github.com/freetocompute/snapd@v0.0.0-20210618182524-2fb355d72fd9/packaging/fedora/snapd.spec (about) 1 # With Fedora, nothing is bundled. For everything else, bundling is used. 2 # To use bundled stuff, use "--with vendorized" on rpmbuild 3 %if 0%{?fedora} 4 %bcond_with vendorized 5 %else 6 %bcond_without vendorized 7 %endif 8 9 # With Amazon Linux 2+, we're going to provide the /snap symlink by default, 10 # since classic snaps currently require it... :( 11 %if 0%{?amzn} >= 2 12 %bcond_without snap_symlink 13 %else 14 %bcond_with snap_symlink 15 %endif 16 17 # A switch to allow building the package with support for testkeys which 18 # are used for the spread test suite of snapd. 19 %bcond_with testkeys 20 21 %global with_devel 1 22 %global with_debug 1 23 %global with_check 0 24 %global with_unit_test 0 25 %global with_test_keys 0 26 %global with_selinux 1 27 28 # For the moment, we don't support all golang arches... 29 %global with_goarches 0 30 31 # Set if multilib is enabled for supported arches 32 %ifarch x86_64 aarch64 %{power64} s390x 33 %global with_multilib 1 34 %endif 35 36 %if ! %{with vendorized} 37 %global with_bundled 0 38 %else 39 %global with_bundled 1 40 %endif 41 42 %if ! %{with testkeys} 43 %global with_test_keys 0 44 %else 45 %global with_test_keys 1 46 %endif 47 48 %if 0%{?with_debug} 49 %global _dwz_low_mem_die_limit 0 50 %else 51 %global debug_package %{nil} 52 %endif 53 54 %global provider github 55 %global provider_tld com 56 %global project snapcore 57 %global repo snapd 58 # https://github.com/snapcore/snapd 59 %global provider_prefix %{provider}.%{provider_tld}/%{project}/%{repo} 60 %global import_path %{provider_prefix} 61 62 %global snappy_svcs snapd.service snapd.socket snapd.autoimport.service snapd.seeded.service 63 %global snappy_user_svcs snapd.session-agent.service snapd.session-agent.socket 64 65 # Until we have a way to add more extldflags to gobuild macro... 66 # Always use external linking when building static binaries. 67 %if 0%{?fedora} || 0%{?rhel} >= 8 68 %define gobuild_static(o:) go build -buildmode pie -compiler gc -tags="rpm_crashtraceback ${BUILDTAGS:-}" -ldflags "${LDFLAGS:-} -B 0x$(head -c20 /dev/urandom|od -An -tx1|tr -d ' \\n') -linkmode external -extldflags '%__global_ldflags -static'" -a -v -x %{?**}; 69 %endif 70 %if 0%{?rhel} == 7 71 # no pass PIE flags due to https://bugzilla.redhat.com/show_bug.cgi?id=1634486 72 %define gobuild_static(o:) go build -compiler gc -tags="rpm_crashtraceback ${BUILDTAGS:-}" -ldflags "${LDFLAGS:-} -B 0x$(head -c20 /dev/urandom|od -An -tx1|tr -d ' \\n') -linkmode external -extldflags '%__global_ldflags -static'" -a -v -x %{?**}; 73 %endif 74 75 # These macros are missing BUILDTAGS in RHEL 8, see RHBZ#1825138 76 %if 0%{?rhel} == 8 77 %define gobuild(o:) go build -buildmode pie -compiler gc -tags="rpm_crashtraceback ${BUILDTAGS:-}" -ldflags "${LDFLAGS:-} -B 0x$(head -c20 /dev/urandom|od -An -tx1|tr -d ' \\n') -linkmode external -extldflags '%__global_ldflags'" -a -v -x %{?**}; 78 %endif 79 80 # These macros are not defined in RHEL 7 81 %if 0%{?rhel} == 7 82 %define gobuild(o:) go build -compiler gc -tags="rpm_crashtraceback ${BUILDTAGS:-}" -ldflags "${LDFLAGS:-} -B 0x$(head -c20 /dev/urandom|od -An -tx1|tr -d ' \\n') -linkmode external -extldflags '%__global_ldflags'" -a -v -x %{?**}; 83 %define gotest() go test -compiler gc -ldflags "${LDFLAGS:-}" %{?**}; 84 %endif 85 86 # Compat path macros 87 %{!?_environmentdir: %global _environmentdir %{_prefix}/lib/environment.d} 88 %{!?_systemdgeneratordir: %global _systemdgeneratordir %{_prefix}/lib/systemd/system-generators} 89 %{!?_systemd_system_env_generator_dir: %global _systemd_system_env_generator_dir %{_prefix}/lib/systemd/system-environment-generators} 90 91 # Fedora selinux-policy includes 'map' permission on a 'file' class. However, 92 # Amazon Linux 2 does not have the updated policy containing the fix for 93 # https://bugzilla.redhat.com/show_bug.cgi?id=1574383. 94 # For now disable SELinux on Amazon Linux 2 until it's fixed. 95 %if 0%{?amzn2} == 1 96 %global with_selinux 0 97 %endif 98 99 Name: snapd 100 Version: 2.51.1 101 Release: 0%{?dist} 102 Summary: A transactional software package manager 103 License: GPLv3 104 URL: https://%{provider_prefix} 105 Source0: https://%{provider_prefix}/releases/download/%{version}/%{name}_%{version}.no-vendor.tar.xz 106 Source1: https://%{provider_prefix}/releases/download/%{version}/%{name}_%{version}.only-vendor.tar.xz 107 108 %if 0%{?with_goarches} 109 # e.g. el6 has ppc64 arch without gcc-go, so EA tag is required 110 ExclusiveArch: %{?go_arches:%{go_arches}}%{!?go_arches:%{ix86} x86_64 %{arm}} 111 %else 112 # Verified arches from snapd upstream 113 ExclusiveArch: %{ix86} x86_64 %{arm} aarch64 ppc64le s390x 114 %endif 115 116 # If go_compiler is not set to 1, there is no virtual provide. Use golang instead. 117 BuildRequires: make 118 BuildRequires: %{?go_compiler:compiler(go-compiler)}%{!?go_compiler:golang >= 1.9} 119 BuildRequires: systemd 120 %{?systemd_requires} 121 122 Requires: snap-confine%{?_isa} = %{version}-%{release} 123 Requires: squashfs-tools 124 125 %if 0%{?rhel} && 0%{?rhel} < 8 126 # Rich dependencies not available, always pull in squashfuse 127 # snapd will use squashfs.ko instead of squashfuse if it's on the system 128 # NOTE: Amazon Linux 2 does not have squashfuse, squashfs.ko is part of the kernel package 129 %if ! 0%{?amzn2} 130 Requires: squashfuse 131 Requires: fuse 132 %endif 133 %else 134 # snapd will use squashfuse in the event that squashfs.ko isn't available (cloud instances, containers, etc.) 135 Requires: ((squashfuse and fuse) or kmod(squashfs.ko)) 136 %endif 137 138 # bash-completion owns /usr/share/bash-completion/completions 139 Requires: bash-completion 140 141 %if 0%{?with_selinux} 142 # Force the SELinux module to be installed 143 Requires: %{name}-selinux = %{version}-%{release} 144 %endif 145 146 %if 0%{?fedora} && 0%{?fedora} < 30 147 # snapd-login-service is no more 148 # Note: Remove when F29 is EOL 149 Obsoletes: %{name}-login-service < 1.33 150 Provides: %{name}-login-service = 1.33 151 Provides: %{name}-login-service%{?_isa} = 1.33 152 %endif 153 154 %if ! 0%{?with_bundled} 155 BuildRequires: golang(github.com/boltdb/bolt) 156 BuildRequires: golang(github.com/coreos/go-systemd/activation) 157 BuildRequires: golang(github.com/godbus/dbus) 158 BuildRequires: golang(github.com/godbus/dbus/introspect) 159 BuildRequires: golang(github.com/gorilla/mux) 160 BuildRequires: golang(github.com/jessevdk/go-flags) 161 BuildRequires: golang(github.com/juju/ratelimit) 162 BuildRequires: golang(github.com/kr/pretty) 163 BuildRequires: golang(github.com/kr/text) 164 BuildRequires: golang(github.com/mvo5/goconfigparser) 165 BuildRequires: golang(github.com/seccomp/libseccomp-golang) 166 BuildRequires: golang(github.com/snapcore/go-gettext) 167 BuildRequires: golang(golang.org/x/crypto/openpgp/armor) 168 BuildRequires: golang(golang.org/x/crypto/openpgp/packet) 169 BuildRequires: golang(golang.org/x/crypto/sha3) 170 BuildRequires: golang(golang.org/x/crypto/ssh/terminal) 171 BuildRequires: golang(golang.org/x/xerrors) 172 BuildRequires: golang(golang.org/x/xerrors/internal) 173 BuildRequires: golang(gopkg.in/check.v1) 174 BuildRequires: golang(gopkg.in/macaroon.v1) 175 BuildRequires: golang(gopkg.in/mgo.v2/bson) 176 BuildRequires: golang(gopkg.in/retry.v1) 177 BuildRequires: golang(gopkg.in/tomb.v2) 178 BuildRequires: golang(gopkg.in/yaml.v2) 179 %endif 180 181 %description 182 Snappy is a modern, cross-distribution, transactional package manager 183 designed for working with self-contained, immutable packages. 184 185 %package -n snap-confine 186 Summary: Confinement system for snap applications 187 License: GPLv3 188 BuildRequires: autoconf 189 BuildRequires: automake 190 BuildRequires: libtool 191 BuildRequires: gcc 192 BuildRequires: gettext 193 BuildRequires: gnupg 194 BuildRequires: pkgconfig(glib-2.0) 195 BuildRequires: pkgconfig(libcap) 196 BuildRequires: pkgconfig(libseccomp) 197 %if 0%{?with_selinux} 198 BuildRequires: pkgconfig(libselinux) 199 %endif 200 BuildRequires: pkgconfig(libudev) 201 BuildRequires: pkgconfig(systemd) 202 BuildRequires: pkgconfig(udev) 203 BuildRequires: xfsprogs-devel 204 BuildRequires: glibc-static 205 %if ! 0%{?rhel} 206 BuildRequires: libseccomp-static 207 %endif 208 BuildRequires: valgrind 209 BuildRequires: %{_bindir}/rst2man 210 %if 0%{?fedora} 211 # ShellCheck in EPEL is too old... 212 BuildRequires: %{_bindir}/shellcheck 213 %endif 214 215 # Ensures older version from split packaging is replaced 216 Obsoletes: snap-confine < 2.19 217 218 %description -n snap-confine 219 This package is used internally by snapd to apply confinement to 220 the started snap applications. 221 222 %if 0%{?with_selinux} 223 %package selinux 224 Summary: SELinux module for snapd 225 License: GPLv2+ 226 BuildArch: noarch 227 BuildRequires: selinux-policy, selinux-policy-devel 228 Requires(post): selinux-policy-base >= %{_selinux_policy_version} 229 Requires(post): policycoreutils 230 %if 0%{?rhel} == 7 231 Requires(post): policycoreutils-python 232 %else 233 Requires(post): policycoreutils-python-utils 234 %endif 235 Requires(pre): libselinux-utils 236 Requires(post): libselinux-utils 237 238 %description selinux 239 This package provides the SELinux policy module to ensure snapd 240 runs properly under an environment with SELinux enabled. 241 %endif 242 243 %if 0%{?with_devel} 244 %package devel 245 Summary: Development files for %{name} 246 BuildArch: noarch 247 248 %if 0%{?with_check} && ! 0%{?with_bundled} 249 %endif 250 251 %if ! 0%{?with_bundled} 252 Requires: golang(github.com/boltdb/bolt) 253 Requires: golang(github.com/coreos/go-systemd/activation) 254 Requires: golang(github.com/godbus/dbus) 255 Requires: golang(github.com/godbus/dbus/introspect) 256 Requires: golang(github.com/gorilla/mux) 257 Requires: golang(github.com/jessevdk/go-flags) 258 Requires: golang(github.com/juju/ratelimit) 259 Requires: golang(github.com/kr/pretty) 260 Requires: golang(github.com/kr/text) 261 Requires: golang(github.com/mvo5/goconfigparser) 262 Requires: golang(github.com/seccomp/libseccomp-golang) 263 Requires: golang(github.com/snapcore/go-gettext) 264 Requires: golang(golang.org/x/crypto/openpgp/armor) 265 Requires: golang(golang.org/x/crypto/openpgp/packet) 266 Requires: golang(golang.org/x/crypto/sha3) 267 Requires: golang(golang.org/x/crypto/ssh/terminal) 268 Requires: golang(golang.org/x/xerrors) 269 Requires: golang(golang.org/x/xerrors/internal) 270 Requires: golang(gopkg.in/check.v1) 271 Requires: golang(gopkg.in/macaroon.v1) 272 Requires: golang(gopkg.in/mgo.v2/bson) 273 Requires: golang(gopkg.in/retry.v1) 274 Requires: golang(gopkg.in/tomb.v2) 275 Requires: golang(gopkg.in/yaml.v2) 276 %else 277 # These Provides are unversioned because the sources in 278 # the bundled tarball are unversioned (they go by git commit) 279 # *sigh*... I hate golang... 280 Provides: bundled(golang(github.com/snapcore/bolt)) 281 Provides: bundled(golang(github.com/coreos/go-systemd/activation)) 282 Provides: bundled(golang(github.com/godbus/dbus)) 283 Provides: bundled(golang(github.com/godbus/dbus/introspect)) 284 Provides: bundled(golang(github.com/gorilla/mux)) 285 Provides: bundled(golang(github.com/jessevdk/go-flags)) 286 Provides: bundled(golang(github.com/juju/ratelimit)) 287 Provides: bundled(golang(github.com/kr/pretty)) 288 Provides: bundled(golang(github.com/kr/text)) 289 Provides: bundled(golang(github.com/mvo5/goconfigparser)) 290 Provides: bundled(golang(github.com/mvo5/libseccomp-golang)) 291 Provides: bundled(golang(github.com/snapcore/go-gettext)) 292 Provides: bundled(golang(golang.org/x/crypto/openpgp/armor)) 293 Provides: bundled(golang(golang.org/x/crypto/openpgp/packet)) 294 Provides: bundled(golang(golang.org/x/crypto/sha3)) 295 Provides: bundled(golang(golang.org/x/crypto/ssh/terminal)) 296 Provides: bundled(golang(golang.org/x/xerrors)) 297 Provides: bundled(golang(golang.org/x/xerrors/internal)) 298 Provides: bundled(golang(gopkg.in/check.v1)) 299 Provides: bundled(golang(gopkg.in/macaroon.v1)) 300 Provides: bundled(golang(gopkg.in/mgo.v2/bson)) 301 Provides: bundled(golang(gopkg.in/retry.v1)) 302 Provides: bundled(golang(gopkg.in/tomb.v2)) 303 Provides: bundled(golang(gopkg.in/yaml.v2)) 304 %endif 305 306 # Generated by gofed 307 Provides: golang(%{import_path}/advisor) = %{version}-%{release} 308 Provides: golang(%{import_path}/arch) = %{version}-%{release} 309 Provides: golang(%{import_path}/asserts) = %{version}-%{release} 310 Provides: golang(%{import_path}/asserts/assertstest) = %{version}-%{release} 311 Provides: golang(%{import_path}/asserts/internal) = %{version}-%{release} 312 Provides: golang(%{import_path}/asserts/signtool) = %{version}-%{release} 313 Provides: golang(%{import_path}/asserts/snapasserts) = %{version}-%{release} 314 Provides: golang(%{import_path}/asserts/sysdb) = %{version}-%{release} 315 Provides: golang(%{import_path}/asserts/systestkeys) = %{version}-%{release} 316 Provides: golang(%{import_path}/boot) = %{version}-%{release} 317 Provides: golang(%{import_path}/boot/boottest) = %{version}-%{release} 318 Provides: golang(%{import_path}/bootloader) = %{version}-%{release} 319 Provides: golang(%{import_path}/bootloader/androidbootenv) = %{version}-%{release} 320 Provides: golang(%{import_path}/bootloader/assets) = %{version}-%{release} 321 Provides: golang(%{import_path}/bootloader/assets/genasset) = %{version}-%{release} 322 Provides: golang(%{import_path}/bootloader/bootloadertest) = %{version}-%{release} 323 Provides: golang(%{import_path}/bootloader/efi) = %{version}-%{release} 324 Provides: golang(%{import_path}/bootloader/grubenv) = %{version}-%{release} 325 Provides: golang(%{import_path}/bootloader/lkenv) = %{version}-%{release} 326 Provides: golang(%{import_path}/bootloader/ubootenv) = %{version}-%{release} 327 Provides: golang(%{import_path}/client) = %{version}-%{release} 328 Provides: golang(%{import_path}/client/clientutil) = %{version}-%{release} 329 Provides: golang(%{import_path}/cmd/snap) = %{version}-%{release} 330 Provides: golang(%{import_path}/cmd/snap-bootstrap) = %{version}-%{release} 331 Provides: golang(%{import_path}/cmd/snap-bootstrap/triggerwatch) = %{version}-%{release} 332 Provides: golang(%{import_path}/cmd/snap-exec) = %{version}-%{release} 333 Provides: golang(%{import_path}/cmd/snap-failure) = %{version}-%{release} 334 Provides: golang(%{import_path}/cmd/snap-preseed) = %{version}-%{release} 335 Provides: golang(%{import_path}/cmd/snap-recovery-chooser) = %{version}-%{release} 336 Provides: golang(%{import_path}/cmd/snap-repair) = %{version}-%{release} 337 Provides: golang(%{import_path}/cmd/snap-seccomp) = %{version}-%{release} 338 Provides: golang(%{import_path}/cmd/snap-seccomp/syscalls) = %{version}-%{release} 339 Provides: golang(%{import_path}/cmd/snap-update-ns) = %{version}-%{release} 340 Provides: golang(%{import_path}/cmd/snapctl) = %{version}-%{release} 341 Provides: golang(%{import_path}/cmd/snapd) = %{version}-%{release} 342 Provides: golang(%{import_path}/cmd/snaplock) = %{version}-%{release} 343 Provides: golang(%{import_path}/cmd/snaplock/runinhibit) = %{version}-%{release} 344 Provides: golang(%{import_path}/daemon) = %{version}-%{release} 345 Provides: golang(%{import_path}/dbusutil) = %{version}-%{release} 346 Provides: golang(%{import_path}/dbusutil/dbustest) = %{version}-%{release} 347 Provides: golang(%{import_path}/desktop/notification) = %{version}-%{release} 348 Provides: golang(%{import_path}/desktop/notification/notificationtest) = %{version}-%{release} 349 Provides: golang(%{import_path}/dirs) = %{version}-%{release} 350 Provides: golang(%{import_path}/docs) = %{version}-%{release} 351 Provides: golang(%{import_path}/errtracker) = %{version}-%{release} 352 Provides: golang(%{import_path}/features) = %{version}-%{release} 353 Provides: golang(%{import_path}/gadget) = %{version}-%{release} 354 Provides: golang(%{import_path}/gadget/edition) = %{version}-%{release} 355 Provides: golang(%{import_path}/gadget/install) = %{version}-%{release} 356 Provides: golang(%{import_path}/gadget/internal) = %{version}-%{release} 357 Provides: golang(%{import_path}/gadget/quantity) = %{version}-%{release} 358 Provides: golang(%{import_path}/httputil) = %{version}-%{release} 359 Provides: golang(%{import_path}/i18n) = %{version}-%{release} 360 Provides: golang(%{import_path}/i18n/xgettext-go) = %{version}-%{release} 361 Provides: golang(%{import_path}/image) = %{version}-%{release} 362 Provides: golang(%{import_path}/interfaces) = %{version}-%{release} 363 Provides: golang(%{import_path}/interfaces/apparmor) = %{version}-%{release} 364 Provides: golang(%{import_path}/interfaces/backends) = %{version}-%{release} 365 Provides: golang(%{import_path}/interfaces/builtin) = %{version}-%{release} 366 Provides: golang(%{import_path}/interfaces/dbus) = %{version}-%{release} 367 Provides: golang(%{import_path}/interfaces/hotplug) = %{version}-%{release} 368 Provides: golang(%{import_path}/interfaces/ifacetest) = %{version}-%{release} 369 Provides: golang(%{import_path}/interfaces/kmod) = %{version}-%{release} 370 Provides: golang(%{import_path}/interfaces/mount) = %{version}-%{release} 371 Provides: golang(%{import_path}/interfaces/policy) = %{version}-%{release} 372 Provides: golang(%{import_path}/interfaces/seccomp) = %{version}-%{release} 373 Provides: golang(%{import_path}/interfaces/systemd) = %{version}-%{release} 374 Provides: golang(%{import_path}/interfaces/udev) = %{version}-%{release} 375 Provides: golang(%{import_path}/interfaces/utils) = %{version}-%{release} 376 Provides: golang(%{import_path}/jsonutil) = %{version}-%{release} 377 Provides: golang(%{import_path}/jsonutil/safejson) = %{version}-%{release} 378 Provides: golang(%{import_path}/kernel) = %{version}-%{release} 379 Provides: golang(%{import_path}/logger) = %{version}-%{release} 380 Provides: golang(%{import_path}/metautil) = %{version}-%{release} 381 Provides: golang(%{import_path}/netutil) = %{version}-%{release} 382 Provides: golang(%{import_path}/osutil) = %{version}-%{release} 383 Provides: golang(%{import_path}/osutil/disks) = %{version}-%{release} 384 Provides: golang(%{import_path}/osutil/mount) = %{version}-%{release} 385 Provides: golang(%{import_path}/osutil/squashfs) = %{version}-%{release} 386 Provides: golang(%{import_path}/osutil/strace) = %{version}-%{release} 387 Provides: golang(%{import_path}/osutil/sys) = %{version}-%{release} 388 Provides: golang(%{import_path}/osutil/udev/crawler) = %{version}-%{release} 389 Provides: golang(%{import_path}/osutil/udev/netlink) = %{version}-%{release} 390 Provides: golang(%{import_path}/overlord) = %{version}-%{release} 391 Provides: golang(%{import_path}/overlord/assertstate) = %{version}-%{release} 392 Provides: golang(%{import_path}/overlord/assertstate/assertstatetest) = %{version}-%{release} 393 Provides: golang(%{import_path}/overlord/auth) = %{version}-%{release} 394 Provides: golang(%{import_path}/overlord/cmdstate) = %{version}-%{release} 395 Provides: golang(%{import_path}/overlord/configstate) = %{version}-%{release} 396 Provides: golang(%{import_path}/overlord/configstate/config) = %{version}-%{release} 397 Provides: golang(%{import_path}/overlord/configstate/configcore) = %{version}-%{release} 398 Provides: golang(%{import_path}/overlord/configstate/proxyconf) = %{version}-%{release} 399 Provides: golang(%{import_path}/overlord/configstate/settings) = %{version}-%{release} 400 Provides: golang(%{import_path}/overlord/devicestate) = %{version}-%{release} 401 Provides: golang(%{import_path}/overlord/devicestate/devicestatetest) = %{version}-%{release} 402 Provides: golang(%{import_path}/overlord/devicestate/fde) = %{version}-%{release} 403 Provides: golang(%{import_path}/overlord/devicestate/internal) = %{version}-%{release} 404 Provides: golang(%{import_path}/overlord/healthstate) = %{version}-%{release} 405 Provides: golang(%{import_path}/overlord/hookstate) = %{version}-%{release} 406 Provides: golang(%{import_path}/overlord/hookstate/ctlcmd) = %{version}-%{release} 407 Provides: golang(%{import_path}/overlord/hookstate/hooktest) = %{version}-%{release} 408 Provides: golang(%{import_path}/overlord/ifacestate) = %{version}-%{release} 409 Provides: golang(%{import_path}/overlord/ifacestate/ifacerepo) = %{version}-%{release} 410 Provides: golang(%{import_path}/overlord/ifacestate/udevmonitor) = %{version}-%{release} 411 Provides: golang(%{import_path}/overlord/patch) = %{version}-%{release} 412 Provides: golang(%{import_path}/overlord/servicestate) = %{version}-%{release} 413 Provides: golang(%{import_path}/overlord/snapshotstate) = %{version}-%{release} 414 Provides: golang(%{import_path}/overlord/snapshotstate/backend) = %{version}-%{release} 415 Provides: golang(%{import_path}/overlord/snapstate) = %{version}-%{release} 416 Provides: golang(%{import_path}/overlord/snapstate/backend) = %{version}-%{release} 417 Provides: golang(%{import_path}/overlord/snapstate/policy) = %{version}-%{release} 418 Provides: golang(%{import_path}/overlord/snapstate/snapstatetest) = %{version}-%{release} 419 Provides: golang(%{import_path}/overlord/standby) = %{version}-%{release} 420 Provides: golang(%{import_path}/overlord/state) = %{version}-%{release} 421 Provides: golang(%{import_path}/overlord/storecontext) = %{version}-%{release} 422 Provides: golang(%{import_path}/polkit) = %{version}-%{release} 423 Provides: golang(%{import_path}/progress) = %{version}-%{release} 424 Provides: golang(%{import_path}/progress/progresstest) = %{version}-%{release} 425 Provides: golang(%{import_path}/randutil) = %{version}-%{release} 426 Provides: golang(%{import_path}/release) = %{version}-%{release} 427 Provides: golang(%{import_path}/sandbox) = %{version}-%{release} 428 Provides: golang(%{import_path}/sandbox/apparmor) = %{version}-%{release} 429 Provides: golang(%{import_path}/sandbox/cgroup) = %{version}-%{release} 430 Provides: golang(%{import_path}/sandbox/seccomp) = %{version}-%{release} 431 Provides: golang(%{import_path}/sandbox/selinux) = %{version}-%{release} 432 Provides: golang(%{import_path}/sanity) = %{version}-%{release} 433 Provides: golang(%{import_path}/secboot) = %{version}-%{release} 434 Provides: golang(%{import_path}/seed) = %{version}-%{release} 435 Provides: golang(%{import_path}/seed/internal) = %{version}-%{release} 436 Provides: golang(%{import_path}/seed/seedtest) = %{version}-%{release} 437 Provides: golang(%{import_path}/seed/seedwriter) = %{version}-%{release} 438 Provides: golang(%{import_path}/snap) = %{version}-%{release} 439 Provides: golang(%{import_path}/snap/channel) = %{version}-%{release} 440 Provides: golang(%{import_path}/snap/internal) = %{version}-%{release} 441 Provides: golang(%{import_path}/snap/naming) = %{version}-%{release} 442 Provides: golang(%{import_path}/snap/pack) = %{version}-%{release} 443 Provides: golang(%{import_path}/snap/snapdir) = %{version}-%{release} 444 Provides: golang(%{import_path}/snap/snapenv) = %{version}-%{release} 445 Provides: golang(%{import_path}/snap/snapfile) = %{version}-%{release} 446 Provides: golang(%{import_path}/snap/snaptest) = %{version}-%{release} 447 Provides: golang(%{import_path}/snap/squashfs) = %{version}-%{release} 448 Provides: golang(%{import_path}/snapdenv) = %{version}-%{release} 449 Provides: golang(%{import_path}/snapdtool) = %{version}-%{release} 450 Provides: golang(%{import_path}/spdx) = %{version}-%{release} 451 Provides: golang(%{import_path}/store) = %{version}-%{release} 452 Provides: golang(%{import_path}/store/storetest) = %{version}-%{release} 453 Provides: golang(%{import_path}/strutil) = %{version}-%{release} 454 Provides: golang(%{import_path}/strutil/chrorder) = %{version}-%{release} 455 Provides: golang(%{import_path}/strutil/quantity) = %{version}-%{release} 456 Provides: golang(%{import_path}/strutil/shlex) = %{version}-%{release} 457 Provides: golang(%{import_path}/sysconfig) = %{version}-%{release} 458 Provides: golang(%{import_path}/systemd) = %{version}-%{release} 459 Provides: golang(%{import_path}/testutil) = %{version}-%{release} 460 Provides: golang(%{import_path}/timeout) = %{version}-%{release} 461 Provides: golang(%{import_path}/timeutil) = %{version}-%{release} 462 Provides: golang(%{import_path}/timings) = %{version}-%{release} 463 Provides: golang(%{import_path}/usersession/agent) = %{version}-%{release} 464 Provides: golang(%{import_path}/usersession/autostart) = %{version}-%{release} 465 Provides: golang(%{import_path}/usersession/client) = %{version}-%{release} 466 Provides: golang(%{import_path}/usersession/userd) = %{version}-%{release} 467 Provides: golang(%{import_path}/usersession/userd/ui) = %{version}-%{release} 468 Provides: golang(%{import_path}/usersession/xdgopenproxy) = %{version}-%{release} 469 Provides: golang(%{import_path}/wrappers) = %{version}-%{release} 470 Provides: golang(%{import_path}/x11) = %{version}-%{release} 471 472 %description devel 473 This package contains library source intended for 474 building other packages which use import path with 475 %{import_path} prefix. 476 %endif 477 478 %if 0%{?with_unit_test} && 0%{?with_devel} 479 %package unit-test-devel 480 Summary: Unit tests for %{name} package 481 482 %if 0%{?with_check} 483 #Here comes all BuildRequires: PACKAGE the unit tests 484 #in %%check section need for running 485 %endif 486 487 # test subpackage tests code from devel subpackage 488 Requires: %{name}-devel = %{version}-%{release} 489 490 %description unit-test-devel 491 This package contains unit tests for project 492 providing packages with %{import_path} prefix. 493 %endif 494 495 %prep 496 %if ! 0%{?with_bundled} 497 %setup -q 498 # Ensure there's no bundled stuff accidentally leaking in... 499 rm -rf vendor/* 500 %else 501 # Extract each tarball properly 502 %setup -q -D -b 1 503 %endif 504 # Apply patches 505 %autopatch -p1 506 507 508 %build 509 # Generate version files 510 ./mkversion.sh "%{version}-%{release}" 511 512 # We don't want/need squashfuse in the rpm, as it's available in Fedora and EPEL 513 sed -e 's:_ "github.com/snapcore/squashfuse"::g' -i systemd/systemd.go 514 515 # Build snapd 516 mkdir -p src/github.com/snapcore 517 ln -s ../../../ src/github.com/snapcore/snapd 518 519 %if ! 0%{?with_bundled} 520 export GOPATH=$(pwd):%{gopath} 521 %else 522 export GOPATH=$(pwd):$(pwd)/Godeps/_workspace:%{gopath} 523 %endif 524 export GO111MODULE=off 525 526 # see https://github.com/gofed/go-macros/blob/master/rpm/macros.d/macros.go-compilers-golang 527 BUILDTAGS= 528 %if 0%{?with_test_keys} 529 BUILDTAGS="withtestkeys nosecboot" 530 %else 531 BUILDTAGS="nosecboot" 532 %endif 533 534 %if ! 0%{?with_bundled} 535 # We don't need mvo5 fork for seccomp, as we have seccomp 2.3.x 536 sed -e "s:github.com/mvo5/libseccomp-golang:github.com/seccomp/libseccomp-golang:g" -i cmd/snap-seccomp/*.go 537 # We don't need the snapcore fork for bolt - it is just a fix on ppc 538 sed -e "s:github.com/snapcore/bolt:github.com/boltdb/bolt:g" -i advisor/*.go errtracker/*.go 539 %endif 540 541 # We have to build snapd first to prevent the build from 542 # building various things from the tree without additional 543 # set tags. 544 %gobuild -o bin/snapd $GOFLAGS %{import_path}/cmd/snapd 545 BUILDTAGS="${BUILDTAGS} nomanagers" 546 %gobuild -o bin/snap $GOFLAGS %{import_path}/cmd/snap 547 %gobuild -o bin/snap-failure $GOFLAGS %{import_path}/cmd/snap-failure 548 549 # To ensure things work correctly with base snaps, 550 # snap-exec, snap-update-ns, and snapctl need to be built statically 551 ( 552 %if 0%{?rhel} >= 8 553 # since 1.12.1, the go-toolset module is built with FIPS compliance that 554 # defaults to using libcrypto.so which gets loaded at runtime via dlopen(), 555 # disable that functionality for statically built binaries 556 BUILDTAGS="${BUILDTAGS} no_openssl" 557 %endif 558 %gobuild_static -o bin/snap-exec $GOFLAGS %{import_path}/cmd/snap-exec 559 %gobuild_static -o bin/snap-update-ns $GOFLAGS %{import_path}/cmd/snap-update-ns 560 %gobuild_static -o bin/snapctl $GOFLAGS %{import_path}/cmd/snapctl 561 ) 562 563 %if 0%{?rhel} 564 # There's no static link library for libseccomp in RHEL/CentOS... 565 sed -e "s/-Bstatic -lseccomp/-Bstatic/g" -i cmd/snap-seccomp/*.go 566 %endif 567 %gobuild -o bin/snap-seccomp $GOFLAGS %{import_path}/cmd/snap-seccomp 568 569 %if 0%{?with_selinux} 570 ( 571 %if 0%{?rhel} == 7 572 M4PARAM='-D distro_rhel7' 573 %endif 574 # Build SELinux module 575 cd ./data/selinux 576 # pass M4PARAM in env instead of as an override, so that make can still 577 # manipulate it freely, for more details see: 578 # https://www.gnu.org/software/make/manual/html_node/Override-Directive.html 579 M4PARAM="$M4PARAM" make SHARE="%{_datadir}" TARGETS="snappy" 580 ) 581 %endif 582 583 # Build snap-confine 584 pushd ./cmd 585 autoreconf --force --install --verbose 586 # FIXME: add --enable-caps-over-setuid as soon as possible (setuid discouraged!) 587 %configure \ 588 --disable-apparmor \ 589 %if 0%{?with_selinux} 590 --enable-selinux \ 591 %endif 592 --libexecdir=%{_libexecdir}/snapd/ \ 593 --enable-nvidia-biarch \ 594 %{?with_multilib:--with-32bit-libdir=%{_prefix}/lib} \ 595 --with-snap-mount-dir=%{_sharedstatedir}/snapd/snap \ 596 --enable-merged-usr 597 598 %make_build 599 popd 600 601 # Build systemd units, dbus services, and env files 602 pushd ./data 603 make BINDIR="%{_bindir}" LIBEXECDIR="%{_libexecdir}" \ 604 SYSTEMDSYSTEMUNITDIR="%{_unitdir}" \ 605 SNAP_MOUNT_DIR="%{_sharedstatedir}/snapd/snap" \ 606 SNAPD_ENVIRONMENT_FILE="%{_sysconfdir}/sysconfig/snapd" 607 popd 608 609 %install 610 install -d -p %{buildroot}%{_bindir} 611 install -d -p %{buildroot}%{_libexecdir}/snapd 612 install -d -p %{buildroot}%{_mandir}/man8 613 install -d -p %{buildroot}%{_environmentdir} 614 install -d -p %{buildroot}%{_systemdgeneratordir} 615 install -d -p %{buildroot}%{_systemd_system_env_generator_dir} 616 install -d -p %{buildroot}%{_unitdir} 617 install -d -p %{buildroot}%{_userunitdir} 618 install -d -p %{buildroot}%{_sysconfdir}/profile.d 619 install -d -p %{buildroot}%{_sysconfdir}/sysconfig 620 install -d -p %{buildroot}%{_sharedstatedir}/snapd/assertions 621 install -d -p %{buildroot}%{_sharedstatedir}/snapd/cookie 622 install -d -p %{buildroot}%{_sharedstatedir}/snapd/dbus-1/services 623 install -d -p %{buildroot}%{_sharedstatedir}/snapd/dbus-1/system-services 624 install -d -p %{buildroot}%{_sharedstatedir}/snapd/desktop/applications 625 install -d -p %{buildroot}%{_sharedstatedir}/snapd/device 626 install -d -p %{buildroot}%{_sharedstatedir}/snapd/hostfs 627 install -d -p %{buildroot}%{_sharedstatedir}/snapd/inhibit 628 install -d -p %{buildroot}%{_sharedstatedir}/snapd/lib/gl 629 install -d -p %{buildroot}%{_sharedstatedir}/snapd/lib/gl32 630 install -d -p %{buildroot}%{_sharedstatedir}/snapd/lib/glvnd 631 install -d -p %{buildroot}%{_sharedstatedir}/snapd/lib/vulkan 632 install -d -p %{buildroot}%{_sharedstatedir}/snapd/mount 633 install -d -p %{buildroot}%{_sharedstatedir}/snapd/seccomp/bpf 634 install -d -p %{buildroot}%{_sharedstatedir}/snapd/snaps 635 install -d -p %{buildroot}%{_sharedstatedir}/snapd/snap/bin 636 install -d -p %{buildroot}%{_localstatedir}/snap 637 install -d -p %{buildroot}%{_localstatedir}/cache/snapd 638 install -d -p %{buildroot}%{_datadir}/polkit-1/actions 639 %if 0%{?with_selinux} 640 install -d -p %{buildroot}%{_datadir}/selinux/devel/include/contrib 641 install -d -p %{buildroot}%{_datadir}/selinux/packages 642 %endif 643 644 # Install snap and snapd 645 install -p -m 0755 bin/snap %{buildroot}%{_bindir} 646 install -p -m 0755 bin/snap-exec %{buildroot}%{_libexecdir}/snapd 647 install -p -m 0755 bin/snap-failure %{buildroot}%{_libexecdir}/snapd 648 install -p -m 0755 bin/snapd %{buildroot}%{_libexecdir}/snapd 649 install -p -m 0755 bin/snap-update-ns %{buildroot}%{_libexecdir}/snapd 650 install -p -m 0755 bin/snap-seccomp %{buildroot}%{_libexecdir}/snapd 651 # Ensure /usr/bin/snapctl is a symlink to /usr/libexec/snapd/snapctl 652 install -p -m 0755 bin/snapctl %{buildroot}%{_libexecdir}/snapd/snapctl 653 ln -sf %{_libexecdir}/snapd/snapctl %{buildroot}%{_bindir}/snapctl 654 655 %if 0%{?with_selinux} 656 # Install SELinux module 657 install -p -m 0644 data/selinux/snappy.if %{buildroot}%{_datadir}/selinux/devel/include/contrib 658 install -p -m 0644 data/selinux/snappy.pp.bz2 %{buildroot}%{_datadir}/selinux/packages 659 %endif 660 661 # Install snap(8) man page 662 bin/snap help --man > %{buildroot}%{_mandir}/man8/snap.8 663 664 # Install the "info" data file with snapd version 665 install -m 644 -D data/info %{buildroot}%{_libexecdir}/snapd/info 666 667 # Install bash completion for "snap" 668 install -m 644 -D data/completion/bash/snap %{buildroot}%{_datadir}/bash-completion/completions/snap 669 install -m 644 -D data/completion/bash/complete.sh %{buildroot}%{_libexecdir}/snapd 670 install -m 644 -D data/completion/bash/etelpmoc.sh %{buildroot}%{_libexecdir}/snapd 671 # Install zsh completion for "snap" 672 install -d -p %{buildroot}%{_datadir}/zsh/site-functions 673 install -m 644 -D data/completion/zsh/_snap %{buildroot}%{_datadir}/zsh/site-functions/_snap 674 675 # Install snap-confine 676 pushd ./cmd 677 %make_install 678 # Undo the 0111 permissions, they are restored in the files section 679 chmod 0755 %{buildroot}%{_sharedstatedir}/snapd/void 680 # We don't use AppArmor 681 rm -rfv %{buildroot}%{_sysconfdir}/apparmor.d 682 # ubuntu-core-launcher is dead 683 rm -fv %{buildroot}%{_bindir}/ubuntu-core-launcher 684 popd 685 686 # Install all systemd and dbus units, and env files 687 pushd ./data 688 %make_install BINDIR="%{_bindir}" LIBEXECDIR="%{_libexecdir}" \ 689 SYSTEMDSYSTEMUNITDIR="%{_unitdir}" SYSTEMDUSERUNITDIR="%{_userunitdir}" \ 690 SNAP_MOUNT_DIR="%{_sharedstatedir}/snapd/snap" \ 691 SNAPD_ENVIRONMENT_FILE="%{_sysconfdir}/sysconfig/snapd" 692 popd 693 694 %if 0%{?rhel} == 7 695 # Install kernel tweaks 696 # See: https://access.redhat.com/articles/3128691 697 install -m 644 -D data/sysctl/rhel7-snap.conf %{buildroot}%{_sysctldir}/99-snap.conf 698 %endif 699 700 # Remove snappy core specific units 701 rm -fv %{buildroot}%{_unitdir}/snapd.system-shutdown.service 702 rm -fv %{buildroot}%{_unitdir}/snapd.snap-repair.* 703 rm -fv %{buildroot}%{_unitdir}/snapd.core-fixup.* 704 rm -fv %{buildroot}%{_unitdir}/snapd.recovery-chooser-trigger.service 705 706 # Remove snappy core specific scripts and binaries 707 rm %{buildroot}%{_libexecdir}/snapd/snapd.core-fixup.sh 708 rm %{buildroot}%{_libexecdir}/snapd/system-shutdown 709 710 # Remove snapd apparmor service 711 rm -f %{buildroot}%{_unitdir}/snapd.apparmor.service 712 rm -f %{buildroot}%{_libexecdir}/snapd/snapd-apparmor 713 714 # Install Polkit configuration 715 install -m 644 -D data/polkit/io.snapcraft.snapd.policy %{buildroot}%{_datadir}/polkit-1/actions 716 717 # Disable re-exec by default 718 echo 'SNAP_REEXEC=0' > %{buildroot}%{_sysconfdir}/sysconfig/snapd 719 720 # Create state.json and the README file to be ghosted 721 touch %{buildroot}%{_sharedstatedir}/snapd/state.json 722 touch %{buildroot}%{_sharedstatedir}/snapd/snap/README 723 724 # When enabled, create a symlink for /snap to point to /var/lib/snapd/snap 725 %if %{with snap_symlink} 726 ln -sr %{buildroot}%{_sharedstatedir}/snapd/snap %{buildroot}/snap 727 %endif 728 729 # source codes for building projects 730 %if 0%{?with_devel} 731 install -d -p %{buildroot}/%{gopath}/src/%{import_path}/ 732 echo "%%dir %%{gopath}/src/%%{import_path}/." >> devel.file-list 733 # find all *.go but no *_test.go files and generate devel.file-list 734 for file in $(find . -iname "*.go" -o -iname "*.s" \! -iname "*_test.go") ; do 735 echo "%%dir %%{gopath}/src/%%{import_path}/$(dirname $file)" >> devel.file-list 736 install -d -p %{buildroot}/%{gopath}/src/%{import_path}/$(dirname $file) 737 cp -pav $file %{buildroot}/%{gopath}/src/%{import_path}/$file 738 echo "%%{gopath}/src/%%{import_path}/$file" >> devel.file-list 739 done 740 %endif 741 742 # testing files for this project 743 %if 0%{?with_unit_test} && 0%{?with_devel} 744 install -d -p %{buildroot}/%{gopath}/src/%{import_path}/ 745 # find all *_test.go files and generate unit-test.file-list 746 for file in $(find . -iname "*_test.go"); do 747 echo "%%dir %%{gopath}/src/%%{import_path}/$(dirname $file)" >> devel.file-list 748 install -d -p %{buildroot}/%{gopath}/src/%{import_path}/$(dirname $file) 749 cp -pav $file %{buildroot}/%{gopath}/src/%{import_path}/$file 750 echo "%%{gopath}/src/%%{import_path}/$file" >> unit-test-devel.file-list 751 done 752 753 # Install additional testdata 754 install -d %{buildroot}/%{gopath}/src/%{import_path}/cmd/snap/test-data/ 755 cp -pav cmd/snap/test-data/* %{buildroot}/%{gopath}/src/%{import_path}/cmd/snap/test-data/ 756 echo "%%{gopath}/src/%%{import_path}/cmd/snap/test-data" >> unit-test-devel.file-list 757 %endif 758 759 %if 0%{?with_devel} 760 sort -u -o devel.file-list devel.file-list 761 %endif 762 763 %check 764 for binary in snap-exec snap-update-ns snapctl; do 765 ldd bin/$binary 2>&1 | grep 'not a dynamic executable' 766 done 767 768 # snapd tests 769 %if 0%{?with_check} && 0%{?with_unit_test} && 0%{?with_devel} 770 %if ! 0%{?with_bundled} 771 export GOPATH=%{buildroot}/%{gopath}:%{gopath} 772 %else 773 export GOPATH=%{buildroot}/%{gopath}:$(pwd)/Godeps/_workspace:%{gopath} 774 %endif 775 export GO111MODULE=off 776 %gotest %{import_path}/... 777 %endif 778 779 # snap-confine tests (these always run!) 780 pushd ./cmd 781 make check 782 popd 783 784 %files 785 #define license tag if not already defined 786 %{!?_licensedir:%global license %doc} 787 %license COPYING 788 %doc README.md docs/* 789 %{_bindir}/snap 790 %{_bindir}/snapctl 791 %{_environmentdir}/990-snapd.conf 792 %if 0%{?rhel} == 7 793 %{_sysctldir}/99-snap.conf 794 %endif 795 %dir %{_libexecdir}/snapd 796 %{_libexecdir}/snapd/snapctl 797 %{_libexecdir}/snapd/snapd 798 %{_libexecdir}/snapd/snap-exec 799 %{_libexecdir}/snapd/snap-failure 800 %{_libexecdir}/snapd/info 801 %{_libexecdir}/snapd/snap-mgmt 802 %if 0%{?with_selinux} 803 %{_libexecdir}/snapd/snap-mgmt-selinux 804 %endif 805 %{_mandir}/man8/snap.8* 806 %{_datadir}/applications/snap-handle-link.desktop 807 %{_datadir}/bash-completion/completions/snap 808 %{_libexecdir}/snapd/complete.sh 809 %{_libexecdir}/snapd/etelpmoc.sh 810 %{_datadir}/zsh/site-functions/_snap 811 %{_libexecdir}/snapd/snapd.run-from-snap 812 %{_sysconfdir}/profile.d/snapd.sh 813 %{_mandir}/man8/snapd-env-generator.8* 814 %{_systemd_system_env_generator_dir}/snapd-env-generator 815 %{_unitdir}/snapd.socket 816 %{_unitdir}/snapd.service 817 %{_unitdir}/snapd.autoimport.service 818 %{_unitdir}/snapd.failure.service 819 %{_unitdir}/snapd.seeded.service 820 %{_userunitdir}/snapd.session-agent.service 821 %{_userunitdir}/snapd.session-agent.socket 822 %{_datadir}/dbus-1/services/io.snapcraft.Launcher.service 823 %{_datadir}/dbus-1/services/io.snapcraft.SessionAgent.service 824 %{_datadir}/dbus-1/services/io.snapcraft.Settings.service 825 %{_datadir}/dbus-1/session.d/snapd.session-services.conf 826 %{_datadir}/dbus-1/system.d/snapd.system-services.conf 827 %{_datadir}/polkit-1/actions/io.snapcraft.snapd.policy 828 %{_datadir}/applications/io.snapcraft.SessionAgent.desktop 829 %{_sysconfdir}/xdg/autostart/snap-userd-autostart.desktop 830 %config(noreplace) %{_sysconfdir}/sysconfig/snapd 831 %dir %{_sharedstatedir}/snapd 832 %dir %{_sharedstatedir}/snapd/assertions 833 %dir %{_sharedstatedir}/snapd/cookie 834 %dir %{_sharedstatedir}/snapd/dbus-1 835 %dir %{_sharedstatedir}/snapd/dbus-1/services 836 %dir %{_sharedstatedir}/snapd/dbus-1/system-services 837 %dir %{_sharedstatedir}/snapd/desktop 838 %dir %{_sharedstatedir}/snapd/desktop/applications 839 %dir %{_sharedstatedir}/snapd/device 840 %dir %{_sharedstatedir}/snapd/hostfs 841 %dir %{_sharedstatedir}/snapd/inhibit 842 %dir %{_sharedstatedir}/snapd/lib 843 %dir %{_sharedstatedir}/snapd/lib/gl 844 %dir %{_sharedstatedir}/snapd/lib/gl32 845 %dir %{_sharedstatedir}/snapd/lib/glvnd 846 %dir %{_sharedstatedir}/snapd/lib/vulkan 847 %dir %{_sharedstatedir}/snapd/mount 848 %dir %{_sharedstatedir}/snapd/seccomp 849 %dir %{_sharedstatedir}/snapd/seccomp/bpf 850 %dir %{_sharedstatedir}/snapd/snaps 851 %dir %{_sharedstatedir}/snapd/snap 852 %ghost %dir %{_sharedstatedir}/snapd/snap/bin 853 %dir %{_localstatedir}/cache/snapd 854 %dir %{_localstatedir}/snap 855 %ghost %{_sharedstatedir}/snapd/state.json 856 %ghost %{_sharedstatedir}/snapd/snap/README 857 %if %{with snap_symlink} 858 /snap 859 %endif 860 # this is typically owned by zsh, but we do not want to explicitly require zsh 861 %dir %{_datadir}/zsh 862 %dir %{_datadir}/zsh/site-functions 863 864 %files -n snap-confine 865 %doc cmd/snap-confine/PORTING 866 %license COPYING 867 %dir %{_libexecdir}/snapd 868 # For now, we can't use caps 869 # FIXME: Switch to "%%attr(0755,root,root) %%caps(cap_sys_admin=pe)" asap! 870 %attr(4755,root,root) %{_libexecdir}/snapd/snap-confine 871 %{_libexecdir}/snapd/snap-device-helper 872 %{_libexecdir}/snapd/snap-discard-ns 873 %{_libexecdir}/snapd/snap-gdb-shim 874 %{_libexecdir}/snapd/snap-gdbserver-shim 875 %{_libexecdir}/snapd/snap-seccomp 876 %{_libexecdir}/snapd/snap-update-ns 877 %{_mandir}/man8/snap-confine.8* 878 %{_mandir}/man8/snap-discard-ns.8* 879 %{_systemdgeneratordir}/snapd-generator 880 %attr(0111,root,root) %{_sharedstatedir}/snapd/void 881 882 %if 0%{?with_selinux} 883 %files selinux 884 %license data/selinux/COPYING 885 %doc data/selinux/README.md 886 %{_datadir}/selinux/packages/snappy.pp.bz2 887 %{_datadir}/selinux/devel/include/contrib/snappy.if 888 %endif 889 890 %if 0%{?with_devel} 891 %files devel -f devel.file-list 892 %license COPYING 893 %doc README.md 894 %dir %{gopath}/src/%{provider}.%{provider_tld}/%{project} 895 %endif 896 897 %if 0%{?with_unit_test} && 0%{?with_devel} 898 %files unit-test-devel -f unit-test-devel.file-list 899 %license COPYING 900 %doc README.md 901 %endif 902 903 %post 904 %if 0%{?rhel} == 7 905 %sysctl_apply 99-snap.conf 906 %endif 907 %systemd_post %{snappy_svcs} 908 %systemd_user_post %{snappy_user_svcs} 909 # If install, test if snapd socket and timer are enabled. 910 # If enabled, then attempt to start them. This will silently fail 911 # in chroots or other environments where services aren't expected 912 # to be started. 913 if [ $1 -eq 1 ] ; then 914 if systemctl -q is-enabled snapd.socket > /dev/null 2>&1 ; then 915 systemctl start snapd.socket > /dev/null 2>&1 || : 916 fi 917 fi 918 919 %preun 920 %systemd_preun %{snappy_svcs} 921 %systemd_user_preun %{snappy_user_svcs} 922 923 # Remove all Snappy content if snapd is being fully uninstalled 924 if [ $1 -eq 0 ]; then 925 %{_libexecdir}/snapd/snap-mgmt --purge || : 926 fi 927 928 %postun 929 %systemd_postun_with_restart %{snappy_svcs} 930 %systemd_user_postun_with_restart %{snappy_user_svcs} 931 932 %if 0%{?with_selinux} 933 %triggerun -- snapd < 2.39 934 # TODO: the trigger relies on a very specific snapd version that introduced SELinux 935 # mount context, figure out how to update the trigger condition to run when needed 936 937 # Trigger on uninstall, with one version of the package being pre 2.38 see 938 # https://rpm-packaging-guide.github.io/#triggers-and-scriptlets for details 939 # when triggers are run 940 if [ "$1" -eq 2 -a "$2" -eq 1 ]; then 941 # Upgrade from pre 2.38 version 942 %{_libexecdir}/snapd/snap-mgmt-selinux --patch-selinux-mount-context=system_u:object_r:snappy_snap_t:s0 || : 943 944 # snapd might have created fontconfig cache directory earlier, but with 945 # incorrect context due to bugs in the policy, make sure it gets the right one 946 # on upgrade when the new policy was introduced 947 if [ -d "%{_localstatedir}/cache/fontconfig" ]; then 948 restorecon -R %{_localstatedir}/cache/fontconfig || : 949 fi 950 elif [ "$1" -eq 1 -a "$2" -eq 2 ]; then 951 # Downgrade to a pre 2.38 version 952 %{_libexecdir}/snapd/snap-mgmt-selinux --remove-selinux-mount-context=system_u:object_r:snappy_snap_t:s0 || : 953 fi 954 955 %pre selinux 956 %selinux_relabel_pre 957 958 %post selinux 959 %selinux_modules_install %{_datadir}/selinux/packages/snappy.pp.bz2 960 %selinux_relabel_post 961 962 %posttrans selinux 963 %selinux_relabel_post 964 965 %postun selinux 966 %selinux_modules_uninstall snappy 967 if [ $1 -eq 0 ]; then 968 %selinux_relabel_post 969 fi 970 %endif 971 972 973 %changelog 974 * Tue Jun 15 2021 Michael Vogt <michael.vogt@ubuntu.com> 975 - New upstream release 2.51.1 976 - interfaces: add netlink-driver interface 977 - interfaces: builtin: add dm-crypt interface to support external 978 storage encryption 979 - interfaces/dsp: fix typo in udev rule 980 - overlord/snapstate: lock the mutex before returning from stop 981 snap services undo 982 - interfaces: opengl: change path for Xilinx zocl driver 983 - interfaces/dsp: add /dev/cavalry into dsp interface 984 - packaging/fedora/snapd.spec: correct date format in changelog 985 986 * Thu May 27 2021 Ian Johnson <ian.johnson@canonical.com> 987 - New upstream release 2.51 988 - cmd/snap: stacktraces debug endpoint 989 - secboot: deactivate volume again when model checker fails 990 - store: extra log message, a few minor cleanups 991 - packaging/debian-sid: update systemd patch 992 - snapstate: adjust update-gadget-assets user visible message 993 - tests/nested/core/core20-create-recovery: verify that recovery 994 system can be created at runtime 995 - gadget: support creating vfat partitions during bootstrap 996 - daemon/api_quotas.go: support updating quotas with ensure action 997 - daemon: tighten access to a couple of POST endpoints that should 998 be really be root-only 999 - seed/seedtest, overlord/devicestate: move seed validation helper 1000 to seedtest 1001 - overlord/hookstate/ctlcmd: remove unneeded parameter 1002 - snap/quota: add CurrentMemoryUsage for current memory usage of a 1003 quota group 1004 - systemd: add CurrentMemoryUsage to get current memory usage for a 1005 unit 1006 - o/snapstate: introduce minimalInstallInfo interface 1007 - o/hookstate: print pending info (ready, inhibited or none) 1008 - osutil: a helper to find out the total amount of memory in the 1009 system 1010 - overlord, overlord/devicestate: allow for reloading modeenv in 1011 devicemgr when testing 1012 - daemon: refine access testing 1013 - spread: disable unattended-upgrades on debian 1014 - tests/lib/reset: make nc exit after a while when connection is 1015 idle 1016 - daemon: replace access control flags on commands with access 1017 checkers 1018 - release-tools/changelog.py: refactor regexp + file reading/writing 1019 - packaging/debian-sid: update locale patch for the latest master 1020 - overlord/devicestate: tasks for creating recovery systems at 1021 runtime 1022 - release-tools/changelog.py: implement script to update all the 1023 changelog files 1024 - tests: change machine type used for nested testsPrices: 1025 - cmd/snap: include locale when linting description being lower case 1026 - o/servicestate: add RemoveSnapFromQuota 1027 - interfaces/serial-port: add Qualcomm serial port devices to 1028 allowed list 1029 - packaging: merge 2.50.1 changelog back 1030 - interfaces/builtin: introduce raw-input interface 1031 - tests: remove tests.cleanup prepare from nested test 1032 - cmd/snap-update-ns: fix linter errors 1033 - asserts: fix errors reported by linter 1034 - o/hookstate/ctlcmd: allow system-mode for non-root 1035 - overlord/devicestate: comment why explicit system mode check is 1036 needed in ensuring tried recovery systems (#10275) 1037 - overlord/devicesate: observe snap writes when creating recovery 1038 systems 1039 - packaging/ubuntu-16.04/changelog: add placeholder for 2.50.1 1040 - tests: moving to tests directories snaps built locally - part 1 1041 - seed/seedwriter: fail early when system seed directory exists 1042 - o/snapstate: autorefresh phase1 for refresh-control 1043 - c/snap: more precise message for ErrorKindSystemRestart op != 1044 reboot 1045 - tests: simplify the tests.cleanup tool 1046 - boot: helpers for manipulating current and good recovery systems 1047 list 1048 - o/hookstate, o/snapstate: print revision, version, channel with 1049 snapctl --pending 1050 - overlord: unit test tweaks, use well known snap IDs, setup snap 1051 declarations for most common snaps 1052 - tests/nested/manual: add test for install-device + snapctl reboot 1053 - o/servicestate: restart slices + services on modifications 1054 - tests: update mount-ns test to support changes in the distro 1055 - interfaces: fix linter issues 1056 - overlord: mock logger in managers unit tests 1057 - tests: adding support for fedora-34 1058 - tests: adding support for debian 10 on gce 1059 - boot: reseal given keys when the respective boot chain has changed 1060 - secboot: switch encryption key size to 32 byte (thanks to Chris) 1061 - interfaces/dbus: allow claiming 'well-known' D-Bus names with a 1062 wildcard suffix 1063 - spread: bump delta reference version 1064 - interfaces: builtin: update permitted paths to be compatible with 1065 UC20 1066 - overlord: fix errors reported by linter 1067 - tests: remove old fedora systems from tests 1068 - tests: update spread url 1069 - interfaces/camera: allow devices in /sys/devices/platform/**/usb* 1070 - interfaces/udisks2: Allow access to the login manager via dbus 1071 - cmd/snap: exit normally if "snap changes" has no changes 1072 (LP #1823974) 1073 - tests: more fixes for spread suite on openSUSE 1074 - tests: fix tests expecting cgroup v1/hybrid on openSUSE Tumbleweed 1075 - daemon: fix linter errors 1076 - spread: add Fedora 34, leave a TODO about dropping Fedora 32 1077 - interfaces: fix linter errors 1078 - tests: use op.paths tools instead of dirs.sh helper - part 2 1079 - client: Fix linter errors 1080 - cmd/snap: Fix errors reported by linter 1081 - cmd/snap-repair: fix linter issues 1082 - cmd/snap-bootstrap: Fix linter errors 1083 - tests: update permission denied message for test-snapd-event on 1084 ubuntu 2104 1085 - cmd/snap: small tweaks based on previous reviews 1086 - snap/snaptest: helper that mocks both the squashfs file and a snap 1087 directory 1088 - overlord/devicestate: tweak comment about creating recovery 1089 systems, formatting tweaks 1090 - overlord/devicestate: move devicemgr base suite helpers closer to 1091 test suite struct 1092 - overlord/devicestate: keep track of tried recovery system 1093 - seed/seedwriter: clarify in the diagram when SetInfo is called 1094 - overlord/devicestate: add helper for creating recovery systems at 1095 runtime 1096 - snap-seccomp: update syscalls.go list 1097 - boot,image: support image.Customizations.BootFlags 1098 - overlord: support snapctl --halt|--poweroff in gadget install- 1099 device 1100 - features,servicestate: add experimental.quota-groups flag 1101 - o/servicestate: address comments from previous PR 1102 - tests: basic spread test for snap quota commands 1103 - tests: moving the snaps which are not locally built to the store 1104 directory 1105 - image,c/snap: implement prepare-image --customize 1106 - daemon: implement REST API for quota groups (create / list / get) 1107 - cmd/snap, client: snap quotas command 1108 - o/devicestate,o/hookstate/ctlcmd: introduce SystemModeInfo methods 1109 and snapctl system-mode 1110 - o/servicestate/quota_control.go: introduce (very) basic group 1111 manipulation methods 1112 - cmd/snap, client: snap remove-quota command 1113 - wrappers, quota: implement quota groups slice generation 1114 - snap/quotas: followups from previous PR 1115 - cmd/snap: introduce 'snap quota' command 1116 - o/configstate/configcore/picfg.go: use ubuntu-seed config.txt in 1117 uc20 run mode 1118 - o/servicestate: test has internal ordering issues, consider both 1119 cases 1120 - o/servicestate/quotas: add functions for getting and setting 1121 quotas in state 1122 - tests: new buckets for snapd-spread project on gce 1123 - spread.yaml: update the gce project to start using snapd-spread 1124 - quota: new package for managing resource groups 1125 - many: bind and check keys against models when using FDE hooks v2 1126 - many: move responsibilities down seboot -> kernel/fde and boot -> 1127 secboot 1128 - packaging: add placeholder changelog 1129 - o/configstate/configcore/vitality: fix RequireMountedSnapdSnap 1130 bug 1131 - overlord: properly mock usr-lib-snapd tests to mimic an Ubuntu 1132 Core system 1133 - many: hide EncryptionKey size and refactors for fde hook v2 next 1134 steps 1135 - tests: adding debug info for create user tests 1136 - o/hookstate: add "refresh" command to snapctl (hidden, not 1137 complete yet) 1138 - systemd: wait for zfs mounts (LP #1922293) 1139 - testutil: support referencing files in FileEquals checker 1140 - many: refactor to kernel/fde and allow `fde-setup initial-setup` 1141 to return json 1142 - o/snapstate: store refresh-candidates in the state 1143 - o/snapstate: helper for creating gate-auto-refresh hooks 1144 - bootloader/bootloadertest: provide interface implementation as 1145 mixins, provide a mock for recovery-aware-trusted-asses bootloader 1146 - tests/lib/nested: do not compress images, return early when 1147 restored from pristine image 1148 - boot: split out a helper for making recovery system bootable 1149 - tests: update os.query check to match new bullseye codename used 1150 on sid images 1151 - o/snapstate: helper for getting snaps affected by refresh, define 1152 new hook 1153 - wrappers: support in EnsureSnapServices a callback to observe 1154 changes (#10176) 1155 - gadget: multi line support in gadget's cmdline file 1156 - daemon: test that requesting restart from (early) Ensure works 1157 - tests: use op.paths tools instead of dirs.sh helper - part 1 1158 - tests: add new command to snaps-state to get current core, kernel 1159 and gadget 1160 - boot, gadget: move opening the snap container into the gadget 1161 helper 1162 - tests, overlord: extend unit tests, extend spread tests to cover 1163 full command line support 1164 - interfaces/builtin: introduce dsp interface 1165 - boot, bootloader, bootloader/assets: support for full command line 1166 override from gadget 1167 - overlord/devicestate, overlord/snapstate: add task for updating 1168 kernel command lines from gadget 1169 - o/snapstate: remove unused DeviceCtx argument of 1170 ensureInstallPreconditions 1171 - tests/lib/nested: proper status return for tpm/secure boot checks 1172 - cmd/snap, boot: add snapd_full_cmdline_args to dumped boot vars 1173 - wrappers/services.go: refactor helper lambda function to separate 1174 function 1175 - boot/flags.go: add HostUbuntuDataForMode 1176 - boot: handle updating of components that contribute to kernel 1177 command line 1178 - tests: add 20.04 to systems for nested/core 1179 - daemon: add new accessChecker implementations 1180 - boot, overlord/devicestate: consider gadget command lines when 1181 updating boot config 1182 - tests: fix prepare-image-grub-core18 for arm devices 1183 - tests: fix gadget-kernel-refs-update-pc test on arm and when 1184 $TRUST_TEST_KEY is false 1185 - tests: enable help test for all the systems 1186 - boot: set extra command line arguments when preparing run mode 1187 - boot: load bits of kernel command line from gadget snaps 1188 - tests: update layout for tests - part 2 1189 - tests: update layout for tests - part 1 1190 - tests: remove the snap profiler from the test suite 1191 - boot: drop gadget snap yaml which is already defined elsewhere in 1192 the tests 1193 - boot: set extra kernel command line arguments when making a 1194 recovery system bootable 1195 - boot: pass gadget path to command line helpers, load gadget from 1196 seed 1197 - tests: new os.paths tool 1198 - daemon: make ucrednetGet() return a *ucrednet structure 1199 - boot: derive boot variables for kernel command lines 1200 - cmd/snap-bootstrap/initramfs-mounts: fix boot-flags location from 1201 initramfs 1202 1203 * Wed May 19 2021 Ian Johnson <ian.johnson@canonical.com> 1204 - New upstream release 2.50.1 1205 - interfaces: update permitted /lib/.. paths to be compatible with 1206 UC20 1207 - interfaces: builtin: update permitted paths to be compatible with 1208 UC20 1209 - interfaces/greengrass-support: delete white spaces at the end of 1210 lines 1211 - snap-seccomp: update syscalls.go list 1212 - many: backport kernel command line for 2.50 1213 - interfaces/dbus: allow claiming 'well-known' D-Bus names with a 1214 wildcard suffix 1215 - interfaces/camera: allow devices in /sys/devices/platform/**/usb* 1216 - interfaces/builtin: introduce dsp interface 1217 1218 * Sat Apr 24 2021 Michael Vogt <mvo@ubuntu.com> 1219 - New upstream release 2.50 1220 - overlord: properly mock usr-lib-snapd tests to mimic an Ubuntu 1221 Core system 1222 - o/configstate/configcore/vitality: fix RequireMountedSnapdSnap bug 1223 - o/servicestate/servicemgr.go: add ensure loop for snap service 1224 units 1225 - wrappers/services.go: introduce EnsureSnapServices() 1226 - snapstate: add "kernel-assets" to featureSet 1227 - systemd: wait for zfs mounts 1228 - overlord: make servicestate responsible to compute 1229 SnapServiceOptions 1230 - boot,tests: move where we write boot-flags one level up 1231 - o/configstate: don't pass --root=/ when 1232 masking/unmasking/enabling/disabling services 1233 - cmd/snap-bootstrap/initramfs-mounts: write active boot-flags to 1234 /run 1235 - gadget: be more flexible with kernel content resolving 1236 - boot, cmd/snap: include extra cmdline args in debug boot-vars 1237 output 1238 - boot: support read/writing boot-flags from userspace/initramfs 1239 - interfaces/pwm: add PWM interface 1240 - tests/lib/prepare-restore.sh: clean out snapd changes and snaps 1241 before purging 1242 - systemd: enrich UnitStatus returned by systemd.Status() with 1243 Installed flag 1244 - tests: updated restore phase of spread tests - part 1 1245 - gadget: add support for kernel command line provided by the gadget 1246 - tests: Using GO111MODULE: "off" in spread.yaml 1247 - features: add gate-auto-refresh-hook feature flag 1248 - spread: ignore linux kernel upgrade in early stages for arch 1249 preparation 1250 - tests: use snaps-state commands and remove them from the snaps 1251 helper 1252 - o/configstate: fix panic with a sequence of config unset ops over 1253 same path 1254 - api: provide meaningful error message on connect/disconnect for 1255 non-installed snap 1256 - interfaces/u2f-devices: add HyperFIDO Pro 1257 - tests: add simple sanity check for systemctl show 1258 --property=UnitFileState for unknown service 1259 - tests: use tests.session tool on interfaces-desktop-document- 1260 portal test 1261 - wrappers: install D-Bus service activation files for snapd session 1262 tools on core 1263 - many: add x-gvfs-hide option to mount units 1264 - interfaces/builtin/gpio_test.go: actually test the generated gpio 1265 apparmor 1266 - spread: tentative workaround for arch failure caused by libc 1267 upgrade and cgroups v2 1268 - tests: add spread test for snap validate against store assertions 1269 - tests: remove snaps which are not used in any test 1270 - ci: set the accept-existing-contributors parameter for the cla- 1271 check action 1272 - daemon: introduce apiBaseSuite.(json|sync|async|error)Req (and 1273 some apiBaseSuite cosmetics) 1274 - o/devicestate/devicemgr: register install-device hook, run if 1275 present in install 1276 - o/configstate/configcore: simple refactors in preparation for new 1277 function 1278 - tests: unifying the core20 nested suite with the core nested suite 1279 - tests: uboot-unpacked-assets updated to reflect the real path used 1280 to find the kernel 1281 - daemon: switch api_test.go to daemon_test and various other 1282 cleanups 1283 - o/configstate/configcore/picfg.go: add hdmi_cvt support 1284 - interfaces/apparmor: followup cleanups, comments and tweaks 1285 - boot: cmd/snap-bootstrap: handle a candidate recovery system v2 1286 - overlord/snapstate: skip catalog refresh when snappy testing is 1287 enabled 1288 - overlord/snapstate, overlord/ifacestate: move late security 1289 profile removal to ifacestate 1290 - snap-seccomp: fix seccomp test on ppc64el 1291 - interfaces, interfaces/apparmor, overlord/snapstate: late removal 1292 of snap-confine apparmor profiles 1293 - cmd/snap-bootstrap/initramfs-mounts: move time forward using 1294 assertion times 1295 - tests: reset the system while preparing the test suite 1296 - tests: fix snap-advise-command check for 429 1297 - gadget: policy for gadget/kernel refreshes 1298 - o/configstate: deal with no longer valid refresh.timer=managed 1299 - interfaces/udisks2: allow locking /run/mount/utab for udisks 2.8.4 1300 - cla-check: Use has-signed-canonical-cla GitHub Action 1301 - tests: validation sets spread test 1302 - tests: simplify the reset.sh logic by removing not needed command 1303 - overlord/snapstate: make sure that snapd current symlink is not 1304 removed during refresh 1305 - tests/core/fsck-on-boot: unmount /run/mnt/snapd directly on uc20 1306 - tests/lib/fde-setup-hook: also verify that fde-reveal-key key data 1307 is base64 1308 - o/devicestate: split off ensuring next boot goes to run mode into 1309 new task 1310 - tests: fix cgroup-tracking test 1311 - boot: export helper for clearing tried system state, add tests 1312 - cmd/snap: use less aggressive client timeouts in unit tests 1313 - daemon: fix signing key validity timestamp in unit tests 1314 - o/{device,hook}state: encode fde-setup-request key as base64 1315 string 1316 - packaging: drop dh-systemd from build-depends on ubuntu-16.04+ 1317 - cmd/snap/pack: unhide the compression option 1318 - boot: extend set try recovery system unit tests 1319 - cmd/snap-bootstrap: refactor handling of ubuntu-save, do not use 1320 secboot's implicit fallback 1321 - o/configstate/configcore: add hdmi_timings to pi-config 1322 - snapstate: reduce reRefreshRetryTimeout to 1/2 second 1323 - interfaces/tee: add TEE/OPTEE interface 1324 - o/snapstate: update validation sets assertions with auto-refresh 1325 - vendor: update go-tpm2/secboot to latest version 1326 - seed: ReadSystemEssentialAndBetterEarliestTime 1327 - tests: replace while commands with the retry tool 1328 - interfaces/builtin: update unit tests to use proper distro's 1329 libexecdir 1330 - tests: run the reset.sh helper and check test invariants while the 1331 test is restored 1332 - daemon: switch preexisting daemon_test tests to apiBaseSuite and 1333 .req 1334 - boot, o/devicestate: split makeBootable20 into two parts 1335 - interfaces/docker-support: add autobind unix rules to docker- 1336 support 1337 - interfaces/apparmor: allow reading 1338 /proc/sys/kernel/random/entropy_avail 1339 - tests: use retry tool instead a loops 1340 - tests/main/uc20-create-partitions: fix tests cleanup 1341 - asserts: mode where Database only assumes cur time >= earliest 1342 time 1343 - daemon: validation sets/api tests cleanup 1344 - tests: improve tests self documentation for nested test suite 1345 - api: local assertion fallback when it's not in the store 1346 - api: validation sets monitor mode 1347 - tests: use fs-state tool in interfaces tests 1348 - daemon: move out /v2/login|logout and errToResponse tests from 1349 api_test.go 1350 - boot: helper for inspecting the outcome of a recovery system try 1351 - o/configstate, o/snapshotstate: fix handling of nil snap config on 1352 snapshot restore 1353 - tests: update documentation and checks for interfaces tests 1354 - snap-seccomp: add new `close_range` syscall 1355 - boot: revert #10009 1356 - gadget: remove `device-tree{,-origin}` from gadget tests 1357 - boot: simplify systems test setup 1358 - image: write resolved-content from snap prepare-image 1359 - boot: reseal the run key for all recovery systems, but recovery 1360 keys only for the good ones 1361 - interfaces/builtin/network-setup-{control,observe}: allow using 1362 netplan directly 1363 - tests: improve sections prepare and restore - part 1 1364 - tests: update details on task.yaml files 1365 - tests: revert os.query usage in spread.yaml 1366 - boot: export bootAssetsMap as AssetsMap 1367 - tests/lib/prepare: fix repacking of the UC20 kernel snap for with 1368 ubuntu-core-initramfs 40 1369 - client: protect against reading too much data from stdin 1370 - tests: improve tests documentation - part 2 1371 - boot: helper for setting up a try recover system 1372 - tests: improve tests documentation - part 1 1373 - tests/unit/go: use tests.session wrapper for running tests as a 1374 user 1375 - tests: improvements for snap-seccomp-syscalls 1376 - gadget: simplify filterUpdate (thanks to Maciej) 1377 - tests/lib/prepare.sh: use /etc/group and friends from the core20 1378 snap 1379 - tests: fix tumbleweed spread tests part 2 1380 - tests: use new commands of os.query tool on tests 1381 - o/snapshotstate: create snapshots directory on import 1382 - tests/main/lxd/prep-snapd-in-lxd.sh: dump contents of sources.list 1383 - packaging: drop 99-snapd.conf via dpkg-maintscript-helper 1384 - osutil: add SetTime() w/ 32-bit and 64-bit implementations 1385 - interfaces/wayland: rm Xwayland Xauth file access from wayland 1386 slot 1387 - packaging/ubuntu-16.04/rules: turn modules off explicitly 1388 - gadget,devicestate: perform kernel asset update for $kernel: style 1389 refs 1390 - cmd/recovery: small fix for `snap recovery` tab output 1391 - bootloader/lkenv: add recovery systems related variables 1392 - tests: fix new tumbleweed image 1393 - boot: fix typo, should be systems 1394 - o/devicestate: test that users.create.automatic is configured 1395 early 1396 - asserts: use Fetcher in AddSequenceToUpdate 1397 - daemon,o/c/configcore: introduce users.create.automatic 1398 - client, o/servicestate: expose enabled state of user daemons 1399 - boot: helper for checking and marking tried recovery system status 1400 from initramfs 1401 - asserts: pool changes for validation-sets (#9930) 1402 - daemon: move the last api_foo_test.go to daemon_test 1403 - asserts: include the assertion timestamp in error message when 1404 outside of signing key validity range 1405 - ovelord/snapshotstate: keep a few of the last line tar prints 1406 before failing 1407 - gadget/many: rm, delay sector size + structure size checks to 1408 runtime 1409 - cmd/snap-bootstrap/triggerwatch: fix returning wrong errors 1410 - interfaces: add allegro-vcu and media-control interfaces 1411 - interfaces: opengl: add Xilinx zocl bits 1412 - mkversion: check that version from changelog is set before 1413 overriding the output version 1414 - many: fix new ineffassign warnings 1415 - .github/workflows/labeler.yaml: try work-around to not sync 1416 labels 1417 - cmd/snap, boot: add debug set-boot-vars 1418 - interfaces: allow reading the Xauthority file KDE Plasma writes 1419 for Wayland sessions 1420 - tests/main/snap-repair: test running repair assertion w/ fakestore 1421 - tests: disable lxd tests for 21.04 until the lxd images are 1422 published for the system 1423 - tests/regression/lp-1910456: cleanup the /snap symlink when done 1424 - daemon: move single snap querying and ops to api_snaps.go 1425 - tests: fix for preseed and dbus tests on 21.04 1426 - overlord/snapshotstate: include the last message printed by tar in 1427 the error 1428 - interfaces/system-observe: Allow reading /proc/zoneinfo 1429 - interfaces: remove apparmor downgrade feature 1430 - snap: fix unit tests on Go 1.16 1431 - spread: disable Go modules support in environment 1432 - tests: use new path to find kernel.img in uc20 for arm devices 1433 - tests: find files before using cat command when checking broadcom- 1434 asic-control interface 1435 - boot: introduce good recovery systems, provide compatibility 1436 handling 1437 - overlord: add manager gadget refresh test 1438 - tests/lib/fakestore: support repair assertions too 1439 - github: temporarily disable action labeler due to issues with 1440 labels being removed 1441 - o/devicestate,many: introduce DeviceManager.preloadGadget for 1442 EarlyConfig 1443 - tests: enable ubuntu 21.04 for spread tests 1444 - snap: provide a useful error message if gdbserver is not installed 1445 - data/selinux: allow system dbus to watch /var/lib/snapd/dbus-1 1446 - tests/lib/prepare.sh: split reflash.sh into two parts 1447 - packaging/opensuse: sync with openSUSE packaging 1448 - packaging: disable Go modules in snapd.mk 1449 - snap: add deprecation noticed to "snap run --gdb" 1450 - daemon: add API for checking and installing available theme snaps 1451 - tests: using labeler action to add automatically a label to run 1452 nested tests 1453 - gadget: improve error handling around resolving content sources 1454 - asserts: repeat the authority cross-check in CheckSignature as 1455 well 1456 - interfaces/seccomp/template.go: allow copy_file_range 1457 - o/snapstate/check_snap.go: add support for many subversions in 1458 assumes snapdX.. 1459 - daemon: move postSnap and inst.dispatch tests to api_snaps_test.go 1460 - wrappers: use proper paths for mocked mount units in tests 1461 - snap: rename gdbserver option to `snap run --gdbserver` 1462 - store: support validation sets with fetch-assertions action 1463 - snap-confine.apparmor.in: support tmp and log dirs on Yocto/Poky 1464 - packaging/fedora: sync with downstream packaging in Fedora 1465 - many: add Delegate=true to generated systemd units for special 1466 interfaces (master) 1467 - boot: use a common helper for mocking boot assets in cache 1468 - api: validate snaps against validation set assert from the store 1469 - wrappers: don't generate an [Install] section for timer or dbus 1470 activated services 1471 - tests/nested/core20/boot-config-update: skip when snapd was not 1472 built with test features 1473 - o/configstate,o/devicestate: introduce devicestate.EarlyConfig 1474 implemented by configstate.EarlyConfig 1475 - cmd/snap-bootstrap/initramfs-mounts: fix typo in func name 1476 - interfaces/builtin: mock distribution in fontconfig cache unit 1477 tests 1478 - tests/lib/prepare.sh: add another console= to the reflash magic 1479 grub entry 1480 - overlord/servicestate: expose dbus activators of a service 1481 - desktop/notification: test against a real session bus and 1482 notification server implementation 1483 - cmd/snap-bootstrap/initramfs-mounts: write realistic modeenv for 1484 recover+install 1485 - HACKING.md: explain how to run UC20 spread tests with QEMU 1486 - asserts: introduce AtSequence 1487 - overlord/devicestate: task for updating boot configs, spread test 1488 - gadget: fix documentation/typos 1489 - gadget: cleanup MountedFilesystem{Writer,Updater} 1490 - gadget: use ResolvedSource in MountedFilesystemWriter 1491 - snap/info.go: add doc-comment for SortServices 1492 - interfaces: add an optional mount-host-font-cache plug attribute 1493 to the desktop interface 1494 - osutil: skip TestReadBuildGo inside sbuild 1495 - o/hookstate/ctlcmd: add optional --pid and --apparmor-label 1496 arguments to "snapctl is-connected" 1497 - data/env/snapd: use quoting in case PATH contains spaces 1498 - boot: do not observe successful boot assets if not in run mode 1499 - tests: fix umount for snapd snap on fsck-on-boot testumount: 1500 /run/mnt/ubuntu-seed/systems/*/snaps/snapd_*.snap: no mount 1501 - misc: little tweaks 1502 - snap/info.go: ignore unknown daemons in SortSnapServices 1503 - devicestate: keep log from install-mode on installed system 1504 - seed: add LoadEssentialMeta to seed16 and allow all of its 1505 implementations to be called multiple times 1506 - cmd/snap-preseed: initialize snap.SanitizePlugsSlots for gadget in 1507 seeds 1508 - tests/core/uc20-recovery: move recover mode helpers to generic 1509 testslib script 1510 - interfaces/fwupd: allow any distros to access fw files via fwupd 1511 - store: method for fetching validation set assertion 1512 - store: switch to v2/assertions api 1513 - gadget: add new ResolvedContent and populate from LayoutVolume() 1514 - spread: use full format when listing processes 1515 - osutil/many: make all test pkgs osutil_test instead of "osutil" 1516 - tests/unit/go: drop unused environment variables, skip coverage 1517 - OpenGL interface: Support more Tegra libs 1518 - gadget,overlord: pass kernelRoot to install.Run() 1519 - tests: run unit tests in Focal instead of Xenial 1520 - interfaces/browser-support: allow sched_setaffinity with browser- 1521 sandbox: true 1522 - daemon: move query /snaps/<name> tests to api_snaps_test.go 1523 - cmd/snap-repair/runner.go: add SNAP_SYSTEM_MODE to env of repair 1524 runner 1525 - systemd/systemd.go: support journald JSON messages with arrays for 1526 values 1527 - cmd: make string/error code more robust against errno leaking 1528 - github, run-checks: do not collect coverage data on subsequent 1529 test runs 1530 - boot: boot config update & reseal 1531 - o/snapshotstate: handle conflicts between snapshot forget, export 1532 and import 1533 - osutil/stat.go: add RegularFileExists 1534 - cmd/snapd-generator: don't create mount overrides for snap-try 1535 snaps inside lxc 1536 - gadget/gadget.go: rename ubuntu-* to system-* in doc-comment 1537 - tests: use 6 spread workers for centos8 1538 - bootloader/assets: support injecting bootloader assets in testing 1539 builds of snapd 1540 - gadget: enable multi-volume uc20 gadgets in 1541 LaidOutSystemVolumeFromGadget; rename too 1542 - overlord/devicestate, sysconfig: do nothing when cloud-init is not 1543 present 1544 - cmd/snap-repair: filter repair assertions based on bases + modes 1545 - snap-confine: make host /etc/ssl available for snaps on classic 1546 1547 * Fri Mar 26 2021 Michael Vogt <mvo@ubuntu.com> 1548 - New upstream release 2.49.2 1549 - interfaces/tee: add TEE/OPTEE interface 1550 - o/configstate/configcore: add hdmi_timings to pi-config 1551 - interfaces/udisks2: allow locking /run/mount/utab for udisks 2.8.4 1552 - snap-seccomp: fix seccomp test on ppc64el 1553 - interfaces{,/apparmor}, overlord/snapstate: 1554 late removal of snap-confine apparmor profiles 1555 - overlord/snapstate, wrappers: add dependency on usr-lib- 1556 snapd.mount for services on core with snapd snap 1557 - o/configstate: deal with no longer valid refresh.timer=managed 1558 - overlord/snapstate: make sure that snapd current symlink is not 1559 removed during refresh 1560 - packaging: drop dh-systemd from build-depends on ubuntu-16.04+ 1561 - o/{device,hook}state: encode fde-setup-request key as base64 1562 - snapstate: reduce reRefreshRetryTimeout to 1/2 second 1563 - tests/main/uc20-create-partitions: fix tests cleanup 1564 - o/configstate, o/snapshotstate: fix handling of nil snap config on 1565 snapshot restore 1566 - snap-seccomp: add new `close_range` syscall 1567 1568 * Mon Mar 08 2021 Michael Vogt <mvo@ubuntu.com> 1569 - New upstream release 2.49.1 1570 - tests: turn modules off explicitly in spread go unti test 1571 - o/snapshotstate: create snapshots directory on import 1572 - cmd/snap-bootstrap/triggerwatch: fix returning wrong errors 1573 - interfaces: add allegro-vcu and media-control interfaces 1574 - interfaces: opengl: add Xilinx zocl bits 1575 - many: fix new ineffassign warnings 1576 - interfaces/seccomp/template.go: allow copy_file_range 1577 - interfaces: allow reading the Xauthority file KDE Plasma writes 1578 for Wayland sessions 1579 - data/selinux: allow system dbus to watch 1580 /var/lib/snapd/dbus-1 1581 - Remove apparmor downgrade feature 1582 - Support tmp and log dirs on Yocto/Poky 1583 1584 * Wed Feb 10 2021 Michael Vogt <mvo@ubuntu.com> 1585 - New upstream release 2.49 1586 - many: add Delegate=true to generated systemd units for special 1587 interfaces 1588 - cmd/snap-bootstrap: rename ModeenvFromModel to 1589 EphemeralModeenvForModel 1590 - cmd/snap-bootstrap/initramfs-mounts: write realistic modeenv for 1591 recover+install 1592 - osutil: skip TestReadBuildGo inside sbuild 1593 - tests: fix umount for snapd snap on fsck-on-boot test 1594 - snap/info_test.go: add unit test cases for bug 1595 - tests/main/services-after-before: add regression spread test 1596 - snap/info.go: ignore unknown daemons in SortSnapServices 1597 - cmd/snap-preseed: initialize snap.SanitizePlugsSlots for gadget in 1598 seeds 1599 - OpenGL interface: Support more Tegra libs 1600 - interfaces/browser-support: allow sched_setaffinity with browser- 1601 sandbox: true 1602 - cmd: make string/error code more robust against errno leaking 1603 - o/snapshotstate: handle conflicts between snapshot forget, export 1604 and import 1605 - cmd/snapd-generator: don't create mount overrides for snap-try 1606 snaps inside lxc 1607 - tests: update test pkg for fedora and centos 1608 - gadget: pass sector size in to mkfs family of functions, use to 1609 select block sz 1610 - o/snapshotstate: fix returning of snap names when duplicated 1611 snapshot is detected 1612 - tests/main/snap-network-errors: skip flushing dns cache on 1613 centos-7 1614 - interfaces/builtin: Allow DBus property access on 1615 org.freedesktop.Notifications 1616 - cgroup-support.c: fix link to CGROUP DELEGATION 1617 - osutil: update go-udev package 1618 - packaging: fix arch-indep build on debian-sid 1619 - {,sec}boot: pass "key-name" to the FDE hooks 1620 - asserts: sort by revision with Sort interface 1621 - gadget: add gadget.ResolveContentPaths() 1622 - cmd/snap-repair: save base snap and mode in device info; other 1623 misc cleanups 1624 - tests: cleanup the run-checks script 1625 - asserts: snapasserts method to validate installed snaps against 1626 validation sets 1627 - tests: normalize test tools - part 1 1628 - snapshotstate: detect duplicated snapshot imports 1629 - interfaces/builtin: fix unit test expecting snap-device-helper at 1630 /usr/lib/snapd 1631 - tests: apply workaround done for snap-advise-command to apt-hooks 1632 test 1633 - tests: skip main part of snap-advise test if 429 error is 1634 encountered 1635 - many: clarify gadget role-usage consistency checks for UC16/18 vs 1636 UC20 1637 - sandbox/cgroup, tess/main: fix unit tests on v2 system, disable 1638 broken tests on sid 1639 - interfaces/builtin: more drive by fixes, import ordering, removing 1640 dead code 1641 - tests: skip interfaces-openvswitch spread test on debian sid 1642 - interfaces/apparmor: drive by comment fix 1643 - cmd/libsnap-confine-private/cleanup-funcs-test.c: rm g_autofree 1644 usage 1645 - cmd/libsnap-confine-private: make unit tests execute happily in a 1646 container 1647 - interfaces, wrappers: misc comment fixes, etc. 1648 - asserts/repair.go: add "bases" and "modes" support to the repair 1649 assertion 1650 - interfaces/opengl: allow RPi MMAL video decoding 1651 - snap: skip help output tests for go-flags v1.4.0 1652 - gadget: add validation for "$kernel:ref" style content 1653 - packaging/deb, tests/main/lxd-postrm-purge: fix purge inside 1654 containers 1655 - spdx: update to SPDX license list version: 3.11 2020-11-25 1656 - tests: improve hotplug test setup on classic 1657 - tests: update check to verify is the current system is arm 1658 - tests: use os-query tool to check debian, trusty and tumbleweed 1659 - daemon: start moving implementation to api_snaps.go 1660 - tests/main/snap-validate-basic: disable test on Fedora due to go- 1661 flags panics 1662 - tests: fix library path used for tests.pkgs 1663 - tests/main/cohorts: replace yq with a Python snippet 1664 - run-checks: update to match new argument syntax of ineffassign 1665 - tests: use apiBaseSuite for snapshots tests, fix import endpoint 1666 path 1667 - many: separate consistency/content validation into 1668 gadget.Validate|Content 1669 - o/{device,snap}state: enable devmode snaps with dangerous model 1670 assertions 1671 secboot: add test for when systemd-run does not honor 1672 RuntimeMaxSec 1673 - secboot: add workaround for snapcore/core-initrd issue #13 1674 - devicestate: log checkEncryption errors via logger.Noticef 1675 - o/daemon: validation sets api and basic spread test 1676 - gadget: move BuildPartitionList to install and make it unexported 1677 - tests: add nested spread end-to-end test for fde-hooks 1678 - devicestate: implement checkFDEFeatures() 1679 - boot: tweak resealing with fde-setup hooks 1680 - tests: add os query commands for subsystems and architectures 1681 - o/snapshotstate: don't set auto flag in the snapshot file 1682 - tests: use os.query tool instead of comparing the system var 1683 - testutil: use the original environment when calling shellcheck 1684 - sysconfig/cloudinit.go: add "manual_cache_clean: true" to cloud- 1685 init restrict file 1686 - gadget,o/devicestate,tests: drop EffectiveFilesystemLabel and 1687 instead set the implicit labels when loading the yaml 1688 - secboot: add new LockSealedKeys() that uses either TPM/fde-reveal- 1689 key 1690 - gadget/quantity: introduce Offset, start using it for offset 1691 related fields in the gadget 1692 - gadget: use "sealed-keys" to determine what method to use for 1693 reseal 1694 - tests/main/fake-netplan-apply: disable test on xenial for now 1695 - daemon: start splitting snaps op tests out of api_test.go 1696 - testutil: make DBusTest use a custom bus configuration file 1697 - tests: replace pkgdb.sh (library) with tests.pkgs (program) 1698 - gadget: prepare gadget kernel refs (0/N) 1699 - interfaces/builtin/docker-support: allow /run/containerd/s/... 1700 - cmd/snap-preseed: reset run inhibit locks on --reset. 1701 - boot: add sealKeyToModeenvUsingFdeSetupHook() 1702 - daemon: reorg snap.go and split out sections and icons support 1703 from api.go 1704 - sandbox/seccomp: use snap-seccomp's stdout for getting version 1705 info 1706 - daemon: split find support to its own api_*.go files and move some 1707 helpers 1708 - tests: move snapstate config defaults tests to a separate file. 1709 - bootloader/{lk,lkenv}: followups from #9695 1710 - daemon: actually move APIBaseSuite to daemon_test.apiBaseSuite 1711 - gadget,o/devicestate: set implicit values for schema and role 1712 directly instead of relying on Effective* accessors 1713 - daemon: split aliases support to its own api_*.go files 1714 - gadget: start separating rule/convention validation from basic 1715 soundness 1716 - cmd/snap-update-ns: add better unit test for overname sorting 1717 - secboot: use `fde-reveal-key` if available to unseal key 1718 - tests: fix lp-1899664 test when snapd_x1 is not installed in the 1719 system 1720 - tests: fix the scenario when the "$SRC".orig file does not exist 1721 - cmd/snap-update-ns: fix sorting of overname mount entries wrt 1722 other entries 1723 - devicestate: add runFDESetupHook() helper 1724 - bootloader/lk: add support for UC20 lk bootloader with V2 lkenv 1725 structs 1726 - daemon: split unsupported buy implementation to its own api_*.go 1727 files 1728 - tests: download timeout spread test 1729 - gadget,o/devicestate: hybrid 18->20 ready volume setups should be 1730 valid 1731 - o/devicestate: save model with serial in the device save db 1732 - bootloader: add check for prepare-image time and more tests 1733 validating options 1734 - interfaces/builtin/log_observe.go: allow controlling apparmor 1735 audit levels 1736 - hookstate: refactor around EphemeralRunHook 1737 - cmd/snap: implement 'snap validate' command 1738 - secboot,devicestate: add scaffoling for "fde-reveal-key" support 1739 - boot: observe successful command line update, provide a default 1740 - tests: New queries for the os tools 1741 - bootloader/lkenv: specify backup file as arg to NewEnv(), use "" 1742 as path+"bak" 1743 - osutil/disks: add FindMatchingPartitionUUIDWithPartLabel to Disk 1744 iface 1745 - daemon: split out snapctl support and snap configuration support 1746 to their own api_*.go files 1747 - snapshotstate: improve handling of multiple errors 1748 - tests: sign new nested-18|20* models to allow for generic serials 1749 - bootloader: remove installableBootloader interface and methods 1750 - seed: cleanup/drop some no longer valid TODOS, clarify some other 1751 points 1752 - boot: set kernel command line in modeenv during install 1753 - many: rename disks.FindMatching... to FindMatching...WithFsLabel 1754 and err type 1755 - cmd/snap: suppress a case of spurious stdout logging from tests 1756 - hookstate: add new HookManager.EphemeralRunHook() 1757 - daemon: move some more api tests from daemon to daemon_test 1758 - daemon: split apps and logs endpoints to api_apps.go and tests 1759 - interfaces/utf: Add Ledger to U2F devices 1760 - seed/seedwriter: consider modes when checking for deps 1761 availability 1762 - o/devicestate,daemon: fix reboot system action to not require a 1763 system label 1764 - cmd/snap-repair,store: increase initial retry time intervals, 1765 stalling TODOs 1766 - daemon: split interfacesCmd to api_interfaces.go 1767 - github: run nested suite when commit is pushed to release branch 1768 - client: reduce again the /v2/system-info timeout 1769 - tests: reset fakestore unit status 1770 - update-pot: fix typo in plural keyword spec 1771 - tests: remove workarounds that add "ubuntu-save" if missing 1772 - tests: add unit test for auto-refresh with validate-snap failure 1773 - osutil: add helper for getting the kernel command line 1774 - tests/main/uc20-create-partitions: verify ubuntu-save encryption 1775 keys, tweak not MATCH 1776 - boot: add kernel command lines to the modeenv file 1777 - spread: bump delta ref, tweak repacking to make smaller delta 1778 archives 1779 - bootloader/lkenv: add v2 struct + support using it 1780 - snapshotstate: add cleanup of abandonded snapshot imports 1781 - tests: fix uc20-create-parition-* tests for updated gadget 1782 - daemon: split out /v2/interfaces tests to api_interfaces_test.go 1783 - hookstate: implement snapctl fde-setup-{request,result} 1784 - wrappers, o/devicestate: remove EnableSnapServices 1785 - tests: enable nested on 20.10 1786 - daemon: simplify test helpers Get|PostReq into Req 1787 - daemon: move general api to api_general*.go 1788 - devicestate: make checkEncryption fde-setup hook aware 1789 - client/snapctl, store: fix typos 1790 - tests/main/lxd/prep-snapd-in-lxd.sh: wait for valid apt files 1791 before doing apt ops 1792 - cmd/snap-bootstrap: update model cross-check considerations 1793 - client,snapctl: add naive support for "stdin" 1794 - many: add new "install-mode: disable" option 1795 - osutil/disks: allow building on mac os 1796 - data/selinux: update the policy to allow operations on non-tmpfs 1797 /tmp 1798 - boot: add helper for generating candidate kernel lines for 1799 recovery system 1800 - wrappers: generate D-Bus service activation files 1801 - bootloader/many: rm ConfigFile, add Present for indicating 1802 presence of bloader 1803 - osutil/disks: allow mocking DiskFromDeviceName 1804 - daemon: start cleaning up api tests 1805 - packaging/arch: sync with AUR packaging 1806 - bootloader: indicate when boot config was updated 1807 - tests: Fix snap-debug-bootvars test to make it work on arm devices 1808 and core18 1809 - tests/nested/manual/core20-save: verify handling of ubuntu-save 1810 with different system variants 1811 - snap: use the boot-base for kernel hooks 1812 - devicestate: support "storage-safety" defaults during install 1813 - bootloader/lkenv: mv v1 to separate file, 1814 include/lk/snappy_boot_v1.h: little fixups 1815 - interfaces/fpga: add fpga interface 1816 - store: download timeout 1817 - vendor: update secboot repo to avoid including secboot.test binary 1818 - osutil: add KernelCommandLineKeyValue 1819 - gadget/gadget.go: allow system-recovery-{image,select} as roles in 1820 gadget.yaml 1821 - devicestate: implement boot.HasFDESetupHook 1822 - osutil/disks: add DiskFromName to get a disk using a udev name 1823 - usersession/agent: have session agent connect to the D-Bus session 1824 bus 1825 - o/servicestate: preserve order of services on snap restart 1826 - o/servicestate: unlock state before calling wrappers in 1827 doServiceControl 1828 - spread: disable unattended-upgrades on ubuntu 1829 - tests: testing new fedora 33 image 1830 - tests: fix fsck on boot on arm devices 1831 - tests: skip boot state test on arm devices 1832 - tests: updated the systems to run prepare-image-grub test 1833 - interfaces/raw_usb: allow read access to /proc/tty/drivers 1834 - tests: unmount /boot/efi in fsck-on-boot test 1835 - strutil/shlex,osutil/udev/netlink: minimally import go-check 1836 - tests: fix basic20 test on arm devices 1837 - seed: make a shared seed system label validation helper 1838 - tests/many: enable some uc20 tests, delete old unneeded tests or 1839 TODOs 1840 - boot/makebootable.go: set snapd_recovery_mode=install at image- 1841 build time 1842 - tests: migrate test from boot.sh helper to boot-state tool 1843 - asserts: implement "storage-safety" in uc20 model assertion 1844 - bootloader: use ForGadget when installing boot config 1845 - spread: UC20 no longer needs 2GB of mem 1846 - cmd/snap-confine: implement snap-device-helper internally 1847 - bootloader/grub: replace old reference to Managed...Blr... with 1848 Trusted...Blr... 1849 - cmd/snap-bootstrap: add readme for snap-bootstrap + real state 1850 diagram 1851 - interfaces: fix greengrass attr namingThe flavor attribute names 1852 are now as follows: 1853 - tests/lib/nested: poke the API to get the snap revisions 1854 - tests: compare options of mount units created by snapd and snapd- 1855 generator 1856 - o/snapstate,servicestate: use service-control task for service 1857 actions 1858 - sandbox: track applications unconditionally 1859 - interfaces/greengrass-support: add additional "process" flavor for 1860 1.11 update 1861 - cmd/snap-bootstrap, secboot, tests: misc cleanups, add spread test 1862 1863 * Thu Dec 15 2020 Michael Vogt <mvo@ubuntu.com> 1864 - New upstream release 2.48.2 1865 - tests: sign new nested-18|20* models to allow for generic serials 1866 - secboot: add extra paranoia when waiting for that fde-reveal-key 1867 - tests: backport netplan workarounds from #9785 1868 - secboot: add workaround for snapcore/core-initrd issue #13 1869 - devicestate: log checkEncryption errors via logger.Noticef 1870 - tests: add nested spread end-to-end test for fde-hooks 1871 - devicestate: implement checkFDEFeatures() 1872 - boot: tweak resealing with fde-setup hooks 1873 - sysconfig/cloudinit.go: add "manual_cache_clean: true" to cloud- 1874 init restrict file 1875 - secboot: add new LockSealedKeys() that uses either TPM or 1876 fde-reveal-key 1877 - gadget: use "sealed-keys" to determine what method to use for 1878 reseal 1879 - boot: add sealKeyToModeenvUsingFdeSetupHook() 1880 - secboot: use `fde-reveal-key` if available to unseal key 1881 - cmd/snap-update-ns: fix sorting of overname mount entries wrt 1882 other entries 1883 - o/devicestate: save model with serial in the device save db 1884 - devicestate: add runFDESetupHook() helper 1885 - secboot,devicestate: add scaffoling for "fde-reveal-key" support 1886 - hookstate: add new HookManager.EphemeralRunHook() 1887 - update-pot: fix typo in plural keyword spec 1888 - store,cmd/snap-repair: increase initial expontential time 1889 intervals 1890 - o/devicestate,daemon: fix reboot system action to not require a 1891 system label 1892 - github: run nested suite when commit is pushed to release branch 1893 - tests: reset fakestore unit status 1894 - tests: fix uc20-create-parition-* tests for updated gadget 1895 - hookstate: implement snapctl fde-setup-{request,result} 1896 - devicestate: make checkEncryption fde-setup hook aware 1897 - client,snapctl: add naive support for "stdin" 1898 - devicestate: support "storage-safety" defaults during install 1899 - snap: use the boot-base for kernel hooks 1900 - vendor: update secboot repo to avoid including secboot.test binary 1901 1902 * Thu Dec 03 2020 Michael Vogt <mvo@ubuntu.com> 1903 - New upstream release 2.48.1 1904 - gadget: disable ubuntu-boot role validation check 1905 1906 * Thu Nov 19 2020 Michael Vogt <mvo@ubuntu.com> 1907 - New upstream release 2.48 1908 - osutil: add KernelCommandLineKeyValue 1909 - devicestate: implement boot.HasFDESetupHook 1910 - boot/makebootable.go: set snapd_recovery_mode=install at image- 1911 build time 1912 - bootloader: use ForGadget when installing boot config 1913 - interfaces/raw_usb: allow read access to /proc/tty/drivers 1914 - boot: add scaffolding for "fde-setup" hook support for sealing 1915 - tests: fix basic20 test on arm devices 1916 - seed: make a shared seed system label validation helper 1917 - snap: add new "fde-setup" hooktype 1918 - cmd/snap-bootstrap, secboot, tests: misc cleanups, add spread test 1919 - secboot,cmd/snap-bootstrap: fix degraded mode cases with better 1920 device handling 1921 - boot,dirs,c/snap-bootstrap: avoid InstallHost* at the cost of some 1922 messiness 1923 - tests/nested/manual/refresh-revert-fundamentals: temporarily 1924 disable secure boot 1925 - snap-bootstrap,secboot: call BlockPCRProtectionPolicies in all 1926 boot modes 1927 - many: address degraded recover mode feedback, cleanups 1928 - tests: Use systemd-run on tests part2 1929 - tests: set the opensuse tumbleweed system as manual in spread.yaml 1930 - secboot: call BlockPCRProtectionPolicies even if the TPM is 1931 disabled 1932 - vendor: update to current secboot 1933 - cmd/snap-bootstrap,o/devicestate: use a secret to pair data and 1934 save 1935 - spread.yaml: increase number of workers on 20.10 1936 - snap: add new `snap recovery --show-keys` option 1937 - tests: minor test tweaks suggested in the review of 9607 1938 - snapd-generator: set standard snapfuse options when generating 1939 units for containers 1940 - tests: enable lxd test on ubuntu-core-20 and 16.04-32 1941 - interfaces: share /tmp/.X11-unix/ from host or provider 1942 - tests: enable main lxd test on 20.10 1943 - cmd/s-b/initramfs-mounts: refactor recover mode to implement 1944 degraded mode 1945 - gadget/install: add progress logging 1946 - packaging: keep secboot/encrypt_dummy.go in debian 1947 - interfaces/udev: use distro specific path to snap-device-helper 1948 - o/devistate: fix chaining of tasks related to regular snaps when 1949 preseeding 1950 - gadget, overlord/devicestate: validate that system supports 1951 encrypted data before install 1952 - interfaces/fwupd: enforce the confined fwupd to align Ubuntu Core 1953 ESP layout 1954 - many: add /v2/system-recovery-keys API and client 1955 - secboot, many: return UnlockMethod from Unlock* methods for future 1956 usage 1957 - many: mv keys to ubuntu-boot, move model file, rename keyring 1958 prefix for secboot 1959 - tests: using systemd-run instead of manually create a systemd unit 1960 - part 1 1961 - secboot, cmd/snap-bootstrap: enable or disable activation with 1962 recovery key 1963 - secboot: refactor Unlock...IfEncrypted to take keyfile + check 1964 disks first 1965 - secboot: add LockTPMSealedKeys() to lock access to keys 1966 independently 1967 - gadget: correct sfdisk arguments 1968 - bootloader/assets/grub: adjust fwsetup menuentry label 1969 - tests: new boot state tool 1970 - spread: use the official image for Ubuntu 20.10, no longer an 1971 unstable system 1972 - tests/lib/nested: enable snapd logging to console for core18 1973 - osutil/disks: re-implement partition searching for disk w/ non- 1974 adjacent parts 1975 - tests: using the nested-state tool in nested tests 1976 - many: seal a fallback object to the recovery boot chain 1977 - gadget, gadget/install: move helpers to install package, refactor 1978 unit tests 1979 - dirs: add "gentoo" to altDirDistros 1980 - update-pot: include file locations in translation template, and 1981 extract strings from desktop files 1982 - gadget/many: drop usage of gpt attr 59 for indicating creation of 1983 partitions 1984 - gadget/quantity: tweak test name 1985 - snap: fix failing unittest for quantity.FormatDuration() 1986 - gadget/quantity: introduce a new package that captures quantities 1987 - o/devicestate,a/sysdb: make a backup of the device serial to save 1988 - tests: fix rare interaction of tests.session and specific tests 1989 - features: enable classic-preserves-xdg-runtime-dir 1990 - tests/nested/core20/save: check the bind mount and size bump 1991 - o/devicetate,dirs: keep device keys in ubuntu-save/save for UC20 1992 - tests: rename hasHooks to hasInterfaceHooks in the ifacestate 1993 tests 1994 - o/devicestate: unit test tweaks 1995 - boot: store the TPM{PolicyAuthKey,LockoutAuth}File in ubuntu-save 1996 - testutil, cmd/snap/version: fix misc little errors 1997 - overlord/devicestate: bind mount ubuntu-save under 1998 /var/lib/snapd/save on startup 1999 - gadget/internal: tune ext4 setting for smaller filesystems 2000 - tests/nested/core20/save: a test that verifies ubuntu-save is 2001 present and set up 2002 - tests: update google sru backend to support groovy 2003 - o/ifacestate: handle interface hooks when preseeding 2004 - tests: re-enable the apt hooks test 2005 - interfaces,snap: use correct type: {os,snapd} for test data 2006 - secboot: set metadata and keyslots sizes when formatting LUKS2 2007 volumes 2008 - tests: improve uc20-create-partitions-reinstall test 2009 - client, daemon, cmd/snap: cleanups from #9489 + more unit tests 2010 - cmd/snap-bootstrap: mount ubuntu-save during boot if present 2011 - secboot: fix doc comment on helper for unlocking volume with key 2012 - tests: add spread test for refreshing from an old snapd and core18 2013 - o/snapstate: generate snapd snap wrappers again after restart on 2014 refresh 2015 - secboot: version bump, unlock volume with key 2016 - tests/snap-advise-command: re-enable test 2017 - cmd/snap, snapmgr, tests: cleanups after #9418 2018 - interfaces: deny connected x11 plugs access to ICE 2019 - daemon,client: write and read a maintenance.json file for when 2020 snapd is shut down 2021 - many: update to secboot v1 (part 1) 2022 - osutil/disks/mockdisk: panic if same mountpoint shows up again 2023 with diff opts 2024 - tests/nested/core20/gadget,kernel-reseal: add sanity checks to the 2025 reseal tests 2026 - many: implement snap routine console-conf-start for synchronizing 2027 auto-refreshes 2028 - dirs, boot: add ubuntu-save directories and related locations 2029 - usersession: fix typo in test name 2030 - overlord/snapstate: refactor ihibitRefresh 2031 - overlord/snapstate: stop warning about inhibited refreshes 2032 - cmd/snap: do not hardcode snapshot age value 2033 - overlord,usersession: initial notifications of pending refreshes 2034 - tests: add a unit test for UpdateMany where a single snap fails 2035 - o/snapstate/catalogrefresh.go: don't refresh catalog in install 2036 mode uc20 2037 - tests: also check snapst.Current in undo-unlink tests 2038 - tests: new nested tool 2039 - o/snapstate: implement undo handler for unlink-snap 2040 - tests: clean systems.sh helper and migrate last set of tests 2041 - tests: moving the lib section from systems.sh helper to os.query 2042 tool 2043 - tests/uc20-create-partitions: don't check for grub.cfg 2044 - packaging: make sure that static binaries are indeed static, fix 2045 openSUSE 2046 - many: have install return encryption keys for data and save, 2047 improve tests 2048 - overlord: add link participant for linkage transitions 2049 - tests: lxd smoke test 2050 - tests: add tests for fsck; cmd/s-b/initramfs-mounts: fsck ubuntu- 2051 seed too 2052 - tests: moving main suite from systems.sh to os.query tool 2053 - tests: moving the core test suite from systems.sh to os.query tool 2054 - cmd/snap-confine: mask host's apparmor config 2055 - o/snapstate: move setting updated SnapState after error paths 2056 - tests: add value to INSTANCE_KEY/regular 2057 - spread, tests: tweaks for openSUSE 2058 - cmd/snap-confine: update path to snap-device-helper in AppArmor 2059 profile 2060 - tests: new os.query tool 2061 - overlord/snapshotstate/backend: specify tar format for snapshots 2062 - tests/nested/manual/minimal-smoke: use 384MB of RAM for nested 2063 UC20 2064 - client,daemon,snap: auto-import does not error on managed devices 2065 - interfaces: PTP hardware clock interface 2066 - tests: use tests.backup tool 2067 - many: verify that unit tests work with nosecboot tag and without 2068 secboot package 2069 - wrappers: do not error out on read-only /etc/dbus-1/session.d 2070 filesystem on core18 2071 - snapshots: import of a snapshot set 2072 - tests: more output for sbuild test 2073 - o/snapstate: re-order remove tasks for individual snap revisions 2074 to remove current last 2075 - boot: skip some unit tests when running as root 2076 - o/assertstate: introduce 2077 ValidationTrackingKey/ValidationSetTracking and basic methods 2078 - many: allow ignoring running apps for specific request 2079 - tests: allow the searching test to fail under load 2080 - overlord/snapstate: inhibit startup while unlinked 2081 - seed/seedwriter/writer.go: check DevModeConfinement for dangerous 2082 features 2083 - tests/main/sudo-env: snap bin is available on Fedora 2084 - boot, overlord/devicestate: list trusted and managed assets 2085 upfront 2086 - gadget, gadget/install: support for ubuntu-save, create one during 2087 install if needed 2088 - spread-shellcheck: temporary workaround for deadlock, drop 2089 unnecessary test 2090 - snap: support different exit-code in the snap command 2091 - logger: use strutil.KernelCommandLineSplit in 2092 debugEnabledOnKernelCmdline 2093 - logger: fix snapd.debug=1 parsing 2094 - overlord: increase refresh postpone limit to 14 days 2095 - spread-shellcheck: use single thread pool executor 2096 - gadget/install,secboot: add debug messages 2097 - spread-shellcheck: speed up spread-shellcheck even more 2098 - spread-shellcheck: process paths from arguments in parallel 2099 - tests: tweak error from tests.cleanup 2100 - spread: remove workaround for openSUSE go issue 2101 - o/configstate: create /etc/sysctl.d when applying early config 2102 defaults 2103 - tests: new tests.backup tool 2104 - tests: add tests.cleanup pop sub-command 2105 - tests: migration of the main suite to snaps-state tool part 6 2106 - tests: fix journal-state test 2107 - cmd/snap-bootstrap/initramfs-mounts: split off new helper for misc 2108 recover files 2109 - cmd/snap-bootstrap/initramfs-mounts: also copy /etc/machine-id for 2110 same IP addr 2111 - packaging/{ubuntu,debian}: add liblzo2-dev as a dependency for 2112 building snapd 2113 - boot, gadget, bootloader: observer preserves managed bootloader 2114 configs 2115 - tests/nested/manual: add uc20 grade signed cloud-init test 2116 - o/snapstate/autorefresh.go: eliminate race when launching 2117 autorefresh 2118 - daemon,snapshotstate: do not return "size" from Import() 2119 - daemon: limit reading from snapshot import to Content-Length 2120 - many: set/expect Content-Length header when importing snapshots 2121 - github: switch from ::set-env command to environment file 2122 - tests: migration of the main suite to snaps-state tool part 5 2123 - client: cleanup the Client.raw* and Client.do* method families 2124 - tests: moving main suite to snaps-state tool part 4 2125 - client,daemon,snap: use constant for snapshot content-type 2126 - many: fix typos and repeated "the" 2127 - secboot: fix tpm connection leak when it's not enabled 2128 - many: scaffolding for snapshots import API 2129 - run-checks: run spread-shellcheck too 2130 - interfaces: update network-manager interface to allow 2131 ObjectManager access from unconfined clients 2132 - tests: move core and regression suites to snaps-state tool 2133 - tests: moving interfaces tests to snaps-state tool 2134 - gadget: preserve files when indicated by content change observer 2135 - tests: moving smoke test suite and some tests from main suite to 2136 snaps-state tool 2137 - o/snapshotstate: pass set id to backend.Open, update tests 2138 - asserts/snapasserts: introduce ValidationSets 2139 - o/snapshotstate: improve allocation of new set IDs 2140 - boot: look at the gadget for run mode bootloader when making the 2141 system bootable 2142 - cmd/snap: allow snap help vs --all to diverge purposefully 2143 - usersession/userd: separate bus name ownership from defining 2144 interfaces 2145 - o/snapshotstate: set snapshot set id from its filename 2146 - o/snapstate: move remove-related tests to snapstate_remove_test.go 2147 - desktop/notification: switch ExpireTimeout to time.Duration 2148 - desktop/notification: add unit tests 2149 - snap: snap help output refresh 2150 - tests/nested/manual/preseed: include a system-usernames snap when 2151 preseeding 2152 - tests: fix sudo-env test 2153 - tests: fix nested core20 shellcheck bug 2154 - tests/lib: move to new directory when restoring PWD, cleanup 2155 unpacked unpacked snap directories 2156 - desktop/notification: add bindings for FDO notifications 2157 - dbustest: fix stale comment references 2158 - many: move ManagedAssetsBootloader into TrustedAssetsBootloader, 2159 drop former 2160 - snap-repair: add uc20 support 2161 - tests: print all the serial logs for the nested test 2162 - o/snapstate/check_snap_test.go: mock osutil.Find{U,G}id to avoid 2163 bug in test 2164 - cmd/snap/auto-import: stop importing system user assertions from 2165 initramfs mnts 2166 - osutil/group.go: treat all non-nil errs from user.Lookup{Group,} 2167 as Unknown* 2168 - asserts: deserialize grouping only once in Pool.AddBatch if needed 2169 - gadget: allow content observer to have opinions about a change 2170 - tests: new snaps-state command - part1 2171 - o/assertstate: support refreshing any number of snap-declarations 2172 - boot: use test helpers 2173 - tests/core/snap-debug-bootvars: also check snap_mode 2174 - many/apparmor: adjust rules for reading profile/ execing new 2175 profiles for new kernel 2176 - tests/core/snap-debug-bootvars: spread test for snap debug boot- 2177 vars 2178 - tests/lib/nested.sh: more little tweaks 2179 - tests/nested/manual/grade-signed-above-testkeys-boot: enable kvm 2180 - cmd/s-b/initramfs-mounts: use ConfigureTargetSystem for install, 2181 recover modes 2182 - overlord: explicitly set refresh-app-awareness in tests 2183 - kernel: remove "edition" from kernel.yaml and add "update" 2184 - spread: drop vendor from the packed project archive 2185 - boot: fix debug bootloader variables dump on UC20 systems 2186 - wrappers, systemd: allow empty root dir and conditionally do not 2187 pass --root to systemctl 2188 - tests/nested/manual: add test for grades above signed booting with 2189 testkeys 2190 - tests/nested: misc robustness fixes 2191 - o/assertstate,asserts: use bulk refresh to refresh snap- 2192 declarations 2193 - tests/lib/prepare.sh: stop patching the uc20 initrd since it has 2194 been updated now 2195 - tests/nested/manual/refresh-revert-fundamentals: re-enable test 2196 - update-pot: ignore .go files inside .git when running xgettext-go 2197 - tests: disable part of the lxd test completely on 16.04. 2198 - o/snapshotstate: tweak comment regarding snapshot filename 2199 - o/snapstate: improve snapshot iteration 2200 - bootloader: lk cleanups 2201 - tests: update to support nested kvm without reboots on UC20 2202 - tests/nested/manual/preseed: disable system-key check for 20.04 2203 image 2204 - spread.yaml: add ubuntu-20.10-64 to qemu 2205 - store: handle v2 error when fetching assertions 2206 - gadget: resolve device mapper devices for fallback device lookup 2207 - tests/nested/cloud-init-many: simplify tests and unify 2208 helpers/seed inputs 2209 - tests: copy /usr/lib/snapd/info to correct directory 2210 - check-pr-title.py * : allow "*" in the first part of the title 2211 - many: typos and small test tweak 2212 - tests/main/lxd: disable cgroup combination for 16.04 that is 2213 failing a lot 2214 - tests: make nested signing helpers less confusing 2215 - tests: misc nested changes 2216 - tests/nested/manual/refresh-revert-fundamentals: disable 2217 temporarily 2218 - tests/lib/cla_check: default to Python 3, tweaks, formatting 2219 - tests/lib/cl_check.py: use python3 compatible code 2220 2221 * Thu Oct 08 2020 Michael Vogt <mvo@ubuntu.com> 2222 - New upstream release 2.47.1 2223 - o/configstate: create /etc/sysctl.d when applying early config 2224 defaults 2225 - cmd/snap-bootstrap/initramfs-mounts: also copy /etc/machine-id for 2226 same IP addr 2227 - packaging/{ubuntu,debian}: add liblzo2-dev as a dependency for 2228 building snapd 2229 - cmd/snap: allow snap help vs --all to diverge purposefully 2230 - snap: snap help output refresh 2231 2232 * Tue Sep 29 2020 Michael Vogt <mvo@ubuntu.com> 2233 - New upstream release 2.47 2234 - tests: fix nested core20 shellcheck bug 2235 - many/apparmor: adjust rule for reading apparmor profile for new 2236 kernel 2237 - snap-repair: add uc20 support 2238 - cmd/snap/auto-import: stop importing system user assertions from 2239 initramfs mnts 2240 - cmd/s-b/initramfs-mounts: use ConfigureTargetSystem for install, 2241 recover modes 2242 - gadget: resolve device mapper devices for fallback device lookup 2243 - secboot: add boot manager profile to pcr protection profile 2244 - sysconfig,o/devicestate: mv DisableNoCloud to 2245 DisableAfterLocalDatasourcesRun 2246 - tests: make gadget-reseal more robust 2247 - tests: skip nested images pre-configuration by default 2248 - tests: fix for basic20 test running on external backend and rpi 2249 - tests: improve kernel reseal test 2250 - boot: adjust comments, naming, log success around reseal 2251 - tests/nested, fakestore: changes necessary to run nested uc20 2252 signed/secured tests 2253 - tests: add nested core20 gadget reseal test 2254 - boot/modeenv: track unknown keys in Read and put back into modeenv 2255 during Write 2256 - interfaces/process-control: add sched_setattr to seccomp 2257 - boot: with unasserted kernels reseal if there's a hint modeenv 2258 changed 2259 - client: bump the default request timeout to 120s 2260 - configcore: do not error in console-conf.disable for install mode 2261 - boot: streamline bootstate20.go reseal and tests changes 2262 - boot: reseal when changing kernel 2263 - cmd/snap/model: specify grade in the model command output 2264 - tests: simplify 2265 repack_snapd_snap_with_deb_content_and_run_mode_first_boot_tweaks 2266 - test: improve logging in nested tests 2267 - nested: add support to telnet to serial port in nested VM 2268 - secboot: use the snapcore/secboot native recovery key type 2269 - tests/lib/nested.sh: use more focused cloud-init config for uc20 2270 - tests/lib/nested.sh: wait for the tpm socket to exist 2271 - spread.yaml, tests/nested: misc changes 2272 - tests: add more checks to disk space awareness spread test 2273 - tests: disk space awareness spread test 2274 - boot: make MockUC20Device use a model and MockDevice more 2275 realistic 2276 - boot,many: reseal only when meaningful and necessary 2277 - tests/nested/core20/kernel-failover: add test for failed refresh 2278 of uc20 kernel 2279 - tests: fix nested to work with qemu and kvm 2280 - boot: reseal when updating boot assets 2281 - tests: fix snap-routime-portal-info test 2282 - boot: verify boot chain file in seal and reseal tests 2283 - tests: use full path to test-snapd-refresh.version binary 2284 - boot: store boot chains during install, helper for checking 2285 whether reseal is needed 2286 - boot: add call to reseal an existing key 2287 - boot: consider boot chains with unrevisioned kernels incomparable 2288 - overlord: assorted typos and miscellaneous changes 2289 - boot: group SealKeyModelParams by model, improve testing 2290 - secboot: adjust parameters to buildPCRProtectionProfile 2291 - strutil: add SortedListsUniqueMergefrom the doc comment: 2292 - snap/naming: upgrade TODO to TODO:UC20 2293 - secboot: add call to reseal an existing key 2294 - boot: in seal.go adjust error message and function names 2295 - o/snapstate: check available disk space in RemoveMany 2296 - boot: build bootchains data for sealing 2297 - tests: remove "set -e" from function only shell libs 2298 - o/snapstate: disk space check on UpdateMany 2299 - o/snapstate: disk space check with snap update 2300 - snap: implement new `snap reboot` command 2301 - boot: do not reorder boot assets when generating predictable boot 2302 chains and other small tweaks 2303 - tests: some fixes and improvements for nested execution 2304 - tests/core/uc20-recovery: fix check for at least specific calls to 2305 mock-shutdown 2306 - boot: be consistent using bootloader.Role* consts instead of 2307 strings 2308 - boot: helper for generating secboot load chains from a given boot 2309 asset sequence 2310 - boot: tweak boot chains to support a list of kernel command lines, 2311 keep track of model and kernel boot file 2312 - boot,secboot: switch to expose and use snapcore/secboot load event 2313 trees 2314 - tests: use `nested_exec` in core{20,}-early-config test 2315 - devicestate: enable cloud-init on uc20 for grade signed and 2316 secured 2317 - boot: add "rootdir" to baseBootenvSuite and use in tests 2318 - tests/lib/cla_check.py: don't allow users.noreply.github.com 2319 commits to pass CLA 2320 - boot: represent boot chains, helpers for marshalling and 2321 equivalence checks 2322 - boot: mark successful with boot assets 2323 - client, api: handle insufficient space error 2324 - o/snapstate: disk space check with single snap install 2325 - configcore: "service.console-conf.disable" is gadget defaults only 2326 - packaging/opensuse: fix for /usr/libexec on TW, do not hardcode 2327 AppArmor profile path 2328 - tests: skip udp protocol in nfs-support test on ubuntu-20.10 2329 - packaging/debian-sid: tweak code preparing _build tree 2330 - many: move seal code from gadget/install to boot 2331 - tests: remove workaround for cups on ubuntu-20.10 2332 - client: implement RebootToSystem 2333 - many: seed.Model panics now if called before LoadAssertions 2334 - daemon: add /v2/systems "reboot" action API 2335 - github: run tests also on push to release branches 2336 - interfaces/bluez: let slot access audio streams 2337 - seed,c/snap-bootstrap: simplify snap-bootstrap seed reading with 2338 new seed.ReadSystemEssential 2339 - interfaces: allow snap-update-ns to read /proc/cmdline 2340 - tests: new organization for nested tests 2341 - o/snapstate, features: add feature flags for disk space awareness 2342 - tests: workaround for cups issue on 20.10 where default printer is 2343 not configured. 2344 - interfaces: update cups-control and add cups for providing snaps 2345 - boot: keep track of the original asset when observing updates 2346 - tests: simplify and fix tests for disk space checks on snap remove 2347 - sysconfig/cloudinit.go: add AllowCloudInit and use GadgetDir for 2348 cloud.conf 2349 - tests/main: mv core specific tests to core suite 2350 - tests/lib/nested.sh: reset the TPM when we create the uc20 vm 2351 - devicestate: rename "mockLogger" to "logbuf" 2352 - many: introduce ContentChange for tracking gadget content in 2353 observers 2354 - many: fix partion vs partition typo 2355 - bootloader: retrieve boot chains from bootloader 2356 - devicestate: add tests around logging in RequestSystemAction 2357 - boot: handle canceled update 2358 - bootloader: tweak doc comments (thanks Samuele) 2359 - seed/seedwriter: test local asserted snaps with UC20 grade signed 2360 - sysconfig/cloudinit.go: add DisableNoCloud to 2361 CloudInitRestrictOptions 2362 - many: use BootFile type in load sequences 2363 - boot,bootloader: clarifications after the changes to introduce 2364 bootloader.Options.Role 2365 - boot,bootloader,gadget: apply new bootloader.Options.Role 2366 - o/snapstate, features: add feature flag for disk space check on 2367 remove 2368 - testutil: add checkers for symbolic link target 2369 - many: refactor tpm seal parameter setting 2370 - boot/bootstate20: reboot to rollback to previous kernel 2371 - boot: add unit test helpers 2372 - boot: observe update & rollback of trusted assets 2373 - interfaces/utf: Add MIRKey to u2f devices 2374 - o/devicestate/devicestate_cloudinit_test.go: test cleanup for uc20 2375 cloud-init tests 2376 - many: check that users of BaseTest don't forget to consume 2377 cleanups 2378 - tests/nested/core20/tpm: verify trusted boot assets tracking 2379 - github: run macOS job with Go 1.14 2380 - many: misc doc-comment changes and typo fixes 2381 - o/snapstate: disk space check with InstallMany 2382 - many: cloud-init cleanups from previous PR's 2383 - tests: running tests on opensuse leap 15.2 2384 - run-checks: check for dirty build tree too 2385 - vendor: run ./get-deps.sh to update the secboot hash 2386 - tests: update listing test for "-dirty" versions 2387 - overlord/devicestate: do not release the state lock when updating 2388 gadget assets 2389 - secboot: read kernel efi image from snap file 2390 - snap: add size to the random access file return interface 2391 - daemon: correctly parse Content-Type HTTP header. 2392 - tests: account for apt-get on core18 2393 - cmd/snap-bootstrap/initramfs-mounts: compute string outside of 2394 loop 2395 - mkversion.sh: simple hack to include dirty in version if the tree 2396 is dirty 2397 - cgroup,snap: track hooks on system bus only 2398 - interfaces/systemd: compare dereferenced Service 2399 - run-checks: only check files in git for misspelling 2400 - osutil: add a package doc comment (via doc.go) 2401 - boot: complain about reused asset name during initial install 2402 - snapstate: installSize helper that calculates total size of snaps 2403 and their prerequisites 2404 - snapshots: export of snapshots 2405 - boot/initramfs_test.go: reset boot vars on the bootloader for each 2406 iteration 2407 2408 * Fri Sep 04 2020 Michael Vogt <mvo@ubuntu.com> 2409 - New upstream release 2.46.1 2410 - interfaces: allow snap-update-ns to read 2411 /proc/cmdline 2412 - github: run macOS job with Go 1.14 2413 - o/snapstate, features: add feature flag for disk space check on 2414 remove 2415 - tests: account for apt-get on core18 2416 - mkversion.sh: include dirty in version if the tree 2417 is dirty 2418 - interfaces/systemd: compare dereferenced Service 2419 - vendor.json: update mysterious secboot SHA again 2420 2421 * Tue Aug 25 2020 Michael Vogt <mvo@ubuntu.com> 2422 - New upstream release 2.46 2423 - logger: add support for setting snapd.debug=1 on kernel cmdline 2424 - o/snapstate: check disk space before creating automatic snapshot 2425 on remove 2426 - boot, o/devicestate: observe existing recovery bootloader trusted 2427 boot assets 2428 - many: use transient scope for tracking apps and hooks 2429 - features: add HiddenSnapFolder feature flag 2430 - tests/lib/nested.sh: fix partition typo, unmount the image on uc20 2431 too 2432 - runinhibit: open the lock file in read-only mode in IsLocked 2433 - cmd/s-b/initramfs-mounts: make recover -> run mode transition 2434 automatic 2435 - tests: update spread test for unknown plug/slot with snapctl is- 2436 connected 2437 - osutil: add OpenExistingLockForReading 2438 - kernel: add kernel.Validate() 2439 - interfaces: add vcio interface 2440 - interfaces/{docker,kubernetes}-support: load overlay and support 2441 systemd cgroup driver 2442 - tests/lib/nested.sh: use more robust code for finding what loop 2443 dev we mounted 2444 - cmd/snap-update-ns: detach all bind-mounted file 2445 - snap/snapenv: set SNAP_REAL_HOME 2446 - packaging: umount /snap on purge in containers 2447 - interfaces: misc policy updates xlvi 2448 - secboot,cmd/snap-bootstrap: cross-check partitions before 2449 unlocking, mounting 2450 - boot: copy boot assets cache to new root 2451 - gadget,kernel: add new kernel.{Info,Asset} struct and helpers 2452 - o/hookstate/ctlcmd: make is-connected check whether the plug or 2453 slot exists 2454 - tests: find -ignore_readdir_race when scanning cgroups 2455 - interfaces/many: deny arbitrary desktop files and misc from 2456 /usr/share 2457 - tests: use "set -ex" in prep-snapd-in-lxd.sh 2458 - tests: re-enable udisks test on debian-sid 2459 - cmd/snapd-generator: use PATH fallback if PATH is not set 2460 - tests: disable udisks2 test on arch linux 2461 - github: use latest/stable go, not latest/edge 2462 - tests: remove support for ubuntu 19.10 from spread tests 2463 - tests: fix lxd test wrongly tracking 'latest' 2464 - secboot: document exported functions 2465 - cmd: compile snap gdbserver shim correctly 2466 - many: correctly calculate the desktop file prefix everywhere 2467 - interfaces: add kernel-crypto-api interface 2468 - corecfg: add "system.timezone" setting to the system settings 2469 - cmd/snapd-generator: generate drop-in to use fuse in container 2470 - cmd/snap-bootstrap/initramfs-mounts: tweak names, add comments 2471 from previous PR 2472 - interfaces/many: miscellaneous updates for strict microk8s 2473 - secboot,cmd/snap-bootstrap: don't import boot package from secboot 2474 - cmd/snap-bootstrap/initramfs-mounts: call systemd-mount instead of 2475 the-tool 2476 - tests: work around broken update of systemd-networkd 2477 - tests/main/install-fontconfig-cache-gen: enhance test by 2478 verifying, add fonts to test 2479 - o/devicestate: wrap asset update observer error 2480 - boot: refactor such that bootStateUpdate20 mainly carries Modeenv 2481 - mkversion.sh: disallow changelog versions that have git in it, if 2482 we also have git version 2483 - interfaces/many: miscellaneous updates for strict microk8s 2484 - snap: fix repeated "cannot list recovery system" and add test 2485 - boot: track trusted assets during initial install, assets cache 2486 - vendor: update secboot to fix key data validation 2487 - tests: unmount FUSE file-systems from XDG runtime dir 2488 - overlord/devicestate: workaround non-nil interface with nil struct 2489 - sandbox/cgroup: remove temporary workaround for multiple cgroup 2490 writers 2491 - sandbox/cgroup: detect dangling v2 cgroup 2492 - bootloader: add helper for creating a bootloader based on gadget 2493 - tests: support different images on nested execution 2494 - many: reorg cmd/snapinfo.go into snap and new client/clientutil 2495 - packaging/arch: use external linker when building statically 2496 - tests: cope with ghost cgroupv2 2497 - tests: fix issues related to restarting systemd-logind.service 2498 - boot, o/devicestate: TrustedAssetUpdateObserver stubs, hook up to 2499 gadget updates 2500 - vendor: update github.com/kr/pretty to fix diffs of values with 2501 pointer cycles 2502 - boot: move bootloaderKernelState20 impls to separate file 2503 - .github/workflows: move snap building to test.yaml as separate 2504 cached job 2505 - tests/nested/manual/minimal-smoke: run core smoke tests in a VM 2506 meeting minimal requirements 2507 - osutil: add CommitAs to atomic file 2508 - gadget: introduce content update observer 2509 - bootloader: introduce TrustedAssetsBootloader, implement for grub 2510 - o/snapshotstate: helpers for calculating disk space needed for an 2511 automatic snapshot 2512 - gadget/install: retrieve command lines from bootloader 2513 - boot/bootstate20: unify commit method impls, rm 2514 bootState20MarkSuccessful 2515 - tests: add system information and image information when debug 2516 info is displayed 2517 - tests/main/cgroup-tracking: try to collect some information about 2518 cgroups 2519 - boot: introduce current_boot_assets and 2520 current_recovery_boot_assets to modeenv 2521 - tests: fix for timing issues on journal-state test 2522 - many: remove usage and creation of hijacked pid cgroup 2523 - tests: port regression-home-snap-root-owned to tests.session 2524 - tests: run as hightest via tests.session 2525 - github: run CLA checks on self-hosted workers 2526 - github: remove Ubuntu 19.10 from actions workflow 2527 - tests: remove End-Of-Life opensuse/fedora releases 2528 - tests: remove End-Of-Life releases from spread.yaml 2529 - tests: fix debug section of appstream-id test 2530 - interfaces: check !b.preseed earlier 2531 - tests: work around bug in systemd/debian 2532 - boot: add deepEqual, Copy helpers for Modeenv to simplify 2533 bootstate20 refactor 2534 - cmd: add new "snap recovery" command 2535 - interfaces/systemd: use emulation mode when preseeding 2536 - interfaces/kmod: don't load kernel modules in kmod backend when 2537 preseeding 2538 - interfaces/udev: do not reload udevadm rules when preseeding 2539 - cmd/snap-preseed: use snapd from the deb if newer than from seeds 2540 - boot: fancy marshaller for modeenv values 2541 - gadget, osutil: use atomic file copy, adjust tests 2542 - overlord: use new tracking cgroup for refresh app awareness 2543 - github: do not skip gofmt with Go 1.9/1.10 2544 - many: introduce content write observer, install mode glue, initial 2545 seal stubs 2546 - daemon,many: switch to use client.ErrorKind and drop the local 2547 errorKind... 2548 - tests: new parameters for nested execution 2549 - client: move all error kinds into errors.go and add doc strings 2550 - cmd/snap: display the error in snap debug seeding if seeding is in 2551 error 2552 - cmd/snap/debug/seeding: use unicode for proper yaml 2553 - tests/cmd/snap-bootstrap/initramfs-mounts: add test case for empty 2554 recovery_mode 2555 - osutil/disks: add mock disk and tests for happy path of mock disks 2556 - tests: refresh/revert snapd in uc20 2557 - osutil/disks: use a dedicated error to indicate a fs label wasn't 2558 found 2559 - interfaces/system-key: in WriteSystemKey during tests, don't call 2560 ParserFeatures 2561 - boot: add current recovery systems to modeenv 2562 - bootloader: extend managed assets bootloader interface to compose 2563 a candidate command line 2564 - interfaces: make the unmarshal test match more the comment 2565 - daemon/api: use pointers to time.Time for debug seeding aspect 2566 - o/ifacestate: update security profiles in connect undo handler 2567 - interfaces: add uinput interface 2568 - cmd/snap-bootstrap/initramfs-mounts: add doSystemdMount + unit 2569 tests 2570 - o/devicestate: save seeding/preseeding times for use with debug 2571 seeding api 2572 - cmd/snap/debug: add "snap debug seeding" command for preseeding 2573 debugging 2574 - tests/main/selinux-clean: workaround SELinux denials triggered by 2575 linger setup on Centos8 2576 - bootloader: compose command line with mode and extra arguments 2577 - cmd/snap, daemon: detect and bail purge on multi-snap 2578 - o/ifacestate: fix bug in snapsWithSecurityProfiles 2579 - interfaces/builtin/multipass: replace U+00A0 no-break space with 2580 simple space 2581 - bootloader/assets: generate bootloader assets from files 2582 - many/tests/preseed: reset the preseeded images before preseeding 2583 them 2584 - tests: drop accidental accents from e 2585 - secboot: improve key sealing tests 2586 - tests: replace _wait_for_file_change with retry 2587 - tests: new fs-state which replaces the files.sh helper 2588 - sysconfig/cloudinit_test.go: add test for initramfs case, rm "/" 2589 from path 2590 - cmd/snap: track started apps and hooks 2591 - tests/main/interfaces-pulseaudio: disable start limit checking for 2592 pulseaudio service 2593 - api: seeding debug api 2594 - .github/workflows/snap-build.yaml: build the snapd snap via GH 2595 Actions too 2596 - tests: moving journalctl.sh to a new journal-state tool 2597 - tests/nested/manual: add spread tests for cloud-init vuln 2598 - bootloader/assets: helpers for registering per-edition snippets, 2599 register snippets for grub 2600 - data,packaging,wrappers: extend D-Bus service activation search 2601 path 2602 - spread: add opensuse 15.2 and tumbleweed for qemu 2603 - overlord,o/devicestate: restrict cloud-init on Ubuntu Core 2604 - sysconfig/cloudinit: add RestrictCloudInit 2605 - cmd/snap-preseed: check that target path exists and is a directory 2606 on --reset 2607 - tests: check for pids correctly 2608 - gadget,gadget/install: refactor partition table update 2609 - sysconfig/cloudinit: add CloudInitStatus func + CloudInitState 2610 type 2611 - interface/fwupd: add more policies for making fwupd upstream 2612 strict 2613 - tests: new to-one-line tool which replaces the strings.sh helper 2614 - interfaces: new helpers to get and compare system key, for use 2615 with seeding debug api 2616 - osutil, many: add helper for checking whether the process is a go 2617 test binary 2618 - cmd/snap-seccomp/syscalls: add faccessat2 2619 - tests: adjust xdg-open after launcher changes 2620 - tests: new core config helper 2621 - usersession/userd: do not modify XDG_DATA_DIRS when calling xdg- 2622 open 2623 - cmd/snap-preseed: handle relative chroot path 2624 - snapshotstate: move sizer to osutil.Sizer() 2625 - tests/cmd/snap-bootstrap/initramfs-mounts: rm duplicated env ref 2626 kernel tests 2627 - gadget/install,secboot: use snapcore/secboot luks2 api 2628 - boot/initramfs_test.go: add Commentf to more Assert()'s 2629 - tests/lib: account for changes in arch package file name extension 2630 - bootloader/bootloadertest: fix comment typo 2631 - bootloader: add helper for getting recovery system environment 2632 variables 2633 - tests: preinstall shellcheck and run tests on focal 2634 - strutil: add a helper for parsing kernel command line 2635 - osutil: add CheckFreeSpace helper 2636 - secboot: update tpm connection error handling 2637 - packaging, cmd/snap-mgmt, tests: remove modules files on purge 2638 - tests: add tests.cleanup helper 2639 - packaging: add "ca-certificates" to build-depends 2640 - tests: more checks in core20 early config spread test 2641 - tests: fix some snapstate tests to use pointers for 2642 snapmgrTestSuite 2643 - boot: better naming of helpers for obtaining kernel command line 2644 - many: use more specific check for unit test mocking 2645 - systemd/escape: fix issues with "" and "\t" handling 2646 - asserts: small improvements and corrections for sequence-forming 2647 assertions' support 2648 - boot, bootloader: query kernel command line of run mod and 2649 recovery mode systems 2650 - snap/validate.go: disallow snap layouts with new top-level 2651 directories 2652 - tests: allow to add a new label to run nested tests as part of PR 2653 validation 2654 - tests/core/gadget-update-pc: port to UC20 2655 - tests: improve nested tests flexibility 2656 - asserts: integer headers: disallow prefix zeros and make parsing 2657 more uniform 2658 - asserts: implement Database.FindSequence 2659 - asserts: introduce SequenceMemberAfter in the asserts backstores 2660 - spread.yaml: remove tests/lib/tools from PATH 2661 - overlord: refuse to install snaps whose activatable D-Bus services 2662 conflict with installed snaps 2663 - tests: shorten lxd-state undo-mount-changes 2664 - snap-confine: don't die if a device from sysfs path cannot be 2665 found by udev 2666 - tests: fix argument handling of apt-state 2667 - tests: rename lxd-tool to lxd-state 2668 - tests: rename user-tool to user-state, fix --help 2669 - interfaces: add gconf interface 2670 - sandbox/cgroup: avoid parsing security tags twice 2671 - tests: rename version-tool to version-compare 2672 - cmd/snap-update-ns: handle anomalies better 2673 - tests: fix call to apt.Package.mark_install(auto_inst=True) 2674 - tests: rename mountinfo-tool to mountinfo.query 2675 - tests: rename memory-tool to memory-observe-do 2676 - tests: rename invariant-tool to tests.invariant 2677 - tests: rename apt-tool to apt-state 2678 - many: managed boot config during run mode setup 2679 - asserts: introduce the concept of sequence-forming assertion types 2680 - tests: tweak comments/output in uc20-recovery test 2681 - tests/lib/pkgdb: do not use quiet when purging debs 2682 - interfaces/apparmor: allow snap-specific /run/lock 2683 - interfaces: add system-source-code for access to /usr/src 2684 - sandbox/cgroup: extend SnapNameFromPid with tracking cgroup data 2685 - gadget/install: move udev trigger to gadget/install 2686 - many: make nested spread tests more reliable 2687 - tests/core/uc20-recovery: apply hack to get gopath in recover mode 2688 w/ external backend 2689 - tests: enable tests on uc20 which now work with the real model 2690 assertion 2691 - tests: enable system-snap-refresh test on uc20 2692 - gadget, bootloader: preserve managed boot assets during gadget 2693 updates 2694 - tests: fix leaked dbus-daemon in selinux-clean 2695 - tests: add servicestate.Control tests 2696 - tests: fix "restart.service" 2697 - wrappers: helper for enabling services - extract and move enabling 2698 of services into a helper 2699 - tests: new test to validate refresh and revert of kernel and 2700 gadget on uc20 2701 - tests/lib/prepare-restore: collect debug info when prepare purge 2702 fails 2703 - bootloader: allow managed bootloader to update its boot config 2704 - tests: Remove unity test from nightly test suite 2705 - o/devicestate: set mark-seeded to done in the task itself 2706 - tests: add spread test for disconnect undo caused by failing 2707 disconnect hook 2708 - sandbox/cgroup: allow discovering PIDs of given snap 2709 - osutil/disks: support IsDecryptedDevice for mountpoints which are 2710 dm devices 2711 - osutil: detect autofs mounted in /home 2712 - spread.yaml: allow amazon-linux-2-64 qemu with 2713 ec2-user/ec2-user 2714 - usersession: support additional zoom URL schemes 2715 - overlord: mock timings.DurationThreshold in TestNewWithGoodState 2716 - sandbox/cgroup: add tracking helpers 2717 - tests: detect stray dbus-daemon 2718 - overlord: refuse to install snaps providing user daemons on Ubuntu 2719 14.04 2720 - many: move encryption and installer from snap-boostrap to gadget 2721 - o/ifacestate: fix connect undo handler 2722 - interfaces: optimize rules of multiple connected iio/i2c/spi plugs 2723 - bootloader: introduce managed bootloader, implement for grub 2724 - tests: fix incorrect check in smoke/remove test 2725 - asserts,seed: split handling of essential/not essential model 2726 snaps 2727 - gadget: fix typo in mounted filesystem updater 2728 - gadget: do only one mount point lookup in mounted fs updater 2729 - tests/core/snap-auto-mount: try to make the test more robust 2730 - tests: adding ubuntu-20.04 to google-sru backend 2731 - o/servicestate: add updateSnapstateServices helper 2732 - bootloader: pull recovery grub config from internal assets 2733 - tests/lib/tools: apply linger workaround when needed 2734 - overlord/snapstate: graceful handling of denied "managed" refresh 2735 schedule 2736 - snapstate: fix autorefresh from classic->strict 2737 - overlord/configstate: add system.kernel.printk.console-loglevel 2738 option 2739 - tests: fix assertion disk handling for nested UC systems 2740 - snapstate: use testutil.HostScaledTimeout() in snapstate tests 2741 - tests: extra worker for google-nested backend to avoid timeout 2742 error on uc20 2743 - snapdtool: helper to check whether the current binary is reexeced 2744 from a snap 2745 - tests: mock servicestate in api tests to avoid systemctl checks 2746 - many: rename back snap.Info.GetType to Type 2747 - tests/lib/cla_check: expect explicit commit range 2748 - osutil/disks: refactor diskFromMountPointImpl a bit 2749 - o/snapstate: service-control task handler 2750 - osutil: add disks pkg for associating mountpoints with 2751 disks/partitions 2752 - gadget,cmd/snap-bootstrap: move partitioning to gadget 2753 - seed: fix LoadEssentialMeta when gadget is not loaded 2754 - cmd/snap: Debian does not allow $SNAP_MOUNT_DIR/bin in sudo 2755 secure_path 2756 - asserts: introduce new assertion validation-set 2757 - asserts,daemon: add support for "serials" field in system-user 2758 assertion 2759 - data/sudo: drop a failed sudo secure_path workaround 2760 - gadget: mv encodeLabel to osutil/disks.EncodeHexBlkIDFormat 2761 - boot, snap-bootstrap: move initramfs-mounts logic to boot pkg 2762 - spread.yaml: update secure boot attribute name 2763 - interfaces/block_devices: add NVMe subsystem devices, support 2764 multipath paths 2765 - tests: use the "jq" snap from the edge channel 2766 - tests: simplify the tpm test by removing the test-snapd-mokutil 2767 snap 2768 - boot/bootstate16.go: clean snap_try_* vars when not in Trying 2769 status too 2770 - tests/main/sudo-env: check snap path under sudo 2771 - tests/main/lxd: add test for snaps inside nested lxd containers 2772 not working 2773 - asserts/internal: expand errors about invalid serialized grouping 2774 labels 2775 - usersession/userd: add msteams url support 2776 - tests/lib/prepare.sh: adjust comment about sgdisk 2777 - tests: fix how gadget pc is detected when the snap does not exist 2778 and ls fails 2779 - tests: move a few more tests to snapstate_update_test.go 2780 - tests/main: add spread test for running svc from install hook 2781 - tests/lib/prepare: increase the size of the uc16/uc18 partitions 2782 - tests/special-home-can-run-classic-snaps: re-enable 2783 - workflow: test PR title as part of the static checks again 2784 - tests/main/xdg-open-compat: backup and restore original xdg-open 2785 - tests: move update-related tests to snapstate_update_test.go 2786 - cmd,many: move Version and bits related to snapd tools to 2787 snapdtool, merge cmdutil 2788 - tests/prepare-restore.sh: reset-failed systemd-journald before 2789 restarting 2790 - interfaces: misc small interface updates 2791 - spread: use find rather than recursive ls, skip mounted snaps 2792 - tests/lib/prepare-restore.sh: if we failed to purge snapd deb, ls 2793 /var/lib/snapd 2794 - tests: enable snap-auto-mount test on core20 2795 - cmd/snap: do not show $PATH warning when executing under sudo on a 2796 known distro 2797 - asserts/internal: add some iteration benchmarks 2798 - sandbox/cgroup: improve pid parsing code 2799 - snap: add new `snap run --experimental-gdbserver` option 2800 - asserts/internal: limit Grouping size switching to a bitset 2801 representationWe don't always use the bit-set representation 2802 because: 2803 - snap: add an activates-on property to apps for D-Bus activation 2804 - dirs: delete unused Cloud var, fix typo 2805 - sysconfig/cloudinit: make callers of DisableCloudInit use 2806 WritableDefaultsDir 2807 - tests: fix classic ubuntu core transition auth 2808 - tests: fail in setup_reflash_magic() if there is snapd state left 2809 - tests: port interfaces-many-core-provided to tests.session 2810 - tests: wait after creating partitions with sfdisk 2811 - bootloader: introduce bootloarder assets, import grub.cfg with an 2812 edition marker 2813 - riscv64: bump timeouts 2814 - gadget: drop dead code, hide exports that are not used externally 2815 - tests: port 2 uc20 part1 2816 - tests: fix bug waiting for snap command to be ready 2817 - tests: move try-related tests to snapstate_try_test.go 2818 - tests: add debug for 20.04 prepare failure 2819 - travis.yml: removed, all our checks run in GH actions now 2820 - tests: clean up up the use of configcoreSuite in the configcore 2821 tests 2822 - sandbox/cgroup: remove redundant pathOfProcPidCgroup 2823 - sandbox/cgroup: add tests for ParsePids 2824 - tests: fix the basic20 test for uc20 on external backend 2825 - tests: use configcoreSuite in journalSuite and remove some 2826 duplicated code 2827 - tests: move a few more tests to snapstate_install_test 2828 - tests: assorted small patches 2829 - dbusutil/dbustest: separate license from package 2830 - interfaces/builtin/time-control: allow POSIX clock API 2831 - usersession/userd: add "slack" to the white list of URL schemes 2832 handled by xdg-open 2833 - tests: check that host settings like hostname are settable on core 2834 - tests: port xdg-settings test to tests.session 2835 - tests: port snap-handle-link test to tests.session 2836 - arch: add riscv64 2837 - tests: core20 early defaults spread test 2838 - tests: move install tests from snapstate_test.go to 2839 snapstate_install_test.go 2840 - github: port macOS sanity checks from travis 2841 - data/selinux: allow checking /var/cache/app-info 2842 - o/devicestate: core20 early config from gadget defaults 2843 - tests: autoremove after removing lxd in preseed-lxd test 2844 - secboot,cmd/snap-bootstrap: add tpm sealing support to secboot 2845 - sandbox/cgroup: move FreezerCgroupDir from dirs.go 2846 - tests: update the file used to detect the boot path on uc20 2847 - spread.yaml: show /var/lib/snapd in debug 2848 - cmd/snap-bootstrap/initramfs-mounts: also copy systemd clock + 2849 netplan files 2850 - snap/naming: add helpers to parse app and hook security tags 2851 - tests: modernize retry tool 2852 - tests: fix and trim debug section in xdg-open-portal 2853 - tests: modernize and use snapd.tool 2854 - vendor: update to latest github.com/snapcore/bolt for riscv64 2855 - cmd/snap-confine: add support for libc6-lse 2856 - interfaces: miscellaneous policy updates xlv 2857 - interfaces/system-packages-doc: fix typo in variable names 2858 - tests: port interfaces-calendar-service to tests.session 2859 - tests: install/run the lzo test snap too 2860 - snap: (small) refactor of `snap download` code for 2861 testing/extending 2862 - data: fix shellcheck warnings in snapd.sh.in 2863 - packaging: disable buildmode=pie for riscv64 2864 - tests: install test-snapd-rsync snap from edge channel 2865 - tests: modernize tests.session and port everything using it 2866 - tests: add ubuntu 20.10 to spread tests 2867 - cmd/snap/remove: mention snap restore/automatic snapshots 2868 - dbusutil: move all D-Bus helpers and D-Bus test helpers 2869 - wrappers: pass 'disable' flag to StopServices wrapper 2870 - osutil: enable riscv64 build 2871 - snap/naming: add ParseSecurityTag and friends 2872 - tests: port document-portal-activation to session-tool 2873 - bootloader: rename test helpers to reflect we are mocking EFI boot 2874 locations 2875 - tests: disable test of nfs v3 with udp proto on debian-sid 2876 - tests: plan to improve the naming and uniformity of utilities 2877 - tests: move *-tool tests to their own suite 2878 - snap-bootstrap: remove sealed key file on reinstall 2879 - bootloader/ubootenv: don't panic with an empty uboot env 2880 - systemd: rename actualFsTypeAndMountOptions to 2881 hostFsTypeAndMountOptions 2882 - daemon: fix filtering of service-control changes for snap.app 2883 - tests: spread test for preseeding in lxd container 2884 - tests: fix broken snapd.session agent.socket 2885 - wrappers: add RestartServices function and ReloadOrRestart to 2886 systemd 2887 - o/cmdstate: handle ignore flag on exec-command tasks 2888 - gadget: make ext4 filesystems with or without metadata checksum 2889 - tests: update statx test to run on all LTS releases 2890 - configcore: show better error when disabling services 2891 - interfaces: add hugepages-control 2892 - interfaces-ssh-keys: Support reading /etc/ssh/ssh_config.d/ 2893 - tests: run ubuntu-20.04-* tests on all ubuntu-2* releases 2894 - tests: skip interfaces-openvswitch for centos 8 in nightly suite 2895 - tests: reload systemd --user for root, if present 2896 - tests: reload systemd after editing /etc/fstab 2897 - tests: add missing dependencies needed for sbuild test on debian 2898 - tests: reload systemd after removing pulseaudio 2899 - image, tests: core18 early config. 2900 - interfaces: add system-packages-doc interface 2901 - cmd/snap-preseed, systemd: fix handling of fuse.squashfuse when 2902 preseeding 2903 - interfaces/fwupd: allow bind mount to /boot on core 2904 - tests: improve oom-vitality tests 2905 - tests: add fedora 32 to spread.yaml 2906 - config: apply vitality-hint immediately when the config changes 2907 - tests: port snap-routine-portal-info to session-tool 2908 - configcore: add "service.console-conf.disable" config option 2909 - tests: port xdg-open to session-tool 2910 - tests: port xdg-open-compat to session-tool 2911 - tests: port interfaces-desktop-* to session-tool 2912 - spread.yaml: apply yaml formatter/linter 2913 - tests: port interfaces-wayland to session-tool 2914 - o/devicestate: refactor current system handling 2915 - snap-mgmt: perform cleanup of user services 2916 - snap/snapfile,squashfs: followups from 8729 2917 - boot, many: require mode in modeenv 2918 - data/selinux: update policy to allow forked processes to call 2919 getpw*() 2920 - tests: log stderr from dbus-monitor 2921 - packaging: build cmd/snap and cmd/snap-bootstrap with nomanagers 2922 tag 2923 - snap/squashfs: also symlink snap Install with uc20 seed snap dir 2924 layout 2925 - interfaces/builtin/desktop: do not mount fonts cache on distros 2926 with quirks 2927 - data/selinux: allow snapd to remove/create the its socket 2928 - testutil/exec.go: set PATH after running shellcheck 2929 - tests: silence stderr from dbus-monitor 2930 - snap,many: mv Open to snapfile pkg to support add'l options to 2931 Container methods 2932 - devicestate, sysconfig: revert support for cloud.cfg.d/ in the 2933 gadget 2934 - github: remove workaround for bug 133 in actions/cache 2935 - tests: remove dbus.sh 2936 - cmd/snap-preseed: improve mountpoint checks of the preseeded 2937 chroot 2938 - spread.yaml: add ps aux to debug section 2939 - github: run all spread systems in a single go with cached results 2940 - test: session-tool cli tweaks 2941 - asserts: rest of the Pool API 2942 - tests: port interfaces-network-status-classic to session-tool 2943 - packaging: remove obsolete 16.10,17.04 symlinks 2944 - tests: setup portals before starting user session 2945 - o/devicestate: typo fix 2946 - interfaces/serial-port: add NXP SC16IS7xx (ttySCX) to allowed 2947 devices 2948 - cmd/snap/model: support store, system-user-authority keys in 2949 --verbose 2950 - o/devicestate: raise conflict when requesting system action while 2951 seeding 2952 - tests: detect signs of crashed snap-confine 2953 - tests: sign kernel and gadget to run nested tests using current 2954 snapd code 2955 - tests: remove gnome-online-accounts we install 2956 - tests: fix the issue where all the tests were executed on secboot 2957 system 2958 - tests: port interfaces-accounts-service to session-tool 2959 - interfaces/network-control: bring /var/lib/dhcp from host 2960 - image,cmd/snap,tests: add support for store-wide cohort keys 2961 - configcore: add nomanagers buildtag for conditional build 2962 - tests: port interfaces-password-manager-service to session-tool 2963 - o/devicestate: cleanup system actions supported by recover mode 2964 - snap-bootstrap: remove create-partitions and update tests 2965 - tests: fix nested tests 2966 - packaging/arch: update PKGBUILD to match one in AUR 2967 - tests: port interfaces-location-control to session-tool 2968 - tests: port interfaces-contacts-service to session-tool 2969 - state: log task errors in the journal too 2970 - o/devicestate: change how current system is reported for different 2971 modes 2972 - devicestate: do not report "ErrNoState" for seeded up 2973 - tests: add a note about broken test sequence 2974 - tests: port interfaces-autopilot-introspection to session-tool 2975 - tests: port interfaces-dbus to session-tool 2976 - packaging: update sid packaging to match 16.04+ 2977 - tests: enable degraded test on uc20 2978 - c/snaplock/runinhibit: add run inhibition operations 2979 - tests: detect and report root-owned files in /home 2980 - tests: reload root's systemd --user after snapd tests 2981 - tests: test registration with serial-authority: [generic] 2982 - cmd/snap-bootstrap/initramfs-mounts: copy auth.json and macaroon- 2983 key in recover 2984 - tests/mount-ns: stop binfmt_misc mount unit 2985 - cmd/snap-bootstrap/initramfs-mounts: use booted kernel partition 2986 uuid if available 2987 - daemon, tests: indicate system mode, test switching to recovery 2988 and back to run 2989 - interfaces/desktop: silence more /var/lib/snapd/desktop/icons 2990 denials 2991 - tests/mount-ns: update to reflect new UEFI boot mode 2992 - usersession,tests: clean ups for userd/settings.go and move 2993 xdgopenproxy under usersession 2994 - tests: disable mount-ns test 2995 - tests: test user belongs to systemd-journald, on core20 2996 - tests: run core/snap-set-core-config on uc20 too 2997 - tests: remove generated session-agent units 2998 - sysconfig: use new _writable_defaults dir to create cloud config 2999 - cmd/snap-bootstrap/initramfs-mounts: cosmetic changes in prep for 3000 future work 3001 - asserts: make clearer that with label we mean a serialized label 3002 - cmd/snap-bootstrap: tweak recovery trigger log messages 3003 - asserts: introduce PoolTo 3004 - userd: allow setting default-url-scheme-handler 3005 - secboot: append uuid to ubuntu-data when decrypting 3006 - o/configcore: pass extra options to FileSystemOnlyApply 3007 - tests: add dbus-user-session to bionic and reorder package names 3008 - boot, bootloader: adjust comments, expand tests 3009 - tests: improve debugging of user session agent tests 3010 - packaging: add the inhibit directory 3011 - many: add core.resiliance.vitality-hint config setting 3012 - tests: test adjustments and fixes for recently published images 3013 - cmd/snap: coldplug auto-import assertions from all removable 3014 devices 3015 - secboot,cmd/snap-bootstrap: move initramfs-mounts tpm access to 3016 secboot 3017 - tests: not fail when boot dir cannot be determined 3018 - tests: new directory used to store the cloud images on gce 3019 - tests: inject snapd from edge into seeds of the image in manual 3020 preseed test 3021 - usersession/agent,wrappers: fix races between Shutdown and Serve 3022 - tests: add dependency needed for next upgrade of bionic 3023 - tests: new test user is used for external backend 3024 - cmd/snap: fix the order of positional parameters in help output 3025 - tests: don't create root-owned things in ~test 3026 - tests/lib/prepare.sh: delete patching of the initrd 3027 - cmd/snap-bootstrap/initramfs-mounts: add sudoers to dirs to copy 3028 as well 3029 - progress: tweak multibyte label unit test data 3030 - o/devicestate,cmd/snap-bootstrap: seal to recover mode cmdline 3031 - gadget: fix fallback device lookup for 'mbr' type structures 3032 - configcore: only reload journald if systemd is new enough 3033 - cmd/snap-boostrap, boot: use /run/mnt/data instead of ubuntu-data 3034 - wrappers: allow user mode systemd daemons 3035 - progress: fix progress bar with multibyte duration units 3036 - tests: fix raciness in pulseaudio test 3037 - asserts/internal: introduce Grouping and Groupings 3038 - tests: remove user.sh 3039 - tests: pair of follow-ups from earlier reviews 3040 - overlord/snapstate: warn of refresh/postpone events 3041 - configcore,tests: use daemon-reexec to apply watchdog config 3042 - c/snap-bootstrap: check mount states via initramfsMountStates 3043 - store: implement DownloadAssertions 3044 - tests: run smoke test with different bases 3045 - tests: port user-mounts test to session-tool 3046 - store: handle error-list in fetch-assertions results 3047 - tests: port interfaces-audio-playback-record to session-tool 3048 - data/completion: add `snap` command completion for zsh 3049 - tests/degraded: ignore failure in systemd-vconsole-setup.service 3050 - image: stub implementation of image.Prepare for darwin 3051 - tests: session-tool --restore -u stops user-$UID.slice 3052 - o/ifacestate/handlers.go: fix typo 3053 - tests: port pulseaudio test to session-tool 3054 - tests: port user-session-env to session-tool 3055 - tests: work around journald bug in core16 3056 - tests: add debug to core-persistent-journal test 3057 - tests: port selinux-clean to session-tool 3058 - tests: port portals test to session-tool, fix portal tests on sid 3059 - tests: adding option --no-install-recommends option also when 3060 install all the deps 3061 - tests: add session-tool --has-systemd-and-dbus 3062 - packaging/debian-sid: add gcc-multilib to build deps 3063 - osutil: expand FileLock to support shared locks and more 3064 - packaging: stop depending on python-docutils 3065 - store,asserts,many: support the new action fetch-assertions 3066 - tests: port snap-session-agent-* to session-tool 3067 - packaging/fedora: disable FIPS compliant crypto for static 3068 binaries 3069 - tests: fix for preseeding failures 3070 3071 * Tue Jul 28 2020 Samuele Pedroni <pedronis@lucediurna.net> 3072 - New upstream release, LP: #1875071 3073 - o/ifacestate: fix bug in snapsWithSecurityProfiles 3074 - tests/main/selinux-clean: workaround SELinux denials triggered by 3075 linger setup on Centos8 3076 3077 * Mon Jul 27 2020 Zygmunt Krynicki <me@zygoon.pl> 3078 - New upstream release, LP: #1875071 3079 - many: backport _writable_defaults dir changes 3080 - tests: fix incorrect check in smoke/remove test 3081 - cmd/snap-bootstrap,seed: backport of uc20 PRs 3082 - tests: avoid exit when nested type var is not defined 3083 - cmd/snap-preseed: backport fixes 3084 - interfaces: optimize rules of multiple connected iio/i2c/spi plugs 3085 - many: cherry-picks for 2.45, gh-action, test fixes 3086 - tests/lib: account for changes in arch package file name extension 3087 - postrm, snap-mgmt: cleanup modules and other cherry-picks 3088 - snap-confine: don't die if a device from sysfs path cannot be 3089 found by udev 3090 - data/selinux: update policy to allow forked processes to call 3091 getpw*() 3092 - tests/main/interfaces-time-control: exercise setting time via date 3093 - interfaces/builtin/time-control: allow POSIX clock API 3094 - usersession/userd: add "slack" to the white list of URL schemes 3095 handled by xdg-open 3096 3097 * Fri Jul 10 2020 Michael Vogt <mvo@ubuntu.com> 3098 - New upstream release 2.45.2 3099 - SECURITY UPDATE: sandbox escape vulnerability on snapctl xdg-open 3100 implementation 3101 - usersession/userd/launcher.go: remove XDG_DATA_DIRS environment 3102 variable modification when calling the system xdg-open. Patch 3103 thanks to James Henstridge 3104 - packaging/ubuntu-16.04/snapd.postinst: ensure "snap userd" is 3105 restarted. Patch thanks to Michael Vogt 3106 - CVE-2020-11934 3107 - SECURITY UPDATE: arbitrary code execution vulnerability on core 3108 devices with access to physical removable media 3109 - devicestate: Disable/restrict cloud-init after seeding. 3110 - CVE-2020-11933 3111 3112 * Fri Jun 05 2020 Michael Vogt <mvo@ubuntu.com> 3113 - New upstream release 2.45.1 3114 - data/selinux: allow checking /var/cache/app-info 3115 - cmd/snap-confine: add support for libc6-lse 3116 - interfaces: miscellaneous policy updates xlv 3117 - snap-bootstrap: remove sealed key file on reinstall 3118 - interfaces-ssh-keys: Support reading /etc/ssh/ssh_config.d/ 3119 - gadget: make ext4 filesystems with or without metadata checksum 3120 - interfaces/fwupd: allow bind mount to /boot on core 3121 - tests: cherry-pick test fixes from master 3122 - snap/squashfs: also symlink snap Install with uc20 seed snap dir 3123 layout 3124 - interfaces/serial-port: add NXP SC16IS7xx (ttySCX) to allowed 3125 devices 3126 - snap,many: mv Open to snapfile pkg to support add'l options to 3127 Container methods 3128 - interfaces/builtin/desktop: do not mount fonts cache on distros 3129 with quirks 3130 - devicestate, sysconfig: revert support for cloud.cfg.d/ in the 3131 gadget 3132 - data/completion, packaging: cherry-pick zsh completion 3133 - state: log task errors in the journal too 3134 - devicestate: do not report "ErrNoState" for seeded up 3135 - interfaces/desktop: silence more /var/lib/snapd/desktop/icons 3136 denials 3137 - packaging/fedora: disable FIPS compliant crypto for static 3138 binaries 3139 - packaging: stop depending on python-docutils 3140 3141 * Tue May 12 2020 Michael Vogt <mvo@ubuntu.com> 3142 - New upstream release 2.45 3143 - o/devicestate: support doing system action reboots from recover 3144 mode 3145 - vendor: update to latest secboot 3146 - tests: not fail when boot dir cannot be determined 3147 - configcore: only reload journald if systemd is new enough 3148 - cmd/snap-bootstrap/initramfs-mounts: append uuid to ubuntu-data 3149 when decrypting 3150 - tests/lib/prepare.sh: delete patching of the initrd 3151 - cmd/snap: coldplug auto-import assertions from all removable 3152 devices 3153 - cmd/snap: fix the order of positional parameters in help output 3154 - c/snap-bootstrap: port mount state mocking to the new style on 3155 master 3156 - cmd/snap-bootstrap/initramfs-mounts: add sudoers to dirs to copy 3157 as well 3158 - o/devicestate,cmd/snap-bootstrap: seal to recover mode cmdline, 3159 unlock in recover mode initramfs 3160 - progress: tweak multibyte label unit test data 3161 - gadget: fix fallback device lookup for 'mbr' type structures 3162 - progress: fix progress bar with multibyte duration units 3163 - many: use /run/mnt/data over /run/mnt/ubuntu-data for uc20 3164 - many: put the sealed keys in a directory on seed for tidiness 3165 - cmd/snap-bootstrap: measure epoch and model before unlocking 3166 encrypted data 3167 - o/configstate: core config handler for persistent journal 3168 - bootloader/uboot: use secondary ubootenv file boot.sel for uc20 3169 - packaging: add "$TAGS" to dh_auto_test for debian packaging 3170 - tests: ensure $cache_dir is actually available 3171 - secboot,cmd/snap-bootstrap: add model to pcr protection profile 3172 - devicestate: do not use snap-boostrap in devicestate to install 3173 - tests: fix a typo in nested.sh helper 3174 - devicestate: add support for cloud.cfg.d config from the gadget 3175 - cmd/snap-bootstrap: cleanups, naming tweaks 3176 - testutil: add NewDBusTestConn 3177 - snap-bootstrap: lock access to sealed keys 3178 - overlord/devicestate: preserve the current model inside ubuntu- 3179 boot 3180 - interfaces/apparmor: use differently templated policy for non-core 3181 bases 3182 - seccomp: add get_tls, io_pg* and *time64/*64 variants for existing 3183 syscalls 3184 - cmd/snap-bootstrap/initramfs-mounts: mount ubuntu-seed first, 3185 other misc changes 3186 - o/snapstate: tweak "waiting for restart" message 3187 - boot: store model model and grade information in modeenv 3188 - interfaces/firewall-control: allow -legacy and -nft for core20 3189 - boot: enable makeBootable20RunMode for EnvRefExtractedKernel 3190 bootloaders 3191 - boot/bootstate20: add EnvRefExtractedKernelBootloader bootstate20 3192 implementation 3193 - daemon: fix error message from `snap remove-user foo` on classic 3194 - overlord: have a variant of Mock that can take a state.State 3195 - tests: 16.04 and 18.04 now have mediating pulseaudio (again) 3196 - seed: clearer errors for missing essential snapd or core snap 3197 - cmd/snap-bootstrap/initramfs-mounts: support 3198 EnvRefExtractedKernelBootloader's 3199 - gadget, cmd/snap-bootstrap: MBR schema support 3200 - image: improve/adjust DownloadSnap doc comment 3201 - asserts: introduce ModelGrade.Code 3202 - tests: ignore user-12345 slice and service 3203 - image,seed/seedwriter: support redirect channel aka default 3204 tracks 3205 - bootloader: use binary.Read/Write 3206 - tests: uc20 nested suite part II 3207 - tests/boot: refactor to make it easier for new 3208 bootloaderKernelState20 impl 3209 - interfaces/openvswitch: support use of ovs-appctl 3210 - snap-bootstrap: copy auth data from real ubuntu-data in recovery 3211 mode 3212 - snap-bootstrap: seal and unseal encryption key using tpm 3213 - tests: disable special-home-can-run-classic-snaps due to jenkins 3214 repo issue 3215 - packaging: fix build on Centos8 to support BUILDTAGS 3216 - boot/bootstate20: small changes to bootloaderKernelState20 3217 - cmd/snap: Implement a "snap routine file-access" command 3218 - spread.yaml: switch back to latest/candidate for lxd snap 3219 - boot/bootstate20: re-factor kernel methods to use new interface 3220 for state 3221 - spread.yaml,tests/many: use global env var for lxd channel 3222 - boot/bootstate20: fix bug in try-kernel cleanup 3223 - config: add system.store-certs.[a-zA-Z0-9] support 3224 - secboot: key sealing also depends on secure boot enabled 3225 - httputil: fix client timeout retry tests 3226 - cmd/snap-update-ns: handle EBUSY when unlinking files 3227 - cmd/snap/debug/boot-vars: add opts for setting dir and/or uc20 3228 vars 3229 - secboot: add tpm support helpers 3230 - tests/lib/assertions/developer1-pi-uc20.model: use 20/edge for 3231 kernel and gadget 3232 - cmd/snap-bootstrap: switch to a 64-byte key for unlocking 3233 - tests: preserve size for centos images on spread.yaml 3234 - github: partition the github action workflows 3235 - run-checks: use consistent "Checking ..." style messages 3236 - bootloader: add efi pkg for reading efi variables 3237 - data/systemd: do not run snapd.system-shutdown if finalrd is 3238 available 3239 - overlord: update tests to work with latest go 3240 - cmd/snap: do not hide debug boot-vars on core 3241 - cmd/snap-bootstrap: no error when not input devices are found 3242 - snap-bootstrap: fix partition numbering in create-partitions 3243 - httputil/client_test.go: add two TLS version tests 3244 - tests: ignore user@12345.service hierarchy 3245 - bootloader, gadget, cmd/snap-bootstrap: misc cosmetic things 3246 - tests: rewrite timeserver-control test 3247 - tests: fix racy pulseaudio tests 3248 - many: fix loading apparmor profiles on Ubuntu 20.04 with ZFS 3249 - tests: update snap-preseed --reset logic to accommodate for 2.44 3250 change 3251 - cmd/snap: don't wait for system key when stopping 3252 - sandbox/cgroup: avoid making arrays we don't use 3253 - osutil: mock proc/self/mountinfo properly everywhere 3254 - selinux: export MockIsEnforcing; systemd: use in tests 3255 - tests: add 32 bit machine to GH actions 3256 - tests/session-tool: kill cron session, if any 3257 - asserts: it should be possible to omit many snap-ids if allowed, 3258 fix 3259 - boot: cleanup more things, simplify code 3260 - github: skip spread jobs when corresponding label is set 3261 - dirs: don't depend on osutil anymore, mv apparmor vars to apparmor 3262 pkg 3263 - tests/session-tool: add session-tool --dump 3264 - github: allow cached debian downloads to restore 3265 - tests/session-tool: session ordering is non-deterministic 3266 - tests: enable unit tests on debian-sid again 3267 - github: move spread to self-hosted workers 3268 - secboot: import secboot on ubuntu, provide dummy on !ubuntu 3269 - overlord/devicestate: support for recover and run modes 3270 - snap/naming: add validator for snap security tag 3271 - interfaces: add case for rootWritableOverlay + NFS 3272 - tests/main/uc20-create-partitions: tweaks, renames, switch to 3273 20.04 3274 - github: port CLA check to Github Actions 3275 - interfaces/many: miscellaneous policy updates xliv 3276 - configcore,tests: fix setting watchdog options on UC18/20 3277 - tests/session-tool: collect information about services on startup 3278 - tests/main/uc20-snap-recovery: unbreak, rename to uc20-create- 3279 partitions 3280 - state: add state.CopyState() helper 3281 - tests/session-tool: stop anacron.service in prepare 3282 - interfaces: don't use the owner modifier for files shared via 3283 document portal 3284 - systemd: move the doc comments to the interface so they are 3285 visible 3286 - cmd/snap-recovery-chooser: tweaks 3287 - interfaces/docker-support: add overlayfs file access 3288 - packaging: use debian/not-installed to ignore snap-preseed 3289 - travis.yml: disable unit tests on travis 3290 - store: start splitting store.go and store_test.go into subtopic 3291 files 3292 - tests/session-tool: stop cron/anacron from meddling 3293 - github: disable fail-fast as spread cannot be interrupted 3294 - github: move static checks and spread over 3295 - tests: skip "/etc/machine-id" in "writablepaths" test 3296 - snap-bootstrap: store encrypted partition recovery key 3297 - httputil: increase testRetryStrategy max timelimit to 5s 3298 - tests/session-tool: kill leaking closing session 3299 - interfaces: allow raw access to USB printers 3300 - tests/session-tool: reset failed session-tool units 3301 - httputil: increase httpclient timeout in 3302 TestRetryRequestTimeoutHandling 3303 - usersession: extend timerange in TestExitOnIdle 3304 - client: increase timeout in client tests to 100ms 3305 - many: disentagle release and snapdenv from sandbox/* 3306 - boot: simplify modeenv mocking to always write a modeenv 3307 - snap-bootstrap: expand data partition on install 3308 - o/configstate: add backlight option for core config 3309 - cmd/snap-recovery-chooser: add recovery chooser 3310 - features: enable robust mount ns updates 3311 - snap: improve TestWaitRecovers test 3312 - sandbox/cgroup: add ProcessPathInTrackingCgroup 3313 - interfaces/policy: fix comment in recent new test 3314 - tests: make session tool way more robust 3315 - interfaces/seccomp: allow passing an address to setgroups 3316 - o/configcore: introduce core config handlers (3/N) 3317 - interfaces: updates to login-session-observe, network-manager and 3318 modem-manager interfaces 3319 - interfaces/policy/policy_test.go: add more tests'allow- 3320 installation: false' and we grant based on interface attributes 3321 - packaging: detect/disable broken seed in the postinst 3322 - cmd/snap-confine/mount-support-nvidia.c: add libnvoptix as nvidia 3323 library 3324 - tests: remove google-tpm backend from spread.yaml 3325 - tests: install dependencies with apt using --no-install-recommends 3326 - usersession/userd: add zoommtg url support 3327 - snap-bootstrap: fix disk layout sanity check 3328 - snap: add `snap debug state --is-seeded` helper 3329 - devicestate: generate warning if seeding fails 3330 - config, features: move and rename config.GetFeatureFlag helper to 3331 features.Flag 3332 - boot, overlord/devicestate, daemon: implement requesting boot 3333 into a given recovery system 3334 - xdgopenproxy: forward requests to the desktop portal 3335 - many: support immediate reboot 3336 - store: search v2 tweaks 3337 - tests: fix cross build tests when installing dependencies 3338 - daemon: make POST /v2/systems/<label> root only 3339 - tests/lib/prepare.sh: use only initrd from the kernel snap 3340 - cmd/snap,seed: validate full seeds (UC 16/18) 3341 - tests/main/user-session-env: stop the user session before deleting 3342 the test-zsh user 3343 - overlord/devicestate, daemon: record the seed current system was 3344 installed from 3345 - gadget: SystemDefaults helper function to convert system defaults 3346 config into a flattened map suitable for FilesystemOnlyApply. 3347 - many: comment or avoid cryptic snap-ids in tests 3348 - tests: add LXD_CHANNEL environment 3349 - store: support for search API v2 3350 - .github: register a problem matcher to detect spread failures 3351 - seed: add Info() method for seed.Snap 3352 - github: always run the "Discard spread workers" step, even if the 3353 job fails 3354 - github: offload self-hosted workers 3355 - cmd/snap: the model command needs just a client, no waitMixin 3356 - github: combine tests into one workflow 3357 - github: fix order of go get caches 3358 - tests: adding more workers for ubuntu 20.04 3359 - boot,overlord: rename operating mode to system mode 3360 - config: add new Transaction.GetPristine{,Maybe}() function 3361 - o/devicestate: rename readMaybe* to maybeRead* 3362 - github: cache Debian dependencies for unit tests 3363 - wrappers: respect pre-seeding in error path 3364 - seed: validate UC20 seed system label 3365 - client, daemon, overlord/devicestate: request system action API 3366 and stubs 3367 - asserts,o/devicestate: support model specified alternative serial- 3368 authority 3369 - many: introduce naming.WellKnownSnapID 3370 - o/configcore: FilesystemOnlyApply method for early configuration 3371 of core (1/N) 3372 - github: run C unit tests 3373 - github: run spread tests on PRs only 3374 - interfaces/docker-support: make containerd abstract socket more 3375 generic 3376 - tests: cleanup security-private-tmp properly 3377 - overlord/devicestate,boot: do not hold to the originally read 3378 modeenv 3379 - dirs: rm RunMnt; boot: add vars for early boot env layout; 3380 sysconfig: take targetdir arg 3381 - cmd/snap-bootstrap/initramfs-mounts/tests: use dirs.RunMnt over 3382 s.runMnt 3383 - tests: add regression test for MAAS refresh bug 3384 - errtracker: add missing mocks 3385 - github: apt-get update before installing build-deps 3386 - github: don't fail-fast 3387 - github: run spread via github actions 3388 - boot,many: add modeenv.WriteTo, make Write take no args 3389 - wrappers: fix timer schedules that are days only 3390 - tests/main/snap-seccomp-syscalls: install gperf 3391 - github: always checkout to snapcore/snapd 3392 - github: add prototype workflow running unit tests 3393 - many: improve comments, naming, a possible TODO 3394 - client: use Assert when checking for error 3395 - tests: ensure sockets target is ready in session agent spread 3396 tests 3397 - osutil: do not leave processes behind after the test run 3398 - tests: update proxy-no-core to match latest CDN changes 3399 - devicestate,sysconfig: support "cloud.cfg.d" in uc20 for grade: 3400 dangerous 3401 - cmd/snap-failure,tests: try to make snap-failure more robust 3402 - many: fix packages having mistakenly their copyright as doc 3403 - many: enumerate system seeds, return them on the /v2/systems API 3404 endpoint 3405 - randutil: don't consume kernel entropy at init, just mix more info 3406 to try to avoid fleet collisions 3407 - snap-bootstrap: add creationSupported predicate for partition 3408 types 3409 - tests: umount partitions which are not umounted after remount 3410 gadget 3411 - snap: run gofmt -s 3412 - many: improve environment handling, fixing duplicate entries 3413 - boot_test: add many boot robustness tests for UC20 kernel 3414 MarkBootSuccessul and SetNextBoot 3415 - overlord: remove unneeded overlord.MockPruneInterval() mocks 3416 - interfaces/greengrass-support: fix typo 3417 - overlord,timings,daemon: separate timings from overlord/state 3418 - tests: enable nested on core20 and test current branch 3419 - snap-bootstrap: remove created partitions on reinstall 3420 - boot: apply Go 1.10 formatting 3421 - apparmor: use rw for uuidd request to default and remove from 3422 elsewhere 3423 - packaging: add README.source for debian 3424 - tests: cleanup various uc20 boot tests from previous PR 3425 - devicestate: disable cloud-init by default on uc20 3426 - run-checks: tweak formatting checks 3427 - packaging,tests: ensure debian-sid builds without vendor/ 3428 - travis.yml: run unit tests with go/master as well* travis.yml: run 3429 unit tests with go/master as well 3430 - seed: make Brand() part of the Seed interface 3431 - cmd/snap-update-ns: ignore EROFS from rmdir/unlink 3432 - daemon: do a forceful server shutdown if we hit a deadline 3433 - tests/many: don't use StartLimitInterval anymore, unify snapd- 3434 failover variants, build snapd snap for UC16 tests 3435 - snap-seccomp: robustness improvements 3436 - run-tests: disable -v for go test to avoid spaming the logs 3437 - snap: whitelist lzo as support compression for snap pack 3438 - snap: tweak comment in Install() for overlayfs detection 3439 - many: introduce snapdenv.Preseeding instead of release.PreseedMode 3440 - client, daemon, overlord/devicestate: structures and stubs for 3441 systems API 3442 - o/devicestate: delay the creation of mark-seeded task until 3443 asserts are loaded 3444 - data/selinux, tests/main/selinux: cleanup tmpfs operations in the 3445 policy, updates 3446 - interfaces/greengrass-support: add new 1.9 access 3447 - snap: do not hardlink on overlayfs 3448 - boot,image: ARM kernel extract prepare image 3449 - interfaces: make gpio robust against not-existing gpios in /sys 3450 - cmd/snap-preseed: handle --reset flag 3451 - many: introduce snapdenv to present common snapd env options 3452 - interfaces/kubernetes-support: allow autobind to journald socket 3453 - snap-seccomp: allow mprotect() to unblock the tests 3454 - tests/lib/reset: workaround unicode dot in systemctl output 3455 - interfaces/udisks2: also allow Introspection on 3456 /org/freedesktop/UDisks/** 3457 - snap: introduce Container.RandomAccessFile 3458 - o/ifacestate, api: implementation of snap disconnect --forget 3459 - cmd/snap: make the portal-info command search for the network- 3460 status interface 3461 - interfaces: work around apparmor_parser slowness affecting uio 3462 - tests: fix/improve failing spread tests 3463 - many: clean separation of bootenv mocking vs mock bootloader kinds 3464 - tests: mock prune ticker in overlord tests to reduce wait times 3465 - travis: disable arm64 again 3466 - httputil: add support for extra snapd certs 3467 - travis.yml: run unit tests on arm64 as well 3468 - many: fix a pair of ineffectual assignments 3469 - tests: add uc20 kernel snap upgrade managers test, fix 3470 bootloadertest bugs 3471 - o/snapstate: set base in SnapSetup on snap revert 3472 - interfaces/{docker,kubernetes}-support: updates for lastest k8s 3473 - cmd/snap-exec: add test case for LP bug 1860369 3474 - interfaces: make the network-status interface implicit on 3475 classic 3476 - interfaces: power control interfaceIt is documented in the 3477 kernel 3478 - interfaces: miscellaneous policy updates 3479 - cmd/snap: add a "snap routine portal-info" command 3480 - usersession/userd: add "apt" to the white list of URL schemes 3481 handled by xdg-open 3482 - interfaces/desktop: allow access to system prompter interface 3483 - devicestate: allow encryption regardless of grade 3484 - tests: run ipv6 network-retry test too 3485 - tests: test that after "remove-user" the system is unmanaged 3486 - snap-confine: unconditionally add /dev/net/tun to the device 3487 cgroup 3488 - snapcraft.yaml: use sudo -E and remove workaround 3489 - interfaces/audio_playback: Fix pulseaudio config access 3490 - ovelord/snapstate: update only system wide fonts cache 3491 - wrappers: import /etc/environment in all services 3492 - interfaces/u2f: Add Titan USB-C key 3493 - overlord, taskrunner: exit on task/ensure error when preseeding 3494 - tests: add session-tool, a su / sudo replacement 3495 - wrappers: add mount unit dependency for snapd services on core 3496 devices 3497 - tests: just remove user when the system is not managed on create- 3498 user-2 test 3499 - snap-preseed: support for preseeding of snapd and core18 3500 - boot: misc UC20 changes 3501 - tests: adding arch-linux execution 3502 - packaging: revert "work around review-tools and snap-confine" 3503 - netlink: fix panic on arm64 with the new rawsockstop codewith a 3504 nil Timeval panics 3505 - spread, data/selinux: add CentOS 8, update policy 3506 - tests: updating checks to new test account for snapd-test snaps 3507 - spread.yaml: mv opensuse 15.1 to unstable 3508 - cmd/snap-bootstrap,seed: verify only in-play snaps 3509 - tests: use ipv4 in retry-network to unblock failing master 3510 - data/systemd: improve the description 3511 - client: add "Resume" to DownloadOptions and new test 3512 - tests: enable snapd-failover on uc20 3513 - tests: add more debug output to the snapd-failure handling 3514 - o/devicestate: unset recovery_system when done seeding 3515 3516 * Fri Apr 10 2020 Michael Vogt <mvo@ubuntu.com> 3517 - New upstream release 2.44.3 3518 - tests: fix racy pulseaudio tests 3519 - many: fix loading apparmor profiles on Ubuntu 20.04 with ZFS 3520 - tests: update snap-preseed --reset logic 3521 - tests: backport partition fixes 3522 - cmd/snap: don't wait for system key when stopping 3523 - interfaces/many: miscellaneous policy updates xliv 3524 - tests/main/uc20-snap-recovery: use 20.04 system 3525 - tests: skip "/etc/machine-id" in "writablepaths 3526 - interfaces/docker-support: add overlays file access 3527 3528 * Thu Apr 2 2020 Michael Vogt <mvo@ubuntu.com> 3529 - New upstream release 2.44.2 3530 - packaging: detect/disable broken seeds in the postinst 3531 - cmd/snap,seed: validate full seeds (UC 16/18) 3532 - snap: add `snap debug state --is-seeded` helper 3533 - devicestate: generate warning if seeding fails 3534 - store: support for search API v2 3535 - cmd/snap-seccomp/syscalls: update the list of known syscalls 3536 - snap/cmd: the model command needs just a client, no waitMixin 3537 - tests: cleanup security-private-tmp properly 3538 - wrappers: fix timer schedules that are days only 3539 - tests: update proxy-no-core to match latest CDN changes 3540 - cmd/snap-failure,tests: make snap-failure more robust 3541 - tests, many: don't use StartLimitInterval anymore, unify snapd- 3542 failover variants, build snapd snap for UC16 tests 3543 3544 * Sat Mar 21 2020 Michael Vogt <mvo@ubuntu.com> 3545 - New upstream release 2.44.1 3546 - randutil: switch back to setting up seed with lower entropy data 3547 - interfaces/greengrass-support: fix typo 3548 - packaging,tests: ensure debian-sid builds without vendor/ 3549 - travis.yml: run unit tests with go/master as well 3550 - cmd/snap-update-ns: ignore EROFS from rmdir/unlink 3551 3552 * Tue Mar 17 2020 Michael Vogt <mvo@ubuntu.com> 3553 - New upstream release 2.44 3554 - daemon: do a forceful serer shutdown if we hit a deadline 3555 - snap: whitelist lzo as support compression for snap pack 3556 - data/selinux: update policy to allow more ops 3557 - interfaces/greengrass-support: add new 1.9 access 3558 - snap: do not hardlink on overlayfs 3559 - cmd/snap-preseed: handle --reset flag 3560 - interfaces/kubernetes-support: allow autobind to journald socket 3561 - snap-seccomp: allow mprotect() to unblock the tests 3562 - tests/lib/reset: workaround unicode dot in systemctl output 3563 - interfaces: work around apparmor_parser slowness affecting uio 3564 - interfaces/udisks2: also allow Introspection on 3565 /org/freedesktop/UDisks2/** 3566 - tests: mock prune ticker in overlord tests to reduce wait times 3567 - interfaces/{docker,kubernetes}-support: updates for lastest k8s 3568 - interfaces: miscellaneous policy updates 3569 - interfaces/audio_playback: Fix pulseaudio config access 3570 - overlord: disable Test..AbortShortlyAfterStartOfOperation for 2.44 3571 - ovelord/snapstate: update only system wide fonts cache 3572 - wrappers: import /etc/environment in all services 3573 - interfaces/u2f: Add Titan USB-C key 3574 - overlord, taskrunner: exit on task/ensure error when preseeding 3575 - overlord/snapstate/backend: update snapd services contents in unit 3576 tests 3577 - wrappers: add mount unit dependency for snapd services on core 3578 devices 3579 - Revert "tests: remove /tmp/snap.* left over by other tests" 3580 - Revert "packaging: work around review-tools and snap-confine" 3581 - netlink: fix panic on arm64 with the new rawsockstop code 3582 - spread, data/selinux: add CentOS 8, update policy 3583 - spread.yaml: mv opensuse tumbleweed to unstable too 3584 - spread.yaml: mv opensuse 15.1 to unstable 3585 - tests: use ipv4 in retry-network to unblock failing master 3586 - data/systemd: improve the description 3587 - tests/lib/prepare.sh: simplify, combine code paths 3588 - tests/main/user-session-env: add test verifying environment 3589 variables inside the user session 3590 - spread.yaml: make qemu ubuntu-core-20-64 use ubuntu-20.04-64 3591 - run-checks: SKIP_GMFMT really skips formatting checks 3592 - tests: enable more tests for UC20/UC18 3593 - tests: remove tmp dir for snap not-test-snapd-sh on security- 3594 private-tmp test 3595 - seed,cmd/snap-bootstrap: introduce seed.Snap.EssentialType, 3596 simplify bootstrap code 3597 - snapstate: do not restart in undoLinkSnap unless on first install 3598 - cmd/snap-bootstrap: subcommand to detect UC chooser trigger 3599 - cmd/snap-bootstrap/initramfs-mounts: mount the snapd snap in run- 3600 mode too 3601 - cmd/libsnap, tests: fix C unit tests failing as non-root 3602 - cmd/snap-bootstrap: verify kernel snap is in modeenv before 3603 mounting it 3604 - tests: adding amazon linux to google backend 3605 - cmd/snap-failure/snapd: rm snapd.socket, reset snapd.socket failed 3606 status 3607 - client: add support for "ResumeToken", "HeaderPeek" to download 3608 - build: enable type: snapd 3609 - tests: rm -rf /tmp/snap.* in restore 3610 - cmd/snap-confine: deny snap-confine to load nss libs 3611 - snapcraft.yaml: add comments, rename snapd part to snapd-deb 3612 - boot: write current_kernels in bootstate20, makebootable 3613 - packaging: work around review-tools and snap-confine 3614 - tests: skipping interfaces-openvswitch on centos due to package is 3615 not available 3616 - packaging,snap-confine: stop being setgid root 3617 - cmd/snap-confine: bring /var/lib/dhcp from host, if present 3618 - store: rely on CommandFromSystemSnap to find xdelta3 3619 - tests: bump sleep time of the new overlord tests 3620 - cmd/snap-preseed: snapd version check for the target 3621 - netlink: fix/support stopping goroutines reading netlink raw 3622 sockets 3623 - tests: reset PS1 before possibly interactive dash 3624 - overlord, state: don't abort changes if spawn time before 3625 StartOfOperationTime (2/2) 3626 - snapcraft.yaml: add python3-apt, tzdata as build-deps for the 3627 snapd snap 3628 - tests: ask tar to speak English 3629 - tests: using google storage when downloading ubuntu cloud images 3630 from gce 3631 - Coverity produces false positives for code like this: 3632 - many: maybe restart & security backend options 3633 - o/standby: add SNAPD_STANDBY_WAIT to control standby in 3634 development 3635 - snap: use the actual staging snap-id for snapd 3636 - cmd/snap-bootstrap: create a new parser instance 3637 - snapcraft.yaml: use build-base and adopt-info, rm builddeb 3638 plugin 3639 - tests: set StartLimitInterval in snapd failover test 3640 - tests: disable archlinux system 3641 - tests: add preseed test for classic 3642 - many, tests: integrate all preseed bits and add spread tests 3643 - daemon: support resuming downloads 3644 - tests: use Filename() instead of filepath.Base(sn.MountFile()) 3645 - tests/core: add swapfiles test 3646 - interfaces/cpu-control: allow to control cpufreq tunables 3647 - interfaces: use commonInteface for desktopInterface 3648 - interfaces/{desktop-legacy,unity7}: adjust for new ibus socket 3649 location 3650 - snap/info: add Filename 3651 - bootloader: make uboot a RecoveryAwareBootloader 3652 - gadget: skip update when mounted filesystem content is identical 3653 - systemd: improve is-active check for 'failed' services 3654 - boot: add current_kernels to modeenv 3655 - o/devicestate: StartOfOperationTime helper for Prune (1/2) 3656 - tests: detect LXD launching i386 containers 3657 - tests: move main/ubuntu-core-* tests to core/ suite 3658 - tests: remove snapd in ubuntu-core-snapd 3659 - boot: enable base snap updates in bootstate20 3660 - tests: Fix core revert channel after 2.43 has been released to 3661 stable 3662 - data/selinux: unify tabs/spaces 3663 - o/ifacestate: move ResolveDisconnect to ifacestate 3664 - spread: move centos to stable systems 3665 - interfaces/opengl: allow datagrams to nvidia-driver 3666 - httputil: add NoNetwork(err) helper, spread test and use in serial 3667 acquire 3668 - store: detect if server does not support http range headers 3669 - test/lib/user: add helper lib for doing things for and as a user 3670 - overlord/snapstate, wrappers: undo of snapd on core 3671 - tests/main/interfaces-pulseaudio: use custom pulseaudio script, 3672 set kill timeout 3673 - store: add support for resume in DownloadStream 3674 - cmd/snap: implement 'snap remove-user' 3675 - overlord/devicestate: fix preseed unit tests on systems not using 3676 /snap 3677 - tests/main/static: ldd in glibc 2.31 logs to stderr now 3678 - run-checks, travis: allow skipping spread jobs by adding a label 3679 - tests: add new backend which includes images with tpm support 3680 - boot: use constants for boot status values 3681 - tests: add "core" suite for UC specific tests 3682 - tests/lib/prepare: use a local copy of uc20 initramfs skeleton 3683 - tests: retry mounting the udisk2 device due to timing issue 3684 - usersession/client: add a client library for the user session 3685 agent 3686 - o/devicestate: Handle preseed mode in the firstboot mode (core16 3687 only for now). 3688 - boot: add TryBase and BaseStatus to modeenv; use in snap-bootstrap 3689 - cmd/snap-confine: detect base transitions on core16 3690 - boot: don't use "kernel" from the modeenv anymore 3691 - interfaces: add uio interface 3692 - tests: repack the initramfs + kernel snap for UC20 spread tests 3693 - interfaces/greengrass-support: add /dev/null -> 3694 /proc/latency_stats mount 3695 - httputil: remove workaround for redirect handling in go1.7 3696 - httputil: remove go1.6 transport workaround 3697 - snap: add `snap pack --compression=<comp>` options 3698 - tests/lib/prepare: fix hardcoded loopback device names for UC 3699 images 3700 - timeutil: add a unit test case for trivial schedule 3701 - randutil,o/snapstate,-mkauthors.sh: follow ups to randutil 3702 introduction 3703 - dirs: variable with distros using alternate snap mount 3704 - many,randutil: centralize and streamline our random value 3705 generation 3706 - tests/lib/prepare-restore: Revert "Continue on errors updating or 3707 installing dependencies" 3708 - daemon: Allow clients to call /v2/logout via Polkit 3709 - dirs: manjaro-arm is like manjaro 3710 - data, packaging: Add sudoers snippet to allow snaps to be run with 3711 sudo 3712 - daemon, store: better expose single action errors 3713 - tests: switch mount-ns test to differential data set 3714 - snapstate: refactor things to add the re-refresh task last 3715 - daemon: drop support for the DELETE method 3716 - client: move to /v2/users; implement RemoveUser 3717 - boot: enable UC20 kernel extraction and bootState20 handling 3718 - interfaces/policy: enforce plug-names/slot-names constraints 3719 - asserts: parse plug-names/slot-names constraints 3720 - daemon: make users result more consistent 3721 - cmd/snap-confine,tests: support x.y.z nvidia version 3722 - dirs: fixlet for XdgRuntimeDirGlob 3723 - boot: add bootloader options to coreKernel 3724 - o/auth,daemon: do not remove unknown user 3725 - tests: tweak and enable tests on ubuntu 20.04 3726 - daemon: implement user removal 3727 - cmd/snap-confine: allow snap-confine to link to libpcre2 3728 - interfaces/builtin: Allow NotificationReplied signal on 3729 org.freedesktop.Notifications 3730 - overlord/auth: add RemoveUserByName 3731 - client: move user-related things to their own files 3732 - boot: tweak kernel cmdline helper docstring 3733 - osutil: implement deluser 3734 - gadget: skip update when raw structure content is unchanged 3735 - boot, cmd/snap, cmd/snap-bootstrap: move run mode and system label 3736 detection to boot 3737 - tests: fix revisions leaking from snapd-refresh test 3738 - daemon: refactor create-user to a user action & hide behind a flag 3739 - osutil/tests: check there are no leftover symlinks with 3740 AtomicSymlink 3741 - grub: support atomically renaming kernel symlinks 3742 - osutil: add helpers for creating symlinks and renaming in an 3743 atomic manner 3744 - tests: add marker tag for core 20 test failure 3745 - tests: fix gadget-update-pc test leaking snaps 3746 - tests: remove revision leaking from ubuntu-core-refresh 3747 - tests: remove revision leaking from remodel-kernel 3748 - tests: disable system-usernames test on core20 3749 - travis, tests, run-checks: skip nakedret 3750 - tests: run `uc20-snap-recovery-encrypt` test on 20.04-64 as well 3751 - tests: update mount-ns test tables 3752 - snap: disable auto-import in uc20 install-mode 3753 - tests: add a command-chain service test 3754 - tests: use test-snapd-upower instead of upower 3755 - data/selinux: workaround incorrect fonts cache labeling on RHEL7 3756 - spread.yaml: fix ubuntu 19.10 and 20.04 names 3757 - debian: check embedded keys for snap-{bootstrap,preseed} too 3758 - interfaces/apparmor: fix doc-comments, unnecessary code 3759 - o/ifacestate,o/devicestatate: merge gadget-connect logic into 3760 auto-connect 3761 - bootloader: add ExtractedRunKernelImageBootloader interface, 3762 implement in grub 3763 - tests: add spread test for hook permissions 3764 - cmd/snap-bootstrap: check device size before boostrapping and 3765 produce a meaningful error 3766 - cmd/snap: add ability to register "snap routine" commands 3767 - tests: add a test demonstrating that snaps can't access the 3768 session agent socket 3769 - api: don't return connections referring to non-existing 3770 plugs/slots 3771 - interfaces: refactor path() from raw-volume into utils with 3772 comments for old 3773 - gitignore: ignore snap files 3774 - tests: skip interfaces-network-manager on arm devices 3775 - o/devicestate: do not create perfTimings if not needed inside 3776 ensureSeed/Operational 3777 - tests: add ubuntu 20.04 to the tests execution and remove 3778 tumbleweed from unstable 3779 - usersession: add systemd user instance service control to user 3780 session agent 3781 - cmd/snap: print full channel in 'snap list', 'snap info' 3782 - tests: remove execution of ubuntu 19.04 from google backend 3783 - cmd/snap-boostrap: add mocking for fakeroot 3784 - tests/core18/snapd-failover: collect more debug info 3785 - many: run black formatter on all python files 3786 - overlord: increase settle timeout for slow machines 3787 - httputil: use shorter timeout in TestRetryRequestTimeoutHandling 3788 - store, o/snapstate: send default-tracks header, use 3789 RedirectChannel 3790 - overlord/standby: fix possible deadlock in standby test 3791 - cmd/snap-discard-ns: fix pattern for .info files 3792 - boot: add HasModeenv to Device 3793 - devicestate: do not allow remodel between core20 models 3794 - bootloader,snap: misc tweaks 3795 - store, overlord/snapstate, etc: SnapAction now returns a []…Result 3796 - snap-bootstrap: create encrypted partition 3797 - snap: remove "host" output from `snap version` 3798 - tests: use snap remove --purge flag in most of the spread tests 3799 - data/selinux, test/main/selinux-clean: update the test to cover 3800 more scenarios 3801 - many: drop NameAndRevision, use snap.PlaceInfo instead 3802 - boot: split MakeBootable tests into their own file 3803 - travis-ci: add go import path 3804 - boot: split MakeBootable implementations into their own file 3805 - tests: enable a lot of the tests of main on uc20 3806 - packaging, tests: stop services in prerm 3807 - tests: enable regression suite on core20 3808 - overlord/snapstate: improve snapd snap backend link unit tests 3809 - boot: implement SetNextBoot in terms of bootState.setNext 3810 - wrappers: write and undo snapd services on core 3811 - boot,o/devicestate: refactor MarkBootSuccessful over bootState 3812 - snap-bootstrap: mount the correct snapd snap to /run/mnt/snapd 3813 - snap-bootstrap: refactor partition creation 3814 - tests: use new snapd.spread-tests-run-mode-tweaks.service unit 3815 - tests: add core20 tests 3816 - boot,o/snapstate: SetNextBoot/LinkSnap return whether to reboot, 3817 use the information 3818 - tests/main/snap-sign: add test for non-stdin signing 3819 - snap-bootstrap: trigger udev after filesystem creation 3820 - boot,overlord: introduce internal abstraction bootState and use it 3821 for InUse/GetCurrentBoot 3822 - overlord/snapstate: tracks are now sticky 3823 - cmd: sign: add filename param 3824 - tests: remove "test-snapd-tools" in smoke/sandbox on restore 3825 - cmd/snap, daemon: stop over-normalising channels 3826 - tests: fix classic-ubuntu-core-transition-two-cores after refactor 3827 of MATCH -v 3828 - packaging: ship var/lib/snapd/desktop/applications in the pkg 3829 - spread: drop copr repo with F30 build dependencies 3830 - tests: use test-snapd-sh snap instead of test-snapd-tools - Part 3 3831 - tests: fix partition creation test 3832 - tests: unify/rename services-related spread tests to start with 3833 services- prefix 3834 - test: extract code that modifies "writable" for test prep 3835 - systemd: handle preseed mode 3836 - snap-bootstrap: read only stdout when parsing the sfdisk json 3837 - interfaces/browser-support: add more product/vendor paths 3838 - boot: write compat UC16 bootvars in makeBootable20RunMode 3839 - devicestate: avoid adding mockModel to deviceMgrInstallModeSuite 3840 - devicestate: request reboot after successful doSetupRunSystem() 3841 - snapd.core-fixup.sh: do not run on UC20 at all 3842 - tests: unmount automounted snap-bootstrap devices 3843 - devicestate: run boot.MakeBootable in doSetupRunSystem 3844 - boot: copy kernel/base to data partition in makeBootable20RunMode 3845 - tests: also check nested lxd container 3846 - run-checks: complain about MATCH -v 3847 - boot: always return the trivial boot participant in ephemeral mode 3848 - o/devicestate,o/snapstate: move the gadget.yaml checkdrive-by: use 3849 gadget.ReadInfoFromSnapFile in checkGadgetRemodelCompatible 3850 - snap-bootstrap: append new partitions 3851 - snap-bootstrap: mount filesystems after creation 3852 - snapstate: do not try to detect rollback in ephemeral modes 3853 - snap-bootstrap: trigger udev for new partitions 3854 - cmd/snap-bootstrap: xxx todos about kernel cross-checks 3855 - tests: avoid mask rsyslog service in case is not enabled on the 3856 system 3857 - tests: fix use of MATCH -v 3858 - cmd/snap-preseed: update help strings 3859 - cmd/snap-bootstrap: actually parse snapd_recovery_system label 3860 - bootstrap: reduce runmode mounts from 5 to 2 steps. 3861 - lkenv.go: adjust for new location of include file 3862 - snap: improve squashfs.ReadFile() error 3863 - systemd: fix uc20 shutdown 3864 - boot: write modeenv when creating the run mode 3865 - boot,image: add skeleton boot.makeBootable20RunMode 3866 - cmd/snap-preseed: add snap-preseed executable 3867 - overlord,boot: follow ups to #7889 and #7899 3868 - interfaces/wayland: Add access to Xwayland's shm files 3869 - o/hookstate/ctlcmd: fix command name in snapctl -h 3870 - daemon,snap: remove screenshot deprecation notice 3871 - overlord,o/snapstate: make sure we never leave config behind 3872 - many: pass consistently boot.Device state to boot methods 3873 - run-checks: check multiline string blocks in 3874 restore/prepare/execute sections of spread tests 3875 - intrefaces: login-session-control - added missing dbus commands 3876 - tests/main/parallel-install-remove-after: parallel installs should 3877 not break removal 3878 - overlord/snapstate: tweak assumes error hint 3879 - overlord: replace DeviceContext.OldModel with GroundContext 3880 - devicestate: use httputil.ShouldRetryError() in 3881 prepareSerialRequest 3882 - tests: replace "test-snapd-base-bare" with real "bare" base snap 3883 - many: pass a Model to the gadget info reading functions 3884 - snapstate: relax gadget constraints in ConfigDefaults Et al. 3885 - devicestate: only run ensureBootOk() in "run" mode 3886 - tests/many: quiet lxc launching, file pushing 3887 - tests: disable apt-hooks test until it can be properly fixed 3888 - tests: 16.04 and 18.04 now have mediating pulseaudio 3889 3890 * Wed Feb 12 2020 Michael Vogt <mvo@ubuntu.com> 3891 - New upstream release 2.43.3 3892 - interfaces/opengl: allow datagrams to nvidia-driver 3893 - httputil: add NoNetwork(err) helper, spread test and use 3894 in serial acquire 3895 - interfaces: add uio interface 3896 - interfaces/greengrass-support: 'aws-iot-greengrass' snap fails to 3897 start due to apparmor deny on mounting of "/proc/latency_stats". 3898 - data, packaging: Add sudoers snippet to allow snaps to be run with 3899 sudo 3900 3901 * Tue Jan 28 2020 Michael Vogt <mvo@ubuntu.com> 3902 - New upstream release 2.43.2 3903 - cmd/snap-confine: Revert #7421 (unmount /writable from snap view) 3904 - overlord/snapstate: fix for re-refresh bug 3905 - tests, run-checks, many: fix nakedret issues 3906 - data/selinux: workaround incorrect fonts cache labeling on RHEL7 3907 - tests: use test-snapd-upower instead of upower 3908 - overlord: increase overall settle timeout for slow arm boards 3909 3910 * Tue Jan 14 2020 Michael Vogt <mvo@ubuntu.com> 3911 - New upstream release 2.43.1 3912 - devicestate: use httputil.ShouldRetryError() in prepareSerialRequest 3913 - overlord/standby: fix possible deadlock in standby test 3914 - cmd/snap-discard-ns: fix pattern for .info files 3915 - overlord,o/snapstate: make sure we never leave config behind 3916 - data/selinux: update policy to cover more cases 3917 - snap: remove "host" output from `snap version` 3918 3919 * Thu Jan 09 2020 Michael Vogt <mvo@ubuntu.com> 3920 - New upstream release 2.43 3921 - snap: default to "--direct" in `snap known` 3922 - packaging: ship var/lib/snapd/desktop/applications in the 3923 pkg 3924 - tests: cherry-pick fixes for snap-set-core-config/ubuntu-core- 3925 config-defaults-once 3926 - tests: use test-snapd-sh snap instead of test-snapd-tools 3927 - tests: rename "test-snapd-sh" in smoke test to test-snapd-sandbox 3928 - tests: fix partition creation test 3929 - packaging: fix incorrect changelog entry 3930 - Revert "tests: 16.04 and 18.04 now have mediating pulseaudio" 3931 - tests: 16.04 and 18.04 now have mediating pulseaudio 3932 - interfaces: include hooks in plug/slot apparmor label 3933 - interfaces: add raw-volume interface for access to partitions 3934 - image: set recovery system label when creating the image 3935 - cmd/snapd-generator: fix unit name for non /snap mount locations 3936 - boot,bootloader: setup the snap recovery system bootenv 3937 - seed: support ModeSnaps(mode) for mode != "run" 3938 - seed: fix seed location of local but asserted snaps 3939 - doc: HACKING.md change autopkgtest-trusty-amd64.img name 3940 - interfaces/seccomp: parallelize seccomp backend setup 3941 - cmd/snap-bootstrap: mount ubuntu-data tmpfs, in one go with kernel 3942 & base 3943 - interfaces: add audio-playback/record and pulseaudio spread tests 3944 - apparmor: allow 'r' 3945 /sys/kernel/mm/transparent_hugepage/hpage_pmd_size 3946 - cmd/snap-mgmt, packaging/postrm: stop and remove socket units when 3947 purging 3948 - tests: use test-snapd-sh snap instead of test-snapd-tools 3949 - snap-confine: raise egid before calling setup_private_mount() 3950 - tests: fix fwupd version regular expression 3951 - snap-bootstrap: parse seed if either kernel or base are not 3952 mounted 3953 - tests: check for SELinux denials in interfaces-kvm spread test 3954 - tests: run snap-set-core-config on all core devices 3955 - selinux: update policy to allow modifications related to kmod 3956 backend 3957 - o/hookstate/ctlcmd: snapctl is-connected command 3958 - devicestate: add missing test for failing task setup-run-system 3959 - gadget: add missing test for duplicate detection of roles 3960 - tests/cmd/snapctl: unset SNAP_CONTEXT for the suite 3961 - snap/pack, cmd_pack: 'snap pack --check-skeleton' checks 3962 interfaces 3963 - gitignore: ignore visual studio code directory 3964 - snap-bootstrap: implement "run" mode in snap-bootstrap initramfs- 3965 mounts 3966 - interfaces/apparmor: handle pre-seeding mode 3967 - devicestate: implement creating partitions in "install" mode 3968 - seed: support extra snaps on top of Core 20 dangerous models 3969 - tests: cache snaps also for ubuntu core and add new snaps to cache 3970 - snap-bootstrap: support auto-detect device in create-partitions 3971 - tests: fix partitioning test debug message 3972 - tests: prevent partitioning test errors 3973 - cmd/snap-bootstrap: stub out snap.SanitizePlugsSlots for real 3974 - gadget: extract and export new DiskFromPartition() helper 3975 - snap-bootstrap: force partition table operations 3976 - HACKING.md: add nvidia options to configure example 3977 - tests: move the watchdog timeout to 2s to make the tests work in 3978 rpi 3979 - tests: demand silence from check_journalctl_log 3980 - tests: fix the channels checks done on nested tests 3981 - tests: reduce the complexity of the test-snapd-sh snap 3982 - snap/squashfs, osutil: verify files/dirs can be accessed by 3983 mksquashfs when building a snap 3984 - boot: add boot.Modeenv.Kernel support 3985 - devicestate: ensure system installation 3986 - tests: apply change on permissions to serial port on hotplug test 3987 - cmd/snap-update-ns: adjust debugging output for usability 3988 - devicestate: add reading of modeenv to uc20 firstboot code 3989 - tests/lib/prepare: drop workarounds for rpmbuild rewriting /bin/sh 3990 - cmd/snap-bootstrap: write /var/lib/snapd/modeenv to the right 3991 place 3992 - boot: add boot.Modeenv.Base support 3993 - overlord/snapstate: install task edges 3994 - cmd/snap-bootstrap: some small naming and code org tweaks 3995 - snap-bootstrap: remove SNAPPY_TESTING check, we use it for real 3996 now 3997 - interfaces: remove leftover reservedForOS 3998 - snap-bootstrap: write /run/mnt/ubuntu-data/var/lib/snapd/modeenv 3999 - osutil/mount: optimize flagOptSearch some more 4000 - devicestate: read modeenv early and store in devicestate 4001 - interfaces: add login-session-observe for who, {fail,last}log and 4002 loginctl 4003 - tests: add Ubuntu Eoan to google-sru backend 4004 - osutil/mount: de-duplicate code to use a list 4005 - interfaces: remove reservedForOS from commonInterface 4006 - interfaces/browser-support: allow reading status of huge pages 4007 - interfaces: update system-backup tests to not check for sanitize 4008 errors related to os 4009 - interfaces: add system-backup interface 4010 - osutil/mount: add {Unm,M}outFlagsToOpts helpers 4011 - snap-bootstrap: make cmdline parsing robust 4012 - overlord/patch: normalize tracking channel in state 4013 - boot: add boot.Modeenv that can read/write the UC20 modeenv files 4014 - bootloader: add new bootloader.InstallBootConfig() 4015 - many: share single implementation to list needed default-providers 4016 - snap-bootstrap: implement "snap-bootstrap initramfs-mounts" 4017 - seccomp: allow chown 'snap_daemon:root' and 'root:snap_daemon' 4018 - osutil: handle "rw" mount flag in ParseMountEntry 4019 - overlord/ifacestate: report bad plug/slots with warnings on snap 4020 install 4021 - po: sync translations from launchpad 4022 - tests: cleanup most test snaps icons, they were anyway in the 4023 wrong place 4024 - seed: fix confusing pre snapd dates in tests 4025 - many: make ValidateBasesAndProviders signature simpler/canonical 4026 - snap-bootstrap: set expected filesystem labels 4027 - testutil, many: make MockCommand() create prefix of absolute paths 4028 - tests: improve TestDoPrereqRetryWhenBaseInFlight to fix occasional 4029 flakiness. 4030 - seed: proper support for optional snaps for Core 20 models 4031 - many: test various kinds of overriding for the snapd snap in Core 4032 20 4033 - cmd/snap-failure: passthrough snapd logs, add informational 4034 logging 4035 - cmd/snap-failure: fallback to snapd from core, extend tests 4036 - configcore: fix missing error propagation 4037 - devicestate: rename ensureSeedYaml -> ensureSeeded 4038 - tests: adding fedora 31 4039 - tests: restart the snapd service in the snapd-failover test 4040 - seed: Core 20 seeds channel overrides support for grade dangerous 4041 - cmd: fix the get command help message 4042 - tests: enable degraded test on arch linux after latest image 4043 updates 4044 - overlord/snapstate: don't re-enable and start disabled services on 4045 refresh, etc. 4046 - seed: support in Core 20 seeds local unasserted snaps for model 4047 snaps 4048 - snap-bootstrap: add go-flags cmdline parsing and tests 4049 - gadget: skip fakeroot if not needed 4050 - overlord/state: panic in MarkEdge() if task is nil 4051 - spread: fix typo in spread suite 4052 - overlord: mock device serial in gadget remodel unit tests 4053 - tests: fix spread shellcheck and degraded tests to unbreak master 4054 - spread, tests: openSUSE Tumbleweed to unstable systems, update 4055 system-usernames on Amazon Linux 2 4056 - snap: extract printInstallHint in cmd_download.go 4057 - cmd: fix a pair of typos 4058 - release: preseed mode flag 4059 - cmd/snap-confine: tracking processes with classic confinement 4060 - overlord/ifacestate: remove automatic connections if plug/slot 4061 missing 4062 - o/ifacestate,interfaces,interfaces/policy: slots-per-plug: * 4063 - tests/lib/state: snapshot and restore /var/snap during the tests 4064 - overlord: add base->base remodel undo tests and fixes 4065 - seed: test and improve Core 20 seed handling errors 4066 - asserts: add "snapd" type to valid types in the model assertion 4067 - snap-bootstrap: check gadget versus disk partitions 4068 - devicestate: add support for gadget->gadget remodel 4069 - snap/snapenv: preserve XDG_RUNTIME_DIR for classic confinement 4070 - daemon: parse and reject invalid channels in snap ops 4071 - overlord: add kernel remodel undo tests and fix undo 4072 - cmd/snap: support (but warn) using deprecated multi-slash channel 4073 - overlord: refactor mgrsSuite and extract kernelSuite 4074 - tests/docker-smoke: add minimal docker smoke test 4075 - interfaces: extend the fwupd slot to be implicit on classic 4076 - cmd/snap: make 'snap list' shorten latest/$RISK to $RISK 4077 - tests: fix for journalctl which is failing to restart 4078 - cmd/snap,image: initial support for Core 20 in prepare-image with 4079 test 4080 - cmd/snap-confine: add support for parallel instances of classic 4081 snaps, global mount ns initialization 4082 - overlord: add kernel rollback across reboots manager test and 4083 fixes 4084 - o/devicestate: the basics of Core 20 firstboot support with test 4085 - asserts: support and parsing for slots-per-plug/plugs-per-slotSee 4086 https://forum.snapcraft.io/t/plug-slot-declaration-rules-greedy- 4087 plugs/12438 4088 - parts/plugins: don't xz-compress a deb we're going to discard 4089 - cmd/snap: make completion skip hidden commands (unless overridden) 4090 - many: load/consume Core 20 seeds (aka recovery systems) 4091 - tests: add netplan test on ubuntu core 4092 - seed/internal: doc comment fix and drop handled TODOs 4093 - o/ifacestate: unify code into 4094 autoConnectChecker.addAutoConnectionsneed to change to support 4095 slots-per-plugs: * 4096 - many: changes to testing in preparation of Core 20 seed consuming 4097 code 4098 - snapstate,devicestate: make OldModel() available in DeviceContext 4099 - tests: opensuse tumbleweed has similar issue than arch linux with 4100 snap --strace 4101 - client,daemon: pass sha3-384 in /v2/download to the client 4102 - builtin/browser_support.go: allow monitoring process memory 4103 utilization (used by chromium) 4104 - overlord/ifacestate: use SetupMany in setupSecurityByBackend 4105 - tests: add 14.04 canonical-livepatch test 4106 - snap: make `snap known --remote` use snapd if available 4107 - seed: share auxInfo20 and makeSystemSnap via internal 4108 - spread: disable secondary compression for deltas 4109 - interfaces/content: workaround for renamed target 4110 - tests/lib/gendevmodel: helper tool for generating developer model 4111 assertions 4112 - tests: tweak wording in mount-ns test 4113 - tests: don't depend on GNU time 4114 - o/snapstate, etc: SnapState.Channel -> TrackingChannel, and a 4115 setter 4116 - seed/seedwriter: support writing Core 20 seeds (aka recovery 4117 systems) 4118 - snap-recovery: rename to "snap-bootstrap" 4119 - managers: add remodel undo test for new required snaps case 4120 - client: add xerrors and wrap errors coming from "client" 4121 - tests: verify host is not affected by mount-ns tests 4122 - tests: configure the journald service for core systems 4123 - cmd/snap, store: include snapcraft.io page URL in snap info output 4124 - cmd/cmdutil: version helper 4125 - spread: enable bboozzoo/snapd-devel-deps COPR repo for getting 4126 golang-x-xerrors 4127 - interfaces: simplify AddUpdateNS and emit 4128 - interfaces/policy: expand cstrs/cstrs1 to 4129 altConstraints/constraints 4130 - overlord/devicestate: check snap handler for gadget remodel 4131 compatibility 4132 - snap-recovery: deploy gadget content when creating partitions 4133 - gadget: skip structures with MBR role during remodel 4134 - tests: do not use lsblk in uc20-snap-recovery test 4135 - overlord/snapstate: add LastActiveDisabledServices, 4136 missingDisabledServices 4137 - overlord/devicestate: refactor and split into per-functionality 4138 files, drop dead code 4139 - tests: update mount-ns after addition of /etc/systemd/user 4140 - interfaces/pulseaudio: adjust to manually connect by default 4141 - interfaces/u2f-devices: add OnlyKey to devices list 4142 - interfaces: emit update-ns snippets to function 4143 - interfaces/net-setup-{observe,control}: add Info D-Bus method 4144 accesses 4145 - tests: moving ubuntu-19.10-64 from google-unstable to google 4146 backend 4147 - gadget: rename existing and add new helpers for checking 4148 filesystem/partition presence 4149 - gadget, overlord/devicestate: add support for customized update 4150 policy, add remodel policy 4151 - snap-recovery: create filesystems as defined in the gadget 4152 - tests: ignore directories for go modules 4153 - policy: implement CanRemove policy for the snapd type 4154 - overlord/snapstate: skip catalog refresh if unseeded 4155 - strutil: add OrderedSet 4156 - snap-recovery: add minimal binary so that we can use spread on it 4157 - gadget, snap/pack: perform extended validation of gadget metadata 4158 and contents 4159 - timeutil: fix schedules with ambiguous nth weekday spans 4160 - interfaces/many: allow k8s/systemd-run to mount volume subPaths 4161 plus cleanups 4162 - client: add KnownOptions to Know() and support remote assertions 4163 - tests: check the apparmor_parser when the file exists on snap- 4164 confine test 4165 - gadget: helper for volume compatibility checks 4166 - tests: update snap logs to match for multiple lines for "running" 4167 - overlord: add checks for bootvars in 4168 TestRemodelSwitchToDifferentKernel 4169 - snap-install: add ext4,vfat creation support 4170 - snap-recovery: remove "usedPartitions" from sfdisk.Create() 4171 - image,seed: hide Seed16/Snap16, use seed.Open in image_test.go 4172 - cmd/snap: Sort tasks in snap debug timings output by lanes and 4173 ready-time. 4174 - snap-confine.apparmor.in: harden pivot_root until we have full 4175 mediation 4176 - gadget: refactor ensureVolumeConsistency 4177 - gadget: add a public helper for parsing gadget metadata 4178 - many: address issues related to explicit/implicit channels for 4179 image building 4180 - overlord/many: switch order of check snap parameters 4181 - cmd/snap-confine: remove leftover condition from capability world 4182 - overlord: set fake serial in TestRemodelSwitchToDifferentKernel 4183 - overlord/many: extend check snap callback to take snap container 4184 - recovery-tool: add sfdisk wrapper 4185 - tests: launch the lxd images following the pattern 4186 ubuntu:${VERSION_ID} 4187 - sandbox/cgroup: move freeze/thaw code 4188 - gadget: accept system-seed role and ubuntu-data label 4189 - test/lib/names.sh: make backslash escaping explicit 4190 - spread: generate delta when using google backend 4191 - cmd/snap-confine: remove loads of dead code 4192 - boot,dirs,image: various refinements in the prepare-image code 4193 switched to seedwriter 4194 - spread: include mounts list in task debug output 4195 - .gitignore: pair of trivial changes 4196 - image,seed/seedwriter: switch image to use seedwriter.Writer 4197 - asserts: introduce explicit support for grade for Core 20 models 4198 - usersession: drive by fixes for things flagged by unused or 4199 gosimple 4200 - spread.yaml: exclude vendor dir 4201 - sandbox/cgroup, overlord/snapstate: move helper for listing pids 4202 in group to the cgroup package 4203 - sandbox/cgroup: refactor process cgroup helper to support v2 and 4204 named hierarchies 4205 - snap-repair: error if run as non-root 4206 - snap: when running `snap repair` without arguments, show hint 4207 - interfaces: add cgroup-version to system-key 4208 - snap-repair: add missing check in TestRepairBasicRun 4209 - tests: use `snap model` instead of `snap known model` in tests 4210 - daemon: make /v2/download take snapRevisionOptions 4211 - snap-repair: add additional comment about trust in runner.Verify() 4212 - client: add support to use the new "download" API 4213 - interfaces: bump system-key version (and keep on bumping) 4214 - interfaces/mount: account for cgroup version when reporting 4215 supported features 4216 - tests: change regex to validate access to cdn during snap 4217 download 4218 - daemon: change /v2/download API to take "snap-name" as input 4219 - release: make forced dev mode look at cgroupv2 support 4220 - seed/seedwriter: support for extra snaps 4221 - wrappers/services.go: add disabled svc list arg to AddSnapServices 4222 - overlord/snapstate: add SetTaskSnapSetup helper + unit tests 4223 - cmd/libsnap: use cgroup.procs instead of tasks 4224 - tests: fix snapd-failover test for core18 tests on boards 4225 - overlord/snapstate/policy, etc: introduce policy, move canRemove 4226 to it 4227 - seed/seedwriter: cleanups and small left over todos* drive-by: use 4228 testutil.FilePresent consistently 4229 - cmd/snap: update 'snap find' help because it's no longer narrow 4230 - seed/seedwriter,snap/naming: support classic models 4231 - cmd/snap-confine: unmount /writable from snap view 4232 - spread.yaml: exclude automake cacheThe error message is looks like 4233 this:dpkg-source: info: local changes detected, the modified files 4234 are: 4235 - interfaces/openvswitch: allow access to other openvswitch sockets 4236 - cmd/model: don't show model with display-name inline w/ opts 4237 - daemon: add a 'prune' debug action 4238 - client: add doTimeout to http.Client{Timeout} 4239 - interfaces/seccomp: query apparmor sandbox helper rather than 4240 aggregate info 4241 - sandbox/cgroup: avoid dependency on dirs 4242 - seed/seedwriter,snap: support local snaps 4243 - overlord/snapstate: fix undo on firstboot seeding. 4244 - usersession: track connections to session agent for exit on idle 4245 and peer credential checks 4246 - tests: fix ubuntu-core-device-reg test for arm devices on core18 4247 - sandbox/seccomp: move the remaining sandbox bits to a 4248 corresponding sandbox package 4249 - osutil: generalize SyncDir with FileState interface 4250 - daemon, client, cmd/snap: include architecture in 'snap version' 4251 - daemon: allow /v2/assertions/{assertType} to query store 4252 - gadget: do not fail the update when old gadget snap is missing 4253 bare content 4254 - sandbox/selinux: move SELinux related bits from 'release' to 4255 'sandbox/selinux' 4256 - tests: add unit test for gadget defaults with a multiline string 4257 - overlord/snapstate: have more context in the errors about 4258 prerequisites 4259 - httputil: set user agent for CONNECT 4260 - seed/seedwriter: resolve channels using channel.Resolve* for snaps 4261 - run-checks: allow overriding gofmt binary, show gofmt diff 4262 - asserts,seed/seedwriter: follow snap type sorting in the model 4263 assertion snap listings 4264 - daemon: return "snapname_rev.snap" style when using /v2/download 4265 - tests: when the backend is external skip the loop waiting for snap 4266 version 4267 - many: move AppArmor probing code under sandbox/apparmor 4268 - cmd: add `snap debug boot-vars` that dumps the current bootvars 4269 - tests: skip the ubuntu-core-upgrade on arm devices on core18 4270 - seed/seedwriter: implement WriteMeta and tree16 corresponding code 4271 - interfaces/docker-support,kubernetes-support: misc updates for 4272 strict k8s 4273 - tests: restart the journald service while preparing the test 4274 - tests/cmd/debug_state: make the test output TZ independent 4275 - interfaces/kubernetes-support: allow use of /run/flannel 4276 - seed/seedwriter: start of Writer and internal policy16/tree16 4277 - sandbox/cgroup, usersession/userd: move cgroup related helper to a 4278 dedicated package 4279 - tests: move "centos-7" to unstable systems 4280 - snapstate: add missing tests for checkGadgetOrKernel 4281 - docs: Update README.md 4282 - snapcraft: set license to GPL-3.0 4283 - interfaces/wayland: allow a confined server running in a user 4284 session to work with Qt, GTK3 & SDL2 clients 4285 - selinux: move the package under sandbox/selinux 4286 - interfaces/udev: account for cgroup version when reporting 4287 supported features 4288 - store, ..., client: add a "website" field 4289 - sanity: sanity check cgroup probing 4290 - snapstate: increase settleTimeout in 4291 TestRemodelSwitchToDifferentKernel 4292 - packaging: remove obsolete usr.lib.snapd.snap-confine in postinst 4293 - data/selinux: allow snapd/snap to do statfs() on the cgroup 4294 mountpoint 4295 - usersession/userd: make sure to export DBus interfaces before 4296 requesting a name 4297 - data/selinux: allow snapd to issue sigkill to journalctl 4298 - docs: Add Code of Conduct 4299 - store: download propagates options to delta download 4300 - tests/main/listing: account for dots in ~pre suffix 4301 4302 * Fri Dec 06 2019 Michael Vogt <mvo@ubuntu.com> 4303 - New upstream release 2.42.5 4304 - snap-confine: revert, with comment, explicit unix deny for nested 4305 lxd 4306 - Disable mount-ns test on 16.04. It is too flaky currently. 4307 4308 * Thu Nov 28 2019 Michael Vogt <mvo@ubuntu.com> 4309 - New upstream release 2.42.4 4310 - overlord/snapstate: make sure configuration defaults are applied 4311 only once 4312 4313 * Wed Nov 27 2019 Michael Vogt <mvo@ubuntu.com> 4314 - New upstream release 2.42.3 4315 - overlord/snapstate: pick up system defaults when seeding the snapd 4316 snap 4317 - cmd/snap-update-ns: fix overlapping, nested writable mimic 4318 handling 4319 - interfaces: misc updates for u2f-devices, browser-support, 4320 hardware-observe, et al 4321 - tests: reset failing "fwupd-refresh.service" if needed 4322 - tests/main/gadget-update-pc: use a program to modify gadget yaml 4323 - snap-confine: suppress noisy classic snap file_inherit denials 4324 4325 * Wed Nov 20 2019 Michael Vogt <mvo@ubuntu.com> 4326 - New upstream release 2.42.2 4327 - interfaces/lxd-support: Fix on core18 4328 - tests/main/system-usernames: Amazon Linux 2 comes with libseccomp 4329 2.4.1 now 4330 - snap-seccomp: add missing clock_getres_time64 4331 - cmd/snap-seccomp/syscalls: update the list of known 4332 syscalls 4333 - sandbox/seccomp: accept build ID generated by Go toolchain 4334 - interfaces: allow access to ovs bridge sockets 4335 4336 * Wed Oct 30 2019 Michael Vogt <mvo@ubuntu.com> 4337 - New upstream release 2.42.1 4338 - interfaces: de-duplicate emitted update-ns profiles 4339 - packaging: tweak handling of usr.lib.snapd.snap-confine 4340 - interfaces: allow introspecting network-manager on core 4341 - tests/main/interfaces-contacts-service: disable on openSUSE 4342 Tumbleweed 4343 - tests/lib/lxd-snapfuse: restore mount changes introduced by LXD 4344 - snap: fix default-provider in seed validation 4345 - tests: update system-usernames test now that opensuse-15.1 works 4346 - overlord: set fake sertial in TestRemodelSwitchToDifferentKernel 4347 - gadget: rename "boot{select,img}" -> system-boot-{select,image} 4348 - tests: listing test, make accepted snapd/core versions consistent 4349 4350 * Tue Oct 01 2019 Michael Vogt <mvo@ubuntu.com> 4351 - New upstream release 2.42 4352 - tests: disable {contacts,calendar}-service tests on debian-sid 4353 - tests/main/snap-run: disable strace test cases on Arch 4354 - cmd/system-shutdown: include correct prototype for die 4355 - snap/naming: add test for hook name connect-plug-i2c 4356 - cmd/snap-confine: allow digits in hook names 4357 - gadget: do not fail the update when old gadget snap is missing 4358 bare content 4359 - tests: disable {contacts,calendar}-service tests on Arch Linux 4360 - tests: move "centos-7" to unstable systems 4361 - interfaces/docker-support,kubernetes-support: misc updates for 4362 strict k8s 4363 - packaging: remove obsolete usr.lib.snapd.snap-confine in 4364 postinst 4365 - tests: add test that ensures our snapfuse binary actually works 4366 - packaging: use snapfuse_ll to speed up snapfuse performance 4367 - usersession/userd: make sure to export DBus interfaces before 4368 requesting a name 4369 - data/selinux: allow snapd to issue sigkill to journalctl 4370 - store: download propagates options to delta download 4371 - wrappers: allow snaps to install icon theme icons 4372 - debug: state-inspect debugging utility 4373 - sandbox/cgroup: introduce cgroup wrappers package 4374 - snap-confine: fix return value checks for udev functions 4375 - cmd/model: output tweaks, add'l tests 4376 - wrappers/services: add ServicesEnableState + unit tests 4377 - tests: fix newline and wrong test name pointed out in previous PRs 4378 - tests: extend mount-ns test to handle mimics 4379 - run-checks, tests/main/go: allow gofmt checks to be skipped on 4380 19.10 4381 - tests/main/interfaces-{calendar,contacts}-service: disable on 4382 19.10 4383 - tests: part3 making tests work on ubuntu-core-18 4384 - tests: fix interfaces-timeserver-control on 19.10 4385 - overlord/snapstate: config revision code cleanup and extra tests 4386 - devicestate: allow remodel to different kernels 4387 - overlord,daemon: adjust startup timeout via EXTEND_TIMEOUT_USEC 4388 using an estimate 4389 - tests/main/many: increase kill-timeout to 5m 4390 - interfaces/kubernetes-support: allow systemd-run to ptrace read 4391 unconfined 4392 - snapstate: auto transition on experimental.snapd-snap=true 4393 - tests: retry checking until the written file on desktop-portal- 4394 filechooser 4395 - tests: unit test for a refresh failing on configure hook 4396 - tests: remove mount_id and parent_id from mount-ns test data 4397 - tests: move classic-ubuntu-core-transition* to nightly 4398 - tests/mountinfo-tool: proper formatting of opt_fields 4399 - overlord/configstate: special-case "null" in transaction Changes() 4400 - snap-confine: fallback gracefully on a cgroup v2 only system 4401 - tests: debian sid now ships new seccomp, adjust tests 4402 - tests: explicitly restore after using LXD 4403 - snapstate: make progress reporting less granular 4404 - bootloader: little kernel support 4405 - fixme: rename ubuntu*architectures to dpkg*architectures 4406 - tests: run dbus-launch inside a systemd unit 4407 - channel: introduce Resolve and ResolveLocked 4408 - tests: run failing tests on ubuntu eoan due to is now set as 4409 unstable 4410 - systemd: detach rather than unmount .mount units 4411 - cmd/snap-confine: add unit tests for sc_invocation, cleanup memory 4412 leaks in tests 4413 - boot,dirs,image: introduce boot.MakeBootable, use it in image 4414 instead of ad hoc code 4415 - cmd/snap-update-ns: clarify sharing comment 4416 - tests/overlord/snapstate: refactor for cleaner test failures 4417 - cmd/snap-update-ns: don't propagate detaching changes 4418 - interfaces: allow reading mutter Xauthority file 4419 - cmd/snap-confine: fix /snap duplication in legacy mode 4420 - tests: fix mountinfo-tool filtering when used with rewriting 4421 - seed,image,o/devicestate: extract seed loading to seed/seed16.go 4422 - many: pass the rootdir and options to bootloader.Find 4423 - tests: part5 making tests work on ubuntu-core-18 4424 - cmd/snap-confine: keep track of snap instance name and the snap 4425 name 4426 - cmd: unify die() across C programs 4427 - tests: add functions to make an abstraction for the snaps 4428 - packaging/fedora, tests/lib/prepare-restore: helper tool for 4429 packing sources for RPM 4430 - cmd/snap: improve help and error msg for snapshot commands 4431 - hookstate/ctlcmd: fix snapctl set help message 4432 - cmd/snap: don't append / to snap name just because a dir exists 4433 - tests: support fastly-global.cdn.snapcraft.io url on proxy-no-core 4434 test 4435 - tests: add --quiet switch to retry-tool 4436 - tests: add unstable stage for travis execution 4437 - tests: disable interfaces-timeserver-control on 19.10 4438 - tests: don't guess in is_classic_confinement_supported 4439 - boot, etc: simplify BootParticipant (etc) usage 4440 - tests: verify retry-tool not retrying missing commands 4441 - tests: rewrite "retry" command as retry-tool 4442 - tests: move debug section after restore 4443 - cmd/libsnap-confine-private, cmd/s-c: use constants for 4444 snap/instance name lengths 4445 - tests: measure behavior of the device cgroup 4446 - boot, bootloader, o/devicestate: boot env manip goes in boot 4447 - tests: enabling ubuntu 19.10-64 on spread.yaml 4448 - tests: fix ephemeral mount table in left over by prepare 4449 - tests: add version-tool for comparing versions 4450 - cmd/libsnap: make feature flag enum 1<<N style 4451 - many: refactor boot/boottest and move to bootloader/bootloadertest 4452 - tests/cross/go-build: use go list rather than shell trickery 4453 - HACKING.md: clarify where "make fmt" is needed 4454 - osutil: make flock test more robust 4455 - features, overlord: make parallel-installs exported, export flags 4456 on startup 4457 - overlord/devicestate: support the device service returning a 4458 stream of assertions 4459 - many: add snap model command, add /v2/model, /v2/model/serial REST 4460 APIs 4461 - debian: set GOCACHE dir during build to fix FTBFS on eoan 4462 - boot, etc.: refactor boot to have a lookup with different imps 4463 - many: add the start of Core 20 extensions support to the model 4464 assertion 4465 - overlord/snapstate: revert track-risk behavior change and 4466 validation on install 4467 - cmd/snap,image,seed: move image.ValidateSeed to 4468 seed.ValidateFromYaml 4469 - image,o/devicestate,seed: oops, make sure to clear seedtest 4470 helpers 4471 - tests/main/snap-info: update check.py for test-snapd-tools 2.0 4472 - tests: moving tests to nightly suite 4473 - overlord/devicestate,seed: small step, introduce 4474 seed.LoadAssertions and use it from firstboot 4475 - snapstate: add comment to checkVersion vs strutil.VersionCompare 4476 - tests: add unit tests for cmd_whoami 4477 - tests: add debug section to interfaces-contacts-service 4478 - many: introduce package seed and seedtest 4479 - interfaces/bluez: enable communication between bluetoothd and 4480 meshd via dbus 4481 - cmd/snap: fix snap switch message 4482 - overlord/snapstate: check channel names on install 4483 - tests: check snap_daemon user and group on system-usernames- 4484 illegal test are not created 4485 - cmd/snap-confine: fix group and permission of .info files 4486 - gadget: do not error on gadget refreshes with multiple volumes 4487 - snap: use deterministic paths to find the built deb 4488 - tests: just build snapd commands on go-build test 4489 - tests: re-enable mount-ns test on classic 4490 - tests: rename fuse_support to fuse-support 4491 - tests: move restore-project-each code to existing function 4492 - tests: simplify interfaces-account-control test 4493 - i18n, vendor, packaging: drop github.com/ojii/gettext.go, use 4494 github.com/snapcore/go-gettext 4495 - tests: always say 'restore: |' 4496 - tests: new test to check the output after refreshing/reverting 4497 core 4498 - snapstate: validate all system-usernames before creating them 4499 - tests: fix system version check on listing test for external 4500 backend 4501 - tests: add check for snap_daemon user/group 4502 - tests: don't look for lxcfs in mountinfo 4503 - tests: adding support for arm devices on ubuntu-core-device-reg 4504 test 4505 - snap: explicitly forbid trying to parallel install from seed 4506 - tests: remove trailing spaces from shell scripts 4507 - tests: remove locally installed revisions of core 4508 - tests: fix removal of snaps on ubuntu-core 4509 - interfaces: support Tegra display drivers 4510 - tests: move interfaces-contacts-service to /tmp 4511 - interfaces/network-manager: allow using 4512 org.freedesktop.DBus.ObjectManager 4513 - tests: restore dpkg selections after upgrade-from-2.15 test 4514 - tests: pass --remove to userdel on core 4515 - snap/naming: simplify SnapSet somewhat 4516 - devicestate/firstboot: check for missing bases early 4517 - httputil: rework protocol error detection 4518 - tests: unmount fuse connections only if not initially mounted 4519 - snap: prevent duplicated snap name and snap files when parsing 4520 seed.yaml 4521 - tests: re-implement user tool in python 4522 - image: improve/tweak some warning/error messages 4523 - cmd/libsnap-confine-private: add checks for parallel instances 4524 feature flag 4525 - tests: wait_for_service shows status after actual first minute 4526 - sanity: report proper errror when fuse is needed but not available 4527 - snap/naming: introduce SnapRef, Snap, and SnapSet 4528 - image: support prepare-image --classic for snapd snap only 4529 imagesConsequently: 4530 - tests/main/mount-ns: account for clone_children in cpuset cgroup 4531 on 18.04 4532 - many: merging asserts.Batch Precheck with CommitTo and other 4533 clarifications 4534 - devicestate: add missing test for remodeling possibly removing 4535 required flag 4536 - tests: use user-tool to remove test user in the non-home test 4537 - overlord/configstate: sort patch keys to have deterministic order 4538 with snap set 4539 - many: generalize assertstate.Batch to asserts.Batch, have 4540 assertstate.AddBatch 4541 - gadget, overlord/devicestate: rename Position/Layout 4542 - store, image, cmd: make 'snap download' leave partials 4543 - httputil: improve http2 PROTOCOL_ERROR detection 4544 - tests: add new "user-tool" helper and use in system-user tests 4545 - tests: clean up after NFS tests 4546 - ifacestate: optimize auto-connect by setting profiles once after 4547 all connects 4548 - hookstate/ctlcmd: snapctl unset command 4549 - tests: allow test user XDG_RUNTIME_DIR to phase out 4550 - tests: cleanup "snap_daemon" user in system-usernames-install- 4551 twice 4552 - cmd/snap-mgmt: set +x on startup 4553 - interfaces/wayland,x11: allow reading an Xwayland Xauth file 4554 - many: move channel parsing to snap/channel 4555 - check-pr-title.py: allow {} in pr prefix 4556 - tests: spam test logs less while waiting for systemd unit to stop 4557 - tests: remove redundant activation check for snapd.socket 4558 snapd.service 4559 - tests: trivial snapctl test cleanup 4560 - tests: ubuntu 18.10 removed from the google-sru backend on the 4561 spread.yaml 4562 - tests: add new cases into arch_test 4563 - tests: clean user and group for test system-usernames-install- 4564 twice 4565 - interfaces: k8s worker node updates 4566 - asserts: move Model to its own model.go 4567 - tests: unmount binfmt_misc on cleanup 4568 - tests: restore nsdelegate clobbered by LXD 4569 - cmd/snap: fix snap unset help string 4570 - tests: unmount fusectl after testing 4571 - cmd/snap: fix remote snap info for parallel installed snaps 4572 4573 * Fri Aug 30 2019 Michael Vogt <mvo@ubuntu.com> 4574 - New upstream release 2.41 4575 - overlord/snapstate: revert track-risk behavior 4576 - tests: fix snap info test 4577 - httputil: rework protocol error detection 4578 - gadget: do not error on gadget refreshes with multiple volumes 4579 - i18n, vendor, packaging: drop github.com/ojii/gettext.go, use 4580 github.com/snapcore/go-gettext 4581 - snapstate: validate all system-usernames before creating them 4582 - mkversion.sh: fix version from git checkouts 4583 - interfaces/network-{control,manager}: allow 'k' on 4584 /run/resolvconf/** 4585 - interfaces/wayland,x11: allow reading an Xwayland Xauth file 4586 - interfaces: k8s worker node updates 4587 - debian: re-enable systemd environment generator 4588 - many: create system-usernames user/group if both don't exist 4589 - packaging: fix symlink for snapd.session-agent.socket 4590 - tests: change cgroups so that LXD doesn't have to 4591 - interfaces/network-setup-control: allow dbus netplan apply 4592 messages 4593 - tests: add /var/cache/snapd to the snapd state to prevent error on 4594 the store 4595 - tests: add test for services disabled during refresh hook 4596 - many: simpler access to snap-seccomp version-info 4597 - snap: cleanup some tests, clarify some errorsThis is a follow up 4598 from work on system usernames: 4599 - osutil: add osutil.Find{Uid,Gid} 4600 - tests: use a different archive based on the spread backend on go- 4601 build test 4602 - cmd/snap-update-ns: fix pair of bugs affecting refresh of snap 4603 with layouts 4604 - overlord/devicestate: detect clashing concurrent (ongoing, just 4605 finished) remodels or changes 4606 - interfaces/docker-support: declare controls-device-cgroup 4607 - packaging: fix removal of old apparmor profile 4608 - store: use track/risk for "channel" name when parsing store 4609 details 4610 - many: allow 'system-usernames' with libseccomp > 2.4 and golang- 4611 seccomp > 0.9.0 4612 - overlord/devicestate, tests: use gadget.Update() proper, spread 4613 test 4614 - overlord/configstate/configcore: allow setting start_x=1 to enable 4615 CSI camera on RPi 4616 - interfaces: remove BeforePrepareSlot from commonInterface 4617 - many: support system-usernames for 'snap_daemon' user 4618 - overlord/devicestate,o/snapstate: queue service commands before 4619 mark-seeded and other final tasks 4620 - interfaces/mount: discard mount ns on backend Remove 4621 - packaging/fedora: build on RHEL8 4622 - overlord/devicestate: support seeding a classic system with the 4623 snapd snap and no core 4624 - interfaces: fix test failure in gpio_control_test 4625 - interfaces, policy: remove sanitize helpers and use minimal policy 4626 check 4627 - packaging: use %systemd_user_* macros to enable session agent 4628 socket according to presets 4629 - snapstate, store: handle 429s on catalog refresh a little bit 4630 better 4631 - tests: part4 making tests work on ubuntu-core-18 4632 - many: drop snap.ReadGadgetInfo wrapper 4633 - xdgopenproxy: update test API to match upstream 4634 - tests: show why sbuild failed 4635 - data/selinux: allow mandb_t to search /var/lib/snapd 4636 - tests: be less verbose when checking service status 4637 - tests: set sbuild test as manual 4638 - overlord: DeviceCtx must find the remodel context for a remodel 4639 change 4640 - tests: use snap info --verbose to check for base 4641 - sanity: unmount squashfs with --lazy 4642 - overlord/snapstate: keep current track if only risk is specified 4643 - interfaces/firewall-control: support nft routing expressions and 4644 device groups 4645 - gadget: support for writing symlinks 4646 - tests: mountinfo-tool fail if there are no matches 4647 - tests: sync journal log before start the test 4648 - cmd/snap, data/completion: improve completion for 'snap debug' 4649 - httputil: retry for http2 PROTOCOL_ERROR 4650 - Errata commit: pulseaudio still auto-connects on classic 4651 - interfaces/misc: updates for k8s 1.15 (and greengrass test) 4652 - tests: set GOTRACEBACK=1 when running tests 4653 - cmd/libsnap: don't leak memory in sc_die_on_error 4654 - tests: improve how the system is restored when the upgrade- 4655 from-2.15 test fails 4656 - interfaces/bluetooth-control: add udev rules for BT_chrdev devices 4657 - interfaces: add audio-playback/audio-record and make pulseaudio 4658 manually connect 4659 - tests: split the sbuild test in 2 depending on the type of build 4660 - interfaces: add an interface granting access to AppStream metadata 4661 - gadget: ensure filesystem labels are unique 4662 - usersession/agent: use background context when stopping the agent 4663 - HACKING.md: update spread section, other updates 4664 - data/selinux: allow snap-confine to read entries on nsfs 4665 - tests: respect SPREAD_DEBUG_EACH on the main suite 4666 - packaging/debian-sid: set GOCACHE to a known writable location 4667 - interfaces: add gpio-control interface 4668 - cmd/snap: use showDone helper with 'snap switch' 4669 - gadget: effective structure role fallback, extra tests 4670 - many: fix unit tests getting stuck 4671 - tests: remove installed snap on restore 4672 - daemon: do not modify test data in user suite 4673 - data/selinux: allow read on sysfs 4674 - packaging/debian: don't md5sum absent files 4675 - tests: remove test-snapd-curl 4676 - tests: remove test-snapd-snapctl-core18 in restore 4677 - tests: remove installed snap in the restore section 4678 - tests: remove installed test snap 4679 - tests: correctly escape mount unit path 4680 - cmd/Makefile.am: support building with the go snap 4681 - tests: work around classic snap affecting the host 4682 - tests: fix typo "current" 4683 - overlord/assertstate: add Batch.Precheck to check for the full 4684 validity of the batch before Commit 4685 - tests: restore cpuset clone_children clobbered by lxd 4686 - usersession: move userd package to usersession/userd 4687 - tests: reformat and fix markdown in snapd-state.md 4688 - gadget: select the right updater for given structure 4689 - tests: show stderr only if it exists 4690 - sessionagent: add a REST interface with socket activation 4691 - tests: remove locally installed core in more tests 4692 - tests: remove local revision of core 4693 - packaging/debian-sid: use correct apparmor Depends for Debian 4694 - packaging/debian-sid: merge debian upload changes back into master 4695 - cmd/snap-repair: make sure the goroutine doesn't stick around on 4696 timeout 4697 - packaging/fedora: github.com/cheggaaa/pb is no longer used 4698 - configstate/config: fix crash in purgeNulls 4699 - boot, o/snapst, o/devicest: limit knowledge of boot vars to boot 4700 - client,cmd/snap: stop depending on status/status-code in the JSON 4701 responses in client 4702 - tests: unmount leftover /run/netns 4703 - tests: switch mount-ns test to manual 4704 - overlord,daemon,cmd/snapd: move expensive startup to dedicated 4705 StartUp methods 4706 - osutil: add EnsureTreeState helper 4707 - tests: measure properties of various mount namespaces 4708 - tests: part2 making tests work on ubuntu-core-18 4709 - interfaces/policy: minimal policy check for replacing 4710 sanitizeReservedFor helpers (1/2) 4711 - interfaces: add an interface that grants access to the PackageKit 4712 service 4713 - overlord/devicestate: update gadget update handlers and mocks 4714 - tests: add mountinfo-tool --ref-x1000 4715 - tests: remove lxd / lxcfs if pre-installed 4716 - tests: removing support for ubuntu cosmic on spread test suite 4717 - tests: don't leak /run/netns mount 4718 - image: clean up the validateSuite 4719 - bootloader: remove "Dir()" from Bootloader interface 4720 - many: retry to reboot if snapd gets restarted before expected 4721 reboot 4722 - overlord: implement re-registration remodeling 4723 - cmd: revert PR#6933 (tweak of GOMAXPROCS) 4724 - cmd/snap: add snap unset command 4725 - many: add Client-User-Agent to "SnapAction" install API call 4726 - tests: first part making tests run on ubuntu-core-18 4727 - hookstate/ctlcmd: support hidden commands in snapctl 4728 - many: replace snapd snap name checks with type checks (3/4) 4729 - overlord: mostly stop needing Kernel/CoreInfo, make GadgetInfo 4730 consider a DeviceContext 4731 - snapctl: handle unsetting of config options with "!" 4732 - tests: move core migration snaps to tests/lib/snaps dir 4733 - cmd/snap: handle unsetting of config options with "!" 4734 - cmd/snap, etc: add health to 'snap list' and 'snap info' 4735 - gadget: use struct field names when intializing data in mounted 4736 updater unit tests 4737 - cmd/snap-confine: bring /lib/firmware from the host 4738 - snap: set snapd snap type (1/4) 4739 - snap: add checks in validate-seed for missing base/default- 4740 provider 4741 - daemon: replace shutdownServer with net/http's native shutdown 4742 support 4743 - interfaces/builtin: add exec "/bin/runc" to docker-support 4744 - gadget: mounted filesystem updater 4745 - overlord/patch: simplify conditions for re-applying sublevel 4746 patches for level 6 4747 - seccomp/compiler: adjust test case names and comment for later 4748 changes 4749 - tests: fix error doing snap pack running failover test 4750 - tests: don't preserve size= when rewriting mount tables 4751 - tests: allow reordering of rewrite operations 4752 - gadget: main update routine 4753 - overlord/config: normalize nulls to support config unsetting 4754 semantics 4755 - snap-userd-autostart: don't list as a startup application on the 4756 GUI 4757 - tests: renumber snap revisions as seen via writable 4758 - tests: change allocation for mount options 4759 - tests: re-enable ns-re-associate test 4760 - tests: mountinfo-tool allow many --refs 4761 - overlord/devicestate: implement reregRemodelContext with the 4762 essential re-registration logic 4763 - tests: replace various numeric mount options 4764 - gadget: filesystem image writer 4765 - tests: add more unit tests for mountinfo-tool 4766 - tests: introduce mountinfo-tool --ref feature 4767 - tests: refactor mountinfo-tool rewrite state 4768 - tests: allow renumbering mount namespace identifiers 4769 - snap: refactor and explain layout blacklisting 4770 - tests: renumber snap revisions as seen via hostfs 4771 - daemon, interfaces, travis: workaround build ID with Go 1.9, use 4772 1.9 for travis tests 4773 - cmd/libsnap: add sc_error_init_{simple,api_misuse} 4774 - gadget: make raw updater handle shifted structures 4775 - tests/lib/nested: create WORK_DIR before accessing it 4776 - cmd/libsnap: rename SC_LIBSNAP_ERROR to SC_LIBSNAP_DOMAIN 4777 - cmd,tests: forcibly discard mount namespace when bases change 4778 - many: introduce healthstate, run check-health 4779 post-(install/refresh/try/revert) 4780 - interfaces/optical-drive: add scsi-generic type 4 and 5 support 4781 - cmd/snap-confine: exit from helper when parent dies 4782 4783 * Fri Jul 12 2019 Michael Vogt <mvo@ubuntu.com> 4784 - New upstream release 2.40 4785 - overlord/patch: simplify conditions for re-applying sublevel 4786 patches for level 6 4787 - cmd,tests: forcibly discard mount namespace when bases change 4788 - cmd/snap-confine: handle device cgroup before pivot 4789 - cmd/snap-apparmor-service: quit if there are no profiles 4790 - cmd/snap, image: add --target-directory and --basename to 'snap 4791 download' 4792 - interfaces: add jack1 implicit classic interface 4793 - interfaces: miscellaneous policy updates 4794 - daemon: classic confinement is not supported on core 4795 - interfaces: bluetooth-control: add mtk BT device node 4796 - cmd/snap-seccomp: initial support for negative arguments with 4797 uid/gid caching 4798 - snap-confine: move seccomp load after permanent privilege drop 4799 - tests: new profiler snap used to track cpu and memory for snapd 4800 and snap commands 4801 - debian: make maintainer scripts do nothing on powerpc 4802 - gadget: mounted filesystem writer 4803 - cmd/snap: use padded checkers for snapshot output 4804 - bootloader: switch to bootloader_test style testing 4805 - gadget: add a wrapper for generating partitioned images with 4806 sfdisk 4807 - tests/main/snap-seccomp-syscalls: add description 4808 - tests: continue executing on errors either updating the repo db or 4809 installing dependencies 4810 - cmd/snap-seccomp/syscalls: add io_uring syscalls 4811 - systemd: add InstanceMode enumeration to control which systemd 4812 instance to control 4813 - netutil: extract socket activation helpers from daemon package. 4814 - interfaces: spi: update regex rules to accept spi nodes like 4815 spidev12345.0 4816 - gadget: fallback device lookup 4817 - many: add strutil.ElliptLeft, use it for shortening cohorts 4818 - wrappers: allow sockets under $XDG_RUNTIME_DIR 4819 - gadget: add wrapper for creating and populating filesystems 4820 - gadget: add writer for offset-write 4821 - gadget: support relative symlinks in device lookup 4822 - snap, snapstate: additional validation of base field 4823 - many: fix some races and missing locking, make sure UDevMonitor is 4824 stopped 4825 - boot: move ExtractKernelAssets 4826 - daemon, snap: screenshots _only_ shows the deprecation notice, 4827 from 2.39 4828 - osutil: add a workaround for overlayfs apparmor as it is used on 4829 Manjaro 4830 - snap: introduce GetType() function for snap.Info 4831 - tests: update systems to be used for during sru validation 4832 - daemon: increase `shutdownTimeout` to 25s to deal with slow 4833 HW 4834 - interfaces/network-manager: move deny ptrace to the connected slot 4835 - interfaces: allow locking of pppd files 4836 - cmd/snap-exec: fix snap completion for classic snaps with non 4837 /usr/lib/snapd libexecdir 4838 - daemon: expose pprof endpoints 4839 - travis: disable snap pack on OSX 4840 - client, cmd/snap: expose the new cohort options for snap ops 4841 - overlord/snapstate: tweak switch summaries 4842 - tests: reuse the image created initially for nested tests 4843 execution 4844 - tests/lib/nested: tweak assert disk prepare step 4845 - daemon, overlord/snapstate: support leave-cohort 4846 - tests/main/appstream-id: collect debug info 4847 - store,daemon: add client-user-agent support to store.SnapInfo 4848 - tests: add check for invalid PR titles in the static checks 4849 - tests: add snap-tool for easier access to internal tools 4850 - daemon: unexport file{Response,Stream} 4851 - devicestate: make TestUpdateGadgetOnClassicErrorsOut less racy 4852 - tests: fix test desktop-portal-filechooser 4853 - tests: sort commands from DumpCommands in the dumpDbHook 4854 - cmd/snap: add unit test for "advise-snap --dump-db". 4855 - bootloader: remove extra mock bootloader implementation 4856 - daemon: tweak for "add api endpoint for download" PR 4857 - packaging: fix reproducible build error 4858 - tests: synchronize journal logs before check logs 4859 - tests: fix snap service watchdog test 4860 - tests: use more readable test directory names 4861 - tests/regression/lp-1805485: update test description 4862 - overlord: make changes conflict with remodel 4863 - tests: make sure the snapshot unit test uses a snapshot time 4864 relative to Now() 4865 - tests: revert "tests: stop catalog-update/apt-hooks test for now" 4866 - tests: mountinfo-tool --one prints matches on failure 4867 - data/selinux: fix policy for snaps with bases and classic snaps 4868 - debian: fix building on eoan by tweaking golang build-deps 4869 - packaging/debian-sid: update required golang version to 1.10 4870 - httputil: handle "no such host" error explicitly and do not retry 4871 it 4872 - overlord/snapstate, & fallout: give Install a *RevisionOptions 4873 - cmd/snap: don't run install on 'snap --help install' 4874 - gadget: raw/bare structure writer and updater 4875 - daemon, client, cmd/snap: show cohort key in snap info --verbose 4876 - overlord/snapstate: add update-gadget task when needed, block 4877 other changes 4878 - image: turn a missing default content provider into an error 4879 - overlord/devicestate: update-gadget-assets task handler with 4880 stubbed gadget callbacks 4881 - interface: builtin: avahi-observe/control: update label for 4882 implicit slot 4883 - tests/lib/nested: fix multi argument copy_remote 4884 - tests/lib/nested: have mkfs.ext4 use a rootdir instead of mounting 4885 an image 4886 - packaging: fix permissions powerpc docs dir 4887 - overlord: mock store to avoid net requests 4888 - debian: rework how we run autopkgtests 4889 - interface: builtin: avahi-observe/control: allow slots 4890 implementation also by app snap on classic system 4891 - interfaces: builtin: utils: add helper function to identify system 4892 slots 4893 - interfaces: add missing adjtimex to time-control 4894 - overlord/snapstate, snap: support base = "none" 4895 - daemon, overlord/snapstate: give RevisionOptions a CohortKey 4896 - data/selinux: permit init_t to remount snappy_snap_t 4897 - cmd/snap: test for a friendly error on 'okay' without 'warnings' 4898 - cmd/snap: support snap debug timings --startup=.. and measure 4899 loadState time 4900 - advise-snap: add --dump-db which dumps the command database 4901 - interfaces/docker-support: support overlayfs on ubuntu core 4902 - cmd/okay: Remove err message when warning file not exist 4903 - devicestate: disallow removal of snaps used in booting early 4904 - packaging: fix build-depends on powerpc 4905 - tests: run spread tests on opensuse leap 15.1 4906 - strutil/shlex: fix ineffassign 4907 - cmd/snapd: ensure GOMAXPROCS is at least 2 4908 - cmd/snap-update-ns: detach unused mount points 4909 - gadget: record gadget root directory used during positioning 4910 - tests: force removal to prevent restore fails when directory 4911 doesn't exist on lp-1801955 test 4912 - overlord: implement store switch remodeling 4913 - tests: stop using ! for naive negation in shell scripts 4914 - snap,store,daemon,client: send new "Snap-Client-User-Agent" header 4915 in Search() 4916 - osutil: now that we require golang-1.10, use user.LookupGroup() 4917 - spread.yaml,tests: change MATCH and REBOOT to cmds 4918 - packaging/fedora: force external linker to ensure static linking 4919 and -extldflags use 4920 - timings: tweak the conditional for ensure timings 4921 - timings: always store ensure timings as long as they have an 4922 associated change 4923 - cmd/snap: tweak the output of snap debug timings --ensure=... 4924 - overlord/devicestate: introduce remodel kinds and 4925 contextsregistrationContext: 4926 - snaptest: add helper for mocking snap with contents 4927 - snapstate: allow removal of non-model kernels 4928 - tests: change strace parameters on snap-run test to avoid the test 4929 gets stuck 4930 - gadget: keep track of the index where structure content was 4931 defined 4932 - cmd/snap-update-ns: rename leftover ctx to upCtx 4933 - tests: add "not" command 4934 - spread.yaml: use "snap connections" in debug 4935 - tests: fix how strings are matched on auto-refresh-retry test 4936 - spread-shellcheck: add support for variants and environment 4937 - gadget: helper for shifting structure start position 4938 - cmd/snap-update-ns: add several TODO comments 4939 - cmd/snap-update-ns: rename ctx to upCtx 4940 - spread.yaml: make HOST: usage shellcheck-clean 4941 - overlord/snapstate, daemon: snapstate.Switch now takes a 4942 RevisionOption 4943 - tests: add mountinfo-tool 4944 - many: make snapstate.Update take *RevisionOptions instead of chan, 4945 rev 4946 - tests/unit/spread-shellcheck: temporary workaround for SC2251 4947 - daemon: refactor user ops to api_users 4948 - cmd/snap, tests: refactor info to unify handling of 'direct' snaps 4949 - cmd/snap-confine: combine sc_make_slave_mount_ns into caller 4950 - cmd/snap-update-ns: use "none" for propagation changes 4951 - cmd/snap-confine: don't pass MS_SLAVE along with MS_BIND 4952 - cmd/snap, api, snapstate: implement "snap remove --purge" 4953 - tests: new hotplug test executed on ubuntu core 4954 - tests: running tests on fedora 30 4955 - gadget: offset-write: fix validation, calculate absolute position 4956 - data/selinux: allow snap-confine to do search on snappy_var_t 4957 directories 4958 - daemon, o/snapstate, store: support for installing from cohorts 4959 - cmd/snap-confine: do not mount over non files/directories 4960 - tests: validates snapd from ppa 4961 - overlord/configstate: don't panic on invalid configuration 4962 - gadget: improve device lookup, add helper for mount point lookup 4963 - cmd/snap-update-ns: add tests for executeMountProfileUpdate 4964 - overlord/hookstate: don't run handler unless hooksup.Always 4965 - cmd/snap-update-ns: allow changing mount propagation 4966 - systemd: workaround systemctl show quirks on older systemd 4967 versions 4968 - cmd/snap: allow option descriptions to start with the command 4969 - many: introduce a gadget helper for locating device matching given 4970 structure 4971 - cmd/snap-update-ns: fix golint complaints about variable names 4972 - cmd/snap: unit tests for debug timings 4973 - testutil: support sharing-related mount flags 4974 - packaging/fedora: Merge changes from Fedora Dist-Git and drop EOL 4975 Fedora releases 4976 - cmd/snap: support for --ensure argument for snap debug timings 4977 - cmd,sandbox: tweak seccomp version info handling 4978 - gadget: record sector size in positioned volume 4979 - tests: make create-user test support managed devices 4980 - packaging: build empty package on powerpc 4981 - overlord/snapstate: perform hard refresh check 4982 - gadget: add volume level update checks 4983 - cmd/snap: mangle descriptions that have indent > terminal width 4984 - cmd/snap-update-ns: rename applyFstab to executeMountProfileUpdate 4985 - cmd/snap-confine: unshare per-user mount ns once 4986 - tests: retry govendor sync 4987 - tests: avoid removing snaps which are cached to speed up the 4988 prepare on boards 4989 - tests: fix how the base snap are deleted when there are multiple 4990 to deleted on reset 4991 - cmd/snap-update-ns: merge apply functions 4992 - many: introduce assertstest.SigningAccounts and AddMany test 4993 helpers 4994 - interfaces: special-case "snapd" in sanitizeSlotReservedForOS* 4995 helpers 4996 - cmd/snap-update-ns: make apply{User,System}Fstab identical 4997 - gadget: introduce checkers for sanitizing structure updates 4998 - cmd/snap-update-ns: move apply{Profile,{User,System}Fstab} to same 4999 file 5000 - overlord/devicestate: introduce registrationContext 5001 - cmd/snap-update-ns: add no-op load/save current user profile logic 5002 - devicestate: set "new-model" on the remodel change 5003 - devicestate: use deviceCtx in checkGadgetOrKernel 5004 - many: use a fake assertion model in the device contexts for tests 5005 - gadget: fix handling of positioning constrains for structures of 5006 MBR role 5007 - snap-confine: improve error when running on a not /home homedir 5008 - devicestate: make Remodel() return a state.Change 5009 - many: make which store to use contextualThis reworks 5010 snapstate.Store instead of relying solely on DeviceContext, 5011 because: 5012 - tests: enable tests on centos 7 again 5013 - interfaces: add login-session-control interface 5014 - tests: extra debug for snapshot-basic test 5015 - overlord,overlord/devicestate: do without GadgetInfo/KernelInfo in 5016 devicestate 5017 - gadget: more validation checks for legacy MBR structure type & 5018 role 5019 - osutil: fix TestReadBuildGo test in sbuild 5020 - data: update XDG_DATA_DIRS via the systemd environment.d mechanism 5021 too 5022 - many: do without device state/assertions accessors based on state 5023 only outside of devicestate/tests 5024 - interfaces/dbus: fix unit tests when default snap mount dir is not 5025 /snap 5026 - tests: add security-seccomp to verify seccomp with arg filtering 5027 - snapshotstate: disable automatic snapshots on core for now 5028 - snapstate: auto-install snapd when needed 5029 - overlord/ifacestate: update static attributes of "content" 5030 interface 5031 - interfaces: add support for the snapd snap in the dbus backend* 5032 - overlord/snapstate: tweak autorefresh logic if network is not 5033 available 5034 - snapcraft: also include ld.so.conf from libc in the snapcraft.yml 5035 - snapcraft.yaml: fix links ld-linux-x86-64.so.2/ld64.so.2 5036 - overlord: pass a DeviceContext to the checkSnap implementations 5037 - daemon: add RootOnly flag to commands 5038 - many: make access to the device model assertion etc contextual 5039 via a DeviceCtx hook/DeviceContext interface 5040 - snapcraft.yaml: include libc6 in snapd 5041 - tests: reduce snapcraft leftovers from PROJECT_PATH, temp disable 5042 centos 5043 - overlord: make the store context composably backed by separate 5044 backends for device asserts/info etc. 5045 - snapstate: revert "overlord/snapstate: remove PlugsOnly" 5046 - osutil,cmdutil: move CommandFromCore and make it use the snapd 5047 snap (if available) 5048 - travis: bump Go version to 1.10.x 5049 - cmd/snap-update-ns: remove instanceName argument from applyProfile 5050 - gadget: embed volume in positioned volume, rename fields 5051 - osutil: use go build-id when no gnu build-id is available 5052 - snap-seccomp: add 4th field to version-info for golang-seccomp 5053 features 5054 - cmd/snap-update-ns: merge computeAndSaveSystemChanges into 5055 applySystemFstab 5056 - cmd/snap, client, daemon, store: create-cohort 5057 - tests: give more time until nc returns on appstream test 5058 - tests: run spread tests on ubuntu 19.04 5059 - gadget: layout, smaller fixes 5060 - overlord: update static attrs when reloading connections 5061 - daemon: verify snap instructions for multi-snap requests 5062 - overlord/corecfg: make expiration of automatic snapshots 5063 configurable (4/4) 5064 - cmd/snap-update-ns: pass MountProfileUpdate to 5065 apply{System,User}Fstab 5066 - snap: fix interface bindings on implicit hooks 5067 - tests: improve how snaps are cached 5068 - cmd/snap-update-ns: formatting tweaks 5069 - data/selinux: policy tweaks 5070 - cmd/snap-update-ns: move locking to the common layer 5071 - overlord: use private YAML inside several tests 5072 - cmd/snap, store, image: support for cohorts in "snap download" 5073 - overlord/snapstate: add timings to critical task handlers and the 5074 backend 5075 - cmd: add `snap debug validate-seed <path>` cmd 5076 - state: add possible error return to TaskSet.Edge() 5077 - snap-seccomp: use username regex as defined in osutil/user.go 5078 - osutil: make IsValidUsername public and fix regex 5079 - store: serialize the acquisition of device sessions 5080 - interfaces/builtin/desktop: fonconfig v6/v7 cache handling on 5081 Fedora 5082 - many: move Device/SetDevice to devicestate, start of making them 5083 pluggable in storecontext 5084 - overlord/snapstate: remove PlugsOnly 5085 - interfaces/apparmor: allow running /usr/bin/od 5086 - spread: add qemu:fedora-29-64 5087 - tests: make test parallel-install-interfaces work for boards with 5088 pre-installed snaps 5089 - interfaces/builtin/intel_mei: fix /dev/mei* AppArmor pattern 5090 - spread.yaml: add qemu:centos-7-64 5091 - overlord/devicestate: extra measurements related to 5092 populateStateFromSeed 5093 - cmd/snap-update-ns: move Assumption to {System,User}ProfileUpdate 5094 - cmd/libsnap: remove fringe error function 5095 - gadget: add validation of cross structure overlap and offset 5096 writes 5097 - cmd/snap-update-ns: refactor of profile application (3/N) 5098 - data/selinux: tweak the policy for runuser and s-c, interpret 5099 audit entries 5100 - tests: fix spaces issue in the base snaps names to remove during 5101 reset phase 5102 - tests: wait for man db cache is updated before after install snapd 5103 on Fedora 5104 - tests: extend timeout of sbuild test 5105 5106 * Fri Jun 21 2019 Michael Vogt <mvo@ubuntu.com> 5107 - New upstream release 2.39.3 5108 - daemon: increase `shutdownTimeout` to 25s to deal with slow HW 5109 - spread: run tests against openSUSE 15.1 5110 - data/selinux: fix policy for snaps with bases and classic snaps 5111 5112 * Wed Jun 05 2019 Michael Vogt <mvo@ubuntu.com> 5113 - New upstream release 2.39.2 5114 - debian: rework how we run autopkgtests 5115 - interfaces/docker-support: add overlayfs accesses for ubuntu core 5116 - data/selinux: permit init_t to remount snappy_snap_t 5117 - strutil/shlex: fix ineffassign 5118 - packaging: fix build-depends on powerpc 5119 5120 * Wed May 29 2019 Michael Vogt <mvo@ubuntu.com> 5121 - New upstream release 2.39.1 5122 - spread: enable Fedora 30 5123 - cmd/snap-confine, data/selinux: cherry pick Fedora 30 fixes 5124 - tests/unit/spread-shellcheck: temporary workaround for SC2251 5125 - packaging: build empty package on powerpc 5126 - interfaces: special-case "snapd" in sanitizeSlotReservedForOS* 5127 helper 5128 - cmd/snap: mangle descriptions that have indent > terminal width 5129 - cmd/snap-confine: unshare per-user mount ns once 5130 - tests: avoid adding spaces to the base snaps names 5131 - systemd: workaround systemctl show quirks on older systemd 5132 versions 5133 5134 * Mon May 06 2019 Neal Gompa <ngompa13@gmail.com> - 2.39-1 5135 - Release 2.39 to Fedora (RH#1699087) 5136 - Enable basic SELinux integration 5137 - Fix changelog entry to fix build for EPEL 7 5138 - Exclude bash and POSIX sh shebangs from mangling (LP:1824158) 5139 - Drop some old pre Fedora 28 logic 5140 5141 * Fri May 03 2019 Michael Vogt <mvo@ubuntu.com> 5142 - New upstream release 2.39 5143 - overlord/ifacestate: update static attributes of "content" 5144 interface 5145 - data/selinux: tweak the policy for runuser and s-c, interpret 5146 audit entries 5147 - snapshotstate: disable automatic snapshots on core for now 5148 - overlord/corecfg: make expiration of automatic snapshots 5149 configurable 5150 - snapstate: auto-install snapd when needed 5151 - interfaces: add support for the snapd snap in the dbus backend 5152 - overlord/snapstate: tweak autorefresh logic if network is not 5153 available 5154 - interfaces/apparmor: allow running /usr/bin/od 5155 - osutil,cmdutil: move CommandFromCore and make it use the snapd 5156 snap (if available) 5157 - daemon: also verify snap instructions for multi-snap requests 5158 - data/selinux: allow snap-confine to mount on top of bin 5159 - data/selinux: auto transition /var/snap to snappy_var_t 5160 - cmd: add `snap debug validate-seed <path>` cmd 5161 - interfaces/builtin/desktop: fonconfig v6/v7 cache handling on 5162 Fedora 5163 - interfaces/builtin/intel_mei: fix /dev/mei* AppArmor pattern 5164 - tests: make snap-connections test work on boards with snaps pre- 5165 installed 5166 - tests: check for /snap/core16/current in core16-provided-by-core 5167 - tests: run livepatch test on 18.04 as well 5168 - devicestate: deal correctly with the "required" flag on Remodel 5169 - snapstate,state: add TaskSet.AddAllWithEdges() and use in doUpdate 5170 - snapstate: add new NoReRefresh flag and use in Remodel() 5171 - many: allow core as a fallback for core16 5172 - snapcraft: build static fontconfig in the snapd snap 5173 - cmd/snap-confine: remove unused sc_open_snap_{update,discard}_ns 5174 - data/selinux: allow snapd to execute runuser under snappy_t 5175 - spread, tests: do not leave mislabeled files in restorecon test, 5176 attempt to catch similar files 5177 - interfaces: cleanup internal tool lookup in system-key 5178 - many: move auth.AuthContext to store.DeviceAndAuthContext, the 5179 implemention to a separate storecontext packageThis: 5180 - overlord/devicestate: measurements around ensure and related tasks 5181 - cmd: tweak internal tool lookup to accept more possible locations 5182 - overlord/snapstate,snapshotstate: create snapshot on snap removal 5183 - tests: run smoke tests on (almost) pristine systems 5184 - tests: system disable ssh for config defaults in gadget 5185 - cmd/debug: integrate new task timings with "snap debug timings" 5186 - tests/upgrade/basic, packaging/fedoar: restore SELinux context of 5187 /var/cache/fontconfig, patch pre-2.39 mount units 5188 - image: simplify prefer local logic and fixes 5189 - tests/main/selinux-lxd: make sure LXD from snaps works cleanly 5190 with enforcing SELinux 5191 - tests: deny ioctl - TIOCSTI with garbage in high bits 5192 - overlord: factor out mocking of device service and gadget w. 5193 prepare-device for registration tests 5194 - data/selinux, tests/main/selinux-clean: fine tune the policy, make 5195 sure that no denials are raised 5196 - cmd/libsnap,osutil: fix parsing of mountinfo 5197 - ubuntu: disable -buildmode=pie on armhf to fix memory issue 5198 - overlord/snapstate: inhibit refresh for up to a week 5199 - cmd/snap-confine: prevent cwd restore permission bypass 5200 - overlord/ifacestate: introduce HotplugKey type use short key in 5201 change summaries 5202 - many: make Remodel() download everything first before installing 5203 - tests: fixes discovered debugging refresh-app-awareness 5204 - overlord/snapstate: track time of postponed refreshes 5205 - snap-confine: set rootfs_dir in sc_invocation struct 5206 - tests: run create-user on core devices 5207 - boot: add flag file "meta/force-kernel-extraction" 5208 - tests: add regression test for systemctl race fix 5209 - overlord/snapshotstate: helpers for snapshot expirations 5210 - overlord,tests: perform soft refresh check in doInstall 5211 - tests: enable tests that write /etc/{hostname,timezone} on core18 5212 - overlord/ifacestate: implement String() method of 5213 HotplugDeviceInfo for better logs/messages 5214 - cmd/snap-confine: move ubuntu-core fallback checks 5215 - testutil: fix MockCmd for shellcheck 0.5 5216 - snap, gadget: move gadget read/validation into separate package, 5217 tweak naming 5218 - tests: split travis spread execution in 2 jobs for ubuntu and non 5219 ubuntu systems 5220 - testutil: make mocked command work with shellcheck from snaps 5221 - packaging/fedora, tests/upgrade/basic: patch existing mount units 5222 with SELinux context on upgrade 5223 - metautil, snap: extract yaml value normalization to a helper 5224 package 5225 - tests: use apt via eatmydata 5226 - dirs,overlord/snapstate: add Soft and Hard refresh checks 5227 - cmd/snap-confine: allow using tools from snapd snap 5228 - cmd,interfaces: replace local helpers with cmd.InternalToolPath 5229 - tweak: fix "make hack" on Fedora 5230 - snap: add validation of gadget.yaml 5231 - cmd/snap-update-ns: refactor of profile application 5232 - cmd/snap,client,daemon,store: layout and sanity tweaks for 5233 find/search options 5234 - tests: add workaround for missing cache reset on older snapd 5235 - interfaces: deal with the snapd snap correctly for apparmor 2.13 5236 - release-tools: add debian-package-builder 5237 - tests: enable opensuse 15 and add force-resolution installing 5238 packages 5239 - timings: AddTag helper 5240 - testutil: run mocked commands through shellcheck 5241 - overlord/snapshotstate: support auto flag 5242 - client, daemon, store: search by common-id 5243 - tests: all the systems for google backend with 6 workers 5244 - interfaces: hotplug nested vm test, updated serial-port interface 5245 for hotplug. 5246 - sanity: use proper SELinux context when mounting squashfs 5247 - cmd/libsnap: neuter variables in cleanup functions 5248 - interfaces/adb-support: account for hubs on sysfs path 5249 - interfaces/seccomp: regenerate changed profiles only 5250 - snap: reject layouts to /lib/{firmware,modules} 5251 - cmd/snap-confine, packaging: support SELinux 5252 - selinux, systemd: support mount contexts for snap images 5253 - interfaces/builtin/opengl: allow access to Tegra X1 5254 - cmd/snap: make 'snap warnings' output yamlish 5255 - tests: add check to detect a broken snap on reset 5256 - interfaces: add one-plus devices to adb-support 5257 - cmd: prevent umask from breaking snap-run chain 5258 - tests/lib/pkgdb: allow downgrade when installing packages in 5259 openSUSE 5260 - cmd/snap-confine: use fixed private tmp directory 5261 - snap: tweak parsing errors of gadget updates 5262 - overlord/ifacemgr: basic measurements 5263 - spread: refresh metadata on openSUSE 5264 - cmd/snap-confine: pass sc_invocation instead of numerous args 5265 around 5266 - snap/gadget: introduce volume update info 5267 - partition,bootloader: rename 'partition' package to 'bootloader' 5268 - interfaces/builtin: add dev/pts/ptmx access to docker_support 5269 - tests: restore sbuild test 5270 - strutil: make SplitUnit public, allow negative numbers 5271 - overlord/snapstate,: retry less for auto-stuff 5272 - interfaces/builtin: add add exec "/" to docker-support 5273 - cmd/snap: fix regression of snap saved command 5274 - cmd/libsnap: rename C enum for feature flag 5275 - cmd: typedef mountinfo structures 5276 - tests/main/remodel: clean up before reverting the state 5277 - cmd/snap-confine: umount scratch dir using UMOUNT_NOFOLLOW 5278 - timings: add new helpers, Measurer interface and DurationThreshold 5279 - cmd/snap-seccomp: version-info subcommand 5280 - errortracker: fix panic in Report if db cannot be opened 5281 - sandbox/seccomp: a helper package wrapping calls to snap-seccomp 5282 - many: add /v2/model API, `snap remodel` CLI and spread test 5283 - tests: enable opensuse tumbleweed back 5284 - overlord/snapstate, store: set a header when auto-refreshing 5285 - data/selinux, tests: refactor SELinux policy, add minimal tests 5286 - spread: restore SELinux context when we mess with system files 5287 - daemon/api: filter connections with hotplug-gone=true 5288 - daemon: support returning assertion information as JSON with the 5289 "json" query parameter 5290 - cmd/snap: hide 'interfaces' command, show deprecation notice 5291 - timings: base API for recording timings in state 5292 - cmd/snap-confine: drop unused dependency on libseccomp 5293 - interfaces/apparmor: factor out test boilerplate 5294 - daemon: extract assertions api endpoint implementation into 5295 api_asserts.go 5296 - spread.yaml: bump delta reference 5297 - cmd/snap-confine: track per-app and per-hook processes 5298 - cmd/snap-confine: make sc_args helpers const-correct 5299 - daemon: move a function that was between an other struct and its 5300 methods 5301 - overlord/snapstate: fix restoring of "old-current" revision config 5302 in undoLinkSnap 5303 - cmd/snap, client, daemon, ifacestate: show a leading attribute of 5304 a connection 5305 - cmd/snap-confine: call sc_should_use_normal_mode once 5306 - cmd/snap-confine: populate enter_non_classic_execution_environment 5307 - daemon: allow downloading snaps blobs via .../file 5308 - cmd/snap-confine: introduce sc_invocation 5309 - devicestate: add initial Remodel support 5310 - snap: remove obsolete license-* fields in the yaml 5311 - cmd/libsnap: add cgroup-pids-support module 5312 - overlord/snapstate/backend: make LinkSnap clean up more 5313 - snapstate: only keep 2 snaps on classic 5314 - ctlcmd/tests: tests tweaks (followup to #6322) 5315 5316 * Tue Apr 23 2019 Robert-André Mauchin <zebob.m@gmail.com> - 2.38-3 5317 - Rebuilt for fix in golang-github-seccomp-libseccomp-golang 5318 5319 * Fri Apr 05 2019 Neal Gompa <ngompa13@gmail.com> - 2.38-2 5320 - Readd snapd-login-service Provides for gnome-software for F29 and older 5321 5322 * Thu Mar 21 2019 Neal Gompa <ngompa13@gmail.com> - 2.38-1 5323 - Release 2.38 to Fedora (RH#1691296) 5324 - Switch to officially released main source tarball 5325 - Drop obsolete snapd-login-service Provides 5326 5327 * Thu Mar 21 2019 Michael Vogt <mvo@ubuntu.com> 5328 - New upstream release 2.38 5329 - overlord/snapstate,: retry less for auto-stuff 5330 - cmd/snap: fix regression of snap saved command 5331 - interfaces/builtin: add dev/pts/ptmx access to docker_support 5332 - overlord/snapstate, store: set a header when auto-refreshing 5333 - interfaces/builtin: add add exec "/" to docker-support 5334 - cmd/snap, client, daemon, ifacestate: show a leading attribute of 5335 a connection 5336 - interface: avahi-observe: Fixing socket permissions on 4.15 5337 kernels 5338 - tests: check that apt works before using it 5339 - apparmor: support AppArmor 2.13 5340 - snapstate: restart into the snapd snap on classic 5341 - overlord/snapstate: during refresh, re-refresh on epoch bump 5342 - cmd, daemon: split out the common bits of mapLocal and mapRemote 5343 - cmd/snap-confine: chown private /tmp to root.root 5344 - cmd/snap-confine: drop uid from random /tmp name 5345 - overlord/hookstate: apply pending transaction changes onto 5346 temporary configuration for snapctl get 5347 - cmd/snap: `snap connections` command 5348 - interfaces/greengrass_support: update accesses for GGC 1.8 5349 - cmd/snap, daemon: make the connectivity check use GET 5350 - interfaces/builtin,/udev: add spec support to disable udev + 5351 device cgroup and use it for greengrass 5352 - interfaces/intel-mei: small follow up tweaks 5353 - ifacestate/tests: fix/improve udev mon test 5354 - interfaces: add multipass-support interface 5355 - tests/main/high-user-handling: fix the test for Go 1.12 5356 - interfaces: add new intel-mei interface 5357 - systemd: decrease the checker counter before unlocking otherwise 5358 we can get spurious panics 5359 - daemon/tests: fix race in the disconnect conflict test 5360 - cmd/snap-confine: allow moving tasks to pids cgroup 5361 - tests: enable opensuse tumbleweed on spread 5362 - cmd/snap: fix `snap services` completion 5363 - ifacestate/hotplug: integration with udev monitor 5364 - packaging: build snapctl as a static binary 5365 - packaging/opensuse: move most logic to snapd.mk 5366 - overlord: fix ensure before slowness on Retry 5367 - overlord/ifacestate: fix migration of connections on upgrade from 5368 ubuntu-core 5369 - daemon, client, cmd/snap: debug GETs ask aspects, not actions 5370 - tests/main/desktop-portal-*: fix handling of python dependencies 5371 - interfaces/wayland: allow wayland server snaps function on classic 5372 too 5373 - daemon, client, cmd/snap: snap debug base-declaration 5374 - tests: run tests on opensuse leap 15.0 instead of 42.3 5375 - cmd/snap: fix error messages for snapshots commands if ID is not 5376 uint 5377 - interfaces/seccomp: increase filter precision 5378 - interfaces/network-manager: no peer label check for hostname1 5379 - tests: add a tests for xdg-desktop-portal integration 5380 - tests: not checking 'tracking channel' after refresh core on 5381 nested execution 5382 - tests: remove snapweb from tests 5383 - snap, wrappers: support StartTimeout 5384 - wrappers: Add an X-SnapInstanceName field to desktop files 5385 - cmd/snap: produce better output for help on subcommands 5386 - tests/main/nfs-support: use archive mode for creating fstab backup 5387 - many: collect time each task runs and display it with `snap debug 5388 timings <id>` 5389 - tests: add attribution to helper script 5390 - daemon: make ucrednetGet not loop 5391 - squashfs: unset SOURCE_DATE_EPOCH in the TestBuildDate test 5392 - features,cmd/libsnap: add new feature "refresh-app-awareness" 5393 - overlord: fix random typos 5394 - interfaces/seccomp: generate global seccomp profile 5395 - daemon/api: fix error case for disconnect conflict 5396 - overlord/snapstate: add some randomness to the catalog refresh 5397 - tests: disable trusty-proposed for now 5398 - tests: fix upgrade-from-2.15 with kernel 4.15 5399 - interfaces/apparmor: allow sending and receiving signals from 5400 ourselves 5401 - tests: split the test interfaces-many in 2 and remove snaps on 5402 restore 5403 - tests: use snap which takes 15 seconds to install on retryable- 5404 error test 5405 - packaging: avoid race in snapd.postinst 5406 - overlord/snapstate: discard mount namespace when undoing 1st link 5407 snap 5408 - cmd/snap-confine: allow writes to /var/lib/** 5409 - tests: stop catalog-update test for now 5410 - tests/main/auto-refresh-private: make sure to actually download 5411 with the expired macaroon 5412 - many: save media info when installing, show it when listing 5413 - userd: handle help urls which requires prepending XDG_DATA_DIRS 5414 - tests: fix NFS home mocking 5415 - tests: improve snaps-system-env test 5416 - tests: pre-cache core on core18 systems 5417 - interfaces/hotplug: renamed RequestedSlotSpec to ProposedSlot, 5418 removed Specification 5419 - debian: ensure leftover usr.lib.snapd.snap-confine is gone 5420 - image,cmd/snap,tests: introduce support for modern prepare-image 5421 --snap <snap>[=<channel>] 5422 - overlord/ifacestate: tweak logic for generating unique slot names 5423 - packaging: import debian salsa packaging work, add sbuild test and 5424 use in spead 5425 - overlord/ifacestate: hotplug-add-slot handler 5426 - image,cmd/snap: simplify --classic-arch to --arch, expose 5427 prepare-image 5428 - tests: run test snap as user in the smoke test 5429 - cmd/snap: tweak man output to have no doubled up .TP lines 5430 - cmd/snap, overlord/snapstate: silently ignore classic flag when a 5431 snap is strictly confined 5432 - snap-confine: remove special handling of /var/lib/jenkins 5433 - cmd/snap-confine: handle death of helper process 5434 - packaging: disable systemd environment generator on 18.04 5435 - snap-confine: fix classic snaps for users with /var/lib/* homedirs 5436 - tests/prepare: prevent console-conf from running 5437 - image: bootstrapToRootDir => setupSeed 5438 - image,cmd/snap,tests: introduce prepare-image --classic 5439 - tests: update smoke/sandbox test for armhf 5440 - client, daemon: introduce helper for querying snapd API for the 5441 list of slot/plug connections 5442 - cmd/snap-confine: refactor and cleanup of seccomp loading 5443 - snapstate, snap: allow update/switch requests with risk only 5444 channel to DTRT 5445 - interfaces: add network-manager-observe interface 5446 - snap-confine: increase locking timeout to 30s 5447 - snap-confine: fix incorrect "sanity timeout 3s" message 5448 - snap-confine: provide proper error message on sc_sanity_timeout 5449 - snapd,state: improve error message on state reading failure 5450 - interfaces/apparmor: deny inet/inet6 in snap-update-ns profile 5451 - snap: fix reexec from the snapd snap for classic snaps 5452 - snap: fix hook autodiscovery for parallel installed snaps 5453 - overlord/snapstate: format the refresh time for the log 5454 - cmd/snap-confine: add special case for Jenkins 5455 - snapcraft.yaml: fix XBuildDeb PATH for go-1.10 5456 - overlord/snapstate: validate instance names early 5457 - overlord/ifacestate: handler for hotplug-update-slot tasks 5458 - polkit: cast pid to uint32 to keep polkit happy for now 5459 - snap/naming: move various name validation helpers to separate 5460 package 5461 - tests: iterate getting journal logs to support delay on boards on 5462 daemon-notify test 5463 - cmd/snap: fix typo in cmd_wait.go 5464 - snap/channel: improve channel parsing 5465 - daemon, polkit: pid_t is signed 5466 - daemon: introduce /v2/connections snapd API endpoint 5467 - cmd/snap: small refactor of cmd_info's channel handling 5468 - overlord/snapstate: use an ad-hoc error when no results 5469 - cmd/snap: wrap "summary" better 5470 - tests: workaround missing go dependencies in debian-9 5471 - daemon: try to tidy up the icon stuff a little 5472 - interfaces: add display-control interface 5473 - snapcraft.yaml: fix snap building in launchpad 5474 - tests: update fedora 29 workers to speed up the whole testing time 5475 - interfaces: add u2f-devices interface and allow reading udev 5476 +power_supply:* in hardware-observe 5477 - cmd/snap-update-ns: save errno from strtoul 5478 - tests: interfaces tests normalization 5479 - many: cleanup golang.org/x/net/context 5480 - tests: add spread test for system dbus interface 5481 - tests: remove -o pipefail 5482 - interfaces: add block-devices interface 5483 - spread: enable upgrade suite on fedora 5484 - tests/main/searching: video section got renamed to photo-and-video 5485 - interfaces/home: use dac_read_search instead of dac_override with 5486 'read: all' 5487 - snap: really run the RunSuite 5488 - interfaces/camera: allow reading vendor/etc info from 5489 /run/udev/data/+usb:* 5490 - interfaces/dbus: be less strict about alternations for well-known 5491 names 5492 - interfaces/home: allow dac_override with 'read: 5493 all' 5494 - interfaces/pulseaudio: allow reading subdirectories of 5495 /etc/pulse 5496 - interfaces/system-observe: allow read on 5497 /proc/locks 5498 - run-checks: ensure we use go-1.10 if available 5499 - tests: get test-snapd-dbus-{provider,consumer} from the beta 5500 channel 5501 - interfaces/apparmor: mock presence of overlayfs root 5502 - spread: increase default kill-timeout to 30min 5503 - tests: simplify interfaces-contacts-service test 5504 - packaging/ubuntu: build with golang 1.10 5505 - ifacestate/tests: extra test for hotplug-connect handler 5506 - packaging: make sure that /var/lib/snapd/lib/glvnd is accounted 5507 for 5508 - overlord/snapstate/backend: call fontconfig helpers from the new 5509 'current' 5510 - kvm: load required kernel modules if necessary 5511 - cmd/snap: use a fake user for 'run' tests 5512 - tests: update systems for google sru backend 5513 - tests: fix install-snaps test by changing the snap info regex 5514 - interfaces: helpers for sorting plug/slot/connection refs 5515 - tests: moving core-snap-refresh-on-core test from main to nested 5516 suite 5517 - tests: fix daemon-notify test checking denials considering all the 5518 log lines 5519 - tests: skip lp-1802591 on "official" images 5520 - tests: fix listing tests to match "snap list --unicode=never" 5521 - debian: fix silly typo in the spread test invocation 5522 - interface: raw-usb: Adding ttyACM ttyACA permissions 5523 - tests: fix enable-disable-unit-gpio test on external boards 5524 - overlord/ifacestate: helper API to obtain the state of connections 5525 - tests: define new "tests/smoke" suite and use that for 5526 autopkgtests 5527 - cmd/snap-update-ns: explicitly check for return value from 5528 parse_arg_u 5529 - interfaces/builtin/opengl: allow access to NVIDIA VDPAU library 5530 - tests: auto-clean the test directory 5531 - cmd/snap: further tweak messaging; add a test 5532 - overlord/ifacestate: handler for hotplug-connect task 5533 - cmd/snap-confine: join freezer only after setting up user mount 5534 - cmd/snap-confine: don't preemptively create .mnt files 5535 - cmd/snap-update-ns: manually implement isspace 5536 - cmd/snap-update-ns: let the go parser know we are parsing -u 5537 - cmd/snap-discard-ns: fix name of user fstab files 5538 - snapshotstate: don't task.Log without the lock 5539 - tests: exclude some more slow tests from runs in autopkgtest 5540 - many: remove .user-fstab files from /run/snapd/ns 5541 - cmd/libsnap: pass --from-snap-confine when calling snap-update-ns 5542 as user 5543 - cmd/snap-update-ns: make freezer mockable 5544 - cmd/snap-update-ns: move XDG code to dedicated file 5545 - osutil: add helper for loading fstab from string 5546 - cmd/snap-update-ns: move existing code around, renaming some 5547 functions 5548 - overlord/configstate/configcore: support - and _ in cloud init 5549 field names 5550 - * cmd/snap-confine: use makedev instead of MKDEV 5551 - tests: review/fix the autopkgtest failures in disco 5552 - overlord: drop old v1 store api support from managers test 5553 - tests: new test for snapshots with more than 1 user 5554 5555 * Thu Feb 28 2019 Neal Gompa <ngompa13@gmail.com> - 2.37.4-2 5556 - Fix accidentally corrupted changelog merge 5557 5558 * Thu Feb 28 2019 Zygmunt Bazyli Krynicki <me@zygoon.pl> - 2.37.4-1 5559 - Release 2.37.4 to Fedora (RH#1683795) 5560 - Fix RPM macro in changelog (rpmlint) 5561 - Fix non-break space in changelog (rpmlint) 5562 5563 * Wed Feb 27 2019 Michael Vogt <mvo@ubuntu.com> 5564 - New upstream release 2.37.4 5565 - squashfs: unset SOURCE_DATE_EPOCH in the TestBuildDate test 5566 - overlord/ifacestate: fix migration of connections on upgrade from 5567 ubuntu-core 5568 - tests: fix upgrade-from-2.15 with kernel 4.15 5569 - interfaces/seccomp: increase filter precision 5570 - tests: remove snapweb from tests 5571 5572 * Tue Feb 19 2019 Zygmunt Bazyli Krynicki <me@zygoon.pl> - 2.37.3-1 5573 - Release 2.37.3 to Fedora (RH#1678603) 5574 5575 * Mon Feb 18 2019 Michael Vogt <mvo@ubuntu.com> 5576 - New upstream release 2.37.3 5577 - interfaces/seccomp: generate global seccomp profile 5578 - overlord/snapstate: add some randomness to the catalog refresh 5579 - tests: add upgrade test from 2.15.2ubuntu1 -> current snapd 5580 - snap-confine: fix fallback to ubuntu-core 5581 - packaging: avoid race in snapd.postinst 5582 - overlord/snapstate: discard mount namespace when undoing 1st link 5583 snap 5584 - cmd/snap-confine: allow writes to /var/lib/** again 5585 - tests: stop catalog-update/apt-hooks test until the catlog refresh 5586 is randomized 5587 - debian: ensure leftover usr.lib.snapd.snap-confine is gone 5588 5589 * Wed Feb 06 2019 Neal Gompa <ngompa13@gmail.com> - 2.37.2-1 5590 - Release 2.37.2 to Fedora (RH#1667460) 5591 5592 * Wed Feb 06 2019 Michael Vogt <mvo@ubuntu.com> 5593 - New upstream release 2.37.2 5594 - cmd/snap, overlord/snapstate: silently ignore classic flag when a 5595 snap is strictly confined 5596 - snap-confine: remove special handling of /var/lib/jenkins 5597 - cmd/snap-confine: handle death of helper process gracefully 5598 - snap-confine: fix classic snaps for users with /var/lib/* homedirs 5599 like jenkins/postgres 5600 - packaging: disable systemd environment generator on 18.04 5601 - tests: update smoke/sandbox test for armhf 5602 - cmd/snap-confine: refactor and cleanup of seccomp loading 5603 - snap-confine: increase locking timeout to 30s 5604 - snap-confine: fix incorrect "sanity timeout 3s" message 5605 - snap: fix hook autodiscovery for parallel installed snaps 5606 - tests: iterate getting journal logs to support delay on boards on 5607 daemon-notify test 5608 - interfaces/apparmor: deny inet/inet6 in snap-update-ns profile 5609 - interfaces: add u2f-devices interface 5610 5611 * Sun Feb 03 2019 Fedora Release Engineering <releng@fedoraproject.org> - 2.36.3-2 5612 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild 5613 5614 * Tue Jan 29 2019 Michael Vogt <mvo@ubuntu.com> 5615 - New upstream release 2.37.1 5616 - cmd/snap-confine: add special case for Jenkins 5617 - tests: workaround missing go dependencies in debian-9 5618 - daemon, polkit: pid_t is signed 5619 - interfaces: add display-control interface 5620 - interfaces: add block-devices interface 5621 - tests/main/searching: video section got renamed to photo-and-video 5622 - interfaces/camera: allow reading vendor/etc info from 5623 /run/udev/data/+usb 5624 - interfaces/dbus: be less strict about alternations for well-known 5625 names 5626 - interfaces/home: allow dac_read_search with 'read: all' 5627 - interfaces/pulseaudio: allow reading subdirectories of 5628 /etc/pulse 5629 - interfaces/system-observe: allow read on 5630 /proc/locks 5631 - tests: get test-snapd-dbus-{provider,consumer} from the beta 5632 channel 5633 - interfaces/apparmor: mock presence of overlayfs root 5634 - packaging/{fedora,opensuse,ubuntu}: add /var/lib/snapd/lib/glvnd 5635 5636 * Wed Jan 16 2019 Michael Vogt <mvo@ubuntu.com> 5637 - New upstream release 2.37 5638 - snapd: fix race in TestSanityFailGoesIntoDegradedMode test 5639 - cmd: fix snap-device-helper to deal correctly with hooks 5640 - tests: various fixes for external backend 5641 - interface: raw-usb: Adding ttyACM[0-9]* as many serial devices 5642 have device node /dev/ttyACM[0-9] 5643 - tests: fix enable-disable-unit-gpio test on external boards 5644 - tests: define new "tests/smoke" suite and use that for 5645 autopkgtests 5646 - interfaces/builtin/opengl: allow access to NVIDIA VDPAU 5647 library 5648 - snapshotstate: don't task.Log without the lock 5649 - overlord/configstate/configcore: support - and _ in cloud init 5650 field names 5651 - cmd/snap-confine: use makedev instead of MKDEV 5652 - tests: review/fix the autopkgtest failures in disco 5653 - systemd: allow only a single daemon-reload at the same time 5654 - cmd/snap: only auto-enable unicode to a tty 5655 - cmd/snap: right-align revision and size in info's channel map 5656 - dirs, interfaces/builtin/desktop: system fontconfig cache path is 5657 different on Fedora 5658 - tests: fix "No space left on device" issue on amazon-linux 5659 - store: undo workaround for timezone-less released-at 5660 - store, snap, cmd/snap: channels have released-at 5661 - snap-confine: fix incorrect use "src" var in mount-support.c 5662 - release: support probing SELinux state 5663 - release-tools: display self-help 5664 - interface: add new `{personal,system}-files` interface 5665 - snap: give Epoch an Equal method 5666 - many: remove unused interface code 5667 - interfaces/many: use 'unsafe' with docker-support change_profile 5668 rules 5669 - run-checks: stop running HEAD of staticcheck 5670 - release: use sync.Once around lazy intialized state 5671 - overlord/ifacestate: include interface name in the hotplug- 5672 disconnect task summary 5673 - spread: show free space in debug output 5674 - cmd/snap: attempt to restore SELinux context of snap user 5675 directories 5676 - image: do not write empty etc/cloud 5677 - tests: skip snapd snap on reset for core systems 5678 - cmd/snap-discard-ns: fix umount(2) typo 5679 - overlord/ifacestate: hotplug-remove-slot task handler 5680 - overlord/ifacestate: handler for hotplug-disconnect task 5681 - ifacestate/hotplug: updateDevice helper 5682 - tests: reset snapd state on tests restore 5683 - interfaces: return security setup errors 5684 - overlord: make InstallMany work like UpdateMany, issuing a single 5685 request to get candidates 5686 - systemd/systemd.go: add missing tests for systemd.IsActive 5687 - overlord/ifacestate: addHotplugSeqWaitTask helper 5688 - cmd/snap-confine: refactor call to snap-update-ns --user-mounts 5689 - tests: new backend used to run upgrade test suite 5690 - travis: short circuit failures in static and unit tests travis job 5691 - cmd: automatically fix localized <option>s to <option> 5692 - overlord/configstate,features: expose features to snapd tools 5693 - selinux: package to query SELinux status and verify/restore file 5694 contexts 5695 - wrappers: use new systemd.IsActive in core18 early boot 5696 - cmd: add tests for lintArg and lintDesc 5697 - httputil: retry on temporary net errors 5698 - cmd/snap-confine: remove unused sc_discard_preserved_mount_ns 5699 - wrappers: only restart service in core18 when they are active 5700 - overlord/ifacestate: helpers for serializing hotplug changes 5701 - packaging/{fedora,opensuse}: own /var/lib/snapd/cookie 5702 - systemd: start snapd.autoimport.service in --no-block mode 5703 - data/selinux: fix syntax error in definition of snappy_admin 5704 interface 5705 - snap/info: bind global plugs/slots to implicit hooks 5706 - cmd/snap-confine: remove SC_NS_MNT_FILE 5707 - spread: record each tests/upgrade job 5708 - osutil: do not import dirs 5709 - cmd/snap-confine: fix typo "a pipe" 5710 - tests: make security-device-cgroups-{devmode,jailmode} work on arm 5711 devices 5712 - tests: force test-snapd-daemon-notify exit 0 when the interface is 5713 not connected 5714 - overlord/snapstate: run 'remove' hook before 'auto-disconnect' 5715 - centos: enable SELinux support on CentOS 7 5716 - apparmor: allow hard link to snap-specific semaphore files 5717 - tests/lib/pkgdb: disable weak deps on Fedora 5718 - release: detect too old apparmor_parser 5719 - tests: improve how the log is checked to see if the system is 5720 waiting for a reboot 5721 - cmd, dirs, interfaces/apparmor: update distro identification to 5722 support ID="archlinux" 5723 - spread, tests: add Fedora 29 5724 - cmd/snap-confine: refactor calling snapd tools into helper module 5725 - apparmor: allow snap-update-ns access to common devices 5726 - cmd/snap-confine: capture initialized per-user mount ns 5727 - tests: reduce verbosity around package installation 5728 - data: set KillMode=process for snapd 5729 - cmd/snap: handle DNS error gracefully 5730 - spread, tests: use checkpoints when dumping audit log 5731 - tests/lib/prepare: make sure that SELinux context of repacked core 5732 snap is controlled 5733 - testutils: split checkers, tweak tests 5734 - tests: fix for tests test-*-cgroup 5735 - spread: show AVC audits when debugging, start auditd on Fedora 5736 - spread: drop Fedora 27, add Fedora 29 5737 - tests/lib/reset: restore context of removed snapd directories 5738 - testutil: add File{Present,Absent} checkers 5739 - snap: add new `snap run --trace-exec` 5740 - tests: fix for failover test on how logs are checked 5741 - snapctl: add "services" 5742 - overlord/snapstate: use file timestamp to initialize timer 5743 - cmd/libsnap: introduce and use sc_strdup 5744 - interfaces: let NM access ifindex/ifupdown files 5745 - overlord/snapstate: on refresh, check new rev can read current 5746 - client, store: don't use store from client (use client from store) 5747 - tests/main/parallel-install-store: verify installation of more 5748 than one instance at a time 5749 - overlord: don't write system key if security setup fails 5750 - packaging/fedora/snapd.spec: fix bogus date in changelog 5751 - snapstate: update fontconfig caches on install 5752 - interfaces/apparmor/backend.go:411:38: regular expression does not 5753 contain any meta characters (SA6004) 5754 - asserts/header_checks.go:199:35: regular expression does not 5755 contain any meta characters (SA6004) 5756 - run staticcheck every time :-) 5757 - tests/lib/systemd-escape/main.go:46:14: printf-style function with 5758 dynamic first argument and no further arguments should use print- 5759 style function instead (SA1006) 5760 - tests/lib/fakestore/cmd/fakestore/cmd_run.go:66:15: the channel 5761 used with signal.Notify should be buffered (SA1017) 5762 - tests/lib/fakedevicesvc/main.go:55:15: the channel used with 5763 signal.Notify should be buffered (SA1017) 5764 - spdx/parser.go:30:1: only the first constant has an explicit type 5765 (SA9004) 5766 - overlord/snapstate/snapmgr.go:553:21: printf-style function with 5767 dynamic first argument and no further arguments should use print- 5768 style function instead (SA1006) 5769 - overlord/patch/patch3.go:44:70: printf-style function with dynamic 5770 first argument and no further arguments should use print-style 5771 function instead (SA1006) 5772 - cmd/snap/cmd_advise.go:200:2: empty branch (SA9003) 5773 - osutil/udev/netlink/conn.go:120:5: ineffective break statement. 5774 Did you mean to break out of the outer loop? (SA4011) 5775 - daemon/api.go:992:22: printf-style function with dynamic first 5776 argument and no further arguments should use print-style function 5777 instead (SA1006) 5778 - cmd/snapd/main.go:94:5: ineffective break statement. Did you mean 5779 to break out of the outer loop? (SA4011) 5780 - cmd/snap/cmd_userd.go:73:15: the channel used with signal.Notify 5781 should be buffered (SA1017) 5782 - cmd/snap/cmd_help.go:102:7: io.Writer.Write must not modify the 5783 provided buffer, not even temporarily (SA1023) 5784 - release: probe apparmor features lazily 5785 - overlord,daemon: mock security backends for testing 5786 - cmd/libsnap: move apparmor-support to libsnap 5787 - cmd: drop cruft from snap-discard-ns build rules 5788 - cmd/snap-confine: use snap-discard-ns ns to discard stale 5789 namespaces 5790 - cmd/snap-confine: handle mounted shared /run/snapd/ns 5791 - many: fix composite literals with unkeyed fields 5792 - dirs, wrappers, overlord/snapstate: make completion + bases work 5793 - tests: revert "tests: restore in restore, not prepare" 5794 - many: validate title 5795 - snap: make description maximum in runes, not bytes 5796 - tests: discard mount namespaces in reset.sh 5797 - tests/lib: sync cla check back from snapcraft 5798 - Revert "cmd/snap, tests/main/snap-info: highlight the current 5799 channel" 5800 - daemon: remove enableInternalInterfaceActions 5801 - mkversion: use "test -n" rather than "! test -z" 5802 - run-checks: assorted fixes 5803 - tests: restore in restore, not in prepare 5804 - cmd/snap: fix missing newline in "snap keys" error message 5805 - snap: epoch lists must contain no duplicate entries 5806 - interfaces/avahi_observe: Fix typo in comment 5807 - tests: add SPREAD_JOB to the description of 5808 systemd_create_and_start_unit 5809 - daemon, vendor: bump github.com/coreos/go-systemd/activation, 5810 handle API changes 5811 - Revert "cmd/snap-confine: don't allow mapping lib{uuid,blkid}" 5812 - packaging/fedora: use %%_sysctldir macro 5813 - cmd/snap-confine: remove unneeded unshare 5814 - sanity: extend the kernel version check to cover CentOS/RHEL 5815 kernels 5816 - wrappers: remove all desktop files from a snap on removal 5817 - snap: add an explicit check for `epoch: null` loading 5818 - snap: check max description length in validate 5819 - spread, tests: add CentOS support 5820 - cmd/snap-confine: allow mapping more libc shards 5821 - cmd/snap-discard-ns: add support for --from-snap-confine 5822 - tests: make tinyproxy support systemd notify 5823 - tests: fix shellcheck 5824 - snap, store: rename `snap.Epoch`'s `Unset` to `IsZero` 5825 - store: add a test for a non-zero epoch refresh (with epoch bump) 5826 - store: v1 search doesn't send epoch, stop pretending it does 5827 - snap: make any "0" epoch be Unset, and marshalled to {[0],[0]} 5828 - overlord/snapstate: amend test should send local revision 5829 - tests: use mock-gpio.py in enable-disable-units-gpio test 5830 - snap: enforce minimal snap name len of 2 5831 - cmd/libsnap: add sc_verify_snap_lock 5832 - cmd/snap-update-ns: extra debugging of trespassing events 5833 - userd: force zenity width if the text displayed is long 5834 - overlord/snapstate, store: always send epochs 5835 - cmd/snap-confine,snap-update-ns: discard quirks 5836 - cmd/snap: add nanosleep to blacklisted syscalls when running with 5837 --strace 5838 - cmd/snap-update-ns, tests: clean trespassing paths 5839 - nvidia, interfaces/builtin: OpenCL fixes 5840 - ifacestate/hotplug: removeDevice helper 5841 - cmd: install snap-discard-ns in "make hack" 5842 - overlord/ifacestate: setup security backends phased by backends 5843 first 5844 - ifacestate/helpers: added SystemSnapName mapper helper method 5845 - overlord/ifacestate: set hotplug-key of the connection when 5846 connecting hotplug slots 5847 - snapd: allow snap-update-ns to read /proc/version 5848 - cmd: handle tumbleweed and leap in autogen.sh 5849 - interfaces/tests: MockHotplugSlot test helper 5850 - store,daemon: make UserInfo,LoginUser part of the store interface 5851 - overlord/ifacestate: use remapper when checking if system snap is 5852 installed 5853 - tests: fix how pinentry is prepared for new gpg v 2.1 and 2.2 5854 - packaging/arch: fix bash completions path 5855 - interfaces/builtin: add device-buttons interface for accessing 5856 events 5857 - tests, fakestore: extend refresh tests with parallel installed 5858 snaps 5859 - snap, store, overlord/snapshotstate: drop epoch pointers 5860 - snap: make Epoch default to {[0],[0]} on load from yaml 5861 - data/completion: pass documented arguments to completion functions 5862 - tests: skip opensuse from interfaces-openvswitch-support test 5863 - tests: simple reproducer for snap try and hooks bug 5864 - snapstate: do not allow classic mode for strict snaps 5865 - snap: make Epoch's MarshalJSON not simplify 5866 - store: remove unused currentSnap and currentSnapJSON 5867 - many: some small doc comment fixes in recent hotplug code 5868 - ifacestate/udevmonitor: added callback to signal end of 5869 enumeration 5870 - cmd/libsnap: add simplified feature flag checker 5871 - interfaces/opengl: add additional accesses for cuda 5872 - tests: add core18 only hooks test and fix running core18 only on 5873 classic 5874 - sanity, release, cmd/snap: refuse to try to do things on WSL. 5875 - cmd: make coreSupportsReExec faster 5876 - overlord/ifacestate: don't remove the dash when generating unique 5877 slot name 5878 - cmd/snap-seccomp: add full complement of ptrace constants 5879 - cmd: update autogen.sh for opensuse 5880 - interfaces/apparmor: allow access to /run/snap.$SNAP_INSTANCE_NAME 5881 - spread.yaml: add more systems to the autopkgtest and qemu backends 5882 - daemon: spool sideloaded snap into blob dir 5883 overlord/snapstate: address review feedback 5884 - packaging/opensuse: stop using golang-packaging 5885 - overlord/snapshots: survive an unknown user 5886 - wrappers: fix generating of service units with multiple `before` 5887 dependencies 5888 - data: run snapd.autoimport.service only after seeding 5889 - cmd/snap: unhide --name parameter to snap install, tweak help 5890 message 5891 - packaging/fedora: Merge changes from Fedora Dist-Git 5892 - tests/main/snap-service-after-before-install: verify after/before 5893 in snap install 5894 - overlord/ifacestate: mark connections disconnected by hotplug with 5895 hotplug-gone 5896 - ifacestate/ifacemgr: don't reload hotplug-gone connections on 5897 startup 5898 - tests: install dependencies during prepare 5899 - tests,store,daemon: ensure proxy settings are honored in 5900 auth/userinfo too 5901 - tests: core 18 does not support classic confinement 5902 - tests: add debug output for degraded test 5903 - strutil: make VersionCompare faster 5904 - overlord/snapshotstate/backend: survive missing directories 5905 - overlord/ifacestate: use map[string]*connState when passing conns 5906 around 5907 - tests: move fedora 28 to manual 5908 - overlord/snapshotstate/backend: be more verbose when 5909 SNAPPY_TESTING=1 5910 - tests: removing fedora 26 system from spread.yaml 5911 - tests: linode execution is not needed anymore 5912 - tests/lib: adjust to changed systemctl behaviour on debian-9 5913 - tests: fixes and new backend for tests on nested suite 5914 - strutil: let MatchCounter work with a nil regexp 5915 - ifacestate/helpers: findConnsForHotplugKey helper 5916 - many: move regexp.(Must)Compile out of non-init functions into 5917 variables 5918 - store: also make snaps downloaded via deltas 0600 5919 - snap: use Lstat to determine snap size, remove 5920 ReadSnapInfoExceptSize 5921 - interfaces/builtin: add adb-support interface 5922 - tests: fail if install_snap_local fails 5923 - strutil: add extra test to CommaSeparatedList as suggested by 5924 mborzecki 5925 - cmd/snap, daemon, strutil: use CommaSeparatedList to split a CSL 5926 - ifacestate: optimize disconnect hooks 5927 - cmd/snap-update-ns: parse the -u <uid> command line option 5928 - cmd/snap, tests: snapshots for all 5929 - client, cmd/daemon: allow disabling keepalive, improve degraded 5930 mode unit tests 5931 - snap: only show "next" refresh time if its after the hold time 5932 - overlord/snapstate: run tests for classic snaps even on systems 5933 that don't support classic 5934 - overlord/standby: fix a race between standby goroutine and stop 5935 - cmd/snap-exec: don't fail on some try mode snaps 5936 - cmd/snap, userd, testutil: tweak DBus tests to use private session 5937 bus connection 5938 - cmd: remove remnants of sc_should_populate_mount_ns 5939 - client, daemon, cmd/snap: indicate that services are socket/timer 5940 activated 5941 - cmd/snap-seccomp: only look for PTRACE_GETFPX?REGS where available 5942 - cmd/snap-confine: remove SC_NS_FAIL_GRACEFULLY 5943 - snap/pack, cmd/snap: allow specifying the filename of 'snap pack' 5944 - cmd/snap-discard-ns: add support for per-user mount namespaces 5945 - cmd/snap-confine: remove stale mount profile along stale namespace 5946 - data/apt: close stderr when calling snap in the apt install hook. 5947 - tests/main: fixes for the new shellcheck 5948 - testutil, cmd/snap: introduce and use testutil.EqualsWrapped and 5949 fly 5950 - tests: initial setup for testing current branch on nested vm and 5951 hotplug management 5952 - cmd: refactor IPC and lifecycle of the helper process 5953 - tests/main/parallel-install-store: the store has caught up, do not 5954 expect failures 5955 - overlord/snapstate, snap, wrappers: start services in the right 5956 order during install 5957 - interfaces/browser-support, cmd/snap-seccomp: Allow read-only 5958 ptrace, for the Breakpad crash reporter 5959 - snap,client: use a different exit code for retryable errors 5960 - overlord/ifacestate: don't conflict on own discard-snap tasks when 5961 refreshing & doing garbage collection 5962 - cmd/snap: tweak `snap services` output when there is no services 5963 - interfaces/many: updates to support k8s worker nodes 5964 - cmd/snap: gnome-software install via snap:// handler 5965 - overlord/many: cleanup use of snapName vs. instanceName 5966 - snapstate: add command-chain to supported featureset 5967 - daemon, snap: mark screenshots as deprecated 5968 - interfaces: fix decoding of json numbers for static/dynamic 5969 attributes* ifstate: fix decoding of json numbers 5970 - cmd/snap: try not to panic on error from "snap try" 5971 - tests: new cosmic image for spread tests on gce 5972 - interfaces/system-key: add parser mtime and only discover features 5973 on write 5974 - overlord/snapshotstate/backend: detect path to tar in unit tests 5975 - tests/unit/gccgo: drop gccgo unit tests 5976 - cmd: use relative file names in locking APIs 5977 - interfaces: fix NormalizeInterfaceAttributes, add tests 5978 - overlord/snapshotstate/backend: fall back on sudo when no runuser 5979 - cmd/snap-confine: reduce verbosity of debug and error messages 5980 - systemd: extend Status() to work for socket and timer units 5981 - interfaces: typo 'allows' for consistency with other ifaces 5982 - systemd,wrappers: don't start disabled services 5983 - ifacestate: simplify task chaining in ifacestate.Connect 5984 - tests: ensure that goa-daemon is off 5985 - snap/pack, snap/squashfs: remove extra copy before mksquashfs 5986 - cmd/snap: block 'snap help <cmd> --all' 5987 - asserts, image: ensure kernel, gadget, base and required-snaps use 5988 valid snap names 5989 - apparmor: add unit test for probeAppArmorParser and simplify code 5990 - interfaces/apparmor: conditionally add explicit deny rules for 5991 ptrace 5992 - po: sync translations from launchpad 5993 - osutil: tweak handling of error adduser errors 5994 - cmd: rename ns_group to mount_ns 5995 - tests/main/interfaces-accounts-service: more debugging 5996 - snap/pack, snap/squashfs: use type to determine mksquashfs args 5997 - data/systemd, wrappers: tweak system-shutdown helper for core18 5998 - tests: show list of processes when ifaces-accounts-service fails 5999 - tests: do not run degraded test in autopkgtest env 6000 - snap: overhaul validation error messages 6001 - ifacestate/hooks: only create interface hook tasks if hooks exist 6002 - osutil: workaround overlayfs on ubuntu 18.10 6003 - interfaces/home: don't allow snaps to write to $HOME/bin 6004 - interfaces: improve Attr error further 6005 - snapstate: tweak GetFeatureFlagBool() to have a default argument 6006 - many: cleanup remaining parallel installs TODOs 6007 - image: improve validation of extra snaps 6008 6009 * Tue Dec 18 2018 Neal Gompa <ngompa13@gmail.com> - 2.36.3-1 6010 - Release 2.36.3 to Fedora 6011 - Remove merged patch 6012 6013 * Fri Dec 14 2018 Michael Vogt <mvo@ubuntu.com> 6014 - New upstream release 2.36.3 6015 - wrappers: use new systemd.IsActive in core18 early boot 6016 - httputil: retry on temporary net errors 6017 - wrappers: only restart service in core18 when they are active 6018 - systemd: start snapd.autoimport.service in --no-block mode 6019 - data/selinux: fix syntax error in definition of snappy_admin 6020 interfacewhen installing selinux-policy-devel package. 6021 - centos: enable SELinux support on CentOS 7 6022 - cmd, dirs, interfaces/apparmor: update distro identification to 6023 support ID="archlinux" 6024 - apparmor: allow hard link to snap-specific semaphore files 6025 - overlord,apparmor: new syskey behaviour + non-ignored snap-confine 6026 profile errors 6027 - snap: add new `snap run --trace-exec` call 6028 - interfaces/backends: detect too old apparmor_parser 6029 6030 * Thu Nov 29 2018 Michael Vogt <mvo@ubuntu.com> 6031 - New upstream release 2.36.2 6032 - daemon, vendor: bump github.com/coreos/go-systemd/activation, 6033 handle API changes 6034 - snapstate: update fontconfig caches on install 6035 - overlord,daemon: mock security backends for testing 6036 - sanity, spread, tests: add CentOS 6037 - Revert "cmd/snap, tests/main/snap-info: highlight the current 6038 channel" 6039 - cmd/snap: add nanosleep to blacklisted syscalls when running with 6040 --strace 6041 - tests: add regression test for LP: #1803535 6042 - snap-update-ns: fix trailing slash bug on trespassing error 6043 - interfaces/builtin/opengl: allow reading /etc/OpenCL/vendors 6044 - cmd/snap-confine: nvidia: pick up libnvidia-opencl.so 6045 - interfaces/opengl: add additional accesses for cuda 6046 6047 * Wed Nov 21 2018 Neal Gompa <ngompa13@gmail.com> - 2.36-4 6048 - Fix backport patch 6049 6050 * Wed Nov 21 2018 Neal Gompa <ngompa13@gmail.com> - 2.36-3 6051 - Backport fixes for EL7 support 6052 6053 * Wed Nov 14 2018 Neal Gompa <ngompa13@gmail.com> - 2.36-2 6054 - Fix runtime dependency for selinux subpackage for EL7 6055 6056 * Fri Nov 09 2018 Michael Vogt <mvo@ubuntu.com> 6057 - New upstream release 2.36.1 6058 - tests,snap-confine: add core18 only hooks test and fix running 6059 core18 only hooks on classic 6060 - interfaces/apparmor: allow access to 6061 /run/snap.$SNAP_INSTANCE_NAME 6062 - spread.yaml: add more systems to the autopkgtest and qemu backends 6063 - daemon: spool sideloaded snap into blob dir 6064 - wrappers: fix generating of service units with multiple `before` 6065 dependencies 6066 - data: run snapd.autoimport.service only after seeding 6067 - tests,store,daemon: ensure proxy settings are honored in 6068 auth/userinfo too 6069 - packaging/fedora: Merge changes from Fedora Dist-Git 6070 - tests/lib: adjust to changed systemctl behaviour on debian-9 6071 - tests/main/interfces-accounts-service: switch to busctl, more 6072 debugging 6073 - store: also make snaps downloaded via deltas 0600 6074 - cmd/snap-exec: don't fail on some try mode snaps 6075 - cmd/snap, userd, testutil: tweak DBus tests to use private session 6076 bus connection 6077 - tests/main: fixes for the new shellcheck 6078 - cmd/snap-confine: remove stale mount profile along stale namespace 6079 - data/apt: close stderr when calling snap in the apt install hook 6080 6081 * Sun Nov 04 2018 Neal Gompa <ngompa13@gmail.com> - 2.36-1 6082 - Release 2.36 to Fedora 6083 6084 * Wed Oct 24 2018 Michael Vogt <mvo@ubuntu.com> 6085 - New upstream release 2.36 6086 - overlord/snapstate, snap, wrappers: start services in the right 6087 order during install 6088 - tests: the store has caught up, drop gccgo test, update cosmic 6089 image 6090 - cmd/snap: try not to panic on error from "snap try"`--devmode` 6091 - overlord/ifacestate: don't conflict on own discard-snap tasks when 6092 refreshing & doing garbage collection 6093 - snapstate: add command-chain to supported featureset 6094 - daemon, snap: mark screenshots as deprecated 6095 - interfaces: fix decoding of json numbers for static/dynamic 6096 attributes 6097 - data/systemd, wrappers: tweak system-shutdown helper for core18 6098 - interfaces/system-key: add parser mtime and only discover features 6099 on write 6100 - interfaces: fix NormalizeInterfaceAttributes, add tests 6101 - systemd,wrappers: don't start disabled services 6102 - ifacestate/hooks: only create interface hook tasks if hooks exist 6103 - tests: do not run degraded test in autopkgtest env 6104 - osutil: workaround overlayfs on ubuntu 18.10 6105 - interfaces: include invalid type in Attr error 6106 - many: enable layouts by default 6107 - interfaces/default: don't scrub with change_profile with classic 6108 - cmd/snap: speed up unit tests 6109 - vendor, cmd/snap: refactor to accommodate the new less buggy go- 6110 flags 6111 - daemon: expose snapshots to the API 6112 - interfaces: updates for default, screen-inhibit-control, tpm, 6113 {hardware,system,network}-observe 6114 - interfaces/hotplug: rename HotplugDeviceKey method to HotplugKey, 6115 update test interface 6116 - interfaces/tests: use TestInterface instead of a custom local 6117 helper 6118 - overlord/snapstate: export getFeatureFlagBool. 6119 - osutil,asserts,daemon: support force password change in system- 6120 user assertion 6121 - snap, wrappers: support restart-delay, generate RestartSec=<value> 6122 in service units 6123 - tests/ifacestate: moved asserts-related mocking into helper 6124 - image: fetch device store assertion if available 6125 - many: enable AppArmor on Arch 6126 - interfaces/repo: two helper methods for hotplug 6127 - overlord/ifacestate: add hotplug slots with implicit slots 6128 - interfaces/hotplug: helpers and struct updates 6129 - tests: run the snapd tests on Ubuntu 18.10 6130 - snapstate: only report errors if there is an actual error 6131 - store: speedup unit tests 6132 - spread-shellcheck: fix interleaved error messages, tweaks 6133 - apparmor: create SnapAppArmorDir in setupSnapConfineReexec 6134 - ifacestate: implementation of defaultDeviceKey function for 6135 hotplug 6136 - cmd/snap-update-ns: remove empty placeholders used for mounting 6137 - snapshotstate: restore to current revision 6138 - tests/lib: rework the CLA checker 6139 - many: support and consider store friendly-stores when checking 6140 device scope constraints 6141 - overlord/snapstate: block parallel installs of snapd, core, base, 6142 kernel, gadget snaps 6143 - overlord/patch: patch for static plug/slot attributes 6144 - interfaces: honor static attributes when reloading conns 6145 - osutils: unit tests speedup; introduce «run-checks --short- 6146 unit». 6147 - systemd, wrappers: speed up wrappers unit tests 6148 - client: speedup unit tests 6149 - spread-shellcheck: use threads to parallelise 6150 - snap: validate plug and slot names 6151 - osutil, interfaces/apparmor: add and use of osutil.UnlinkMany 6152 - wrappers: do not depend on network.taget in socket units, tweak 6153 generated units 6154 - interfaces/apparmor: (un)load profiles in one apparmor_parser call 6155 - store: gracefully handle unexpected errors in 'action' 6156 response 6157 - cmd: put our manpages in section 8 6158 - overlord: don't make become-operational interfere with user 6159 requests 6160 - store: tweak unmatched refresh result error log 6161 - snap, client, daemon, store: use and expose "media" more 6162 - tests,cmd/snap-update-ns: add test showing mount update bug 6163 cmd/snap-update-ns: better detection of snapd-made tmpfs 6164 - tests: spread tests for aliases with parallel installed snaps 6165 - interfaces/seccomp: allow using statx by default 6166 - store: gracefully handle unexpected errors in 'action' response 6167 - overlord/snapshotstate: chown the tempdir 6168 - cmd/snap: attempt to start the document portal if running with a 6169 session bus 6170 - snap: detect layouts vs layout in snap.yaml 6171 - interfaces/apparmor: handle overlayfs snippet for snap-update-ns 6172 - snapcraft.yaml: set grade to stable 6173 - tests: shellchecks, final round 6174 - interfaces/apparmor: handle overlayfs snippet for snap-update-ns 6175 - snap: detect layouts vs layout in snap.yaml 6176 - overlord/snapshotstate: store epoch in snapshot, check on restore 6177 - cmd/snap: tweak UX of snap refresh --list 6178 - overlord/snapstate: improve consistency, use validateInfoAndFlags 6179 also in InstallPath 6180 - snap: give Epoch a CanRead helper 6181 - overlord/snapshotstate: small refactor of internal helpers 6182 - interfaces/builtin: adding missing permission to create 6183 /run/wpa_supplicant directory 6184 - interfaces/builtin: avahi interface update 6185 - client, daemon: support passing of 'unaliased' option when 6186 installing from local files 6187 - selftest: rename selftest.Run() to sanity.Check() 6188 - interfaces/apparmor: report apparmor support level and policy 6189 - ifacestate: helpers for generating slot names for hotplug 6190 - overlord/ifacestate: make sure to pass in the Model assertion when 6191 enforcing policies 6192 - overlord/snapshotstate: store the SnapID in snapshot, block 6193 restore if changed 6194 - interfaces: generalize writable mimic profile 6195 - asserts,interfaces/policy: add support for on-store/on-brand/on- 6196 model plug/slot rule constraints 6197 - many: fetch the device store assertion together and in the context 6198 of interpreting snap-declarations 6199 - tests: disable gccgo tests on 18.04 for now, until dh-golang vs 6200 gccgo is fixed 6201 - tests/main/parallel-install-services: add spread test for snaps 6202 with services 6203 - tests/main/snap-env: extend to cover parallel installations of 6204 snaps 6205 - tests/main/parallel-install-local: rename from *-sideload, extend 6206 to run snaps 6207 - cmd/snapd,daemon,overlord: without snaps, stop and wait for socket 6208 - cmd/snap: tame the help zoo 6209 - tests/main/parallel-install-store: run installed snap 6210 - cmd/snap: add a bunch of TRANSLATORS notes (and a little more 6211 i18n) 6212 - cmd: fix C formatting 6213 - tests: remove unneeded cleanup from layout tests 6214 - image: warn on missing default-providers 6215 - selftest: add test to ensure selftest.checks is up-to-date 6216 - interfaces/apparmor, interfaces/builtin: tweaks for parallel snap 6217 installs 6218 - userd: extend the list of supported XDG Desktop properties when 6219 autostarting user applications 6220 - cmd/snap-update-ns: enforce trespassing checks 6221 - selftest: actually run the kernel version selftest 6222 - snapd: go into degraded mode when the selftest fails 6223 - tests: add test that runs snapctl with a core18 snap 6224 - tests: add snap install hook with base: core18 6225 - overlord/{snapstate,assertstate}: parallel instances and 6226 refresh validation 6227 - interfaces/docker-support: add rules to read apparmor macros 6228 - tests: make nfs test available for more systems 6229 - tests: cleanup copy/paste dup in interfaces-network-setup-control 6230 - tests: using single sh snap in interface tests 6231 - overlord/snapstate: improve cleaup in mount-snap handler 6232 - tests: don't fail interfaces-bluez test if bluez is already 6233 installed 6234 - tests: find snaps just for edge and beta channels 6235 - daemon, snapstate: consistent snap list [--all] output with broken 6236 snaps 6237 - tests: fix listing to allow extra things in the notes column 6238 - cmd/snap: improve UX when removing specific snap revision 6239 - cmd/snap, tests/main/snap-info: highlight the current channel 6240 - interfaces/testiface: added TestHotplugInterface 6241 - snap: tweak commands 6242 - interfaces/hotplug: hotplug spec takes one slot definition 6243 - overlord/snapstate, snap: handle shared snap directories when 6244 installing/remove snaps with instance key 6245 - interfaces/opengl: misc accesses for VA-API 6246 - client, cmd/snap: expose warnings to the world 6247 - cmd/snap-update-ns: introduce trespassing state tracking 6248 - cmd/snap: commands no longer build their own client 6249 - tests: try to build cmd/snap for darwin 6250 - daemon: make error responders not printf when called with 1 6251 argument 6252 - many: return real snap name in API response 6253 - overlord/state: return latest LastAdded time in WarningsSummary 6254 - many: mount namespace mapping for parallel installs of snaps 6255 - ifacestate/autoconnect: do not self-conflict on setup-profiles if 6256 core-phase-2 6257 - client, cmd/snap: on !linux, exit when the client tries to Do 6258 something 6259 - tests: refactor for nested suite and tests fixed 6260 - tests: use lxd's waitready instead of polling lxd socket 6261 - ifacestate: don't initialize udev monitor until we have a system 6262 snap 6263 - interfaces: extra argument for static attrs in 6264 NewConnectedPlug/NewConnectedSlot 6265 - packaging/arch: sync packaging with AUR 6266 - snapstate/tests: serialize all appends in fake backend 6267 - snap-confine: make /lib/modules optional 6268 - cmd/snap: handle "snap interfaces core" better 6269 - store: move download tests into downloadSuite 6270 - tests,interfaces: run interfaces-account-control on UC18 6271 - tests: fix install snaps test by adding link to /snap 6272 - tests: fix for nested test suite 6273 - daemon: fix snap list --all with parallel snap instances 6274 - snapstate: refactor tests to use SetModel* 6275 - wrappers: fix snap services order in tests 6276 - many: provide salt for generating instance-key in store requests 6277 - ifacestate: fix hang when retrying content providers 6278 - snapd-env-generator: fix when PATH is empty or unset 6279 - overlord/assertstate: propagate TaskSnapSetup error 6280 - client: catch and expose logs errors 6281 - overlord: integrate device enumeration with udev monitor 6282 - daemon, overlord/state: warnings pipeline 6283 - tests: add publisher regex to fix the snap-info test pass on sru 6284 - cmd: use systemdsystemgeneratorsdir, cleanup automake complaints, 6285 tweaks 6286 - cmd/snap-update-ns: remove the unused Secure type 6287 - osutil, o/snapshotstate, o/sss/backend: quick fixes 6288 - tests: update the listing expression to support core from 6289 different channels 6290 - store: use stable instance key in store refresh requests 6291 - cmd/snap-update-ns: detach Mk{Prefix,{File,Dir,Symlink{,All}}} 6292 - overlord/patch: support for sublevel patches 6293 - tests: update prepare/restore for nightly suite 6294 - cmd/snap-update-ns: detach BindMount from the Secure type 6295 - cmd/snap-update-ns: re-factor pair of helpers to call fstatfs once 6296 - ifacestate: retry on "discard-snap" in autoconnect conflict check 6297 - cmd/snap-update-ns: separate OpenPath from the Secure struct 6298 - wrappers: remove Wants=network-online.target 6299 - tests: add new core16-base test 6300 - store: refactor tests so that they work as store_test package 6301 - many: add refresh.rate-limit core option 6302 - tests: run account-control test with different bases 6303 - tests: port proxy test to use python tinyproxy 6304 - overlord: introduce snapshotstate. 6305 - testutil: allow Fstatfs results to vary over time 6306 - snap-update-ns: add comments about the "deadcode" in bootstrap.go 6307 - overlord: add chg.Err() in testUpdateWithAutoconnectRetry 6308 - many: remove deadcode 6309 - tests: also run unit/gccgo in 18.04 6310 - tests: introduce a helper for installing local snaps with --name 6311 - tests: avoid removing core snap on reset 6312 - snap: use snap.SideInfo in test to fix build with gccgo 6313 - partition: remove unused runCommand 6314 - image: fix incorrect error when using local bases 6315 - overlord/snapstate: fix format 6316 - cmd: fix format 6317 - tests: setting "storage: preserve-size" just for amazon-linux 6318 system 6319 - tests: test for the hostname interface 6320 - interfaces/modem-manager: allow access to more USB strings 6321 - overlord: instantiate UDevMonitor 6322 - interfaces/apparmor: tweak naming, rename to AddLayout() 6323 - interfaces: take instance name in ifacetest.InstallSnap 6324 - snapcraft: do not use --dirty in mkversion 6325 - cmd: add systemd environment generator 6326 - devicestate: support getting (http) proxy from core config 6327 - many: rename ClientOpts to ClientOptions 6328 - prepare-image-grub-core18: remove image root in restore 6329 - overlord/ifacestate: remove "old-conn" from connect/undo connect 6330 handlers 6331 - packaging/fedora: Merge changes from Fedora Dist-Git 6332 - image: handle errors when downloadedSnapsInfoForBootConfig has no 6333 data 6334 - tests: use official core18 model assertion in tests 6335 - snap-confine: map /var/lib/extrausers into snaps mount-namespace 6336 - overlord,store: support proxy settings internally too 6337 - cmd/snap: bring back 'snap version' 6338 - interfaces/mount: tweak naming of things 6339 - strutil: fix MatchCounter to also work with buffer reuse 6340 - cmd,interfaces,tests: add /mnt to removable-media interface 6341 - systemd: do not run "snapd.snap-repair.service.in on firstboot 6342 bootstrap 6343 - snap/snapenv: drop some instance specific variables, use instance- 6344 specific ones for user locations 6345 - firstboot: sort by type when installing the firstboot snaps 6346 - cmd, cmd/snap: better support for non-linux 6347 - strutil: add new ParseByteSize 6348 - image: detect and error if bases are missing 6349 - interfaces/apparmor: do not downgrade confinement on arch with 6350 linux-hardened 4.17.4+ 6351 - daemon: add pokeStateLock helper to the daemon tests 6352 - snap/squashfs: improve error message from Build on mksquashfs 6353 failure 6354 - tests: remove /etc/alternatives from dirs-not-shared-with-host 6355 - cmd: support re-exec into the "snapd" snap 6356 - spdx: remove "Other Open Source" from the support licenses 6357 - snap: add new type "TypeSnapd" and attach to the snapd snap 6358 - interfaces: retain order of inserted security backends 6359 - tests: spread test for parallel-installs desktop file handling 6360 - overlord/devicestate: use OpenSSL's PEM format when generating 6361 keys 6362 - cmd: remove --skip-command-chain from snap run and snap-exec 6363 - selftest: detect if apparmor is unusable and error 6364 - snap,snap-exec: support command-chain for hooks 6365 - tests: significantly reduce execution time for managers test 6366 - snapstate: use new "snap.ByType" sorting 6367 - overlord/snapstate: fix UpdateMany() to work with parallel 6368 instances 6369 - testutil: have File* checker produce more useful error output 6370 - overlord/ifacestate: introduce connectOpts 6371 - interfaces: parallel instances support, extend unit tests 6372 - tests: normalize tests 6373 - snapstate: make InstallPath() return *snap.Info too 6374 - snap: add ByType sorting 6375 - interfaces: add cifs-mount interface 6376 - tests: use file based markers in snap-service-stop-mode 6377 - osutil: reorg and stub out things to get it building on darwin 6378 - tests/main/layout: cleanup after the test 6379 - osutil/sys: small tweaks to let it build on darwin 6380 - daemon, overlord/snapstate: set instance name when installing from 6381 snap file 6382 - many: move Uname to osutil, for more DRY and easier porting. 6383 - cmd/snap: create snap user directory when running parallel 6384 installed snaps 6385 - cmd/snap-confine: switch to validation of SNAP_INSTANCE_NAME 6386 - tests: basic test for parallel installs from the store 6387 - image: download the gadget from the model.GadgetTrack() 6388 - snapstate: add support for gadget tracks in model assertion 6389 - image: add support for "gadget=track" 6390 - overlord: handle sigterm during shutdown better 6391 - tests: add the original function to fix the errors on new kernels 6392 - tests/main/lxd: pull lxd from candidate; reënable i386 6393 - wayland: add extra sockets that are used by older toolkits (e.g. 6394 gtk3) 6395 - asserts: add support for gadget tracks in the model assertion 6396 - overlord/snapstate: improve feature flag validation 6397 - tests/main/lxd: run ubuntu-16.04 only on 64 bit variant 6398 - interfaces: workaround for activated services and newer DBus 6399 - tests: get the linux-image-extra available for the current kernel 6400 - interfaces: add new "sysfs-name" to i2c interfaces code 6401 - interfaces: disconnect hooks 6402 - cmd/libsnap: unify detection of core/classic with go 6403 - tests: fix autopkgtest failures in cosmic 6404 - snap: fix advice json 6405 - overlord/snapstate: parallel snap install 6406 - store: backward compatible instance-key handling for non-instance 6407 snaps 6408 - interfaces: add screencast-legacy for video and audio recording 6409 - tests: skip unsupported architectures for fedora-base-smoke test 6410 - tests: avoid using the journalctl cursor when it has not been 6411 created yet 6412 - snapstate: ensure normal snaps wait for the "snapd" snap on 6413 refresh 6414 - tests: enable lxd again everywhere 6415 - tests: new test for udisks2 interface 6416 - interfaces: add cpu-control for setting CPU tunables 6417 - overlord/devicestate: fix tests, set seeded in registration 6418 through proxy tests 6419 - debian: add missing breaks on cosmic 6420 - devicestate: only run device-hook when fully seeded 6421 - seccomp: conditionally add socketcall() based on system and base 6422 - tests: new test for juju client observe interface 6423 - overlord/devicestate: DTRT w/a snap proxy to reach a serial vault 6424 - snapcraft: set version information for the snapd snap 6425 - cmd/snap, daemon: error out if trying to install a snap using 6426 empty name 6427 - hookstate: simplify some hook tests 6428 - cmd/snap-confine: extend security tag validation to cover instance 6429 names 6430 - snap: fix mocking of systemkey in snap-run tests 6431 - packaging/opensuse: fix static build of snap-update-ns and snap- 6432 exec 6433 - interfaces/builtin: addtl network-manager resolved DBus fix 6434 - udev: skip TestParseUdevEvent on ppc 6435 - interfaces: miscellaneous policy updates 6436 - debian: add tzdata to build-dep to ensure snapd builds correctly 6437 - cmd/libsnap-confine-private: intoduce helpers for validating snap 6438 instance name and instance key 6439 - snap,snap-exec: support command-chain for app 6440 - interfaces/builtin: network-manager resolved DBus changes 6441 - snap: tweak `snap wait` command 6442 - cmd/snap-update-ns: introduce validation of snap instance names 6443 - cmd/snap: fix some corner-case test setup weirdness 6444 - cmd,dirs: fix various issues discovered by a Fedora base snap 6445 - tests/lib/prepare: fix extra snaps test 6446 6447 * Mon Oct 15 2018 Michael Vogt <mvo@ubuntu.com> 6448 - New upstream release 2.35.5 6449 - interfaces/home: don't allow snaps to write to $HOME/bin 6450 - osutil: workaround overlayfs on ubuntu 18.10 6451 6452 * Fri Oct 05 2018 Michael Vogt <mvo@ubuntu.com> 6453 - New upstream release 2.35.4 6454 - wrappers: do not depend on network.taget in socket units, tweak 6455 generated units 6456 6457 * Fri Oct 05 2018 Michael Vogt <mvo@ubuntu.com> 6458 - New upstream release 2.35.3 6459 - overlord: don't make become-operational interfere with user 6460 requests 6461 - docker_support.go: add rules to read apparmor macros 6462 - interfaces/apparmor: handle overlayfs snippet for snap-update- 6463 nsFixes: 6464 - snapcraft.yaml: add workaround to fix snapcraft build 6465 - interfaces/opengl: misc accesses for VA-API 6466 6467 * Wed Sep 12 2018 Michael Vogt <mvo@ubuntu.com> 6468 - New upstream release 2.35.2 6469 - cmd,overlord/snapstate: go 1.11 format fixes 6470 - ifacestate: fix hang when retrying content providers 6471 - snap-env-generator: do nothing when PATH is unset 6472 - interfaces/modem-manager: allow access to more USB strings 6473 6474 * Mon Sep 03 2018 Michael Vogt <mvo@ubuntu.com> 6475 - New upstream release 2.35.1 6476 - packaging/fedora: Merge changes from Fedora Dist-Git 6477 - snapcraft: do not use --diry in mkversion.sh 6478 - cmd: add systemd environment generator 6479 - snap-confine: map /var/lib/extrausers into snaps mount-namespace 6480 - tests: cherry-pick test fixes from master for 2.35 6481 - systemd: do not run "snapd.snap-repair.service.in on firstboot 6482 bootstrap 6483 - interfaces: retain order of inserted security backends 6484 - selftest: detect if apparmor is unusable and error 6485 6486 * Sat Aug 25 2018 Neal Gompa <ngompa13@gmail.com> - 2.35-1 6487 - Release 2.35 to Fedora (RH#1598946) 6488 6489 * Mon Aug 20 2018 Michael Vogt <mvo@ubuntu.com> 6490 - New upstream release 2.35 6491 - snapstate: add support for gadget tracks in model assertion 6492 - image: add support for "gadget=track" 6493 - asserts: add support for gadget tracks in the model assertion 6494 - interfaces: add new "sysfs-name" to i2c interfaces code 6495 - overlord: handle sigterm during shutdown better 6496 - wayland: add extra sockets that are used by older toolkits 6497 - snap: fix advice json 6498 - tests: fix autopkgtest failures in cosmic 6499 - store: backward compatible instance-key handling for non-instance 6500 snaps 6501 - snapstate: ensure normal snaps wait for the "snapd" snap on 6502 refresh 6503 - interfaces: add cpu-control for setting CPU tunables 6504 - debian: add missing breaks on comisc 6505 - overlord/devicestate: DTRT w/a snap proxy to reach a serial vault 6506 - devicestate: only run device-hook when fully seeded 6507 - seccomp: conditionally add socketcall() based on system and base 6508 - interfaces/builtin: addtl network-manager resolved DBus fix 6509 - hookstate: simplify some hook tests 6510 - udev: skip TestParseUdevEvent on ppc 6511 - interfaces: miscellaneous policy updates 6512 - debian: add tzdata to build-dep to ensure snapd builds correctly 6513 - interfaces/builtin: network-manager resolved DBus changes 6514 - tests: add spread test for fedora29 base snap 6515 - cmd/libsnap: treat distributions with VARIANT_ID=snappy as "core" 6516 - dirs: fix SnapMountDir inside a Fedora base snap 6517 - tests: fix snapd-failover for core18 with external backend 6518 - overlord/snapstate: always clean SnapState when doing Get() 6519 - overlod/ifacestate: always use a new SnapState when fetching the 6520 snap state 6521 - overlord/devicestate: have the serial request talk to the proxy if 6522 set 6523 - interfaces/hotplug: udevadm output parser 6524 - tests: New test for daemon-notify interface 6525 - image: ensure "core" is ordered early if base: and core is used 6526 - cmd/snap-confine: snap-device-helper parallel installs support 6527 - tests: enable interfaces-framebuffer everywhere 6528 - tests: reduce nc wait time from 2 to 1 second 6529 - snap/snapenv: add snap instance specific variables 6530 - cmd/snap-confine: add minimal test for snap-device-helper 6531 - tests: enable snapctl test on core18 6532 - overlord: added UDevMonitor for future hotplug support 6533 - wrappers: do not glob when removing desktop files 6534 - tests: add dbus monitor log to interfaces-accounts-service 6535 - tests: add core-18 systems to external backend 6536 - wrappers: account for changed app wrapper in parallel installed 6537 snaps 6538 - wrappers: make sure that the tests pass on non-Ubuntu too 6539 - many: add snapd snap failure handling 6540 - tests: new test for dvb interface 6541 - configstate: accept refresh.timer=managed 6542 - tests: new test for snap logs command 6543 - wrapper: generate all the snapd unit files when generating 6544 wrappers 6545 - store: keep all files with link-count > 1 in the cache 6546 - store: be less verbose in the common refresh case of "no updates" 6547 - snap-confine: update snappy-app-dev path 6548 - debian: ensure dependency on fixed apt on 18.04 6549 - snapd: add initial software watchdog for snapd 6550 - daemon, systemd: change journalctl -n=all to --no-tail 6551 - systemd: fix snapd.apparmor.service.in dependencies 6552 - snapstate: refuse to remove bases or core if snaps need them 6553 - snap: introduce package-level helpers for building snap related 6554 directory/file paths 6555 - overlord/devicestate: deny parallel install of kernel or gadget 6556 snaps 6557 - store: clean up parallel-install TODOs in store tests 6558 - timeutil: fix first weekday of the month schedule 6559 - interfaces: match all possible tty but console 6560 - tests: shellchecks part 5 6561 - cmd/snap-confine: allow ptrace read for 4.18 kernels 6562 - advise: make the bolt database do the atomic rename dance 6563 - tests/main/apt-hooks: debug dump of commands.db 6564 - tests/lib/prepare-restore: update Arch Linux kernel LOCALVERSION 6565 handling 6566 - snap: validate instance name as part of Validate() 6567 - daemon: if a snap is inactive, don't ask systemd about its 6568 services. 6569 - udev: skip TestParseUdevEvent on s390x 6570 - tests: switch core-amd64-18 to use `kernel: pc-kernel=18` 6571 - asserts,image: add support for new kernel=track syntax 6572 - tests: new gce image for fedora 27 6573 - interfaces/apparmor: use the cache in mtime-resilient way 6574 - store, overlord/snapstate: introduce instance name in store APIs 6575 - tests: drive-by cleanup of redudant pkgname matching 6576 - tests: ensure apt-hook is only run after catalog update ran 6577 - tests: use pkill instead of kilall 6578 - tests/main: another bunch of updates for Amazon Linux 2 6579 - tests/lib/snaps: avoid using relative command paths that go up in 6580 the directory tree 6581 - tests: disable/fix more tests for Amazon Linux 2 6582 - overlord: introduce InstanceKey to SnapState and SnapSetup, 6583 renames 6584 - daemon: make sure most change generating handlers can produce 6585 errors with kinds 6586 - tests/main/interfaces-calendar-service: skip the test on AMZN2 6587 - tests/lib/snaps: avoid using relative command paths that go up in 6588 the directory tree 6589 - cmd/snap: add a green check mark to verified publishers 6590 - cmd/snap: fix two issues in the cmd/snap unit tests 6591 - packaging/fedora: fix target path of /snap symlink 6592 - cmd/snap: support `--last=<type>?` to mean "no error on empty" 6593 - cmd/snap-confine: (nvidia) pick up libnvidia-glvkspirv.so 6594 - strutil: detect and bail out of Unmarshal on duplicate key 6595 - packaging/fedora(amzn2): disable SELinux, drop dependency on 6596 squashfuse for AMZN2 6597 - spread, tests: add support for Amazon Linux 2 6598 - packaging/fedora: Add Amazon Linux 2 support 6599 - many: make Wait/Stop optional on StateManagers 6600 - snap/squashfs: stop printing unsquashfs info to stderr 6601 - snap: add support for `snap advise-snap --from-apt` 6602 - overlord/ifacestate: ignore connect if already connected 6603 - tests: change the service snap used instead of network-bind- 6604 consumer 6605 - interfaces/network-control: update for wpa-supplicant and ifupdown 6606 - tests: fix raciness in stop mode tests 6607 - logger: try to not have double dates 6608 - debian: use deb-systemd-invoke instead of systemctl directly 6609 - tests: run all main tests on core18 6610 - many: finish sharing a single TaskRunner with all the the managers 6611 - interfaces/repo: added AllHotplugInterfaces helper 6612 - snapstate: ensure kernel-track is honored on switch/refresh 6613 - overlord/ifacestate: support implicit slots on snapd 6614 - image: add support for "kernel-track" in `snap prepare-image` 6615 - tests: add test that ensures we do not boot any system in degraded 6616 state 6617 - tests: update tests to work on core18 6618 - cmd/snap: check for typographic dashes in command 6619 - tests: fix tests expecting old email address 6620 - client: add some existing error kinds that were not listed in 6621 client.go 6622 - tests: add missing slots in classic and core provider test snaps 6623 - overlord,daemon,cmd: re-map snap names around the edges of snapd 6624 - tests: use install_local in snap-run-hooks 6625 - coreconfig: add support for `snap set system network.disable- 6626 ipv6` 6627 - overlord/snapstate: dedupe default content providers 6628 - osutil/udev: sync with upstream 6629 - debian: do not ship snapd.apparmor.service on ubuntu 6630 - overlord: have SnapManager use a passed in TaskRunner created by 6631 Overlord 6632 - many: streamline the generic conflict check mechanisms 6633 - tests: remove unneeded setup code in snap-run-symlink 6634 - cmd/snap: print unset license as "unset", instead of "unknown" 6635 - asserts: add (optional) kernel-track to model assertion 6636 - snap/squashfs, tests: pass -n[o-progress] to {mk,un}squashfs 6637 - interfaces/pulseaudio: be clear that the interface allows playback 6638 and record 6639 - snap: support hook environment 6640 - interfaces: fix typo "daemonNotify" (add missing "n") 6641 - interfaces: tweak tests of daemon-notify, use common naming 6642 - interfaces: allow invoking systemd-notify when daemon-notify is 6643 connected 6644 - store: make snap blobs be 0600 6645 - interfaces,daemon: move JSON types to the daemon 6646 - tests: prepare needs to handle bin/snapctl being a symlink 6647 - tests: do not mask errors in interfaces-timezone-control (#5405) 6648 - packaging: put snapctl into /usr/lib/snapd and symlink in usr/bin 6649 - tests: add basic integration test for spread hold 6650 - overlord/snapstate: improve PlugsOnly comment 6651 - many: assorted shellcheck fixes 6652 - store, daemon, client, cmd/snap: expose "scope", default to wide 6653 - snapstate: allow setting "refresh.timer=managed" 6654 - cmd/snap: display a link to data privacy notice for interactive 6655 snap login 6656 - client, cmd/snap: pass snap instance name when installing from 6657 file 6658 - cmd/snap: add 'debug paths' command 6659 - snapstate: make sure all *link-*snap tasks carry a snap type and 6660 further hints 6661 - devicestate: fix race when refreshing a snap with snapd-control 6662 - tests: fix tests on arch 6663 - tests: start active system units on reset 6664 - tests: new test for joystick interface 6665 - tests: moving install of dependencies to pkgdb helper 6666 - tests: enable new fedora image with test dependencies installed 6667 - tests: start using the new opensuse image with test dependencies 6668 - tests: check catalog refresh before and after restart snapd 6669 - tests: stop restarting journald service on prepare 6670 - interfaces: make core-support a no-op interface 6671 - interfaces: prefer "snapd" when resolving implicit connections 6672 - interfaces/hotplug: add hotplug Specification and 6673 HotplugDeviceInfo 6674 - many: lessen the use of core-support 6675 - tests: fixes for the autopkgtest failures in cosmic 6676 - tests: remove extra ' which breaks interfaces-bluetooth-control 6677 test 6678 - dirs: fix antergos typo 6679 - tests: use grep to avoid non-matching messages from MATCH 6680 - dirs: improve distro detection for Antegros 6681 - vendor: switch to latest bson 6682 - interfaces/builtin: create can-bus interface 6683 - tests: "snap connect" is idempotent so just connect 6684 - many: use extra "releases" information on store "revision-not- 6685 found" errors to produce better errors 6686 - interfaces: treat "snapd" snap as type:os 6687 - interfaces: tweak tests to have less repetition of "core" and 6688 "ubuntu… 6689 - tests: simplify econnreset test 6690 - snap: add helper for renaming slots 6691 - devicestate: fix panic in firstboot code when no snaps are seeded 6692 - tests: add artful for sru validation on google backend 6693 - snap,interfaces: move interface name validation to snap 6694 - overlord/snapstate: introduce path to fake backend ops 6695 - cmd/snap-confine: fix snaps running on core18 6696 - many: expose publisher's validation throughout the API 6697 6698 * Fri Jul 27 2018 Michael Vogt <mvo@ubuntu.com> 6699 - New upstream release 2.34.3 6700 - interfaces/apparmor: use the cache in mtime-resilient way 6701 - cmd/snap-confine: (nvidia) pick up libnvidia-glvkspirv.so 6702 - snapstate: allow setting "refresh.timer=managed" 6703 - spread: switch Fedora and openSUSE images 6704 6705 * Thu Jul 19 2018 Michael Vogt <mvo@ubuntu.com> 6706 - New upstream release 2.34.2 6707 - packaging: fix bogus date in fedora snapd.spec 6708 - tests: fix tests expecting old email address 6709 6710 * Tue Jul 17 2018 Michael Vogt <mvo@ubuntu.com> 6711 - New upstream release 2.34.1 6712 - tests: cherry-pick test fixes from master for 2.34 6713 - coreconfig: add support for `snap set system network.disable- 6714 ipv6` 6715 - debian: do not ship snapd.apparmor.service on ubuntu 6716 - overlord/snapstate: dedupe default content providers 6717 - interfaces/builtin: create can-bus interface 6718 6719 * Sat Jul 14 2018 Fedora Release Engineering <releng@fedoraproject.org> - 2.33.1-2 6720 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild 6721 6722 * Fri Jul 06 2018 Michael Vogt <mvo@ubuntu.com> 6723 - New upstream release 2.34 6724 - store, daemon, client, cmd/snap: expose "scope", default to wide* 6725 - tests: fix arch tests 6726 - snapstate: make sure all *link-*snap tasks carry a snap type and 6727 further hints 6728 - snapstate: allow setting "refresh.timer=managed" 6729 - cmd/snap: display a link to data privacy notice for interactive 6730 snap login 6731 - devicestate: fix race when refreshing a snap with snapd-control 6732 - tests: skip interfaces-framebuffer when no /dev/fb0 is found 6733 - tests: run interfaces-contacts-service only where test-snapd-eds 6734 is available 6735 - many: expose publisher's validation throughout the API 6736 - many: use extra "releases" information on store "revision-not- 6737 found" errors to produce better errors 6738 - dirs: improve distro detection for Antegros 6739 - Revert "dirs: improve identification of Arch Linux like systems" 6740 - devicestate: fix panic in firstboot code when no snaps are seeded 6741 - i18n: use xgettext-go --files-from to avoid running into cmdline 6742 size limits 6743 - interfaces: move ValidateName helper to utils 6744 - snapstate,ifstate: wait for pending restarts before auto- 6745 connecting 6746 - snap: account for parallel installs in wrappers, place info and 6747 tests 6748 - configcore: fix incorrect handling of keys with numbers (like 6749 gpu_mem_512) 6750 - tests: fix tests when no keyboard input detected 6751 - overlord/configstate: add watchdog options 6752 - snap-mgmt: fix for non-existent dbus system policy dir, 6753 shellchecks 6754 - tests/main/snapd-notify: use systemd's service properties rater 6755 than the journal 6756 - snapstate: allow removal of snap.TypeOS when using a model with a 6757 base 6758 - interfaces: make findSnapdPath smarter 6759 - tests: run "arp" tests only if arp is available 6760 - spread: increase the number of auto retries for package downloads 6761 in opensuse 6762 - cmd/snap-confine: fix nvidia support under lxd 6763 - corecfg: added experimental.hotplug feature flag 6764 - image: block installation of parallel snap instances 6765 - interfaces: moved normalize method to interfaces/utils and made it 6766 public 6767 - api/snapctl: allow -h and --help for regular users. 6768 - interfaces/udisks2: also implement implicit classic slot 6769 - cmd/snap-confine: include CUDA runtime libraries 6770 - tests: disable auto-refresh test on core18 6771 - many: switch to account validation: unproven|verified 6772 - overlord/ifacestate: get/set connection state only via helpers 6773 - tests: adding extra check to validate journalctl is showing 6774 current test data 6775 - data: add systemd environment configuration 6776 - i18n: handle write errors in xgettext-go 6777 - snap: helper for validating snap instance names 6778 - snap{/snaptest}: set instance key based on snap name 6779 - userd: fix running unit tests on KDE 6780 - tests/main/econnreset: limit ingress traffic to 512kB/s 6781 - snap: introduce a struct Channel to represent store channels, and 6782 helpers to work with it 6783 - tests: add fedora to distro_clean_package_cache function 6784 - many: rename snap.Info.StoreName() to snap.Info.SnapName() 6785 - tests: add spread test to ensure snapd/core18 are not removable 6786 - tests: tweaks for running the main tests on core18 6787 - overlord/{config,snap}state: introduce experimental.parallel- 6788 instances feature flag 6789 - strutil: support iteration over almost clean paths 6790 - strutil: add PathIterator.Rewind 6791 - tests: update interfaces-timeserver-control to core18 6792 - tests: add halt-timeout to google backend 6793 - tests: skip security-udev-input-subsystem without /dev/input/by- 6794 path 6795 - snap: introduce the instance key field 6796 - packaging/opensuse: remaining packaging updates for 2.33.1 6797 - overlord/snapstate: disallow installing snapd on baseless models 6798 - tests: disable core tests on all core systems (16 and 18) 6799 - dirs: improve identification of Arch Linux like systems 6800 - many: expose full publisher info over the snapd API 6801 - tests: disable core tests on all core systems (16 and 18) 6802 - tests/main/xdg-open: restore or clean up xdg-open 6803 - tests/main/interfaces-firewall-control: shellcheck fix 6804 - snapstate: sort "snapd" first 6805 - systemd: require snapd.socket in snapd.seeded.service; make sure 6806 snapd.seeded 6807 - spread-shellcheck: use the latest shellcheck available from snaps 6808 - tests: use "ss" instead of "netstat" (netstat is not available in 6809 core18) 6810 - data/complete: fix three out of four shellcheck warnings in 6811 data/complete 6812 - packaging/opensuse: fix typo, missing assignment 6813 - tests: initial core18 spread image building 6814 - overlord: introduce a gadget-connect task and use it at first boot 6815 - data/completion: fix inconsistency in +x and shebang 6816 - firstboot: mark essential snaps as "Required" in the state 6817 - spread-shellcheck: use a whitelist of files that are allowed to 6818 fail validation 6819 - packaging/opensuse: build position-independent binaries 6820 - ifacestate: prevent running interface hooks twice when self- 6821 connecting on autoconnect 6822 - data: remove /bin/sh from snapd.sh 6823 - tests: fix shellcheck 0.5.0 warnings 6824 - packaging/opensuse: snap-confine should be 06755 6825 - packaging/opensuse: ship apparmor integration if enabled 6826 - interfaces/udev,misc: only trigger udev events on input subsystem 6827 as needed 6828 - packaging/opensuse: add missing bits for snapd.seeded.service 6829 - packaging/opensuse: don't use %-macros in comments 6830 - tests: shellchecks part 4 6831 - many: rename snap.Info.Name() to snap.Info.InstanceName(), leave 6832 parallel-install TODOs 6833 - store: drop unused: channel map types, and details fixture. 6834 - store: have a basic test about the unmarshalling of /search 6835 results 6836 - tests: show executed tests on current system when a test fails 6837 - tests: fix for the download of the big snap 6838 - interfaces/apparmor: add chopTree 6839 - tests: remove double debug: | entry in tests and add more checks 6840 - cmd/snap-update-ns: introduce mimicRequired helper 6841 - interfaces: move assertions around for better failure line number 6842 - store: log a nice clear "download succeeded" message 6843 - snap: run snap-confine from the re-exec location 6844 - snapstate: support restarting snapd from the snapd snap on core18 6845 - tests: show status of the partial test-snapd-huge snap in 6846 econnreset test 6847 - tests: fix interfaces-calendar-service test when gvfsd-metadata 6848 loks the xdg dirctory 6849 - store: switch store.SnapInfo to use the new v2/info endpoint 6850 - interfaces: add Repository.AllInterfaces 6851 - snapstate: stop using evolving SnapSpec internally, use an 6852 internal-only snapSpec instead 6853 - cmd/libsnap-confine-private: introduce a helper for splitting snap 6854 name 6855 - tests: econnreset/retry tweaks 6856 - store, et al: kill dead code that uses the bulk endpoint 6857 - tests/lib/prepare-restore: fix upgrade/reboot handling on arch 6858 - cmd/snap-update-ns,strutil: move PathIterator to strutil, add 6859 Depth helper 6860 - data/systemd/snapd.run-from-snap: ensure snapd tooling is 6861 available 6862 - store: switch connectivity check to use v2/info 6863 - devicestate: support seeding from a base snap instead of core 6864 - snapstate,ifacestate: remove core-phase-2 handling 6865 - interfaces/docker-support: update for docker 18.05 6866 - tests: enable fedora 28 again 6867 - overlord/ifacestate: simplify checkConnectConflicts and also 6868 connect signature 6869 - snap: parse connect instructions in gadget.yaml 6870 - tests: fix snapd-repair.timer on ubuntu-core-snapd-run- from-snap 6871 test 6872 - interfaces/apparmor: allow killing snap-update-ns 6873 - tests: skip "try" test on s390x 6874 - store, image: have 'snap download' use v2/refresh action=download 6875 - interfaces/policy: test that base policy can be parsed 6876 - tests: publish test-snapd-appstreamid for any architecture 6877 - snap: don't include newline in hook environment 6878 - cmd/snap-update-ns: use RCall with SyscallsEqual 6879 - cmd/snap-update-ns: add IsSnapdCreatedPrivateTmpfs and tests 6880 - tests: skip security-dev-input-event-denied on s390x/arm64 6881 - interfaces: add the dvb interface 6882 - daemon: paging is not a thing. 6883 - cmd/snap-mgmt: remove system key on purge 6884 - testutil: syscall sequence checker 6885 - cmd/snap-update-ns: fix a leaking file descriptor in MkSymlink 6886 - packaging: use official bolt in the errtracker on fedora 6887 - many: add `snap debug connectivity` command* many: add `snap debug 6888 connectivity` command 6889 - configstate: deny configuration of base snaps and for the "snapd" 6890 snap 6891 - interfaces/raw-usb: also allow usb serial devices 6892 - snap: reject more layout locations 6893 - errtracker: do not send duplicated reports 6894 - httputil: extra debug if an error is not retried 6895 - cmd/snap-update-ns: improve wording in many errors 6896 - cmd/snap: use snaptest.MockSnapCurrent in `snap run` tests 6897 - cmd/snap-update-ns: add helper for checking for read-only 6898 filesystems 6899 - interfaces/builtin/docker: use commonInterface over specific 6900 struct 6901 - testutil: add test support for Fstatfs 6902 - cmd/snap-update-ns: discard the concept of segments 6903 - cmd/libsnap-confine-private: helper for extracting store snap name 6904 from local-name 6905 - tests: fix flaky test for hooks undo 6906 - interfaces: add {contacts,calendar}-service interfaces 6907 - tests: retry 'restarting into..' match in the snap-confine-from- 6908 core test 6909 - systemd: adjust TestWriteMountUnitForDirs() to use 6910 squashfs.MockUseFuse(false) 6911 - data: add helper that can generate/start/stop the snapd service 6912 - sefltest: advise reboot into 4.4 on trusty running 3.13 6913 - selftest: add new selftest package that tests squashfs mounting 6914 - store, jsonutil: move store.getStructFields to 6915 jsonutil.StructFields 6916 - ifacestate: improved conflict and error handling when creating 6917 autoconnect tasks 6918 - cmd/snap-confine: applied make fmt 6919 - interfaces/udev: call 'udevadm settle --timeout=10' after 6920 triggering events 6921 - tests: wait more time until snap start to be downloaded on 6922 econnreset test 6923 - snapstate: ensure fakestore returns TypeOS for the core snap 6924 - tests: fix lxd test which hangs on restore 6925 - cmd/snap-update-ns: add PathIterator 6926 - asserts,image: add support for models with bases 6927 - tests: shellchecks part 3 6928 - overlord/hookstate: support undo for hooks 6929 - interfaces/tpm: Allow access to the kernel resource manager 6930 - tests: skip appstream-id test for core systems 32 bits 6931 - interfaces/home: remove redundant common interface assignment 6932 - tests: reprioritise a few tests that are known to be slow 6933 - cmd/snap: small help tweaks and fixes 6934 - tests: add test to ensure /dev/input/event* for non-joysticks is 6935 denied 6936 - spread-shellcheck: silly fix & pep8 6937 - spread: switch fedora 28 to manual 6938 - client,cmd/snap,daemon,tests: expose base of a snap over API, show 6939 it in snap info --verbose 6940 - tests: fix lxd test - --auto now sets up networking 6941 - tests: adding fedora-28 to spread.yaml 6942 - interfaces: add juju-client-observe interface 6943 - client, daemon: add a "mounted-from" entry to local snaps' JSON 6944 - image: set model.DisplayName() in bootenv as "snap_menuentry" 6945 - packaging/opensuse: Refactor packaging to support all openSUSE 6946 targets 6947 - interfaces/joystick: force use of the device cgroup with joystick 6948 interface 6949 - interfaces/hardware-observe: allow access to /etc/sensors* for 6950 libsensors 6951 - interfaces: remove Plug/Slot types 6952 - interface hooks: update old AutoConnect methods 6953 - snapcraft: run with DEB_BUILD_OPTIONS=nocheck 6954 - overlord/{config,snap}state: the number of inactive revisions is 6955 config 6956 - cmd/snap: check with snapd for unknown sections 6957 - tests: moving test helpers from sh to bash 6958 - data/systemd: add snapd.apparmor.service 6959 - many: expose AppStream IDs (AKA common ID) 6960 - many: hold refresh when on metered connections 6961 - interfaces/joystick: also support modern evdev joysticks and 6962 gamepads 6963 - xdgopenproxy: skip TestOpenUnreadableFile when run as root 6964 - snapcraft: use dpkg-buildpackage options that work in xenial 6965 - spread: openSUSE LEAP 42.2 was EOLd in January, remove it 6966 - get-deps: work with an unset GOPATH too 6967 - interfaces/apparmor: use strict template on openSUSE tumbleweed 6968 - packaging: filter out verbose flags from "dh-golang" 6969 - packaging: fix description 6970 - snapcraft.yaml: add minimal snapcraft.yaml with custom build 6971 6972 * Fri Jun 22 2018 Neal Gompa <ngompa13@gmail.com> - 2.33.1-1 6973 - Release 2.33.1 to Fedora (RH#1567916) 6974 6975 * Thu Jun 21 2018 Michael Vogt <mvo@ubuntu.com> 6976 - New upstream release 2.33.1 6977 - many: improve udev trigger on refresh experience 6978 - systemd: require snapd.socket in snapd.seeded.service 6979 - snap: don't include newline in hook environment 6980 - interfaces/apparmor: allow killing snap-update-ns 6981 - tests: skip "try" test on s390x 6982 - tests: skip security-dev-input-event-denied when /dev/input/by- 6983 path/ is missing 6984 - tests: skip security-dev-input-event-denied on s390x/arm64 6985 6986 * Fri Jun 08 2018 Michael Vogt <mvo@ubuntu.com> 6987 - New upstream release 2.33 6988 - packaging: use official bolt in the errtracker on fedora 6989 - many: add `snap debug connectivity` command 6990 - interfaces/raw-usb: also allow usb serial devices 6991 - errtracker: do not send duplicated reports 6992 - selftest: add new selftest package that tests squashfs mounting 6993 - tests: backport lxd force stop and econnreset fixes 6994 - tests: add test to ensure /dev/input/event* for non-joysticks is 6995 denied 6996 - interfaces/joystick: support modern evdev joysticks 6997 - interfaces: add juju-client-observe 6998 - interfaces/hardware-observe: allow access to /etc/sensors* for 6999 libsensors 7000 - many: holding refresh on metered connections 7001 - many: expose AppStream IDs (AKA common ID) 7002 - tests: speed up save/restore snapd state for all-snap systems 7003 during tests execution 7004 - interfaces/apparmor: use helper to load stray profile 7005 - tests: ubuntu core abstraction 7006 - overlord/snapstate: don't panic in a corner case interaction of 7007 cleanup tasks and pruning 7008 - interfaces/apparmor: add 'mediate_deleted' profile flag for all 7009 snaps 7010 - tests: new parameter for the journalctl rate limit 7011 - spread-shellcheck: port to python 7012 - interfaces/home: add 'read' attribute to allow non-owner read to 7013 @{HOME} 7014 - testutil: import check.v1 differently to workaround gccgo error 7015 - interfaces/many: miscellaneous updates for default, desktop, 7016 desktop-legacy, system-observe, hardware-observe, opengl and gpg- 7017 keys 7018 - snapstate/hooks: reorder autoconnect and reconnect hooks 7019 - daemon: update unit tests to match current master 7020 - overlord/snapshotstate/backend: introducing the snapshot backend 7021 - many: support 'system' nickname in interfaces 7022 - userd: add the "snap" scheme to the whitelist 7023 - many: make rebooting of core on refresh immediate, refactor logic 7024 around it 7025 - tests/main/snap-service-timer: account for service timer being in 7026 the 'running' state 7027 - interfaces/builtin: allow access to libGLESv* too for opengl 7028 interface 7029 - daemon: fix unit tests on arch 7030 - interfaces/default,process-control: miscellaneous signal policy 7031 fixes 7032 - interfaces/bulitin: add write permission to optical-drive 7033 - configstate: validate known core.* options 7034 - snap, wrappers: systemd WatchdogSec support 7035 - ifacestate: do not auto-connect manually disconnected interfaces 7036 - systemd: mock useFuse() so testsuite passes in container via lxd 7037 snap 7038 - snap/env: fix env duplication logic 7039 - snap: some doc comments fixes and additions 7040 - cmd/snap-confine, interfaces/opengl: allow access to glvnd EGL 7041 vendor files 7042 - ifacestate: unify reconnect and autoconnect methods 7043 - tests: fix user mounts test for external systems 7044 - overlord/snapstate,overlord/auth,store: coalesce no auth user 7045 refresh requests 7046 - boot,partition: improve tests/docs around SetNextBoot() 7047 - many: improve `snap wait` command 7048 - snap: fix `snap interface --attrs` output when numbers are used 7049 - cmd/snap-update-ns: poke holes when creating source paths for 7050 layouts 7051 - snapstate: support getting new bases/default-providers on refresh 7052 - ifacemgr: remove stale connections on startup 7053 - asserts: use Attrer in policy checks 7054 - testutil: record system call errors / return values 7055 - tests: increase timeouts to make tests reliable on slow boards 7056 - repo: pass and return ConnRef via pointers 7057 - interfaces: add xdg-document-portal support to desktop interface 7058 - debian: add a zenity|kdialog suggests 7059 - snapstate: make TestDoPrereqRetryWhenBaseInFlight less brittle 7060 - tests: go must be installed as a classic snap 7061 - tests: use journalctl cursors instead rotating logs 7062 - daemon: add confinement-options to /v2/system-info 7063 daemon: refactor classic support flag to be more structured 7064 - tests: build spread in the autopkgtests with a more recent go 7065 - cmd/snap: fix the message when snap.channel != snap.tracking 7066 - overlord/snapstate: allow core defaults configuration via 'system' 7067 key 7068 - many: add "snap debug sandbox-features" and needed bits 7069 - interfaces: interface hooks for refresh 7070 - snapd.core-fixup.sh: add workaround for corrupted uboot.env 7071 - boot: clear "snap_mode" when needed 7072 - many: add wait command and `snapd.seeded` service 7073 - interfaces: move host font update-ns AppArmor rules to desktop 7074 interface 7075 - jsonutil/safejson: introducing safejson.String & 7076 safejson.Paragraph 7077 - cmd/snap-update-ns: use Secure.BindMount to bind mount files 7078 - cmd/snap-update-ns,tests: mimic the mode and ownership of 7079 directories 7080 - cmd/snap-update-ns: add support for ignoring mounts with missing 7081 source/target 7082 - interfaces: interface hooks implementation 7083 - cmd/libsnap: fix compile error on more restrictive gcc 7084 cmd/libsnap: fix compilation errors on gcc 8 7085 - interfaces/apparmor: allow bash and dash to be in /usr/bin/ 7086 - cmd/snap-confine: allow any base snap to provide /etc/alternatives 7087 - tests: fix interfaces-network test for systems with partial 7088 confinement 7089 - spread.yaml: add cosmic (18.10) to autopkgtest/qemu 7090 - tests: ubuntu 18.04 or higher does not need linux-image-extra- 7091 - configcore: validate experimental.layouts option 7092 - interfaces:minor autoconnect cleanup 7093 - HACKING: fix typos 7094 - spread: add adt for ubuntu 18.10 7095 - tests: skip test lp-1721518 for arch, snapd is failing to start 7096 after reboot 7097 - interfaces/x11: allow X11 slot implementations 7098 - tests: checking interfaces declaring the specific interface 7099 - snap: improve error for snaps not available in the given context 7100 - cmdstate: add missing test for default timeout handling 7101 - tests: shellcheck spread tasks 7102 - cmd/snap: update install/refresh help vs --revision 7103 - cmd/snap-confine: add support for per-user mounts 7104 - snap: do not use overly short timeout in `snap 7105 {start,stop,restart}` 7106 - tests: adding google-sru backend replacing linode-sur 7107 - interfaces/apparmor: fix incorrect apparmor profile glob 7108 - systemd: replace ancient paths with 16.04+ standards 7109 - overlord,systemd: store snap revision in mount units 7110 - testutil: add test helper for SysLstat 7111 - testutil,cmd: rename test helper of Lstat to OsLstat 7112 - testutil: document all fake syscall/os functions 7113 - osutil,interfaces,cmd: use less hardcoded strings 7114 - testutil: rename UNMOUNT_NOFOLLOW to umountNoFollow 7115 - testutil: don't dot-import check.v1 7116 - store: getStructFields takes pointers now 7117 - tests: drop `linux-image-extra-$(uname -r)` install in 18.04 7118 - many: fix false negatives reported by vet 7119 - osutil,interfaces: use uint32 for uid, gid 7120 - many: fix various issues reported by shellcheck 7121 - tests: add pending shutdown detection 7122 - image: support refreshing soft-expired user macaroons in tooling 7123 - interfaces/builtin, daemon: cleanup mocked builtin interfaces in 7124 daemon tests 7125 - interfaces/builtin: add support for software-watchdog interface 7126 - spread: auto accept key changes when calling dnf 7127 - snap,overlord/snapstate: introduce and use BrokenSnapError 7128 - tests: detect kernel oops during tests and abort tests in this 7129 case 7130 - tests: bring back one missing test in snap-service-stop-mode 7131 - debian: update LP bug for the 2.32.5 SRU 7132 - userd: set up journal logging streams for autostarted apps 7133 - snap,tests : don't fail if we cannot stat MountFile 7134 - tests: smaller fixes for Arch tests 7135 - tests: run interfaces-broadcom-asic-control early 7136 - client: support for snapshot sets, snapshots, and snapshot actions 7137 - tests: skip interfaces-content test on core devices 7138 - cmd: generalize locking to global, snap and per-user locks 7139 - release-tools: handle the snapd-x.y.z version 7140 - packaging: fix incorrectly auto-generated changelog entry for 7141 2.32.5 7142 - tests: add arch to CI 7143 - systemd: add helper for opening stream file descriptors to the 7144 journal 7145 - cmd/snap: handle distros with no version ID 7146 - many: add "stop-mode: sig{term,hup,usr[12]}{,-all}" instead of 7147 conflating that with refresh-mode 7148 - tests: removing linode-sru backend 7149 - tests: updating bionic version for spread tests on google 7150 - overlord/snapstate: poll for up to 10s if a snap is unexpectedly 7151 not mounted in doMountSnap 7152 - overlord/snapstate: allow to get an error from readInfo instead of 7153 a broken stub, use it in doMountSnap 7154 - snap: snap.AppInfo is now a fmt.Stringer 7155 - tests: move fedora 27 to google backend 7156 - many: add `core.problem-reports.disabled` option 7157 - cmd/snap-update-ns: remove the need for stash directory in secure 7158 bind mount implementation 7159 - errtracker: check for whoopsie.service instead of reading 7160 /etc/whoopsie 7161 - cmd/snap: user session application autostart v3 7162 - tests: add test to ensure `snap refresh --amend` works with 7163 different channels 7164 - tests: add check for OOM error after each test 7165 - cmd/snap-seccomp: graceful handling of non-multilib host 7166 - interfaces/shutdown: allow calling SetWallMessage 7167 - cmd/snap-update-ns: add secure bind mount implementation for use 7168 with user mounts 7169 - snap: fix `snap advise-snap --command` output to match spec 7170 - overlord/snapstate: on multi-snap refresh make sure bases and core 7171 are finished before dependent snaps 7172 - overlord/snapstate: introduce envvars to control the channels for 7173 based and prereqs 7174 - cmd/snap-confine: ignore missing cgroups in snap-device-helper 7175 - debian: add gbp.conf script to build snapd via `gbp buildpackage` 7176 - daemon,overlord/hookstate: stop/wait for running hooks before 7177 closing the snapctl socket 7178 - advisor: use json for package database 7179 - interfaces/hostname-control: allow setting the hostname via 7180 syscall and systemd 7181 - tests/main/interfaces-opengl-nvidia: verify access to 32bit 7182 libraries 7183 - interfaces: misc updates for default, firewall-control, fuse- 7184 support and process-control 7185 - data/selinux: Give snapd access to more aspects of the system 7186 - many: use the new install/refresh API by switching snapstate to 7187 use store.SnapAction 7188 - errtracker: make TestJournalErrorSilentError work on gccgo 7189 - ifacestate: add to the repo also snaps that are pending being 7190 activated but have a done setup-profiles 7191 - snapstate, ifacestate: inject auto-connect tasks try 2 7192 - cmd/snap-confine: allow creating missing gl32, gl, vulkan dirs 7193 - errtracker: add more fields to aid debugging 7194 - interfaces: make system-key more robust against invalid fstab 7195 entries 7196 - overlord,interfaces: be more vocal about broken snaps and read 7197 errors 7198 - ifacestate: injectTasks helper 7199 - osutil: fix fstab parser to allow for # in field values 7200 - cmd/snap-mgmt: remove timers, udev rules, dbus policy files 7201 - release-tools: add repack-debian-tarball.sh 7202 - daemon,client: add build-id to /v2/system-info 7203 - cmd: make fmt (indent 2.2.11) 7204 - interfaces/content: add rule so slot can access writable files at 7205 plug's mountpoint 7206 - interfaces: add /var/lib/snapd/snap to @{INSTALL_DIR} 7207 - ifacestate: don't surface errors from stale connections 7208 - cmd/snap-update-ns: convert Secure* family of functions into 7209 methods 7210 - tests: adjust canonical-livepatch test on GCE 7211 - tests: fix quoting issues in econnreset test 7212 - cmd/snap-confine: make /run/media an alias of /media 7213 - cmd/snap-update-ns: rename i to segNum 7214 - interfaces/serial: change pattern not to exclude /dev/ttymxc* 7215 - spread: disable StartLimitInterval option on opensuse-42.3 7216 - configstate: give a chance to immediately recompute the next 7217 refresh time when schedules are set 7218 - cmd/snap-confine: attempt to detect if multiarch host uses 7219 arch triplets 7220 - store: add Store.SnapAction to support the new install/refresh API 7221 endpoint 7222 - tests: adding test for removable-media interface 7223 - tests: update interface tests to remove extra checks and normalize 7224 tests 7225 - timeutil: in Human, count days with fingers 7226 - vendor: update gopkg.in/yaml.v2 to the latest version 7227 - cmd/snap-confine: fix Archlinux compatibility 7228 - cmd/snapd: make sure signal handlers are established during early 7229 daemon startup 7230 - cmd/snap-confine: apparmor: allow creating prefix path for 7231 gl/vulkan 7232 - osutil: use tilde suffix for temporary files used for atomic 7233 replacement 7234 - tests: copy or sanity check core users using usernames 7235 - tests: disentangle etc vs extrausers in core tests 7236 - tests: fix snap-run tests when snapd is not running 7237 - overlord/configstate: change how ssh is stopped/started 7238 - snap: make `snap run` look at the system-key for security profiles 7239 - strutil, cmd/snap: drop strutil.WordWrap, first pass at 7240 replacement 7241 - tests: adding opensuse-42.3 to google 7242 - cmd/snap: fix one issue with noWait error handling logic, add 7243 tests plus other cleanups 7244 - cmd/snap-confine: nvidia: preserve globbed file prefix 7245 - advisor: add comment why osutil.FileExists(dirs.SnapCommandsDB) is 7246 needed 7247 - interfaces,release: probe seccomp features lazily 7248 - tests: change debug for layout test 7249 - advisor: deal with missing commands.db file 7250 - interfaces/apparmor: simplify UpdateNS internals 7251 - polkit: Pass caller uid to PolicyKit authority 7252 - tests: moving debian 9 from linode to google backend 7253 - cmd/snap-confine: nvidia: add tls/libnvidia-tls.so* glob 7254 - po: specify charset in po/snappy.pot 7255 - interfaces: harden snap-update-ns profile 7256 - snap: Call SanitizePlugsSlots from InfoFromSnapYaml 7257 - tests: update tests to deal with s390x quirks 7258 - debian: run snap.mount upgrade fixup *before* debhelper 7259 - tests: move xenial i386 to google backend 7260 - snapstate: add compat mode for default-provider 7261 - tests: a bunch of test fixes for s390x from looking at the 7262 autopkgtest logs 7263 - packaging: recommend "gnupg" instead of "gnupg1 | gnupg" 7264 - interfaces/builtin: let MM change qmi device attributes 7265 - tests: add workaround for s390x failure 7266 - snap/pack, cmd/snap: add `snap pack --check-skeleton` 7267 - daemon: support 'system' as nickname of the core snap 7268 - cmd/snap-update-ns: use x-snapd.{synthetic,needed-by} in practice 7269 - devicestate: add DeviceManager.Registered returning a channel 7270 closed when the device is known to be registered 7271 - store: Sections and WriteCatalogs need to strictly send device 7272 auth only if the device has a custom store 7273 - tests: add bionic system to google backend 7274 - many: fix shellcheck warnings in bionic 7275 - cmd/snap-update-ns: don't fail on existing symlinks 7276 - tests: make autopkgtest tests more targeted 7277 - cmd/snap-update-ns: fix creation of layout symlinks 7278 - spread,tests: move suite-level prepare/restore to central script 7279 - many: propagate contexts enough to be able to mark store 7280 operations done from the Ensure loop 7281 - snap: don't create empty Change with "Hold" state on disconnect 7282 - snap: unify snap name validation w/python; enforce length limit. 7283 - cmd/snap: use shlex when parsing `snap run --strace` arguments 7284 - osutil,testutil: add symlinkat(2) and readlinkat(2) 7285 - tests: autopkgtest may have non edge core too 7286 - tests: adding checks before stopping snapd service to avoid job 7287 canceled on ubuntu 14.04 7288 - errtracker: respect the /etc/whoopsie configuration 7289 - overlord/snapstate: hold refreshes for 2h after seeding on 7290 classic 7291 - cmd/snap: tweak and polish help strings 7292 - snapstate: put layout feature behind feature flag 7293 - tests: force profile re-generation via system-key 7294 - snap/squashfs: when installing from seed, try symlink before cp 7295 - wrappers: services which are socket or timer activated should not 7296 be started during boot 7297 - many: go vet cleanups 7298 - tests: define MATCH from spread 7299 - packaging/fedora: Merge changes from Fedora Dist-Git plus trivial 7300 fix 7301 - cmd/snap: use timeutil.Human to show times in `snap refresh 7302 --time` 7303 - cmd/snap: in changes and tasks, default to human-friendly times 7304 - many: support holding refreshes by setting refresh.hold 7305 - Revert "cmd/snap: use timeutil.Human to show times in `snap 7306 refresh -…-time`" 7307 - cmd/snap: use timeutil.Human to show times in `snap refresh 7308 --time` 7309 - tests/main/snap-service-refresh-mode: refactor the test to rely on 7310 comparing PIDs 7311 - tests/main/media-sharing: improve the test to cover /media and 7312 /run/media 7313 - store: enable deltas for core devices too 7314 - cmd/snap: unhide --no-wait; make wait use go via waitMixin 7315 - strutil/shlex: import github.com/google/shlex into the tree 7316 - vendor: update github.com/mvo5/libseccomp-golang 7317 - overlord/snapstate: block install of "system" 7318 - cmd/snap: "current"→"installed"; "refreshed"→"refresh-date" 7319 - many: add the snapd-generator 7320 - cmd/snap-seccomp: Cancel the atomic file on error, not just Close 7321 - polkit: ensure error is properly set if dialog is dismissed 7322 - snap-confine, snap-seccomp: utilize new seccomp logging features 7323 - progress: tweak ansimeter cvvis use to no longer confuse minicom 7324 - xdgopenproxy: integrate xdg-open implementation into snapctl 7325 - tests: avoid removing preinstalled snaps on core 7326 - tests: chroot into core to run xdg-open there 7327 - userd: add an OpenFile method for launching local files with xdg- 7328 open 7329 - tests: moving ubuntu core from linode to google backend 7330 - run-checks: remove accidental bashism 7331 - i18n: simplify NG usage by doing the modulo math in-package. 7332 - snap/squashfs: set timezone when calling unsquashfs to get the 7333 build date 7334 - timeutil: timeutil.Human(t) gives a human-friendly string for t 7335 - snap: add autostart app property 7336 - tests: add support for external backend executions on listing test 7337 - tests: make interface-broadcom-asic-control test work on rpi 7338 - configstate: when disable "ssh" we must disable the "sshd" service 7339 - interfaces/apparmor,system-key: add upperdir snippets for strict 7340 snaps on livecd 7341 - snap/squashfs: add BuildDate 7342 - store: parse the JSON format used by the coming new store API to 7343 convey snap information 7344 - many: remove snapd.refresh.{timer,service} 7345 - tests: adding ubuntu-14.04-64 to the google backend 7346 - interfaces: add xdg-desktop-portal support to desktop interface 7347 - packaging/arch: sync with snapd/snapd-git from AUR 7348 - wrappers, tests/main/snap-service-timer: restore missing commit, 7349 add spread test for timer services 7350 - store: don't ask for snap_yaml_raw except on the details endpoint 7351 - many: generate and use per-snap snap-update-ns profile 7352 - tests: add debug for layout test 7353 - wrappers: detect whether systemd-analyze can be used in unit tests 7354 - osutil: allow creating strings out of MountInfoEntry 7355 - servicestate: use systemctl enable+start and disable+stop instead 7356 of --now flag 7357 - osutil: handle file being matched by multiple patterns 7358 - daemon, snap: fix InstallDate, make a method of *snap.Info 7359 - wrappers: timer services 7360 - wrappers: generator for systemd OnCalendar schedules 7361 - asserts: fix flaky storeSuite.TestCheckAuthority 7362 - tests: fix dependency for ubuntu artful 7363 - spread: start moving towards google backend 7364 - tests: add a spread test for layouts 7365 - ifacestate: be consistent passing Retry.After as named field 7366 - cmd/snap-update-ns: use recursive bind mounts for writable mimic 7367 - testutil: allow mocking syscall.Fstat 7368 - overlord/snapstate: verify that default schedule is randomized and 7369 is not a single time 7370 - many: simplify mocking of home-on-NFS 7371 - cmd/snap-update-ns: use syscall.Symlink instead of os.Symlink 7372 - store: move infoFromRemote into details.go close to snapDetails 7373 - userd/tests: Test kdialog calls and mock kdialog too to make tests 7374 work in KDE 7375 - cmd/snap: tweaks to 'snap info' (feat. installed->current rename) 7376 - cmd/snap: add self-strace to `snap run` 7377 - interfaces/screen-inhibit-control,network-status: fix dbus path 7378 and interface typos 7379 - update-pot: Force xgettext() to return true 7380 - store: cleanup test naming, dropping remoteRepo and 7381 UbuntuStore(Repository)? references 7382 - store: reorg auth refresh 7383 7384 * Wed May 16 2018 Michael Vogt <mvo@ubuntu.com> 7385 - New upstream release 2.32.9 7386 - tests: run all spread tests inside GCE 7387 - tests: build spread in the autopkgtests with a more recent go 7388 7389 * Fri May 11 2018 Michael Vogt <mvo@ubuntu.com> 7390 - New upstream release 2.32.8 7391 - snapd.core-fixup.sh: add workaround for corrupted uboot.env 7392 7393 * Fri May 11 2018 Michael Vogt <mvo@ubuntu.com> 7394 - New upstream release 2.32.7 7395 - many: add wait command and seeded target (2 7396 - snapd.core-fixup.sh: add workaround for corrupted uboot.env 7397 - boot: clear "snap_mode" when needed 7398 - cmd/libsnap: fix compile error on more restrictive gcc 7399 - tests: cherry-pick commits to move spread to google backend 7400 - spread.yaml: add cosmic (18.10) to autopkgtest/qemu 7401 - userd: set up journal logging streams for autostarted apps 7402 7403 * Sun Apr 29 2018 Michael Vogt <mvo@ubuntu.com> 7404 - New upstream release 2.32.6 7405 - snap: do not use overly short timeout in `snap 7406 {start,stop,restart}` 7407 - interfaces/apparmor: fix incorrect apparmor profile glob 7408 - tests: detect kernel oops during tests and abort tests in this 7409 case 7410 - tests: run interfaces-boradcom-asic-control early 7411 - tests: skip interfaces-content test on core devices 7412 7413 * Mon Apr 16 2018 Michael Vogt <mvo@ubuntu.com> 7414 - New upstream release 2.32.5 7415 - many: add "stop-mode: sig{term,hup,usr[12]}{,-all}" instead of 7416 conflating that with refresh-mode 7417 - overlord/snapstate: poll for up to 10s if a snap is unexpectedly 7418 not mounted in doMountSnap 7419 - daemon: support 'system' as nickname of the core snap 7420 7421 * Thu Apr 12 2018 Neal Gompa <ngompa13@gmail.com> - 2.32.4-1 7422 - Release 2.32.4 to Fedora (RH#1553734) 7423 7424 * Wed Apr 11 2018 Michael Vogt <mvo@ubuntu.com> 7425 - New upstream release 2.32.4 7426 - cmd/snap: user session application autostart 7427 - overlord/snapstate: introduce envvars to control the channels for 7428 bases and prereqs 7429 - overlord/snapstate: on multi-snap refresh make sure bases and core 7430 are finished before dependent snaps 7431 - many: use the new install/refresh /v2/snaps/refresh store API 7432 7433 * Wed Apr 11 2018 Michael Vogt <mvo@ubuntu.com> 7434 - New upstream release 2.32.3.2 7435 - errtracker: make TestJournalErrorSilentError work on 7436 gccgo 7437 - errtracker: check for whoopsie.service instead of reading 7438 /etc/whoopsie 7439 7440 * Wed Apr 11 2018 Michael Vogt <mvo@ubuntu.com> 7441 - New upstream release 2.32.3.1 7442 - debian: add gbp.conf script to build snapd via `gbp 7443 buildpackage` 7444 - tests: add check for OOM error after each test 7445 - cmd/snap-seccomp: graceful handling of non-multilib host 7446 - interfaces/shutdown: allow calling SetWallMessage 7447 - data/selinux: Give snapd access to more aspects of the system 7448 - daemon,overlord/hookstate: stop/wait for running hooks before 7449 closing the snapctl socket 7450 - cmd/snap-confine: ignore missing cgroups in snap-device-helper 7451 - interfaces: misc updates for default, firewall-control, fuse- 7452 support and process-control 7453 - overlord: test fix, address corner case 7454 7455 * Thu Apr 05 2018 Michael Vogt <mvo@ubuntu.com> 7456 - New upstream release 2.32.3 7457 - ifacestate: add to the repo also snaps that are pending being 7458 activated but have a done setup-profiles 7459 - snapstate: inject autoconnect tasks in doLinkSnap for regular 7460 snaps 7461 - cmd/snap-confine: allow creating missing gl32, gl, vulkan dirs 7462 - errtracker: add more fields to aid debugging 7463 - interfaces: make system-key more robust against invalid fstab 7464 entries 7465 - cmd/snap-mgmt: remove timers, udev rules, dbus policy files 7466 - overlord,interfaces: be more vocal about broken snaps and read 7467 errors 7468 - osutil: fix fstab parser to allow for # in field values 7469 7470 * Sat Mar 31 2018 Michael Vogt <mvo@ubuntu.com> 7471 - New upstream release 2.32.2 7472 - interfaces/content: add rule so slot can access writable files at 7473 plug's mountpoint 7474 - tests: adjust canonical-livepatch test on GCE 7475 - interfaces/serial: change pattern not to exclude /dev/ttymxc 7476 - spread.yaml: switch Fedora 27 tests to manual 7477 - store: Sections and WriteCatalogs need to strictly send device 7478 auth only if the device has a custom store 7479 - configstate: give a chance to immediately recompute the next 7480 refresh time when schedules are set 7481 - cmd/snap-confine: attempt to detect if multiarch host uses arch 7482 triplets 7483 - vendor: update gopkg.in/yaml.v2 to the latest version (#4945) 7484 7485 * Mon Mar 26 2018 Michael Vogt <mvo@ubuntu.com> 7486 - New upstream release 2.32.1 7487 - cmd/snapd: make sure signal handlers are established during early 7488 daemon startup 7489 - osutil: use tilde suffix for temporary files used for atomic 7490 replacement 7491 - cmd/snap-confine: apparmor: allow creating prefix path for 7492 gl/vulkan 7493 - tests: disentangle etc vs extrausers in core tests 7494 - packaging: fix changelogs' typo 7495 7496 * Sat Mar 24 2018 Michael Vogt <mvo@ubuntu.com> 7497 - New upstream release 2.32 7498 - snap: make `snap run` look at the system-key for security profiles 7499 - overlord/configstate: change how ssh is stopped/started 7500 - cmd/snap-confine: nvidia: preserve globbed file prefix 7501 - advisor: deal with missing commands.db file 7502 - interfaces,release: probe seccomp features lazily 7503 - interfaces: harden snap-update-ns profile 7504 - polkit: Pass caller uid to PolicyKit authority 7505 - tests: change debug for layout test 7506 - cmd/snap-confine: don't use per-snap s-u-n profile 7507 - many: backported fixes for layouts and symlinks 7508 - cmd/snap-confine: nvidia: add tls/libnvidia-tls.so* glob 7509 - cmd/snap-update-ns: use x-snapd.{synthetic,needed-by} in practice 7510 - snap: Call SanitizePlugsSlots from InfoFromSnapYaml 7511 - cmd/snap-confine: fix ptrace rule with snap-confine peer 7512 - tests: update tests to deal with s390x quirks 7513 - snapstate: add compat mode for default-provider"snapname:ifname" 7514 - snap-confine: fallback to /lib/udev/snappy-app-dev if the core is 7515 older 7516 - tests: a bunch of test fixes for s390x from looking at the 7517 autopkgtest logs 7518 - packaging: recommend "gnupg" instead of "gnupg1 | gnupg" 7519 - interfaces/builtin: let MM change qmi device attributes 7520 - debian: undo snap.mount system unit removal 7521 - snap: don't create empty Change with "Hold" state on disconnect 7522 - tests: add workaround for s390x failure 7523 - tests: make autopkgtest tests more targeted 7524 - many: propagate contexts enough to be able to mark store 7525 operations done from the Ensure loop 7526 - store: cleanup test naming, dropping remoteRepo and 7527 UbuntuStore(Repository)? references 7528 - store: reorg auth refresh 7529 - tests: autopkgtest may have non edge core too 7530 - data: translate polkit strings 7531 - snapstate: put layout feature behind feature flag 7532 - errtracker: respect the /etc/whoopsie configuration 7533 - overlord/snapstate: hold refreshes for 2h after seeding on classic 7534 - many: cherry-pick relevant `go vet` 1.10 fixes to 2.32 7535 - snap/squashfs: when installing from seed, try symlink before cp 7536 - wrappers: services which are socket or timer activated should not 7537 be started during boot 7538 - many: generate and use per-snap snap-update-ns profile 7539 - many: support holding refreshes by setting refresh.hold 7540 - snap-confine, snap-seccomp: utilize new seccomp logging features 7541 - many: remove snapd.refresh.{timer,service} 7542 - many: add the snapd-generator 7543 - polkit: do not shadow dbus errors, avoid panic in case of errors 7544 - polkit: ensure error is properly set if dialog is dismissed 7545 - xdgopenproxy: integrate xdg-open implementation into snapctl 7546 - userd: add an OpenFile method for launching local files with xdg- 7547 open 7548 - asserts: use a timestamp for the assertion after the signing key 7549 has been created 7550 - ifacestate: be consistent passing Retry.After as named field 7551 - interfaces/apparmor,system-key: add upperdir snippets for strict 7552 snaps on livecd 7553 interfaces/apparmor,system-key: add upperdir snippets for strict 7554 snaps 7555 - configstate: when disable "ssh" we must disable the "sshd" 7556 service 7557 - store: don't ask for snap_yaml_raw except on the details endpoint 7558 - osutil: handle file being matched by multiple patterns 7559 - cmd/snap-update-ns: use recursive bind mounts for writable mimic 7560 - cmd/snap-update-ns: use syscall.Symlink instead of os.Symlink 7561 - interfaces/screen-inhibit-control,network-status: fix dbus path 7562 and interface typos 7563 - interfaces/network-status: fix use of '/' in interface in DBus 7564 rule 7565 - interfaces/screen-inhibit-control: fix use of '.' in path in DBus 7566 rule 7567 - overlord/snapstate: fix task iteration order in 7568 TestDoPrereqRetryWhenBaseInFlight 7569 - interfaces: add an interface for gnome-online-accounts D-Bus 7570 service 7571 - snap: pass full timer spec in `snap run --timer` 7572 - cmd/snap: introduce `snap run --timer` 7573 - snapstate: auto install default-providers for content snaps 7574 - hooks/strutil: limit the number of data read from the hooks to 7575 avoid oom 7576 - osutil: aggregate mockable symbols 7577 - tests: make sure snapd is running before attempting to remove 7578 leftover snaps 7579 - timeutil: account for 24h wrap when flattening clock spans 7580 - many: send new Snap-CDN header with none or with cloud instance 7581 placement info as needed 7582 - cmd/snap-update-ns,testutil: move syscall testing helpers 7583 - tests: disable interfaces-location-control on s390x 7584 - tests: new spread test for gpio-memory-control interface 7585 - tests: spread test for broadcom-asic-control interface 7586 - tests: make restore of interfaces-password-manager-service more 7587 robust 7588 - tests/lib/prepare-restore: sync journal before rotating and 7589 vacuuming 7590 - overlord/snapstate: use spread in the default refresh schedule 7591 - tests: fixes for autopkgtest in bionic 7592 - timeutil: introduce helpers for checking it time falls inside the 7593 schedule 7594 - cmd/snap-repair,httputil: set snap-repair User-Agent on requests 7595 - vendor: resync formatting of vendor.json 7596 - snapstate/ifacestate: auto-connect tasks 7597 - cmd/snap: also include tracking channel in list output. 7598 - interfaces/apparmor: use snap revision with surrounding '.' when 7599 replacing in glob 7600 - debian,vendor: import github.com/snapcore/squashfs and use 7601 - many: implement "refresh-mode: {restart,endure,...}" for services 7602 - daemon: make the ast-inspecting test smarter; drop 'exceptions' 7603 - tests: new spread test for kvm interface 7604 - cmd/snap: tweaks to 'snap info' output 7605 - snap: remove underscore from version validator regexp 7606 - testutil: add File{Matches,Equals,Contains} checkers. 7607 - snap: improve the version validator's error messages. 7608 - osutil: refactor EnsureFileState to separate out the comparator 7609 - timeutil: fix scheduling on nth weekday of the month 7610 - cmd/snap-update-ns: small refactor for upcoming per-user mounts 7611 - many: rename snappy-app-dev to snap-device-helper 7612 - systemd: add default target for timers 7613 - interfaces: miscellaneous policy updates for home, opengl, time- 7614 control, network, et al 7615 - cmd/snap: linter cleanups 7616 - interfaces/mount: generate per-user mount profiles 7617 - cmd/snap: use proper help strings for `snap userd --help` 7618 - packaging: provide a compat symlink for snappy-app-dev 7619 - interfaces/time-control,netlink-audit: adjust for util-linux 7620 compiled with libaudit 7621 - tests: adding new test to validate the raw-usb interface 7622 - snap: add support for `snap run --gdb` 7623 - interfaces/builtin: allow MM to access login1 7624 - packaging: fix build on sbuild 7625 - store: revert PR#4532 and do not display displayname 7626 - interfaces/mount: add support for per-user mount entries 7627 - cmd/system-shutdown: move sync to be even more pessimistic 7628 - osutil: reimplement IsMounted with LoadMountInfo 7629 - tests/main/ubuntu-core-services: enable snapd.refresh.timer for 7630 the test 7631 - many: don't allow layout construction to silently fail 7632 - interfaces/apparmor: ensure snap-confine profile for reexec is 7633 current 7634 - interfaces/apparmor: generalize apparmor load and unload helpers 7635 - tests: removing packages which are not needed anymore to generate 7636 random data 7637 - snap: improve `snap run` comments/naming 7638 - snap: allow options for --strace, e.g. `snap run --strace="-tt"` 7639 - tests: fix spread test failures on 18.04 7640 - systemd: update comment on SocketsTarget 7641 - osutil: add and update docstrings 7642 - osutil: parse mount entries without options field 7643 - interfaces: mock away real mountinfo/fstab 7644 - many: move /lib/udev/snappy-app-dev to /usr/lib/snapd/snappy-app- 7645 dev 7646 - overlord/snapstate/backend: perform cleanup if snap setup fails 7647 - tests/lib/prepare: disable snapd.refresh.timer 7648 - daemon: remove redundant UserOK markings from api commands 7649 - snap: introduce timer service data types and validation 7650 - cmd/snap: fix UX of snap services 7651 - daemon: allow `snapctl get` from any uid 7652 - debian, snap: only static link libseccomp in snap-seccomp on 7653 ubuntu 7654 - all: snap versions are now validated 7655 - many: add nfs-home flag to system-key 7656 - snap: disallow layouts in various special directories 7657 - cmd/snap: add help for service commands. 7658 - devicestate: fix autopkgtest failure in 7659 TestDoRequestSerialErrorsOnNoHost 7660 - snap,interfaces: allow using bind-file layouts 7661 - many: move mount code to osutil 7662 - snap: understand directories in layout blacklist 7663 - snap: use custom unsquashfsStderrWriter for unsquashfs error 7664 detection 7665 - tests/main/user-data-handling: get rid of ordering bug 7666 - snap: exclude `gettimeofday` from `snap run --strace` 7667 - tests: check if snapd.socket is active before stoping it 7668 - snap: sort layout elements before validating 7669 - strutil: introducing MatchCounter 7670 - snap: detect unsquashfs write failures 7671 - spread: add missing ubuntu-18.04-arm64 to available autopkgtest 7672 machines 7673 - cmd/snap-confine: allow mounting anywhere, effectively 7674 - daemon: improve ucrednet code for the snap.socket 7675 - release, interfaces: add new release.AppArmorFeatures helper 7676 - snap: apply some golint suggestions 7677 - many: add interfaces.SystemKey() helper 7678 - tests: new snaps to test installs nightly 7679 - tests: skip alsa interface test when the system does not have any 7680 audio devices 7681 - debian/rules: workaround for 7682 https://github.com/golang/go/issues/23721 7683 - interfaces/apparmor: early support for snap-update-ns snippets 7684 - wrappers: cleanup enabled service sockets 7685 - cmd/snap-update-ns: large refactor / update of unit tests 7686 - interfaces/apparmor: remove leaked future layout code 7687 - many: allow constructing layouts (phase 1) 7688 - data/systemd: for debugging/testing use /etc/environment also for 7689 snap-repair runs 7690 - cmd/snap-confine: create lib/{gl,gl32,vulkan} under /var/lib/snapd 7691 and chown as root:root 7692 - overlord/configstate/config: make [GS]etSnapConfig use *RawMessage 7693 - daemon: refactor snapFooMany helpers a little 7694 - cmd/snap-confine: allow snap-update-ns to chown things 7695 - interfaces/apparmor: use a helper to set the scope 7696 - overlord/configstate/config: make SetSnapConfig delete on empty 7697 - osutil: make MkdirAllChown clean the path passed in 7698 - many: at seeding try to capture cloud information into core config 7699 under "cloud" 7700 - cmd/snap: add completion conversion helper to increase DRY 7701 - many: remove "content" argument from snaptest.MockSnap() 7702 - osutil: allow using many globs in EnsureDirState 7703 - cmd/snap-confine: fix read-only filesystem when mounting nvidia 7704 files in biarch 7705 - tests: use root path to /home/test/tmp to avoid lack of space 7706 issue 7707 - packaging: create /var/lib/snapd/lib/{gl,gl32,vulkan} as part of 7708 packaging 7709 - tests: update kill-timeout focused on making tests pass on boards 7710 - advisor: ensure commands.db has mode 0644 and add test 7711 - snap: improve validation of snap layouts 7712 - tests: ensure disabled services are masked 7713 - interfaces/desktop-legacy,unity7: support gtk2/gvfs gtk_show_uri() 7714 - systemd, wrappers: start all snap services in one systemctl call 7715 - mir: software clients need access to shared memory /dev/shm/#* 7716 - snap: add support for `snap advise-snap pkgName` 7717 - snap: fix command-not-found on core devices 7718 - tests: new spead test for openvswitch-support interface 7719 - tests: add integration for local snap licenses 7720 - config: add (Get|Set)SnapConfig to do bulk config e.g. from 7721 snapshots 7722 - cmd/snap: display snap license information 7723 - tests: enable content sharing test for $SNAP 7724 - osutil: add ContextWriter and RunWithContext helpers. 7725 - osutil: add DirExists and IsDirNotExist 7726 7727 * Fri Mar 09 2018 Michael Vogt <mvo@ubuntu.com> 7728 - New upstream release 2.31.2 7729 - many: add the snapd-generator 7730 - polkit: ensure error is properly set if dialog is dismissed 7731 - xdgopenproxy: integrate xdg-open implementation into snapctl 7732 - userd: add an OpenFile method for launching local files with xdg- 7733 open 7734 - configstate: when disable "ssh" we must disable the "sshd" 7735 service 7736 - many: remove snapd.refresh.{timer,service} 7737 - interfaces/builtin: allow MM to access login1 7738 - timeutil: account for 24h wrap when flattening clock spans 7739 - interfaces/screen-inhibit-control,network-status: fix dbus path 7740 and interface typos 7741 - systemd, wrappers: start all snap services in one systemctl 7742 call 7743 - tests: disable interfaces-location-control on s390x 7744 7745 * Mon Mar 05 2018 Neal Gompa <ngompa13@gmail.com> - 2.31.1-2 7746 - Fix dependencies for devel subpackage 7747 7748 * Sun Mar 04 2018 Neal Gompa <ngompa13@gmail.com> - 2.31.1-1 7749 - Release 2.31.1 to Fedora (RH#1542483) 7750 - Drop all backported patches as they're part of this release 7751 7752 * Tue Feb 20 2018 Michael Vogt <mvo@ubuntu.com> 7753 - New upstream release 2.31.1 7754 - tests: multiple autopkgtest related fixes for 18.04 7755 - overlord/snapstate: use spread in the default refresh schedule 7756 - timeutil: fix scheduling on nth weekday of the month 7757 - interfaces: miscellaneous policy updates for home, opengl, time- 7758 control, network, et al 7759 - cmd/snap: use proper help strings for `snap userd --help` 7760 - interfaces/time-control,netlink-audit: adjust for util-linux 7761 compiled with libaudit 7762 - rules: do not static link on powerpc 7763 - packaging: revert LDFLAGS rewrite again after building snap- 7764 seccomp 7765 - store: revert PR#4532 and do not display displayname 7766 - daemon: allow `snapctl get` from any uid 7767 - debian, snap: only static link libseccomp in snap-seccomp on 7768 ubuntu 7769 - daemon: improve ucrednet code for the snap.socket 7770 7771 * Fri Feb 09 2018 Fedora Release Engineering <releng@fedoraproject.org> - 2.30-2 7772 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild 7773 7774 * Tue Feb 06 2018 Michael Vogt <mvo@ubuntu.com> 7775 - New upstream release 2.31 7776 - cmd/snap-confine: allow snap-update-ns to chown things 7777 - cmd/snap-confine: fix read-only filesystem when mounting nvidia 7778 files in biarch 7779 - packaging: create /var/lib/snapd/lib/{gl,gl32,vulkan} as part of 7780 packaging 7781 - advisor: ensure commands.db has mode 0644 and add test 7782 - interfaces/desktop-legacy,unity7: support gtk2/gvfs gtk_show_uri() 7783 - snap: improve validation of snap layoutsRules for validating 7784 layouts: 7785 - snap: fix command-not-found on core devices 7786 - cmd/snap: display snap license information 7787 - tests: enable content sharing test for $SNAP 7788 - userd: add support for a simple UI that can be used from userd 7789 - snap-confine/nvidia: Support legacy biarch trees for GLVND systems 7790 - tests: generic detection of gadget and kernel snaps 7791 - cmd/snap-update-ns: refactor and improve Change.Perform to handle 7792 EROFS 7793 - cmd/snap: improve output when snaps were found in a section or the 7794 section is invalid 7795 - cmd/snap-confine,tests: hide message about stale base snap 7796 - cmd/snap-mgmt: fix out of source tree build 7797 - strutil/quantity: new package that exports formatFoo (from 7798 progress) 7799 - cmd/snap: snap refresh --time with new and legacy schedules 7800 - state: unknown tasks handler 7801 - cmd/snap-confine,data/systemd: fix removal of snaps inside LXD 7802 - snap: add io.snapcraft.Settings to `snap userd` 7803 - spread: remove more EOLed releases 7804 - snap: tidy up top-level help output 7805 - snap: fix race in `snap run --strace` 7806 - tests: update "searching" test to match store changes 7807 - store: use the "publisher" when populating the "publisher" field 7808 - snap: make `snap find --section` show all sections 7809 - tests: new test to validate location control interface 7810 - many: add new `snap refresh --amend <snap>` command 7811 - tests/main/kernel-snap-refresh-on-core: skip the whole test if 7812 edge and stable are the same version 7813 - tests: set test kernel-snap-refresh-on-core to manual 7814 - tests: new spread test for interface gpg-keys 7815 - packaging/fedora: Merge changes from Fedora Dist-Git plus trivial 7816 fix 7817 - interfaces: miscellaneous policy updates 7818 - interfaces/builtin: Replace Solus support with GLVND support 7819 - tests/main/kernel-snap-refresh-on-core: do not fail if edge and 7820 stable kernels are the same version 7821 - snap: add `snap run --strace` to be able to strace snap apps 7822 - tests: new spread test for ssh-keys interface 7823 - errtracker: include detected virtualisation 7824 - tests: add new kernel refresh/revert test for spread-cron 7825 - interfaces/builtin: blacklist zigbee dongle 7826 - cmd/snap-confine: discard stale mount namespaces 7827 - cmd: remove unused execArg0/execEnv 7828 - snap,interfaces/mount: disallow nobody/nogroup 7829 - cmd/snap: improve `snap aliases` output when no aliases are 7830 defined 7831 - tests/lib/snaps/test-snapd-service: refactor service reload 7832 - tests: new spread test for gpg-public-keys interface 7833 - tests: new spread test for ssh-public-keys interface 7834 - spread: setup machine creation on Linode 7835 - interfaces/builtin: allow introspecting UDisks2 7836 - interfaces/builtin: add support for content "source" section 7837 - tests: new spread test for netlink-audit interface 7838 - daemon: avoid panic'ing building an error response w/no snaps 7839 given 7840 - interfaces/mount,snap: early support for snap layouts 7841 - daemon: unlock state even if RefreshSchedule() fails 7842 - arch: add "armv8l" to ubuntuArchFromKernelArch table 7843 - tests: fix for test interface-netlink-connector 7844 - data/dbus: add AssumedAppArmorLabel=unconfined 7845 - advisor: use forked bolt to make it work on ppc 7846 - overlord/snapstate: record the 'kind' of conflicting change 7847 - dirs: fix snap mount dir on Manjaro 7848 - overlord/{snapstate,configstate}, daemon: introduce refresh.timer, 7849 fallback to refresh.schedule 7850 - config: add support for `snap set core proxy.no_proxy=...` 7851 - snap-mgmt: extend spread tests, stop, disable and cleanup snap 7852 services 7853 - spread.yaml: add fedora 27 7854 - cmd/snap-confine: allow snap-update-ns to poke writable holes in 7855 $SNAP 7856 - packaging/14.04: move linux-generic-lts-xenial to recommends 7857 - osutil/sys: ppc has 32-bit getuid already 7858 - snapstate: make no autorefresh message clearer 7859 - spread: try to enable Fedora once more 7860 - overlord/snapstate: do a minimal sanity check on containers 7861 - configcore: ensure config.txt has a final newline 7862 - cmd/libsnap-confine-private: print failed mount/umount regardless 7863 of SNAP_CONFINE_DEBUG 7864 - debian/tests: add missing autopkgtest test dependencies for debian 7865 - image: port ini handling to goconfigparser 7866 - tests/main/snap-service-after-before: add test for after/before 7867 service ordering 7868 - tests: enabling opensuse for tests 7869 - tests: update auto-refresh-private to match messages from current 7870 master 7871 - dirs: check if distro 'is like' fedora when picking path to 7872 libexecdir 7873 - tests: fix "job canceled" issue and improve cleanup for snaps 7874 - cmd/libsnap-confine-private: add debug build of libsnap-confine- 7875 private.a, link it into snap-confine-debug 7876 - vendor: remove x/sys/unix to fix builds on arm64 and powerpc 7877 - image: let consume snapcraft export-login files from tooling 7878 - interfaces/mir: allow Wayland socket and non-root sockets 7879 - interfaces/builtin: use snap.{Plug,Slot}Info over 7880 interfaces.{Plug,Slot} 7881 - tests: add simple snap-mgmt test 7882 - wrappers: autogenerate After/Before in systemd's service files for 7883 apps 7884 - snap: add usage hints in `snap download` 7885 - snap: provide more meaningful errors for installMany and friends 7886 - cmd/snap: show header/footer when `snap find` is used without 7887 arguments 7888 - overlord/snapstate: for Enable's tasks refer to the first task 7889 with snap-setup, do not duplicate 7890 - tests: add hard-coded fully expired macaroons to run related tests 7891 - cmd/snap-update-ns: new test features 7892 - cmd/snap-update-ns: we don't want to bind mount symlinks 7893 - interfaces/mount: test OptsToCommonFlags, filter out x-snapd. 7894 options 7895 - cmd/snap-update-ns: untangle upcoming cyclic initialization 7896 - client, daemon: update user's email when logging in with new 7897 account 7898 - tests: ensure snap-confine apparmor profile is parsable 7899 - snap: do not leak internal errors on install/refresh etc 7900 - snap: fix missing error check when multiple snaps are refreshed 7901 - spread: trying to re-enable tests on Fedora 7902 - snap: fix gadget.yaml parsing for multi volume gadgets 7903 - snap: give the snap.Container interface a Walk method 7904 - snap: rename `snap advise-command` to `snap advise-snap --command` 7905 - overlord/snapstate: no refresh just for hints if there was a 7906 recent regular full refresh 7907 - progress: switch ansimeter's Spin() to use a spinner 7908 - snap: support `command-not-found` symlink for `snap advise- 7909 command` 7910 - daemon: store email, ID and macaroon when creating a new user 7911 - snap: app startup after/before validation 7912 - timeutil: refresh timer take 2 7913 - store, daemon/api: Rename MyAppsServer, point to 7914 dashboard.snapcraft.io instead 7915 - tests: use "quiet" helper instead of "dnf -q" to get errors on 7916 failures 7917 - cmd/snap-update-ns: improve mocking for tests 7918 - many: implement the advisor backend, populate it from the store 7919 - tests: make less calls to the package manager 7920 - tests/main/confinement-classic: enable the test on Fedora 7921 - snap: do not leak internal network errors to the user 7922 - snap: use stdout instead of stderr for "fetching" message 7923 - tests: fix test whoami, share successful_login.exp 7924 - many: refresh with appropriate creds 7925 - snap: add new `snap advice-command` skeleton 7926 - tests: add test that ensures we never parse versions as numbers 7927 - overlord/snapstate: override Snapstate.UserID in refresh if the 7928 installing user is gone 7929 - interfaces: allow socket "shutdown" syscall in default profile 7930 - snap: print friendly message if `snap keys` is empty 7931 - cmd/snap-update-ns: add execWritableMimic 7932 - snap: make `snap info invalid-snap` output more user friendly 7933 - cmd/snap, tests/main/classic-confinement: fix snap-exec path when 7934 running under classic confinement 7935 - overlord/ifacestate: fix disable/enable cycle to setup security 7936 - snap: fix snap find " " output 7937 - daemon: add new polkit action to manage interfaces 7938 - packaging/arch: disable services when removing 7939 - asserts/signtool: support for building tools on top that fill- 7940 in/compute some headers 7941 - cmd: clarify "This leaves %s tracking %s." message 7942 - daemon: return "bad-query" error kind for store.ErrBadQuery 7943 - taskrunner/many: KnownTaskKinds helper 7944 - tests/main/interfaces-fuse_support: fix confinement, allow 7945 unmount, fix spread tests 7946 - snap: use the -no-fragments mksquashfs option 7947 - data/selinux: allow messages from policykit 7948 - tests: fix catalog-update wait loop 7949 - tests/lib/prepare-restore: disable rate limiting in journald 7950 - tests: change interfaces-fuse_support to be debug friendly 7951 - tests/main/postrm-purge: stop snapd before purge 7952 - This is an example of test log:https://paste.ubuntu.com/26215170/ 7953 - tests/main/interfaces-fuse_support: dump more debugging 7954 information 7955 - interfaces/dbus: adjust slot policy for listen, accept and accept4 7956 syscalls 7957 - tests: save the snapd-state without compression 7958 - tests/main/searching: handle changes in featured snaps list 7959 - overlord/snapstate: fix auto-refresh summary for 2 snaps 7960 - overlord/auth,daemon: introduce an explicit auth.ErrInvalidUser 7961 - interfaces: add /proc/partitions to system-observe (This addresses 7962 LP#1708527.) 7963 - tests/lib: introduce helpers for setting up /dev/random using 7964 /dev/urandom in project prepare 7965 - tests: new test for interface network status 7966 - interfaces: interfaces: also add an app/hook-specific udev RUN 7967 rule for hotplugging 7968 - tests: fix external backend for tests that need DEBUG output 7969 - tests: do not disable refresh timer on external backend 7970 - client: send all snap related bool json fields 7971 - interfaces/desktop,unity7: allow status/activate/lock of 7972 screensavers 7973 - tests/main: source mkpinentry.sh 7974 - tests: fix security-device-cgroups-serial-port test for rpi and db 7975 - cmd/snap-mgmt: add more directories for cleanup and refactor 7976 purge() code 7977 - snap: YAML and data structures for app before/after ordering 7978 - tests: set TRUST_TEST_KEYS=false for all the external backends 7979 - packaging/arch: install snap-mgmt tool 7980 - tests: add support on tests for cm3 gadget 7981 - interfaces/removable-media: also allow 'k' (lock) 7982 - interfaces: use ConnectedPlug/ConnectedSlot types (step 2) 7983 - interfaces: rename sanitize methods 7984 - devicestate: fix misbehaving test when using systemd-resolved 7985 - interfaces: added Ref() helpers, restored more detailed error 7986 message on spi iface 7987 - debian: make "gnupg" a recommends 7988 - interfaces/many: misc updates for default, browser-support, 7989 opengl, desktop, unity7, x11 7990 - interfaces: PlugInfo/SlotInfo/ConnectedPlug/ConnectedSlot 7991 attribute helpers 7992 - interfaces: update fixme comments 7993 - tests: make interfaces-snapd-control-with-manage more robust 7994 - userd: generalize dbusInterface 7995 - interfaces: use ConnectedPlug/ConnectedSlot types (step 1) 7996 - hookstate: add compat "configure-snapd" task. 7997 - config, overlord/snapstate, timeutil: rename ParseSchedule to 7998 ParseLegacySchedule 7999 - tests: adding tests for time*-control interfaces 8000 - tests: new test to check interfaces after reboot the system 8001 - cmd/snap-mgmt: fixes 8002 - packaging/opensuse-42.2: package and use snap-mgmt 8003 - corecfg: also "mask" services when disabling them 8004 - cmd/snap-mgmt: introduce snap-mgmt tool 8005 - configstate: simplify ConfigManager 8006 - interfaces: add gpio-memory-control interface 8007 - cmd: disable check-syntax-c 8008 - packaging/arch: add bash-completion as optional dependency 8009 - corecfg: rename package to overlord/configstate/configcore 8010 - wrappers: fix unit tests to use dirs.SnapMountDir 8011 - osutil/sys: reimplement getuid and chown with the right int type 8012 - interfaces-netlink-connector: fix sourcing snaps.sh 8013 8014 * Thu Jan 25 2018 Neal Gompa <ngompa13@gmail.com> - 2.30-1 8015 - Release 2.30 to Fedora (RH#1527519) 8016 - Backport fix to correctly locate snapd libexecdir on Fedora derivatives (RH#1536895) 8017 - Refresh SELinux policy fix patches with upstream backport version 8018 8019 * Mon Dec 18 2017 Michael Vogt <mvo@ubuntu.com> 8020 - New upstream release 2.30 8021 - tests: set TRUST_TEST_KEYS=false for all the external backends 8022 - tests: fix external backend for tests that need DEBUG output 8023 - tests: do not disable refresh timer on external backend 8024 - client: send all snap related bool json fields 8025 - interfaces: interfaces: also add an app/hook-specific udev RUN 8026 rule for hotplugging 8027 - interfaces/desktop,unity7: allow status/activate/lock of 8028 screensavers 8029 - tests/main: source mkpinentry.sh 8030 - devicestate: use a different nowhere domain 8031 - interfaces: add ssh-keys, ssh-public-keys, gpg-keys and gpg-public 8032 keys interfaces 8033 - interfaces/many: misc updates for default, browser-support, opengl, 8034 desktop, unity7, x11 8035 - devicestate: fix misbehaving test when using systemd-resolved 8036 - interfaces/removable-media: also allow 'k' (lock) 8037 - interfaces/many: misc updates for default, browser-support, 8038 opengl, desktop, unity7, x11 8039 - corecfg: also "mask" services when disabling them 8040 - tests: add support for autopkgtests on s390x 8041 - snapstate: support for pre-refresh hook 8042 - many: allow to configure core before it is installed 8043 - devicestate: fix unkeyed fields error 8044 - snap-confine: create mount target for lib32,vulkan on demand 8045 - snapstate: add support for refresh.schedule=managed 8046 - cmd/snap-update-ns: teach update logic to handle synthetic changes 8047 - many: remove configure-snapd task again and handle internally 8048 - snap: fix TestDirAndFileMethods() test to work with gccgo 8049 - debian: ensure /var/lib/snapd/lib/vulkan is available 8050 - cmd/snap-confine: use #include instead of bare include 8051 - snapstate: store userID in snapstate 8052 - snapd.dirs: add var/lib/snapd/lib/gl32 8053 - timeutil, overlod/snapstate: cleanup remaining pieces of timeutil 8054 weekday support 8055 - packaging/arch: install missing directories, manpages and version 8056 info 8057 - snapstate,store: store if a snap is a paid snap in the sideinfo 8058 - packaging/arch: pre-create snapd directories when packaging 8059 - tests/main/manpages: set LC_ALL=C as man may complain if the 8060 locale is unset or unsupported 8061 - repo: ConnectedPlug and ConnectedSlot types 8062 - snapd: fix handling of undo in the taskrunner 8063 - store: fix download caching and add integration test 8064 - snapstate: move autorefresh code into autoRefresh helper 8065 - snapctl: don't error out on start/stop/restart from configure hook 8066 during install or refresh 8067 - cmd/snap-update-ns: add planWritableMimic 8068 - deamon: don't omit responses, even if null 8069 - tests: add test for frame buffer interface 8070 - tests/lib: fix shellcheck errors 8071 - apparmor: generate the snap-confine re-exec profile for 8072 AppArmor{Partial,Full} 8073 - tests: remove obsolete workaround 8074 - snap: use existing files in `snap download` if digest/size matches 8075 - tests: merge pepare-project.sh into prepare-restore.sh 8076 - tests: cache snaps to $TESTSLIB/cache 8077 - tests: set -e, -o pipefail in prepare-restore.sh 8078 - apparmor: generate the snap-confine re-exec profile for 8079 AppArmor{Partial,Full} 8080 - cmd/snap-seccomp: fix uid/gid restrictions tests on Arch 8081 - tests: document and slightly refactor prepare/restore code 8082 - snapstate: ensure RefreshSchedule() gives accurate results 8083 - snapstate: add new refresh-hints helper and use it 8084 - spread.yaml,tests: move most of project-wide prepare/restore to 8085 separate file 8086 - timeutil: introduce helpers for weekdays and TimeOfDay 8087 - tests: adding new test for uhid interface 8088 - cmd/libsnap: fix parsing of empty mountinfo fields 8089 - overlord/devicestate: best effort to go to early full retries for 8090 registration on the like of DNS no host 8091 - spread.yaml: bump delta ref to 2.29 8092 - tests: adding test to test physical memory observe interface 8093 - cmd, errtracker: get rid of SNAP_DID_REEXEC environment 8094 - timeutil: remove support to parse weekday schedules 8095 - snap-confine: add workaround for snap-confine on 4.13/upstream 8096 - store: do not log the http body for catalog updates 8097 - snapstate: move catalogRefresh into its own helper 8098 - spread.yaml: fix shellcheck issues and trivial refactor 8099 - spread.yaml: move prepare-each closer to restore-each 8100 - spread.yaml: increase workers for opensuse to 3 8101 - tests: force delete when tests are restore to avoid suite failure 8102 - test: ignore /snap/README 8103 - interfaces/opengl: also allow read on 'revision' in 8104 /sys/devices/pci... 8105 - interfaces/screen-inhibit-control: fix case in screen inhibit 8106 control 8107 - asserts/sysdb: panic early if pointed to staging but staging keys 8108 are not compiled-in 8109 - interfaces: allow /bin/chown and fchownat to root:root 8110 - timeutil: include test input in error message in 8111 TestParseSchedule() 8112 - interfaces/browser-support: adjust base declaration for auto- 8113 connection 8114 - snap-confine: fix snap-confine under lxd 8115 - store: bit less aggressive retry strategy 8116 - tests: add new `fakestore new-snap-{declaration,revision}` helpers 8117 - cmd/snap-update-ns: add secureMkfileAll 8118 - snap: use field names when initializing composite literals 8119 - HACKING: fix path in snap install 8120 - store: add support for flags in ListRefresh() 8121 - interfaces: remove invalid plugs/slots from SnapInfo on 8122 sanitization. 8123 - debian: add missing udev dependency 8124 - snap/validate: extend socket validation tests 8125 - interfaces: add "refresh-schedule" attribute to snapd-control 8126 - interfaces/builtin/account_control: use gid owning /etc/shadow to 8127 setup seccomp rules 8128 - cmd/snap-update-ns: tweak changePerform 8129 - interfaces,tests: skip unknown plug/slot interfaces 8130 - tests: disable interfaces-network-control-tuntap 8131 - cmd: use a preinit_array function rather than parsing 8132 /proc/self/cmdline 8133 - interfaces/time*_control: explicitly deny noisy read on 8134 /proc/1/environ 8135 - cmd/snap-update-ns: misc cleanups 8136 - snapd: allow hooks to have slots 8137 - fakestore: add go-flags to prepare for `new-snap-declaration` cmd 8138 - interfaces/browser-support: add shm path for nwjs 8139 - many: add magic /snap/README file 8140 - overlord/snapstate: support completion for command aliases 8141 - tests: re-enable tun/tap test on Debian 8142 - snap,wrappers: add support for socket activation 8143 - repo: use PlugInfo and SlotInfo for permanent plugs/slots 8144 - tests/interfaces-network-control-tuntap: disable on debian- 8145 unstable for now 8146 - cmd/snap-confine: Loosen the NVIDIA Vulkan ICD glob 8147 - cmd/snap-update-ns: detect and report read-only filesystems 8148 - cmd/snap-update-ns: re-factor secureMkdirAll into 8149 secureMk{Prefix,Dir} 8150 - run-checks, tests/lib/snaps/: shellcheck fixes 8151 - corecfg: validate refresh.schedule when it is applied 8152 - tests: adjust test to match stderr 8153 - snapd: fix snap cookie bugs 8154 - packaging/arch: do not quote MAKEFLAGS 8155 - state: add change.LaneTasks helper 8156 - cmd/snap-update-ns: do not assume 'nogroup' exists 8157 - tests/lib: handle distro specific grub-editenv naming 8158 - cmd/snap-confine: Add missing bi-arch NVIDIA filesthe 8159 `/var/lib/snapd/lib/gl:/var/lib/snapd/lib/gl/vdpau` paths within 8160 - cmd: Support exposing NVIDIA Vulkan ICD files to the snaps 8161 - cmd/snap-confine: Implement full 32-bit NVIDIA driver support 8162 - packaging/arch: packaging update 8163 - cmd/snap-confine: Support bash as base runtime entry 8164 - wrappers: do not error on incorrect Exec= lines 8165 - interfaces: fix udev tagging for hooks 8166 - tests/set-proxy-store: exclude ubuntu-core-16 via systems: key 8167 - tests: new tests for network setup control and observe interfaces 8168 - osutil: add helper for obtaining group ID of given file path 8169 - daemon,overlord/snapstate: return snap-not-installed error in more 8170 cases 8171 - interfaces/builtin/lxd_support: allow discovering of host's os- 8172 release 8173 - configstate: add support for configure-snapd for 8174 snapstate.IgnoreHookError 8175 - tests: add a spread test for proxy.store setting together with 8176 store assertion 8177 - cmd/snap-seccomp: do not use group 'shadow' in tests 8178 - asserts/assertstest: fix use of hardcoded value when the passed 8179 or default keys should be used 8180 - interfaces/many: misc policy updates for browser-support, cups- 8181 control and network-status 8182 - tests: fix xdg-open-compat 8183 - daemon: for /v2/logs, 404 when no services are found 8184 - packaging/fedora: Merge changes from Fedora Dist-Git 8185 - cmd/snap-update-ns: add new helpers for mount entries 8186 - cmd/snap-confine: Respect biarch nature of libdirs 8187 - cmd/snap-confine: Ensure snap-confine is allowed to access os- 8188 release 8189 - cmd: fix re-exec bug with classic confinement for host snapd < 8190 2.28 8191 - interfaces/kmod: simplify loadModules now that errors are ignored 8192 - tests: disable xdg-open-compat test 8193 - tests: add test that checks core reverts on core devices 8194 - dirs: use alt root when checking classic confinement support 8195 without … 8196 - interfaces/kmod: treat failure to load module as non-fatal 8197 - cmd/snap-update-ns: fix golint and some stale comments 8198 - corecfg: support setting proxy.store if there's a matching store 8199 assertion 8200 - overlord/snapstate: toggle ignore-validation as needed as we do 8201 for channel 8202 - tests: fix security-device-cgroup* tests on devices with 8203 framebuffer 8204 - interfaces/raw-usb: match on SUBSYSTEM, not SUBSYSTEMS 8205 - interfaces: add USB interface number attribute in udev rule for 8206 serial-port interface 8207 - overlord/devicestate: switch to the new endpoints for registration 8208 - snap-update-ns: add missing unit test for desired/current profile 8209 handling 8210 - cmd/{snap-confine,libsnap-confine-private,snap-shutdown}: cleanup 8211 low-level C bits 8212 - ifacestate: make interfaces.Repository available via state cache 8213 - overlord/snapstate: cleanups around switch-snap* 8214 - cmd/snapd,client,daemon: display ignore-validation flag through 8215 the notes mechanism 8216 - cmd/snap-update-ns: add logging to snap-update-ns 8217 - many: have a timestamp on store assertions 8218 - many: lookup and use the URL from a store assertion if one is set 8219 for use 8220 - tests/test-snapd-service: fix shellcheck issues 8221 - tests: new test for hardware-random-control interface 8222 - tests: use `snap change --last=install` in snapd-reexec test 8223 - repo, daemon: use PlugInfo, SlotInfo 8224 - many: handle core configuration internally instead of using the 8225 core configure hook 8226 - tests: refactor and expand content interface test 8227 - snap-seccomp: skip in-kernel bpf tests for socket() in trusty/i386 8228 - cmd/snap-update-ns: allow Change.Perform to return changes 8229 - snap-confine: Support biarch Linux distribution confinement 8230 - partition/ubootenv: don't panic when uboot.env is missing the eof 8231 marker 8232 - cmd/snap-update-ns: allow fault injection to provide dynamic 8233 result 8234 - interfaces/mount: exspose mount.{Escape,Unescape} 8235 - snapctl: added long help to stop/start/restart command 8236 - cmd/snap-update-ns: create missing mount points automatically. 8237 - cmd: downgrade log message in InternalToolPath to Debugf() 8238 - tests: wait for service status change & file update in the test to 8239 avoid races 8240 - daemon, store: forward SSO invalid credentials errors as 401 8241 Unauthorized responses 8242 - spdx: fix for WITH syntax, require a license name before the 8243 operator 8244 - many: reorg things in preparation to make handling of the base url 8245 in store dynamic 8246 - hooks/configure: queue service restarts 8247 - cmd/snap: warn when a snap is not from the tracking channel 8248 - interfaces/mount: add support for parsing x-snapd.{mode,uid,gid}= 8249 - cmd/snap-confine: add detection of stale mount namespace 8250 - interfaces: add plugRef/slotRef helpers for PlugInfo/SlotInfo 8251 - tests: check for invalid udev files during all tests 8252 - daemon: use newChange() in changeAliases for consistency 8253 - servicestate: use taskset 8254 - many: add support for /home on NFS 8255 - packaging,spread: fix and re-enable opensuse builds 8256 8257 * Sun Dec 17 2017 Neal Gompa <ngompa13@gmail.com> - 2.29.4-3 8258 - Add patch to SELinux policy to allow snapd to receive replies from polkit 8259 8260 * Sun Nov 19 2017 Neal Gompa <ngompa13@gmail.com> - 2.29.4-2 8261 - Add missing bash completion files and cache directory 8262 8263 * Sun Nov 19 2017 Neal Gompa <ngompa13@gmail.com> - 2.29.4-1 8264 - Release 2.29.4 to Fedora (RH#1508433) 8265 - Install Polkit configuration (RH#1509586) 8266 - Drop changes to revert cheggaaa/pb import path used 8267 8268 * Fri Nov 17 2017 Michael Vogt <mvo@ubuntu.com> 8269 - New upstream release 2.29.4 8270 - snap-confine: fix snap-confine under lxd 8271 - tests: disable classic-ubuntu-core-transition on i386 temporarily 8272 - many: reject bad plugs/slots 8273 - interfaces,tests: skip unknown plug/slot interfaces 8274 - store: enable "base" field from the store 8275 - packaging/fedora: Merge changes from Fedora Dist-Git 8276 8277 * Thu Nov 09 2017 Michael Vogt <mvo@ubuntu.com> 8278 - New upstream release 2.29.3 8279 - daemon: cherry-picked /v2/logs fixes 8280 - cmd/snap-confine: Respect biarch nature of libdirs 8281 - cmd/snap-confine: Ensure snap-confine is allowed to access os- 8282 release 8283 - interfaces: fix udev tagging for hooks 8284 - cmd: fix re-exec bug with classic confinement for host snapd 8285 - tests: disable xdg-open-compat test 8286 - cmd/snap-confine: add slave PTYs and let devpts newinstance 8287 perform mediation 8288 - interfaces/many: misc policy updates for browser-support, cups- 8289 control and network-status 8290 - interfaces/raw-usb: match on SUBSYSTEM, not SUBSYSTEMS 8291 - tests: fix security-device-cgroup* tests on devices with 8292 framebuffer 8293 8294 * Fri Nov 03 2017 Michael Vogt <mvo@ubuntu.com> 8295 - New upstream release 2.29.2 8296 - snapctl: disable stop/start/restart (2.29) 8297 - cmd/snap-update-ns: fix collection of changes made 8298 8299 * Fri Nov 03 2017 Michael Vogt <mvo@ubuntu.com> 8300 - New upstream release 2.29.1 8301 - interfaces: fix incorrect signature of ofono DBusPermanentSlot 8302 - interfaces/serial-port: udev tag plugged slots that have just 8303 'path' via KERNEL 8304 - interfaces/hidraw: udev tag plugged slots that have just 'path' 8305 via KERNEL 8306 - interfaces/uhid: unconditionally add existing uhid device to the 8307 device cgroup 8308 - cmd/snap-update-ns: fix mount rules for font sharing 8309 - tests: disable refresh-undo test on trusty for now 8310 - tests: use `snap change --last=install` in snapd-reexec test 8311 - Revert " wrappers: fail install if exec-line cannot be re-written 8312 - interfaces: don't udev tag devmode or classic snaps 8313 - many: make ignore-validation sticky and send the flag with refresh 8314 requests 8315 8316 * Mon Oct 30 2017 Michael Vogt <mvo@ubuntu.com> 8317 - New upstream release 2.29 8318 - interfaces/many: miscellaneous updates based on feedback from the 8319 field 8320 - snap-confine: allow reading uevents from any where in /sys 8321 - spread: add bionic beaver 8322 - debian: make packaging/ubuntu-14.04/copyright a real file again 8323 - tests: cherry pick the fix for services test into 2.29 8324 - cmd/snap-update-ns: initialize logger 8325 - hooks/configure: queue service restarts 8326 - snap-{confine,seccomp}: make @unrestricted fully unrestricted 8327 - interfaces: clean system apparmor cache on core device 8328 - debian: do not build static snap-exec on powerpc 8329 - snap-confine: increase sanity_timeout to 6s 8330 - snapctl: cherry pick service commands changes 8331 - cmd/snap: tell translators about arg names and descs req's 8332 - systemd: run all mount units before snapd.service to avoid race 8333 - store: add a test to show auth failures are forwarded by doRequest 8334 - daemon: convert ErrInvalidCredentials to a 401 Unauthorized error. 8335 - store: forward on INVALID_CREDENTIALS error as 8336 ErrInvalidCredentials 8337 - daemon: generate a forbidden response message if polkit dialog is 8338 dismissed 8339 - daemon: Allow Polkit authorization to cancel changes. 8340 - travis: switch to container based test runs 8341 - interfaces: reduce duplicated code in interface tests mocks 8342 - tests: improve revert related testing 8343 - interfaces: sanitize plugs and slots early in ReadInfo 8344 - store: add download caching 8345 - preserve TMPDIR and HOSTALIASES across snap-confine invocation 8346 - snap-confine: init all arrays with `= {0,}` 8347 - tests: adding test for network-manager interface 8348 - interfaces/mount: don't generate legacy per-hook/per-app mount 8349 profiles 8350 - snap: introduce structured epochs 8351 - tests: fix interfaces-cups-control test for cups-2.2.5 8352 - snap-confine: cleanup incorrectly created nvidia udev tags 8353 - cmd/snap-confine: update valid security tag regexp 8354 - cmd/libsnap: enable two stranded tests 8355 - cmd,packaging: enable apparmor on openSUSE 8356 - overlord/ifacestate: refresh all security backends on startup 8357 - interfaces/dbus: drop unneeded check for 8358 release.ReleaseInfo.ForceDevMode 8359 - dbus: ensure io.snapcraft.Launcher.service is created on re- 8360 exec 8361 - overlord/auth: continue for now supporting UBUNTU_STORE_ID if the 8362 model is generic-classic 8363 - snap-confine: add support for handling /dev/nvidia-modeset 8364 - interfaces/network-control: remove incorrect rules for tun 8365 - spread: allow setting SPREAD_DEBUG_EACH=0 to disable debug-each 8366 section 8367 - packaging: remove .mnt files on removal 8368 - tests: fix econnreset scenario when the iptables rule was not 8369 created 8370 - tests: add test for lxd interface 8371 - run-checks: use nakedret static checker to check for naked 8372 returns on long functions 8373 - progress: be more flexible in testing ansimeter 8374 - interfaces: fix udev rules for tun 8375 - many: implement our own ANSI-escape-using progress indicator 8376 - snap-exec: update tests to follow main_test pattern 8377 - snap: support "command: foo $ENV_STRING" 8378 - packaging: update nvidia configure options 8379 - snap: add new `snap pack` and use in tests 8380 - cmd: correctly name the "Ubuntu" and "Arch" NVIDIA methods 8381 - cmd: add autogen case for solus 8382 - tests: do not use http://canihazip.com/ which appears to be down 8383 - hooks: commands for controlling own services from snapctl 8384 - snap: refactor cmdGet.Execute() 8385 - interfaces/mount: make Change.Perform testable and test it 8386 - interfaces/mount,cmd/snap-update-ns: move change code 8387 - snap-confine: is_running_on_classic_distribution() looks into os- 8388 release 8389 - interfaces: misc updates for default, browser-support, home and 8390 system-observe 8391 - interfaces: deny lttng by default 8392 - interfaces/lxd: lxd slot implementation can also be an app snap 8393 - release,cmd,dirs: Redo the distro checks to take into account 8394 distribution families 8395 - cmd/snap: completion for alias and unalias 8396 - snap-confine: add new SC_CLEANUP and use it 8397 - snap: refrain from running filepath.Base on random strings 8398 - cmd/snap-confine: put processes into freezer hierarchy 8399 - wrappers: fail install if exec-line cannot be re-written 8400 - cmd/snap-seccomp,osutil: make user/group lookup functions public 8401 - snapstate: deal with snap user data in the /root/ directory 8402 - interfaces: Enhance full-confinement support for biarch 8403 distributions 8404 - snap-confine: Only attempt to copy/mount NVIDIA libs when NVIDIA 8405 is used 8406 - packaging/fedora: Add Fedora 26, 27, and Rawhide symlinks 8407 - overlord/snapstate: prefer a smaller corner case for doing the 8408 wrong thing 8409 - cmd/snap-repair: set user agent for snap-repair http requests 8410 - packaging: bring down the delta between 14.04 and 16.04 8411 - snap-confine: Ensure lib64 biarch directory is respected 8412 - snap-confine: update apparmor rules for fedora based base snaps 8413 - tests: Increase SNAPD_CONFIGURE_HOOK_TIMEOUT to 3 minutes to 8414 install real snaps 8415 - daemon: use client.Snap instead of map[string]interface{} for 8416 snaps. 8417 - hooks: rename refresh hook to post-refresh 8418 - git: make the .gitingore file a bit more targeted 8419 - interfaces/opengl: don't udev tag nvidia devices and use snap- 8420 confine instead 8421 - cmd/snap-{confine,update-ns}: apply mount profiles using snap- 8422 update-ns 8423 - cmd: update "make hack" 8424 - interfaces/system-observe: allow clients to enumerate DBus 8425 connection names 8426 - snap-repair: implement `snap-repair {list,show}` 8427 - dirs,interfaces: create snap-confine.d on demand when re-executing 8428 - snap-confine: fix base snaps on core 8429 - cmd/snap-repair: fix tests when running as root 8430 - interfaces: add Connection type 8431 - cmd/snap-repair: skip disabled repairs 8432 - cmd/snap-repair: prefer leaking unmanaged fds on test failure over 8433 closing random ones 8434 - snap-repair: make `repair` binary available for repair scripts 8435 - snap-repair: fix missing Close() in TestStatusHappy 8436 - cmd/snap-confine,packaging: import snapd-generated policy 8437 - cmd/snap: return empty document if snap has no configuration 8438 - snap-seccomp: run secondary-arch tests via gcc-multilib 8439 - snap: implement `snap {repair,repairs}` and pass-through to snap- 8440 repair 8441 - interfaces/builtin: allow receiving dbus messages 8442 - snap-repair: implement `snap-repair {done,skip,retry}` 8443 - data/completion: small tweak to snap completion snippet 8444 - dirs: fix classic support detection 8445 - cmd/snap-repair: integrate root public keys for repairs 8446 - tests: fix ubuntu core services 8447 - tests: add new test that checks that the compat snapd-xdg-open 8448 works 8449 - snap-confine: improve error message if core/u-core cannot be found 8450 - tests: only run tests/regression/nmcli on amd64 8451 - interfaces: mount host system fonts in desktop interface 8452 - interfaces: enable partial apparmor support 8453 - snapstate: auto-install missing base snaps 8454 - spread: work around temporary packaging issue in debian sid 8455 - asserts,cmd/snap-repair: introduce a mandatory summary for repairs 8456 - asserts,cmd/snap-repair: represent RepairID internally as an int 8457 - tests: test the real "xdg-open" from the core snap 8458 - many: implement fetching sections and package names periodically. 8459 - interfaces/network: allow using netcat as client 8460 - snap-seccomp, osutil: use osutil.AtomicFile in snap-seccomp 8461 - snap-seccomp: skip mknod syscall on arm64 8462 - tests: add trivial canonical-livepatch test 8463 - tests: add test that ensures that all core services are working 8464 - many: add logger.MockLogger() and use it in the tests 8465 - snap-repair: fix test failure in TestRepairHitsTimeout 8466 - asserts: add empty values check in HeadersFromPrimaryKey 8467 - daemon: remove unused installSnap var in test 8468 - daemon: reach for Overlord.Loop less thanks to overlord.Mock 8469 - snap-seccomp: manually resolve socket() call in tests 8470 - tests: change regex used to validate installed ubuntu core snap 8471 - cmd/snapctl: allow snapctl -h without a context (regression fix). 8472 - many: use snapcore/snapd/i18n instead of i18n/dumb 8473 - many: introduce asserts.NotFoundError replacing both ErrNotFound 8474 and store.AssertionNotFoundError 8475 - packaging: don't include any marcos in comments 8476 - overlord: use overlord.Mock in more tests, make sure we check the 8477 outcome of Settle 8478 - tests: try to fix staging tests 8479 - store: simplify api base url config 8480 - systemd: add systemd.MockJournalctl() 8481 - many: provide systemd.MockSystemctl() helper 8482 - tests: improve the listing test to not fail for e.g. 2.28~rc2 8483 - snapstate: give snapmgrTestSuite.settle() more time to settle 8484 - tests: fix regex to check core version on snap list 8485 - debian: update trusted account-keys check on 14.04 packaging 8486 - interfaces: add udev netlink support to hardware-observe 8487 - overlord: introduce Mock which enables to use Overlord.Settle for 8488 settle in many more places 8489 - snap-repair: execute the repair and capture logs/status 8490 - tests: run the tests/unit/go everywhere 8491 - daemon, snapstate: move ensureCore from daemon/api.go into 8492 snapstate.go 8493 - cmd/snap: get keys or root document 8494 - spread.yaml: turn suse to manual given that it's breaking master 8495 - many: configure store from state, reconfigure store at runtime 8496 - osutil: AtomicWriter (an io.Writer), and io.Reader versions of 8497 AtomicWrite* 8498 - tests: check for negative syscalls in runBpf() and skip those 8499 tests 8500 - docs: use abolute path in PULL_REQUEST_TEMPLATE.md 8501 - store: move device auth endpoint uris to config (#3831) 8502 8503 * Sat Oct 14 2017 Neal Gompa <ngompa13@gmail.com> - 2.28.5-2 8504 - Properly fix the build for Fedora 25 8505 - Incorporate misc build fixes 8506 8507 * Sat Oct 14 2017 Neal Gompa <ngompa13@gmail.com> - 2.28.5-1 8508 - Release 2.28.5 to Fedora (RH#1502186) 8509 - Build snap-exec and snap-update-ns statically to support base snaps 8510 8511 * Fri Oct 13 2017 Michael Vogt <mvo@ubuntu.com> 8512 - New upstream release 2.28.5 8513 - snap-confine: cleanup broken nvidia udev tags 8514 - cmd/snap-confine: update valid security tag regexp 8515 - overlord/ifacestate: refresh udev backend on startup 8516 - dbus: ensure io.snapcraft.Launcher.service is created on re- 8517 exec 8518 - snap-confine: add support for handling /dev/nvidia-modeset 8519 - interfaces/network-control: remove incorrect rules for tun 8520 8521 * Thu Oct 12 2017 Neal Gompa <ngompa13@gmail.com> - 2.28.4-1 8522 - Release 2.28.4 to Fedora (RH#1501141) 8523 - Drop distro check backport patches (released with 2.28.2) 8524 8525 * Wed Oct 11 2017 Michael Vogt <mvo@ubuntu.com> 8526 - New upstream release 2.28.4 8527 - interfaces/opengl: don't udev tag nvidia devices and use snap- 8528 confine instead 8529 - debian: fix replaces/breaks for snap-xdg-open (thanks to apw!) 8530 8531 * Wed Oct 11 2017 Michael Vogt <mvo@ubuntu.com> 8532 - New upstream release 2.28.3 8533 - interfaces/lxd: lxd slot implementation can also be an app 8534 snap 8535 8536 * Tue Oct 10 2017 Michael Vogt <mvo@ubuntu.com> 8537 - New upstream release 2.28.2 8538 - interfaces: fix udev rules for tun 8539 - release,cmd,dirs: Redo the distro checks to take into account 8540 distribution families 8541 8542 * Sun Oct 08 2017 Neal Gompa <ngompa13@gmail.com> - 2.28.1-1 8543 - Release 2.28.1 to Fedora (RH#1495852) 8544 - Drop userd backport patches, they are part of 2.28 release 8545 - Backport changes to rework distro checks to fix derivative distro usage of snapd 8546 - Revert import path change for cheggaaa/pb as it breaks build on Fedora 8547 - Add a posttrans relabel to snapd-selinux to ensure everything is labeled correctly 8548 8549 * Wed Sep 27 2017 Michael Vogt <mvo@ubuntu.com> 8550 - New upstream release 2.28.1 8551 - snap-confine: update apparmor rules for fedora based basesnaps 8552 - snapstate: rename refresh hook to post-refresh for consistency 8553 8554 * Mon Sep 25 2017 Michael Vogt <mvo@ubuntu.com> 8555 - New upstream release 2.28 8556 - hooks: rename refresh to after-refresh 8557 - snap-confine: bind mount /usr/lib/snapd relative to snap-confine 8558 - cmd,dirs: treat "liri" the same way as "arch" 8559 - snap-confine: fix base snaps on core 8560 - hooks: substitute env vars when executing hooks 8561 - interfaces: updates for default, browser-support, desktop, opengl, 8562 upower and stub-resolv.conf 8563 - cmd,dirs: treat manjaro the same as arch 8564 - systemd: do not run auto-import and repair services on classic 8565 - packaging/fedora: Ensure vendor/ is empty for builds and fix spec 8566 to build current master 8567 - many: fix TestSetConfNumber missing an Unlock and other fragility 8568 improvements 8569 - osutil: adjust StreamCommand tests for golang 1.9 8570 - daemon: allow polkit authorisation to install/remove snaps 8571 - tests: make TestCmdWatch more robust 8572 - debian: improve package description 8573 - interfaces: add netlink kobject uevent to hardware observe 8574 - debian: update trusted account-keys check on 14.04 packaging 8575 - interfaces/network-{control,observe}: allow receiving 8576 kobject_uevent() messages 8577 - tests: fix lxd test for external backend 8578 - snap-confine,snap-update-ns: add -no-pie to fix FTBFS on 8579 go1.7,ppc64 8580 - corecfg: mock "systemctl" in all corecfg tests 8581 - tests: fix unit tests on Ubuntu 14.04 8582 - debian: add missing flags when building static snap-exec 8583 - many: end-to-end support for the bare base snap 8584 - overlord/snapstate: SetRootDir from SetUpTest, not in just some 8585 tests 8586 - store: have an ad-hoc method on cfg to get its list of uris for 8587 tests 8588 - daemon: let client decide whether to allow interactive auth via 8589 polkit 8590 - client,daemon,snap,store: add license field 8591 - overlord/snapstate: rename HasCurrent to IsInstalled, remove 8592 superfluous/misleading check from All 8593 - cmd/snap: SetRootDir from SetUpTest, not in just some individual 8594 tests. 8595 - systemd: rename snap-repair.{service,timer} to snapd.snap- 8596 repair.{service,timer} 8597 - snap-seccomp: remove use of x/net/bpf from tests 8598 - httputil: more naive per go version way to recreate a default 8599 transport for tls reconfig 8600 - cmd/snap-seccomp/main_test.go: add one more syscall for arm64 8601 - interfaces/opengl: use == to compare, not = 8602 - cmd/snap-seccomp/main_test.go: add syscalls for armhf and arm64 8603 - cmd/snap-repair: track and use a lower bound for the time for 8604 TLS checks 8605 - interfaces: expose bluez interface on classic OS 8606 - snap-seccomp: add in-kernel bpf tests 8607 - overlord: always try to get a serial, lazily on classic 8608 - tests: add nmcli regression test 8609 - tests: deal with __PNR_chown on aarch64 to fix FTBFS on arm64 8610 - tests: add autopilot-introspection interface test 8611 - vendor: fix artifact from manually editing vendor/vendor.json 8612 - tests: rename complexion to test-snapd-complexion 8613 - interfaces: add desktop and desktop-legacy 8614 interfaces/desktop: add new 'desktop' interface for modern DEs* 8615 interfaces/builtin/desktop_test.go: use modern testing techniques* 8616 interfaces/wayland: allow read on /etc/drirc for Plasma desktop* 8617 interfaces/desktop-legacy: add new 'legacy' interface (currently 8618 for a11y and input) 8619 - tests: fix race in snap userd test 8620 - devices/iio: add read/write for missing sysfs entries 8621 - spread: don't set HTTPS?_PROXY for linode 8622 - cmd/snap-repair: check signatures of repairs from Next 8623 - env: set XDG_DATA_DIRS for wayland et.al. 8624 - interfaces/{default,account-control}: Use username/group instead 8625 of uid/gid 8626 - interfaces/builtin: use udev tagging more broadly 8627 - tests: add basic lxd test 8628 - wrappers: ensure bash completion snaps install on core 8629 - vendor: use old golang.org/x/crypto/ssh/terminal to build on 8630 powerpc again 8631 - docs: add PULL_REQUEST_TEMPLATE.md 8632 - interfaces: fix network-manager plug 8633 - hooks: do not error out when hook is optional and no hook handler 8634 is registered 8635 - cmd/snap: add userd command to replace snapd-xdg-open 8636 - tests: new regex used to validate the core version on extra snaps 8637 ass... 8638 - snap: add new `snap switch` command 8639 - tests: wait more and more debug info about fakestore start issues 8640 - apparmor,release: add better apparmor detection/mocking code 8641 - interfaces/i2c: adjust sysfs rule for alternate paths 8642 - interfaces/apparmor: add missing call to dirs.SetRootDir 8643 - cmd: "make hack" now also installs snap-update-ns 8644 - tests: copy files with less verbosity 8645 - cmd/snap-confine: allow using additional libraries required by 8646 openSUSE 8647 - packaging/fedora: Merge changes from Fedora Dist-Git 8648 - snapstate: improve the error message when classic confinement is 8649 not supported 8650 - tests: add test to ensure amd64 can run i386 syscall binaries 8651 - tests: adding extra info for fakestore when fails to start 8652 - tests: install most important snaps 8653 - cmd/snap-repair: more test coverage of filtering 8654 - squashfs: remove runCommand/runCommandWithOutput as we do not need 8655 it 8656 - cmd/snap-repair: ignore superseded revisions, filter on arch and 8657 models 8658 - hooks: support for refresh hook 8659 - Partial revert "overlord/devicestate, store: update device auth 8660 endpoints URLs" 8661 - cmd/snap-confine: allow reading /proc/filesystems 8662 - cmd/snap-confine: genearlize apparmor profile for various lib 8663 layout 8664 - corecfg: fix proxy.* writing and add integration test 8665 - corecfg: deal with system.power-key-action="" correctly 8666 - vendor: update vendor.json after (presumed) manual edits 8667 - cmd/snap: in `snap info`, don't print a newline between tracks 8668 - daemon: add polkit support to /v2/login 8669 - snapd,snapctl: decode json using Number 8670 - client: fix go vet 1.7 errors 8671 - tests: make 17.04 shellcheck clean 8672 - tests: remove TestInterfacesHelp as it breaks when go-flags 8673 changes 8674 - snapstate: undo a daemon restart on classic if needed 8675 - cmd/snap-repair: recover brand/model from 8676 /var/lib/snapd/seed/assertions checking signatures and brand 8677 account 8678 - spread: opt into unsafe IO during spread tests 8679 - snap-repair: update snap-repair/runner_test.go for API change in 8680 makeMockServer 8681 - cmd/snap-repair: skeleton code around actually running a repair 8682 - tests: wait until the port is listening after start the fake store 8683 - corecfg: fix typo in tests 8684 - cmd/snap-repair: test that redirects works during fetching 8685 - osutil: honor SNAPD_UNSAFE_IO for testing 8686 - vendor: explode and make more precise our golang.go/x/crypto deps, 8687 use same version as Debian unstable 8688 - many: sanitize NewStoreStack signature, have shared default store 8689 test private keys 8690 - systemd: disable `Nice=-5` to fix error when running inside lxd 8691 - spread.yaml: update delta ref to 2.27 8692 - cmd/snap-repair: use E-Tags when refetching a repair to retry 8693 - interfaces/many: updates based on chromium and mrrescue denials 8694 - cmd/snap-repair: implement most logic to get the next repair to 8695 run/retry in a brand sequence 8696 - asserts/assertstest: copy headers in SigningDB.Sign 8697 - interfaces: convert uhid to common interface and test cases 8698 improvement for time_control and opengl 8699 - many tests: move all panicing fake store methods to a common place 8700 - asserts: add store assertion type 8701 - interfaces: don't crash if content slot has no attributes 8702 - debian: do not build with -buildmode=pie on i386 8703 - wrappers: symlink completion snippets when symlinking binaries 8704 - tests: adding more debug information for the interfaces-cups- 8705 control … 8706 - apparmor: pass --quiet to parser on load unless SNAPD_DEBUG is set 8707 - many: allow and support serials signed by the 'generic' authority 8708 instead of the brand 8709 - corecfg: add proxy configuration via `snap set core 8710 proxy.{http,https,ftp}=...` 8711 - interfaces: a bunch of interfaces test improvement 8712 - tests: enable regression and completion suites for opensuse 8713 - tests: installing snapd for nested test suite 8714 - interfaces: convert lxd_support to common iface 8715 - interfaces: add missing test for camera interface. 8716 - snap: add support for parsing snap layout section 8717 - cmd/snap-repair: like for downloads we cannot have a timeout (at 8718 least for now), less aggressive retry strategies 8719 - overlord: rely on more conservative ensure interval 8720 - overlord,store: no piles of return args for methods gathering 8721 device session request params 8722 - overlord,store: send model assertion when setting up device 8723 sessions 8724 - interfaces/misc: updates for unity7/x11, browser- 8725 support, network-control and mount-observe 8726 interfaces/unity7,x11: update for NETLINK_KOBJECT_UEVENT 8727 interfaces/browser-support: update sysfs reads for 8728 newer browser versions, interfaces/network-control: rw for 8729 ieee80211 advanced wireless interfaces/mount-observe: allow read 8730 on sysfs entries for block devices 8731 - tests: use dnf --refresh install to avert stale cache 8732 - osutil: ensure TestLockUnlockWorks uses supported flock 8733 - interfaces: convert lxd to common iface 8734 - tests: restart snapd to ensure re-exec settings are applied 8735 - tests: fix interfaces-cups-control test 8736 - interfaces: improve and tweak bunch of interfaces test cases. 8737 - tests: adding extra worker for fedora 8738 - asserts,overlord/devicestate: support predefined assertions that 8739 don't establish foundational trust 8740 - interfaces: convert two hardware_random interfaces to common iface 8741 - interfaces: convert io_ports_control to common iface 8742 - tests: fix for upgrade test on fedora 8743 - daemon, client, cmd/snap: implement snap start/stop/restart 8744 - cmd/snap-confine: set _FILE_OFFSET_BITS to 64 8745 - interfaces: covert framebuffer to commonInterface 8746 - interfaces: convert joystick to common iface 8747 - interfaces/builtin: add the spi interface 8748 - wrappers, overlord/snapstate/backend: make link-snap clean up on 8749 failure. 8750 - interfaces/wayland: add wayland interface 8751 - interfaces: convert kvm to common iface 8752 - tests: extend upower-observe test to cover snaps providing slots 8753 - tests: enable main suite for opensuse 8754 - interfaces: convert physical_memory_observe to common iface 8755 - interfaces: add missing test for optical_drive interface. 8756 - interfaces: convert physical_memory_control to common iface 8757 - interfaces: convert ppp to common iface 8758 - interfaces: convert time-control to common iface 8759 - tests: fix failover test 8760 - interfaces/builtin: rework for avahi interface 8761 - interfaces: convert broadcom-asic-control to common iface 8762 - snap/snapenv: document the use of CoreSnapMountDir for SNAP 8763 - packaging/arch: drop patches merged into master 8764 - cmd: fix mustUnsetenv docstring (thanks to Chipaca) 8765 - release: remove default from VERSION_ID 8766 - tests: enable regression, upgrade and completion test suites for 8767 fedora 8768 - tests: restore interfaces-account-control properly 8769 - overlord/devicestate, store: update device auth endpoints URLs 8770 - tests: fix install-hook test failure 8771 - tests: download core and ubuntu-core at most once 8772 - interfaces: add common support for udev 8773 - overlord/devicestate: fix, don't assume that the serial is backed 8774 by a 1-key chain 8775 - cmd/snap-confine: don't share /etc/nsswitch from host 8776 - store: do not resume a download when we already have the whole 8777 thing 8778 - many: implement "snap logs" 8779 - store: don't call useDeltas() twice in quick succession 8780 - interfaces/builtin: add kvm interface 8781 - snap/snapenv: always expect /snap for $SNAP 8782 - cmd: mark arch as non-reexecing distro 8783 - cmd: fix tests that assume /snap mount 8784 - gitignore: ignore more build artefacts 8785 - packaging: add current arch packaging 8786 - interfaces/unity7: allow receiving media key events in (at least) 8787 gnome-shell 8788 - interfaces/many, cmd/snap-confine: miscellaneous policy updates 8789 - interfaces/builtin: implement broadcom-asic-control interface 8790 - interfaces/builtin: reduce duplication and remove cruft in 8791 Sanitize{Plug,Slot} 8792 - tests: apply underscore convention for SNAPMOUNTDIR variable 8793 - interfaces/greengrass-support: adjust accesses now that have 8794 working snap 8795 - daemon, client, cmd/snap: implement "snap services" 8796 - tests: fix refresh tests not stopping fake store for fedora 8797 - many: add the interface command 8798 - overlord/snapstate/backend: some copydata improvements 8799 - many: support querying and completing assertion type names 8800 - interfaces/builtin: discard empty Validate{Plug,Slot} 8801 - cmd/snap-repair: start of Runner, implement first pass of Peek 8802 and Fetch 8803 - tests: enable main suite on fedora 8804 - snap: do not always quote the snap info summary 8805 - vendor: update go-flags to address crash in "snap debug" 8806 - interfaces: opengl support pci device and vendor 8807 - many: start implenting "base" snap type on the snapd side 8808 - arch,release: map armv6 correctly 8809 - many: expose service status in 'snap info' 8810 - tests: add browser-support interface test 8811 - tests: disable snapd-notify for the external backend 8812 - interfaces: Add /run/uuid/request to openvswitch 8813 - interfaces: add password-manager-service implicit classic 8814 interface 8815 - cmd: rework reexec detection 8816 - cmd: fix re-exec bug when starting from snapd 2.21 8817 - tests: dependency packages installed during prepare-project 8818 - tests: remove unneeded check for re-exec in InternalToolPath() 8819 - cmd,tests: fix classic confinement confusing re-execution code 8820 - store: configurable base api 8821 - tests: fix how package lists are updated for opensuse and fedora 8822 8823 * Sun Sep 10 2017 Neal Gompa <ngompa13@gmail.com> - 2.27.6-1 8824 - Release 2.27.6 to Fedora (RH#1489437) 8825 8826 * Thu Sep 07 2017 Michael Vogt <mvo@ubuntu.com> 8827 - New upstream release 2.27.6 8828 - interfaces: add udev netlink support to hardware-observe 8829 - interfaces/network-{control,observe}: allow receiving 8830 kobject_uevent() messages 8831 8832 * Mon Sep 04 2017 Neal Gompa <ngompa13@gmail.com> - 2.27.5-1 8833 - Release 2.27.5 to Fedora (RH#1483177) 8834 - Backport userd from upstream to support xdg-open 8835 8836 * Wed Aug 30 2017 Michael Vogt <mvo@ubuntu.com> 8837 - New upstream release 2.27.5 8838 - interfaces: fix network-manager plug regression 8839 - hooks: do not error when hook handler is not registered 8840 - interfaces/alsa,pulseaudio: allow read on udev data for sound 8841 - interfaces/optical-drive: read access to udev data for /dev/scd* 8842 - interfaces/browser-support: read on /proc/vmstat and misc udev 8843 data 8844 8845 * Thu Aug 24 2017 Michael Vogt <mvo@ubuntu.com> 8846 - New upstream release 2.27.4 8847 - snap-seccomp: add secondary arch for unrestricted snaps as well 8848 8849 * Fri Aug 18 2017 Michael Vogt <mvo@ubuntu.com> 8850 - New upstream release 2.27.3 8851 - systemd: disable `Nice=-5` to fix error when running inside lxdSee 8852 https://bugs.launchpad.net/snapd/+bug/1709536 8853 8854 * Wed Aug 16 2017 Neal Gompa <ngompa13@gmail.com> - 2.27.2-2 8855 - Bump to rebuild for F27 and Rawhide 8856 8857 * Wed Aug 16 2017 Neal Gompa <ngompa13@gmail.com> - 2.27.2-1 8858 - Release 2.27.2 to Fedora (RH#1482173) 8859 8860 * Wed Aug 16 2017 Michael Vogt <mvo@ubuntu.com> 8861 - New upstream release 2.27.2 8862 - tests: remove TestInterfacesHelp as it breaks when go-flags 8863 changes 8864 - interfaces: don't crash if content slot has no attributes 8865 - debian: do not build with -buildmode=pie on i386 8866 - interfaces: backport broadcom-asic-control interface 8867 - interfaces: allow /usr/bin/xdg-open in unity7 8868 - store: do not resume a download when we already have the whole 8869 thing 8870 8871 * Mon Aug 14 2017 Neal Gompa <ngompa13@gmail.com> - 2.27.1-1 8872 - Release 2.27.1 to Fedora (RH#1481247) 8873 8874 * Mon Aug 14 2017 Michael Vogt <mvo@ubuntu.com> 8875 - New upstream release 2.27.1 8876 - tests: use dnf --refresh install to avert stale cache 8877 - tests: fix test failure on 14.04 due to old version of 8878 flock 8879 - updates for unity7/x11, browser-support, network-control, 8880 mount-observe 8881 - interfaces/unity7,x11: update for NETLINK_KOBJECT_UEVENT 8882 - interfaces/browser-support: update sysfs reads for 8883 newer browser versions 8884 - interfaces/network-control: rw for ieee80211 advanced wireless 8885 - interfaces/mount-observe: allow read on sysfs entries for block 8886 devices 8887 8888 * Thu Aug 10 2017 Neal Gompa <ngompa13@gmail.com> - 2.27-1 8889 - Release 2.27 to Fedora (RH#1458086) 8890 8891 * Thu Aug 10 2017 Michael Vogt <mvo@ubuntu.com> 8892 - New upstream release 2.27 8893 - fix build failure on 32bit fedora 8894 - interfaces: add password-manager-service implicit classic interface 8895 - interfaces/greengrass-support: adjust accesses now that have working 8896 snap 8897 - interfaces/many, cmd/snap-confine: miscellaneous policy updates 8898 - interfaces/unity7: allow receiving media key events in (at least) 8899 gnome-shell 8900 - cmd: fix re-exec bug when starting from snapd 2.21 8901 - tests: restore interfaces-account-control properly 8902 - cmd: fix tests that assume /snap mount 8903 - cmd: mark arch as non-reexecing distro 8904 - snap-confine: don't share /etc/nsswitch from host 8905 - store: talk to api.snapcraft.io for purchases 8906 - hooks: support for install and remove hooks 8907 - packaging: fix Fedora support 8908 - tests: add bluetooth-control interface test 8909 - store: talk to api.snapcraft.io for assertions 8910 - tests: remove snapd before building from branch 8911 - tests: add avahi-observe interface test 8912 - store: orders API now checks if customer is ready 8913 - cmd/snap: snap find only searches stable 8914 - interfaces: updates default, mir, optical-observe, system-observe, 8915 screen-inhibit-control and unity7 8916 - tests: speedup prepare statement part 1 8917 - store: do not send empty refresh requests 8918 - asserts: fix error handling in snap-developer consistency check 8919 - systemd: add explicit sync to snapd.core-fixup.sh 8920 - snapd: generate snap cookies on startup 8921 - cmd,client,daemon: expose "force devmode" in sysinfo 8922 - many: introduce and use strutil.ListContains and also 8923 strutil.SortedListContains 8924 - assserts,overlord/assertstate: test we don't accept chains of 8925 assertions founded on a self-signed key coming externally 8926 - interfaces: enable access to bridge settings 8927 - interfaces: fix copy-pasted iio vs io in io-ports-control 8928 - cmd/snap-confine: various small fixes and tweaks to seccomp 8929 support code 8930 - interfaces: bring back seccomp argument filtering 8931 - systemd, osutil: rework systemd logs in preparation for services 8932 commands 8933 - tests: store /etc/systemd/system/snap-*core*.mount in snapd- 8934 state.tar.gz 8935 - tests: shellcheck improvements for tests/main tasks - first set of 8936 tests 8937 - cmd/snap: `--last` for abort and watch, and aliases 8938 (search→find, change→tasks) 8939 - tests: shellcheck improvements for tests/lib scripts 8940 - tests: create ramdisk if it's not present 8941 - tests: shellcheck improvements for nightly upgrade and regressions 8942 tests 8943 - snapd: fix for snapctl get panic on null config values. 8944 - tests: fix for rng-tools service not restarting 8945 - systemd: add snapd.core-fixup.service unit 8946 - cmd: avoid using current symlink in InternalToolPath 8947 - tests: fix timeout issue for test refresh core with hanging … 8948 - intefaces: control bridged vlan/ppoe-tagged traffic 8949 - cmd/snap: include snap type in notes 8950 - overlord/state: Abort() only visits each task once 8951 - tests: extend find-private test to cover more cases 8952 - snap-seccomp: skip socket() tests on systems that use socketcall() 8953 instead of socket() 8954 - many: support snap title as localized/title-cased name 8955 - snap-seccomp: deal with mknod on aarch64 in the seccomp tests 8956 - interfaces: put base policy fragments inside each interface 8957 - asserts: introduce NewDecoderWithTypeMaxBodySize 8958 - tests: fix snapd-notify when it takes more time to restart 8959 - snap-seccomp: fix snap-seccomp tests in artful 8960 - tests: fix for create-key task to avoid rng-tools service ramains 8961 alive 8962 - snap-seccomp: make sure snap-seccomp writes the bpf file 8963 atomically 8964 - tests: do not disable ipv6 on core systems 8965 - arch: the kernel architecture name is armv7l instead of armv7 8966 - snap-confine: ensure snap-confine waits some seconds for seccomp 8967 security profiles 8968 - tests: shellcheck improvements for tests/nested tasks 8969 - wrappers: add SyslogIdentifier to the service unit files. 8970 - tests: shellcheck improvements for unit tasks 8971 - asserts: implement FindManyTrusted as well 8972 - asserts: open up and optimize Encoder to help avoiding unnecessary 8973 copying 8974 - interfaces: simplify snap-confine by just loading pre-generated 8975 bpf code 8976 - tests: restart rng-tools services after few seconds 8977 - interfaces, tests: add mising dbus abstraction to system-observe 8978 and extend spread test 8979 - store: change main store host to api.snapcraft.io 8980 - overlord/cmdstate: new package for running commands as tasks. 8981 - spread: help libapt resolve installing libudev-dev 8982 - tests: show the IP from .travis.yaml 8983 - tests/main: use pkgdb function in more test cases 8984 - cmd,daemon: add debug command for displaying the base policy 8985 - tests: prevent quoting error on opensuse 8986 - tests: fix nightly suite 8987 - tests: add linode-sru backend 8988 - snap-confine: validate SNAP_NAME against security tag 8989 - tests: fix ipv6 disable for ubuntu-core 8990 - tests: extend core-revert test to cover bluez issues 8991 - interfaces/greengrass-support: add support for Amazon Greengrass 8992 as a snap 8993 - asserts: support timestamp and optional disabled header on repair 8994 - tests: reboot after upgrading to snapd on the -proposed pocket 8995 - many: fix test cases to work with different DistroLibExecDir 8996 - tests: reenable help test on ubuntu and debian systems 8997 - packaging/{opensuse,fedora}: allow package build with testkeys 8998 included 8999 - tests/lib: generalize RPM build support 9000 - interfaces/builtin: sync connected slot and permanent slot snippet 9001 - tests: fix snap create-key by restarting automatically rng-tools 9002 - many: switch to use http numeric statuses as agreed 9003 - debian: add missing Type=notify in 14.04 packaging 9004 - tests: mark interfaces-openvswitch as manual due to prepare errors 9005 - debian: unify built_using between the 14.04 and 16.04 packaging 9006 branch 9007 - tests: pull from urandom when real entropy is not enough 9008 - tests/main/manpages: install missing man package 9009 - tests: add refresh --time output check 9010 - debian: add missing "make -C data/systemd clean" 9011 - tests: fix for upgrade test when it is repeated 9012 - tests/main: use dir abstraction in a few more test cases 9013 - tests/main: check for confinement in a few more interface tests 9014 - spread: add fedora snap bin dir to global PATH 9015 - tests: check that locale-control is not present on core 9016 - many: snapctl outside hooks 9017 - tests: add whoami check 9018 - interfaces: compose the base declaration from interfaces 9019 - tests: fix spread flaky tests linode 9020 - tests,packaging: add package build support for openSUSE 9021 - many: slight improvement of some snap error messaging 9022 - errtracker: Include /etc/apparmor.d/usr.lib.snap-confine md5sum in 9023 err reports 9024 - tests: fix for the test postrm-purge 9025 - tests: restoring the /etc/environment and service units config for 9026 each test 9027 - daemon: make snapd a "Type=notify" daemon and notify when startup 9028 is done 9029 - cmd/snap-confine: add support for --base snap 9030 - many: derive implicit slots from interface meta-data 9031 - tests: add core revert test 9032 - tests,packaging: add package build support for Fedora for our 9033 spread setup 9034 - interfaces: move base declaration to the policy sub-package 9035 - tests: fix for snapd-reexec test cheking for restart info on debug 9036 log 9037 - tests: show available entropy on error 9038 - tests: clean journalctl logs on trusty 9039 - tests: fix econnreset on staging 9040 - tests: modify core before calling set 9041 - tests: add snap-confine privilege test 9042 - tests: add staging snap-id 9043 - interfaces/builtin: silence ptrace denial for network-manager 9044 - tests: add alsa interface spread test 9045 - tests: prefer ipv4 over ipv6 9046 - tests: fix for econnreset test checking that the download already 9047 started 9048 - httputil,store: extract retry code to httputil, reorg usages 9049 - errtracker: report if snapd did re-execute itself 9050 - errtracker: include bits of snap-confine apparmor profile 9051 - tests: take into account staging snap-ids for snap-info 9052 - cmd: add stub new snap-repair command and add timer 9053 - many: stop "snap refresh $x --channel invalid" from working 9054 - interfaces: revert "interfaces: re-add reverted ioctl and quotactl 9055 - snapstate: consider connect/disconnect tasks in 9056 CheckChangeConflict. 9057 - interfaces: disable "mknod |N" in the default seccomp template 9058 again 9059 - interfaces,overlord/ifacestate: make sure installing slots after 9060 plugs works similarly to plugs after slots 9061 - interfaces/seccomp: add bind() syscall for forced-devmode systems 9062 - packaging/fedora: Sync packaging from Fedora Dist-Git 9063 - tests: move static and unit tests to spread task 9064 - many: error types should be called FooError, not ErrFoo. 9065 - partition: add directory sync to the save uboot.env file code 9066 - cmd: test everything (100% coverage \o/) 9067 - many: make shell scripts shellcheck-clean 9068 - tests: remove additional setup for docker on core 9069 - interfaces: add summary to each interface 9070 - many: remove interface meta-data from list of connections 9071 - logger (& many more, to accommodate): drop explicit syslog. 9072 - packaging: import packaging bits for opensuse 9073 - snapstate,many: implement snap install --unaliased 9074 - tests/lib: abstract build dependency installation a bit more 9075 - interfaces, osutil: move flock code from interfaces/mount to 9076 osutil 9077 - cmd: auto import assertions only from ext4,vfat file systems 9078 - many: refactor in preparation for 'snap start' 9079 - overlord/snapstate: have an explicit code path last-refresh 9080 unset/zero => immediately refresh try 9081 - tests: fixes for executions using the staging store 9082 - tests: use pollinate to seed the rng 9083 - cmd/snap,tests: show the sha3-384 of the snap for snap info 9084 --verbose SNAP-FILE 9085 - asserts: simplify and adjust repair assertion definition 9086 - cmd/snap,tests: show the snap id if available in snap info 9087 - daemon,overlord/auth: store from model assertion wins 9088 - cmd/snap,tests/main: add confinement switch instead of spread 9089 system blacklisting 9090 - many: cleanup MockCommands and don't leave a process around after 9091 hookstate tests 9092 - tests: update listing test to the core version number schema 9093 - interfaces: allow snaps to use the timedatectl utility 9094 - packaging: Add Fedora packaging files 9095 - tests/libs: add distro_auto_remove_packages function 9096 - cmd/snap: correct devmode note for anomalous state 9097 - tests/main/snap-info: use proper pkgdb functions to install distro 9098 packages 9099 - tests/lib: use mktemp instead of tempfile to work cross-distro 9100 - tests: abstract common dirs which differ on distributions 9101 - many: model and expose interface meta-data. 9102 - overlord: make config defaults from gadget work also at first boot 9103 - interfaces/log-observe: allow using journalctl from hostfs for 9104 classic distro 9105 - partition,snap: add support for android boot 9106 - errtracker: small simplification around readMachineID 9107 - snap-confine: move rm_rf_tmp to test-utils. 9108 - tests/lib: introduce pkgdb helper library 9109 - errtracker: try multiple paths to read machine-id 9110 - overlord/hooks: make sure only one hook for given snap is executed 9111 at a time. 9112 - cmd/snap-confine: use SNAP_MOUNT_DIR to setup /snap inside the 9113 confinement env 9114 - tests: bump kill-timeout and remove quiet call on build 9115 - tests/lib/snaps: add a test store snap with a passthrough 9116 configure hook 9117 - daemon: teach the daemon to wait on active connections when 9118 shutting down 9119 - tests: remove unit tests task 9120 - tests/main/completion: source from /usr/share/bash-completion 9121 - assertions: add "repair" assertion 9122 - interfaces/seccomp: document Backend.NewSpecification 9123 - wrappers: make StartSnapServices cleanup any services that were 9124 added if a later one fails 9125 - overlord/snapstate: avoid creating command aliases for daemons 9126 - vendor: remove unused packages 9127 - vendor,partition: fix panics from uenv 9128 - cmd,interfaces/mount: run snap-update-ns and snap-discard-ns from 9129 core if possible 9130 - daemon: do not allow to install ubuntu-core anymore 9131 - wrappers: service start/stop were inconsistent 9132 - tests: fix failing tests (snap core version, syslog changes) 9133 - cmd/snap-update-ns: add actual implementation 9134 - tests: improve entropy also for ubuntu 9135 - cmd/snap-confine: use /etc/ssl from the core snap 9136 - wrappers: don't convert between []byte and string needlessly. 9137 - hooks: default timeout 9138 - overlord/snapstate: Enable() was ignoring the flags from the 9139 snap's state, resulting in losing "devmode" on disable/enable. 9140 - difs,interfaces/mount: add support for locking namespaces 9141 - interfaces/mount: keep track of kept mount entries 9142 - tests/main: move a bunch of greps over to MATCH 9143 - interfaces/builtin: make all interfaces private 9144 - interfaces/mount: spell unmount correctly 9145 - tests: allow 16-X.Y.Z version of core snap 9146 - the timezone_control interface only allows changing /etc/timezone 9147 and /etc/writable/timezone. systemd-timedated also updated the 9148 link of /etc/localtime and /etc/writable/localtime ... allow 9149 access to this file too 9150 - cmd/snap-confine: aggregate operations holding global lock 9151 - api, ifacestate: resolve disconnect early 9152 - interfaces/builtin: ensure we don't register interfaces twice 9153 9154 * Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.26.3-5 9155 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild 9156 9157 * Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.26.3-4 9158 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild 9159 9160 * Thu May 25 2017 Neal Gompa <ngompa13@gmail.com> - 2.26.3-3 9161 - Cover even more stuff for proper erasure on final uninstall (RH#1444422) 9162 9163 * Sun May 21 2017 Neal Gompa <ngompa13@gmail.com> - 2.26.3-2 9164 - Fix error in script for removing Snappy content (RH#1444422) 9165 - Adjust changelog bug references to be specific on origin 9166 9167 * Wed May 17 2017 Neal Gompa <ngompa13@gmail.com> - 2.26.3-1 9168 - Update to snapd 2.26.3 9169 - Drop merged and unused patches 9170 - Cover more Snappy content for proper erasure on final uninstall (RH#1444422) 9171 - Add temporary fix to ensure generated seccomp profiles don't break snapctl 9172 9173 * Mon May 01 2017 Neal Gompa <ngompa13@gmail.com> - 2.25-1 9174 - Update to snapd 2.25 9175 - Ensure all Snappy content is gone on final uninstall (RH#1444422) 9176 9177 * Tue Apr 11 2017 Neal Gompa <ngompa13@gmail.com> - 2.24-1 9178 - Update to snapd 2.24 9179 - Drop merged patches 9180 - Install snap bash completion and snapd info file 9181 9182 * Wed Apr 05 2017 Neal Gompa <ngompa13@gmail.com> - 2.23.6-4 9183 - Test if snapd socket and timer enabled and start them if enabled on install 9184 9185 * Sat Apr 01 2017 Neal Gompa <ngompa13@gmail.com> - 2.23.6-3 9186 - Fix profile.d generation so that vars aren't expanded in package build 9187 9188 * Fri Mar 31 2017 Neal Gompa <ngompa13@gmail.com> - 2.23.6-2 9189 - Fix the overlapping file conflicts between snapd and snap-confine 9190 - Rework package descriptions slightly 9191 9192 * Thu Mar 30 2017 Neal Gompa <ngompa13@gmail.com> - 2.23.6-1 9193 - Rebase to snapd 2.23.6 9194 - Rediff patches 9195 - Re-enable seccomp 9196 - Fix building snap-confine on 32-bit arches 9197 - Set ExclusiveArch based on upstream supported arch list 9198 9199 * Wed Mar 29 2017 Neal Gompa <ngompa13@gmail.com> - 2.23.5-1 9200 - Rebase to snapd 2.23.5 9201 - Disable seccomp temporarily avoid snap-confine bugs (LP#1674193) 9202 - Use vendorized build for non-Fedora 9203 9204 * Mon Mar 13 2017 Neal Gompa <ngompa13@gmail.com> - 2.23.1-1 9205 - Rebase to snapd 2.23.1 9206 - Add support for vendored tarball for non-Fedora targets 9207 - Use merged in SELinux policy module 9208 9209 * Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.16-2 9210 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild 9211 9212 * Wed Oct 19 2016 Zygmunt Krynicki <me@zygoon.pl> - 2.16-1 9213 - New upstream release 9214 9215 * Tue Oct 18 2016 Neal Gompa <ngompa13@gmail.com> - 2.14-2 9216 - Add SELinux policy module subpackage 9217 9218 * Tue Aug 30 2016 Zygmunt Krynicki <me@zygoon.pl> - 2.14-1 9219 - New upstream release 9220 9221 * Tue Aug 23 2016 Zygmunt Krynicki <me@zygoon.pl> - 2.13-1 9222 - New upstream release 9223 9224 * Thu Aug 18 2016 Zygmunt Krynicki <me@zygoon.pl> - 2.12-2 9225 - Correct license identifier 9226 9227 * Thu Aug 18 2016 Zygmunt Krynicki <me@zygoon.pl> - 2.12-1 9228 - New upstream release 9229 9230 * Thu Aug 18 2016 Zygmunt Krynicki <me@zygoon.pl> - 2.11-8 9231 - Add %%dir entries for various snapd directories 9232 - Tweak Source0 URL 9233 9234 * Tue Aug 16 2016 Zygmunt Krynicki <me@zygoon.pl> - 2.11-7 9235 - Disable snapd re-exec feature by default 9236 9237 * Tue Aug 16 2016 Zygmunt Krynicki <me@zygoon.pl> - 2.11-6 9238 - Don't auto-start snapd.socket and snapd.refresh.timer 9239 9240 * Tue Aug 16 2016 Zygmunt Krynicki <me@zygoon.pl> - 2.11-5 9241 - Don't touch snapd state on removal 9242 9243 * Tue Aug 16 2016 Zygmunt Krynicki <me@zygoon.pl> - 2.11-4 9244 - Use ExecStartPre to load squashfs.ko before snapd starts 9245 - Use dedicated systemd units for Fedora 9246 9247 * Tue Aug 16 2016 Zygmunt Krynicki <me@zygoon.pl> - 2.11-3 9248 - Remove systemd preset (will be requested separately according to distribution 9249 standards). 9250 9251 * Tue Aug 16 2016 Zygmunt Krynicki <me@zygoon.pl> - 2.11-2 9252 - Use Requires: kmod(squashfs.ko) instead of Requires: kernel-modules 9253 9254 * Tue Aug 16 2016 Zygmunt Krynicki <me@zygoon.pl> - 2.11-1 9255 - New upstream release 9256 - Move private executables to /usr/libexec/snapd/ 9257 9258 * Fri Jun 24 2016 Zygmunt Krynicki <me@zygoon.pl> - 2.0.9-2 9259 - Depend on kernel-modules to ensure that squashfs can be loaded. Load it afer 9260 installing the package. This hopefully fixes 9261 https://github.com/zyga/snapcore-fedora/issues/2 9262 9263 * Fri Jun 17 2016 Zygmunt Krynicki <me@zygoon.pl> - 2.0.9 9264 - New upstream release 9265 https://github.com/snapcore/snapd/releases/tag/2.0.9 9266 9267 * Tue Jun 14 2016 Zygmunt Krynicki <me@zygoon.pl> - 2.0.8.1 9268 - New upstream release 9269 9270 * Fri Jun 10 2016 Zygmunt Krynicki <me@zygoon.pl> - 2.0.8 9271 - First package for Fedora