canonical / ubuntu-pro-client

Ubuntu Pro Client for offerings from Canonical
https://canonical-ubuntu-pro-client.readthedocs-hosted.com/en/latest/
GNU General Public License v3.0
52 stars 73 forks source link

fips: auto-upgrade to fips packages instead of hardcoding lists (SC-1745) #3140

Closed orndorffgrant closed 3 months ago

orndorffgrant commented 4 months ago

Why is this needed?

See commit messages

Fixes: #2667 LP: #2060769

Test Steps

On a {xenial,bionic,focal,jammy} {container,vm} try running

sudo env UA_FEATURES_FIPS_AUTO_UPGRADE_ALL=true pro enable fips-updates

Ensure that it upgrades the appropriate packages to their fips versions.

Checklist

Does this PR require extra reviews?

github-actions[bot] commented 4 months ago

🌎 This PR changes translatable messages. 🌏

Please select which scenarios apply. For further explanation, please read our policy on message changes.

github-actions[bot] commented 4 months ago

Jira: SC-1745

GitHub Issues:

Launchpad Bugs:

Documentation: The changes in this PR do not require documentation changes.

👍 this comment to confirm that this is correct.

orndorffgrant commented 3 months ago

I edited some behave tests in the latest commit. Not 100% sure I got all of them though since no fips tests run in CI