lp:~mvo/snappy/snappy-lp1460152-workaround

Branch merges

Propose for merging

No branches dependent on this one.

On hold for merging into lp:~snappy-dev/snappy/snappy-moved-to-github

Ricardo Salveti (community): Needs Information on 2015-06-04

Diff: 157 lines (+78/-6)

5 files modified

helpers/helpers.go (+17/-0)
helpers/helpers_test.go (+11/-1)
snappy/dirs.go (+4/-0)
snappy/systemimage.go (+16/-5)
snappy/systemimage_test.go (+30/-0)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #1460152: apparmor cache not updated when apparmor.d rules change (breaks 15.04/stable -> 15.04/edge updates)

Critical

Fix Released

Link a bug report

Related blueprints

486. By Michael Vogt on 2015-06-04

Remove /etc/apparmor.d/cache/* on upgrade to workaround lp1460152

This works around the issue that the way apparmor creates the cache
is based on the mtime of the profile. So if the mtime of the profile
is older than the mtime of the cache file the cache is not re-generated.

This is a problem because:
- boot stable, /etc/apparmor.d/cache/usr.bin.ubuntu-core-launcher is mtime of now because we generate the cache on boot
- upgrade to edge, /etc/apparmor.d/usr.bin.ubuntu-core-launcher is updated and has the mtime of T (yesterday) when the file was put into the package
- on the next reboot the apparmor_parser compares the mtime of the cache/usr.bin.ubuntu-core-launcher (very very recent) with the mtime of the souce usr.bin.ubuntu-core-launcher (much older)
-> cache does is *not* re-generate

The real fix is IMO that apparmor adds the mtime of the profile into
the header of the cache file (or makes the mtime of the cache file)
the mtime of the profile and re-generated if they get out of sync
(instead of checking for newer).

485. By Michael Terry on 2015-06-04

When rolling back. output version info, especially any messages about rebooting to pick up the new version. by mterry approved by sergiusens

484. By Sergio Schvezov on 2015-06-04

Don't allow installation of packages with unsupported architectures by sergiusens approved by chipaca

483. By Michael Terry on 2015-06-03

Unify handling of app environment variables. Now hooks, binaries, and services all have the same variables (mostly). by mterry approved by mvo

482. By Sergio Schvezov on 2015-06-03

Replace the deprecated launchpad.net/gocheck with gopkg.in/check.v1 by sergiusens approved by mvo

481. By Michael Terry on 2015-06-02

Fix intermittent "permission denied" errors when installing snaps by making sure that we always unpack in the same OS thread that dropped its privileges. by mterry approved by mvo

480. By John Lenton on 2015-05-29

Change all uses of package "path" that are not manipulating URLs to "filepath". by chipaca approved by mvo

479. By John Lenton on 2015-05-29

Chipping away at installClick. by chipaca approved by mvo

478. By John Lenton on 2015-05-29

Updated cross-build.md to reflect the need of specifying CC. by chipaca approved by mvo

477. By John Lenton on 2015-05-28

use filepath.SkipDir in writeHashes by chipaca approved by mvo,sergiusens