Author: Alfonso Sanchez-Beato
Author Date: 2023-12-08 22:11:52 UTC

snap,overlord: backend support to copy and mount components (#13400)

* overlord,snap: rename MinimalContainerInfo to a more sensible name

* snap: add ComponentInfo methods to build mount/files dirs

* snap,overlord: create and use ancillary build components functions

* o/snapstate/backend: refactor addMountUnit so it accepts components

Change addMountUnit arguments so we can use it for both snaps and
components.

* snap: split ReadComponentInfoFromContainer so yaml can be read

independently of reading the full container.

* o/snapstate/backend: add function to read component from path

* o/snapstate/backend: implement {,Undo}SetupComponent

Implement methods to set-up components and undo this set-up, which
consists on creating mount units and copying the component container
to the right place.

* many: address review comments

* overlord,snap: component file includes the snap instance name

* snap: add MountDescription to ContainerPlaceInfo interface

* overlord,systemd: pass description instead of revision when creating

mount files. As we do not need to set it explicitly.

* overlord,snap: unexport snap.ComponentPlaceInfo

We only need to usde the snap.ContainerPlaceInfo interface in the
backend now.

* overlord,systemd: address some review comments

* overlord,snap: address review comments

Author: Samuele Pedroni
Author Date: 2023-10-26 11:24:46 UTC

o/snapstate: make tests work consistently also in containers

Author: Valentin David
Author Date: 2023-08-28 12:49:46 UTC

cmd/snapd-generator: read mountinfo for pid 1

Systemd now runs generators in a sandbox. That means
`/proc/self/mountinfo` does not represent correctly the mounts of the
system.

Author: Ernest Lotter
Author Date: 2023-11-16 13:57:23 UTC

release: 2.61.1

cherry picked more changes for 2.61.1

release: 2.61.1

Author: dependabot[bot]
Author Date: 2023-10-11 23:43:29 UTC

build(deps): bump golang.org/x/net in /tests/lib/muinstaller

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.9.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.9.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]
Author Date: 2023-10-11 23:42:27 UTC

build(deps): bump golang.org/x/net from 0.9.0 to 0.17.0

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.9.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.9.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: Michael Vogt
Author Date: 2023-05-25 09:28:23 UTC

Merge pull request #12838 from xnox/go1.18-riscv

[master-riscv64] Merge master to gain go 1.18 for riscv64 builds

Author: Dimitri John Ledkov
Author Date: 2023-04-13 08:50:18 UTC

build-aux: Use dpkg-buildpackage options to not attempt signing anything

Currently riscv64 builds are failing, because dpkg-buildpackage
attempts signing. Use the historic `-uc -us` (unsigned changes,
unsigned sources) options that are available in xenial and up, to
prevent attempts to sign with mvo's gpg key inside launchpad snap
builds.

(cherry picked from commit 2204c2fd8e78443041de6e39ee935077d49af055)

Author: Michael Vogt
Author Date: 2023-02-22 14:41:08 UTC

release: 2.58.3 (#12581)

Author: Michael Vogt
Author Date: 2022-11-15 15:15:04 UTC

releasing package snapd version 2.57.6

Author: Alberto Mardegan
Author Date: 2022-09-27 15:44:09 UTC

i/b/mount-control: add optional `/` to umount rules (#12168)

* i/b/mount-control: add optional `/` to umount rules

In commit a10ecaaaafc0aeaac59d563fc08cc6ba0ad75f1a we added an optional
`/` at the end of the AppArmor mount rules, since AppArmor is rather
strict on them.

Indeed, the same applies to umount rules.

* tests: improve mount-control spread tests

Diversify the paths in the "where" attributes, otherwise a
value like "$SNAP_COMMON/**" would hide potential errors in the "where"
attributes of other mount entries -- as indeed has been the case until
now, when we realized of the `/` missing at the end of the umount rules
(see the previous commit).

* tests: improve mount-control tests with review comments

Add a "/" to a mount point to verify that it's irrelevant.

Author: Michael Vogt
Author Date: 2022-05-11 07:19:53 UTC

release: 2.55.5 (#11773)

Author: Maciej Borzecki
Author Date: 2022-03-21 14:48:58 UTC

o/snapstate: avoid setting up single reboot when update includes base, kernel and gadget

* o/snapstate: avoid setting up single reboot when update includes base, kernel and gadget

Otherwise there is a circular dependency between base, kernel and gadget, where
the kernel waits for gadget (to handle gadget assets update), gadget waits for
the base, and the base waits for some of the kernel tasks.

Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>

* o/snapstate: procure circular dependency and verify abort untangles the state

Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>

* overlord/state: add helper for aborting unready lanes

A helper for aborting all lanes that aren't ready in a given change. An unready
lane is one that carries tasks which have not reached a final status yet.

Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>

* overlord/state: drop unused lanes field

Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>

* overlord: wait for up to 3 days before automatically aborting a change

Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>

* overlord/state: use AbortUnreadyLanes when pruning

Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>

* overlord: managers test to verify self healing via abort-unready-lanes in prune

Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>

* overlord: leave a comment about the scenario being tested, test tweaks

Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>

Author: Michael Vogt
Author Date: 2021-12-14 08:25:36 UTC

Merge pull request #11161 from MiguelPires/2.53-fix-fmt-latest

many: fix formatting w/ latest go version (2.53)

Author: Michael Vogt
Author Date: 2021-10-05 12:47:58 UTC

release: 2.52.1 (#10885)

Update changelog with the 2.52.1 changes.

Author: Paweł Stołowski
Author Date: 2021-08-31 08:41:43 UTC

Use host-scaled timeout to avoid riscv64 test failure.

Author: Michael Vogt
Author Date: 2021-05-26 09:42:16 UTC

gadget: support creating vfat partitions during bootstrap

This commit allows creating the "Windows Basic Data Partition"
as part of the gadget.yaml. This is needed so that the ubuntu-boot
partition can be put on a gpt vfat partition. Note that we already
support this for non-gpt partition layouts.

Author: Ian Johnson
Author Date: 2021-03-02 16:43:06 UTC

packaging/ubuntu-16.04/rules: turn modules off explicitly

We already set GO111MODULE=off in spread.yaml, but for some reason that's not
sufficient when building the deb in hirsute, which now has Go 1.16 and defaults
to using modules. So explicitly disable it for all the manual go commands we run
here.

Signed-off-by: Ian Johnson <ian.johnson@canonical.com>

Author: Samuele Pedroni
Author Date: 2021-02-19 17:47:15 UTC

overlord: DEBUG PATCH: print some information about state.json

Merge pull request #9946 from bboozzoo/bboozzoo/state-debug-2.48

Author: Zygmunt Krynicki
Author Date: 2021-02-15 17:14:41 UTC

interfaces: remove apparmor downgrade feature

Apparmor downgrade was automatically enabled when the running kernel
supported some, but not all of the features. Since the complete set was
never upstreamed, this effectively meant that users had less features
than they otherwise would have.

Since apparmor is still reported as "partial", nothing changes from the
point of view of not sending any misleading messages. For certain
classes of snap packages, this improves the effective confinement on
systems such as Debian or openSUSE Leap.

Perfect confinement is still way off, this doesn't change that.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>

Author: Michael Vogt
Author Date: 2021-01-12 11:13:59 UTC

Merge pull request #9824 from anonymouse64/bugfix/2-48-backport-greengrass-flavors

interfaces/greengrass-support: back-port interface changes to 2.48

Author: Michael Vogt
Author Date: 2020-12-03 16:48:28 UTC

releasing package snapd version 2.48.1

Author: Michael Vogt
Author Date: 2020-10-08 08:53:25 UTC

releasing package snapd version 2.47.1

Author: Michael Vogt
Author Date: 2020-09-08 08:04:18 UTC

Merge pull request #9288 from stolowski/remove-cups-workaround

tests: remove workaround for cups on ubuntu-20.10

Author: Michael Vogt
Author Date: 2020-09-07 05:09:47 UTC

Merge pull request #9279 from mvo5/release-branches-run-tests-on-push

github: run tests also on push to release branches

Author: Michael Vogt
Author Date: 2020-08-10 06:41:29 UTC

Merge pull request #9123 from cmatsuoka/update-secboot-dual-signature

vendor: update secboot to support dual signed EFI binaries

Author: Michael Vogt
Author Date: 2020-07-10 18:08:34 UTC

releasing package snapd version 2.45.2

Author: Michael Vogt
Author Date: 2020-05-14 08:05:02 UTC

Merge pull request #8665 from jdstrand/desktop-silence-icons-denials-2.44

interfaces/desktop: silence more /var/lib/snapd/desktop/icons denials - 2.44

Author: Sergio Schvezov
Author Date: 2020-02-26 11:51:51 UTC

data/systemd: improve the description

While the code may have references to "snappy" we have long ago
not exposed that name. Fix the service description so that the
"Snappy" reference is not seen on system startup nor shutdown.

Signed-off-by: Sergio Schvezov <sergio.schvezov@canonical.com>

Author: Michael Vogt
Author Date: 2019-12-06 13:16:49 UTC

releasing package snapd version 2.42.5

Author: Claudio Matsuoka
Author Date: 2019-10-12 23:17:02 UTC

Merge pull request #7592 from cmatsuoka/update-fde-utils-ace2802

vendor: update fde-utils to latest master

Author: Michael Vogt
Author Date: 2019-09-13 09:47:49 UTC

Merge pull request #7460 from jdstrand/k8s-support-systemd-run-ptrace-read-2.41

interfaces/kubernetes-support: allow systemd-run to ptrace read unconfined - 2.41

Author: Maciej Borzecki
Author Date: 2019-08-20 10:46:19 UTC

Merge pull request #7264 from bboozzoo/bboozzoo/build-on-rhel-2.40

packaging/fedora: build on RHEL8 (2.40)

Author: Maciej Borzecki
Author Date: 2019-06-26 05:14:06 UTC

cmd/snap-seccomp/syscalls: add io_uring syscalls

The snap-seccomp helper maintains a list of all know syscalls supported by
libseccomp. We catch when the internal list diverges from upstream libseccomp in
a tests/main/snap-seccomp-syscalls spread test.

Upstream libseccomp has been updated with io_uring syscalls, update the internal
list.

Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>

Author: Michael Vogt
Author Date: 2019-05-29 10:24:58 UTC

debian: add placeholder changelog for 2.39.1

Author: Michael Vogt
Author Date: 2019-04-11 16:33:34 UTC

releasing package snapd version 2.38.1

Author: Michael Vogt
Author Date: 2019-03-06 07:58:34 UTC

tests: check that apt works before using it

The lxd test is using apt unconditionally even on core devices.

Nowdays the apt wrapper on core devices will error when run so
the lxd test needs an update to ensure it only uses apt if apt
is actually usable.

The ubuntu-core-apt test also needs an update to check that
the exit code is correct.

Author: Michael Vogt
Author Date: 2018-12-14 06:35:09 UTC

releasing package snapd version 2.36.3

Author: Michael Vogt
Author Date: 2018-10-16 05:42:22 UTC

tests: do not run degraded test in autopkgtest env

The autopkgtest environment sometimes has failing services. This
means that our degraded test leads to false positivies here. This
PR disables the test in the autopkgtest environment because we
have no control over the images in autopkgtest (unlike in our
spread CI) so the test is not useful here.

Author: Tony Espy
Author Date: 2018-08-11 21:57:36 UTC

interfaces/builtin: network-manager resolved DBus changes

Extend networkManagerPermanentSlotAppArmor to allow
NetworkManager to use systemd-resolved's SetLinkDNS and
SetLinkDomains DBus methods. NetworkManager 1.6.x added
support to allow systemd-resolved to be used for managing
system DNS configuration, and this is used by default in
network-manager 1.10.x, as shipped in Ubuntu 18.04 LTS.

Author: snowman5454
Author Date: 2018-06-25 01:21:49 UTC

Update SELinux policy

Update SELinux policy to remove denial messages and add a dontaudit
rule for unneeded read access on lost+found.

Author: Jamie Strandboge
Author Date: 2018-06-07 21:40:02 UTC

interfaces/raw-usb: also allow usb serial devices

USB serial devices like /dev/ttyUSB* were always meant to be included in this
transitional interface, but the code missed /dev/ttyUSB* AppArmor rules and
a matching udev rule to tag the devices (udev sets the SUBSYSTEM to tty for
USB serial devices so we use SUBSYSTEM=="tty", ENV{ID_BUS}=="usb" as the
conditional to tag only them for this interface).

Author: Michael Vogt
Author Date: 2018-03-09 10:24:07 UTC

releasing package snapd version 2.31.2

Author: Maciej Borzecki
Author Date: 2018-01-03 08:06:25 UTC

tests/main/classic-confinement: enable the test on Fedora

The snap-exec failure has been addressed with
563795fd8d628c64da4019aee3f5c6a845eb0fe7. We can reenable the test for Fedora
now.

Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>

Author: Michael Vogt
Author Date: 2017-11-30 16:45:30 UTC

releasing package snapd version 2.29.4.2

Author: Michael Vogt
Author Date: 2017-10-13 21:30:36 UTC

releasing package snapd version 2.28.5

Author: Michael Vogt
Author Date: 2017-09-07 08:40:33 UTC

releasing package snapd version 2.27.6

Author: Michael Vogt
Author Date: 2017-07-20 11:57:48 UTC

releasing package snapd version 2.26.14

Author: Michael Vogt
Author Date: 2017-07-03 09:11:15 UTC

fix merge artifact

Author: John Lenton
Author Date: 2017-05-04 11:08:56 UTC

Merge branch 'master' into release/2.25

Author: Michael Vogt
Author Date: 2017-03-29 14:56:29 UTC

add missing changelog on trusty

Author: Michael Vogt
Author Date: 2017-03-01 11:08:27 UTC

Merge pull request #2957 from mvo5/include-chg-summary-in-errreport

snapstate: include change kind/summary in error report

Author: Michael Vogt
Author Date: 2017-01-25 16:17:14 UTC

Merge remote-tracking branch 'origin/master' into ubuntu/14.04

Author: Michael Vogt
Author Date: 2017-01-16 07:04:10 UTC

fix typo

Author: Michael Vogt
Author Date: 2017-01-02 16:30:04 UTC

Merge branch 'master' into release/2.20.1

Author: Michael Vogt
Author Date: 2016-12-15 21:26:46 UTC

releasing package snapd version 2.20

Author: Michael Vogt
Author Date: 2016-12-15 07:37:17 UTC

Merge pull request #2474 from snapcore/revert-2471-feature/bootconfig

Revert "interfaces: add new boot-config interface"

Author: Michael Vogt
Author Date: 2016-12-14 10:36:40 UTC

Merge branch 'master' into release/2.18.1

Author: Michael Vogt
Author Date: 2016-12-12 15:41:52 UTC

remove snap-confine/ubuntu-core-launcher after the tests as well everywhere

Author: Michael Vogt
Author Date: 2016-11-24 20:03:00 UTC

releasing package snapd version 2.18

Author: Michael Vogt
Author Date: 2016-11-04 16:40:03 UTC

releasing package snapd version 2.17.1

Author: Michael Vogt
Author Date: 2016-11-01 23:22:54 UTC

releasing package snapd version 2.17

Author: Michael Vogt
Author Date: 2016-09-28 09:22:02 UTC

releasing package snapd version 2.16

Author: Gustavo Niemeyer
Author Date: 2016-06-13 14:11:25 UTC

Merge pull request #1293 from mvo5/feature/snap-run2.1

cmd/snap: create SNAP_USER_DATA and common dirs in `snap run`

Author: Michael Vogt
Author Date: 2016-05-20 07:33:30 UTC

Merge pull request #1178 from fgimenez/add-http-proxy

integration-tests: update 15.04 branch from master to accept http-proxy flag

Author: Samuele Pedroni
Author Date: 2015-12-04 14:20:57 UTC

Merge pull request #225 from pedronis/asserts-demo-install-demo-logic

asserts demo: check for assertions when installing a local file squashfs snap