Author: Valentin David
Author Date: 2024-10-25 13:35:36 UTC

overlord/fdestate/backend/reseal.go: factor FDE hook and TPM resealing

Instead of splitting completely FDE hook and TPM resealing, we split
the calculation of role parameters, udpate the state, then do
the resealing based on that state.

Author: Sergio Cazzolato
Author Date: 2024-11-28 12:03:10 UTC

tests: fix cgroup-tracking-failure in ubuntu 25.04 (#14773)

Simple fix for test cgroup-tracking-failure

Author: Andrew Phelps
Author Date: 2024-11-25 17:38:58 UTC

run-checks: bump package-level test timeout when using the race detector

Author: Andrew Phelps
Author Date: 2024-10-31 13:42:40 UTC

Revert "tests/main/nvidia-files: set ubuntu-20.04-64/550-server to broken pac…"

This reverts commit e445cd48c5dce295fe3c36a3199657559339a8b2.

Author: Ernest Lotter
Author Date: 2024-10-22 07:40:52 UTC

Merge pull request #14135 from ernestl/core-snap-security-release-2.61.4

release: 2.61.4

Author: Ernest Lotter
Author Date: 2024-10-11 08:06:09 UTC

release: 2.66.1

Author: Ernest Lotter
Author Date: 2024-09-12 07:41:00 UTC

release: 2.65.3

Author: Ernest Lotter
Author Date: 2024-08-20 22:40:52 UTC

release: 2.63.1

Author: Philip Meulengracht
Author Date: 2024-08-16 08:49:27 UTC

Revert "dirs: add function to return path to systemd config folder under etc"

This reverts commit e835311eae204e6b56abaeaf7d646896db55a7c1.

Author: Ernest Lotter
Author Date: 2024-08-02 12:27:31 UTC

Revert " nvidia: add support module with known nvidia libraries and globs …"

This reverts commit 850c4c7b2978651fba4637daa90be6dc6e5c4401.

Author:
Author Date: 2024-07-29 14:13:58 UTC

Add renovate.json

Author: Ernest Lotter
Author Date: 2024-07-24 19:12:45 UTC

release: 2.64

Author:
Author Date: 2024-06-24 09:58:56 UTC

build(deps): bump golang.org/x/net from 0.9.0 to 0.23.0

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.9.0 to 0.23.0.
- [Commits](https://github.com/golang/net/compare/v0.9.0...v0.23.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Author:
Author Date: 2024-06-24 09:58:45 UTC

build(deps): bump golang.org/x/net in /tests/lib/muinstaller

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.9.0 to 0.23.0.
- [Commits](https://github.com/golang/net/compare/v0.9.0...v0.23.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: Dimitri John Ledkov
Author Date: 2021-09-16 09:15:17 UTC

build-aux: make snapcraft.yaml riscv64 compatible

Also 22.04 packaging does not exist in upstream snapd yet, reuse 16.04
packaging for now.
There is no libgcc1 package anymore on 20.04 and later. To get the
needed `libgcc_s.so.1` library the package `libgcc-s1` is needed
instead.

Author: Ernest Lotter
Author Date: 2024-03-21 20:06:42 UTC

release: 2.62

Author: Miguel Pires
Author Date: 2023-10-18 15:11:24 UTC

tests: clear snap cache before interfaces-content test

The test was pulling in the core snap which failed to be validated.
This happened because the snap was already in the cache and had
been modified in the prepare stage. Since it was modified, there's
no assertion matching the digest. Clearing the cache fixes the
problem. This was triggered because we recently stopped building
core on i386 so all channels now have the same revision.

Signed-off-by: Miguel Pires <miguel.pires@canonical.com>

Author: Valentin David
Author Date: 2023-08-28 12:49:46 UTC

cmd/snapd-generator: read mountinfo for pid 1

Systemd now runs generators in a sandbox. That means
`/proc/self/mountinfo` does not represent correctly the mounts of the
system.

Author: Dimitri John Ledkov
Author Date: 2023-04-13 08:50:18 UTC

build-aux: Use dpkg-buildpackage options to not attempt signing anything

Currently riscv64 builds are failing, because dpkg-buildpackage
attempts signing. Use the historic `-uc -us` (unsigned changes,
unsigned sources) options that are available in xenial and up, to
prevent attempts to sign with mvo's gpg key inside launchpad snap
builds.

(cherry picked from commit 2204c2fd8e78443041de6e39ee935077d49af055)

Author: Michael Vogt
Author Date: 2023-02-22 14:41:08 UTC

release: 2.58.3 (#12581)

Author: Michael Vogt
Author Date: 2022-11-15 15:15:04 UTC

releasing package snapd version 2.57.6

Author: Alberto Mardegan
Author Date: 2022-09-27 15:44:09 UTC

i/b/mount-control: add optional `/` to umount rules (#12168)

* i/b/mount-control: add optional `/` to umount rules

In commit a10ecaaaafc0aeaac59d563fc08cc6ba0ad75f1a we added an optional
`/` at the end of the AppArmor mount rules, since AppArmor is rather
strict on them.

Indeed, the same applies to umount rules.

* tests: improve mount-control spread tests

Diversify the paths in the "where" attributes, otherwise a
value like "$SNAP_COMMON/**" would hide potential errors in the "where"
attributes of other mount entries -- as indeed has been the case until
now, when we realized of the `/` missing at the end of the umount rules
(see the previous commit).

* tests: improve mount-control tests with review comments

Add a "/" to a mount point to verify that it's irrelevant.

Author: Michael Vogt
Author Date: 2022-05-11 07:19:53 UTC

release: 2.55.5 (#11773)

Author: Maciej Borzecki
Author Date: 2022-03-21 14:48:58 UTC

o/snapstate: avoid setting up single reboot when update includes base, kernel and gadget

* o/snapstate: avoid setting up single reboot when update includes base, kernel and gadget

Otherwise there is a circular dependency between base, kernel and gadget, where
the kernel waits for gadget (to handle gadget assets update), gadget waits for
the base, and the base waits for some of the kernel tasks.

Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>

* o/snapstate: procure circular dependency and verify abort untangles the state

Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>

* overlord/state: add helper for aborting unready lanes

A helper for aborting all lanes that aren't ready in a given change. An unready
lane is one that carries tasks which have not reached a final status yet.

Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>

* overlord/state: drop unused lanes field

Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>

* overlord: wait for up to 3 days before automatically aborting a change

Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>

* overlord/state: use AbortUnreadyLanes when pruning

Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>

* overlord: managers test to verify self healing via abort-unready-lanes in prune

Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>

* overlord: leave a comment about the scenario being tested, test tweaks

Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>

Author: Michael Vogt
Author Date: 2021-12-14 08:25:36 UTC

Merge pull request #11161 from MiguelPires/2.53-fix-fmt-latest

many: fix formatting w/ latest go version (2.53)

Author: Michael Vogt
Author Date: 2021-10-05 12:47:58 UTC

release: 2.52.1 (#10885)

Update changelog with the 2.52.1 changes.

Author: Paweł Stołowski
Author Date: 2021-08-31 08:41:43 UTC

Use host-scaled timeout to avoid riscv64 test failure.

Author: Michael Vogt
Author Date: 2021-05-26 09:42:16 UTC

gadget: support creating vfat partitions during bootstrap

This commit allows creating the "Windows Basic Data Partition"
as part of the gadget.yaml. This is needed so that the ubuntu-boot
partition can be put on a gpt vfat partition. Note that we already
support this for non-gpt partition layouts.

Author: Ian Johnson
Author Date: 2021-03-02 16:43:06 UTC

packaging/ubuntu-16.04/rules: turn modules off explicitly

We already set GO111MODULE=off in spread.yaml, but for some reason that's not
sufficient when building the deb in hirsute, which now has Go 1.16 and defaults
to using modules. So explicitly disable it for all the manual go commands we run
here.

Signed-off-by: Ian Johnson <ian.johnson@canonical.com>

Author: Samuele Pedroni
Author Date: 2021-02-19 17:47:15 UTC

overlord: DEBUG PATCH: print some information about state.json

Merge pull request #9946 from bboozzoo/bboozzoo/state-debug-2.48

Author: Michael Vogt
Author Date: 2021-01-12 11:13:59 UTC

Merge pull request #9824 from anonymouse64/bugfix/2-48-backport-greengrass-flavors

interfaces/greengrass-support: back-port interface changes to 2.48

Author: Michael Vogt
Author Date: 2020-12-03 16:48:28 UTC

releasing package snapd version 2.48.1

Author: Michael Vogt
Author Date: 2020-10-08 08:53:25 UTC

releasing package snapd version 2.47.1

Author: Michael Vogt
Author Date: 2020-09-08 08:04:18 UTC

Merge pull request #9288 from stolowski/remove-cups-workaround

tests: remove workaround for cups on ubuntu-20.10

Author: Michael Vogt
Author Date: 2020-09-07 05:09:47 UTC

Merge pull request #9279 from mvo5/release-branches-run-tests-on-push

github: run tests also on push to release branches

Author: Michael Vogt
Author Date: 2020-08-10 06:41:29 UTC

Merge pull request #9123 from cmatsuoka/update-secboot-dual-signature

vendor: update secboot to support dual signed EFI binaries

Author: Michael Vogt
Author Date: 2020-07-10 18:08:34 UTC

releasing package snapd version 2.45.2

Author: Michael Vogt
Author Date: 2020-05-14 08:05:02 UTC

Merge pull request #8665 from jdstrand/desktop-silence-icons-denials-2.44

interfaces/desktop: silence more /var/lib/snapd/desktop/icons denials - 2.44

Author: Sergio Schvezov
Author Date: 2020-02-26 11:51:51 UTC

data/systemd: improve the description

While the code may have references to "snappy" we have long ago
not exposed that name. Fix the service description so that the
"Snappy" reference is not seen on system startup nor shutdown.

Signed-off-by: Sergio Schvezov <sergio.schvezov@canonical.com>

Author: Michael Vogt
Author Date: 2019-12-06 13:16:49 UTC

releasing package snapd version 2.42.5

Author: Claudio Matsuoka
Author Date: 2019-10-12 23:17:02 UTC

Merge pull request #7592 from cmatsuoka/update-fde-utils-ace2802

vendor: update fde-utils to latest master

Author: Michael Vogt
Author Date: 2019-09-13 09:47:49 UTC

Merge pull request #7460 from jdstrand/k8s-support-systemd-run-ptrace-read-2.41

interfaces/kubernetes-support: allow systemd-run to ptrace read unconfined - 2.41

Author: Maciej Borzecki
Author Date: 2019-08-20 10:46:19 UTC

Merge pull request #7264 from bboozzoo/bboozzoo/build-on-rhel-2.40

packaging/fedora: build on RHEL8 (2.40)

Author: Maciej Borzecki
Author Date: 2019-06-26 05:14:06 UTC

cmd/snap-seccomp/syscalls: add io_uring syscalls

The snap-seccomp helper maintains a list of all know syscalls supported by
libseccomp. We catch when the internal list diverges from upstream libseccomp in
a tests/main/snap-seccomp-syscalls spread test.

Upstream libseccomp has been updated with io_uring syscalls, update the internal
list.

Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>

Author: Michael Vogt
Author Date: 2019-05-29 10:24:58 UTC

debian: add placeholder changelog for 2.39.1

Author: Michael Vogt
Author Date: 2019-04-11 16:33:34 UTC

releasing package snapd version 2.38.1

Author: Michael Vogt
Author Date: 2019-03-06 07:58:34 UTC

tests: check that apt works before using it

The lxd test is using apt unconditionally even on core devices.

Nowdays the apt wrapper on core devices will error when run so
the lxd test needs an update to ensure it only uses apt if apt
is actually usable.

The ubuntu-core-apt test also needs an update to check that
the exit code is correct.

Author: Michael Vogt
Author Date: 2018-12-14 06:35:09 UTC

releasing package snapd version 2.36.3

Author: Michael Vogt
Author Date: 2018-10-16 05:42:22 UTC

tests: do not run degraded test in autopkgtest env

The autopkgtest environment sometimes has failing services. This
means that our degraded test leads to false positivies here. This
PR disables the test in the autopkgtest environment because we
have no control over the images in autopkgtest (unlike in our
spread CI) so the test is not useful here.

Author: Tony Espy
Author Date: 2018-08-11 21:57:36 UTC

interfaces/builtin: network-manager resolved DBus changes

Extend networkManagerPermanentSlotAppArmor to allow
NetworkManager to use systemd-resolved's SetLinkDNS and
SetLinkDomains DBus methods. NetworkManager 1.6.x added
support to allow systemd-resolved to be used for managing
system DNS configuration, and this is used by default in
network-manager 1.10.x, as shipped in Ubuntu 18.04 LTS.

Author: snowman5454
Author Date: 2018-06-25 01:21:49 UTC

Update SELinux policy

Update SELinux policy to remove denial messages and add a dontaudit
rule for unneeded read access on lost+found.

Author: Jamie Strandboge
Author Date: 2018-06-07 21:40:02 UTC

interfaces/raw-usb: also allow usb serial devices

USB serial devices like /dev/ttyUSB* were always meant to be included in this
transitional interface, but the code missed /dev/ttyUSB* AppArmor rules and
a matching udev rule to tag the devices (udev sets the SUBSYSTEM to tty for
USB serial devices so we use SUBSYSTEM=="tty", ENV{ID_BUS}=="usb" as the
conditional to tag only them for this interface).

Author: Michael Vogt
Author Date: 2018-03-09 10:24:07 UTC

releasing package snapd version 2.31.2

Author: Maciej Borzecki
Author Date: 2018-01-03 08:06:25 UTC

tests/main/classic-confinement: enable the test on Fedora

The snap-exec failure has been addressed with
563795fd8d628c64da4019aee3f5c6a845eb0fe7. We can reenable the test for Fedora
now.

Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>

Author: Michael Vogt
Author Date: 2017-11-30 16:45:30 UTC

releasing package snapd version 2.29.4.2

Author: Michael Vogt
Author Date: 2017-10-13 21:30:36 UTC

releasing package snapd version 2.28.5

Author: Michael Vogt
Author Date: 2017-09-07 08:40:33 UTC

releasing package snapd version 2.27.6

Author: Michael Vogt
Author Date: 2017-07-20 11:57:48 UTC

releasing package snapd version 2.26.14

Author: Michael Vogt
Author Date: 2017-07-03 09:11:15 UTC

fix merge artifact

Author: John Lenton
Author Date: 2017-05-04 11:08:56 UTC

Merge branch 'master' into release/2.25

Author: Michael Vogt
Author Date: 2017-03-29 14:56:29 UTC

add missing changelog on trusty

Author: Michael Vogt
Author Date: 2017-03-01 11:08:27 UTC

Merge pull request #2957 from mvo5/include-chg-summary-in-errreport

snapstate: include change kind/summary in error report

Author: Michael Vogt
Author Date: 2017-01-25 16:17:14 UTC

Merge remote-tracking branch 'origin/master' into ubuntu/14.04

Author: Michael Vogt
Author Date: 2017-01-16 07:04:10 UTC

fix typo

Author: Michael Vogt
Author Date: 2017-01-02 16:30:04 UTC

Merge branch 'master' into release/2.20.1

Author: Michael Vogt
Author Date: 2016-12-15 21:26:46 UTC

releasing package snapd version 2.20

Author: Michael Vogt
Author Date: 2016-12-15 07:37:17 UTC

Merge pull request #2474 from snapcore/revert-2471-feature/bootconfig

Revert "interfaces: add new boot-config interface"

Author: Michael Vogt
Author Date: 2016-12-14 10:36:40 UTC

Merge branch 'master' into release/2.18.1

Author: Michael Vogt
Author Date: 2016-12-12 15:41:52 UTC

remove snap-confine/ubuntu-core-launcher after the tests as well everywhere

Author: Michael Vogt
Author Date: 2016-11-24 20:03:00 UTC

releasing package snapd version 2.18

Author: Michael Vogt
Author Date: 2016-11-04 16:40:03 UTC

releasing package snapd version 2.17.1

Author: Michael Vogt
Author Date: 2016-11-01 23:22:54 UTC

releasing package snapd version 2.17

Author: Michael Vogt
Author Date: 2016-09-28 09:22:02 UTC

releasing package snapd version 2.16

Author: Gustavo Niemeyer
Author Date: 2016-06-13 14:11:25 UTC

Merge pull request #1293 from mvo5/feature/snap-run2.1

cmd/snap: create SNAP_USER_DATA and common dirs in `snap run`

Author: Michael Vogt
Author Date: 2016-05-20 07:33:30 UTC

Merge pull request #1178 from fgimenez/add-http-proxy

integration-tests: update 15.04 branch from master to accept http-proxy flag

Author: Samuele Pedroni
Author Date: 2015-12-04 14:20:57 UTC

Merge pull request #225 from pedronis/asserts-demo-install-demo-logic

asserts demo: check for assertions when installing a local file squashfs snap