github.com/anonymouse64/snapd@v0.0.0-20210824153203-04c4c42d842d/packaging/debian-sid/changelog (about) 1 snapd (2.51.6-1) unstable; urgency=medium 2 3 * New upstream release, LP: #1929842 4 - secboot: use half the mem for KDF in AddRecoveryKey 5 - secboot: switch main key KDF memory cost to 32KB 6 7 -- Ian Johnson <ian.johnson@canonical.com> Thu, 19 Aug 2021 15:49:47 -0500 8 9 snapd (2.51.5-1) unstable; urgency=medium 10 11 * New upstream release, LP: #1929842 12 - snap/squashfs: handle squashfs-tools 4.5+ 13 - tests/core20-install-device-file-install-via-hook-hack: adjust 14 test for 2.51 15 - o/devicestate/handlers_install.go: add workaround to create dirs 16 for install 17 - tests: fix linter warning 18 - tests: update other spread tests for new behaviour 19 - tests: ack assertions by default, add --noack option 20 - release-tools/changelog.py: also fix opensuse changelog date 21 format 22 - release-tools/changelog.py: fix typo in function name 23 - release-tools/changelog.py: fix fedora date format 24 - release-tools/changelog.py: handle case where we don't have a TZ 25 - release-tools/changelog.py: fix line length check 26 - release-tools/changelog.py: specify the LP bug for the release as 27 an arg too 28 - interface/modem-manager: add support for MBIM/QMI proxy 29 clients 30 - .github/workflows/test.yaml: use snapcraft 4.x to build the snapd 31 snap 32 33 -- Ian Johnson <ian.johnson@canonical.com> Mon, 16 Aug 2021 15:02:40 -0500 34 35 snapd (2.51.4-1) unstable; urgency=medium 36 37 * New upstream release, LP: #1929842 38 - {device,snap}state: skip kernel extraction in seeding 39 - vendor: move to snapshot-4c814e1 branch and set fixed KDF options 40 - tests/interfaces/tee: fix HasLen check for udev snippets 41 - interfaces/tee: add support for Qualcomm qseecom device node 42 - gadget: check for system-save with multi volumes if encrypting 43 correctly 44 - gadget: drive-by: drop unnecessary/supported passthrough in test 45 gadget.yaml 46 47 -- Ian Johnson <ian.johnson@canonical.com> Mon, 09 Aug 2021 18:56:18 -0500 48 49 snapd (2.51.3-1) unstable; urgency=medium 50 51 * New upstream release, LP: #1929842 52 - interfaces/builtin: add sd-control interface 53 - store: set ResponseHeaderTimeout on the default transport 54 55 -- Ian Johnson <ian.johnson@canonical.com> Wed, 14 Jul 2021 15:26:54 -0500 56 57 snapd (2.51.2-1) unstable; urgency=medium 58 59 * New upstream release, LP: #1929842 60 - snapstate: remove temporary snap file for local revisions early 61 - interface: allows reading sd cards internal info from block- 62 devices interface 63 - o/ifacestate: do not visit same halt tasks in waitChainSearch to 64 avoid slow convergence (or unlikely cycles) 65 - corecfg: allow using `# snapd-edit: no` header to disable pi- 66 config 67 - configcore: ignore system.pi-config.* setting on measured kernels 68 - many: pass device/model info to configcore via sysconfig.Device 69 interface 70 - o/configstate/configcore: support snap set system swap.size=... 71 - store: make the log with download size a debug one 72 - interfaces/opengl: add support for Imagination PowerVR 73 74 -- Michael Vogt <michael.vogt@ubuntu.com> Wed, 07 Jul 2021 15:35:46 +0200 75 76 snapd (2.51.1-1) unstable; urgency=medium 77 78 * New upstream release, LP: #1929842 79 - interfaces: add netlink-driver interface 80 - interfaces: builtin: add dm-crypt interface to support external 81 storage encryption 82 - interfaces/dsp: fix typo in udev rule 83 - overlord/snapstate: lock the mutex before returning from stop 84 snap services undo 85 - interfaces: opengl: change path for Xilinx zocl driver 86 - interfaces/dsp: add /dev/cavalry into dsp interface 87 - packaging/fedora/snapd.spec: correct date format in changelog 88 89 -- Michael Vogt <michael.vogt@ubuntu.com> Tue, 15 Jun 2021 12:45:08 +0200 90 91 snapd (2.51-1) unstable; urgency=medium 92 93 * New upstream release, LP: #1929842 94 - cmd/snap: stacktraces debug endpoint 95 - secboot: deactivate volume again when model checker fails 96 - store: extra log message, a few minor cleanups 97 - packaging/debian-sid: update systemd patch 98 - snapstate: adjust update-gadget-assets user visible message 99 - tests/nested/core/core20-create-recovery: verify that recovery 100 system can be created at runtime 101 - gadget: support creating vfat partitions during bootstrap 102 - daemon/api_quotas.go: support updating quotas with ensure action 103 - daemon: tighten access to a couple of POST endpoints that should 104 be really be root-only 105 - seed/seedtest, overlord/devicestate: move seed validation helper 106 to seedtest 107 - overlord/hookstate/ctlcmd: remove unneeded parameter 108 - snap/quota: add CurrentMemoryUsage for current memory usage of a 109 quota group 110 - systemd: add CurrentMemoryUsage to get current memory usage for a 111 unit 112 - o/snapstate: introduce minimalInstallInfo interface 113 - o/hookstate: print pending info (ready, inhibited or none) 114 - osutil: a helper to find out the total amount of memory in the 115 system 116 - overlord, overlord/devicestate: allow for reloading modeenv in 117 devicemgr when testing 118 - daemon: refine access testing 119 - spread: disable unattended-upgrades on debian 120 - tests/lib/reset: make nc exit after a while when connection is 121 idle 122 - daemon: replace access control flags on commands with access 123 checkers 124 - release-tools/changelog.py: refactor regexp + file reading/writing 125 - packaging/debian-sid: update locale patch for the latest master 126 - overlord/devicestate: tasks for creating recovery systems at 127 runtime 128 - release-tools/changelog.py: implement script to update all the 129 changelog files 130 - tests: change machine type used for nested testsPrices: 131 - cmd/snap: include locale when linting description being lower case 132 - o/servicestate: add RemoveSnapFromQuota 133 - interfaces/serial-port: add Qualcomm serial port devices to 134 allowed list 135 - packaging: merge 2.50.1 changelog back 136 - interfaces/builtin: introduce raw-input interface 137 - tests: remove tests.cleanup prepare from nested test 138 - cmd/snap-update-ns: fix linter errors 139 - asserts: fix errors reported by linter 140 - o/hookstate/ctlcmd: allow system-mode for non-root 141 - overlord/devicestate: comment why explicit system mode check is 142 needed in ensuring tried recovery systems (#10275) 143 - overlord/devicesate: observe snap writes when creating recovery 144 systems 145 - packaging/ubuntu-16.04/changelog: add placeholder for 2.50.1 146 - tests: moving to tests directories snaps built locally - part 1 147 - seed/seedwriter: fail early when system seed directory exists 148 - o/snapstate: autorefresh phase1 for refresh-control 149 - c/snap: more precise message for ErrorKindSystemRestart op != 150 reboot 151 - tests: simplify the tests.cleanup tool 152 - boot: helpers for manipulating current and good recovery systems 153 list 154 - o/hookstate, o/snapstate: print revision, version, channel with 155 snapctl --pending 156 - overlord: unit test tweaks, use well known snap IDs, setup snap 157 declarations for most common snaps 158 - tests/nested/manual: add test for install-device + snapctl reboot 159 - o/servicestate: restart slices + services on modifications 160 - tests: update mount-ns test to support changes in the distro 161 - interfaces: fix linter issues 162 - overlord: mock logger in managers unit tests 163 - tests: adding support for fedora-34 164 - tests: adding support for debian 10 on gce 165 - boot: reseal given keys when the respective boot chain has changed 166 - secboot: switch encryption key size to 32 byte (thanks to Chris) 167 - interfaces/dbus: allow claiming 'well-known' D-Bus names with a 168 wildcard suffix 169 - spread: bump delta reference version 170 - interfaces: builtin: update permitted paths to be compatible with 171 UC20 172 - overlord: fix errors reported by linter 173 - tests: remove old fedora systems from tests 174 - tests: update spread url 175 - interfaces/camera: allow devices in /sys/devices/platform/**/usb* 176 - interfaces/udisks2: Allow access to the login manager via dbus 177 - cmd/snap: exit normally if "snap changes" has no changes 178 (LP #1823974) 179 - tests: more fixes for spread suite on openSUSE 180 - tests: fix tests expecting cgroup v1/hybrid on openSUSE Tumbleweed 181 - daemon: fix linter errors 182 - spread: add Fedora 34, leave a TODO about dropping Fedora 32 183 - interfaces: fix linter errors 184 - tests: use op.paths tools instead of dirs.sh helper - part 2 185 - client: Fix linter errors 186 - cmd/snap: Fix errors reported by linter 187 - cmd/snap-repair: fix linter issues 188 - cmd/snap-bootstrap: Fix linter errors 189 - tests: update permission denied message for test-snapd-event on 190 ubuntu 2104 191 - cmd/snap: small tweaks based on previous reviews 192 - snap/snaptest: helper that mocks both the squashfs file and a snap 193 directory 194 - overlord/devicestate: tweak comment about creating recovery 195 systems, formatting tweaks 196 - overlord/devicestate: move devicemgr base suite helpers closer to 197 test suite struct 198 - overlord/devicestate: keep track of tried recovery system 199 - seed/seedwriter: clarify in the diagram when SetInfo is called 200 - overlord/devicestate: add helper for creating recovery systems at 201 runtime 202 - snap-seccomp: update syscalls.go list 203 - boot,image: support image.Customizations.BootFlags 204 - overlord: support snapctl --halt|--poweroff in gadget install- 205 device 206 - features,servicestate: add experimental.quota-groups flag 207 - o/servicestate: address comments from previous PR 208 - tests: basic spread test for snap quota commands 209 - tests: moving the snaps which are not locally built to the store 210 directory 211 - image,c/snap: implement prepare-image --customize 212 - daemon: implement REST API for quota groups (create / list / get) 213 - cmd/snap, client: snap quotas command 214 - o/devicestate,o/hookstate/ctlcmd: introduce SystemModeInfo methods 215 and snapctl system-mode 216 - o/servicestate/quota_control.go: introduce (very) basic group 217 manipulation methods 218 - cmd/snap, client: snap remove-quota command 219 - wrappers, quota: implement quota groups slice generation 220 - snap/quotas: followups from previous PR 221 - cmd/snap: introduce 'snap quota' command 222 - o/configstate/configcore/picfg.go: use ubuntu-seed config.txt in 223 uc20 run mode 224 - o/servicestate: test has internal ordering issues, consider both 225 cases 226 - o/servicestate/quotas: add functions for getting and setting 227 quotas in state 228 - tests: new buckets for snapd-spread project on gce 229 - spread.yaml: update the gce project to start using snapd-spread 230 - quota: new package for managing resource groups 231 - many: bind and check keys against models when using FDE hooks v2 232 - many: move responsibilities down seboot -> kernel/fde and boot -> 233 secboot 234 - packaging: add placeholder changelog 235 - o/configstate/configcore/vitality: fix RequireMountedSnapdSnap 236 bug 237 - overlord: properly mock usr-lib-snapd tests to mimic an Ubuntu 238 Core system 239 - many: hide EncryptionKey size and refactors for fde hook v2 next 240 steps 241 - tests: adding debug info for create user tests 242 - o/hookstate: add "refresh" command to snapctl (hidden, not 243 complete yet) 244 - systemd: wait for zfs mounts (LP #1922293) 245 - testutil: support referencing files in FileEquals checker 246 - many: refactor to kernel/fde and allow `fde-setup initial-setup` 247 to return json 248 - o/snapstate: store refresh-candidates in the state 249 - o/snapstate: helper for creating gate-auto-refresh hooks 250 - bootloader/bootloadertest: provide interface implementation as 251 mixins, provide a mock for recovery-aware-trusted-asses bootloader 252 - tests/lib/nested: do not compress images, return early when 253 restored from pristine image 254 - boot: split out a helper for making recovery system bootable 255 - tests: update os.query check to match new bullseye codename used 256 on sid images 257 - o/snapstate: helper for getting snaps affected by refresh, define 258 new hook 259 - wrappers: support in EnsureSnapServices a callback to observe 260 changes (#10176) 261 - gadget: multi line support in gadget's cmdline file 262 - daemon: test that requesting restart from (early) Ensure works 263 - tests: use op.paths tools instead of dirs.sh helper - part 1 264 - tests: add new command to snaps-state to get current core, kernel 265 and gadget 266 - boot, gadget: move opening the snap container into the gadget 267 helper 268 - tests, overlord: extend unit tests, extend spread tests to cover 269 full command line support 270 - interfaces/builtin: introduce dsp interface 271 - boot, bootloader, bootloader/assets: support for full command line 272 override from gadget 273 - overlord/devicestate, overlord/snapstate: add task for updating 274 kernel command lines from gadget 275 - o/snapstate: remove unused DeviceCtx argument of 276 ensureInstallPreconditions 277 - tests/lib/nested: proper status return for tpm/secure boot checks 278 - cmd/snap, boot: add snapd_full_cmdline_args to dumped boot vars 279 - wrappers/services.go: refactor helper lambda function to separate 280 function 281 - boot/flags.go: add HostUbuntuDataForMode 282 - boot: handle updating of components that contribute to kernel 283 command line 284 - tests: add 20.04 to systems for nested/core 285 - daemon: add new accessChecker implementations 286 - boot, overlord/devicestate: consider gadget command lines when 287 updating boot config 288 - tests: fix prepare-image-grub-core18 for arm devices 289 - tests: fix gadget-kernel-refs-update-pc test on arm and when 290 $TRUST_TEST_KEY is false 291 - tests: enable help test for all the systems 292 - boot: set extra command line arguments when preparing run mode 293 - boot: load bits of kernel command line from gadget snaps 294 - tests: update layout for tests - part 2 295 - tests: update layout for tests - part 1 296 - tests: remove the snap profiler from the test suite 297 - boot: drop gadget snap yaml which is already defined elsewhere in 298 the tests 299 - boot: set extra kernel command line arguments when making a 300 recovery system bootable 301 - boot: pass gadget path to command line helpers, load gadget from 302 seed 303 - tests: new os.paths tool 304 - daemon: make ucrednetGet() return a *ucrednet structure 305 - boot: derive boot variables for kernel command lines 306 - cmd/snap-bootstrap/initramfs-mounts: fix boot-flags location from 307 initramfs 308 309 -- Ian Johnson <ian.johnson@canonical.com> Thu, 27 May 2021 11:15:20 -0500 310 311 snapd (2.50.1-1) unstable; urgency=medium 312 313 * New upstream release, LP: #1926005 314 - interfaces: update permitted /lib/.. paths to be compatible with 315 UC20 316 - interfaces: builtin: update permitted paths to be compatible with 317 UC20 318 - interfaces/greengrass-support: delete white spaces at the end of 319 lines 320 - snap-seccomp: update syscalls.go list 321 - many: backport kernel command line for 2.50 322 - interfaces/dbus: allow claiming 'well-known' D-Bus names with a 323 wildcard suffix 324 - interfaces/camera: allow devices in /sys/devices/platform/**/usb* 325 - interfaces/builtin: introduce dsp interface 326 327 -- Ian Johnson <ian.johnson@canonical.com> Wed, 19 May 2021 10:46:02 -0500 328 329 snapd (2.50-1) unstable; urgency=medium 330 331 * New upstream release, LP: #1926005 332 - overlord: properly mock usr-lib-snapd tests to mimic an Ubuntu 333 Core system 334 - o/configstate/configcore/vitality: fix RequireMountedSnapdSnap bug 335 - o/servicestate/servicemgr.go: add ensure loop for snap service 336 units 337 - wrappers/services.go: introduce EnsureSnapServices() 338 - snapstate: add "kernel-assets" to featureSet 339 - systemd: wait for zfs mounts 340 - overlord: make servicestate responsible to compute 341 SnapServiceOptions 342 - boot,tests: move where we write boot-flags one level up 343 - o/configstate: don't pass --root=/ when 344 masking/unmasking/enabling/disabling services 345 - cmd/snap-bootstrap/initramfs-mounts: write active boot-flags to 346 /run 347 - gadget: be more flexible with kernel content resolving 348 - boot, cmd/snap: include extra cmdline args in debug boot-vars 349 output 350 - boot: support read/writing boot-flags from userspace/initramfs 351 - interfaces/pwm: add PWM interface 352 - tests/lib/prepare-restore.sh: clean out snapd changes and snaps 353 before purging 354 - systemd: enrich UnitStatus returned by systemd.Status() with 355 Installed flag 356 - tests: updated restore phase of spread tests - part 1 357 - gadget: add support for kernel command line provided by the gadget 358 - tests: Using GO111MODULE: "off" in spread.yaml 359 - features: add gate-auto-refresh-hook feature flag 360 - spread: ignore linux kernel upgrade in early stages for arch 361 preparation 362 - tests: use snaps-state commands and remove them from the snaps 363 helper 364 - o/configstate: fix panic with a sequence of config unset ops over 365 same path 366 - api: provide meaningful error message on connect/disconnect for 367 non-installed snap 368 - interfaces/u2f-devices: add HyperFIDO Pro 369 - tests: add simple sanity check for systemctl show 370 --property=UnitFileState for unknown service 371 - tests: use tests.session tool on interfaces-desktop-document- 372 portal test 373 - wrappers: install D-Bus service activation files for snapd session 374 tools on core 375 - many: add x-gvfs-hide option to mount units 376 - interfaces/builtin/gpio_test.go: actually test the generated gpio 377 apparmor 378 - spread: tentative workaround for arch failure caused by libc 379 upgrade and cgroups v2 380 - tests: add spread test for snap validate against store assertions 381 - tests: remove snaps which are not used in any test 382 - ci: set the accept-existing-contributors parameter for the cla- 383 check action 384 - daemon: introduce apiBaseSuite.(json|sync|async|error)Req (and 385 some apiBaseSuite cosmetics) 386 - o/devicestate/devicemgr: register install-device hook, run if 387 present in install 388 - o/configstate/configcore: simple refactors in preparation for new 389 function 390 - tests: unifying the core20 nested suite with the core nested suite 391 - tests: uboot-unpacked-assets updated to reflect the real path used 392 to find the kernel 393 - daemon: switch api_test.go to daemon_test and various other 394 cleanups 395 - o/configstate/configcore/picfg.go: add hdmi_cvt support 396 - interfaces/apparmor: followup cleanups, comments and tweaks 397 - boot: cmd/snap-bootstrap: handle a candidate recovery system v2 398 - overlord/snapstate: skip catalog refresh when snappy testing is 399 enabled 400 - overlord/snapstate, overlord/ifacestate: move late security 401 profile removal to ifacestate 402 - snap-seccomp: fix seccomp test on ppc64el 403 - interfaces, interfaces/apparmor, overlord/snapstate: late removal 404 of snap-confine apparmor profiles 405 - cmd/snap-bootstrap/initramfs-mounts: move time forward using 406 assertion times 407 - tests: reset the system while preparing the test suite 408 - tests: fix snap-advise-command check for 429 409 - gadget: policy for gadget/kernel refreshes 410 - o/configstate: deal with no longer valid refresh.timer=managed 411 - interfaces/udisks2: allow locking /run/mount/utab for udisks 2.8.4 412 - cla-check: Use has-signed-canonical-cla GitHub Action 413 - tests: validation sets spread test 414 - tests: simplify the reset.sh logic by removing not needed command 415 - overlord/snapstate: make sure that snapd current symlink is not 416 removed during refresh 417 - tests/core/fsck-on-boot: unmount /run/mnt/snapd directly on uc20 418 - tests/lib/fde-setup-hook: also verify that fde-reveal-key key data 419 is base64 420 - o/devicestate: split off ensuring next boot goes to run mode into 421 new task 422 - tests: fix cgroup-tracking test 423 - boot: export helper for clearing tried system state, add tests 424 - cmd/snap: use less aggressive client timeouts in unit tests 425 - daemon: fix signing key validity timestamp in unit tests 426 - o/{device,hook}state: encode fde-setup-request key as base64 427 string 428 - packaging: drop dh-systemd from build-depends on ubuntu-16.04+ 429 - cmd/snap/pack: unhide the compression option 430 - boot: extend set try recovery system unit tests 431 - cmd/snap-bootstrap: refactor handling of ubuntu-save, do not use 432 secboot's implicit fallback 433 - o/configstate/configcore: add hdmi_timings to pi-config 434 - snapstate: reduce reRefreshRetryTimeout to 1/2 second 435 - interfaces/tee: add TEE/OPTEE interface 436 - o/snapstate: update validation sets assertions with auto-refresh 437 - vendor: update go-tpm2/secboot to latest version 438 - seed: ReadSystemEssentialAndBetterEarliestTime 439 - tests: replace while commands with the retry tool 440 - interfaces/builtin: update unit tests to use proper distro's 441 libexecdir 442 - tests: run the reset.sh helper and check test invariants while the 443 test is restored 444 - daemon: switch preexisting daemon_test tests to apiBaseSuite and 445 .req 446 - boot, o/devicestate: split makeBootable20 into two parts 447 - interfaces/docker-support: add autobind unix rules to docker- 448 support 449 - interfaces/apparmor: allow reading 450 /proc/sys/kernel/random/entropy_avail 451 - tests: use retry tool instead a loops 452 - tests/main/uc20-create-partitions: fix tests cleanup 453 - asserts: mode where Database only assumes cur time >= earliest 454 time 455 - daemon: validation sets/api tests cleanup 456 - tests: improve tests self documentation for nested test suite 457 - api: local assertion fallback when it's not in the store 458 - api: validation sets monitor mode 459 - tests: use fs-state tool in interfaces tests 460 - daemon: move out /v2/login|logout and errToResponse tests from 461 api_test.go 462 - boot: helper for inspecting the outcome of a recovery system try 463 - o/configstate, o/snapshotstate: fix handling of nil snap config on 464 snapshot restore 465 - tests: update documentation and checks for interfaces tests 466 - snap-seccomp: add new `close_range` syscall 467 - boot: revert #10009 468 - gadget: remove `device-tree{,-origin}` from gadget tests 469 - boot: simplify systems test setup 470 - image: write resolved-content from snap prepare-image 471 - boot: reseal the run key for all recovery systems, but recovery 472 keys only for the good ones 473 - interfaces/builtin/network-setup-{control,observe}: allow using 474 netplan directly 475 - tests: improve sections prepare and restore - part 1 476 - tests: update details on task.yaml files 477 - tests: revert os.query usage in spread.yaml 478 - boot: export bootAssetsMap as AssetsMap 479 - tests/lib/prepare: fix repacking of the UC20 kernel snap for with 480 ubuntu-core-initramfs 40 481 - client: protect against reading too much data from stdin 482 - tests: improve tests documentation - part 2 483 - boot: helper for setting up a try recover system 484 - tests: improve tests documentation - part 1 485 - tests/unit/go: use tests.session wrapper for running tests as a 486 user 487 - tests: improvements for snap-seccomp-syscalls 488 - gadget: simplify filterUpdate (thanks to Maciej) 489 - tests/lib/prepare.sh: use /etc/group and friends from the core20 490 snap 491 - tests: fix tumbleweed spread tests part 2 492 - tests: use new commands of os.query tool on tests 493 - o/snapshotstate: create snapshots directory on import 494 - tests/main/lxd/prep-snapd-in-lxd.sh: dump contents of sources.list 495 - packaging: drop 99-snapd.conf via dpkg-maintscript-helper 496 - osutil: add SetTime() w/ 32-bit and 64-bit implementations 497 - interfaces/wayland: rm Xwayland Xauth file access from wayland 498 slot 499 - packaging/ubuntu-16.04/rules: turn modules off explicitly 500 - gadget,devicestate: perform kernel asset update for $kernel: style 501 refs 502 - cmd/recovery: small fix for `snap recovery` tab output 503 - bootloader/lkenv: add recovery systems related variables 504 - tests: fix new tumbleweed image 505 - boot: fix typo, should be systems 506 - o/devicestate: test that users.create.automatic is configured 507 early 508 - asserts: use Fetcher in AddSequenceToUpdate 509 - daemon,o/c/configcore: introduce users.create.automatic 510 - client, o/servicestate: expose enabled state of user daemons 511 - boot: helper for checking and marking tried recovery system status 512 from initramfs 513 - asserts: pool changes for validation-sets (#9930) 514 - daemon: move the last api_foo_test.go to daemon_test 515 - asserts: include the assertion timestamp in error message when 516 outside of signing key validity range 517 - ovelord/snapshotstate: keep a few of the last line tar prints 518 before failing 519 - gadget/many: rm, delay sector size + structure size checks to 520 runtime 521 - cmd/snap-bootstrap/triggerwatch: fix returning wrong errors 522 - interfaces: add allegro-vcu and media-control interfaces 523 - interfaces: opengl: add Xilinx zocl bits 524 - mkversion: check that version from changelog is set before 525 overriding the output version 526 - many: fix new ineffassign warnings 527 - .github/workflows/labeler.yaml: try work-around to not sync 528 labels 529 - cmd/snap, boot: add debug set-boot-vars 530 - interfaces: allow reading the Xauthority file KDE Plasma writes 531 for Wayland sessions 532 - tests/main/snap-repair: test running repair assertion w/ fakestore 533 - tests: disable lxd tests for 21.04 until the lxd images are 534 published for the system 535 - tests/regression/lp-1910456: cleanup the /snap symlink when done 536 - daemon: move single snap querying and ops to api_snaps.go 537 - tests: fix for preseed and dbus tests on 21.04 538 - overlord/snapshotstate: include the last message printed by tar in 539 the error 540 - interfaces/system-observe: Allow reading /proc/zoneinfo 541 - interfaces: remove apparmor downgrade feature 542 - snap: fix unit tests on Go 1.16 543 - spread: disable Go modules support in environment 544 - tests: use new path to find kernel.img in uc20 for arm devices 545 - tests: find files before using cat command when checking broadcom- 546 asic-control interface 547 - boot: introduce good recovery systems, provide compatibility 548 handling 549 - overlord: add manager gadget refresh test 550 - tests/lib/fakestore: support repair assertions too 551 - github: temporarily disable action labeler due to issues with 552 labels being removed 553 - o/devicestate,many: introduce DeviceManager.preloadGadget for 554 EarlyConfig 555 - tests: enable ubuntu 21.04 for spread tests 556 - snap: provide a useful error message if gdbserver is not installed 557 - data/selinux: allow system dbus to watch /var/lib/snapd/dbus-1 558 - tests/lib/prepare.sh: split reflash.sh into two parts 559 - packaging/opensuse: sync with openSUSE packaging 560 - packaging: disable Go modules in snapd.mk 561 - snap: add deprecation noticed to "snap run --gdb" 562 - daemon: add API for checking and installing available theme snaps 563 - tests: using labeler action to add automatically a label to run 564 nested tests 565 - gadget: improve error handling around resolving content sources 566 - asserts: repeat the authority cross-check in CheckSignature as 567 well 568 - interfaces/seccomp/template.go: allow copy_file_range 569 - o/snapstate/check_snap.go: add support for many subversions in 570 assumes snapdX.. 571 - daemon: move postSnap and inst.dispatch tests to api_snaps_test.go 572 - wrappers: use proper paths for mocked mount units in tests 573 - snap: rename gdbserver option to `snap run --gdbserver` 574 - store: support validation sets with fetch-assertions action 575 - snap-confine.apparmor.in: support tmp and log dirs on Yocto/Poky 576 - packaging/fedora: sync with downstream packaging in Fedora 577 - many: add Delegate=true to generated systemd units for special 578 interfaces (master) 579 - boot: use a common helper for mocking boot assets in cache 580 - api: validate snaps against validation set assert from the store 581 - wrappers: don't generate an [Install] section for timer or dbus 582 activated services 583 - tests/nested/core20/boot-config-update: skip when snapd was not 584 built with test features 585 - o/configstate,o/devicestate: introduce devicestate.EarlyConfig 586 implemented by configstate.EarlyConfig 587 - cmd/snap-bootstrap/initramfs-mounts: fix typo in func name 588 - interfaces/builtin: mock distribution in fontconfig cache unit 589 tests 590 - tests/lib/prepare.sh: add another console= to the reflash magic 591 grub entry 592 - overlord/servicestate: expose dbus activators of a service 593 - desktop/notification: test against a real session bus and 594 notification server implementation 595 - cmd/snap-bootstrap/initramfs-mounts: write realistic modeenv for 596 recover+install 597 - HACKING.md: explain how to run UC20 spread tests with QEMU 598 - asserts: introduce AtSequence 599 - overlord/devicestate: task for updating boot configs, spread test 600 - gadget: fix documentation/typos 601 - gadget: cleanup MountedFilesystem{Writer,Updater} 602 - gadget: use ResolvedSource in MountedFilesystemWriter 603 - snap/info.go: add doc-comment for SortServices 604 - interfaces: add an optional mount-host-font-cache plug attribute 605 to the desktop interface 606 - osutil: skip TestReadBuildGo inside sbuild 607 - o/hookstate/ctlcmd: add optional --pid and --apparmor-label 608 arguments to "snapctl is-connected" 609 - data/env/snapd: use quoting in case PATH contains spaces 610 - boot: do not observe successful boot assets if not in run mode 611 - tests: fix umount for snapd snap on fsck-on-boot testumount: 612 /run/mnt/ubuntu-seed/systems/*/snaps/snapd_*.snap: no mount 613 - misc: little tweaks 614 - snap/info.go: ignore unknown daemons in SortSnapServices 615 - devicestate: keep log from install-mode on installed system 616 - seed: add LoadEssentialMeta to seed16 and allow all of its 617 implementations to be called multiple times 618 - cmd/snap-preseed: initialize snap.SanitizePlugsSlots for gadget in 619 seeds 620 - tests/core/uc20-recovery: move recover mode helpers to generic 621 testslib script 622 - interfaces/fwupd: allow any distros to access fw files via fwupd 623 - store: method for fetching validation set assertion 624 - store: switch to v2/assertions api 625 - gadget: add new ResolvedContent and populate from LayoutVolume() 626 - spread: use full format when listing processes 627 - osutil/many: make all test pkgs osutil_test instead of "osutil" 628 - tests/unit/go: drop unused environment variables, skip coverage 629 - OpenGL interface: Support more Tegra libs 630 - gadget,overlord: pass kernelRoot to install.Run() 631 - tests: run unit tests in Focal instead of Xenial 632 - interfaces/browser-support: allow sched_setaffinity with browser- 633 sandbox: true 634 - daemon: move query /snaps/<name> tests to api_snaps_test.go 635 - cmd/snap-repair/runner.go: add SNAP_SYSTEM_MODE to env of repair 636 runner 637 - systemd/systemd.go: support journald JSON messages with arrays for 638 values 639 - cmd: make string/error code more robust against errno leaking 640 - github, run-checks: do not collect coverage data on subsequent 641 test runs 642 - boot: boot config update & reseal 643 - o/snapshotstate: handle conflicts between snapshot forget, export 644 and import 645 - osutil/stat.go: add RegularFileExists 646 - cmd/snapd-generator: don't create mount overrides for snap-try 647 snaps inside lxc 648 - gadget/gadget.go: rename ubuntu-* to system-* in doc-comment 649 - tests: use 6 spread workers for centos8 650 - bootloader/assets: support injecting bootloader assets in testing 651 builds of snapd 652 - gadget: enable multi-volume uc20 gadgets in 653 LaidOutSystemVolumeFromGadget; rename too 654 - overlord/devicestate, sysconfig: do nothing when cloud-init is not 655 present 656 - cmd/snap-repair: filter repair assertions based on bases + modes 657 - snap-confine: make host /etc/ssl available for snaps on classic 658 659 -- Michael Vogt <michael.vogt@ubuntu.com> Sat, 24 Apr 2021 12:17:45 +0200 660 661 snapd (2.49.2-1) unstable; urgency=medium 662 663 * New upstream release, LP: #1915248 664 - interfaces/tee: add TEE/OPTEE interface 665 - o/configstate/configcore: add hdmi_timings to pi-config 666 - interfaces/udisks2: allow locking /run/mount/utab for udisks 2.8.4 667 - snap-seccomp: fix seccomp test on ppc64el 668 - interfaces{,/apparmor}, overlord/snapstate: 669 late removal of snap-confine apparmor profiles 670 - overlord/snapstate, wrappers: add dependency on usr-lib- 671 snapd.mount for services on core with snapd snap 672 - o/configstate: deal with no longer valid refresh.timer=managed 673 - overlord/snapstate: make sure that snapd current symlink is not 674 removed during refresh 675 - packaging: drop dh-systemd from build-depends on ubuntu-16.04+ 676 - o/{device,hook}state: encode fde-setup-request key as base64 677 - snapstate: reduce reRefreshRetryTimeout to 1/2 second 678 - tests/main/uc20-create-partitions: fix tests cleanup 679 - o/configstate, o/snapshotstate: fix handling of nil snap config on 680 snapshot restore 681 - snap-seccomp: add new `close_range` syscall 682 683 -- Michael Vogt <michael.vogt@ubuntu.com> Fri, 26 Mar 2021 16:49:46 +0100 684 685 snapd (2.49.1-1) unstable; urgency=medium 686 687 * New upstream release, LP: #1915248 688 - tests: turn modules off explicitly in spread go unti test 689 - o/snapshotstate: create snapshots directory on import 690 - cmd/snap-bootstrap/triggerwatch: fix returning wrong errors 691 - interfaces: add allegro-vcu and media-control interfaces 692 - interfaces: opengl: add Xilinx zocl bits 693 - many: fix new ineffassign warnings 694 - interfaces/seccomp/template.go: allow copy_file_range 695 - interfaces: allow reading the Xauthority file KDE Plasma writes 696 for Wayland sessions 697 - data/selinux: allow system dbus to watch 698 /var/lib/snapd/dbus-1 699 - Remove apparmor downgrade feature 700 - Support tmp and log dirs on Yocto/Poky 701 702 -- Michael Vogt <michael.vogt@ubuntu.com> Mon, 08 Mar 2021 10:47:05 +0100 703 704 snapd (2.49-1) unstable; urgency=medium 705 706 * New upstream release, LP: #1915248 707 - many: add Delegate=true to generated systemd units for special 708 interfaces 709 - cmd/snap-bootstrap: rename ModeenvFromModel to 710 EphemeralModeenvForModel 711 - cmd/snap-bootstrap/initramfs-mounts: write realistic modeenv for 712 recover+install 713 - osutil: skip TestReadBuildGo inside sbuild 714 - tests: fix umount for snapd snap on fsck-on-boot test 715 - snap/info_test.go: add unit test cases for bug 716 - tests/main/services-after-before: add regression spread test 717 - snap/info.go: ignore unknown daemons in SortSnapServices 718 - cmd/snap-preseed: initialize snap.SanitizePlugsSlots for gadget in 719 seeds 720 - OpenGL interface: Support more Tegra libs 721 - interfaces/browser-support: allow sched_setaffinity with browser- 722 sandbox: true 723 - cmd: make string/error code more robust against errno leaking 724 - o/snapshotstate: handle conflicts between snapshot forget, export 725 and import 726 - cmd/snapd-generator: don't create mount overrides for snap-try 727 snaps inside lxc 728 - tests: update test pkg for fedora and centos 729 - gadget: pass sector size in to mkfs family of functions, use to 730 select block sz 731 - o/snapshotstate: fix returning of snap names when duplicated 732 snapshot is detected 733 - tests/main/snap-network-errors: skip flushing dns cache on 734 centos-7 735 - interfaces/builtin: Allow DBus property access on 736 org.freedesktop.Notifications 737 - cgroup-support.c: fix link to CGROUP DELEGATION 738 - osutil: update go-udev package 739 - packaging: fix arch-indep build on debian-sid 740 - {,sec}boot: pass "key-name" to the FDE hooks 741 - asserts: sort by revision with Sort interface 742 - gadget: add gadget.ResolveContentPaths() 743 - cmd/snap-repair: save base snap and mode in device info; other 744 misc cleanups 745 - tests: cleanup the run-checks script 746 - asserts: snapasserts method to validate installed snaps against 747 validation sets 748 - tests: normalize test tools - part 1 749 - snapshotstate: detect duplicated snapshot imports 750 - interfaces/builtin: fix unit test expecting snap-device-helper at 751 /usr/lib/snapd 752 - tests: apply workaround done for snap-advise-command to apt-hooks 753 test 754 - tests: skip main part of snap-advise test if 429 error is 755 encountered 756 - many: clarify gadget role-usage consistency checks for UC16/18 vs 757 UC20 758 - sandbox/cgroup, tess/main: fix unit tests on v2 system, disable 759 broken tests on sid 760 - interfaces/builtin: more drive by fixes, import ordering, removing 761 dead code 762 - tests: skip interfaces-openvswitch spread test on debian sid 763 - interfaces/apparmor: drive by comment fix 764 - cmd/libsnap-confine-private/cleanup-funcs-test.c: rm g_autofree 765 usage 766 - cmd/libsnap-confine-private: make unit tests execute happily in a 767 container 768 - interfaces, wrappers: misc comment fixes, etc. 769 - asserts/repair.go: add "bases" and "modes" support to the repair 770 assertion 771 - interfaces/opengl: allow RPi MMAL video decoding 772 - snap: skip help output tests for go-flags v1.4.0 773 - gadget: add validation for "$kernel:ref" style content 774 - packaging/deb, tests/main/lxd-postrm-purge: fix purge inside 775 containers 776 - spdx: update to SPDX license list version: 3.11 2020-11-25 777 - tests: improve hotplug test setup on classic 778 - tests: update check to verify is the current system is arm 779 - tests: use os-query tool to check debian, trusty and tumbleweed 780 - daemon: start moving implementation to api_snaps.go 781 - tests/main/snap-validate-basic: disable test on Fedora due to go- 782 flags panics 783 - tests: fix library path used for tests.pkgs 784 - tests/main/cohorts: replace yq with a Python snippet 785 - run-checks: update to match new argument syntax of ineffassign 786 - tests: use apiBaseSuite for snapshots tests, fix import endpoint 787 path 788 - many: separate consistency/content validation into 789 gadget.Validate|Content 790 - o/{device,snap}state: enable devmode snaps with dangerous model 791 assertions 792 secboot: add test for when systemd-run does not honor 793 RuntimeMaxSec 794 - secboot: add workaround for snapcore/core-initrd issue #13 795 - devicestate: log checkEncryption errors via logger.Noticef 796 - o/daemon: validation sets api and basic spread test 797 - gadget: move BuildPartitionList to install and make it unexported 798 - tests: add nested spread end-to-end test for fde-hooks 799 - devicestate: implement checkFDEFeatures() 800 - boot: tweak resealing with fde-setup hooks 801 - tests: add os query commands for subsystems and architectures 802 - o/snapshotstate: don't set auto flag in the snapshot file 803 - tests: use os.query tool instead of comparing the system var 804 - testutil: use the original environment when calling shellcheck 805 - sysconfig/cloudinit.go: add "manual_cache_clean: true" to cloud- 806 init restrict file 807 - gadget,o/devicestate,tests: drop EffectiveFilesystemLabel and 808 instead set the implicit labels when loading the yaml 809 - secboot: add new LockSealedKeys() that uses either TPM/fde-reveal- 810 key 811 - gadget/quantity: introduce Offset, start using it for offset 812 related fields in the gadget 813 - gadget: use "sealed-keys" to determine what method to use for 814 reseal 815 - tests/main/fake-netplan-apply: disable test on xenial for now 816 - daemon: start splitting snaps op tests out of api_test.go 817 - testutil: make DBusTest use a custom bus configuration file 818 - tests: replace pkgdb.sh (library) with tests.pkgs (program) 819 - gadget: prepare gadget kernel refs (0/N) 820 - interfaces/builtin/docker-support: allow /run/containerd/s/... 821 - cmd/snap-preseed: reset run inhibit locks on --reset. 822 - boot: add sealKeyToModeenvUsingFdeSetupHook() 823 - daemon: reorg snap.go and split out sections and icons support 824 from api.go 825 - sandbox/seccomp: use snap-seccomp's stdout for getting version 826 info 827 - daemon: split find support to its own api_*.go files and move some 828 helpers 829 - tests: move snapstate config defaults tests to a separate file. 830 - bootloader/{lk,lkenv}: followups from #9695 831 - daemon: actually move APIBaseSuite to daemon_test.apiBaseSuite 832 - gadget,o/devicestate: set implicit values for schema and role 833 directly instead of relying on Effective* accessors 834 - daemon: split aliases support to its own api_*.go files 835 - gadget: start separating rule/convention validation from basic 836 soundness 837 - cmd/snap-update-ns: add better unit test for overname sorting 838 - secboot: use `fde-reveal-key` if available to unseal key 839 - tests: fix lp-1899664 test when snapd_x1 is not installed in the 840 system 841 - tests: fix the scenario when the "$SRC".orig file does not exist 842 - cmd/snap-update-ns: fix sorting of overname mount entries wrt 843 other entries 844 - devicestate: add runFDESetupHook() helper 845 - bootloader/lk: add support for UC20 lk bootloader with V2 lkenv 846 structs 847 - daemon: split unsupported buy implementation to its own api_*.go 848 files 849 - tests: download timeout spread test 850 - gadget,o/devicestate: hybrid 18->20 ready volume setups should be 851 valid 852 - o/devicestate: save model with serial in the device save db 853 - bootloader: add check for prepare-image time and more tests 854 validating options 855 - interfaces/builtin/log_observe.go: allow controlling apparmor 856 audit levels 857 - hookstate: refactor around EphemeralRunHook 858 - cmd/snap: implement 'snap validate' command 859 - secboot,devicestate: add scaffoling for "fde-reveal-key" support 860 - boot: observe successful command line update, provide a default 861 - tests: New queries for the os tools 862 - bootloader/lkenv: specify backup file as arg to NewEnv(), use "" 863 as path+"bak" 864 - osutil/disks: add FindMatchingPartitionUUIDWithPartLabel to Disk 865 iface 866 - daemon: split out snapctl support and snap configuration support 867 to their own api_*.go files 868 - snapshotstate: improve handling of multiple errors 869 - tests: sign new nested-18|20* models to allow for generic serials 870 - bootloader: remove installableBootloader interface and methods 871 - seed: cleanup/drop some no longer valid TODOS, clarify some other 872 points 873 - boot: set kernel command line in modeenv during install 874 - many: rename disks.FindMatching... to FindMatching...WithFsLabel 875 and err type 876 - cmd/snap: suppress a case of spurious stdout logging from tests 877 - hookstate: add new HookManager.EphemeralRunHook() 878 - daemon: move some more api tests from daemon to daemon_test 879 - daemon: split apps and logs endpoints to api_apps.go and tests 880 - interfaces/utf: Add Ledger to U2F devices 881 - seed/seedwriter: consider modes when checking for deps 882 availability 883 - o/devicestate,daemon: fix reboot system action to not require a 884 system label 885 - cmd/snap-repair,store: increase initial retry time intervals, 886 stalling TODOs 887 - daemon: split interfacesCmd to api_interfaces.go 888 - github: run nested suite when commit is pushed to release branch 889 - client: reduce again the /v2/system-info timeout 890 - tests: reset fakestore unit status 891 - update-pot: fix typo in plural keyword spec 892 - tests: remove workarounds that add "ubuntu-save" if missing 893 - tests: add unit test for auto-refresh with validate-snap failure 894 - osutil: add helper for getting the kernel command line 895 - tests/main/uc20-create-partitions: verify ubuntu-save encryption 896 keys, tweak not MATCH 897 - boot: add kernel command lines to the modeenv file 898 - spread: bump delta ref, tweak repacking to make smaller delta 899 archives 900 - bootloader/lkenv: add v2 struct + support using it 901 - snapshotstate: add cleanup of abandonded snapshot imports 902 - tests: fix uc20-create-parition-* tests for updated gadget 903 - daemon: split out /v2/interfaces tests to api_interfaces_test.go 904 - hookstate: implement snapctl fde-setup-{request,result} 905 - wrappers, o/devicestate: remove EnableSnapServices 906 - tests: enable nested on 20.10 907 - daemon: simplify test helpers Get|PostReq into Req 908 - daemon: move general api to api_general*.go 909 - devicestate: make checkEncryption fde-setup hook aware 910 - client/snapctl, store: fix typos 911 - tests/main/lxd/prep-snapd-in-lxd.sh: wait for valid apt files 912 before doing apt ops 913 - cmd/snap-bootstrap: update model cross-check considerations 914 - client,snapctl: add naive support for "stdin" 915 - many: add new "install-mode: disable" option 916 - osutil/disks: allow building on mac os 917 - data/selinux: update the policy to allow operations on non-tmpfs 918 /tmp 919 - boot: add helper for generating candidate kernel lines for 920 recovery system 921 - wrappers: generate D-Bus service activation files 922 - bootloader/many: rm ConfigFile, add Present for indicating 923 presence of bloader 924 - osutil/disks: allow mocking DiskFromDeviceName 925 - daemon: start cleaning up api tests 926 - packaging/arch: sync with AUR packaging 927 - bootloader: indicate when boot config was updated 928 - tests: Fix snap-debug-bootvars test to make it work on arm devices 929 and core18 930 - tests/nested/manual/core20-save: verify handling of ubuntu-save 931 with different system variants 932 - snap: use the boot-base for kernel hooks 933 - devicestate: support "storage-safety" defaults during install 934 - bootloader/lkenv: mv v1 to separate file, 935 include/lk/snappy_boot_v1.h: little fixups 936 - interfaces/fpga: add fpga interface 937 - store: download timeout 938 - vendor: update secboot repo to avoid including secboot.test binary 939 - osutil: add KernelCommandLineKeyValue 940 - gadget/gadget.go: allow system-recovery-{image,select} as roles in 941 gadget.yaml 942 - devicestate: implement boot.HasFDESetupHook 943 - osutil/disks: add DiskFromName to get a disk using a udev name 944 - usersession/agent: have session agent connect to the D-Bus session 945 bus 946 - o/servicestate: preserve order of services on snap restart 947 - o/servicestate: unlock state before calling wrappers in 948 doServiceControl 949 - spread: disable unattended-upgrades on ubuntu 950 - tests: testing new fedora 33 image 951 - tests: fix fsck on boot on arm devices 952 - tests: skip boot state test on arm devices 953 - tests: updated the systems to run prepare-image-grub test 954 - interfaces/raw_usb: allow read access to /proc/tty/drivers 955 - tests: unmount /boot/efi in fsck-on-boot test 956 - strutil/shlex,osutil/udev/netlink: minimally import go-check 957 - tests: fix basic20 test on arm devices 958 - seed: make a shared seed system label validation helper 959 - tests/many: enable some uc20 tests, delete old unneeded tests or 960 TODOs 961 - boot/makebootable.go: set snapd_recovery_mode=install at image- 962 build time 963 - tests: migrate test from boot.sh helper to boot-state tool 964 - asserts: implement "storage-safety" in uc20 model assertion 965 - bootloader: use ForGadget when installing boot config 966 - spread: UC20 no longer needs 2GB of mem 967 - cmd/snap-confine: implement snap-device-helper internally 968 - bootloader/grub: replace old reference to Managed...Blr... with 969 Trusted...Blr... 970 - cmd/snap-bootstrap: add readme for snap-bootstrap + real state 971 diagram 972 - interfaces: fix greengrass attr namingThe flavor attribute names 973 are now as follows: 974 - tests/lib/nested: poke the API to get the snap revisions 975 - tests: compare options of mount units created by snapd and snapd- 976 generator 977 - o/snapstate,servicestate: use service-control task for service 978 actions 979 - sandbox: track applications unconditionally 980 - interfaces/greengrass-support: add additional "process" flavor for 981 1.11 update 982 - cmd/snap-bootstrap, secboot, tests: misc cleanups, add spread test 983 984 -- Michael Vogt <michael.vogt@ubuntu.com> Wed, 10 Feb 2021 10:47:17 +0100 985 986 snapd (2.48.2-1) unstable; urgency=medium 987 988 * New upstream release, LP: #1906690 989 - tests: sign new nested-18|20* models to allow for generic serials 990 - secboot: add extra paranoia when waiting for that fde-reveal-key 991 - tests: backport netplan workarounds from #9785 992 - secboot: add workaround for snapcore/core-initrd issue #13 993 - devicestate: log checkEncryption errors via logger.Noticef 994 - tests: add nested spread end-to-end test for fde-hooks 995 - devicestate: implement checkFDEFeatures() 996 - boot: tweak resealing with fde-setup hooks 997 - sysconfig/cloudinit.go: add "manual_cache_clean: true" to cloud- 998 init restrict file 999 - secboot: add new LockSealedKeys() that uses either TPM or 1000 fde-reveal-key 1001 - gadget: use "sealed-keys" to determine what method to use for 1002 reseal 1003 - boot: add sealKeyToModeenvUsingFdeSetupHook() 1004 - secboot: use `fde-reveal-key` if available to unseal key 1005 - cmd/snap-update-ns: fix sorting of overname mount entries wrt 1006 other entries 1007 - o/devicestate: save model with serial in the device save db 1008 - devicestate: add runFDESetupHook() helper 1009 - secboot,devicestate: add scaffoling for "fde-reveal-key" support 1010 - hookstate: add new HookManager.EphemeralRunHook() 1011 - update-pot: fix typo in plural keyword spec 1012 - store,cmd/snap-repair: increase initial expontential time 1013 intervals 1014 - o/devicestate,daemon: fix reboot system action to not require a 1015 system label 1016 - github: run nested suite when commit is pushed to release branch 1017 - tests: reset fakestore unit status 1018 - tests: fix uc20-create-parition-* tests for updated gadget 1019 - hookstate: implement snapctl fde-setup-{request,result} 1020 - devicestate: make checkEncryption fde-setup hook aware 1021 - client,snapctl: add naive support for "stdin" 1022 - devicestate: support "storage-safety" defaults during install 1023 - snap: use the boot-base for kernel hooks 1024 - vendor: update secboot repo to avoid including secboot.test binary 1025 1026 -- Michael Vogt <michael.vogt@ubuntu.com> Tue, 15 Dec 2020 20:21:44 +0100 1027 1028 snapd (2.48.1-1) unstable; urgency=medium 1029 1030 * New upstream release, LP: #1906690 1031 - gadget: disable ubuntu-boot role validation check 1032 1033 -- Michael Vogt <michael.vogt@ubuntu.com> Thu, 03 Dec 2020 17:43:30 +0100 1034 1035 snapd (2.48-1) unstable; urgency=medium 1036 1037 * New upstream release, LP: #1904098 1038 - osutil: add KernelCommandLineKeyValue 1039 - devicestate: implement boot.HasFDESetupHook 1040 - boot/makebootable.go: set snapd_recovery_mode=install at image- 1041 build time 1042 - bootloader: use ForGadget when installing boot config 1043 - interfaces/raw_usb: allow read access to /proc/tty/drivers 1044 - boot: add scaffolding for "fde-setup" hook support for sealing 1045 - tests: fix basic20 test on arm devices 1046 - seed: make a shared seed system label validation helper 1047 - snap: add new "fde-setup" hooktype 1048 - cmd/snap-bootstrap, secboot, tests: misc cleanups, add spread test 1049 - secboot,cmd/snap-bootstrap: fix degraded mode cases with better 1050 device handling 1051 - boot,dirs,c/snap-bootstrap: avoid InstallHost* at the cost of some 1052 messiness 1053 - tests/nested/manual/refresh-revert-fundamentals: temporarily 1054 disable secure boot 1055 - snap-bootstrap,secboot: call BlockPCRProtectionPolicies in all 1056 boot modes 1057 - many: address degraded recover mode feedback, cleanups 1058 - tests: Use systemd-run on tests part2 1059 - tests: set the opensuse tumbleweed system as manual in spread.yaml 1060 - secboot: call BlockPCRProtectionPolicies even if the TPM is 1061 disabled 1062 - vendor: update to current secboot 1063 - cmd/snap-bootstrap,o/devicestate: use a secret to pair data and 1064 save 1065 - spread.yaml: increase number of workers on 20.10 1066 - snap: add new `snap recovery --show-keys` option 1067 - tests: minor test tweaks suggested in the review of 9607 1068 - snapd-generator: set standard snapfuse options when generating 1069 units for containers 1070 - tests: enable lxd test on ubuntu-core-20 and 16.04-32 1071 - interfaces: share /tmp/.X11-unix/ from host or provider 1072 - tests: enable main lxd test on 20.10 1073 - cmd/s-b/initramfs-mounts: refactor recover mode to implement 1074 degraded mode 1075 - gadget/install: add progress logging 1076 - packaging: keep secboot/encrypt_dummy.go in debian 1077 - interfaces/udev: use distro specific path to snap-device-helper 1078 - o/devistate: fix chaining of tasks related to regular snaps when 1079 preseeding 1080 - gadget, overlord/devicestate: validate that system supports 1081 encrypted data before install 1082 - interfaces/fwupd: enforce the confined fwupd to align Ubuntu Core 1083 ESP layout 1084 - many: add /v2/system-recovery-keys API and client 1085 - secboot, many: return UnlockMethod from Unlock* methods for future 1086 usage 1087 - many: mv keys to ubuntu-boot, move model file, rename keyring 1088 prefix for secboot 1089 - tests: using systemd-run instead of manually create a systemd unit 1090 - part 1 1091 - secboot, cmd/snap-bootstrap: enable or disable activation with 1092 recovery key 1093 - secboot: refactor Unlock...IfEncrypted to take keyfile + check 1094 disks first 1095 - secboot: add LockTPMSealedKeys() to lock access to keys 1096 independently 1097 - gadget: correct sfdisk arguments 1098 - bootloader/assets/grub: adjust fwsetup menuentry label 1099 - tests: new boot state tool 1100 - spread: use the official image for Ubuntu 20.10, no longer an 1101 unstable system 1102 - tests/lib/nested: enable snapd logging to console for core18 1103 - osutil/disks: re-implement partition searching for disk w/ non- 1104 adjacent parts 1105 - tests: using the nested-state tool in nested tests 1106 - many: seal a fallback object to the recovery boot chain 1107 - gadget, gadget/install: move helpers to install package, refactor 1108 unit tests 1109 - dirs: add "gentoo" to altDirDistros 1110 - update-pot: include file locations in translation template, and 1111 extract strings from desktop files 1112 - gadget/many: drop usage of gpt attr 59 for indicating creation of 1113 partitions 1114 - gadget/quantity: tweak test name 1115 - snap: fix failing unittest for quantity.FormatDuration() 1116 - gadget/quantity: introduce a new package that captures quantities 1117 - o/devicestate,a/sysdb: make a backup of the device serial to save 1118 - tests: fix rare interaction of tests.session and specific tests 1119 - features: enable classic-preserves-xdg-runtime-dir 1120 - tests/nested/core20/save: check the bind mount and size bump 1121 - o/devicetate,dirs: keep device keys in ubuntu-save/save for UC20 1122 - tests: rename hasHooks to hasInterfaceHooks in the ifacestate 1123 tests 1124 - o/devicestate: unit test tweaks 1125 - boot: store the TPM{PolicyAuthKey,LockoutAuth}File in ubuntu-save 1126 - testutil, cmd/snap/version: fix misc little errors 1127 - overlord/devicestate: bind mount ubuntu-save under 1128 /var/lib/snapd/save on startup 1129 - gadget/internal: tune ext4 setting for smaller filesystems 1130 - tests/nested/core20/save: a test that verifies ubuntu-save is 1131 present and set up 1132 - tests: update google sru backend to support groovy 1133 - o/ifacestate: handle interface hooks when preseeding 1134 - tests: re-enable the apt hooks test 1135 - interfaces,snap: use correct type: {os,snapd} for test data 1136 - secboot: set metadata and keyslots sizes when formatting LUKS2 1137 volumes 1138 - tests: improve uc20-create-partitions-reinstall test 1139 - client, daemon, cmd/snap: cleanups from #9489 + more unit tests 1140 - cmd/snap-bootstrap: mount ubuntu-save during boot if present 1141 - secboot: fix doc comment on helper for unlocking volume with key 1142 - tests: add spread test for refreshing from an old snapd and core18 1143 - o/snapstate: generate snapd snap wrappers again after restart on 1144 refresh 1145 - secboot: version bump, unlock volume with key 1146 - tests/snap-advise-command: re-enable test 1147 - cmd/snap, snapmgr, tests: cleanups after #9418 1148 - interfaces: deny connected x11 plugs access to ICE 1149 - daemon,client: write and read a maintenance.json file for when 1150 snapd is shut down 1151 - many: update to secboot v1 (part 1) 1152 - osutil/disks/mockdisk: panic if same mountpoint shows up again 1153 with diff opts 1154 - tests/nested/core20/gadget,kernel-reseal: add sanity checks to the 1155 reseal tests 1156 - many: implement snap routine console-conf-start for synchronizing 1157 auto-refreshes 1158 - dirs, boot: add ubuntu-save directories and related locations 1159 - usersession: fix typo in test name 1160 - overlord/snapstate: refactor ihibitRefresh 1161 - overlord/snapstate: stop warning about inhibited refreshes 1162 - cmd/snap: do not hardcode snapshot age value 1163 - overlord,usersession: initial notifications of pending refreshes 1164 - tests: add a unit test for UpdateMany where a single snap fails 1165 - o/snapstate/catalogrefresh.go: don't refresh catalog in install 1166 mode uc20 1167 - tests: also check snapst.Current in undo-unlink tests 1168 - tests: new nested tool 1169 - o/snapstate: implement undo handler for unlink-snap 1170 - tests: clean systems.sh helper and migrate last set of tests 1171 - tests: moving the lib section from systems.sh helper to os.query 1172 tool 1173 - tests/uc20-create-partitions: don't check for grub.cfg 1174 - packaging: make sure that static binaries are indeed static, fix 1175 openSUSE 1176 - many: have install return encryption keys for data and save, 1177 improve tests 1178 - overlord: add link participant for linkage transitions 1179 - tests: lxd smoke test 1180 - tests: add tests for fsck; cmd/s-b/initramfs-mounts: fsck ubuntu- 1181 seed too 1182 - tests: moving main suite from systems.sh to os.query tool 1183 - tests: moving the core test suite from systems.sh to os.query tool 1184 - cmd/snap-confine: mask host's apparmor config 1185 - o/snapstate: move setting updated SnapState after error paths 1186 - tests: add value to INSTANCE_KEY/regular 1187 - spread, tests: tweaks for openSUSE 1188 - cmd/snap-confine: update path to snap-device-helper in AppArmor 1189 profile 1190 - tests: new os.query tool 1191 - overlord/snapshotstate/backend: specify tar format for snapshots 1192 - tests/nested/manual/minimal-smoke: use 384MB of RAM for nested 1193 UC20 1194 - client,daemon,snap: auto-import does not error on managed devices 1195 - interfaces: PTP hardware clock interface 1196 - tests: use tests.backup tool 1197 - many: verify that unit tests work with nosecboot tag and without 1198 secboot package 1199 - wrappers: do not error out on read-only /etc/dbus-1/session.d 1200 filesystem on core18 1201 - snapshots: import of a snapshot set 1202 - tests: more output for sbuild test 1203 - o/snapstate: re-order remove tasks for individual snap revisions 1204 to remove current last 1205 - boot: skip some unit tests when running as root 1206 - o/assertstate: introduce 1207 ValidationTrackingKey/ValidationSetTracking and basic methods 1208 - many: allow ignoring running apps for specific request 1209 - tests: allow the searching test to fail under load 1210 - overlord/snapstate: inhibit startup while unlinked 1211 - seed/seedwriter/writer.go: check DevModeConfinement for dangerous 1212 features 1213 - tests/main/sudo-env: snap bin is available on Fedora 1214 - boot, overlord/devicestate: list trusted and managed assets 1215 upfront 1216 - gadget, gadget/install: support for ubuntu-save, create one during 1217 install if needed 1218 - spread-shellcheck: temporary workaround for deadlock, drop 1219 unnecessary test 1220 - snap: support different exit-code in the snap command 1221 - logger: use strutil.KernelCommandLineSplit in 1222 debugEnabledOnKernelCmdline 1223 - logger: fix snapd.debug=1 parsing 1224 - overlord: increase refresh postpone limit to 14 days 1225 - spread-shellcheck: use single thread pool executor 1226 - gadget/install,secboot: add debug messages 1227 - spread-shellcheck: speed up spread-shellcheck even more 1228 - spread-shellcheck: process paths from arguments in parallel 1229 - tests: tweak error from tests.cleanup 1230 - spread: remove workaround for openSUSE go issue 1231 - o/configstate: create /etc/sysctl.d when applying early config 1232 defaults 1233 - tests: new tests.backup tool 1234 - tests: add tests.cleanup pop sub-command 1235 - tests: migration of the main suite to snaps-state tool part 6 1236 - tests: fix journal-state test 1237 - cmd/snap-bootstrap/initramfs-mounts: split off new helper for misc 1238 recover files 1239 - cmd/snap-bootstrap/initramfs-mounts: also copy /etc/machine-id for 1240 same IP addr 1241 - packaging/{ubuntu,debian}: add liblzo2-dev as a dependency for 1242 building snapd 1243 - boot, gadget, bootloader: observer preserves managed bootloader 1244 configs 1245 - tests/nested/manual: add uc20 grade signed cloud-init test 1246 - o/snapstate/autorefresh.go: eliminate race when launching 1247 autorefresh 1248 - daemon,snapshotstate: do not return "size" from Import() 1249 - daemon: limit reading from snapshot import to Content-Length 1250 - many: set/expect Content-Length header when importing snapshots 1251 - github: switch from ::set-env command to environment file 1252 - tests: migration of the main suite to snaps-state tool part 5 1253 - client: cleanup the Client.raw* and Client.do* method families 1254 - tests: moving main suite to snaps-state tool part 4 1255 - client,daemon,snap: use constant for snapshot content-type 1256 - many: fix typos and repeated "the" 1257 - secboot: fix tpm connection leak when it's not enabled 1258 - many: scaffolding for snapshots import API 1259 - run-checks: run spread-shellcheck too 1260 - interfaces: update network-manager interface to allow 1261 ObjectManager access from unconfined clients 1262 - tests: move core and regression suites to snaps-state tool 1263 - tests: moving interfaces tests to snaps-state tool 1264 - gadget: preserve files when indicated by content change observer 1265 - tests: moving smoke test suite and some tests from main suite to 1266 snaps-state tool 1267 - o/snapshotstate: pass set id to backend.Open, update tests 1268 - asserts/snapasserts: introduce ValidationSets 1269 - o/snapshotstate: improve allocation of new set IDs 1270 - boot: look at the gadget for run mode bootloader when making the 1271 system bootable 1272 - cmd/snap: allow snap help vs --all to diverge purposefully 1273 - usersession/userd: separate bus name ownership from defining 1274 interfaces 1275 - o/snapshotstate: set snapshot set id from its filename 1276 - o/snapstate: move remove-related tests to snapstate_remove_test.go 1277 - desktop/notification: switch ExpireTimeout to time.Duration 1278 - desktop/notification: add unit tests 1279 - snap: snap help output refresh 1280 - tests/nested/manual/preseed: include a system-usernames snap when 1281 preseeding 1282 - tests: fix sudo-env test 1283 - tests: fix nested core20 shellcheck bug 1284 - tests/lib: move to new directory when restoring PWD, cleanup 1285 unpacked unpacked snap directories 1286 - desktop/notification: add bindings for FDO notifications 1287 - dbustest: fix stale comment references 1288 - many: move ManagedAssetsBootloader into TrustedAssetsBootloader, 1289 drop former 1290 - snap-repair: add uc20 support 1291 - tests: print all the serial logs for the nested test 1292 - o/snapstate/check_snap_test.go: mock osutil.Find{U,G}id to avoid 1293 bug in test 1294 - cmd/snap/auto-import: stop importing system user assertions from 1295 initramfs mnts 1296 - osutil/group.go: treat all non-nil errs from user.Lookup{Group,} 1297 as Unknown* 1298 - asserts: deserialize grouping only once in Pool.AddBatch if needed 1299 - gadget: allow content observer to have opinions about a change 1300 - tests: new snaps-state command - part1 1301 - o/assertstate: support refreshing any number of snap-declarations 1302 - boot: use test helpers 1303 - tests/core/snap-debug-bootvars: also check snap_mode 1304 - many/apparmor: adjust rules for reading profile/ execing new 1305 profiles for new kernel 1306 - tests/core/snap-debug-bootvars: spread test for snap debug boot- 1307 vars 1308 - tests/lib/nested.sh: more little tweaks 1309 - tests/nested/manual/grade-signed-above-testkeys-boot: enable kvm 1310 - cmd/s-b/initramfs-mounts: use ConfigureTargetSystem for install, 1311 recover modes 1312 - overlord: explicitly set refresh-app-awareness in tests 1313 - kernel: remove "edition" from kernel.yaml and add "update" 1314 - spread: drop vendor from the packed project archive 1315 - boot: fix debug bootloader variables dump on UC20 systems 1316 - wrappers, systemd: allow empty root dir and conditionally do not 1317 pass --root to systemctl 1318 - tests/nested/manual: add test for grades above signed booting with 1319 testkeys 1320 - tests/nested: misc robustness fixes 1321 - o/assertstate,asserts: use bulk refresh to refresh snap- 1322 declarations 1323 - tests/lib/prepare.sh: stop patching the uc20 initrd since it has 1324 been updated now 1325 - tests/nested/manual/refresh-revert-fundamentals: re-enable test 1326 - update-pot: ignore .go files inside .git when running xgettext-go 1327 - tests: disable part of the lxd test completely on 16.04. 1328 - o/snapshotstate: tweak comment regarding snapshot filename 1329 - o/snapstate: improve snapshot iteration 1330 - bootloader: lk cleanups 1331 - tests: update to support nested kvm without reboots on UC20 1332 - tests/nested/manual/preseed: disable system-key check for 20.04 1333 image 1334 - spread.yaml: add ubuntu-20.10-64 to qemu 1335 - store: handle v2 error when fetching assertions 1336 - gadget: resolve device mapper devices for fallback device lookup 1337 - tests/nested/cloud-init-many: simplify tests and unify 1338 helpers/seed inputs 1339 - tests: copy /usr/lib/snapd/info to correct directory 1340 - check-pr-title.py * : allow "*" in the first part of the title 1341 - many: typos and small test tweak 1342 - tests/main/lxd: disable cgroup combination for 16.04 that is 1343 failing a lot 1344 - tests: make nested signing helpers less confusing 1345 - tests: misc nested changes 1346 - tests/nested/manual/refresh-revert-fundamentals: disable 1347 temporarily 1348 - tests/lib/cla_check: default to Python 3, tweaks, formatting 1349 - tests/lib/cl_check.py: use python3 compatible code 1350 1351 -- Michael Vogt <michael.vogt@ubuntu.com> Thu, 19 Nov 2020 17:51:02 +0100 1352 1353 snapd (2.47.1-1) unstable; urgency=medium 1354 1355 * New upstream release, LP: #1895929 1356 - o/configstate: create /etc/sysctl.d when applying early config 1357 defaults 1358 - cmd/snap-bootstrap/initramfs-mounts: also copy /etc/machine-id for 1359 same IP addr 1360 - packaging/{ubuntu,debian}: add liblzo2-dev as a dependency for 1361 building snapd 1362 - cmd/snap: allow snap help vs --all to diverge purposefully 1363 - snap: snap help output refresh 1364 1365 -- Michael Vogt <michael.vogt@ubuntu.com> Thu, 08 Oct 2020 09:30:44 +0200 1366 1367 snapd (2.47-1) unstable; urgency=medium 1368 1369 * New upstream release, LP: #1895929 1370 - tests: fix nested core20 shellcheck bug 1371 - many/apparmor: adjust rule for reading apparmor profile for new 1372 kernel 1373 - snap-repair: add uc20 support 1374 - cmd/snap/auto-import: stop importing system user assertions from 1375 initramfs mnts 1376 - cmd/s-b/initramfs-mounts: use ConfigureTargetSystem for install, 1377 recover modes 1378 - gadget: resolve device mapper devices for fallback device lookup 1379 - secboot: add boot manager profile to pcr protection profile 1380 - sysconfig,o/devicestate: mv DisableNoCloud to 1381 DisableAfterLocalDatasourcesRun 1382 - tests: make gadget-reseal more robust 1383 - tests: skip nested images pre-configuration by default 1384 - tests: fix for basic20 test running on external backend and rpi 1385 - tests: improve kernel reseal test 1386 - boot: adjust comments, naming, log success around reseal 1387 - tests/nested, fakestore: changes necessary to run nested uc20 1388 signed/secured tests 1389 - tests: add nested core20 gadget reseal test 1390 - boot/modeenv: track unknown keys in Read and put back into modeenv 1391 during Write 1392 - interfaces/process-control: add sched_setattr to seccomp 1393 - boot: with unasserted kernels reseal if there's a hint modeenv 1394 changed 1395 - client: bump the default request timeout to 120s 1396 - configcore: do not error in console-conf.disable for install mode 1397 - boot: streamline bootstate20.go reseal and tests changes 1398 - boot: reseal when changing kernel 1399 - cmd/snap/model: specify grade in the model command output 1400 - tests: simplify 1401 repack_snapd_snap_with_deb_content_and_run_mode_first_boot_tweaks 1402 - test: improve logging in nested tests 1403 - nested: add support to telnet to serial port in nested VM 1404 - secboot: use the snapcore/secboot native recovery key type 1405 - tests/lib/nested.sh: use more focused cloud-init config for uc20 1406 - tests/lib/nested.sh: wait for the tpm socket to exist 1407 - spread.yaml, tests/nested: misc changes 1408 - tests: add more checks to disk space awareness spread test 1409 - tests: disk space awareness spread test 1410 - boot: make MockUC20Device use a model and MockDevice more 1411 realistic 1412 - boot,many: reseal only when meaningful and necessary 1413 - tests/nested/core20/kernel-failover: add test for failed refresh 1414 of uc20 kernel 1415 - tests: fix nested to work with qemu and kvm 1416 - boot: reseal when updating boot assets 1417 - tests: fix snap-routime-portal-info test 1418 - boot: verify boot chain file in seal and reseal tests 1419 - tests: use full path to test-snapd-refresh.version binary 1420 - boot: store boot chains during install, helper for checking 1421 whether reseal is needed 1422 - boot: add call to reseal an existing key 1423 - boot: consider boot chains with unrevisioned kernels incomparable 1424 - overlord: assorted typos and miscellaneous changes 1425 - boot: group SealKeyModelParams by model, improve testing 1426 - secboot: adjust parameters to buildPCRProtectionProfile 1427 - strutil: add SortedListsUniqueMergefrom the doc comment: 1428 - snap/naming: upgrade TODO to TODO:UC20 1429 - secboot: add call to reseal an existing key 1430 - boot: in seal.go adjust error message and function names 1431 - o/snapstate: check available disk space in RemoveMany 1432 - boot: build bootchains data for sealing 1433 - tests: remove "set -e" from function only shell libs 1434 - o/snapstate: disk space check on UpdateMany 1435 - o/snapstate: disk space check with snap update 1436 - snap: implement new `snap reboot` command 1437 - boot: do not reorder boot assets when generating predictable boot 1438 chains and other small tweaks 1439 - tests: some fixes and improvements for nested execution 1440 - tests/core/uc20-recovery: fix check for at least specific calls to 1441 mock-shutdown 1442 - boot: be consistent using bootloader.Role* consts instead of 1443 strings 1444 - boot: helper for generating secboot load chains from a given boot 1445 asset sequence 1446 - boot: tweak boot chains to support a list of kernel command lines, 1447 keep track of model and kernel boot file 1448 - boot,secboot: switch to expose and use snapcore/secboot load event 1449 trees 1450 - tests: use `nested_exec` in core{20,}-early-config test 1451 - devicestate: enable cloud-init on uc20 for grade signed and 1452 secured 1453 - boot: add "rootdir" to baseBootenvSuite and use in tests 1454 - tests/lib/cla_check.py: don't allow users.noreply.github.com 1455 commits to pass CLA 1456 - boot: represent boot chains, helpers for marshalling and 1457 equivalence checks 1458 - boot: mark successful with boot assets 1459 - client, api: handle insufficient space error 1460 - o/snapstate: disk space check with single snap install 1461 - configcore: "service.console-conf.disable" is gadget defaults only 1462 - packaging/opensuse: fix for /usr/libexec on TW, do not hardcode 1463 AppArmor profile path 1464 - tests: skip udp protocol in nfs-support test on ubuntu-20.10 1465 - packaging/debian-sid: tweak code preparing _build tree 1466 - many: move seal code from gadget/install to boot 1467 - tests: remove workaround for cups on ubuntu-20.10 1468 - client: implement RebootToSystem 1469 - many: seed.Model panics now if called before LoadAssertions 1470 - daemon: add /v2/systems "reboot" action API 1471 - github: run tests also on push to release branches 1472 - interfaces/bluez: let slot access audio streams 1473 - seed,c/snap-bootstrap: simplify snap-bootstrap seed reading with 1474 new seed.ReadSystemEssential 1475 - interfaces: allow snap-update-ns to read /proc/cmdline 1476 - tests: new organization for nested tests 1477 - o/snapstate, features: add feature flags for disk space awareness 1478 - tests: workaround for cups issue on 20.10 where default printer is 1479 not configured. 1480 - interfaces: update cups-control and add cups for providing snaps 1481 - boot: keep track of the original asset when observing updates 1482 - tests: simplify and fix tests for disk space checks on snap remove 1483 - sysconfig/cloudinit.go: add AllowCloudInit and use GadgetDir for 1484 cloud.conf 1485 - tests/main: mv core specific tests to core suite 1486 - tests/lib/nested.sh: reset the TPM when we create the uc20 vm 1487 - devicestate: rename "mockLogger" to "logbuf" 1488 - many: introduce ContentChange for tracking gadget content in 1489 observers 1490 - many: fix partion vs partition typo 1491 - bootloader: retrieve boot chains from bootloader 1492 - devicestate: add tests around logging in RequestSystemAction 1493 - boot: handle canceled update 1494 - bootloader: tweak doc comments (thanks Samuele) 1495 - seed/seedwriter: test local asserted snaps with UC20 grade signed 1496 - sysconfig/cloudinit.go: add DisableNoCloud to 1497 CloudInitRestrictOptions 1498 - many: use BootFile type in load sequences 1499 - boot,bootloader: clarifications after the changes to introduce 1500 bootloader.Options.Role 1501 - boot,bootloader,gadget: apply new bootloader.Options.Role 1502 - o/snapstate, features: add feature flag for disk space check on 1503 remove 1504 - testutil: add checkers for symbolic link target 1505 - many: refactor tpm seal parameter setting 1506 - boot/bootstate20: reboot to rollback to previous kernel 1507 - boot: add unit test helpers 1508 - boot: observe update & rollback of trusted assets 1509 - interfaces/utf: Add MIRKey to u2f devices 1510 - o/devicestate/devicestate_cloudinit_test.go: test cleanup for uc20 1511 cloud-init tests 1512 - many: check that users of BaseTest don't forget to consume 1513 cleanups 1514 - tests/nested/core20/tpm: verify trusted boot assets tracking 1515 - github: run macOS job with Go 1.14 1516 - many: misc doc-comment changes and typo fixes 1517 - o/snapstate: disk space check with InstallMany 1518 - many: cloud-init cleanups from previous PR's 1519 - tests: running tests on opensuse leap 15.2 1520 - run-checks: check for dirty build tree too 1521 - vendor: run ./get-deps.sh to update the secboot hash 1522 - tests: update listing test for "-dirty" versions 1523 - overlord/devicestate: do not release the state lock when updating 1524 gadget assets 1525 - secboot: read kernel efi image from snap file 1526 - snap: add size to the random access file return interface 1527 - daemon: correctly parse Content-Type HTTP header. 1528 - tests: account for apt-get on core18 1529 - cmd/snap-bootstrap/initramfs-mounts: compute string outside of 1530 loop 1531 - mkversion.sh: simple hack to include dirty in version if the tree 1532 is dirty 1533 - cgroup,snap: track hooks on system bus only 1534 - interfaces/systemd: compare dereferenced Service 1535 - run-checks: only check files in git for misspelling 1536 - osutil: add a package doc comment (via doc.go) 1537 - boot: complain about reused asset name during initial install 1538 - snapstate: installSize helper that calculates total size of snaps 1539 and their prerequisites 1540 - snapshots: export of snapshots 1541 - boot/initramfs_test.go: reset boot vars on the bootloader for each 1542 iteration 1543 1544 -- Michael Vogt <michael.vogt@ubuntu.com> Tue, 29 Sep 2020 17:19:13 +0200 1545 1546 snapd (2.46.1-1) unstable; urgency=medium 1547 1548 * New upstream release, LP: #1891134 1549 - interfaces: allow snap-update-ns to read 1550 /proc/cmdline 1551 - github: run macOS job with Go 1.14 1552 - o/snapstate, features: add feature flag for disk space check on 1553 remove 1554 - tests: account for apt-get on core18 1555 - mkversion.sh: include dirty in version if the tree 1556 is dirty 1557 - interfaces/systemd: compare dereferenced Service 1558 - vendor.json: update mysterious secboot SHA again 1559 1560 -- Michael Vogt <michael.vogt@ubuntu.com> Fri, 04 Sep 2020 17:42:54 +0200 1561 1562 snapd (2.46-1) unstable; urgency=medium 1563 1564 * New upstream release, LP: #1891134 1565 - logger: add support for setting snapd.debug=1 on kernel cmdline 1566 - o/snapstate: check disk space before creating automatic snapshot 1567 on remove 1568 - boot, o/devicestate: observe existing recovery bootloader trusted 1569 boot assets 1570 - many: use transient scope for tracking apps and hooks 1571 - features: add HiddenSnapFolder feature flag 1572 - tests/lib/nested.sh: fix partition typo, unmount the image on uc20 1573 too 1574 - runinhibit: open the lock file in read-only mode in IsLocked 1575 - cmd/s-b/initramfs-mounts: make recover -> run mode transition 1576 automatic 1577 - tests: update spread test for unknown plug/slot with snapctl is- 1578 connected 1579 - osutil: add OpenExistingLockForReading 1580 - kernel: add kernel.Validate() 1581 - interfaces: add vcio interface 1582 - interfaces/{docker,kubernetes}-support: load overlay and support 1583 systemd cgroup driver 1584 - tests/lib/nested.sh: use more robust code for finding what loop 1585 dev we mounted 1586 - cmd/snap-update-ns: detach all bind-mounted file 1587 - snap/snapenv: set SNAP_REAL_HOME 1588 - packaging: umount /snap on purge in containers 1589 - interfaces: misc policy updates xlvi 1590 - secboot,cmd/snap-bootstrap: cross-check partitions before 1591 unlocking, mounting 1592 - boot: copy boot assets cache to new root 1593 - gadget,kernel: add new kernel.{Info,Asset} struct and helpers 1594 - o/hookstate/ctlcmd: make is-connected check whether the plug or 1595 slot exists 1596 - tests: find -ignore_readdir_race when scanning cgroups 1597 - interfaces/many: deny arbitrary desktop files and misc from 1598 /usr/share 1599 - tests: use "set -ex" in prep-snapd-in-lxd.sh 1600 - tests: re-enable udisks test on debian-sid 1601 - cmd/snapd-generator: use PATH fallback if PATH is not set 1602 - tests: disable udisks2 test on arch linux 1603 - github: use latest/stable go, not latest/edge 1604 - tests: remove support for ubuntu 19.10 from spread tests 1605 - tests: fix lxd test wrongly tracking 'latest' 1606 - secboot: document exported functions 1607 - cmd: compile snap gdbserver shim correctly 1608 - many: correctly calculate the desktop file prefix everywhere 1609 - interfaces: add kernel-crypto-api interface 1610 - corecfg: add "system.timezone" setting to the system settings 1611 - cmd/snapd-generator: generate drop-in to use fuse in container 1612 - cmd/snap-bootstrap/initramfs-mounts: tweak names, add comments 1613 from previous PR 1614 - interfaces/many: miscellaneous updates for strict microk8s 1615 - secboot,cmd/snap-bootstrap: don't import boot package from secboot 1616 - cmd/snap-bootstrap/initramfs-mounts: call systemd-mount instead of 1617 the-tool 1618 - tests: work around broken update of systemd-networkd 1619 - tests/main/install-fontconfig-cache-gen: enhance test by 1620 verifying, add fonts to test 1621 - o/devicestate: wrap asset update observer error 1622 - boot: refactor such that bootStateUpdate20 mainly carries Modeenv 1623 - mkversion.sh: disallow changelog versions that have git in it, if 1624 we also have git version 1625 - interfaces/many: miscellaneous updates for strict microk8s 1626 - snap: fix repeated "cannot list recovery system" and add test 1627 - boot: track trusted assets during initial install, assets cache 1628 - vendor: update secboot to fix key data validation 1629 - tests: unmount FUSE file-systems from XDG runtime dir 1630 - overlord/devicestate: workaround non-nil interface with nil struct 1631 - sandbox/cgroup: remove temporary workaround for multiple cgroup 1632 writers 1633 - sandbox/cgroup: detect dangling v2 cgroup 1634 - bootloader: add helper for creating a bootloader based on gadget 1635 - tests: support different images on nested execution 1636 - many: reorg cmd/snapinfo.go into snap and new client/clientutil 1637 - packaging/arch: use external linker when building statically 1638 - tests: cope with ghost cgroupv2 1639 - tests: fix issues related to restarting systemd-logind.service 1640 - boot, o/devicestate: TrustedAssetUpdateObserver stubs, hook up to 1641 gadget updates 1642 - vendor: update github.com/kr/pretty to fix diffs of values with 1643 pointer cycles 1644 - boot: move bootloaderKernelState20 impls to separate file 1645 - .github/workflows: move snap building to test.yaml as separate 1646 cached job 1647 - tests/nested/manual/minimal-smoke: run core smoke tests in a VM 1648 meeting minimal requirements 1649 - osutil: add CommitAs to atomic file 1650 - gadget: introduce content update observer 1651 - bootloader: introduce TrustedAssetsBootloader, implement for grub 1652 - o/snapshotstate: helpers for calculating disk space needed for an 1653 automatic snapshot 1654 - gadget/install: retrieve command lines from bootloader 1655 - boot/bootstate20: unify commit method impls, rm 1656 bootState20MarkSuccessful 1657 - tests: add system information and image information when debug 1658 info is displayed 1659 - tests/main/cgroup-tracking: try to collect some information about 1660 cgroups 1661 - boot: introduce current_boot_assets and 1662 current_recovery_boot_assets to modeenv 1663 - tests: fix for timing issues on journal-state test 1664 - many: remove usage and creation of hijacked pid cgroup 1665 - tests: port regression-home-snap-root-owned to tests.session 1666 - tests: run as hightest via tests.session 1667 - github: run CLA checks on self-hosted workers 1668 - github: remove Ubuntu 19.10 from actions workflow 1669 - tests: remove End-Of-Life opensuse/fedora releases 1670 - tests: remove End-Of-Life releases from spread.yaml 1671 - tests: fix debug section of appstream-id test 1672 - interfaces: check !b.preseed earlier 1673 - tests: work around bug in systemd/debian 1674 - boot: add deepEqual, Copy helpers for Modeenv to simplify 1675 bootstate20 refactor 1676 - cmd: add new "snap recovery" command 1677 - interfaces/systemd: use emulation mode when preseeding 1678 - interfaces/kmod: don't load kernel modules in kmod backend when 1679 preseeding 1680 - interfaces/udev: do not reload udevadm rules when preseeding 1681 - cmd/snap-preseed: use snapd from the deb if newer than from seeds 1682 - boot: fancy marshaller for modeenv values 1683 - gadget, osutil: use atomic file copy, adjust tests 1684 - overlord: use new tracking cgroup for refresh app awareness 1685 - github: do not skip gofmt with Go 1.9/1.10 1686 - many: introduce content write observer, install mode glue, initial 1687 seal stubs 1688 - daemon,many: switch to use client.ErrorKind and drop the local 1689 errorKind... 1690 - tests: new parameters for nested execution 1691 - client: move all error kinds into errors.go and add doc strings 1692 - cmd/snap: display the error in snap debug seeding if seeding is in 1693 error 1694 - cmd/snap/debug/seeding: use unicode for proper yaml 1695 - tests/cmd/snap-bootstrap/initramfs-mounts: add test case for empty 1696 recovery_mode 1697 - osutil/disks: add mock disk and tests for happy path of mock disks 1698 - tests: refresh/revert snapd in uc20 1699 - osutil/disks: use a dedicated error to indicate a fs label wasn't 1700 found 1701 - interfaces/system-key: in WriteSystemKey during tests, don't call 1702 ParserFeatures 1703 - boot: add current recovery systems to modeenv 1704 - bootloader: extend managed assets bootloader interface to compose 1705 a candidate command line 1706 - interfaces: make the unmarshal test match more the comment 1707 - daemon/api: use pointers to time.Time for debug seeding aspect 1708 - o/ifacestate: update security profiles in connect undo handler 1709 - interfaces: add uinput interface 1710 - cmd/snap-bootstrap/initramfs-mounts: add doSystemdMount + unit 1711 tests 1712 - o/devicestate: save seeding/preseeding times for use with debug 1713 seeding api 1714 - cmd/snap/debug: add "snap debug seeding" command for preseeding 1715 debugging 1716 - tests/main/selinux-clean: workaround SELinux denials triggered by 1717 linger setup on Centos8 1718 - bootloader: compose command line with mode and extra arguments 1719 - cmd/snap, daemon: detect and bail purge on multi-snap 1720 - o/ifacestate: fix bug in snapsWithSecurityProfiles 1721 - interfaces/builtin/multipass: replace U+00A0 no-break space with 1722 simple space 1723 - bootloader/assets: generate bootloader assets from files 1724 - many/tests/preseed: reset the preseeded images before preseeding 1725 them 1726 - tests: drop accidental accents from e 1727 - secboot: improve key sealing tests 1728 - tests: replace _wait_for_file_change with retry 1729 - tests: new fs-state which replaces the files.sh helper 1730 - sysconfig/cloudinit_test.go: add test for initramfs case, rm "/" 1731 from path 1732 - cmd/snap: track started apps and hooks 1733 - tests/main/interfaces-pulseaudio: disable start limit checking for 1734 pulseaudio service 1735 - api: seeding debug api 1736 - .github/workflows/snap-build.yaml: build the snapd snap via GH 1737 Actions too 1738 - tests: moving journalctl.sh to a new journal-state tool 1739 - tests/nested/manual: add spread tests for cloud-init vuln 1740 - bootloader/assets: helpers for registering per-edition snippets, 1741 register snippets for grub 1742 - data,packaging,wrappers: extend D-Bus service activation search 1743 path 1744 - spread: add opensuse 15.2 and tumbleweed for qemu 1745 - overlord,o/devicestate: restrict cloud-init on Ubuntu Core 1746 - sysconfig/cloudinit: add RestrictCloudInit 1747 - cmd/snap-preseed: check that target path exists and is a directory 1748 on --reset 1749 - tests: check for pids correctly 1750 - gadget,gadget/install: refactor partition table update 1751 - sysconfig/cloudinit: add CloudInitStatus func + CloudInitState 1752 type 1753 - interface/fwupd: add more policies for making fwupd upstream 1754 strict 1755 - tests: new to-one-line tool which replaces the strings.sh helper 1756 - interfaces: new helpers to get and compare system key, for use 1757 with seeding debug api 1758 - osutil, many: add helper for checking whether the process is a go 1759 test binary 1760 - cmd/snap-seccomp/syscalls: add faccessat2 1761 - tests: adjust xdg-open after launcher changes 1762 - tests: new core config helper 1763 - usersession/userd: do not modify XDG_DATA_DIRS when calling xdg- 1764 open 1765 - cmd/snap-preseed: handle relative chroot path 1766 - snapshotstate: move sizer to osutil.Sizer() 1767 - tests/cmd/snap-bootstrap/initramfs-mounts: rm duplicated env ref 1768 kernel tests 1769 - gadget/install,secboot: use snapcore/secboot luks2 api 1770 - boot/initramfs_test.go: add Commentf to more Assert()'s 1771 - tests/lib: account for changes in arch package file name extension 1772 - bootloader/bootloadertest: fix comment typo 1773 - bootloader: add helper for getting recovery system environment 1774 variables 1775 - tests: preinstall shellcheck and run tests on focal 1776 - strutil: add a helper for parsing kernel command line 1777 - osutil: add CheckFreeSpace helper 1778 - secboot: update tpm connection error handling 1779 - packaging, cmd/snap-mgmt, tests: remove modules files on purge 1780 - tests: add tests.cleanup helper 1781 - packaging: add "ca-certificates" to build-depends 1782 - tests: more checks in core20 early config spread test 1783 - tests: fix some snapstate tests to use pointers for 1784 snapmgrTestSuite 1785 - boot: better naming of helpers for obtaining kernel command line 1786 - many: use more specific check for unit test mocking 1787 - systemd/escape: fix issues with "" and "\t" handling 1788 - asserts: small improvements and corrections for sequence-forming 1789 assertions' support 1790 - boot, bootloader: query kernel command line of run mod and 1791 recovery mode systems 1792 - snap/validate.go: disallow snap layouts with new top-level 1793 directories 1794 - tests: allow to add a new label to run nested tests as part of PR 1795 validation 1796 - tests/core/gadget-update-pc: port to UC20 1797 - tests: improve nested tests flexibility 1798 - asserts: integer headers: disallow prefix zeros and make parsing 1799 more uniform 1800 - asserts: implement Database.FindSequence 1801 - asserts: introduce SequenceMemberAfter in the asserts backstores 1802 - spread.yaml: remove tests/lib/tools from PATH 1803 - overlord: refuse to install snaps whose activatable D-Bus services 1804 conflict with installed snaps 1805 - tests: shorten lxd-state undo-mount-changes 1806 - snap-confine: don't die if a device from sysfs path cannot be 1807 found by udev 1808 - tests: fix argument handling of apt-state 1809 - tests: rename lxd-tool to lxd-state 1810 - tests: rename user-tool to user-state, fix --help 1811 - interfaces: add gconf interface 1812 - sandbox/cgroup: avoid parsing security tags twice 1813 - tests: rename version-tool to version-compare 1814 - cmd/snap-update-ns: handle anomalies better 1815 - tests: fix call to apt.Package.mark_install(auto_inst=True) 1816 - tests: rename mountinfo-tool to mountinfo.query 1817 - tests: rename memory-tool to memory-observe-do 1818 - tests: rename invariant-tool to tests.invariant 1819 - tests: rename apt-tool to apt-state 1820 - many: managed boot config during run mode setup 1821 - asserts: introduce the concept of sequence-forming assertion types 1822 - tests: tweak comments/output in uc20-recovery test 1823 - tests/lib/pkgdb: do not use quiet when purging debs 1824 - interfaces/apparmor: allow snap-specific /run/lock 1825 - interfaces: add system-source-code for access to /usr/src 1826 - sandbox/cgroup: extend SnapNameFromPid with tracking cgroup data 1827 - gadget/install: move udev trigger to gadget/install 1828 - many: make nested spread tests more reliable 1829 - tests/core/uc20-recovery: apply hack to get gopath in recover mode 1830 w/ external backend 1831 - tests: enable tests on uc20 which now work with the real model 1832 assertion 1833 - tests: enable system-snap-refresh test on uc20 1834 - gadget, bootloader: preserve managed boot assets during gadget 1835 updates 1836 - tests: fix leaked dbus-daemon in selinux-clean 1837 - tests: add servicestate.Control tests 1838 - tests: fix "restart.service" 1839 - wrappers: helper for enabling services - extract and move enabling 1840 of services into a helper 1841 - tests: new test to validate refresh and revert of kernel and 1842 gadget on uc20 1843 - tests/lib/prepare-restore: collect debug info when prepare purge 1844 fails 1845 - bootloader: allow managed bootloader to update its boot config 1846 - tests: Remove unity test from nightly test suite 1847 - o/devicestate: set mark-seeded to done in the task itself 1848 - tests: add spread test for disconnect undo caused by failing 1849 disconnect hook 1850 - sandbox/cgroup: allow discovering PIDs of given snap 1851 - osutil/disks: support IsDecryptedDevice for mountpoints which are 1852 dm devices 1853 - osutil: detect autofs mounted in /home 1854 - spread.yaml: allow amazon-linux-2-64 qemu with 1855 ec2-user/ec2-user 1856 - usersession: support additional zoom URL schemes 1857 - overlord: mock timings.DurationThreshold in TestNewWithGoodState 1858 - sandbox/cgroup: add tracking helpers 1859 - tests: detect stray dbus-daemon 1860 - overlord: refuse to install snaps providing user daemons on Ubuntu 1861 14.04 1862 - many: move encryption and installer from snap-boostrap to gadget 1863 - o/ifacestate: fix connect undo handler 1864 - interfaces: optimize rules of multiple connected iio/i2c/spi plugs 1865 - bootloader: introduce managed bootloader, implement for grub 1866 - tests: fix incorrect check in smoke/remove test 1867 - asserts,seed: split handling of essential/not essential model 1868 snaps 1869 - gadget: fix typo in mounted filesystem updater 1870 - gadget: do only one mount point lookup in mounted fs updater 1871 - tests/core/snap-auto-mount: try to make the test more robust 1872 - tests: adding ubuntu-20.04 to google-sru backend 1873 - o/servicestate: add updateSnapstateServices helper 1874 - bootloader: pull recovery grub config from internal assets 1875 - tests/lib/tools: apply linger workaround when needed 1876 - overlord/snapstate: graceful handling of denied "managed" refresh 1877 schedule 1878 - snapstate: fix autorefresh from classic->strict 1879 - overlord/configstate: add system.kernel.printk.console-loglevel 1880 option 1881 - tests: fix assertion disk handling for nested UC systems 1882 - snapstate: use testutil.HostScaledTimeout() in snapstate tests 1883 - tests: extra worker for google-nested backend to avoid timeout 1884 error on uc20 1885 - snapdtool: helper to check whether the current binary is reexeced 1886 from a snap 1887 - tests: mock servicestate in api tests to avoid systemctl checks 1888 - many: rename back snap.Info.GetType to Type 1889 - tests/lib/cla_check: expect explicit commit range 1890 - osutil/disks: refactor diskFromMountPointImpl a bit 1891 - o/snapstate: service-control task handler 1892 - osutil: add disks pkg for associating mountpoints with 1893 disks/partitions 1894 - gadget,cmd/snap-bootstrap: move partitioning to gadget 1895 - seed: fix LoadEssentialMeta when gadget is not loaded 1896 - cmd/snap: Debian does not allow $SNAP_MOUNT_DIR/bin in sudo 1897 secure_path 1898 - asserts: introduce new assertion validation-set 1899 - asserts,daemon: add support for "serials" field in system-user 1900 assertion 1901 - data/sudo: drop a failed sudo secure_path workaround 1902 - gadget: mv encodeLabel to osutil/disks.EncodeHexBlkIDFormat 1903 - boot, snap-bootstrap: move initramfs-mounts logic to boot pkg 1904 - spread.yaml: update secure boot attribute name 1905 - interfaces/block_devices: add NVMe subsystem devices, support 1906 multipath paths 1907 - tests: use the "jq" snap from the edge channel 1908 - tests: simplify the tpm test by removing the test-snapd-mokutil 1909 snap 1910 - boot/bootstate16.go: clean snap_try_* vars when not in Trying 1911 status too 1912 - tests/main/sudo-env: check snap path under sudo 1913 - tests/main/lxd: add test for snaps inside nested lxd containers 1914 not working 1915 - asserts/internal: expand errors about invalid serialized grouping 1916 labels 1917 - usersession/userd: add msteams url support 1918 - tests/lib/prepare.sh: adjust comment about sgdisk 1919 - tests: fix how gadget pc is detected when the snap does not exist 1920 and ls fails 1921 - tests: move a few more tests to snapstate_update_test.go 1922 - tests/main: add spread test for running svc from install hook 1923 - tests/lib/prepare: increase the size of the uc16/uc18 partitions 1924 - tests/special-home-can-run-classic-snaps: re-enable 1925 - workflow: test PR title as part of the static checks again 1926 - tests/main/xdg-open-compat: backup and restore original xdg-open 1927 - tests: move update-related tests to snapstate_update_test.go 1928 - cmd,many: move Version and bits related to snapd tools to 1929 snapdtool, merge cmdutil 1930 - tests/prepare-restore.sh: reset-failed systemd-journald before 1931 restarting 1932 - interfaces: misc small interface updates 1933 - spread: use find rather than recursive ls, skip mounted snaps 1934 - tests/lib/prepare-restore.sh: if we failed to purge snapd deb, ls 1935 /var/lib/snapd 1936 - tests: enable snap-auto-mount test on core20 1937 - cmd/snap: do not show $PATH warning when executing under sudo on a 1938 known distro 1939 - asserts/internal: add some iteration benchmarks 1940 - sandbox/cgroup: improve pid parsing code 1941 - snap: add new `snap run --experimental-gdbserver` option 1942 - asserts/internal: limit Grouping size switching to a bitset 1943 representationWe don't always use the bit-set representation 1944 because: 1945 - snap: add an activates-on property to apps for D-Bus activation 1946 - dirs: delete unused Cloud var, fix typo 1947 - sysconfig/cloudinit: make callers of DisableCloudInit use 1948 WritableDefaultsDir 1949 - tests: fix classic ubuntu core transition auth 1950 - tests: fail in setup_reflash_magic() if there is snapd state left 1951 - tests: port interfaces-many-core-provided to tests.session 1952 - tests: wait after creating partitions with sfdisk 1953 - bootloader: introduce bootloarder assets, import grub.cfg with an 1954 edition marker 1955 - riscv64: bump timeouts 1956 - gadget: drop dead code, hide exports that are not used externally 1957 - tests: port 2 uc20 part1 1958 - tests: fix bug waiting for snap command to be ready 1959 - tests: move try-related tests to snapstate_try_test.go 1960 - tests: add debug for 20.04 prepare failure 1961 - travis.yml: removed, all our checks run in GH actions now 1962 - tests: clean up up the use of configcoreSuite in the configcore 1963 tests 1964 - sandbox/cgroup: remove redundant pathOfProcPidCgroup 1965 - sandbox/cgroup: add tests for ParsePids 1966 - tests: fix the basic20 test for uc20 on external backend 1967 - tests: use configcoreSuite in journalSuite and remove some 1968 duplicated code 1969 - tests: move a few more tests to snapstate_install_test 1970 - tests: assorted small patches 1971 - dbusutil/dbustest: separate license from package 1972 - interfaces/builtin/time-control: allow POSIX clock API 1973 - usersession/userd: add "slack" to the white list of URL schemes 1974 handled by xdg-open 1975 - tests: check that host settings like hostname are settable on core 1976 - tests: port xdg-settings test to tests.session 1977 - tests: port snap-handle-link test to tests.session 1978 - arch: add riscv64 1979 - tests: core20 early defaults spread test 1980 - tests: move install tests from snapstate_test.go to 1981 snapstate_install_test.go 1982 - github: port macOS sanity checks from travis 1983 - data/selinux: allow checking /var/cache/app-info 1984 - o/devicestate: core20 early config from gadget defaults 1985 - tests: autoremove after removing lxd in preseed-lxd test 1986 - secboot,cmd/snap-bootstrap: add tpm sealing support to secboot 1987 - sandbox/cgroup: move FreezerCgroupDir from dirs.go 1988 - tests: update the file used to detect the boot path on uc20 1989 - spread.yaml: show /var/lib/snapd in debug 1990 - cmd/snap-bootstrap/initramfs-mounts: also copy systemd clock + 1991 netplan files 1992 - snap/naming: add helpers to parse app and hook security tags 1993 - tests: modernize retry tool 1994 - tests: fix and trim debug section in xdg-open-portal 1995 - tests: modernize and use snapd.tool 1996 - vendor: update to latest github.com/snapcore/bolt for riscv64 1997 - cmd/snap-confine: add support for libc6-lse 1998 - interfaces: miscellaneous policy updates xlv 1999 - interfaces/system-packages-doc: fix typo in variable names 2000 - tests: port interfaces-calendar-service to tests.session 2001 - tests: install/run the lzo test snap too 2002 - snap: (small) refactor of `snap download` code for 2003 testing/extending 2004 - data: fix shellcheck warnings in snapd.sh.in 2005 - packaging: disable buildmode=pie for riscv64 2006 - tests: install test-snapd-rsync snap from edge channel 2007 - tests: modernize tests.session and port everything using it 2008 - tests: add ubuntu 20.10 to spread tests 2009 - cmd/snap/remove: mention snap restore/automatic snapshots 2010 - dbusutil: move all D-Bus helpers and D-Bus test helpers 2011 - wrappers: pass 'disable' flag to StopServices wrapper 2012 - osutil: enable riscv64 build 2013 - snap/naming: add ParseSecurityTag and friends 2014 - tests: port document-portal-activation to session-tool 2015 - bootloader: rename test helpers to reflect we are mocking EFI boot 2016 locations 2017 - tests: disable test of nfs v3 with udp proto on debian-sid 2018 - tests: plan to improve the naming and uniformity of utilities 2019 - tests: move *-tool tests to their own suite 2020 - snap-bootstrap: remove sealed key file on reinstall 2021 - bootloader/ubootenv: don't panic with an empty uboot env 2022 - systemd: rename actualFsTypeAndMountOptions to 2023 hostFsTypeAndMountOptions 2024 - daemon: fix filtering of service-control changes for snap.app 2025 - tests: spread test for preseeding in lxd container 2026 - tests: fix broken snapd.session agent.socket 2027 - wrappers: add RestartServices function and ReloadOrRestart to 2028 systemd 2029 - o/cmdstate: handle ignore flag on exec-command tasks 2030 - gadget: make ext4 filesystems with or without metadata checksum 2031 - tests: update statx test to run on all LTS releases 2032 - configcore: show better error when disabling services 2033 - interfaces: add hugepages-control 2034 - interfaces-ssh-keys: Support reading /etc/ssh/ssh_config.d/ 2035 - tests: run ubuntu-20.04-* tests on all ubuntu-2* releases 2036 - tests: skip interfaces-openvswitch for centos 8 in nightly suite 2037 - tests: reload systemd --user for root, if present 2038 - tests: reload systemd after editing /etc/fstab 2039 - tests: add missing dependencies needed for sbuild test on debian 2040 - tests: reload systemd after removing pulseaudio 2041 - image, tests: core18 early config. 2042 - interfaces: add system-packages-doc interface 2043 - cmd/snap-preseed, systemd: fix handling of fuse.squashfuse when 2044 preseeding 2045 - interfaces/fwupd: allow bind mount to /boot on core 2046 - tests: improve oom-vitality tests 2047 - tests: add fedora 32 to spread.yaml 2048 - config: apply vitality-hint immediately when the config changes 2049 - tests: port snap-routine-portal-info to session-tool 2050 - configcore: add "service.console-conf.disable" config option 2051 - tests: port xdg-open to session-tool 2052 - tests: port xdg-open-compat to session-tool 2053 - tests: port interfaces-desktop-* to session-tool 2054 - spread.yaml: apply yaml formatter/linter 2055 - tests: port interfaces-wayland to session-tool 2056 - o/devicestate: refactor current system handling 2057 - snap-mgmt: perform cleanup of user services 2058 - snap/snapfile,squashfs: followups from 8729 2059 - boot, many: require mode in modeenv 2060 - data/selinux: update policy to allow forked processes to call 2061 getpw*() 2062 - tests: log stderr from dbus-monitor 2063 - packaging: build cmd/snap and cmd/snap-bootstrap with nomanagers 2064 tag 2065 - snap/squashfs: also symlink snap Install with uc20 seed snap dir 2066 layout 2067 - interfaces/builtin/desktop: do not mount fonts cache on distros 2068 with quirks 2069 - data/selinux: allow snapd to remove/create the its socket 2070 - testutil/exec.go: set PATH after running shellcheck 2071 - tests: silence stderr from dbus-monitor 2072 - snap,many: mv Open to snapfile pkg to support add'l options to 2073 Container methods 2074 - devicestate, sysconfig: revert support for cloud.cfg.d/ in the 2075 gadget 2076 - github: remove workaround for bug 133 in actions/cache 2077 - tests: remove dbus.sh 2078 - cmd/snap-preseed: improve mountpoint checks of the preseeded 2079 chroot 2080 - spread.yaml: add ps aux to debug section 2081 - github: run all spread systems in a single go with cached results 2082 - test: session-tool cli tweaks 2083 - asserts: rest of the Pool API 2084 - tests: port interfaces-network-status-classic to session-tool 2085 - packaging: remove obsolete 16.10,17.04 symlinks 2086 - tests: setup portals before starting user session 2087 - o/devicestate: typo fix 2088 - interfaces/serial-port: add NXP SC16IS7xx (ttySCX) to allowed 2089 devices 2090 - cmd/snap/model: support store, system-user-authority keys in 2091 --verbose 2092 - o/devicestate: raise conflict when requesting system action while 2093 seeding 2094 - tests: detect signs of crashed snap-confine 2095 - tests: sign kernel and gadget to run nested tests using current 2096 snapd code 2097 - tests: remove gnome-online-accounts we install 2098 - tests: fix the issue where all the tests were executed on secboot 2099 system 2100 - tests: port interfaces-accounts-service to session-tool 2101 - interfaces/network-control: bring /var/lib/dhcp from host 2102 - image,cmd/snap,tests: add support for store-wide cohort keys 2103 - configcore: add nomanagers buildtag for conditional build 2104 - tests: port interfaces-password-manager-service to session-tool 2105 - o/devicestate: cleanup system actions supported by recover mode 2106 - snap-bootstrap: remove create-partitions and update tests 2107 - tests: fix nested tests 2108 - packaging/arch: update PKGBUILD to match one in AUR 2109 - tests: port interfaces-location-control to session-tool 2110 - tests: port interfaces-contacts-service to session-tool 2111 - state: log task errors in the journal too 2112 - o/devicestate: change how current system is reported for different 2113 modes 2114 - devicestate: do not report "ErrNoState" for seeded up 2115 - tests: add a note about broken test sequence 2116 - tests: port interfaces-autopilot-introspection to session-tool 2117 - tests: port interfaces-dbus to session-tool 2118 - packaging: update sid packaging to match 16.04+ 2119 - tests: enable degraded test on uc20 2120 - c/snaplock/runinhibit: add run inhibition operations 2121 - tests: detect and report root-owned files in /home 2122 - tests: reload root's systemd --user after snapd tests 2123 - tests: test registration with serial-authority: [generic] 2124 - cmd/snap-bootstrap/initramfs-mounts: copy auth.json and macaroon- 2125 key in recover 2126 - tests/mount-ns: stop binfmt_misc mount unit 2127 - cmd/snap-bootstrap/initramfs-mounts: use booted kernel partition 2128 uuid if available 2129 - daemon, tests: indicate system mode, test switching to recovery 2130 and back to run 2131 - interfaces/desktop: silence more /var/lib/snapd/desktop/icons 2132 denials 2133 - tests/mount-ns: update to reflect new UEFI boot mode 2134 - usersession,tests: clean ups for userd/settings.go and move 2135 xdgopenproxy under usersession 2136 - tests: disable mount-ns test 2137 - tests: test user belongs to systemd-journald, on core20 2138 - tests: run core/snap-set-core-config on uc20 too 2139 - tests: remove generated session-agent units 2140 - sysconfig: use new _writable_defaults dir to create cloud config 2141 - cmd/snap-bootstrap/initramfs-mounts: cosmetic changes in prep for 2142 future work 2143 - asserts: make clearer that with label we mean a serialized label 2144 - cmd/snap-bootstrap: tweak recovery trigger log messages 2145 - asserts: introduce PoolTo 2146 - userd: allow setting default-url-scheme-handler 2147 - secboot: append uuid to ubuntu-data when decrypting 2148 - o/configcore: pass extra options to FileSystemOnlyApply 2149 - tests: add dbus-user-session to bionic and reorder package names 2150 - boot, bootloader: adjust comments, expand tests 2151 - tests: improve debugging of user session agent tests 2152 - packaging: add the inhibit directory 2153 - many: add core.resiliance.vitality-hint config setting 2154 - tests: test adjustments and fixes for recently published images 2155 - cmd/snap: coldplug auto-import assertions from all removable 2156 devices 2157 - secboot,cmd/snap-bootstrap: move initramfs-mounts tpm access to 2158 secboot 2159 - tests: not fail when boot dir cannot be determined 2160 - tests: new directory used to store the cloud images on gce 2161 - tests: inject snapd from edge into seeds of the image in manual 2162 preseed test 2163 - usersession/agent,wrappers: fix races between Shutdown and Serve 2164 - tests: add dependency needed for next upgrade of bionic 2165 - tests: new test user is used for external backend 2166 - cmd/snap: fix the order of positional parameters in help output 2167 - tests: don't create root-owned things in ~test 2168 - tests/lib/prepare.sh: delete patching of the initrd 2169 - cmd/snap-bootstrap/initramfs-mounts: add sudoers to dirs to copy 2170 as well 2171 - progress: tweak multibyte label unit test data 2172 - o/devicestate,cmd/snap-bootstrap: seal to recover mode cmdline 2173 - gadget: fix fallback device lookup for 'mbr' type structures 2174 - configcore: only reload journald if systemd is new enough 2175 - cmd/snap-boostrap, boot: use /run/mnt/data instead of ubuntu-data 2176 - wrappers: allow user mode systemd daemons 2177 - progress: fix progress bar with multibyte duration units 2178 - tests: fix raciness in pulseaudio test 2179 - asserts/internal: introduce Grouping and Groupings 2180 - tests: remove user.sh 2181 - tests: pair of follow-ups from earlier reviews 2182 - overlord/snapstate: warn of refresh/postpone events 2183 - configcore,tests: use daemon-reexec to apply watchdog config 2184 - c/snap-bootstrap: check mount states via initramfsMountStates 2185 - store: implement DownloadAssertions 2186 - tests: run smoke test with different bases 2187 - tests: port user-mounts test to session-tool 2188 - store: handle error-list in fetch-assertions results 2189 - tests: port interfaces-audio-playback-record to session-tool 2190 - data/completion: add `snap` command completion for zsh 2191 - tests/degraded: ignore failure in systemd-vconsole-setup.service 2192 - image: stub implementation of image.Prepare for darwin 2193 - tests: session-tool --restore -u stops user-$UID.slice 2194 - o/ifacestate/handlers.go: fix typo 2195 - tests: port pulseaudio test to session-tool 2196 - tests: port user-session-env to session-tool 2197 - tests: work around journald bug in core16 2198 - tests: add debug to core-persistent-journal test 2199 - tests: port selinux-clean to session-tool 2200 - tests: port portals test to session-tool, fix portal tests on sid 2201 - tests: adding option --no-install-recommends option also when 2202 install all the deps 2203 - tests: add session-tool --has-systemd-and-dbus 2204 - packaging/debian-sid: add gcc-multilib to build deps 2205 - osutil: expand FileLock to support shared locks and more 2206 - packaging: stop depending on python-docutils 2207 - store,asserts,many: support the new action fetch-assertions 2208 - tests: port snap-session-agent-* to session-tool 2209 - packaging/fedora: disable FIPS compliant crypto for static 2210 binaries 2211 - tests: fix for preseeding failures 2212 2213 -- Michael Vogt <michael.vogt@ubuntu.com> Tue, 25 Aug 2020 17:26:21 +0200 2214 2215 snapd (2.45.3.1-1) unstable; urgency=medium 2216 2217 * New upstream release, LP: #1875071 2218 - o/ifacestate: fix bug in snapsWithSecurityProfiles 2219 - tests/main/selinux-clean: workaround SELinux denials triggered by 2220 linger setup on Centos8 2221 2222 -- Samuele Pedroni <pedronis@lucediurna.net> Tue, 28 Jul 2020 21:43:38 +0200 2223 2224 snapd (2.45.3-1) unstable; urgency=medium 2225 2226 * New upstream release, LP: #1875071 2227 - many: backport _writable_defaults dir changes 2228 - tests: fix incorrect check in smoke/remove test 2229 - cmd/snap-bootstrap,seed: backport of uc20 PRs 2230 - tests: avoid exit when nested type var is not defined 2231 - cmd/snap-preseed: backport fixes 2232 - interfaces: optimize rules of multiple connected iio/i2c/spi plugs 2233 - many: cherry-picks for 2.45, gh-action, test fixes 2234 - tests/lib: account for changes in arch package file name extension 2235 - postrm, snap-mgmt: cleanup modules and other cherry-picks 2236 - snap-confine: don't die if a device from sysfs path cannot be 2237 found by udev 2238 - data/selinux: update policy to allow forked processes to call 2239 getpw*() 2240 - tests/main/interfaces-time-control: exercise setting time via date 2241 - interfaces/builtin/time-control: allow POSIX clock API 2242 - usersession/userd: add "slack" to the white list of URL schemes 2243 handled by xdg-open 2244 2245 -- Zygmunt Krynicki <me@zygoon.pl> Mon, 27 Jul 2020 12:01:14 +0200 2246 2247 snapd (2.45.2-1) unstable; urgency=high 2248 2249 * SECURITY UPDATE: sandbox escape vulnerability on snapctl xdg-open 2250 implementation 2251 - usersession/userd/launcher.go: remove XDG_DATA_DIRS environment 2252 variable modification when calling the system xdg-open. Patch 2253 thanks to James Henstridge 2254 - packaging/ubuntu-16.04/snapd.postinst: ensure "snap userd" is 2255 restarted. Patch thanks to Michael Vogt 2256 - CVE-2020-11934 2257 * SECURITY UPDATE: arbitrary code execution vulnerability on core 2258 devices with access to physical removable media 2259 - devicestate: Disable/restrict cloud-init after seeding. 2260 - CVE-2020-11933 2261 2262 -- Michael Vogt <michael.vogt@ubuntu.com> Fri, 10 Jul 2020 20:06:29 +0200 2263 2264 snapd (2.45.1-1) unstable; urgency=medium 2265 2266 * New upstream release, LP: #1875071 2267 - data/selinux: allow checking /var/cache/app-info 2268 - cmd/snap-confine: add support for libc6-lse 2269 - interfaces: miscellaneous policy updates xlv 2270 - snap-bootstrap: remove sealed key file on reinstall 2271 - interfaces-ssh-keys: Support reading /etc/ssh/ssh_config.d/ 2272 - gadget: make ext4 filesystems with or without metadata checksum 2273 - interfaces/fwupd: allow bind mount to /boot on core 2274 - tests: cherry-pick test fixes from master 2275 - snap/squashfs: also symlink snap Install with uc20 seed snap dir 2276 layout 2277 - interfaces/serial-port: add NXP SC16IS7xx (ttySCX) to allowed 2278 devices 2279 - snap,many: mv Open to snapfile pkg to support add'l options to 2280 Container methods 2281 - interfaces/builtin/desktop: do not mount fonts cache on distros 2282 with quirks 2283 - devicestate, sysconfig: revert support for cloud.cfg.d/ in the 2284 gadget 2285 - data/completion, packaging: cherry-pick zsh completion 2286 - state: log task errors in the journal too 2287 - devicestate: do not report "ErrNoState" for seeded up 2288 - interfaces/desktop: silence more /var/lib/snapd/desktop/icons 2289 denials 2290 - packaging/fedora: disable FIPS compliant crypto for static 2291 binaries 2292 - packaging: stop depending on python-docutils 2293 2294 -- Michael Vogt <michael.vogt@ubuntu.com> Fri, 05 Jun 2020 15:13:49 +0200 2295 2296 snapd (2.45-1) unstable; urgency=medium 2297 2298 * New upstream release, LP: #1875071 2299 - o/devicestate: support doing system action reboots from recover 2300 mode 2301 - vendor: update to latest secboot 2302 - tests: not fail when boot dir cannot be determined 2303 - configcore: only reload journald if systemd is new enough 2304 - cmd/snap-bootstrap/initramfs-mounts: append uuid to ubuntu-data 2305 when decrypting 2306 - tests/lib/prepare.sh: delete patching of the initrd 2307 - cmd/snap: coldplug auto-import assertions from all removable 2308 devices 2309 - cmd/snap: fix the order of positional parameters in help output 2310 - c/snap-bootstrap: port mount state mocking to the new style on 2311 master 2312 - cmd/snap-bootstrap/initramfs-mounts: add sudoers to dirs to copy 2313 as well 2314 - o/devicestate,cmd/snap-bootstrap: seal to recover mode cmdline, 2315 unlock in recover mode initramfs 2316 - progress: tweak multibyte label unit test data 2317 - gadget: fix fallback device lookup for 'mbr' type structures 2318 - progress: fix progress bar with multibyte duration units 2319 - many: use /run/mnt/data over /run/mnt/ubuntu-data for uc20 2320 - many: put the sealed keys in a directory on seed for tidiness 2321 - cmd/snap-bootstrap: measure epoch and model before unlocking 2322 encrypted data 2323 - o/configstate: core config handler for persistent journal 2324 - bootloader/uboot: use secondary ubootenv file boot.sel for uc20 2325 - packaging: add "$TAGS" to dh_auto_test for debian packaging 2326 - tests: ensure $cache_dir is actually available 2327 - secboot,cmd/snap-bootstrap: add model to pcr protection profile 2328 - devicestate: do not use snap-boostrap in devicestate to install 2329 - tests: fix a typo in nested.sh helper 2330 - devicestate: add support for cloud.cfg.d config from the gadget 2331 - cmd/snap-bootstrap: cleanups, naming tweaks 2332 - testutil: add NewDBusTestConn 2333 - snap-bootstrap: lock access to sealed keys 2334 - overlord/devicestate: preserve the current model inside ubuntu- 2335 boot 2336 - interfaces/apparmor: use differently templated policy for non-core 2337 bases 2338 - seccomp: add get_tls, io_pg* and *time64/*64 variants for existing 2339 syscalls 2340 - cmd/snap-bootstrap/initramfs-mounts: mount ubuntu-seed first, 2341 other misc changes 2342 - o/snapstate: tweak "waiting for restart" message 2343 - boot: store model model and grade information in modeenv 2344 - interfaces/firewall-control: allow -legacy and -nft for core20 2345 - boot: enable makeBootable20RunMode for EnvRefExtractedKernel 2346 bootloaders 2347 - boot/bootstate20: add EnvRefExtractedKernelBootloader bootstate20 2348 implementation 2349 - daemon: fix error message from `snap remove-user foo` on classic 2350 - overlord: have a variant of Mock that can take a state.State 2351 - tests: 16.04 and 18.04 now have mediating pulseaudio (again) 2352 - seed: clearer errors for missing essential snapd or core snap 2353 - cmd/snap-bootstrap/initramfs-mounts: support 2354 EnvRefExtractedKernelBootloader's 2355 - gadget, cmd/snap-bootstrap: MBR schema support 2356 - image: improve/adjust DownloadSnap doc comment 2357 - asserts: introduce ModelGrade.Code 2358 - tests: ignore user-12345 slice and service 2359 - image,seed/seedwriter: support redirect channel aka default 2360 tracks 2361 - bootloader: use binary.Read/Write 2362 - tests: uc20 nested suite part II 2363 - tests/boot: refactor to make it easier for new 2364 bootloaderKernelState20 impl 2365 - interfaces/openvswitch: support use of ovs-appctl 2366 - snap-bootstrap: copy auth data from real ubuntu-data in recovery 2367 mode 2368 - snap-bootstrap: seal and unseal encryption key using tpm 2369 - tests: disable special-home-can-run-classic-snaps due to jenkins 2370 repo issue 2371 - packaging: fix build on Centos8 to support BUILDTAGS 2372 - boot/bootstate20: small changes to bootloaderKernelState20 2373 - cmd/snap: Implement a "snap routine file-access" command 2374 - spread.yaml: switch back to latest/candidate for lxd snap 2375 - boot/bootstate20: re-factor kernel methods to use new interface 2376 for state 2377 - spread.yaml,tests/many: use global env var for lxd channel 2378 - boot/bootstate20: fix bug in try-kernel cleanup 2379 - config: add system.store-certs.[a-zA-Z0-9] support 2380 - secboot: key sealing also depends on secure boot enabled 2381 - httputil: fix client timeout retry tests 2382 - cmd/snap-update-ns: handle EBUSY when unlinking files 2383 - cmd/snap/debug/boot-vars: add opts for setting dir and/or uc20 2384 vars 2385 - secboot: add tpm support helpers 2386 - tests/lib/assertions/developer1-pi-uc20.model: use 20/edge for 2387 kernel and gadget 2388 - cmd/snap-bootstrap: switch to a 64-byte key for unlocking 2389 - tests: preserve size for centos images on spread.yaml 2390 - github: partition the github action workflows 2391 - run-checks: use consistent "Checking ..." style messages 2392 - bootloader: add efi pkg for reading efi variables 2393 - data/systemd: do not run snapd.system-shutdown if finalrd is 2394 available 2395 - overlord: update tests to work with latest go 2396 - cmd/snap: do not hide debug boot-vars on core 2397 - cmd/snap-bootstrap: no error when not input devices are found 2398 - snap-bootstrap: fix partition numbering in create-partitions 2399 - httputil/client_test.go: add two TLS version tests 2400 - tests: ignore user@12345.service hierarchy 2401 - bootloader, gadget, cmd/snap-bootstrap: misc cosmetic things 2402 - tests: rewrite timeserver-control test 2403 - tests: fix racy pulseaudio tests 2404 - many: fix loading apparmor profiles on Ubuntu 20.04 with ZFS 2405 - tests: update snap-preseed --reset logic to accommodate for 2.44 2406 change 2407 - cmd/snap: don't wait for system key when stopping 2408 - sandbox/cgroup: avoid making arrays we don't use 2409 - osutil: mock proc/self/mountinfo properly everywhere 2410 - selinux: export MockIsEnforcing; systemd: use in tests 2411 - tests: add 32 bit machine to GH actions 2412 - tests/session-tool: kill cron session, if any 2413 - asserts: it should be possible to omit many snap-ids if allowed, 2414 fix 2415 - boot: cleanup more things, simplify code 2416 - github: skip spread jobs when corresponding label is set 2417 - dirs: don't depend on osutil anymore, mv apparmor vars to apparmor 2418 pkg 2419 - tests/session-tool: add session-tool --dump 2420 - github: allow cached debian downloads to restore 2421 - tests/session-tool: session ordering is non-deterministic 2422 - tests: enable unit tests on debian-sid again 2423 - github: move spread to self-hosted workers 2424 - secboot: import secboot on ubuntu, provide dummy on !ubuntu 2425 - overlord/devicestate: support for recover and run modes 2426 - snap/naming: add validator for snap security tag 2427 - interfaces: add case for rootWritableOverlay + NFS 2428 - tests/main/uc20-create-partitions: tweaks, renames, switch to 2429 20.04 2430 - github: port CLA check to Github Actions 2431 - interfaces/many: miscellaneous policy updates xliv 2432 - configcore,tests: fix setting watchdog options on UC18/20 2433 - tests/session-tool: collect information about services on startup 2434 - tests/main/uc20-snap-recovery: unbreak, rename to uc20-create- 2435 partitions 2436 - state: add state.CopyState() helper 2437 - tests/session-tool: stop anacron.service in prepare 2438 - interfaces: don't use the owner modifier for files shared via 2439 document portal 2440 - systemd: move the doc comments to the interface so they are 2441 visible 2442 - cmd/snap-recovery-chooser: tweaks 2443 - interfaces/docker-support: add overlayfs file access 2444 - packaging: use debian/not-installed to ignore snap-preseed 2445 - travis.yml: disable unit tests on travis 2446 - store: start splitting store.go and store_test.go into subtopic 2447 files 2448 - tests/session-tool: stop cron/anacron from meddling 2449 - github: disable fail-fast as spread cannot be interrupted 2450 - github: move static checks and spread over 2451 - tests: skip "/etc/machine-id" in "writablepaths" test 2452 - snap-bootstrap: store encrypted partition recovery key 2453 - httputil: increase testRetryStrategy max timelimit to 5s 2454 - tests/session-tool: kill leaking closing session 2455 - interfaces: allow raw access to USB printers 2456 - tests/session-tool: reset failed session-tool units 2457 - httputil: increase httpclient timeout in 2458 TestRetryRequestTimeoutHandling 2459 - usersession: extend timerange in TestExitOnIdle 2460 - client: increase timeout in client tests to 100ms 2461 - many: disentagle release and snapdenv from sandbox/* 2462 - boot: simplify modeenv mocking to always write a modeenv 2463 - snap-bootstrap: expand data partition on install 2464 - o/configstate: add backlight option for core config 2465 - cmd/snap-recovery-chooser: add recovery chooser 2466 - features: enable robust mount ns updates 2467 - snap: improve TestWaitRecovers test 2468 - sandbox/cgroup: add ProcessPathInTrackingCgroup 2469 - interfaces/policy: fix comment in recent new test 2470 - tests: make session tool way more robust 2471 - interfaces/seccomp: allow passing an address to setgroups 2472 - o/configcore: introduce core config handlers (3/N) 2473 - interfaces: updates to login-session-observe, network-manager and 2474 modem-manager interfaces 2475 - interfaces/policy/policy_test.go: add more tests'allow- 2476 installation: false' and we grant based on interface attributes 2477 - packaging: detect/disable broken seed in the postinst 2478 - cmd/snap-confine/mount-support-nvidia.c: add libnvoptix as nvidia 2479 library 2480 - tests: remove google-tpm backend from spread.yaml 2481 - tests: install dependencies with apt using --no-install-recommends 2482 - usersession/userd: add zoommtg url support 2483 - snap-bootstrap: fix disk layout sanity check 2484 - snap: add `snap debug state --is-seeded` helper 2485 - devicestate: generate warning if seeding fails 2486 - config, features: move and rename config.GetFeatureFlag helper to 2487 features.Flag 2488 - boot, overlord/devicestate, daemon: implement requesting boot 2489 into a given recovery system 2490 - xdgopenproxy: forward requests to the desktop portal 2491 - many: support immediate reboot 2492 - store: search v2 tweaks 2493 - tests: fix cross build tests when installing dependencies 2494 - daemon: make POST /v2/systems/<label> root only 2495 - tests/lib/prepare.sh: use only initrd from the kernel snap 2496 - cmd/snap,seed: validate full seeds (UC 16/18) 2497 - tests/main/user-session-env: stop the user session before deleting 2498 the test-zsh user 2499 - overlord/devicestate, daemon: record the seed current system was 2500 installed from 2501 - gadget: SystemDefaults helper function to convert system defaults 2502 config into a flattened map suitable for FilesystemOnlyApply. 2503 - many: comment or avoid cryptic snap-ids in tests 2504 - tests: add LXD_CHANNEL environment 2505 - store: support for search API v2 2506 - .github: register a problem matcher to detect spread failures 2507 - seed: add Info() method for seed.Snap 2508 - github: always run the "Discard spread workers" step, even if the 2509 job fails 2510 - github: offload self-hosted workers 2511 - cmd/snap: the model command needs just a client, no waitMixin 2512 - github: combine tests into one workflow 2513 - github: fix order of go get caches 2514 - tests: adding more workers for ubuntu 20.04 2515 - boot,overlord: rename operating mode to system mode 2516 - config: add new Transaction.GetPristine{,Maybe}() function 2517 - o/devicestate: rename readMaybe* to maybeRead* 2518 - github: cache Debian dependencies for unit tests 2519 - wrappers: respect pre-seeding in error path 2520 - seed: validate UC20 seed system label 2521 - client, daemon, overlord/devicestate: request system action API 2522 and stubs 2523 - asserts,o/devicestate: support model specified alternative serial- 2524 authority 2525 - many: introduce naming.WellKnownSnapID 2526 - o/configcore: FilesystemOnlyApply method for early configuration 2527 of core (1/N) 2528 - github: run C unit tests 2529 - github: run spread tests on PRs only 2530 - interfaces/docker-support: make containerd abstract socket more 2531 generic 2532 - tests: cleanup security-private-tmp properly 2533 - overlord/devicestate,boot: do not hold to the originally read 2534 modeenv 2535 - dirs: rm RunMnt; boot: add vars for early boot env layout; 2536 sysconfig: take targetdir arg 2537 - cmd/snap-bootstrap/initramfs-mounts/tests: use dirs.RunMnt over 2538 s.runMnt 2539 - tests: add regression test for MAAS refresh bug 2540 - errtracker: add missing mocks 2541 - github: apt-get update before installing build-deps 2542 - github: don't fail-fast 2543 - github: run spread via github actions 2544 - boot,many: add modeenv.WriteTo, make Write take no args 2545 - wrappers: fix timer schedules that are days only 2546 - tests/main/snap-seccomp-syscalls: install gperf 2547 - github: always checkout to snapcore/snapd 2548 - github: add prototype workflow running unit tests 2549 - many: improve comments, naming, a possible TODO 2550 - client: use Assert when checking for error 2551 - tests: ensure sockets target is ready in session agent spread 2552 tests 2553 - osutil: do not leave processes behind after the test run 2554 - tests: update proxy-no-core to match latest CDN changes 2555 - devicestate,sysconfig: support "cloud.cfg.d" in uc20 for grade: 2556 dangerous 2557 - cmd/snap-failure,tests: try to make snap-failure more robust 2558 - many: fix packages having mistakenly their copyright as doc 2559 - many: enumerate system seeds, return them on the /v2/systems API 2560 endpoint 2561 - randutil: don't consume kernel entropy at init, just mix more info 2562 to try to avoid fleet collisions 2563 - snap-bootstrap: add creationSupported predicate for partition 2564 types 2565 - tests: umount partitions which are not umounted after remount 2566 gadget 2567 - snap: run gofmt -s 2568 - many: improve environment handling, fixing duplicate entries 2569 - boot_test: add many boot robustness tests for UC20 kernel 2570 MarkBootSuccessul and SetNextBoot 2571 - overlord: remove unneeded overlord.MockPruneInterval() mocks 2572 - interfaces/greengrass-support: fix typo 2573 - overlord,timings,daemon: separate timings from overlord/state 2574 - tests: enable nested on core20 and test current branch 2575 - snap-bootstrap: remove created partitions on reinstall 2576 - boot: apply Go 1.10 formatting 2577 - apparmor: use rw for uuidd request to default and remove from 2578 elsewhere 2579 - packaging: add README.source for debian 2580 - tests: cleanup various uc20 boot tests from previous PR 2581 - devicestate: disable cloud-init by default on uc20 2582 - run-checks: tweak formatting checks 2583 - packaging,tests: ensure debian-sid builds without vendor/ 2584 - travis.yml: run unit tests with go/master as well* travis.yml: run 2585 unit tests with go/master as well 2586 - seed: make Brand() part of the Seed interface 2587 - cmd/snap-update-ns: ignore EROFS from rmdir/unlink 2588 - daemon: do a forceful server shutdown if we hit a deadline 2589 - tests/many: don't use StartLimitInterval anymore, unify snapd- 2590 failover variants, build snapd snap for UC16 tests 2591 - snap-seccomp: robustness improvements 2592 - run-tests: disable -v for go test to avoid spaming the logs 2593 - snap: whitelist lzo as support compression for snap pack 2594 - snap: tweak comment in Install() for overlayfs detection 2595 - many: introduce snapdenv.Preseeding instead of release.PreseedMode 2596 - client, daemon, overlord/devicestate: structures and stubs for 2597 systems API 2598 - o/devicestate: delay the creation of mark-seeded task until 2599 asserts are loaded 2600 - data/selinux, tests/main/selinux: cleanup tmpfs operations in the 2601 policy, updates 2602 - interfaces/greengrass-support: add new 1.9 access 2603 - snap: do not hardlink on overlayfs 2604 - boot,image: ARM kernel extract prepare image 2605 - interfaces: make gpio robust against not-existing gpios in /sys 2606 - cmd/snap-preseed: handle --reset flag 2607 - many: introduce snapdenv to present common snapd env options 2608 - interfaces/kubernetes-support: allow autobind to journald socket 2609 - snap-seccomp: allow mprotect() to unblock the tests 2610 - tests/lib/reset: workaround unicode dot in systemctl output 2611 - interfaces/udisks2: also allow Introspection on 2612 /org/freedesktop/UDisks/** 2613 - snap: introduce Container.RandomAccessFile 2614 - o/ifacestate, api: implementation of snap disconnect --forget 2615 - cmd/snap: make the portal-info command search for the network- 2616 status interface 2617 - interfaces: work around apparmor_parser slowness affecting uio 2618 - tests: fix/improve failing spread tests 2619 - many: clean separation of bootenv mocking vs mock bootloader kinds 2620 - tests: mock prune ticker in overlord tests to reduce wait times 2621 - travis: disable arm64 again 2622 - httputil: add support for extra snapd certs 2623 - travis.yml: run unit tests on arm64 as well 2624 - many: fix a pair of ineffectual assignments 2625 - tests: add uc20 kernel snap upgrade managers test, fix 2626 bootloadertest bugs 2627 - o/snapstate: set base in SnapSetup on snap revert 2628 - interfaces/{docker,kubernetes}-support: updates for lastest k8s 2629 - cmd/snap-exec: add test case for LP bug 1860369 2630 - interfaces: make the network-status interface implicit on 2631 classic 2632 - interfaces: power control interfaceIt is documented in the 2633 kernel 2634 - interfaces: miscellaneous policy updates 2635 - cmd/snap: add a "snap routine portal-info" command 2636 - usersession/userd: add "apt" to the white list of URL schemes 2637 handled by xdg-open 2638 - interfaces/desktop: allow access to system prompter interface 2639 - devicestate: allow encryption regardless of grade 2640 - tests: run ipv6 network-retry test too 2641 - tests: test that after "remove-user" the system is unmanaged 2642 - snap-confine: unconditionally add /dev/net/tun to the device 2643 cgroup 2644 - snapcraft.yaml: use sudo -E and remove workaround 2645 - interfaces/audio_playback: Fix pulseaudio config access 2646 - ovelord/snapstate: update only system wide fonts cache 2647 - wrappers: import /etc/environment in all services 2648 - interfaces/u2f: Add Titan USB-C key 2649 - overlord, taskrunner: exit on task/ensure error when preseeding 2650 - tests: add session-tool, a su / sudo replacement 2651 - wrappers: add mount unit dependency for snapd services on core 2652 devices 2653 - tests: just remove user when the system is not managed on create- 2654 user-2 test 2655 - snap-preseed: support for preseeding of snapd and core18 2656 - boot: misc UC20 changes 2657 - tests: adding arch-linux execution 2658 - packaging: revert "work around review-tools and snap-confine" 2659 - netlink: fix panic on arm64 with the new rawsockstop codewith a 2660 nil Timeval panics 2661 - spread, data/selinux: add CentOS 8, update policy 2662 - tests: updating checks to new test account for snapd-test snaps 2663 - spread.yaml: mv opensuse 15.1 to unstable 2664 - cmd/snap-bootstrap,seed: verify only in-play snaps 2665 - tests: use ipv4 in retry-network to unblock failing master 2666 - data/systemd: improve the description 2667 - client: add "Resume" to DownloadOptions and new test 2668 - tests: enable snapd-failover on uc20 2669 - tests: add more debug output to the snapd-failure handling 2670 - o/devicestate: unset recovery_system when done seeding 2671 2672 -- Michael Vogt <michael.vogt@ubuntu.com> Tue, 12 May 2020 17:17:57 +0200 2673 2674 snapd (2.44.5-1) unstable; urgency=medium 2675 2676 * New upstream release, LP: #1864808 2677 - spread.yaml: adding more workers for ubuntu 20.04 2678 - packaging: stop depending on python-docutils on opensuse 2679 - spread.yaml: do not run ubuntu-core-20-64 with snapd 2.44, snapd 2680 is not recent enough to drive ubuntu-core-20 2681 - spread.yaml: Preserve size for centos images on spread.yaml 2682 - spread.yaml: use non-uefi enabled image for uc20 2683 - tests: ensure $cache_dir is actually available 2684 - tests: disable preseed tests, they work in master but require too 2685 much cherry-picking here 2686 - travis.yml: remove go/master unit tests from 2.44 2687 2688 -- Michael Vogt <michael.vogt@ubuntu.com> Thu, 30 Apr 2020 09:09:22 +0200 2689 2690 snapd (2.44.4-1) unstable; urgency=medium 2691 2692 * New upstream release, LP: #1864808 2693 - packaging/fedora: disable FIPS compliant crypto for static 2694 binaries 2695 - interfaces/firewall-control: allow -legacy and -nft for core20 2696 - seccomp: add get_tls, io_pg* and *time64/*64 variants for existing 2697 syscalls 2698 - tests: 16.04 and 18.04 now have mediating pulseaudio 2699 - tests: ignore user@12345.service hierarchy 2700 2701 -- Michael Vogt <michael.vogt@ubuntu.com> Wed, 29 Apr 2020 08:32:56 +0200 2702 2703 snapd (2.44.3-1) unstable; urgency=medium 2704 2705 * New upstream release, LP: #1864808 2706 - tests: fix racy pulseaudio tests 2707 - many: fix loading apparmor profiles on Ubuntu 20.04 with ZFS 2708 - tests: update snap-preseed --reset logic 2709 - tests: backport partition fixes 2710 - cmd/snap: don't wait for system key when stopping 2711 - interfaces/many: miscellaneous policy updates xliv 2712 - tests/main/uc20-snap-recovery: use 20.04 system 2713 - tests: skip "/etc/machine-id" in "writablepaths 2714 - interfaces/docker-support: add overlays file access 2715 2716 -- Michael Vogt <michael.vogt@ubuntu.com> Fri, 10 Apr 2020 16:57:25 +0200 2717 2718 snapd (2.44.2-1) unstable; urgency=medium 2719 2720 * New upstream release, LP: #1864808 2721 - packaging: detect/disable broken seeds in the postinst 2722 - cmd/snap,seed: validate full seeds (UC 16/18) 2723 - snap: add `snap debug state --is-seeded` helper 2724 - devicestate: generate warning if seeding fails 2725 - store: support for search API v2 2726 - cmd/snap-seccomp/syscalls: update the list of known syscalls 2727 - snap/cmd: the model command needs just a client, no waitMixin 2728 - tests: cleanup security-private-tmp properly 2729 - wrappers: fix timer schedules that are days only 2730 - tests: update proxy-no-core to match latest CDN changes 2731 - cmd/snap-failure,tests: make snap-failure more robust 2732 - tests, many: don't use StartLimitInterval anymore, unify snapd- 2733 failover variants, build snapd snap for UC16 tests 2734 2735 -- Michael Vogt <michael.vogt@ubuntu.com> Thu, 02 Apr 2020 09:51:34 +0200 2736 2737 snapd (2.44.1-1) unstable; urgency=medium 2738 2739 * New upstream release, LP: #1864808 2740 - randutil: switch back to setting up seed with lower entropy data 2741 - interfaces/greengrass-support: fix typo 2742 - packaging,tests: ensure debian-sid builds without vendor/ 2743 - travis.yml: run unit tests with go/master as well 2744 - cmd/snap-update-ns: ignore EROFS from rmdir/unlink 2745 2746 -- Michael Vogt <michael.vogt@ubuntu.com> Sat, 21 Mar 2020 18:32:12 +0100 2747 2748 snapd (2.44-1) unstable; urgency=medium 2749 2750 * New upstream release, LP: #1864808 2751 - daemon: do a forceful serer shutdown if we hit a deadline 2752 - snap: whitelist lzo as support compression for snap pack 2753 - data/selinux: update policy to allow more ops 2754 - interfaces/greengrass-support: add new 1.9 access 2755 - snap: do not hardlink on overlayfs 2756 - cmd/snap-preseed: handle --reset flag 2757 - interfaces/kubernetes-support: allow autobind to journald socket 2758 - snap-seccomp: allow mprotect() to unblock the tests 2759 - tests/lib/reset: workaround unicode dot in systemctl output 2760 - interfaces: work around apparmor_parser slowness affecting uio 2761 - interfaces/udisks2: also allow Introspection on 2762 /org/freedesktop/UDisks2/** 2763 - tests: mock prune ticker in overlord tests to reduce wait times 2764 - interfaces/{docker,kubernetes}-support: updates for lastest k8s 2765 - interfaces: miscellaneous policy updates 2766 - interfaces/audio_playback: Fix pulseaudio config access 2767 - overlord: disable Test..AbortShortlyAfterStartOfOperation for 2.44 2768 - ovelord/snapstate: update only system wide fonts cache 2769 - wrappers: import /etc/environment in all services 2770 - interfaces/u2f: Add Titan USB-C key 2771 - overlord, taskrunner: exit on task/ensure error when preseeding 2772 - overlord/snapstate/backend: update snapd services contents in unit 2773 tests 2774 - wrappers: add mount unit dependency for snapd services on core 2775 devices 2776 - Revert "tests: remove /tmp/snap.* left over by other tests" 2777 - Revert "packaging: work around review-tools and snap-confine" 2778 - netlink: fix panic on arm64 with the new rawsockstop code 2779 - spread, data/selinux: add CentOS 8, update policy 2780 - spread.yaml: mv opensuse tumbleweed to unstable too 2781 - spread.yaml: mv opensuse 15.1 to unstable 2782 - tests: use ipv4 in retry-network to unblock failing master 2783 - data/systemd: improve the description 2784 - tests/lib/prepare.sh: simplify, combine code paths 2785 - tests/main/user-session-env: add test verifying environment 2786 variables inside the user session 2787 - spread.yaml: make qemu ubuntu-core-20-64 use ubuntu-20.04-64 2788 - run-checks: SKIP_GMFMT really skips formatting checks 2789 - tests: enable more tests for UC20/UC18 2790 - tests: remove tmp dir for snap not-test-snapd-sh on security- 2791 private-tmp test 2792 - seed,cmd/snap-bootstrap: introduce seed.Snap.EssentialType, 2793 simplify bootstrap code 2794 - snapstate: do not restart in undoLinkSnap unless on first install 2795 - cmd/snap-bootstrap: subcommand to detect UC chooser trigger 2796 - cmd/snap-bootstrap/initramfs-mounts: mount the snapd snap in run- 2797 mode too 2798 - cmd/libsnap, tests: fix C unit tests failing as non-root 2799 - cmd/snap-bootstrap: verify kernel snap is in modeenv before 2800 mounting it 2801 - tests: adding amazon linux to google backend 2802 - cmd/snap-failure/snapd: rm snapd.socket, reset snapd.socket failed 2803 status 2804 - client: add support for "ResumeToken", "HeaderPeek" to download 2805 - build: enable type: snapd 2806 - tests: rm -rf /tmp/snap.* in restore 2807 - cmd/snap-confine: deny snap-confine to load nss libs 2808 - snapcraft.yaml: add comments, rename snapd part to snapd-deb 2809 - boot: write current_kernels in bootstate20, makebootable 2810 - packaging: work around review-tools and snap-confine 2811 - tests: skipping interfaces-openvswitch on centos due to package is 2812 not available 2813 - packaging,snap-confine: stop being setgid root 2814 - cmd/snap-confine: bring /var/lib/dhcp from host, if present 2815 - store: rely on CommandFromSystemSnap to find xdelta3 2816 - tests: bump sleep time of the new overlord tests 2817 - cmd/snap-preseed: snapd version check for the target 2818 - netlink: fix/support stopping goroutines reading netlink raw 2819 sockets 2820 - tests: reset PS1 before possibly interactive dash 2821 - overlord, state: don't abort changes if spawn time before 2822 StartOfOperationTime (2/2) 2823 - snapcraft.yaml: add python3-apt, tzdata as build-deps for the 2824 snapd snap 2825 - tests: ask tar to speak English 2826 - tests: using google storage when downloading ubuntu cloud images 2827 from gce 2828 - Coverity produces false positives for code like this: 2829 - many: maybe restart & security backend options 2830 - o/standby: add SNAPD_STANDBY_WAIT to control standby in 2831 development 2832 - snap: use the actual staging snap-id for snapd 2833 - cmd/snap-bootstrap: create a new parser instance 2834 - snapcraft.yaml: use build-base and adopt-info, rm builddeb 2835 plugin 2836 - tests: set StartLimitInterval in snapd failover test 2837 - tests: disable archlinux system 2838 - tests: add preseed test for classic 2839 - many, tests: integrate all preseed bits and add spread tests 2840 - daemon: support resuming downloads 2841 - tests: use Filename() instead of filepath.Base(sn.MountFile()) 2842 - tests/core: add swapfiles test 2843 - interfaces/cpu-control: allow to control cpufreq tunables 2844 - interfaces: use commonInteface for desktopInterface 2845 - interfaces/{desktop-legacy,unity7}: adjust for new ibus socket 2846 location 2847 - snap/info: add Filename 2848 - bootloader: make uboot a RecoveryAwareBootloader 2849 - gadget: skip update when mounted filesystem content is identical 2850 - systemd: improve is-active check for 'failed' services 2851 - boot: add current_kernels to modeenv 2852 - o/devicestate: StartOfOperationTime helper for Prune (1/2) 2853 - tests: detect LXD launching i386 containers 2854 - tests: move main/ubuntu-core-* tests to core/ suite 2855 - tests: remove snapd in ubuntu-core-snapd 2856 - boot: enable base snap updates in bootstate20 2857 - tests: Fix core revert channel after 2.43 has been released to 2858 stable 2859 - data/selinux: unify tabs/spaces 2860 - o/ifacestate: move ResolveDisconnect to ifacestate 2861 - spread: move centos to stable systems 2862 - interfaces/opengl: allow datagrams to nvidia-driver 2863 - httputil: add NoNetwork(err) helper, spread test and use in serial 2864 acquire 2865 - store: detect if server does not support http range headers 2866 - test/lib/user: add helper lib for doing things for and as a user 2867 - overlord/snapstate, wrappers: undo of snapd on core 2868 - tests/main/interfaces-pulseaudio: use custom pulseaudio script, 2869 set kill timeout 2870 - store: add support for resume in DownloadStream 2871 - cmd/snap: implement 'snap remove-user' 2872 - overlord/devicestate: fix preseed unit tests on systems not using 2873 /snap 2874 - tests/main/static: ldd in glibc 2.31 logs to stderr now 2875 - run-checks, travis: allow skipping spread jobs by adding a label 2876 - tests: add new backend which includes images with tpm support 2877 - boot: use constants for boot status values 2878 - tests: add "core" suite for UC specific tests 2879 - tests/lib/prepare: use a local copy of uc20 initramfs skeleton 2880 - tests: retry mounting the udisk2 device due to timing issue 2881 - usersession/client: add a client library for the user session 2882 agent 2883 - o/devicestate: Handle preseed mode in the firstboot mode (core16 2884 only for now). 2885 - boot: add TryBase and BaseStatus to modeenv; use in snap-bootstrap 2886 - cmd/snap-confine: detect base transitions on core16 2887 - boot: don't use "kernel" from the modeenv anymore 2888 - interfaces: add uio interface 2889 - tests: repack the initramfs + kernel snap for UC20 spread tests 2890 - interfaces/greengrass-support: add /dev/null -> 2891 /proc/latency_stats mount 2892 - httputil: remove workaround for redirect handling in go1.7 2893 - httputil: remove go1.6 transport workaround 2894 - snap: add `snap pack --compression=<comp>` options 2895 - tests/lib/prepare: fix hardcoded loopback device names for UC 2896 images 2897 - timeutil: add a unit test case for trivial schedule 2898 - randutil,o/snapstate,-mkauthors.sh: follow ups to randutil 2899 introduction 2900 - dirs: variable with distros using alternate snap mount 2901 - many,randutil: centralize and streamline our random value 2902 generation 2903 - tests/lib/prepare-restore: Revert "Continue on errors updating or 2904 installing dependencies" 2905 - daemon: Allow clients to call /v2/logout via Polkit 2906 - dirs: manjaro-arm is like manjaro 2907 - data, packaging: Add sudoers snippet to allow snaps to be run with 2908 sudo 2909 - daemon, store: better expose single action errors 2910 - tests: switch mount-ns test to differential data set 2911 - snapstate: refactor things to add the re-refresh task last 2912 - daemon: drop support for the DELETE method 2913 - client: move to /v2/users; implement RemoveUser 2914 - boot: enable UC20 kernel extraction and bootState20 handling 2915 - interfaces/policy: enforce plug-names/slot-names constraints 2916 - asserts: parse plug-names/slot-names constraints 2917 - daemon: make users result more consistent 2918 - cmd/snap-confine,tests: support x.y.z nvidia version 2919 - dirs: fixlet for XdgRuntimeDirGlob 2920 - boot: add bootloader options to coreKernel 2921 - o/auth,daemon: do not remove unknown user 2922 - tests: tweak and enable tests on ubuntu 20.04 2923 - daemon: implement user removal 2924 - cmd/snap-confine: allow snap-confine to link to libpcre2 2925 - interfaces/builtin: Allow NotificationReplied signal on 2926 org.freedesktop.Notifications 2927 - overlord/auth: add RemoveUserByName 2928 - client: move user-related things to their own files 2929 - boot: tweak kernel cmdline helper docstring 2930 - osutil: implement deluser 2931 - gadget: skip update when raw structure content is unchanged 2932 - boot, cmd/snap, cmd/snap-bootstrap: move run mode and system label 2933 detection to boot 2934 - tests: fix revisions leaking from snapd-refresh test 2935 - daemon: refactor create-user to a user action & hide behind a flag 2936 - osutil/tests: check there are no leftover symlinks with 2937 AtomicSymlink 2938 - grub: support atomically renaming kernel symlinks 2939 - osutil: add helpers for creating symlinks and renaming in an 2940 atomic manner 2941 - tests: add marker tag for core 20 test failure 2942 - tests: fix gadget-update-pc test leaking snaps 2943 - tests: remove revision leaking from ubuntu-core-refresh 2944 - tests: remove revision leaking from remodel-kernel 2945 - tests: disable system-usernames test on core20 2946 - travis, tests, run-checks: skip nakedret 2947 - tests: run `uc20-snap-recovery-encrypt` test on 20.04-64 as well 2948 - tests: update mount-ns test tables 2949 - snap: disable auto-import in uc20 install-mode 2950 - tests: add a command-chain service test 2951 - tests: use test-snapd-upower instead of upower 2952 - data/selinux: workaround incorrect fonts cache labeling on RHEL7 2953 - spread.yaml: fix ubuntu 19.10 and 20.04 names 2954 - debian: check embedded keys for snap-{bootstrap,preseed} too 2955 - interfaces/apparmor: fix doc-comments, unnecessary code 2956 - o/ifacestate,o/devicestatate: merge gadget-connect logic into 2957 auto-connect 2958 - bootloader: add ExtractedRunKernelImageBootloader interface, 2959 implement in grub 2960 - tests: add spread test for hook permissions 2961 - cmd/snap-bootstrap: check device size before boostrapping and 2962 produce a meaningful error 2963 - cmd/snap: add ability to register "snap routine" commands 2964 - tests: add a test demonstrating that snaps can't access the 2965 session agent socket 2966 - api: don't return connections referring to non-existing 2967 plugs/slots 2968 - interfaces: refactor path() from raw-volume into utils with 2969 comments for old 2970 - gitignore: ignore snap files 2971 - tests: skip interfaces-network-manager on arm devices 2972 - o/devicestate: do not create perfTimings if not needed inside 2973 ensureSeed/Operational 2974 - tests: add ubuntu 20.04 to the tests execution and remove 2975 tumbleweed from unstable 2976 - usersession: add systemd user instance service control to user 2977 session agent 2978 - cmd/snap: print full channel in 'snap list', 'snap info' 2979 - tests: remove execution of ubuntu 19.04 from google backend 2980 - cmd/snap-boostrap: add mocking for fakeroot 2981 - tests/core18/snapd-failover: collect more debug info 2982 - many: run black formatter on all python files 2983 - overlord: increase settle timeout for slow machines 2984 - httputil: use shorter timeout in TestRetryRequestTimeoutHandling 2985 - store, o/snapstate: send default-tracks header, use 2986 RedirectChannel 2987 - overlord/standby: fix possible deadlock in standby test 2988 - cmd/snap-discard-ns: fix pattern for .info files 2989 - boot: add HasModeenv to Device 2990 - devicestate: do not allow remodel between core20 models 2991 - bootloader,snap: misc tweaks 2992 - store, overlord/snapstate, etc: SnapAction now returns a []…Result 2993 - snap-bootstrap: create encrypted partition 2994 - snap: remove "host" output from `snap version` 2995 - tests: use snap remove --purge flag in most of the spread tests 2996 - data/selinux, test/main/selinux-clean: update the test to cover 2997 more scenarios 2998 - many: drop NameAndRevision, use snap.PlaceInfo instead 2999 - boot: split MakeBootable tests into their own file 3000 - travis-ci: add go import path 3001 - boot: split MakeBootable implementations into their own file 3002 - tests: enable a lot of the tests of main on uc20 3003 - packaging, tests: stop services in prerm 3004 - tests: enable regression suite on core20 3005 - overlord/snapstate: improve snapd snap backend link unit tests 3006 - boot: implement SetNextBoot in terms of bootState.setNext 3007 - wrappers: write and undo snapd services on core 3008 - boot,o/devicestate: refactor MarkBootSuccessful over bootState 3009 - snap-bootstrap: mount the correct snapd snap to /run/mnt/snapd 3010 - snap-bootstrap: refactor partition creation 3011 - tests: use new snapd.spread-tests-run-mode-tweaks.service unit 3012 - tests: add core20 tests 3013 - boot,o/snapstate: SetNextBoot/LinkSnap return whether to reboot, 3014 use the information 3015 - tests/main/snap-sign: add test for non-stdin signing 3016 - snap-bootstrap: trigger udev after filesystem creation 3017 - boot,overlord: introduce internal abstraction bootState and use it 3018 for InUse/GetCurrentBoot 3019 - overlord/snapstate: tracks are now sticky 3020 - cmd: sign: add filename param 3021 - tests: remove "test-snapd-tools" in smoke/sandbox on restore 3022 - cmd/snap, daemon: stop over-normalising channels 3023 - tests: fix classic-ubuntu-core-transition-two-cores after refactor 3024 of MATCH -v 3025 - packaging: ship var/lib/snapd/desktop/applications in the pkg 3026 - spread: drop copr repo with F30 build dependencies 3027 - tests: use test-snapd-sh snap instead of test-snapd-tools - Part 3 3028 - tests: fix partition creation test 3029 - tests: unify/rename services-related spread tests to start with 3030 services- prefix 3031 - test: extract code that modifies "writable" for test prep 3032 - systemd: handle preseed mode 3033 - snap-bootstrap: read only stdout when parsing the sfdisk json 3034 - interfaces/browser-support: add more product/vendor paths 3035 - boot: write compat UC16 bootvars in makeBootable20RunMode 3036 - devicestate: avoid adding mockModel to deviceMgrInstallModeSuite 3037 - devicestate: request reboot after successful doSetupRunSystem() 3038 - snapd.core-fixup.sh: do not run on UC20 at all 3039 - tests: unmount automounted snap-bootstrap devices 3040 - devicestate: run boot.MakeBootable in doSetupRunSystem 3041 - boot: copy kernel/base to data partition in makeBootable20RunMode 3042 - tests: also check nested lxd container 3043 - run-checks: complain about MATCH -v 3044 - boot: always return the trivial boot participant in ephemeral mode 3045 - o/devicestate,o/snapstate: move the gadget.yaml checkdrive-by: use 3046 gadget.ReadInfoFromSnapFile in checkGadgetRemodelCompatible 3047 - snap-bootstrap: append new partitions 3048 - snap-bootstrap: mount filesystems after creation 3049 - snapstate: do not try to detect rollback in ephemeral modes 3050 - snap-bootstrap: trigger udev for new partitions 3051 - cmd/snap-bootstrap: xxx todos about kernel cross-checks 3052 - tests: avoid mask rsyslog service in case is not enabled on the 3053 system 3054 - tests: fix use of MATCH -v 3055 - cmd/snap-preseed: update help strings 3056 - cmd/snap-bootstrap: actually parse snapd_recovery_system label 3057 - bootstrap: reduce runmode mounts from 5 to 2 steps. 3058 - lkenv.go: adjust for new location of include file 3059 - snap: improve squashfs.ReadFile() error 3060 - systemd: fix uc20 shutdown 3061 - boot: write modeenv when creating the run mode 3062 - boot,image: add skeleton boot.makeBootable20RunMode 3063 - cmd/snap-preseed: add snap-preseed executable 3064 - overlord,boot: follow ups to #7889 and #7899 3065 - interfaces/wayland: Add access to Xwayland's shm files 3066 - o/hookstate/ctlcmd: fix command name in snapctl -h 3067 - daemon,snap: remove screenshot deprecation notice 3068 - overlord,o/snapstate: make sure we never leave config behind 3069 - many: pass consistently boot.Device state to boot methods 3070 - run-checks: check multiline string blocks in 3071 restore/prepare/execute sections of spread tests 3072 - intrefaces: login-session-control - added missing dbus commands 3073 - tests/main/parallel-install-remove-after: parallel installs should 3074 not break removal 3075 - overlord/snapstate: tweak assumes error hint 3076 - overlord: replace DeviceContext.OldModel with GroundContext 3077 - devicestate: use httputil.ShouldRetryError() in 3078 prepareSerialRequest 3079 - tests: replace "test-snapd-base-bare" with real "bare" base snap 3080 - many: pass a Model to the gadget info reading functions 3081 - snapstate: relax gadget constraints in ConfigDefaults Et al. 3082 - devicestate: only run ensureBootOk() in "run" mode 3083 - tests/many: quiet lxc launching, file pushing 3084 - tests: disable apt-hooks test until it can be properly fixed 3085 - tests: 16.04 and 18.04 now have mediating pulseaudio 3086 3087 -- Michael Vogt <michael.vogt@ubuntu.com> Tue, 17 Mar 2020 20:55:47 +0100 3088 3089 snapd (2.43.3-1) unstable; urgency=medium 3090 3091 * New upstream release, LP: #1856159 3092 - interfaces/opengl: allow datagrams to nvidia-driver 3093 - httputil: add NoNetwork(err) helper, spread test and use 3094 in serial acquire 3095 - interfaces: add uio interface 3096 - interfaces/greengrass-support: 'aws-iot-greengrass' snap fails to 3097 start due to apparmor deny on mounting of "/proc/latency_stats". 3098 - data, packaging: Add sudoers snippet to allow snaps to be run with 3099 sudo 3100 3101 -- Michael Vogt <michael.vogt@ubuntu.com> Wed, 12 Feb 2020 14:59:15 +0100 3102 3103 snapd (2.43.2-1) unstable; urgency=medium 3104 3105 * New upstream release, LP: #1856159 3106 - cmd/snap-confine: Revert #7421 (unmount /writable from snap view) 3107 - overlord/snapstate: fix for re-refresh bug 3108 - tests, run-checks, many: fix nakedret issues 3109 - data/selinux: workaround incorrect fonts cache labeling on RHEL7 3110 - tests: use test-snapd-upower instead of upower 3111 - overlord: increase overall settle timeout for slow arm boards 3112 3113 -- Michael Vogt <michael.vogt@ubuntu.com> Tue, 28 Jan 2020 15:50:25 +0100 3114 3115 snapd (2.43.1-1) unstable; urgency=medium 3116 3117 * New upstream release, LP: #1856159 3118 - devicestate: use httputil.ShouldRetryError() in prepareSerialRequest 3119 - overlord/standby: fix possible deadlock in standby test 3120 - cmd/snap-discard-ns: fix pattern for .info files 3121 - overlord,o/snapstate: make sure we never leave config behind 3122 - data/selinux: update policy to cover more cases 3123 - snap: remove "host" output from `snap version` 3124 3125 -- Michael Vogt <michael.vogt@ubuntu.com> Tue, 14 Jan 2020 20:30:07 +0100 3126 3127 snapd (2.43-1) unstable; urgency=medium 3128 3129 * New upstream release 3130 3131 -- Michael Vogt <michael.vogt@ubuntu.com> Thu, 09 Jan 2020 17:16:12 +0100 3132 3133 snapd (2.42.5-1) unstable; urgency=medium 3134 3135 * New upstream release, LP: #1853244 3136 - snap-confine: revert, with comment, explicit unix deny for nested 3137 lxd 3138 - Disable mount-ns test on 16.04. It is too flaky currently. 3139 3140 -- Michael Vogt <michael.vogt@ubuntu.com> Fri, 06 Dec 2019 14:10:56 +0100 3141 3142 snapd (2.42.4-1) unstable; urgency=medium 3143 3144 * New upstream release, LP: #1853244 3145 - overlord/snapstate: make sure configuration defaults are applied 3146 only once 3147 3148 -- Michael Vogt <michael.vogt@ubuntu.com> Thu, 28 Nov 2019 06:48:26 +0100 3149 3150 snapd (2.42.3-1) unstable; urgency=medium 3151 3152 * New upstream release, LP: #1853244 3153 - overlord/snapstate: pick up system defaults when seeding the snapd 3154 snap 3155 - cmd/snap-update-ns: fix overlapping, nested writable mimic 3156 handling 3157 - interfaces: misc updates for u2f-devices, browser-support, 3158 hardware-observe, et al 3159 - tests: reset failing "fwupd-refresh.service" if needed 3160 - tests/main/gadget-update-pc: use a program to modify gadget yaml 3161 - snap-confine: suppress noisy classic snap file_inherit denials 3162 3163 -- Michael Vogt <michael.vogt@ubuntu.com> Wed, 27 Nov 2019 12:41:07 +0100 3164 3165 snapd (2.42.2-1) unstable; urgency=medium 3166 3167 * New upstream release, LP: #1853244 3168 - interfaces/lxd-support: Fix on core18 3169 - tests/main/system-usernames: Amazon Linux 2 comes with libseccomp 3170 2.4.1 now 3171 - snap-seccomp: add missing clock_getres_time64 3172 - cmd/snap-seccomp/syscalls: update the list of known 3173 syscalls 3174 - sandbox/seccomp: accept build ID generated by Go toolchain 3175 - interfaces: allow access to ovs bridge sockets 3176 3177 -- Michael Vogt <michael.vogt@ubuntu.com> Wed, 20 Nov 2019 08:09:15 +0100 3178 3179 snapd (2.42.1-1) unstable; urgency=medium 3180 3181 * New upstream release, LP: #1846181 3182 - interfaces: de-duplicate emitted update-ns profiles 3183 - packaging: tweak handling of usr.lib.snapd.snap-confine 3184 - interfaces: allow introspecting network-manager on core 3185 - tests/main/interfaces-contacts-service: disable on openSUSE 3186 Tumbleweed 3187 - tests/lib/lxd-snapfuse: restore mount changes introduced by LXD 3188 - snap: fix default-provider in seed validation 3189 - tests: update system-usernames test now that opensuse-15.1 works 3190 - overlord: set fake sertial in TestRemodelSwitchToDifferentKernel 3191 - gadget: rename "boot{select,img}" -> system-boot-{select,image} 3192 - tests: listing test, make accepted snapd/core versions consistent 3193 3194 -- Michael Vogt <michael.vogt@ubuntu.com> Wed, 30 Oct 2019 13:17:43 +0100 3195 3196 snapd (2.42-1) unstable; urgency=medium 3197 3198 * New upstream release 3199 3200 -- Michael Vogt <michael.vogt@ubuntu.com> Tue, 01 Oct 2019 11:40:58 +0200 3201 3202 snapd (2.41-1) unstable; urgency=medium 3203 3204 [ Michael Vogt ] 3205 * New upstream release, LP: #1840740 3206 3207 [ Jamie Strandboge ] 3208 * debian/control: Depends on apparmor >= 2.10.95-5 instead of 3209 2.10.95-0ubuntu2.2 since 2.10.95-5 in Debian is the first version to have 3210 all the patches that 2.10.95-0ubuntu2.2 in Ubuntu brought. 3211 3212 -- Michael Vogt <michael.vogt@ubuntu.com> Fri, 30 Aug 2019 08:53:57 +0200 3213 3214 snapd (2.40-1) unstable; urgency=medium 3215 3216 * New upstream release. 3217 3218 -- Michael Vogt <mvo@debian.org> Tue, 23 Jul 2019 15:38:36 +0200 3219 3220 snapd (2.39.3-1) unstable; urgency=medium 3221 3222 * New upstream release, LP: #1827495 3223 - daemon: increase `shutdownTimeout` to 25s to deal with slow HW 3224 - spread: run tests against openSUSE 15.1 3225 - data/selinux: fix policy for snaps with bases and classic snaps 3226 3227 -- Michael Vogt <michael.vogt@ubuntu.com> Fri, 21 Jun 2019 09:06:01 +0200 3228 3229 snapd (2.39.2-1) unstable; urgency=medium 3230 3231 * New upstream release, LP: #1827495 3232 - debian: rework how we run autopkgtests 3233 - interfaces/docker-support: add overlayfs accesses for ubuntu core 3234 - data/selinux: permit init_t to remount snappy_snap_t 3235 - strutil/shlex: fix ineffassign 3236 - packaging: fix build-depends on powerpc 3237 3238 -- Michael Vogt <michael.vogt@ubuntu.com> Wed, 05 Jun 2019 08:46:14 +0200 3239 3240 snapd (2.39-1) unstable; urgency=medium 3241 3242 * New upstream release 3243 * d/patches0008-snap-squashsh-skip-TestBuildDate-on-Debian.patch: drop, 3244 fixed upstream 3245 3246 -- Zygmunt Krynicki <me@zygoon.pl> Thu, 28 Feb 2019 18:21:26 +0100 3247 3248 snapd (2.39.1-1) unstable; urgency=medium 3249 3250 * New upstream release 3251 3252 -- Michael Vogt <michael.vogt@ubuntu.com> Wed, 29 May 2019 12:08:43 +0200 3253 3254 snapd (2.38-1) unstable; urgency=medium 3255 3256 * New upstream release 3257 3258 -- Michael Vogt <michael.vogt@ubuntu.com> Thu, 21 Mar 2019 11:02:04 +0100 3259 3260 snapd (2.37.4-1) unstable; urgency=medium 3261 3262 * New upstream release 3263 * d/patches0008-snap-squashsh-skip-TestBuildDate-on-Debian.patch: drop, 3264 fixed upstream 3265 3266 -- Zygmunt Krynicki <me@zygoon.pl> Thu, 28 Feb 2019 18:21:26 +0100 3267 3268 snapd (2.37.3-1) unstable; urgency=medium 3269 3270 * New upstream release 3271 3272 -- Zygmunt Krynicki <me@zygoon.pl> Tue, 19 Feb 2019 13:46:24 +0100 3273 3274 snapd (2.37.2-1) unstable; urgency=medium 3275 3276 * New upstream releease. 3277 3278 -- Michael Hudson-Doyle <mwhudson@debian.org> Thu, 07 Feb 2019 21:26:34 +1300 3279 3280 snapd (2.37.1-1) unstable; urgency=medium 3281 3282 * New upstream release. 3283 * d/patches/0009-interfaces-apparmor-mock-presence-of-overlayfs-root.patch: 3284 applied upstream 3285 3286 -- Zygmunt Krynicki <me@zygoon.pl> Tue, 29 Jan 2019 19:24:35 +0100 3287 3288 snapd (2.37-3) unstable; urgency=medium 3289 3290 * Fix --no-arch-any build. 3291 3292 -- Michael Hudson-Doyle <mwhudson@debian.org> Thu, 24 Jan 2019 16:11:17 +1300 3293 3294 snapd (2.37-2) unstable; urgency=medium 3295 3296 * d/patches/0010-man-page-sections.patch: fix a couple of instances of the 3297 lintian warning 'manpage-section-mismatch'. 3298 3299 -- Michael Hudson-Doyle <mwhudson@debian.org> Thu, 24 Jan 2019 09:52:09 +1300 3300 3301 snapd (2.37-1) unstable; urgency=medium 3302 3303 [ Michael Hudson-Doyle ] 3304 * New upstream version. 3305 * d/control: make myself Maintainer, use my Debian address, update Vcs-* to 3306 point to salsa. 3307 * Add new build-dependencies. 3308 * d/watch: update to download new upstream-provided no-vendor tarballs. 3309 * d/patches: refresh/drop. 3310 * d/patches/no-snapfuse.patch: do not depend on snapfuse fork of squashfuse. 3311 * d/patches/upstram-bolt.patch: use upstream version of boltdb. 3312 * d/patches/systemd-activation-compat.patch: compatibility for the 3313 newer go-systemd in debian 3314 3315 [ Ondřej Nový ] 3316 * d/copyright: Use https protocol in Format field 3317 * d/changelog: Remove trailing whitespaces 3318 3319 [ Zygmunt Krynicki ] 3320 * Update unreleased package to 2.37 3321 * Drop and recreate all patches 3322 * Add patches for failing unit tests 3323 * Reconcile packaging with snapd upstream 3324 3325 -- Zygmunt Krynicki <me@zygoon.pl> Tue, 22 Jan 2019 12:39:58 +0100 3326 3327 snapd (2.30-5) unstable; urgency=medium 3328 3329 * Team upload. 3330 * add fix-pkg-config-line.patch to fix FTBFS 3331 * Set XS-Go-Import-Path 3332 3333 -- Michael Stapelberg <stapelberg@debian.org> Sat, 10 Feb 2018 23:18:15 +0100 3334 3335 snapd (2.30-4) unstable; urgency=medium 3336 3337 * Fix Built-Using computation on Debian. 3338 * Add d/patches/disable-TestDoRequestSerialErrorsOnNoHost.patch to disable 3339 a flaky test. 3340 3341 -- Michael Hudson-Doyle <mwhudson@debian.org> Tue, 16 Jan 2018 13:02:31 +1300 3342 3343 snapd (2.30-3) unstable; urgency=medium 3344 3345 * Fix arch builds again, sigh, 3346 3347 -- Michael Hudson-Doyle <mwhudson@debian.org> Tue, 09 Jan 2018 13:56:48 +1300 3348 3349 snapd (2.30-2) unstable; urgency=medium 3350 3351 * Fix arch-all-only build. (Closes: 886431) 3352 3353 -- Michael Hudson-Doyle <mwhudson@debian.org> Tue, 09 Jan 2018 10:48:20 +1300 3354 3355 snapd (2.30-1) unstable; urgency=medium 3356 3357 * New upstream release. 3358 * Remove several patches: 3359 - 0001-osutil-adjust-StreamCommand-tests-for-golang-1.9.patch: included in 3360 release. 3361 - apparmor-compat.patch, no-reexec-on-debian.patch: Removed as upstream 3362 now implements a better solution to the problem. 3363 - pb.v1-canonical-path.patch: applied upstream. 3364 * Stop installing udev/rules.d/80-snappy-assign.rules, gone upstream 3365 3366 -- Michael Hudson-Doyle <mwhudson@debian.org> Fri, 05 Jan 2018 09:39:07 +1300 3367 3368 snapd (2.28.5) xenial; urgency=medium 3369 3370 * New upstream release, LP: #1714984 3371 - snap-confine: cleanup broken nvidia udev tags 3372 - cmd/snap-confine: update valid security tag regexp 3373 - overlord/ifacestate: refresh udev backend on startup 3374 - dbus: ensure io.snapcraft.Launcher.service is created on re- 3375 exec 3376 - snap-confine: add support for handling /dev/nvidia-modeset 3377 - interfaces/network-control: remove incorrect rules for tun 3378 3379 -- Michael Vogt <michael.vogt@ubuntu.com> Fri, 13 Oct 2017 23:25:46 +0200 3380 3381 snapd (2.28.4) xenial; urgency=medium 3382 3383 * New upstream release, LP: #1714984 3384 - interfaces/opengl: don't udev tag nvidia devices and use snap- 3385 confine instead 3386 - debian: fix replaces/breaks for snap-xdg-open (thanks to apw!) 3387 3388 -- Michael Vogt <michael.vogt@ubuntu.com> Wed, 11 Oct 2017 19:40:57 +0200 3389 3390 snapd (2.28.3) xenial; urgency=medium 3391 3392 * New upstream release, LP: #1714984 3393 - interfaces/lxd: lxd slot implementation can also be an app 3394 snap 3395 3396 -- Michael Vogt <michael.vogt@ubuntu.com> Wed, 11 Oct 2017 08:20:26 +0200 3397 3398 snapd (2.28.2) xenial; urgency=medium 3399 3400 * New upstream release, LP: #1714984 3401 - interfaces: fix udev rules for tun 3402 - release,cmd,dirs: Redo the distro checks to take into account 3403 distribution families 3404 3405 -- Michael Vogt <michael.vogt@ubuntu.com> Tue, 10 Oct 2017 18:39:58 +0200 3406 3407 snapd (2.28.1) xenial; urgency=medium 3408 3409 * New upstream release, LP: #1714984 3410 - snap-confine: update apparmor rules for fedora based basesnaps 3411 - snapstate: rename refresh hook to post-refresh for consistency 3412 3413 -- Michael Vogt <michael.vogt@ubuntu.com> Wed, 27 Sep 2017 17:59:49 -0400 3414 3415 snapd (2.28) xenial; urgency=medium 3416 3417 * New upstream release, LP: #1714984 3418 - hooks: rename refresh to after-refresh 3419 - snap-confine: bind mount /usr/lib/snapd relative to snap-confine 3420 - cmd,dirs: treat "liri" the same way as "arch" 3421 - snap-confine: fix base snaps on core 3422 - hooks: substitute env vars when executing hooks 3423 - interfaces: updates for default, browser-support, desktop, opengl, 3424 upower and stub-resolv.conf 3425 - cmd,dirs: treat manjaro the same as arch 3426 - systemd: do not run auto-import and repair services on classic 3427 - packaging/fedora: Ensure vendor/ is empty for builds and fix spec 3428 to build current master 3429 - many: fix TestSetConfNumber missing an Unlock and other fragility 3430 improvements 3431 - osutil: adjust StreamCommand tests for golang 1.9 3432 - daemon: allow polkit authorisation to install/remove snaps 3433 - tests: make TestCmdWatch more robust 3434 - debian: improve package description 3435 - interfaces: add netlink kobject uevent to hardware observe 3436 - debian: update trusted account-keys check on 14.04 packaging 3437 - interfaces/network-{control,observe}: allow receiving 3438 kobject_uevent() messages 3439 - tests: fix lxd test for external backend 3440 - snap-confine,snap-update-ns: add -no-pie to fix FTBFS on 3441 go1.7,ppc64 3442 - corecfg: mock "systemctl" in all corecfg tests 3443 - tests: fix unit tests on Ubuntu 14.04 3444 - debian: add missing flags when building static snap-exec 3445 - many: end-to-end support for the bare base snap 3446 - overlord/snapstate: SetRootDir from SetUpTest, not in just some 3447 tests 3448 - store: have an ad-hoc method on cfg to get its list of uris for 3449 tests 3450 - daemon: let client decide whether to allow interactive auth via 3451 polkit 3452 - client,daemon,snap,store: add license field 3453 - overlord/snapstate: rename HasCurrent to IsInstalled, remove 3454 superfluous/misleading check from All 3455 - cmd/snap: SetRootDir from SetUpTest, not in just some individual 3456 tests. 3457 - systemd: rename snap-repair.{service,timer} to snapd.snap- 3458 repair.{service,timer} 3459 - snap-seccomp: remove use of x/net/bpf from tests 3460 - httputil: more naive per go version way to recreate a default 3461 transport for tls reconfig 3462 - cmd/snap-seccomp/main_test.go: add one more syscall for arm64 3463 - interfaces/opengl: use == to compare, not = 3464 - cmd/snap-seccomp/main_test.go: add syscalls for armhf and arm64 3465 - cmd/snap-repair: track and use a lower bound for the time for 3466 TLS checks 3467 - interfaces: expose bluez interface on classic OS 3468 - snap-seccomp: add in-kernel bpf tests 3469 - overlord: always try to get a serial, lazily on classic 3470 - tests: add nmcli regression test 3471 - tests: deal with __PNR_chown on aarch64 to fix FTBFS on arm64 3472 - tests: add autopilot-introspection interface test 3473 - vendor: fix artifact from manually editing vendor/vendor.json 3474 - tests: rename complexion to test-snapd-complexion 3475 - interfaces: add desktop and desktop-legacy 3476 interfaces/desktop: add new 'desktop' interface for modern DEs 3477 interfaces/builtin/desktop_test.go: use modern testing techniques 3478 interfaces/wayland: allow read on /etc/drirc for Plasma desktop 3479 interfaces/desktop-legacy: add new 'legacy' interface (currently 3480 for a11y and input) 3481 - tests: fix race in snap userd test 3482 - devices/iio: add read/write for missing sysfs entries 3483 - spread: don't set HTTPS?_PROXY for linode 3484 - cmd/snap-repair: check signatures of repairs from Next 3485 - env: set XDG_DATA_DIRS for wayland et.al. 3486 - interfaces/{default,account-control}: Use username/group instead 3487 of uid/gid 3488 - interfaces/builtin: use udev tagging more broadly 3489 - tests: add basic lxd test 3490 - wrappers: ensure bash completion snaps install on core 3491 - vendor: use old golang.org/x/crypto/ssh/terminal to build on 3492 powerpc again 3493 - docs: add PULL_REQUEST_TEMPLATE.md 3494 - interfaces: fix network-manager plug 3495 - hooks: do not error out when hook is optional and no hook handler 3496 is registered 3497 - cmd/snap: add userd command to replace snapd-xdg-open 3498 - tests: new regex used to validate the core version on extra snaps 3499 ass... 3500 - snap: add new `snap switch` command 3501 - tests: wait more and more debug info about fakestore start issues 3502 - apparmor,release: add better apparmor detection/mocking code 3503 - interfaces/i2c: adjust sysfs rule for alternate paths 3504 - interfaces/apparmor: add missing call to dirs.SetRootDir 3505 - cmd: "make hack" now also installs snap-update-ns 3506 - tests: copy files with less verbosity 3507 - cmd/snap-confine: allow using additional libraries required by 3508 openSUSE 3509 - packaging/fedora: Merge changes from Fedora Dist-Git 3510 - snapstate: improve the error message when classic confinement is 3511 not supported 3512 - tests: add test to ensure amd64 can run i386 syscall binaries 3513 - tests: adding extra info for fakestore when fails to start 3514 - tests: install most important snaps 3515 - cmd/snap-repair: more test coverage of filtering 3516 - squashfs: remove runCommand/runCommandWithOutput as we do not need 3517 it 3518 - cmd/snap-repair: ignore superseded revisions, filter on arch and 3519 models 3520 - hooks: support for refresh hook 3521 - Partial revert "overlord/devicestate, store: update device auth 3522 endpoints URLs" 3523 - cmd/snap-confine: allow reading /proc/filesystems 3524 - cmd/snap-confine: genearlize apparmor profile for various lib 3525 layout 3526 - corecfg: fix proxy.* writing and add integration test 3527 - corecfg: deal with system.power-key-action="" correctly 3528 - vendor: update vendor.json after (presumed) manual edits 3529 - cmd/snap: in `snap info`, don't print a newline between tracks 3530 - daemon: add polkit support to /v2/login 3531 - snapd,snapctl: decode json using Number 3532 - client: fix go vet 1.7 errors 3533 - tests: make 17.04 shellcheck clean 3534 - tests: remove TestInterfacesHelp as it breaks when go-flags 3535 changes 3536 - snapstate: undo a daemon restart on classic if needed 3537 - cmd/snap-repair: recover brand/model from 3538 /var/lib/snapd/seed/assertions checking signatures and brand 3539 account 3540 - spread: opt into unsafe IO during spread tests 3541 - snap-repair: update snap-repair/runner_test.go for API change in 3542 makeMockServer 3543 - cmd/snap-repair: skeleton code around actually running a repair 3544 - tests: wait until the port is listening after start the fake store 3545 - corecfg: fix typo in tests 3546 - cmd/snap-repair: test that redirects works during fetching 3547 - osutil: honor SNAPD_UNSAFE_IO for testing 3548 - vendor: explode and make more precise our golang.go/x/crypto deps, 3549 use same version as Debian unstable 3550 - many: sanitize NewStoreStack signature, have shared default store 3551 test private keys 3552 - systemd: disable `Nice=-5` to fix error when running inside lxd 3553 - spread.yaml: update delta ref to 2.27 3554 - cmd/snap-repair: use E-Tags when refetching a repair to retry 3555 - interfaces/many: updates based on chromium and mrrescue denials 3556 - cmd/snap-repair: implement most logic to get the next repair to 3557 run/retry in a brand sequence 3558 - asserts/assertstest: copy headers in SigningDB.Sign 3559 - interfaces: convert uhid to common interface and test cases 3560 improvement for time_control and opengl 3561 - many tests: move all panicing fake store methods to a common place 3562 - asserts: add store assertion type 3563 - interfaces: don't crash if content slot has no attributes 3564 - debian: do not build with -buildmode=pie on i386 3565 - wrappers: symlink completion snippets when symlinking binaries 3566 - tests: adding more debug information for the interfaces-cups- 3567 control … 3568 - apparmor: pass --quiet to parser on load unless SNAPD_DEBUG is set 3569 - many: allow and support serials signed by the 'generic' authority 3570 instead of the brand 3571 - corecfg: add proxy configuration via `snap set core 3572 proxy.{http,https,ftp}=...` 3573 - interfaces: a bunch of interfaces test improvement 3574 - tests: enable regression and completion suites for opensuse 3575 - tests: installing snapd for nested test suite 3576 - interfaces: convert lxd_support to common iface 3577 - interfaces: add missing test for camera interface. 3578 - snap: add support for parsing snap layout section 3579 - cmd/snap-repair: like for downloads we cannot have a timeout (at 3580 least for now), less aggressive retry strategies 3581 - overlord: rely on more conservative ensure interval 3582 - overlord,store: no piles of return args for methods gathering 3583 device session request params 3584 - overlord,store: send model assertion when setting up device 3585 sessions 3586 - interfaces/misc: updates for unity7/x11, browser- 3587 support, network-control and mount-observe 3588 interfaces/unity7,x11: update for NETLINK_KOBJECT_UEVENT 3589 interfaces/browser-support: update sysfs reads for 3590 newer browser versions, interfaces/network-control: rw for 3591 ieee80211 advanced wireless interfaces/mount-observe: allow read 3592 on sysfs entries for block devices 3593 - tests: use dnf --refresh install to avert stale cache 3594 - osutil: ensure TestLockUnlockWorks uses supported flock 3595 - interfaces: convert lxd to common iface 3596 - tests: restart snapd to ensure re-exec settings are applied 3597 - tests: fix interfaces-cups-control test 3598 - interfaces: improve and tweak bunch of interfaces test cases. 3599 - tests: adding extra worker for fedora 3600 - asserts,overlord/devicestate: support predefined assertions that 3601 don't establish foundational trust 3602 - interfaces: convert two hardware_random interfaces to common iface 3603 - interfaces: convert io_ports_control to common iface 3604 - tests: fix for upgrade test on fedora 3605 - daemon, client, cmd/snap: implement snap start/stop/restart 3606 - cmd/snap-confine: set _FILE_OFFSET_BITS to 64 3607 - interfaces: covert framebuffer to commonInterface 3608 - interfaces: convert joystick to common iface 3609 - interfaces/builtin: add the spi interface 3610 - wrappers, overlord/snapstate/backend: make link-snap clean up on 3611 failure. 3612 - interfaces/wayland: add wayland interface 3613 - interfaces: convert kvm to common iface 3614 - tests: extend upower-observe test to cover snaps providing slots 3615 - tests: enable main suite for opensuse 3616 - interfaces: convert physical_memory_observe to common iface 3617 - interfaces: add missing test for optical_drive interface. 3618 - interfaces: convert physical_memory_control to common iface 3619 - interfaces: convert ppp to common iface 3620 - interfaces: convert time-control to common iface 3621 - tests: fix failover test 3622 - interfaces/builtin: rework for avahi interface 3623 - interfaces: convert broadcom-asic-control to common iface 3624 - snap/snapenv: document the use of CoreSnapMountDir for SNAP 3625 - packaging/arch: drop patches merged into master 3626 - cmd: fix mustUnsetenv docstring (thanks to Chipaca) 3627 - release: remove default from VERSION_ID 3628 - tests: enable regression, upgrade and completion test suites for 3629 fedora 3630 - tests: restore interfaces-account-control properly 3631 - overlord/devicestate, store: update device auth endpoints URLs 3632 - tests: fix install-hook test failure 3633 - tests: download core and ubuntu-core at most once 3634 - interfaces: add common support for udev 3635 - overlord/devicestate: fix, don't assume that the serial is backed 3636 by a 1-key chain 3637 - cmd/snap-confine: don't share /etc/nsswitch from host 3638 - store: do not resume a download when we already have the whole 3639 thing 3640 - many: implement "snap logs" 3641 - store: don't call useDeltas() twice in quick succession 3642 - interfaces/builtin: add kvm interface 3643 - snap/snapenv: always expect /snap for $SNAP 3644 - cmd: mark arch as non-reexecing distro 3645 - cmd: fix tests that assume /snap mount 3646 - gitignore: ignore more build artefacts 3647 - packaging: add current arch packaging 3648 - interfaces/unity7: allow receiving media key events in (at least) 3649 gnome-shell 3650 - interfaces/many, cmd/snap-confine: miscellaneous policy updates 3651 - interfaces/builtin: implement broadcom-asic-control interface 3652 - interfaces/builtin: reduce duplication and remove cruft in 3653 Sanitize{Plug,Slot} 3654 - tests: apply underscore convention for SNAPMOUNTDIR variable 3655 - interfaces/greengrass-support: adjust accesses now that have 3656 working snap 3657 - daemon, client, cmd/snap: implement "snap services" 3658 - tests: fix refresh tests not stopping fake store for fedora 3659 - many: add the interface command 3660 - overlord/snapstate/backend: some copydata improvements 3661 - many: support querying and completing assertion type names 3662 - interfaces/builtin: discard empty Validate{Plug,Slot} 3663 - cmd/snap-repair: start of Runner, implement first pass of Peek 3664 and Fetch 3665 - tests: enable main suite on fedora 3666 - snap: do not always quote the snap info summary 3667 - vendor: update go-flags to address crash in "snap debug" 3668 - interfaces: opengl support pci device and vendor 3669 - many: start implenting "base" snap type on the snapd side 3670 - arch,release: map armv6 correctly 3671 - many: expose service status in 'snap info' 3672 - tests: add browser-support interface test 3673 - tests: disable snapd-notify for the external backend 3674 - interfaces: Add /run/uuid/request to openvswitch 3675 - interfaces: add password-manager-service implicit classic 3676 interface 3677 - cmd: rework reexec detection 3678 - cmd: fix re-exec bug when starting from snapd 2.21 3679 - tests: dependency packages installed during prepare-project 3680 - tests: remove unneeded check for re-exec in InternalToolPath() 3681 - cmd,tests: fix classic confinement confusing re-execution code 3682 - store: configurable base api 3683 - tests: fix how package lists are updated for opensuse and fedora 3684 3685 -- Michael Vogt <michael.vogt@ubuntu.com> Mon, 25 Sep 2017 12:07:34 -0400 3686 3687 snapd (2.27.6-2) unstable; urgency=medium 3688 3689 * Add d/patches/0001-osutil-adjust-StreamCommand-tests-for-golang-1.9.patch 3690 to fix FTBFS with Go 1.9. (Closes: #876867) 3691 3692 -- Michael Hudson-Doyle <mwhudson@debian.org> Tue, 26 Sep 2017 13:41:53 -0400 3693 3694 snapd (2.27.6-1) unstable; urgency=medium 3695 3696 * New upstream release, LP: #1703798: 3697 - interfaces: add udev netlink support to hardware-observe 3698 - interfaces/network-{control,observe}: allow receiving 3699 kobject_uevent() messages 3700 3701 -- Zygmunt Krynicki <me@zygoon.pl> Fri, 08 Sep 2017 00:03:18 +0200 3702 3703 snapd (2.27.5-1) unstable; urgency=medium 3704 3705 * New upstream release. 3706 - interfaces: fix network-manager plug regression 3707 - hooks: do not error when hook handler is not registered 3708 - interfaces/alsa,pulseaudio: allow read on udev data for sound 3709 - interfaces/optical-drive: read access to udev data for /dev/scd* 3710 - interfaces/browser-support: read on /proc/vmstat and misc udev data 3711 3712 -- Zygmunt Krynicki <me@zygoon.pl> Thu, 31 Aug 2017 10:11:20 +0200 3713 3714 snapd (2.27.4-1) unstable; urgency=medium 3715 3716 * New upstream release. 3717 * Enable seccomp. 3718 3719 -- Michael Hudson-Doyle <michael.hudson@ubuntu.com> Thu, 24 Aug 2017 22:12:52 +1200 3720 3721 snapd (2.27.2-2) unstable; urgency=medium 3722 3723 * Fix re-exec test failure. 3724 3725 -- Michael Hudson-Doyle <michael.hudson@ubuntu.com> Fri, 18 Aug 2017 11:37:47 +1200 3726 3727 snapd (2.27.2-1) unstable; urgency=medium 3728 3729 * New upstream release. 3730 * Stop using single-debian-patch, split delta into separate patches. 3731 * Allow confining snap-confine even when --disable-apparmor is used. 3732 * Pass --enable-static-libcap to cmd/configure, as was always the intention. 3733 * Disable re-exec on Debian until core snap can cope with a partial apparmor 3734 implementation. (Closes: #851473) 3735 3736 -- Michael Hudson-Doyle <michael.hudson@ubuntu.com> Fri, 18 Aug 2017 11:00:31 +1200 3737 3738 snapd (2.27.1-1) unstable; urgency=medium 3739 3740 * New upstream release. (Closes: #868959, #869268, #872071) 3741 * New changes to upstream sources: 3742 - Disable cmd/snap-seccomp tests as they depend on an unpackaged fork of 3743 golang/x/net. 3744 - Use upstream version of libseccomp-golang. 3745 * Do not install ancient ubuntu-core-launcher symlink. 3746 3747 -- Michael Hudson-Doyle <michael.hudson@ubuntu.com> Mon, 14 Aug 2017 21:53:09 +1200 3748 3749 snapd (2.27.1) xenial; urgency=medium 3750 3751 * New upstream release, LP: #1703798: 3752 - tests: use dnf --refresh install to avert stale cache 3753 - tests: fix test failure on 14.04 due to old version of 3754 flock 3755 - updates for unity7/x11, browser-support, network-control, 3756 mount-observe 3757 - interfaces/unity7,x11: update for NETLINK_KOBJECT_UEVENT 3758 - interfaces/browser-support: update sysfs reads for 3759 newer browser versions 3760 - interfaces/network-control: rw for ieee80211 advanced wireless 3761 - interfaces/mount-observe: allow read on sysfs entries for block 3762 devices 3763 3764 -- Michael Vogt <michael.vogt@ubuntu.com> Mon, 14 Aug 2017 08:02:17 +0200 3765 3766 snapd (2.27) xenial; urgency=medium 3767 3768 * New upstream release, LP: #1703798 3769 - fix build failure on 32bit fedora 3770 - interfaces: add password-manager-service implicit classic interface 3771 - interfaces/greengrass-support: adjust accesses now that have working 3772 snap 3773 - interfaces/many, cmd/snap-confine: miscellaneous policy updates 3774 - interfaces/unity7: allow receiving media key events in (at least) 3775 gnome-shell 3776 - cmd: fix re-exec bug when starting from snapd 2.21 3777 - tests: restore interfaces-account-control properly 3778 - cmd: fix tests that assume /snap mount 3779 - cmd: mark arch as non-reexecing distro 3780 - snap-confine: don't share /etc/nsswitch from host 3781 - store: talk to api.snapcraft.io for purchases 3782 - hooks: support for install and remove hooks 3783 - packaging: fix Fedora support 3784 - tests: add bluetooth-control interface test 3785 - store: talk to api.snapcraft.io for assertions 3786 - tests: remove snapd before building from branch 3787 - tests: add avahi-observe interface test 3788 - store: orders API now checks if customer is ready 3789 - cmd/snap: snap find only searches stable 3790 - interfaces: updates default, mir, optical-observe, system-observe, 3791 screen-inhibit-control and unity7 3792 - tests: speedup prepare statement part 1 3793 - store: do not send empty refresh requests 3794 - asserts: fix error handling in snap-developer consistency check 3795 - systemd: add explicit sync to snapd.core-fixup.sh 3796 - snapd: generate snap cookies on startup 3797 - cmd,client,daemon: expose "force devmode" in sysinfo 3798 - many: introduce and use strutil.ListContains and also 3799 strutil.SortedListContains 3800 - assserts,overlord/assertstate: test we don't accept chains of 3801 assertions founded on a self-signed key coming externally 3802 - interfaces: enable access to bridge settings 3803 - interfaces: fix copy-pasted iio vs io in io-ports-control 3804 - cmd/snap-confine: various small fixes and tweaks to seccomp 3805 support code 3806 - interfaces: bring back seccomp argument filtering 3807 - systemd, osutil: rework systemd logs in preparation for services 3808 commands 3809 - tests: store /etc/systemd/system/snap-*core*.mount in snapd- 3810 state.tar.gz 3811 - tests: shellcheck improvements for tests/main tasks - first set of 3812 tests 3813 - cmd/snap: `--last` for abort and watch, and aliases 3814 (search→find, change→tasks) 3815 - tests: shellcheck improvements for tests/lib scripts 3816 - tests: create ramdisk if it's not present 3817 - tests: shellcheck improvements for nightly upgrade and regressions 3818 tests 3819 - snapd: fix for snapctl get panic on null config values. 3820 - tests: fix for rng-tools service not restarting 3821 - systemd: add snapd.core-fixup.service unit 3822 - cmd: avoid using current symlink in InternalToolPath 3823 - tests: fix timeout issue for test refresh core with hanging … 3824 - intefaces: control bridged vlan/ppoe-tagged traffic 3825 - cmd/snap: include snap type in notes 3826 - overlord/state: Abort() only visits each task once 3827 - tests: extend find-private test to cover more cases 3828 - snap-seccomp: skip socket() tests on systems that use socketcall() 3829 instead of socket() 3830 - many: support snap title as localized/title-cased name 3831 - snap-seccomp: deal with mknod on aarch64 in the seccomp tests 3832 - interfaces: put base policy fragments inside each interface 3833 - asserts: introduce NewDecoderWithTypeMaxBodySize 3834 - tests: fix snapd-notify when it takes more time to restart 3835 - snap-seccomp: fix snap-seccomp tests in artful 3836 - tests: fix for create-key task to avoid rng-tools service ramains 3837 alive 3838 - snap-seccomp: make sure snap-seccomp writes the bpf file 3839 atomically 3840 - tests: do not disable ipv6 on core systems 3841 - arch: the kernel architecture name is armv7l instead of armv7 3842 - snap-confine: ensure snap-confine waits some seconds for seccomp 3843 security profiles 3844 - tests: shellcheck improvements for tests/nested tasks 3845 - wrappers: add SyslogIdentifier to the service unit files. 3846 - tests: shellcheck improvements for unit tasks 3847 - asserts: implement FindManyTrusted as well 3848 - asserts: open up and optimize Encoder to help avoiding unnecessary 3849 copying 3850 - interfaces: simplify snap-confine by just loading pre-generated 3851 bpf code 3852 - tests: restart rng-tools services after few seconds 3853 - interfaces, tests: add mising dbus abstraction to system-observe 3854 and extend spread test 3855 - store: change main store host to api.snapcraft.io 3856 - overlord/cmdstate: new package for running commands as tasks. 3857 - spread: help libapt resolve installing libudev-dev 3858 - tests: show the IP from .travis.yaml 3859 - tests/main: use pkgdb function in more test cases 3860 - cmd,daemon: add debug command for displaying the base policy 3861 - tests: prevent quoting error on opensuse 3862 - tests: fix nightly suite 3863 - tests: add linode-sru backend 3864 - snap-confine: validate SNAP_NAME against security tag 3865 - tests: fix ipv6 disable for ubuntu-core 3866 - tests: extend core-revert test to cover bluez issues 3867 - interfaces/greengrass-support: add support for Amazon Greengrass 3868 as a snap 3869 - asserts: support timestamp and optional disabled header on repair 3870 - tests: reboot after upgrading to snapd on the -proposed pocket 3871 - many: fix test cases to work with different DistroLibExecDir 3872 - tests: reenable help test on ubuntu and debian systems 3873 - packaging/{opensuse,fedora}: allow package build with testkeys 3874 included 3875 - tests/lib: generalize RPM build support 3876 - interfaces/builtin: sync connected slot and permanent slot snippet 3877 - tests: fix snap create-key by restarting automatically rng-tools 3878 - many: switch to use http numeric statuses as agreed 3879 - debian: add missing Type=notify in 14.04 packaging 3880 - tests: mark interfaces-openvswitch as manual due to prepare errors 3881 - debian: unify built_using between the 14.04 and 16.04 packaging 3882 branch 3883 - tests: pull from urandom when real entropy is not enough 3884 - tests/main/manpages: install missing man package 3885 - tests: add refresh --time output check 3886 - debian: add missing "make -C data/systemd clean" 3887 - tests: fix for upgrade test when it is repeated 3888 - tests/main: use dir abstraction in a few more test cases 3889 - tests/main: check for confinement in a few more interface tests 3890 - spread: add fedora snap bin dir to global PATH 3891 - tests: check that locale-control is not present on core 3892 - many: snapctl outside hooks 3893 - tests: add whoami check 3894 - interfaces: compose the base declaration from interfaces 3895 - tests: fix spread flaky tests linode 3896 - tests,packaging: add package build support for openSUSE 3897 - many: slight improvement of some snap error messaging 3898 - errtracker: Include /etc/apparmor.d/usr.lib.snap-confine md5sum in 3899 err reports 3900 - tests: fix for the test postrm-purge 3901 - tests: restoring the /etc/environment and service units config for 3902 each test 3903 - daemon: make snapd a "Type=notify" daemon and notify when startup 3904 is done 3905 - cmd/snap-confine: add support for --base snap 3906 - many: derive implicit slots from interface meta-data 3907 - tests: add core revert test 3908 - tests,packaging: add package build support for Fedora for our 3909 spread setup 3910 - interfaces: move base declaration to the policy sub-package 3911 - tests: fix for snapd-reexec test cheking for restart info on debug 3912 log 3913 - tests: show available entropy on error 3914 - tests: clean journalctl logs on trusty 3915 - tests: fix econnreset on staging 3916 - tests: modify core before calling set 3917 - tests: add snap-confine privilege test 3918 - tests: add staging snap-id 3919 - interfaces/builtin: silence ptrace denial for network-manager 3920 - tests: add alsa interface spread test 3921 - tests: prefer ipv4 over ipv6 3922 - tests: fix for econnreset test checking that the download already 3923 started 3924 - httputil,store: extract retry code to httputil, reorg usages 3925 - errtracker: report if snapd did re-execute itself 3926 - errtracker: include bits of snap-confine apparmor profile 3927 - tests: take into account staging snap-ids for snap-info 3928 - cmd: add stub new snap-repair command and add timer 3929 - many: stop "snap refresh $x --channel invalid" from working 3930 - interfaces: revert "interfaces: re-add reverted ioctl and quotactl 3931 - snapstate: consider connect/disconnect tasks in 3932 CheckChangeConflict. 3933 - interfaces: disable "mknod |N" in the default seccomp template 3934 again 3935 - interfaces,overlord/ifacestate: make sure installing slots after 3936 plugs works similarly to plugs after slots 3937 - interfaces/seccomp: add bind() syscall for forced-devmode systems 3938 - packaging/fedora: Sync packaging from Fedora Dist-Git 3939 - tests: move static and unit tests to spread task 3940 - many: error types should be called FooError, not ErrFoo. 3941 - partition: add directory sync to the save uboot.env file code 3942 - cmd: test everything (100% coverage \o/) 3943 - many: make shell scripts shellcheck-clean 3944 - tests: remove additional setup for docker on core 3945 - interfaces: add summary to each interface 3946 - many: remove interface meta-data from list of connections 3947 - logger (& many more, to accommodate): drop explicit syslog. 3948 - packaging: import packaging bits for opensuse 3949 - snapstate,many: implement snap install --unaliased 3950 - tests/lib: abstract build dependency installation a bit more 3951 - interfaces, osutil: move flock code from interfaces/mount to 3952 osutil 3953 - cmd: auto import assertions only from ext4,vfat file systems 3954 - many: refactor in preparation for 'snap start' 3955 - overlord/snapstate: have an explicit code path last-refresh 3956 unset/zero => immediately refresh try 3957 - tests: fixes for executions using the staging store 3958 - tests: use pollinate to seed the rng 3959 - cmd/snap,tests: show the sha3-384 of the snap for snap info 3960 --verbose SNAP-FILE 3961 - asserts: simplify and adjust repair assertion definition 3962 - cmd/snap,tests: show the snap id if available in snap info 3963 - daemon,overlord/auth: store from model assertion wins 3964 - cmd/snap,tests/main: add confinement switch instead of spread 3965 system blacklisting 3966 - many: cleanup MockCommands and don't leave a process around after 3967 hookstate tests 3968 - tests: update listing test to the core version number schema 3969 - interfaces: allow snaps to use the timedatectl utility 3970 - packaging: Add Fedora packaging files 3971 - tests/libs: add distro_auto_remove_packages function 3972 - cmd/snap: correct devmode note for anomalous state 3973 - tests/main/snap-info: use proper pkgdb functions to install distro 3974 packages 3975 - tests/lib: use mktemp instead of tempfile to work cross-distro 3976 - tests: abstract common dirs which differ on distributions 3977 - many: model and expose interface meta-data. 3978 - overlord: make config defaults from gadget work also at first boot 3979 - interfaces/log-observe: allow using journalctl from hostfs for 3980 classic distro 3981 - partition,snap: add support for android boot 3982 - errtracker: small simplification around readMachineID 3983 - snap-confine: move rm_rf_tmp to test-utils. 3984 - tests/lib: introduce pkgdb helper library 3985 - errtracker: try multiple paths to read machine-id 3986 - overlord/hooks: make sure only one hook for given snap is executed 3987 at a time. 3988 - cmd/snap-confine: use SNAP_MOUNT_DIR to setup /snap inside the 3989 confinement env 3990 - tests: bump kill-timeout and remove quiet call on build 3991 - tests/lib/snaps: add a test store snap with a passthrough 3992 configure hook 3993 - daemon: teach the daemon to wait on active connections when 3994 shutting down 3995 - tests: remove unit tests task 3996 - tests/main/completion: source from /usr/share/bash-completion 3997 - assertions: add "repair" assertion 3998 - interfaces/seccomp: document Backend.NewSpecification 3999 - wrappers: make StartSnapServices cleanup any services that were 4000 added if a later one fails 4001 - overlord/snapstate: avoid creating command aliases for daemons 4002 - vendor: remove unused packages 4003 - vendor,partition: fix panics from uenv 4004 - cmd,interfaces/mount: run snap-update-ns and snap-discard-ns from 4005 core if possible 4006 - daemon: do not allow to install ubuntu-core anymore 4007 - wrappers: service start/stop were inconsistent 4008 - tests: fix failing tests (snap core version, syslog changes) 4009 - cmd/snap-update-ns: add actual implementation 4010 - tests: improve entropy also for ubuntu 4011 - cmd/snap-confine: use /etc/ssl from the core snap 4012 - wrappers: don't convert between []byte and string needlessly. 4013 - hooks: default timeout 4014 - overlord/snapstate: Enable() was ignoring the flags from the 4015 snap's state, resulting in losing "devmode" on disable/enable. 4016 - difs,interfaces/mount: add support for locking namespaces 4017 - interfaces/mount: keep track of kept mount entries 4018 - tests/main: move a bunch of greps over to MATCH 4019 - interfaces/builtin: make all interfaces private 4020 - interfaces/mount: spell unmount correctly 4021 - tests: allow 16-X.Y.Z version of core snap 4022 - the timezone_control interface only allows changing /etc/timezone 4023 and /etc/writable/timezone. systemd-timedated also updated the 4024 link of /etc/localtime and /etc/writable/localtime ... allow 4025 access to this file too 4026 - cmd/snap-confine: aggregate operations holding global lock 4027 - api, ifacestate: resolve disconnect early 4028 - interfaces/builtin: ensure we don't register interfaces twice 4029 4030 -- Michael Vogt <michael.vogt@ubuntu.com> Thu, 10 Aug 2017 12:43:16 +0200 4031 4032 snapd (2.26.14) xenial; urgency=medium 4033 4034 * New upstream release, LP: #1690083 4035 - cmd: fix incorrect re-exec when starting from snapd 2.21 4036 4037 -- Michael Vogt <michael.vogt@ubuntu.com> Thu, 20 Jul 2017 13:52:05 +0200 4038 4039 snapd (2.26.13) xenial; urgency=medium 4040 4041 * New upstream release, LP: #1690083 4042 - cmd,tests: fix classic confinement confusing re-execution code 4043 - cmd: fix incorrect check check for re-exec in InternalToolPath() 4044 - snap-seccomp: add secondary arch for unrestricted snaps as well 4045 4046 -- Michael Vogt <michael.vogt@ubuntu.com> Tue, 18 Jul 2017 20:34:33 +0200 4047 4048 snapd (2.26.10) xenial; urgency=medium 4049 4050 * New upstream release, LP: #1690083 4051 - Fix snap-seccomp tests in artful/trusty on i386/s390x/aarch64 4052 4053 -- Michael Vogt <michael.vogt@ubuntu.com> Mon, 17 Jul 2017 11:58:22 +0200 4054 4055 snapd (2.26.9) xenial; urgency=medium 4056 4057 * New upstream release, LP: #1690083 4058 - statically link libseccomp in snap-seccomp to fix refresh issue 4059 on trusty 4060 4061 -- Michael Vogt <michael.vogt@ubuntu.com> Wed, 12 Jul 2017 08:27:14 +0200 4062 4063 snapd (2.26.8) xenial; urgency=medium 4064 4065 * New upstream release, LP: #1690083 4066 - Fix snap-seccomp tests in artful/trusty on i386/s390x/aarch64 4067 - add snapd.core-fixup.service unit 4068 - ensure re-exec uses the right internal tools 4069 4070 -- Michael Vogt <michael.vogt@ubuntu.com> Wed, 05 Jul 2017 07:48:22 +0200 4071 4072 snapd (2.26.6) xenial; urgency=medium 4073 4074 * New upstream release, LP: #1690083 4075 - interfaces: allow snaps to use the timedatectl utility in 4076 time-control 4077 4078 -- Michael Vogt <michael.vogt@ubuntu.com> Tue, 27 Jun 2017 08:36:23 +0100 4079 4080 snapd (2.26.5) xenial; urgency=medium 4081 4082 * New upstream release, LP: #1690083 4083 - backport of seccomp-bpf branch to the 2.26 release to ensure snap 4084 revert with new seccomp syntax works correctly 4085 4086 -- Michael Vogt <michael.vogt@ubuntu.com> Mon, 26 Jun 2017 15:30:15 +0100 4087 4088 snapd (2.26.4) xenial; urgency=medium 4089 4090 * New upstream release, LP: #1690083 4091 - partly revert aace15ab53 to unbreak core reverts 4092 - Revert "interfaces: re-add reverted ioctl and quotactl (revert 21bc6b9f)" 4093 - Disable "mknod |N" in the default seccomp template 4094 reasons outline in https://forum.snapcraft.io/t/snapd-2-25-blocked-because-of-revert-race-condition 4095 - errtracker: include bits of snap-confine apparmor profile 4096 - errtracker: report if snapd did re-execute itself 4097 4098 -- Michael Vogt <michael.vogt@ubuntu.com> Thu, 01 Jun 2017 18:50:52 +0200 4099 4100 snapd (2.26.3) xenial; urgency=medium 4101 4102 * New upstream release, LP: #1690083 4103 - cherry pick test fixes f0103a6, 9de5c8a, d7725a7 to make 4104 sure the image tests are updated for the changes in the 4105 `snap info core` output and the removal of the rsyslog 4106 package from core. 4107 4108 -- Michael Vogt <michael.vogt@ubuntu.com> Wed, 17 May 2017 11:31:56 +0200 4109 4110 snapd (2.26.2) xenial; urgency=medium 4111 4112 * New upstream release, LP: #1690083 4113 - cherry pick d444728 to make the uboot.env file parsing more 4114 robust 4115 4116 -- Michael Vogt <michael.vogt@ubuntu.com> Tue, 16 May 2017 18:37:07 +0200 4117 4118 snapd (2.26.1) xenial; urgency=medium 4119 4120 * New upstream release, LP: #1690083 4121 - store: fix panic error in auth 4122 - tests: the new ubuntu-image snap needs classic confinement, adjust 4123 tests 4124 - cmd/snap-confine: don't fail on pre 3.8 kernel 4125 4126 -- Michael Vogt <michael.vogt@ubuntu.com> Thu, 11 May 2017 21:44:27 +0200 4127 4128 snapd (2.26) xenial; urgency=medium 4129 4130 * New upstream release, LP: #1690083 4131 - timeutil: avoid panicking when the window is very small 4132 - image: fix go vet issue 4133 - overlord/ifacestate: don't spam logs with harmless auto-connect 4134 messages 4135 - interfaces/builtin: add network-status interface 4136 - interfaces/builtin: add online-accounts-service interface 4137 - interfaces/builtin: distribute code of touching allInterfaces 4138 - interfaces: API additions for interface hooks 4139 - interfaces/builtin: add storage-framework-service interface 4140 - tests: disable create-key test on ppc64el for artful (expect not 4141 working) 4142 - snap: make `snap prepare-image --extra-snaps` derive side info 4143 - tests: unify tests/{main/completion,completion}/lib.exp0 4144 - cmd/snap: tweak info channels output 4145 - interfaces: ensure that legacy interface methods are unused 4146 - packaging: cleanup how built-using is generated 4147 - tests: extend kernel-module-control interface test 4148 - interfaces/network: workaround Go's need for NETLINK_ROUTE with 4149 'net'. 4150 - cmd/snap-confine: use defensive argument parser 4151 - tests: add test for empty snap name on revert 4152 - overlord/hookstate: remove unused Context.timeout 4153 - tests: additional setup in docker test for core systems 4154 - configstate: return error if patch is invalid 4155 - interfaces: add random interface 4156 - store, daemon, client, cmd/snap: handle PASSWORD_POLICY_ERROR 4157 - cmd/snap, client: add "whoami" command 4158 - cmd/snap: iterate interface tab completion 4159 - snap: move locale-control to only be present on classic 4160 - interfaces/browser-support: deny read on squashfs backing files 4161 and LVM vg names 4162 - tests: wait for the docker socket to be listening 4163 - snap: add `snap refresh --time` option 4164 - tests: re-enable and moderninze /media sharing test 4165 - cmd: make rst2man optional 4166 - tests: remove quoting from [[ ]] when globs 4167 - interfaces: allow plugging DBus clients to introspect the slot 4168 service 4169 - packaging/ubuntu*/changelog: drop extra dash 4170 - snap-confine: init the ENTRY variable, coverity is unhappy 4171 otherwise 4172 - cmd/snap-confine/spread-tests: discard useless --version test 4173 - spread: add spread target qemu:debian-9-64 4174 - interfaces: mediate netlink sockets via seccomp 4175 - tests,cmd/snap-confine: port older snapd-discard-ns tests 4176 - cmd/snap-confine/tests: fix shellcheck on recently added files 4177 - tests/upgrade: force install core snap from beta for debian 4178 - overlord/snapstate/backend,interfaces/mount: move ns management 4179 code. 4180 - tests: extend network-control spread test to cope with network 4181 namespaces 4182 - tests: fail early in the spread suite if trying to run it inside a 4183 container 4184 - tests: set ownership of $PROJECT_PATH for the external backend 4185 - tests: specify the auto-refreshable snap being tested 4186 - many: fix tests with go1.8 / artful 4187 - fix for tests: debian does not have /snap/bin in secure_path so 4188 sudo 4189 - snap: support for snap tasks --last=... 4190 - cmd/snap-confine: remove obsolete debug message 4191 - address review feedback, add a lot of comments :-), call 4192 shellcheck on the completion scripts, fix a bug in compopt 4193 4194 -- Michael Vogt <michael.vogt@ubuntu.com> Thu, 11 May 2017 10:05:44 +0200 4195 4196 snapd (2.25) xenial; urgency=medium 4197 4198 * New upstream release, LP: #1686713 4199 - interfaces/default: allow mknod for regular files, pipes and 4200 sockets 4201 - many: use "SNAP.APP as ALIAS" instead of => when listing 4202 added/removed aliases 4203 - cmd/snap-confine: write current mount profile 4204 - cmd/snap-discard-ns: remove current profile when cleaning up 4205 - many: support debian in our CI 4206 - tests: tweak time for econnreset test a bit more 4207 - cmd/snap-confine: re-enable re-assciate fix for CE 4208 - many: aliases v2 cleanups 4209 - cmd/snap-confine: don't use apparmor if it is disabled on boot 4210 - many: implement `snap prefer <snap>` (aliases v2) 4211 - many: adjust /aliases and "snap aliases" to aliases v2, also some 4212 cleanup 4213 - snapstate: normalize gadget defaults 4214 - many: allow core refresh.schedule setting 4215 - many: show alias changes on snap alias/unalias (aliases v2) 4216 - client,cmd/snap: improve messaging on --devmode and --classic 4217 - many: implement `snap unalias <alias-or-snap>` (aliases v2) 4218 - store: retry on connection reset 4219 - interfaces/mount: add Change.Perform 4220 - tests: add openvswitch interface spread test 4221 - interfaces/i2c: allow modifying device-specific sysfs entries 4222 - interfaces: allow writing to /run/systemd/journal/stdout by 4223 default 4224 - tests: ensure travis fails early if static checks fail 4225 - store,daemon: make store interpret channel="" as stable in most 4226 cases 4227 - overlord/snapstate: make UpdateAliases idempotent, simplify the 4228 backend interface bits for aliases not used anymore (aliases v2) 4229 - many: implement snap alias <snap.app> <alias> (aliases v2) 4230 - snap-confine: add code to ensure that / or /snap is mounted 4231 "shared" 4232 - many: show available "tracks" in `snap info` 4233 - cmd/snap: make users Xauthority file available in snap environment 4234 - interfaces/mount: write current fstab files with mode 0644 4235 - overlord: switch to aliases v2 tasks for install/refresh etc ops 4236 plus transition 4237 - tests: parameterize gadget snap channel (#3117) 4238 - tests: copy .real profile as .real 4239 - tests: add empty initrd failover test 4240 - many: mount squashfs as read-only 4241 - cmd: make locking around namespaces explicit 4242 - tests: address review comments from #3186 4243 - tests: add dbus interface spread test 4244 - interfaces/mount: add ReadMountInfo and LoadMountInfo 4245 - snap: require snap name for 'revert' 4246 - overlord: maintain per-revision snapshots of snap configuration 4247 - tests: relax network-bind interface regexps 4248 - interfaces: re-add reverted ioctl and quotactl (revert 21bc6b9f) 4249 - store: retry once on hashsum mismatches in a Download() 4250 - interfaces/builtin: don't panic if content plug has nil attrs 4251 - interfaces/mount: pass mount.Profile to mount.NeededChanges 4252 - packaging: add `built-using` header for 16.04 packaging 4253 - interfaces: add media-hub interface 4254 - interfaces/builtin: allow full access to properties iface of the 4255 udisks service 4256 - tests: handle case when both .real and plain are present 4257 - interfaces/mount: add Change.String for readable output 4258 - tests: ensure we mock force dev mode as well to fix FTBFS in 4259 sbuild 4260 - store: add more logs around retry in download 4261 - interfaces/mount: add stub Change.{Needed,Perform} 4262 - tests: allow installing snapd from -proposed for SRU validation 4263 - interfaces/mount: parse mount options to map[string]string 4264 - snap: added tasks subcommand 4265 - tests: copy snap-confine apparmor profile into testbed 4266 - interfaces/mount: improve go identifier names of mountinfo, parse 4267 optional fields 4268 - Arch Linux wants to respect FHS 4269 (https://bugs.archlinux.org/task/53656), 4270 - daemon: do not set RemoveSnapPath flag when doing a try 4271 - debian: add maintscript helper to remove usr.lib.snapd.snap- 4272 confine in snap-confine 4273 - cmd/snap-confine: don't use plain "classic" term 4274 - cmd/snap-confine: set TMPDIR and TEMPDIR each time 4275 - many: fixes for `go vet` in go 1.7 4276 - tests: add kernel-module-control interface test 4277 - overlord/snapstate: introduce tasks for aliases v2 semantics with 4278 temporary names for now (aliases v2) 4279 - overlord/devicestate: switch to ssh-keygen for device key 4280 generation 4281 - snap: skip /dev/ram from auto-import assertions to make it less 4282 noisy (#3010) 4283 - interfaces: add kubernetes-support interface and adjust related 4284 interfaces (LP: #1664638) 4285 - tests: download previous snapd package from published versions 4286 instead of specific PPA 4287 - snap: run snap-confine from core if snap is also running from core 4288 - overlord/ifacestate: automatically rename connections on core snap 4289 - many: break the /aliases mutation API with a clean 400 (aliases 4290 v2) 4291 - interfaces/builting: allow read-only access to /sys/module 4292 - tests: add extra test after the core transition for snap get/set 4293 core 4294 - store: misc cleanups in tests 4295 - interfaces/mount: add parser for mountinfo entries 4296 - store: tests for unexpected EOF 4297 - tests: fix unity test 4298 - interfaces,overlord: log interface auto-connection failures 4299 - cmd/snap-update-ns: add C preamble for setns 4300 - interfaces: validate plug/slot uniqueness 4301 4302 -- Michael Vogt <michael.vogt@ubuntu.com> Fri, 28 Apr 2017 07:57:49 +0200 4303 4304 snapd (2.24.1) xenial; urgency=medium 4305 4306 * New upstream release, LP: #1681799: 4307 - fix autopkgtest failures with stable core snap 4308 - ensure the snap-confine transitional package cleans up 4309 the no-longer-used apparmor profile to fix the kernels 4310 autopkgtest failures 4311 4312 -- Michael Vogt <michael.vogt@ubuntu.com> Wed, 19 Apr 2017 11:54:33 +0200 4313 4314 snapd (2.24) xenial; urgency=medium 4315 4316 * New upstream release, LP: #1681799: 4317 - interfaces/mount: add InfoEntry type 4318 - many: fix plug auto-connect during core transition 4319 - interfaces: fold network bind into core support with tests 4320 - .travis.yml: add option to make raw log less noisy 4321 - interfaces: adjust shm accesses to use 'm' for updated mmap kernel 4322 mediation 4323 - many: rename two core plugs that clash with slot names 4324 - snap-confine,browser-support: /dev/tty for snap-confine, misc 4325 browser-support for gnome-shell 4326 - store: add download test with EOF in the middle 4327 - tests: adjust to look for network-bind-plug 4328 - store: make hash error message more accurate 4329 - overlord/snapstate: simplify AliasesStatus down to just an 4330 AutoAliasesDisabled bool flag (aliases v2) 4331 - errtracker: never send errtracker reports when running under 4332 SNAPPY_TESTING 4333 - interfaces/repo: validate slot/plug names 4334 - daemon: Give the snap directories via GET /v2/system-info 4335 - interfaces/unity7: support unity messaging menu 4336 - interfaces/mount: add high-level Profile functions 4337 - git: ignore only the cmd/Makefile{,.in} 4338 - cmd: explicitly set _GNU_SOURCE and _FILE_OFFSET_BITS for xfs 4339 support 4340 - daemon: add desktop file location for app to the API 4341 - overlord,release: disable classic snap support when not possible 4342 - overlord: fix TestEnsureLoopPrune not to be so racy 4343 - many: abstract path to /bin/{true,false} 4344 - data/systemd: tweak data/systemd/Makefile to be slightly simpler 4345 - store: handle EOF via url.Error check 4346 - packaging: use templates for relevant systemd units 4347 - tests: run gccgo only on ubuntu-16.04-64 4348 - .travis.yml: remove travis matrix and do a single sequential run 4349 - overlord/state: make sure that setting to nil a state key is 4350 equivalent to deleting it 4351 - tests: fix incorrect shell expression 4352 - interfaces/mount: add OptsToFlags for converting arguments to 4353 syscall… 4354 - interfaces: add a joystick interface 4355 - tests: enable docker test for more ubuntu-core systems 4356 - tests: download and install additional dependencies when using 4357 prepackaged snapd 4358 - many: add support for partially static builds 4359 - interfaces: allow slot to introspect dbus-daemon in dbus 4360 interface, allow /usr/bin/arch by default 4361 - interfaces/mount: fix golint issues 4362 - interfaces/mount: add function for saving fstab-like file 4363 - osutil: introducing GetenvInt64, like GetenvBool but Int64er. 4364 - interfaces: drop udev tagging from framebuffer interface 4365 - snapstate: more helpers to work with aliases state (aliases 4366 v2) 4367 - interfaces/mount: add function for parsing fstab-like file 4368 - cmd: disable the re-associate fix as requested by jdstrand 4369 - overlord/snapstate: unlock/relock the state less, especially not 4370 across mutating the SnapState of a snap 4371 - interfaces: allow executing ld.so (needed with new AppArmor base 4372 abstraction) 4373 - interfaces/mount: add function for parsing mount entries 4374 - cmd: rework header check for xfs/xqm.h 4375 - cmd: add poky to the list of distros which don't support reexec 4376 - overlord: finish reorg, revert "be more conservative until we have 4377 cut 2.23.x" 4378 - cmd: select what socket to use in cmd/snap{,ctl} 4379 - overlord: remove snap config values when snap is removed 4380 - snapstate: introduce helper to apply to disk a alias states change 4381 for a snap (aliases v2) 4382 - configstate,hookstate: timeout the configure hook after 5 mins, 4383 report failures to the errtracker 4384 - interfaces/seccomp: add bind as part of the default seccomp policy 4385 for hooks 4386 - cmd: discard the C implementation of snap-update-ns 4387 - tests: remove stale apt proxy leftover from cloud-init 4388 - tests: move unity test to nightly suite 4389 - interfaces: add support for location-observe for 4390 dbus::ObjectManager session paths 4391 - boot: log error in KernelOrOsRebootRequired 4392 - interfaces: remove old API 4393 - interfaces: use udev spec 4394 - interfaces: convert systemd backend to new APIs 4395 - osutil: add BootID 4396 - tests: move docker test to new nightly suite 4397 - interfaces/mount: compute mount changes required to transition 4398 mount profiles 4399 - data/selinux: add context definition for snapctl 4400 - overlord: clean up organization under state packages 4401 - overlord: make sure all managers packages have *state.go with the 4402 main state manipulation/query APIs 4403 - interfaces: use spec in the dbus backend 4404 - store: download from authenticated URL if there is a device 4405 session set 4406 - tests: remove core_name variable 4407 - interfaces: rename thumbnailer to thumbnailer-service 4408 - interfaces: add chroot to base templates 4409 - asserts: remove some unused things 4410 - systemd: mount the squashfs with nodev 4411 - overlord: when shutting down assume errors might be due to 4412 cancellation so retry 4413 - cmd: rename all unit tests to $command/unit-test 4414 - cmd/snap: fix help string for version command 4415 - asserts: don't allow revocations with other items for the same 4416 developer 4417 - tests: skip lp-1644439 test on older kernels 4418 - interfaces: allow "sync" to be used by core support 4419 - assertstate,snapstate: have assertstate.AutoAliases use the 4420 "aliases" header 4421 - interfaces: allow writing config.txt.tmp in the core-support 4422 interface 4423 - tests: adjust network-bind test 4424 - interfaces: dbus backend spec 4425 - asserts: introduce a snap-declaration "aliases" header to list 4426 auto aliases with explicit targets 4427 - cmd: enable large file support 4428 - cmd/snap: handle missing snap-confine 4429 - cmd/snap-confine: re-associate with pid-1 mount namespace if 4430 required 4431 - cmd/libsnap: make mountinfo structures public 4432 - tests: fix interfaces-cups-control for zesty 4433 - misc: revert "Log if the system goes into ForceDevMode" 4434 - interfaces: seccomp tests cleanup 4435 - cmd: validate SNAP_NAME 4436 - interfaces: log if the system goes into ForceDevMode 4437 - tests: fix classic-ubuntu-core-transition race 4438 - interfaces: use apparmor spec in the apparmor backend 4439 - interfaces: alphabetize framebuffer in base decl and add it to 4440 all_test.go 4441 - tests: add ubuntu-core-16-32 system to the external backend and 4442 fix docker test 4443 - cmd/libsnap: simplify sc_string_quote default case 4444 - osutil: fix double expand in environment map code and add test 4445 - interfaces: extend location-control out-of-process provider 4446 support 4447 - cmd/snap-update-ns: use bidirectional lists for mount entries 4448 - tests: prevent automatic transition before setting the initial 4449 state of the test 4450 - release: detect if we are in ForcedDevMode by inspecting the 4451 kernel 4452 - tests: add core-snap-refresh test 4453 - interfaces: add maliit input method interface 4454 - interfaces: seccomp spec API tweaks for better tests 4455 - interfaces: updates for mir-kiosk in browser-support, mir, opengl, 4456 unity7 4457 - testutils: address review feedback from PR#2997 4458 - tests: specify the core version to be unsquashfs'ed in the 4459 failover tests 4460 - interfaces: use MockInfo in tests 4461 - cmd/libsnap: add sc_quote_string 4462 - cmd/snap-confine: use sc_do_umount everywhere 4463 - interfaces: add unity8 plug permissions 4464 - timeutil: a few helpers for the recurring events 4465 - asserts: implement snap-developer type 4466 - partition: deal with grub{,2}-editenv in tests 4467 - many: add new (hidden) `snap debug ensure-state-soon` command and 4468 use in tests 4469 - interfaces/builtin: small refactor of dbus tests 4470 - packaging, tests: use "systemctl list-unit-files --full" 4471 everywhere 4472 - many: some opensuse patches that are ready to go into master 4473 - packaging: add opensuse permissions files 4474 - client, daemon: move "snap list" name filtering into snapd. 4475 - interfaces: use seccomp specs 4476 - overlord/snapstate: small cleanup of 4477 ensureForceDevmodeDropsDevmodeFromState 4478 - interfaces/builtin/alsa: add read access to alsa state dir 4479 - interfaces: use spec in kmod backend, updated firewall_control, 4480 openvswitch_support, ppp 4481 - cmd/snap-confine: use sc_do_mount everywhere 4482 - tests: remove workaround for docker again, snap-declaration is 4483 fixed now 4484 - interfaces: interface to allow autopilot introspection 4485 4486 -- Michael Vogt <michael.vogt@ubuntu.com> Tue, 11 Apr 2017 13:31:46 +0200 4487 4488 snapd (2.23.6) xenial; urgency=medium 4489 4490 * New upstream release, LP: #1673568 4491 - cmd: use the most appropriate snap/snapctl sockets 4492 - tests: fix interfaces-cups-control for zesty 4493 - configstate,hookstate: timeout the configure hook after 5 mins, 4494 report failures 4495 - packaging: rename the file shipping snap-confine AA profile to 4496 workaround dpkg bug #858004 4497 - many: ignore configure hook failures on core refresh to ensure 4498 upgrades are always possible 4499 - snapstate: restart as needed if we undid unlinking aka relinked 4500 core or kernel snap 4501 4502 -- Michael Vogt <michael.vogt@ubuntu.com> Wed, 29 Mar 2017 15:30:35 +0200 4503 4504 snapd (2.23.5) xenial; urgency=medium 4505 4506 * New upstream release, LP: #1673568 4507 - allow "sync" in core-support 4508 4509 -- Michael Vogt <michael.vogt@ubuntu.com> Fri, 17 Mar 2017 18:13:43 +0100 4510 4511 snapd (2.23.4) xenial; urgency=medium 4512 4513 * New upstream release, LP: #1673568 4514 - fix core-support interface for the new pi-config options 4515 4516 -- Michael Vogt <michael.vogt@ubuntu.com> Fri, 17 Mar 2017 16:05:57 +0100 4517 4518 snapd (2.23.3) xenial; urgency=medium 4519 4520 * FTBFS due to missing files in vendor/ 4521 4522 -- Zygmunt Krynicki <zygmunt.krynicki@canonical.com> Thu, 16 Mar 2017 19:56:55 +0100 4523 4524 snapd (2.23.2) xenial; urgency=medium 4525 4526 * New upstream release, LP: #1673568 4527 - cmd/snap: handle missing snap-confine (#3041) 4528 4529 -- Zygmunt Krynicki <zygmunt.krynicki@canonical.com> Thu, 16 Mar 2017 19:38:24 +0100 4530 4531 snapd (2.23.1) xenial; urgency=medium 4532 4533 * New upstream release, LP: #1665608 4534 - packaging, tests: use "systemctl list-unit-files --full" 4535 everywhere 4536 - interfaces: fix default content attribute value 4537 - tests: do not nuke the entire snapd.conf.d dir when changing 4538 store settings 4539 - hookstate: run the right "snap" command in the hookmanager 4540 - snapstate: revert PR#2958, run configure hook again everywhere 4541 4542 -- Michael Vogt <michael.vogt@ubuntu.com> Wed, 08 Mar 2017 14:29:56 +0100 4543 4544 snapd (2.23) xenial; urgency=medium 4545 4546 * New upstream release, LP: #1665608 4547 - overlord: phase 2 with 2nd setup-profiles and hook done after 4548 restart for core installation 4549 - data: re-add snapd.refresh.{timer,service} with weekly schedule 4550 - interfaces: allow 'getent' by default with some missing dbs to 4551 various interfaces 4552 - overlord/snapstate: drop forced devmode 4553 - snapstate: disable running the configure hook on classic for the 4554 core snap 4555 - ifacestate: re-generate apparmor in InterfaceManager.initialize() 4556 - daemon: DevModeDistro does not imply snapstate.Flags{DevMode:true} 4557 - interfaces/bluez,network-manager: implement ConnectedSlot policy 4558 - cmd: add helpers for mounting / unmounting 4559 - snapstate: error in LinkSnap() if revision is unset 4560 - release: add linuxmint 18 to the non-devmode distros 4561 - cmd: fixes to run correctly on opensuse 4562 - interfaces: consistently use 'const' instead of 'var' for security 4563 policy 4564 - interfaces: miscellaneous policy updates for unity7, udisks2 and 4565 browser-support 4566 - interfaces/apparmor: compensate for kernel behavior change 4567 - many: only tweak core config if hook exists 4568 - overlord/hookstate: don't report a run hook output error without 4569 any context 4570 - cmd/snap-update-ns: move test data and helpers to new module 4571 - vet: fix vet error on mount test. 4572 - tests: empty init (systemd) failover test 4573 - cmd: add .indent.pro file to the tree 4574 - interfaces: specs for apparmor, seccomp, udev 4575 - wrappers/services: RemainAfterExit=yes for oneshot daemons w/ stop 4576 cmds 4577 - tests: several improvements to the nested suite 4578 - tests: do not use core for "All snaps up to date" check 4579 - cmd/snap-update-ns: add function for sorting mount entries 4580 - httputil: copy some headers over redirects 4581 - data/selinux: merge SELinux policy module 4582 - kmod: added Specification for kmod security backend 4583 - tests: failover test for rc.local crash 4584 - debian/tests: map snapd deb pockets to core snap channels for 4585 autopkgtest 4586 - many: switch channels on refresh if needed 4587 - interfaces/builtin: add /boot/uboot/config.txt access to core- 4588 support 4589 - release: assume higher version of supported distros will still 4590 work 4591 - cmd/snap-update-ns: add compare function for mount entries 4592 - tests: enable docker test 4593 - tests: bail out if core snap is not installed 4594 - interfaces: use mount.Entry instead of string snippets. 4595 - osutil: trivial tweaks to build ID support 4596 - many: display kernel version in 'snap version' 4597 - osutil: add package for reading Build-ID 4598 - snap: error when `snap list foo` is run and no snap is installed 4599 - cmd/snap-confine: don't crash if nvidia module is loaded but 4600 drivers are not available 4601 - tests: update listing test for latest core snap version update 4602 - overlord/hookstate/ctlcmd: helper function for creating a deep 4603 copy of interface attributes 4604 - interfaces: add a linux framebuffer interface 4605 - cmd/snap, store: change error messages to reflect latest UX doc 4606 - interfaces: initial unity8 interface 4607 - asserts: improved information about assertions format in the 4608 Decode doc comment 4609 - snapstate: ensure snapstate.CanAutoRefresh is nil in tests 4610 - mkversion.sh: Add support for taking the version as a parameter 4611 - interfaces: add an interface for use by thumbnailer 4612 - cmd/snap-confine: ensure that hostfs is root owned. 4613 - screen-inhibit-control: add methods for delaying screensavers 4614 - overlord: optional device registration and gadget support on 4615 classic 4616 - overlord: make seeding work also on classic, optionally 4617 - image,cmd/snap: refactoring and initial envvar support to use 4618 stores needing auth 4619 - tests: add libvirt interface spread test 4620 - cmd/libsnap: add helper for dropping permissions 4621 - interfaces: misc updates for network-control, firewall-control, 4622 unity7 and default policy 4623 - interfaces: allow recv* and send* by default, accept4 with accept 4624 and other cleanups 4625 - interfaces/builtin: add classic-support interface 4626 - store: use xdelta3 from core if available and not on the regular 4627 system 4628 - snap: add contact: line in `snap info` 4629 - interfaces/builtin: add network-setup-control which allows rw 4630 access to netplan 4631 - unity7: support missing signals and methods for status icons 4632 - cmd: autoconf for RHEL 4633 - cmd/snap-confine: look for PROCFS_SUPER_MAGIC 4634 - dirs: use the right snap mount dir for the distribution 4635 - many: differentiate between "distro" and "core" libexecdir 4636 - cmd: don't reexec on RHEL family 4637 - config: make helpers reusable 4638 - snap-exec: support nested environment variables in environment 4639 - release: add galliumos support 4640 - interfaces/builtin: more path options for serial 4641 - i18n: look into core snaps when checking for translations 4642 - tests: nested image testing 4643 - tests: add basic test for docker 4644 - hookstate,ifacestate: support snapctl set/get slot and plug attrs 4645 (step 3) 4646 - cmd/snap: add shell completion to connect 4647 - cmd: add functions to load/save fstab-like files 4648 - snap run: create "current" symlink in user data dir 4649 - cmd: autoconf for centos 4650 - tests: add more debug if ubuntu-core-upgrade fails 4651 - tests: increase service retries 4652 - packaging/ubuntu-14.04: inform user how to extend PATH with 4653 /snap/bin. 4654 - cmd: add helpers for working with mount/umount commands 4655 - overlord/snapstate: prepare for using snap-update-ns 4656 - cmd: use per-snap mount profile to populate the mount namespace 4657 - overlord/ifacestate: setup seccomp security on startup 4658 - interface/seccomp: sort combined snippets 4659 - release: don't force devmode on LinuxMint "serena" 4660 - tests: filter ubuntu-core systems for authenticated find-private 4661 test 4662 - interfaces/builtin/core-support: Allow modifying logind 4663 configuration from the core snap 4664 - tests: fix "snap managed" output check and suppress output from 4665 expect in the authenticated login tests 4666 - interfaces: shutdown: also allow shutdown/reboot/suspend via 4667 logind 4668 - cmd/snap-confine-tests: reformat test to pass shellcheck 4669 - cmd: add sc_is_debug_enabled 4670 - interfaces/mount: add dedicated mount entry type 4671 - interfaces/core-support: allow modifying systemd-timesyncd and 4672 sysctl configuration 4673 - snap: improve message after `snap refresh pkg1 pkg2` 4674 - tests: improve snap-env test 4675 - interfaces/io-ports-control: use /dev/port, not /dev/ports 4676 - interfaces/mount-observe: add quotactl with arg filtering (LP: 4677 #1626359) 4678 - interfaces/mount: generate per-snap mount profile 4679 - tests: add spread test for delta downloads 4680 - daemon: show "$snapname (delta)" in progress when downloading 4681 deltas 4682 - cmd: use safer functions in sc_mount_opt2str 4683 - asserts: introduce a variant of model assertions for classic 4684 systems 4685 - interfaces/core-support: allow modifying snap rsyslog 4686 configuration 4687 - interfaces: remove some syscalls already in the default policy 4688 plus comment cleanups 4689 - interfaces: miscellaneous updates for hardware-observe, kernel- 4690 module-control, unity7 and default 4691 - snap-confine: add the key for which hsearch_r fails 4692 - snap: improve the error message for `snap try` 4693 - tests: fix pattern and use MATCH in find-private 4694 - tests: stop tying setting up staging store access to the setup of 4695 the state tarball 4696 - tests: add regression spread test for #1660941 4697 - interfaces/default: don't allow TIOCSTI ioctl 4698 - interfaces: allow nice/setpriority to 0-19 values for calling 4699 process by default 4700 - tests: improve debug when the core transition test hangs 4701 - tests: disable ubuntu-core->core transition on ppc64el (its just 4702 too slow) 4703 - snapstate: move refresh from a systemd timer to the internal 4704 snapstate Ensure() 4705 - tests/lib/fakestore/refresh: some more info when we fail to copy 4706 asserts 4707 - overlord/devicestate: backoff between retries if the server seems 4708 to have refused the serial-request 4709 - image: check kernel/gadget publisher vs model brand, warn on store 4710 disconnected snaps 4711 - vendor: move gettext.go back to github.com/ojii/gettext.go 4712 - store: retry on 502 http response as well 4713 - tests: increase snap-service kill-timeout 4714 - store,osutil: use new osutil.ExecutableExists(exe) check to only 4715 use deltas if xdelta3 is present 4716 - cmd: fix autogen.sh on fedora 4717 - overlord/devicemgr: fix test: setup account-key before using the 4718 key for signing 4719 - cmd: add /usr/local/* to PATH 4720 - cmd: add sc_string_append 4721 - asserts: support for correctly suggesting format 2 for snap- 4722 declaration 4723 - interfaces: port mount backend to new APIs, unify content of per 4724 app/hook profiles 4725 - overlord/devicestate: implement policy about gadget and kernel 4726 matching the model 4727 - interfaces: allow sched_setscheduler again by default 4728 - debian: update breaks/replaces for snap-confine->snapd 4729 - debian: move the snap-confine packaging into snapd 4730 - 14.04/integrationtests: rely on upstart to restart ssh. 4731 - store: enable download deltas on classic by default 4732 - spread: add unit suite 4733 - snapctl: add config in client to disable auth and use it in 4734 snapctl 4735 - overlord/ifacestate: register all security backends with the 4736 repository 4737 - overlord,tests: have enable/disable affect security profiles 4738 - tests: install ubuntu-core from the same channel as core 4739 - overlord: move configstate.Transaction into config package 4740 - seccomp-support.c: add PF_* domains which can be used instead of 4741 AF_* 4742 - store: always log retry summary when SNAPD_DEBUG is set 4743 - tests: parameterize kernel snap channel 4744 - snapenv: do not append ":" to the SNAP_LIBRARY_PATH 4745 - interfaces/builtin: refine the content interface rules using $SLOT 4746 - asserts,interfaces/policy: add support for 4747 $SLOT()/$PLUG()/$MISSING in *-attributes constraintsThis adds 4748 support for $SLOT(arg), $PLUG(arg) and $MISSING attribute 4749 constraints in plugs and slots rules in snap-declarations: 4750 - cmd/snap-confine: add snap-confine command line parser module 4751 - tests: remove (some) garbage files found by restore cleanup 4752 analysis 4753 - cmd: fix issues uncovered by valgrind 4754 - tests: fix typo in systems name 4755 - cmd: collect string utilities in one module, add missing tests 4756 - cmd: rename mountinfo to sc_mountinfo 4757 - tests: allow to install snapd debs from a ppa instead of building 4758 them 4759 - spread: remove state tar on project restore 4760 4761 -- Michael Vogt <michael.vogt@ubuntu.com> Fri, 17 Feb 2017 12:21:42 +0100 4762 4763 snapd (2.22.7) xenial; urgency=medium 4764 4765 * New upstream release: 4766 - errtracker,overlord/snapstate: more info in errtracker reports 4767 - interfaces/apparmor: compensate for kernel behavior change 4768 4769 -- Michael Vogt <michael.vogt@ubuntu.com> Fri, 24 Feb 2017 19:24:11 +0100 4770 4771 snapd (2.22.6) xenial; urgency=medium 4772 4773 * New upstream release, LP: #1667105 4774 - overlord/ifacestate: don't fail if affected snap is gone 4775 - revert #2910: osutil: add package for reading Build-ID (#2918) 4776 - errtracker: include the build-id of host and core snapd (#2912) 4777 - errtracker: include the number of ubuntu-core -> core retries 4778 (#2915) 4779 - snapstate: retry ubuntu-core -> core transition every 6h (#2914) 4780 - osutil: add package for reading Build-ID (#2910) 4781 - errtracker: include kernel version in error reports (#2905) 4782 - release: return "unknown" if uname fails 4783 - many: rebased uname branch for 2.22 4784 - errtracker: include snapd version in err reports 4785 - overlord/ifacestate: don't unconditionally retry stuff (#2906) 4786 - snapstate: fix incorrect cut of the timestamps for the error 4787 reports (#2908) 4788 - tests: update listing test for latest core snap version update 4789 4790 -- Zygmunt Krynicki <zygmunt.krynicki@canonical.com> Wed, 22 Feb 2017 23:34:23 +0100 4791 4792 snapd (2.22.5) xenial; urgency=medium 4793 4794 * Fix FTBFS due to machine-id file 4795 4796 -- Zygmunt Krynicki <zygmunt.krynicki@canonical.com> Tue, 21 Feb 2017 09:43:42 +0100 4797 4798 snapd (2.22.4) xenial; urgency=medium 4799 4800 * New bugfix release: 4801 - errtracker: add support for error reporting via daisy.ubuntu.com 4802 - snapstate: allow for 6 retries for the core transition 4803 - httputils: ensure User-Agent works across redirects 4804 4805 -- Michael Vogt <michael.vogt@ubuntu.com> Tue, 21 Feb 2017 09:07:10 +0100 4806 4807 snapd (2.22.3) xenial; urgency=medium 4808 4809 * New bugfix release, LP: #1665729: 4810 - Limit the number of retries for the ubuntu-core -> core 4811 transition to fix possible store overload. 4812 4813 -- Michael Vogt <michael.vogt@ubuntu.com> Fri, 17 Feb 2017 18:58:34 +0100 4814 4815 snapd (2.22.2) xenial; urgency=medium 4816 4817 * New upstream release, LP: #1659522 4818 - cherry pick fix for sched_setscheduler regression 4819 (LP: #1661265) 4820 4821 -- Michael Vogt <michael.vogt@ubuntu.com> Thu, 02 Feb 2017 17:13:51 +0100 4822 4823 snapd (2.22.1) xenial; urgency=medium 4824 4825 * New upstream release, LP: #1659522 4826 - cherry pick fix for snapctl auth.json handling 4827 4828 -- Michael Vogt <michael.vogt@ubuntu.com> Wed, 01 Feb 2017 17:09:31 +0100 4829 4830 snapd (2.22) xenial; urgency=medium 4831 4832 * New upstream release, LP: #1659522 4833 - many: make ubuntu-core-launcher mostly go 4834 - interfaces/builtin: add account-control interface 4835 - interfaces/builtin: add missing syscalls to core-support needed 4836 for systemctl 4837 - interfaces/builtin: rework core-support to only allow full access 4838 to systemctl 4839 - debian/tests: drop stale autopkgtest dependencies. 4840 - tests: make the debugging of c-unit-tests more useful 4841 - store: retry auth-related requests 4842 - tests: integration test for system reload 4843 - snap: be more helpful in the `snap install <already-installed>` 4844 error message 4845 - tests: set SNAPPY_USE_STAGING_STORE in su call 4846 - tests: use test snap 4847 - spread: set SNAPD_DEBUG=1 in the core snap as well 4848 - tests: add extra debugging to security-setuid-root test 4849 - cmd,snap,wrappers: systemd reload command support 4850 - interfaces: builtin: mir: Allow recv and send 4851 - overlord/ifacestate: use ParseConnRef 4852 - overlord/snapstate,overlord/ifacestate: add automatic ubuntu-core 4853 -> core transition 4854 - debian: remove aliases as well in snapd.postrm 4855 - many: change interfaces.ParseID to return value 4856 - interfaces/opengl: allow access to the nvidia abstract socket 4857 - overlord, daemon: flag failures feature fancy forms. 4858 - many: add --classic support to try and revert, and make missing 4859 these things a little harder 4860 - interfaces: allow reading non-PCI-attached usb devices via raw-usb 4861 - many: rename snap-alter-ns to snap-update-ns 4862 - interfaces/builtin: add core-support 4863 - store: increase the retry.LimitTime() 4864 - debian: move the packaging out into package/$id-$version_id 4865 - overlord/stapstate: don't use unkeyed fields 4866 - many: add stub implementation of snap-alter-ns 4867 - asserts: improve error message when key is not valid at the given 4868 time 4869 - snapstate, ifacestate: add snapstate.CheckChangeConflict() to 4870 ifacestate.{Connect,Disconnect} 4871 - debian: remove trusty specific bits 4872 - docs: Add a note about building snapd. 4873 - interfaces: miscellaneous updates for default and network-control 4874 - daemon: bubble out store.ErrSnapNotFound in the findOne codepath 4875 - store: add retry logging into download as well 4876 - snap: show price in `snap info` 4877 - cmd: add fault injection support code 4878 - interfaces: network-manager: allow rw access to /etc/netplan 4879 - debian: move systemd files out of ./debian and into ./data/systemd 4880 - asserts: implement SuggestFormat to help avoid specifying the 4881 wrong format iteration for an assertion 4882 - many: detect potentially insecure use of snap-confine 4883 - interfaces: allow querying added security backends 4884 - cmd: ensure that all .c files have a -test.c file 4885 - asserts: don't use 'context' for the path of attributes, want to 4886 reuse the concept for something else 4887 - interfaces: abbreviate ConnRef construction 4888 - tests: ensure systemd override directory is available before using 4889 it 4890 - cmd: more build system cleanups and a small fix 4891 - tests: increase retries for service up 4892 - cmd: move seccomp cleanup function to seccomp-support 4893 - many: auto-connect plugs and slots symmetrically 4894 - overlord: use a ticker for the pruning 4895 - interfaces/builtin: add uhid interface 4896 - cmd/snap-confine: add shutdown helper 4897 - tests: fix path used when debugging 4898 - cmd: switch to non-recursive make 4899 - overlord/ifacestate: setup security of snaps affected by auto- 4900 connection 4901 - spread: refresh apt cache before first install 4902 - overlord: allow max 500 changes in "ready" state to avoid growing 4903 changes for 24h 4904 - snap: add {Plug,Slot}Info.SecurityTags 4905 - cmd: move snap-discard-ns to dedicated directory 4906 - tests: skip i18n test when no "snappy.mo" file is available 4907 - interfaces,overlord/ifacestate: small refactor around reference 4908 methods 4909 - tests: remove the snapd dirs last (should fix random test errors) 4910 - interfaces: mm: permissions for protocol proxies 4911 - interfaces/builtin: add evolution interfaces 4912 - many: extract the logging http client and user-agent handling for 4913 use in devicestate 4914 - interfaces: unity8-download-manager is the chosen name for this 4915 interface. 4916 - tests: add "quiet" wrapper function that only prints output on 4917 failure 4918 - tests: fix failing snapd-reexec test 4919 - docs: simplify HACKING.md that snapd itself supports setting up 4920 the sockets 4921 - overlord: flag required-snaps from model as required and prevent 4922 removing them 4923 - spread: exclude .o and .a files 4924 - tests: parameterize remote store 4925 - cmd: fix hardcoded paths to rst2man and support rst2man.py 4926 - tests: improve debug output when reexec is used 4927 - tests: disable ipv6 before unpacking delta 4928 - interfaces: add new interface API 4929 - tests: change TRUST_TEST_KEYS to be controlled from the host 4930 - spread: add boilerplate for Linode delta uploads 4931 - wrappers: add support for the X-Ayatana-Desktop-Shortcuts= 4932 extension 4933 - partition: add support for native grubenv read/write and use it 4934 - tests: add test ensuring manual pages are shipped 4935 4936 -- Michael Vogt <michael.vogt@ubuntu.com> Fri, 27 Jan 2017 23:18:57 +0100 4937 4938 snapd (2.21-2) unstable; urgency=medium 4939 4940 * Modify snap-confine's apparmor rules to work on Debian when apparmor is 4941 enabled on the kernel command line. 4942 4943 -- Michael Hudson-Doyle <michael.hudson@ubuntu.com> Wed, 25 Jan 2017 10:26:51 +1300 4944 4945 snapd (2.21-1) unstable; urgency=medium 4946 4947 * New upstream release. 4948 * Disable i18n so the package can build in stretch without new packages. 4949 4950 -- Michael Hudson-Doyle <michael.hudson@ubuntu.com> Mon, 16 Jan 2017 11:15:32 +1300 4951 4952 snapd (2.21) xenial; urgency=medium 4953 4954 * New upstream release, LP: #1656382 4955 - daemon: re-enable reexec 4956 - interfaces: allow reading installed files from previous revisions 4957 by default 4958 - daemon: make activation optional 4959 - tests: run all snap-confine tests in c-unit-tests task 4960 - many: fix abbreviated forms of disconnect 4961 - tests: switch more tests to MATCH 4962 - store: export userAgent. daemon: print store.UserAgent() on 4963 startup. 4964 - tests: test classic confinement `snap list` and `snap info` 4965 output 4966 - debian: skip snap-confine unit tests on nocheck 4967 - overlord/snapstate: share code between Update and UpdateMany, so 4968 that it deals with auto-aliases correctly 4969 - interfaces: upower-observe: refactor to allow snaps to provide a 4970 slot 4971 - tests: add end-to-end store test for classic confinement 4972 - overlord,overlord/snapstate: have UpdateMany retire/enable auto- 4973 aliases even without new revision 4974 - interfaces/browser-support: add @{PROC}/@{pid}/fd/[0-9] w and misc 4975 /run/udev 4976 - interfaces/builtin: add physical-memory-* and io-ports-control 4977 - interfaces: allow getsockopt by default since it is so commonly 4978 used 4979 - cmd/snap, daemon, overlord/snapstate: tests and fixes for "snap 4980 refresh" of a classic snap 4981 - interfaces: allow read/write access of real-time clock with time- 4982 control interface 4983 - store: request no CDN via a header using SNAPPY_STORE_NO_CDN 4984 envvar 4985 - snap: add information about tracking channel (not just actual 4986 channel) 4987 - interfaces: use fewer dot imports 4988 - overlord/snapstate: remove restrictions on ResetAliases 4989 - overlord, store: move confinement filtering to the overlord (from 4990 The Store) 4991 - many: move interface test helpers to ifacetest package 4992 - many: implement 'snap aliases' 4993 - vet: fix for unkeyed fields error on aliases_test.go 4994 - interfaces: miscellaneous policy updates for network-control, 4995 unity7, pulseaudio, default and home 4996 - tests: test for auto-aliases 4997 - interface hooks: connect plug slot hooks (step 2) 4998 - cmd/snap: fix internal naming in snap connect 4999 - snap: use "size" as the json tag in snap.ChannelSnapInfo 5000 - tests: restore the missing initialization of iface manager causing 5001 race 5002 - snap: fix missing sizes in `snap info <remote-snap>` 5003 - tests: improve cleanup for c-unit-tests 5004 - cmd/snap-confine: build non-installed libsnap-confine-private.a 5005 - cmd/snap-confine: small tweaks to seccomp support code 5006 - interfaces/docker-support: allow /run/shm/aufs.xeno for 14.04 5007 - many: obtain installed snaps developer/publisher username through 5008 assertions 5009 - store: setting of fields for details endpoint 5010 - cmd/snap-confine: check for rst2man on configure 5011 - snap: show `snap --help` output when just running `snap` 5012 - interface/builtin: drop the obsolete checks in udisks2 5013 SanitizeSlot 5014 - cmd/snap: remove currency switch following UX review 5015 - spread: find top-level directory before running generate- 5016 packaging-dir 5017 - interface hooks: prepare plug slot hooks (step 1) 5018 - i18n: use github.com/mvo5/gettext.go (pure go) for i18n to avoid 5019 cgo 5020 - many: put a marker in the User-Agent sent by snapd/snap when under 5021 testingThe User-Agent will look like: 5022 - tests: fix -reuse and -resend when govendor is missing 5023 - snap: provide friendlier `snap find` message when no snaps are 5024 found 5025 - tests: fix mkversions.sh failure on zesty 5026 - spread: install build-essential unconditionally 5027 - spread: improve qemu ubuntu-14.04-{32,64} support 5028 - overlord/snapstate,daemon: implement GET /v2/aliases handling 5029 - store: retry user info request 5030 - tests: port more snap-confine regression tests 5031 - tests: cancel the scheduled reboot on ubuntu-core-upgrade-no-gc 5032 and restore state 5033 - tests: debug zesty autopkgtest failures 5034 - overlord/snapstate: use keyed fields on literals 5035 - tests: use MATCH in install-remove-multi 5036 - tests: increase wait time for service to be up 5037 - tests: make debug-each succeed if DENIED doesn't match 5038 - tests: skip packaging dir generation for non-git based autopkgtest 5039 runs 5040 - tests: port refresh-all-undo to MATCH 5041 - tests: improve snap connect test 5042 - tests: port additional snap-confine regression tests 5043 - tests: show --version when it matches unknown 5044 - tests: optionally use apt proxy for qemu 5045 - tests: add hello-classic test 5046 - many: behave more consistently when pointed to staging and 5047 possibly the fake store 5048 - overlord/ifacestate: remove stale comments 5049 - interfaces/apparmor: ignore snippets in classic confinement 5050 - tests: port first regression test from snap-confine 5051 - cmd/snap-confine: disable old tests 5052 5053 -- Michael Vogt <michael.vogt@ubuntu.com> Fri, 13 Jan 2017 19:39:51 +0100 5054 5055 snapd (2.20.1) xenial; urgency=medium 5056 5057 * New upstream release, LP: #1648520 5058 - tests: enable the ppc64el tests again 5059 - tests: add classic confinement test 5060 - tests: run snap confine tests in debian/rules already 5061 5062 -- Michael Vogt <michael.vogt@ubuntu.com> Mon, 19 Dec 2016 11:53:29 +0100 5063 5064 snapd (2.20-2) unstable; urgency=medium 5065 5066 * Replace unversioned Conflicts on snap package with versioned 5067 Breaks/Replaces, now that snap has dropped /usr/bin/snap. 5068 Closes: #849162. 5069 5070 -- Steve Langasek <vorlon@debian.org> Sun, 25 Dec 2016 17:50:25 -0600 5071 5072 snapd (2.20-1) unstable; urgency=medium 5073 5074 * New upstream release. 5075 * Update one test (cmd/snap/cmd_interfaces_test.go) to cope with the newer 5076 golang-go-flags-dev in unstable. 5077 * Explicitly include 'udev' in Build-Depends. 5078 * Add tzdata to Build-Depends to avoid ftbfs. (Closes: #848754) 5079 5080 -- Michael Hudson-Doyle <michael.hudson@ubuntu.com> Mon, 19 Dec 2016 11:43:55 +1300 5081 5082 snapd (2.20) xenial; urgency=medium 5083 5084 * New upstream release, LP: #1648520 5085 - many: implement "snap alias --reset" using snapstate.ResetAliases 5086 - debian: use a packaging branch for 14.04 5087 - store: retry downloads on io.Copy errors and sha3 checksum errors 5088 - snap: show apps in `snap info` 5089 - store: send an explicit X-Ubuntu-Classic header to the store 5090 - overlord/snapstate: implement snapstate.ResetAliases 5091 - interfaces/builtin: add dbus interface 5092 - tests: fix tests on 17.04 5093 - store: use mocked retry strategy to make store tests faster 5094 - overlord: apply auto-aliases information from the snap-declaration 5095 on install or refresh 5096 - many: prepare landing on trusty 5097 - many: implement snap unalias using snapstate.Unalias 5098 - overlord/snapstate: fixing the placement/grouping of some 5099 functions 5100 - interfaces: support network namespaces via 'ip netns' in network- 5101 control 5102 - interfaces/builtin: fix pulseaudio apparmor rules 5103 - interfaces/builtin: add iio interface 5104 - tests: update custom core snap with the freshly build snap-confine 5105 - interfaces: use sysd.{Disable,Stop} instead of sysd.DisableNow() 5106 - overlord,overlord/snapstate: implement snapstate.Unalias by 5107 generalizing the "alias" task 5108 - interfaces: misc openstack snap enablement 5109 - cmd/snap: mock terminal.ReadPassword instead of using /dev/ptmx 5110 - notifications, daemon: kill the unsupported events endpoint 5111 - client: only allow Dangerous option in InstallPath 5112 - overlord/ifacestate: no interface checks if no snap id 5113 - many: implement alias command 5114 - snap: tweak snap install output as designed by Mark 5115 - debian: fix Pre-Depends on dpkg 5116 - tests: check if snap-confine --version is unknown 5117 - cmd/snap-confine: allow content interface mounts 5118 - tests: remove ppa:snappy-dev/image again 5119 - interfaces/apparmor: allow access to core snap 5120 - tests: remove snap-confine/ubuntu-core-launcher after the tests 5121 - overlord,overlord/snapstate: implement snapstate.Alias 5122 - cmd/snap: reject "snap disconnect foo" 5123 - debian: add split ubuntu-core-launcher and snap-confine packages 5124 - cmd: fix mkversion.sh and add regression test 5125 - overlord/snapstate: setup/remove aliases as we link/unlink snaps 5126 - cmd/snap,tests: alias support in snap run 5127 - snap/snapenv: don't obscure HOME if snap uses classic confinement 5128 - store: decode response.Body json inside retry loops 5129 - cmd/snap-confine: fix compilation on platforms with gcc < 4.9.0 5130 - vendor: update tomb package fixing context support 5131 5132 -- Michael Vogt <michael.vogt@ubuntu.com> Thu, 15 Dec 2016 22:07:08 +0100 5133 5134 snapd (2.19) xenial; urgency=medium 5135 5136 * New upstream release, LP: #1648520 5137 - cmd/snap-confine: disable support for XDG_RUNTIME_DIR 5138 - cmd/snap-confine/tests: fix stale path after move to snapd 5139 - cmd/snap-confine: don't use __attribute__((nonull)) 5140 - snap: add description to `snap info` 5141 - snap: show last refresh time 5142 - store: switch default delta format from xdelta to xdelta3 5143 - interfaces: fix system-observe interface to work with ps_mem 5144 - debian: add missing ca-certificates dependency 5145 - cmd/snap-confine: add support for classic confinement 5146 - snapstate/backend: add backend methods to manage aliases 5147 - tests: re-enable snap-confine unit tests via spread 5148 - many: merge snap-confine into snapd 5149 - many: add support for classic confinement 5150 - snap: abort install with ctrl+c 5151 - cmd/snap: change terms accept URL following UX review 5152 - interfaces/apparmor: use distinct apparmor template for classic 5153 - snap: add snap size to `snap info` 5154 - interfaces: add unconfined access to modem-manager 5155 - snap: support for parsing and exposing on snap.Info aliases 5156 - debian: disable autopkgtests on ppc64el 5157 - snap: disable support for socket activation 5158 - tests: fix incorrect restore of the current symlink 5159 - asserts: introduce auto-aliases header in snap-declaration 5160 - interfaces/seccomp: add support for classic confinement 5161 - tests: do not use external snaps 5162 - daemon: close the dup()ed file descriptor to not leak it 5163 - overlord, daemon, progress: enable building snapd without CGO 5164 - daemon, store: let snap info find things in any channel 5165 - store: retry tweaks and logging 5166 - snap: Improve `snap --help` output as designed by Mark 5167 - interfaces/builtin: fix incorrect udev rule in i2c 5168 - overlord: increase test timeout and improve failure message 5169 - snap: remove unused experimental command 5170 - debian: remove unneeded conflict against the "snappy" package 5171 - daemon, strutil: move daemon.quotedNames to strutil.Quoted 5172 - docs: document SNAP_DEBUG_HTTP in HACKING.md 5173 - cmd/snap: have some completers 5174 - snap: support "daemon: notify" in snap.yaml 5175 - snap: fix try command when daemon linie is added 5176 - interfaces: apparmor support for classic confinement 5177 - debian/rules: build with -buildoptions=pie 5178 - tests: include /boot in saved state (including bootenv and any 5179 kernels) 5180 - daemon: ensure `snap try` installs core if it's missing 5181 - tests: save/restore /snap/core/current symlink 5182 - tests: decrease the number of expected featured apps 5183 - tests: add set -e to the prepare ssh script 5184 - cmd/snap: add tests for section completion; fix bugs. 5185 - cmd/snap: document 'snap list --all' 5186 5187 -- Michael Vogt <michael.vogt@ubuntu.com> Thu, 08 Dec 2016 16:16:04 +0100 5188 5189 snapd (2.18.1) xenial; urgency=medium 5190 5191 * New upstream release, LP: #1644625 5192 - daemon: fix crash when `snap refresh` contains a single update 5193 - fix unhandled error from io.Copy() in download() 5194 - interfaces/builtin: fix incorrect udev rule in i2c 5195 5196 -- Michael Vogt <michael.vogt@ubuntu.com> Mon, 05 Dec 2016 15:04:13 +0100 5197 5198 snapd (2.18) xenial; urgency=medium 5199 5200 * New upstream release, LP: #1644625 5201 - store: retry on io.EOF 5202 - tests: skip pty tests on ppc64el and powerpc 5203 - client, cmd/snap: introducing "snap info" 5204 - snap: do exit 0 on install/remove if that snap is already 5205 installed or already removed 5206 - snap: add `snap watch <change-id>` to attach to a running change 5207 - store: retry downloads using retry loop 5208 - snap: try doesn't require snap-dir when run in snap's directory 5209 - daemon: show what will change in the "refresh-all" changes 5210 - tests: disable autorefresh for the external backend 5211 - snap: add `snap list -a` to show all snaps (even inactive ones) 5212 - many: unify boolean env var handling 5213 - overlord/ifacestate: don't setup jailmode snaps with devmode 5214 confinement 5215 - snapstate: do not garbage collect the snaps used by the bootenv 5216 - debian: drop hard xdelta dependency for now 5217 - snap: make `snap login` ask for email if not given as argument 5218 - osutil: fix build on armhf (arm in go-arch) and powerpc (ppc in 5219 go-arch) 5220 - many: rename DevmodeConfinement to DevModeConfinement 5221 - store: resp.Body.Close() missing in ReadyToBuy 5222 - many: use ConfinementOptions instead of ConfinementType 5223 - snap, daemon, store: fake the channel map in the REST API 5224 - misc: run github.com/gordonklaus/ineffassign as part of the static 5225 checks 5226 - docs: add goreportcard badge and remove coveralls badge 5227 - tests: force gofmt -s in static checks 5228 - many: run gofmt -s -w on all the code 5229 - store: DRY actual retry code 5230 - many: fix various errors uncovered by goreportcard.com 5231 - interfaces/builtin: allow additional shared memory for webkit 5232 - many: some more missing snapState->snapst 5233 - asserts: introduce an optional freeform display-name for model 5234 - interfaces/builtin: rename usb-raw to raw-usb 5235 - progress: init pbar with correct total value 5236 - daemon/api.go: add quotedNames() helper 5237 - interfaces: add ConfinementOptions type 5238 - tests: add a test about the extra bits that prepare-device can 5239 specify for device registration 5240 - tests: check that gpio device nodes are exported after reboot 5241 - tests: parameterize core channel with env var for classic too 5242 - many: rename variable "ss" to "snapsup" or "snapst" or "st" 5243 (depending on context) 5244 - tests: do not use external snaps in spread 5245 - store: retry buy request 5246 - store: retry store.Find 5247 - store: retry assertion store call 5248 - store: retry call for snap details 5249 - many: use snap.ConfinementType rather than bool devmode 5250 - daemon: if a bad snap is posted it is not an internal error but a 5251 bad request 5252 - client: add "Snap.Screenshots" to the client API 5253 - interfaces: update base declaration documentation and policy for 5254 on-classic and snap-type 5255 - store: check payment method before TOS for a better UX 5256 - interfaces: allow sched_setaffinity in process-control 5257 - tests: parameterize core channel with env var 5258 - tests: ensure that the XDG_ env contains at least XDG_RUNTIME_DIR 5259 - interfaces: fcitx also listens on the session bus for Qt apps 5260 - store: retry ListRefresh 5261 - snap: use "Password of <email>:" in the `snap login` 5262 - many: reshuffle how we load/inject tests keys so image doesn't 5263 need assertstate anymore 5264 - store: use range requests if we have a local file already 5265 - dirs,interfaces,overlord,snap,snapenv,test: export per-snap 5266 XDG_RUNTIME_DIR per user 5267 - osutil: make RealUser only look at SUDO_USER when uid==0 5268 - tests: do not use the ppa:snappy-dev/image in the tests 5269 - store: retry readyToBuy request 5270 - tests: increase `expect` timeouts 5271 - static tests: add spell check 5272 - tests: add debug to all flaky expect tests 5273 - systemd: correct the mount arguments when mounting with squashfuse 5274 - interfaces: add avahi-observe 5275 - store: bring delta downloads back 5276 - interfaces: add alsa 5277 - interfaces/builtin: fix a broken test that snuck into master 5278 - osutil: add chattr funcs 5279 - image: init "snap_mode" on image creation time to avoid ugly 5280 messages 5281 - tests: test-snapd-fuse-consumer needs python-fuse as a build- 5282 package 5283 - interfaces/builtin: add i2c interface 5284 - interfaces: add ofono interface 5285 - tests: do not use hello-world in our tests 5286 - snap: add support for classic confinement 5287 - interfaces: remove LegacyAutoConnect() from the interfaces 5288 - interfaces: miscellaneous policy updates 5289 - tests: run autopkgtests in the autopkgtest.ubuntu.com 5290 infrastructure 5291 - Implement lxd-client interface exposing the lxd snap 5292 - asserts: validate optional account username 5293 - many: remove unnecessary snap name parameter from buying endpoint 5294 - tests: do not hardcode the size of /dev/ram0 5295 - tests: add test that ensures the right content for /etc/os-release 5296 - spread tests: fix snap mode check 5297 - docs: fix path for source files location in HACKING.md 5298 - interfaces/builtin/mir: allow slot to make recvfrom syscalls 5299 - store: sections/featured snaps store support 5300 5301 -- Michael Vogt <michael.vogt@ubuntu.com> Thu, 24 Nov 2016 19:43:08 +0100 5302 5303 snapd (2.17.1) xenial; urgency=medium 5304 5305 * New upstream release, LP: #1637215: 5306 - release: os-release on core has changed 5307 - tests: /dev/ptmx does not work on powerpc, skip here 5308 - docs: moved to github.com/snapcore/snapd/wiki (#2258) 5309 - debian: golang is not installable on powerpc, use golang-any 5310 5311 -- Michael Vogt <michael.vogt@ubuntu.com> Fri, 04 Nov 2016 18:13:10 +0200 5312 5313 snapd (2.17) xenial; urgency=medium 5314 5315 * New upstream release, LP: #1637215: 5316 - overlord/ifacestate: add unit tests for undo of setup-snap- 5317 security (#2243) 5318 - daemon,overlord,snap,tests: download to .partial in final dir 5319 (#2237) 5320 - overlord/state: marshaling tests for lanes (#2245) 5321 - overlord/state: introduce state lanes (#2241) 5322 - overlord/snapstate: fix revert+refresh (#2224) 5323 - interfaces/sytemd: enable/disable generated service units (#2229) 5324 - many: fix incorrect security files generation on undo 5325 - overlord/snapstate: add dynamic snapdX.Y assumes (#2227) 5326 - interfaces: network-manager: give slot full read-write access to 5327 /run/NetworkManager 5328 - docs: update the name of the command for the cross-build 5329 - overlord/snapstate: fix missing argument to Noticef 5330 - snapstate: ensure gadget/core/kernel can not be disabled (#2218) 5331 - asserts: limit to 1y only if len(models) == 0 (#2219) 5332 - debian: only install share/locale if available (missing on 5333 powerpc) 5334 - overlrod/snapstate: fix revert followed by refresh to old-current 5335 (#2214) 5336 - interfaces/builtin: network-manager and bluez can change hostname 5337 (#2204) 5338 - snap: switch the auto-import dir to /run/snapd/auto-import 5339 - docs: less details about cloud.cfg as requested in trello (#2206) 5340 - spread.yaml: Ensure ubuntu user has passwordless sudo for 5341 autopkgtests (#2201) 5342 - interfaces/builtin: add dcdbas-control interface 5343 - boot: do not set boot to try mode if the revision is unchanged 5344 - interfaces: add shutdown interface (#2162) 5345 - interfaces: add system-power-control interface 5346 - many: use the new systemd backend for configuring GPIOs 5347 - overlord/ifacestate: setup security for slots before plugs 5348 - snap: spool assertion candidates if snapd is not up yet 5349 - store,daemon,overlord: download things to a partials dir 5350 - asserts,daemon: implement system-user-authority header/concept 5351 - interfaces/builtin: home base declaration rule using on-classic 5352 for its policy 5353 - interfaces/builtin: finish decl based checks 5354 - asserts: bump snap-declaration to allow signing with new-style 5355 plugs and slots 5356 - overlord: checks for kernel installation/refresh based on model 5357 assertion and previous kernel 5358 - tests/lib/fakestore: fix logic to distinguish assertion not found 5359 errors 5360 - client: add a few explicit error types (around the request cycle) 5361 - tests/lib/fakestore/cmd/fakestore: make it log, and fix a typo 5362 - overlord/snapstate: two bugs for one 5363 - snappy: disable auto-import of assertions on classic (#2122) 5364 - overlord/snapstate: move trash cleanup to a cleanup handler 5365 (#2173) 5366 - daemon: make create-user --known fail on classic without --force- 5367 managed (#2123) 5368 - asserts,interfaces/policy: implement on-classic plug/slot 5369 constraints 5370 - overlord: check that the first installed gadget matches the model 5371 assertion 5372 - tests: use the snapd-control-consumer snap from the store 5373 - cmd/snap: make snap run not talk to snapd for finding the revision 5374 - snap/squashfs: try to hard link instead of copying. Also, switch 5375 to osutil.CopyFile for cp invocation. 5376 - store: send supported max-format when retrieving assertions 5377 - snapstate, devicestate: do not remove seed 5378 - boot,image,overlord,partition: read/write boot variables in single 5379 operation 5380 - tests: reenable ubuntu-core tests on qemu 5381 - asserts,interfaces/policy: allow OR-ing of subrule constraints in 5382 plug/slot rules 5383 - many: move from flags as ints to flags as structs-of-bools (#2156) 5384 - many: add supports for keeping and finding assertions with 5385 different format iterations 5386 - snap: stop using ubuntu-core-launcher, use snap-confine 5387 - many: introduce an assertion format iteration concept, refuse to 5388 add unsupported assertion 5389 - interfaces: tweak wording and comment 5390 - spread.yaml: dump apparmor denials on spread failure 5391 - tests: unflake ubuntu-core-reboot (#2150) 5392 - cmd/snap: tweak unknown command error message (#2139) 5393 - client,daemon,cmd: add payment-declined error kind (#2107) 5394 - cmd/snap: update remove command help (#2145) 5395 - many: removed frameworks target and fixed service files (#2138) 5396 - asserts,snap: validate attributes to a JSON-compatible type subset 5397 (#2140) 5398 - asserts: remove unused serial-proof type 5399 - tests: skip auto-import tests on systems without test keys (#2142) 5400 - overlord/devicestate: don't spam the debug log on classic (#2141) 5401 - cmd/snap: simplify auto-import mountinfo parsing (#2135) 5402 - tests: run ubuntu-core upgrades on isolated machine (#2137) 5403 - overlord/devicestate: recover seeding from old external approach 5404 (#2134) 5405 - overlord: merge overlord/boot pkg into overlord/devicestate 5406 (#2118) 5407 - daemon: add postCreateUserSuite test suite (#2124) 5408 - tests: abort tests if an update process is scheduled (#2119) 5409 - snapstate: avoid reboots if nothing in the boot setup has changed 5410 (#2117) 5411 - cmd/snap: do not auto-import from loop or non-dev devices (#2121) 5412 - tests: add spread test for `snap auto-import` (#2126) 5413 - tests: add test for auto-mount assertion import (#2127) 5414 - osutil: add missing unit tests for IsMounted (#2133) 5415 - tests: check for failure creating user on managed ubuntu-core 5416 systems (#2096) 5417 - snap: ignore /dev/loop addings from udev (#2111) 5418 - tests: remove snapd.boot-ok reference (#2109) 5419 - tests: enable tests related to the home interface in all-snaps 5420 (#2106) 5421 - snapstate: only import defaults from gadget on install (#2105) 5422 - many: move firstboot code into the snapd daemon (#2033) 5423 - store: send correct JSON type of string for expected payment 5424 amount (#2103) 5425 - cmd/snap: rename is-managed to managed and tune (#2102) 5426 - interfaces,overlord/ifacestate: initial cleaning up of no arg 5427 AutoConnect related bits (#2090) 5428 - client, cmd: prompt for password when buying (#2086) 5429 - snapstate: fix hanging `snap remove` if snap is no longer mounted 5430 - image: support gadget specific cloud.conf file (#2101) 5431 - cmd/snap,ctlcmd: fix behavior of snap(ctl) get (#2093) 5432 - store: local users download from the anonymous url (#2100) 5433 - docs/hooks.md: fix typos (#2099) 5434 - many: check installation of slots and plugs against declarations 5435 - docs: fix missing "=" in the systemd-active docs 5436 - store: do not set store auth for local users (#2092) 5437 - interfaces,overlord/ifacestate: use declaration-based checking for 5438 auto-connect (#2071) 5439 - overlord, daemon, snap: support gadget config defaults (#2082)The 5440 main semantic changes are: 5441 - tests: fix snap-disconnect tests after core rename (#2088) 5442 - client,daemon,overlord,cmd: add /v2/users and create-user on auto- 5443 import (#2074) 5444 - many: abbreviated forms of disconnect (#2066) 5445 - asserts: require lowercase model until insensitive matching is 5446 ready (#2076) 5447 - cmd/snap: add version command, same as --version (#2075) 5448 - all: use "core" by default but allow "ubuntu-core" still (#2070) 5449 - overlord/devicestate, docs/hooks.md: nest prepare-device 5450 configuration options 5451 - daemon: fix login API to return local macaroons (#2078) 5452 - daemon: do not hardcode UID in userLookup (#2080) 5453 - client, cmd: connect fixes (#2026) 5454 - many: preparations for switching most of autoconnect to use the 5455 declarationsfor now: 5456 - overlord/auth: update CheckMacaroon to verify local snapd 5457 macaroons (#2069) 5458 - cmd/snap: trivial auto-import and download tweaks (#2067) 5459 - interfaces: add repo.ResolveConnect that handles name resolution 5460 - interfaces/policy: introduce InstallCandidate and its checks 5461 - interfaces/policy,overlord: check connection requests against the 5462 declarations in ifacestate 5463 - many: setup snapd macaroon for local users (#2051)Next step: do 5464 snapd macaroons verification. 5465 - interfaces/policy: implement snap-id/publisher-id checks 5466 - many: change Connect to take ConnRef instead of strings (#2060) 5467 - snap: auto mount block devices and import assertions (#2047) 5468 - daemon: add `snap create-user --force-managed` support (#2041) 5469 - docs: remove references to removed buying features (#2057) 5470 - interfaces,docs: allow sharing SNAP{,_DATA,_COMMON} via content 5471 iface (#2063) 5472 - interfaces: add Plug/Slot/Connection reference helpers (#2056) 5473 - client,daemon,cmd/snap: improve create-user APIs (#2054) 5474 - many: introduce snap refresh --ignore-validation <snap> to 5475 override refresh validation (#2052) 5476 - daemon: add support for `snap create-user --known` (#2040) 5477 - interfaces/policy: start of interface policy checking code based 5478 on declarations (#2050) 5479 - overlord/configstate: support nested configuration (#2039) 5480 - asserts,interfaces/builtin,overlord/assertstate: introduce base- 5481 declaration (#2037) 5482 - interfaces: builtin: Allow writing DHCP lease files to 5483 /run/NetworkManager/dhcp (#2049) 5484 - many: remove all traces of the /v2/buy/methods endpoint (#2045) 5485 - tests: add external spread backend (#1918) 5486 - asserts: parse the slot rules in snap-declarations (#2035) 5487 - interfaces: allow read of /etc/ld.so.preload by default for armhf 5488 on series 16 (#2048) 5489 - store: change purchase to order and store clean up first pass 5490 (#2043) 5491 - daemon, store: switch to new store APIs in snapd (#2036) 5492 - many: add email to UserState (#2038) 5493 - asserts: support parsing the plugs stanza i.e. plug rules in snap- 5494 declarations (#2027) 5495 - store: apply deltas if explicitly enabled (#2031) 5496 - tests: fix create-key/snap-sign test isolation (#2032) 5497 - snap/implicit: don't restrict the camera iface to classic (#2025) 5498 - client, cmd: change buy command to match UX document (#2011) 5499 - coreconfig: nuke it. Also, ignore po/snappy.pot. (#2030) 5500 - store: download deltas if explicitly enabled (#2017) 5501 - many: allow use of the system user assertion with create-user 5502 (#1990) 5503 - asserts,overlord,snap: add prepare-device hook for device 5504 registration (#2005) 5505 - debian: adjust packaging for trusty/deputy systemd (#2003) 5506 - asserts: introduce AttributeConstraints (#2015) 5507 - interface/builtin: access system bus on screen-inhibit-control 5508 - tests: add firewall-control interface test (#2009) 5509 - snapstate: pass errors from ListRefresh in updateInfo (#2018) 5510 - README: add links to IRC, mailing list and social media (#2022) 5511 - docs: add `configure` hook to hooks list (#2024)LP: #1596629 5512 - cmd/snap,configstate: rename apply-config variables to configure. 5513 (#2023) 5514 - store: retry download on 500 (#2019) 5515 - interfaces/builtin: support time and date settings via 5516 'org.freedesktop.timedate1 (#1832) 5517 5518 -- Michael Vogt <michael.vogt@ubuntu.com> Wed, 02 Nov 2016 01:17:36 +0200 5519 5520 snapd (2.16-1) unstable; urgency=medium 5521 5522 [ Michael Hudson-Doyle ] 5523 * New upstream release. 5524 * Import gopkg.in/cheggaaa/pb.v1 rather than github.com/cheggaaa/pb. 5525 * Switch to unconditional conflict against `snap` (Closes: #826884) 5526 * Update Vcs-Git and Vcs-Browser to point to alioth. 5527 5528 [ Steve Langasek ] 5529 * Remove govendor from gbp.conf, and import Ubuntu tarball as our 5530 orig.tar.gz (switching our packaging to non-native). 5531 * Add Uploaders. 5532 * Drop lintian overrides not used in Debian because we dynamically link 5533 against golang-yaml.v2. 5534 * Bump standards-version, no changes required. 5535 * Add/fix various lintian overrides. 5536 5537 -- Steve Langasek <vorlon@debian.org> Wed, 02 Nov 2016 12:14:52 +0000 5538 5539 snapd (2.16) xenial; urgency=medium 5540 5541 * New upstream release, LP: #1628425 5542 - overlord/state: prune old empty changes 5543 - interfaces: ppp: load needed kernel module (#2007) 5544 - interfaces/builtin: add missing rule to allow run-parts to 5545 execute all resolvconf scripts 5546 - many: rename apply-config hook to configure 5547 - tests: use new spread `debug` feature 5548 - many: finish `snap set` API. 5549 - overlord: fix and simplify configstate.Transaction 5550 - assertions: add system-user assertion 5551 - snap: add `snap known --remote` 5552 - tests: replace systemd-run with on-the-fly generation of units. 5553 - overlord/boot: switch to using assertstate.Batch 5554 - snap, daemon, store: pass through screenshots from store 5555 - image: add meta/gadget.yaml infrastructure 5556 - tests: add test benchmark script 5557 - daemon: add the actual ssh keys that got added to the create-user 5558 response 5559 - daemon: add REST API behind `snap get` 5560 - debian: re-add golang-github-gosexy-gettext-dev 5561 - tests: added install_local function 5562 - interfaces/builtin: fix resolvconf permissions for network-manager 5563 interface 5564 - tests: use apt as compatible with trusty 5565 - many: discard preserved namespace after removing snap 5566 - daemon, overlord, store: add ReadyToBuy API to snapd 5567 - many: add support for installing/removing multiple snaps 5568 - progress: use New64 and fix output newline 5569 - interfaces/builtin: allow network-manager to access netplan conf 5570 files 5571 - tests: build once and install test snap from cache 5572 - overlord/state: introduce cleanup support 5573 - snap: move/clarify Info.Broken 5574 - ctlcmd: add snapctl get. 5575 - overlord,store: clean up serial-proof plumbing code 5576 - interfaces/builtin: add network-setup-observe interface 5577 - daemon,overlord/assertstate: support streams of assertions with 5578 snap ack 5579 - snapd: kmod backend 5580 - tests: ensure HOME is also set correctly 5581 - configstate,hookstate: add snapctl set 5582 - tests: disable broken create-key test 5583 - interfaces: adjust bluetooth-control to allow getsockopt (LP: 5584 #1613572) 5585 - tests: add a test for core about device initialization and device 5586 registration and auth 5587 - many: show snap name before the download progress bar 5588 - interfaces/builtin: add rcvfrom for client connected plugs to mir 5589 interface 5590 - asserts: support for maps in assertions 5591 - tests: increase timeout for key generation in create-key test 5592 - many: validate refreshes against validation assertions by gating 5593 snaps 5594 - interfaces/apparmor: allow 'm' in default policy for snap-exec 5595 - many: avoid snap.InfoFromSnapYaml in tests 5596 - interfaces/builtin: allow /dev/net/tun with network-control 5597 - tests: add spread test for snap create-key/snap sign 5598 - tests: add missing quotes in security-device-cgroups/task.yaml 5599 - interfaces: drop ErrUnknownSecurity 5600 - store: add "ready to buy" method 5601 - snap/snapenv, tests: use root's data dirs when running via sudo 5602 - interfaces/builtin: add initial docker interface 5603 - snap: remove extra newline after progress is done 5604 - docs: fix formating of HACKING.md "Testing snapd" 5605 - store : add requestOptions.ExtraHeaders so that individual 5606 requests can customise headers. 5607 - many: use unique plug/slot names in tests 5608 - tests: add tests for the classic dimension 5609 - many: add vendoring of dependencies by default 5610 - tests: use in-tree snap{ctl,-exec} for all tests 5611 - many: support snapctl -h 5612 - tests: adjust regex after changes in stat output 5613 - store,snap: initial support for delta downloads 5614 - interfaces/builtin: add run/udev/data paths to mir interface 5615 - snap: lessen annoyance of implicit interface tests 5616 - tests: ensure http{,s}_proxy is defined inside the fake-store 5617 - interfaces: allow xdg-open in unity7, unity7 cleanups 5618 - daemon,store: move store login user logic to store 5619 - tests: replace realpath with readlink -f for trusty support. 5620 - tests: add https_proxy into environment as well 5621 - interfaces/builtin: allow mmaping pulseaudio buffers 5622 5623 -- Michael Vogt <michael.vogt@ubuntu.com> Wed, 28 Sep 2016 11:09:27 +0200 5624 5625 snapd (2.15.2ubuntu1) xenial; urgency=medium 5626 5627 * New upstream release, LP: #1623579 5628 - snap/snapenv, tests: use root's data dirs when running via sudo 5629 (cherry pick PR: #1857) 5630 - tests: add https_proxy into environment 5631 (cherry pick PR: #1926) 5632 - interfaces: allow xdg-open in unity7, unity7 cleanups 5633 (cherry pick PR: #1946) 5634 - tests: ensure http{,s}_proxy is defined inside the fake-store 5635 (cherry pick PR: #1949) 5636 5637 -- Michael Vogt <michael.vogt@ubuntu.com> Wed, 21 Sep 2016 17:21:12 +0200 5638 5639 snapd (2.15.2) xenial; urgency=medium 5640 5641 * New upstream release, LP: #1623579 5642 - asserts: define a bit less terse Ref.String 5643 - interfaces: disable auto-connect in libvirt interface 5644 - asserts: check that validation assertions are signed by the 5645 publisher of the gating snap 5646 5647 -- Michael Vogt <michael.vogt@ubuntu.com> Mon, 19 Sep 2016 10:42:29 +0200 5648 5649 snapd (2.15.1) xenial; urgency=medium 5650 5651 * New upstream release, LP: #1623579 5652 - image: ensure local snaps are put last in seed.yaml 5653 - asserts: revert change that made the account-key's name mandatory. 5654 - many: refresh all snap decls 5655 - interfaces/apparmor: allow reading /etc/environment 5656 5657 -- Michael Vogt <michael.vogt@ubuntu.com> Mon, 19 Sep 2016 09:19:44 +0200 5658 5659 snapd (2.15) xenial; urgency=medium 5660 5661 * New upstream release, LP: #1623579 5662 - tests: disable prepare-image-grub test in autopkgtest 5663 - interfaces: allow special casing for auto-connect until we have 5664 assertions 5665 - docs: add a little documentation on hooks. 5666 - hookstate,daemon: don't mock HookRunner, mock command. 5667 - tests: add http_proxy to /etc/environment in the autopkgtest 5668 environment 5669 - backends: first bits of kernel-module security backend 5670 - tests: ensure openssh-server is installed in autopkgtest 5671 - tests: make ubuntu-core tests more robust 5672 - many: mostly work to support ABA upgrades 5673 - cmd/snap: do runtime linting of descriptions 5674 - spread.yaml: don't assume LANG is set 5675 - snap: fix SNAP* environment merging in `snap run` 5676 - CONTRIBUTING.md: remove integration-tests, include spread 5677 - store: don't discard error body from request device session call 5678 - docs: add create-user documentation 5679 - cmd/snap: match UX document for message when buying without login 5680 - firstboot: do not overwrite any existing netplan config 5681 - tests: add debug output to ubuntu-core-update-rollback- 5682 stresstest: 5683 - tests/lib/prepare.sh: test that classic does not setting bootvars 5684 - snap: run all tests with gpg2 5685 - asserts: basic support for validation assertion and refresh- 5686 control 5687 - interfaces: miscellaneous policy updates for default, browser- 5688 support and camera 5689 - snap: (re)add --force-dangerous compat option 5690 - tests: ensure SUDO_{USER,GID} is unset in the spread tests 5691 - many: clean out left over references to integration tests 5692 - overlord/auth,store: fix raciness in updating device/user in state 5693 through authcontext and other issuesbonus fixes: 5694 - tests: fix spread tests on yakkety 5695 - store: refactor auth/refresh tests 5696 - asserts: use gpg --fixed-list-mode to be compatible with both gpg1 5697 and gpg2 5698 - cmd/snap: i18n option descriptions 5699 - asserts: required account key name header 5700 - tests: add yakkety test host 5701 - packaging: make sure debhelper-generated snippet is invoked on 5702 postrm 5703 - snap,store: capture newest digest from the store, make it 5704 DownloadInfo only 5705 - tests: add upower-observe spread test 5706 - Merge github.com:snapcore/snapd 5707 - tests: fixes to actually run the spread tests inside autopkgtest 5708 - cmd/snap: make "snap find" error nicer. 5709 - tests: get the gadget name from snap list 5710 - cmd/snap: tweak help of 'snap download' 5711 - cmd/snap,image: teach snap download to download also assertions 5712 - interfaces/builtin: tweak opengl interface 5713 - interfaces: serial-port use udevUsbDeviceSnippet 5714 - store: ensure the payment methods method handles auth failure 5715 - overlord/snapstate: support revert flags 5716 - many: add snap configuration to REST API 5717 - tests: use ubuntu-image for the ubuntu-core-16 image creation 5718 - cmd/snap: serialise empty keys list as [] rather than null 5719 - cmd/snap,client: add snap set and snap get commands 5720 - asserts: update trusted account-key asserts with names 5721 - overlord/snapstate: misc fixes/tweaks/cleanups 5722 - image: have prepare-image set devmode correctly 5723 - overlord/boot: have firstboot support assertion files with 5724 multiple assertions 5725 - daemon: bail from enable and disable if revision given, and from 5726 multi-op if unsupported optons given 5727 - osutil: call sync after cp if 5728 requested.overlord/snapstate/backend: switch to use osutil instead 5729 of another buggy call to cp 5730 - cmd/snap: generate account-key-request "since" header in UTC 5731 - many: use symlinks instead of wrappers 5732 - tests: remove silly [Service] entry from snapd.socket.d/local.conf 5733 - store: switch device session to use device-session-request 5734 assertion 5735 - snap: ensure that plug and slot names are unique 5736 - cmd/snap: fix test suite (no Exit(0) on tests!) 5737 - interfaces: add interface for hidraw devices 5738 - tests: use the real model assertion when creating the core test 5739 image 5740 - interfaces/builtin: add udisks2 and removable-media interfaces 5741 - interface: network_manager: enable resolvconf 5742 - interfaces/builtin: usb serial-port support via udev 5743 - interfaces/udev: support noneSecurityTag keyed snippets 5744 - snap: switch to the new agreed regexp for snap names 5745 - tests: adjust test setup after ubuntu user removal 5746 - many: start services only after the snap is fully ready (link-snap 5747 was run) 5748 - asserts: don't have Add/Check panic in the face of unsupported no- 5749 authority assertions 5750 - asserts: initial support to generate/sign snap-build assertions 5751 - asserts: support checking account-key-request assertions 5752 - overlord: introduce AuthContext.DeviceSessionRequest with support 5753 in devicestate 5754 - overlord/state: fix for reloaded task/change crashing on Set if 5755 checkpointed w. no custom data yet 5756 - snapd.refresh.service: require snap.socket and /snap/*/current. 5757 - many: spell --force-dangerous as just --dangerous, devmode should 5758 imply it 5759 - overlord/devicestate: try to fetch/refresh the signing key of 5760 serial (also in case is not there yet) 5761 - image,overlord/boot,snap: metadata from asserts for image snaps 5762 - many: automatically restart all-snap devices after os/kernel 5763 updates 5764 - interfaces: modem-manager: ignore camera 5765 - firstboot: only configure en* and eth* interfaces by default 5766 - interfaces: fix interface handling on no-app snaps 5767 - snap: set user variables even if HOME is unset (like with systemd 5768 services) 5769 5770 -- Michael Vogt <michael.vogt@ubuntu.com> Fri, 16 Sep 2016 07:46:22 +0200 5771 5772 snapd (2.14.2~16.04) xenial; urgency=medium 5773 5774 * New upstream release: LP: #1618095 5775 - tests: use the spread tests with the adhoc interface inside 5776 autopkgtest 5777 - interfaces: add fwupd interface 5778 - asserts,cmd/snap: add "name" header to account-key(-request) 5779 - client,cmd/snap: display os-release data only on classic 5780 - asserts/tool,cmd/snap: introduce hidden "snap sign" 5781 - many: when installing snap file derive metadata from assertions 5782 unless --force-dangerous 5783 - osutil: tweak the createUserTests a bit and extract common code 5784 - debian: umount --lazy before rm on snapd.postrm 5785 - interfaces: updates to default policy, browser-support, and x11 5786 - store: set initial device session 5787 - interfaces: add upower-observe interface (LP: #1595813) 5788 - tests: use beta u-d-f in test by default 5789 - interfaces/builtin: allow writing on /dev/vhci in bluetooth- 5790 control 5791 - interfaces/builtin: allow /dev/vhci on bluetooth-control 5792 - tests: port integration tests to spread 5793 - snapstate: use umount --lazy when removing the mount units 5794 - spread: enable halt-timeout, tweak image selection 5795 - tests: fix firstboot-assertions to actually be runnable on classic 5796 again 5797 - asserts: introduce device-session-request 5798 - interfaces: add screen-inhibit-control interface (LP: #1604880) 5799 - firstboot: change location of netplan config 5800 - overlord/devicestate: some cleanups and solving a couple todos 5801 - daemon,overlord: add subcommand handling to snapctl 5802 5803 -- Michael Vogt <michael.vogt@ubuntu.com> Thu, 01 Sep 2016 18:52:05 +0200 5804 5805 snapd (2.14.1) xenial; urgency=medium 5806 5807 * New upstream release: LP: #1618095 5808 - snap-exec: add support for commands with internal args in snap- 5809 exec 5810 - store: refresh expired device sessions 5811 - debian: re-add ubuntu-core-snapd-units as a transitional package 5812 - image: snap assertions into image 5813 - overlord/assertstate,asserts/snapasserts: give snap assertions 5814 helpers a package, introduce ReconstructSideInfo 5815 - docs/interfaces: Add empty line after lxd-support title 5816 - README: cover the new /run/snapd-snap.socket 5817 - daemon: make socket split backward-compatible. 5818 5819 -- Michael Vogt <michael.vogt@ubuntu.com> Tue, 30 Aug 2016 16:43:29 +0200 5820 5821 snapd (2.14) xenial; urgency=medium 5822 5823 * New upstream release: LP: #1618095 5824 - cmd: enable SNAP_REEXEC only if it is set to SNAP_REEXEC=1 5825 - osutil: fix create-user on classic 5826 - firstboot: disable firstboot on classic for now 5827 - cmd/snap: add export-key --account= option 5828 - many: split public snapd REST API into separate socket. 5829 - many: drop ubuntu-core-snapd-units package, use release.OnClassic 5830 instead 5831 - tests: add content-shareing binary test that excersises snap- 5832 confine 5833 - snap: use "up to date" instead of "up-to-date" 5834 - asserts: add an account-key-request assertion 5835 - asserts: fix GPG key generation parameters 5836 - tests, integration-tests: implement the cups-control manual test 5837 as a spread test 5838 - many: clarify/tie down model assertion 5839 - cmd/snap: add "snap download" command 5840 - integration-tests: remove them in favour of the spread tests 5841 - tests: test all snap ubuntu core upgrade 5842 - many: support install and remove by revision 5843 - overlord/state: prevent change ready => unready 5844 - tests: fixes to make the ubuntu-core-16 image usable with 5845 -keep/-reuse 5846 - asserts: authority-id and brand-id of serial must match 5847 - firstboot: generate netplan config rather than ifupdown 5848 - store: request device session macaroon from store 5849 - tests: add workaround for u-d-f to unblock all-snap image tests 5850 - tests: the stable ubuntu-core snap has snap run support now 5851 - many: use make StripGlobalRootDir public 5852 - asserts: add some stricter checks around format 5853 - many: have AuthContext expose device store-id, serial and serial- 5854 proof signing to the store 5855 - tests: fix "tests/main/ack" to not break if asserts are alreay 5856 there 5857 - tests/main/ack: fix test/style 5858 - snap: add key management commands 5859 - firstboot: add firstboot assertions importing 5860 5861 -- Michael Vogt <michael.vogt@ubuntu.com> Mon, 29 Aug 2016 17:07:20 +0200 5862 5863 snapd (2.13) xenial; urgency=medium 5864 5865 * New upstream release: LP: #1616157 5866 - many: respect dirs.SnapSnapsDir in tests 5867 - tests: update listing test for latest stable image 5868 - many: hook in start of code to fetch/check assertions when 5869 installing snap from store 5870 - boot: add missing udevadm mock to fix FTBFS 5871 - interfaces: add lxd-support interface 5872 - dirs,snap: handle empty root directory in SetRootDir 5873 - dirs,snap: define methods for SNAP_USER_DATA and SNAP_USER_COMMON 5874 - tests: spread all-snap test cleanup 5875 - tests: add all-snap spread image tests 5876 - store,tests: have just one envvar SNAPPY_USE_STAGING_STORE to 5877 control talking to staging 5878 - overlord/hookstate: use snap run posix parameters. 5879 - interfaces/builtin: allow bind in the network interface 5880 - asserts,overlord/devicestate: simplify private key/key pairs APIs, 5881 they take just key ids 5882 - dependencies: update godeps 5883 - boot: add support for "devmode: {true,false}" in seed.yaml 5884 - many: teach prepare-image to copy the model assertion (and 5885 prereqs) into the seed area of the image 5886 - tests: start teaching the fakestore about assertions 5887 - asserts/sysdb: embed the new format official root/trusted 5888 assertions 5889 - overlord/devicestate: first pass at device registration logic 5890 - tests: add process-control interface spread test 5891 - tests: disable unity test 5892 - tests: adapt to new spread version 5893 - asserts: add serial-proof device assertion 5894 - client, cmd/snap: use the new multi-refresh endpoint 5895 - many: preparations for image code to fetch model prereqs 5896 - debian: add extra checks when debian/snapd.postrm purge is run 5897 - overlord/snapstate, daemon: support for multi-snap refresh 5898 - tests: do not leave "squashfs-root" around 5899 - snap-exec: Fix broken `snap run --shell` and add test 5900 - overlord/snapstate: check changes to SnapState for conflicts also. 5901 - docs/interfaces: change snappy command to snap 5902 - tests: test `snap run --hook` using in-tree snap-exec. 5903 - partition: ensure that snap_{kernel,core} is not overridden with an 5904 empty value 5905 - asserts,overlord/assertstate: introduce an assertstate task 5906 handler to fetch snap assertions 5907 - spread: disable re-exec to always test development tree. 5908 - interfaces: implement a fuse interface 5909 - interfaces/hardware-observe.go: re-add /run/udev/data 5910 - overlord/assertstate,daemon: reorg how the assert manager exposes 5911 the assertion db and adding to it 5912 - release: Remove "UBUNTU_CODENAME" from the test data 5913 - many: implement snapctl command. 5914 - interfaces: mpris updates (fix unconfined introspection, add name 5915 attribute) 5916 - asserts: export DecodePublicKey 5917 - asserts: introduce support for assertions with no authority, 5918 implement serial-request 5919 - interfaces: bluez: add a few more tests to verify interface 5920 connection works 5921 - interfaces: bluez: add missing mount security snippet case 5922 - interfaces: add kernel-module interface for module insertion. 5923 - integration-tests: look for ubuntu-device-flash on PATH before 5924 calling sudo 5925 - client, cmd, daemon, osutil: support --yaml and --sudoer flags for 5926 create-user 5927 - spread: use snap-confine from ppa:snappy-dev/image for the tests 5928 - many: move to purely hash based key lookup and to new 5929 key/signature format (v1) 5930 - spread: Use /home/gopath in spread.yaml 5931 - tests: base security spread tests 5932 5933 -- Michael Vogt <michael.vogt@ubuntu.com> Wed, 24 Aug 2016 14:48:28 +0200 5934 5935 snapd (2.12) xenial; urgency=medium 5936 5937 * New upstream release: LP: #1612362 5938 - many: do not require root for `snap prepare-image` 5939 - tests: prevent restore error on test failure 5940 - osutil: change escaping for create-user's sudoers 5941 - docs: private flag doesn't exist on /v2/find (it's select) 5942 - snap: do not sort the result of `snap find` 5943 - interfaces/builtin: add gpio interface 5944 - partition: fix cleaning of the boot variables on the second good 5945 boot 5946 - tests: add udev rules spread test 5947 - docs: fix references to refresh action 5948 - interfaces/udev,osutil: avoid doubled rules and put all in a per 5949 snap file 5950 - store: minor store improvements from previous reviews 5951 - many: support interactive payments in snapd, filter from command 5952 line 5953 - docs/interfaces.md: improve interfaces documentation 5954 - overlord,store: set store device authorization header 5955 - store: add device nonce API support 5956 - many: various fixes around the `create-user` command 5957 - client, osutil: chown the auth file 5958 - interfaces/builtin: add transitional browser-support interface 5959 - snap: don't load unsupported implicit hooks. 5960 - cmd/snap,cmd/snap-exec: support hooks again. 5961 - interfaces/builtin: improve pulseaudio interface 5962 - asserts: make account-key's `until` optional to represent a never- 5963 expiring key 5964 - store: refactor newRequest/doRequest to take requestOptions 5965 - tests: allow-downgrades on upgrade test to prevent version errors 5966 - daemon: stop using group membership as succedaneous of running 5967 things with sudo 5968 - interfaces: add bluetooth-control interfaces 5969 - many: remove integration-test coverage metrics 5970 - daemon,docs: drop license docs and error kind 5971 - tests: add network-control interface spread test 5972 - tests: add hardware-observe spread test 5973 - interfaces: add system-trace interface LP: #1600085 5974 - boot: use `cp -aLv` instead of `cp -a` (no symlinks on vfat) 5975 - store: soft-refresh discharge macaroon from store when required 5976 - partition: clear snap_try_{kernel,core} on success 5977 - tests: add snapd-control interface spread test 5978 - tests: add locale-control write spread test 5979 - store: fix buy method after some refactoring broke it 5980 - interfaces/builtin: read perms for network devices in network- 5981 observe 5982 - interfaces: also allow rfkill in network_control 5983 - snapstate: remove artifacts from a snap try dir that vanished 5984 - client, cmd/snap: better errors for empty snap list result 5985 - wrappers: set BAMF_DESKTOP_FILE_HINT for unity 5986 - many: cleanup/update rest.md; improve auth errors 5987 - interfaces: miscelleneous policy updates for default, log-observe, 5988 mount-observe, opengl, pulseaudio, system-observe and unity7 5989 - interfaces: add process-control interface (LP: #1598225) 5990 - osutil: support both "nobody" and "nogroup" for grpnam tests 5991 - cmd: support defaulting to the user's preferred payment method 5992 - overlord: actually run hooks. 5993 - overlord/state,overlord/ifacestate: define basic infrastructure 5994 for and then setting up serialising of interface mgr tasks 5995 - asserts: add Assertion.Prerequisites and SigningKey, Ref and 5996 FindTrusted 5997 - overlord/snapstate: ensure calls to store are done without the 5998 state lock held 5999 - asserts,client: switch snap-build and snap-revision to be indexed 6000 by snap-sha3-384 6001 - many: make seed.yaml on firstboot mandatory and include sideInfo 6002 - asserts,many: start supporting structured headers using the new 6003 parseHeaders 6004 - many: update code for the new snap_mode 6005 - tests: added spread find private test 6006 - store: deal with 404 froms the SSO store properly 6007 - snap: remove meta/kernel.yaml again 6008 - daemon: always mock release info in tests 6009 - snapstate: drop revisions after "current" on refresh 6010 - asserts: introduce new parseHeadersThis introduces the new 6011 parseHeaders returning map[string]interface{} and capable of 6012 accepting: 6013 - asserts: remove/disable comma separated lists and their uses 6014 6015 -- Michael Vogt <michael.vogt@ubuntu.com> Thu, 11 Aug 2016 19:30:36 +0200 6016 6017 snapd (2.11) xenial; urgency=medium 6018 6019 * New upstream release: LP: #1605303 6020 - increase version number to reflect the nature of the update 6021 better 6022 - store, daemon, client, cmd/snap, docs/rest.md: adieu search 6023 grammar 6024 - debian: move snapd.refresh.timer into timers.target 6025 - snapstate: add daemon-reload to fix autopkgtest on yakkety 6026 - Interfaces: hardware-observe 6027 - snap: rework the output after a snap operation 6028 - daemon, cmd/snap: refresh --devmode 6029 - store, daemon, client, cmd/snap: implement `snap find --private` 6030 - tests: add network-observe interface spread test 6031 - interfaces/builtin: allow getsockopt for connected x11 plugs 6032 - osutil: check for nogrup instead of adm 6033 - store: small cleanups (more needed) 6034 - snap/squashfs: fix test not to hardcode snap size 6035 - client,cmd/snap: cleanup cmd/snap test suite, add extra args 6036 testThis cleans up the cmd/snap test suite: 6037 - wrappers: map "never" restart condition to "no." 6038 - wrappers: run update-desktop-database after add/remove of desktop 6039 files 6040 - release: work around elementary mistake 6041 - many: remove all traces of channel from the buying codepath 6042 - store: kill setUbuntuStoreHeaders 6043 - docs: add payment methods documentation 6044 - many: present user with a choice of payment backends 6045 - asserts: add cross checks for snap asserts 6046 - cmd/snap,cmd/snap-exec: support running hooks via snap-exec. 6047 - tests: improve snap run symlink tests 6048 - tests: add content sharing interface spread test 6049 - store & many: a mechanical branch shortening store names 6050 - snappy: remove old snappy pkg 6051 - overlord/snapstate: kill flagscompat 6052 - overlord/snapstate, daemon, client, cmd/snap: devmode override 6053 (aka confined) 6054 - tests: extend refresh test to talk to the staging and production 6055 stores 6056 - asserts,daemon: cross checks for account and account-key 6057 assertions 6058 - client: existing JSON fixtures uses tabs for indentation 6059 - snap-exec: add proper integration test for snap-exec 6060 - spread.yaml, tests: replace hello-world with test-snapd-tools 6061 - tests: add locale-control interface spread test 6062 - tests: add mount-observe interface spread test 6063 - tests: add system-observe interface spread test 6064 - many: add AuthContext to mediate user updates to the state 6065 - store/auth: add helper for the macaroon refresh endpoint 6066 - cmd: add buy command 6067 - overlord: switch snapstate.Update to use ListRefresh (aka 6068 /snaps/metadata) 6069 - snap-exec: fix silly off-by-one error 6070 - tests: stop using hello-world.echo in the tests 6071 - tests: add env command to test-snapd-tools 6072 - classic: remove (most of) "classic" mode, this is implemented as a 6073 snap now 6074 - many: remove snapstate.Candidate and other cleanups 6075 - many: removed authenticator, store gets a user instead 6076 - asserts: fix minor doc comment typo 6077 - snap: ensure unknown arguments to `snap run` are ignored 6078 - overlord/auth: add Device/SetDevice to persist device identity in 6079 state 6080 - overlord: make SyncBoot work again 6081 - tests: add -y flag to apt autoremove command in unity task restore 6082 - many: migrate SnapSetup and SideInfo to use RealName 6083 - daemon: drop auther() 6084 - client: improve error from client.do() on json decode failures 6085 - tests: readd the fake store tests 6086 - many: allow removal of broken snaps, add spread test 6087 - overlord: implement &Retry{After: duration} support for handlers 6088 - interface: add new interfaces.all.SecurityBackends 6089 - integration-tests: remove login tests 6090 - cmd,interfaces,snap: implement hook whitelist. 6091 - daemon,overlord/auth,store: update macaroon authentication to use 6092 the new endpoints 6093 - daemon, overlord: add buy endpoint to REST API 6094 - tests: use systemd-run for starting and stopping the unity app 6095 - tests, integration-tests: port systemd service check test to 6096 spread 6097 - store: switch search to new snap-specific endpoint 6098 - store, many: start using the new details endpoint 6099 - tests, integration-tests: port unity test to spread 6100 - tests: add spread test for tried snaps removal 6101 - tests, integration-tests: port auth errors test to spread 6102 - snapstate: rename OfficialName to RealName in the new tests 6103 - many: rename SideInfo.OfficialName to SideInfo.RealName 6104 - snapstate: use snapstate.Type in backend.RemoveSnapFiles 6105 - many: add `snap enable/disable` commands 6106 - tests, integration-tests: port refresh all test to spread 6107 - snap: add `snap run --shell` 6108 - tests: set yaml indentation to 4 spaces 6109 - snapstate: cleanup downloaded temp snap files 6110 - overlord: make patch1_test more robust 6111 - debian: add snapd.postrm that purges 6112 - integration-tests: drop already covered refresh app test 6113 - many: add concept of "broken" snaps 6114 - tests, integration-tests: port remove errors tests to spread 6115 - tests, integration-tests: port revert test to spread 6116 - debian: fix snapbuild path 6117 - overlord: fix access to the state without lock in firstboot.go and 6118 add test 6119 - snapstate: add very simple garbage collection on upgrade 6120 - asserts: introduce assertstest with helpers to test code involving 6121 assertions 6122 - tests, integration tests: port undone failed install test to 6123 spread 6124 - snap,store: switch to the new snaps/metadata endpoint, introduce 6125 and start capturing DeveloperID 6126 - tests, integration-tests: port the op remove retry test to spread 6127 - po: remove snappy.pot from git, it will be generated at build time 6128 - many: add some missing tests, clarify some things and nitpicks as 6129 follow up to `snap revert` 6130 - snapstate: when doing snapsate.Update|Install, talk to the store 6131 early 6132 - tests, integration-tests: port the op remove test to spread 6133 - interfaces: allow /usr/bin/locale in default policy 6134 - many: add `snap revert` 6135 - overlord/auth,store: add macaroon serialization/deserialization 6136 helpers 6137 - many: embed main store trusted assertions in snapd, way to have 6138 test ones, spread tests for ack and known 6139 - overlord/snapstate,daemon: clarify active vs current, add 6140 SnapState.HasCurrent,CurrentInfo 6141 - tests: do not search for a specific snap (we hit 100 items) and 6142 pagination kicks in 6143 - tests: use printf instead of echo where we need portability 6144 - tests: rename and generalize basic-binaries to test-snapd-tools 6145 6146 -- Michael Vogt <michael.vogt@ubuntu.com> Tue, 26 Jul 2016 15:49:04 +0200 6147 6148 snapd (2.0.10) xenial; urgency=medium 6149 6150 * New upstream release: LP: #1597329 6151 - interfaces: also allow @{PROC}/@{pid}/mountinfo and 6152 @{PROC}/@{pid}/mountstats 6153 - interfaces: allow read access to /etc/machine-id and 6154 @{PROC}/@{pid}/smaps 6155 - interfaces: miscelleneous policy updates for default, log-observe 6156 and system-observe 6157 - snapstate: add logging after a successful doLinkSnap 6158 - tests, integration-tests: port try tests to spread 6159 - store, cmd/snapd: send a basic user-agent to the store 6160 - store: add buy method 6161 - client: retry on failed GETs 6162 - tests: actual refresh test 6163 - docs: REST API update 6164 - interfaces: add mount support for hooks. 6165 - interfaces: add udev support for hooks. 6166 - interfaces: add dbus support for hooks. 6167 - tests, integration-tests: port refresh test to spread 6168 - tests, integration-tests: port change errors test to spread 6169 - overlord/ifacestate: don't retry snap security setup 6170 - integration-tests: remove unused file 6171 - tests: manage the socket unit when reseting state 6172 - overlord: improve organization of state patches 6173 - tests: wait for snapd listening after reset 6174 - interfaces/builtin: allow other sr*/scd* optical devices 6175 - systemd: add support for squashfuse 6176 - snap: make snaps vanishing less fatal for the system 6177 - snap-exec: os.Exec() needs argv0 in the args[] slice too 6178 - many: add new `create-user` command 6179 - interfaces: auto-connect content interfaces with the same content 6180 and developer 6181 - snapstate: add Current revision to SnapState 6182 - readme: tweak readme blurb 6183 - integration-tests: wait for listening port instead of active 6184 service reported by systemd 6185 - many: rename Current -> {CurrentSideInfo,CurrentInfo} 6186 - spread: fix home interface test after suite move 6187 - many: name unversioned data. 6188 - interfaces: add "content" interface 6189 - overlord/snapstate: defaultBackend can go away now 6190 - debian: comment to remember why the timer is setup like it is 6191 - tests,spread.yaml: introduce an upgrade test, support/split into 6192 two suites for this 6193 - overlord,overlord/snapstate: ensure we keep snap type in snapstate 6194 of each snap 6195 - many: rework the firstboot support 6196 - integration-tests: fix test failure 6197 - spread: keep core on suite restore 6198 - tests: temporary fix for state reset 6199 - overlord: add infrastructure for simple state format/content 6200 migrations 6201 - interfaces: add seccomp support for hooks. 6202 - interfaces: allow gvfs shares in home and temporarily allow 6203 socketcall by default (LP: #1592901, LP: #1594675) 6204 - tests, integration-tests: port network-bind interface tests to 6205 spread 6206 - snap,snap/snaptest: use PopulateDir/MakeTestSnapWithFiles directly 6207 and remove MockSnapWithHooks 6208 - interfaces: add mpris interface 6209 - tests: enable `snap run` on i386 6210 - tests, integration-tests: port network interface test to spread 6211 - tests, integration-tests: port interfaces cli to spread 6212 - tests, integration-tests: port leftover install tests to spread 6213 - interfaces: add apparmor support for hooks. 6214 - tests, integration-tests: port log-observe interface tests to 6215 spread 6216 - asserts: improve Decode doc comment about assertion format 6217 - tests: moved snaps to lib 6218 - many: add the camera interface 6219 - many: add optical-drive interface 6220 - interfaces: auto-connect home if running on classic 6221 - spread: bump gccgo test timeout 6222 - interfaces: use security tags to index security snippets. 6223 - daemon, overlord/snapstate, store: send confinement header to the 6224 store for install 6225 - spread: run tests on 16.04 i386 concurrently 6226 - tests,integration-tests: port install error tests to spread 6227 - interfaces: add a serial-port interface 6228 - tests, integration-tests, debian: port sideload install tests to 6229 spread 6230 - interfaces: add new bind security backend and refactor 6231 backendtests 6232 - snap: load and validate implicit hooks. 6233 - tests: add a build/run test for gccgo in spread 6234 - cmd/snap/cmd_login: Adjust message after adding support for wheel 6235 group 6236 - tests, integration-tests: ported install from store tests to 6237 spread 6238 - snap: make `snap change <taskid>` show task progress 6239 - tests, integration-tests: port search tests to spread 6240 - overlord/state,daemon: make abort proceed immediately, fix doc 6241 comment, improve tests 6242 - daemon: extend privileged access to users in "wheel" group 6243 - snap: tweak `snap refresh` and `snap refresh --list` outputTiny 6244 branch that does three things: 6245 - interfaces: refactor auto-connection candidate check 6246 - snap: add support for snap {install,refresh} 6247 --{edge,beta,candidate,stable} 6248 - release: don't force KDE Neon into devmode. 6249 6250 -- Michael Vogt <michael.vogt@ubuntu.com> Wed, 29 Jun 2016 21:02:39 +0200 6251 6252 snapd (2.0.9) xenial; urgency=medium 6253 6254 * New upstream release: LP: #1593201 6255 - snap: add the magic redirect part of `snap run` 6256 - tests, integration-tests: port server related tests to spread 6257 - overlord/snapstate: log restarting in the task 6258 - daemon: test restart wiring, fix setup/teardown 6259 - cmd: don't show the price if a snap has already been purchased 6260 - tests, integration-tests: port listing tests to spread 6261 - integration-tests: do not try to kill ubuntu-clock-app.clock (no 6262 longer a process) 6263 - several: tie up overlord's restart handler into daemon; adjust 6264 snap to cope 6265 - tests, integration-tests: port abort tests to spread 6266 - integration-tests: fix flaky TestRemoveBusyRetries 6267 - testutils: refactor/mock exec 6268 - snap,cmd: add hook support to snap run. 6269 - overlord/snapstate: remove Download from backend 6270 - store: use a custom logging transport 6271 - overlord/hookstate: implement basic HookManager. 6272 - spread: move the suite restore to restore-each 6273 - asserts: turn model os into model core field, making it also more 6274 like the kernel and gadget fields 6275 - asserts: / is not allowed in primary key headers, follow the store 6276 in this 6277 - release: enable full confinement on Elementary 0.4 6278 - integration-tests: fix another i386 autopkgtest failure. 6279 - cmd/snap: create SNAP_USER_DATA and common dirs in `snap run` 6280 - many: have the installation of the core snap request a restart (on 6281 classic) 6282 - asserts: allow to load also account assertions into the trusted 6283 set 6284 - many: install snaps in devmode on distributions without complete 6285 apparmor and seccomp support 6286 - spread: run on travis 6287 - snapenv: do not hardcode amd64 in tests 6288 - spread: initial harness and first test 6289 - interfaces: miscelleneous policy updates for chromium, x86, 6290 opengl, etc 6291 - integration-tests: remove daemon to use the log-observe interface 6292 - client: remove client.Revision and import snap.Revision instead 6293 - integration-tests: wait for network-bind service in try test 6294 - many: move over from snappy to snapstate/backend SetupSnap and 6295 related code 6296 - integration-tests: add interfaces cli tests 6297 - snapenv: cleanup snapenv.{Basic,User} 6298 - cmd/snap: also print slots that connect to the wanted snap (LP: 6299 #1590704) 6300 - asserts: error style, use "cannot" instead of "failed to" 6301 following the main decided style 6302 - integration-tests: wait until the network-bind service is up 6303 before testing 6304 - many: add new `snap run` command 6305 - snappy: unexport snappy.Install and snappy.Overlord.{Un,}Install 6306 - many: add some shared testing helpers to snap/snaptest and to 6307 boot/boottest 6308 - rest-api: support to send apps per snap (LP: #1564076) 6309 6310 -- Michael Vogt <michael.vogt@ubuntu.com> Thu, 16 Jun 2016 13:56:12 +0200 6311 6312 snapd (2.0.8.1) UNRELEASED; urgency=medium 6313 6314 * New upstream release 6315 - Cherry pick four commits that show snaps as installed in devmode on 6316 distributions without full confinement dependencies available: 6317 6318 25634d3364a46b5e9147e4466932c59b1b572d35 6319 53f2e8d5f1b2d7ce13f5b50be4c09fa1de8cf1e0 6320 38771f4cc324ad9dd4aa48b03108d13a2c361aad 6321 c46e069351c61e45c338c98ab12689a319790bd5 6322 6323 -- Zygmunt Krynicki <zygmunt.krynicki@canonical.com> Tue, 14 Jun 2016 15:55:30 +0200 6324 6325 snapd (2.0.8+1) unstable; urgency=medium 6326 6327 * New upstream release. 6328 * Update lintian-overrides for new paths. 6329 * debian/copyright: fix a typo (thanks, lintian!) 6330 6331 -- Steve Langasek <vorlon@debian.org> Fri, 10 Jun 2016 23:17:22 +0000 6332 6333 snapd (2.0.8) xenial; urgency=medium 6334 6335 * New upstream release: LP: #1589534 6336 - debian: make `snap refresh` times more random (LP: #1537793) 6337 - cmd: ExecInCoreSnap looks in "core" snap first, and only in 6338 "ubuntu-core" snap if rev>125. 6339 - cmd/snap: have 'snap list' display helper message on stderr 6340 (LP: #1587445) 6341 - snap: make app names more restrictive. 6342 6343 -- Michael Vogt <michael.vogt@ubuntu.com> Wed, 08 Jun 2016 07:56:58 +0200 6344 6345 snapd (2.0.7) xenial; urgency=medium 6346 6347 * New upstream release: LP: #1589534 6348 - debian: do not ship /etc/ld.so.conf.d/snappy.conf (LP: #1589006) 6349 - debian: fix snapd.refresh.service install and usage (LP: #1588977) 6350 - ovlerlord/state: actually support task setting themself as 6351 done/undone 6352 - snap: do not use "." import in revision_test.go, as this breaks 6353 gccgo-6 (fix build failure on powerpc) 6354 - interfaces: add fcitx and mozc input methods to unity7 6355 - interfaces: add global gsettings interfaces 6356 - interfaces: autoconnect home and doc updates (LP: #1588886) 6357 - integration-tests: remove 6358 abortSuite.TestAbortWithValidIdInDoingStatus 6359 - many: adding backward compatible code to upgrade SnapSetup.Flags 6360 - overlord/snapstate: handle sideloading over an old sideloaded snap 6361 without panicing 6362 - interfaces: add socketcall() to the network/network-bind 6363 interfaces (LP: #1588100) 6364 - overlord/snapstate,snappy: move over CanRemoveThis moves over the 6365 CanRemove check to snapstate itself.overlord/snapstate 6366 - snappy: move over CanRemove 6367 - overlord/snapstate,snappy: move over CopyData and Remove*Data code 6368 6369 -- Michael Vogt <michael.vogt@ubuntu.com> Mon, 06 Jun 2016 16:35:50 +0200 6370 6371 snapd (2.0.6) xenial; urgency=medium 6372 6373 * New upstream release: LP: #1588052: 6374 - many: repository moved to snapcore/snapd 6375 - debian: add transitional pkg for the github location change 6376 - snap: ensure `snap try` work with relative paths 6377 - debian: drop run/build dependency on lsb-release 6378 - asserts/tool: gpg key pair manager 6379 - many: add new snap-exec 6380 - many: implement `snap refresh --list` and `snap refresh` 6381 - snap: add parsing support for hooks. 6382 - many: add the cups interface 6383 - interfaces: misc policy fixes (LP: #1583794) 6384 - many: add `snap try` 6385 - interfaces: allow using sysctl and scmp_sys_resolver for parsing 6386 kernel logs 6387 - debian: make snapd get its environ from /etc/environment 6388 - daemon,client,snap: revisions are now strings 6389 - interfaces: allow access to new ibus abstract socket path 6390 LP: #1580463 6391 - integration-tests: add remove tests 6392 - asserts: stronger crypto choices and follow better latest designs 6393 - snappy,daemon: hollow out more of snappy (either removing or not 6394 exporting stuff on its way out), snappy/gadget.go is gone 6395 - asserts: rename device-serial to serial 6396 - asserts: rename identity to account (and username access) 6397 - integration-tests: add changes tests 6398 - backend: add tests for environment wrapper generation 6399 - interfaces/builtin: add location-control interface 6400 - overlord/snapstate: move over check snap logic from snappy 6401 - release: use os-release instead of lsb-release for cross-distro 6402 use 6403 - asserts: allow empty snap-name for snap-declaration 6404 - interfaces/builtin,docs,snap: add the pulseaudio interface 6405 - many: add support for an environment map inside snap.yaml 6406 - overlord/snapstate: increase robustness of doLinkSnap/undoLinkSnap 6407 with sanity unit tests 6408 - snap: parse epoch property 6409 - snappy: do nothing in SetNextBoot when running on classic 6410 - snap: validate snap type 6411 - integration-tests: extend find command tests 6412 - asserts: extend tests to cover mandatory and empty headers 6413 - tests: stop the update-pot check in run-checks 6414 - snap: parse confinement property. 6415 - store: change applyUbuntuStoreHeaders to not take accept, and to 6416 take a channel 6417 - many: struct-based revisions, new representation 6418 - interfaces: remove 'audit deny' rules from network_control.go 6419 - interfaces: add com.canonical.UrlLauncher.XdgOpen to unity7 6420 interface 6421 - interfaces: firewall-control can access xtables lock file 6422 - interfaces: allow unity7 AppMenu 6423 - interfaces: allow unity7 launcher API 6424 - interfaces/builtin: add location-observe interface 6425 - snap: fixed snap empty list text LP: #1587445 6426 6427 -- Michael Vogt <michael.vogt@ubuntu.com> Thu, 02 Jun 2016 08:23:50 +0200 6428 6429 snapd (2.0.5+1) unstable; urgency=medium 6430 6431 * Initial Debian upload. Closes: #824943. 6432 * release/release{,_test}.go: use /etc/os-release, which is guaranteed to 6433 be part of base-files on both Ubuntu and Debian, instead of 6434 /etc/lsb-release which doesn't exist at all on Debian. 6435 * drop transitional packages, not needed in Debian. 6436 * Add lintian overrides for false-positive detection of embedded libyaml. 6437 * Update Vcs-* fields to point at maintainer's branch. 6438 * Add a further lintian override for the /snap directory so that the 6439 package is not automatically rejected by the NEW queue; this directory 6440 location is certainly subject to discussion for Debian, but let's have 6441 the discussion rather than blocking the package at the archive level. 6442 6443 -- Steve Langasek <vorlon@debian.org> Mon, 23 May 2016 00:36:06 +0000 6444 6445 snapd (2.0.5) xenial; urgency=medium 6446 6447 * New upstream release: LP: #1583085 6448 - interfaces: add dbusmenu, freedesktop and kde notifications to 6449 unity7 (LP: #1573188) 6450 - daemon: make localSnapInfo return SnapState 6451 - cmd: make snap list with no snaps not special 6452 - debian: workaround for XDG_DATA_DIRS issues 6453 - cmd,po: fix conflicts, apply review from #1154 6454 - snap,store: load and store the private flag sent by the store in 6455 SideInfo 6456 - interfaces/apparmor/template.go: adjust /dev/shm to be more usable 6457 - store: use purchase decorator in Snap and FindSnaps 6458 - interfaces: first version of the networkmanager interface 6459 - snap, snappy: implement the new (minmimal) kernel spec 6460 - cmd/snap, debian: move manpage generation to depend on an environ 6461 key; also, fix completion 6462 6463 -- Michael Vogt <michael.vogt@ubuntu.com> Thu, 19 May 2016 15:29:16 +0200 6464 6465 snapd (2.0.4) xenial; urgency=medium 6466 6467 * New upstream release: 6468 - interfaces: cleanup explicit denies 6469 - integration-tests: remove the ancient integration daemon tests 6470 - integration-tests: add network-bind interface test 6471 - integration-tests: add actual checks for undoing install 6472 - integration-tests: add store login test 6473 - snap: add certain implicit slots only on classic 6474 - integration-tests: add coverage flags to snapd.service ExecStart 6475 setting when building from branch 6476 - integration-tests: remove the tests for features removed in 16.04. 6477 - daemon, overlord/snapstate: "(de)activate" is no longer a thing 6478 - docs: update meta.md and security.md for current snappy 6479 - debian: always start snapd 6480 - integration-tests: add test for undoing failed install 6481 - overlord: handle ensureNext being in the past 6482 - overlord/snapstate,overlord/snapstate/backend,snappy: start 6483 backend porting LinkSnap and UnlinkSnap 6484 - debian/tests: add reboot capability to autopkgtest and execute 6485 snapPersistsSuite 6486 - daemon,snappy,progress: drop license agreement broken logic 6487 - daemon,client,cmd/snap: nice access denied message 6488 (LP: #1574829) 6489 - daemon: add user parameter to all commands 6490 - snap, store: rework purchase methods into decorators 6491 - many: simplify release package and add OnClassic 6492 - interfaces: miscellaneous policy updates 6493 - snappy,wrappers: move desktop files handling to wrappers 6494 - snappy: remove some obviously dead code 6495 - interfaces/builtin: quote apparmor label 6496 - many: remove the gadget yaml support from snappy 6497 - snappy,systemd,wrappers: move service units generation to wrappers 6498 - store: add method to determine if a snap must be bought 6499 - store: add methods to read purchases from the store 6500 - wrappers,snappy: move binary wrapper generation to new package 6501 wrappers 6502 - snap: add `snap help` command 6503 - integration-tests: remove framework-test data and avoid using 6504 config-snap for now 6505 - add integration test to verify fix for LP: #1571721 6506 6507 -- Michael Vogt <michael.vogt@ubuntu.com> Fri, 13 May 2016 17:19:37 -0700 6508 6509 snapd (2.0.3) xenial; urgency=medium 6510 6511 * New upstream micro release: 6512 - integration-tests, debian/tests: add unity snap autopkg test 6513 - snappy: introduce first feature flag for assumes: common-data-dir 6514 - timeout,snap: add YAML unmarshal function for timeout.Timeout 6515 - many: go into state.Retry state when unmounting a snap fails. 6516 (LP: #1571721, #1575399) 6517 - daemon,client,cmd/snap: improve output after snap 6518 install/refresh/remove (LP: #1574830) 6519 - integration-tests, debian/tests: add test for home interface 6520 - interfaces,overlord: support unversioned data 6521 - interfaces/builtin: improve the bluez interface 6522 - cmd: don't include the unit tests when building with go test -c 6523 for integration tests 6524 - integration-tests: teach some new trick to the fake store, 6525 reenable the app refresh test 6526 - many: move with some simplifications test snap building to 6527 snap/snaptest 6528 - asserts: define type for revision related errors 6529 - snap/snaptest,daemon,overlord/ifacestate,overlord/snapstate: unify 6530 mocking snaps behind MockSnap 6531 - snappy: fix openSnapFile's handling of sideInfo 6532 - daemon: improve snap sideload form handling 6533 - snap: add short and long description to the man-page 6534 (LP: #1570280) 6535 - snappy: remove unused SetProperty 6536 - snappy: use more accurate test data 6537 - integration-tests: add a integration test about remove removing 6538 all revisions 6539 - overlord/snapstate: make "snap remove" remove all revisions of a 6540 snap (LP: #1571710) 6541 - integration-tests: re-enable a bunch of integration tests 6542 - snappy: remove unused dbus code 6543 - overlord/ifacestate: fix setup-profiles to use new snap revision 6544 for setup (LP: #1572463) 6545 - integration-tests: add regression test for auth bug LP:#1571491 6546 - client, snap: remove obsolete TypeCore which was used in the old 6547 SystemImage days 6548 - integration-tests: add apparmor test 6549 - cmd: don't perform type assertion when we know error to be nil 6550 - client: list correct snap types 6551 - intefaces/builtin: allow getsockname on connected x11 plugs 6552 (LP: #1574526) 6553 - daemon,overlord/snapstate: read name out of sideloaded snap early, 6554 improved change summary 6555 - overlord: keep tasks unlinked from a change hidden, prune them 6556 - integration-tests: snap list on fresh boot is good again 6557 - integration-tests: add partial term to the find test 6558 - integration-tests: changed default release to 16 6559 - integration-tests: add regression test for snaps not present after 6560 reboot 6561 - integration-tests: network interface 6562 - integration-tests: add proxy related environment variables to 6563 snapd env file 6564 - README.md: snappy => snap 6565 - etc: trivial typo fix (LP:#1569892) 6566 - debian: remove unneeded /var/lib/snapd/apparmor/additional 6567 directory (LP: #1569577) 6568 - builtin/unity7.go: allow using gmenu. LP: #1576287 6569 6570 -- Michael Vogt <michael.vogt@ubuntu.com> Tue, 03 May 2016 07:51:57 +0200 6571 6572 snapd (2.0.2) xenial; urgency=medium 6573 6574 * New upstream release: 6575 - systemd: add multi-user.target (LP: #1572125) 6576 - release: our series is 16 6577 - integration-tests: fix snapd binary path for mounting the daemon 6578 built from branch 6579 - overlord,snap: add firstboot state sync 6580 6581 -- Michael Vogt <michael.vogt@ubuntu.com> Tue, 19 Apr 2016 16:02:44 +0200 6582 6583 snapd (2.0.1) xenial; urgency=medium 6584 6585 * client,daemon,overlord: fix authentication: 6586 - fix incorrect authenication check (LP: #1571491) 6587 6588 -- Michael Vogt <michael.vogt@ubuntu.com> Mon, 18 Apr 2016 07:24:33 +0200 6589 6590 snapd (2.0) xenial; urgency=medium 6591 6592 * New upstream release: 6593 - debian: put snapd in /usr/lib/snapd/ 6594 - cmd/snap: minor polishing 6595 - cmd,client,daemon: add snap abort command 6596 - overlord: don't hold locks when callling backends 6597 - release,store,daemon: no more default-channel, release=>series 6598 - many: drop support for deprecated environment variables 6599 (SNAP_APP_*) 6600 - many: support individual ids in changes cmd 6601 - overlord/state: use numeric change and task ids 6602 - overlord/auth,daemon,client,cmd/snap: logout 6603 - daemon: don't install ubuntu-core twice 6604 - daemon,client,overlord/state,cmd: add changes command 6605 - interfaces/dbus: drop superfluous backslash from template 6606 - daemon, overlord/snapstate: updates are users too! 6607 - cmd/snap,daemon,overlord/ifacestate: add support for developer 6608 mode 6609 - daemon,overlord/snapstate: on refresh use the remembered channel, 6610 default to stable channel otherwise 6611 - cmd/snap: improve UX of snap interfaces when there are no results 6612 - overlord/state: include time in task log messages 6613 - overlord: prune and abort old changes and tasks 6614 - overlord/ifacestate: add implicit slots in setup-profiles 6615 - daemon,overlord: setup authentication for store downloads 6616 - daemon: macaroon-authed users are like root, and sudoers can login 6617 - daemon,client,docs: send install options to daemon 6618 6619 -- Michael Vogt <michael.vogt@ubuntu.com> Sat, 16 Apr 2016 22:15:40 +0200 6620 6621 snapd (1.9.4) xenial; urgency=medium 6622 6623 * New upstream release: 6624 - etc: fix desktop file location 6625 - overlord/snapstate: stop an update once download sees the revision 6626 is already installed 6627 - overlord: make SnapState.DevMode a method, store flags 6628 - snappy: no more snapYaml in snappy.Snap 6629 - daemon,cmd,dirs,lockfile: drop all lockfiles 6630 - debian: use sudo in setup of the proxy environment 6631 - snap/snapenv,snappy,systemd: expose SNAP_REVISION to app 6632 environment 6633 - snap: validate similarly to what we did with old snapYaml info 6634 from squashfs snaps 6635 - daemon,store: plug in authentication for store search/details 6636 - overlord/snapstate: fix JSON name of SnapState.Candidate 6637 - overlord/snapstate: start using revisions higher than 100000 for 6638 local installs (sideloads) 6639 - interfaces,overlorf/ifacestate: honor user choice and don't auto- 6640 connect disconnected plugs 6641 - overlord/auth,daemon,client: hide user ids again 6642 - daemon,overlord/snapstate: back /snaps (and so snap list) using 6643 state 6644 - daemon,client,overlord/auth: rework state auth data 6645 - overlord/snapstate: disable Activate and Deactivate 6646 - debian: fix silly typo in autopkgtest setup 6647 - overlord/ifacestate: remove connection state with discard-conns 6648 task, on the removal of last snap 6649 - daemon,client: rename API update action to refresh 6650 - cmd/snap: rework login to be more resilient 6651 - overlord/snapstate: deny two changes on one snap 6652 - snappy: fix crash on certain snap.yaml 6653 - systemd: use native systemctl enable instead of our own 6654 implementation 6655 - store: add workaround for misbehaving store 6656 - debian: make autopkgtest use the right env vars 6657 - state: log do/undo status too when a task is run 6658 - docs: update rest.md with price information 6659 - daemon: only include price property if the snap is non-free 6660 - daemon, client, cmd/snap: connect/disconnect now async 6661 - snap,snappy: allow snaps to require system features 6662 - integration-tests: fix report of skips in SetUpTest method 6663 - snappy: clean out major bits (still using Installed) now 6664 unreferenced as cmd/snappy is gone 6665 - daemon/api,overlord/auth: add helper to get UserState from a 6666 client request 6667 6668 -- Michael Vogt <michael.vogt@ubuntu.com> Fri, 15 Apr 2016 23:30:00 +0200 6669 6670 snapd (1.9.3) xenial; urgency=medium 6671 6672 * New upstream release: 6673 - many: prepare for opengl support on classic 6674 - interfaces/apparmor: load all apparmor profiles on snap setup 6675 - daemon,client: move async resource to change in meta 6676 - debian: disable autopilot 6677 - snap: add basic progress reporting 6678 - client,cmd,daemon,snap,store: show the price of snaps in the cli 6679 - state: add minimal taskrunner logging 6680 - daemon,snap,overlord/snapstate: in the API get the snap icon using 6681 state 6682 - client,daemon,overlord: don't guess snap file vs. name 6683 - overlord/ifacestate: reload snap connections when setting up 6684 security for a given snap 6685 - snappy: remove cmd/snappy (superseded in favour of cmd/snap) 6686 - interfaecs/apparmor: remove all traces of old-security from 6687 apparmor backend 6688 - interfaces/builtin: add bluez interface 6689 - overlord/ifacestate: don't crash if connection cannot be reloaded 6690 - debian: add searchSuite to autopkgtest 6691 - client, daemon, cmd/snap: no more tasks; everything is changes 6692 - client: send authorization header in client requests 6693 - client, daemon: marshal suggested currency over REST 6694 - docs, snap: enumerate snap types correctly in docs and comments 6695 - many: add store authenticator parameter 6696 - overlord/ifacestate,daemon: setup security on conect and 6697 disconnect 6698 - interfaces/apparmor: remove unused apparmor variables 6699 - snapstate: add missing "TaskProgressAdapter.Write()" for working 6700 progress reporting 6701 - many: clean out snap config related code not for OS 6702 - daemon,client,cmd: return snap list from /v2/snaps 6703 - docs: update `/v2/snaps` endpoint documentation 6704 - interfaces: rename developerMode to devMode 6705 - daemon,client,overlord: progress current => done 6706 - daemon,client,cmd/snap: move query metadata to top-level doc 6707 - interfaces: add TestSecurityBackend 6708 - many: replace typographic quotes with ASCII 6709 - client, daemon: rework rest changes to export "ready" and "err" 6710 - overlord/snapstate,snap,store: track snap-id in side-info and 6711 therefore in state 6712 - daemon: improve mocking of interfaces API tests 6713 - integration-tests: remove origins in default snap names for udf 6714 call 6715 - integration-test: use "snap list" in GetCurrentVersion 6716 - many: almost no more NewInstalledSnap reading manifest from 6717 snapstate and backend 6718 - daemon: auto install ubuntu-core if missing 6719 - oauth,store: remove OAuth authentication logic 6720 - overlord/ifacestate: simplify some tests with implicit manager 6721 initialization 6722 - store, snappy: move away from hitting details directly 6723 - overlord/ifacestate: reload connections when restarting the 6724 manager 6725 - overlord/ifacestate: increase flexibility of unit tests 6726 - overlord: use state to discover all installed snaps 6727 - overlord/ifacestate: track connections in the state 6728 - many: separate copy-data from unlinking of current snap 6729 - overlord/auth,store/auth: add macaroon authenticator to UserState 6730 - client: support for /v2/changes and /v2/changes/{id} 6731 - daemon/api,overlord/auth: rework authenticated users information 6732 in state 6733 6734 -- Michael Vogt <michael.vogt@ubuntu.com> Thu, 14 Apr 2016 23:29:43 +0200 6735 6736 snapd (1.9.2) xenial; urgency=medium 6737 6738 * New upstream release: 6739 - cmd/snap,daemon,store: rework login command to use daemon login 6740 API 6741 - store: cache suggested currency from the store 6742 - overlord/ifacestate: modularize and extend tests 6743 - integration-tests: reenable failure tests 6744 - daemon: include progress in rest changes 6745 - daemon, overlord/state: expose individual changes 6746 - overlord/ifacestate: drop duplicate package comment 6747 - overlord/ifacestate: allow tests to override security backends 6748 - cmd/snap: install *.snap and *.snap.* as files too 6749 - interfaces/apparmor: replace /var/lib/snap with /var/snap 6750 - daemon,overlord/ifacestate: connect REST API to interfaces in the 6751 overlord 6752 - debian: remove unneeded dependencies from snapd 6753 - overlord/state: checkpoint on final progress only 6754 - osutil: introduce IsUIDInAny 6755 - overlord/snapstate: rename GetSnapState to Get, SetSnapState to 6756 Set 6757 - daemon: add id to changes json 6758 - overlord/snapstate: SetSnapState() needs locks 6759 - overlord: fix broken tests 6760 - overlord/snapstate,overlord/ifacestate: reimplement SnapInfo (as 6761 Info) actually using the state 6762 6763 -- Michael Vogt <michael.vogt@ubuntu.com> Wed, 13 Apr 2016 17:27:00 +0200 6764 6765 snapd (1.9.1.1) xenial; urgency=medium 6766 6767 * debian/tests/control: 6768 - add git to make autopkgtest work 6769 6770 -- Michael Vogt <michael.vogt@ubuntu.com> Tue, 12 Apr 2016 17:19:19 +0200 6771 6772 snapd (1.9.1) xenial; urgency=medium 6773 6774 * Add warning about installing ubuntu-core-snapd-units on Desktop systems. 6775 * Add ${misc:Depends} to ubuntu-core-snapd-units. 6776 * interfaces,overlord: add support for auto-connecting plugs on 6777 install 6778 * fix sideloading snaps and (re)add tests for this 6779 * add `ca-certificates` to the test-dependencies to fix autopkgtest 6780 failure on armhf 6781 6782 -- Michael Vogt <michael.vogt@ubuntu.com> Tue, 12 Apr 2016 14:39:57 +0200 6783 6784 snapd (1.9) xenial; urgency=medium 6785 6786 * rename source and binary package to "snapd" 6787 * update directory layout to final 16.04 layout 6788 * use `snap` command instead of the previous `snappy` 6789 * use `interface` based security 6790 * use new state engine for install/update/remove 6791 6792 -- Michael Vogt <michael.vogt@ubuntu.com> Tue, 12 Apr 2016 01:05:09 +0200 6793 6794 ubuntu-snappy (1.7.3+20160310ubuntu1) xenial; urgency=medium 6795 6796 - debian: update versionized ubuntu-core-launcher dependency 6797 - debian: tweak desktop file dir, ship Xsession.d snip for seamless 6798 integration 6799 - snappy: fix hw-assign to work with per-app udev tags 6800 - snappy: use $snap.$app as per-app udev tag 6801 - snap,snappy,systemd: %s/\<SNAP_ORIGIN\>/SNAP_DEVELOPER/g 6802 - snappy: add mksquashfs --no-xattrs parameter 6803 - snap,snappy,systemd: kill SNAP_FULLNAME 6804 6805 -- Michael Vogt <michael.vogt@ubuntu.com> Thu, 10 Mar 2016 09:26:20 +0100 6806 6807 ubuntu-snappy (1.7.3+20160308ubuntu1) xenial; urgency=medium 6808 6809 - snappy,snap: move icon under meta/gui/ 6810 - debian: add snap.8 manpage 6811 - debian: move snapd to /usr/lib/snappy/snapd 6812 - snap,snappy,systemd: remove TMPDIR, TEMPDIR, SNAP_APP_TMPDIR 6813 - snappy,dirs: add support to use desktop files from inside snaps 6814 - daemon: snapd API events endpoint redux 6815 - interfaces/builtin: add "network" interface 6816 - overlord/state: do small fixes (typo, id clashes paranoia) 6817 - overlord: add first pass of the logic in StateEngine itself 6818 - overlord/state: introduce Status/SetStatus on Change 6819 - interfaces: support permanent security snippets 6820 - overlord/state: introduce Status/SetStatus and 6821 Progress/SetProgress on Task 6822 - overlord/state: introduce Task and Change.NewTask 6823 - many: selectively swap semantics of plugs and slots 6824 - client,cmd/snap: remove useless indirection in Interfaces 6825 - interfaces: maintain Plug and Slot connection details 6826 - client,daemon,cmd/snap: change POST /2.0/interfaces to work with 6827 lists 6828 - overlord/state: introduce Change and NewChange on state to create 6829 them 6830 - snappy: bugfix for snap.yaml parsing to be more consistent with 6831 the spec 6832 - snappy,systemd: remove "ports" from snap.yaml 6833 6834 -- Michael Vogt <michael.vogt@ubuntu.com> Tue, 08 Mar 2016 11:24:09 +0100 6835 6836 ubuntu-snappy (1.7.3+20160303ubuntu4) xenial; urgency=medium 6837 6838 * rename: 6839 debian/golang-snappy-dev.install -> 6840 debian/golang-github-ubuntu-core-snappy-dev.install: 6841 6842 -- Michael Vogt <michael.vogt@ubuntu.com> Thu, 03 Mar 2016 12:29:16 +0100 6843 6844 ubuntu-snappy (1.7.3+20160303ubuntu3) xenial; urgency=medium 6845 6846 * really fix typo in dependency name 6847 6848 -- Michael Vogt <michael.vogt@ubuntu.com> Thu, 03 Mar 2016 12:21:39 +0100 6849 6850 ubuntu-snappy (1.7.3+20160303ubuntu2) xenial; urgency=medium 6851 6852 * fix typo in dependency name 6853 6854 -- Michael Vogt <michael.vogt@ubuntu.com> Thu, 03 Mar 2016 12:05:36 +0100 6855 6856 ubuntu-snappy (1.7.3+20160303ubuntu1) xenial; urgency=medium 6857 6858 - debian: update build-depends for MIR 6859 - many: implement new REST API: GET /2.0/interfaces 6860 - integration-tests: properly stop snapd from branch 6861 - cmd/snap: update tests for go-flags changes 6862 - overlord/state: implement Lock/Unlock with implicit checkpointing 6863 - overlord: split out the managers and State to their own 6864 subpackages of overlord 6865 - snappy: rename "migration-skill" to "old-security" and use new 6866 interface names instead of skills 6867 - client,cmd/snap: clarify name ambiguity in Plug or Slot 6868 - overlord: start working on state engine along spec v2, have the 6869 main skeleton follow that 6870 - classic, oauth: update tests for change in MakeRandomString() 6871 - client,cmd/snap: s/add/install/:-( 6872 - interfaces,daemon: specialize Name to either Plug or Slot 6873 - interfaces,interfaces/types: unify security snippet functions 6874 - snapd: close the listener on Stop, to force the http.Serve loop to 6875 exit 6876 - snappy,daemon,snap/lightweight,cmd/snappy,docs/rest.md: expose 6877 explicit channel selection to rest api 6878 - interfaces,daemon: rename package holding built-in interfaces 6879 - integration-tests: add the first classic dimension tests 6880 - client,deaemon,docs: rename skills to interfaces on the wire 6881 - asserts: add identity assertion type 6882 - integration-tests: add the no_proxy env var 6883 - debian: update build-depends for new package names 6884 - oauth: fix oauth & quoting in the oauth_signature 6885 - integration-tests: remove unused field 6886 - integration-tests: add the http proxy argument 6887 - interfaces,interfaces/types,deamon: mass internal rename to 6888 interfaces 6889 - client,cmd/snap: rename skills to interfaces (part 2) 6890 - arch: fix missing mapping for powerpc 6891 6892 -- Michael Vogt <michael.vogt@ubuntu.com> Thu, 03 Mar 2016 11:00:19 +0100 6893 6894 ubuntu-snappy (1.7.3+20160225ubuntu1) xenial; urgency=medium 6895 6896 - integration-tests: always use the built snapd when compiling 6897 binaries from branch 6898 - cmd/snap: rename skills to interfaces 6899 - testutil,skills/types,skills,daemon: tweak discovery of know skill 6900 types 6901 - docs: add docs for arm64 cross building 6902 - overlord: implement basic ReadState/WriteState 6903 - overlord: implement Get/Set/Copy on State 6904 - integration-tests: fix dd output check 6905 - integration-tests: add fromBranch config field 6906 - integration-tests: use cli pkg methods in hwAssignSuite 6907 - debian: do not create the snappypkg user, we don't need it anymore 6908 - arch: fix build failure on s390x 6909 - classic: cleanup downloaded lxd tarball 6910 - cmd/snap,client,integration-tests: rename snap subcmds 6911 'assert'=>'ack', 'asserts'=>'known' 6912 - skills: fix broken tests builds 6913 - skills,skills/types: pass slot to SlotSecuritySnippet() 6914 - skills/types: teach bool-file about udev security 6915 6916 -- Michael Vogt <michael.vogt@ubuntu.com> Thu, 25 Feb 2016 16:17:19 +0100 6917 6918 ubuntu-snappy (1.7.2+20160223ubuntu1) xenial; urgency=medium 6919 6920 * New git snapshot: 6921 - asserts: introduce snap-declaration 6922 - cmd/snap: fix integration tests for the "cmd_asserts" 6923 - integration-tests: fix fanctl output check 6924 - cmd/snap: fix test failure after merging 23a64e6 6925 - cmd/snap: replace skip-help with empty description 6926 - docs: update security.md to match current migration-skill 6927 semantics 6928 - snappy: treat commands with 'daemon' field as services 6929 - asserts: use more consistent names for receivers in 6930 snap_asserts*.go 6931 - debian: add missing golang-websocket-dev build-dependency 6932 - classic: if classic fails to get created, undo the bind mounts 6933 - snappy: never return nil in NewLocalSnapRepository() 6934 - notifications: A simple notification system 6935 - snappy: when using staging, authenticate there instead 6936 - integration-tests/snapd: fix the start of the test snapd socket 6937 - skills/types: use CamelCase for security names 6938 - skills: add support for implicit revoke 6939 - skills: add security layer 6940 - integration-tests: use exec.Command wrapper for updates 6941 - cmd/snap: add 'snap skills' 6942 - cms/snap: add 'snap revoke' 6943 - docs: add docs for skills API 6944 - cmd/snap: add 'snap grant' 6945 - cmd/snappy, coreconfig, daemon, snappy: move config to always be 6946 bytes (in and out) 6947 - overlord: start with a skeleton and stubs for Overlord, 6948 StateEngine, StateJournal and managers 6949 - integration-tests: skip tests affected by LP: #1544507 6950 - skills/types: add bool-file 6951 - po: refresh translation templates 6952 - cmd/snap: add 'snap experimental remove-skill-slot' 6953 - asserts: introduce device assertion 6954 - cmd/snap: implemented add, remove, purge, refresh, rollback, 6955 activate, deactivate 6956 - cmd/snap: add 'snap experimental add-skill-slot' 6957 - cmd/snap: add 'snap experimental remove-skill' 6958 - cmd/snap: add tests for common skills code 6959 - cmd/snap: add 'snap experimental add-skill' 6960 - asserts: make assertion checkers used by db.Check modular and 6961 pluggable 6962 - cmd,client,daemon,caps,docs,po: remove capabilities 6963 - scripts: move the script to get dependencies to a separate file 6964 - asserts: make the disk layout compatible for storing more than one 6965 revision 6966 - cmd/snap: make the assert command options exported 6967 - integration-tests: Remove the target release and channel 6968 - asserts: introduce model assertion 6969 - integration-tests: add exec.Cmd wrapper 6970 - cmd/snap: add client test support methods 6971 - cmd/snap: move key=value attribute parsing to commmon 6972 - cmd/snap: apply new style consistency to "snap" commands. 6973 - cmd/snap: support redirecting the client for testing 6974 - cmd/snap: support testing command output 6975 - snappy,daemon: remove the meta repositories abstractions 6976 - cmd: add support for experimental commands 6977 - cmd/snappy,daemon,snap,snappy: remove SetActive from parts 6978 - cmd/snappy,daemon,snappy,snap: remove config from parts interface 6979 - client: improve test data 6980 - cmd: allow to construct a fresh parser 6981 - cmd: don't treat help as an error 6982 - cmd/snappy,snappy: remove "Details" from the repository interface 6983 - asserts: check that primary keys are set when 6984 Decode()ing/assembling assertions 6985 - snap,snappy: refactor to remove "Install" from the Part interface 6986 - client,cmd: make client.New() configurable 6987 - client: enable retrieving asynchronous operation information with 6988 `Client.Operation`. 6989 6990 -- Michael Vogt <michael.vogt@ubuntu.com> Tue, 23 Feb 2016 11:28:18 +0100 6991 6992 ubuntu-snappy (1.7.2+20160204ubuntu1) xenial; urgency=medium 6993 6994 * New git snapshot: 6995 - integration-tests: fix the rollback error messages 6996 - integration-test: use the common cli method when trying to install 6997 an unexisting snap 6998 - integration-tests: rename snap find test 6999 - daemon: refactor makeErrorResponder() 7000 - integration: add regression test for LP: #1541317 7001 - integration-tests: reenable TestRollbackMustRebootToOtherVersion 7002 - asserts: introduce "snap asserts" subcmd to show assertions in the 7003 system db 7004 - docs: fix parameter style 7005 - daemon: use underscore in JSON interface 7006 - client: add skills API 7007 - asserts,docs/rest.md: change Encoder not to add extra newlines at 7008 the end of the stream 7009 - integration-tests: "snappy search" is no more, its "snap search" 7010 now 7011 - README, integration-tests/tests: chmod snapd.socket after manual 7012 start. 7013 - snappy: add default security profile if none is specified 7014 - skills,daemon: add REST APIs for skills 7015 - cmd/snap, cmd/snappy: move from `snappy search` to `snap find`. 7016 - The first step towards REST world domination: search is now done 7017 via 7018 - debian: remove obsolete /etc/grub.d/09_snappy on upgrade 7019 - skills: provide different security snippets for skill and slot 7020 side 7021 - osutil: make go vet happy again 7022 - snappy,systemd: use Type field in systemd.ServiceDescription 7023 - skills: add basic grant-revoke methods 7024 - client,daemon,asserts: expose the ability to query assertions in 7025 the system db 7026 - skills: add basic methods for slot handling 7027 - snappy,daemon,snap: move "Uninstall" into overlord 7028 - snappy: move SnapFile.Install() into Overlord.Install() 7029 - integration-tests: re-enable some failover tests 7030 - client: remove snaps 7031 - asserts: uniform searching across trusted (account keys) and main 7032 backstore 7033 - asserts: introduce Decoder to parse streams of assertions and 7034 Encoder to build them 7035 - client: filter snaps with a search query 7036 - client: pass query as well as path in client internals 7037 - skills: provide different security snippets for skill and slot 7038 side 7039 - snappy: refactor snapYaml to remove methods on snapYaml type 7040 - snappy: remove unused variable from test 7041 - skills: add basic methods for skill handing 7042 - snappy: remove support for meta/package.yaml and implement new 7043 meta/snap.yaml 7044 - snappy: add new overlord type responsible for 7045 Installed/Install/Uninstall/SetActive and stub it out 7046 - skills: add basic methods for type handling 7047 - daemon, snappy: add find (aka search) 7048 - client: filter snaps by type 7049 - skills: tweak valid names and error messages 7050 - skills: add special skill type for testing 7051 - cmd/snapd,daemon: filter snaps by type 7052 - partition: remove obsolete uEnv.txt 7053 - skills: add Type interface 7054 - integration-tests: fix the bootloader path 7055 - asserts: introduce a memory backed assertion backstore 7056 - integration-tests: get name of OS snap from bootloader 7057 - cmd/snapd,daemon: filter snaps by source 7058 - asserts,daemon: bump some copyright years for things that have 7059 been touched in the new year 7060 - skills: add the initial Repository type 7061 - skills: add a name validation function 7062 - client: filter snaps by source 7063 - snappy: unmount the squashfs snap again if it fails to install 7064 - snap: make a copy of the search uri before mutating it 7065 Closes: LP#1537005 7066 - cmd/snap,client,daemon,asserts: introduce "assert " snap 7067 subcommand 7068 - cmd/snappy, snappy: fix failover handling of the "active" 7069 kernel/os snap 7070 - daemon, client, docs/rest.md, snapd integration tests: move to the 7071 new error response 7072 - asserts: change Backstore interface, backstores can now access 7073 primary key names from types 7074 - asserts: make AssertionType into a real struct exposing the 7075 metadata Name and PrimaryKey 7076 - caps: improve bool-file sanitization 7077 - asserts: fixup toolbelt to use exposed key ID. 7078 - client: return by reference rather than by value 7079 - asserts: exported filesystem backstores + explicit backstores 7080 7081 -- Michael Vogt <michael.vogt@ubuntu.com> Thu, 04 Feb 2016 16:35:31 +0100 7082 7083 ubuntu-snappy (1.7.2+20160113ubuntu1) xenial; urgency=medium 7084 7085 * New git snapshot 7086 7087 -- Michael Vogt <michael.vogt@ubuntu.com> Wed, 13 Jan 2016 11:25:40 +0100 7088 7089 ubuntu-snappy (1.7.2ubuntu1) xenial; urgency=medium 7090 7091 * New upstream release: 7092 - bin-path integration 7093 - assertions/capability work 7094 - fix squashfs based snap building 7095 7096 -- Michael Vogt <michael.vogt@ubuntu.com> Fri, 04 Dec 2015 08:46:35 +0100 7097 7098 ubuntu-snappy (1.7.1ubuntu1) xenial; urgency=medium 7099 7100 * New upstream release: 7101 - fix dependencies 7102 - fix armhf builds 7103 7104 -- Michael Vogt <michael.vogt@ubuntu.com> Wed, 02 Dec 2015 07:46:07 +0100 7105 7106 ubuntu-snappy (1.7ubuntu1) xenial; urgency=medium 7107 7108 * New upstream release: 7109 - kernel/os snap support 7110 - squashfs snap support 7111 - initial capabilities work 7112 - initial assertitions work 7113 - rest API support 7114 7115 -- Michael Vogt <michael.vogt@ubuntu.com> Wed, 18 Nov 2015 19:59:51 +0100 7116 7117 ubuntu-snappy (1.6ubuntu1) wily; urgency=medium 7118 7119 * New upstream release, including the following changes: 7120 - Fix hwaccess for gpio (LP: #1493389, LP: #1488618) 7121 - Fix handleAssets name normalization 7122 - Run boot-ok job late (LP: #1476129) 7123 - Add support for systemd socket files 7124 - Add "snappy service" command 7125 - Documentation improvements 7126 - Many test improvements (unit and integration) 7127 - Override sideload versions 7128 - Go1.5 fixes 7129 - Add i18n 7130 - Add man-page 7131 - Add .snapignore 7132 - Run services that uses external ports only after the network is up 7133 - Bufix in Synbootloader (LP: 1474125) 7134 - Use uboot.env for boot state tracking 7135 7136 -- Michael Vogt <michael.vogt@ubuntu.com> Wed, 09 Sep 2015 14:20:22 +0200 7137 7138 ubuntu-snappy (1.5ubuntu1) wily; urgency=medium 7139 7140 * New upstream release, including the following changes: 7141 - Use O_TRUNC when copying files 7142 - Added path redefinition to include test's binaries location 7143 - Don't run update-grub, instead use grub.cfg from the oem 7144 package 7145 - Do network configuration from first boot 7146 - zero size systemd of new partition made executable to 7147 prevent unrecoverable boot failure 7148 - Close downloaded files 7149 7150 -- Ricardo Salveti de Araujo <ricardo.salveti@canonical.com> Mon, 06 Jul 2015 15:14:37 -0300 7151 7152 ubuntu-snappy (1.4ubuntu1) wily; urgency=medium 7153 7154 * New upstream release, including the following changes: 7155 - Allow to run the integration tests using snappy from branch 7156 - Add CopyFileOverwrite flag and behaviour to helpers.CopyFile 7157 - add a bunch of missing i18n.G() now that we have gettext 7158 - Generate only the translators comments that start with 7159 TRANSLATORS 7160 - Try both clickpkg and snappypkg when dropping privs 7161 7162 -- Ricardo Salveti de Araujo <ricardo.salveti@canonical.com> Thu, 02 Jul 2015 16:21:53 -0300 7163 7164 ubuntu-snappy (1.3ubuntu1) wily; urgency=medium 7165 7166 * New upstream release, including the following changes: 7167 - gettext support 7168 - use snappypkg user for the installed snaps 7169 - switch to system-image-3.x as the system-image backend 7170 - more reliable developer mode detection 7171 7172 -- Michael Vogt <michael.vogt@ubuntu.com> Wed, 01 Jul 2015 10:37:05 +0200 7173 7174 ubuntu-snappy (1.2-0ubuntu1) wily; urgency=medium 7175 7176 * New upstream release, including the following changes: 7177 - Consider the root directory when installing and removing policies 7178 - In the uboot TestHandleAssetsNoHardwareYaml, patch the cache dir 7179 before creating the partition type 7180 - In the PartitionTestSuite, remove the unnecessary patches for 7181 defaultCacheDir 7182 - Fix the help output of "snappy install -h" 7183 7184 -- Ricardo Salveti de Araujo <ricardo.salveti@canonical.com> Wed, 17 Jun 2015 11:42:47 -0300 7185 7186 ubuntu-snappy (1.1.2-0ubuntu1) wily; urgency=medium 7187 7188 * New upstream release, including the following changes: 7189 - Remove compatibility for click-bin-path in generated exec-wrappers 7190 - Release the readme.md after parsing it 7191 7192 -- Ricardo Salveti de Araujo <ricardo.salveti@canonical.com> Thu, 11 Jun 2015 23:42:49 -0300 7193 7194 ubuntu-snappy (1.1.1-0ubuntu1) wily; urgency=medium 7195 7196 * New upstream release, including the following changes: 7197 - Set all app services to restart on failure 7198 - Fixes the missing oauth quoting and makes the code a bit nicer 7199 - Added integrate() to set Integration to default values needed for 7200 integration 7201 - Moved setActivateClick to be a method of SnapPart 7202 - Make unsetActiveClick a method of SnapPart 7203 - Check the package.yaml for the required fields 7204 - Integrate lp:snappy/selftest branch into snappy itself 7205 - API to record information about the image and to check if the kernel was 7206 sideloaded. 7207 - Factor out update from cmd 7208 - Continue updating when a sideload error is returned 7209 7210 -- Ricardo Salveti de Araujo <ricardo.salveti@canonical.com> Wed, 10 Jun 2015 15:54:12 -0300 7211 7212 ubuntu-snappy (1.1-0ubuntu1) wily; urgency=low 7213 7214 * New wily upload with fix for go 1.4 syscall.Setgid() breakage 7215 7216 -- Michael Vogt <michael.vogt@ubuntu.com> Tue, 09 Jun 2015 10:02:04 +0200 7217 7218 ubuntu-snappy (1.0.1-0ubuntu1) vivid; urgency=low 7219 7220 * fix symlink unpacking 7221 * fix typo in apparmor rules generation 7222 7223 -- Michael Vogt <michael.vogt@ubuntu.com> Thu, 23 Apr 2015 16:09:56 +0200 7224 7225 ubuntu-snappy (1.0-0ubuntu1) vivid; urgency=low 7226 7227 * 15.04 archive upload 7228 7229 -- Michael Vogt <michael.vogt@ubuntu.com> Thu, 23 Apr 2015 11:08:22 +0200 7230 7231 ubuntu-snappy (0.1.2-0ubuntu1) vivid; urgency=medium 7232 7233 * initial ubuntu archive upload 7234 7235 -- Michael Vogt <michael.vogt@ubuntu.com> Mon, 13 Apr 2015 22:48:13 -0500 7236 7237 ubuntu-snappy (0.1.1-0ubuntu1) vivid; urgency=low 7238 7239 * new snapshot 7240 7241 -- Michael Vogt <michael.vogt@ubuntu.com> Thu, 12 Feb 2015 13:51:22 +0100 7242 7243 ubuntu-snappy (0.1-0ubuntu1) vivid; urgency=medium 7244 7245 * Initial packaging 7246 7247 -- Sergio Schvezov <sergio.schvezov@canonical.com> Fri, 06 Feb 2015 02:25:43 -0200