Bug 48278 - (ucs433errata) Copy errata4.3-2 packages into 4.3-3 scope
(ucs433errata)
Copy errata4.3-2 packages into 4.3-3 scope
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: General
UCS 4.3
All other
: P5 normal (vote)
: UCS 4.3-3
Assigned To: Philipp Hahn
Erik Damrose
https://hutten.knut.univention.de/med...
:
Depends on: 48277
Blocks: ucs433meta 48279
  Show dependency treegraph
 
Reported: 2018-12-05 13:44 CET by Erik Damrose
Modified: 2018-12-13 12:39 CET (History)
0 users

See Also:
What kind of report is it?: Release Management
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Erik Damrose univentionstaff 2018-12-05 13:44:09 CET
All packages from errata4.3-2 need to be copied into the 4.3-3 scope. Also copy all unannounced udebs. Import unmaintained Debian (Security) Updates. Make sure u-errata-level is copied as well.
Comment 1 Philipp Hahn univentionstaff 2018-12-06 16:15:07 CET
OK: repo-copy-scope
OK: copy ucs-test
OK: debmirror
  this already includes the pending security updates for "tiff" and "openssl"
OK: all/univention-errata-level_4.3.2-376_all.deb

grub2 needed re-signing:

cd $REPOS/ucs/base/grub-efi-amd64-signed 
scp omar:/var/univention/buildsystem2/apt/ucs_4.3-0-ucs4.3-3/amd64/grub-efi-amd64-bin_*.deb .
scp omar:/var/univention/buildsystem2/apt/ucs_4.3-0-ucs4.3-3/amd64/grub-common_*.deb .
dpkg -x ./grub-common_*_amd64.deb ./ucs433/
dpkg -x ./grub-efi-amd64-bin_*_amd64.deb ./ucs433/
make GRUBDIR=./ucs433/usr/lib/grub/x86_64-efi TOKEN='Univention GmbH' CERT='Univention 2014' maintainerclean all
rm -rf ./ucs433/ ./grub-*_amd64.deb

dch -i 'Bug #48278: Rebuild signed GRUB 2.02~beta3-5+deb9u1A~4.3.3.201812061306'
git add -- g*.efi.signed debian/changelog
git commit -m 'Bug #48278 grub: Rebuild signed GRUB 2.02~beta3-5+deb9u1A~4.3.3.201812061306'
git push

ssh -t omar repo_admin.py -G git@git.knut.univention.de:univention/ucs.git -b 4.3-3 -P base/grub-efi-amd64-signed -p grub-efi-amd64-signed -r 4.3-0-0 -s ucs4.3-3
ssh -t ladda build-package-ng -r 4.3 -s ucs4.3-3 -p grub-efi-amd64-signed --force-arch

[4.3-3] 250f0de3e8 Bug #48278 grub: Rebuild signed GRUB 2.02~beta3-5+deb9u1A~4.3.3.201812061306
 base/grub-efi-amd64-signed/debian/changelog   |   6 ++++++
 base/grub-efi-amd64-signed/gcdx64.efi.signed  | Bin 2537808 -> 2537808 bytes
 base/grub-efi-amd64-signed/grubx64.efi.signed | Bin 930640 -> 930640 bytes
 3 files changed, 6 insertions(+)

Package: grub-efi-amd64-signed
Version: 2.0.0-2A~4.3.0.201812061547
Branch: ucs_4.3-0
Scope: ucs4.3-3
Comment 2 Erik Damrose univentionstaff 2018-12-06 16:47:39 CET
OK: u-errata-level
OK: libtiff5 4.0.8-2+deb9u4
OK: openssl 1.1.0j-1~deb9u1
Comment 3 Erik Damrose univentionstaff 2018-12-07 15:25:57 CET
Verified
Comment 4 Erik Damrose univentionstaff 2018-12-13 12:39:25 CET
Closed: UCS 4.3-3 has been released