freedomofpress / securedrop

GitHub repository for the SecureDrop whistleblower platform. Do not submit tips here!
https://securedrop.org/
Other
3.62k stars 686 forks source link

Ensure that gcc, wifi-related packages are not installed on Xenial on upgrade #4163

Closed eloquence closed 5 years ago

eloquence commented 5 years ago

In #3965, @kushaldas provided the following list of installed packages:

In the default xenial app VM (based on libvirt_staging_xenial_app_staging): ``` - acl Access control list utilities - adwaita-icon-theme default icon theme of GNOME (small subset) - at-spi2-core Assistive Technology Service Provider Interface (dbus core) - bcache-tools bcache userspace tools - btrfs-tools Checksumming Copy on Write Filesystem utilities - cloud-guest-utils cloud guest utilities - cloud-initramfs-copymods copy initramfs modules into root filesystem for later use - cloud-initramfs-dyn-netconf write a network interface file in /run for BOOTIF - colord system service to manage device colour profiles -- system daemon - colord-data system service to manage device colour profiles -- data files - dconf-gsettings-backend:amd64 simple configuration storage system - GSettings back-end - dconf-service simple configuration storage system - D-Bus service - dns-root-data DNS root data including root zone and DNSSEC key - dnsmasq-base Small caching DNS proxy and DHCP/TFTP server - firefox Safe and easy web browser from Mozilla - gettext GNU Internationalization utilities - git fast, scalable, distributed revision control system - git-man fast, scalable, distributed revision control system (manual pages) - glib-networking:amd64 network-related giomodules for GLib - glib-networking-common network-related giomodules for GLib - data files - glib-networking-services network-related giomodules for GLib - D-Bus services - grub-legacy-ec2 Handles update-grub for ec2 instances - gsettings-desktop-schemas GSettings desktop-wide schemas - humanity-icon-theme Humanity Icon theme - ifenslave configure network interfaces for parallel routing (bonding) - libasound2:amd64 shared library for ALSA applications - libasound2-data Configuration files and profiles for ALSA drivers - libasprintf-dev:amd64 GNU Internationalization library development files - libatk-bridge2.0-0:amd64 AT-SPI 2 toolkit bridge - shared library - libatm1:amd64 shared library for ATM (Asynchronous Transfer Mode) - libatspi2.0-0:amd64 Assistive Technology Service Provider Interface - shared library - libboost-filesystem1.58.0:amd64 filesystem operations (portable paths, iteration over directories, etc) in C++ - libboost-system1.58.0:amd64 Operating system (e.g. diagnostics support) library - libcairo-gobject2:amd64 Cairo 2D vector graphics library (GObject library) - libcapnp-0.5.3:amd64 Cap'n Proto C++ library - libcgi-fast-perl CGI subclass for work with FCGI - libcgi-pm-perl module for Common Gateway Interface applications - libcolord2:amd64 system service to manage device colour profiles -- runtime - libcolorhug2:amd64 library to access the ColorHug colourimeter -- runtime - libcroco3:amd64 Cascading Style Sheet (CSS) parsing and manipulation toolkit - libcwidget3v5:amd64 high-level terminal interface library for C++ (runtime files) - libdconf1:amd64 simple configuration storage system - runtime library - libdumbnet1:amd64 dumb, portable networking library -- shared library - libegl1-mesa:amd64 free implementation of the EGL API -- runtime - libencode-locale-perl utility to determine the locale encoding - libepoxy0:amd64 OpenGL function pointer management library - liberror-perl Perl module for error/exception handling in an OO-ish way - libexif12:amd64 library to parse EXIF files - libfcgi-perl helper module for FastCGI - libgbm1:amd64 generic buffer management API -- runtime - libgd3:amd64 GD Graphics Library - libgettextpo-dev:amd64 GNU Internationalization library development files - libgettextpo0:amd64 GNU Internationalization library - libgphoto2-6:amd64 gphoto2 digital camera library - libgphoto2-l10n gphoto2 digital camera library - localized messages - libgphoto2-port12:amd64 gphoto2 digital camera port library - libgtk-3-0:amd64 GTK+ graphical user interface library - libgtk-3-bin programs for the GTK+ graphical user interface library - libgtk-3-common common files for the GTK+ graphical user interface library - libgudev-1.0-0:amd64 GObject-based wrapper library for libudev - libgusb2:amd64 GLib wrapper around libusb1 - libhtml-parser-perl collection of modules that parse HTML text documents - libhtml-tagset-perl Data tables pertaining to HTML - libhttp-date-perl module of date conversion routines - libhttp-message-perl perl interface to HTTP style messages - libieee1284-3:amd64 cross-platform library for parallel port access - libio-html-perl open an HTML file with automatic charset detection - libjson-glib-1.0-0:amd64 GLib JSON manipulation library - libjson-glib-1.0-common GLib JSON manipulation library (common files) - liblcms2-2:amd64 Little CMS 2 color management library - libltdl7:amd64 System independent dlopen wrapper for GNU libtool - liblwp-mediatypes-perl module to guess media type for a file or a URL - liblxc1 Linux Containers userspace tools (library) - liblzo2-2:amd64 data compression library - libmirclient9:amd64 Display server for Ubuntu - client library - libmircommon7:amd64 Display server for Ubuntu - shared library - libmircore1:amd64 Display server for Ubuntu - shared library - libmirprotobuf3:amd64 Display server for Ubuntu - RPC definitions - libmspack0:amd64 library for Microsoft compression formats (shared library) - libnetfilter-conntrack3:amd64 Netfilter netlink-conntrack library - libprotobuf-lite9v5:amd64 protocol buffers C++ library (lite version) - libproxy1v5:amd64 automatic proxy configuration management library (shared) - librest-0.7-0:amd64 REST service access library - librsvg2-2:amd64 SAX-based renderer library for SVG files (runtime) - librsvg2-common:amd64 SAX-based renderer library for SVG files (extra runtime) - libsane:amd64 API library for scanners - libsane-common API library for scanners -- documentation and support files - libsigc++-2.0-0v5:amd64 type-safe Signal Framework for C++ - runtime - libsoup-gnome2.4-1:amd64 HTTP library implementation in C -- GNOME support library - libsoup2.4-1:amd64 HTTP library implementation in C -- Shared library - libstartup-notification0:amd64 library for program launch feedback (shared library) - libunistring0:amd64 Unicode string library for C - liburi-perl module to manipulate and access URI strings - libvpx3:amd64 VP8 and VP9 video codec (shared library) - libwayland-client0:amd64 wayland compositor infrastructure - client library - libwayland-cursor0:amd64 wayland compositor infrastructure - cursor library - libwayland-egl1-mesa:amd64 implementation of the Wayland EGL platform -- runtime - libwayland-server0:amd64 wayland compositor infrastructure - server library - libxcb-util1:amd64 utility libraries for X C Binding -- atom, aux and event - libxcb-xfixes0:amd64 X C Binding, xfixes extension - libxfont1:amd64 X11 font rasterisation library - libxkbcommon0:amd64 library interface to the XKB compiler - shared library - libxkbfile1:amd64 X11 keyboard file manipulation library - libxmlsec1 XML security library - libxmlsec1-openssl Openssl engine for the XML security library - libxslt1.1:amd64 XSLT 1.0 processing library - runtime library - linux-firmware-image-4.4.167-grsec Linux kernel firmware, version 4.4.167-grsec - linux-image-4.4.0-131-generic Linux kernel image for version 4.4.0 on 64 bit x86 SMP - linux-image-4.4.167-grsec Linux kernel, version 4.4.167-grsec - linux-image-extra-4.4.0-131-generic Linux kernel extra modules for version 4.4.0 on 64 bit x86 SMP - lxc-common Linux Containers userspace tools (common tools) - lxcfs FUSE based filesystem for LXC - lxd Container hypervisor based on LXC - daemon - lxd-client Container hypervisor based on LXC - client - mdadm tool to administer Linux MD arrays (software RAID) - open-iscsi iSCSI initiator tools - open-vm-tools Open VMware Tools for virtual machines hosted on VMware (CLI) - overlayroot use an overlayfs on top of a read-only root filesystem - pinentry-curses curses-based PIN or pass-phrase entry dialog for GnuPG - python3-software-properties manage the repositories that you install software from - snapd Daemon and tooling that enable snap packages - software-properties-common manage the repositories that you install software from (common) - sosreport Set of tools to gather troubleshooting data from a system - squashfs-tools Tool to create and append to squashfs filesystems - ubuntu-cloudimage-keyring GnuPG keys of the Ubuntu Cloud Image builder - ubuntu-mono Ubuntu Mono Icon theme - uidmap programs to help use subuids - vlan user mode programs to enable VLANs on your ethernet devices - x11-xkb-utils X11 XKB utilities - xauth X authentication utility - xfonts-base standard fonts for X - xfonts-encodings Encodings for X.Org fonts - xfonts-utils X Window System font utility programs - xfsprogs Utilities for managing the XFS filesystem - xserver-common common files used by various X servers - xvfb Virtual Framebuffer 'fake' X server - zerofree zero free blocks from ext2, ext3 and ext4 file-systems ```
In an upgraded production app VM ``` - apt-xapian-index maintenance and search tools for a Xapian index of Debian packages - bc GNU bc arbitrary precision calculator language - biosdevname apply BIOS-given names to network devices - cgmanager Central cgroup manager daemon - cpp-4.8 GNU C preprocessor - g++-4.8 GNU C++ compiler - gcc-4.8 GNU C compiler - gcc-4.8-base:amd64 GCC, the GNU Compiler Collection (base package) - gcc-4.9-base:amd64 GCC, the GNU Compiler Collection (base package) - heirloom-mailx feature-rich BSD mail(1) -- transitional package - landscape-common The Landscape administration system client - Common files - libapt-inst1.5:amd64 deb package format runtime library - libapt-pkg4.12:amd64 package management runtime library - libarchive-extract-perl generic archive extracting module - libasan0:amd64 AddressSanitizer -- a fast memory error detector - libbind9-90 BIND9 Shared Library used by BIND - libboost-iostreams1.54.0:amd64 Boost.Iostreams Library - libcgmanager0:amd64 Central cgroup manager daemon (client library) - libck-connector0:amd64 ConsoleKit libraries - libcloog-isl4:amd64 Chunky Loop Generator (runtime library) - libcurl3:amd64 easy-to-use client-side URL transfer library (OpenSSL flavour) - libcwidget3 high-level terminal interface library for C++ (runtime files) - libdns100 DNS Shared Library used by BIND - libept1.4.12:amd64 High-level library for managing Debian package information - libgc1c2:amd64 conservative garbage collector for C and C++ - libgcc-4.8-dev:amd64 GCC support library (development files) - libgck-1-0:amd64 Glib wrapper library for PKCS#11 - runtime - libgcr-3-common Library for Crypto UI related tasks - common files - libgcr-base-3-1:amd64 Library for Crypto related tasks - libgcrypt11:amd64 LGPL Crypto library - runtime library - libgnutls26:amd64 GNU TLS library - runtime library - libgssglue1:amd64 mechanism-switch gssapi library - libisc95 ISC Shared Library used by BIND - libisccc90 Command Channel Library used by BIND - libisccfg90 Config File Handling Library used by BIND - libisl10:amd64 manipulating sets and relations of integer points bounded by linear constraints - libiw30:amd64 Wireless tools - library - libjasper1:amd64 JasPer JPEG-2000 runtime library - libjson0:amd64 JSON manipulation library (transitional package) - liblog-message-perl powerful and flexible message logging mechanism - liblog-message-simple-perl simplified interface to Log::Message - liblwres90 Lightweight Resolver Library used by BIND - libmodule-pluggable-perl module for giving modules the ability to have plugins - libmodule-runtime-perl Perl module for runtime module handling - libnih-dbus1:amd64 NIH D-Bus Bindings Library - libnl-genl-3-200:amd64 library for dealing with netlink sockets - generic netlink - libpam-cap:amd64 POSIX 1003.1e capabilities (PAM module) - libparams-classify-perl Perl module for argument type classification - libparted0debian1:amd64 disk partition manipulator - shared library - libpcsclite1:amd64 Middleware to access a smart card using PC/SC (library) - libplymouth2:amd64 graphical boot animation and logger - shared libraries - libpod-latex-perl module to convert Pod data to formatted LaTeX - libprocps3:amd64 library for accessing process information from /proc - libpth20:amd64 GNU Portable Threads - libpython3.4-minimal:amd64 Minimal subset of the Python language (version 3.4) - librtmp0:amd64 toolkit for RTMP streams (shared library) - libsecret-1-0:amd64 Secret store - libsecret-common Secret store (common files) - libsigc++-2.0-0c2a:amd64 type-safe Signal Framework for C++ - runtime - libstdc++-4.8-dev:amd64 GNU Standard C++ Library v3 (development files) - libsystemd-daemon0:amd64 systemd utility library - libsystemd-login0:amd64 systemd login utility library - libterm-ui-perl Term::ReadLine UI made easy - libtext-soundex-perl implementation of the soundex algorithm - libxapian-1.3-5:amd64 Search engine library - libxapian22 Search engine library - libxtables10 netfilter xtables library - linux-firmware-image-4.4.144-grsec Linux kernel firmware, version 4.4.144-grsec - linux-image-4.4.0-31-generic Linux kernel image for version 4.4.0 on 64 bit x86 SMP - linux-image-4.4.144-grsec Linux kernel, version 4.4.144-grsec - linux-image-extra-4.4.0-31-generic Linux kernel extra modules for version 4.4.0 on 64 bit x86 SMP - lockfile-progs Programs for locking and unlocking files and mailboxes - memtest86 - module-init-tools transitional dummy package (module-init-tools to kmod) - mountall filesystem mounting tool - perl-modules Core Perl modules - pinentry-gtk2 GTK+-2-based PIN or pass-phrase entry dialog for GnuPG - python-attr Attributes without boilerplate (Python 2) - python-cffi-backend Foreign Function Interface for Python calling C code - backend - python-chardet universal character encoding detector for Python2 - python-colorama Cross-platform colored terminal text in Python - Python 2.x - python-configobj simple but powerful config file reader and writer for Python 2 - python-cryptography Python library exposing cryptographic recipes and primitives (Python 2) - python-debian Python modules to work with Debian-related data formats - python-distlib low-level components of python distutils2/packaging - python-enum34 backport of Python 3.4's enum package - python-gdbm GNU dbm database support for Python - python-html5lib HTML parser/tokenizer based on the WHATWG HTML5 specification (Python 2) - python-idna Python IDNA2008 (RFC 5891) handling (Python 2) - python-ipaddress Backport of Python 3 ipaddress module (Python 2) - python-ndg-httpsclient enhanced HTTPS support for httplib and urllib2 using PyOpenSSL for Python2 - python-openssl Python 2 wrapper around the OpenSSL library - python-pam Python interface to the PAM library - python-pyasn1 ASN.1 library for Python (Python 2 module) - python-pyasn1-modules Collection of protocols modules written in ASN.1 language - python-requests elegant and simple HTTP library for Python2, built for human beings - python-serial pyserial - module encapsulating access for the serial port - python-service-identity Service identity verification for pyOpenSSL (Python 2 module) - python-six Python 2 and 3 compatibility library (Python 2 interface) - python-twisted-bin Event-based framework for internet applications - python-twisted-core Event-based framework for internet applications - python-urllib3 HTTP library with thread-safe connection pooling for Python - python-xapian Xapian search engine interface for Python - python-zope.interface Interfaces for Python - python3-xapian1.3 Xapian search engine interface for Python3 - python3.4 Interactive high-level object-oriented language (version 3.4) - python3.4-minimal Minimal subset of the Python language (version 3.4) - systemd-services systemd runtime services - systemd-shim shim for systemd - update-motd compliments pam_motd in libpam-modules - upstart event-based init daemon - essential binaries - w3m WWW browsable pager with excellent tables/frames support - watershed reduce superfluous executions of idempotent command - wireless-tools Tools for manipulating Linux Wireless Extensions - wpasupplicant client support for WPA and WPA2 (IEEE 802.11i) ```
In the default xenial mon VM (based on libvirt_staging_xenial_mon_staging) ``` - acl Access control list utilities - bcache-tools bcache userspace tools - btrfs-tools Checksumming Copy on Write Filesystem utilities - cloud-guest-utils cloud guest utilities - cloud-initramfs-copymods copy initramfs modules into root filesystem for later use - cloud-initramfs-dyn-netconf write a network interface file in /run for BOOTIF - dns-root-data DNS root data including root zone and DNSSEC key - dnsmasq-base Small caching DNS proxy and DHCP/TFTP server - git fast, scalable, distributed revision control system - git-man fast, scalable, distributed revision control system (manual pages) - grub-legacy-ec2 Handles update-grub for ec2 instances - ifenslave configure network interfaces for parallel routing (bonding) - libatm1:amd64 shared library for ATM (Asynchronous Transfer Mode) - libcgi-fast-perl CGI subclass for work with FCGI - libcgi-pm-perl module for Common Gateway Interface applications - libcwidget3v5:amd64 high-level terminal interface library for C++ (runtime files) - libdpkg-perl Dpkg perl modules - libdumbnet1:amd64 dumb, portable networking library -- shared library - libencode-locale-perl utility to determine the locale encoding - liberror-perl Perl module for error/exception handling in an OO-ish way - libfcgi-perl helper module for FastCGI - libfile-fcntllock-perl Perl module for file locking with fcntl(2) - libhtml-parser-perl collection of modules that parse HTML text documents - libhtml-tagset-perl Data tables pertaining to HTML - libhttp-date-perl module of date conversion routines - libhttp-message-perl perl interface to HTTP style messages - libio-html-perl open an HTML file with automatic charset detection - liblwp-mediatypes-perl module to guess media type for a file or a URL - liblxc1 Linux Containers userspace tools (library) - libmspack0:amd64 library for Microsoft compression formats (shared library) - libnetfilter-conntrack3:amd64 Netfilter netlink-conntrack library - libsigc++-2.0-0v5:amd64 type-safe Signal Framework for C++ - runtime - liburi-perl module to manipulate and access URI strings - libxmlsec1 XML security library - libxmlsec1-openssl Openssl engine for the XML security library - libxslt1.1:amd64 XSLT 1.0 processing library - runtime library - linux-firmware-image-4.4.167-grsec Linux kernel firmware, version 4.4.167-grsec - linux-image-4.4.0-131-generic Linux kernel image for version 4.4.0 on 64 bit x86 SMP - linux-image-4.4.167-grsec Linux kernel, version 4.4.167-grsec - linux-image-extra-4.4.0-131-generic Linux kernel extra modules for version 4.4.0 on 64 bit x86 SMP - lxc-common Linux Containers userspace tools (common tools) - lxcfs FUSE based filesystem for LXC - lxd Container hypervisor based on LXC - daemon - lxd-client Container hypervisor based on LXC - client - mdadm tool to administer Linux MD arrays (software RAID) - open-iscsi iSCSI initiator tools - open-vm-tools Open VMware Tools for virtual machines hosted on VMware (CLI) - overlayroot use an overlayfs on top of a read-only root filesystem - python3-software-properties manage the repositories that you install software from - snapd Daemon and tooling that enable snap packages - software-properties-common manage the repositories that you install software from (common) - sosreport Set of tools to gather troubleshooting data from a system - squashfs-tools Tool to create and append to squashfs filesystems - ubuntu-cloudimage-keyring GnuPG keys of the Ubuntu Cloud Image builder - uidmap programs to help use subuids - vlan user mode programs to enable VLANs on your ethernet devices - xfsprogs Utilities for managing the XFS filesystem - zerofree zero free blocks from ext2, ext3 and ext4 file-systems ```
In an upgraded production mon VM ``` - apt-xapian-index maintenance and search tools for a Xapian index of Debian packages - bc GNU bc arbitrary precision calculator language - biosdevname apply BIOS-given names to network devices - cgmanager Central cgroup manager daemon - cpp-4.8 GNU C preprocessor - gcc-4.8 GNU C compiler - gcc-4.8-base:amd64 GCC, the GNU Compiler Collection (base package) - gcc-4.9-base:amd64 GCC, the GNU Compiler Collection (base package) - heirloom-mailx feature-rich BSD mail(1) -- transitional package - landscape-common The Landscape administration system client - Common files - libapt-inst1.5:amd64 deb package format runtime library - libapt-pkg4.12:amd64 package management runtime library - libarchive-extract-perl generic archive extracting module - libasan0:amd64 AddressSanitizer -- a fast memory error detector - libbind9-90 BIND9 Shared Library used by BIND - libboost-iostreams1.54.0:amd64 Boost.Iostreams Library - libcgmanager0:amd64 Central cgroup manager daemon (client library) - libck-connector0:amd64 ConsoleKit libraries - libcloog-isl4:amd64 Chunky Loop Generator (runtime library) - libcurl3:amd64 easy-to-use client-side URL transfer library (OpenSSL flavour) - libcwidget3 high-level terminal interface library for C++ (runtime files) - libdns100 DNS Shared Library used by BIND - libept1.4.12:amd64 High-level library for managing Debian package information - libgcc-4.8-dev:amd64 GCC support library (development files) - libgck-1-0:amd64 Glib wrapper library for PKCS#11 - runtime - libgcr-3-common Library for Crypto UI related tasks - common files - libgcr-base-3-1:amd64 Library for Crypto related tasks - libgcrypt11:amd64 LGPL Crypto library - runtime library - libgnutls26:amd64 GNU TLS library - runtime library - libgssglue1:amd64 mechanism-switch gssapi library - libisc95 ISC Shared Library used by BIND - libisccc90 Command Channel Library used by BIND - libisccfg90 Config File Handling Library used by BIND - libisl10:amd64 manipulating sets and relations of integer points bounded by linear constraints - libiw30:amd64 Wireless tools - library - libjson0:amd64 JSON manipulation library (transitional package) - libkyotocabinet16:amd64 Straightforward implementation of DBM - shared library - liblog-message-perl powerful and flexible message logging mechanism - liblog-message-simple-perl simplified interface to Log::Message - liblwres90 Lightweight Resolver Library used by BIND - libmodule-pluggable-perl module for giving modules the ability to have plugins - libmodule-runtime-perl Perl module for runtime module handling - libmysqlclient18:amd64 MySQL database client library - libnih-dbus1:amd64 NIH D-Bus Bindings Library - libnl-genl-3-200:amd64 library for dealing with netlink sockets - generic netlink - libpam-cap:amd64 POSIX 1003.1e capabilities (PAM module) - libparams-classify-perl Perl module for argument type classification - libparted0debian1:amd64 disk partition manipulator - shared library - libpcsclite1:amd64 Middleware to access a smart card using PC/SC (library) - libplymouth2:amd64 graphical boot animation and logger - shared libraries - libpod-latex-perl module to convert Pod data to formatted LaTeX - libprocps3:amd64 library for accessing process information from /proc - libpython3.4-minimal:amd64 Minimal subset of the Python language (version 3.4) - librtmp0:amd64 toolkit for RTMP streams (shared library) - libsigc++-2.0-0c2a:amd64 type-safe Signal Framework for C++ - runtime - libsystemd-daemon0:amd64 systemd utility library - libsystemd-login0:amd64 systemd login utility library - libterm-ui-perl Term::ReadLine UI made easy - libtext-soundex-perl implementation of the soundex algorithm - libxapian-1.3-5:amd64 Search engine library - libxapian22 Search engine library - libxtables10 netfilter xtables library - linux-firmware-image-4.4.144-grsec Linux kernel firmware, version 4.4.144-grsec - linux-image-4.4.0-31-generic Linux kernel image for version 4.4.0 on 64 bit x86 SMP - linux-image-4.4.144-grsec Linux kernel, version 4.4.144-grsec - linux-image-extra-4.4.0-31-generic Linux kernel extra modules for version 4.4.0 on 64 bit x86 SMP - lockfile-progs Programs for locking and unlocking files and mailboxes - memtest86 - module-init-tools transitional dummy package (module-init-tools to kmod) - mountall filesystem mounting tool - perl-modules Core Perl modules - python-attr Attributes without boilerplate (Python 2) - python-cffi-backend Foreign Function Interface for Python calling C code - backend - python-chardet universal character encoding detector for Python2 - python-configobj simple but powerful config file reader and writer for Python 2 - python-cryptography Python library exposing cryptographic recipes and primitives (Python 2) - python-debian Python modules to work with Debian-related data formats - python-enum34 backport of Python 3.4's enum package - python-gdbm GNU dbm database support for Python - python-idna Python IDNA2008 (RFC 5891) handling (Python 2) - python-ipaddress Backport of Python 3 ipaddress module (Python 2) - python-ndg-httpsclient enhanced HTTPS support for httplib and urllib2 using PyOpenSSL for Python2 - python-openssl Python 2 wrapper around the OpenSSL library - python-pam Python interface to the PAM library - python-pkg-resources Package Discovery and Resource Access using pkg_resources - python-pyasn1 ASN.1 library for Python (Python 2 module) - python-pyasn1-modules Collection of protocols modules written in ASN.1 language - python-requests elegant and simple HTTP library for Python2, built for human beings - python-serial pyserial - module encapsulating access for the serial port - python-service-identity Service identity verification for pyOpenSSL (Python 2 module) - python-six Python 2 and 3 compatibility library (Python 2 interface) - python-twisted-bin Event-based framework for internet applications - python-twisted-core Event-based framework for internet applications - python-urllib3 HTTP library with thread-safe connection pooling for Python - python-xapian Xapian search engine interface for Python - python-zope.interface Interfaces for Python - python3-xapian1.3 Xapian search engine interface for Python3 - python3.4 Interactive high-level object-oriented language (version 3.4) - python3.4-minimal Minimal subset of the Python language (version 3.4) - systemd-services systemd runtime services - systemd-shim shim for systemd - update-motd compliments pam_motd in libpam-modules - upstart event-based init daemon - essential binaries - w3m WWW browsable pager with excellent tables/frames support - watershed reduce superfluous executions of idempotent command - wireless-tools Tools for manipulating Linux Wireless Extensions - wpasupplicant client support for WPA and WPA2 (IEEE 802.11i) ```


Note the appearance of wireless related packages like wpasupplicant, libiw30 and wireless-tools in the upgrade scenarios. Since wireless support is not provided at the kernel-level, these packages are relatively harmless, but they should never be installed.

zenmonkeykstop commented 5 years ago

The attached files are the output of sudo apt list --installed for a 2014 Mac Mini system set up via the upgrade-in-place docs. packages-xenial-uip-mon.txt packages-xenial-uip-app.txt

redshiftzero commented 5 years ago

These package lists are from a fresh install on 2014 Mac Minis on Xenial (initially on 0.12.0~rc1 a few days back, app has updated to rc3 but I had mon unplugged due to limited outlets in my apartment heh so mon has not gone up to rc3 yet):

app-xenial-fresh.txt mon-xenial-fresh.txt

The wireless related packages flagged in this ticket are absent. Note that this Xenial install was done following the recently added Xenial documentation, i.e. with only OpenSSH selected.

emkll commented 5 years ago

In the case of VMs , bento/ubuntu-14.04 contains those packages (gcc, wpasuppplicant, wireless-tools and libiw30) by default.

A clean Trusty install yields the following packages on the system: app-trusty.txt mon-trusty.txt

This should explain the Xenial upgrade boxes containing those packages in VMs.

emkll commented 5 years ago

I have a physical instance that is running trusty, using 0.12.0-rc3: I am seeing the above packages installedas well, investigating if it might be the ubuntu do-release-upgrade changes that are pulling in these dependencies.

eloquence commented 5 years ago

Since these extra packages are just confusing and do not pose significant risks given the lack of wireless support in the kernel, we agreed during standup today to handle this in the next point release.

emkll commented 5 years ago

A clean install of Trusty 14.04.5, by default, includes the packages mentioned in this ticket. This is not a regression due to the Xenial upgrade. trusty-hardware.txt

emkll commented 5 years ago

A version of gcc or gcc-base as well as dpkg-dev (recommended) [2] is required for Ubuntu to function correctly, it is a dependency of libgcc1 [0] which in turn is a dependency of a large number of packages, including apt [1].

[0] https://packages.ubuntu.com/xenial/libgcc1 [1] https://packages.ubuntu.com/xenial/apt [2] https://packages.ubuntu.com/xenial/dpkg-dev