The seeds are not picking up the dependency for ubuntu-minimal...
Running the ./update script of "ubuntu-meta" gives this warning for all
the architectures:

> "minimal/amd64": Skipping package chrony (package not in debootstrap)


We need to bump chrony to "Priority: important" to get it pulled in by default 
in debootstrap and make "germinate-update-metapackage" happy. At the same time 
we need to demote systemd-timesyncd to "Priority: optional", as we cannot have 
two "Priority: standard" (or above) packages conflicting on each other.
Currently, sd-timesyncd is overridden as "Priority: important" [1, 2].

Chrony is already showing up in priority-mismatches (for all
architectures), as the "minimal" seed change landed. [3]


As a quick smoke test of those priority changes, this commands succeeds, while 
it fails when we don't "--exclude=systemd-timesyncd" (because we cannot have 
conflicting "Priority: standard" or above packages in the base installation):

# debootstrap --include=chrony --exclude=systemd-timesyncd questing qq


[1] https://www.debian.org/doc/debian-policy/ch-archive.html#priorities
[2] https://archive.ubuntu.com/ubuntu/indices/override.questing.main
[3] https://ubuntu-archive-team.ubuntu.com/priority-mismatches.html

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to ubuntu-meta in Ubuntu.
https://bugs.launchpad.net/bugs/2111342

Title:
  Install time-daemon with NTS support by default

Status in Ubuntu:
  Fix Committed
Status in chrony package in Ubuntu:
  New
Status in systemd package in Ubuntu:
  New
Status in ubuntu-meta package in Ubuntu:
  New
Status in ubuntu-release-upgrader package in Ubuntu:
  New

Bug description:
  Ubuntu shall be secure by default, therefore utilize Network Time
  Security (NTS), as time is the trust anchor for many cryptography
  related processes (e.g. certificates).

  NTS was previously enabled in chrony (LP: #2084585) and comes pre-
  installed in certain Ubuntu cloud images. Still, in Ubuntu
  Desktop/Server and other generic Ubuntu images we rely on systemd-
  timesyncd (without support for NTS [1]). This leads to a situation
  where we have to maintain two time-daemons in "main", while still not
  using NTS on most systems.

  [1] https://github.com/systemd/systemd/issues/9481

  References: spec-FO207, SD-2171, chrony MIR (LP: #1744072)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+bug/2111342/+subscriptions


-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to