-
7be7ba6...
by
Michael Vogt
on 2021-01-12
-
Merge pull request #9824 from anonymouse64/bugfix/2-48-backport-greengrass-flavors
interfaces/greengrass-support: back-port interface changes to 2.48
-
0b206e1...
by
Maciej Borzecki
on 2021-01-04
-
tests/lib/snaps/test-snapd-sh: add cmd command
So that we don't have to deal with silly quoting when calling test-snapd-sh.sh.
Signed-off-by: Maciej Borzecki <email address hidden>
-
e544986...
by
Maciej Borzecki
on 2021-01-04
-
tests/main/cohorts: replace yq with a Python snippet
The yq tool changed its command line arguments and the test broke. Try not to
depend on external tools and use a simple Python snippet to extract the cohort key.
Signed-off-by: Maciej Borzecki <email address hidden>
-
4d3de63...
by
James Henstridge
on 2021-01-04
-
run-checks: don't run ineffassign static check with Go < 1.12
-
2a007a8...
by
James Henstridge
on 2021-01-04
-
run-checks: update to match new argument syntax of ineffassign
-
f3973d9...
by
Ian Johnson
on 2020-11-13
-
interfaces/greengrass-support: finalize the flavor attribute names
The flavor attribute names are now as follows:
- "legacy-container" is the full containerization also known as
"Greengrass container" in AWS's UI.
- "no-container" is the process-mode, no confinement mode, also known as "no
container" in AWS's UI.
Signed-off-by: Ian Johnson <email address hidden>
-
dfb839e...
by
Michael Vogt
on 2020-11-13
-
interfaces: add XXX to greegras attr naming
The PR that added greengras attribute names was merged prematurely
before Samuele had a chance to review the naming. This commit adds
the TODO and will be milestoned 2.49 to ensure that we do not
release anything to stable with the preliminary names.
-
6d602b9...
by
Ian Johnson
on 2020-11-11
-
interfaces/greengrass-support: don't fail if attribute is malformed
Signed-off-by: Ian Johnson <email address hidden>
-
b0522c4...
by
Ian Johnson
on 2020-11-03
-
interfaces/greengrass-support: add additional "process" flavor for 1.11 update
This adds a new attribute to the greengrass-support interface, "flavor", which
indicates what mode of containerization the greengrassd daemon is meant to be
supporting with the plug. With no flavor attribute, or the "container" flavor,
then the old policy is available so as to not break old users of the snap, but
with a new "process" flavor, then a far less privileged version of the interface
is provided, which allows the greengrassd daemon to implement no
containerization and thus the lambdas that are run are not run with the
additional privilege afforded to the original implementation of the interface,
as that would allow lambdas to trivially escape the sandbox.
Signed-off-by: Ian Johnson <email address hidden>
-
743cf5b...
by
Ian Johnson
on 2020-11-03
-
interfaces/system-observe: add various accesses
These accesses are generally useful to snaps wanting to know more about their
host system, but also more specifically useful to the new version of the
Greengrass snap which will use much less privilege to run.
Signed-off-by: Ian Johnson <email address hidden>
