Sos / SosReport Updates¶

This document describes the policy for updating sosreport & sos package in a stable supported distro, including LTS. It is also the aim of this document to provide an example for any upstream project that wants to push updates to an Ubuntu stable release.

sos is an extensible, portable, support data collection tool primarily aimed at Linux distributions and other UNIX-like operating systems. This tool is mission critical for Canonical to support UPro (Ubuntu Pro) customer, partners and community. sos is also widely used by other third party vendors.

Upstream reference:
- https://sos.readthedocs.io/en/main/
- http://github.com/sosreport/sos

Therefore, in addition to bug fixes, new features are allowed in an update as long as the conditions outlined below are met.

Process¶

This is the mandatory process that the proposed packages have to pass. The following requirements must be met:

sos needs to be tested
- By a reasonable amount of Canonical Support team members with positive and detailed feedback (documented in an LP bug)
- Should be tested with Canonical internal tooling such as:
  - hostos
- On physical hardware, container and virtual machine.
- Under various UPro customer similar environment and context (for LTS version only, no UPro customer has such setup using non-LTS):
  - Cloud, Ceph, Landscape, MAAS, sunbeam, juju managed environment, ….
- On as much architecture as available to the testers.
- For commonly used parameters : -a, --all-logs, --upload, --batch, …

sos report - Collect and package diagnostic and support data¶

sos report is now used to generate sos report tarballs

Make sure sos report generates an archive under /tmp in the form of sosreport--2020-06-19-ogwtrgb.tar.xz with its accompanied sha256 checksum sosreport--2020-06-19-ogwtrgb.tar.xz.sha256 (Note that the naming pattern may vary depending on the options and versions used.)
Extract the archive
- Validate its content and make sure it is sane and accurate.
- Validate that sos report obfuscates sensible information for plugins instructed to do so such as:
  - landscape plugin, should obfuscate password(s) and secret-token from config file.
  - or any plugins (sos/plugins/) exercising the do_file_sub() method.
- Inspect for 0 size file(s) within the archive and use common sense if legit or not (e.g. “command is not found” can be avoided for instance):
```
$ find /path_to_sosreport_archive/ -type f -size 0
```
- Look under sos_reports for full report.
- Look under sos_logs for WARN and/or ERROR:
```
$ grep -v "INFO:" sos_logs/sos.log
```
  - Look under sos_logs for error files (e.g. sos_logs/systemd-plugin-errors.txt).

sos clean - Obfuscate sensitive data from one or more sosreports¶

sos clean, also available as sos mask, is a newly added sub-command in this release and is an implementation of the standalone soscleaner project.:

$ sos clean <path_to_sosreport>

It can obfuscate: keywords, username, hostname, domain, ip & mac addresses.

Make sure it generates a default_mapping file inside /etc/sos/cleaner/ (at first run)
Make sure it produces the following files:
- Tarball with sensitive information obfuscated (e.g. Ready to share with 3rd party vendor):
  - sosreport-host0-2020-08-26-eywxccq-obfuscated.tar.xz
- Tarball accompanied sha256 checksum:
  - sosreport-host0-2020-08-26-eywxccq-obfuscated.tar.xz.sha256
- Private mapping file (Not to share, keep it private):
  - sosreport-host0-2020-08-26-eywxccq-private_map
- sos clean execution logs (Not to share, keep it private):
  - sosreport--2020-08-26-eywxccq-obfuscation.log

sos collect - Collect sosreports from multiple (cluster) nodes¶

sos collect is a new sub command in this release, and is an integration of the standalone sos-collector project, with the aim being to collect sosreports from multiple systems simultaneously.

sos upload - Upload sosreports or files to Vendor¶

sos upload is a new sub command in 4.9.0. This allows to upload a sos or a file to Canonical, this can be achieved by running the following command.:

$ sos upload <filename>

The filename should have the case id, so that the automation can take place. We should check the command with multiple files

A sosreport that was originally created.
a file that is not a sos, but a file that is needed for support purposes.

The utility will detect automatically that you’re running on Ubuntu, and hence will upload to Canonical file server.

Previous sosreport updates bugs¶

Sosreport Requesting the SRU¶

The SRU should be requested as usual (StableReleaseUpdates) with the additional note about having the above steps being completed.