snapd

The snapd and snap tools enable systems to work with .snap files.

GPL-3.0 License

Stars
1.9K
View Code on GitHub
Ecosystems: Go
snapd - New bugfix release 2.57.4

Published by mvo5 about 2 years ago

New snapd release 2.57.4

  • release, snapd-apparmor: fixed outdated WSL detection
  • overlord/ifacestate: fix conflict detection of auto-connection
  • overlord: run install-device hook during factory reset
  • image/preseed/preseed_linux: add missing new line
  • boot: add factory-reset cases for boot-flags.
  • interfaces: added read/write access to /proc/self/coredump_filter
    for process-control
  • interfaces: add read access to /proc/cgroups and
    /proc/sys/vm/swappiness to system-observe
  • fde: run fde-reveal-key with DefaultDependencies=no
  • snapdenv: added wsl to userAgent
  • tests: fix restore section for persistent-journal-namespace
  • i/b/mount-control: add optional / to umount rules
  • cmd/snap-bootstrap: changes to be able to boot classic rootfs
  • cmd/snap-bootstrap: add CVM mode
snapd - New bugfix release 2.57.3

Published by mvo5 about 2 years ago

Bugfixes:

  • wrappers: journal namespaces did not honor journal.persistent
  • snap/quota,wrappers: allow using 0 values for the journal rate to override the system default values
  • multiple: clear up naming convention for cpu-set quota
  • i/b/mount-control: allow custom filesystem types
  • i/b/system-observe: allow reading processes security label
  • sandbox/cgroup: don't check V1 cgroup if V2 is active
  • asserts,boot,secboot: switch to a secboot version measuring classic
snapd - New bugfix release 2.57.2

Published by mvo5 about 2 years ago

New bugfix release:

  • store/tooling,tests: support UBUNTU_STORE_URL override env var
  • packaging/*/tests/integrationtests: reload ssh.service, not
    sshd.service
  • tests: check snap download with snapcraft v7+ export-login auth
    data
  • store/tooling: support using snapcraft v7+ base64-encoded auth
    data
  • many: progress bars should use the overridable stdouts
  • many: refactor store code to be able to use simpler form of auth
    creds
  • snap,store: drop support/consideration for anonymous download urls
  • data: include snapd/mounts in preseeded blob
  • many: Set SNAPD_APPARMOR_REEXEC=1
  • overlord: track security profiles for non-active snaps
snapd - New bugfix release 2.57.1

Published by pedronis about 2 years ago

Bugfixes:

  • cmd/snap-update-ns: handle mountpoint removal failures with EBUSY
  • snap-confine: disable -Werror=array-bounds in __overflow tests to fix build error on Ubuntu 22.10
  • systemd: add WantedBy=default.target to snap mount units (LP: #1983528)
snapd - New major release 2.57

Published by mvo5 about 2 years ago

New major release of snapd. Highlights:

  • authority delegation
  • journal quota support
  • bugfixes
snapd - New bugfix release 2.56.3

Published by mvo5 over 2 years ago

Bugfixes:

  • devicestate: add more path to fixupWritableDefaultDirs()
  • many: introduce IsUndo flag in LinkContext
  • i/apparmor: allow calling which.debianutils
  • interfaces: update AppArmor template to allow reading snap's
    memory statistics
  • interfaces: add memory stats to system_observe
  • i/b/{mount,system}-observe: extend access for htop
  • features: disable refresh-app-awarness by default again
  • image: fix handling of var/lib/extrausers when preseeding
    uc20
  • interfaces/modem-manager: Don't generate DBus policy for plugs
  • interfaces/modem-manager: Only generate DBus plug policy on
    Core
  • interfaces/serial_port_test: fix static-checks errors
  • interfaces/serial-port: add USB gadget serial devices (ttyGSX) to
    allowed list
  • interface/serial_port_test: adjust variable IDs
snapd - New bugfix release 2.56.2

Published by mvo5 over 2 years ago

New snapd release 2.56.2

  • o/snapstate: exclude services from refresh app awareness hard
    running check
  • cmd/snap: support custom apparmor features dir with snap
    prepare-image
snapd - New bugfix release 2.56.1

Published by mvo5 over 2 years ago

New snapd release 2.56.1

Highlights:

  • gadget/install: do not assume dm device has same block size as
    disk
  • gadget: check also mbr type when testing for implicit data
    partition
  • interfaces: update network-control interface with permissions
    required by resolvectl
  • interfaces/builtin: remove the name=org.freedesktop.DBus
    restriction in cups-control AppArmor rules
  • many: print valid/invalid status on snap validate --monitor ...
  • o/snapstate: fix validation sets restoring and snap revert on
    failed refresh
  • interfaces/opengl: update allowed PCI accesses for RPi
  • interfaces/shared-memory: Update AppArmor permissions for
    mmap+linkpaths
snapd - New major release 2.56

Published by mvo5 over 2 years ago

New major release 2.56

snapd - New bugfix release 2.55.5

Published by mvo5 over 2 years ago

New bugfix release:

  • snapstate: do not auto-migrate to ~/Snap for core22 just yet
  • cmd/snap-seccomp: add copy_file_range to
    syscallsWithNegArgsMaskHi32
  • cmd/snap-update-ns: correctly set sticky bit on created
    directories where applicable
  • .github: Skip misspell and ineffassign on go 1.13
  • tests: add lz4 dependency for jammy to avoid issues repacking
    kernel
  • interfaces: posix-mq: add new interface
snapd - New bugfix release 2.55.4

Published by mvo5 over 2 years ago

New snapd release 2.55.4

  • tests: do not run mount-order-regression test on i386
  • c/snap-seccomp: update syscalls
  • o/snapstate: overwrite ~/.snap subdir when migrating
  • o/assertstate: fix handling of validation set tracking update in
    enforcing mode
  • packaging: restart our units only after the upgrade
  • interfaces: add a steam-support interface
  • features: enable refresh-app-awareness by default
  • i/b/custom_device: fix generation of udev rules
  • interfaces/system-packages-doc: allow read-only access to
    /usr/share/gtk-doc
  • interfaces/system-packages-doc: allow read-only access to
    /usr/share/xubuntu-docs
  • interfaces/builtin/network-control: also allow for mstp and bchat
    devices too
  • interfaces/builtin: update apparmor profile to allow creating
    mimic over /usr/share
  • data/selinux: allow snap-update-ns to mount on top of /var/snap
    inside the mount ns
  • interfaces/cpu-control: fix apparmor rules of paths with CPU ID
snapd - New bugfix release 2.55.3

Published by mvo5 over 2 years ago

New bugfix release

snapd - New major release 2.55

Published by anonymouse64 over 2 years ago

What's Changed

New Contributors

Full Changelog: https://github.com/snapcore/snapd/compare/2.54.4...2.55

snapd - New bugfix release 2.55.1

Published by anonymouse64 over 2 years ago

New snapd release 2.55.1

See https://forum.snapcraft.io/t/the-snapd-roadmap/1973 for high-level overview.

  • cmd/snap-update-ns/change_test.go: use non-exist name foo-runtime
    instead
snapd - New bugfix release 2.55.2

Published by anonymouse64 over 2 years ago

New snapd release 2.55.2

See https://forum.snapcraft.io/t/the-snapd-roadmap/1973 for high-level overview.

  • cmd/snap-update-ns: actually use entirely non-existent dirs
snapd - New bugfix release 2.54.4

Published by mvo5 over 2 years ago

New bugfix release

  • t/m/interfaces-network-manager: use different channel depending on
    system
  • many: backport attrer interface changes to 2.54
  • tests: skip version check on lp-1871652 for sru validation
  • i/builtin: allow modem-manager interface to access some files in
    sysfs
  • snapstate: make "remove vulnerable version" message more
    friendly
  • tests: fix "undo purging" step in snap-run-devmode-classic
  • o/snapstate: deal with potentially invalid type of refresh.retain
    value due to lax validation
  • interfaces: custom-device
  • packaging/ubuntu-16.04/control: adjust libfuse3 dependency
  • data/env: fix fish env for all versions of fish
  • packaging/ubuntu-16.04/snapd.postinst: start socket and service
    first
  • interfaces/u2f-devices: add U2F-TOKEN
  • interfaces/seccomp: Add rseq to base seccomp template
  • tests: remove disabled snaps before calling save_snapd_state
  • overlord: skip manager tests on riscv for now
  • interfaces/opengl: add support for ARM Mali
  • devicestate: ensure permissions of /var/lib/snapd/void are
    correct
  • cmd/snap-update-ns: convert some unexpected decimal file mode
    constants to octal.
  • interfaces/shared-memory: support single wild-cards in the
    read/write paths
  • packaging: fix running autopkgtest
  • i/builtin/xilinx-dma-host: add interface for Xilinx DMA driver
  • tests: fix tests/core/create-user on testflinger pi3
  • tests: fix parallel-install-basic on external UC16 devices
  • tests: re-enable kernel-module-load tests on arm
  • tests: do not run k8s smoke test on 32 bit systems
snapd - New security update release 2.54.3

Published by mvo5 over 2 years ago

  • SECURITY UPDATE: Local privilege escalation
    • snap-confine: Add validations of the location of the snap-confine
      binary within snapd.
    • snap-confine: Fix race condition in snap-confine when preparing a
      private mount namespace for a snap.
    • CVE-2021-44730
    • CVE-2021-44731
  • SECURITY UPDATE: Data injection from malicious snaps
    • interfaces: Add validations of snap content interface and layout
      paths in snapd.
    • CVE-2021-4120
    • LP: #1949368
snapd - New bugfix release 2.54.2

Published by anonymouse64 almost 3 years ago

New snapd release 2.54.2

See https://forum.snapcraft.io/t/the-snapd-roadmap/1973 for high-level overview.

  • tests: exclude interfaces-kernel-module load on arm
  • tests: ensure that test-snapd-kernel-module-load is removed
  • tests: do not test microk8s-smoke on arm
  • tests/core/failover: replace boot-state with snap debug boot-vars
  • tests: use snap info|awk to extract tracking channel
  • tests: fix remodel-kernel test when running on external devices
  • .github/workflows/test.yaml: also check internal snapd version for cleanliness
  • packaging/ubuntu-16.04/rules: eliminate seccomp modification
  • bootloader/assets/grub_*cfg_asset.go: update Copyright
  • build-aux/snap/snapcraft.yaml: adjust comment about get-version
  • .github/workflows/test.yaml: add check in github actions for dirty snapd snaps
  • build-aux/snap/snapcraft.yaml: use build-packages, don't fail dirty builds
  • data/selinux: allow poking /proc/xen
snapd - New major release 2.54

Published by mvo5 almost 3 years ago

Major update for snapd 2.54

snapd - New bugfix release 2.54.1

Published by mvo5 almost 3 years ago

New bugfix release for the major 2.54 release:

  • buid-aux: set version before calling ./generate-packaging-dir
    This fixes the "dirty" suffix in the auto-generated version
Badges
Extracted from project README
Build Status Go Report Card codecov
Related Projects
pack

CLI for building apps using Cloud Native Buildpacks

25 Jun 2018 2,393
s

Open a web search in your terminal.

24 Jan 2016 2,326
linkerd2

Ultralight, security-first service mesh for Kubernetes. Main repo for Linkerd 2.x.

04 Dec 2017 10,403
cli

✨ A complete and self-contained solution for developers of any qualification to create a producti...

30 Dec 2019 2,564
chathooks

Service to convert webhook messages to your favorite chat / team messaging format. Run transparen...

21 Jan 2017 40
dialogflow-cx-cli

The missing Dialogflow CX CLI to interact with your projects

18 Sep 2022 43
awgo

Go library for Alfred 3 + 4 workflows

08 Sep 2017 859
cli

A simple, fast, and fun package for building command line apps in Go

13 Jul 2013 21,918