Public bug reported:

[Availability]
The package `ubuntu-insights` is already in Ubuntu universe.
The package `ubuntu-insights` build for the architectures it is designed to 
work on.
It currently builds and works for architectures: any (amd64, arm64, armhf, 
ppc64el, riscv64, s390x)
Link to package https://launchpad.net/ubuntu/+source/ubuntu-insights

[Rationale]
- The package `ubuntu-insights` is required in Ubuntu main for transparent, 
consent based system info and metrics collection, eventually fully replacing 
the functionality of `ubuntu-report` while providing new capabilities.
- The package `ubuntu-insights` will generally be useful for a large part of 
our user base
- Additional reasons: `ubuntu-insights` will gradually replace `ubuntu-report` 
in desktop images and be integrated with WSL images.
- Additionally new use-cases enabled by this are periodic collection, 
centralized handling for multiple applications, and handling WSL environments.
- Package `ubuntu-insights` covers the same use case as `ubuntu-report`, but is 
better
   because it is a ground up modernization to enhance transparency in what is 
collected, 
   covers more situations and use cases such as period collection, will be 
integrated with gnome initial setup,
   and handles environments such as WSL better, thereby we want to replace it.

- There is no other/better way to solve this that is already in main or
   should go universe->main instead of this.
- This is the first time package will be in main
- The binary package `ubuntu-insights` needs to be in main to achieve 
collections and reporting for all architectures we create Ubuntu images for. 

- The package `ubuntu-insights` is required in Ubuntu main no later than
August 12, 2025 due to the Questing Feature Freeze, keeping in mind time
to update seeds and the `ubuntu-desktop` meta-package.

[Security]
- No CVEs/security issues in this software in the past

- No `suid` or `sgid` binaries
- No executables in `/sbin` and `/usr/sbin`
- Package does install services, timers or recurring jobs
    ubuntu-insights-collect.service
    ubuntu-insights-collect.timer
    ubuntu-insights-upload.service
    ubuntu-insights-upload.timer
- Security has been kept in mind and common isolation/risk-mitigation
  patterns are in place utilizing the following features:
    systemd isolation features
- Packages does not open privileged ports (ports < 1024).
- Package does not expose any external endpoints
- Packages does not contain extensions to security-sensitive software
  (filters, scanners, plugins, UI skins, ...)

[Quality assurance - function/usage]
- The package works well right after install

[Quality assurance - maintenance]
- The package is maintained well in Ubuntu/Upstream and does not have too many, 
long-term & critical, open bugs
 - Ubuntu: https://bugs.launchpad.net/ubuntu/+source/ubuntu-insights/+bug
 - Upstream's bug tracker, e.g., GitHub Issues: 
https://github.com/ubuntu/ubuntu-insights/issues
- The package does not deal with exotic hardware we cannot support

[Quality assurance - testing]
- The package runs a test suite on build time, if it fails
   it makes the build fail, link to build logs:
 - amd64: 
https://launchpadlibrarian.net/807239463/buildlog_ubuntu-questing-amd64.ubuntu-insights_0.3.0_BUILDING.txt.gz
 - arm64: 
https://launchpadlibrarian.net/807238277/buildlog_ubuntu-questing-arm64.ubuntu-insights_0.3.0_BUILDING.txt.gz
 - armhf: 
https://launchpadlibrarian.net/807238277/buildlog_ubuntu-questing-arm64.ubuntu-insights_0.3.0_BUILDING.txt.gz
 - ppc64el: 
https://launchpadlibrarian.net/807238442/buildlog_ubuntu-questing-ppc64el.ubuntu-insights_0.3.0_BUILDING.txt.gz
 - riscv64: 
https://launchpadlibrarian.net/807241171/buildlog_ubuntu-questing-riscv64.ubuntu-insights_0.3.0_BUILDING.txt.gz
 - s390x: 
https://launchpadlibrarian.net/807238051/buildlog_ubuntu-questing-s390x.ubuntu-insights_0.3.0_BUILDING.txt.gz
 


- The package runs an autopkgtest, and is currently passing on
 - amd64: 
https://autopkgtest.ubuntu.com/results/autopkgtest-questing/questing/amd64/u/ubuntu-insights/20250725_110111_b17b7@/log.gz
 - arm64: 
https://autopkgtest.ubuntu.com/results/autopkgtest-questing/questing/arm64/u/ubuntu-insights/20250725_110108_b17b7@/log.gz
 - armhf: 
https://autopkgtest.ubuntu.com/results/autopkgtest-questing/questing/armhf/u/ubuntu-insights/20250725_110313_b17b7@/log.gz
 - ppc64el: 
https://autopkgtest.ubuntu.com/results/autopkgtest-questing/questing/ppc64el/u/ubuntu-insights/20250725_110210_b17b7@/log.gz
 - s390x: 
https://autopkgtest.ubuntu.com/results/autopkgtest-questing/questing/s390x/u/ubuntu-insights/20250725_110113_1e285@/log.gz

- The package does have not failing autopkgtests right now
 - riscv64 autopkgtests are in a tmpfail state: 
https://autopkgtest.ubuntu.com/packages/ubuntu-insights/questing/riscv64

[Quality assurance - packaging]
- debian/watch is not present because it is a native package

- debian/control defines a correct Maintainer field

- This package does not yield massive lintian Warnings, Errors
- Please link to a recent build log of the package: (amd64) 
https://launchpadlibrarian.net/807239463/buildlog_ubuntu-questing-amd64.ubuntu-insights_0.3.0_BUILDING.txt.gz
- Please attach the full output you have got from
   `lintian --pedantic` as an extra post to this bug.
- Lintian overrides are present, but ok because it overrides a false positive 
spelling error check.

- This package does not rely on obsolete or about to be demoted packages.
- This package has no python2 or GTK2 dependencies

- The package will be installed by default, but does not ask debconf
   questions higher than medium

- Packaging and build is easy, link to debian/rules:
https://github.com/ubuntu/ubuntu-
insights/blob/main/insights/debian/rules

[UI standards]
- Application is not end-user facing (does not need translation)

[Dependencies]
- Used check-mir from ubuntu-dev-tools to validate
   all dependencies or recommends are in main.

[Standards compliance]
- This package correctly follows FHS and Debian Policy

[Maintenance/Owner]
- The owning team will be `desktop-packages` and I have their acknowledgment for
   that commitment
- The future owning team is already subscribed to the package

- The team `desktop-packages` is aware of the implications by a static build and
  commits to test no-change-rebuilds and to fix any issues found for the
  lifetime of the release (including ESM)

- The team `desktop-packages` is aware of the implications of vendored code and 
(as
   alerted by the security team) commits to provide updates and backports
   to the security team for any affected vendored code for the lifetime
   of the release (including ESM).

- This package uses vendored go code tracked in go.sum as shipped in the
   package, refreshing that code is outlined in debian/README.source

- This package is not rust based

- The package has been built within the last 3 months in the archive
- Build link on launchpad:
   - Latest release upload: 
https://launchpad.net/ubuntu/+source/ubuntu-insights/0.3.0
   - amd64: 
https://launchpad.net/ubuntu/+source/ubuntu-insights/0.3.0/+build/31032020
   - arm64: 
https://launchpad.net/ubuntu/+source/ubuntu-insights/0.3.0/+build/31032021
   - armhf: 
https://launchpad.net/ubuntu/+source/ubuntu-insights/0.3.0/+build/31032022
   - ppc64el: 
https://launchpad.net/ubuntu/+source/ubuntu-insights/0.3.0/+build/31032023
   - riscv64: 
https://launchpad.net/ubuntu/+source/ubuntu-insights/0.3.0/+build/31032024
   - s390x: 
https://launchpad.net/ubuntu/+source/ubuntu-insights/0.3.0/+build/31032025

[Background information]
The Package description explains the package well
Upstream Name is Ubuntu Insights
Link to upstream project https://github.com/ubuntu/ubuntu-insights
The upstream project is a monorepo. The module relevant to this package is 
under `insights/`.

** Affects: ubuntu-insights (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2118794

Title:
  [MIR] ubuntu-insights

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ubuntu-insights/+bug/2118794/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to