Bug 55593 - univention-upgrade updateto dont get an hint or message
univention-upgrade updateto dont get an hint or message
Status: NEW
Product: UCS
Classification: Unclassified
Component: Update - univention-updater
UCS 5.0
Other Linux
: P5 enhancement (vote)
: ---
Assigned To: UCS maintainers
UCS maintainers
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2023-01-24 17:07 CET by Mirac Erdemiroglu
Modified: 2023-01-25 08:39 CET (History)
2 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 1: Cosmetic issue or missing function but workaround exists
Who will be affected by this bug?: 5: Will affect all installed domains
How will those affected feel about the bug?: 1: Nuisance – not a big deal but noticeable
User Pain: 0.029
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2023012421000201
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Mirac Erdemiroglu univentionstaff 2023-01-24 17:07:15 CET
If you are using an UCS 5.0-1 or UCS 5.0-2 and use this command in a shell:
"univention-upgrade --updateto=4.4-9"
the system dont show any message like 
"your system is higher then your argument you chose" or 
"The installed system version is higher then you want to install" 

and the system will be updated/upgraded.
Comment 1 Mirac Erdemiroglu univentionstaff 2023-01-24 17:44:57 CET
on a UCS 5.0-1 we get this message 
"Checking for release updates:5.0-2 is available but updater has been instructed to stop at version 4.4-999"
but on a UCS 5.0-2 we don't, which is somehow understandable since there is no newer version available except errata updates.
Comment 2 Philipp Hahn univentionstaff 2023-01-24 19:39:24 CET
`univention-upgrade` combines several old tools into one command:
- `univention-update` was used to do release upgrade; this is what you limit with `--updateto`
- `univention-actualise` was used to install security — now errata — updates only.

The low-level commands are still available below `/usr/share/univention-updater/` and do get called from there.

As such WONT-FIX or WORKS-FOR-ME (as intended).
Comment 3 Dirk Schnick 2023-01-25 08:15:27 CET
At least it seems to become a documentation bug as '<CTRL> f' -> 'univention-update <ENTER>' do not show one hint that these commands are changed and the UCS5 docs still say: 

"5.3.3 Updating individual systems via the command line
The following steps must be performed with root user rights.
An individual UCS system can be updated using the univention-upgrade command in the command line..."

It is, from point of view, extremely dangerous that the major release value is not considered by that command option.

If that has changed it must be documented.
Comment 4 Philipp Hahn univentionstaff 2023-01-25 08:39:22 CET
(In reply to Dirk Schnick from comment #3)
> At least it seems to become a documentation bug as '<CTRL> f' ->
> 'univention-update <ENTER>' do not show one hint that these commands are
> changed and the UCS5 docs still say: 

`univention-upgrade` was introduced with UCS 3.0-0 by Bug #23453 in 2011 and the behavior is unchanged since then.
The old scripts were first moved to `/usr/share/univention-udpater/` and replaced by a wrapper printing a warning for years until they were also finally removed in 2018 for UCS-4.3 by Bug #36719

> It is, from point of view, extremely dangerous that the major release value
> is not considered by that command option.

Because you're not doing a *release* update, but only installing *errata* with are for your *current* release only.

The "real" bug is often this: if you forget to specify that `--updateto 4.4-9` *once* in an non-interactive update with `--ignoressh --ignoreterm --noninteractive </dev/null` your system will update to the latest version and then will be past that boundary forever. There is no way to roll that back other then restoring your system from a backup.
In Bug #37869 I proposed to add a UCRV for this to make this option "sticky" and to get it applied every time until you overwrite it on CLI again.

> If that has changed it must be documented.

Nothing changed.