Merge ~sbeattie/ubuntu-cve-tracker/+git/ubuntu-cve-tracker:add-lpci-validation-ubuntu.com into ubuntu-cve-tracker:master

[Steve Beattie]

Merge lpci: validate the release configuration of the cve tracker website

The post-release-to-web-cve-tracker.py script is used to both set and
validate the configuration of releases in the CVE website; add a
separate lpci job to validate the configuration so we know when it
changes unexpectedly.

Because we want to know if the release configuration of the ubuntu.com cCVE website changes unexpectedly, it would useful to perform the validation step in the post-release-to-web-cve-tracker.py script as part of our CI process, so this merge proposal adds that. No authentication credentials are needed to query the configuration, so this is fine to run the CI environment.

Right now the test fails, correctly because Diogo's change in https://code.launchpad.net/~ubuntu-security/ubuntu-cve-tracker/+git/ubuntu-cve-tracker/+merge/465291 has not been merged, but he (with my guidance) has already updated the CVE website to note that 14.04 LTS / trusty's end of extended support has been uh extended to 2026. You can see the failure log at https://code.launchpad.net/~sbeattie/ubuntu-cve-tracker/+git/ubuntu-cve-tracker/+build/87531/+files/buildlog_ci_ubuntu-cve-tracker_e97db19f8fd76f1253c9ed1bdaa9649babe32ec2_BUILDING.txt.gz ; the relevant details are as follows:

Running ['bash', '--noprofile', '--norc', '-ec', './scripts/post-release-to-web-cve-tracker.py --action validate all\n']
:: noble (24.04) okay:
:: mantic (23.10) okay:
:: lunar (23.04) okay:
:: kinetic (22.10) okay:
:: jammy (22.04) okay:
:: impish (21.10) okay:
:: hirsute (21.04) okay:
:: groovy (20.10) okay:
:: focal (20.04) okay:
:: bionic (18.04) okay:
:: xenial (16.04) okay:
:: --- stored trusty info
:: +++ https://ubuntu.com/security/releases/trusty.json
:: @@ -1,11 +1,11 @@
:: {
:: "codename": "trusty",
:: "development": false,
:: - "esm_expires": "2024-04-30T00:00:00",
:: + "esm_expires": "2026-04-30T00:00:00",
:: "lts": true,
:: "name": "Trusty Tahr",
:: "release_date": "2014-04-17T00:00:00",
:: "support_expires": "2019-04-30T00:00:00",
:: "support_tag": "ESM",
:: "version": "14.04"
:: }
Job 'check-cve-website-state' for jammy/amd64 failed with exit status 1.

[Alex Murray (alexmurray)]

LGTM - thanks sbeattie.

review: Approve

diff --git a/.launchpad.yaml b/.launchpad.yaml
index e672a85..c3f14db 100644
--- a/.launchpad.yaml
+++ b/.launchpad.yaml
@@ -7,6 +7,7 @@ pipeline:
   -
     - unit-tests
     - check-cves
+    - check-cve-website-state
 jobs:
   unit-tests:
     series: jammy
@@ -82,3 +83,15 @@ jobs:
 
       echo "Checking syntax..."
       ./scripts/check-syntax
+  check-cve-website-state:
+    series: jammy
+    architectures: amd64
+    packages:
+      - distro-info
+      - lsb-release
+      - python3
+      - python3-macaroonbakery
+      - python3-requests
+    run: |
+      ./scripts/post-release-to-web-cve-tracker.py --action validate all
+