Bug 46604 – Update UDM settings/package lists

Bug 46604 - Update UDM settings/package lists


Summary:	Update UDM settings/package lists

Status:	NEW

Product:	UCS
Classification:	Unclassified
Component:	UMC - Software update
Version:	UCS 5.0
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	---
Assigned To:	UMC maintainers
QA Contact:	UMC maintainers

URL:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2018-03-12 14:01 CET by Philipp Hahn
Modified:	2021-05-04 06:06 CEST (History)
CC List:	1 user (show)

See Also:
What kind of report is it?:	Bug Report
What type of bug is this?:	7: Crash: Bug causes crash or data loss
Who will be affected by this bug?:	1: Will affect a very few installed domains
How will those affected feel about the bug?:	2: A Pain – users won’t like this once they notice it
User Pain:	0.080
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Philipp Hahn

2018-03-12 14:01:37 CET

The packages listed in `udm settings/packages list` look strange ad should be updated:

>DN: cn=Univention,cn=packages,cn=univention
>  name: Univention
>  packageList: univention-printquota
>  packageList: univention-mail-dovecot
>  packageList: univention-squid
>  packageList: univention-nagios-server
>  packageList: univention-printserver
>  packageList: univention-kde
>  packageList: univention-samba
univention-samba4 ?
>  packageList: univention-x-core
>  packageList: univention-mail-postfix
>  packageList: univention-bind
>  packageList: univention-spamassassin
>
>DN: cn=Fernwartung,cn=packages,cn=univention
>  name: Fernwartung
>  packageList: openssh-server
>  packageList: openssh-client
all UCS server role packages depends on those two - removing one would remove the server role package, too!
>  packageList: rdesktop
>  packageList: tightvncserver
>
>DN: cn=Tools,cn=packages,cn=univention
>  name: Tools
>  packageList: aspell
>  packageList: mc
>  packageList: nmap
>  packageList: sudo
>  packageList: w3m
>  packageList: mutt
unmaintained!
>  packageList: wamerican
wngerman ?
>  packageList: memtester
>
>DN: cn=Multimedia,cn=packages,cn=univention
>  name: Multimedia
>  packageList: alsa-utils
>  packageList: imagemagick
>  packageList: juk
>  packageList: amarok
>  packageList: gwenview
>  packageList: dragonplayer
>  packageList: sox
>  packageList: vlc-nox
>
>DN: cn=Entwicklung,cn=packages,cn=univention
>  name: Entwicklung
>  packageList: build-essential
>  packageList: manpages-dev
>  packageList: strace
>  packageList: diffutils
>  packageList: make
>  packageList: debhelper
>  packageList: dpatch
>  packageList: gdb
>  packageList: patchutils

Comment 1 Philipp Hahn

2021-05-04 06:04:29 CEST

Still true and even worse for UCS-5 where many packages have been removed:

# udm settings/packages list | sed -ne 's/^  packageList: //p' | grep -Fvxf <(exec apt-cache pkgnames)
>  packageList: univention-nagios-server
>  packageList: univention-kde
>  packageList: univention-x-core
>  packageList: univention-printquota
>  packageList: amarok
>  packageList: vlc-nox

Adding some of those packages to the deny-list also leads to essential packages being removed:

# udm settings/packages list | sed -ne 's/^  packageList: //p' | while read -r p;do apt-get -qs remove "$p"|grep -q -e univention-role-server-common -e univention-server-master && echo $p;done
> univention-mail-postfix
> univention-bind
> openssh-client
> nmap

Comment 2 Philipp Hahn

2021-05-04 06:06:09 CEST

Adding the wrong packages to the deny-list lead to broken environments in UCS technical training