touch-packages team mailing list archive

[Stéphane Graber <stgraber@xxxxxxxxxxxx>]

** Changed in: ubuntu-system-image
     Assignee: Stéphane Graber (stgraber) => (unassigned)

** Changed in: lxc-android-config (Ubuntu)
     Assignee: Stéphane Graber (stgraber) => (unassigned)

** Changed in: lxc-android-config (Ubuntu Saucy)
     Assignee: Stéphane Graber (stgraber) => (unassigned)

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click-apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1215092

Title:
  please add support to run postinst-style code on first boot after
  upgrades

Status in Ubuntu system image:
  In Progress
Status in click-apparmor package in Ubuntu:
  Won't Fix
Status in lxc-android-config package in Ubuntu:
  Fix Released
Status in click-apparmor source package in Saucy:
  Won't Fix
Status in lxc-android-config source package in Saucy:
  Fix Released
Status in click-apparmor source package in Trusty:
  Won't Fix

Bug description:
  Currently updates to system packages are run on the server with postinst, triggers, etc running there such that when an image based update is delivered, all of this already done. This a great for the vast majority of cases but there are times when this is not enough, for example, updating click package apparmor profiles after the system has apparmor policy updates. Consider this scenario:
   1. user uses RO Ubuntu image on a device
   2. user install 15 click packages
   3. bug is found in apparmor policy for the ubuntu-sdk apparmor template
   4. apparmor-easyprof-ubuntu is updated to correct the template
   5. image based upgrades picks this up and include the new apparmor-easyprof-ubuntu in its update
   6. the update is delivered to users

  At this point, newly installed click packages will get the apparmor
  policy fixes, but not the original 15. It is a requirement for
  application confinement that we are able to update policy for already
  installed click packages. Currently, policy updates may happen via
  apparmor, apparmor-easyprof-ubuntu and/or click-apparmor.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-system-image/+bug/1215092/+subscriptions