snapd

The snapd and snap tools enable systems to work with .snap files.

GPL-3.0 License

Stars
1.9K
snapd - New bugfix release 2.53.4

Published by anonymouse64 almost 3 years ago

New snapd release 2.53.4

See https://forum.snapcraft.io/t/the-snapd-roadmap/1973 for high-level overview.

  • devicestate: mock devicestate.MockTimeutilIsNTPSynchronized to avoid host env leaking into tests
  • timeutil: return NoTimedate1Error if it can't connect to the system bus

And thus ends the terrible reign of snapd 2.53.3 which failed to build in launchpad giving birth to snapd 2.53.4

snapd - New bugfix release 2.53.3

Published by anonymouse64 almost 3 years ago

New snapd release 2.53.3

See https://forum.snapcraft.io/t/the-snapd-roadmap/1973 for high-level overview.

  • devicestate: Unregister deletes the device key pair as well
  • daemon,tests: support forgetting device serial via API
  • configcore: relax validation rules for hostname
  • o/devicestate: introduce DeviceManager.Unregister
  • packaging/ubuntu, packaging/debian: depend on dbus-session-bus provider
  • many: wait for up to 10min for NTP synchronization before autorefresh
  • interfaces/interfaces/scsi_generic: add interface for scsi generic devices
  • interfaces/microstack-support: set controlsDeviceCgroup to true
  • interface/builtin/log_observe: allow to access /dev/kmsg
  • daemon: write formdata file parts to snaps dir
  • spread: run lxd tests with version from latest/edge
  • cmd/libsnap-confine-private: fix snap-device-helper device allow list modification on cgroup v2
  • interfaces/builtin/dsp: add proc files for monitoring Ambarella DSP firmware
  • interfaces/builtin/dsp: update proc file accordingly

Full Changelog: https://github.com/snapcore/snapd/compare/2.53.2...2.53.3

snapd - New bugfix release 2.53.2

Published by anonymouse64 almost 3 years ago

New snapd release 2.53.2

See https://forum.snapcraft.io/t/the-snapd-roadmap/1973 for high-level overview.

  • interfaces/builtin/block_devices: allow blkid to print block device attributes/run/udev/data/b{major}:{minor}
  • cmd/libsnap-confine-private: do not deny all devices when reusing the device cgroup
  • interfaces/builtin/time-control: allow pps access
  • interfaces/u2f-devices: add Trezor and Trezor v2 keys
  • interfaces: timezone-control, add permission for ListTimezones DBus call
  • interfaces/apparmor/template.go: allow udevadm from merged usr systems
  • interface/modem-manager: allow connecting to the mbim/qmi proxy
  • interfaces/network-manager-observe: Update for libnm client library
  • cmd/snap-seccomp/syscalls: update syscalls to match libseccomp abad8a8f4
  • sandbox/cgroup: freeze and thaw cgroups related to services and scopes only
  • o/hookstate: print cohort with snapctl refresh --pending
  • cmd/snap-confine: lazy set up of device cgroup, only when devices were assigned
  • tests: ensure systemd-timesyncd is installed on debian
  • tests/lib/pkgdb: install strace on Debian 11 and Sid
  • tests/main/snapd-sigterm: flush, use retry
  • tests/main/snapd-sigterm: fix race conditions
  • release-tools/repack-debian-tarball.sh: fix c-vendor dir
  • data/selinux: allow snap-confine to read udev's database
  • interfaces/dsp: add more ambarella things* interfaces/dsp: add more ambarella things

Full Changelog: https://github.com/snapcore/snapd/compare/2.53.1...2.53.2

snapd - New bugfix release 2.53.1

Published by anonymouse64 about 3 years ago

What's Changed

New Contributors

Full Changelog: https://github.com/snapcore/snapd/compare/2.52.1...2.53.1

snapd - New major release 2.53

Published by mvo5 about 3 years ago

New major release

snapd - New bugfix release 2.52.1

Published by mvo5 about 3 years ago

Bugfixes:

  • snap-bootstrap: wait in mountNonDataPartitionMatchingKernelDisk for the disk (if not present already)
  • many: support an API flag system-restart-immediate to make snap ops proceed immediately with system restarts
  • cmd/libsnap-confine-private: g_spawn_check_exit_status is deprecated since glib 2.69
  • interfaces/seccomp: add clone3 to default template
  • interfaces/apparmor/template.go: allow inspection of dbus mediation level
  • interfaces/dsp: add a usb rule to the ambarella flavor
  • cmd/snap-confine: update s-c apparmor profile to allow versioned ld.so
  • o/ifacestate: don't lose connections if snaps are broken
  • interfaces/builtin/opengl.go: add libOpenGL.so* too
  • interfaces/hardware-observe: add some dmi properties
  • build-aux: stage libgcc1 library into snapd snap
  • interfaces/block-devices: support to access the state of block devices
  • packaging: ship the snapd.apparmor.service unit in debian
snapd - New snapd major release 2.52

Published by anonymouse64 about 3 years ago

New snapd release 2.52

See https://forum.snapcraft.io/t/the-snapd-roadmap/1973 for high-level overview.

  • interface/builtin: add qualcomm-ipc-router interface for AF_QIPCRTR socket protocol
  • o/ifacestate: special-case system-files and force refreshing its static attributes
  • interfaces/network-control: additional ethernet rule
  • packaging: update 2.52 changelog with 2.51.7
  • interfaces/interfaces/ion-memory-control: add: add interface for ion buf
  • packaging: merge 2.51.6 changelog back to 2.52
  • secboot: use half the mem for KDF in AddRecoveryKey
  • secboot: switch main key KDF memory cost to 32KB
  • many: merge release/2.51 change to release/2.52
  • .github/workflows/test.yaml: use snapcraft 4.x to build the snapd snap
  • o/servicestate: use snap app names for ExplicitServices of ServiceAction
  • tests/main/services-install-hook-can-run-svcs: add variant w/o --enable
  • o/servicestate: revert only start enabled services
  • tests: adding Ubuntu 21.10 to spread test suite
  • interface/modem-manager: add support for MBIM/QMI proxy clients
  • cmd/snap/model: support storage-safety and snaps headers too
  • o/assertstate: Implement EnforcedValidationSets helper
  • tests: using retry tool for nested tests
  • gadget: check for system-save with multi volumes if encrypting correctly
  • interfaces: make the service naming entirely internal to systemd BE
  • tests/lib/reset.sh: fix removing disabled snaps
  • store/store_download.go: use system snap provided xdelta3 priority + fallback
  • packaging: merge changelog from 2.51.3 back to master
  • overlord: only start enabled services
  • interfaces/builtin: add sd-control interface
  • tests/nested/cloud-init-{never-used,nocloud}-not-vuln: fix tests, use 2.45
  • tests/lib/reset.sh: add workaround from refresh-vs-services tests for all tests
  • o/assertstate: check for conflicts when refreshing and committing validation set asserts
  • devicestate: add support to save timings from install mode
  • tests: new tests.nested commands copy and wait-for
  • install: add a bunch of nested timings
  • tests: drop any-python wrapper
  • store: set ResponseHeaderTimeout on the default transport
  • tests: fix test-snapd-user-service-sockets test removing snap
  • tests: moving nested_exec to nested.tests exec
  • tests: add tests about services vs snapd refreshes
  • client, cmd/snap, daemon: refactor REST API for quotas to match CLI org
  • c/snap,asserts: create/delete-key external keypair manager interaction
  • tests: revert disable of the delta download tests
  • tests/main/system-usernames-microk8s: disable on centos 7 too
  • boot: support device change
  • o/snapstate: remove unused refreshSchedule argument for isRefreshHeld helper
  • daemon/api_quotas.go: handle conflicts, returning conflict response
  • tests: test for gate-auto-refresh hook error resulting in hold
  • release: 2.51.2
  • snapstate/check_snap: add snap_microk8s to shared system- usernames
  • snapstate: remove temporary snap file for local revisions early
  • interface: allows reading sd cards internal info from block-devices interface
  • tests: Renaming tool nested-state to tests.nested
  • testutil: fix typo in json checker unit tests
  • tests: ack assertions by default, add --noack option
  • overlord/devicestate: try to pick alternative recovery labels during remodel
  • bootloader/assets: update recovery grub to allow system labels generated by snapd
  • tests: print serial log just once for nested tests
  • tests: remove xenial 32 bits
  • sandbox/cgroup: do not be so eager to fail when paths do not exist
  • tests: run spread tests in ubuntu bionic 32bits
  • c/snap,asserts: start supporting ExternalKeypairManager in the snap key-related commands
  • tests: refresh control spread test
  • cmd/libsnap-confine-private: do not fail on ENOENT, better getline error handling
  • tests: disable delta download tests for now until the store is fixed
  • tests/nested/manual/preseed: fix for cloud images that ship without core18
  • boot: properly handle tried system model
  • tests/lib/store.sh: revert #10470
  • boot, seed/seedtest: tweak test helpers
  • o/servicestate: TODO and fix preexisting typo
  • o/servicestate: detect conflicts for quota group operations
  • cmd/snap/quotas: adjust help texts for quota commands
  • many/quotas: little adjustments
  • tests: add spread test for classic snaps content slots
  • o/snapstate: fix check-rerefresh task summary when refresh control is used
  • many: use changes + tasks for quota group operations
  • tests: fix test snap-quota-groups when checking file cgroupProcsFile
  • asserts: introduce ExternalKeypairManager
  • o/ifacestate: do not visit same halt tasks in waitChainSearch to avoid cycles
  • tests/lib/store.sh: fix make_snap_installable_with_id()
  • overlord/devicestate, overlord/assertstate: use a temporary DB when creating recovery systems
  • corecfg: allow using # snapd-edit: no header to disable pi-config# snapd-edit: no
  • tests/main/interfaces-ssh-keys: tweak checks for openSUSE Tumbleweed
  • cmd/snap: prevent cycles in waitChainSearch with snap debug state
  • o/snapstate: fix populating of affectedSnapInfo.AffectingSnaps for marking self as affecting
  • tests: new parameter used by retry tool to set env vars
  • tests: support parameters for match-log on journal-state tool
  • configcore: ignore system.pi-config.* setting on measured kernels
  • sandbox/cgroup: support freezing groups with unified hierarchy
  • tests: fix preseed test to used core20 snap on latest systems
  • testutil: introduce a checker which compares the type after having passed them through a JSON marshaller
  • store: tweak error message when store.Sections() download fails
  • o/servicestate: stop setting DoneStatus prematurely for quota-control
  • cmd/libsnap-confine-private: bump max depth of groups hierarchy to 32
  • many: turn Contact into an accessor
  • store: make the log with download size a debug one
  • cmd/snap-update-ns: Revert "cmd/snap-update-ns: add SRCDIR to include search path"
  • o/devicestate: move SystemMode method before first usage
  • tests: skip tests when the sections cannot be retrieved
  • boot: support resealing with a try model
  • o/hookstate: dedicated handler for gate-auto-refresh hook
  • tests: make sure the /root/snap dir is backed up on test snap-user-dir-perms-fixed
  • cmd/snap-confine: make mount ns use check cgroup v2 compatible
  • snap: fix TestInstallNoPATH unit test failure when SUDO_UID is set
  • cmd/libsnap-confine-private/cgroup-support.c: Fix typo
  • cmd/snap-confine, cmd/snapd-generator: fix issues identified by sparse
  • o/snapstate: make conditional-auto-refresh conflict with other tasks via affected snaps
  • many: pass device/model info to configcore via sysconfig.Device interface
  • o/hookstate: return bool flag from Error function of hook handler to ignore hook errors
  • cmd/snap-update-ns: add SRCDIR to include search path
  • tests: fix for tests/main/lxd-mount-units test and enable ubuntu-21.04
  • overlord, o/devicestate: use a single test helper for resetting to a post boot state
  • HACKING.md: update instructions for go1.16+
  • tests: fix restore for security-dev-input-event-denied test
  • o/servicestate: move SetStatus to doQuotaControl
  • tests: fix classic-prepare-image test
  • o/snapstate: prune gating information and refresh-candidates on snap removal
  • o/svcstate/svcstatetest, daemon/api_quotas: fix some tests, add mock helper
  • cmd: a bunch of tweaks and updates
  • o/servicestate: refactor meter handling, eliminate some common parameters
  • o/hookstate/ctlcmd: allow snapctl refresh --pending --proceed syntax.
  • o/snapstate: prune refresh candidates in check-rerefresh
  • osutil: pass --extrausers option to groupdel
  • o/snapstate: remove refreshed snap from snaps-hold in snapstate.doInstall
  • tests/nested: add spread test for uc20 cloud.conf from gadgets
  • boot: drop model from resealing and boostate
  • o/servicestate, snap/quota: eliminate workaround for buggy systemds, add spread test
  • o/servicestate: introduce internal and servicestatetest
  • o/servicestate/quota_control.go: enforce minimum of 4K for quota groups
  • overlord/servicestate: avoid unnecessary computation of disabled services
  • o/hookstate/ctlcmd: do not call ProceedWithRefresh immediately from snapctl
  • o/snapstate: prune hold state during autoRefreshPhase1
  • wrappers/services.go: do not restart disabled or inactive services
  • sysconfig/cloudinit.go: allow installing both gadget + ubuntu-seed config
  • spread: switch LXD back to latest/candidate channel
  • interfaces/opengl: add support for Imagination PowerVR
  • boot: decouple model from seal/reseal handling via an auxiliary type
  • spread, tests/main/lxd: no longer manual, switch to latest/stable
  • github: try out golangci-lint
  • tests: set lxd test to manual until failures are fixed
  • tests: connect 30% of the interfaces on test interfaces-many-core-provided
  • packaging/debian-sid: update snap-seccomp patches for latest master
  • many: fix imports order (according to gci)
  • o/snapstate: consider held snaps in autoRefreshPhase2
  • o/snapstate: unlock the state before calling backend in undoStartSnapServices
  • tests: replace "not MATCH" by NOMATCH in tests
  • README.md: refer to new IRC server
  • cmd/snap-preseed: provide more error info if snap-preseed fails early on mount
  • daemon: add a Daemon argument to AccessChecker.CheckAccess
  • c/snap-bootstrap: add bind option with tests
  • interfaces/builtin/netlink_driver_test.go: add test snippet
  • overlord/devicestate: set up recovery system tasks when attempting a remodel
  • osutil,strutil,testutil: fix imports order (according to gci)
  • release: merge 2.51.1 changelog
  • cmd: fix imports order (according to gci)
  • tests/lib/snaps/test-snapd-policy-app-consumer: remove dsp-control interface
  • o/servicestate: move handlers tests to quota_handlers_test.go file instead
  • interfaces: add netlink-driver interface
  • interfaces: remove leftover debug print
  • systemd: refactor property parsers for int values in CurrentTasksCount, etc.
  • tests: fix debug section for postrm-purge test
  • tests/many: change all cloud-init passwords for ubuntu to use plain_test_passwd
  • asserts,interfaces,snap: fix imports order (according to gci)
  • o/servicestate/quota_control_test.go: test the handlers directly
  • tests: fix issue when checking the udev tag on test security-device-cgroups
  • many: introduce Store.SnapExists and use it in /v2/accessories/themes
  • o/snapstate: update LastRefreshTime in doLinkSnap handler
  • o/hookstate: handle snapctl refresh --proceed and --hold
  • boot: fix model inconsistency check in modeenv, extend unit tests
  • overlord/servicestate: improve test robustness with locking
  • tests: first part of the cleanup
  • tests: new note in HACKING file to clarify about yamlordereddictloader dependency
  • daemon: make CheckAccess return an apiError
  • overlord: fix imports ordering (according to gci)
  • o/servicestate: add quotastate handlers
  • boot: track model's sign key ID, prepare infra for tracking candidate model
  • daemon: have apiBaseSuite.errorReq return *apiError directly
  • o/servicestate/service_control.go: add comment about ExplicitServices
  • interfaces: builtin: add dm-crypt interface to support external storage encryption
  • daemon: split out error response code from response*.go to errors*.go
  • interfaces/dsp: fix typo in udev rule
  • daemon,o/devicestate: have DeviceManager.SystemMode take an expectation on the system
  • o/snapstate: add helpers for setting and querying holding time for snaps
  • many: fix quota groups for centos 7, amazon linux 2 w/ workaround for buggy systemd
  • overlord/servicestate: mv ensureSnapServicesForGroup to new file
  • overlord/snapstate: lock the mutex before returning from stop snap services undo
  • daemon: drop resp completely in favor of using respJSON consistently
  • overlord/devicestate: support for snap downloads in recovery system handlers
  • daemon: introduce a separate findResponse, simplify SyncRespone and drop Meta
  • overlord/snapstate, overlord/devicestate: exclusive change conflict check
  • wrappers, packaging, snap-mgmt: handle removing slices on purge too
  • services: remember if acting on the entire snap
  • store: extend context and action objects of SnapAction with validation-sets
  • o/snapstate: refresh control - autorefresh phase2
  • cmd/snap/quota: refactor quota CLI as per new design
  • interfaces: opengl: change path for Xilinx zocl driver
  • tests: update spread images for ubuntu-core-20 and ubuntu-21.04
  • o/servicestate/quota_control_test.go: change helper escaping
  • o/configstate/configcore: support snap set system swap.size=...
  • o/devicestate: require serial assertion before remodeling can be started
  • systemd: improve systemctl error reporting
  • tests/core/remodel: use model assertions signed with valid keys
  • daemon: use apiError for more of the code
  • store: fix typo in snapActionResult struct json tag
  • userd: mock systemd --version in privilegedDesktopLauncherSuite
  • packaging/fedora: sync with downstream packaging
  • daemon/api_quotas.go: include current memory usage information in results
  • daemon: introduce StructuredResponse and apiError
  • o/patch: check if we have snapd snap with correct snap type already in snapstate
  • tests/main/snapd-snap: build the snapd snap on all platforms with lxd
  • tests: new commands for snaps-state tool
  • tests/main/snap-quota-groups: add functional spread test for quota groups
  • interfaces/dsp: add /dev/cavalry into dsp interface
  • cmd/snap/cmd_info_test.go: make test robust against TZ changes
  • tests: moving to tests directories snaps built locally - part 2
  • usersession/userd: fix unit tests on systems using /var/lib/snapd
  • sandbox/cgroup: wait for pid to be moved to the desired cgroup
  • tests: fix snap-user-dir-perms-fixed vs format checks
  • interfaces/desktop-launch: support confined snaps launching other snaps
  • features: enable dbus-activation by default
  • usersession/autostart: change ~/snap perms to 0700 on startup
  • cmd/snap-bootstrap/initramfs-mounts: mount ubuntu-data nosuid
  • tests: new test static checker
  • release-tool/changelog.py: misc fixes from real world usage
  • release-tools/changelog.py: add function to generate github release template
  • spread, tests: Fedora 32 is EOL, drop it
  • o/snapstate: bump max postponement from 60 to 95 days
  • interfaces/apparmor: limit the number of jobs when running with a single CPU
  • packaging/fedora/snapd.spec: correct date format in changelog
  • packaging: merge 2.51 changelog back to master
  • packaging/ubuntu-16.04/changelog: add 2.50 and 2.50.1 changelogs, placeholder for 2.51
  • interfaces: allow read access to /proc/tty/drivers to modem-manager and ppp/dev/tty
snapd - New bugfix release 2.51.7

Published by anonymouse64 about 3 years ago

New bugfix release 2.51.7

  • cmd/snap-seccomp/syscalls: update syscalls list to libseccomp v2.2.0-428-g5c22d4b1
  • tests: cherry-pick shellcheck fix bd730fd4
  • interfaces/dsp: add /dev/ambad into dsp interface
  • many: shellcheck fixes
  • snapstate: abort kernel refresh if no gadget update can be found
  • overlord: add manager test for "assumes" checking
  • store: deal correctly with "assumes" from the store raw yaml
snapd - New bugfix release 2.51.6

Published by anonymouse64 about 3 years ago

New bugfix release 2.51.6

- secboot: use half the mem for KDF in AddRecoveryKey
- secboot: switch main key KDF memory cost to 32KB
snapd - New bugfix release 2.51.5

Published by anonymouse64 about 3 years ago

New bugfix release 2.51.5

- snap/squashfs: handle squashfs-tools 4.5+
- tests/core20-install-device-file-install-via-hook-hack: adjust test for 2.51
- o/devicestate/handlers_install.go: add workaround to create dirs for install
- tests: fix linter warning
- tests: update other spread tests for new behaviour
- tests: ack assertions by default, add --noack option
- release-tools/changelog.py: also fix opensuse changelog date format
- release-tools/changelog.py: fix typo in function name
- release-tools/changelog.py: fix fedora date format
- release-tools/changelog.py: handle case where we don't have a TZ
- release-tools/changelog.py: fix line length check
- release-tools/changelog.py: specify the LP bug for the release as an arg too
- interface/modem-manager: add support for MBIM/QMI proxy clients
- .github/workflows/test.yaml: use snapcraft 4.x to build the snapd snap
snapd - New bugfix release 2.51.4

Published by anonymouse64 about 3 years ago

New bugfix release 2.51.4

  • {device,snap}state: skip kernel extraction in seeding
  • vendor: move to snapshot-4c814e1 branch and set fixed KDF options
  • tests/interfaces/tee: fix HasLen check for udev snippets
  • interfaces/tee: add support for Qualcomm qseecom device node
  • gadget: check for system-save with multi volumes if encrypting correctly
  • gadget: drive-by: drop unnecessary/supported passthrough in test gadget.yaml
snapd - New bugfix release 2.51.3

Published by anonymouse64 over 3 years ago

New bugfix release 2.51.3

  • interfaces/builtin: add sd-control interface
  • store: set ResponseHeaderTimeout on the default transport
snapd - New bugfix release 2.51.2

Published by anonymouse64 over 3 years ago

New upstream release 2.51.2

  • snapstate: remove temporary snap file for local revisions early
  • interface: allows reading sd cards internal info from block-devices interface
  • o/ifacestate: do not visit same halt tasks in waitChainSearch to avoid slow convergence (or unlikely cycles)
  • corecfg: allow using # snapd-edit: no header to disable pi-config
  • configcore: ignore system.pi-config.* setting on measured kernels
  • many: pass device/model info to configcore via sysconfig.Device interface
  • o/configstate/configcore: support snap set system swap.size=...
  • store: make the log with download size a debug one
  • interfaces/opengl: add support for Imagination PowerVR
snapd - New bugfix release 2.51.1

Published by mvo5 over 3 years ago

New upstream release 2.51.1

  • interfaces: add netlink-driver interface
  • interfaces: builtin: add dm-crypt interface to support external
    storage encryption
  • interfaces/dsp: fix typo in udev rule
  • overlord/snapstate: lock the mutex before returning from stop
    snap services undo
  • interfaces: opengl: change path for Xilinx zocl driver
  • interfaces/dsp: add /dev/cavalry into dsp interface
  • packaging/fedora/snapd.spec: correct date format in changelog
snapd - New major release 2.51

Published by anonymouse64 over 3 years ago

New snapd release 2.51

See https://forum.snapcraft.io/t/the-snapd-roadmap/1973 for high-level overview.

  • cmd/snap: stacktraces debug endpoint
  • secboot: deactivate volume again when model checker fails
  • store: extra log message, a few minor cleanups
  • packaging/debian-sid: update systemd patch
  • snapstate: adjust update-gadget-assets user visible message
  • tests/nested/core/core20-create-recovery: verify that recovery
    system can be created at runtime
  • gadget: support creating vfat partitions during bootstrap
  • daemon/api_quotas.go: support updating quotas with ensure action
  • daemon: tighten access to a couple of POST endpoints that should
    be really be root-only
  • seed/seedtest, overlord/devicestate: move seed validation helper
    to seedtest
  • overlord/hookstate/ctlcmd: remove unneeded parameter
  • snap/quota: add CurrentMemoryUsage for current memory usage of a
    quota group
  • systemd: add CurrentMemoryUsage to get current memory usage for a
    unit
  • o/snapstate: introduce minimalInstallInfo interface
  • o/hookstate: print pending info (ready, inhibited or none)
  • osutil: a helper to find out the total amount of memory in the
    system
  • overlord, overlord/devicestate: allow for reloading modeenv in
    devicemgr when testing
  • daemon: refine access testing
  • spread: disable unattended-upgrades on debian
  • tests/lib/reset: make nc exit after a while when connection is
    idle
  • daemon: replace access control flags on commands with access
    checkers
  • release-tools/changelog.py: refactor regexp + file reading/writing
  • packaging/debian-sid: update locale patch for the latest master
  • overlord/devicestate: tasks for creating recovery systems at
    runtime
  • release-tools/changelog.py: implement script to update all the
    changelog files
  • tests: change machine type used for nested testsPrices:
  • cmd/snap: include locale when linting description being lower case
  • o/servicestate: add RemoveSnapFromQuota
  • interfaces/serial-port: add Qualcomm serial port devices to
    allowed list
  • packaging: merge 2.50.1 changelog back
  • interfaces/builtin: introduce raw-input interface
  • tests: remove tests.cleanup prepare from nested test
  • cmd/snap-update-ns: fix linter errors
  • asserts: fix errors reported by linter
  • o/hookstate/ctlcmd: allow system-mode for non-root
  • overlord/devicestate: comment why explicit system mode check is
    needed in ensuring tried recovery systems (#10275)
  • overlord/devicesate: observe snap writes when creating recovery
    systems
  • packaging/ubuntu-16.04/changelog: add placeholder for 2.50.1
  • tests: moving to tests directories snaps built locally - part 1
  • seed/seedwriter: fail early when system seed directory exists
  • o/snapstate: autorefresh phase1 for refresh-control
  • c/snap: more precise message for ErrorKindSystemRestart op !=
    reboot
  • tests: simplify the tests.cleanup tool
  • boot: helpers for manipulating current and good recovery systems
    list
  • o/hookstate, o/snapstate: print revision, version, channel with
    snapctl --pending
  • overlord: unit test tweaks, use well known snap IDs, setup snap
    declarations for most common snaps
  • tests/nested/manual: add test for install-device + snapctl reboot
  • o/servicestate: restart slices + services on modifications
  • tests: update mount-ns test to support changes in the distro
  • interfaces: fix linter issues
  • overlord: mock logger in managers unit tests
  • tests: adding support for fedora-34
  • tests: adding support for debian 10 on gce
  • boot: reseal given keys when the respective boot chain has changed
  • secboot: switch encryption key size to 32 byte (thanks to Chris)
  • interfaces/dbus: allow claiming 'well-known' D-Bus names with a
    wildcard suffix
  • spread: bump delta reference version
  • interfaces: builtin: update permitted paths to be compatible with
    UC20
  • overlord: fix errors reported by linter
  • tests: remove old fedora systems from tests
  • tests: update spread url
  • interfaces/camera: allow devices in /sys/devices/platform/**/usb*
  • interfaces/udisks2: Allow access to the login manager via dbus
  • cmd/snap: exit normally if "snap changes" has no changes
    (LP #1823974)
  • tests: more fixes for spread suite on openSUSE
  • tests: fix tests expecting cgroup v1/hybrid on openSUSE Tumbleweed
  • daemon: fix linter errors
  • spread: add Fedora 34, leave a TODO about dropping Fedora 32
  • interfaces: fix linter errors
  • tests: use op.paths tools instead of dirs.sh helper - part 2
  • client: Fix linter errors
  • cmd/snap: Fix errors reported by linter
  • cmd/snap-repair: fix linter issues
  • cmd/snap-bootstrap: Fix linter errors
  • tests: update permission denied message for test-snapd-event on
    ubuntu 2104
  • cmd/snap: small tweaks based on previous reviews
  • snap/snaptest: helper that mocks both the squashfs file and a snap
    directory
  • overlord/devicestate: tweak comment about creating recovery
    systems, formatting tweaks
  • overlord/devicestate: move devicemgr base suite helpers closer to
    test suite struct
  • overlord/devicestate: keep track of tried recovery system
  • seed/seedwriter: clarify in the diagram when SetInfo is called
  • overlord/devicestate: add helper for creating recovery systems at
    runtime
  • snap-seccomp: update syscalls.go list
  • boot,image: support image.Customizations.BootFlags
  • overlord: support snapctl --halt|--poweroff in gadget install-
    device
  • features,servicestate: add experimental.quota-groups flag
  • o/servicestate: address comments from previous PR
  • tests: basic spread test for snap quota commands
  • tests: moving the snaps which are not locally built to the store
    directory
  • image,c/snap: implement prepare-image --customize
  • daemon: implement REST API for quota groups (create / list / get)
  • cmd/snap, client: snap quotas command
  • o/devicestate,o/hookstate/ctlcmd: introduce SystemModeInfo methods
    and snapctl system-mode
  • o/servicestate/quota_control.go: introduce (very) basic group
    manipulation methods
  • cmd/snap, client: snap remove-quota command
  • wrappers, quota: implement quota groups slice generation
  • snap/quotas: followups from previous PR
  • cmd/snap: introduce 'snap quota' command
  • o/configstate/configcore/picfg.go: use ubuntu-seed config.txt in
    uc20 run mode
  • o/servicestate: test has internal ordering issues, consider both
    cases
  • o/servicestate/quotas: add functions for getting and setting
    quotas in state
  • tests: new buckets for snapd-spread project on gce
  • spread.yaml: update the gce project to start using snapd-spread
  • quota: new package for managing resource groups
  • many: bind and check keys against models when using FDE hooks v2
  • many: move responsibilities down seboot -> kernel/fde and boot ->
    secboot
  • packaging: add placeholder changelog
  • o/configstate/configcore/vitality: fix RequireMountedSnapdSnap
    bug
  • overlord: properly mock usr-lib-snapd tests to mimic an Ubuntu
    Core system
  • many: hide EncryptionKey size and refactors for fde hook v2 next
    steps
  • tests: adding debug info for create user tests
  • o/hookstate: add "refresh" command to snapctl (hidden, not
    complete yet)
  • systemd: wait for zfs mounts (LP #1922293)
  • testutil: support referencing files in FileEquals checker
  • many: refactor to kernel/fde and allow fde-setup initial-setup
    to return json
  • o/snapstate: store refresh-candidates in the state
  • o/snapstate: helper for creating gate-auto-refresh hooks
  • bootloader/bootloadertest: provide interface implementation as
    mixins, provide a mock for recovery-aware-trusted-asses bootloader
  • tests/lib/nested: do not compress images, return early when
    restored from pristine image
  • boot: split out a helper for making recovery system bootable
  • tests: update os.query check to match new bullseye codename used
    on sid images
  • o/snapstate: helper for getting snaps affected by refresh, define
    new hook
  • wrappers: support in EnsureSnapServices a callback to observe
    changes (#10176)
  • gadget: multi line support in gadget's cmdline file
  • daemon: test that requesting restart from (early) Ensure works
  • tests: use op.paths tools instead of dirs.sh helper - part 1
  • tests: add new command to snaps-state to get current core, kernel
    and gadget
  • boot, gadget: move opening the snap container into the gadget
    helper
  • tests, overlord: extend unit tests, extend spread tests to cover
    full command line support
  • interfaces/builtin: introduce dsp interface
  • boot, bootloader, bootloader/assets: support for full command line
    override from gadget
  • overlord/devicestate, overlord/snapstate: add task for updating
    kernel command lines from gadget
  • o/snapstate: remove unused DeviceCtx argument of
    ensureInstallPreconditions
  • tests/lib/nested: proper status return for tpm/secure boot checks
  • cmd/snap, boot: add snapd_full_cmdline_args to dumped boot vars
  • wrappers/services.go: refactor helper lambda function to separate
    function
  • boot/flags.go: add HostUbuntuDataForMode
  • boot: handle updating of components that contribute to kernel
    command line
  • tests: add 20.04 to systems for nested/core
  • daemon: add new accessChecker implementations
  • boot, overlord/devicestate: consider gadget command lines when
    updating boot config
  • tests: fix prepare-image-grub-core18 for arm devices
  • tests: fix gadget-kernel-refs-update-pc test on arm and when
    $TRUST_TEST_KEY is false
  • tests: enable help test for all the systems
  • boot: set extra command line arguments when preparing run mode
  • boot: load bits of kernel command line from gadget snaps
  • tests: update layout for tests - part 2
  • tests: update layout for tests - part 1
  • tests: remove the snap profiler from the test suite
  • boot: drop gadget snap yaml which is already defined elsewhere in
    the tests
  • boot: set extra kernel command line arguments when making a
    recovery system bootable
  • boot: pass gadget path to command line helpers, load gadget from
    seed
  • tests: new os.paths tool
  • daemon: make ucrednetGet() return a *ucrednet structure
  • boot: derive boot variables for kernel command lines
  • cmd/snap-bootstrap/initramfs-mounts: fix boot-flags location from
    initramfs
snapd - New minor 2.50.1 release

Published by anonymouse64 over 3 years ago

  • interfaces/tee: add TEE/OPTEE interface
  • o/configstate/configcore: add hdmi_timings to pi-config
  • interfaces/udisks2: allow locking /run/mount/utab for udisks 2.8.4
  • snap-seccomp: fix seccomp test on ppc64el
  • interfaces{,/apparmor}, overlord/snapstate:
    late removal of snap-confine apparmor profiles
  • overlord/snapstate, wrappers: add dependency on usr-lib-
    snapd.mount for services on core with snapd snap
  • o/configstate: deal with no longer valid refresh.timer=managed
  • overlord/snapstate: make sure that snapd current symlink is not
    removed during refresh
  • packaging: drop dh-systemd from build-depends on ubuntu-16.04+
  • o/{device,hook}state: encode fde-setup-request key as base64
  • snapstate: reduce reRefreshRetryTimeout to 1/2 second
  • tests/main/uc20-create-partitions: fix tests cleanup
  • o/configstate, o/snapshotstate: fix handling of nil snap config on
    snapshot restore
  • snap-seccomp: add new close_range syscall
snapd - New major release 2.50

Published by mvo5 over 3 years ago

New major 2.50 release

snapd - New bugfix release 2.49.2

Published by mvo5 over 3 years ago

New bugfix release:

  • interfaces/tee: add TEE/OPTEE interface
  • o/configstate/configcore: add hdmi_timings to pi-config
  • interfaces/udisks2: allow locking /run/mount/utab for udisks 2.8.4
  • snap-seccomp: fix seccomp test on ppc64el
  • interfaces{,/apparmor}, overlord/snapstate: late removal of snap-confine apparmor profiles
  • overlord/snapstate, wrappers: add dependency on usr-lib-snapd.mount for services on core with snapd snap
  • o/configstate: deal with no longer valid refresh.timer=managed
  • overlord/snapstate: make sure that snapd current symlink is not removed during refresh
  • packaging: drop dh-systemd from build-depends on ubuntu-16.04+
  • o/{device,hook}state: encode fde-setup-request key as base64
  • snapstate: reduce reRefreshRetryTimeout to 1/2 second
  • tests/main/uc20-create-partitions: fix tests cleanup
  • o/configstate, o/snapshotstate: fix handling of nil snap config on snapshot restore
  • snap-seccomp: add new close_range syscall
snapd - New bugfix release 2.49.1

Published by mvo5 over 3 years ago

Some bugfixes:

  • tests: turn modules off explicitly in spread go unti test
  • o/snapshotstate: create snapshots directory on import
  • cmd/snap-bootstrap/triggerwatch: fix returning wrong errors
  • interfaces: add allegro-vcu and media-control interfaces
  • interfaces: opengl: add Xilinx zocl bits
  • many: fix new ineffassign warnings
  • interfaces/seccomp/template.go: allow copy_file_range
  • interfaces: allow reading the Xauthority file KDE Plasma writes for Wayland sessions
  • data/selinux: allow system dbus to watch /var/lib/snapd/dbus-1
  • Remove apparmor downgrade feature
  • Support tmp and log dirs on Yocto/Poky
snapd - New major release 2.49

Published by mvo5 over 3 years ago

New major release 2.49

✅ Express encryption preferences for UC20
✅ Support for LK bootloader for UC20
✅ Detection/abort of very slow downloads
✅ Fix snap try inside lxd containers
✅ Add “Tegra” and RPi “MMAL” support
✅ Add new “install-mode: disable” option