Updates (breakage), notification, and security implications

1 reply [Last post]
jfw01
Offline
Joined: 02/01/2022

This post is going to be a bit mushy because it is about three items:
- I took a Trisquel update and it broke the graphical updater

- there has been a change to the notification icon; it no longer distinguishes between security updates and other updates

- I am asking for security updates to be automatically installed in Menu/System/Administration/Software&Updates/Updates/"When there are security updates:"; before the frank breakage, I went through a phase where I am not confident that they were

My platform:
# uname -a
Linux user-ThinkPad-X200 5.15.0-102-generic #112+11.0trisquel28 SMP Tue Apr 9 09:24:57 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux

Minifree Lenovo X200, running LibreBoot

- Graphical updater

When I select Menu/System/Administration/Software updater, the following appears in ~/.xsession-errors:

--------------------
** Message: 12:21:27.835: PANEL_ORIENTATION_BOTTOM
Traceback (most recent call last):
File "/usr/bin/update-manager", line 40, in
from UpdateManager.UpdateManager import UpdateManager
File "/usr/lib/python3/dist-packages/UpdateManager/UpdateManager.py", line 30, in
import uaclient.api.u.pro.packages.updates.v1 as ua
ModuleNotFoundError: No module named 'uaclient'
Error in sys.excepthook:
Traceback (most recent call last):
File "/usr/lib/python3/dist-packages/apport_python_hook.py", line 153, in apport_excepthook
with os.fdopen(os.open(pr_filename,
FileNotFoundError: [Errno 2] No such file or directory: '/var/crash/_usr_bin_update-manager.1000.crash'

Original exception was:
Traceback (most recent call last):
File "/usr/bin/update-manager", line 40, in
from UpdateManager.UpdateManager import UpdateManager
File "/usr/lib/python3/dist-packages/UpdateManager/UpdateManager.py", line 30, in
import uaclient.api.u.pro.packages.updates.v1 as ua
ModuleNotFoundError: No module named 'uaclient'
--------------------

I will `apt update` soon. Does anyone want me to do other investigation first?

- notification:

At some stage, there were two indicator icons for available update: one for security updates and one for everything else. Now, there is only a trisquel with an arrow. I think that this is a change for the worse.

- automatic updates

At some stage, I found a security update that I didn't care about, waited half a day, and confirmed in some subset of dpkg that it was not installed until I installed updates generally with the graphical updater. This seems to be a regression. If, after the graphical updater starts going again, I can confirm it, what are the next steps?

- general

All of these seem to combine to make Trisquel less secure than it might be. Is there a good place ot have that conversation?

jfw01
Offline
Joined: 02/01/2022

ps the breakage is already fixed, so I assume that I have no contribution to make to the investigation:
https://gitlab.trisquel.org/trisquel/package-helpers/-/issues/154