Format: 1.8 Date: Fri, 12 Jul 2019 10:40:08 +0200 Source: snapd Binary: golang-github-ubuntu-core-snappy-dev golang-github-snapcore-snapd-dev snapd ubuntu-snappy ubuntu-snappy-cli ubuntu-core-snapd-units snap-confine ubuntu-core-launcher snapd-xdg-open Architecture: all amd64 amd64_translations Version: 2.40 Distribution: xenial-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Michael Vogt Description: golang-github-snapcore-snapd-dev - snappy development go packages. golang-github-ubuntu-core-snappy-dev - transitional dummy package snap-confine - Transitional package for snapd snapd - Daemon and tooling that enable snap packages snapd-xdg-open - Transitional package for snapd-xdg-open ubuntu-core-launcher - Transitional package for snapd ubuntu-core-snapd-units - transitional dummy package ubuntu-snappy - transitional dummy package ubuntu-snappy-cli - transitional dummy package Launchpad-Bugs-Fixed: 1836327 Changes: snapd (2.40) xenial; urgency=medium . * New upstream release, LP: #1836327 - overlord/patch: simplify conditions for re-applying sublevel patches for level 6 - cmd,tests: forcibly discard mount namespace when bases change - cmd/snap-confine: handle device cgroup before pivot - cmd/snap-apparmor-service: quit if there are no profiles - cmd/snap, image: add --target-directory and --basename to 'snap download' - interfaces: add jack1 implicit classic interface - interfaces: miscellaneous policy updates - daemon: classic confinement is not supported on core - interfaces: bluetooth-control: add mtk BT device node - cmd/snap-seccomp: initial support for negative arguments with uid/gid caching - snap-confine: move seccomp load after permanent privilege drop - tests: new profiler snap used to track cpu and memory for snapd and snap commands - debian: make maintainer scripts do nothing on powerpc - gadget: mounted filesystem writer - cmd/snap: use padded checkers for snapshot output - bootloader: switch to bootloader_test style testing - gadget: add a wrapper for generating partitioned images with sfdisk - tests/main/snap-seccomp-syscalls: add description - tests: continue executing on errors either updating the repo db or installing dependencies - cmd/snap-seccomp/syscalls: add io_uring syscalls - systemd: add InstanceMode enumeration to control which systemd instance to control - netutil: extract socket activation helpers from daemon package. - interfaces: spi: update regex rules to accept spi nodes like spidev12345.0 - gadget: fallback device lookup - many: add strutil.ElliptLeft, use it for shortening cohorts - wrappers: allow sockets under $XDG_RUNTIME_DIR - gadget: add wrapper for creating and populating filesystems - gadget: add writer for offset-write - gadget: support relative symlinks in device lookup - snap, snapstate: additional validation of base field - many: fix some races and missing locking, make sure UDevMonitor is stopped - boot: move ExtractKernelAssets - daemon, snap: screenshots _only_ shows the deprecation notice, from 2.39 - osutil: add a workaround for overlayfs apparmor as it is used on Manjaro - snap: introduce GetType() function for snap.Info - tests: update systems to be used for during sru validation - daemon: increase `shutdownTimeout` to 25s to deal with slow HW - interfaces/network-manager: move deny ptrace to the connected slot - interfaces: allow locking of pppd files - cmd/snap-exec: fix snap completion for classic snaps with non /usr/lib/snapd libexecdir - daemon: expose pprof endpoints - travis: disable snap pack on OSX - client, cmd/snap: expose the new cohort options for snap ops - overlord/snapstate: tweak switch summaries - tests: reuse the image created initially for nested tests execution - tests/lib/nested: tweak assert disk prepare step - daemon, overlord/snapstate: support leave-cohort - tests/main/appstream-id: collect debug info - store,daemon: add client-user-agent support to store.SnapInfo - tests: add check for invalid PR titles in the static checks - tests: add snap-tool for easier access to internal tools - daemon: unexport file{Response,Stream} - devicestate: make TestUpdateGadgetOnClassicErrorsOut less racy - tests: fix test desktop-portal-filechooser - tests: sort commands from DumpCommands in the dumpDbHook - cmd/snap: add unit test for "advise-snap --dump-db". - bootloader: remove extra mock bootloader implementation - daemon: tweak for "add api endpoint for download" PR - packaging: fix reproducible build error - tests: synchronize journal logs before check logs - tests: fix snap service watchdog test - tests: use more readable test directory names - tests/regression/lp-1805485: update test description - overlord: make changes conflict with remodel - tests: make sure the snapshot unit test uses a snapshot time relative to Now() - tests: revert "tests: stop catalog-update/apt-hooks test for now" - tests: mountinfo-tool --one prints matches on failure - data/selinux: fix policy for snaps with bases and classic snaps - debian: fix building on eoan by tweaking golang build-deps - packaging/debian-sid: update required golang version to 1.10 - httputil: handle "no such host" error explicitly and do not retry it - overlord/snapstate, & fallout: give Install a *RevisionOptions - cmd/snap: don't run install on 'snap --help install' - gadget: raw/bare structure writer and updater - daemon, client, cmd/snap: show cohort key in snap info --verbose - overlord/snapstate: add update-gadget task when needed, block other changes - image: turn a missing default content provider into an error - overlord/devicestate: update-gadget-assets task handler with stubbed gadget callbacks - interface: builtin: avahi-observe/control: update label for implicit slot - tests/lib/nested: fix multi argument copy_remote - tests/lib/nested: have mkfs.ext4 use a rootdir instead of mounting an image - packaging: fix permissons powerpc docs dir - overlord: mock store to avoid net requests - debian: rework how we run autopkgtests - interface: builtin: avahi-observe/control: allow slots implementation also by app snap on classic system - interfaces: builtin: utils: add helper function to identify system slots - interfaces: add missing adjtimex to time-control - overlord/snapstate, snap: support base = "none" - daemon, overlord/snapstate: give RevisionOptions a CohortKey - data/selinux: permit init_t to remount snappy_snap_t - cmd/snap: test for a friendly error on 'okay' without 'warnings' - cmd/snap: support snap debug timings --startup=.. and measure loadState time - advise-snap: add --dump-db which dumps the command database - interfaces/docker-support: support overlayfs on ubuntu core - cmd/okay: Remove err message when warning file not exist - devicestate: disallow removal of snaps used in booting early - packaging: fix build-depends on powerpc - tests: run spread tests on opensuse leap 15.1 - strutil/shlex: fix ineffassign - cmd/snapd: ensure GOMAXPROCS is at least 2 - cmd/snap-update-ns: detach unused mount points - gadget: record gadget root directory used during positioning - tests: force removal to prevent restore fails when directory doesn't exist on lp-1801955 test - overlord: implement store switch remodeling - tests: stop using ! for naive negation in shell scripts - snap,store,daemon,client: send new "Snap-Client-User-Agent" header in Search() - osutil: now that we require golang-1.10, use user.LookupGroup() - spread.yaml,tests: change MATCH and REBOOT to cmds - packaging/fedora: force external linker to ensure static linking and -extldflags use - timings: tweak the conditional for ensure timings - timings: always store ensure timings as long as they have an associated change - cmd/snap: tweak the output of snap debug timings --ensure=... - overlord/devicestate: introduce remodel kinds and contextsregistrationContext: - snaptest: add helper for mocking snap with contents - snapstate: allow removal of non-model kernels - tests: change strace parameters on snap-run test to avoid the test gets stuck - gadget: keep track of the index where structure content was defined - cmd/snap-update-ns: rename leftover ctx to upCtx - tests: add "not" command - spread.yaml: use "snap connections" in debug - tests: fix how strings are matched on auto-refresh-retry test - spread-shellcheck: add support for variants and environment - gadget: helper for shifting structure start position - cmd/snap-update-ns: add several TODO comments - cmd/snap-update-ns: rename ctx to upCtx - spread.yaml: make HOST: usage shellcheck-clean - overlord/snapstate, daemon: snapstate.Switch now takes a RevisionOption - tests: add mountinfo-tool - many: make snapstate.Update take *RevisionOptions instead of chan, rev - tests/unit/spread-shellcheck: temporary workaround for SC2251 - daemon: refactor user ops to api_users - cmd/snap, tests: refactor info to unify handling of 'direct' snaps - cmd/snap-confine: combine sc_make_slave_mount_ns into caller - cmd/snap-update-ns: use "none" for propagation changes - cmd/snap-confine: don't pass MS_SLAVE along with MS_BIND - cmd/snap, api, snapstate: implement "snap remove --purge" - tests: new hotplug test executed on ubuntu core - tests: running tests on fedora 30 - gadget: offset-write: fix validation, calculate absolute position - data/selinux: allow snap-confine to do search on snappy_var_t directories - daemon, o/snapstate, store: support for installing from cohorts - cmd/snap-confine: do not mount over non files/directories - tests: validates snapd from ppa - overlord/configstate: don't panic on invalid configuration - gadget: improve device lookup, add helper for mount point lookup - cmd/snap-update-ns: add tests for executeMountProfileUpdate - overlord/hookstate: don't run handler unless hooksup.Always - cmd/snap-update-ns: allow changing mount propagation - systemd: workaround systemctl show quirks on older systemd versions - cmd/snap: allow option descriptions to start with the command - many: introduce a gadget helper for locating device matching given structure - cmd/snap-update-ns: fix golint complaints about variable names - cmd/snap: unit tests for debug timings - testutil: support sharing-related mount flags - packaging/fedora: Merge changes from Fedora Dist-Git and drop EOL Fedora releases - cmd/snap: support for --ensure argument for snap debug timings - cmd,sandbox: tweak seccomp version info handling - gadget: record sector size in positioned volume - tests: make create-user test support managed devices - packaging: build empty package on powerpc - overlord/snapstate: perform hard refresh check - gadget: add volume level update checks - cmd/snap: mangle descriptions that have indent > terminal width - cmd/snap-update-ns: rename applyFstab to executeMountProfileUpdate - cmd/snap-confine: unshare per-user mount ns once - tests: retry govendor sync - tests: avoid removing snaps which are cached to speed up the prepare on boards - tests: fix how the base snap are deleted when there are multiple to deleted on reset - cmd/snap-update-ns: merge apply functions - many: introduce assertstest.SigningAccounts and AddMany test helpers - interfaces: special-case "snapd" in sanitizeSlotReservedForOS* helpers - cmd/snap-update-ns: make apply{User,System}Fstab identical - gadget: introduce checkers for sanitizing structure updates - cmd/snap-update-ns: move apply{Profile,{User,System}Fstab} to same file - overlord/devicestate: introduce registrationContext - cmd/snap-update-ns: add no-op load/save current user profile logic - devicestate: set "new-model" on the remodel change - devicestate: use deviceCtx in checkGadgetOrKernel - many: use a fake assertion model in the device contexts for tests - gadget: fix handling of positioning constrains for structures of MBR role - snap-confine: improve error when running on a not /home homedir - devicestate: make Remodel() return a state.Change - many: make which store to use contextualThis reworks snapstate.Store instead of relying solely on DeviceContext, because: - tests: enable tests on centos 7 again - interfaces: add login-session-control interface - tests: extra debug for snapshot-basic test - overlord,overlord/devicestate: do without GadgetInfo/KernelInfo in devicestate - gadget: more validation checks for legacy MBR structure type & role - osutil: fix TestReadBuildGo test in sbuild - data: update XDG_DATA_DIRS via the systemd environment.d mechanism too - many: do without device state/assertions accessors based on state only outside of devicestate/tests - interfaces/dbus: fix unit tests when default snap mount dir is not /snap - tests: add security-seccomp to verify seccomp with arg filtering - snapshotstate: disable automatic snapshots on core for now - snapstate: auto-install snapd when needed - overlord/ifacestate: update static attributes of "content" interface - interfaces: add support for the snapd snap in the dbus backend* - overlord/snapstate: tweak autorefresh logic if network is not available - snapcraft: also include ld.so.conf from libc in the snapcraft.yml - snapcraft.yaml: fix links ld-linux-x86-64.so.2/ld64.so.2 - overlord: pass a DeviceContext to the checkSnap implementations - daemon: add RootOnly flag to commands - many: make access to the device model assertion etc contextual via a DeviceCtx hook/DeviceContext interface - snapcraft.yaml: include libc6 in snapd - tests: reduce snapcraft leftovers from PROJECT_PATH, temp disable centos - overlord: make the store context composably backed by separate backends for device asserts/info etc. - snapstate: revert "overlord/snapstate: remove PlugsOnly" - osutil,cmdutil: move CommandFromCore and make it use the snapd snap (if available) - travis: bump Go version to 1.10.x - cmd/snap-update-ns: remove instanceName argument from applyProfile - gadget: embed volume in positioned volume, rename fields - osutil: use go build-id when no gnu build-id is available - snap-seccomp: add 4th field to version-info for golang-seccomp features - cmd/snap-update-ns: merge computeAndSaveSystemChanges into applySystemFstab - cmd/snap, client, daemon, store: create-cohort - tests: give more time until nc returns on appstream test - tests: run spread tests on ubuntu 19.04 - gadget: layout, smaller fixes - overlord: update static attrs when reloading connections - daemon: verify snap instructions for multi-snap requests - overlord/corecfg: make expiration of automatic snapshots configurable (4/4) - cmd/snap-update-ns: pass MountProfileUpdate to apply{System,User}Fstab - snap: fix interface bindings on implicit hooks - tests: improve how snaps are cached - cmd/snap-update-ns: formatting tweaks - data/selinux: policy tweaks - cmd/snap-update-ns: move locking to the common layer - overlord: use private YAML inside several tests - cmd/snap, store, image: support for cohorts in "snap download" - overlord/snapstate: add timings to critical task handlers and the backend - cmd: add `snap debug validate-seed ` cmd - state: add possible error return to TaskSet.Edge() - snap-seccomp: use username regex as defined in osutil/user.go - osutil: make IsValidUsername public and fix regex - store: serialize the acquisition of device sessions - interfaces/builtin/desktop: fonconfig v6/v7 cache handling on Fedora - many: move Device/SetDevice to devicestate, start of making them pluggable in storecontext - overlord/snapstate: remove PlugsOnly - interfaces/apparmor: allow running /usr/bin/od - spread: add qemu:fedora-29-64 - tests: make test parallel-install-interfaces work for boards with pre-installed snaps - interfaces/builtin/intel_mei: fix /dev/mei* AppArmor pattern - spread.yaml: add qemu:centos-7-64 - overlord/devicestate: extra measurements related to populateStateFromSeed - cmd/snap-update-ns: move Assumption to {System,User}ProfileUpdate - cmd/libsnap: remove fringe error function - gadget: add validation of cross structure overlap and offset writes - cmd/snap-update-ns: refactor of profile application (3/N) - data/selinux: tweak the policy for runuser and s-c, interpret audit entries - tests: fix spaces issue in the base snaps names to remove during reset phase - tests: wait for man db cache is updated before after install snapd on Fedora - tests: extend timeout of sbuild test Checksums-Sha1: b13ae9a836f70554d04671c12e0181b3a779b78d 1731320 golang-github-snapcore-snapd-dev_2.40_all.deb e896ddaa5a19fd12de5ccf4bf0d1a40a3621d06a 1552 golang-github-ubuntu-core-snappy-dev_2.40_all.deb 340ecc30184a55963617b5fd26c4f153f3027656 1720 snap-confine_2.40_amd64.deb e0dc3e5e91540339dadf2c725a3ba8670486a6a3 4464726 snapd-dbgsym_2.40_amd64.ddeb 8611d76b581b90b96ae15a807dbc0efa65244578 1552 snapd-xdg-open_2.40_amd64.deb 1ab3824101e1fe773413175d63a02e638b874999 13120510 snapd_2.40_amd64.deb a4ba1b531a245ee5d3815c57770ae0e2cbf0afa3 693711 snapd_2.40_amd64_translations.tar.gz 92a778dd8b10f1a4a3ec4369f569a4006328bc36 1562 ubuntu-core-launcher_2.40_amd64.deb b4959b7d77cb5d8badc46d68ed68875559e7e39e 1524 ubuntu-core-snapd-units_2.40_all.deb 1355b13fa0f61ddeadeef310a70a2d43ed172a60 1570 ubuntu-snappy-cli_2.40_all.deb 1159c60ff0eb0c51fa56fb4e2c6e934be7ad8e2d 1510 ubuntu-snappy_2.40_all.deb Checksums-Sha256: 0d648d89fc5ac9d96e32c684f4822cf0131e48d656cc4d5018b685f5a2b8c965 1731320 golang-github-snapcore-snapd-dev_2.40_all.deb 88fe13873ce922c8cb7c1356bf8842c3d11c0951029d51bbe3f6e0d92f70d4c5 1552 golang-github-ubuntu-core-snappy-dev_2.40_all.deb fb6219d97225c8e30de30bb85337fc6f0518074230d2d4407789907c456d9d39 1720 snap-confine_2.40_amd64.deb 0ee53f265f038674fc66f57f2b4a4e1f6ad57431e4a134a4357d0dd1ec207b53 4464726 snapd-dbgsym_2.40_amd64.ddeb 9073e2d3fd102db9a4cfb617daf6ba7d5ecbe7e77c4c6d5ab0b6fd013bc72401 1552 snapd-xdg-open_2.40_amd64.deb d2edbeefb564a5137e72e8cb53e406b2b50d943de27ea3389ec2ef6ddf3137ab 13120510 snapd_2.40_amd64.deb 148542514fa8d15ef7a52f52d417e3201972a477173fb227b597675f90419cc4 693711 snapd_2.40_amd64_translations.tar.gz fe7106c250df9dba9e56c82c2c702e48d8e0370a94ff70e748e1f50fabd11092 1562 ubuntu-core-launcher_2.40_amd64.deb 32937be021ca878e5dbe06dfe271360ec39417f700b43f7c585d3f7c77a3d428 1524 ubuntu-core-snapd-units_2.40_all.deb 3e7b751893a08fd3f1df0d44b713b17c00e90c7c8861937e437ee59d86b51502 1570 ubuntu-snappy-cli_2.40_all.deb bdb6965bbf7dac381622a9b0f12b90656bf1d7bf10aad494dadbbde763f3308e 1510 ubuntu-snappy_2.40_all.deb Files: 42a183ece8ae09a5b94163bc7083a41c 1731320 devel optional golang-github-snapcore-snapd-dev_2.40_all.deb c0fef15db3b5961c2530c85a6b6ebae3 1552 oldlibs optional golang-github-ubuntu-core-snappy-dev_2.40_all.deb 30f3ea4de2ef9fe6da3877ea4124ff27 1720 oldlibs optional snap-confine_2.40_amd64.deb 4a3a0721cebcf118c163a3383cf7a8e1 4464726 devel extra snapd-dbgsym_2.40_amd64.ddeb 5ea8d0b8e05ff45d8f2314d39a01643a 1552 oldlibs optional snapd-xdg-open_2.40_amd64.deb 6bfb7144415f05ebeed648131579b6b6 13120510 devel optional snapd_2.40_amd64.deb 57c1d4e85f28ab21597090300a524656 693711 raw-translations - snapd_2.40_amd64_translations.tar.gz d00aff7b6019229b82a340e5955af054 1562 oldlibs optional ubuntu-core-launcher_2.40_amd64.deb 14879574de95c7a581739f91b2225d5e 1524 oldlibs optional ubuntu-core-snapd-units_2.40_all.deb c0947ec89a9c597ef8ba526dd049c9cd 1570 oldlibs optional ubuntu-snappy-cli_2.40_all.deb bed6525ebdd53377139bce43209b54e2 1510 oldlibs optional ubuntu-snappy_2.40_all.deb