Post
I feel like I'm taking crazy pills. Three days into service interruptions, with a major patch to install, and no word from Canonical. It's a shocking abdication of responsibility of care for their users.
If anyone who knows wants to share with me confidentially what's going on, DMs are open.
Who submiitted the un-needed patch that created the problem?
Is Canonical intentionally delaying fix because the flaw is under active exploit?
@mttaggart Someone told me on bsky that they have a big hack event and part of the infra is/was down
@kabutor See here for more information:
https://discourse.ifin.network/t/ubuntu-services-under-attack/356
What has been communicated is insufficient.
despite all green status, still getting:
Could not connect to ppa.launchpadcontent.net:443 (185.125.190.80), connection timed out
@mttaggart Huh. I was able to `sudo do-release-upgrade` yesterday with no problems.
@marshray Yeah it's intermittent. Your experience is mixed with others who have had hangs
I've not used Ubuntu in ages, but I do see https://ubuntu.com/blog/copy-fail-vulnerability-fixes-available and the mentioned kmod packages available on mirrors.
What am I missing?
(OK, I know next to nothing about live patch)
@realmurphy The services that are "up" are still spotty as well, and could lead to install/update failures.
@mttaggart @realmurphy It seems like people in this thread may not understand that Canonical has paid subscriptions that organizations rely on. But they are not reliably providing the service during a time when it’s important for customers of the service. Again, paid service. This isn’t about people using free distro products and not getting free update services. There is a higher expectation of reliability for paid support and update subscriptions.
@mttaggart they're being DDoS'ed
@GossiTheDog Thanks, I'm aware of the extremely limited reports from them and from their claimed attackers. What has been provided is insufficient, imo. Especially since their statuses don't reflect reality.
@ifin has been tracking the situation here.
https://discourse.ifin.network/t/ubuntu-services-under-attack/356
@mttaggart @GossiTheDog @ifin its so odd considering there are multiple options for even upstream mitigation, not even requiring some on site change. as far as i can tell they have their own and AS. shouldnt upstream be no brainer?
As of this morning, their livepatch system is down, meaning systems that rely on that service for non-interrupting updates must live with CopyFail.
Status page says up but I'm pretty sure at least launchpad is still down.
@mttaggart It is, so the Canonical status page is factual lie. Launchpad (PPA) has been down for 48+ hours.
@dusoft I think it's been up and down but this is why we need more information from Canonical!
@mttaggart lol. lmao even.
Organizations looking to gain peace of mind and stability while they plan and execute their migration strategy can trust Canonical.
Install bonfire.cafe
Get the full app experience
