← Back to team overview

debcrafters-packages team mailing list archive

[Bug 2115114] [NEW] apt-check does not determine ESM availability correctly

 

Public bug reported:

python3 /usr/lib/update-notifier/apt-check --human-readable
produces this output on a riscv64 system with Ubuntu Pro enabled:

$ python3 /usr/lib/update-notifier/apt-check --human-readable
Expanded Security Maintenance for Applications is not enabled.

0 updates can be applied immediately.

Enable ESM Apps to receive additional future security updates.
See https://ubuntu.com/esm or run: sudo pro status


Suggesting to switch on ESM on riscv64 does not make much sense as it is not available.

The logic in is_esm_distro() is not enough to determine whether ESM is
available on the current system as availability depends on the
architecture.

`sudo pro status` output on my system is

$ sudo pro status
SERVICE          ENTITLED  STATUS       DESCRIPTION
landscape        yes       enabled      Management and administration tool for Ubuntu

For a list of all Ubuntu Pro services, run 'pro status --all'
Enable services with: pro enable <service>

     Account: <email address>
Subscription: Ubuntu Pro - free personal subscription

`sudo pro status --all` output is

$ sudo pro status --all
SERVICE          ENTITLED  STATUS       DESCRIPTION
anbox-cloud      yes       n/a          Scalable Android in the cloud
cc-eal           yes       n/a          Common Criteria EAL2 Provisioning Packages
esm-apps         yes       n/a          Expanded Security Maintenance for Applications
esm-infra        yes       n/a          Expanded Security Maintenance for Infrastructure
fips             yes       n/a          NIST-certified FIPS crypto packages
fips-preview     yes       n/a          Preview of FIPS crypto packages undergoing certification with NIST
fips-updates     yes       n/a          FIPS compliant crypto packages with stable security updates
landscape        yes       enabled      Management and administration tool for Ubuntu
livepatch        yes       n/a          Canonical Livepatch service
realtime-kernel  yes       n/a          Ubuntu kernel with PREEMPT_RT patches integrated
ros              yes       n/a          Security Updates for the Robot Operating System
ros-updates      yes       n/a          All Updates for the Robot Operating System
usg              yes       n/a          Security compliance and audit tools

Enable services with: pro enable <service>

     Account: <email address>
Subscription: Ubuntu Pro - free personal subscription


Adding architecture specific information to package distro_info might be the right approach.
--- 
ProblemType: Bug
ApportVersion: 2.28.1-0ubuntu3.7
Architecture: riscv64
CasperMD5json:
 {
   "result": "skip"
 }
DistroRelease: Ubuntu 24.04
InstallationDate: Installed on 2025-05-17 (34 days ago)
InstallationMedia: Ubuntu-Server 24.04.2 LTS "Noble Numbat" - Release riscv64 (20250517)
Package: update-notifier
PackageArchitecture: riscv64
ProcVersionSignature: Ubuntu 6.14.0-15.15.2~24.04.1-generic 6.14.0
RebootRequiredPkgs: Error: path contained symlinks.
Tags: noble
Uname: Linux 6.14.0-15-generic riscv64
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: N/A
_MarkForUpload: True

** Affects: distro-info (Ubuntu)
     Importance: Undecided
         Status: New

** Affects: update-notifier (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: apport-collected noble

** Also affects: distro-info (Ubuntu)
   Importance: Undecided
       Status: New

** Tags added: apport-collected noble

** Description changed:

  python3 /usr/lib/update-notifier/apt-check --human-readable
  produces this output on a riscv64 system with Ubuntu Pro enabled:
  
  $ python3 /usr/lib/update-notifier/apt-check --human-readable
  Expanded Security Maintenance for Applications is not enabled.
  
  0 updates can be applied immediately.
  
  Enable ESM Apps to receive additional future security updates.
  See https://ubuntu.com/esm or run: sudo pro status
  
  
  Suggesting to switch on ESM on riscv64 does not make much sense as it is not available.
  
  The logic in is_esm_distro() is not enough to determine whether ESM is
  available on the current system as availability depends on the
  architecture.
  
  `sudo pro status` output on my system is
  
  $ sudo pro status
  SERVICE          ENTITLED  STATUS       DESCRIPTION
  landscape        yes       enabled      Management and administration tool for Ubuntu
  
  For a list of all Ubuntu Pro services, run 'pro status --all'
  Enable services with: pro enable <service>
  
       Account: <email address>
  Subscription: Ubuntu Pro - free personal subscription
  
  `sudo pro status --all` output is
  
  $ sudo pro status --all
  SERVICE          ENTITLED  STATUS       DESCRIPTION
  anbox-cloud      yes       n/a          Scalable Android in the cloud
  cc-eal           yes       n/a          Common Criteria EAL2 Provisioning Packages
  esm-apps         yes       n/a          Expanded Security Maintenance for Applications
  esm-infra        yes       n/a          Expanded Security Maintenance for Infrastructure
  fips             yes       n/a          NIST-certified FIPS crypto packages
  fips-preview     yes       n/a          Preview of FIPS crypto packages undergoing certification with NIST
  fips-updates     yes       n/a          FIPS compliant crypto packages with stable security updates
  landscape        yes       enabled      Management and administration tool for Ubuntu
  livepatch        yes       n/a          Canonical Livepatch service
  realtime-kernel  yes       n/a          Ubuntu kernel with PREEMPT_RT patches integrated
  ros              yes       n/a          Security Updates for the Robot Operating System
  ros-updates      yes       n/a          All Updates for the Robot Operating System
  usg              yes       n/a          Security compliance and audit tools
  
  Enable services with: pro enable <service>
  
       Account: <email address>
  Subscription: Ubuntu Pro - free personal subscription
  
  
  Adding architecture specific information to package distro_info might be the right approach.
+ --- 
+ ProblemType: Bug
+ ApportVersion: 2.28.1-0ubuntu3.7
+ Architecture: riscv64
+ CasperMD5json:
+  {
+    "result": "skip"
+  }
+ DistroRelease: Ubuntu 24.04
+ InstallationDate: Installed on 2025-05-17 (34 days ago)
+ InstallationMedia: Ubuntu-Server 24.04.2 LTS "Noble Numbat" - Release riscv64 (20250517)
+ Package: update-notifier
+ PackageArchitecture: riscv64
+ ProcVersionSignature: Ubuntu 6.14.0-15.15.2~24.04.1-generic 6.14.0
+ RebootRequiredPkgs: Error: path contained symlinks.
+ Tags: noble
+ Uname: Linux 6.14.0-15-generic riscv64
+ UpgradeStatus: No upgrade log present (probably fresh install)
+ UserGroups: N/A
+ _MarkForUpload: True

-- 
You received this bug notification because you are a member of
Debcrafters packages, which is subscribed to distro-info in Ubuntu.
https://bugs.launchpad.net/bugs/2115114

Title:
  apt-check does not determine ESM availability correctly

Status in distro-info package in Ubuntu:
  New
Status in update-notifier package in Ubuntu:
  New

Bug description:
  python3 /usr/lib/update-notifier/apt-check --human-readable
  produces this output on a riscv64 system with Ubuntu Pro enabled:

  $ python3 /usr/lib/update-notifier/apt-check --human-readable
  Expanded Security Maintenance for Applications is not enabled.

  0 updates can be applied immediately.

  Enable ESM Apps to receive additional future security updates.
  See https://ubuntu.com/esm or run: sudo pro status

  
  Suggesting to switch on ESM on riscv64 does not make much sense as it is not available.

  The logic in is_esm_distro() is not enough to determine whether ESM is
  available on the current system as availability depends on the
  architecture.

  `sudo pro status` output on my system is

  $ sudo pro status
  SERVICE          ENTITLED  STATUS       DESCRIPTION
  landscape        yes       enabled      Management and administration tool for Ubuntu

  For a list of all Ubuntu Pro services, run 'pro status --all'
  Enable services with: pro enable <service>

       Account: <email address>
  Subscription: Ubuntu Pro - free personal subscription

  `sudo pro status --all` output is

  $ sudo pro status --all
  SERVICE          ENTITLED  STATUS       DESCRIPTION
  anbox-cloud      yes       n/a          Scalable Android in the cloud
  cc-eal           yes       n/a          Common Criteria EAL2 Provisioning Packages
  esm-apps         yes       n/a          Expanded Security Maintenance for Applications
  esm-infra        yes       n/a          Expanded Security Maintenance for Infrastructure
  fips             yes       n/a          NIST-certified FIPS crypto packages
  fips-preview     yes       n/a          Preview of FIPS crypto packages undergoing certification with NIST
  fips-updates     yes       n/a          FIPS compliant crypto packages with stable security updates
  landscape        yes       enabled      Management and administration tool for Ubuntu
  livepatch        yes       n/a          Canonical Livepatch service
  realtime-kernel  yes       n/a          Ubuntu kernel with PREEMPT_RT patches integrated
  ros              yes       n/a          Security Updates for the Robot Operating System
  ros-updates      yes       n/a          All Updates for the Robot Operating System
  usg              yes       n/a          Security compliance and audit tools

  Enable services with: pro enable <service>

       Account: <email address>
  Subscription: Ubuntu Pro - free personal subscription

  
  Adding architecture specific information to package distro_info might be the right approach.
  --- 
  ProblemType: Bug
  ApportVersion: 2.28.1-0ubuntu3.7
  Architecture: riscv64
  CasperMD5json:
   {
     "result": "skip"
   }
  DistroRelease: Ubuntu 24.04
  InstallationDate: Installed on 2025-05-17 (34 days ago)
  InstallationMedia: Ubuntu-Server 24.04.2 LTS "Noble Numbat" - Release riscv64 (20250517)
  Package: update-notifier
  PackageArchitecture: riscv64
  ProcVersionSignature: Ubuntu 6.14.0-15.15.2~24.04.1-generic 6.14.0
  RebootRequiredPkgs: Error: path contained symlinks.
  Tags: noble
  Uname: Linux 6.14.0-15-generic riscv64
  UpgradeStatus: No upgrade log present (probably fresh install)
  UserGroups: N/A
  _MarkForUpload: True

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/distro-info/+bug/2115114/+subscriptions



Follow ups