Weekly Changes – 15/01/2024
Not a lot happening this week other than an important fix for the openssh service on sites which also use openafs. Here are the details…
openssh
For openssh on Ubuntu the ssh.socket unit is now explicitly masked so that it is not unexpectedly enabled by a package script. This would only be useful if you want to only launch an ssh daemon when a client connects to the socket.
Also, the order in which services are started on Ubuntu has been tweaked so that the sshd.service does not wait for the openafs-client.service to be started. The intention was to avoid the potential for user-logins until their home directory file system was available. We recently discovered that this introduces a serious problem with upgrading the openssh-server package at boot time which prevents the system from ever completing the boot sequence. This issue only affected systems that have the openafs client installed so is likely to have been limited to Informatics.
Kerberos
The LCFG kerberos component resources have been tweaked so that any call to the configure method is done after any associated changes to the auth component are completed. This means the kerberos component should always be able to successfully change the owner and group of keytab files, even if the resources for those are only just added in the same profile change.
PkgForge Builder
The PkgForge builder has gained support for building packages for the Debian 12 bookworm platform. We expect to begin building LCFG packages for that platform in the near future but it will be a while before they are all done. Look out for future announcements on that subject.
Software
There is a new software option – LCFG_OPTIONS_ZSTD – which can be used to install the zstd command-line tools. That is mostly useful for Ubuntu Focal, the package is installed as standard on Jammy.
Changes to headers and package lists
Members of the Informatics Computing team can browse all the changes to the headers and package lists.
Recent comments