
+        '''Setup daemon attributes'''
+        if os.path.isfile('/usr/sbin/service') or os.path.islink('/usr/sbin/service'):
+            self.test_daemon_commands = ['service', service_name]
+        else:
+            self.test_daemon_commands = ['/etc/init.d/' + service_name]
+
+    def _run_command(self, action, seconds_to_wait=2):
+        command = list(self.test_daemon_commands)
+        command.append(action)
+        rc, report = cmd(command)
+        expected = 0
+        result = 'Got exit code %d, expected %d\n' % (rc, expected)
+        time.sleep(seconds_to_wait)
+        if expected != rc:
+            return False, result + report
+
+        if "fail" in report:
+            return False, "Found 'fail' in report\n" + report
+
+        return True, ""
+
+    def start(self):
+        '''Start daemon'''
+        return self._run_command('start')
+
+    def stop(self):
+        '''Stop daemon'''
+        return self._run_command('stop')
+
+    def reload(self):
+        '''Reload daemon'''
+        return self._run_command('force-reload')
+
+    def restart(self):
+        if self.test_daemon_commands[0] == 'service':
+            return self._run_command('restart')
+        else:
+            '''Restart daemon'''
+            (res, str) = self.stop()
+            if not res:
+                return res, str
+
+            (res, str) = self.start()
+            if not res:
+                return res, str
+
+            return True, ""
+
+    def force_restart(self):
+        '''Restart daemon even if already stopped'''
+        self.stop()
+
+        (res, str) = self.start()
+        if not res:
+            return res, str
+
+        return True, ""
+
+    def status(self):
+        '''Check daemon status'''
+        return self._run_command('status')
+
+
+class TestlibManager(object):
+    '''Singleton class used to set up per-test-run information'''
+    def __init__(self):
+        # Set glibc aborts to dump to stderr instead of the tty so test output
+        # is more sane.
+        os.environ.setdefault('LIBC_FATAL_STDERR_', '1')
+
+        # check verbosity
+        self.verbosity = False
+        if (len(sys.argv) > 1 and '-v' in sys.argv[1:]):
+            self.verbosity = True
+
+        # Load LSB release file
+        self.lsb_release = dict()
+        if not os.path.exists('/usr/bin/lsb_release') and not os.path.exists('/bin/lsb_release'):
+            raise OSError("Please install 'lsb-release'")
+        for line in subprocess.Popen(['lsb_release', '-a'], stdout=subprocess.PIPE, stderr=subprocess.PIPE, universal_newlines=True).communicate()[0].splitlines():
+            field, value = line.split(':', 1)
+            value = value.strip()
+            field = field.strip()
+            # Convert numerics
+            try:
+                value = float(value)
+            except:
+                pass
+            self.lsb_release.setdefault(field, value)
+
+        # FIXME: hack OEM releases into known-Ubuntu versions
+        if self.lsb_release['Distributor ID'] == "HP MIE (Mobile Internet Experience)":
+            if self.lsb_release['Release'] == 1.0:
+                self.lsb_release['Distributor ID'] = "Ubuntu"
+                self.lsb_release['Release'] = 8.04
+            else:
+                raise OSError("Unknown version of HP MIE")
+
+        # FIXME: hack to assume a most-recent release if we're not
+        # running under Ubuntu.
+        if self.lsb_release['Distributor ID'] not in ["Ubuntu", "Linaro"]:
+            self.lsb_release['Release'] = 10000
+        # Adjust Linaro release to pretend to be Ubuntu
+        if self.lsb_release['Distributor ID'] in ["Linaro"]:
+            self.lsb_release['Distributor ID'] = "Ubuntu"
+            self.lsb_release['Release'] -= 0.01
+
+        # Load arch
+        if not os.path.exists('/usr/bin/dpkg'):
+            machine = cmd(['uname', '-m'])[1].strip()
+            if machine.endswith('86'):
+                self.dpkg_arch = 'i386'
+            elif machine.endswith('_64'):
+                self.dpkg_arch = 'amd64'
+            elif machine.startswith('arm'):
+                self.dpkg_arch = 'armel'
+            else:
+                raise ValueError("Unknown machine type '%s'" % (machine))
+        else:
+            self.dpkg_arch = cmd(['dpkg', '--print-architecture'])[1].strip()
+
+        # Find kernel version
+        self.kernel_is_ubuntu = False
+        self.kernel_version_signature = None
+        self.kernel_version = cmd(["uname", "-r"])[1].strip()
+        versig = '/proc/version_signature'
+        if os.path.exists(versig):
+            self.kernel_is_ubuntu = True
+            self.kernel_version_signature = open(versig).read().strip()
+            self.kernel_version_ubuntu = self.kernel_version
+        elif os.path.exists('/usr/bin/dpkg'):
+            # this can easily be inaccurate but is only an issue for Dapper
+            rc, out = cmd(['dpkg', '-l', 'linux-image-%s' % (self.kernel_version)])
+            if rc == 0:
+                self.kernel_version_signature = out.strip().split('\n').pop().split()[2]
+                self.kernel_version_ubuntu = self.kernel_version_signature
+        if self.kernel_version_signature is None:
+            # Attempt to fall back to something for non-Debian-based
+            self.kernel_version_signature = self.kernel_version
+            self.kernel_version_ubuntu = self.kernel_version
+        # Build ubuntu version without hardware suffix
+        try:
+            self.kernel_version_ubuntu = "-".join([x for x in self.kernel_version_signature.split(' ')[1].split('-') if re.search('^[0-9]', x)])
+        except:
+            pass
+
+        # Find gcc version
+        self.gcc_version = get_gcc_version('gcc')
+
+        # Find libc
+        self.path_libc = [x.split()[2] for x in cmd(['ldd', '/bin/ls'])[1].splitlines() if x.startswith('\tlibc.so.')][0]
+
+        # Report self
+        if self.verbosity:
+            kernel = self.kernel_version_ubuntu
+            if kernel != self.kernel_version_signature:
+                kernel += " (%s)" % (self.kernel_version_signature)
+            print("Running test: '%s' distro: '%s %.2f' kernel: '%s' arch: '%s' uid: %d/%d SUDO_USER: '%s')" % (
+                sys.argv[0],
+                self.lsb_release['Distributor ID'],
+                self.lsb_release['Release'],
+                kernel,
+                self.dpkg_arch,
+                os.geteuid(), os.getuid(),
+                os.environ.get('SUDO_USER', '')), file=sys.stdout)
+            sys.stdout.flush()
+
+        # Additional heuristics
+        # if os.environ.get('SUDO_USER', os.environ.get('USER', '')) in ['mdeslaur']:
+        #    sys.stdout.write("Replying to Marc Deslauriers in http://launchpad.net/bugs/%d: " % random.randint(600000, 980000))
+        #    sys.stdout.flush()
+        #    time.sleep(0.5)
+        #    sys.stdout.write("destroyed\n")
+        #    time.sleep(0.5)
+
+    def hello(self, msg):
+        print("Hello from %s" % (msg), file=sys.stderr)
+# The central instance
+manager = TestlibManager()
+
+
+class TestlibCase(unittest.TestCase):
+    def __init__(self, *args):
+        '''This is called for each TestCase test instance, which isn't much better
+           than SetUp.'''
+
+        unittest.TestCase.__init__(self, *args)
+
+        # Attach to and duplicate dicts from manager singleton
+        self.manager = manager
+        # self.manager.hello(repr(self) + repr(*args))
+        self.my_verbosity = self.manager.verbosity
+        self.lsb_release = self.manager.lsb_release
+        self.dpkg_arch = self.manager.dpkg_arch
+        self.kernel_version = self.manager.kernel_version
+        self.kernel_version_signature = self.manager.kernel_version_signature
+        self.kernel_version_ubuntu = self.manager.kernel_version_ubuntu
+        self.kernel_is_ubuntu = self.manager.kernel_is_ubuntu
+        self.gcc_version = self.manager.gcc_version
+        self.path_libc = self.manager.path_libc
+
+    def version_compare(self, one, two):
+        if 'version_compare' in dir(apt_pkg):
+            return apt_pkg.version_compare(one, two)
+        else:
+            return apt_pkg.VersionCompare(one, two)
+
+    def assertFileType(self, filename, filetype, strict=True):
+        '''Checks the file type of the file specified'''
+
+        (rc, report, out) = self._testlib_shell_cmd(["/usr/bin/file", "-b", filename])
+        out = out.strip()
+        expected = 0
+        # Absolutely no idea why this happens on Hardy
+        if self.lsb_release['Release'] == 8.04 and rc == 255 and len(out) > 0:
+            rc = 0
+        result = 'Got exit code %d, expected %d:\n%s\n' % (rc, expected, report)
+        self.assertEqual(expected, rc, result)
+
+        if strict:
+            filetype = '^%s$' % (filetype)
+        else:
+            # accept if the beginning of the line matches
+            filetype = '^%s' % (filetype)
+        result = 'File type reported by file: [%s], expected regex: [%s]\n' % (out, filetype)
+        self.assertNotEqual(None, re.search(filetype, out), result)
+
+    def yank_commonname_from_cert(self, certfile):
+        '''Extract the commonName from a given PEM'''
+        rc, out = cmd(['openssl', 'asn1parse', '-in', certfile])
+        if rc == 0:
+            ready = False
+            for line in out.splitlines():
+                if ready:
+                    return line.split(':')[-1]
+                if ':commonName' in line:
+                    ready = True
+        return socket.getfqdn()
+
+    def announce(self, text):
+        if self.my_verbosity:
+            print("(%s) " % (text), file=sys.stderr, end='')
+            sys.stdout.flush()
+
+    def make_clean(self):
+        rc, output = self.shell_cmd(['make', 'clean'])
+        self.assertEqual(rc, 0, output)
+
+    def get_makefile_compiler(self):
+        # Find potential compiler name
+        compiler = 'gcc'
+        if os.path.exists('Makefile'):
+            for line in open('Makefile'):
+                if line.startswith('CC') and '=' in line:
+                    items = [x.strip() for x in line.split('=')]
+                    if items[0] == 'CC':
+                        compiler = items[1]
+                        break
+        return compiler
+
+    def make_target(self, target, expected=0):
+        '''Compile a target and report output'''
+
+        compiler = self.get_makefile_compiler()
+        rc, output = self.shell_cmd(['make', target])
+        self.assertEqual(rc, expected, 'rc(%d)!=%d:\n' % (rc, expected) + output)
+        self.assertTrue('%s ' % (compiler) in output, 'Expected "%s":' % (compiler) + output)
+        return output
+
+    # call as   return testlib.skipped()
+    def _skipped(self, reason=""):
+        '''Provide a visible way to indicate that a test was skipped'''
+        if reason != "":
+            reason = ': %s' % (reason)
+        self.announce("skipped%s" % (reason))
+        return False
+
+    def _testlib_shell_cmd(self, args, stdin=None, stdout=subprocess.PIPE, stderr=subprocess.STDOUT, env=None):
+        argstr = "'" + "', '".join(args).strip() + "'"
+        rc, out = cmd(args, stdin=stdin, stdout=stdout, stderr=stderr, env=env)
+        report = 'Command: ' + argstr + '\nOutput:\n' + out
+        return rc, report, out
+
+    def shell_cmd(self, args, stdin=None):
+        return cmd(args, stdin=stdin)
+
+    def assertShellExitEquals(self, expected, args, stdin=None, stdout=subprocess.PIPE, stderr=subprocess.STDOUT, env=None, msg="", bare_report=False):
+        '''Test a shell command matches a specific exit code'''
+        rc, report, out = self._testlib_shell_cmd(args, stdin=stdin, stdout=stdout, stderr=stderr, env=env)
+        result = 'Got exit code %d, expected %d\n' % (rc, expected)
+        self.assertEqual(expected, rc, msg + result + report)
+        if bare_report:
+            return out
+        else:
+            return report
+
+    def assertShellExitSuccess(self, args, stdin=None, stdout=subprocess.PIPE, stderr=subprocess.STDOUT, env=None, msg="", bare_report=False):
+        '''Same as assertShellEquals but with an expected exit status of 0 (success).'''
+        return self.assertShellExitEquals(0, args, stdin, stdout, stderr, env, msg, bare_report)
+
+    # make sure exit value is in a list of expected values
+    def assertShellExitIn(self, expected, args, stdin=None, stdout=subprocess.PIPE, stderr=subprocess.STDOUT, msg=""):
+        '''Test a shell command matches a specific exit code'''
+        rc, report, out = self._testlib_shell_cmd(args, stdin=stdin, stdout=stdout, stderr=stderr)
+        result = 'Got exit code %d, expected one of %s\n' % (rc, ', '.join(map(str, expected)))
+        self.assertIn(rc, expected, msg + result + report)
+
+    def assertShellExitNotEquals(self, unwanted, args, stdin=None, stdout=subprocess.PIPE, stderr=subprocess.STDOUT, msg=""):
+        '''Test a shell command doesn't match a specific exit code'''
+        rc, report, out = self._testlib_shell_cmd(args, stdin=stdin, stdout=stdout, stderr=stderr)
+        result = 'Got (unwanted) exit code %d\n' % rc
+        self.assertNotEqual(unwanted, rc, msg + result + report)
+
+    def assertShellOutputContains(self, text, args, stdin=None, stdout=subprocess.PIPE, stderr=subprocess.STDOUT, msg="", invert=False, expected=None):
+        '''Test a shell command contains a specific output'''
+        rc, report, out = self._testlib_shell_cmd(args, stdin=stdin, stdout=stdout, stderr=stderr)
+        result = 'Got exit code %d.  Looking for text "%s"\n' % (rc, text)
+        if not invert:
+            self.assertTrue(text in out, msg + result + report)
+        else:
+            self.assertFalse(text in out, msg + result + report)
+        if expected is not None:
+            result = 'Got exit code %d. Expected %d (%s)\n' % (rc, expected, " ".join(args))
+            self.assertEqual(rc, expected, msg + result + report)
+
+    def assertShellOutputEquals(self, text, args, stdin=None, stdout=subprocess.PIPE, stderr=subprocess.STDOUT, msg="", invert=False, expected=None):
+        '''Test a shell command matches a specific output'''
+        rc, report, out = self._testlib_shell_cmd(args, stdin=stdin, stdout=stdout, stderr=stderr)
+        result = 'Got exit code %d. Looking for exact text "%s" (%s)\n' % (rc, text, " ".join(args))
+        if not invert:
+            self.assertEqual(text, out, msg + result + report)
+        else:
+            self.assertNotEqual(text, out, msg + result + report)
+        if expected is not None:
+            result = 'Got exit code %d. Expected %d (%s)\n' % (rc, expected, " ".join(args))
+            self.assertEqual(rc, expected, msg + result + report)
+
+    def _word_find(self, report, content, invert=False):
+        '''Check for a specific string'''
+        if invert:
+            warning = 'Found "%s"\n' % content
+            self.assertTrue(content not in report, warning + report)
+        else:
+            warning = 'Could not find "%s"\n' % content
+            self.assertTrue(content in report, warning + report)
+
+    def _test_sysctl_value(self, path, expected, msg=None, exists=True):
+        sysctl = '/proc/sys/%s' % (path)
+        self.assertEqual(exists, os.path.exists(sysctl), sysctl)
+        value = None
+        if exists:
+            with open(sysctl) as sysctl_fd:
+                value = int(sysctl_fd.read())
+            report = "%s is not %d: %d" % (sysctl, expected, value)
+            if msg:
+                report += " (%s)" % (msg)
+            self.assertEqual(value, expected, report)
+        return value
+
+    def set_sysctl_value(self, path, desired):
+        sysctl = '/proc/sys/%s' % (path)
+        self.assertTrue(os.path.exists(sysctl), "%s does not exist" % (sysctl))
+        with open(sysctl, 'w') as sysctl_fh:
+            sysctl_fh.write(str(desired))
+        self._test_sysctl_value(path, desired)
+
+    def kernel_at_least(self, introduced):
+        return self.version_compare(self.kernel_version_ubuntu,
+                                    introduced) >= 0
+
+    def kernel_claims_cve_fixed(self, cve):
+        changelog = "/usr/share/doc/linux-image-%s/changelog.Debian.gz" % (self.kernel_version)
+        if os.path.exists(changelog):
+            for line in gzip.open(changelog):
+                if cve in line and "revert" not in line and "Revert" not in line:
+                    return True
+        return False
+
+    def install_builddeps(self, src_pkg):
+        rc, report = _run_apt_command([src_pkg], 'build-dep')
+        self.assertEqual(0, rc, 'Failed to install build-deps for %s\nOutput:\n%s' % (src_pkg, report))
+
+    def install_package(self, package):
+        rc, report = _run_apt_command([package], 'install')
+        self.assertEqual(0, rc, 'Failed to install package %s\nOutput:\n%s' % (package, report))
+
+    def install_packages(self, pkg_list):
+        rc, report = _run_apt_command(pkg_list, 'install')
+        self.assertEqual(0, rc, 'Failed to install packages %s\nOutput:\n%s' % (','.join(pkg_list), report))
+
+    def install_snap(self, snapname, track="latest/stable", classic=False):
+        rc, report = _run_snap_install(snapname, track, classic)
+        self.assertEqual(0, rc, "Failed to install snap %s\nOutput:\n%s" %
+                                (snapname, report))
+
+    def remove_snap(self, snapname):
+        rc, report = _run_snap_remove(snapname)
+        self.assertEqual(0, rc, "Failed to install snap %s\nOutput:\n%s" %
+                                (snapname, report))
+
+
+class TestGroup:
+    '''Create a temporary test group and remove it again in the dtor.'''
+
+    def __init__(self, group=None, lower=False):
+        '''Create a new group'''
+
+        self.group = None
+        if group:
+            if group_exists(group):
+                raise ValueError('group name already exists')
+        else:
+            while(True):
+                group = random_string(7, lower=lower)
+                if not group_exists(group):
+                    break
+
+        assert subprocess.call(['groupadd', group]) == 0
+        self.group = group
+        g = grp.getgrnam(self.group)
+        self.gid = g[2]
+
+    def __del__(self):
+        '''Remove the created group.'''
+
+        if self.group:
+            rc, report = cmd(['groupdel', self.group])
+            assert rc == 0
+
+
+class TestUser:
+    '''Create a temporary test user and remove it again in the dtor.'''
+
+    def __init__(self, login=None, home=True, group=None, uidmin=None, lower=False, shell=None):
+        '''Create a new user account with a random password.
+
+        By default, the login name is random, too, but can be explicitly
+        specified with 'login'. By default, a home directory is created, this
+        can be suppressed with 'home=False'.'''
+
+        self.login = None
+
+        if os.geteuid() != 0:
+            raise ValueError("You must be root to run this test")
+
+        if login:
+            if login_exists(login):
+                raise ValueError('login name already exists')
+        else:
+            while(True):
+                login = 't' + random_string(7, lower=lower)
+                if not login_exists(login):
+                    break
+
+        # when fips is enabled, python2.7 crypt.crypt() returns None
+        # for DES salts for being too weak. Force sha256 with "$5$" for
+        # the salt. XXX in python3, the salt is optional and will
+        # generate strong passwords automatically.
+        self.salt = "$5$%s" % random_string(2)
+        self.password = random_string(8, lower=lower)
+        self.crypted = crypt.crypt(self.password, self.salt)
+
+        creation = ['useradd', '-p', self.crypted]
+        if home:
+            creation += ['-m']
+        if group:
+            creation += ['-G', group]
+        if uidmin:
+            creation += ['-K', 'UID_MIN=%d' % uidmin]
+        if shell:
+            creation += ['-s', shell]
+        creation += [login]
+        assert subprocess.call(creation) == 0
+        # Set GECOS
+        assert subprocess.call(['usermod', '-c', 'Buddy %s' % (login), login]) == 0
+
+        self.login = login
+        p = pwd.getpwnam(self.login)
+        self.uid   = p[2]
+        self.gid   = p[3]
+        self.gecos = p[4]
+        self.home  = p[5]
+        self.shell = p[6]
+
+    def __del__(self):
+        '''Remove the created user account.'''
+
+        if self.login:
+            # sanity check the login name so we don't accidentally wipe too much
+            if len(self.login) > 3 and '/' not in self.login:
+                subprocess.call(['rm', '-rf', '/home/' + self.login, '/var/mail/' + self.login])
+            rc, report = cmd(['userdel', '-f', self.login])
+            assert rc == 0
+
+    def add_to_group(self, group):
+        '''Add user to the specified group name'''
+        rc, report = cmd(['usermod', '-G', group, self.login])
+        if rc != 0:
+            print(report)
+        assert rc == 0
+
+
+class AddUser:
+    '''Create a temporary test user and remove it again in the dtor.'''
+
+    def __init__(self, login=None, home=True, encrypt_home=False, group=None, lower=False, shell=None):
+        '''Create a new user account with a random password.
+
+        By default, the login name is random, too, but can be explicitly
+        specified with 'login'. By default, a home directory is created, this
+        can be suppressed with 'home=False'.
+
+        This class differs from the TestUser class in that the adduser/deluser
+        tools are used rather than the useradd/user/del tools. The adduser
+        program is the only commandline program that can be used to add a new
+        user with an encrypted home directory. It is possible that the AddUser
+        class may replace the TestUser class in the future.'''
+
+        self.login = None
+
+        if os.geteuid() != 0:
+            raise ValueError("You must be root to run this test")
+
+        if login:
+            if login_exists(login):
+                raise ValueError('login name already exists')
+        else:
+            while(True):
+                login = 't' + random_string(7, lower=True)
+                if not login_exists(login):
+                    break
+
+        self.password = random_string(8, lower=lower)
+
+        creation = ['adduser', '--quiet']
+
+        if not home:
+            creation += ['--no-create-home']
+        elif encrypt_home:
+            creation += ['--encrypt-home']
+
+        if shell:
+            creation += ['--shell', shell]
+
+        creation += ['--gecos', 'Buddy %s' % (login), login]
+
+        child = pexpect.spawn(creation.pop(0), creation, timeout=5)
+        assert child.expect(b'(Enter new UNIX|New) password:') == 0
+        child.sendline(self.password)
+        assert child.expect(b'Retype new (UNIX )?password:') == 0
+        child.sendline(self.password)
+
+        child.wait()
+        child.close()
+        assert child.exitstatus == 0
+        assert child.signalstatus is None
+
+        self.login = login
+
+        if group:
+            assert self.add_to_group(group) == 0
+
+        p = pwd.getpwnam(self.login)
+        self.uid   = p[2]
+        self.gid   = p[3]
+        self.gecos = p[4]
+        self.home  = p[5]
+        self.shell = p[6]
+
+    def __del__(self):
+        '''Remove the created user account.'''
+
+        if self.login:
+            # sanity check the login name so we don't accidentally wipe too much
+            rc, report = cmd(['deluser', '--remove-home', self.login])
+            assert rc == 0
+
+    def add_to_group(self, group):
+        '''Add user to the specified group name'''
+        rc, report = cmd(['adduser', self.login, group])
+        if rc != 0:
+            print(report)
+        assert rc == 0
+
+
+# Timeout handler using alarm() from John P. Speno's Pythonic Avocado
+class TimeoutFunctionException(Exception):
+    """Exception to raise on a timeout"""
+    pass
+
+
+class TimeoutFunction:
+    def __init__(self, function, timeout):
+        self.timeout = timeout
+        self.function = function
+
+    def handle_timeout(self, signum, frame):
+        raise TimeoutFunctionException()
+
+    def __call__(self, *args, **kwargs):
+        old = signal.signal(signal.SIGALRM, self.handle_timeout)
+        signal.alarm(self.timeout)
+        try:
+            result = self.function(*args, **kwargs)
+        finally:
+            signal.signal(signal.SIGALRM, old)
+        signal.alarm(0)
+        return result
+
+
+def main():
+    print("hi")
+    unittest.main()
diff --git a/debian/tests/testsuite b/debian/tests/testsuite
new file mode 100644
index 0000000..29cf597
--- /dev/null
+++ b/debian/tests/testsuite
@@ -0,0 +1,6 @@
+#!/bin/bash
+#-------------------
+# Testing open-iscsi
+#-------------------
+set -e
+python3 `dirname $0`/test-open-iscsi.py 2>&1
diff --git a/debian/tests/tgt-boot-test b/debian/tests/tgt-boot-test
new file mode 100755
index 0000000..af5ec50
--- /dev/null
+++ b/debian/tests/tgt-boot-test
@@ -0,0 +1,534 @@
+#!/bin/bash
+
+VERBOSITY=0
+TEMP_D=""
+DEF_WPORT=32600
+IPV4_NET="10.0.12"
+DEF_NETDEV="user,net=${IPV4_NET}.0/24,host=${IPV4_NET}.2"
+
+ISCSI_PORT=3260
+TGT_CONF=""
+HTTP_PID=""
+TGT_NAME=""
+
+_DEF_CMDLINE_TMPL=(
+    nomodeset {icmdline_parms} {cmdline_ip} ro
+    net.ifnames=0 BOOTIF_DEFAULT=eth0
+    root={root} {overlay_drive}
+    console=ttyS0 {cmdline_ds}
+    # LP: #1796137
+    systemd.mask=snapd.seeded.service systemd.mask=snapd.service
+)
+DEF_CMDLINE_TMPL="${_DEF_CMDLINE_TMPL[*]}"
+
+error() { echo "$@" 1>&2; }
+fail() { [ $# -eq 0 ] || error "$@"; exit 1; }
+
+cleanup() {
+    [ ! -d "$TEMP_D" ] || rm -Rf "$TEMP_D"
+    if [ -f "$TGT_CONF" ]; then
+       error "cleaning up tgt mount ${TGT_NAME}"
+       sudo tgt-admin --force --delete="$TGT_NAME"
+       sudo rm -f "$TGT_CONF"
+    fi
+    if [ -n "$HTTP_PID" ]; then
+       kill $HTTP_PID
+    fi
+}
+
+Usage() {
+    cat <<EOF
+Usage: ${0##*/} [ options ] image kernel initrd
+
+   put 'image' into tgt, boot 'kernel' and 'initrd' in a kvm
+   guest pointing to that iscsi target.
+
+   options:
+   -p | --webserv-port PORT  serve cloud-init seed on port PORT
+                             default: ${DEF_WPORT}
+   -O | --overlay-disk DISK  attach DISK to guest and use it for the overlayroot
+                             target.  Use 'temp' to use a temp file.
+                             use an existing file to use that.  Use a
+                             non-existing file to create.
+   -n | --netdev DEV         passed through to xkvm.
+                             if none passed, default is:
+                               $DEF_NETDEV
+   -a | --host-addr ADDR     will be used for iscsi host address and
+                             cloud-init seed address.  Default is read
+                             from 'host=' in --netdev arg.
+   -l | --serial-log FILE    write serial log to FILE default is to let output
+                             go to console.
+        --cmdline    TMPL    template for kernel command line.
+                             default: ${DEF_CMDLINE_TMPL}
+        --cmdline-add ARGS   add the args to the kernel command line. default: ""
+        --user-data  FILE    user-data to provide to instance.
+                             default: builtin
+        --user-data-add FILE append FILE to default user-data.
+EOF
+}
+
+bad_Usage() { Usage 1>&2; [ $# -eq 0 ] || error "$@"; return 1; }
+
+debug() {
+    local level=${1}; shift;
+    [ "${level}" -gt "${VERBOSITY}" ] && return
+    error "${@}"
+}
+
+write_userdata() {
+    ## set up a user-data and meta-data for cloud-init
+    ## and we'll seed that through the kernel command line
+    ##
+    ## The user data we provide will allow us to log in
+    ## as the 'ubuntu' user with 'passw0rd'.
+    local out="$1" keys="${2:-[]}"
+    cat > "$out" <<"EOF"
+#cloud-config
+chpasswd:
+  expire: False
+  list: |
+    ubuntu:passw0rd
+    root:root
+ssh_pwauth: True
+EOF
+}
+
+get_ssh_pubkeys() {
+    # get users ssh pubkeys in a yaml list format
+    local keys="" d=""
+    keys=$( (ssh-add -L 2>/dev/null ;
+            [ -f ~/.ssh/id_rsa.pub ] && cat ~/.ssh/id_rsa.pub ) | sort -u )
+    if [ -n "$keys" ]; then
+        d=$(IFS=$'\n'; for i in ${keys}; do echo "'$i',"; done)
+        keys="[${d%,}]"
+    else
+        keys="[]"
+    fi
+    _RET="$keys"
+}
+
+write_metadata() {
+    local iid="" out="$1" pubkeys="$2"
+    iid=$(uuidgen 2>/dev/null || echo i-abcdefg)
+    {
+    echo "instance-id: $iid"
+    if [ -n "$pubkeys" ]; then
+        echo "public-keys: $pubkeys"
+    fi
+    } > "$out"
+}
+
+register_image() {
+    local conf="$1" name="$2" image="$3"
+    sudo tee "$conf" >/dev/null <<EOF
+<target ${name}>
+    readonly 1
+    backing-store "$image"
+    allow-in-use yes
+</target>
+EOF
+    [ $? -eq 0 ] || { error "failed to write '$conf'"; return 1; }
+
+    sudo tgt-admin "--update=$name" ||
+        { error "failed tgt-admin update=$name"; return 1; }
+}
+
+address_on_dev() {
+    local dev="$1" atype="${2:-inet}" out="" addr=""
+    out=$(ip address show dev "$dev" 2>/dev/null) ||
+        { error "could not get address on $1"; return 1; }
+    addr=$(echo "$out" |
+        awk '$1 == atype && $4 == "global" {
+                sub(/\/.*/, "", $2); print $2; exit(0); }' "atype=$atype" )
+    [ -n "$addr" ] || return
+    _RET="$addr"
+}
+
+find_host_addr() {
+    # run through --netdev args and fine 'host=' or make one up base
+    # on there being a net= and assume .2 for host.
+    # example: type=user,id=net00,net=10.0.12.0/24,host=10.0.12.2
+    #   ipv6-net=fec0::/64,ipv6-host=fec0::2
+    #   lxcbr0
+    local nd="" atype="" bridge=""
+    local oifs="$IFS"
+    for nd in "$@"; do
+        local host="" netaddr="" cur="" ipv4="x" ipv6="x" ntype=""
+        bridge=${nd%%,*}
+        if [ "$bridge" != "user" -a -e "/sys/class/net/$bridge" ]; then
+            for atype in inet inet6; do
+                address_on_dev "$bridge" "$atype" || continue
+                debug 2 "took $atype address on bridge '$bridge': $_RET";
+                return 0;
+            done
+        fi
+        cur=${nd}
+        while :; do
+            first=${cur%%,*}
+            rest=${cur#*,}
+            case "$first" in
+                user) ntype=user;;
+                ipv4=on|ipv4) ipv4=on;;
+                ipv4=off) ipv4=off;;
+                ipv6=on|ipv6) ipv6=on;;
+                ipv6=off) ipv6=off;;
+                ipv6-net=*) tmp=${first#*=};
+                    tmp=${tmp%/*}
+                    netaddr="${tmp%.*}:2"
+                    ;;
+                net=*) tmp=${first#*=};
+                    tmp=${tmp%/*}
+                    netaddr="${tmp%.*}.2"
+                    ;;
+                host=*|ipv6-host=) host=${first#*=};;
+            esac
+            if [ "$first" = "$rest" ]; then
+                # there was no ','
+                break
+            fi
+            cur=$rest
+        done
+        local found="" msg=""
+        if [ -n "$host" ]; then
+            found="$host"
+            msg="host= in '$nd'"
+        elif [ -n "$netaddr" ]; then
+            found="$netaddr"
+            msg="second address on net= in '$nd'";
+        elif [ "$ntype" = "user" ]; then
+            case "$ipv4/$ipv6" in
+                */on)
+                    msg="known user net default host in ipv6 in '$nd'"
+                    found="fec0::2";;
+                x/x|on/*)
+                    msg="known user net default host in ipv4 in '$nd'"
+                    found="10.0.2.2";;
+            esac
+        fi
+        if [ -n "$found" ]; then
+            debug 2 "found host address '$found' via $msg"
+            _RET="$found"
+            return 0
+        fi
+    done
+    return 1
+}
+
+
+get_rfc4173() {
+    # protocol would normally be '6' (tcp but empty is fine)
+    # https://tools.ietf.org/html/rfc4173
+    # https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=804162
+    local server="$1" name="$2" port="$3" lun="$4" user="$5" pass="$6" proto="$7"
+    local rfc="" auth="${user:+${user}${pass:+:${pass}}}"
+    rfc="iscsi:"
+    if [ -n "${user}" ]; then
+        rfc="$rfc:${user}${pass:+:${pass}}"
+    fi
+    case "$server" in
+        \[*\]) :;;
+        *:*) server="[$server]";;
+    esac
+    rfc="${server}:$proto:${port}:${lun}:${name}"
+    _RET="$rfc"
+}
+
+get_root_parm() {
+    local server="$1" name="$2" port="${3:-$ISCSI_PORT}"
+    local lun="$4" user="$5" pass="$6" proto="$7" part="$8"
+    local ret=""
+    # for ipv6 addresses, path just contains : for the server
+    _RET="/dev/disk/by-path/ip-$server:$port-iscsi-${name}-lun-${lun}${part:+-part$part}"
+}
+
+get_cmdline_params() {
+    local server="$1" name="$2" port="$3" lun="$4" user="$5" pass="$6"
+    local proto="$7" initiator="$8" ret=""
+    ret="${initiator:+iscsi_initiator=${initiator} }"
+    ret="${ret}iscsi_target_name=$name "
+    ret="${ret}iscsi_target_ip=$server "
+    ret="${ret}${port:+iscsi_target_port=$port }"
+    ret="${ret}${initiator:+iscsi_initiator=$initiator }"
+    _RET=${ret% }
+}
+
+get_iscsi_cmd() {
+    local server="$1" name="$2" port="$3" lun="$4" user="$5" pass="$6"
+    local proto="$7" initiator="$8" ret="" group=${9:-1}
+    _RET=( iscsistart -i "$initiator"
+            -t "$name" -g "$group" -a "$server" -p "$port"
+            ${user:+-u "$user"} ${pass:+-w "${pass}"} )
+}
+
+serv_http() {
+    local dir="$1" port="$2" check="$3"
+    local python="" kid=""
+    command -v python3 >/dev/null 2>&1 && python=python3 || python=python2
+    cat > "$TEMP_D/webserv" <<EOF
+import os, socket, sys
+try:
+    from BaseHTTPServer import HTTPServer
+    from SimpleHTTPServer import SimpleHTTPRequestHandler
+except ImportError:
+    from http.server import HTTPServer, SimpleHTTPRequestHandler
+
+class HTTPServerV6(HTTPServer):
+  address_family = socket.AF_INET6
+
+if __name__ == "__main__":
+    dir = sys.argv[1]
+    port = int(sys.argv[2])
+    os.chdir(dir)
+    server = HTTPServerV6(("::", port), SimpleHTTPRequestHandler)
+    server.serve_forever()
+EOF
+    $python "$TEMP_D/webserv" "$dir" "$port" &
+    HTTP_PID=$!
+    local i=0 site="127.0.0.1"
+    local url="http://$site:$port/$check"
+    while [ -d /proc/$HTTP_PID -a "$i" -lt 10 ] && i=$(($i+1)); do
+        no_proxy=$site wget -q -O /dev/null "$url" && return 0
+        sleep .5
+    done
+    return 1
+}
+
+render_templ() {
+    local tmpl="$1"
+    shift
+    local key val i="" cur="$tmpl"
+    for i in "$@"; do
+        key=${i%%=*}
+        val=${i#*=}
+        cur=${cur//\{${key}\}/${val}}
+    done
+    _RET="$cur"
+}
+
+get_partition() {
+    # return in _RET the 'auto' partition for a image.
+    # return partition number for a partitioned image
+    # return 0 for unpartitioned
+    # return 0 if image is partitioned, 1 if not
+    local img="$1"
+    out=$(LANG=C sfdisk --list -uS "$img" 2>&1) || {
+        error "failed determining if partitioned: $out";
+        return 1;
+    }
+    if echo "$out" | grep -q 'Device.*Start.*End'; then
+        _RET=1
+    else
+        _RET=0
+    fi
+}
+
+main() {
+    local short_opts="a:hn:O:p:l:v"
+    local long_opts="help,cmdline:,cmdline-add:,cmdline-ip:,disk:,host-addr:,overlay-disk:,netdev:,serial-log:,user-data:,user-data-add:,verbose,webserv-port:"
+    local getopt_out=""
+
+    getopt_out=$(getopt --name "${0##*/}" \
+        --options "${short_opts}" --long "${long_opts}" -- "$@") &&
+        eval set -- "${getopt_out}" ||
+        { bad_Usage; return; }
+
+    local cur="" next=""
+    local overlay_disk="" webserv_port="${DEF_WPORT}" netdevs="" host_addr=""
+    local serial_log="" cmdline_tmpl="${DEF_CMDLINE_TMPL}" user_data_file=""
+    local cmdline_add="" user_data_add="" pt=""
+    # The string 'BOOTIF' is replaced at runtime with the interface
+    # name by cloud-initramfs-dyn-netconf.
+    local cmdline_ip="ip=::::{iinitiator}:BOOTIF"
+    netdevs=( )
+    pt=( )
+
+    while [ $# -ne 0 ]; do
+        cur="$1"; next="$2";
+        case "$cur" in
+            -h|--help) Usage ; exit 0;;
+               --cmdline) cmdline_tmpl=$next; shift;;
+               --cmdline-add) cmdline_add=$next; shift;;
+               --cmdline-ip) cmdline_ip=$next; shift;;
+               --disk) pt[${#pt[@]}]="$1=$2"; shift;;
+            -a|--host-addr) host_addr=$next; shift;;
+            -O|--overlay-disk) overlay_disk=$next; shift;;
+            -n|--netdev) netdevs[${#netdevs[@]}]="$next"; shift;;
+            -v|--verbose) VERBOSITY=$((${VERBOSITY}+1));;
+            -l|--serial-log) serial_log="$next"; shift;;
+               --user-data-file) user_data_file="$next"; shift;;
+               --user-data-add) user_data_add="$next"; shift;;
+            -p|--webserv-port) webserv_port=$port; shift;;
+            --) shift; break;;
+        esac
+        shift;
+    done
+
+    [ $# -eq 3 ] || { bad_Usage "expected 3 args, got $# ($*)"; return 1; }
+    local image_in=$1 kernel_in=$2 initrd_in=$3
+    for f in "$image_in" "$kernel_in" "$initrd_in"; do
+        [ -f "$f" ] || fail "$f: not a file"
+    done
+
+    local image="" kernel="" initrd=""
+    image=$(readlink -f "$image_in") ||
+        fail "cannot get full path to $image_in"
+    kernel=$(readlink -f "$kernel_in") ||
+        fail "cannot get full path to $kernel_in"
+    initrd=$(readlink -f "$initrd_in") ||
+        fail "cannot get full path to $initrd_in"
+
+    TEMP_D=$(mktemp -d "${TMPDIR:-/tmp}/${0##*/}.XXXXXX") ||
+        fail "failed to make tempdir"
+    TEMP_D=$(cd "$TEMP_D" && pwd)
+    trap cleanup EXIT
+
+    local t_image t_kernel t_initrd
+    t_image="${TEMP_D}/image"
+    t_kernel="${TEMP_D}/kernel"
+    t_initrd="${TEMP_D}/initrd"
+
+    if [ "${#netdevs[@]}" -eq 0 ]; then
+        netdevs=( "$DEF_NETDEV" )
+    fi
+
+    local keys=""
+    mkdir -p "$TEMP_D/ci-seed"
+    if [ -n "${user_data_file}" ]; then
+        cat "${user_data_file}" > "$TEMP_D/ci-seed/user-data" ||
+            fail "failed to copy '$user_data_file' to ci-seed/user-data"
+    else
+        write_userdata "$TEMP_D/ci-seed/user-data" ||
+            fail "failed to write user-data"
+    fi
+    if [ -n "$user_data_add" ]; then
+        cat "$user_data_add" >> "$TEMP_D/ci-seed/user-data" ||
+            fail "failed to write additional user-data"
+    fi
+
+    get_ssh_pubkeys || fail "failed getting pubkeys"
+    keys="$_RET"
+    write_metadata "$TEMP_D/ci-seed/meta-data" "$keys" ||
+        fail "failed writing metadata"
+
+    if [ -z "$host_addr" ]; then
+        find_host_addr "${netdevs[@]}" ||
+            fail "failed to find host address. try --host-addr."
+        host_addr="$_RET"
+    fi
+    debug 1 "using host address: '${host_addr}'"
+
+    ## run a python web server to seed this
+    serv_http "$TEMP_D/ci-seed" "$webserv_port" "user-data" ||
+        fail "failed to web serv $TEMP_D/ci-seed on $webserv_port"
+    debug 1 "web server in pid $HTTP_PID serving ${TEMP_D}/ci-seed/ on port $webserv_port"
+    local seed_url="http://$host_addr:$webserv_port/"
+    if [ "${host_addr#*:}" != "$host_addr" ]; then
+        seed_url="http://[$host_addr]:$webserv_port/"
+    fi
+    debug 1 " ${seed_url}meta-data"
+
+    if [ "${image%.gz}" != "$image" ]; then
+        error "uncompressing $image_in -> temp-dir"
+        gzcat "$image" > "${TEMP_D}/image" ||
+        fail "failed uncompress of $image_in"
+    else
+        ln -s "$image" "$t_image" || fail "symlink to $image failed"
+    fi
+
+    ln -s "$kernel" "$t_kernel" &&
+        ln -s "$initrd" "$t_initrd" ||
+        fail "failed link to kernel or initrd"
+
+    local partition=""
+    get_partition "$t_image" ||
+        fail "failed to read partition from $image"
+    partition=${_RET}
+    [ "$part" = "0" ] && partition=""
+
+    TGT_NAME=${TEMP_D##*/}
+    TGT_NAME=${TGT_NAME//./-}
+    TGT_CONF="/etc/tgt/conf.d/$TGT_NAME.conf"
+    register_image "$TGT_CONF" "$TGT_NAME" "$t_image" ||
+        fail "failed to register image $t_image in tgt"
+
+    overlay_drive_kernel="overlayroot=tmpfs"
+    overlay_drive_xkvm=""
+    if [ -n "${overlay_disk}" ]; then
+        if [ "${overlay_disk}" = "temp" ]; then
+            overlay_disk="${TEMP_D}/overlay.img"
+        fi
+        if [ ! -f "$overlay_disk" ]; then
+            qemu-img create -f raw "$overlay_disk" 1G
+            mkfs.ext2 -L "delta" -F "$overlay_disk" >/dev/null 2>&1 ||
+                fail "failed mkfs on $overlay_disk"
+            overlay_drive_kernel="overlayroot=device:dev=LABEL=delta"
+            overlay_drive_xkvm="--disk=${overlay_disk},format=raw"
+        fi
+    fi
+
+    local iserver="${host_addr}" iname="$TGT_NAME" iport="$ISCSI_PORT"
+    local ilun="1" iuser="" ipass="" iproto="" iinitiator="maas-enlist"
+    local rfc="" root="" iscsi_cmdline_parms="" iscsi_start_cmd=""
+    local cmdline=""
+    get_rfc4173 "${iserver}" "$iname" "$iport" "$ilun" \
+        "$iuser" "$ipass" "$iproto"
+    rfc="$_RET"
+
+    get_cmdline_params "${iserver}" "$iname" "$iport" "$ilun" \
+        "$iuser" "$ipass" "$iproto" "$iinitiator"
+    iscsi_cmdline_parms="$_RET"
+
+    get_root_parm "$iserver" "$iname" "$iport" "$ilun" \
+        "$iuser" "$ipass" "$iproto" "$partition"
+    root="$_RET"
+
+    get_iscsi_cmd "$iserver" "$iname" "$iport" "$ilun" \
+        "$iuser" "$ipass" "$iproto" "$iinitiator"
+    iscsi_start_cmd=( "${_RET[@]}" )
+
+    render_templ "${cmdline_ip}" iinitiator="$iinitiator" ||
+        { error "failed rendering cmdline ip: ${cmdline_ip}"; return 1; }
+    cmdline_ip="$_RET"
+
+    render_templ "$cmdline_tmpl${cmdline_add:+ ${cmdline_add}}" \
+        iserver="$host_addr" iname="$TGT_NAME" iport="$ISCSI_PORT" \
+        ilun="$ilun" iuser="$iuser" ipass="$ipass" iproto="$iproto" \
+        iinitiator="$iinitiator" "rfc4173=$rfc" "root=$root" \
+        "seed_url=$seed_url" icmdline_parms="$iscsi_cmdline_parms" \
+        "overlay_drive=${overlay_drive_kernel}" \
+        "cmdline_ds=ds=nocloud-net;seedfrom=${seed_url}" \
+        "cmdline_ip=${cmdline_ip}" ||
+        { error "failed rendering cmdline"; return 1; }
+    cmdline="$_RET"
+
+    debug 1 "rfc4173: $rfc"
+    debug 1 "iscsi_cmdline_parms: $iscsi_cmdline_parms"
+    debug 1 "root: $root"
+    debug 1 "iscsi_start_cmd: ${iscsi_start_cmd[*]}"
+    debug 1 "cmdline=$cmdline"
+
+    local netdev_args=""
+    netdev_args=( )
+    for i in "${netdevs[@]}"; do
+        netdev_args[${#netdev_args[@]}]="--netdev=$i"
+    done
+
+    local mem="512" start="$SECONDS" ret=""
+    local cmd=""
+    cmd=(
+        ${BOOT_TIMEOUT:+timeout --kill-after=1m --signal=TERM $BOOT_TIMEOUT}
+        xkvm -v -v "${netdev_args[@]}" ${overlay_drive_xkvm} "${pt[@]}" --
+        -echr 0x5
+        -m $mem ${serial_log:+-serial "file:$serial_log"} -nographic
+        -kernel "${t_kernel}" -initrd "${t_initrd}"
+        -append "${cmdline}"
+    )
+    debug 1 "executing: ${cmd[*]}"
+    "${cmd[@]}"
+    ret=$?
+    debug 1 "xkvm returned $ret in $((SECONDS-start))s"
+    return $ret
+}
+
+main "$@"
+# vi: ts=4 expandtab
diff --git a/debian/tests/xkvm b/debian/tests/xkvm
new file mode 100755
index 0000000..9513723
--- /dev/null
+++ b/debian/tests/xkvm
@@ -0,0 +1,704 @@
+#!/bin/bash
+
+set -f
+
+VERBOSITY=0
+KVM_PID=""
+DRY_RUN=false
+TEMP_D=""
+DEF_BRIDGE="virbr0"
+TAPDEVS=( )
+# OVS_CLEANUP gets populated with bridge:devname pairs used with ovs
+OVS_CLEANUP=( )
+MAC_PREFIX="52:54:00:12:34"
+KVM="kvm"
+declare -A KVM_DEVOPTS
+
+error() { echo "$@" 1>&2; }
+fail() { [ $# -eq 0 ] || error "$@"; exit 1; }
+
+bad_Usage() { Usage 1>&2; [ $# -eq 0 ] || error "$@"; exit 1; }
+randmac() {
+    # return random mac addr within final 3 tokens
+    local random=""
+    random=$(printf "%02x:%02x:%02x" \
+        "$((${RANDOM}%256))" "$((${RANDOM}%256))" "$((${RANDOM}%256))")
+    padmac "$random"
+}
+
+cleanup() {
+    [ -z "${TEMP_D}" -o ! -d "${TEMP_D}" ] || rm -Rf "${TEMP_D}"
+    if [ -n "${KVM_PID}" ]; then
+        debug 1 "${0##*/} cleanup killing kvm pid '$KVM_PID'"
+        kill "$KVM_PID"
+    fi
+    if [ ${#TAPDEVS[@]} -ne 0 ]; then
+        local name item
+        for item in "${TAPDEVS[@]}"; do
+            [ "${item}" = "skip" ] && continue
+            debug 1 "removing" "$item"
+            name="${item%:*}"
+            if $DRY_RUN; then
+                error ip tuntap del mode tap "$name"
+            else
+                ip tuntap del mode tap "$name"
+            fi
+            [ $? -eq 0 ] || error "failed removal of $name"
+        done
+        if [ ${#OVS_CLEANUP[@]} -ne 0 ]; then
+            # with linux bridges, there seems to be no harm in just deleting
+            # the device (not detaching from the bridge).  However, with
+            # ovs, you have to remove them from the bridge, or later it
+            # will refuse to add the same name.
+            error "cleaning up ovs ports: ${OVS_CLEANUP[@]}"
+            if ${DRY_RUN}; then
+                error sudo "$0" tap-control ovs-cleanup "${OVS_CLEANUP[@]}"
+            else
+                sudo "$0" tap-control ovs-cleanup "${OVS_CLEANUP[@]}"
+            fi
+        fi
+    fi
+}
+
+debug() {
+    local level=${1}; shift;
+    [ "${level}" -gt "${VERBOSITY}" ] && return
+    error "${@}"
+}
+
+Usage() {
+    cat <<EOF
+Usage: ${0##*/} [ options ] -- kvm-args [ ... ]