A small bugfix release:

• interfaces/home: don't allow snaps to write to $HOME/bin
• osutil: workaround overlayfs on ubuntu 18.10

This is a bugfix release of snapd for the 2.35 series.

Highlights:

• wrappers: do not depend on network.taget in socket units, tweak
  generated units
• overlord: don't make become-operational interfere with user
  requests
• docker_support.go: add rules to read apparmor macros
• interfaces/apparmor: handle overlayfs snippet for snap-update-ns
• snapcraft.yaml: add workaround to fix snapcraft build
• interfaces/opengl: misc accesses for VA-API

This is a new bugfix release.

The most important fixes:

• cmd,overlord/snapstate: go 1.11 format fixes
• ifacestate: fix hang when retrying content providers
• snap-env-generator: do nothing when PATH is unset
• interfaces/modem-manager: allow access to more USB strings

This is a new bugfix release for snapd.

The most important fixes:

• cmd: add systemd environment generator to ensure /snap/bin is always in PATH
• snap-confine: map /var/lib/extrausers into snaps mount-namespace in Ubuntu Core 18
• selftest: detect if apparmor is unusable and error in this case

Welcome to the new 2.35 upstream release of snapd!

This release contains the following bugfixes:

• interfaces/apparmor: use the cache in mtime-resilient way
• cmd/snap-confine: (nvidia) pick up libnvidia-glvkspirv.so
• snapstate: allow setting "refresh.timer=managed"
• spread: switch Fedora and openSUSE images

Minor fixes mostly for the testsuite:

• packaging: fix bogus date in fedora snapd.spec
• tests: fix tests expecting old email address

This is a minor release with the following highlights:

• coreconfig: add support for snap set system network.disable-ipv6
• debian: do not ship snapd.apparmor.service on ubuntu (fixes failing service on startup)
• overlord/snapstate: dedupe default content providers
• interfaces/builtin: new can-bus interface

We are happy to announce a new snapd release.

Some highlights:
✅ Interface connection via gadget
✅ Hardware watchdog on Ubuntu Core
✅ New dvd interface
✅ New {contacts,calendar}-service interfaces
✅ Snapd selftest check on startup

Small bugfix release:

• many: improve udev trigger on refresh experience
• systemd: require snapd.socket in snapd.seeded.service
• snap: don't include newline in hook environment
• interfaces/apparmor: allow killing snap-update-ns
• tests: skip "try" test on s390x
• tests: skip security-dev-input-event-denied when /dev/input/by-path/ is missing
• tests: skip security-dev-input-event-denied on s390x/arm64

See https://forum.snapcraft.io/t/the-snapd-roadmap/1973 under 2.33 for the highlights.

This release only contains fixes for autopkgtest on Ubuntu/Debian:

• tests: run all spread tests inside GCE
• tests: build spread in the autopkgtests with a more recent go

No changes outside of the autopkgtest environment

Bugfix release:

• many: add wait command and seeded target (2
  - snapd.core-fixup.sh: add workaround for corrupted uboot.env
  - boot: clear "snap_mode" when needed
  - cmd/libsnap: fix compile error on more restrictive gcc
  - tests: cherry-pick commits to move spread to google backend
  - spread.yaml: add cosmic (18.10) to autopkgtest/qemu
  - userd: set up journal logging streams for autostarted apps

Bugfix release:

• snapd.core-fixup.sh: fix workaround for corrupted uboot.env and add tests

Bugfixes:

• snap: do not use overly short timeout in snap {start,stop,restart}
• interfaces/apparmor: fix incorrect apparmor profile glob

Test improvements:

• tests: detect kernel oops during tests and abort tests in this case
• tests: run interfaces-boradcom-asic-control early
• tests: skip interfaces-content test on core devices

Features added:

• snapd now supports "system" as the alias of the core snap
• snapd now supports the "stop-mode" snap property

Features removed:

• none

Bugs fixed:

• snapd now actively checks if mounting snaps succeeded
• snapd now correctly handles various refresh/stop mode settings
• snapd no longer allows installing the snap "system"

Features added:

• snapd now uses brand new store API
• snapd now allows installing base snaps from custom channels (testing)
• snapd now allows installing content snaps from custom channels (testing)
• snapd now supports the "autostart" property for desktop applications
• snapd now uses the status of whoopsie.service to skip error reports
• snapd now allows the use of getconf by default
• snapd now allows the use of nf_conntract for users of firewall-control interface
• snapd now allows calling SetWallMessage for users of shutdown interface
• snapd now allows mounts on $SNAP_COMMON and $SNAP_USER_COMMON to users of fuse-support interface
• snapd now allows using taskset for users of process-control interface

Features removed:

• none

Bugs fixed:

• snapd now correctly waits for bases and core when refreshing snaps
• snapd no longer reads the whoopsie.service file
• snapd no longer triggers large amount of SELinux warnings
• snapd no longer closes snapctl socket while hooks are running
• snapd now correctly ignores missing cgroups in snap-device-helper

Features added:

• snapd now sends additional information in error reports, like apport

Features removed:

• none

Bugs fixed:

• snapd now correctly installs snaps when re-executing from old version
• snapd now correctly refreshes snaps when along with the core snap
• snapd now correctly creates openGL directories (gl, gl32, vulkan)
• snapd now correctly parses fstab fields with embedded # character
• snapd now correctly removes generated files when removed from the system
• snapd will no longer crash if fstab cannot be parsed

Features added:

• snappy can now use proprietary Nvidia drivers on Ubuntu 18.04 and similar.

Features removed:

• none

Bugs fixed:

• snappy now correctly grants write access to writable content slots
• snappy now correctly re-computes refresh schedule when schedule is set
• snappy no longer blocks access to serial ports named /dev/ttymxcX
• snappy no longer sends needless authentication data on some requests
• snappy uses more recent version of a YAML parser

Features added:

• none

Features removed:

• none

Bugs fixed:

• snappy now correctly creates vulkan directories with nvidia IDC files
• snappy no longer creates temporary files that can confuse apparmor
• snappy now correctly handles SIGINT and SIGTERM on early startup
• snappy integration test suite is more robust on core devices