snappy:release/2.48

Last commit made on 2021-01-12
Get this branch:
git clone -b release/2.48 https://git.launchpad.net/snappy

Branch merges

Branch information

Name:
release/2.48
Repository:
lp:snappy

Recent commits

7be7ba6... by Michael Vogt on 2021-01-12

Merge pull request #9824 from anonymouse64/bugfix/2-48-backport-greengrass-flavors

interfaces/greengrass-support: back-port interface changes to 2.48

0b206e1... by Maciej Borzecki on 2021-01-04

tests/lib/snaps/test-snapd-sh: add cmd command

So that we don't have to deal with silly quoting when calling test-snapd-sh.sh.

Signed-off-by: Maciej Borzecki <email address hidden>

e544986... by Maciej Borzecki on 2021-01-04

tests/main/cohorts: replace yq with a Python snippet

The yq tool changed its command line arguments and the test broke. Try not to
depend on external tools and use a simple Python snippet to extract the cohort key.

Signed-off-by: Maciej Borzecki <email address hidden>

4d3de63... by James Henstridge on 2021-01-04

run-checks: don't run ineffassign static check with Go < 1.12

2a007a8... by James Henstridge on 2021-01-04

run-checks: update to match new argument syntax of ineffassign

f3973d9... by Ian Johnson on 2020-11-13

interfaces/greengrass-support: finalize the flavor attribute names

The flavor attribute names are now as follows:

- "legacy-container" is the full containerization also known as
  "Greengrass container" in AWS's UI.
- "no-container" is the process-mode, no confinement mode, also known as "no
  container" in AWS's UI.

Signed-off-by: Ian Johnson <email address hidden>

dfb839e... by Michael Vogt on 2020-11-13

interfaces: add XXX to greegras attr naming

The PR that added greengras attribute names was merged prematurely
before Samuele had a chance to review the naming. This commit adds
the TODO and will be milestoned 2.49 to ensure that we do not
release anything to stable with the preliminary names.

6d602b9... by Ian Johnson on 2020-11-11

interfaces/greengrass-support: don't fail if attribute is malformed

Signed-off-by: Ian Johnson <email address hidden>

b0522c4... by Ian Johnson on 2020-11-03

interfaces/greengrass-support: add additional "process" flavor for 1.11 update

This adds a new attribute to the greengrass-support interface, "flavor", which
indicates what mode of containerization the greengrassd daemon is meant to be
supporting with the plug. With no flavor attribute, or the "container" flavor,
then the old policy is available so as to not break old users of the snap, but
with a new "process" flavor, then a far less privileged version of the interface
is provided, which allows the greengrassd daemon to implement no
containerization and thus the lambdas that are run are not run with the
additional privilege afforded to the original implementation of the interface,
as that would allow lambdas to trivially escape the sandbox.

Signed-off-by: Ian Johnson <email address hidden>

743cf5b... by Ian Johnson on 2020-11-03

interfaces/system-observe: add various accesses

These accesses are generally useful to snaps wanting to know more about their
host system, but also more specifically useful to the new version of the
Greengrass snap which will use much less privilege to run.

Signed-off-by: Ian Johnson <email address hidden>