Change logs for snapd source package in Xenial

  • snapd (2.40) xenial; urgency=medium
    
      * New upstream release, LP: #1836327
        - overlord/patch: simplify conditions for re-applying sublevel
          patches for level 6
        - cmd,tests: forcibly discard mount namespace when bases change
        - cmd/snap-confine: handle device cgroup before pivot
        - cmd/snap-apparmor-service: quit if there are no profiles
        - cmd/snap, image: add --target-directory and --basename to 'snap
          download'
        - interfaces: add jack1 implicit classic interface
        - interfaces: miscellaneous policy updates
        - daemon: classic confinement is not supported on core
        - interfaces: bluetooth-control: add mtk BT device node
        - cmd/snap-seccomp: initial support for negative arguments with
          uid/gid caching
        - snap-confine: move seccomp load after permanent privilege drop
        - tests: new profiler snap used to track cpu and memory for snapd
          and snap commands
        - debian: make maintainer scripts do nothing on powerpc
        - gadget: mounted filesystem writer
        - cmd/snap: use padded checkers for snapshot output
        - bootloader: switch to bootloader_test style testing
        - gadget: add a wrapper for generating partitioned images with
          sfdisk
        - tests/main/snap-seccomp-syscalls: add description
        - tests: continue executing on errors either updating the repo db or
          installing dependencies
        - cmd/snap-seccomp/syscalls: add io_uring syscalls
        - systemd: add InstanceMode enumeration to control which systemd
          instance to control
        - netutil: extract socket activation helpers from daemon package.
        - interfaces: spi: update regex rules to accept spi nodes like
          spidev12345.0
        - gadget: fallback device lookup
        - many: add strutil.ElliptLeft, use it for shortening cohorts
        - wrappers: allow sockets under $XDG_RUNTIME_DIR
        - gadget: add wrapper for creating and populating filesystems
        - gadget: add writer for offset-write
        - gadget: support relative symlinks in device lookup
        - snap, snapstate: additional validation of base field
        - many: fix some races and missing locking, make sure UDevMonitor is
          stopped
        - boot: move ExtractKernelAssets
        - daemon, snap: screenshots _only_ shows the deprecation notice,
          from 2.39
        - osutil: add a workaround for overlayfs apparmor as it is used on
          Manjaro
        - snap: introduce GetType() function for snap.Info
        - tests: update systems to be used for during sru validation
        - daemon: increase `shutdownTimeout` to 25s to deal with slow
          HW
        - interfaces/network-manager: move deny ptrace to the connected slot
        - interfaces: allow locking of pppd files
        - cmd/snap-exec: fix snap completion for classic snaps with non
          /usr/lib/snapd libexecdir
        - daemon: expose pprof endpoints
        - travis: disable snap pack on OSX
        - client, cmd/snap: expose the new cohort options for snap ops
        - overlord/snapstate: tweak switch summaries
        - tests: reuse the image created initially for nested tests
          execution
        - tests/lib/nested: tweak assert disk prepare step
        - daemon, overlord/snapstate: support leave-cohort
        - tests/main/appstream-id: collect debug info
        - store,daemon: add client-user-agent support to store.SnapInfo
        - tests: add check for invalid PR titles in the static checks
        - tests: add snap-tool for easier access to internal tools
        - daemon: unexport file{Response,Stream}
        - devicestate: make TestUpdateGadgetOnClassicErrorsOut less racy
        - tests: fix test desktop-portal-filechooser
        - tests: sort commands from DumpCommands in the dumpDbHook
        - cmd/snap: add unit test for "advise-snap --dump-db".
        - bootloader: remove extra mock bootloader implementation
        - daemon: tweak for "add api endpoint for download" PR
        - packaging: fix reproducible build error
        - tests: synchronize journal logs before check logs
        - tests: fix snap service watchdog test
        - tests: use more readable test directory names
        - tests/regression/lp-1805485: update test description
        - overlord: make changes conflict with remodel
        - tests: make sure the snapshot unit test uses a snapshot time
          relative to Now()
        - tests: revert "tests: stop catalog-update/apt-hooks test for now"
        - tests: mountinfo-tool --one prints matches on failure
        - data/selinux: fix policy for snaps with bases and classic snaps
        - debian: fix building on eoan by tweaking golang build-deps
        - packaging/debian-sid: update required golang version to 1.10
        - httputil: handle "no such host" error explicitly and do not retry
          it
        - overlord/snapstate, & fallout: give Install a *RevisionOptions
        - cmd/snap: don't run install on 'snap --help install'
        - gadget: raw/bare structure writer and updater
        - daemon, client, cmd/snap: show cohort key in snap info --verbose
        - overlord/snapstate: add update-gadget task when needed, block
          other changes
        - image: turn a missing default content provider into an error
        - overlord/devicestate: update-gadget-assets task handler with
          stubbed gadget callbacks
        - interface: builtin: avahi-observe/control: update label for
          implicit slot
        - tests/lib/nested: fix multi argument copy_remote
        - tests/lib/nested: have mkfs.ext4 use a rootdir instead of mounting
          an image
        - packaging: fix permissons powerpc docs dir
        - overlord: mock store to avoid net requests
        - debian: rework how we run autopkgtests
        - interface: builtin: avahi-observe/control: allow slots
          implementation also by app snap on classic system
        - interfaces: builtin: utils: add helper function to identify system
          slots
        - interfaces: add missing adjtimex to time-control
        - overlord/snapstate, snap: support base = "none"
        - daemon, overlord/snapstate: give RevisionOptions a CohortKey
        - data/selinux: permit init_t to remount snappy_snap_t
        - cmd/snap: test for a friendly error on 'okay' without 'warnings'
        - cmd/snap: support snap debug timings --startup=.. and measure
          loadState time
        - advise-snap: add --dump-db which dumps the command database
        - interfaces/docker-support: support overlayfs on ubuntu core
        - cmd/okay: Remove err message when warning file not exist
        - devicestate: disallow removal of snaps used in booting early
        - packaging: fix build-depends on powerpc
        - tests: run spread tests on opensuse leap 15.1
        - strutil/shlex: fix ineffassign
        - cmd/snapd: ensure GOMAXPROCS is at least 2
        - cmd/snap-update-ns: detach unused mount points
        - gadget: record gadget root directory used during positioning
        - tests: force removal to prevent restore fails when directory
          doesn't exist on lp-1801955 test
        - overlord: implement store switch remodeling
        - tests: stop using ! for naive negation in shell scripts
        - snap,store,daemon,client: send new "Snap-Client-User-Agent" header
          in Search()
        - osutil: now that we require golang-1.10, use user.LookupGroup()
        - spread.yaml,tests: change MATCH and REBOOT to cmds
        - packaging/fedora: force external linker to ensure static linking
          and -extldflags use
        - timings: tweak the conditional for ensure timings
        - timings: always store ensure timings as long as they have an
          associated change
        - cmd/snap: tweak the output of snap debug timings --ensure=...
        - overlord/devicestate: introduce remodel kinds and
          contextsregistrationContext:
        - snaptest: add helper for mocking snap with contents
        - snapstate: allow removal of non-model kernels
        - tests: change strace parameters on snap-run test to avoid the test
          gets stuck
        - gadget: keep track of the index where structure content was
          defined
        - cmd/snap-update-ns: rename leftover ctx to upCtx
        - tests: add "not" command
        - spread.yaml: use "snap connections" in debug
        - tests: fix how strings are matched on auto-refresh-retry test
        - spread-shellcheck: add support for variants and environment
        - gadget: helper for shifting structure start position
        - cmd/snap-update-ns: add several TODO comments
        - cmd/snap-update-ns: rename ctx to upCtx
        - spread.yaml: make HOST: usage shellcheck-clean
        - overlord/snapstate, daemon: snapstate.Switch now takes a
          RevisionOption
        - tests: add mountinfo-tool
        - many: make snapstate.Update take *RevisionOptions instead of chan,
          rev
        - tests/unit/spread-shellcheck: temporary workaround for SC2251
        - daemon: refactor user ops to api_users
        - cmd/snap, tests: refactor info to unify handling of 'direct' snaps
        - cmd/snap-confine: combine sc_make_slave_mount_ns into caller
        - cmd/snap-update-ns: use "none" for propagation changes
        - cmd/snap-confine: don't pass MS_SLAVE along with MS_BIND
        - cmd/snap, api, snapstate: implement "snap remove --purge"
        - tests: new hotplug test executed on ubuntu core
        - tests: running tests on fedora 30
        - gadget: offset-write: fix validation, calculate absolute position
        - data/selinux: allow snap-confine to do search on snappy_var_t
          directories
        - daemon, o/snapstate, store: support for installing from cohorts
        - cmd/snap-confine: do not mount over non files/directories
        - tests: validates snapd from ppa
        - overlord/configstate: don't panic on invalid configuration
        - gadget: improve device lookup, add helper for mount point lookup
        - cmd/snap-update-ns: add tests for executeMountProfileUpdate
        - overlord/hookstate: don't run handler unless hooksup.Always
        - cmd/snap-update-ns: allow changing mount propagation
        - systemd: workaround systemctl show quirks on older systemd
          versions
        - cmd/snap: allow option descriptions to start with the command
        - many: introduce a gadget helper for locating device matching given
          structure
        - cmd/snap-update-ns: fix golint complaints about variable names
        - cmd/snap: unit tests for debug timings
        - testutil: support sharing-related mount flags
        - packaging/fedora: Merge changes from Fedora Dist-Git and drop EOL
          Fedora releases
        - cmd/snap: support for --ensure argument for snap debug timings
        - cmd,sandbox: tweak seccomp version info handling
        - gadget: record sector size in positioned volume
        - tests: make create-user test support managed devices
        - packaging: build empty package on powerpc
        - overlord/snapstate: perform hard refresh check
        - gadget: add volume level update checks
        - cmd/snap: mangle descriptions that have indent > terminal width
        - cmd/snap-update-ns: rename applyFstab to executeMountProfileUpdate
        - cmd/snap-confine: unshare per-user mount ns once
        - tests: retry govendor sync
        - tests: avoid removing snaps which are cached to speed up the
          prepare on boards
        - tests: fix how the base snap are deleted when there are multiple
          to deleted on reset
        - cmd/snap-update-ns: merge apply functions
        - many: introduce assertstest.SigningAccounts and AddMany test
          helpers
        - interfaces: special-case "snapd" in sanitizeSlotReservedForOS*
          helpers
        - cmd/snap-update-ns: make apply{User,System}Fstab identical
        - gadget: introduce checkers for sanitizing structure updates
        - cmd/snap-update-ns: move apply{Profile,{User,System}Fstab} to same
          file
        - overlord/devicestate: introduce registrationContext
        - cmd/snap-update-ns: add no-op load/save current user profile logic
        - devicestate: set "new-model" on the remodel change
        - devicestate: use deviceCtx in checkGadgetOrKernel
        - many: use a fake assertion model in the device contexts for tests
        - gadget: fix handling of positioning constrains for structures of
          MBR role
        - snap-confine: improve error when running on a not /home homedir
        - devicestate: make Remodel() return a state.Change
        - many: make which store to use contextualThis reworks
          snapstate.Store instead of relying solely on DeviceContext,
          because:
        - tests: enable tests on centos 7 again
        - interfaces: add login-session-control interface
        - tests: extra debug for snapshot-basic test
        - overlord,overlord/devicestate: do without GadgetInfo/KernelInfo in
          devicestate
        - gadget: more validation checks for legacy MBR structure type &
          role
        - osutil: fix TestReadBuildGo test in sbuild
        - data: update XDG_DATA_DIRS via the systemd environment.d mechanism
          too
        - many: do without device state/assertions accessors based on state
          only outside of devicestate/tests
        - interfaces/dbus: fix unit tests when default snap mount dir is not
          /snap
        - tests: add security-seccomp to verify seccomp with arg filtering
        - snapshotstate: disable automatic snapshots on core for now
        - snapstate: auto-install snapd when needed
        - overlord/ifacestate: update static attributes of "content"
          interface
        - interfaces: add support for the snapd snap in the dbus backend*
        - overlord/snapstate: tweak autorefresh logic if network is not
          available
        - snapcraft: also include ld.so.conf from libc in the snapcraft.yml
        - snapcraft.yaml: fix links ld-linux-x86-64.so.2/ld64.so.2
        - overlord: pass a DeviceContext to the checkSnap implementations
        - daemon: add RootOnly flag to commands
        - many:  make access to the device model assertion etc contextual
          via a DeviceCtx hook/DeviceContext interface
        - snapcraft.yaml: include libc6 in snapd
        - tests: reduce snapcraft leftovers from PROJECT_PATH,  temp disable
          centos
        - overlord: make the store context composably backed by separate
          backends for device asserts/info etc.
        - snapstate: revert "overlord/snapstate: remove PlugsOnly"
        - osutil,cmdutil: move CommandFromCore and make it use the snapd
          snap (if available)
        - travis: bump Go version to 1.10.x
        - cmd/snap-update-ns: remove instanceName argument from applyProfile
        - gadget: embed volume in positioned volume, rename fields
        - osutil: use go build-id when no gnu build-id is available
        - snap-seccomp: add 4th field to version-info for golang-seccomp
          features
        - cmd/snap-update-ns: merge computeAndSaveSystemChanges into
          applySystemFstab
        - cmd/snap, client, daemon, store: create-cohort
        - tests: give more time until nc returns on appstream test
        - tests: run spread tests on ubuntu 19.04
        - gadget: layout, smaller fixes
        - overlord: update static attrs when reloading connections
        - daemon: verify snap instructions for multi-snap requests
        - overlord/corecfg: make expiration of automatic snapshots
          configurable (4/4)
        - cmd/snap-update-ns: pass MountProfileUpdate to
          apply{System,User}Fstab
        - snap: fix interface bindings on implicit hooks
        - tests: improve how snaps are cached
        - cmd/snap-update-ns: formatting tweaks
        - data/selinux: policy tweaks
        - cmd/snap-update-ns: move locking to the common layer
        - overlord: use private YAML inside several tests
        - cmd/snap, store, image: support for cohorts in "snap download"
        - overlord/snapstate: add timings to critical task handlers and the
          backend
        - cmd: add `snap debug validate-seed <path>` cmd
        - state: add possible error return to TaskSet.Edge()
        - snap-seccomp: use username regex as defined in osutil/user.go
        - osutil: make IsValidUsername public and fix regex
        - store: serialize the acquisition of device sessions
        - interfaces/builtin/desktop: fonconfig v6/v7 cache handling on
          Fedora
        - many: move Device/SetDevice to devicestate, start of making them
          pluggable in storecontext
        - overlord/snapstate: remove PlugsOnly
        - interfaces/apparmor: allow running /usr/bin/od
        - spread: add qemu:fedora-29-64
        - tests: make test parallel-install-interfaces work for boards with
          pre-installed snaps
        - interfaces/builtin/intel_mei: fix /dev/mei* AppArmor pattern
        - spread.yaml: add qemu:centos-7-64
        - overlord/devicestate: extra measurements related to
          populateStateFromSeed
        - cmd/snap-update-ns: move Assumption to {System,User}ProfileUpdate
        - cmd/libsnap: remove fringe error function
        - gadget: add validation of cross structure overlap and offset
          writes
        - cmd/snap-update-ns: refactor of profile application (3/N)
        - data/selinux: tweak the policy for runuser and s-c, interpret
          audit entries
        - tests: fix spaces issue in the base snaps names to remove during
          reset phase
        - tests: wait for man db cache is updated before after install snapd
          on Fedora
        - tests: extend timeout of sbuild test
    
     -- Michael Vogt <email address hidden>  Fri, 12 Jul 2019 10:40:08 +0200
  • snapd (2.39.2ubuntu0.2) xenial; urgency=medium
    
      * Cherry-pick pull-request 7040 fixing build-time unit-tests that started
        failing recently.
    
    snapd (2.39.2ubuntu0.1) xenial; urgency=medium
    
      * Cherry-pick pull-request 7038 to make sure maintainer scripts do nothing
        on powerpc (we only ship an empty package there).  (LP: #1830823)
    
     -- Łukasz 'sil2100' Zemczak <email address hidden>  Thu, 27 Jun 2019 11:58:39 +0200
  • snapd (2.39.2ubuntu0.1) xenial; urgency=medium
    
      * Cherry-pick pull-request 7038 to make sure maintainer scripts do nothing
        on powerpc (we only ship an empty package there).  (LP: #1830823)
    
     -- Łukasz 'sil2100' Zemczak <email address hidden>  Wed, 26 Jun 2019 17:17:56 +0200
  • snapd (2.39.2) xenial; urgency=medium
    
      * New upstream release, LP: #1827495
        - debian: rework how we run autopkgtests
        - interfaces/docker-support: add overlayfs accesses for ubuntu core
        - data/selinux: permit init_t to remount snappy_snap_t
        - strutil/shlex: fix ineffassign
        - packaging: fix build-depends on powerpc
    
     -- Michael Vogt <email address hidden>  Wed, 05 Jun 2019 08:41:21 +0200
  • snapd (2.38) xenial; urgency=medium
    
      * New upstream release, LP: #1818648
        - overlord/snapstate,: retry less for auto-stuff
        - cmd/snap: fix regression of snap saved command
        - interfaces/builtin: add dev/pts/ptmx access to docker_support
        - overlord/snapstate, store: set a header when auto-refreshing
        - interfaces/builtin: add add exec "/" to docker-support
        - cmd/snap, client, daemon, ifacestate: show a leading attribute of
          a connection
        - interface: avahi-observe: Fixing socket permissions on 4.15
          kernels
        - tests: check that apt works before using it
        - apparmor: support AppArmor 2.13
        - snapstate: restart into the snapd snap on classic
        - overlord/snapstate: during refresh, re-refresh on epoch bump
        - cmd, daemon: split out the common bits of mapLocal and mapRemote
        - cmd/snap-confine: chown private /tmp to root.root
        - cmd/snap-confine: drop uid from random /tmp name
        - overlord/hookstate: apply pending transaction changes onto
          temporary configuration for snapctl get
        - cmd/snap: `snap connections` command
        - interfaces/greengrass_support: update accesses for GGC 1.8
        - cmd/snap, daemon: make the connectivity check use GET
        - interfaces/builtin,/udev: add spec support to disable udev +
          device cgroup and use it for greengrass
        - interfaces/intel-mei: small follow up tweaks
        - ifacestate/tests: fix/improve udev mon test
        - interfaces: add multipass-support interface
        - tests/main/high-user-handling: fix the test for Go 1.12
        - interfaces: add new intel-mei interface
        - systemd: decrease the checker counter before unlocking otherwise
          we can get spurious panics
        - daemon/tests: fix race in the disconnect conflict test
        - cmd/snap-confine: allow moving tasks to pids cgroup
        - tests: enable opensuse tumbleweed on spread
        - cmd/snap: fix `snap services` completion
        - ifacestate/hotplug: integration with udev monitor
        - packaging: build snapctl as a static binary
        - packaging/opensuse: move most logic to snapd.mk
        - overlord: fix ensure before slowness on Retry
        - overlord/ifacestate: fix migration of connections on upgrade from
          ubuntu-core
        - daemon, client, cmd/snap: debug GETs ask aspects, not actions
        - tests/main/desktop-portal-*: fix handling of python dependencies
        - interfaces/wayland: allow wayland server snaps function on classic
          too
        - daemon, client, cmd/snap: snap debug base-declaration
        - tests: run tests on opensuse leap 15.0 instead of 42.3
        - cmd/snap: fix error messages for snapshots commands if ID is not
          uint
        - interfaces/seccomp: increase filter precision
        - interfaces/network-manager: no peer label check for hostname1
        - tests: add a tests for xdg-desktop-portal integration
        - tests: not checking 'tracking channel' after refresh core on
          nested execution
        - tests: remove snapweb from tests
        - snap, wrappers: support StartTimeout
        - wrappers: Add an X-SnapInstanceName field to desktop files
        - cmd/snap: produce better output for help on subcommands
        - tests/main/nfs-support: use archive mode for creating fstab backup
        - many: collect time each task runs and display it with `snap debug
          timings <id>`
        - tests: add attribution to helper script
        - daemon: make ucrednetGet not loop
        - squashfs: unset SOURCE_DATE_EPOCH in the TestBuildDate test
        - features,cmd/libsnap: add new feature "refresh-app-awareness"
        - overlord: fix random typos
        - interfaces/seccomp: generate global seccomp profile
        - daemon/api: fix error case for disconnect conflict
        - overlord/snapstate: add some randomness to the catalog refresh
        - tests: disable trusty-proposed for now
        - tests: fix upgrade-from-2.15 with kernel 4.15
        - interfaces/apparmor: allow sending and receiving signals from
          ourselves
        - tests: split the test interfaces-many in 2 and remove snaps on
          restore
        - tests: use snap which takes 15 seconds to install on retryable-
          error test
        - packaging: avoid race in snapd.postinst
        - overlord/snapstate: discard mount namespace when undoing 1st link
          snap
        - cmd/snap-confine: allow writes to /var/lib/**
        - tests: stop catalog-update test for now
        - tests/main/auto-refresh-private: make sure to actually download
          with the expired macaroon
        - many: save media info when installing, show it when listing
        - userd: handle help urls which requires prepending XDG_DATA_DIRS
        - tests: fix NFS home mocking
        - tests: improve snaps-system-env test
        - tests: pre-cache core on core18 systems
        - interfaces/hotplug: renamed RequestedSlotSpec to ProposedSlot,
          removed Specification
        - debian: ensure leftover usr.lib.snapd.snap-confine is gone
        - image,cmd/snap,tests: introduce support for modern prepare-image
          --snap <snap>[=<channel>]
        - overlord/ifacestate: tweak logic for generating unique slot names
        - packaging: import debian salsa packaging work, add sbuild test and
          use in spead
        - overlord/ifacestate: hotplug-add-slot handler
        - image,cmd/snap:  simplify --classic-arch to --arch, expose
          prepare-image
        - tests: run test snap as user in the smoke test
        - cmd/snap: tweak man output to have no doubled up .TP lines
        - cmd/snap, overlord/snapstate: silently ignore classic flag when a
          snap is strictly confined
        - snap-confine: remove special handling of /var/lib/jenkins
        - cmd/snap-confine: handle death of helper process
        - packaging: disable systemd environment generator on 18.04
        - snap-confine: fix classic snaps for users with /var/lib/* homedirs
        - tests/prepare: prevent console-conf from running
        - image: bootstrapToRootDir => setupSeed
        - image,cmd/snap,tests:  introduce prepare-image --classic
        - tests: update smoke/sandbox test for armhf
        - client, daemon: introduce helper for querying snapd API for the
          list of slot/plug connections
        - cmd/snap-confine: refactor and cleanup of seccomp loading
        - snapstate, snap: allow update/switch requests with risk only
          channel to DTRT
        - interfaces: add network-manager-observe interface
        - snap-confine: increase locking timeout to 30s
        - snap-confine: fix incorrect "sanity timeout 3s" message
        - snap-confine: provide proper error message on sc_sanity_timeout
        - snapd,state: improve error message on state reading failure
        - interfaces/apparmor: deny inet/inet6 in snap-update-ns profile
        - snap: fix reexec from the snapd snap for classic snaps
        - snap: fix hook autodiscovery for parallel installed snaps
        - overlord/snapstate: format the refresh time for the log
        - cmd/snap-confine: add special case for Jenkins
        - snapcraft.yaml: fix XBuildDeb PATH for go-1.10
        - overlord/snapstate: validate instance names early
        - overlord/ifacestate: handler for hotplug-update-slot tasks
        - polkit: cast pid to uint32 to keep polkit happy for now
        - snap/naming: move various name validation helpers to separate
          package
        - tests: iterate getting journal logs to support delay on boards on
          daemon-notify test
        - cmd/snap: fix typo in cmd_wait.go
        - snap/channel: improve channel parsing
        - daemon, polkit: pid_t is signed
        - daemon: introduce /v2/connections snapd API endpoint
        - cmd/snap: small refactor of cmd_info's channel handling
        - overlord/snapstate: use an ad-hoc error when no results
        - cmd/snap: wrap "summary" better
        - tests: workaround missing go dependencies in debian-9
        - daemon: try to tidy up the icon stuff a little
        - interfaces: add display-control interface
        - snapcraft.yaml: fix snap building in launchpad
        - tests: update fedora 29 workers to speed up the whole testing time
        - interfaces: add u2f-devices interface and allow reading udev
          +power_supply:* in hardware-observe
        - cmd/snap-update-ns: save errno from strtoul
        - tests: interfaces tests normalization
        - many: cleanup golang.org/x/net/context
        - tests: add spread test for system dbus interface
        - tests: remove -o pipefail
        - interfaces: add block-devices interface
        - spread: enable upgrade suite on fedora
        - tests/main/searching: video section got renamed to photo-and-video
        - interfaces/home: use dac_read_search instead of dac_override with
          'read: all'
        - snap: really run the RunSuite
        - interfaces/camera: allow reading vendor/etc info from
          /run/udev/data/+usb:*
        - interfaces/dbus: be less strict about alternations for well-known
          names
        - interfaces/home: allow dac_override with 'read:
          all'
        - interfaces/pulseaudio: allow reading subdirectories of
          /etc/pulse
        - interfaces/system-observe: allow read on
          /proc/locks
        - run-checks: ensure we use go-1.10 if available
        - tests: get test-snapd-dbus-{provider,consumer} from the beta
          channel
        - interfaces/apparmor: mock presence of overlayfs root
        - spread: increase default kill-timeout to 30min
        - tests: simplify interfaces-contacts-service test
        - packaging/ubuntu: build with golang 1.10
        - ifacestate/tests: extra test for hotplug-connect handler
        - packaging: make sure that /var/lib/snapd/lib/glvnd is accounted
          for
        - overlord/snapstate/backend: call fontconfig helpers from the new
          'current'
        - kvm: load required kernel modules if necessary
        - cmd/snap: use a fake user for 'run' tests
        - tests: update systems for google sru backend
        - tests: fix install-snaps test by changing the snap info regex
        - interfaces: helpers for sorting plug/slot/connection refs
        - tests: moving core-snap-refresh-on-core test from main to nested
          suite
        - tests: fix daemon-notify test checking denials considering all the
          log lines
        - tests: skip lp-1802591 on "official" images
        - tests: fix listing tests to match "snap list --unicode=never"
        - debian: fix silly typo in the spread test invocation
        - interface: raw-usb: Adding ttyACM ttyACA permissions
        - tests: fix enable-disable-unit-gpio test on external boards
        - overlord/ifacestate: helper API to obtain the state of connections
        - tests: define new "tests/smoke" suite and use that for
          autopkgtests
        - cmd/snap-update-ns: explicitly check for return value from
          parse_arg_u
        - interfaces/builtin/opengl: allow access to NVIDIA VDPAU library
        - tests: auto-clean the test directory
        - cmd/snap: further tweak messaging; add a test
        - overlord/ifacestate: handler for hotplug-connect task
        - cmd/snap-confine: join freezer only after setting up user mount
        - cmd/snap-confine: don't preemptively create .mnt files
        - cmd/snap-update-ns: manually implement isspace
        - cmd/snap-update-ns: let the go parser know we are parsing -u
        - cmd/snap-discard-ns: fix name of user fstab files
        - snapshotstate: don't task.Log without the lock
        - tests: exclude some more slow tests from runs in autopkgtest
        - many: remove .user-fstab files from /run/snapd/ns
        - cmd/libsnap: pass --from-snap-confine when calling snap-update-ns
          as user
        - cmd/snap-update-ns: make freezer mockable
        - cmd/snap-update-ns: move XDG code to dedicated file
        - osutil: add helper for loading fstab from string
        - cmd/snap-update-ns: move existing code around, renaming some
          functions
        - overlord/configstate/configcore: support - and _ in cloud init
          field names
        - * cmd/snap-confine: use makedev instead of MKDEV
        - tests: review/fix the autopkgtest failures in disco
        - overlord: drop old v1 store api support from managers test
        - tests: new test for snapshots with more than 1 user
    
     -- Michael Vogt <email address hidden>  Thu, 21 Mar 2019 10:55:27 +0100
  • snapd (2.37.4ubuntu0.1) xenial-security; urgency=medium
    
      * No change rebuild for xenial-security (LP: #1812973)
        - CVE-2019-7303
    
     -- Jamie Strandboge <email address hidden>  Fri, 15 Mar 2019 19:56:59 +0000
  • snapd (2.37.4) xenial; urgency=medium
    
      * New upstream release, LP: #1817949
        - squashfs: unset SOURCE_DATE_EPOCH in the TestBuildDate test
        - overlord/ifacestate: fix migration of connections on upgrade from
          ubuntu-core
        - tests: fix upgrade-from-2.15 with kernel 4.15
        - interfaces/seccomp: increase filter precision
        - tests: remove snapweb from tests
    
     -- Michael Vogt <email address hidden>  Wed, 27 Feb 2019 19:53:36 +0100
  • snapd (2.37.1) xenial; urgency=medium
    
      * New upstream release, LP: #1811233
        - cmd/snap-confine: add special case for Jenkins
        - tests: workaround missing go dependencies in debian-9
        - daemon, polkit: pid_t is signed
        - interfaces: add display-control interface
        - interfaces: add block-devices interface
        - tests/main/searching: video section got renamed to photo-and-video
        - interfaces/camera: allow reading vendor/etc info from
          /run/udev/data/+usb
        - interfaces/dbus: be less strict about alternations for well-known
          names
        - interfaces/home: allow dac_read_search with 'read: all'
        - interfaces/pulseaudio: allow reading subdirectories of
          /etc/pulse
        - interfaces/system-observe: allow read on
          /proc/locks
        - tests: get test-snapd-dbus-{provider,consumer} from the beta
          channel
        - interfaces/apparmor: mock presence of overlayfs root
        - packaging/{fedora,opensuse,ubuntu}: add /var/lib/snapd/lib/glvnd
    
     -- Michael Vogt <email address hidden>  Tue, 29 Jan 2019 18:35:36 +0100
  • snapd (2.37) xenial; urgency=medium
    
      * New upstream release, LP: #1811233
        - snapd: fix race in TestSanityFailGoesIntoDegradedMode test
        - cmd: fix snap-device-helper to deal correctly with hooks
        - tests: various fixes for external backend
        - interface: raw-usb: Adding ttyACM[0-9]* as many serial devices
          have device node /dev/ttyACM[0-9]
        - tests: fix enable-disable-unit-gpio test on external boards
        - tests: define new "tests/smoke" suite and use that for
          autopkgtests
        - interfaces/builtin/opengl: allow access to NVIDIA VDPAU
          library
        - snapshotstate: don't task.Log without the lock
        - overlord/configstate/configcore: support - and _ in cloud init
          field names
        - cmd/snap-confine: use makedev instead of MKDEV
        - tests: review/fix the autopkgtest failures in disco
        - systemd: allow only a single daemon-reload at the same time
        - cmd/snap: only auto-enable unicode to a tty
        - cmd/snap: right-align revision and size in info's channel map
        - dirs, interfaces/builtin/desktop: system fontconfig cache path is
          different on Fedora
        - tests: fix "No space left on device" issue on amazon-linux
        - store: undo workaround for timezone-less released-at
        - store, snap, cmd/snap: channels have released-at
        - snap-confine: fix incorrect use "src" var in mount-support.c
        - release: support probing SELinux state
        - release-tools: display self-help
        - interface: add new `{personal,system}-files` interface
        - snap: give Epoch an Equal method
        - many: remove unused interface code
        - interfaces/many: use 'unsafe' with docker-support change_profile
          rules
        - run-checks: stop running HEAD of staticcheck
        - release: use sync.Once around lazy intialized state
        - overlord/ifacestate: include interface name in the hotplug-
          disconnect task summary
        - spread: show free space in debug output
        - cmd/snap: attempt to restore SELinux context of snap user
          directories
        - image: do not write empty etc/cloud
        - tests: skip snapd snap on reset for core systems
        - cmd/snap-discard-ns: fix umount(2) typo
        - overlord/ifacestate: hotplug-remove-slot task handler
        - overlord/ifacestate: handler for hotplug-disconnect task
        - ifacestate/hotplug: updateDevice helper
        - tests: reset snapd state on tests restore
        - interfaces: return security setup errors
        - overlord: make InstallMany work like UpdateMany, issuing a single
          request to get candidates
        - systemd/systemd.go: add missing tests for systemd.IsActive
        - overlord/ifacestate: addHotplugSeqWaitTask helper
        - cmd/snap-confine: refactor call to snap-update-ns --user-mounts
        - tests: new backend used to run upgrade test suite
        - travis: short circuit failures in static and unit tests travis job
        - cmd: automatically fix localized <option>s to <option>
        - overlord/configstate,features: expose features to snapd tools
        - selinux: package to query SELinux status and verify/restore file
          contexts
        - wrappers: use new systemd.IsActive in core18 early boot
        - cmd: add tests for lintArg and lintDesc
        - httputil: retry on temporary net errors
        - cmd/snap-confine: remove unused sc_discard_preserved_mount_ns
        - wrappers: only restart service in core18 when they are active
        - overlord/ifacestate: helpers for serializing hotplug changes
        - packaging/{fedora,opensuse}: own /var/lib/snapd/cookie
        - systemd: start snapd.autoimport.service in --no-block mode
        - data/selinux: fix syntax error in definition of snappy_admin
          interface
        - snap/info: bind global plugs/slots to implicit hooks
        - cmd/snap-confine: remove SC_NS_MNT_FILE
        - spread: record each tests/upgrade job
        - osutil: do not import dirs
        - cmd/snap-confine: fix typo "a pipe"
        - tests: make security-device-cgroups-{devmode,jailmode} work on arm
          devices
        - tests: force test-snapd-daemon-notify exit 0 when the interface is
          not connected
        - overlord/snapstate: run 'remove' hook before 'auto-disconnect'
        - centos: enable SELinux support on CentOS 7
        - apparmor: allow hard link to snap-specific semaphore files
        - tests/lib/pkgdb: disable weak deps on Fedora
        - release: detect too old apparmor_parser
        - tests: improve how the log is checked to see if the system is
          waiting for a reboot
        - cmd, dirs, interfaces/apparmor: update distro identification to
          support ID="archlinux"
        - spread, tests: add Fedora 29
        - cmd/snap-confine: refactor calling snapd tools into helper module
        - apparmor: allow snap-update-ns access to common devices
        - cmd/snap-confine: capture initialized per-user mount ns
        - tests: reduce verbosity around package installation
        - data: set KillMode=process for snapd
        - cmd/snap: handle DNS error gracefully
        - spread, tests: use checkpoints when dumping audit log
        - tests/lib/prepare: make sure that SELinux context of repacked core
          snap is controlled
        - testutils: split checkers, tweak tests
        - tests: fix for tests test-*-cgroup
        - spread: show AVC audits when debugging, start auditd on Fedora
        - spread: drop Fedora 27, add Fedora 29
        - tests/lib/reset: restore context of removed snapd directories
        - testutil: add File{Present,Absent} checkers
        - snap: add new `snap run --trace-exec`
        - tests: fix for failover test on how logs are checked
        - snapctl: add "services"
        - overlord/snapstate: use file timestamp to initialize timer
        - cmd/libsnap: introduce and use sc_strdup
        - interfaces: let NM access ifindex/ifupdown files
        - overlord/snapstate: on refresh, check new rev can read current
        - client, store: don't use store from client (use client from store)
        - tests/main/parallel-install-store: verify installation of more
          than one instance at a time
        - overlord: don't write system key if security setup fails
        - packaging/fedora/snapd.spec: fix bogus date in changelog
        - snapstate: update fontconfig caches on install
        - interfaces/apparmor/backend.go:411:38: regular expression does not
          contain any meta characters (SA6004)
        - asserts/header_checks.go:199:35: regular expression does not
          contain any meta characters (SA6004)
        - run staticcheck every time :-)
        - tests/lib/systemd-escape/main.go:46:14: printf-style function with
          dynamic first argument and no further arguments should use print-
          style function instead (SA1006)
        - tests/lib/fakestore/cmd/fakestore/cmd_run.go:66:15: the channel
          used with signal.Notify should be buffered (SA1017)
        - tests/lib/fakedevicesvc/main.go:55:15: the channel used with
          signal.Notify should be buffered (SA1017)
        - spdx/parser.go:30:1: only the first constant has an explicit type
          (SA9004)
        - overlord/snapstate/snapmgr.go:553:21: printf-style function with
          dynamic first argument and no further arguments should use print-
          style function instead (SA1006)
        - overlord/patch/patch3.go:44:70: printf-style function with dynamic
          first argument and no further arguments should use print-style
          function instead (SA1006)
        - cmd/snap/cmd_advise.go:200:2: empty branch (SA9003)
        - osutil/udev/netlink/conn.go:120:5: ineffective break statement.
          Did you mean to break out of the outer loop? (SA4011)
        - daemon/api.go:992:22: printf-style function with dynamic first
          argument and no further arguments should use print-style function
          instead (SA1006)
        - cmd/snapd/main.go:94:5: ineffective break statement. Did you mean
          to break out of the outer loop? (SA4011)
        - cmd/snap/cmd_userd.go:73:15: the channel used with signal.Notify
          should be buffered (SA1017)
        - cmd/snap/cmd_help.go:102:7: io.Writer.Write must not modify the
          provided buffer, not even temporarily (SA1023)
        - release: probe apparmor features lazily
        - overlord,daemon: mock security backends for testing
        - cmd/libsnap: move apparmor-support to libsnap
        - cmd: drop cruft from snap-discard-ns build rules
        - cmd/snap-confine: use snap-discard-ns ns to discard stale
          namespaces
        - cmd/snap-confine: handle mounted shared /run/snapd/ns
        - many: fix composite literals with unkeyed fields
        - dirs, wrappers, overlord/snapstate: make completion + bases work
        - tests: revert "tests: restore in restore, not prepare"
        - many: validate title
        - snap: make description maximum in runes, not bytes
        - tests: discard mount namespaces in reset.sh
        - tests/lib: sync cla check back from snapcraft
        - Revert "cmd/snap, tests/main/snap-info: highlight the current
          channel"
        - daemon: remove enableInternalInterfaceActions
        - mkversion: use "test -n" rather than "! test -z"
        - run-checks: assorted fixes
        - tests: restore in restore, not in prepare
        - cmd/snap: fix missing newline in "snap keys" error message
        - snap: epoch lists must contain no duplicate entries
        - interfaces/avahi_observe: Fix typo in comment
        - tests: add SPREAD_JOB to the description of
          systemd_create_and_start_unit
        - daemon, vendor: bump github.com/coreos/go-systemd/activation,
          handle API changes
        - Revert "cmd/snap-confine: don't allow mapping lib{uuid,blkid}"
        - packaging/fedora: use %_sysctldir macro
        - cmd/snap-confine: remove unneeded unshare
        - sanity: extend the kernel version check to cover CentOS/RHEL
          kernels
        - wrappers: remove all desktop files from a snap on removal
        - snap: add an explicit check for `epoch: null` loading
        - snap: check max description length in validate
        - spread, tests: add CentOS support
        - cmd/snap-confine: allow mapping more libc shards
        - cmd/snap-discard-ns: add support for --from-snap-confine
        - tests: make tinyproxy support systemd notify
        - tests: fix shellcheck
        - snap, store: rename `snap.Epoch`'s `Unset` to `IsZero`
        - store: add a test for a non-zero epoch refresh (with epoch bump)
        - store: v1 search doesn't send epoch, stop pretending it does
        - snap: make any "0" epoch be Unset, and marshalled to {[0],[0]}
        - overlord/snapstate: amend test should send local revision
        - tests: use mock-gpio.py in enable-disable-units-gpio test
        - snap: enforce minimal snap name len of 2
        - cmd/libsnap: add sc_verify_snap_lock
        - cmd/snap-update-ns: extra debugging of trespassing events
        - userd: force zenity width if the text displayed is long
        - overlord/snapstate, store: always send epochs
        - cmd/snap-confine,snap-update-ns: discard quirks
        - cmd/snap: add nanosleep to blacklisted syscalls when running with
          --strace
        - cmd/snap-update-ns, tests: clean trespassing paths
        - nvidia, interfaces/builtin: OpenCL fixes
        - ifacestate/hotplug: removeDevice helper
        - cmd: install snap-discard-ns in "make hack"
        - overlord/ifacestate: setup security backends phased by backends
          first
        - ifacestate/helpers: added SystemSnapName mapper helper method
        - overlord/ifacestate: set hotplug-key of the connection when
          connecting hotplug slots
        - snapd: allow snap-update-ns to read /proc/version
        - cmd: handle tumbleweed and leap in autogen.sh
        - interfaces/tests: MockHotplugSlot test helper
        - store,daemon: make UserInfo,LoginUser part of the store interface
        - overlord/ifacestate: use remapper when checking if system snap is
          installed
        - tests: fix how pinentry is prepared for new gpg v 2.1 and 2.2
        - packaging/arch: fix bash completions path
        - interfaces/builtin: add device-buttons interface for accessing
          events
        - tests, fakestore: extend refresh tests with parallel installed
          snaps
        - snap, store, overlord/snapshotstate: drop epoch pointers
        - snap: make Epoch default to {[0],[0]} on load from yaml
        - data/completion: pass documented arguments to completion functions
        - tests: skip opensuse from interfaces-openvswitch-support test
        - tests: simple reproducer for snap try and hooks bug
        - snapstate: do not allow classic mode for strict snaps
        - snap: make Epoch's MarshalJSON not simplify
        - store: remove unused currentSnap and currentSnapJSON
        - many: some small doc comment fixes in recent hotplug code
        - ifacestate/udevmonitor: added callback to signal end of
          enumeration
        - cmd/libsnap: add simplified feature flag checker
        - interfaces/opengl: add additional accesses for cuda
        - tests: add core18 only hooks test and fix running core18 only on
          classic
        - sanity, release, cmd/snap: refuse to try to do things on WSL.
        - cmd: make coreSupportsReExec faster
        - overlord/ifacestate: don't remove the dash when generating unique
          slot name
        - cmd/snap-seccomp: add full complement of ptrace constants
        - cmd: update autogen.sh for opensuse
        - interfaces/apparmor: allow access to /run/snap.$SNAP_INSTANCE_NAME
        - spread.yaml: add more systems to the autopkgtest and qemu backends
        - daemon: spool sideloaded snap into blob dir
          overlord/snapstate: address review feedback
        - packaging/opensuse: stop using golang-packaging
        - overlord/snapshots: survive an unknown user
        - wrappers: fix generating of service units with multiple `before`
          dependencies
        - data: run snapd.autoimport.service only after seeding
        - cmd/snap: unhide --name parameter to snap install, tweak help
          message
        - packaging/fedora: Merge changes from Fedora Dist-Git
        - tests/main/snap-service-after-before-install: verify after/before
          in snap install
        - overlord/ifacestate: mark connections disconnected by hotplug with
          hotplug-gone
        - ifacestate/ifacemgr: don't reload hotplug-gone connections on
          startup
        - tests: install dependencies during prepare
        - tests,store,daemon: ensure proxy settings are honored in
          auth/userinfo too
        - tests: core 18 does not support classic confinement
        - tests: add debug output for degraded test
        - strutil: make VersionCompare faster
        - overlord/snapshotstate/backend: survive missing directories
        - overlord/ifacestate: use map[string]*connState when passing conns
          around
        - tests: move fedora 28 to manual
        - overlord/snapshotstate/backend: be more verbose when
          SNAPPY_TESTING=1
        - tests: removing fedora 26 system from spread.yaml
        - tests: linode execution is not needed anymore
        - tests/lib: adjust to changed systemctl behaviour on debian-9
        - tests: fixes and new backend for tests on nested suite
        - strutil: let MatchCounter work with a nil regexp
        - ifacestate/helpers: findConnsForHotplugKey helper
        - many: move regexp.(Must)Compile out of non-init functions into
          variables
        - store: also make snaps downloaded via deltas 0600
        - snap: use Lstat to determine snap size, remove
          ReadSnapInfoExceptSize
        - interfaces/builtin: add adb-support interface
        - tests: fail if install_snap_local fails
        - strutil: add extra test to CommaSeparatedList as suggested by
          mborzecki
        - cmd/snap, daemon, strutil: use CommaSeparatedList to split a CSL
        - ifacestate: optimize disconnect hooks
        - cmd/snap-update-ns: parse the -u <uid> command line option
        - cmd/snap, tests: snapshots for all
        - client, cmd/daemon: allow disabling keepalive, improve degraded
          mode unit tests
        - snap: only show "next" refresh time if its after the hold time
        - overlord/snapstate: run tests for classic snaps even on systems
          that don't support classic
        - overlord/standby: fix a race between standby goroutine and stop
        - cmd/snap-exec: don't fail on some try mode snaps
        - cmd/snap, userd, testutil: tweak DBus tests to use private session
          bus connection
        - cmd: remove remnants of sc_should_populate_mount_ns
        - client, daemon, cmd/snap: indicate that services are socket/timer
          activated
        - cmd/snap-seccomp: only look for PTRACE_GETFPX?REGS where available
        - cmd/snap-confine: remove SC_NS_FAIL_GRACEFULLY
        - snap/pack, cmd/snap: allow specifying the filename of 'snap pack'
        - cmd/snap-discard-ns: add support for per-user mount namespaces
        - cmd/snap-confine: remove stale mount profile along stale namespace
        - data/apt: close stderr when calling snap in the apt install hook.
        - tests/main: fixes for the new shellcheck
        - testutil, cmd/snap: introduce and use testutil.EqualsWrapped and
          fly
        - tests: initial setup for testing current branch on nested vm and
          hotplug management
        - cmd: refactor IPC and lifecycle of the helper process
        - tests/main/parallel-install-store: the store has caught up, do not
          expect failures
        - overlord/snapstate, snap, wrappers: start services in the right
          order during install
        - interfaces/browser-support, cmd/snap-seccomp: Allow read-only
          ptrace, for the Breakpad crash reporter
        - snap,client: use a different exit code for retryable errors
        - overlord/ifacestate: don't conflict on own discard-snap tasks when
          refreshing & doing garbage collection
        - cmd/snap: tweak `snap services` output when there is no services
        - interfaces/many: updates to support k8s worker nodes
        - cmd/snap: gnome-software install via snap:// handler
        - overlord/many: cleanup use of snapName vs. instanceName
        - snapstate: add command-chain to supported featureset
        - daemon, snap: mark screenshots as deprecated
        - interfaces: fix decoding of json numbers for static/dynamic
          attributes* ifstate: fix decoding of json numbers
        - cmd/snap: try not to panic on error from "snap try"
        - tests: new cosmic image for spread tests on gce
        - interfaces/system-key: add parser mtime and only discover features
          on write
        - overlord/snapshotstate/backend: detect path to tar in unit tests
        - tests/unit/gccgo: drop gccgo unit tests
        - cmd: use relative file names in locking APIs
        - interfaces: fix NormalizeInterfaceAttributes, add tests
        - overlord/snapshotstate/backend: fall back on sudo when no runuser
        - cmd/snap-confine: reduce verbosity of debug and error messages
        - systemd: extend Status() to work for socket and timer units
        - interfaces: typo 'allows' for consistency with other ifaces
        - systemd,wrappers: don't start disabled services
        - ifacestate: simplify task chaining in ifacestate.Connect
        - tests: ensure that goa-daemon is off
        - snap/pack, snap/squashfs: remove extra copy before mksquashfs
        - cmd/snap: block 'snap help <cmd> --all'
        - asserts, image: ensure kernel, gadget, base and required-snaps use
          valid snap names
        - apparmor: add unit test for probeAppArmorParser and simplify code
        - interfaces/apparmor: conditionally add explicit deny rules for
          ptrace
        - po: sync translations from launchpad
        - osutil: tweak handling of error adduser errors
        - cmd: rename ns_group to mount_ns
        - tests/main/interfaces-accounts-service: more debugging
        - snap/pack, snap/squashfs: use type to determine mksquashfs args
        - data/systemd, wrappers: tweak system-shutdown helper for core18
        - tests: show list of processes when ifaces-accounts-service fails
        - tests: do not run degraded test in autopkgtest env
        - snap: overhaul validation error messages
        - ifacestate/hooks: only create interface hook tasks if hooks exist
        - osutil: workaround overlayfs on ubuntu 18.10
        - interfaces/home: don't allow snaps to write to $HOME/bin
        - interfaces: improve Attr error further
        - snapstate: tweak GetFeatureFlagBool() to have a default argument
        - many: cleanup remaining parallel installs TODOs
        - image: improve validation of extra snaps
    
     -- Michael Vogt <email address hidden>  Wed, 16 Jan 2019 17:16:56 +0100
  • snapd (2.35.5) xenial; urgency=medium
    
      * New upstream release, LP: #1786438
        - interfaces/home: don't allow snaps to write to $HOME/bin
        - osutil: workaround overlayfs on ubuntu 18.10
    
     -- Michael Vogt <email address hidden>  Mon, 15 Oct 2018 22:23:02 +0200
  • snapd (2.35.4) xenial; urgency=medium
    
      * New upstream release, LP: #1786438
        - wrappers: do not depend on network.taget in socket units, tweak
          generated units
    
    snapd (2.35.3) xenial; urgency=medium
    
      * New upstream release, LP: #1786438
        - overlord: don't make become-operational interfere with user
          requests
        - docker_support.go: add rules to read apparmor macros
        - interfaces/apparmor: handle overlayfs snippet for snap-update-
          nsFixes:
        - snapcraft.yaml: add workaround to fix snapcraft build
        - interfaces/opengl: misc accesses for VA-API
    
     -- Michael Vogt <email address hidden>  Fri, 05 Oct 2018 14:41:33 +0200
  • snapd (2.35.2) xenial; urgency=medium
    
      * New upstream release, LP: #1786438
        - cmd,overlord/snapstate: go 1.11 format fixes
        - ifacestate: fix hang when retrying content providers
        - snap-env-generator: do nothing when PATH is unset
        - interfaces/modem-manager: allow access to more USB strings
    
     -- Michael Vogt <email address hidden>  Wed, 12 Sep 2018 09:32:00 +0200
  • snapd (2.34.2ubuntu0.1) xenial-security; urgency=medium
    
      * SECURITY UPDATE: local privilege escalation via improper input validation
        of socket peer credential (LP: #1813365)
        - daemon/ucrednet.go: utilize regex for validating and parsing remoteAddr.
          Patch thanks to John Lenton
        - CVE-YYYY-NNNN
    
     -- Jamie Strandboge <email address hidden>  Tue, 29 Jan 2019 17:54:00 +0000
  • snapd (2.34.2) xenial; urgency=medium
    
      * New upstream release, LP: #1779403
        - packaging: fix bogus date in fedora snapd.spec
        - tests: fix tests expecting old email address
    
    snapd (2.34.1) xenial; urgency=medium
    
      * New upstream release, LP: #1779403
        - tests: cherry-pick test fixes from master for 2.34
        - coreconfig: add support for `snap set system network.disable-
          ipv6`
        - debian: do not ship snapd.apparmor.service on ubuntu
        - overlord/snapstate: dedupe default content providers
        - interfaces/builtin: create can-bus interface
    
    snapd (2.34) xenial; urgency=medium
    
      * New upstream release, LP: #1779403
        - store, daemon, client, cmd/snap: expose "scope", default to wide*
        - tests: fix arch tests
        - snapstate: make sure all *link-*snap tasks carry a snap type and
          further hints
        - snapstate: allow setting "refresh.timer=managed"
        - cmd/snap: display a link to data privacy notice for interactive
          snap login
        - devicestate: fix race when refreshing a snap with snapd-control
        - tests: skip interfaces-framebuffer when no /dev/fb0 is found
        - tests: run interfaces-contacts-service only where test-snapd-eds
          is available
        - many: expose publisher's validation throughout the API
        - many: use extra "releases" information on store "revision-not-
          found" errors to produce better errors
        - dirs: improve distro detection for Antegros
        - Revert "dirs: improve identification of Arch Linux like systems"
        - devicestate: fix panic in firstboot code when no snaps are seeded
        - i18n: use xgettext-go --files-from to avoid running into cmdline
          size limits
        - interfaces: move ValidateName helper to utils
        - snapstate,ifstate: wait for pending restarts before auto-
          connecting
        - snap: account for parallel installs in wrappers, place info and
          tests
        - configcore: fix incorrect handling of keys with numbers (like
          gpu_mem_512)
        - tests: fix tests when no keyboard input detected
        - overlord/configstate: add watchdog options
        - snap-mgmt: fix for non-existent dbus system policy dir,
          shellchecks
        - tests/main/snapd-notify: use systemd's service properties rater
          than the journal
        - snapstate: allow removal of snap.TypeOS when using a model with a
          base
        - interfaces: make findSnapdPath smarter
        - tests: run "arp" tests only if arp is available
        - spread: increase the number of auto retries for package downloads
          in opensuse
        - cmd/snap-confine: fix nvidia support under lxd
        - corecfg: added experimental.hotplug feature flag
        - image: block installation of parallel snap instances
        - interfaces: moved normalize method to interfaces/utils and made it
          public
        - api/snapctl: allow -h and --help for regular users.
        - interfaces/udisks2: also implement implicit classic slot
        - cmd/snap-confine: include CUDA runtime libraries
        - tests: disable auto-refresh test on core18
        - many: switch to account validation: unproven|verified
        - overlord/ifacestate: get/set connection state only via helpers
        - tests: adding extra check to validate journalctl is showing
          current test data
        - data: add systemd environment configuration
        - i18n: handle write errors in xgettext-go
        - snap: helper for validating snap instance names
        - snap{/snaptest}: set instance key based on snap name
        - userd: fix running unit tests on KDE
        - tests/main/econnreset: limit ingress traffic to 512kB/s
        - snap: introduce a struct Channel to represent store channels, and
          helpers to work with it
        - tests: add fedora to distro_clean_package_cache function
        - many: rename snap.Info.StoreName() to snap.Info.SnapName()
        - tests: add spread test to ensure snapd/core18 are not removable
        - tests: tweaks for running the main tests on core18
        - overlord/{config,snap}state: introduce experimental.parallel-
          instances feature flag
        - strutil: support iteration over almost clean paths
        - strutil: add PathIterator.Rewind
        - tests: update interfaces-timeserver-control to core18
        - tests: add halt-timeout to google backend
        - tests: skip security-udev-input-subsystem without /dev/input/by-
          path
        - snap: introduce the instance key field
        - packaging/opensuse: remaining packaging updates for 2.33.1
        - overlord/snapstate: disallow installing snapd on baseless models
        - tests: disable core tests on all core systems (16 and 18)
        - dirs: improve identification of Arch Linux like systems
        - many: expose full publisher info over the snapd API
        - tests: disable core tests on all core systems (16 and 18)
        - tests/main/xdg-open: restore or clean up xdg-open
        - tests/main/interfaces-firewall-control: shellcheck fix
        - snapstate: sort "snapd" first
        - systemd: require snapd.socket in snapd.seeded.service; make sure
          snapd.seeded
        - spread-shellcheck: use the latest shellcheck available from snaps
        - tests: use "ss" instead of "netstat" (netstat is not available in
          core18)
        - data/complete: fix three out of four shellcheck warnings in
          data/complete
        - packaging/opensuse: fix typo, missing assignment
        - tests: initial core18 spread image building
        - overlord: introduce a gadget-connect task and use it at first boot
        - data/completion: fix inconsistency in +x and shebang
        - firstboot: mark essential snaps as "Required" in the state
        - spread-shellcheck: use a whitelist of files that are allowed to
          fail validation
        - packaging/opensuse: build position-independent binaries
        - ifacestate: prevent running interface hooks twice when self-
          connecting on autoconnect
        - data: remove /bin/sh from snapd.sh
        - tests: fix shellcheck 0.5.0 warnings
        - packaging/opensuse: snap-confine should be 06755
        - packaging/opensuse: ship apparmor integration if enabled
        - interfaces/udev,misc: only trigger udev events on input subsystem
          as needed
        - packaging/opensuse: add missing bits for snapd.seeded.service
        - packaging/opensuse: don't use %-macros in comments
        - tests: shellchecks part 4
        - many: rename snap.Info.Name() to snap.Info.InstanceName(), leave
          parallel-install TODOs
        - store: drop unused: channel map types, and details fixture.
        - store: have a basic test about the unmarshalling of /search
          results
        - tests: show executed tests on current system when a test fails
        - tests: fix for the download of the big snap
        - interfaces/apparmor: add chopTree
        - tests: remove double debug: | entry in tests and add more checks
        - cmd/snap-update-ns: introduce mimicRequired helper
        - interfaces: move assertions around for better failure line number
        - store: log a nice clear "download succeeded" message
        - snap: run snap-confine from the re-exec location
        - snapstate: support restarting snapd from the snapd snap on core18
        - tests: show status of the partial test-snapd-huge snap in
          econnreset test
        - tests: fix interfaces-calendar-service test when gvfsd-metadata
          loks the xdg dirctory
        - store: switch store.SnapInfo to use the new v2/info endpoint
        - interfaces: add Repository.AllInterfaces
        - snapstate: stop using evolving SnapSpec internally, use an
          internal-only snapSpec instead
        - cmd/libsnap-confine-private: introduce a helper for splitting snap
          name
        - tests: econnreset/retry tweaks
        - store, et al: kill dead code that uses the bulk endpoint
        - tests/lib/prepare-restore: fix upgrade/reboot handling on arch
        - cmd/snap-update-ns,strutil: move PathIterator to strutil, add
          Depth helper
        - data/systemd/snapd.run-from-snap: ensure snapd tooling is
          available
        - store: switch connectivity check to use v2/info
        - devicestate: support seeding from a base snap instead of core
        - snapstate,ifacestate: remove core-phase-2 handling
        - interfaces/docker-support: update for docker 18.05
        - tests: enable fedora 28 again
        - overlord/ifacestate:  simplify checkConnectConflicts and also
          connect signature
        - snap: parse connect instructions in gadget.yaml
        - tests: fix snapd-repair.timer on ubuntu-core-snapd-run- from-snap
          test
        - interfaces/apparmor: allow killing snap-update-ns
        - tests: skip "try" test on s390x
        - store, image: have 'snap download' use v2/refresh action=download
        - interfaces/policy: test that base policy can be parsed
        - tests: publish test-snapd-appstreamid for any architecture
        - snap: don't include newline in hook environment
        - cmd/snap-update-ns: use RCall with SyscallsEqual
        - cmd/snap-update-ns: add IsSnapdCreatedPrivateTmpfs and tests
        - tests: skip security-dev-input-event-denied on s390x/arm64
        - interfaces: add the dvb interface
        - daemon: paging is not a thing.
        - cmd/snap-mgmt: remove system key on purge
        - testutil: syscall sequence checker
        - cmd/snap-update-ns: fix a leaking file descriptor in MkSymlink
        - packaging: use official bolt in the errtracker on fedora
        - many: add `snap debug connectivity` command* many: add `snap debug
          connectivity` command
        - configstate: deny configuration of base snaps and for the "snapd"
          snap
        - interfaces/raw-usb: also allow usb serial devices
        - snap: reject more layout locations
        - errtracker: do not send duplicated reports
        - httputil: extra debug if an error is not retried
        - cmd/snap-update-ns: improve wording in many errors
        - cmd/snap: use snaptest.MockSnapCurrent in `snap run` tests
        - cmd/snap-update-ns: add helper for checking for read-only
          filesystems
        - interfaces/builtin/docker: use commonInterface over specific
          struct
        - testutil: add test support for Fstatfs
        - cmd/snap-update-ns: discard the concept of segments
        - cmd/libsnap-confine-private: helper for extracting store snap name
          from local-name
        - tests: fix flaky test for hooks undo
        - interfaces: add {contacts,calendar}-service interfaces
        - tests: retry 'restarting into..' match in the snap-confine-from-
          core test
        - systemd: adjust TestWriteMountUnitForDirs() to use
          squashfs.MockUseFuse(false)
        - data: add helper that can generate/start/stop the snapd service
        - sefltest: advise reboot into 4.4 on trusty running 3.13
        - selftest: add new selftest package that tests squashfs mounting
        - store, jsonutil: move store.getStructFields to
          jsonutil.StructFields
        - ifacestate: improved conflict and error handling when creating
          autoconnect tasks
        - cmd/snap-confine: applied make fmt
        - interfaces/udev: call 'udevadm settle --timeout=10' after
          triggering events
        - tests: wait more time until snap start to be downloaded on
          econnreset test
        - snapstate: ensure fakestore returns TypeOS for the core snap
        - tests: fix lxd test which hangs on restore
        - cmd/snap-update-ns: add PathIterator
        - asserts,image: add support for models with bases
        - tests: shellchecks part 3
        - overlord/hookstate: support undo for hooks
        - interfaces/tpm: Allow access to the kernel resource manager
        - tests: skip appstream-id test for core systems 32 bits
        - interfaces/home: remove redundant common interface assignment
        - tests: reprioritise a few tests that are known to be slow
        - cmd/snap: small help tweaks and fixes
        - tests: add test to ensure /dev/input/event* for non-joysticks is
          denied
        - spread-shellcheck: silly fix & pep8
        - spread: switch fedora 28 to manual
        - client,cmd/snap,daemon,tests: expose base of a snap over API, show
          it in snap info --verbose
        - tests: fix lxd test - --auto now sets up networking
        - tests: adding fedora-28 to spread.yaml
        - interfaces: add juju-client-observe interface
        - client, daemon: add a "mounted-from" entry to local snaps' JSON
        - image: set model.DisplayName() in bootenv as "snap_menuentry"
        - packaging/opensuse: Refactor packaging to support all openSUSE
          targets
        - interfaces/joystick: force use of the device cgroup with joystick
          interface
        - interfaces/hardware-observe: allow access to /etc/sensors* for
          libsensors
        - interfaces: remove Plug/Slot types
        - interface hooks: update old AutoConnect methods
        - snapcraft: run with DEB_BUILD_OPTIONS=nocheck
        - overlord/{config,snap}state: the number of inactive revisions is
          config
        - cmd/snap: check with snapd for unknown sections
        - tests: moving test helpers from sh to bash
        - data/systemd: add snapd.apparmor.service
        - many: expose AppStream IDs (AKA common ID)
        - many: hold refresh when on metered connections
        - interfaces/joystick: also support modern evdev joysticks and
          gamepads
        - xdgopenproxy: skip TestOpenUnreadableFile when run as root
        - snapcraft: use dpkg-buildpackage options that work in xenial
        - spread: openSUSE LEAP 42.2 was EOLd in January, remove it
        - get-deps: work with an unset GOPATH too
        - interfaces/apparmor: use strict template on openSUSE tumbleweed
        - packaging: filter out verbose flags from "dh-golang"
        - packaging: fix description
        - snapcraft.yaml: add minimal snapcraft.yaml with custom build
    
     -- Michael Vogt <email address hidden>  Thu, 19 Jul 2018 12:05:50 +0200
  • snapd (2.33.1ubuntu2) xenial; urgency=medium
    
      * New upstream release, LP: #1773118
        - cherry pick https://github.com/snapcore/snapd/pull/5464
          to workaround kernel urandom bug in bionic that slows down
          boot
    
    snapd (2.33.1ubuntu1) xenial; urgency=medium
    
      * New upstream release, LP: #1773118
        - cherry pick https://github.com/snapcore/snapd/pull/5376/
          to fix autopkgtest
    
    snapd (2.33.1) xenial; urgency=medium
    
      * New upstream release, LP: #1773118
        - many: improve udev trigger on refresh experience
        - systemd: require snapd.socket in snapd.seeded.service
        - snap: don't include newline in hook environment
        - interfaces/apparmor: allow killing snap-update-ns
        - tests: skip "try" test on s390x
        - tests: skip security-dev-input-event-denied when /dev/input/by-
          path/ is missing
        - tests: skip security-dev-input-event-denied on s390x/arm64
    
    snapd (2.33) xenial; urgency=medium
    
      * New upstream release, LP: #1773118
        - packaging: use official bolt in the errtracker on fedora
        - many: add `snap debug connectivity` command
        - interfaces/raw-usb: also allow usb serial devices
        - errtracker: do not send duplicated reports
        - selftest: add new selftest package that tests squashfs mounting
        - tests: backport lxd force stop and econnreset fixes
        - tests: add test to ensure /dev/input/event* for non-joysticks is
          denied
        - interfaces/joystick: support modern evdev joysticks
        - interfaces: add juju-client-observe
        - interfaces/hardware-observe: allow access to /etc/sensors* for
          libsensors
        - many: holding refresh on metered connections
        - many: expose AppStream IDs (AKA common ID)
        - tests: speed up save/restore snapd state for all-snap systems
          during tests execution
        - interfaces/apparmor: use helper to load stray profile
        - tests: ubuntu core abstraction
        - overlord/snapstate: don't panic in a corner case interaction of
          cleanup tasks and pruning
        - interfaces/apparmor: add 'mediate_deleted' profile flag for all
          snaps
        - tests: new parameter for the journalctl rate limit
        - spread-shellcheck: port to python
        - interfaces/home: add 'read' attribute to allow non-owner read to
          @{HOME}
        - testutil: import check.v1 differently to workaround gccgo error
        - interfaces/many: miscellaneous updates for default, desktop,
          desktop-legacy, system-observe, hardware-observe, opengl and gpg-
          keys
        - snapstate/hooks: reorder autoconnect and reconnect hooks
        - daemon: update unit tests to match current master
        - overlord/snapshotstate/backend: introducing the snapshot backend
        - many: support 'system' nickname in interfaces
        - userd: add the "snap" scheme to the whitelist
        - many: make rebooting of core on refresh immediate, refactor logic
          around it
        - tests/main/snap-service-timer: account for service timer being in
          the 'running' state
        - interfaces/builtin: allow access to libGLESv* too for opengl
          interface
        - daemon: fix unit tests on arch
        - interfaces/default,process-control: miscellaneous signal policy
          fixes
        - interfaces/bulitin: add write permission to optical-drive
        - configstate: validate known core.* options
        - snap, wrappers: systemd WatchdogSec support
        - ifacestate: do not auto-connect manually disconnected interfaces
        - systemd: mock useFuse() so testsuite passes in container via lxd
          snap
        - snap/env: fix env duplication logic
        - snap: some doc comments fixes and additions
        - cmd/snap-confine, interfaces/opengl: allow access to glvnd EGL
          vendor files
        - ifacestate: unify reconnect and autoconnect methods
        - tests: fix user mounts test for external systems
        - overlord/snapstate,overlord/auth,store: coalesce no auth user
          refresh requests
        - boot,partition: improve tests/docs around SetNextBoot()
        - many: improve `snap wait` command
        - snap: fix `snap interface --attrs` output when numbers are used
        - cmd/snap-update-ns: poke holes when creating source paths for
          layouts
        - snapstate: support getting new bases/default-providers on refresh
        - ifacemgr: remove stale connections on startup
        - asserts: use Attrer in policy checks
        - testutil: record system call errors / return values
        - tests: increase timeouts to make tests reliable on slow boards
        - repo: pass and return ConnRef via pointers
        - interfaces: add xdg-document-portal support to desktop interface
        - debian: add a zenity|kdialog suggests
        - snapstate: make TestDoPrereqRetryWhenBaseInFlight less brittle
        - tests: go must be installed as a classic snap
        - tests: use journalctl cursors instead rotating logs
        - daemon: add confinement-options to /v2/system-info
          daemon: refactor classic support flag to be more structured
        - tests: build spread in the autopkgtests with a more recent go
        - cmd/snap: fix the message when snap.channel != snap.tracking
        - overlord/snapstate: allow core defaults configuration via 'system'
          key
        - many: add "snap debug sandbox-features" and needed bits
        - interfaces: interface hooks for refresh
        - snapd.core-fixup.sh: add workaround for corrupted uboot.env
        - boot: clear "snap_mode" when needed
        - many: add wait command and `snapd.seeded` service
        - interfaces: move host font update-ns AppArmor rules to desktop
          interface
        - jsonutil/safejson: introducing safejson.String &
          safejson.Paragraph
        - cmd/snap-update-ns: use Secure.BindMount to bind mount files
        - cmd/snap-update-ns,tests: mimic the mode and ownership of
          directories
        - cmd/snap-update-ns: add support for ignoring mounts with missing
          source/target
        - interfaces: interface hooks implementation
        - cmd/libsnap: fix compile error on more restrictive gcc
          cmd/libsnap: fix compilation errors on gcc 8
        - interfaces/apparmor: allow bash and dash to be in /usr/bin/
        - cmd/snap-confine: allow any base snap to provide /etc/alternatives
        - tests: fix interfaces-network test for systems with partial
          confinement
        - spread.yaml: add cosmic (18.10) to autopkgtest/qemu
        - tests: ubuntu 18.04 or higher does not need linux-image-extra-
        - configcore: validate experimental.layouts option
        - interfaces:minor autoconnect cleanup
        - HACKING: fix typos
        - spread: add adt for ubuntu 18.10
        - tests: skip test lp-1721518 for arch, snapd is failing to start
          after reboot
        - interfaces/x11: allow X11 slot implementations
        - tests: checking interfaces declaring the specific interface
        - snap: improve error for snaps not available in the given context
        - cmdstate: add missing test for default timeout handling
        - tests: shellcheck spread tasks
        - cmd/snap: update install/refresh help vs --revision
        - cmd/snap-confine: add support for per-user mounts
        - snap: do not use overly short timeout in `snap
          {start,stop,restart}`
        - tests: adding google-sru backend replacing linode-sur
        - interfaces/apparmor: fix incorrect apparmor profile glob
        - systemd: replace ancient paths with 16.04+ standards
        - overlord,systemd: store snap revision in mount units
        - testutil: add test helper for SysLstat
        - testutil,cmd: rename test helper of Lstat to OsLstat
        - testutil: document all fake syscall/os functions
        - osutil,interfaces,cmd: use less hardcoded strings
        - testutil: rename UNMOUNT_NOFOLLOW to umountNoFollow
        - testutil: don't dot-import check.v1
        - store: getStructFields takes pointers now
        - tests: drop `linux-image-extra-$(uname -r)` install in 18.04
        - many: fix false negatives reported by vet
        - osutil,interfaces: use uint32 for uid, gid
        - many: fix various issues reported by shellcheck
        - tests: add pending shutdown detection
        - image: support refreshing soft-expired user macaroons in tooling
        - interfaces/builtin, daemon: cleanup mocked builtin interfaces in
          daemon tests
        - interfaces/builtin: add support for software-watchdog interface
        - spread: auto accept key changes when calling dnf
        - snap,overlord/snapstate: introduce and use BrokenSnapError
        - tests: detect kernel oops during tests and abort tests in this
          case
        - tests: bring back one missing test in snap-service-stop-mode
        - debian: update LP bug for the 2.32.5 SRU
        - userd: set up journal logging streams for autostarted apps
        - snap,tests : don't fail if we cannot stat MountFile
        - tests: smaller fixes for Arch tests
        - tests: run interfaces-broadcom-asic-control early
        - client: support for snapshot sets, snapshots, and snapshot actions
        - tests: skip interfaces-content test on core devices
        - cmd: generalize locking to global, snap and per-user locks
        - release-tools: handle the snapd-x.y.z version
        - packaging: fix incorrectly auto-generated changelog entry for
          2.32.5
        - tests: add arch to CI
        - systemd: add helper for opening stream file descriptors to the
          journal
        - cmd/snap: handle distros with no version ID
        - many: add "stop-mode: sig{term,hup,usr[12]}{,-all}" instead of
          conflating that with refresh-mode
        - tests: removing linode-sru backend
        - tests: updating bionic version for spread tests on google
        - overlord/snapstate: poll for up to 10s if a snap is unexpectedly
          not mounted in doMountSnap
        - overlord/snapstate: allow to get an error from readInfo instead of
          a broken stub, use it in doMountSnap
        - snap: snap.AppInfo is now a fmt.Stringer
        - tests: move fedora 27 to google backend
        - many: add `core.problem-reports.disabled` option
        - cmd/snap-update-ns: remove the need for stash directory in secure
          bind mount implementation
        - errtracker: check for whoopsie.service instead of reading
          /etc/whoopsie
        - cmd/snap: user session application autostart v3
        - tests: add test to ensure `snap refresh --amend` works with
          different channels
        - tests: add check for OOM error after each test
        - cmd/snap-seccomp: graceful handling of non-multilib host
        - interfaces/shutdown: allow calling SetWallMessage
        - cmd/snap-update-ns: add secure bind mount implementation for use
          with user mounts
        - snap: fix `snap advise-snap --command` output to match spec
        - overlord/snapstate: on multi-snap refresh make sure bases and core
          are finished before dependent snaps
        - overlord/snapstate: introduce envvars to control the channels for
          based and prereqs
        - cmd/snap-confine: ignore missing cgroups in snap-device-helper
        - debian: add gbp.conf script to build snapd via `gbp buildpackage`
        - daemon,overlord/hookstate: stop/wait for running hooks before
          closing the snapctl socket
        - advisor: use json for package database
        - interfaces/hostname-control: allow setting the hostname via
          syscall and systemd
        - tests/main/interfaces-opengl-nvidia: verify access to 32bit
          libraries
        - interfaces: misc updates for default, firewall-control, fuse-
          support and process-control
        - data/selinux: Give snapd access to more aspects of the system
        - many: use the new install/refresh API by switching snapstate to
          use store.SnapAction
        - errtracker: make TestJournalErrorSilentError work on gccgo
        - ifacestate: add to the repo also snaps that are pending being
          activated but have a done setup-profiles
        - snapstate, ifacestate: inject auto-connect tasks try 2
        - cmd/snap-confine: allow creating missing gl32, gl, vulkan dirs
        - errtracker: add more fields to aid debugging
        - interfaces: make system-key more robust against invalid fstab
          entries
        - overlord,interfaces: be more vocal about broken snaps and read
          errors
        - ifacestate: injectTasks helper
        - osutil: fix fstab parser to allow for # in field values
        - cmd/snap-mgmt: remove timers, udev rules, dbus policy files
        - release-tools: add repack-debian-tarball.sh
        - daemon,client: add build-id to /v2/system-info
        - cmd: make fmt (indent 2.2.11)
        - interfaces/content: add rule so slot can access writable files at
          plug's mountpoint
        - interfaces: add /var/lib/snapd/snap to @{INSTALL_DIR}
        - ifacestate: don't surface errors from stale connections
        - cmd/snap-update-ns: convert Secure* family of functions into
          methods
        - tests: adjust canonical-livepatch test on GCE
        - tests: fix quoting issues in econnreset test
        - cmd/snap-confine: make /run/media an alias of /media
        - cmd/snap-update-ns: rename i to segNum
        - interfaces/serial: change pattern not to exclude /dev/ttymxc*
        - spread: disable StartLimitInterval option on opensuse-42.3
        - configstate: give a chance to immediately recompute the next
          refresh time when schedules are set
        - cmd/snap-confine: attempt to detect if multiarch host uses
          arch triplets
        - store: add Store.SnapAction to support the new install/refresh API
          endpoint
        - tests: adding test for removable-media interface
        - tests: update interface tests to remove extra checks and normalize
          tests
        - timeutil: in Human, count days with fingers
        - vendor: update gopkg.in/yaml.v2 to the latest version
        - cmd/snap-confine: fix Archlinux compatibility
        - cmd/snapd: make sure signal handlers are established during early
          daemon startup
        - cmd/snap-confine: apparmor: allow creating prefix path for
          gl/vulkan
        - osutil: use tilde suffix for temporary files used for atomic
          replacement
        - tests: copy or sanity check core users using usernames
        - tests: disentangle etc vs extrausers in core tests
        - tests: fix snap-run tests when snapd is not running
        - overlord/configstate: change how ssh is stopped/started
        - snap: make `snap run` look at the system-key for security profiles
        - strutil, cmd/snap: drop strutil.WordWrap, first pass at
          replacement
        - tests: adding opensuse-42.3 to google
        - cmd/snap: fix one issue with noWait error handling logic, add
          tests plus other cleanups
        - cmd/snap-confine: nvidia: preserve globbed file prefix
        - advisor: add comment why osutil.FileExists(dirs.SnapCommandsDB) is
          needed
        - interfaces,release: probe seccomp features lazily
        - tests: change debug for layout test
        - advisor: deal with missing commands.db file
        - interfaces/apparmor: simplify UpdateNS internals
        - polkit: Pass caller uid to PolicyKit authority
        - tests: moving debian 9 from linode to google backend
        - cmd/snap-confine: nvidia: add tls/libnvidia-tls.so* glob
        - po: specify charset in po/snappy.pot
        - interfaces: harden snap-update-ns profile
        - snap: Call SanitizePlugsSlots from InfoFromSnapYaml
        - tests: update tests to deal with s390x quirks
        - debian: run snap.mount upgrade fixup *before* debhelper
        - tests: move xenial i386 to google backend
        - snapstate: add compat mode for default-provider
        - tests: a bunch of test fixes for s390x from looking at the
          autopkgtest logs
        - packaging: recommend "gnupg" instead of "gnupg1 | gnupg"
        - interfaces/builtin: let MM change qmi device attributes
        - tests: add workaround for s390x failure
        - snap/pack, cmd/snap: add `snap pack --check-skeleton`
        - daemon: support 'system' as nickname of the core snap
        - cmd/snap-update-ns: use x-snapd.{synthetic,needed-by} in practice
        - devicestate: add DeviceManager.Registered returning a channel
          closed when the device is known to be registered
        - store: Sections and WriteCatalogs need to strictly send device
          auth only if the device has a custom store
        - tests: add bionic system to google backend
        - many: fix shellcheck warnings in bionic
        - cmd/snap-update-ns: don't fail on existing symlinks
        - tests: make autopkgtest tests more targeted
        - cmd/snap-update-ns: fix creation of layout symlinks
        - spread,tests: move suite-level prepare/restore to central script
        - many: propagate contexts enough to be able to mark store
          operations done from the Ensure loop
        - snap: don't create empty Change with "Hold" state on disconnect
        - snap: unify snap name validation w/python; enforce length limit.
        - cmd/snap: use shlex when parsing `snap run --strace` arguments
        - osutil,testutil: add symlinkat(2) and readlinkat(2)
        - tests: autopkgtest may have non edge core too
        - tests: adding checks before stopping snapd service to avoid job
          canceled on ubuntu 14.04
        - errtracker: respect the /etc/whoopsie configuration
        - overlord/snapstate:  hold refreshes for 2h after seeding on
          classic
        - cmd/snap: tweak and polish help strings
        - snapstate: put layout feature behind feature flag
        - tests: force profile re-generation via system-key
        - snap/squashfs: when installing from seed, try symlink before cp
        - wrappers: services which are socket or timer activated should not
          be started during boot
        - many: go vet cleanups
        - tests: define MATCH from spread
        - packaging/fedora: Merge changes from Fedora Dist-Git plus trivial
          fix
        - cmd/snap: use timeutil.Human to show times in `snap refresh
          --time`
        - cmd/snap: in changes and tasks, default to human-friendly times
        - many: support holding refreshes by setting refresh.hold
        - Revert "cmd/snap: use timeutil.Human to show times in `snap
          refresh -…-time`"
        - cmd/snap: use timeutil.Human to show times in `snap refresh
          --time`
        - tests/main/snap-service-refresh-mode: refactor the test to rely on
          comparing PIDs
        - tests/main/media-sharing: improve the test to cover /media and
          /run/media
        - store: enable deltas for core devices too
        - cmd/snap: unhide --no-wait; make wait use go via waitMixin
        - strutil/shlex: import github.com/google/shlex into the tree
        - vendor: update github.com/mvo5/libseccomp-golang
        - overlord/snapstate: block install of "system"
        - cmd/snap: "current"→"installed"; "refreshed"→"refresh-date"
        - many: add the snapd-generator
        - cmd/snap-seccomp: Cancel the atomic file on error, not just Close
        - polkit: ensure error is properly set if dialog is dismissed
        - snap-confine, snap-seccomp: utilize new seccomp logging features
        - progress: tweak ansimeter cvvis use to no longer confuse minicom
        - xdgopenproxy: integrate xdg-open implementation into snapctl
        - tests: avoid removing preinstalled snaps on core
        - tests: chroot into core to run xdg-open there
        - userd: add an OpenFile method for launching local files with xdg-
          open
        - tests: moving ubuntu core from linode to google backend
        - run-checks: remove accidental bashism
        - i18n: simplify NG usage by doing the modulo math in-package.
        - snap/squashfs: set timezone when calling unsquashfs to get the
          build date
        - timeutil: timeutil.Human(t) gives a human-friendly string for t
        - snap: add autostart app property
        - tests: add support for external backend executions on listing test
        - tests: make interface-broadcom-asic-control test work on rpi
        - configstate: when disable "ssh" we must disable the "sshd" service
        - interfaces/apparmor,system-key: add upperdir snippets for strict
          snaps on livecd
        - snap/squashfs: add BuildDate
        - store: parse the JSON format used by the coming new store API to
          convey snap information
        - many: remove snapd.refresh.{timer,service}
        - tests: adding ubuntu-14.04-64 to the google backend
        - interfaces: add xdg-desktop-portal support to desktop interface
        - packaging/arch: sync with snapd/snapd-git from AUR
        - wrappers, tests/main/snap-service-timer: restore missing commit,
          add spread test for timer services
        - store: don't ask for snap_yaml_raw except on the details endpoint
        - many: generate and use per-snap snap-update-ns profile
        - tests: add debug for layout test
        - wrappers: detect whether systemd-analyze can be used in unit tests
        - osutil: allow creating strings out of MountInfoEntry
        - servicestate: use systemctl enable+start and disable+stop instead
          of --now flag
        - osutil: handle file being matched by multiple patterns
        - daemon, snap: fix InstallDate, make a method of *snap.Info
        - wrappers: timer services
        - wrappers: generator for systemd OnCalendar schedules
        - asserts: fix flaky storeSuite.TestCheckAuthority
        - tests: fix dependency for ubuntu artful
        - spread: start moving towards google backend
        - tests: add a spread test for layouts
        - ifacestate: be consistent passing Retry.After as named field
        - cmd/snap-update-ns: use recursive bind mounts for writable mimic
        - testutil: allow mocking syscall.Fstat
        - overlord/snapstate: verify that default schedule is randomized and
          is  not a single time
        - many: simplify mocking of home-on-NFS
        - cmd/snap-update-ns: use syscall.Symlink instead of os.Symlink
        - store: move infoFromRemote into details.go close to snapDetails
        - userd/tests: Test kdialog calls and mock kdialog too to make tests
          work in KDE
        - cmd/snap: tweaks to 'snap info' (feat. installed->current rename)
        - cmd/snap: add self-strace to `snap run`
        - interfaces/screen-inhibit-control,network-status: fix dbus path
          and interface typos
        - update-pot: Force xgettext() to return true
        - store: cleanup test naming, dropping remoteRepo  and
          UbuntuStore(Repository)? references
        - store: reorg auth refresh
    
     -- Michael Vogt <email address hidden>  Thu, 05 Jul 2018 08:42:47 +0200
  • snapd (2.33.1ubuntu1) xenial; urgency=medium
    
      * New upstream release, LP: #1773118
        - cherry pick https://github.com/snapcore/snapd/pull/5376/
          to fix autopkgtest
    
    snapd (2.33.1) xenial; urgency=medium
    
      * New upstream release, LP: #1773118
        - many: improve udev trigger on refresh experience
        - systemd: require snapd.socket in snapd.seeded.service
        - snap: don't include newline in hook environment
        - interfaces/apparmor: allow killing snap-update-ns
        - tests: skip "try" test on s390x
        - tests: skip security-dev-input-event-denied when /dev/input/by-
          path/ is missing
        - tests: skip security-dev-input-event-denied on s390x/arm64
    
    snapd (2.33) xenial; urgency=medium
    
      * New upstream release, LP: #1773118
        - packaging: use official bolt in the errtracker on fedora
        - many: add `snap debug connectivity` command
        - interfaces/raw-usb: also allow usb serial devices
        - errtracker: do not send duplicated reports
        - selftest: add new selftest package that tests squashfs mounting
        - tests: backport lxd force stop and econnreset fixes
        - tests: add test to ensure /dev/input/event* for non-joysticks is
          denied
        - interfaces/joystick: support modern evdev joysticks
        - interfaces: add juju-client-observe
        - interfaces/hardware-observe: allow access to /etc/sensors* for
          libsensors
        - many: holding refresh on metered connections
        - many: expose AppStream IDs (AKA common ID)
        - tests: speed up save/restore snapd state for all-snap systems
          during tests execution
        - interfaces/apparmor: use helper to load stray profile
        - tests: ubuntu core abstraction
        - overlord/snapstate: don't panic in a corner case interaction of
          cleanup tasks and pruning
        - interfaces/apparmor: add 'mediate_deleted' profile flag for all
          snaps
        - tests: new parameter for the journalctl rate limit
        - spread-shellcheck: port to python
        - interfaces/home: add 'read' attribute to allow non-owner read to
          @{HOME}
        - testutil: import check.v1 differently to workaround gccgo error
        - interfaces/many: miscellaneous updates for default, desktop,
          desktop-legacy, system-observe, hardware-observe, opengl and gpg-
          keys
        - snapstate/hooks: reorder autoconnect and reconnect hooks
        - daemon: update unit tests to match current master
        - overlord/snapshotstate/backend: introducing the snapshot backend
        - many: support 'system' nickname in interfaces
        - userd: add the "snap" scheme to the whitelist
        - many: make rebooting of core on refresh immediate, refactor logic
          around it
        - tests/main/snap-service-timer: account for service timer being in
          the 'running' state
        - interfaces/builtin: allow access to libGLESv* too for opengl
          interface
        - daemon: fix unit tests on arch
        - interfaces/default,process-control: miscellaneous signal policy
          fixes
        - interfaces/bulitin: add write permission to optical-drive
        - configstate: validate known core.* options
        - snap, wrappers: systemd WatchdogSec support
        - ifacestate: do not auto-connect manually disconnected interfaces
        - systemd: mock useFuse() so testsuite passes in container via lxd
          snap
        - snap/env: fix env duplication logic
        - snap: some doc comments fixes and additions
        - cmd/snap-confine, interfaces/opengl: allow access to glvnd EGL
          vendor files
        - ifacestate: unify reconnect and autoconnect methods
        - tests: fix user mounts test for external systems
        - overlord/snapstate,overlord/auth,store: coalesce no auth user
          refresh requests
        - boot,partition: improve tests/docs around SetNextBoot()
        - many: improve `snap wait` command
        - snap: fix `snap interface --attrs` output when numbers are used
        - cmd/snap-update-ns: poke holes when creating source paths for
          layouts
        - snapstate: support getting new bases/default-providers on refresh
        - ifacemgr: remove stale connections on startup
        - asserts: use Attrer in policy checks
        - testutil: record system call errors / return values
        - tests: increase timeouts to make tests reliable on slow boards
        - repo: pass and return ConnRef via pointers
        - interfaces: add xdg-document-portal support to desktop interface
        - debian: add a zenity|kdialog suggests
        - snapstate: make TestDoPrereqRetryWhenBaseInFlight less brittle
        - tests: go must be installed as a classic snap
        - tests: use journalctl cursors instead rotating logs
        - daemon: add confinement-options to /v2/system-info
          daemon: refactor classic support flag to be more structured
        - tests: build spread in the autopkgtests with a more recent go
        - cmd/snap: fix the message when snap.channel != snap.tracking
        - overlord/snapstate: allow core defaults configuration via 'system'
          key
        - many: add "snap debug sandbox-features" and needed bits
        - interfaces: interface hooks for refresh
        - snapd.core-fixup.sh: add workaround for corrupted uboot.env
        - boot: clear "snap_mode" when needed
        - many: add wait command and `snapd.seeded` service
        - interfaces: move host font update-ns AppArmor rules to desktop
          interface
        - jsonutil/safejson: introducing safejson.String &
          safejson.Paragraph
        - cmd/snap-update-ns: use Secure.BindMount to bind mount files
        - cmd/snap-update-ns,tests: mimic the mode and ownership of
          directories
        - cmd/snap-update-ns: add support for ignoring mounts with missing
          source/target
        - interfaces: interface hooks implementation
        - cmd/libsnap: fix compile error on more restrictive gcc
          cmd/libsnap: fix compilation errors on gcc 8
        - interfaces/apparmor: allow bash and dash to be in /usr/bin/
        - cmd/snap-confine: allow any base snap to provide /etc/alternatives
        - tests: fix interfaces-network test for systems with partial
          confinement
        - spread.yaml: add cosmic (18.10) to autopkgtest/qemu
        - tests: ubuntu 18.04 or higher does not need linux-image-extra-
        - configcore: validate experimental.layouts option
        - interfaces:minor autoconnect cleanup
        - HACKING: fix typos
        - spread: add adt for ubuntu 18.10
        - tests: skip test lp-1721518 for arch, snapd is failing to start
          after reboot
        - interfaces/x11: allow X11 slot implementations
        - tests: checking interfaces declaring the specific interface
        - snap: improve error for snaps not available in the given context
        - cmdstate: add missing test for default timeout handling
        - tests: shellcheck spread tasks
        - cmd/snap: update install/refresh help vs --revision
        - cmd/snap-confine: add support for per-user mounts
        - snap: do not use overly short timeout in `snap
          {start,stop,restart}`
        - tests: adding google-sru backend replacing linode-sur
        - interfaces/apparmor: fix incorrect apparmor profile glob
        - systemd: replace ancient paths with 16.04+ standards
        - overlord,systemd: store snap revision in mount units
        - testutil: add test helper for SysLstat
        - testutil,cmd: rename test helper of Lstat to OsLstat
        - testutil: document all fake syscall/os functions
        - osutil,interfaces,cmd: use less hardcoded strings
        - testutil: rename UNMOUNT_NOFOLLOW to umountNoFollow
        - testutil: don't dot-import check.v1
        - store: getStructFields takes pointers now
        - tests: drop `linux-image-extra-$(uname -r)` install in 18.04
        - many: fix false negatives reported by vet
        - osutil,interfaces: use uint32 for uid, gid
        - many: fix various issues reported by shellcheck
        - tests: add pending shutdown detection
        - image: support refreshing soft-expired user macaroons in tooling
        - interfaces/builtin, daemon: cleanup mocked builtin interfaces in
          daemon tests
        - interfaces/builtin: add support for software-watchdog interface
        - spread: auto accept key changes when calling dnf
        - snap,overlord/snapstate: introduce and use BrokenSnapError
        - tests: detect kernel oops during tests and abort tests in this
          case
        - tests: bring back one missing test in snap-service-stop-mode
        - debian: update LP bug for the 2.32.5 SRU
        - userd: set up journal logging streams for autostarted apps
        - snap,tests : don't fail if we cannot stat MountFile
        - tests: smaller fixes for Arch tests
        - tests: run interfaces-broadcom-asic-control early
        - client: support for snapshot sets, snapshots, and snapshot actions
        - tests: skip interfaces-content test on core devices
        - cmd: generalize locking to global, snap and per-user locks
        - release-tools: handle the snapd-x.y.z version
        - packaging: fix incorrectly auto-generated changelog entry for
          2.32.5
        - tests: add arch to CI
        - systemd: add helper for opening stream file descriptors to the
          journal
        - cmd/snap: handle distros with no version ID
        - many: add "stop-mode: sig{term,hup,usr[12]}{,-all}" instead of
          conflating that with refresh-mode
        - tests: removing linode-sru backend
        - tests: updating bionic version for spread tests on google
        - overlord/snapstate: poll for up to 10s if a snap is unexpectedly
          not mounted in doMountSnap
        - overlord/snapstate: allow to get an error from readInfo instead of
          a broken stub, use it in doMountSnap
        - snap: snap.AppInfo is now a fmt.Stringer
        - tests: move fedora 27 to google backend
        - many: add `core.problem-reports.disabled` option
        - cmd/snap-update-ns: remove the need for stash directory in secure
          bind mount implementation
        - errtracker: check for whoopsie.service instead of reading
          /etc/whoopsie
        - cmd/snap: user session application autostart v3
        - tests: add test to ensure `snap refresh --amend` works with
          different channels
        - tests: add check for OOM error after each test
        - cmd/snap-seccomp: graceful handling of non-multilib host
        - interfaces/shutdown: allow calling SetWallMessage
        - cmd/snap-update-ns: add secure bind mount implementation for use
          with user mounts
        - snap: fix `snap advise-snap --command` output to match spec
        - overlord/snapstate: on multi-snap refresh make sure bases and core
          are finished before dependent snaps
        - overlord/snapstate: introduce envvars to control the channels for
          based and prereqs
        - cmd/snap-confine: ignore missing cgroups in snap-device-helper
        - debian: add gbp.conf script to build snapd via `gbp buildpackage`
        - daemon,overlord/hookstate: stop/wait for running hooks before
          closing the snapctl socket
        - advisor: use json for package database
        - interfaces/hostname-control: allow setting the hostname via
          syscall and systemd
        - tests/main/interfaces-opengl-nvidia: verify access to 32bit
          libraries
        - interfaces: misc updates for default, firewall-control, fuse-
          support and process-control
        - data/selinux: Give snapd access to more aspects of the system
        - many: use the new install/refresh API by switching snapstate to
          use store.SnapAction
        - errtracker: make TestJournalErrorSilentError work on gccgo
        - ifacestate: add to the repo also snaps that are pending being
          activated but have a done setup-profiles
        - snapstate, ifacestate: inject auto-connect tasks try 2
        - cmd/snap-confine: allow creating missing gl32, gl, vulkan dirs
        - errtracker: add more fields to aid debugging
        - interfaces: make system-key more robust against invalid fstab
          entries
        - overlord,interfaces: be more vocal about broken snaps and read
          errors
        - ifacestate: injectTasks helper
        - osutil: fix fstab parser to allow for # in field values
        - cmd/snap-mgmt: remove timers, udev rules, dbus policy files
        - release-tools: add repack-debian-tarball.sh
        - daemon,client: add build-id to /v2/system-info
        - cmd: make fmt (indent 2.2.11)
        - interfaces/content: add rule so slot can access writable files at
          plug's mountpoint
        - interfaces: add /var/lib/snapd/snap to @{INSTALL_DIR}
        - ifacestate: don't surface errors from stale connections
        - cmd/snap-update-ns: convert Secure* family of functions into
          methods
        - tests: adjust canonical-livepatch test on GCE
        - tests: fix quoting issues in econnreset test
        - cmd/snap-confine: make /run/media an alias of /media
        - cmd/snap-update-ns: rename i to segNum
        - interfaces/serial: change pattern not to exclude /dev/ttymxc*
        - spread: disable StartLimitInterval option on opensuse-42.3
        - configstate: give a chance to immediately recompute the next
          refresh time when schedules are set
        - cmd/snap-confine: attempt to detect if multiarch host uses
          arch triplets
        - store: add Store.SnapAction to support the new install/refresh API
          endpoint
        - tests: adding test for removable-media interface
        - tests: update interface tests to remove extra checks and normalize
          tests
        - timeutil: in Human, count days with fingers
        - vendor: update gopkg.in/yaml.v2 to the latest version
        - cmd/snap-confine: fix Archlinux compatibility
        - cmd/snapd: make sure signal handlers are established during early
          daemon startup
        - cmd/snap-confine: apparmor: allow creating prefix path for
          gl/vulkan
        - osutil: use tilde suffix for temporary files used for atomic
          replacement
        - tests: copy or sanity check core users using usernames
        - tests: disentangle etc vs extrausers in core tests
        - tests: fix snap-run tests when snapd is not running
        - overlord/configstate: change how ssh is stopped/started
        - snap: make `snap run` look at the system-key for security profiles
        - strutil, cmd/snap: drop strutil.WordWrap, first pass at
          replacement
        - tests: adding opensuse-42.3 to google
        - cmd/snap: fix one issue with noWait error handling logic, add
          tests plus other cleanups
        - cmd/snap-confine: nvidia: preserve globbed file prefix
        - advisor: add comment why osutil.FileExists(dirs.SnapCommandsDB) is
          needed
        - interfaces,release: probe seccomp features lazily
        - tests: change debug for layout test
        - advisor: deal with missing commands.db file
        - interfaces/apparmor: simplify UpdateNS internals
        - polkit: Pass caller uid to PolicyKit authority
        - tests: moving debian 9 from linode to google backend
        - cmd/snap-confine: nvidia: add tls/libnvidia-tls.so* glob
        - po: specify charset in po/snappy.pot
        - interfaces: harden snap-update-ns profile
        - snap: Call SanitizePlugsSlots from InfoFromSnapYaml
        - tests: update tests to deal with s390x quirks
        - debian: run snap.mount upgrade fixup *before* debhelper
        - tests: move xenial i386 to google backend
        - snapstate: add compat mode for default-provider
        - tests: a bunch of test fixes for s390x from looking at the
          autopkgtest logs
        - packaging: recommend "gnupg" instead of "gnupg1 | gnupg"
        - interfaces/builtin: let MM change qmi device attributes
        - tests: add workaround for s390x failure
        - snap/pack, cmd/snap: add `snap pack --check-skeleton`
        - daemon: support 'system' as nickname of the core snap
        - cmd/snap-update-ns: use x-snapd.{synthetic,needed-by} in practice
        - devicestate: add DeviceManager.Registered returning a channel
          closed when the device is known to be registered
        - store: Sections and WriteCatalogs need to strictly send device
          auth only if the device has a custom store
        - tests: add bionic system to google backend
        - many: fix shellcheck warnings in bionic
        - cmd/snap-update-ns: don't fail on existing symlinks
        - tests: make autopkgtest tests more targeted
        - cmd/snap-update-ns: fix creation of layout symlinks
        - spread,tests: move suite-level prepare/restore to central script
        - many: propagate contexts enough to be able to mark store
          operations done from the Ensure loop
        - snap: don't create empty Change with "Hold" state on disconnect
        - snap: unify snap name validation w/python; enforce length limit.
        - cmd/snap: use shlex when parsing `snap run --strace` arguments
        - osutil,testutil: add symlinkat(2) and readlinkat(2)
        - tests: autopkgtest may have non edge core too
        - tests: adding checks before stopping snapd service to avoid job
          canceled on ubuntu 14.04
        - errtracker: respect the /etc/whoopsie configuration
        - overlord/snapstate:  hold refreshes for 2h after seeding on
          classic
        - cmd/snap: tweak and polish help strings
        - snapstate: put layout feature behind feature flag
        - tests: force profile re-generation via system-key
        - snap/squashfs: when installing from seed, try symlink before cp
        - wrappers: services which are socket or timer activated should not
          be started during boot
        - many: go vet cleanups
        - tests: define MATCH from spread
        - packaging/fedora: Merge changes from Fedora Dist-Git plus trivial
          fix
        - cmd/snap: use timeutil.Human to show times in `snap refresh
          --time`
        - cmd/snap: in changes and tasks, default to human-friendly times
        - many: support holding refreshes by setting refresh.hold
        - Revert "cmd/snap: use timeutil.Human to show times in `snap
          refresh -…-time`"
        - cmd/snap: use timeutil.Human to show times in `snap refresh
          --time`
        - tests/main/snap-service-refresh-mode: refactor the test to rely on
          comparing PIDs
        - tests/main/media-sharing: improve the test to cover /media and
          /run/media
        - store: enable deltas for core devices too
        - cmd/snap: unhide --no-wait; make wait use go via waitMixin
        - strutil/shlex: import github.com/google/shlex into the tree
        - vendor: update github.com/mvo5/libseccomp-golang
        - overlord/snapstate: block install of "system"
        - cmd/snap: "current"→"installed"; "refreshed"→"refresh-date"
        - many: add the snapd-generator
        - cmd/snap-seccomp: Cancel the atomic file on error, not just Close
        - polkit: ensure error is properly set if dialog is dismissed
        - snap-confine, snap-seccomp: utilize new seccomp logging features
        - progress: tweak ansimeter cvvis use to no longer confuse minicom
        - xdgopenproxy: integrate xdg-open implementation into snapctl
        - tests: avoid removing preinstalled snaps on core
        - tests: chroot into core to run xdg-open there
        - userd: add an OpenFile method for launching local files with xdg-
          open
        - tests: moving ubuntu core from linode to google backend
        - run-checks: remove accidental bashism
        - i18n: simplify NG usage by doing the modulo math in-package.
        - snap/squashfs: set timezone when calling unsquashfs to get the
          build date
        - timeutil: timeutil.Human(t) gives a human-friendly string for t
        - snap: add autostart app property
        - tests: add support for external backend executions on listing test
        - tests: make interface-broadcom-asic-control test work on rpi
        - configstate: when disable "ssh" we must disable the "sshd" service
        - interfaces/apparmor,system-key: add upperdir snippets for strict
          snaps on livecd
        - snap/squashfs: add BuildDate
        - store: parse the JSON format used by the coming new store API to
          convey snap information
        - many: remove snapd.refresh.{timer,service}
        - tests: adding ubuntu-14.04-64 to the google backend
        - interfaces: add xdg-desktop-portal support to desktop interface
        - packaging/arch: sync with snapd/snapd-git from AUR
        - wrappers, tests/main/snap-service-timer: restore missing commit,
          add spread test for timer services
        - store: don't ask for snap_yaml_raw except on the details endpoint
        - many: generate and use per-snap snap-update-ns profile
        - tests: add debug for layout test
        - wrappers: detect whether systemd-analyze can be used in unit tests
        - osutil: allow creating strings out of MountInfoEntry
        - servicestate: use systemctl enable+start and disable+stop instead
          of --now flag
        - osutil: handle file being matched by multiple patterns
        - daemon, snap: fix InstallDate, make a method of *snap.Info
        - wrappers: timer services
        - wrappers: generator for systemd OnCalendar schedules
        - asserts: fix flaky storeSuite.TestCheckAuthority
        - tests: fix dependency for ubuntu artful
        - spread: start moving towards google backend
        - tests: add a spread test for layouts
        - ifacestate: be consistent passing Retry.After as named field
        - cmd/snap-update-ns: use recursive bind mounts for writable mimic
        - testutil: allow mocking syscall.Fstat
        - overlord/snapstate: verify that default schedule is randomized and
          is  not a single time
        - many: simplify mocking of home-on-NFS
        - cmd/snap-update-ns: use syscall.Symlink instead of os.Symlink
        - store: move infoFromRemote into details.go close to snapDetails
        - userd/tests: Test kdialog calls and mock kdialog too to make tests
          work in KDE
        - cmd/snap: tweaks to 'snap info' (feat. installed->current rename)
        - cmd/snap: add self-strace to `snap run`
        - interfaces/screen-inhibit-control,network-status: fix dbus path
          and interface typos
        - update-pot: Force xgettext() to return true
        - store: cleanup test naming, dropping remoteRepo  and
          UbuntuStore(Repository)? references
        - store: reorg auth refresh
    
     -- Michael Vogt <email address hidden>  Fri, 22 Jun 2018 09:43:57 +0200
  • snapd (2.33.1) xenial; urgency=medium
    
      * New upstream release, LP: #1773118
        - many: improve udev trigger on refresh experience
        - systemd: require snapd.socket in snapd.seeded.service
        - snap: don't include newline in hook environment
        - interfaces/apparmor: allow killing snap-update-ns
        - tests: skip "try" test on s390x
        - tests: skip security-dev-input-event-denied when /dev/input/by-
          path/ is missing
        - tests: skip security-dev-input-event-denied on s390x/arm64
    
     -- Michael Vogt <email address hidden>  Thu, 21 Jun 2018 17:37:56 +0200
  • snapd (2.33) xenial; urgency=medium
    
      * New upstream release, LP: #1773118
        - packaging: use official bolt in the errtracker on fedora
        - many: add `snap debug connectivity` command
        - interfaces/raw-usb: also allow usb serial devices
        - errtracker: do not send duplicated reports
        - selftest: add new selftest package that tests squashfs mounting
        - tests: backport lxd force stop and econnreset fixes
        - tests: add test to ensure /dev/input/event* for non-joysticks is
          denied
        - interfaces/joystick: support modern evdev joysticks
        - interfaces: add juju-client-observe
        - interfaces/hardware-observe: allow access to /etc/sensors* for
          libsensors
        - many: holding refresh on metered connections
        - many: expose AppStream IDs (AKA common ID)
        - tests: speed up save/restore snapd state for all-snap systems
          during tests execution
        - interfaces/apparmor: use helper to load stray profile
        - tests: ubuntu core abstraction
        - overlord/snapstate: don't panic in a corner case interaction of
          cleanup tasks and pruning
        - interfaces/apparmor: add 'mediate_deleted' profile flag for all
          snaps
        - tests: new parameter for the journalctl rate limit
        - spread-shellcheck: port to python
        - interfaces/home: add 'read' attribute to allow non-owner read to
          @{HOME}
        - testutil: import check.v1 differently to workaround gccgo error
        - interfaces/many: miscellaneous updates for default, desktop,
          desktop-legacy, system-observe, hardware-observe, opengl and gpg-
          keys
        - snapstate/hooks: reorder autoconnect and reconnect hooks
        - daemon: update unit tests to match current master
        - overlord/snapshotstate/backend: introducing the snapshot backend
        - many: support 'system' nickname in interfaces
        - userd: add the "snap" scheme to the whitelist
        - many: make rebooting of core on refresh immediate, refactor logic
          around it
        - tests/main/snap-service-timer: account for service timer being in
          the 'running' state
        - interfaces/builtin: allow access to libGLESv* too for opengl
          interface
        - daemon: fix unit tests on arch
        - interfaces/default,process-control: miscellaneous signal policy
          fixes
        - interfaces/bulitin: add write permission to optical-drive
        - configstate: validate known core.* options
        - snap, wrappers: systemd WatchdogSec support
        - ifacestate: do not auto-connect manually disconnected interfaces
        - systemd: mock useFuse() so testsuite passes in container via lxd
          snap
        - snap/env: fix env duplication logic
        - snap: some doc comments fixes and additions
        - cmd/snap-confine, interfaces/opengl: allow access to glvnd EGL
          vendor files
        - ifacestate: unify reconnect and autoconnect methods
        - tests: fix user mounts test for external systems
        - overlord/snapstate,overlord/auth,store: coalesce no auth user
          refresh requests
        - boot,partition: improve tests/docs around SetNextBoot()
        - many: improve `snap wait` command
        - snap: fix `snap interface --attrs` output when numbers are used
        - cmd/snap-update-ns: poke holes when creating source paths for
          layouts
        - snapstate: support getting new bases/default-providers on refresh
        - ifacemgr: remove stale connections on startup
        - asserts: use Attrer in policy checks
        - testutil: record system call errors / return values
        - tests: increase timeouts to make tests reliable on slow boards
        - repo: pass and return ConnRef via pointers
        - interfaces: add xdg-document-portal support to desktop interface
        - debian: add a zenity|kdialog suggests
        - snapstate: make TestDoPrereqRetryWhenBaseInFlight less brittle
        - tests: go must be installed as a classic snap
        - tests: use journalctl cursors instead rotating logs
        - daemon: add confinement-options to /v2/system-info
          daemon: refactor classic support flag to be more structured
        - tests: build spread in the autopkgtests with a more recent go
        - cmd/snap: fix the message when snap.channel != snap.tracking
        - overlord/snapstate: allow core defaults configuration via 'system'
          key
        - many: add "snap debug sandbox-features" and needed bits
        - interfaces: interface hooks for refresh
        - snapd.core-fixup.sh: add workaround for corrupted uboot.env
        - boot: clear "snap_mode" when needed
        - many: add wait command and `snapd.seeded` service
        - interfaces: move host font update-ns AppArmor rules to desktop
          interface
        - jsonutil/safejson: introducing safejson.String &
          safejson.Paragraph
        - cmd/snap-update-ns: use Secure.BindMount to bind mount files
        - cmd/snap-update-ns,tests: mimic the mode and ownership of
          directories
        - cmd/snap-update-ns: add support for ignoring mounts with missing
          source/target
        - interfaces: interface hooks implementation
        - cmd/libsnap: fix compile error on more restrictive gcc
          cmd/libsnap: fix compilation errors on gcc 8
        - interfaces/apparmor: allow bash and dash to be in /usr/bin/
        - cmd/snap-confine: allow any base snap to provide /etc/alternatives
        - tests: fix interfaces-network test for systems with partial
          confinement
        - spread.yaml: add cosmic (18.10) to autopkgtest/qemu
        - tests: ubuntu 18.04 or higher does not need linux-image-extra-
        - configcore: validate experimental.layouts option
        - interfaces:minor autoconnect cleanup
        - HACKING: fix typos
        - spread: add adt for ubuntu 18.10
        - tests: skip test lp-1721518 for arch, snapd is failing to start
          after reboot
        - interfaces/x11: allow X11 slot implementations
        - tests: checking interfaces declaring the specific interface
        - snap: improve error for snaps not available in the given context
        - cmdstate: add missing test for default timeout handling
        - tests: shellcheck spread tasks
        - cmd/snap: update install/refresh help vs --revision
        - cmd/snap-confine: add support for per-user mounts
        - snap: do not use overly short timeout in `snap
          {start,stop,restart}`
        - tests: adding google-sru backend replacing linode-sur
        - interfaces/apparmor: fix incorrect apparmor profile glob
        - systemd: replace ancient paths with 16.04+ standards
        - overlord,systemd: store snap revision in mount units
        - testutil: add test helper for SysLstat
        - testutil,cmd: rename test helper of Lstat to OsLstat
        - testutil: document all fake syscall/os functions
        - osutil,interfaces,cmd: use less hardcoded strings
        - testutil: rename UNMOUNT_NOFOLLOW to umountNoFollow
        - testutil: don't dot-import check.v1
        - store: getStructFields takes pointers now
        - tests: drop `linux-image-extra-$(uname -r)` install in 18.04
        - many: fix false negatives reported by vet
        - osutil,interfaces: use uint32 for uid, gid
        - many: fix various issues reported by shellcheck
        - tests: add pending shutdown detection
        - image: support refreshing soft-expired user macaroons in tooling
        - interfaces/builtin, daemon: cleanup mocked builtin interfaces in
          daemon tests
        - interfaces/builtin: add support for software-watchdog interface
        - spread: auto accept key changes when calling dnf
        - snap,overlord/snapstate: introduce and use BrokenSnapError
        - tests: detect kernel oops during tests and abort tests in this
          case
        - tests: bring back one missing test in snap-service-stop-mode
        - debian: update LP bug for the 2.32.5 SRU
        - userd: set up journal logging streams for autostarted apps
        - snap,tests : don't fail if we cannot stat MountFile
        - tests: smaller fixes for Arch tests
        - tests: run interfaces-broadcom-asic-control early
        - client: support for snapshot sets, snapshots, and snapshot actions
        - tests: skip interfaces-content test on core devices
        - cmd: generalize locking to global, snap and per-user locks
        - release-tools: handle the snapd-x.y.z version
        - packaging: fix incorrectly auto-generated changelog entry for
          2.32.5
        - tests: add arch to CI
        - systemd: add helper for opening stream file descriptors to the
          journal
        - cmd/snap: handle distros with no version ID
        - many: add "stop-mode: sig{term,hup,usr[12]}{,-all}" instead of
          conflating that with refresh-mode
        - tests: removing linode-sru backend
        - tests: updating bionic version for spread tests on google
        - overlord/snapstate: poll for up to 10s if a snap is unexpectedly
          not mounted in doMountSnap
        - overlord/snapstate: allow to get an error from readInfo instead of
          a broken stub, use it in doMountSnap
        - snap: snap.AppInfo is now a fmt.Stringer
        - tests: move fedora 27 to google backend
        - many: add `core.problem-reports.disabled` option
        - cmd/snap-update-ns: remove the need for stash directory in secure
          bind mount implementation
        - errtracker: check for whoopsie.service instead of reading
          /etc/whoopsie
        - cmd/snap: user session application autostart v3
        - tests: add test to ensure `snap refresh --amend` works with
          different channels
        - tests: add check for OOM error after each test
        - cmd/snap-seccomp: graceful handling of non-multilib host
        - interfaces/shutdown: allow calling SetWallMessage
        - cmd/snap-update-ns: add secure bind mount implementation for use
          with user mounts
        - snap: fix `snap advise-snap --command` output to match spec
        - overlord/snapstate: on multi-snap refresh make sure bases and core
          are finished before dependent snaps
        - overlord/snapstate: introduce envvars to control the channels for
          based and prereqs
        - cmd/snap-confine: ignore missing cgroups in snap-device-helper
        - debian: add gbp.conf script to build snapd via `gbp buildpackage`
        - daemon,overlord/hookstate: stop/wait for running hooks before
          closing the snapctl socket
        - advisor: use json for package database
        - interfaces/hostname-control: allow setting the hostname via
          syscall and systemd
        - tests/main/interfaces-opengl-nvidia: verify access to 32bit
          libraries
        - interfaces: misc updates for default, firewall-control, fuse-
          support and process-control
        - data/selinux: Give snapd access to more aspects of the system
        - many: use the new install/refresh API by switching snapstate to
          use store.SnapAction
        - errtracker: make TestJournalErrorSilentError work on gccgo
        - ifacestate: add to the repo also snaps that are pending being
          activated but have a done setup-profiles
        - snapstate, ifacestate: inject auto-connect tasks try 2
        - cmd/snap-confine: allow creating missing gl32, gl, vulkan dirs
        - errtracker: add more fields to aid debugging
        - interfaces: make system-key more robust against invalid fstab
          entries
        - overlord,interfaces: be more vocal about broken snaps and read
          errors
        - ifacestate: injectTasks helper
        - osutil: fix fstab parser to allow for # in field values
        - cmd/snap-mgmt: remove timers, udev rules, dbus policy files
        - release-tools: add repack-debian-tarball.sh
        - daemon,client: add build-id to /v2/system-info
        - cmd: make fmt (indent 2.2.11)
        - interfaces/content: add rule so slot can access writable files at
          plug's mountpoint
        - interfaces: add /var/lib/snapd/snap to @{INSTALL_DIR}
        - ifacestate: don't surface errors from stale connections
        - cmd/snap-update-ns: convert Secure* family of functions into
          methods
        - tests: adjust canonical-livepatch test on GCE
        - tests: fix quoting issues in econnreset test
        - cmd/snap-confine: make /run/media an alias of /media
        - cmd/snap-update-ns: rename i to segNum
        - interfaces/serial: change pattern not to exclude /dev/ttymxc*
        - spread: disable StartLimitInterval option on opensuse-42.3
        - configstate: give a chance to immediately recompute the next
          refresh time when schedules are set
        - cmd/snap-confine: attempt to detect if multiarch host uses
          arch triplets
        - store: add Store.SnapAction to support the new install/refresh API
          endpoint
        - tests: adding test for removable-media interface
        - tests: update interface tests to remove extra checks and normalize
          tests
        - timeutil: in Human, count days with fingers
        - vendor: update gopkg.in/yaml.v2 to the latest version
        - cmd/snap-confine: fix Archlinux compatibility
        - cmd/snapd: make sure signal handlers are established during early
          daemon startup
        - cmd/snap-confine: apparmor: allow creating prefix path for
          gl/vulkan
        - osutil: use tilde suffix for temporary files used for atomic
          replacement
        - tests: copy or sanity check core users using usernames
        - tests: disentangle etc vs extrausers in core tests
        - tests: fix snap-run tests when snapd is not running
        - overlord/configstate: change how ssh is stopped/started
        - snap: make `snap run` look at the system-key for security profiles
        - strutil, cmd/snap: drop strutil.WordWrap, first pass at
          replacement
        - tests: adding opensuse-42.3 to google
        - cmd/snap: fix one issue with noWait error handling logic, add
          tests plus other cleanups
        - cmd/snap-confine: nvidia: preserve globbed file prefix
        - advisor: add comment why osutil.FileExists(dirs.SnapCommandsDB) is
          needed
        - interfaces,release: probe seccomp features lazily
        - tests: change debug for layout test
        - advisor: deal with missing commands.db file
        - interfaces/apparmor: simplify UpdateNS internals
        - polkit: Pass caller uid to PolicyKit authority
        - tests: moving debian 9 from linode to google backend
        - cmd/snap-confine: nvidia: add tls/libnvidia-tls.so* glob
        - po: specify charset in po/snappy.pot
        - interfaces: harden snap-update-ns profile
        - snap: Call SanitizePlugsSlots from InfoFromSnapYaml
        - tests: update tests to deal with s390x quirks
        - debian: run snap.mount upgrade fixup *before* debhelper
        - tests: move xenial i386 to google backend
        - snapstate: add compat mode for default-provider
        - tests: a bunch of test fixes for s390x from looking at the
          autopkgtest logs
        - packaging: recommend "gnupg" instead of "gnupg1 | gnupg"
        - interfaces/builtin: let MM change qmi device attributes
        - tests: add workaround for s390x failure
        - snap/pack, cmd/snap: add `snap pack --check-skeleton`
        - daemon: support 'system' as nickname of the core snap
        - cmd/snap-update-ns: use x-snapd.{synthetic,needed-by} in practice
        - devicestate: add DeviceManager.Registered returning a channel
          closed when the device is known to be registered
        - store: Sections and WriteCatalogs need to strictly send device
          auth only if the device has a custom store
        - tests: add bionic system to google backend
        - many: fix shellcheck warnings in bionic
        - cmd/snap-update-ns: don't fail on existing symlinks
        - tests: make autopkgtest tests more targeted
        - cmd/snap-update-ns: fix creation of layout symlinks
        - spread,tests: move suite-level prepare/restore to central script
        - many: propagate contexts enough to be able to mark store
          operations done from the Ensure loop
        - snap: don't create empty Change with "Hold" state on disconnect
        - snap: unify snap name validation w/python; enforce length limit.
        - cmd/snap: use shlex when parsing `snap run --strace` arguments
        - osutil,testutil: add symlinkat(2) and readlinkat(2)
        - tests: autopkgtest may have non edge core too
        - tests: adding checks before stopping snapd service to avoid job
          canceled on ubuntu 14.04
        - errtracker: respect the /etc/whoopsie configuration
        - overlord/snapstate:  hold refreshes for 2h after seeding on
          classic
        - cmd/snap: tweak and polish help strings
        - snapstate: put layout feature behind feature flag
        - tests: force profile re-generation via system-key
        - snap/squashfs: when installing from seed, try symlink before cp
        - wrappers: services which are socket or timer activated should not
          be started during boot
        - many: go vet cleanups
        - tests: define MATCH from spread
        - packaging/fedora: Merge changes from Fedora Dist-Git plus trivial
          fix
        - cmd/snap: use timeutil.Human to show times in `snap refresh
          --time`
        - cmd/snap: in changes and tasks, default to human-friendly times
        - many: support holding refreshes by setting refresh.hold
        - Revert "cmd/snap: use timeutil.Human to show times in `snap
          refresh -…-time`"
        - cmd/snap: use timeutil.Human to show times in `snap refresh
          --time`
        - tests/main/snap-service-refresh-mode: refactor the test to rely on
          comparing PIDs
        - tests/main/media-sharing: improve the test to cover /media and
          /run/media
        - store: enable deltas for core devices too
        - cmd/snap: unhide --no-wait; make wait use go via waitMixin
        - strutil/shlex: import github.com/google/shlex into the tree
        - vendor: update github.com/mvo5/libseccomp-golang
        - overlord/snapstate: block install of "system"
        - cmd/snap: "current"→"installed"; "refreshed"→"refresh-date"
        - many: add the snapd-generator
        - cmd/snap-seccomp: Cancel the atomic file on error, not just Close
        - polkit: ensure error is properly set if dialog is dismissed
        - snap-confine, snap-seccomp: utilize new seccomp logging features
        - progress: tweak ansimeter cvvis use to no longer confuse minicom
        - xdgopenproxy: integrate xdg-open implementation into snapctl
        - tests: avoid removing preinstalled snaps on core
        - tests: chroot into core to run xdg-open there
        - userd: add an OpenFile method for launching local files with xdg-
          open
        - tests: moving ubuntu core from linode to google backend
        - run-checks: remove accidental bashism
        - i18n: simplify NG usage by doing the modulo math in-package.
        - snap/squashfs: set timezone when calling unsquashfs to get the
          build date
        - timeutil: timeutil.Human(t) gives a human-friendly string for t
        - snap: add autostart app property
        - tests: add support for external backend executions on listing test
        - tests: make interface-broadcom-asic-control test work on rpi
        - configstate: when disable "ssh" we must disable the "sshd" service
        - interfaces/apparmor,system-key: add upperdir snippets for strict
          snaps on livecd
        - snap/squashfs: add BuildDate
        - store: parse the JSON format used by the coming new store API to
          convey snap information
        - many: remove snapd.refresh.{timer,service}
        - tests: adding ubuntu-14.04-64 to the google backend
        - interfaces: add xdg-desktop-portal support to desktop interface
        - packaging/arch: sync with snapd/snapd-git from AUR
        - wrappers, tests/main/snap-service-timer: restore missing commit,
          add spread test for timer services
        - store: don't ask for snap_yaml_raw except on the details endpoint
        - many: generate and use per-snap snap-update-ns profile
        - tests: add debug for layout test
        - wrappers: detect whether systemd-analyze can be used in unit tests
        - osutil: allow creating strings out of MountInfoEntry
        - servicestate: use systemctl enable+start and disable+stop instead
          of --now flag
        - osutil: handle file being matched by multiple patterns
        - daemon, snap: fix InstallDate, make a method of *snap.Info
        - wrappers: timer services
        - wrappers: generator for systemd OnCalendar schedules
        - asserts: fix flaky storeSuite.TestCheckAuthority
        - tests: fix dependency for ubuntu artful
        - spread: start moving towards google backend
        - tests: add a spread test for layouts
        - ifacestate: be consistent passing Retry.After as named field
        - cmd/snap-update-ns: use recursive bind mounts for writable mimic
        - testutil: allow mocking syscall.Fstat
        - overlord/snapstate: verify that default schedule is randomized and
          is  not a single time
        - many: simplify mocking of home-on-NFS
        - cmd/snap-update-ns: use syscall.Symlink instead of os.Symlink
        - store: move infoFromRemote into details.go close to snapDetails
        - userd/tests: Test kdialog calls and mock kdialog too to make tests
          work in KDE
        - cmd/snap: tweaks to 'snap info' (feat. installed->current rename)
        - cmd/snap: add self-strace to `snap run`
        - interfaces/screen-inhibit-control,network-status: fix dbus path
          and interface typos
        - update-pot: Force xgettext() to return true
        - store: cleanup test naming, dropping remoteRepo  and
          UbuntuStore(Repository)? references
        - store: reorg auth refresh
    
     -- Michael Vogt <email address hidden>  Fri, 08 Jun 2018 17:13:47 +0200
  • snapd (2.32.9) xenial; urgency=medium
    
      * New upstream release, LP: #1767833
        - tests: run all spread tests inside GCE
        - tests: build spread in the autopkgtests with a more recent go
    
     -- Michael Vogt <email address hidden>  Wed, 16 May 2018 10:20:08 +0200
  • snapd (2.32.5) xenial; urgency=medium
    
      * New upstream release, LP: #1765090
        - many: add "stop-mode: sig{term,hup,usr[12]}{,-all}" instead of
          conflating that with refresh-mode
        - overlord/snapstate:  poll for up to 10s if a snap is unexpectedly
          not mounted in doMountSnap
        - daemon: support 'system' as nickname of the core snap
    
    snapd (2.32.4) xenial; urgency=medium
    
      * New upstream release, LP: #1756173
        - cmd/snap: user session application autostart
        - overlord/snapstate: introduce envvars to control the channels for
          bases and prereqs
        - overlord/snapstate: on multi-snap refresh make sure bases and core
          are finished before dependent snaps
        - many: use the new install/refresh /v2/snaps/refresh store API
    
     -- Michael Vogt <email address hidden>  Mon, 16 Apr 2018 11:41:48 +0200
  • snapd (2.32.3.2) xenial; urgency=medium
    
      * New upstream release, LP: #1756173
        - errtracker: make TestJournalErrorSilentError work on
          gccgo
        - errtracker: check for whoopsie.service instead of reading
          /etc/whoopsie
    
    snapd (2.32.3.1) xenial; urgency=medium
    
      * New upstream release, LP: #1756173
        - debian: add gbp.conf script to build snapd via `gbp
          buildpackage`
        - tests: add check for OOM error after each test
        - cmd/snap-seccomp: graceful handling of non-multilib host
        - interfaces/shutdown: allow calling SetWallMessage
        - data/selinux: Give snapd access to more aspects of the system
        - daemon,overlord/hookstate: stop/wait for running hooks before
          closing the snapctl socket
        - cmd/snap-confine: ignore missing cgroups in snap-device-helper
        - interfaces: misc updates for default, firewall-control, fuse-
          support and process-control
        - overlord: test fix, address corner case
    
    snapd (2.32.3) xenial; urgency=medium
    
      *  New upstream release, LP: #1756173
        - ifacestate: add to the repo also snaps that are pending being
          activated but have a done setup-profiles
        - snapstate: inject autoconnect tasks in doLinkSnap for regular
          snaps
        - cmd/snap-confine: allow creating missing gl32, gl, vulkan dirs
        - errtracker: add more fields to aid debugging
        - interfaces: make system-key more robust against invalid fstab
          entries
        - cmd/snap-mgmt: remove timers, udev rules, dbus policy files
        - overlord,interfaces: be more vocal about broken snaps and read
          errors
        - osutil: fix fstab parser to allow for # in field values
    
    snapd (2.32.2) xenial; urgency=medium
    
      *  New upstream release, LP: #1756173
        - interfaces/content: add rule so slot can access writable files at
          plug's mountpoint
        - tests: adjust canonical-livepatch test on GCE
        - interfaces/serial: change pattern not to exclude /dev/ttymxc
        - spread.yaml: switch Fedora 27 tests to manual
        - store: Sections and WriteCatalogs need to strictly send device
          auth only if the device has a custom store
        - configstate: give a chance to immediately recompute the next
          refresh time when schedules are set
        - cmd/snap-confine: attempt to detect if multiarch host uses arch
          triplets
        - vendor: update gopkg.in/yaml.v2 to the latest version (#4945)
    
    snapd (2.32.1) xenial; urgency=medium
    
      *  New upstream release, LP: #1756173
        - cmd/snapd: make sure signal handlers are established during early
          daemon startup
        - osutil: use tilde suffix for temporary files used for atomic
          replacement
        - cmd/snap-confine: apparmor: allow creating prefix path for
          gl/vulkan
        - tests: disentangle etc vs extrausers in core tests
        - packaging: fix changelogs' typo
    
    snapd (2.32) xenial; urgency=medium
    
      *  New upstream release, LP: #1756173
        - snap: make `snap run` look at the system-key for security profiles
        - overlord/configstate: change how ssh is stopped/started
        - cmd/snap-confine: nvidia: preserve globbed file prefix
        - advisor: deal with missing commands.db file
        - interfaces,release: probe seccomp features lazily
        - interfaces: harden snap-update-ns profile
        - polkit: Pass caller uid to PolicyKit authority
        - tests: change debug for layout test
        - cmd/snap-confine: don't use per-snap s-u-n profile
        - many: backported fixes for layouts and symlinks
        - cmd/snap-confine: nvidia: add tls/libnvidia-tls.so* glob
        - cmd/snap-update-ns: use x-snapd.{synthetic,needed-by} in practice
        - snap: Call SanitizePlugsSlots from InfoFromSnapYaml
        - cmd/snap-confine: fix ptrace rule with snap-confine peer
        - tests: update tests to deal with s390x quirks
        - snapstate: add compat mode for default-provider"snapname:ifname"
        - snap-confine: fallback to /lib/udev/snappy-app-dev if the core is
          older
        - tests: a bunch of test fixes for s390x from looking at the
          autopkgtest logs
        - packaging: recommend "gnupg" instead of "gnupg1 | gnupg"
        - interfaces/builtin: let MM change qmi device attributes
        - debian: undo snap.mount system unit removal
        - snap: don't create empty Change with "Hold" state on disconnect
        - tests: add workaround for s390x failure
        - tests: make autopkgtest tests more targeted
        - many: propagate contexts enough to be able to mark store
          operations done from the Ensure loop
        - store: cleanup test naming, dropping remoteRepo and
          UbuntuStore(Repository)? references
        - store: reorg auth refresh
        - tests: autopkgtest may have non edge core too
        - data: translate polkit strings
        - snapstate: put layout feature behind feature flag
        - errtracker: respect the /etc/whoopsie configuration
        - overlord/snapstate: hold refreshes for 2h after seeding on classic
        - many: cherry-pick relevant `go vet` 1.10 fixes to 2.32
        - snap/squashfs: when installing from seed, try symlink before cp
        - wrappers: services which are socket or timer activated should not
          be started during boot
        - many: generate and use per-snap snap-update-ns profile
        - many: support holding refreshes by setting refresh.hold
        - snap-confine, snap-seccomp: utilize new seccomp logging features
        - many: remove snapd.refresh.{timer,service}
        - many: add the snapd-generator
        - polkit: do not shadow dbus errors, avoid panic in case of errors
        - polkit: ensure error is properly set if dialog is dismissed
        - xdgopenproxy: integrate xdg-open implementation into snapctl
        - userd: add an OpenFile method for launching local files with xdg-
          open
        - asserts:  use a timestamp for the assertion after the signing key
          has been created
        - ifacestate: be consistent passing Retry.After as named field
        - interfaces/apparmor,system-key: add upperdir snippets for strict
          snaps on livecd
          interfaces/apparmor,system-key: add upperdir snippets for strict
          snaps
        - configstate: when disable "ssh" we must disable the "sshd"
          service
        - store: don't ask for snap_yaml_raw except on the details endpoint
        - osutil: handle file being matched by multiple patterns
        - cmd/snap-update-ns: use recursive bind mounts for writable mimic
        - cmd/snap-update-ns: use syscall.Symlink instead of os.Symlink
        - interfaces/screen-inhibit-control,network-status: fix dbus path
          and interface typos
        - interfaces/network-status: fix use of '/' in interface in DBus
          rule
        - interfaces/screen-inhibit-control: fix use of '.' in path in DBus
          rule
        - overlord/snapstate: fix task iteration order in
          TestDoPrereqRetryWhenBaseInFlight
        - interfaces: add an interface for gnome-online-accounts D-Bus
          service
        - snap: pass full timer spec in `snap run --timer`
        - cmd/snap: introduce `snap run --timer`
        - snapstate: auto install default-providers for content snaps
        - hooks/strutil: limit the number of data read from the hooks to
          avoid oom
        - osutil: aggregate mockable symbols
        - tests: make sure snapd is running before attempting to remove
          leftover snaps
        - timeutil: account for 24h wrap when flattening clock spans
        - many: send  new Snap-CDN header with none or with cloud instance
          placement info as needed
        - cmd/snap-update-ns,testutil: move syscall testing helpers
        - tests: disable interfaces-location-control on s390x
        - tests: new spread test for gpio-memory-control interface
        - tests: spread test for broadcom-asic-control interface
        - tests: make restore of interfaces-password-manager-service more
          robust
        - tests/lib/prepare-restore: sync journal before rotating and
          vacuuming
        - overlord/snapstate: use spread in the default refresh schedule
        - tests: fixes for autopkgtest in bionic
        - timeutil: introduce helpers for checking it time falls inside the
          schedule
        - cmd/snap-repair,httputil: set snap-repair User-Agent on requests
        - vendor: resync formatting of vendor.json
        - snapstate/ifacestate: auto-connect tasks
        - cmd/snap: also include tracking channel in list output.
        - interfaces/apparmor: use snap revision with surrounding '.' when
          replacing in glob
        - debian,vendor: import github.com/snapcore/squashfs and use
        - many: implement "refresh-mode: {restart,endure,...}" for services
        - daemon: make the ast-inspecting test smarter; drop 'exceptions'
        - tests: new spread test for kvm interface
        - cmd/snap: tweaks to 'snap info' output
        - snap: remove underscore from version validator regexp
        - testutil: add File{Matches,Equals,Contains} checkers.
        - snap: improve the version validator's error messages.
        - osutil: refactor EnsureFileState to separate out the comparator
        - timeutil: fix scheduling on nth weekday of the month
        - cmd/snap-update-ns: small refactor for upcoming per-user mounts
        - many: rename snappy-app-dev to snap-device-helper
        - systemd: add default target for timers
        - interfaces: miscellaneous policy updates for home, opengl, time-
          control, network, et al
        - cmd/snap: linter cleanups
        - interfaces/mount: generate per-user mount profiles
        - cmd/snap: use proper help strings for `snap userd --help`
        - packaging: provide a compat symlink for snappy-app-dev
        - interfaces/time-control,netlink-audit: adjust for util-linux
          compiled with libaudit
        - tests: adding new test to validate the raw-usb interface
        - snap: add support for `snap run --gdb`
        - interfaces/builtin: allow MM to access login1
        - packaging: fix build on sbuild
        - store: revert PR#4532 and do not display displayname
        - interfaces/mount: add support for per-user mount entries
        - cmd/system-shutdown: move sync to be even more pessimistic
        - osutil: reimplement IsMounted with LoadMountInfo
        - tests/main/ubuntu-core-services: enable snapd.refresh.timer for
          the test
        - many: don't allow layout construction to silently fail
        - interfaces/apparmor: ensure snap-confine profile for reexec is
          current
        - interfaces/apparmor: generalize apparmor load and unload helpers
        - tests: removing packages which are not needed anymore to generate
          random data
        - snap: improve `snap run` comments/naming
        - snap: allow options for --strace, e.g. `snap run --strace="-tt"`
        - tests: fix spread test failures on 18.04
        - systemd: update comment on SocketsTarget
        - osutil: add and update docstrings
        - osutil: parse mount entries without options field
        - interfaces: mock away real mountinfo/fstab
        - many: move /lib/udev/snappy-app-dev to /usr/lib/snapd/snappy-app-
          dev
        - overlord/snapstate/backend: perform cleanup if snap setup fails
        - tests/lib/prepare: disable snapd.refresh.timer
        - daemon: remove redundant UserOK markings from api commands
        - snap: introduce  timer service data types and validation
        - cmd/snap: fix UX of snap services
        - daemon: allow `snapctl get` from any uid
        - debian, snap: only static link libseccomp in snap-seccomp on
          ubuntu
        - all: snap versions are now validated
        - many: add nfs-home flag to system-key
        - snap: disallow layouts in various special directories
        - cmd/snap: add help for service commands.
        - devicestate: fix autopkgtest failure in
          TestDoRequestSerialErrorsOnNoHost
        - snap,interfaces: allow using bind-file layouts
        - many: move mount code to osutil
        - snap: understand directories in layout blacklist
        - snap: use custom unsquashfsStderrWriter for unsquashfs error
          detection
        - tests/main/user-data-handling: get rid of ordering bug
        - snap: exclude `gettimeofday` from `snap run --strace`
        - tests: check if snapd.socket is active before stoping it
        - snap: sort layout elements before validating
        - strutil: introducing MatchCounter
        - snap: detect unsquashfs write failures
        - spread: add missing ubuntu-18.04-arm64 to available autopkgtest
          machines
        - cmd/snap-confine: allow mounting anywhere, effectively
        - daemon: improve ucrednet code for the snap.socket
        - release, interfaces: add new release.AppArmorFeatures helper
        - snap: apply some golint suggestions
        - many: add interfaces.SystemKey() helper
        - tests: new snaps to test installs nightly
        - tests: skip alsa interface test when the system does not have any
          audio devices
        - debian/rules: workaround for
          https://github.com/golang/go/issues/23721
        - interfaces/apparmor: early support for snap-update-ns snippets
        - wrappers: cleanup enabled service sockets
        - cmd/snap-update-ns: large refactor / update of unit tests
        - interfaces/apparmor: remove leaked future layout code
        - many: allow constructing layouts (phase 1)
        - data/systemd: for debugging/testing use /etc/environment also for
          snap-repair runs
        - cmd/snap-confine: create lib/{gl,gl32,vulkan} under /var/lib/snapd
          and chown as root:root
        - overlord/configstate/config: make [GS]etSnapConfig use *RawMessage
        - daemon: refactor snapFooMany helpers a little
        - cmd/snap-confine: allow snap-update-ns to chown things
        - interfaces/apparmor: use a helper to set the scope
        - overlord/configstate/config: make SetSnapConfig delete on empty
        - osutil: make MkdirAllChown clean the path passed in
        - many: at seeding try to capture cloud information into core config
          under "cloud"
        - cmd/snap: add completion conversion helper to increase DRY
        - many: remove "content" argument from snaptest.MockSnap()
        - osutil: allow using many globs in EnsureDirState
        - cmd/snap-confine: fix read-only filesystem when mounting nvidia
          files in biarch
        - tests: use root path to /home/test/tmp to avoid lack of space
          issue
        - packaging: create /var/lib/snapd/lib/{gl,gl32,vulkan} as part of
          packaging
        - tests: update kill-timeout focused on making tests pass on boards
        - advisor: ensure commands.db has mode 0644 and add test
        - snap: improve validation of snap layouts
        - tests: ensure disabled services are masked
        - interfaces/desktop-legacy,unity7: support gtk2/gvfs gtk_show_uri()
        - systemd, wrappers: start all snap services in one systemctl call
        - mir: software clients need access to shared memory /dev/shm/#*
        - snap: add support for `snap advise-snap pkgName`
        - snap: fix command-not-found on core devices
        - tests: new spead test for openvswitch-support interface
        - tests: add integration for local snap licenses
        - config: add (Get|Set)SnapConfig to do bulk config e.g. from
          snapshots
        - cmd/snap: display snap license information
        - tests: enable content sharing test for $SNAP
        - osutil: add ContextWriter and RunWithContext helpers.
        - osutil: add DirExists and IsDirNotExist
    
    snapd (2.31.2) xenial; urgency=medium
    
      *  New upstream release, LP: #1745217
        - many: add the snapd-generator
        - polkit: ensure error is properly set if dialog is dismissed
        - xdgopenproxy: integrate xdg-open implementation into snapctl
        - userd: add an OpenFile method for launching local files with xdg-
          open
        - configstate: when disable "ssh" we must disable the "sshd"
          service
        - many: remove snapd.refresh.{timer,service}
        - interfaces/builtin: allow MM to access login1
        - timeutil: account for 24h wrap when flattening clock spans
        - interfaces/screen-inhibit-control,network-status: fix dbus path
          and interface typos
        - systemd, wrappers: start all snap services in one systemctl
          call
        - tests: disable interfaces-location-control on s390x
    
    snapd (2.31.1) xenial; urgency=medium
    
      * New upstream release, LP: #1745217
        - tests: multiple autopkgtest related fixes for 18.04
        - overlord/snapstate: use spread in the default refresh schedule
        - timeutil: fix scheduling on nth weekday of the month
        - interfaces: miscellaneous policy updates for home, opengl, time-
          control, network, et al
        - cmd/snap: use proper help strings for `snap userd --help`
        - interfaces/time-control,netlink-audit: adjust for util-linux
          compiled with libaudit
        - rules: do not static link on powerpc
        - packaging: revert LDFLAGS rewrite again after building snap-
          seccomp
        - store: revert PR#4532 and do not display displayname
        - daemon: allow `snapctl get` from any uid
        - debian, snap: only static link libseccomp in snap-seccomp on
          ubuntu
        - daemon: improve ucrednet code for the snap.socket
    
    snapd (2.31) xenial; urgency=medium
    
      * New upstream release, LP: #1745217
        - cmd/snap-confine: allow snap-update-ns to chown things
        - cmd/snap-confine: fix read-only filesystem when mounting nvidia
          files in biarch
        - packaging: create /var/lib/snapd/lib/{gl,gl32,vulkan} as part of
          packaging
        - advisor: ensure commands.db has mode 0644 and add test
        - interfaces/desktop-legacy,unity7: support gtk2/gvfs gtk_show_uri()
        - snap: improve validation of snap layoutsRules for validating
          layouts:
        - snap: fix command-not-found on core devices
        - cmd/snap: display snap license information
        - tests: enable content sharing test for $SNAP
        - userd: add support for a simple UI that can be used from userd
        - snap-confine/nvidia: Support legacy biarch trees for GLVND systems
        - tests: generic detection of gadget and kernel snaps
        - cmd/snap-update-ns: refactor and improve Change.Perform to handle
          EROFS
        - cmd/snap: improve output when snaps were found in a section or the
          section is invalid
        - cmd/snap-confine,tests: hide message about stale base snap
        - cmd/snap-mgmt: fix out of source tree build
        - strutil/quantity: new package that exports formatFoo (from
          progress)
        - cmd/snap: snap refresh --time with new and legacy schedules
        - state: unknown tasks handler
        - cmd/snap-confine,data/systemd: fix removal of snaps inside LXD
        - snap: add io.snapcraft.Settings to `snap userd`
        - spread: remove more EOLed releases
        - snap: tidy up top-level help output
        - snap: fix race in `snap run --strace`
        - tests: update "searching" test to match store changes
        - store: use the "publisher" when populating the "publisher" field
        - snap: make `snap find --section` show all sections
        - tests: new test to validate location control interface
        - many: add new `snap refresh --amend <snap>` command
        - tests/main/kernel-snap-refresh-on-core: skip the whole test if
          edge and stable are the same version
        - tests: set test kernel-snap-refresh-on-core to manual
        - tests: new spread test for interface gpg-keys
        - packaging/fedora: Merge changes from Fedora Dist-Git plus trivial
          fix
        - interfaces: miscellaneous policy updates
        - interfaces/builtin: Replace Solus support with GLVND support
        - tests/main/kernel-snap-refresh-on-core: do not fail if edge and
          stable kernels are the same version
        - snap: add `snap run --strace` to be able to strace snap apps
        - tests: new spread test for ssh-keys interface
        - errtracker: include detected virtualisation
        - tests: add new kernel refresh/revert test for spread-cron
        - interfaces/builtin: blacklist zigbee dongle
        - cmd/snap-confine: discard stale mount namespaces
        - cmd: remove unused execArg0/execEnv
        - snap,interfaces/mount: disallow nobody/nogroup
        - cmd/snap: improve `snap aliases` output when no aliases are
          defined
        - tests/lib/snaps/test-snapd-service: refactor service reload
        - tests: new spread test for gpg-public-keys interface
        - tests: new spread test for ssh-public-keys interface
        - spread: setup machine creation on Linode
        - interfaces/builtin: allow introspecting UDisks2
        - interfaces/builtin: add support for content "source" section
        - tests: new spread test for netlink-audit interface
        - daemon: avoid panic'ing building an error response w/no snaps
          given
        - interfaces/mount,snap: early support for snap layouts
        - daemon: unlock state even if RefreshSchedule() fails
        - arch: add "armv8l" to ubuntuArchFromKernelArch table
        - tests: fix for test interface-netlink-connector
        - data/dbus: add AssumedAppArmorLabel=unconfined
        - advisor: use forked bolt to make it work on ppc
        - overlord/snapstate: record the 'kind' of conflicting change
        - dirs: fix snap mount dir on Manjaro
        - overlord/{snapstate,configstate}, daemon: introduce refresh.timer,
          fallback to refresh.schedule
        - config: add support for `snap set core proxy.no_proxy=...`
        - snap-mgmt: extend spread tests, stop, disable and cleanup snap
          services
        - spread.yaml: add fedora 27
        - cmd/snap-confine: allow snap-update-ns to poke writable holes in
          $SNAP
        - packaging/14.04: move linux-generic-lts-xenial to recommends
        - osutil/sys: ppc has 32-bit getuid already
        - snapstate: make no autorefresh message clearer
        - spread: try to enable Fedora once more
        - overlord/snapstate: do a minimal sanity check on containers
        - configcore: ensure config.txt has a final newline
        - cmd/libsnap-confine-private: print failed mount/umount regardless
          of SNAP_CONFINE_DEBUG
        - debian/tests: add missing autopkgtest test dependencies for debian
        - image: port ini handling to goconfigparser
        - tests/main/snap-service-after-before: add test for after/before
          service ordering
        - tests: enabling opensuse for tests
        - tests: update auto-refresh-private to match messages from current
          master
        - dirs: check if distro 'is like' fedora when picking path to
          libexecdir
        - tests: fix "job canceled" issue and improve cleanup for snaps
        - cmd/libsnap-confine-private: add debug build of libsnap-confine-
          private.a, link it into snap-confine-debug
        - vendor: remove x/sys/unix to fix builds on arm64 and powerpc
        - image: let consume snapcraft export-login files from tooling
        - interfaces/mir: allow Wayland socket and non-root sockets
        - interfaces/builtin: use snap.{Plug,Slot}Info over
          interfaces.{Plug,Slot}
        - tests: add simple snap-mgmt test
        - wrappers: autogenerate After/Before in systemd's service files for
          apps
        - snap: add usage hints in `snap download`
        - snap: provide more meaningful errors for installMany and friends
        - cmd/snap: show header/footer when `snap find` is used without
          arguments
        - overlord/snapstate: for Enable's tasks refer to the first task
          with snap-setup, do not duplicate
        - tests: add hard-coded fully expired macaroons to run related tests
        - cmd/snap-update-ns: new test features
        - cmd/snap-update-ns: we don't want to bind mount symlinks
        - interfaces/mount: test OptsToCommonFlags, filter out x-snapd.
          options
        - cmd/snap-update-ns: untangle upcoming cyclic initialization
        - client, daemon: update user's email when logging in with new
          account
        - tests: ensure snap-confine apparmor profile is parsable
        - snap: do not leak internal errors on install/refresh etc
        - snap: fix missing error check when multiple snaps are refreshed
        - spread: trying to re-enable tests on Fedora
        - snap: fix gadget.yaml parsing for multi volume gadgets
        - snap: give the snap.Container interface a Walk method
        - snap: rename `snap advise-command` to `snap advise-snap --command`
        - overlord/snapstate: no refresh just for hints if there was a
          recent regular full refresh
        - progress: switch ansimeter's Spin() to use a spinner
        - snap: support `command-not-found` symlink for `snap advise-
          command`
        - daemon: store email, ID and macaroon when creating a new user
        - snap: app startup after/before validation
        - timeutil: refresh timer take 2
        - store, daemon/api: Rename MyAppsServer, point to
          dashboard.snapcraft.io instead
        - tests: use "quiet" helper instead of "dnf -q" to get errors on
          failures
        - cmd/snap-update-ns: improve mocking for tests
        - many: implement the advisor backend, populate it from the store
        - tests: make less calls to the package manager
        - tests/main/confinement-classic: enable the test on Fedora
        - snap: do not leak internal network errors to the user
        - snap: use stdout instead of stderr for "fetching" message
        - tests: fix test whoami, share successful_login.exp
        - many: refresh with appropriate creds
        - snap: add new `snap advice-command` skeleton
        - tests: add test that ensures we never parse versions as numbers
        - overlord/snapstate: override Snapstate.UserID in refresh if the
          installing user is gone
        - interfaces: allow socket "shutdown" syscall in default profile
        - snap: print friendly message if `snap keys` is empty
        - cmd/snap-update-ns: add execWritableMimic
        - snap: make `snap info invalid-snap` output more user friendly
        - cmd/snap,  tests/main/classic-confinement: fix snap-exec path when
          running under classic confinement
        - overlord/ifacestate: fix disable/enable cycle to setup security
        - snap: fix snap find " " output
        - daemon: add new polkit action to manage interfaces
        - packaging/arch: disable services when removing
        - asserts/signtool: support for building tools on top that fill-
          in/compute some headers
        - cmd: clarify "This leaves %s tracking %s." message
        - daemon: return "bad-query" error kind for store.ErrBadQuery
        - taskrunner/many: KnownTaskKinds helper
        - tests/main/interfaces-fuse_support: fix confinement, allow
          unmount, fix spread tests
        - snap: use the -no-fragments mksquashfs option
        - data/selinux: allow messages from policykit
        - tests: fix catalog-update wait loop
        - tests/lib/prepare-restore: disable rate limiting in journald
        - tests: change interfaces-fuse_support to be debug friendly
        - tests/main/postrm-purge: stop snapd before purge
        - This is an example of test log:https://paste.ubuntu.com/26215170/
        - tests/main/interfaces-fuse_support: dump more debugging
          information
        - interfaces/dbus: adjust slot policy for listen, accept and accept4
          syscalls
        - tests: save the snapd-state without compression
        - tests/main/searching: handle changes in featured snaps list
        - overlord/snapstate: fix auto-refresh summary for 2 snaps
        - overlord/auth,daemon: introduce an explicit auth.ErrInvalidUser
        - interfaces: add /proc/partitions to system-observe (This addresses
          LP#1708527.)
        - tests/lib: introduce helpers for setting up /dev/random using
          /dev/urandom in project prepare
        - tests: new test for interface network status
        - interfaces: interfaces: also add an app/hook-specific udev RUN
          rule for hotplugging
        - tests: fix external backend for tests that need DEBUG output
        - tests: do not disable refresh timer on external backend
        - client: send all snap related bool json fields
        - interfaces/desktop,unity7: allow status/activate/lock of
          screensavers
        - tests/main: source mkpinentry.sh
        - tests: fix security-device-cgroups-serial-port test for rpi and db
        - cmd/snap-mgmt: add more directories for cleanup and refactor
          purge() code
        - snap: YAML and data structures for app before/after ordering
        - tests: set TRUST_TEST_KEYS=false for all the external backends
        - packaging/arch: install snap-mgmt tool
        - tests: add support on tests for cm3 gadget
        - interfaces/removable-media: also allow 'k' (lock)
        - interfaces: use ConnectedPlug/ConnectedSlot types (step 2)
        - interfaces: rename sanitize methods
        - devicestate: fix misbehaving test when using systemd-resolved
        - interfaces: added Ref() helpers, restored more detailed error
          message on spi iface
        - debian: make "gnupg" a recommends
        - interfaces/many: misc updates for default, browser-support,
          opengl, desktop, unity7, x11
        - interfaces: PlugInfo/SlotInfo/ConnectedPlug/ConnectedSlot
          attribute helpers
        - interfaces: update fixme comments
        - tests: make interfaces-snapd-control-with-manage more robust
        - userd: generalize dbusInterface
        - interfaces: use ConnectedPlug/ConnectedSlot types (step 1)
        - hookstate: add compat "configure-snapd" task.
        - config, overlord/snapstate, timeutil: rename ParseSchedule to
          ParseLegacySchedule
        - tests: adding tests for time*-control interfaces
        - tests: new test to check interfaces after reboot the system
        - cmd/snap-mgmt: fixes
        - packaging/opensuse-42.2: package and use snap-mgmt
        - corecfg: also "mask" services when disabling them
        - cmd/snap-mgmt: introduce snap-mgmt tool
        - configstate: simplify ConfigManager
        - interfaces: add gpio-memory-control interface
        - cmd: disable check-syntax-c
        - packaging/arch: add bash-completion as optional dependency
        - corecfg: rename package to overlord/configstate/configcore
        - wrappers: fix unit tests to use dirs.SnapMountDir
        - osutil/sys: reimplement getuid and chown with the right int type
        - interfaces-netlink-connector: fix sourcing snaps.sh
    
    snapd (2.30) xenial; urgency=medium
    
      * New upstream release, LP: #1735344
        - tests: set TRUST_TEST_KEYS=false for all the external backends
        - tests: fix external backend for tests that need DEBUG output
        - tests: do not disable refresh timer on external backend
        - client: send all snap related bool json fields
        - interfaces: interfaces: also add an app/hook-specific udev RUN
          rule for hotplugging
        - interfaces/desktop,unity7: allow status/activate/lock of
          screensavers
        - tests/main: source mkpinentry.sh
        - devicestate: use a different nowhere domain
        - interfaces: add ssh-keys, ssh-public-keys, gpg-keys and gpg-public
          keys interfaces
        - interfaces/many: misc updates for default, browser-support, opengl,
          desktop, unity7, x11
        - devicestate: fix misbehaving test when using systemd-resolved
        - interfaces/removable-media: also allow 'k' (lock)
        - interfaces/many: misc updates for default, browser-support,
          opengl, desktop, unity7, x11
        - corecfg: also "mask" services when disabling them
        - tests: add support for autopkgtests on s390x
        - snapstate: support for pre-refresh hook
        - many: allow to configure core before it is installed
        - devicestate: fix unkeyed fields error
        - snap-confine: create mount target for lib32,vulkan on demand
        - snapstate: add support for refresh.schedule=managed
        - cmd/snap-update-ns: teach update logic to handle synthetic changes
        - many: remove configure-snapd task again and handle internally
        - snap: fix TestDirAndFileMethods() test to work with gccgo
        - debian: ensure /var/lib/snapd/lib/vulkan is available
        - cmd/snap-confine: use #include instead of bare include
        - snapstate: store userID in snapstate
        - snapd.dirs: add var/lib/snapd/lib/gl32
        - timeutil, overlod/snapstate: cleanup remaining pieces of timeutil
          weekday support
        - packaging/arch: install missing directories, manpages and version
          info
        - snapstate,store: store if a snap is a paid snap in the sideinfo
        - packaging/arch: pre-create snapd directories when packaging
        - tests/main/manpages: set LC_ALL=C as man may complain if the
          locale is unset or unsupported
        - repo: ConnectedPlug and ConnectedSlot types
        - snapd: fix handling of undo in the taskrunner
        - store: fix download caching and add integration test
        - snapstate: move autorefresh code into autoRefresh helper
        - snapctl: don't error out on start/stop/restart from configure hook
          during install or refresh
        - cmd/snap-update-ns: add planWritableMimic
        - deamon: don't omit responses, even if null
        - tests: add test for frame buffer interface
        - tests/lib: fix shellcheck errors
        - apparmor: generate the snap-confine re-exec profile for
          AppArmor{Partial,Full}
        - tests: remove obsolete workaround
        - snap: use existing files in `snap download` if digest/size matches
        - tests: merge pepare-project.sh into prepare-restore.sh
        - tests: cache snaps to $TESTSLIB/cache
        - tests: set -e, -o pipefail in prepare-restore.sh
        - apparmor: generate the snap-confine re-exec profile for
          AppArmor{Partial,Full}
        - cmd/snap-seccomp: fix uid/gid restrictions tests on Arch
        - tests: document and slightly refactor prepare/restore code
        - snapstate: ensure RefreshSchedule() gives accurate results
        - snapstate: add new refresh-hints helper and use it
        - spread.yaml,tests: move most of project-wide prepare/restore to
          separate file
        - timeutil: introduce helpers for weekdays and TimeOfDay
        - tests: adding new test for uhid interface
        - cmd/libsnap: fix parsing of empty mountinfo fields
        - overlord/devicestate:  best effort to go to early full retries for
          registration on the like of DNS no host
        - spread.yaml: bump delta ref to 2.29
        - tests: adding test to test physical memory observe interface
        - cmd, errtracker: get rid of SNAP_DID_REEXEC environment
        - timeutil: remove support to parse weekday schedules
        - snap-confine: add workaround for snap-confine on 4.13/upstream
        - store: do not log the http body for catalog updates
        - snapstate: move catalogRefresh into its own helper
        - spread.yaml: fix shellcheck issues and trivial refactor
        - spread.yaml: move prepare-each closer to restore-each
        - spread.yaml: increase workers for opensuse to 3
        - tests: force delete when tests are restore to avoid suite failure
        - test: ignore /snap/README
        - interfaces/opengl: also allow read on 'revision' in
          /sys/devices/pci...
        - interfaces/screen-inhibit-control: fix case in screen inhibit
          control
        - asserts/sysdb: panic early if pointed to staging but staging keys
          are not compiled-in
        - interfaces: allow /bin/chown and fchownat to root:root
        - timeutil: include test input in error message in
          TestParseSchedule()
        - interfaces/browser-support: adjust base declaration for auto-
          connection
        - snap-confine: fix snap-confine under lxd
        - store: bit less aggressive retry strategy
        - tests: add new `fakestore new-snap-{declaration,revision}` helpers
        - cmd/snap-update-ns: add secureMkfileAll
        - snap: use field names when initializing composite literals
        - HACKING: fix path in snap install
        - store: add support for flags in ListRefresh()
        - interfaces: remove invalid plugs/slots from SnapInfo on
          sanitization.
        - debian: add missing udev dependency
        - snap/validate: extend socket validation tests
        - interfaces: add "refresh-schedule" attribute to snapd-control
        - interfaces/builtin/account_control: use gid owning /etc/shadow to
          setup seccomp rules
        - cmd/snap-update-ns: tweak changePerform
        - interfaces,tests: skip unknown plug/slot interfaces
        - tests: disable interfaces-network-control-tuntap
        - cmd: use a preinit_array function rather than parsing
          /proc/self/cmdline
        - interfaces/time*_control: explicitly deny noisy read on
          /proc/1/environ
        - cmd/snap-update-ns: misc cleanups
        - snapd: allow hooks to have slots
        - fakestore: add go-flags to prepare for `new-snap-declaration` cmd
        - interfaces/browser-support: add shm path for nwjs
        - many: add magic /snap/README file
        - overlord/snapstate: support completion for command aliases
        - tests: re-enable tun/tap test on Debian
        - snap,wrappers: add support for socket activation
        - repo: use PlugInfo and SlotInfo for permanent plugs/slots
        - tests/interfaces-network-control-tuntap: disable on debian-
          unstable for now
        - cmd/snap-confine: Loosen the NVIDIA Vulkan ICD glob
        - cmd/snap-update-ns: detect and report read-only filesystems
        - cmd/snap-update-ns: re-factor secureMkdirAll into
          secureMk{Prefix,Dir}
        - run-checks, tests/lib/snaps/: shellcheck fixes
        - corecfg: validate refresh.schedule when it is applied
        - tests: adjust test to match stderr
        - snapd: fix snap cookie bugs
        - packaging/arch: do not quote MAKEFLAGS
        - state: add change.LaneTasks helper
        - cmd/snap-update-ns: do not assume 'nogroup' exists
        - tests/lib: handle distro specific grub-editenv naming
        - cmd/snap-confine: Add missing bi-arch NVIDIA filesthe
          `/var/lib/snapd/lib/gl:/var/lib/snapd/lib/gl/vdpau` paths within
        - cmd: Support exposing NVIDIA Vulkan ICD files to the snaps
        - cmd/snap-confine: Implement full 32-bit NVIDIA driver support
        - packaging/arch: packaging update
        - cmd/snap-confine: Support bash as base runtime entry
        - wrappers: do not error on incorrect Exec= lines
        - interfaces: fix udev tagging for hooks
        - tests/set-proxy-store: exclude ubuntu-core-16 via systems: key
        - tests: new tests for network setup control and observe interfaces
        - osutil: add helper for obtaining group ID of given file path
        - daemon,overlord/snapstate: return snap-not-installed error in more
          cases
        - interfaces/builtin/lxd_support: allow discovering of host's os-
          release
        - configstate: add support for configure-snapd for
          snapstate.IgnoreHookError
        - tests:  add a spread test for proxy.store setting together with
          store assertion
        - cmd/snap-seccomp: do not use group 'shadow' in tests
        - asserts/assertstest:  fix use of hardcoded value when the passed
          or default keys should be used
        - interfaces/many: misc policy updates for browser-support, cups-
          control and network-status
        - tests: fix xdg-open-compat
        - daemon: for /v2/logs, 404 when no services are found
        - packaging/fedora: Merge changes from Fedora Dist-Git
        - cmd/snap-update-ns: add new helpers for mount entries
        - cmd/snap-confine: Respect biarch nature of libdirs
        - cmd/snap-confine: Ensure snap-confine is allowed to access os-
          release
        - cmd: fix re-exec bug with classic confinement for host snapd <
          2.28
        - interfaces/kmod: simplify loadModules now that errors are ignored
        - tests: disable xdg-open-compat test
        - tests: add test that checks core reverts on core devices
        - dirs: use alt root when checking classic confinement support
          without …
        - interfaces/kmod: treat failure to load module as non-fatal
        - cmd/snap-update-ns: fix golint and some stale comments
        - corecfg:  support setting proxy.store if there's a matching store
          assertion
        - overlord/snapstate: toggle ignore-validation as needed as we do
          for channel
        - tests: fix security-device-cgroup* tests on devices with
          framebuffer
        - interfaces/raw-usb: match on SUBSYSTEM, not SUBSYSTEMS
        - interfaces: add USB interface number attribute in udev rule for
          serial-port interface
        - overlord/devicestate: switch to the new endpoints for registration
        - snap-update-ns: add missing unit test for desired/current profile
          handling
        - cmd/{snap-confine,libsnap-confine-private,snap-shutdown}: cleanup
          low-level C bits
        - ifacestate: make interfaces.Repository available via state cache
        - overlord/snapstate: cleanups around switch-snap*
        - cmd/snapd,client,daemon: display ignore-validation flag through
          the notes mechanism
        - cmd/snap-update-ns: add logging to snap-update-ns
        - many: have a timestamp on store assertions
        - many: lookup and use the URL from a store assertion if one is set
          for use
        - tests/test-snapd-service: fix shellcheck issues
        - tests: new test for hardware-random-control interface
        - tests: use `snap change --last=install` in snapd-reexec test
        - repo, daemon: use PlugInfo, SlotInfo
        - many: handle core configuration internally instead of using the
          core configure hook
        - tests: refactor and expand content interface test
        - snap-seccomp: skip in-kernel bpf tests for socket() in trusty/i386
        - cmd/snap-update-ns: allow Change.Perform to return changes
        - snap-confine: Support biarch Linux distribution confinement
        - partition/ubootenv: don't panic when uboot.env is missing the eof
          marker
        - cmd/snap-update-ns: allow fault injection to provide dynamic
          result
        - interfaces/mount: exspose mount.{Escape,Unescape}
        - snapctl: added long help to stop/start/restart command
        - cmd/snap-update-ns: create missing mount points automatically.
        - cmd: downgrade log message in InternalToolPath to Debugf()
        - tests: wait for service status change & file update in the test to
          avoid races
        - daemon, store: forward SSO invalid credentials errors as 401
          Unauthorized responses
        - spdx: fix for WITH syntax, require a license name before the
          operator
        - many: reorg things in preparation to make handling of the base url
          in store dynamic
        - hooks/configure: queue service restarts
        - cmd/snap: warn when a snap is not from the tracking channel
        - interfaces/mount: add support for parsing x-snapd.{mode,uid,gid}=
        - cmd/snap-confine: add detection of stale mount namespace
        - interfaces: add plugRef/slotRef helpers for PlugInfo/SlotInfo
        - tests: check for invalid udev files during all tests
        - daemon: use newChange() in changeAliases for consistency
        - servicestate: use taskset
        - many: add support for /home on NFS
        - packaging,spread: fix and re-enable opensuse builds
    
     -- Michael Vogt <email address hidden>  Wed, 11 Apr 2018 12:40:09 +0200
  • snapd (2.31.2) xenial; urgency=medium
    
      *  New upstream release, LP: #1745217
        - many: add the snapd-generator
        - polkit: ensure error is properly set if dialog is dismissed
        - xdgopenproxy: integrate xdg-open implementation into snapctl
        - userd: add an OpenFile method for launching local files with xdg-
          open
        - configstate: when disable "ssh" we must disable the "sshd"
          service
        - many: remove snapd.refresh.{timer,service}
        - interfaces/builtin: allow MM to access login1
        - timeutil: account for 24h wrap when flattening clock spans
        - interfaces/screen-inhibit-control,network-status: fix dbus path
          and interface typos
        - systemd, wrappers: start all snap services in one systemctl
          call
        - tests: disable interfaces-location-control on s390x
    
    snapd (2.31.1) xenial; urgency=medium
    
      * New upstream release, LP: #1745217
        - tests: multiple autopkgtest related fixes for 18.04
        - overlord/snapstate: use spread in the default refresh schedule
        - timeutil: fix scheduling on nth weekday of the month
        - interfaces: miscellaneous policy updates for home, opengl, time-
          control, network, et al
        - cmd/snap: use proper help strings for `snap userd --help`
        - interfaces/time-control,netlink-audit: adjust for util-linux
          compiled with libaudit
        - rules: do not static link on powerpc
        - packaging: revert LDFLAGS rewrite again after building snap-
          seccomp
        - store: revert PR#4532 and do not display displayname
        - daemon: allow `snapctl get` from any uid
        - debian, snap: only static link libseccomp in snap-seccomp on
          ubuntu
        - daemon: improve ucrednet code for the snap.socket
    
    snapd (2.31) xenial; urgency=medium
    
      * New upstream release, LP: #1745217
        - cmd/snap-confine: allow snap-update-ns to chown things
        - cmd/snap-confine: fix read-only filesystem when mounting nvidia
          files in biarch
        - packaging: create /var/lib/snapd/lib/{gl,gl32,vulkan} as part of
          packaging
        - advisor: ensure commands.db has mode 0644 and add test
        - interfaces/desktop-legacy,unity7: support gtk2/gvfs gtk_show_uri()
        - snap: improve validation of snap layoutsRules for validating
          layouts:
        - snap: fix command-not-found on core devices
        - cmd/snap: display snap license information
        - tests: enable content sharing test for $SNAP
        - userd: add support for a simple UI that can be used from userd
        - snap-confine/nvidia: Support legacy biarch trees for GLVND systems
        - tests: generic detection of gadget and kernel snaps
        - cmd/snap-update-ns: refactor and improve Change.Perform to handle
          EROFS
        - cmd/snap: improve output when snaps were found in a section or the
          section is invalid
        - cmd/snap-confine,tests: hide message about stale base snap
        - cmd/snap-mgmt: fix out of source tree build
        - strutil/quantity: new package that exports formatFoo (from
          progress)
        - cmd/snap: snap refresh --time with new and legacy schedules
        - state: unknown tasks handler
        - cmd/snap-confine,data/systemd: fix removal of snaps inside LXD
        - snap: add io.snapcraft.Settings to `snap userd`
        - spread: remove more EOLed releases
        - snap: tidy up top-level help output
        - snap: fix race in `snap run --strace`
        - tests: update "searching" test to match store changes
        - store: use the "publisher" when populating the "publisher" field
        - snap: make `snap find --section` show all sections
        - tests: new test to validate location control interface
        - many: add new `snap refresh --amend <snap>` command
        - tests/main/kernel-snap-refresh-on-core: skip the whole test if
          edge and stable are the same version
        - tests: set test kernel-snap-refresh-on-core to manual
        - tests: new spread test for interface gpg-keys
        - packaging/fedora: Merge changes from Fedora Dist-Git plus trivial
          fix
        - interfaces: miscellaneous policy updates
        - interfaces/builtin: Replace Solus support with GLVND support
        - tests/main/kernel-snap-refresh-on-core: do not fail if edge and
          stable kernels are the same version
        - snap: add `snap run --strace` to be able to strace snap apps
        - tests: new spread test for ssh-keys interface
        - errtracker: include detected virtualisation
        - tests: add new kernel refresh/revert test for spread-cron
        - interfaces/builtin: blacklist zigbee dongle
        - cmd/snap-confine: discard stale mount namespaces
        - cmd: remove unused execArg0/execEnv
        - snap,interfaces/mount: disallow nobody/nogroup
        - cmd/snap: improve `snap aliases` output when no aliases are
          defined
        - tests/lib/snaps/test-snapd-service: refactor service reload
        - tests: new spread test for gpg-public-keys interface
        - tests: new spread test for ssh-public-keys interface
        - spread: setup machine creation on Linode
        - interfaces/builtin: allow introspecting UDisks2
        - interfaces/builtin: add support for content "source" section
        - tests: new spread test for netlink-audit interface
        - daemon: avoid panic'ing building an error response w/no snaps
          given
        - interfaces/mount,snap: early support for snap layouts
        - daemon: unlock state even if RefreshSchedule() fails
        - arch: add "armv8l" to ubuntuArchFromKernelArch table
        - tests: fix for test interface-netlink-connector
        - data/dbus: add AssumedAppArmorLabel=unconfined
        - advisor: use forked bolt to make it work on ppc
        - overlord/snapstate: record the 'kind' of conflicting change
        - dirs: fix snap mount dir on Manjaro
        - overlord/{snapstate,configstate}, daemon: introduce refresh.timer,
          fallback to refresh.schedule
        - config: add support for `snap set core proxy.no_proxy=...`
        - snap-mgmt: extend spread tests, stop, disable and cleanup snap
          services
        - spread.yaml: add fedora 27
        - cmd/snap-confine: allow snap-update-ns to poke writable holes in
          $SNAP
        - packaging/14.04: move linux-generic-lts-xenial to recommends
        - osutil/sys: ppc has 32-bit getuid already
        - snapstate: make no autorefresh message clearer
        - spread: try to enable Fedora once more
        - overlord/snapstate: do a minimal sanity check on containers
        - configcore: ensure config.txt has a final newline
        - cmd/libsnap-confine-private: print failed mount/umount regardless
          of SNAP_CONFINE_DEBUG
        - debian/tests: add missing autopkgtest test dependencies for debian
        - image: port ini handling to goconfigparser
        - tests/main/snap-service-after-before: add test for after/before
          service ordering
        - tests: enabling opensuse for tests
        - tests: update auto-refresh-private to match messages from current
          master
        - dirs: check if distro 'is like' fedora when picking path to
          libexecdir
        - tests: fix "job canceled" issue and improve cleanup for snaps
        - cmd/libsnap-confine-private: add debug build of libsnap-confine-
          private.a, link it into snap-confine-debug
        - vendor: remove x/sys/unix to fix builds on arm64 and powerpc
        - image: let consume snapcraft export-login files from tooling
        - interfaces/mir: allow Wayland socket and non-root sockets
        - interfaces/builtin: use snap.{Plug,Slot}Info over
          interfaces.{Plug,Slot}
        - tests: add simple snap-mgmt test
        - wrappers: autogenerate After/Before in systemd's service files for
          apps
        - snap: add usage hints in `snap download`
        - snap: provide more meaningful errors for installMany and friends
        - cmd/snap: show header/footer when `snap find` is used without
          arguments
        - overlord/snapstate: for Enable's tasks refer to the first task
          with snap-setup, do not duplicate
        - tests: add hard-coded fully expired macaroons to run related tests
        - cmd/snap-update-ns: new test features
        - cmd/snap-update-ns: we don't want to bind mount symlinks
        - interfaces/mount: test OptsToCommonFlags, filter out x-snapd.
          options
        - cmd/snap-update-ns: untangle upcoming cyclic initialization
        - client, daemon: update user's email when logging in with new
          account
        - tests: ensure snap-confine apparmor profile is parsable
        - snap: do not leak internal errors on install/refresh etc
        - snap: fix missing error check when multiple snaps are refreshed
        - spread: trying to re-enable tests on Fedora
        - snap: fix gadget.yaml parsing for multi volume gadgets
        - snap: give the snap.Container interface a Walk method
        - snap: rename `snap advise-command` to `snap advise-snap --command`
        - overlord/snapstate: no refresh just for hints if there was a
          recent regular full refresh
        - progress: switch ansimeter's Spin() to use a spinner
        - snap: support `command-not-found` symlink for `snap advise-
          command`
        - daemon: store email, ID and macaroon when creating a new user
        - snap: app startup after/before validation
        - timeutil: refresh timer take 2
        - store, daemon/api: Rename MyAppsServer, point to
          dashboard.snapcraft.io instead
        - tests: use "quiet" helper instead of "dnf -q" to get errors on
          failures
        - cmd/snap-update-ns: improve mocking for tests
        - many: implement the advisor backend, populate it from the store
        - tests: make less calls to the package manager
        - tests/main/confinement-classic: enable the test on Fedora
        - snap: do not leak internal network errors to the user
        - snap: use stdout instead of stderr for "fetching" message
        - tests: fix test whoami, share successful_login.exp
        - many: refresh with appropriate creds
        - snap: add new `snap advice-command` skeleton
        - tests: add test that ensures we never parse versions as numbers
        - overlord/snapstate: override Snapstate.UserID in refresh if the
          installing user is gone
        - interfaces: allow socket "shutdown" syscall in default profile
        - snap: print friendly message if `snap keys` is empty
        - cmd/snap-update-ns: add execWritableMimic
        - snap: make `snap info invalid-snap` output more user friendly
        - cmd/snap,  tests/main/classic-confinement: fix snap-exec path when
          running under classic confinement
        - overlord/ifacestate: fix disable/enable cycle to setup security
        - snap: fix snap find " " output
        - daemon: add new polkit action to manage interfaces
        - packaging/arch: disable services when removing
        - asserts/signtool: support for building tools on top that fill-
          in/compute some headers
        - cmd: clarify "This leaves %s tracking %s." message
        - daemon: return "bad-query" error kind for store.ErrBadQuery
        - taskrunner/many: KnownTaskKinds helper
        - tests/main/interfaces-fuse_support: fix confinement, allow
          unmount, fix spread tests
        - snap: use the -no-fragments mksquashfs option
        - data/selinux: allow messages from policykit
        - tests: fix catalog-update wait loop
        - tests/lib/prepare-restore: disable rate limiting in journald
        - tests: change interfaces-fuse_support to be debug friendly
        - tests/main/postrm-purge: stop snapd before purge
        - This is an example of test log:https://paste.ubuntu.com/26215170/
        - tests/main/interfaces-fuse_support: dump more debugging
          information
        - interfaces/dbus: adjust slot policy for listen, accept and accept4
          syscalls
        - tests: save the snapd-state without compression
        - tests/main/searching: handle changes in featured snaps list
        - overlord/snapstate: fix auto-refresh summary for 2 snaps
        - overlord/auth,daemon: introduce an explicit auth.ErrInvalidUser
        - interfaces: add /proc/partitions to system-observe (This addresses
          LP#1708527.)
        - tests/lib: introduce helpers for setting up /dev/random using
          /dev/urandom in project prepare
        - tests: new test for interface network status
        - interfaces: interfaces: also add an app/hook-specific udev RUN
          rule for hotplugging
        - tests: fix external backend for tests that need DEBUG output
        - tests: do not disable refresh timer on external backend
        - client: send all snap related bool json fields
        - interfaces/desktop,unity7: allow status/activate/lock of
          screensavers
        - tests/main: source mkpinentry.sh
        - tests: fix security-device-cgroups-serial-port test for rpi and db
        - cmd/snap-mgmt: add more directories for cleanup and refactor
          purge() code
        - snap: YAML and data structures for app before/after ordering
        - tests: set TRUST_TEST_KEYS=false for all the external backends
        - packaging/arch: install snap-mgmt tool
        - tests: add support on tests for cm3 gadget
        - interfaces/removable-media: also allow 'k' (lock)
        - interfaces: use ConnectedPlug/ConnectedSlot types (step 2)
        - interfaces: rename sanitize methods
        - devicestate: fix misbehaving test when using systemd-resolved
        - interfaces: added Ref() helpers, restored more detailed error
          message on spi iface
        - debian: make "gnupg" a recommends
        - interfaces/many: misc updates for default, browser-support,
          opengl, desktop, unity7, x11
        - interfaces: PlugInfo/SlotInfo/ConnectedPlug/ConnectedSlot
          attribute helpers
        - interfaces: update fixme comments
        - tests: make interfaces-snapd-control-with-manage more robust
        - userd: generalize dbusInterface
        - interfaces: use ConnectedPlug/ConnectedSlot types (step 1)
        - hookstate: add compat "configure-snapd" task.
        - config, overlord/snapstate, timeutil: rename ParseSchedule to
          ParseLegacySchedule
        - tests: adding tests for time*-control interfaces
        - tests: new test to check interfaces after reboot the system
        - cmd/snap-mgmt: fixes
        - packaging/opensuse-42.2: package and use snap-mgmt
        - corecfg: also "mask" services when disabling them
        - cmd/snap-mgmt: introduce snap-mgmt tool
        - configstate: simplify ConfigManager
        - interfaces: add gpio-memory-control interface
        - cmd: disable check-syntax-c
        - packaging/arch: add bash-completion as optional dependency
        - corecfg: rename package to overlord/configstate/configcore
        - wrappers: fix unit tests to use dirs.SnapMountDir
        - osutil/sys: reimplement getuid and chown with the right int type
        - interfaces-netlink-connector: fix sourcing snaps.sh
    
     -- Michael Vogt <email address hidden>  Fri, 09 Mar 2018 11:11:31 +0100
  • snapd (2.31.1) xenial; urgency=medium
    
      * New upstream release, LP: #1745217
        - tests: multiple autopkgtest related fixes for 18.04
        - overlord/snapstate: use spread in the default refresh schedule
        - timeutil: fix scheduling on nth weekday of the month
        - interfaces: miscellaneous policy updates for home, opengl, time-
          control, network, et al
        - cmd/snap: use proper help strings for `snap userd --help`
        - interfaces/time-control,netlink-audit: adjust for util-linux
          compiled with libaudit
        - rules: do not static link on powerpc
        - packaging: revert LDFLAGS rewrite again after building snap-
          seccomp
        - store: revert PR#4532 and do not display displayname
        - daemon: allow `snapctl get` from any uid
        - debian, snap: only static link libseccomp in snap-seccomp on
          ubuntu
        - daemon: improve ucrednet code for the snap.socket
    
    snapd (2.31) xenial; urgency=medium
    
      * New upstream release, LP: #1745217
        - cmd/snap-confine: allow snap-update-ns to chown things
        - cmd/snap-confine: fix read-only filesystem when mounting nvidia
          files in biarch
        - packaging: create /var/lib/snapd/lib/{gl,gl32,vulkan} as part of
          packaging
        - advisor: ensure commands.db has mode 0644 and add test
        - interfaces/desktop-legacy,unity7: support gtk2/gvfs gtk_show_uri()
        - snap: improve validation of snap layoutsRules for validating
          layouts:
        - snap: fix command-not-found on core devices
        - cmd/snap: display snap license information
        - tests: enable content sharing test for $SNAP
        - userd: add support for a simple UI that can be used from userd
        - snap-confine/nvidia: Support legacy biarch trees for GLVND systems
        - tests: generic detection of gadget and kernel snaps
        - cmd/snap-update-ns: refactor and improve Change.Perform to handle
          EROFS
        - cmd/snap: improve output when snaps were found in a section or the
          section is invalid
        - cmd/snap-confine,tests: hide message about stale base snap
        - cmd/snap-mgmt: fix out of source tree build
        - strutil/quantity: new package that exports formatFoo (from
          progress)
        - cmd/snap: snap refresh --time with new and legacy schedules
        - state: unknown tasks handler
        - cmd/snap-confine,data/systemd: fix removal of snaps inside LXD
        - snap: add io.snapcraft.Settings to `snap userd`
        - spread: remove more EOLed releases
        - snap: tidy up top-level help output
        - snap: fix race in `snap run --strace`
        - tests: update "searching" test to match store changes
        - store: use the "publisher" when populating the "publisher" field
        - snap: make `snap find --section` show all sections
        - tests: new test to validate location control interface
        - many: add new `snap refresh --amend <snap>` command
        - tests/main/kernel-snap-refresh-on-core: skip the whole test if
          edge and stable are the same version
        - tests: set test kernel-snap-refresh-on-core to manual
        - tests: new spread test for interface gpg-keys
        - packaging/fedora: Merge changes from Fedora Dist-Git plus trivial
          fix
        - interfaces: miscellaneous policy updates
        - interfaces/builtin: Replace Solus support with GLVND support
        - tests/main/kernel-snap-refresh-on-core: do not fail if edge and
          stable kernels are the same version
        - snap: add `snap run --strace` to be able to strace snap apps
        - tests: new spread test for ssh-keys interface
        - errtracker: include detected virtualisation
        - tests: add new kernel refresh/revert test for spread-cron
        - interfaces/builtin: blacklist zigbee dongle
        - cmd/snap-confine: discard stale mount namespaces
        - cmd: remove unused execArg0/execEnv
        - snap,interfaces/mount: disallow nobody/nogroup
        - cmd/snap: improve `snap aliases` output when no aliases are
          defined
        - tests/lib/snaps/test-snapd-service: refactor service reload
        - tests: new spread test for gpg-public-keys interface
        - tests: new spread test for ssh-public-keys interface
        - spread: setup machine creation on Linode
        - interfaces/builtin: allow introspecting UDisks2
        - interfaces/builtin: add support for content "source" section
        - tests: new spread test for netlink-audit interface
        - daemon: avoid panic'ing building an error response w/no snaps
          given
        - interfaces/mount,snap: early support for snap layouts
        - daemon: unlock state even if RefreshSchedule() fails
        - arch: add "armv8l" to ubuntuArchFromKernelArch table
        - tests: fix for test interface-netlink-connector
        - data/dbus: add AssumedAppArmorLabel=unconfined
        - advisor: use forked bolt to make it work on ppc
        - overlord/snapstate: record the 'kind' of conflicting change
        - dirs: fix snap mount dir on Manjaro
        - overlord/{snapstate,configstate}, daemon: introduce refresh.timer,
          fallback to refresh.schedule
        - config: add support for `snap set core proxy.no_proxy=...`
        - snap-mgmt: extend spread tests, stop, disable and cleanup snap
          services
        - spread.yaml: add fedora 27
        - cmd/snap-confine: allow snap-update-ns to poke writable holes in
          $SNAP
        - packaging/14.04: move linux-generic-lts-xenial to recommends
        - osutil/sys: ppc has 32-bit getuid already
        - snapstate: make no autorefresh message clearer
        - spread: try to enable Fedora once more
        - overlord/snapstate: do a minimal sanity check on containers
        - configcore: ensure config.txt has a final newline
        - cmd/libsnap-confine-private: print failed mount/umount regardless
          of SNAP_CONFINE_DEBUG
        - debian/tests: add missing autopkgtest test dependencies for debian
        - image: port ini handling to goconfigparser
        - tests/main/snap-service-after-before: add test for after/before
          service ordering
        - tests: enabling opensuse for tests
        - tests: update auto-refresh-private to match messages from current
          master
        - dirs: check if distro 'is like' fedora when picking path to
          libexecdir
        - tests: fix "job canceled" issue and improve cleanup for snaps
        - cmd/libsnap-confine-private: add debug build of libsnap-confine-
          private.a, link it into snap-confine-debug
        - vendor: remove x/sys/unix to fix builds on arm64 and powerpc
        - image: let consume snapcraft export-login files from tooling
        - interfaces/mir: allow Wayland socket and non-root sockets
        - interfaces/builtin: use snap.{Plug,Slot}Info over
          interfaces.{Plug,Slot}
        - tests: add simple snap-mgmt test
        - wrappers: autogenerate After/Before in systemd's service files for
          apps
        - snap: add usage hints in `snap download`
        - snap: provide more meaningful errors for installMany and friends
        - cmd/snap: show header/footer when `snap find` is used without
          arguments
        - overlord/snapstate: for Enable's tasks refer to the first task
          with snap-setup, do not duplicate
        - tests: add hard-coded fully expired macaroons to run related tests
        - cmd/snap-update-ns: new test features
        - cmd/snap-update-ns: we don't want to bind mount symlinks
        - interfaces/mount: test OptsToCommonFlags, filter out x-snapd.
          options
        - cmd/snap-update-ns: untangle upcoming cyclic initialization
        - client, daemon: update user's email when logging in with new
          account
        - tests: ensure snap-confine apparmor profile is parsable
        - snap: do not leak internal errors on install/refresh etc
        - snap: fix missing error check when multiple snaps are refreshed
        - spread: trying to re-enable tests on Fedora
        - snap: fix gadget.yaml parsing for multi volume gadgets
        - snap: give the snap.Container interface a Walk method
        - snap: rename `snap advise-command` to `snap advise-snap --command`
        - overlord/snapstate: no refresh just for hints if there was a
          recent regular full refresh
        - progress: switch ansimeter's Spin() to use a spinner
        - snap: support `command-not-found` symlink for `snap advise-
          command`
        - daemon: store email, ID and macaroon when creating a new user
        - snap: app startup after/before validation
        - timeutil: refresh timer take 2
        - store, daemon/api: Rename MyAppsServer, point to
          dashboard.snapcraft.io instead
        - tests: use "quiet" helper instead of "dnf -q" to get errors on
          failures
        - cmd/snap-update-ns: improve mocking for tests
        - many: implement the advisor backend, populate it from the store
        - tests: make less calls to the package manager
        - tests/main/confinement-classic: enable the test on Fedora
        - snap: do not leak internal network errors to the user
        - snap: use stdout instead of stderr for "fetching" message
        - tests: fix test whoami, share successful_login.exp
        - many: refresh with appropriate creds
        - snap: add new `snap advice-command` skeleton
        - tests: add test that ensures we never parse versions as numbers
        - overlord/snapstate: override Snapstate.UserID in refresh if the
          installing user is gone
        - interfaces: allow socket "shutdown" syscall in default profile
        - snap: print friendly message if `snap keys` is empty
        - cmd/snap-update-ns: add execWritableMimic
        - snap: make `snap info invalid-snap` output more user friendly
        - cmd/snap,  tests/main/classic-confinement: fix snap-exec path when
          running under classic confinement
        - overlord/ifacestate: fix disable/enable cycle to setup security
        - snap: fix snap find " " output
        - daemon: add new polkit action to manage interfaces
        - packaging/arch: disable services when removing
        - asserts/signtool: support for building tools on top that fill-
          in/compute some headers
        - cmd: clarify "This leaves %s tracking %s." message
        - daemon: return "bad-query" error kind for store.ErrBadQuery
        - taskrunner/many: KnownTaskKinds helper
        - tests/main/interfaces-fuse_support: fix confinement, allow
          unmount, fix spread tests
        - snap: use the -no-fragments mksquashfs option
        - data/selinux: allow messages from policykit
        - tests: fix catalog-update wait loop
        - tests/lib/prepare-restore: disable rate limiting in journald
        - tests: change interfaces-fuse_support to be debug friendly
        - tests/main/postrm-purge: stop snapd before purge
        - This is an example of test log:https://paste.ubuntu.com/26215170/
        - tests/main/interfaces-fuse_support: dump more debugging
          information
        - interfaces/dbus: adjust slot policy for listen, accept and accept4
          syscalls
        - tests: save the snapd-state without compression
        - tests/main/searching: handle changes in featured snaps list
        - overlord/snapstate: fix auto-refresh summary for 2 snaps
        - overlord/auth,daemon: introduce an explicit auth.ErrInvalidUser
        - interfaces: add /proc/partitions to system-observe (This addresses
          LP#1708527.)
        - tests/lib: introduce helpers for setting up /dev/random using
          /dev/urandom in project prepare
        - tests: new test for interface network status
        - interfaces: interfaces: also add an app/hook-specific udev RUN
          rule for hotplugging
        - tests: fix external backend for tests that need DEBUG output
        - tests: do not disable refresh timer on external backend
        - client: send all snap related bool json fields
        - interfaces/desktop,unity7: allow status/activate/lock of
          screensavers
        - tests/main: source mkpinentry.sh
        - tests: fix security-device-cgroups-serial-port test for rpi and db
        - cmd/snap-mgmt: add more directories for cleanup and refactor
          purge() code
        - snap: YAML and data structures for app before/after ordering
        - tests: set TRUST_TEST_KEYS=false for all the external backends
        - packaging/arch: install snap-mgmt tool
        - tests: add support on tests for cm3 gadget
        - interfaces/removable-media: also allow 'k' (lock)
        - interfaces: use ConnectedPlug/ConnectedSlot types (step 2)
        - interfaces: rename sanitize methods
        - devicestate: fix misbehaving test when using systemd-resolved
        - interfaces: added Ref() helpers, restored more detailed error
          message on spi iface
        - debian: make "gnupg" a recommends
        - interfaces/many: misc updates for default, browser-support,
          opengl, desktop, unity7, x11
        - interfaces: PlugInfo/SlotInfo/ConnectedPlug/ConnectedSlot
          attribute helpers
        - interfaces: update fixme comments
        - tests: make interfaces-snapd-control-with-manage more robust
        - userd: generalize dbusInterface
        - interfaces: use ConnectedPlug/ConnectedSlot types (step 1)
        - hookstate: add compat "configure-snapd" task.
        - config, overlord/snapstate, timeutil: rename ParseSchedule to
          ParseLegacySchedule
        - tests: adding tests for time*-control interfaces
        - tests: new test to check interfaces after reboot the system
        - cmd/snap-mgmt: fixes
        - packaging/opensuse-42.2: package and use snap-mgmt
        - corecfg: also "mask" services when disabling them
        - cmd/snap-mgmt: introduce snap-mgmt tool
        - configstate: simplify ConfigManager
        - interfaces: add gpio-memory-control interface
        - cmd: disable check-syntax-c
        - packaging/arch: add bash-completion as optional dependency
        - corecfg: rename package to overlord/configstate/configcore
        - wrappers: fix unit tests to use dirs.SnapMountDir
        - osutil/sys: reimplement getuid and chown with the right int type
        - interfaces-netlink-connector: fix sourcing snaps.sh
    
     -- Michael Vogt <email address hidden>  Tue, 20 Feb 2018 17:27:42 +0100
  • snapd (2.29.4.2) xenial; urgency=medium
    
      * New upstream release, LP: #1726258
        - snap-confine: use #include in snap-confine.apparmor.in
    
    snapd (2.29.4.1) xenial; urgency=medium
    
      * New upstream release, LP: #1726258
        - tests: more debug info for classic-ubuntu-core-transition
        - packaging: fix typo that causes error in the misspell test
    
    snapd (2.29.4) xenial; urgency=medium
    
      * New upstream release, LP: #1726258
        - snap-confine: fix snap-confine under lxd
        - tests: disable classic-ubuntu-core-transition on i386 temporarily
        - many: reject bad plugs/slots
        - interfaces,tests: skip unknown plug/slot interfaces
        - store: enable "base" field from the store
        - packaging/fedora: Merge changes from Fedora Dist-Git
    
    snapd (2.29.3) xenial; urgency=medium
    
      * New upstream release, LP: #1726258
        - daemon: cherry-picked /v2/logs fixes
        - cmd/snap-confine: Respect biarch nature of libdirs
        - cmd/snap-confine: Ensure snap-confine is allowed to access os-
          release
        - interfaces: fix udev tagging for hooks
        - cmd: fix re-exec bug with classic confinement for host snapd
        - tests: disable xdg-open-compat test
        - cmd/snap-confine: add slave PTYs and let devpts newinstance
          perform mediation
        - interfaces/many: misc policy updates for browser-support, cups-
          control and network-status
        - interfaces/raw-usb: match on SUBSYSTEM, not SUBSYSTEMS
        - tests: fix security-device-cgroup* tests on devices with
          framebuffer
    
    snapd (2.29.2) xenial; urgency=medium
    
      * New upstream release, LP: #1726258
        - snapctl: disable stop/start/restart (2.29)
        - cmd/snap-update-ns: fix collection of changes made
    
    snapd (2.29.1) xenial; urgency=medium
    
      * New upstream release, LP: #1726258
        - interfaces: fix incorrect signature of ofono DBusPermanentSlot
        - interfaces/serial-port: udev tag plugged slots that have just
          'path' via KERNEL
        - interfaces/hidraw: udev tag plugged slots that have just 'path'
          via KERNEL
        - interfaces/uhid: unconditionally add existing uhid device to the
          device cgroup
        - cmd/snap-update-ns: fix mount rules for font sharing
        - tests: disable refresh-undo test on trusty for now
        - tests: use `snap change --last=install` in snapd-reexec test
        - Revert " wrappers: fail install if exec-line cannot be re-written
        - interfaces: don't udev tag devmode or classic snaps
        - many: make ignore-validation sticky and send the flag with refresh
          requests
    
    snapd (2.29) xenial; urgency=medium
    
      * New upstream release, LP: #1726258
        - interfaces/many: miscellaneous updates based on feedback from the
          field
        - snap-confine: allow reading uevents from any where in /sys
        - spread: add bionic beaver
        - debian: make packaging/ubuntu-14.04/copyright a real file again
        - tests: cherry pick the fix for services test into 2.29
        - cmd/snap-update-ns: initialize logger
        - hooks/configure: queue service restarts
        - snap-{confine,seccomp}: make @unrestricted fully unrestricted
        - interfaces: clean system apparmor cache on core device
        - debian: do not build static snap-exec on powerpc
        - snap-confine: increase sanity_timeout to 6s
        - snapctl: cherry pick service commands changes
        - cmd/snap: tell translators about arg names and descs req's
        - systemd: run all mount units before snapd.service to avoid race
        - store: add a test to show auth failures are forwarded by doRequest
        - daemon: convert ErrInvalidCredentials to a 401 Unauthorized error.
        - store: forward on INVALID_CREDENTIALS error as
          ErrInvalidCredentials
        - daemon: generate a forbidden response message if polkit dialog is
          dismissed
        - daemon: Allow Polkit authorization to cancel changes.
        - travis: switch to container based test runs
        - interfaces: reduce duplicated code in interface tests mocks
        - tests: improve revert related testing
        - interfaces: sanitize plugs and slots early in ReadInfo
        - store: add download caching
        - preserve TMPDIR and HOSTALIASES across snap-confine invocation
        - snap-confine: init all arrays with `= {0,}`
        - tests: adding test for network-manager interface
        - interfaces/mount: don't generate legacy per-hook/per-app mount
          profiles
        - snap: introduce structured epochs
        - tests: fix interfaces-cups-control test for cups-2.2.5
        - snap-confine: cleanup incorrectly created nvidia udev tags
        - cmd/snap-confine: update valid security tag regexp
        - cmd/libsnap: enable two stranded tests
        - cmd,packaging: enable apparmor on openSUSE
        - overlord/ifacestate: refresh all security backends on startup
        - interfaces/dbus: drop unneeded check for
          release.ReleaseInfo.ForceDevMode
        - dbus: ensure io.snapcraft.Launcher.service is created on re-
          exec
        - overlord/auth: continue for now supporting UBUNTU_STORE_ID if the
          model is generic-classic
        - snap-confine: add support for handling /dev/nvidia-modeset
        - interfaces/network-control: remove incorrect rules for tun
        - spread: allow setting SPREAD_DEBUG_EACH=0 to disable debug-each
          section
        - packaging: remove .mnt files on removal
        - tests: fix econnreset scenario when the iptables rule was not
          created
        - tests: add test for lxd interface
        - run-checks: use nakedret static checker to check for naked
          returns on long functions
        - progress: be more flexible in testing ansimeter
        - interfaces: fix udev rules for tun
        - many: implement our own ANSI-escape-using progress indicator
        - snap-exec: update tests to follow main_test pattern
        - snap: support "command: foo $ENV_STRING"
        - packaging: update nvidia configure options
        - snap: add new `snap pack` and use in tests
        - cmd: correctly name the "Ubuntu" and "Arch" NVIDIA methods
        - cmd: add autogen case for solus
        - tests: do not use http://canihazip.com/ which appears to be down
        - hooks: commands for controlling own services from snapctl
        - snap: refactor cmdGet.Execute()
        - interfaces/mount: make Change.Perform testable and test it
        - interfaces/mount,cmd/snap-update-ns: move change code
        - snap-confine: is_running_on_classic_distribution() looks into os-
          release
        - interfaces: misc updates for default, browser-support, home and
          system-observe
        - interfaces: deny lttng by default
        - interfaces/lxd: lxd slot implementation can also be an app snap
        - release,cmd,dirs: Redo the distro checks to take into account
          distribution families
        - cmd/snap: completion for alias and unalias
        - snap-confine: add new SC_CLEANUP and use it
        - snap: refrain from running filepath.Base on random strings
        - cmd/snap-confine: put processes into freezer hierarchy
        - wrappers: fail install if exec-line cannot be re-written
        - cmd/snap-seccomp,osutil: make user/group lookup functions public
        - snapstate: deal with snap user data in the /root/ directory
        - interfaces: Enhance full-confinement support for biarch
          distributions
        - snap-confine: Only attempt to copy/mount NVIDIA libs when NVIDIA
          is used
        - packaging/fedora: Add Fedora 26, 27, and Rawhide symlinks
        - overlord/snapstate: prefer a smaller corner case for doing the
          wrong thing
        - cmd/snap-repair:  set user agent for snap-repair http requests
        - packaging: bring down the delta between 14.04 and 16.04
        - snap-confine: Ensure lib64 biarch directory is respected
        - snap-confine: update apparmor rules for fedora based base snaps
        - tests: Increase SNAPD_CONFIGURE_HOOK_TIMEOUT to 3 minutes to
          install real snaps
        - daemon: use client.Snap instead of map[string]interface{} for
          snaps.
        - hooks: rename refresh hook to post-refresh
        - git: make the .gitingore file a bit more targeted
        - interfaces/opengl: don't udev tag nvidia devices and use snap-
          confine instead
        - cmd/snap-{confine,update-ns}: apply mount profiles using snap-
          update-ns
        - cmd: update "make hack"
        - interfaces/system-observe: allow clients to enumerate DBus
          connection names
        - snap-repair: implement `snap-repair {list,show}`
        - dirs,interfaces: create snap-confine.d on demand when re-executing
        - snap-confine: fix base snaps on core
        - cmd/snap-repair: fix tests when running as root
        - interfaces: add Connection type
        - cmd/snap-repair: skip disabled repairs
        - cmd/snap-repair: prefer leaking unmanaged fds on test failure over
          closing random ones
        - snap-repair: make `repair` binary available for repair scripts
        - snap-repair: fix missing Close() in TestStatusHappy
        - cmd/snap-confine,packaging: import snapd-generated policy
        - cmd/snap: return empty document if snap has no configuration
        - snap-seccomp: run secondary-arch tests via gcc-multilib
        - snap: implement `snap {repair,repairs}` and pass-through to snap-
          repair
        - interfaces/builtin: allow receiving dbus messages
        - snap-repair: implement `snap-repair {done,skip,retry}`
        - data/completion: small tweak to snap completion snippet
        - dirs: fix classic support detection
        - cmd/snap-repair: integrate root public keys for repairs
        - tests: fix ubuntu core services
        - tests: add new test that checks that the compat snapd-xdg-open
          works
        - snap-confine: improve error message if core/u-core cannot be found
        - tests: only run tests/regression/nmcli on amd64
        - interfaces: mount host system fonts in desktop interface
        - interfaces: enable partial apparmor support
        - snapstate: auto-install missing base snaps
        - spread: work around temporary packaging issue in debian sid
        - asserts,cmd/snap-repair: introduce a mandatory summary for repairs
        - asserts,cmd/snap-repair: represent RepairID internally as an int
        - tests: test the real "xdg-open" from the core snap
        - many: implement fetching sections and package names periodically.
        - interfaces/network: allow using netcat as client
        - snap-seccomp, osutil: use osutil.AtomicFile in snap-seccomp
        - snap-seccomp: skip mknod syscall on arm64
        - tests: add trivial canonical-livepatch test
        - tests: add test that ensures that all core services are working
        - many: add logger.MockLogger() and use it in the tests
        - snap-repair: fix test failure in TestRepairHitsTimeout
        - asserts: add empty values check in HeadersFromPrimaryKey
        - daemon: remove unused installSnap var in test
        - daemon: reach for Overlord.Loop less thanks to overlord.Mock
        - snap-seccomp: manually resolve socket() call in tests
        - tests: change regex used to validate installed ubuntu core snap
        - cmd/snapctl: allow snapctl -h without a context (regression fix).
        - many: use snapcore/snapd/i18n instead of i18n/dumb
        - many: introduce asserts.NotFoundError replacing both ErrNotFound
          and store.AssertionNotFoundError
        - packaging: don't include any marcos in comments
        - overlord: use overlord.Mock in more tests, make sure we check the
          outcome of Settle
        - tests: try to fix staging tests
        - store: simplify api base url config
        - systemd: add systemd.MockJournalctl()
        - many: provide systemd.MockSystemctl() helper
        - tests: improve the listing test to not fail for e.g. 2.28~rc2
        - snapstate: give snapmgrTestSuite.settle() more time to settle
        - tests: fix regex to check core version on snap list
        - debian: update trusted account-keys check on 14.04 packaging
        - interfaces: add udev netlink support to hardware-observe
        - overlord: introduce Mock which enables to use Overlord.Settle for
          settle in many more places
        - snap-repair: execute the repair and capture logs/status
        - tests: run the tests/unit/go everywhere
        - daemon, snapstate: move ensureCore from daemon/api.go into
          snapstate.go
        - cmd/snap: get keys or root document
        - spread.yaml: turn suse to manual given that it's breaking master
        - many: configure store from state, reconfigure store at runtime
        - osutil: AtomicWriter (an io.Writer), and io.Reader versions of
          AtomicWrite*
        - tests: check for negative syscalls in runBpf() and skip those
          tests
        - docs: use abolute path in PULL_REQUEST_TEMPLATE.md
        - store: move device auth endpoint uris to config (#3831)
    
     -- Michael Vogt <email address hidden>  Thu, 30 Nov 2017 17:42:33 +0100
  • snapd (2.29.4.1) xenial; urgency=medium
    
      * New upstream release, LP: #1726258
        - tests: more debug info for classic-ubuntu-core-transition
        - packaging: fix typo that causes error in the misspell test
    
    snapd (2.29.4) xenial; urgency=medium
    
      * New upstream release, LP: #1726258
        - snap-confine: fix snap-confine under lxd
        - tests: disable classic-ubuntu-core-transition on i386 temporarily
        - many: reject bad plugs/slots
        - interfaces,tests: skip unknown plug/slot interfaces
        - store: enable "base" field from the store
        - packaging/fedora: Merge changes from Fedora Dist-Git
    
    snapd (2.29.3) xenial; urgency=medium
    
      * New upstream release, LP: #1726258
        - daemon: cherry-picked /v2/logs fixes
        - cmd/snap-confine: Respect biarch nature of libdirs
        - cmd/snap-confine: Ensure snap-confine is allowed to access os-
          release
        - interfaces: fix udev tagging for hooks
        - cmd: fix re-exec bug with classic confinement for host snapd
        - tests: disable xdg-open-compat test
        - cmd/snap-confine: add slave PTYs and let devpts newinstance
          perform mediation
        - interfaces/many: misc policy updates for browser-support, cups-
          control and network-status
        - interfaces/raw-usb: match on SUBSYSTEM, not SUBSYSTEMS
        - tests: fix security-device-cgroup* tests on devices with
          framebuffer
    
    snapd (2.29.2) xenial; urgency=medium
    
      * New upstream release, LP: #1726258
        - snapctl: disable stop/start/restart (2.29)
        - cmd/snap-update-ns: fix collection of changes made
    
    snapd (2.29.1) xenial; urgency=medium
    
      * New upstream release, LP: #1726258
        - interfaces: fix incorrect signature of ofono DBusPermanentSlot
        - interfaces/serial-port: udev tag plugged slots that have just
          'path' via KERNEL
        - interfaces/hidraw: udev tag plugged slots that have just 'path'
          via KERNEL
        - interfaces/uhid: unconditionally add existing uhid device to the
          device cgroup
        - cmd/snap-update-ns: fix mount rules for font sharing
        - tests: disable refresh-undo test on trusty for now
        - tests: use `snap change --last=install` in snapd-reexec test
        - Revert " wrappers: fail install if exec-line cannot be re-written
        - interfaces: don't udev tag devmode or classic snaps
        - many: make ignore-validation sticky and send the flag with refresh
          requests
    
    snapd (2.29) xenial; urgency=medium
    
      * New upstream release, LP: #1726258
        - interfaces/many: miscellaneous updates based on feedback from the
          field
        - snap-confine: allow reading uevents from any where in /sys
        - spread: add bionic beaver
        - debian: make packaging/ubuntu-14.04/copyright a real file again
        - tests: cherry pick the fix for services test into 2.29
        - cmd/snap-update-ns: initialize logger
        - hooks/configure: queue service restarts
        - snap-{confine,seccomp}: make @unrestricted fully unrestricted
        - interfaces: clean system apparmor cache on core device
        - debian: do not build static snap-exec on powerpc
        - snap-confine: increase sanity_timeout to 6s
        - snapctl: cherry pick service commands changes
        - cmd/snap: tell translators about arg names and descs req's
        - systemd: run all mount units before snapd.service to avoid race
        - store: add a test to show auth failures are forwarded by doRequest
        - daemon: convert ErrInvalidCredentials to a 401 Unauthorized error.
        - store: forward on INVALID_CREDENTIALS error as
          ErrInvalidCredentials
        - daemon: generate a forbidden response message if polkit dialog is
          dismissed
        - daemon: Allow Polkit authorization to cancel changes.
        - travis: switch to container based test runs
        - interfaces: reduce duplicated code in interface tests mocks
        - tests: improve revert related testing
        - interfaces: sanitize plugs and slots early in ReadInfo
        - store: add download caching
        - preserve TMPDIR and HOSTALIASES across snap-confine invocation
        - snap-confine: init all arrays with `= {0,}`
        - tests: adding test for network-manager interface
        - interfaces/mount: don't generate legacy per-hook/per-app mount
          profiles
        - snap: introduce structured epochs
        - tests: fix interfaces-cups-control test for cups-2.2.5
        - snap-confine: cleanup incorrectly created nvidia udev tags
        - cmd/snap-confine: update valid security tag regexp
        - cmd/libsnap: enable two stranded tests
        - cmd,packaging: enable apparmor on openSUSE
        - overlord/ifacestate: refresh all security backends on startup
        - interfaces/dbus: drop unneeded check for
          release.ReleaseInfo.ForceDevMode
        - dbus: ensure io.snapcraft.Launcher.service is created on re-
          exec
        - overlord/auth: continue for now supporting UBUNTU_STORE_ID if the
          model is generic-classic
        - snap-confine: add support for handling /dev/nvidia-modeset
        - interfaces/network-control: remove incorrect rules for tun
        - spread: allow setting SPREAD_DEBUG_EACH=0 to disable debug-each
          section
        - packaging: remove .mnt files on removal
        - tests: fix econnreset scenario when the iptables rule was not
          created
        - tests: add test for lxd interface
        - run-checks: use nakedret static checker to check for naked
          returns on long functions
        - progress: be more flexible in testing ansimeter
        - interfaces: fix udev rules for tun
        - many: implement our own ANSI-escape-using progress indicator
        - snap-exec: update tests to follow main_test pattern
        - snap: support "command: foo $ENV_STRING"
        - packaging: update nvidia configure options
        - snap: add new `snap pack` and use in tests
        - cmd: correctly name the "Ubuntu" and "Arch" NVIDIA methods
        - cmd: add autogen case for solus
        - tests: do not use http://canihazip.com/ which appears to be down
        - hooks: commands for controlling own services from snapctl
        - snap: refactor cmdGet.Execute()
        - interfaces/mount: make Change.Perform testable and test it
        - interfaces/mount,cmd/snap-update-ns: move change code
        - snap-confine: is_running_on_classic_distribution() looks into os-
          release
        - interfaces: misc updates for default, browser-support, home and
          system-observe
        - interfaces: deny lttng by default
        - interfaces/lxd: lxd slot implementation can also be an app snap
        - release,cmd,dirs: Redo the distro checks to take into account
          distribution families
        - cmd/snap: completion for alias and unalias
        - snap-confine: add new SC_CLEANUP and use it
        - snap: refrain from running filepath.Base on random strings
        - cmd/snap-confine: put processes into freezer hierarchy
        - wrappers: fail install if exec-line cannot be re-written
        - cmd/snap-seccomp,osutil: make user/group lookup functions public
        - snapstate: deal with snap user data in the /root/ directory
        - interfaces: Enhance full-confinement support for biarch
          distributions
        - snap-confine: Only attempt to copy/mount NVIDIA libs when NVIDIA
          is used
        - packaging/fedora: Add Fedora 26, 27, and Rawhide symlinks
        - overlord/snapstate: prefer a smaller corner case for doing the
          wrong thing
        - cmd/snap-repair:  set user agent for snap-repair http requests
        - packaging: bring down the delta between 14.04 and 16.04
        - snap-confine: Ensure lib64 biarch directory is respected
        - snap-confine: update apparmor rules for fedora based base snaps
        - tests: Increase SNAPD_CONFIGURE_HOOK_TIMEOUT to 3 minutes to
          install real snaps
        - daemon: use client.Snap instead of map[string]interface{} for
          snaps.
        - hooks: rename refresh hook to post-refresh
        - git: make the .gitingore file a bit more targeted
        - interfaces/opengl: don't udev tag nvidia devices and use snap-
          confine instead
        - cmd/snap-{confine,update-ns}: apply mount profiles using snap-
          update-ns
        - cmd: update "make hack"
        - interfaces/system-observe: allow clients to enumerate DBus
          connection names
        - snap-repair: implement `snap-repair {list,show}`
        - dirs,interfaces: create snap-confine.d on demand when re-executing
        - snap-confine: fix base snaps on core
        - cmd/snap-repair: fix tests when running as root
        - interfaces: add Connection type
        - cmd/snap-repair: skip disabled repairs
        - cmd/snap-repair: prefer leaking unmanaged fds on test failure over
          closing random ones
        - snap-repair: make `repair` binary available for repair scripts
        - snap-repair: fix missing Close() in TestStatusHappy
        - cmd/snap-confine,packaging: import snapd-generated policy
        - cmd/snap: return empty document if snap has no configuration
        - snap-seccomp: run secondary-arch tests via gcc-multilib
        - snap: implement `snap {repair,repairs}` and pass-through to snap-
          repair
        - interfaces/builtin: allow receiving dbus messages
        - snap-repair: implement `snap-repair {done,skip,retry}`
        - data/completion: small tweak to snap completion snippet
        - dirs: fix classic support detection
        - cmd/snap-repair: integrate root public keys for repairs
        - tests: fix ubuntu core services
        - tests: add new test that checks that the compat snapd-xdg-open
          works
        - snap-confine: improve error message if core/u-core cannot be found
        - tests: only run tests/regression/nmcli on amd64
        - interfaces: mount host system fonts in desktop interface
        - interfaces: enable partial apparmor support
        - snapstate: auto-install missing base snaps
        - spread: work around temporary packaging issue in debian sid
        - asserts,cmd/snap-repair: introduce a mandatory summary for repairs
        - asserts,cmd/snap-repair: represent RepairID internally as an int
        - tests: test the real "xdg-open" from the core snap
        - many: implement fetching sections and package names periodically.
        - interfaces/network: allow using netcat as client
        - snap-seccomp, osutil: use osutil.AtomicFile in snap-seccomp
        - snap-seccomp: skip mknod syscall on arm64
        - tests: add trivial canonical-livepatch test
        - tests: add test that ensures that all core services are working
        - many: add logger.MockLogger() and use it in the tests
        - snap-repair: fix test failure in TestRepairHitsTimeout
        - asserts: add empty values check in HeadersFromPrimaryKey
        - daemon: remove unused installSnap var in test
        - daemon: reach for Overlord.Loop less thanks to overlord.Mock
        - snap-seccomp: manually resolve socket() call in tests
        - tests: change regex used to validate installed ubuntu core snap
        - cmd/snapctl: allow snapctl -h without a context (regression fix).
        - many: use snapcore/snapd/i18n instead of i18n/dumb
        - many: introduce asserts.NotFoundError replacing both ErrNotFound
          and store.AssertionNotFoundError
        - packaging: don't include any marcos in comments
        - overlord: use overlord.Mock in more tests, make sure we check the
          outcome of Settle
        - tests: try to fix staging tests
        - store: simplify api base url config
        - systemd: add systemd.MockJournalctl()
        - many: provide systemd.MockSystemctl() helper
        - tests: improve the listing test to not fail for e.g. 2.28~rc2
        - snapstate: give snapmgrTestSuite.settle() more time to settle
        - tests: fix regex to check core version on snap list
        - debian: update trusted account-keys check on 14.04 packaging
        - interfaces: add udev netlink support to hardware-observe
        - overlord: introduce Mock which enables to use Overlord.Settle for
          settle in many more places
        - snap-repair: execute the repair and capture logs/status
        - tests: run the tests/unit/go everywhere
        - daemon, snapstate: move ensureCore from daemon/api.go into
          snapstate.go
        - cmd/snap: get keys or root document
        - spread.yaml: turn suse to manual given that it's breaking master
        - many: configure store from state, reconfigure store at runtime
        - osutil: AtomicWriter (an io.Writer), and io.Reader versions of
          AtomicWrite*
        - tests: check for negative syscalls in runBpf() and skip those
          tests
        - docs: use abolute path in PULL_REQUEST_TEMPLATE.md
        - store: move device auth endpoint uris to config (#3831)
    
     -- Michael Vogt <email address hidden>  Tue, 28 Nov 2017 07:45:23 +0100
  • snapd (2.29.4) xenial; urgency=medium
    
      * New upstream release, LP: #1726258
        - snap-confine: fix snap-confine under lxd
        - tests: disable classic-ubuntu-core-transition on i386 temporarly
        - many: reject bad plugs/slots
        - interfaces,tests: skip unknown plug/slot interfaces
        - store: enable "base" field from the store
        - packaging/fedora: Merge changes from Fedora Dist-Git
    
    snapd (2.29.3) xenial; urgency=medium
    
      * New upstream release, LP: #1726258
        - daemon: cherry-picked /v2/logs fixes
        - cmd/snap-confine: Respect biarch nature of libdirs
        - cmd/snap-confine: Ensure snap-confine is allowed to access os-
          release
        - interfaces: fix udev tagging for hooks
        - cmd: fix re-exec bug with classic confinement for host snapd
        - tests: disable xdg-open-compat test
        - cmd/snap-confine: add slave PTYs and let devpts newinstance
          perform mediation
        - interfaces/many: misc policy updates for browser-support, cups-
          control and network-status
        - interfaces/raw-usb: match on SUBSYSTEM, not SUBSYSTEMS
        - tests: fix security-device-cgroup* tests on devices with
          framebuffer
    
    snapd (2.29.2) xenial; urgency=medium
    
      * New upstream release, LP: #1726258
        - snapctl: disable stop/start/restart (2.29)
        - cmd/snap-update-ns: fix collection of changes made
    
    snapd (2.29.1) xenial; urgency=medium
    
      * New upstream release, LP: #1726258
        - interfaces: fix incorrect signature of ofono DBusPermanentSlot
        - interfaces/serial-port: udev tag plugged slots that have just
          'path' via KERNEL
        - interfaces/hidraw: udev tag plugged slots that have just 'path'
          via KERNEL
        - interfaces/uhid: unconditionally add existing uhid device to the
          device cgroup
        - cmd/snap-update-ns: fix mount rules for font sharing
        - tests: disable refresh-undo test on trusty for now
        - tests: use `snap change --last=install` in snapd-reexec test
        - Revert " wrappers: fail install if exec-line cannot be re-written
        - interfaces: don't udev tag devmode or classic snaps
        - many: make ignore-validation sticky and send the flag with refresh
          requests
    
    snapd (2.29) xenial; urgency=medium
    
      * New upstream release, LP: #1726258
        - interfaces/many: miscellaneous updates based on feedback from the
          field
        - snap-confine: allow reading uevents from any where in /sys
        - spread: add bionic beaver
        - debian: make packaging/ubuntu-14.04/copyright a real file again
        - tests: cherry pick the fix for services test into 2.29
        - cmd/snap-update-ns: initialize logger
        - hooks/configure: queue service restarts
        - snap-{confine,seccomp}: make @unrestricted fully unrestricted
        - interfaces: clean system apparmor cache on core device
        - debian: do not build static snap-exec on powerpc
        - snap-confine: increase sanity_timeout to 6s
        - snapctl: cherry pick service commands changes
        - cmd/snap: tell translators about arg names and descs req's
        - systemd: run all mount units before snapd.service to avoid race
        - store: add a test to show auth failures are forwarded by doRequest
        - daemon: convert ErrInvalidCredentials to a 401 Unauthorized error.
        - store: forward on INVALID_CREDENTIALS error as
          ErrInvalidCredentials
        - daemon: generate a forbidden response message if polkit dialog is
          dismissed
        - daemon: Allow Polkit authorization to cancel changes.
        - travis: switch to container based test runs
        - interfaces: reduce duplicated code in interface tests mocks
        - tests: improve revert related testing
        - interfaces: sanitize plugs and slots early in ReadInfo
        - store: add download caching
        - preserve TMPDIR and HOSTALIASES across snap-confine invocation
        - snap-confine: init all arrays with `= {0,}`
        - tests: adding test for network-manager interface
        - interfaces/mount: don't generate legacy per-hook/per-app mount
          profiles
        - snap: introduce structured epochs
        - tests: fix interfaces-cups-control test for cups-2.2.5
        - snap-confine: cleanup incorrectly created nvidia udev tags
        - cmd/snap-confine: update valid security tag regexp
        - cmd/libsnap: enable two stranded tests
        - cmd,packaging: enable apparmor on openSUSE
        - overlord/ifacestate: refresh all security backends on startup
        - interfaces/dbus: drop unneeded check for
          release.ReleaseInfo.ForceDevMode
        - dbus: ensure io.snapcraft.Launcher.service is created on re-
          exec
        - overlord/auth: continue for now supporting UBUNTU_STORE_ID if the
          model is generic-classic
        - snap-confine: add support for handling /dev/nvidia-modeset
        - interfaces/network-control: remove incorrect rules for tun
        - spread: allow setting SPREAD_DEBUG_EACH=0 to disable debug-each
          section
        - packaging: remove .mnt files on removal
        - tests: fix econnreset scenario when the iptables rule was not
          created
        - tests: add test for lxd interface
        - run-checks: use nakedret static checker to check for naked
          returns on long functions
        - progress: be more flexible in testing ansimeter
        - interfaces: fix udev rules for tun
        - many: implement our own ANSI-escape-using progress indicator
        - snap-exec: update tests to follow main_test pattern
        - snap: support "command: foo $ENV_STRING"
        - packaging: update nvidia configure options
        - snap: add new `snap pack` and use in tests
        - cmd: correctly name the "Ubuntu" and "Arch" NVIDIA methods
        - cmd: add autogen case for solus
        - tests: do not use http://canihazip.com/ which appears to be down
        - hooks: commands for controlling own services from snapctl
        - snap: refactor cmdGet.Execute()
        - interfaces/mount: make Change.Perform testable and test it
        - interfaces/mount,cmd/snap-update-ns: move change code
        - snap-confine: is_running_on_classic_distribution() looks into os-
          release
        - interfaces: misc updates for default, browser-support, home and
          system-observe
        - interfaces: deny lttng by default
        - interfaces/lxd: lxd slot implementation can also be an app snap
        - release,cmd,dirs: Redo the distro checks to take into account
          distribution families
        - cmd/snap: completion for alias and unalias
        - snap-confine: add new SC_CLEANUP and use it
        - snap: refrain from running filepath.Base on random strings
        - cmd/snap-confine: put processes into freezer hierarchy
        - wrappers: fail install if exec-line cannot be re-written
        - cmd/snap-seccomp,osutil: make user/group lookup functions public
        - snapstate: deal with snap user data in the /root/ directory
        - interfaces: Enhance full-confinement support for biarch
          distributions
        - snap-confine: Only attempt to copy/mount NVIDIA libs when NVIDIA
          is used
        - packaging/fedora: Add Fedora 26, 27, and Rawhide symlinks
        - overlord/snapstate: prefer a smaller corner case for doing the
          wrong thing
        - cmd/snap-repair:  set user agent for snap-repair http requests
        - packaging: bring down the delta between 14.04 and 16.04
        - snap-confine: Ensure lib64 biarch directory is respected
        - snap-confine: update apparmor rules for fedora based base snaps
        - tests: Increase SNAPD_CONFIGURE_HOOK_TIMEOUT to 3 minutes to
          install real snaps
        - daemon: use client.Snap instead of map[string]interface{} for
          snaps.
        - hooks: rename refresh hook to post-refresh
        - git: make the .gitingore file a bit more targeted
        - interfaces/opengl: don't udev tag nvidia devices and use snap-
          confine instead
        - cmd/snap-{confine,update-ns}: apply mount profiles using snap-
          update-ns
        - cmd: update "make hack"
        - interfaces/system-observe: allow clients to enumerate DBus
          connection names
        - snap-repair: implement `snap-repair {list,show}`
        - dirs,interfaces: create snap-confine.d on demand when re-executing
        - snap-confine: fix base snaps on core
        - cmd/snap-repair: fix tests when running as root
        - interfaces: add Connection type
        - cmd/snap-repair: skip disabled repairs
        - cmd/snap-repair: prefer leaking unmanaged fds on test failure over
          closing random ones
        - snap-repair: make `repair` binary available for repair scripts
        - snap-repair: fix missing Close() in TestStatusHappy
        - cmd/snap-confine,packaging: import snapd-generated policy
        - cmd/snap: return empty document if snap has no configuration
        - snap-seccomp: run secondary-arch tests via gcc-multilib
        - snap: implement `snap {repair,repairs}` and pass-through to snap-
          repair
        - interfaces/builtin: allow receiving dbus messages
        - snap-repair: implement `snap-repair {done,skip,retry}`
        - data/completion: small tweak to snap completion snippet
        - dirs: fix classic support detection
        - cmd/snap-repair: integrate root public keys for repairs
        - tests: fix ubuntu core services
        - tests: add new test that checks that the compat snapd-xdg-open
          works
        - snap-confine: improve error message if core/u-core cannot be found
        - tests: only run tests/regression/nmcli on amd64
        - interfaces: mount host system fonts in desktop interface
        - interfaces: enable partial apparmor support
        - snapstate: auto-install missing base snaps
        - spread: work around temporary packaging issue in debian sid
        - asserts,cmd/snap-repair: introduce a mandatory summary for repairs
        - asserts,cmd/snap-repair: represent RepairID internally as an int
        - tests: test the real "xdg-open" from the core snap
        - many: implement fetching sections and package names periodically.
        - interfaces/network: allow using netcat as client
        - snap-seccomp, osutil: use osutil.AtomicFile in snap-seccomp
        - snap-seccomp: skip mknod syscall on arm64
        - tests: add trivial canonical-livepatch test
        - tests: add test that ensures that all core services are working
        - many: add logger.MockLogger() and use it in the tests
        - snap-repair: fix test failure in TestRepairHitsTimeout
        - asserts: add empty values check in HeadersFromPrimaryKey
        - daemon: remove unused installSnap var in test
        - daemon: reach for Overlord.Loop less thanks to overlord.Mock
        - snap-seccomp: manually resolve socket() call in tests
        - tests: change regex used to validate installed ubuntu core snap
        - cmd/snapctl: allow snapctl -h without a context (regression fix).
        - many: use snapcore/snapd/i18n instead of i18n/dumb
        - many: introduce asserts.NotFoundError replacing both ErrNotFound
          and store.AssertionNotFoundError
        - packaging: don't include any marcos in comments
        - overlord: use overlord.Mock in more tests, make sure we check the
          outcome of Settle
        - tests: try to fix staging tests
        - store: simplify api base url config
        - systemd: add systemd.MockJournalctl()
        - many: provide systemd.MockSystemctl() helper
        - tests: improve the listing test to not fail for e.g. 2.28~rc2
        - snapstate: give snapmgrTestSuite.settle() more time to settle
        - tests: fix regex to check core version on snap list
        - debian: update trusted account-keys check on 14.04 packaging
        - interfaces: add udev netlink support to hardware-observe
        - overlord: introduce Mock which enables to use Overlord.Settle for
          settle in many more places
        - snap-repair: execute the repair and capture logs/status
        - tests: run the tests/unit/go everywhere
        - daemon, snapstate: move ensureCore from daemon/api.go into
          snapstate.go
        - cmd/snap: get keys or root document
        - spread.yaml: turn suse to manual given that it's breaking master
        - many: configure store from state, reconfigure store at runtime
        - osutil: AtomicWriter (an io.Writer), and io.Reader versions of
          AtomicWrite*
        - tests: check for negative syscalls in runBpf() and skip those
          tests
        - docs: use abolute path in PULL_REQUEST_TEMPLATE.md
        - store: move device auth endpoint uris to config (#3831)
    
     -- Michael Vogt <email address hidden>  Fri, 17 Nov 2017 22:55:09 +0100
  • snapd (2.29.3) xenial; urgency=medium
    
      * New upstream release, LP: #1726258
        - daemon: cherry-picked /v2/logs fixes
        - cmd/snap-confine: Respect biarch nature of libdirs
        - cmd/snap-confine: Ensure snap-confine is allowed to access os-
          release
        - interfaces: fix udev tagging for hooks
        - cmd: fix re-exec bug with classic confinement for host snapd
        - tests: disable xdg-open-compat test
        - cmd/snap-confine: add slave PTYs and let devpts newinstance
          perform mediation
        - interfaces/many: misc policy updates for browser-support, cups-
          control and network-status
        - interfaces/raw-usb: match on SUBSYSTEM, not SUBSYSTEMS
        - tests: fix security-device-cgroup* tests on devices with
          framebuffer
    
    snapd (2.29.2) xenial; urgency=medium
    
      * New upstream release, LP: #1726258
        - snapctl: disable stop/start/restart (2.29)
        - cmd/snap-update-ns: fix collection of changes made
    
    snapd (2.29.1) xenial; urgency=medium
    
      * New upstream release, LP: #1726258
        - interfaces: fix incorrect signature of ofono DBusPermanentSlot
        - interfaces/serial-port: udev tag plugged slots that have just
          'path' via KERNEL
        - interfaces/hidraw: udev tag plugged slots that have just 'path'
          via KERNEL
        - interfaces/uhid: unconditionally add existing uhid device to the
          device cgroup
        - cmd/snap-update-ns: fix mount rules for font sharing
        - tests: disable refresh-undo test on trusty for now
        - tests: use `snap change --last=install` in snapd-reexec test
        - Revert " wrappers: fail install if exec-line cannot be re-written
        - interfaces: don't udev tag devmode or classic snaps
        - many: make ignore-validation sticky and send the flag with refresh
          requests
    
    snapd (2.29) xenial; urgency=medium
    
      * New upstream release, LP: #1726258
        - interfaces/many: miscellaneous updates based on feedback from the
          field
        - snap-confine: allow reading uevents from any where in /sys
        - spread: add bionic beaver
        - debian: make packaging/ubuntu-14.04/copyright a real file again
        - tests: cherry pick the fix for services test into 2.29
        - cmd/snap-update-ns: initialize logger
        - hooks/configure: queue service restarts
        - snap-{confine,seccomp}: make @unrestricted fully unrestricted
        - interfaces: clean system apparmor cache on core device
        - debian: do not build static snap-exec on powerpc
        - snap-confine: increase sanity_timeout to 6s
        - snapctl: cherry pick service commands changes
        - cmd/snap: tell translators about arg names and descs req's
        - systemd: run all mount units before snapd.service to avoid race
        - store: add a test to show auth failures are forwarded by doRequest
        - daemon: convert ErrInvalidCredentials to a 401 Unauthorized error.
        - store: forward on INVALID_CREDENTIALS error as
          ErrInvalidCredentials
        - daemon: generate a forbidden response message if polkit dialog is
          dismissed
        - daemon: Allow Polkit authorization to cancel changes.
        - travis: switch to container based test runs
        - interfaces: reduce duplicated code in interface tests mocks
        - tests: improve revert related testing
        - interfaces: sanitize plugs and slots early in ReadInfo
        - store: add download caching
        - preserve TMPDIR and HOSTALIASES across snap-confine invocation
        - snap-confine: init all arrays with `= {0,}`
        - tests: adding test for network-manager interface
        - interfaces/mount: don't generate legacy per-hook/per-app mount
          profiles
        - snap: introduce structured epochs
        - tests: fix interfaces-cups-control test for cups-2.2.5
        - snap-confine: cleanup incorrectly created nvidia udev tags
        - cmd/snap-confine: update valid security tag regexp
        - cmd/libsnap: enable two stranded tests
        - cmd,packaging: enable apparmor on openSUSE
        - overlord/ifacestate: refresh all security backends on startup
        - interfaces/dbus: drop unneeded check for
          release.ReleaseInfo.ForceDevMode
        - dbus: ensure io.snapcraft.Launcher.service is created on re-
          exec
        - overlord/auth: continue for now supporting UBUNTU_STORE_ID if the
          model is generic-classic
        - snap-confine: add support for handling /dev/nvidia-modeset
        - interfaces/network-control: remove incorrect rules for tun
        - spread: allow setting SPREAD_DEBUG_EACH=0 to disable debug-each
          section
        - packaging: remove .mnt files on removal
        - tests: fix econnreset scenario when the iptables rule was not
          created
        - tests: add test for lxd interface
        - run-checks: use nakedret static checker to check for naked
          returns on long functions
        - progress: be more flexible in testing ansimeter
        - interfaces: fix udev rules for tun
        - many: implement our own ANSI-escape-using progress indicator
        - snap-exec: update tests to follow main_test pattern
        - snap: support "command: foo $ENV_STRING"
        - packaging: update nvidia configure options
        - snap: add new `snap pack` and use in tests
        - cmd: correctly name the "Ubuntu" and "Arch" NVIDIA methods
        - cmd: add autogen case for solus
        - tests: do not use http://canihazip.com/ which appears to be down
        - hooks: commands for controlling own services from snapctl
        - snap: refactor cmdGet.Execute()
        - interfaces/mount: make Change.Perform testable and test it
        - interfaces/mount,cmd/snap-update-ns: move change code
        - snap-confine: is_running_on_classic_distribution() looks into os-
          release
        - interfaces: misc updates for default, browser-support, home and
          system-observe
        - interfaces: deny lttng by default
        - interfaces/lxd: lxd slot implementation can also be an app snap
        - release,cmd,dirs: Redo the distro checks to take into account
          distribution families
        - cmd/snap: completion for alias and unalias
        - snap-confine: add new SC_CLEANUP and use it
        - snap: refrain from running filepath.Base on random strings
        - cmd/snap-confine: put processes into freezer hierarchy
        - wrappers: fail install if exec-line cannot be re-written
        - cmd/snap-seccomp,osutil: make user/group lookup functions public
        - snapstate: deal with snap user data in the /root/ directory
        - interfaces: Enhance full-confinement support for biarch
          distributions
        - snap-confine: Only attempt to copy/mount NVIDIA libs when NVIDIA
          is used
        - packaging/fedora: Add Fedora 26, 27, and Rawhide symlinks
        - overlord/snapstate: prefer a smaller corner case for doing the
          wrong thing
        - cmd/snap-repair:  set user agent for snap-repair http requests
        - packaging: bring down the delta between 14.04 and 16.04
        - snap-confine: Ensure lib64 biarch directory is respected
        - snap-confine: update apparmor rules for fedora based base snaps
        - tests: Increase SNAPD_CONFIGURE_HOOK_TIMEOUT to 3 minutes to
          install real snaps
        - daemon: use client.Snap instead of map[string]interface{} for
          snaps.
        - hooks: rename refresh hook to post-refresh
        - git: make the .gitingore file a bit more targeted
        - interfaces/opengl: don't udev tag nvidia devices and use snap-
          confine instead
        - cmd/snap-{confine,update-ns}: apply mount profiles using snap-
          update-ns
        - cmd: update "make hack"
        - interfaces/system-observe: allow clients to enumerate DBus
          connection names
        - snap-repair: implement `snap-repair {list,show}`
        - dirs,interfaces: create snap-confine.d on demand when re-executing
        - snap-confine: fix base snaps on core
        - cmd/snap-repair: fix tests when running as root
        - interfaces: add Connection type
        - cmd/snap-repair: skip disabled repairs
        - cmd/snap-repair: prefer leaking unmanaged fds on test failure over
          closing random ones
        - snap-repair: make `repair` binary available for repair scripts
        - snap-repair: fix missing Close() in TestStatusHappy
        - cmd/snap-confine,packaging: import snapd-generated policy
        - cmd/snap: return empty document if snap has no configuration
        - snap-seccomp: run secondary-arch tests via gcc-multilib
        - snap: implement `snap {repair,repairs}` and pass-through to snap-
          repair
        - interfaces/builtin: allow receiving dbus messages
        - snap-repair: implement `snap-repair {done,skip,retry}`
        - data/completion: small tweak to snap completion snippet
        - dirs: fix classic support detection
        - cmd/snap-repair: integrate root public keys for repairs
        - tests: fix ubuntu core services
        - tests: add new test that checks that the compat snapd-xdg-open
          works
        - snap-confine: improve error message if core/u-core cannot be found
        - tests: only run tests/regression/nmcli on amd64
        - interfaces: mount host system fonts in desktop interface
        - interfaces: enable partial apparmor support
        - snapstate: auto-install missing base snaps
        - spread: work around temporary packaging issue in debian sid
        - asserts,cmd/snap-repair: introduce a mandatory summary for repairs
        - asserts,cmd/snap-repair: represent RepairID internally as an int
        - tests: test the real "xdg-open" from the core snap
        - many: implement fetching sections and package names periodically.
        - interfaces/network: allow using netcat as client
        - snap-seccomp, osutil: use osutil.AtomicFile in snap-seccomp
        - snap-seccomp: skip mknod syscall on arm64
        - tests: add trivial canonical-livepatch test
        - tests: add test that ensures that all core services are working
        - many: add logger.MockLogger() and use it in the tests
        - snap-repair: fix test failure in TestRepairHitsTimeout
        - asserts: add empty values check in HeadersFromPrimaryKey
        - daemon: remove unused installSnap var in test
        - daemon: reach for Overlord.Loop less thanks to overlord.Mock
        - snap-seccomp: manually resolve socket() call in tests
        - tests: change regex used to validate installed ubuntu core snap
        - cmd/snapctl: allow snapctl -h without a context (regression fix).
        - many: use snapcore/snapd/i18n instead of i18n/dumb
        - many: introduce asserts.NotFoundError replacing both ErrNotFound
          and store.AssertionNotFoundError
        - packaging: don't include any marcos in comments
        - overlord: use overlord.Mock in more tests, make sure we check the
          outcome of Settle
        - tests: try to fix staging tests
        - store: simplify api base url config
        - systemd: add systemd.MockJournalctl()
        - many: provide systemd.MockSystemctl() helper
        - tests: improve the listing test to not fail for e.g. 2.28~rc2
        - snapstate: give snapmgrTestSuite.settle() more time to settle
        - tests: fix regex to check core version on snap list
        - debian: update trusted account-keys check on 14.04 packaging
        - interfaces: add udev netlink support to hardware-observe
        - overlord: introduce Mock which enables to use Overlord.Settle for
          settle in many more places
        - snap-repair: execute the repair and capture logs/status
        - tests: run the tests/unit/go everywhere
        - daemon, snapstate: move ensureCore from daemon/api.go into
          snapstate.go
        - cmd/snap: get keys or root document
        - spread.yaml: turn suse to manual given that it's breaking master
        - many: configure store from state, reconfigure store at runtime
        - osutil: AtomicWriter (an io.Writer), and io.Reader versions of
          AtomicWrite*
        - tests: check for negative syscalls in runBpf() and skip those
          tests
        - docs: use abolute path in PULL_REQUEST_TEMPLATE.md
        - store: move device auth endpoint uris to config (#3831)
    
     -- Michael Vogt <email address hidden>  Thu, 09 Nov 2017 19:16:29 +0100
  • snapd (2.28.5) xenial; urgency=medium
    
      * New upstream release, LP: #1714984
        - snap-confine: cleanup broken nvidia udev tags
        - cmd/snap-confine: update valid security tag regexp
        - overlord/ifacestate: refresh udev backend on startup
        - dbus: ensure io.snapcraft.Launcher.service is created on re-
          exec
        - snap-confine: add support for handling /dev/nvidia-modeset
        - interfaces/network-control: remove incorrect rules for tun
    
    snapd (2.28.4) xenial; urgency=medium
    
      * New upstream release, LP: #1714984
        - interfaces/opengl: don't udev tag nvidia devices and use snap-
          confine instead
        - debian: fix replaces/breaks for snap-xdg-open (thanks to apw!)
    
    snapd (2.28.3) xenial; urgency=medium
    
      * New upstream release, LP: #1714984
        - interfaces/lxd: lxd slot implementation can also be an app
          snap
    
    snapd (2.28.2) xenial; urgency=medium
    
      * New upstream release, LP: #1714984
        - interfaces: fix udev rules for tun
        - release,cmd,dirs: Redo the distro checks to take into account
          distribution families
    
    snapd (2.28.1) xenial; urgency=medium
    
      * New upstream release, LP: #1714984
        - snap-confine: update apparmor rules for fedora based basesnaps
        - snapstate: rename refresh hook to post-refresh for consistency
    
    snapd (2.28) xenial; urgency=medium
    
      * New upstream release, LP: #1714984
        - hooks: rename refresh to after-refresh
        - snap-confine: bind mount /usr/lib/snapd relative to snap-confine
        - cmd,dirs: treat "liri" the same way as "arch"
        - snap-confine: fix base snaps on core
        - hooks: substitute env vars when executing hooks
        - interfaces: updates for default, browser-support, desktop, opengl,
          upower and stub-resolv.conf
        - cmd,dirs: treat manjaro the same as arch
        - systemd: do not run auto-import and repair services on classic
        - packaging/fedora: Ensure vendor/ is empty for builds and fix spec
          to build current master
        - many: fix TestSetConfNumber missing an Unlock and other fragility
          improvements
        - osutil: adjust StreamCommand tests for golang 1.9
        - daemon: allow polkit authorisation to install/remove snaps
        - tests: make TestCmdWatch more robust
        - debian: improve package description
        - interfaces: add netlink kobject uevent to hardware observe
        - debian: update trusted account-keys check on 14.04 packaging
        - interfaces/network-{control,observe}: allow receiving
          kobject_uevent() messages
        - tests: fix lxd test for external backend
        - snap-confine,snap-update-ns: add -no-pie to fix FTBFS on
          go1.7,ppc64
        - corecfg: mock "systemctl" in all corecfg tests
        - tests: fix unit tests on Ubuntu 14.04
        - debian: add missing flags when building static snap-exec
        - many: end-to-end support for the bare base snap
        - overlord/snapstate: SetRootDir from SetUpTest, not in just some
          tests
        - store: have an ad-hoc method on cfg to get its list of uris for
          tests
        - daemon: let client decide whether to allow interactive auth via
          polkit
        - client,daemon,snap,store: add license field
        - overlord/snapstate: rename HasCurrent to IsInstalled, remove
          superfluous/misleading check from All
        - cmd/snap: SetRootDir from SetUpTest, not in just some individual
          tests.
        - systemd: rename snap-repair.{service,timer} to snapd.snap-
          repair.{service,timer}
        - snap-seccomp: remove use of x/net/bpf from tests
        - httputil: more naive per go version way to recreate a default
          transport for tls reconfig
        - cmd/snap-seccomp/main_test.go: add one more syscall for arm64
        - interfaces/opengl: use == to compare, not =
        - cmd/snap-seccomp/main_test.go: add syscalls for armhf and arm64
        - cmd/snap-repair: track and use a lower bound for the time for
          TLS checks
        - interfaces: expose bluez interface on classic OS
        - snap-seccomp: add in-kernel bpf tests
        - overlord: always try to get a serial, lazily on classic
        - tests: add nmcli regression test
        - tests: deal with __PNR_chown on aarch64 to fix FTBFS on arm64
        - tests: add autopilot-introspection interface test
        - vendor: fix artifact from manually editing vendor/vendor.json
        - tests: rename complexion to test-snapd-complexion
        - interfaces: add desktop and desktop-legacy
          interfaces/desktop: add new 'desktop' interface for modern DEs
          interfaces/builtin/desktop_test.go: use modern testing techniques
          interfaces/wayland: allow read on /etc/drirc for Plasma desktop
          interfaces/desktop-legacy: add new 'legacy' interface (currently
          for a11y and input)
        - tests: fix race in snap userd test
        - devices/iio: add read/write for missing sysfs entries
        - spread: don't set HTTPS?_PROXY for linode
        - cmd/snap-repair: check signatures of repairs from Next
        - env: set XDG_DATA_DIRS for wayland et.al.
        - interfaces/{default,account-control}: Use username/group instead
          of uid/gid
        - interfaces/builtin: use udev tagging more broadly
        - tests: add basic lxd test
        - wrappers: ensure bash completion snaps install on core
        - vendor: use old golang.org/x/crypto/ssh/terminal to build on
          powerpc again
        - docs: add PULL_REQUEST_TEMPLATE.md
        - interfaces: fix network-manager plug
        - hooks: do not error out when hook is optional and no hook handler
          is registered
        - cmd/snap: add userd command to replace snapd-xdg-open
        - tests: new regex used to validate the core version on extra snaps
          ass...
        - snap: add new `snap switch` command
        - tests: wait more and more debug info about fakestore start issues
        - apparmor,release: add better apparmor detection/mocking code
        - interfaces/i2c: adjust sysfs rule for alternate paths
        - interfaces/apparmor: add missing call to dirs.SetRootDir
        - cmd: "make hack" now also installs snap-update-ns
        - tests: copy files with less verbosity
        - cmd/snap-confine: allow using additional libraries required by
          openSUSE
        - packaging/fedora: Merge changes from Fedora Dist-Git
        - snapstate: improve the error message when classic confinement is
          not supported
        - tests: add test to ensure amd64 can run i386 syscall binaries
        - tests: adding extra info for fakestore when fails to start
        - tests: install most important snaps
        - cmd/snap-repair: more test coverage of filtering
        - squashfs: remove runCommand/runCommandWithOutput as we do not need
          it
        - cmd/snap-repair: ignore superseded revisions, filter on arch and
          models
        - hooks: support for refresh hook
        - Partial revert "overlord/devicestate, store: update device auth
          endpoints URLs"
        - cmd/snap-confine: allow reading /proc/filesystems
        - cmd/snap-confine: genearlize apparmor profile for various lib
          layout
        - corecfg: fix proxy.* writing and add integration test
        - corecfg: deal with system.power-key-action="" correctly
        - vendor: update vendor.json after (presumed) manual edits
        - cmd/snap: in `snap info`, don't print a newline between tracks
        - daemon: add polkit support to /v2/login
        - snapd,snapctl: decode json using Number
        - client: fix go vet 1.7 errors
        - tests: make 17.04 shellcheck clean
        - tests: remove TestInterfacesHelp as it breaks when go-flags
          changes
        - snapstate: undo a daemon restart on classic if needed
        - cmd/snap-repair: recover brand/model from
          /var/lib/snapd/seed/assertions checking signatures and brand
          account
        - spread: opt into unsafe IO during spread tests
        - snap-repair: update snap-repair/runner_test.go for API change in
          makeMockServer
        - cmd/snap-repair: skeleton code around actually running a repair
        - tests: wait until the port is listening after start the fake store
        - corecfg: fix typo in tests
        - cmd/snap-repair: test that redirects works during fetching
        - osutil: honor SNAPD_UNSAFE_IO for testing
        - vendor: explode and make more precise our golang.go/x/crypto deps,
          use same version as Debian unstable
        - many: sanitize NewStoreStack signature, have shared default store
          test private keys
        - systemd: disable `Nice=-5` to fix error when running inside lxd
        - spread.yaml: update delta ref to 2.27
        - cmd/snap-repair: use E-Tags when refetching a repair to retry
        - interfaces/many: updates based on chromium and mrrescue denials
        - cmd/snap-repair: implement most logic to get the next repair to
          run/retry in a brand sequence
        - asserts/assertstest: copy headers in SigningDB.Sign
        - interfaces: convert uhid to common interface and test cases
          improvement for time_control and opengl
        - many tests: move all panicing fake store methods to a common place
        - asserts: add store assertion type
        - interfaces: don't crash if content slot has no attributes
        - debian: do not build with -buildmode=pie on i386
        - wrappers: symlink completion snippets when symlinking binaries
        - tests: adding more debug information for the interfaces-cups-
          control …
        - apparmor: pass --quiet to parser on load unless SNAPD_DEBUG is set
        - many: allow and support serials signed by the 'generic' authority
          instead of the brand
        - corecfg: add proxy configuration via `snap set core
          proxy.{http,https,ftp}=...`
        - interfaces: a bunch of interfaces test improvement
        - tests: enable regression and completion suites for opensuse
        - tests: installing snapd for nested test suite
        - interfaces: convert lxd_support to common iface
        - interfaces: add missing test for camera interface.
        - snap: add support for parsing snap layout section
        - cmd/snap-repair: like for downloads we cannot have a timeout (at
          least for now), less aggressive retry strategies
        - overlord: rely on more conservative ensure interval
        - overlord,store: no piles of return args for methods gathering
          device session request params
        - overlord,store: send model assertion when setting up device
          sessions
        - interfaces/misc: updates for unity7/x11, browser-
          support, network-control and mount-observe
          interfaces/unity7,x11: update for NETLINK_KOBJECT_UEVENT
          interfaces/browser-support: update sysfs reads for
          newer browser versions, interfaces/network-control: rw for
          ieee80211 advanced wireless interfaces/mount-observe: allow read
          on sysfs entries for block devices
        - tests: use dnf --refresh install to avert stale cache
        - osutil: ensure TestLockUnlockWorks uses supported flock
        - interfaces: convert lxd to common iface
        - tests: restart snapd to ensure re-exec settings are applied
        - tests: fix interfaces-cups-control test
        - interfaces: improve and tweak bunch of interfaces test cases.
        - tests: adding extra worker for fedora
        - asserts,overlord/devicestate: support predefined assertions that
          don't establish foundational trust
        - interfaces: convert two hardware_random interfaces to common iface
        - interfaces: convert io_ports_control to common iface
        - tests: fix for  upgrade test on fedora
        - daemon, client, cmd/snap: implement snap start/stop/restart
        - cmd/snap-confine: set _FILE_OFFSET_BITS to 64
        - interfaces: covert framebuffer to commonInterface
        - interfaces: convert joystick to common iface
        - interfaces/builtin: add the spi interface
        - wrappers, overlord/snapstate/backend: make link-snap clean up on
          failure.
        - interfaces/wayland: add wayland interface
        - interfaces: convert kvm to common iface
        - tests: extend upower-observe test to cover snaps providing slots
        - tests: enable main suite for opensuse
        - interfaces: convert physical_memory_observe to common iface
        - interfaces: add missing test for optical_drive interface.
        - interfaces: convert physical_memory_control to common iface
        - interfaces: convert ppp to common iface
        - interfaces: convert time-control to common iface
        - tests: fix failover test
        - interfaces/builtin: rework for avahi interface
        - interfaces: convert broadcom-asic-control to common iface
        - snap/snapenv: document the use of CoreSnapMountDir for SNAP
        - packaging/arch: drop patches merged into master
        - cmd: fix mustUnsetenv docstring (thanks to Chipaca)
        - release: remove default from VERSION_ID
        - tests: enable regression, upgrade and completion test suites for
          fedora
        - tests: restore interfaces-account-control properly
        - overlord/devicestate, store: update device auth endpoints URLs
        - tests: fix install-hook test failure
        - tests: download core and ubuntu-core at most once
        - interfaces: add common support for udev
        - overlord/devicestate: fix, don't assume that the serial is backed
          by a 1-key chain
        - cmd/snap-confine: don't share /etc/nsswitch from host
        - store: do not resume a download when we already have the whole
          thing
        - many: implement "snap logs"
        - store: don't call useDeltas() twice in quick succession
        - interfaces/builtin: add kvm interface
        - snap/snapenv: always expect /snap for $SNAP
        - cmd: mark arch as non-reexecing distro
        - cmd: fix tests that assume /snap mount
        - gitignore: ignore more build artefacts
        - packaging: add current arch packaging
        - interfaces/unity7: allow receiving media key events in (at least)
          gnome-shell
        - interfaces/many, cmd/snap-confine: miscellaneous policy updates
        - interfaces/builtin: implement broadcom-asic-control interface
        - interfaces/builtin: reduce duplication and remove cruft in
          Sanitize{Plug,Slot}
        - tests: apply underscore convention for SNAPMOUNTDIR variable
        - interfaces/greengrass-support: adjust accesses now that have
          working snap
        - daemon, client, cmd/snap: implement "snap services"
        - tests: fix refresh tests not stopping fake store for fedora
        - many: add the interface command
        - overlord/snapstate/backend: some copydata improvements
        - many: support querying and completing assertion type names
        - interfaces/builtin: discard empty Validate{Plug,Slot}
        - cmd/snap-repair:  start of Runner, implement first pass of Peek
          and Fetch
        - tests: enable main suite on fedora
        - snap: do not always quote the snap info summary
        - vendor: update go-flags to address crash in "snap debug"
        - interfaces: opengl support pci device and vendor
        - many: start implenting "base" snap type on the snapd side
        - arch,release: map armv6 correctly
        - many: expose service status in 'snap info'
        - tests: add browser-support interface test
        - tests: disable snapd-notify for the external backend
        - interfaces: Add /run/uuid/request to openvswitch
        - interfaces: add password-manager-service implicit classic
          interface
        - cmd: rework reexec detection
        - cmd: fix re-exec bug when starting from snapd 2.21
        - tests: dependency packages installed during prepare-project
        - tests: remove unneeded check for re-exec in InternalToolPath()
        - cmd,tests: fix classic confinement confusing re-execution code
        - store: configurable base api
        - tests: fix how package lists are updated for opensuse and fedora
    
     -- Michael Vogt <email address hidden>  Fri, 13 Oct 2017 23:25:46 +0200
  • snapd (2.28.4) xenial; urgency=medium
    
      * New upstream release, LP: #1714984
        - interfaces/opengl: don't udev tag nvidia devices and use snap-
          confine instead
        - debian: fix replaces/breaks for snap-xdg-open (thanks to apw!)
    
    snapd (2.28.3) xenial; urgency=medium
    
      * New upstream release, LP: #1714984
        - interfaces/lxd: lxd slot implementation can also be an app
          snap
    
    snapd (2.28.2) xenial; urgency=medium
    
      * New upstream release, LP: #1714984
        - interfaces: fix udev rules for tun
        - release,cmd,dirs: Redo the distro checks to take into account
          distribution families
    
    snapd (2.28.1) xenial; urgency=medium
    
      * New upstream release, LP: #1714984
        - snap-confine: update apparmor rules for fedora based basesnaps
        - snapstate: rename refresh hook to post-refresh for consistency
    
    snapd (2.28) xenial; urgency=medium
    
      * New upstream release, LP: #1714984
        - hooks: rename refresh to after-refresh
        - snap-confine: bind mount /usr/lib/snapd relative to snap-confine
        - cmd,dirs: treat "liri" the same way as "arch"
        - snap-confine: fix base snaps on core
        - hooks: substitute env vars when executing hooks
        - interfaces: updates for default, browser-support, desktop, opengl,
          upower and stub-resolv.conf
        - cmd,dirs: treat manjaro the same as arch
        - systemd: do not run auto-import and repair services on classic
        - packaging/fedora: Ensure vendor/ is empty for builds and fix spec
          to build current master
        - many: fix TestSetConfNumber missing an Unlock and other fragility
          improvements
        - osutil: adjust StreamCommand tests for golang 1.9
        - daemon: allow polkit authorisation to install/remove snaps
        - tests: make TestCmdWatch more robust
        - debian: improve package description
        - interfaces: add netlink kobject uevent to hardware observe
        - debian: update trusted account-keys check on 14.04 packaging
        - interfaces/network-{control,observe}: allow receiving
          kobject_uevent() messages
        - tests: fix lxd test for external backend
        - snap-confine,snap-update-ns: add -no-pie to fix FTBFS on
          go1.7,ppc64
        - corecfg: mock "systemctl" in all corecfg tests
        - tests: fix unit tests on Ubuntu 14.04
        - debian: add missing flags when building static snap-exec
        - many: end-to-end support for the bare base snap
        - overlord/snapstate: SetRootDir from SetUpTest, not in just some
          tests
        - store: have an ad-hoc method on cfg to get its list of uris for
          tests
        - daemon: let client decide whether to allow interactive auth via
          polkit
        - client,daemon,snap,store: add license field
        - overlord/snapstate: rename HasCurrent to IsInstalled, remove
          superfluous/misleading check from All
        - cmd/snap: SetRootDir from SetUpTest, not in just some individual
          tests.
        - systemd: rename snap-repair.{service,timer} to snapd.snap-
          repair.{service,timer}
        - snap-seccomp: remove use of x/net/bpf from tests
        - httputil: more naive per go version way to recreate a default
          transport for tls reconfig
        - cmd/snap-seccomp/main_test.go: add one more syscall for arm64
        - interfaces/opengl: use == to compare, not =
        - cmd/snap-seccomp/main_test.go: add syscalls for armhf and arm64
        - cmd/snap-repair: track and use a lower bound for the time for
          TLS checks
        - interfaces: expose bluez interface on classic OS
        - snap-seccomp: add in-kernel bpf tests
        - overlord: always try to get a serial, lazily on classic
        - tests: add nmcli regression test
        - tests: deal with __PNR_chown on aarch64 to fix FTBFS on arm64
        - tests: add autopilot-introspection interface test
        - vendor: fix artifact from manually editing vendor/vendor.json
        - tests: rename complexion to test-snapd-complexion
        - interfaces: add desktop and desktop-legacy
          interfaces/desktop: add new 'desktop' interface for modern DEs
          interfaces/builtin/desktop_test.go: use modern testing techniques
          interfaces/wayland: allow read on /etc/drirc for Plasma desktop
          interfaces/desktop-legacy: add new 'legacy' interface (currently
          for a11y and input)
        - tests: fix race in snap userd test
        - devices/iio: add read/write for missing sysfs entries
        - spread: don't set HTTPS?_PROXY for linode
        - cmd/snap-repair: check signatures of repairs from Next
        - env: set XDG_DATA_DIRS for wayland et.al.
        - interfaces/{default,account-control}: Use username/group instead
          of uid/gid
        - interfaces/builtin: use udev tagging more broadly
        - tests: add basic lxd test
        - wrappers: ensure bash completion snaps install on core
        - vendor: use old golang.org/x/crypto/ssh/terminal to build on
          powerpc again
        - docs: add PULL_REQUEST_TEMPLATE.md
        - interfaces: fix network-manager plug
        - hooks: do not error out when hook is optional and no hook handler
          is registered
        - cmd/snap: add userd command to replace snapd-xdg-open
        - tests: new regex used to validate the core version on extra snaps
          ass...
        - snap: add new `snap switch` command
        - tests: wait more and more debug info about fakestore start issues
        - apparmor,release: add better apparmor detection/mocking code
        - interfaces/i2c: adjust sysfs rule for alternate paths
        - interfaces/apparmor: add missing call to dirs.SetRootDir
        - cmd: "make hack" now also installs snap-update-ns
        - tests: copy files with less verbosity
        - cmd/snap-confine: allow using additional libraries required by
          openSUSE
        - packaging/fedora: Merge changes from Fedora Dist-Git
        - snapstate: improve the error message when classic confinement is
          not supported
        - tests: add test to ensure amd64 can run i386 syscall binaries
        - tests: adding extra info for fakestore when fails to start
        - tests: install most important snaps
        - cmd/snap-repair: more test coverage of filtering
        - squashfs: remove runCommand/runCommandWithOutput as we do not need
          it
        - cmd/snap-repair: ignore superseded revisions, filter on arch and
          models
        - hooks: support for refresh hook
        - Partial revert "overlord/devicestate, store: update device auth
          endpoints URLs"
        - cmd/snap-confine: allow reading /proc/filesystems
        - cmd/snap-confine: genearlize apparmor profile for various lib
          layout
        - corecfg: fix proxy.* writing and add integration test
        - corecfg: deal with system.power-key-action="" correctly
        - vendor: update vendor.json after (presumed) manual edits
        - cmd/snap: in `snap info`, don't print a newline between tracks
        - daemon: add polkit support to /v2/login
        - snapd,snapctl: decode json using Number
        - client: fix go vet 1.7 errors
        - tests: make 17.04 shellcheck clean
        - tests: remove TestInterfacesHelp as it breaks when go-flags
          changes
        - snapstate: undo a daemon restart on classic if needed
        - cmd/snap-repair: recover brand/model from
          /var/lib/snapd/seed/assertions checking signatures and brand
          account
        - spread: opt into unsafe IO during spread tests
        - snap-repair: update snap-repair/runner_test.go for API change in
          makeMockServer
        - cmd/snap-repair: skeleton code around actually running a repair
        - tests: wait until the port is listening after start the fake store
        - corecfg: fix typo in tests
        - cmd/snap-repair: test that redirects works during fetching
        - osutil: honor SNAPD_UNSAFE_IO for testing
        - vendor: explode and make more precise our golang.go/x/crypto deps,
          use same version as Debian unstable
        - many: sanitize NewStoreStack signature, have shared default store
          test private keys
        - systemd: disable `Nice=-5` to fix error when running inside lxd
        - spread.yaml: update delta ref to 2.27
        - cmd/snap-repair: use E-Tags when refetching a repair to retry
        - interfaces/many: updates based on chromium and mrrescue denials
        - cmd/snap-repair: implement most logic to get the next repair to
          run/retry in a brand sequence
        - asserts/assertstest: copy headers in SigningDB.Sign
        - interfaces: convert uhid to common interface and test cases
          improvement for time_control and opengl
        - many tests: move all panicing fake store methods to a common place
        - asserts: add store assertion type
        - interfaces: don't crash if content slot has no attributes
        - debian: do not build with -buildmode=pie on i386
        - wrappers: symlink completion snippets when symlinking binaries
        - tests: adding more debug information for the interfaces-cups-
          control …
        - apparmor: pass --quiet to parser on load unless SNAPD_DEBUG is set
        - many: allow and support serials signed by the 'generic' authority
          instead of the brand
        - corecfg: add proxy configuration via `snap set core
          proxy.{http,https,ftp}=...`
        - interfaces: a bunch of interfaces test improvement
        - tests: enable regression and completion suites for opensuse
        - tests: installing snapd for nested test suite
        - interfaces: convert lxd_support to common iface
        - interfaces: add missing test for camera interface.
        - snap: add support for parsing snap layout section
        - cmd/snap-repair: like for downloads we cannot have a timeout (at
          least for now), less aggressive retry strategies
        - overlord: rely on more conservative ensure interval
        - overlord,store: no piles of return args for methods gathering
          device session request params
        - overlord,store: send model assertion when setting up device
          sessions
        - interfaces/misc: updates for unity7/x11, browser-
          support, network-control and mount-observe
          interfaces/unity7,x11: update for NETLINK_KOBJECT_UEVENT
          interfaces/browser-support: update sysfs reads for
          newer browser versions, interfaces/network-control: rw for
          ieee80211 advanced wireless interfaces/mount-observe: allow read
          on sysfs entries for block devices
        - tests: use dnf --refresh install to avert stale cache
        - osutil: ensure TestLockUnlockWorks uses supported flock
        - interfaces: convert lxd to common iface
        - tests: restart snapd to ensure re-exec settings are applied
        - tests: fix interfaces-cups-control test
        - interfaces: improve and tweak bunch of interfaces test cases.
        - tests: adding extra worker for fedora
        - asserts,overlord/devicestate: support predefined assertions that
          don't establish foundational trust
        - interfaces: convert two hardware_random interfaces to common iface
        - interfaces: convert io_ports_control to common iface
        - tests: fix for  upgrade test on fedora
        - daemon, client, cmd/snap: implement snap start/stop/restart
        - cmd/snap-confine: set _FILE_OFFSET_BITS to 64
        - interfaces: covert framebuffer to commonInterface
        - interfaces: convert joystick to common iface
        - interfaces/builtin: add the spi interface
        - wrappers, overlord/snapstate/backend: make link-snap clean up on
          failure.
        - interfaces/wayland: add wayland interface
        - interfaces: convert kvm to common iface
        - tests: extend upower-observe test to cover snaps providing slots
        - tests: enable main suite for opensuse
        - interfaces: convert physical_memory_observe to common iface
        - interfaces: add missing test for optical_drive interface.
        - interfaces: convert physical_memory_control to common iface
        - interfaces: convert ppp to common iface
        - interfaces: convert time-control to common iface
        - tests: fix failover test
        - interfaces/builtin: rework for avahi interface
        - interfaces: convert broadcom-asic-control to common iface
        - snap/snapenv: document the use of CoreSnapMountDir for SNAP
        - packaging/arch: drop patches merged into master
        - cmd: fix mustUnsetenv docstring (thanks to Chipaca)
        - release: remove default from VERSION_ID
        - tests: enable regression, upgrade and completion test suites for
          fedora
        - tests: restore interfaces-account-control properly
        - overlord/devicestate, store: update device auth endpoints URLs
        - tests: fix install-hook test failure
        - tests: download core and ubuntu-core at most once
        - interfaces: add common support for udev
        - overlord/devicestate: fix, don't assume that the serial is backed
          by a 1-key chain
        - cmd/snap-confine: don't share /etc/nsswitch from host
        - store: do not resume a download when we already have the whole
          thing
        - many: implement "snap logs"
        - store: don't call useDeltas() twice in quick succession
        - interfaces/builtin: add kvm interface
        - snap/snapenv: always expect /snap for $SNAP
        - cmd: mark arch as non-reexecing distro
        - cmd: fix tests that assume /snap mount
        - gitignore: ignore more build artefacts
        - packaging: add current arch packaging
        - interfaces/unity7: allow receiving media key events in (at least)
          gnome-shell
        - interfaces/many, cmd/snap-confine: miscellaneous policy updates
        - interfaces/builtin: implement broadcom-asic-control interface
        - interfaces/builtin: reduce duplication and remove cruft in
          Sanitize{Plug,Slot}
        - tests: apply underscore convention for SNAPMOUNTDIR variable
        - interfaces/greengrass-support: adjust accesses now that have
          working snap
        - daemon, client, cmd/snap: implement "snap services"
        - tests: fix refresh tests not stopping fake store for fedora
        - many: add the interface command
        - overlord/snapstate/backend: some copydata improvements
        - many: support querying and completing assertion type names
        - interfaces/builtin: discard empty Validate{Plug,Slot}
        - cmd/snap-repair:  start of Runner, implement first pass of Peek
          and Fetch
        - tests: enable main suite on fedora
        - snap: do not always quote the snap info summary
        - vendor: update go-flags to address crash in "snap debug"
        - interfaces: opengl support pci device and vendor
        - many: start implenting "base" snap type on the snapd side
        - arch,release: map armv6 correctly
        - many: expose service status in 'snap info'
        - tests: add browser-support interface test
        - tests: disable snapd-notify for the external backend
        - interfaces: Add /run/uuid/request to openvswitch
        - interfaces: add password-manager-service implicit classic
          interface
        - cmd: rework reexec detection
        - cmd: fix re-exec bug when starting from snapd 2.21
        - tests: dependency packages installed during prepare-project
        - tests: remove unneeded check for re-exec in InternalToolPath()
        - cmd,tests: fix classic confinement confusing re-execution code
        - store: configurable base api
        - tests: fix how package lists are updated for opensuse and fedora
    
     -- Michael Vogt <email address hidden>  Wed, 11 Oct 2017 19:40:57 +0200
  • snapd (2.27.6) xenial; urgency=medium
    
      * New upstream release, LP: #1703798:
        - interfaces: add udev netlink support to hardware-observe
        - interfaces/network-{control,observe}: allow receiving
          kobject_uevent() messages
    
     -- Michael Vogt <email address hidden>  Thu, 07 Sep 2017 10:22:18 +0200
  • snapd (2.27.5) xenial; urgency=medium
    
      * New upstream release, LP: #1703798:
        - interfaces: fix network-manager plug regression
        - hooks: do not error when hook handler is not registered
        - interfaces/alsa,pulseaudio: allow read on udev data for sound
        - interfaces/optical-drive: read access to udev data for /dev/scd*
        - interfaces/browser-support: read on /proc/vmstat and misc udev
          data
    
    snapd (2.27.4) xenial; urgency=medium
    
      * New upstream release, LP: #1703798:
        - snap-seccomp: add secondary arch for unrestricted snaps as well
    
    snapd (2.27.3) xenial; urgency=medium
    
      * New upstream release, LP: #1703798:
        - systemd: disable `Nice=-5` to fix error when running inside lxdSee
          https://bugs.launchpad.net/snapd/+bug/1709536
    
    snapd (2.27.2) xenial; urgency=medium
    
      * New upstream release, LP: #1703798:
        - tests: remove TestInterfacesHelp as it breaks when go-flags
          changes
        - interfaces: don't crash if content slot has no attributes
        - debian: do not build with -buildmode=pie on i386
        - interfaces: backport broadcom-asic-control interface
        - interfaces: allow /usr/bin/xdg-open in unity7
        - store: do not resume a download when we already have the whole
          thing
    
    snapd (2.27.1) xenial; urgency=medium
    
      * New upstream release, LP: #1703798:
        - tests: use dnf --refresh install to avert stale cache
        - tests: fix test failure on 14.04 due to old version of
          flock
        - updates for unity7/x11, browser-support, network-control,
          mount-observe
        - interfaces/unity7,x11: update for NETLINK_KOBJECT_UEVENT
        - interfaces/browser-support: update sysfs reads for
          newer browser versions
        - interfaces/network-control: rw for ieee80211 advanced wireless
        - interfaces/mount-observe: allow read on sysfs entries for block
          devices
    
    snapd (2.27) xenial; urgency=medium
    
      * New upstream release, LP: #1703798
        - fix build failure on 32bit fedora
        - interfaces: add password-manager-service implicit classic interface
        - interfaces/greengrass-support: adjust accesses now that have working
          snap
        - interfaces/many, cmd/snap-confine: miscellaneous policy updates
        - interfaces/unity7: allow receiving media key events in (at least)
          gnome-shell
        - cmd: fix re-exec bug when starting from snapd 2.21
        - tests: restore interfaces-account-control properly
        - cmd: fix tests that assume /snap mount
        - cmd: mark arch as non-reexecing distro
        - snap-confine: don't share /etc/nsswitch from host
        - store: talk to api.snapcraft.io for purchases
        - hooks: support for install and remove hooks
        - packaging: fix Fedora support
        - tests: add bluetooth-control interface test
        - store: talk to api.snapcraft.io for assertions
        - tests: remove snapd before building from branch
        - tests: add avahi-observe interface test
        - store: orders API now checks if customer is ready
        - cmd/snap: snap find only searches stable
        - interfaces: updates default, mir, optical-observe, system-observe,
          screen-inhibit-control and unity7
        - tests: speedup prepare statement part 1
        - store: do not send empty refresh requests
        - asserts: fix error handling in snap-developer consistency check
        - systemd: add explicit sync to snapd.core-fixup.sh
        - snapd: generate snap cookies on startup
        - cmd,client,daemon: expose "force devmode" in sysinfo
        - many: introduce and use strutil.ListContains and also
          strutil.SortedListContains
        - assserts,overlord/assertstate: test we don't accept chains of
          assertions founded on a self-signed key coming externally
        - interfaces: enable access to bridge settings
        - interfaces: fix copy-pasted iio vs io in io-ports-control
        - cmd/snap-confine: various small fixes and tweaks to seccomp
          support code
        - interfaces: bring back seccomp argument filtering
        - systemd, osutil: rework systemd logs in preparation for services
          commands
        - tests: store /etc/systemd/system/snap-*core*.mount in snapd-
          state.tar.gz
        - tests: shellcheck improvements for tests/main tasks - first set of
          tests
        - cmd/snap: `--last` for abort and watch, and aliases
          (search→find, change→tasks)
        - tests: shellcheck improvements for tests/lib scripts
        - tests: create ramdisk if it's not present
        - tests: shellcheck improvements for nightly upgrade and regressions
          tests
        - snapd: fix for snapctl get panic on null config values.
        - tests: fix for rng-tools service not restarting
        - systemd: add snapd.core-fixup.service unit
        - cmd: avoid using current symlink in InternalToolPath
        - tests: fix timeout issue for test refresh core with hanging …
        - intefaces: control bridged vlan/ppoe-tagged traffic
        - cmd/snap: include snap type in notes
        - overlord/state: Abort() only visits each task once
        - tests: extend find-private test to cover more cases
        - snap-seccomp: skip socket() tests on systems that use socketcall()
          instead of socket()
        - many: support snap title as localized/title-cased name
        - snap-seccomp: deal with mknod on aarch64 in the seccomp tests
        - interfaces: put base policy fragments inside each interface
        - asserts: introduce NewDecoderWithTypeMaxBodySize
        - tests: fix snapd-notify when it takes more time to restart
        - snap-seccomp: fix snap-seccomp tests in artful
        - tests: fix for create-key task to avoid rng-tools service ramains
          alive
        - snap-seccomp: make sure snap-seccomp writes the bpf file
          atomically
        - tests: do not disable ipv6 on core systems
        - arch: the kernel architecture name is armv7l instead of armv7
        - snap-confine: ensure snap-confine waits some seconds for seccomp
          security profiles
        - tests: shellcheck improvements for tests/nested tasks
        - wrappers: add SyslogIdentifier to the service unit files.
        - tests: shellcheck improvements for unit tasks
        - asserts: implement FindManyTrusted as well
        - asserts: open up and optimize Encoder to help avoiding unnecessary
          copying
        - interfaces: simplify snap-confine by just loading pre-generated
          bpf code
        - tests: restart rng-tools services after few seconds
        - interfaces, tests: add mising dbus abstraction to system-observe
          and extend spread test
        - store: change main store host to api.snapcraft.io
        - overlord/cmdstate: new package for running commands as tasks.
        - spread: help libapt resolve installing libudev-dev
        - tests: show the IP from .travis.yaml
        - tests/main: use pkgdb function in more test cases
        - cmd,daemon: add debug command for displaying the base policy
        - tests: prevent quoting error on opensuse
        - tests: fix nightly suite
        - tests: add linode-sru backend
        - snap-confine: validate SNAP_NAME against security tag
        - tests: fix ipv6 disable for ubuntu-core
        - tests: extend core-revert test to cover bluez issues
        - interfaces/greengrass-support: add support for Amazon Greengrass
          as a snap
        - asserts: support timestamp and optional disabled header on repair
        - tests: reboot after upgrading to snapd on the -proposed pocket
        - many: fix test cases to work with different DistroLibExecDir
        - tests: reenable help test on ubuntu and debian systems
        - packaging/{opensuse,fedora}: allow package build with testkeys
          included
        - tests/lib: generalize RPM build support
        - interfaces/builtin: sync connected slot and permanent slot snippet
        - tests: fix snap create-key by restarting automatically rng-tools
        - many: switch to use http numeric statuses as agreed
        - debian: add missing  Type=notify in 14.04 packaging
        - tests: mark interfaces-openvswitch as manual due to prepare errors
        - debian: unify built_using between the 14.04 and 16.04 packaging
          branch
        - tests: pull from urandom when real entropy is not enough
        - tests/main/manpages: install missing man package
        - tests: add refresh --time output check
        - debian: add missing "make -C data/systemd clean"
        - tests: fix for upgrade test when it is repeated
        - tests/main: use dir abstraction in a few more test cases
        - tests/main: check for confinement in a few more interface tests
        - spread: add fedora snap bin dir to global PATH
        - tests: check that locale-control is not present on core
        - many: snapctl outside hooks
        - tests: add whoami check
        - interfaces: compose the base declaration from interfaces
        - tests: fix spread flaky tests linode
        - tests,packaging: add package build support for openSUSE
        - many: slight improvement of some snap error messaging
        - errtracker: Include /etc/apparmor.d/usr.lib.snap-confine md5sum in
          err reports
        - tests: fix for the test postrm-purge
        - tests: restoring the /etc/environment and service units config for
          each test
        - daemon: make snapd a "Type=notify" daemon and notify when startup
          is done
        - cmd/snap-confine: add support for --base snap
        - many: derive implicit slots from interface meta-data
        - tests: add core revert test
        - tests,packaging: add package build support for Fedora for our
          spread setup
        - interfaces: move base declaration to the policy sub-package
        - tests: fix for snapd-reexec test cheking for restart info on debug
          log
        - tests: show available entropy on error
        - tests: clean journalctl logs on trusty
        - tests: fix econnreset on staging
        - tests: modify core before calling set
        - tests: add snap-confine privilege test
        - tests: add staging snap-id
        - interfaces/builtin: silence ptrace denial for network-manager
        - tests: add alsa interface spread test
        - tests: prefer ipv4 over ipv6
        - tests: fix for econnreset test checking that the download already
          started
        - httputil,store: extract retry code to httputil, reorg usages
        - errtracker: report if snapd did re-execute itself
        - errtracker: include bits of snap-confine apparmor profile
        - tests: take into account staging snap-ids for snap-info
        - cmd: add stub new snap-repair command and add timer
        - many: stop "snap refresh $x --channel invalid" from working
        - interfaces: revert "interfaces: re-add reverted ioctl and quotactl
        - snapstate: consider connect/disconnect tasks in
          CheckChangeConflict.
        - interfaces: disable "mknod |N" in the default seccomp template
          again
        - interfaces,overlord/ifacestate: make sure installing slots after
          plugs works similarly to plugs after slots
        - interfaces/seccomp: add bind() syscall for forced-devmode systems
        - packaging/fedora: Sync packaging from Fedora Dist-Git
        - tests: move static and unit tests to spread task
        - many: error types should be called FooError, not ErrFoo.
        - partition: add directory sync to the save uboot.env file code
        - cmd: test everything (100% coverage \o/)
        - many: make shell scripts shellcheck-clean
        - tests: remove additional setup for docker on core
        - interfaces: add summary to each interface
        - many: remove interface meta-data from list of connections
        - logger (& many more, to accommodate): drop explicit syslog.
        - packaging: import packaging bits for opensuse
        - snapstate,many: implement snap install --unaliased
        - tests/lib: abstract build dependency installation a bit more
        - interfaces, osutil: move flock code from interfaces/mount to
          osutil
        - cmd: auto import assertions only from ext4,vfat file systems
        - many: refactor in preparation for 'snap start'
        - overlord/snapstate: have an explicit code path last-refresh
          unset/zero => immediately refresh try
        - tests: fixes for executions using the staging store
        - tests: use pollinate to seed the rng
        - cmd/snap,tests: show the sha3-384 of the snap for snap info
          --verbose SNAP-FILE
        - asserts: simplify and adjust repair assertion definition
        - cmd/snap,tests: show the snap id if available in snap info
        - daemon,overlord/auth: store from model assertion wins
        - cmd/snap,tests/main: add confinement switch instead of spread
          system blacklisting
        - many: cleanup MockCommands and don't leave a process around after
          hookstate tests
        - tests: update listing test to the core version number schema
        - interfaces: allow snaps to use the timedatectl utility
        - packaging: Add Fedora packaging files
        - tests/libs: add distro_auto_remove_packages function
        - cmd/snap: correct devmode note for anomalous state
        - tests/main/snap-info: use proper pkgdb functions to install distro
          packages
        - tests/lib: use mktemp instead of tempfile to work cross-distro
        - tests: abstract common dirs which differ on distributions
        - many: model and expose interface meta-data.
        - overlord: make config defaults from gadget work also at first boot
        - interfaces/log-observe: allow using journalctl from hostfs for
          classic distro
        - partition,snap: add support for android boot
        - errtracker: small simplification around readMachineID
        - snap-confine: move rm_rf_tmp to test-utils.
        - tests/lib: introduce pkgdb helper library
        - errtracker: try multiple paths to read machine-id
        - overlord/hooks: make sure only one hook for given snap is executed
          at a time.
        - cmd/snap-confine: use SNAP_MOUNT_DIR to setup /snap inside the
          confinement env
        - tests: bump kill-timeout and remove quiet call on build
        - tests/lib/snaps: add a test store snap with a passthrough
          configure hook
        - daemon: teach the daemon to wait on active connections when
          shutting down
        - tests: remove unit tests task
        - tests/main/completion: source from /usr/share/bash-completion
        - assertions: add "repair" assertion
        - interfaces/seccomp: document Backend.NewSpecification
        - wrappers: make StartSnapServices cleanup any services that were
          added if a later one fails
        - overlord/snapstate: avoid creating command aliases for daemons
        - vendor: remove unused packages
        - vendor,partition: fix panics from uenv
        - cmd,interfaces/mount: run snap-update-ns and snap-discard-ns from
          core if possible
        - daemon: do not allow to install ubuntu-core anymore
        - wrappers: service start/stop were inconsistent
        - tests: fix failing tests (snap core version, syslog changes)
        - cmd/snap-update-ns: add actual implementation
        - tests: improve entropy also for ubuntu
        - cmd/snap-confine: use /etc/ssl from the core snap
        - wrappers: don't convert between []byte and string needlessly.
        - hooks: default timeout
        - overlord/snapstate: Enable() was ignoring the flags from the
          snap's state, resulting in losing "devmode" on disable/enable.
        - difs,interfaces/mount: add support for locking namespaces
        - interfaces/mount: keep track of kept mount entries
        - tests/main: move a bunch of greps over to MATCH
        - interfaces/builtin: make all interfaces private
        - interfaces/mount: spell unmount correctly
        - tests: allow 16-X.Y.Z version of core snap
        - the timezone_control interface only allows changing /etc/timezone
          and /etc/writable/timezone. systemd-timedated also updated the
          link of /etc/localtime and /etc/writable/localtime ... allow
          access to this file too
        - cmd/snap-confine: aggregate operations holding global lock
        - api, ifacestate: resolve disconnect early
        - interfaces/builtin: ensure we don't register interfaces twice
    
     -- Michael Vogt <email address hidden>  Wed, 30 Aug 2017 07:32:20 +0200
  • snapd (2.27.4) xenial; urgency=medium
    
      * New upstream release, LP: #1703798:
        - snap-seccomp: add secondary arch for unrestricted snaps as well
    
    snapd (2.27.3) xenial; urgency=medium
    
      * New upstream release, LP: #1703798:
        - systemd: disable `Nice=-5` to fix error when running inside lxdSee
          https://bugs.launchpad.net/snapd/+bug/1709536
    
    snapd (2.27.2) xenial; urgency=medium
    
      * New upstream release, LP: #1703798:
        - tests: remove TestInterfacesHelp as it breaks when go-flags
          changes
        - interfaces: don't crash if content slot has no attributes
        - debian: do not build with -buildmode=pie on i386
        - interfaces: backport broadcom-asic-control interface
        - interfaces: allow /usr/bin/xdg-open in unity7
        - store: do not resume a download when we already have the whole
          thing
    
    snapd (2.27.1) xenial; urgency=medium
    
      * New upstream release, LP: #1703798:
        - tests: use dnf --refresh install to avert stale cache
        - tests: fix test failure on 14.04 due to old version of
          flock
        - updates for unity7/x11, browser-support, network-control,
          mount-observe
        - interfaces/unity7,x11: update for NETLINK_KOBJECT_UEVENT
        - interfaces/browser-support: update sysfs reads for
          newer browser versions
        - interfaces/network-control: rw for ieee80211 advanced wireless
        - interfaces/mount-observe: allow read on sysfs entries for block
          devices
    
    snapd (2.27) xenial; urgency=medium
    
      * New upstream release, LP: #1703798
        - fix build failure on 32bit fedora
        - interfaces: add password-manager-service implicit classic interface
        - interfaces/greengrass-support: adjust accesses now that have working
          snap
        - interfaces/many, cmd/snap-confine: miscellaneous policy updates
        - interfaces/unity7: allow receiving media key events in (at least)
          gnome-shell
        - cmd: fix re-exec bug when starting from snapd 2.21
        - tests: restore interfaces-account-control properly
        - cmd: fix tests that assume /snap mount
        - cmd: mark arch as non-reexecing distro
        - snap-confine: don't share /etc/nsswitch from host
        - store: talk to api.snapcraft.io for purchases
        - hooks: support for install and remove hooks
        - packaging: fix Fedora support
        - tests: add bluetooth-control interface test
        - store: talk to api.snapcraft.io for assertions
        - tests: remove snapd before building from branch
        - tests: add avahi-observe interface test
        - store: orders API now checks if customer is ready
        - cmd/snap: snap find only searches stable
        - interfaces: updates default, mir, optical-observe, system-observe,
          screen-inhibit-control and unity7
        - tests: speedup prepare statement part 1
        - store: do not send empty refresh requests
        - asserts: fix error handling in snap-developer consistency check
        - systemd: add explicit sync to snapd.core-fixup.sh
        - snapd: generate snap cookies on startup
        - cmd,client,daemon: expose "force devmode" in sysinfo
        - many: introduce and use strutil.ListContains and also
          strutil.SortedListContains
        - assserts,overlord/assertstate: test we don't accept chains of
          assertions founded on a self-signed key coming externally
        - interfaces: enable access to bridge settings
        - interfaces: fix copy-pasted iio vs io in io-ports-control
        - cmd/snap-confine: various small fixes and tweaks to seccomp
          support code
        - interfaces: bring back seccomp argument filtering
        - systemd, osutil: rework systemd logs in preparation for services
          commands
        - tests: store /etc/systemd/system/snap-*core*.mount in snapd-
          state.tar.gz
        - tests: shellcheck improvements for tests/main tasks - first set of
          tests
        - cmd/snap: `--last` for abort and watch, and aliases
          (search→find, change→tasks)
        - tests: shellcheck improvements for tests/lib scripts
        - tests: create ramdisk if it's not present
        - tests: shellcheck improvements for nightly upgrade and regressions
          tests
        - snapd: fix for snapctl get panic on null config values.
        - tests: fix for rng-tools service not restarting
        - systemd: add snapd.core-fixup.service unit
        - cmd: avoid using current symlink in InternalToolPath
        - tests: fix timeout issue for test refresh core with hanging …
        - intefaces: control bridged vlan/ppoe-tagged traffic
        - cmd/snap: include snap type in notes
        - overlord/state: Abort() only visits each task once
        - tests: extend find-private test to cover more cases
        - snap-seccomp: skip socket() tests on systems that use socketcall()
          instead of socket()
        - many: support snap title as localized/title-cased name
        - snap-seccomp: deal with mknod on aarch64 in the seccomp tests
        - interfaces: put base policy fragments inside each interface
        - asserts: introduce NewDecoderWithTypeMaxBodySize
        - tests: fix snapd-notify when it takes more time to restart
        - snap-seccomp: fix snap-seccomp tests in artful
        - tests: fix for create-key task to avoid rng-tools service ramains
          alive
        - snap-seccomp: make sure snap-seccomp writes the bpf file
          atomically
        - tests: do not disable ipv6 on core systems
        - arch: the kernel architecture name is armv7l instead of armv7
        - snap-confine: ensure snap-confine waits some seconds for seccomp
          security profiles
        - tests: shellcheck improvements for tests/nested tasks
        - wrappers: add SyslogIdentifier to the service unit files.
        - tests: shellcheck improvements for unit tasks
        - asserts: implement FindManyTrusted as well
        - asserts: open up and optimize Encoder to help avoiding unnecessary
          copying
        - interfaces: simplify snap-confine by just loading pre-generated
          bpf code
        - tests: restart rng-tools services after few seconds
        - interfaces, tests: add mising dbus abstraction to system-observe
          and extend spread test
        - store: change main store host to api.snapcraft.io
        - overlord/cmdstate: new package for running commands as tasks.
        - spread: help libapt resolve installing libudev-dev
        - tests: show the IP from .travis.yaml
        - tests/main: use pkgdb function in more test cases
        - cmd,daemon: add debug command for displaying the base policy
        - tests: prevent quoting error on opensuse
        - tests: fix nightly suite
        - tests: add linode-sru backend
        - snap-confine: validate SNAP_NAME against security tag
        - tests: fix ipv6 disable for ubuntu-core
        - tests: extend core-revert test to cover bluez issues
        - interfaces/greengrass-support: add support for Amazon Greengrass
          as a snap
        - asserts: support timestamp and optional disabled header on repair
        - tests: reboot after upgrading to snapd on the -proposed pocket
        - many: fix test cases to work with different DistroLibExecDir
        - tests: reenable help test on ubuntu and debian systems
        - packaging/{opensuse,fedora}: allow package build with testkeys
          included
        - tests/lib: generalize RPM build support
        - interfaces/builtin: sync connected slot and permanent slot snippet
        - tests: fix snap create-key by restarting automatically rng-tools
        - many: switch to use http numeric statuses as agreed
        - debian: add missing  Type=notify in 14.04 packaging
        - tests: mark interfaces-openvswitch as manual due to prepare errors
        - debian: unify built_using between the 14.04 and 16.04 packaging
          branch
        - tests: pull from urandom when real entropy is not enough
        - tests/main/manpages: install missing man package
        - tests: add refresh --time output check
        - debian: add missing "make -C data/systemd clean"
        - tests: fix for upgrade test when it is repeated
        - tests/main: use dir abstraction in a few more test cases
        - tests/main: check for confinement in a few more interface tests
        - spread: add fedora snap bin dir to global PATH
        - tests: check that locale-control is not present on core
        - many: snapctl outside hooks
        - tests: add whoami check
        - interfaces: compose the base declaration from interfaces
        - tests: fix spread flaky tests linode
        - tests,packaging: add package build support for openSUSE
        - many: slight improvement of some snap error messaging
        - errtracker: Include /etc/apparmor.d/usr.lib.snap-confine md5sum in
          err reports
        - tests: fix for the test postrm-purge
        - tests: restoring the /etc/environment and service units config for
          each test
        - daemon: make snapd a "Type=notify" daemon and notify when startup
          is done
        - cmd/snap-confine: add support for --base snap
        - many: derive implicit slots from interface meta-data
        - tests: add core revert test
        - tests,packaging: add package build support for Fedora for our
          spread setup
        - interfaces: move base declaration to the policy sub-package
        - tests: fix for snapd-reexec test cheking for restart info on debug
          log
        - tests: show available entropy on error
        - tests: clean journalctl logs on trusty
        - tests: fix econnreset on staging
        - tests: modify core before calling set
        - tests: add snap-confine privilege test
        - tests: add staging snap-id
        - interfaces/builtin: silence ptrace denial for network-manager
        - tests: add alsa interface spread test
        - tests: prefer ipv4 over ipv6
        - tests: fix for econnreset test checking that the download already
          started
        - httputil,store: extract retry code to httputil, reorg usages
        - errtracker: report if snapd did re-execute itself
        - errtracker: include bits of snap-confine apparmor profile
        - tests: take into account staging snap-ids for snap-info
        - cmd: add stub new snap-repair command and add timer
        - many: stop "snap refresh $x --channel invalid" from working
        - interfaces: revert "interfaces: re-add reverted ioctl and quotactl
        - snapstate: consider connect/disconnect tasks in
          CheckChangeConflict.
        - interfaces: disable "mknod |N" in the default seccomp template
          again
        - interfaces,overlord/ifacestate: make sure installing slots after
          plugs works similarly to plugs after slots
        - interfaces/seccomp: add bind() syscall for forced-devmode systems
        - packaging/fedora: Sync packaging from Fedora Dist-Git
        - tests: move static and unit tests to spread task
        - many: error types should be called FooError, not ErrFoo.
        - partition: add directory sync to the save uboot.env file code
        - cmd: test everything (100% coverage \o/)
        - many: make shell scripts shellcheck-clean
        - tests: remove additional setup for docker on core
        - interfaces: add summary to each interface
        - many: remove interface meta-data from list of connections
        - logger (& many more, to accommodate): drop explicit syslog.
        - packaging: import packaging bits for opensuse
        - snapstate,many: implement snap install --unaliased
        - tests/lib: abstract build dependency installation a bit more
        - interfaces, osutil: move flock code from interfaces/mount to
          osutil
        - cmd: auto import assertions only from ext4,vfat file systems
        - many: refactor in preparation for 'snap start'
        - overlord/snapstate: have an explicit code path last-refresh
          unset/zero => immediately refresh try
        - tests: fixes for executions using the staging store
        - tests: use pollinate to seed the rng
        - cmd/snap,tests: show the sha3-384 of the snap for snap info
          --verbose SNAP-FILE
        - asserts: simplify and adjust repair assertion definition
        - cmd/snap,tests: show the snap id if available in snap info
        - daemon,overlord/auth: store from model assertion wins
        - cmd/snap,tests/main: add confinement switch instead of spread
          system blacklisting
        - many: cleanup MockCommands and don't leave a process around after
          hookstate tests
        - tests: update listing test to the core version number schema
        - interfaces: allow snaps to use the timedatectl utility
        - packaging: Add Fedora packaging files
        - tests/libs: add distro_auto_remove_packages function
        - cmd/snap: correct devmode note for anomalous state
        - tests/main/snap-info: use proper pkgdb functions to install distro
          packages
        - tests/lib: use mktemp instead of tempfile to work cross-distro
        - tests: abstract common dirs which differ on distributions
        - many: model and expose interface meta-data.
        - overlord: make config defaults from gadget work also at first boot
        - interfaces/log-observe: allow using journalctl from hostfs for
          classic distro
        - partition,snap: add support for android boot
        - errtracker: small simplification around readMachineID
        - snap-confine: move rm_rf_tmp to test-utils.
        - tests/lib: introduce pkgdb helper library
        - errtracker: try multiple paths to read machine-id
        - overlord/hooks: make sure only one hook for given snap is executed
          at a time.
        - cmd/snap-confine: use SNAP_MOUNT_DIR to setup /snap inside the
          confinement env
        - tests: bump kill-timeout and remove quiet call on build
        - tests/lib/snaps: add a test store snap with a passthrough
          configure hook
        - daemon: teach the daemon to wait on active connections when
          shutting down
        - tests: remove unit tests task
        - tests/main/completion: source from /usr/share/bash-completion
        - assertions: add "repair" assertion
        - interfaces/seccomp: document Backend.NewSpecification
        - wrappers: make StartSnapServices cleanup any services that were
          added if a later one fails
        - overlord/snapstate: avoid creating command aliases for daemons
        - vendor: remove unused packages
        - vendor,partition: fix panics from uenv
        - cmd,interfaces/mount: run snap-update-ns and snap-discard-ns from
          core if possible
        - daemon: do not allow to install ubuntu-core anymore
        - wrappers: service start/stop were inconsistent
        - tests: fix failing tests (snap core version, syslog changes)
        - cmd/snap-update-ns: add actual implementation
        - tests: improve entropy also for ubuntu
        - cmd/snap-confine: use /etc/ssl from the core snap
        - wrappers: don't convert between []byte and string needlessly.
        - hooks: default timeout
        - overlord/snapstate: Enable() was ignoring the flags from the
          snap's state, resulting in losing "devmode" on disable/enable.
        - difs,interfaces/mount: add support for locking namespaces
        - interfaces/mount: keep track of kept mount entries
        - tests/main: move a bunch of greps over to MATCH
        - interfaces/builtin: make all interfaces private
        - interfaces/mount: spell unmount correctly
        - tests: allow 16-X.Y.Z version of core snap
        - the timezone_control interface only allows changing /etc/timezone
          and /etc/writable/timezone. systemd-timedated also updated the
          link of /etc/localtime and /etc/writable/localtime ... allow
          access to this file too
        - cmd/snap-confine: aggregate operations holding global lock
        - api, ifacestate: resolve disconnect early
        - interfaces/builtin: ensure we don't register interfaces twice
    
     -- Michael Vogt <email address hidden>  Thu, 24 Aug 2017 08:51:22 +0200
  • snapd (2.27.3) xenial; urgency=medium
    
      * New upstream release, LP: #1703798:
        - systemd: disable `Nice=-5` to fix error when running inside lxdSee
          https://bugs.launchpad.net/snapd/+bug/1709536
    
    snapd (2.27.2) xenial; urgency=medium
    
      * New upstream release, LP: #1703798:
        - tests: remove TestInterfacesHelp as it breaks when go-flags
          changes
        - interfaces: don't crash if content slot has no attributes
        - debian: do not build with -buildmode=pie on i386
        - interfaces: backport broadcom-asic-control interface
        - interfaces: allow /usr/bin/xdg-open in unity7
        - store: do not resume a download when we already have the whole
          thing
    
    snapd (2.27.1) xenial; urgency=medium
    
      * New upstream release, LP: #1703798:
        - tests: use dnf --refresh install to avert stale cache
        - tests: fix test failure on 14.04 due to old version of
          flock
        - updates for unity7/x11, browser-support, network-control,
          mount-observe
        - interfaces/unity7,x11: update for NETLINK_KOBJECT_UEVENT
        - interfaces/browser-support: update sysfs reads for
          newer browser versions
        - interfaces/network-control: rw for ieee80211 advanced wireless
        - interfaces/mount-observe: allow read on sysfs entries for block
          devices
    
    snapd (2.27) xenial; urgency=medium
    
      * New upstream release, LP: #1703798
        - fix build failure on 32bit fedora
        - interfaces: add password-manager-service implicit classic interface
        - interfaces/greengrass-support: adjust accesses now that have working
          snap
        - interfaces/many, cmd/snap-confine: miscellaneous policy updates
        - interfaces/unity7: allow receiving media key events in (at least)
          gnome-shell
        - cmd: fix re-exec bug when starting from snapd 2.21
        - tests: restore interfaces-account-control properly
        - cmd: fix tests that assume /snap mount
        - cmd: mark arch as non-reexecing distro
        - snap-confine: don't share /etc/nsswitch from host
        - store: talk to api.snapcraft.io for purchases
        - hooks: support for install and remove hooks
        - packaging: fix Fedora support
        - tests: add bluetooth-control interface test
        - store: talk to api.snapcraft.io for assertions
        - tests: remove snapd before building from branch
        - tests: add avahi-observe interface test
        - store: orders API now checks if customer is ready
        - cmd/snap: snap find only searches stable
        - interfaces: updates default, mir, optical-observe, system-observe,
          screen-inhibit-control and unity7
        - tests: speedup prepare statement part 1
        - store: do not send empty refresh requests
        - asserts: fix error handling in snap-developer consistency check
        - systemd: add explicit sync to snapd.core-fixup.sh
        - snapd: generate snap cookies on startup
        - cmd,client,daemon: expose "force devmode" in sysinfo
        - many: introduce and use strutil.ListContains and also
          strutil.SortedListContains
        - assserts,overlord/assertstate: test we don't accept chains of
          assertions founded on a self-signed key coming externally
        - interfaces: enable access to bridge settings
        - interfaces: fix copy-pasted iio vs io in io-ports-control
        - cmd/snap-confine: various small fixes and tweaks to seccomp
          support code
        - interfaces: bring back seccomp argument filtering
        - systemd, osutil: rework systemd logs in preparation for services
          commands
        - tests: store /etc/systemd/system/snap-*core*.mount in snapd-
          state.tar.gz
        - tests: shellcheck improvements for tests/main tasks - first set of
          tests
        - cmd/snap: `--last` for abort and watch, and aliases
          (search→find, change→tasks)
        - tests: shellcheck improvements for tests/lib scripts
        - tests: create ramdisk if it's not present
        - tests: shellcheck improvements for nightly upgrade and regressions
          tests
        - snapd: fix for snapctl get panic on null config values.
        - tests: fix for rng-tools service not restarting
        - systemd: add snapd.core-fixup.service unit
        - cmd: avoid using current symlink in InternalToolPath
        - tests: fix timeout issue for test refresh core with hanging …
        - intefaces: control bridged vlan/ppoe-tagged traffic
        - cmd/snap: include snap type in notes
        - overlord/state: Abort() only visits each task once
        - tests: extend find-private test to cover more cases
        - snap-seccomp: skip socket() tests on systems that use socketcall()
          instead of socket()
        - many: support snap title as localized/title-cased name
        - snap-seccomp: deal with mknod on aarch64 in the seccomp tests
        - interfaces: put base policy fragments inside each interface
        - asserts: introduce NewDecoderWithTypeMaxBodySize
        - tests: fix snapd-notify when it takes more time to restart
        - snap-seccomp: fix snap-seccomp tests in artful
        - tests: fix for create-key task to avoid rng-tools service ramains
          alive
        - snap-seccomp: make sure snap-seccomp writes the bpf file
          atomically
        - tests: do not disable ipv6 on core systems
        - arch: the kernel architecture name is armv7l instead of armv7
        - snap-confine: ensure snap-confine waits some seconds for seccomp
          security profiles
        - tests: shellcheck improvements for tests/nested tasks
        - wrappers: add SyslogIdentifier to the service unit files.
        - tests: shellcheck improvements for unit tasks
        - asserts: implement FindManyTrusted as well
        - asserts: open up and optimize Encoder to help avoiding unnecessary
          copying
        - interfaces: simplify snap-confine by just loading pre-generated
          bpf code
        - tests: restart rng-tools services after few seconds
        - interfaces, tests: add mising dbus abstraction to system-observe
          and extend spread test
        - store: change main store host to api.snapcraft.io
        - overlord/cmdstate: new package for running commands as tasks.
        - spread: help libapt resolve installing libudev-dev
        - tests: show the IP from .travis.yaml
        - tests/main: use pkgdb function in more test cases
        - cmd,daemon: add debug command for displaying the base policy
        - tests: prevent quoting error on opensuse
        - tests: fix nightly suite
        - tests: add linode-sru backend
        - snap-confine: validate SNAP_NAME against security tag
        - tests: fix ipv6 disable for ubuntu-core
        - tests: extend core-revert test to cover bluez issues
        - interfaces/greengrass-support: add support for Amazon Greengrass
          as a snap
        - asserts: support timestamp and optional disabled header on repair
        - tests: reboot after upgrading to snapd on the -proposed pocket
        - many: fix test cases to work with different DistroLibExecDir
        - tests: reenable help test on ubuntu and debian systems
        - packaging/{opensuse,fedora}: allow package build with testkeys
          included
        - tests/lib: generalize RPM build support
        - interfaces/builtin: sync connected slot and permanent slot snippet
        - tests: fix snap create-key by restarting automatically rng-tools
        - many: switch to use http numeric statuses as agreed
        - debian: add missing  Type=notify in 14.04 packaging
        - tests: mark interfaces-openvswitch as manual due to prepare errors
        - debian: unify built_using between the 14.04 and 16.04 packaging
          branch
        - tests: pull from urandom when real entropy is not enough
        - tests/main/manpages: install missing man package
        - tests: add refresh --time output check
        - debian: add missing "make -C data/systemd clean"
        - tests: fix for upgrade test when it is repeated
        - tests/main: use dir abstraction in a few more test cases
        - tests/main: check for confinement in a few more interface tests
        - spread: add fedora snap bin dir to global PATH
        - tests: check that locale-control is not present on core
        - many: snapctl outside hooks
        - tests: add whoami check
        - interfaces: compose the base declaration from interfaces
        - tests: fix spread flaky tests linode
        - tests,packaging: add package build support for openSUSE
        - many: slight improvement of some snap error messaging
        - errtracker: Include /etc/apparmor.d/usr.lib.snap-confine md5sum in
          err reports
        - tests: fix for the test postrm-purge
        - tests: restoring the /etc/environment and service units config for
          each test
        - daemon: make snapd a "Type=notify" daemon and notify when startup
          is done
        - cmd/snap-confine: add support for --base snap
        - many: derive implicit slots from interface meta-data
        - tests: add core revert test
        - tests,packaging: add package build support for Fedora for our
          spread setup
        - interfaces: move base declaration to the policy sub-package
        - tests: fix for snapd-reexec test cheking for restart info on debug
          log
        - tests: show available entropy on error
        - tests: clean journalctl logs on trusty
        - tests: fix econnreset on staging
        - tests: modify core before calling set
        - tests: add snap-confine privilege test
        - tests: add staging snap-id
        - interfaces/builtin: silence ptrace denial for network-manager
        - tests: add alsa interface spread test
        - tests: prefer ipv4 over ipv6
        - tests: fix for econnreset test checking that the download already
          started
        - httputil,store: extract retry code to httputil, reorg usages
        - errtracker: report if snapd did re-execute itself
        - errtracker: include bits of snap-confine apparmor profile
        - tests: take into account staging snap-ids for snap-info
        - cmd: add stub new snap-repair command and add timer
        - many: stop "snap refresh $x --channel invalid" from working
        - interfaces: revert "interfaces: re-add reverted ioctl and quotactl
        - snapstate: consider connect/disconnect tasks in
          CheckChangeConflict.
        - interfaces: disable "mknod |N" in the default seccomp template
          again
        - interfaces,overlord/ifacestate: make sure installing slots after
          plugs works similarly to plugs after slots
        - interfaces/seccomp: add bind() syscall for forced-devmode systems
        - packaging/fedora: Sync packaging from Fedora Dist-Git
        - tests: move static and unit tests to spread task
        - many: error types should be called FooError, not ErrFoo.
        - partition: add directory sync to the save uboot.env file code
        - cmd: test everything (100% coverage \o/)
        - many: make shell scripts shellcheck-clean
        - tests: remove additional setup for docker on core
        - interfaces: add summary to each interface
        - many: remove interface meta-data from list of connections
        - logger (& many more, to accommodate): drop explicit syslog.
        - packaging: import packaging bits for opensuse
        - snapstate,many: implement snap install --unaliased
        - tests/lib: abstract build dependency installation a bit more
        - interfaces, osutil: move flock code from interfaces/mount to
          osutil
        - cmd: auto import assertions only from ext4,vfat file systems
        - many: refactor in preparation for 'snap start'
        - overlord/snapstate: have an explicit code path last-refresh
          unset/zero => immediately refresh try
        - tests: fixes for executions using the staging store
        - tests: use pollinate to seed the rng
        - cmd/snap,tests: show the sha3-384 of the snap for snap info
          --verbose SNAP-FILE
        - asserts: simplify and adjust repair assertion definition
        - cmd/snap,tests: show the snap id if available in snap info
        - daemon,overlord/auth: store from model assertion wins
        - cmd/snap,tests/main: add confinement switch instead of spread
          system blacklisting
        - many: cleanup MockCommands and don't leave a process around after
          hookstate tests
        - tests: update listing test to the core version number schema
        - interfaces: allow snaps to use the timedatectl utility
        - packaging: Add Fedora packaging files
        - tests/libs: add distro_auto_remove_packages function
        - cmd/snap: correct devmode note for anomalous state
        - tests/main/snap-info: use proper pkgdb functions to install distro
          packages
        - tests/lib: use mktemp instead of tempfile to work cross-distro
        - tests: abstract common dirs which differ on distributions
        - many: model and expose interface meta-data.
        - overlord: make config defaults from gadget work also at first boot
        - interfaces/log-observe: allow using journalctl from hostfs for
          classic distro
        - partition,snap: add support for android boot
        - errtracker: small simplification around readMachineID
        - snap-confine: move rm_rf_tmp to test-utils.
        - tests/lib: introduce pkgdb helper library
        - errtracker: try multiple paths to read machine-id
        - overlord/hooks: make sure only one hook for given snap is executed
          at a time.
        - cmd/snap-confine: use SNAP_MOUNT_DIR to setup /snap inside the
          confinement env
        - tests: bump kill-timeout and remove quiet call on build
        - tests/lib/snaps: add a test store snap with a passthrough
          configure hook
        - daemon: teach the daemon to wait on active connections when
          shutting down
        - tests: remove unit tests task
        - tests/main/completion: source from /usr/share/bash-completion
        - assertions: add "repair" assertion
        - interfaces/seccomp: document Backend.NewSpecification
        - wrappers: make StartSnapServices cleanup any services that were
          added if a later one fails
        - overlord/snapstate: avoid creating command aliases for daemons
        - vendor: remove unused packages
        - vendor,partition: fix panics from uenv
        - cmd,interfaces/mount: run snap-update-ns and snap-discard-ns from
          core if possible
        - daemon: do not allow to install ubuntu-core anymore
        - wrappers: service start/stop were inconsistent
        - tests: fix failing tests (snap core version, syslog changes)
        - cmd/snap-update-ns: add actual implementation
        - tests: improve entropy also for ubuntu
        - cmd/snap-confine: use /etc/ssl from the core snap
        - wrappers: don't convert between []byte and string needlessly.
        - hooks: default timeout
        - overlord/snapstate: Enable() was ignoring the flags from the
          snap's state, resulting in losing "devmode" on disable/enable.
        - difs,interfaces/mount: add support for locking namespaces
        - interfaces/mount: keep track of kept mount entries
        - tests/main: move a bunch of greps over to MATCH
        - interfaces/builtin: make all interfaces private
        - interfaces/mount: spell unmount correctly
        - tests: allow 16-X.Y.Z version of core snap
        - the timezone_control interface only allows changing /etc/timezone
          and /etc/writable/timezone. systemd-timedated also updated the
          link of /etc/localtime and /etc/writable/localtime ... allow
          access to this file too
        - cmd/snap-confine: aggregate operations holding global lock
        - api, ifacestate: resolve disconnect early
        - interfaces/builtin: ensure we don't register interfaces twice
    
     -- Michael Vogt <email address hidden>  Fri, 18 Aug 2017 15:49:56 +0200
  • snapd (2.27.2) xenial; urgency=medium
    
      * New upstream release, LP: #1703798:
        - tests: remove TestInterfacesHelp as it breaks when go-flags
          changes
        - interfaces: don't crash if content slot has no attributes
        - debian: do not build with -buildmode=pie on i386
        - interfaces: backport broadcom-asic-control interface
        - interfaces: allow /usr/bin/xdg-open in unity7
        - store: do not resume a download when we already have the whole
          thing
    
    snapd (2.27.1) xenial; urgency=medium
    
      * New upstream release, LP: #1703798:
        - tests: use dnf --refresh install to avert stale cache
        - tests: fix test failure on 14.04 due to old version of
          flock
        - updates for unity7/x11, browser-support, network-control,
          mount-observe
        - interfaces/unity7,x11: update for NETLINK_KOBJECT_UEVENT
        - interfaces/browser-support: update sysfs reads for
          newer browser versions
        - interfaces/network-control: rw for ieee80211 advanced wireless
        - interfaces/mount-observe: allow read on sysfs entries for block
          devices
    
    snapd (2.27) xenial; urgency=medium
    
      * New upstream release, LP: #1703798
        - fix build failure on 32bit fedora
        - interfaces: add password-manager-service implicit classic interface
        - interfaces/greengrass-support: adjust accesses now that have working
          snap
        - interfaces/many, cmd/snap-confine: miscellaneous policy updates
        - interfaces/unity7: allow receiving media key events in (at least)
          gnome-shell
        - cmd: fix re-exec bug when starting from snapd 2.21
        - tests: restore interfaces-account-control properly
        - cmd: fix tests that assume /snap mount
        - cmd: mark arch as non-reexecing distro
        - snap-confine: don't share /etc/nsswitch from host
        - store: talk to api.snapcraft.io for purchases
        - hooks: support for install and remove hooks
        - packaging: fix Fedora support
        - tests: add bluetooth-control interface test
        - store: talk to api.snapcraft.io for assertions
        - tests: remove snapd before building from branch
        - tests: add avahi-observe interface test
        - store: orders API now checks if customer is ready
        - cmd/snap: snap find only searches stable
        - interfaces: updates default, mir, optical-observe, system-observe,
          screen-inhibit-control and unity7
        - tests: speedup prepare statement part 1
        - store: do not send empty refresh requests
        - asserts: fix error handling in snap-developer consistency check
        - systemd: add explicit sync to snapd.core-fixup.sh
        - snapd: generate snap cookies on startup
        - cmd,client,daemon: expose "force devmode" in sysinfo
        - many: introduce and use strutil.ListContains and also
          strutil.SortedListContains
        - assserts,overlord/assertstate: test we don't accept chains of
          assertions founded on a self-signed key coming externally
        - interfaces: enable access to bridge settings
        - interfaces: fix copy-pasted iio vs io in io-ports-control
        - cmd/snap-confine: various small fixes and tweaks to seccomp
          support code
        - interfaces: bring back seccomp argument filtering
        - systemd, osutil: rework systemd logs in preparation for services
          commands
        - tests: store /etc/systemd/system/snap-*core*.mount in snapd-
          state.tar.gz
        - tests: shellcheck improvements for tests/main tasks - first set of
          tests
        - cmd/snap: `--last` for abort and watch, and aliases
          (search→find, change→tasks)
        - tests: shellcheck improvements for tests/lib scripts
        - tests: create ramdisk if it's not present
        - tests: shellcheck improvements for nightly upgrade and regressions
          tests
        - snapd: fix for snapctl get panic on null config values.
        - tests: fix for rng-tools service not restarting
        - systemd: add snapd.core-fixup.service unit
        - cmd: avoid using current symlink in InternalToolPath
        - tests: fix timeout issue for test refresh core with hanging …
        - intefaces: control bridged vlan/ppoe-tagged traffic
        - cmd/snap: include snap type in notes
        - overlord/state: Abort() only visits each task once
        - tests: extend find-private test to cover more cases
        - snap-seccomp: skip socket() tests on systems that use socketcall()
          instead of socket()
        - many: support snap title as localized/title-cased name
        - snap-seccomp: deal with mknod on aarch64 in the seccomp tests
        - interfaces: put base policy fragments inside each interface
        - asserts: introduce NewDecoderWithTypeMaxBodySize
        - tests: fix snapd-notify when it takes more time to restart
        - snap-seccomp: fix snap-seccomp tests in artful
        - tests: fix for create-key task to avoid rng-tools service ramains
          alive
        - snap-seccomp: make sure snap-seccomp writes the bpf file
          atomically
        - tests: do not disable ipv6 on core systems
        - arch: the kernel architecture name is armv7l instead of armv7
        - snap-confine: ensure snap-confine waits some seconds for seccomp
          security profiles
        - tests: shellcheck improvements for tests/nested tasks
        - wrappers: add SyslogIdentifier to the service unit files.
        - tests: shellcheck improvements for unit tasks
        - asserts: implement FindManyTrusted as well
        - asserts: open up and optimize Encoder to help avoiding unnecessary
          copying
        - interfaces: simplify snap-confine by just loading pre-generated
          bpf code
        - tests: restart rng-tools services after few seconds
        - interfaces, tests: add mising dbus abstraction to system-observe
          and extend spread test
        - store: change main store host to api.snapcraft.io
        - overlord/cmdstate: new package for running commands as tasks.
        - spread: help libapt resolve installing libudev-dev
        - tests: show the IP from .travis.yaml
        - tests/main: use pkgdb function in more test cases
        - cmd,daemon: add debug command for displaying the base policy
        - tests: prevent quoting error on opensuse
        - tests: fix nightly suite
        - tests: add linode-sru backend
        - snap-confine: validate SNAP_NAME against security tag
        - tests: fix ipv6 disable for ubuntu-core
        - tests: extend core-revert test to cover bluez issues
        - interfaces/greengrass-support: add support for Amazon Greengrass
          as a snap
        - asserts: support timestamp and optional disabled header on repair
        - tests: reboot after upgrading to snapd on the -proposed pocket
        - many: fix test cases to work with different DistroLibExecDir
        - tests: reenable help test on ubuntu and debian systems
        - packaging/{opensuse,fedora}: allow package build with testkeys
          included
        - tests/lib: generalize RPM build support
        - interfaces/builtin: sync connected slot and permanent slot snippet
        - tests: fix snap create-key by restarting automatically rng-tools
        - many: switch to use http numeric statuses as agreed
        - debian: add missing  Type=notify in 14.04 packaging
        - tests: mark interfaces-openvswitch as manual due to prepare errors
        - debian: unify built_using between the 14.04 and 16.04 packaging
          branch
        - tests: pull from urandom when real entropy is not enough
        - tests/main/manpages: install missing man package
        - tests: add refresh --time output check
        - debian: add missing "make -C data/systemd clean"
        - tests: fix for upgrade test when it is repeated
        - tests/main: use dir abstraction in a few more test cases
        - tests/main: check for confinement in a few more interface tests
        - spread: add fedora snap bin dir to global PATH
        - tests: check that locale-control is not present on core
        - many: snapctl outside hooks
        - tests: add whoami check
        - interfaces: compose the base declaration from interfaces
        - tests: fix spread flaky tests linode
        - tests,packaging: add package build support for openSUSE
        - many: slight improvement of some snap error messaging
        - errtracker: Include /etc/apparmor.d/usr.lib.snap-confine md5sum in
          err reports
        - tests: fix for the test postrm-purge
        - tests: restoring the /etc/environment and service units config for
          each test
        - daemon: make snapd a "Type=notify" daemon and notify when startup
          is done
        - cmd/snap-confine: add support for --base snap
        - many: derive implicit slots from interface meta-data
        - tests: add core revert test
        - tests,packaging: add package build support for Fedora for our
          spread setup
        - interfaces: move base declaration to the policy sub-package
        - tests: fix for snapd-reexec test cheking for restart info on debug
          log
        - tests: show available entropy on error
        - tests: clean journalctl logs on trusty
        - tests: fix econnreset on staging
        - tests: modify core before calling set
        - tests: add snap-confine privilege test
        - tests: add staging snap-id
        - interfaces/builtin: silence ptrace denial for network-manager
        - tests: add alsa interface spread test
        - tests: prefer ipv4 over ipv6
        - tests: fix for econnreset test checking that the download already
          started
        - httputil,store: extract retry code to httputil, reorg usages
        - errtracker: report if snapd did re-execute itself
        - errtracker: include bits of snap-confine apparmor profile
        - tests: take into account staging snap-ids for snap-info
        - cmd: add stub new snap-repair command and add timer
        - many: stop "snap refresh $x --channel invalid" from working
        - interfaces: revert "interfaces: re-add reverted ioctl and quotactl
        - snapstate: consider connect/disconnect tasks in
          CheckChangeConflict.
        - interfaces: disable "mknod |N" in the default seccomp template
          again
        - interfaces,overlord/ifacestate: make sure installing slots after
          plugs works similarly to plugs after slots
        - interfaces/seccomp: add bind() syscall for forced-devmode systems
        - packaging/fedora: Sync packaging from Fedora Dist-Git
        - tests: move static and unit tests to spread task
        - many: error types should be called FooError, not ErrFoo.
        - partition: add directory sync to the save uboot.env file code
        - cmd: test everything (100% coverage \o/)
        - many: make shell scripts shellcheck-clean
        - tests: remove additional setup for docker on core
        - interfaces: add summary to each interface
        - many: remove interface meta-data from list of connections
        - logger (& many more, to accommodate): drop explicit syslog.
        - packaging: import packaging bits for opensuse
        - snapstate,many: implement snap install --unaliased
        - tests/lib: abstract build dependency installation a bit more
        - interfaces, osutil: move flock code from interfaces/mount to
          osutil
        - cmd: auto import assertions only from ext4,vfat file systems
        - many: refactor in preparation for 'snap start'
        - overlord/snapstate: have an explicit code path last-refresh
          unset/zero => immediately refresh try
        - tests: fixes for executions using the staging store
        - tests: use pollinate to seed the rng
        - cmd/snap,tests: show the sha3-384 of the snap for snap info
          --verbose SNAP-FILE
        - asserts: simplify and adjust repair assertion definition
        - cmd/snap,tests: show the snap id if available in snap info
        - daemon,overlord/auth: store from model assertion wins
        - cmd/snap,tests/main: add confinement switch instead of spread
          system blacklisting
        - many: cleanup MockCommands and don't leave a process around after
          hookstate tests
        - tests: update listing test to the core version number schema
        - interfaces: allow snaps to use the timedatectl utility
        - packaging: Add Fedora packaging files
        - tests/libs: add distro_auto_remove_packages function
        - cmd/snap: correct devmode note for anomalous state
        - tests/main/snap-info: use proper pkgdb functions to install distro
          packages
        - tests/lib: use mktemp instead of tempfile to work cross-distro
        - tests: abstract common dirs which differ on distributions
        - many: model and expose interface meta-data.
        - overlord: make config defaults from gadget work also at first boot
        - interfaces/log-observe: allow using journalctl from hostfs for
          classic distro
        - partition,snap: add support for android boot
        - errtracker: small simplification around readMachineID
        - snap-confine: move rm_rf_tmp to test-utils.
        - tests/lib: introduce pkgdb helper library
        - errtracker: try multiple paths to read machine-id
        - overlord/hooks: make sure only one hook for given snap is executed
          at a time.
        - cmd/snap-confine: use SNAP_MOUNT_DIR to setup /snap inside the
          confinement env
        - tests: bump kill-timeout and remove quiet call on build
        - tests/lib/snaps: add a test store snap with a passthrough
          configure hook
        - daemon: teach the daemon to wait on active connections when
          shutting down
        - tests: remove unit tests task
        - tests/main/completion: source from /usr/share/bash-completion
        - assertions: add "repair" assertion
        - interfaces/seccomp: document Backend.NewSpecification
        - wrappers: make StartSnapServices cleanup any services that were
          added if a later one fails
        - overlord/snapstate: avoid creating command aliases for daemons
        - vendor: remove unused packages
        - vendor,partition: fix panics from uenv
        - cmd,interfaces/mount: run snap-update-ns and snap-discard-ns from
          core if possible
        - daemon: do not allow to install ubuntu-core anymore
        - wrappers: service start/stop were inconsistent
        - tests: fix failing tests (snap core version, syslog changes)
        - cmd/snap-update-ns: add actual implementation
        - tests: improve entropy also for ubuntu
        - cmd/snap-confine: use /etc/ssl from the core snap
        - wrappers: don't convert between []byte and string needlessly.
        - hooks: default timeout
        - overlord/snapstate: Enable() was ignoring the flags from the
          snap's state, resulting in losing "devmode" on disable/enable.
        - difs,interfaces/mount: add support for locking namespaces
        - interfaces/mount: keep track of kept mount entries
        - tests/main: move a bunch of greps over to MATCH
        - interfaces/builtin: make all interfaces private
        - interfaces/mount: spell unmount correctly
        - tests: allow 16-X.Y.Z version of core snap
        - the timezone_control interface only allows changing /etc/timezone
          and /etc/writable/timezone. systemd-timedated also updated the
          link of /etc/localtime and /etc/writable/localtime ... allow
          access to this file too
        - cmd/snap-confine: aggregate operations holding global lock
        - api, ifacestate: resolve disconnect early
        - interfaces/builtin: ensure we don't register interfaces twice
    
     -- Michael Vogt <email address hidden>  Wed, 16 Aug 2017 12:14:51 +0200
  • snapd (2.26.10) xenial; urgency=medium
    
      * New upstream release, LP: #1690083
        - Fix snap-seccomp tests in artful/trusty on i386/s390x/aarch64
    
    snapd (2.26.9) xenial; urgency=medium
    
      * New upstream release, LP: #1690083
        - statically link libseccomp in snap-seccomp to fix refresh issue
          on trusty
    
    snapd (2.26.8) xenial; urgency=medium
    
      * New upstream release, LP: #1690083
        - Fix snap-seccomp tests in artful/trusty on i386/s390x/aarch64
        - add snapd.core-fixup.service unit
        - ensure re-exec uses the right internal tools
    
    snapd (2.26.6) xenial; urgency=medium
    
      * New upstream release, LP: #1690083
        - interfaces: allow snaps to use the timedatectl utility in
          time-control
    
    snapd (2.26.5) xenial; urgency=medium
    
      * New upstream release, LP: #1690083
        - backport of seccomp-bpf branch to the 2.26 release to ensure snap
          revert with new seccomp syntax works correctly
    
    snapd (2.26.4) xenial; urgency=medium
    
      * New upstream release, LP: #1690083
        - partly revert aace15ab53 to unbreak core reverts
        - Revert "interfaces: re-add reverted ioctl and quotactl (revert 21bc6b9f)"
        - Disable "mknod |N" in the default seccomp template
          reasons outline in https://forum.snapcraft.io/t/snapd-2-25-blocked-because-of-revert-race-condition
        - errtracker: include bits of snap-confine apparmor profile
        - errtracker: report if snapd did re-execute itself
    
    snapd (2.26.3) xenial; urgency=medium
    
      * New upstream release, LP: #1690083
        - cherry pick test fixes f0103a6, 9de5c8a, d7725a7 to make
          sure the image tests are updated for the changes in the
          `snap info core` output and the removal of the rsyslog
          package from core.
    
    snapd (2.26.2) xenial; urgency=medium
    
      * New upstream release, LP: #1690083
        - cherry pick d444728 to make the uboot.env file parsing more
          robust
    
    snapd (2.26.1) xenial; urgency=medium
    
      * New upstream release, LP: #1690083
        - store: fix panic error in auth
        - tests: the new ubuntu-image snap needs classic confinement, adjust
          tests
        - cmd/snap-confine: don't fail on pre 3.8 kernel
    
    snapd (2.26) xenial; urgency=medium
    
      * New upstream release, LP: #1690083
        - timeutil: avoid panicking when the window is very small
        - image: fix go vet issue
        - overlord/ifacestate: don't spam logs with harmless auto-connect
          messages
        - interfaces/builtin: add network-status interface
        - interfaces/builtin: add online-accounts-service interface
        - interfaces/builtin: distribute code of touching allInterfaces
        - interfaces: API additions for interface hooks
        - interfaces/builtin: add storage-framework-service interface
        - tests: disable create-key test on ppc64el for artful (expect not
          working)
        - snap: make `snap prepare-image --extra-snaps` derive side info
        - tests: unify tests/{main/completion,completion}/lib.exp0
        - cmd/snap: tweak info channels output
        - interfaces: ensure that legacy interface methods are unused
        - packaging: cleanup how built-using is generated
        - tests: extend kernel-module-control interface test
        - interfaces/network: workaround Go's need for NETLINK_ROUTE with
          'net'.
        - cmd/snap-confine: use defensive argument parser
        - tests: add test for empty snap name on revert
        - overlord/hookstate: remove unused Context.timeout
        - tests: additional setup in docker test for core systems
        - configstate: return error if patch is invalid
        - interfaces: add random interface
        - store, daemon, client, cmd/snap: handle PASSWORD_POLICY_ERROR
        - cmd/snap, client: add "whoami" command
        - cmd/snap: iterate interface tab completion
        - snap: move locale-control to only be present on classic
        - interfaces/browser-support: deny read on squashfs backing files
          and LVM vg names
        - tests: wait for the docker socket to be listening
        - snap: add `snap refresh --time` option
        - tests: re-enable and moderninze /media sharing test
        - cmd: make rst2man optional
        - tests: remove quoting from [[ ]] when globs
        - interfaces: allow plugging DBus clients to introspect the slot
          service
        - packaging/ubuntu*/changelog: drop extra dash
        - snap-confine: init the ENTRY variable, coverity is unhappy
          otherwise
        - cmd/snap-confine/spread-tests: discard useless --version test
        - spread: add spread target qemu:debian-9-64
        - interfaces: mediate netlink sockets via seccomp
        - tests,cmd/snap-confine: port older snapd-discard-ns tests
        - cmd/snap-confine/tests: fix shellcheck on recently added files
        - tests/upgrade: force install core snap from beta for debian
        - overlord/snapstate/backend,interfaces/mount: move ns management
          code.
        - tests: extend network-control spread test to cope with network
          namespaces
        - tests: fail early in the spread suite if trying to run it inside a
          container
        - tests: set ownership of $PROJECT_PATH for the external backend
        - tests: specify the auto-refreshable snap being tested
        - many: fix tests with go1.8 / artful
        - fix for tests: debian does not have /snap/bin in secure_path so
          sudo
        - snap: support for snap tasks --last=...
        - cmd/snap-confine: remove obsolete debug message
        - address review feedback, add a lot of comments :-), call
          shellcheck on the completion scripts, fix a bug in compopt
    
     -- Michael Vogt <email address hidden>  Mon, 17 Jul 2017 11:58:22 +0200
  • snapd (2.26.9) xenial; urgency=medium
    
      * New upstream release, LP: #1690083
        - statically link libseccomp in snap-seccomp to fix refresh issue
          on trusty
    
    snapd (2.26.8) xenial; urgency=medium
    
      * New upstream release, LP: #1690083
        - Fix snap-seccomp tests in artful/trusty on i386/s390x/aarch64
        - add snapd.core-fixup.service unit
        - ensure re-exec uses the right internal tools
    
    snapd (2.26.6) xenial; urgency=medium
    
      * New upstream release, LP: #1690083
        - interfaces: allow snaps to use the timedatectl utility in
          time-control
    
    snapd (2.26.5) xenial; urgency=medium
    
      * New upstream release, LP: #1690083
        - backport of seccomp-bpf branch to the 2.26 release to ensure snap
          revert with new seccomp syntax works correctly
    
    snapd (2.26.4) xenial; urgency=medium
    
      * New upstream release, LP: #1690083
        - partly revert aace15ab53 to unbreak core reverts
        - Revert "interfaces: re-add reverted ioctl and quotactl (revert 21bc6b9f)"
        - Disable "mknod |N" in the default seccomp template
          reasons outline in https://forum.snapcraft.io/t/snapd-2-25-blocked-because-of-revert-race-condition
        - errtracker: include bits of snap-confine apparmor profile
        - errtracker: report if snapd did re-execute itself
    
    snapd (2.26.3) xenial; urgency=medium
    
      * New upstream release, LP: #1690083
        - cherry pick test fixes f0103a6, 9de5c8a, d7725a7 to make
          sure the image tests are updated for the changes in the
          `snap info core` output and the removal of the rsyslog
          package from core.
    
    snapd (2.26.2) xenial; urgency=medium
    
      * New upstream release, LP: #1690083
        - cherry pick d444728 to make the uboot.env file parsing more
          robust
    
    snapd (2.26.1) xenial; urgency=medium
    
      * New upstream release, LP: #1690083
        - store: fix panic error in auth
        - tests: the new ubuntu-image snap needs classic confinement, adjust
          tests
        - cmd/snap-confine: don't fail on pre 3.8 kernel
    
    snapd (2.26) xenial; urgency=medium
    
      * New upstream release, LP: #1690083
        - timeutil: avoid panicking when the window is very small
        - image: fix go vet issue
        - overlord/ifacestate: don't spam logs with harmless auto-connect
          messages
        - interfaces/builtin: add network-status interface
        - interfaces/builtin: add online-accounts-service interface
        - interfaces/builtin: distribute code of touching allInterfaces
        - interfaces: API additions for interface hooks
        - interfaces/builtin: add storage-framework-service interface
        - tests: disable create-key test on ppc64el for artful (expect not
          working)
        - snap: make `snap prepare-image --extra-snaps` derive side info
        - tests: unify tests/{main/completion,completion}/lib.exp0
        - cmd/snap: tweak info channels output
        - interfaces: ensure that legacy interface methods are unused
        - packaging: cleanup how built-using is generated
        - tests: extend kernel-module-control interface test
        - interfaces/network: workaround Go's need for NETLINK_ROUTE with
          'net'.
        - cmd/snap-confine: use defensive argument parser
        - tests: add test for empty snap name on revert
        - overlord/hookstate: remove unused Context.timeout
        - tests: additional setup in docker test for core systems
        - configstate: return error if patch is invalid
        - interfaces: add random interface
        - store, daemon, client, cmd/snap: handle PASSWORD_POLICY_ERROR
        - cmd/snap, client: add "whoami" command
        - cmd/snap: iterate interface tab completion
        - snap: move locale-control to only be present on classic
        - interfaces/browser-support: deny read on squashfs backing files
          and LVM vg names
        - tests: wait for the docker socket to be listening
        - snap: add `snap refresh --time` option
        - tests: re-enable and moderninze /media sharing test
        - cmd: make rst2man optional
        - tests: remove quoting from [[ ]] when globs
        - interfaces: allow plugging DBus clients to introspect the slot
          service
        - packaging/ubuntu*/changelog: drop extra dash
        - snap-confine: init the ENTRY variable, coverity is unhappy
          otherwise
        - cmd/snap-confine/spread-tests: discard useless --version test
        - spread: add spread target qemu:debian-9-64
        - interfaces: mediate netlink sockets via seccomp
        - tests,cmd/snap-confine: port older snapd-discard-ns tests
        - cmd/snap-confine/tests: fix shellcheck on recently added files
        - tests/upgrade: force install core snap from beta for debian
        - overlord/snapstate/backend,interfaces/mount: move ns management
          code.
        - tests: extend network-control spread test to cope with network
          namespaces
        - tests: fail early in the spread suite if trying to run it inside a
          container
        - tests: set ownership of $PROJECT_PATH for the external backend
        - tests: specify the auto-refreshable snap being tested
        - many: fix tests with go1.8 / artful
        - fix for tests: debian does not have /snap/bin in secure_path so
          sudo
        - snap: support for snap tasks --last=...
        - cmd/snap-confine: remove obsolete debug message
        - address review feedback, add a lot of comments :-), call
          shellcheck on the completion scripts, fix a bug in compopt
    
     -- Michael Vogt <email address hidden>  Wed, 12 Jul 2017 08:27:14 +0200
  • snapd (2.26.8) xenial; urgency=medium
    
      * New upstream release, LP: #1690083
        - Fix snap-seccomp tests in artful/trusty on i386/s390x/aarch64
        - add snapd.core-fixup.service unit
        - ensure re-exec uses the right internal tools
    
    snapd (2.26.6) xenial; urgency=medium
    
      * New upstream release, LP: #1690083
        - interfaces: allow snaps to use the timedatectl utility in
          time-control
    
    snapd (2.26.5) xenial; urgency=medium
    
      * New upstream release, LP: #1690083
        - backport of seccomp-bpf branch to the 2.26 release to ensure snap
          revert with new seccomp syntax works correctly
    
    snapd (2.26.4) xenial; urgency=medium
    
      * New upstream release, LP: #1690083
        - partly revert aace15ab53 to unbreak core reverts
        - Revert "interfaces: re-add reverted ioctl and quotactl (revert 21bc6b9f)"
        - Disable "mknod |N" in the default seccomp template
          reasons outline in https://forum.snapcraft.io/t/snapd-2-25-blocked-because-of-revert-race-condition
        - errtracker: include bits of snap-confine apparmor profile
        - errtracker: report if snapd did re-execute itself
    
    snapd (2.26.3) xenial; urgency=medium
    
      * New upstream release, LP: #1690083
        - cherry pick test fixes f0103a6, 9de5c8a, d7725a7 to make
          sure the image tests are updated for the changes in the
          `snap info core` output and the removal of the rsyslog
          package from core.
    
    snapd (2.26.2) xenial; urgency=medium
    
      * New upstream release, LP: #1690083
        - cherry pick d444728 to make the uboot.env file parsing more
          robust
    
    snapd (2.26.1) xenial; urgency=medium
    
      * New upstream release, LP: #1690083
        - store: fix panic error in auth
        - tests: the new ubuntu-image snap needs classic confinement, adjust
          tests
        - cmd/snap-confine: don't fail on pre 3.8 kernel
    
    snapd (2.26) xenial; urgency=medium
    
      * New upstream release, LP: #1690083
        - timeutil: avoid panicking when the window is very small
        - image: fix go vet issue
        - overlord/ifacestate: don't spam logs with harmless auto-connect
          messages
        - interfaces/builtin: add network-status interface
        - interfaces/builtin: add online-accounts-service interface
        - interfaces/builtin: distribute code of touching allInterfaces
        - interfaces: API additions for interface hooks
        - interfaces/builtin: add storage-framework-service interface
        - tests: disable create-key test on ppc64el for artful (expect not
          working)
        - snap: make `snap prepare-image --extra-snaps` derive side info
        - tests: unify tests/{main/completion,completion}/lib.exp0
        - cmd/snap: tweak info channels output
        - interfaces: ensure that legacy interface methods are unused
        - packaging: cleanup how built-using is generated
        - tests: extend kernel-module-control interface test
        - interfaces/network: workaround Go's need for NETLINK_ROUTE with
          'net'.
        - cmd/snap-confine: use defensive argument parser
        - tests: add test for empty snap name on revert
        - overlord/hookstate: remove unused Context.timeout
        - tests: additional setup in docker test for core systems
        - configstate: return error if patch is invalid
        - interfaces: add random interface
        - store, daemon, client, cmd/snap: handle PASSWORD_POLICY_ERROR
        - cmd/snap, client: add "whoami" command
        - cmd/snap: iterate interface tab completion
        - snap: move locale-control to only be present on classic
        - interfaces/browser-support: deny read on squashfs backing files
          and LVM vg names
        - tests: wait for the docker socket to be listening
        - snap: add `snap refresh --time` option
        - tests: re-enable and moderninze /media sharing test
        - cmd: make rst2man optional
        - tests: remove quoting from [[ ]] when globs
        - interfaces: allow plugging DBus clients to introspect the slot
          service
        - packaging/ubuntu*/changelog: drop extra dash
        - snap-confine: init the ENTRY variable, coverity is unhappy
          otherwise
        - cmd/snap-confine/spread-tests: discard useless --version test
        - spread: add spread target qemu:debian-9-64
        - interfaces: mediate netlink sockets via seccomp
        - tests,cmd/snap-confine: port older snapd-discard-ns tests
        - cmd/snap-confine/tests: fix shellcheck on recently added files
        - tests/upgrade: force install core snap from beta for debian
        - overlord/snapstate/backend,interfaces/mount: move ns management
          code.
        - tests: extend network-control spread test to cope with network
          namespaces
        - tests: fail early in the spread suite if trying to run it inside a
          container
        - tests: set ownership of $PROJECT_PATH for the external backend
        - tests: specify the auto-refreshable snap being tested
        - many: fix tests with go1.8 / artful
        - fix for tests: debian does not have /snap/bin in secure_path so
          sudo
        - snap: support for snap tasks --last=...
        - cmd/snap-confine: remove obsolete debug message
        - address review feedback, add a lot of comments :-), call
          shellcheck on the completion scripts, fix a bug in compopt
    
     -- Michael Vogt <email address hidden>  Wed, 05 Jul 2017 07:48:22 +0200
  • snapd (2.26.4) xenial; urgency=medium
    
      * New upstream release, LP: #1690083
        - partly revert aace15ab53 to unbreak core reverts
        - Revert "interfaces: re-add reverted ioctl and quotactl (revert 21bc6b9f)"
        - Disable "mknod |N" in the default seccomp template
          reasons outline in https://forum.snapcraft.io/t/snapd-2-25-blocked-because-of-revert-race-condition
        - errtracker: include bits of snap-confine apparmor profile
        - errtracker: report if snapd did re-execute itself
    
    snapd (2.26.3) xenial; urgency=medium
    
      * New upstream release, LP: #1690083
        - cherry pick test fixes f0103a6, 9de5c8a, d7725a7 to make
          sure the image tests are updated for the changes in the
          `snap info core` output and the removal of the rsyslog
          package from core.
    
    snapd (2.26.2) xenial; urgency=medium
    
      * New upstream release, LP: #1690083
        - cherry pick d444728 to make the uboot.env file parsing more
          robust
    
    snapd (2.26.1) xenial; urgency=medium
    
      * New upstream release, LP: #1690083
        - store: fix panic error in auth
        - tests: the new ubuntu-image snap needs classic confinement, adjust
          tests
        - cmd/snap-confine: don't fail on pre 3.8 kernel
    
    snapd (2.26) xenial; urgency=medium
    
      * New upstream release, LP: #1690083
        - timeutil: avoid panicking when the window is very small
        - image: fix go vet issue
        - overlord/ifacestate: don't spam logs with harmless auto-connect
          messages
        - interfaces/builtin: add network-status interface
        - interfaces/builtin: add online-accounts-service interface
        - interfaces/builtin: distribute code of touching allInterfaces
        - interfaces: API additions for interface hooks
        - interfaces/builtin: add storage-framework-service interface
        - tests: disable create-key test on ppc64el for artful (expect not
          working)
        - snap: make `snap prepare-image --extra-snaps` derive side info
        - tests: unify tests/{main/completion,completion}/lib.exp0
        - cmd/snap: tweak info channels output
        - interfaces: ensure that legacy interface methods are unused
        - packaging: cleanup how built-using is generated
        - tests: extend kernel-module-control interface test
        - interfaces/network: workaround Go's need for NETLINK_ROUTE with
          'net'.
        - cmd/snap-confine: use defensive argument parser
        - tests: add test for empty snap name on revert
        - overlord/hookstate: remove unused Context.timeout
        - tests: additional setup in docker test for core systems
        - configstate: return error if patch is invalid
        - interfaces: add random interface
        - store, daemon, client, cmd/snap: handle PASSWORD_POLICY_ERROR
        - cmd/snap, client: add "whoami" command
        - cmd/snap: iterate interface tab completion
        - snap: move locale-control to only be present on classic
        - interfaces/browser-support: deny read on squashfs backing files
          and LVM vg names
        - tests: wait for the docker socket to be listening
        - snap: add `snap refresh --time` option
        - tests: re-enable and moderninze /media sharing test
        - cmd: make rst2man optional
        - tests: remove quoting from [[ ]] when globs
        - interfaces: allow plugging DBus clients to introspect the slot
          service
        - packaging/ubuntu*/changelog: drop extra dash
        - snap-confine: init the ENTRY variable, coverity is unhappy
          otherwise
        - cmd/snap-confine/spread-tests: discard useless --version test
        - spread: add spread target qemu:debian-9-64
        - interfaces: mediate netlink sockets via seccomp
        - tests,cmd/snap-confine: port older snapd-discard-ns tests
        - cmd/snap-confine/tests: fix shellcheck on recently added files
        - tests/upgrade: force install core snap from beta for debian
        - overlord/snapstate/backend,interfaces/mount: move ns management
          code.
        - tests: extend network-control spread test to cope with network
          namespaces
        - tests: fail early in the spread suite if trying to run it inside a
          container
        - tests: set ownership of $PROJECT_PATH for the external backend
        - tests: specify the auto-refreshable snap being tested
        - many: fix tests with go1.8 / artful
        - fix for tests: debian does not have /snap/bin in secure_path so
          sudo
        - snap: support for snap tasks --last=...
        - cmd/snap-confine: remove obsolete debug message
        - address review feedback, add a lot of comments :-), call
          shellcheck on the completion scripts, fix a bug in compopt
    
     -- Michael Vogt <email address hidden>  Thu, 01 Jun 2017 18:50:52 +0200
  • snapd (2.26.1) xenial; urgency=medium
    
      * New upstream release, LP: #1690083
        - store: fix panic error in auth
        - tests: the new ubuntu-image snap needs classic confinement, adjust
          tests
        - cmd/snap-confine: don't fail on pre 3.8 kernel
    
    snapd (2.26) xenial; urgency=medium
    
      * New upstream release, LP: #1690083
        - timeutil: avoid panicking when the window is very small
        - image: fix go vet issue
        - overlord/ifacestate: don't spam logs with harmless auto-connect
          messages
        - interfaces/builtin: add network-status interface
        - interfaces/builtin: add online-accounts-service interface
        - interfaces/builtin: distribute code of touching allInterfaces
        - interfaces: API additions for interface hooks
        - interfaces/builtin: add storage-framework-service interface
        - tests: disable create-key test on ppc64el for artful (expect not
          working)
        - snap: make `snap prepare-image --extra-snaps` derive side info
        - tests: unify tests/{main/completion,completion}/lib.exp0
        - cmd/snap: tweak info channels output
        - interfaces: ensure that legacy interface methods are unused
        - packaging: cleanup how built-using is generated
        - tests: extend kernel-module-control interface test
        - interfaces/network: workaround Go's need for NETLINK_ROUTE with
          'net'.
        - cmd/snap-confine: use defensive argument parser
        - tests: add test for empty snap name on revert
        - overlord/hookstate: remove unused Context.timeout
        - tests: additional setup in docker test for core systems
        - configstate: return error if patch is invalid
        - interfaces: add random interface
        - store, daemon, client, cmd/snap: handle PASSWORD_POLICY_ERROR
        - cmd/snap, client: add "whoami" command
        - cmd/snap: iterate interface tab completion
        - snap: move locale-control to only be present on classic
        - interfaces/browser-support: deny read on squashfs backing files
          and LVM vg names
        - tests: wait for the docker socket to be listening
        - snap: add `snap refresh --time` option
        - tests: re-enable and moderninze /media sharing test
        - cmd: make rst2man optional
        - tests: remove quoting from [[ ]] when globs
        - interfaces: allow plugging DBus clients to introspect the slot
          service
        - packaging/ubuntu*/changelog: drop extra dash
        - snap-confine: init the ENTRY variable, coverity is unhappy
          otherwise
        - cmd/snap-confine/spread-tests: discard useless --version test
        - spread: add spread target qemu:debian-9-64
        - interfaces: mediate netlink sockets via seccomp
        - tests,cmd/snap-confine: port older snapd-discard-ns tests
        - cmd/snap-confine/tests: fix shellcheck on recently added files
        - tests/upgrade: force install core snap from beta for debian
        - overlord/snapstate/backend,interfaces/mount: move ns management
          code.
        - tests: extend network-control spread test to cope with network
          namespaces
        - tests: fail early in the spread suite if trying to run it inside a
          container
        - tests: set ownership of $PROJECT_PATH for the external backend
        - tests: specify the auto-refreshable snap being tested
        - many: fix tests with go1.8 / artful
        - fix for tests: debian does not have /snap/bin in secure_path so
          sudo
        - snap: support for snap tasks --last=...
        - cmd/snap-confine: remove obsolete debug message
        - address review feedback, add a lot of comments :-), call
          shellcheck on the completion scripts, fix a bug in compopt
    
     -- Michael Vogt <email address hidden>  Thu, 11 May 2017 21:44:27 +0200
  • snapd (2.25) xenial; urgency=medium
    
      * New upstream release, LP: #1686713
        - interfaces/default: allow mknod for regular files, pipes and
          sockets
        - many: use "SNAP.APP as ALIAS" instead of => when listing
          added/removed aliases
        - cmd/snap-confine: write current mount profile
        - cmd/snap-discard-ns: remove current profile when cleaning up
        - many: support debian in our CI
        - tests: tweak time for econnreset test a bit more
        - cmd/snap-confine: re-enable re-assciate fix for CE
        - many: aliases v2 cleanups
        - cmd/snap-confine: don't use apparmor if it is disabled on boot
        - many: implement `snap prefer <snap>`  (aliases v2)
        - many: adjust /aliases and "snap aliases" to aliases v2, also some
          cleanup
        - snapstate: normalize gadget defaults
        - many: allow core refresh.schedule setting
        - many: show alias changes on snap alias/unalias (aliases v2)
        - client,cmd/snap: improve messaging on --devmode and --classic
        - many: implement `snap unalias <alias-or-snap>` (aliases v2)
        - store: retry on connection reset
        - interfaces/mount: add Change.Perform
        - tests: add openvswitch interface spread test
        - interfaces/i2c: allow modifying device-specific sysfs entries
        - interfaces: allow writing to /run/systemd/journal/stdout by
          default
        - tests: ensure travis fails early if static checks fail
        - store,daemon: make store interpret channel="" as stable in most
          cases
        - overlord/snapstate: make UpdateAliases idempotent, simplify the
          backend interface bits for aliases not used anymore (aliases v2)
        - many: implement snap alias <snap.app> <alias> (aliases v2)
        - snap-confine: add code to ensure that / or /snap is mounted
          "shared"
        - many: show available "tracks" in `snap info`
        - cmd/snap: make users Xauthority file available in snap environment
        - interfaces/mount: write current fstab files with mode 0644
        - overlord: switch to aliases v2 tasks for install/refresh etc ops
          plus transition
        - tests: parameterize gadget snap channel (#3117)
        - tests: copy .real profile as .real
        - tests: add empty initrd failover test
        - many: mount squashfs as read-only
        - cmd: make locking around namespaces explicit
        - tests: address review comments from #3186
        - tests: add dbus interface spread test
        - interfaces/mount: add ReadMountInfo and LoadMountInfo
        - snap: require snap name for 'revert'
        - overlord: maintain per-revision snapshots of snap configuration
        - tests: relax network-bind interface regexps
        - interfaces: re-add reverted ioctl and quotactl (revert 21bc6b9f)
        - store: retry once on hashsum mismatches in a Download()
        - interfaces/builtin: don't panic if content plug has nil attrs
        - interfaces/mount: pass mount.Profile to mount.NeededChanges
        - packaging: add `built-using` header for 16.04 packaging
        - interfaces: add media-hub interface
        - interfaces/builtin: allow full access to properties iface of the
          udisks service
        - tests: handle case when both .real and plain are present
        - interfaces/mount: add Change.String for readable output
        - tests: ensure we mock force dev mode as well to fix FTBFS in
          sbuild
        - store: add more logs around retry in download
        - interfaces/mount: add stub Change.{Needed,Perform}
        - tests: allow installing snapd from -proposed for SRU validation
        - interfaces/mount: parse mount options to map[string]string
        - snap: added tasks subcommand
        - tests: copy snap-confine apparmor profile into testbed
        - interfaces/mount: improve go identifier names of mountinfo, parse
          optional fields
        - - Arch Linux wants to respect FHS
          (https://bugs.archlinux.org/task/53656),
        - daemon: do not set RemoveSnapPath flag when doing a try
        - debian: add maintscript helper to remove usr.lib.snapd.snap-
          confine in snap-confine
        - cmd/snap-confine: don't use plain "classic" term
        - cmd/snap-confine: set TMPDIR and TEMPDIR each time
        - many: fixes for `go vet` in go 1.7
        - tests: add kernel-module-control interface test
        - overlord/snapstate: introduce tasks for aliases v2 semantics with
          temporary names for now (aliases v2)
        - overlord/devicestate: switch to ssh-keygen for device key
          generation
        - snap: skip /dev/ram from auto-import assertions to make it less
          noisy (#3010)
        - interfaces: add kubernetes-support interface and adjust related
          interfaces (LP: #1664638)
        - tests: download previous snapd package from published versions
          instead of specific PPA
        - snap: run snap-confine from core if snap is also running from core
        - overlord/ifacestate: automatically rename connections on core snap
        - many: break the /aliases mutation API with a clean 400 (aliases
          v2)
        - interfaces/builting: allow read-only access to /sys/module
        - tests: add extra test after the core transition for snap get/set
          core
        - store: misc cleanups in tests
        - interfaces/mount: add parser for mountinfo entries
        - store: tests for unexpected EOF
        - tests: fix unity test
        - interfaces,overlord: log interface auto-connection failures
        - cmd/snap-update-ns: add C preamble for setns
        - interfaces: validate plug/slot uniqueness
    
     -- Michael Vogt <email address hidden>  Fri, 28 Apr 2017 07:57:49 +0200
  • snapd (2.24.1) xenial; urgency=medium
    
      * New upstream release, LP: #1681799:
        - fix autopkgtest failures with stable core snap
        - ensure the snap-confine transitional package cleans up
          the no-longer-used apparmor profile to fix the kernels
          autopkgtest failures
    
    snapd (2.24) xenial; urgency=medium
    
      * New upstream release, LP: #1681799:
        - interfaces/mount: add InfoEntry type
        - many: fix plug auto-connect during core transition
        - interfaces: fold network bind into core support with tests
        - .travis.yml: add option to make raw log less noisy
        - interfaces: adjust shm accesses to use 'm' for updated mmap kernel
          mediation
        - many: rename two core plugs that clash with slot names
        - snap-confine,browser-support: /dev/tty for snap-confine, misc
          browser-support for gnome-shell
        - store: add download test with EOF in the middle
        - tests: adjust to look for network-bind-plug
        - store: make hash error message more accurate
        - overlord/snapstate: simplify AliasesStatus down to just an
          AutoAliasesDisabled bool flag (aliases v2)
        - errtracker: never send errtracker reports when running under
          SNAPPY_TESTING
        - interfaces/repo: validate slot/plug names
        - daemon: Give the snap directories via GET /v2/system-info
        - interfaces/unity7: support unity messaging menu
        - interfaces/mount: add high-level Profile functions
        - git: ignore only the cmd/Makefile{,.in}
        - cmd: explicitly set _GNU_SOURCE and _FILE_OFFSET_BITS for xfs
          support
        - daemon: add desktop file location for app to the API
        - overlord,release: disable classic snap support when not possible
        - overlord: fix TestEnsureLoopPrune not to be so racy
        - many: abstract path to /bin/{true,false}
        - data/systemd: tweak data/systemd/Makefile to be slightly simpler
        - store: handle EOF via url.Error check
        - packaging: use templates for relevant systemd units
        - tests: run gccgo only on ubuntu-16.04-64
        - .travis.yml: remove travis matrix and do a single sequential run
        - overlord/state: make sure that setting to nil a state key is
          equivalent to deleting it
        - tests: fix incorrect shell expression
        - interfaces/mount: add OptsToFlags for converting arguments to
          syscall…
        - interfaces: add a joystick interface
        - tests: enable docker test for more ubuntu-core systems
        - tests: download and install additional dependencies when using
          prepackaged snapd
        - many: add support for partially static builds
        - interfaces: allow slot to introspect dbus-daemon in dbus
          interface, allow /usr/bin/arch by default
        - interfaces/mount: fix golint issues
        - interfaces/mount: add function for saving fstab-like file
        - osutil: introducing GetenvInt64, like GetenvBool but Int64er.
        - interfaces: drop udev tagging from framebuffer interface
        - snapstate: more helpers to work with aliases state (aliases
          v2)
        - interfaces/mount: add function for parsing fstab-like file
        - cmd: disable the re-associate fix as requested by jdstrand
        - overlord/snapstate: unlock/relock the state less, especially not
          across mutating the SnapState of a snap
        - interfaces: allow executing ld.so (needed with new AppArmor base
          abstraction)
        - interfaces/mount: add function for parsing mount entries
        - cmd: rework header check for xfs/xqm.h
        - cmd: add poky to the list of distros which don't support reexec
        - overlord: finish reorg, revert "be more conservative until we have
          cut 2.23.x"
        - cmd: select what socket to use in cmd/snap{,ctl}
        - overlord: remove snap config values when snap is removed
        - snapstate: introduce helper to apply to disk a alias states change
          for a snap (aliases v2)
        - configstate,hookstate: timeout the configure hook after 5 mins,
          report failures to the errtracker
        - interfaces/seccomp: add bind as part of the default seccomp policy
          for hooks
        - cmd: discard the C implementation of snap-update-ns
        - tests: remove stale apt proxy leftover from cloud-init
        - tests: move unity test to nightly suite
        - interfaces: add support for location-observe for
          dbus::ObjectManager session paths
        - boot: log error in KernelOrOsRebootRequired
        - interfaces: remove old API
        - interfaces: use udev spec
        - interfaces: convert systemd backend to new APIs
        - osutil: add BootID
        - tests: move docker test to new nightly suite
        - interfaces/mount: compute mount changes required to transition
          mount profiles
        - data/selinux: add context definition for snapctl
        - overlord: clean up organization under state packages
        - overlord: make sure all managers packages have *state.go with the
          main state manipulation/query APIs
        - interfaces: use spec in the dbus backend
        - store: download from authenticated URL if there is a device
          session set
        - tests: remove core_name variable
        - interfaces: rename thumbnailer to thumbnailer-service
        - interfaces: add chroot to base templates
        - asserts: remove some unused things
        - systemd: mount the squashfs with nodev
        - overlord: when shutting down assume errors might be due to
          cancellation so retry
        - cmd: rename all unit tests to $command/unit-test
        - cmd/snap: fix help string for version command
        - asserts: don't allow revocations with other items for the same
          developer
        - tests: skip lp-1644439 test on older kernels
        - interfaces: allow "sync" to be used by core support
        - assertstate,snapstate: have assertstate.AutoAliases use the
          "aliases" header
        - interfaces: allow writing config.txt.tmp  in the core-support
          interface
        - tests: adjust network-bind test
        - interfaces: dbus backend spec
        - asserts: introduce a snap-declaration "aliases" header to list
          auto aliases with explicit targets
        - cmd: enable large file support
        - cmd/snap: handle missing snap-confine
        - cmd/snap-confine: re-associate with pid-1 mount namespace if
          required
        - cmd/libsnap: make mountinfo structures public
        - tests: fix interfaces-cups-control for zesty
        - misc: revert "Log if the system goes into ForceDevMode"
        - interfaces: seccomp tests cleanup
        - cmd: validate SNAP_NAME
        - interfaces: log if the system goes into ForceDevMode
        - tests: fix classic-ubuntu-core-transition race
        - interfaces: use apparmor spec in the apparmor backend
        - interfaces: alphabetize framebuffer in base decl and add it to
          all_test.go
        - tests: add ubuntu-core-16-32 system to the external backend and
          fix docker test
        - cmd/libsnap: simplify sc_string_quote default case
        - osutil: fix double expand in environment map code and add test
        - interfaces: extend location-control out-of-process provider
          support
        - cmd/snap-update-ns: use bidirectional lists for mount entries
        - tests: prevent automatic transition before setting the initial
          state of the test
        - release: detect if we are in ForcedDevMode by inspecting the
          kernel
        - tests: add core-snap-refresh test
        - interfaces: add maliit input method interface
        - interfaces: seccomp spec API tweaks for better tests
        - interfaces: updates for mir-kiosk in browser-support, mir, opengl,
          unity7
        - testutils: address review feedback from PR#2997
        - tests: specify the core version to be unsquashfs'ed in the
          failover tests
        - interfaces: use MockInfo in tests
        - cmd/libsnap: add sc_quote_string
        - cmd/snap-confine: use sc_do_umount everywhere
        - interfaces: add unity8 plug permissions
        - timeutil: a few helpers for the recurring events
        - asserts: implement snap-developer type
        - partition: deal with grub{,2}-editenv in tests
        - many: add new (hidden) `snap debug ensure-state-soon` command and
          use in tests
        - interfaces/builtin: small refactor of dbus tests
        - packaging, tests: use "systemctl list-unit-files --full"
          everywhere
        - many: some opensuse patches that are ready to go into master
        - packaging: add opensuse permissions files
        - client, daemon: move "snap list" name filtering into snapd.
        - interfaces: use seccomp specs
        - overlord/snapstate: small cleanup of
          ensureForceDevmodeDropsDevmodeFromState
        - interfaces/builtin/alsa: add read access to alsa state dir
        - interfaces: use spec in kmod backend, updated firewall_control,
          openvswitch_support, ppp
        - cmd/snap-confine: use sc_do_mount everywhere
        - tests: remove workaround for docker again, snap-declaration is
          fixed now
        - interfaces: interface to allow autopilot introspection
    
     -- Michael Vogt <email address hidden>  Wed, 19 Apr 2017 11:54:33 +0200
  • snapd (2.23.6) xenial; urgency=medium
    
      * New upstream release, LP: #1673568
        - cmd: use the most appropriate snap/snapctl sockets
        - tests: fix interfaces-cups-control for zesty
        - configstate,hookstate: timeout the configure hook after 5 mins,
          report failures
        - packaging: rename the file shipping snap-confine AA profile to
          workaround dpkg bug #858004
        - many: ignore configure hook failures on core refresh to ensure
          upgrades are always possible
        - snapstate: restart as needed if we undid unlinking aka relinked
          core or kernel snap
    
     -- Michael Vogt <email address hidden>  Wed, 29 Mar 2017 15:30:35 +0200
  • snapd (2.23.1) xenial; urgency=medium
    
      * New upstream release, LP: #1665608
        - packaging, tests: use "systemctl list-unit-files --full"
          everywhere
        - interfaces: fix default content attribute value
        - tests: do not nuke the entire snapd.conf.d dir when changing
          store settings
        - hookstate: run the right "snap" command in the hookmanager
        - snapstate: revert PR#2958, run configure hook again everywhere
    
    snapd (2.23) xenial; urgency=medium
    
      * New upstream release, LP: #1665608
        - overlord: phase 2 with 2nd setup-profiles and hook done after
          restart for core installation
        - data: re-add snapd.refresh.{timer,service} with weekly schedule
        - interfaces: allow 'getent' by default with some missing dbs to
          various interfaces
        - overlord/snapstate: drop forced devmode
        - snapstate: disable running the configure hook on classic for the
          core snap
        - ifacestate: re-generate apparmor in InterfaceManager.initialize()
        - daemon: DevModeDistro does not imply snapstate.Flags{DevMode:true}
        - interfaces/bluez,network-manager: implement ConnectedSlot policy
        - cmd: add helpers for mounting / unmounting
        - snapstate: error in LinkSnap() if revision is unset
        - release: add linuxmint 18 to the non-devmode distros
        - cmd: fixes to run correctly on opensuse
        - interfaces: consistently use 'const' instead of 'var' for security
          policy
        - interfaces: miscellaneous policy updates for unity7, udisks2 and
          browser-support
        - interfaces/apparmor: compensate for kernel behavior change
        - many: only tweak core config if hook exists
        - overlord/hookstate: don't report a run hook output error without
          any context
        - cmd/snap-update-ns: move test data and helpers to new module
        - vet: fix vet error on mount test.
        - tests: empty init (systemd) failover test
        - cmd: add .indent.pro file to the tree
        - interfaces: specs for apparmor, seccomp, udev
        - wrappers/services: RemainAfterExit=yes for oneshot daemons w/ stop
          cmds
        - tests: several improvements to the nested suite
        - tests: do not use core for "All snaps up to date" check
        - cmd/snap-update-ns: add function for sorting mount entries
        - httputil: copy some headers over redirects
        - data/selinux: merge SELinux policy module
        - kmod: added Specification for kmod security backend
        - tests: failover test for rc.local crash
        - debian/tests: map snapd deb pockets to core snap channels for
          autopkgtest
        - many: switch channels on refresh if needed
        - interfaces/builtin: add /boot/uboot/config.txt access to core-
          support
        - release: assume higher version of supported distros will still
          work
        - cmd/snap-update-ns: add compare function for mount entries
        - tests: enable docker test
        - tests: bail out if core snap is not installed
        - interfaces: use mount.Entry instead of string snippets.
        - osutil: trivial tweaks to build ID support
        - many: display kernel version in 'snap version'
        - osutil: add package for reading Build-ID
        - snap: error when `snap list foo` is run and no snap is installed
        - cmd/snap-confine: don't crash if nvidia module is loaded but
          drivers are not available
        - tests: update listing test for latest core snap version update
        - overlord/hookstate/ctlcmd: helper function for creating a deep
          copy of interface attributes
        - interfaces: add a linux framebuffer interface
        - cmd/snap, store: change error messages to reflect latest UX doc
        - interfaces: initial unity8 interface
        - asserts: improved information about assertions format in the
          Decode doc comment
        - snapstate: ensure snapstate.CanAutoRefresh is nil in tests
        - mkversion.sh: Add support for taking the version as a parameter
        - interfaces: add an interface for use by thumbnailer
        - cmd/snap-confine: ensure that hostfs is root owned.
        - screen-inhibit-control: add methods for delaying screensavers
        - overlord: optional device registration and gadget support on
          classic
        - overlord: make seeding work also on classic, optionally
        - image,cmd/snap: refactoring and initial envvar support to use
          stores needing auth
        - tests: add libvirt interface spread test
        - cmd/libsnap: add helper for dropping permissions
        - interfaces: misc updates for network-control, firewall-control,
          unity7 and default policy
        - interfaces: allow recv* and send* by default, accept4 with accept
          and other cleanups
        - interfaces/builtin: add classic-support interface
        - store: use xdelta3 from core if available and not on the regular
          system
        - snap: add contact: line in `snap info`
        - interfaces/builtin: add network-setup-control which allows rw
          access to netplan
        - unity7: support missing signals and methods for status icons
        - cmd: autoconf for RHEL
        - cmd/snap-confine: look for PROCFS_SUPER_MAGIC
        - dirs: use the right snap mount dir for the distribution
        - many: differentiate between "distro" and "core" libexecdir
        - cmd: don't reexec on RHEL family
        - config: make helpers reusable
        - snap-exec: support nested environment variables in environment
        - release: add galliumos support
        - interfaces/builtin: more path options for serial
        - i18n: look into core snaps when checking for translations
        - tests: nested image testing
        - tests: add basic test for docker
        - hookstate,ifacestate: support snapctl set/get slot and plug attrs
          (step 3)
        - cmd/snap: add shell completion to connect
        - cmd: add functions to load/save fstab-like files
        - snap run: create "current" symlink in user data dir
        - cmd: autoconf for centos
        - tests: add more debug if ubuntu-core-upgrade fails
        - tests: increase service retries
        - packaging/ubuntu-14.04: inform user how to extend PATH with
          /snap/bin.
        - cmd: add helpers for working with mount/umount commands
        - overlord/snapstate: prepare for using snap-update-ns
        - cmd: use per-snap mount profile to populate the mount namespace
        - overlord/ifacestate: setup seccomp security on startup
        - interface/seccomp: sort combined snippets
        - release: don't force devmode on LinuxMint "serena"
        - tests: filter ubuntu-core systems for authenticated find-private
          test
        - interfaces/builtin/core-support: Allow modifying logind
          configuration from the core snap
        - tests: fix "snap managed" output check and suppress output from
          expect in the authenticated login tests
        - interfaces: shutdown: also allow shutdown/reboot/suspend via
          logind
        - cmd/snap-confine-tests: reformat test to pass shellcheck
        - cmd: add sc_is_debug_enabled
        - interfaces/mount: add dedicated mount entry type
        - interfaces/core-support: allow modifying systemd-timesyncd and
          sysctl configuration
        - snap: improve message after `snap refresh pkg1 pkg2`
        - tests: improve snap-env test
        - interfaces/io-ports-control: use /dev/port, not /dev/ports
        - interfaces/mount-observe: add quotactl with arg filtering (LP:
          #1626359)
        - interfaces/mount: generate per-snap mount profile
        - tests: add spread test for delta downloads
        - daemon: show "$snapname (delta)" in progress when downloading
          deltas
        - cmd: use safer functions in sc_mount_opt2str
        - asserts: introduce a variant of model assertions for classic
          systems
        - interfaces/core-support: allow modifying snap rsyslog
          configuration
        - interfaces: remove some syscalls already in the default policy
          plus comment cleanups
        - interfaces: miscellaneous updates for hardware-observe, kernel-
          module-control, unity7 and default
        - snap-confine: add the key for which hsearch_r fails
        - snap: improve the error message for `snap try`
        - tests: fix pattern and use MATCH in find-private
        - tests: stop tying setting up staging store access to the setup of
          the state tarball
        - tests: add regression spread test for #1660941
        - interfaces/default: don't allow TIOCSTI ioctl
        - interfaces: allow nice/setpriority to 0-19 values for calling
          process by default
        - tests: improve debug when the core transition test hangs
        - tests: disable ubuntu-core->core transition on ppc64el (its just
          too slow)
        - snapstate: move refresh from a systemd timer to the internal
          snapstate Ensure()
        - tests/lib/fakestore/refresh: some more info when we fail to copy
          asserts
        - overlord/devicestate: backoff between retries if the server seems
          to have refused the serial-request
        - image: check kernel/gadget publisher vs model brand, warn on store
          disconnected snaps
        - vendor: move gettext.go back to github.com/ojii/gettext.go
        - store: retry on 502 http response as well
        - tests: increase snap-service kill-timeout
        - store,osutil: use new osutil.ExecutableExists(exe) check to only
          use deltas if xdelta3 is present
        - cmd: fix autogen.sh on fedora
        - overlord/devicemgr: fix test: setup account-key before using the
          key for signing
        - cmd: add /usr/local/* to PATH
        - cmd: add sc_string_append
        - asserts: support for correctly suggesting format 2 for snap-
          declaration
        - interfaces: port mount backend to new APIs, unify content of per
          app/hook profiles
        - overlord/devicestate: implement policy about gadget and kernel
          matching the model
        - interfaces: allow sched_setscheduler again by default
        - debian: update breaks/replaces for snap-confine->snapd
        - debian: move the snap-confine packaging into snapd
        - 14.04/integrationtests: rely on upstart to restart ssh.
        - store: enable download deltas on classic by default
        - spread: add unit suite
        - snapctl: add config in client to disable auth and use it in
          snapctl
        - overlord/ifacestate: register all security backends with the
          repository
        - overlord,tests: have enable/disable affect security profiles
        - tests: install ubuntu-core from the same channel as core
        - overlord: move configstate.Transaction into config package
        - seccomp-support.c: add PF_* domains which can be used instead of
          AF_*
        - store: always log retry summary when SNAPD_DEBUG is set
        - tests: parameterize kernel snap channel
        - snapenv: do not append ":" to the SNAP_LIBRARY_PATH
        - interfaces/builtin: refine the content interface rules using $SLOT
        - asserts,interfaces/policy: add support for
          $SLOT()/$PLUG()/$MISSING in *-attributes constraintsThis adds
          support for $SLOT(arg), $PLUG(arg) and $MISSING attribute
          constraints in plugs and slots rules in snap-declarations:
        - cmd/snap-confine: add snap-confine command line parser module
        - tests: remove (some) garbage files found by restore cleanup
          analysis
        - cmd: fix issues uncovered by valgrind
        - tests: fix typo in systems name
        - cmd: collect string utilities in one module, add missing tests
        - cmd: rename mountinfo to sc_mountinfo
        - tests: allow to install snapd debs from a ppa instead of building
          them
        - spread: remove state tar on project restore
    
     -- Michael Vogt <email address hidden>  Wed, 08 Mar 2017 14:29:56 +0100
  • snapd (2.23) xenial; urgency=medium
    
      * New upstream release, LP: #1665608
        - overlord: phase 2 with 2nd setup-profiles and hook done after
          restart for core installation
        - data: re-add snapd.refresh.{timer,service} with weekly schedule
        - interfaces: allow 'getent' by default with some missing dbs to
          various interfaces
        - overlord/snapstate: drop forced devmode
        - snapstate: disable running the configure hook on classic for the
          core snap
        - ifacestate: re-generate apparmor in InterfaceManager.initialize()
        - daemon: DevModeDistro does not imply snapstate.Flags{DevMode:true}
        - interfaces/bluez,network-manager: implement ConnectedSlot policy
        - cmd: add helpers for mounting / unmounting
        - snapstate: error in LinkSnap() if revision is unset
        - release: add linuxmint 18 to the non-devmode distros
        - cmd: fixes to run correctly on opensuse
        - interfaces: consistently use 'const' instead of 'var' for security
          policy
        - interfaces: miscellaneous policy updates for unity7, udisks2 and
          browser-support
        - interfaces/apparmor: compensate for kernel behavior change
        - many: only tweak core config if hook exists
        - overlord/hookstate: don't report a run hook output error without
          any context
        - cmd/snap-update-ns: move test data and helpers to new module
        - vet: fix vet error on mount test.
        - tests: empty init (systemd) failover test
        - cmd: add .indent.pro file to the tree
        - interfaces: specs for apparmor, seccomp, udev
        - wrappers/services: RemainAfterExit=yes for oneshot daemons w/ stop
          cmds
        - tests: several improvements to the nested suite
        - tests: do not use core for "All snaps up to date" check
        - cmd/snap-update-ns: add function for sorting mount entries
        - httputil: copy some headers over redirects
        - data/selinux: merge SELinux policy module
        - kmod: added Specification for kmod security backend
        - tests: failover test for rc.local crash
        - debian/tests: map snapd deb pockets to core snap channels for
          autopkgtest
        - many: switch channels on refresh if needed
        - interfaces/builtin: add /boot/uboot/config.txt access to core-
          support
        - release: assume higher version of supported distros will still
          work
        - cmd/snap-update-ns: add compare function for mount entries
        - tests: enable docker test
        - tests: bail out if core snap is not installed
        - interfaces: use mount.Entry instead of string snippets.
        - osutil: trivial tweaks to build ID support
        - many: display kernel version in 'snap version'
        - osutil: add package for reading Build-ID
        - snap: error when `snap list foo` is run and no snap is installed
        - cmd/snap-confine: don't crash if nvidia module is loaded but
          drivers are not available
        - tests: update listing test for latest core snap version update
        - overlord/hookstate/ctlcmd: helper function for creating a deep
          copy of interface attributes
        - interfaces: add a linux framebuffer interface
        - cmd/snap, store: change error messages to reflect latest UX doc
        - interfaces: initial unity8 interface
        - asserts: improved information about assertions format in the
          Decode doc comment
        - snapstate: ensure snapstate.CanAutoRefresh is nil in tests
        - mkversion.sh: Add support for taking the version as a parameter
        - interfaces: add an interface for use by thumbnailer
        - cmd/snap-confine: ensure that hostfs is root owned.
        - screen-inhibit-control: add methods for delaying screensavers
        - overlord: optional device registration and gadget support on
          classic
        - overlord: make seeding work also on classic, optionally
        - image,cmd/snap: refactoring and initial envvar support to use
          stores needing auth
        - tests: add libvirt interface spread test
        - cmd/libsnap: add helper for dropping permissions
        - interfaces: misc updates for network-control, firewall-control,
          unity7 and default policy
        - interfaces: allow recv* and send* by default, accept4 with accept
          and other cleanups
        - interfaces/builtin: add classic-support interface
        - store: use xdelta3 from core if available and not on the regular
          system
        - snap: add contact: line in `snap info`
        - interfaces/builtin: add network-setup-control which allows rw
          access to netplan
        - unity7: support missing signals and methods for status icons
        - cmd: autoconf for RHEL
        - cmd/snap-confine: look for PROCFS_SUPER_MAGIC
        - dirs: use the right snap mount dir for the distribution
        - many: differentiate between "distro" and "core" libexecdir
        - cmd: don't reexec on RHEL family
        - config: make helpers reusable
        - snap-exec: support nested environment variables in environment
        - release: add galliumos support
        - interfaces/builtin: more path options for serial
        - i18n: look into core snaps when checking for translations
        - tests: nested image testing
        - tests: add basic test for docker
        - hookstate,ifacestate: support snapctl set/get slot and plug attrs
          (step 3)
        - cmd/snap: add shell completion to connect
        - cmd: add functions to load/save fstab-like files
        - snap run: create "current" symlink in user data dir
        - cmd: autoconf for centos
        - tests: add more debug if ubuntu-core-upgrade fails
        - tests: increase service retries
        - packaging/ubuntu-14.04: inform user how to extend PATH with
          /snap/bin.
        - cmd: add helpers for working with mount/umount commands
        - overlord/snapstate: prepare for using snap-update-ns
        - cmd: use per-snap mount profile to populate the mount namespace
        - overlord/ifacestate: setup seccomp security on startup
        - interface/seccomp: sort combined snippets
        - release: don't force devmode on LinuxMint "serena"
        - tests: filter ubuntu-core systems for authenticated find-private
          test
        - interfaces/builtin/core-support: Allow modifying logind
          configuration from the core snap
        - tests: fix "snap managed" output check and supress output from
          expect in the authenticated login tests
        - interfaces: shutdown: also allow shutdown/reboot/suspend via
          logind
        - cmd/snap-confine-tests: reformat test to pass shellcheck
        - cmd: add sc_is_debug_enabled
        - interfaces/mount: add dedicated mount entry type
        - interfaces/core-support: allow modifying systemd-timesyncd and
          sysctl configuration
        - snap: improve message after `snap refresh pkg1 pkg2`
        - tests: improve snap-env test
        - interfaces/io-ports-control: use /dev/port, not /dev/ports
        - interfaces/mount-observe: add quotactl with arg filtering (LP:
          #1626359)
        - interfaces/mount: generate per-snap mount profile
        - tests: add spread test for delta downloads
        - daemon: show "$snapname (delta)" in progress when downloading
          deltas
        - cmd: use safer functions in sc_mount_opt2str
        - asserts: introduce a variant of model assertions for classic
          systems
        - interfaces/core-support: allow modifying snap rsyslog
          configuration
        - interfaces: remove some syscalls already in the default policy
          plus comment cleanups
        - interfaces: miscellaneous updates for hardware-observe, kernel-
          module-control, unity7 and default
        - snap-confine: add the key for which hsearch_r fails
        - snap: improve the error message for `snap try`
        - tests: fix pattern and use MATCH in find-private
        - tests: stop tying setting up staging store access to the setup of
          the state tarball
        - tests: add regression spread test for #1660941
        - interfaces/default: don't allow TIOCSTI ioctl
        - interfaces: allow nice/setpriority to 0-19 values for calling
          process by default
        - tests: improve debug when the core transition test hangs
        - tests: disable ubuntu-core->core transition on ppc64el (its just
          too slow)
        - snapstate: move refresh from a systemd timer to the internal
          snapstate Ensure()
        - tests/lib/fakestore/refresh: some more info when we fail to copy
          asserts
        - overlord/devicestate: backoff between retries if the server seems
          to have refused the serial-request
        - image: check kernel/gadget publisher vs model brand, warn on store
          disconnected snaps
        - vendor: move gettext.go back to github.com/ojii/gettext.go
        - store: retry on 502 http response as well
        - tests: increase snap-service kill-timeout
        - store,osutil: use new osutil.ExecutableExists(exe) check to only
          use deltas if xdelta3 is present
        - cmd: fix autogen.sh on fedora
        - overlord/devicemgr: fix test: setup account-key before using the
          key for signing
        - cmd: add /usr/local/* to PATH
        - cmd: add sc_string_append
        - asserts: support for correctly suggesting format 2 for snap-
          declaration
        - interfaces: port mount backend to new APIs, unify content of per
          app/hook profiles
        - overlord/devicestate: implement policy about gadget and kernel
          matching the model
        - interfaces: allow sched_setscheduler again by default
        - debian: update breaks/replaces for snap-confine->snapd
        - debian: move the snap-confine packaging into snapd
        - 14.04/integrationtests: rely on upstart to restart ssh.
        - store: enable download deltas on classic by default
        - spread: add unit suite
        - snapctl: add config in client to disable auth and use it in
          snapctl
        - overlord/ifacestate: register all security backends with the
          repository
        - overlord,tests: have enable/disable affect security profiles
        - tests: install ubuntu-core from the same channel as core
        - overlord: move configstate.Transaction into config package
        - seccomp-support.c: add PF_* domains which can be used instead of
          AF_*
        - store: always log retry summary when SNAPD_DEBUG is set
        - tests: parameterize kernel snap channel
        - snapenv: do not append ":" to the SNAP_LIBRARY_PATH
        - interfaces/builtin: refine the content interface rules using $SLOT
        - asserts,interfaces/policy: add support for
          $SLOT()/$PLUG()/$MISSING in *-attributes constraintsThis adds
          support for $SLOT(arg), $PLUG(arg) and $MISSING attribute
          constraints in plugs and slots rules in snap-declarations:
        - cmd/snap-confine: add snap-confine command line parser module
        - tests: remove (some) garbage files found by restore cleanup
          analysis
        - cmd: fix issues uncovered by valgrind
        - tests: fix typo in systems name
        - cmd: collect string utilities in one module, add missing tests
        - cmd: rename mountinfo to sc_mountinfo
        - tests: allow to install snapd debs from a ppa instead of building
          them
        - spread: remove state tar on project restore
    
     -- Michael Vogt <email address hidden>  Fri, 17 Feb 2017 12:21:42 +0100
  • snapd (2.22.6) xenial; urgency=medium
    
      * New upstream release, LP: #1667105
        - overlord/ifacestate: don't fail if affected snap is gone
        - revert #2910: osutil: add package for reading Build-ID (#2918)
        - errtracker: include the build-id of host and core snapd (#2912)
        - errtracker: include the number of ubuntu-core -> core retries
          (#2915)
        - snapstate: retry ubuntu-core -> core transition every 6h (#2914)
        - osutil: add package for reading Build-ID (#2910)
        - errtracker: include kernel version in error reports (#2905)
        - release: return "unknown" if uname fails
        - many: rebased uname branch for 2.22
        - errtracker: include snapd version in err reports
        - overlord/ifacestate: don't unconditionally retry stuff (#2906)
        - snapstate: fix incorrect cut of the timestamps for the error
          reports (#2908)
        - tests: update listing test for latest core snap version update
    
    snapd (2.22.5) xenial; urgency=medium
    
      * Fix FTBFS due to machine-id file
    
    snapd (2.22.4) xenial; urgency=medium
    
      * New bugfix release:
        - errtracker: add support for error reporting via daisy.ubuntu.com
        - snapstate: allow for 6 retries for the core transition
        - httputils: ensure User-Agent works across redirects
    
     -- Zygmunt Krynicki <email address hidden>  Wed, 22 Feb 2017 23:34:23 +0100
  • snapd (2.22.3) xenial; urgency=medium
    
      * New bugfix release, LP: #1665729:
        - Limit the number of retries for the ubuntu-core -> core
          transition to fix possible store overload.
    
     -- Michael Vogt <email address hidden>  Fri, 17 Feb 2017 18:58:34 +0100
  • snapd (2.22.2) xenial; urgency=medium
    
      * New upstream release, LP: #1659522
        - cherry pick fix for sched_setscheduler regression
          (LP: #1661265)
    
    snapd (2.22.1) xenial; urgency=medium
    
      * New upstream release, LP: #1659522
        - cherry pick fix for snapctl auth.json handling
    
    snapd (2.22) xenial; urgency=medium
    
      * New upstream release, LP: #1659522
        - many: make ubuntu-core-launcher mostly go
        - interfaces/builtin: add account-control interface
        - interfaces/builtin: add missing syscalls to core-support needed
          for systemctl
        - interfaces/builtin: rework core-support to only allow full access
          to systemctl
        - debian/tests: drop stale autopkgtest dependencies.
        - tests: make the debugging of c-unit-tests more useful
        - store: retry auth-related requests
        - tests: integration test for system reload
        - snap: be more helpful in the `snap install <already-installed>`
          error message
        - tests: set SNAPPY_USE_STAGING_STORE in su call
        - tests: use test snap
        - spread: set SNAPD_DEBUG=1 in the core snap as well
        - tests: add extra debugging to security-setuid-root test
        - cmd,snap,wrappers: systemd reload command support
        - interfaces: builtin: mir: Allow recv and send
        - overlord/ifacestate: use ParseConnRef
        - overlord/snapstate,overlord/ifacestate: add automatic ubuntu-core
          -> core transition
        - debian: remove aliases as well in snapd.postrm
        - many: change interfaces.ParseID to return value
        - interfaces/opengl: allow access to the nvidia abstract socket
        - overlord, daemon: flag failures feature fancy forms.
        - many: add --classic support to try and revert, and make missing
          these things a little harder
        - interfaces: allow reading non-PCI-attached usb devices via raw-usb
        - many: rename snap-alter-ns to snap-update-ns
        - interfaces/builtin: add core-support
        - store: increase the retry.LimitTime()
        - debian: move the packaging out into package/$id-$version_id
        - overlord/stapstate: don't use unkeyed fields
        - many: add stub implementation of snap-alter-ns
        - asserts: improve error message when key is not valid at the given
          time
        - snapstate, ifacestate: add snapstate.CheckChangeConflict() to
          ifacestate.{Connect,Disconnect}
        - debian: remove trusty specific bits
        - docs: Add a note about building snapd.
        - interfaces: miscellaneous updates for default and network-control
        - daemon: bubble out store.ErrSnapNotFound in the findOne codepath
        - store: add retry logging into download as well
        - snap: show price in `snap info`
        - cmd: add fault injection support code
        - interfaces: network-manager: allow rw access to /etc/netplan
        - debian: move systemd files out of ./debian and into ./data/systemd
        - asserts: implement SuggestFormat to help avoid specifying the
          wrong format iteration for an assertion
        - many: detect potentially insecure use of snap-confine
        - interfaces: allow querying added security backends
        - cmd: ensure that all .c files have a -test.c file
        - asserts: don't use 'context' for the path of attributes, want to
          reuse the concept for something else
        - interfaces: abbreviate ConnRef construction
        - tests: ensure systemd override directory is available before using
          it
        - cmd: more build system cleanups and a small fix
        - tests: increase retries for service up
        - cmd: move seccomp cleanup function to seccomp-support
        - many: auto-connect plugs and slots symmetrically
        - overlord: use a ticker for the pruning
        - interfaces/builtin: add uhid interface
        - cmd/snap-confine: add shutdown helper
        - tests: fix path used when debugging
        - cmd: switch to non-recursive make
        - overlord/ifacestate: setup security of snaps affected by auto-
          connection
        - spread: refresh apt cache before first install
        - overlord: allow max 500 changes in "ready" state to avoid growing
          changes for 24h
        - snap: add {Plug,Slot}Info.SecurityTags
        - cmd: move snap-discard-ns to dedicated directory
        - tests: skip i18n test when no "snappy.mo" file is available
        - interfaces,overlord/ifacestate: small refactor around reference
          methods
        - tests: remove the snapd dirs last (should fix random test errors)
        - interfaces: mm: permissions for protocol proxies
        - interfaces/builtin: add evolution interfaces
        - many: extract the logging http client and user-agent handling for
          use in devicestate
        - interfaces: unity8-download-manager is the chosen name for this
          interface.
        - tests: add "quiet" wrapper function that only prints output on
          failure
        - tests: fix failing snapd-reexec test
        - docs: simplify HACKING.md that snapd itself supports setting up
          the sockets
        - overlord: flag required-snaps from model as required and prevent
          removing them
        - spread: exclude .o and .a files
        - tests: parameterize remote store
        - cmd: fix hardcoded paths to rst2man and support rst2man.py
        - tests: improve debug output when reexec is used
        - tests: disable ipv6 before unpacking delta
        - interfaces: add new interface API
        - tests: change TRUST_TEST_KEYS to be controlled from the host
        - spread: add boilerplate for Linode delta uploads
        - wrappers: add support for the X-Ayatana-Desktop-Shortcuts=
          extension
        - partition: add support for native grubenv read/write and use it
        - tests: add test ensuring manual pages are shipped
    
     -- Michael Vogt <email address hidden>  Thu, 02 Feb 2017 17:13:51 +0100
  • snapd (2.22.1) xenial; urgency=medium
    
      * New upstream release, LP: #1659522
        - cherry pick fix for snapctl auth.json handling
    
    snapd (2.22) xenial; urgency=medium
    
      * New upstream release, LP: #1659522
        - many: make ubuntu-core-launcher mostly go
        - interfaces/builtin: add account-control interface
        - interfaces/builtin: add missing syscalls to core-support needed
          for systemctl
        - interfaces/builtin: rework core-support to only allow full access
          to systemctl
        - debian/tests: drop stale autopkgtest dependencies.
        - tests: make the debugging of c-unit-tests more useful
        - store: retry auth-related requests
        - tests: integration test for system reload
        - snap: be more helpful in the `snap install <already-installed>`
          error message
        - tests: set SNAPPY_USE_STAGING_STORE in su call
        - tests: use test snap
        - spread: set SNAPD_DEBUG=1 in the core snap as well
        - tests: add extra debugging to security-setuid-root test
        - cmd,snap,wrappers: systemd reload command support
        - interfaces: builtin: mir: Allow recv and send
        - overlord/ifacestate: use ParseConnRef
        - overlord/snapstate,overlord/ifacestate: add automatic ubuntu-core
          -> core transition
        - debian: remove aliases as well in snapd.postrm
        - many: change interfaces.ParseID to return value
        - interfaces/opengl: allow access to the nvidia abstract socket
        - overlord, daemon: flag failures feature fancy forms.
        - many: add --classic support to try and revert, and make missing
          these things a little harder
        - interfaces: allow reading non-PCI-attached usb devices via raw-usb
        - many: rename snap-alter-ns to snap-update-ns
        - interfaces/builtin: add core-support
        - store: increase the retry.LimitTime()
        - debian: move the packaging out into package/$id-$version_id
        - overlord/stapstate: don't use unkeyed fields
        - many: add stub implementation of snap-alter-ns
        - asserts: improve error message when key is not valid at the given
          time
        - snapstate, ifacestate: add snapstate.CheckChangeConflict() to
          ifacestate.{Connect,Disconnect}
        - debian: remove trusty specific bits
        - docs: Add a note about building snapd.
        - interfaces: miscellaneous updates for default and network-control
        - daemon: bubble out store.ErrSnapNotFound in the findOne codepath
        - store: add retry logging into download as well
        - snap: show price in `snap info`
        - cmd: add fault injection support code
        - interfaces: network-manager: allow rw access to /etc/netplan
        - debian: move systemd files out of ./debian and into ./data/systemd
        - asserts: implement SuggestFormat to help avoid specifying the
          wrong format iteration for an assertion
        - many: detect potentially insecure use of snap-confine
        - interfaces: allow querying added security backends
        - cmd: ensure that all .c files have a -test.c file
        - asserts: don't use 'context' for the path of attributes, want to
          reuse the concept for something else
        - interfaces: abbreviate ConnRef construction
        - tests: ensure systemd override directory is available before using
          it
        - cmd: more build system cleanups and a small fix
        - tests: increase retries for service up
        - cmd: move seccomp cleanup function to seccomp-support
        - many: auto-connect plugs and slots symmetrically
        - overlord: use a ticker for the pruning
        - interfaces/builtin: add uhid interface
        - cmd/snap-confine: add shutdown helper
        - tests: fix path used when debugging
        - cmd: switch to non-recursive make
        - overlord/ifacestate: setup security of snaps affected by auto-
          connection
        - spread: refresh apt cache before first install
        - overlord: allow max 500 changes in "ready" state to avoid growing
          changes for 24h
        - snap: add {Plug,Slot}Info.SecurityTags
        - cmd: move snap-discard-ns to dedicated directory
        - tests: skip i18n test when no "snappy.mo" file is available
        - interfaces,overlord/ifacestate: small refactor around reference
          methods
        - tests: remove the snapd dirs last (should fix random test errors)
        - interfaces: mm: permissions for protocol proxies
        - interfaces/builtin: add evolution interfaces
        - many: extract the logging http client and user-agent handling for
          use in devicestate
        - interfaces: unity8-download-manager is the chosen name for this
          interface.
        - tests: add "quiet" wrapper function that only prints output on
          failure
        - tests: fix failing snapd-reexec test
        - docs: simplify HACKING.md that snapd itself supports setting up
          the sockets
        - overlord: flag required-snaps from model as required and prevent
          removing them
        - spread: exclude .o and .a files
        - tests: parameterize remote store
        - cmd: fix hardcoded paths to rst2man and support rst2man.py
        - tests: improve debug output when reexec is used
        - tests: disable ipv6 before unpacking delta
        - interfaces: add new interface API
        - tests: change TRUST_TEST_KEYS to be controlled from the host
        - spread: add boilerplate for Linode delta uploads
        - wrappers: add support for the X-Ayatana-Desktop-Shortcuts=
          extension
        - partition: add support for native grubenv read/write and use it
        - tests: add test ensuring manual pages are shipped
    
     -- Michael Vogt <email address hidden>  Wed, 01 Feb 2017 17:09:31 +0100
  • snapd (2.22) xenial; urgency=medium
    
      * New upstream release, LP: #1659522
        - many: make ubuntu-core-launcher mostly go
        - interfaces/builtin: add account-control interface
        - interfaces/builtin: add missing syscalls to core-support needed
          for systemctl
        - interfaces/builtin: rework core-support to only allow full access
          to systemctl
        - debian/tests: drop stale autopkgtest dependencies.
        - tests: make the debugging of c-unit-tests more useful
        - store: retry auth-related requests
        - tests: integration test for system reload
        - snap: be more helpful in the `snap install <already-installed>`
          error message
        - tests: set SNAPPY_USE_STAGING_STORE in su call
        - tests: use test snap
        - spread: set SNAPD_DEBUG=1 in the core snap as well
        - tests: add extra debugging to security-setuid-root test
        - cmd,snap,wrappers: systemd reload command support
        - interfaces: builtin: mir: Allow recv and send
        - overlord/ifacestate: use ParseConnRef
        - overlord/snapstate,overlord/ifacestate: add automatic ubuntu-core
          -> core transition
        - debian: remove aliases as well in snapd.postrm
        - many: change interfaces.ParseID to return value
        - interfaces/opengl: allow access to the nvidia abstract socket
        - overlord, daemon: flag failures feature fancy forms.
        - many: add --classic support to try and revert, and make missing
          these things a little harder
        - interfaces: allow reading non-PCI-attached usb devices via raw-usb
        - many: rename snap-alter-ns to snap-update-ns
        - interfaces/builtin: add core-support
        - store: increase the retry.LimitTime()
        - debian: move the packaging out into package/$id-$version_id
        - overlord/stapstate: don't use unkeyed fields
        - many: add stub implementation of snap-alter-ns
        - asserts: improve error message when key is not valid at the given
          time
        - snapstate, ifacestate: add snapstate.CheckChangeConflict() to
          ifacestate.{Connect,Disconnect}
        - debian: remove trusty specific bits
        - docs: Add a note about building snapd.
        - interfaces: miscellaneous updates for default and network-control
        - daemon: bubble out store.ErrSnapNotFound in the findOne codepath
        - store: add retry logging into download as well
        - snap: show price in `snap info`
        - cmd: add fault injection support code
        - interfaces: network-manager: allow rw access to /etc/netplan
        - debian: move systemd files out of ./debian and into ./data/systemd
        - asserts: implement SuggestFormat to help avoid specifying the
          wrong format iteration for an assertion
        - many: detect potentially insecure use of snap-confine
        - interfaces: allow querying added security backends
        - cmd: ensure that all .c files have a -test.c file
        - asserts: don't use 'context' for the path of attributes, want to
          reuse the concept for something else
        - interfaces: abbreviate ConnRef construction
        - tests: ensure systemd override directory is available before using
          it
        - cmd: more build system cleanups and a small fix
        - tests: increase retries for service up
        - cmd: move seccomp cleanup function to seccomp-support
        - many: auto-connect plugs and slots symmetrically
        - overlord: use a ticker for the pruning
        - interfaces/builtin: add uhid interface
        - cmd/snap-confine: add shutdown helper
        - tests: fix path used when debugging
        - cmd: switch to non-recursive make
        - overlord/ifacestate: setup security of snaps affected by auto-
          connection
        - spread: refresh apt cache before first install
        - overlord: allow max 500 changes in "ready" state to avoid growing
          changes for 24h
        - snap: add {Plug,Slot}Info.SecurityTags
        - cmd: move snap-discard-ns to dedicated directory
        - tests: skip i18n test when no "snappy.mo" file is available
        - interfaces,overlord/ifacestate: small refactor around reference
          methods
        - tests: remove the snapd dirs last (should fix random test errors)
        - interfaces: mm: permissions for protocol proxies
        - interfaces/builtin: add evolution interfaces
        - many: extract the logging http client and user-agent handling for
          use in devicestate
        - interfaces: unity8-download-manager is the chosen name for this
          interface.
        - tests: add "quiet" wrapper function that only prints output on
          failure
        - tests: fix failing snapd-reexec test
        - docs: simplify HACKING.md that snapd itself supports setting up
          the sockets
        - overlord: flag required-snaps from model as required and prevent
          removing them
        - spread: exclude .o and .a files
        - tests: parameterize remote store
        - cmd: fix hardcoded paths to rst2man and support rst2man.py
        - tests: improve debug output when reexec is used
        - tests: disable ipv6 before unpacking delta
        - interfaces: add new interface API
        - tests: change TRUST_TEST_KEYS to be controlled from the host
        - spread: add boilerplate for Linode delta uploads
        - wrappers: add support for the X-Ayatana-Desktop-Shortcuts=
          extension
        - partition: add support for native grubenv read/write and use it
        - tests: add test ensuring manual pages are shipped
    
     -- Michael Vogt <email address hidden>  Fri, 27 Jan 2017 23:18:57 +0100
  • snapd (2.21) xenial; urgency=medium
    
      * New upstream release, LP: #1656382
        - daemon: re-enable reexec
        - interfaces: allow reading installed files from previous revisions
          by default
        - daemon: make activation optional
        - tests: run all snap-confine tests in c-unit-tests task
        - many: fix abbreviated forms of disconnect
        - tests: switch more tests to MATCH
        - store: export userAgent. daemon: print store.UserAgent() on
          startup.
        - tests: test classic confinement `snap list` and  `snap info`
          output
        - debian: skip snap-confine unit tests on nocheck
        - overlord/snapstate: share code between Update and UpdateMany, so
          that it deals with auto-aliases correctly
        - interfaces: upower-observe: refactor to allow snaps to provide a
          slot
        - tests: add end-to-end store test for classic confinement
        - overlord,overlord/snapstate: have UpdateMany retire/enable auto-
          aliases even without new revision
        - interfaces/browser-support: add @{PROC}/@{pid}/fd/[0-9] w and misc
          /run/udev
        - interfaces/builtin: add physical-memory-* and io-ports-control
        - interfaces: allow getsockopt by default since it is so commonly
          used
        - cmd/snap, daemon, overlord/snapstate: tests and fixes for "snap
          refresh" of a classic snap
        - interfaces: allow read/write access of real-time clock with time-
          control interface
        - store: request no CDN via a header using SNAPPY_STORE_NO_CDN
          envvar
        - snap: add information about tracking channel (not just actual
          channel)
        - interfaces: use fewer dot imports
        - overlord/snapstate: remove restrictions on ResetAliases
        - overlord, store: move confinement filtering to the overlord (from
          The Store)
        - many: move interface test helpers to ifacetest package
        - many: implement 'snap aliases'
        - vet: fix for unkeyed fields error on aliases_test.go
        - interfaces: miscellaneous policy updates for network-control,
          unity7, pulseaudio, default and home
        - tests: test for auto-aliases
        - interface hooks: connect plug slot hooks (step 2)
        - cmd/snap: fix internal naming in snap connect
        - snap: use "size" as the json tag in snap.ChannelSnapInfo
        - tests: restore the missing initialization of iface manager causing
          race
        - snap: fix missing sizes in `snap info <remote-snap>`
        - tests: improve cleanup for c-unit-tests
        - cmd/snap-confine: build non-installed libsnap-confine-private.a
        - cmd/snap-confine: small tweaks to seccomp support code
        - interfaces/docker-support: allow /run/shm/aufs.xeno for 14.04
        - many: obtain installed snaps developer/publisher username through
          assertions
        - store: setting of fields for details endpoint
        - cmd/snap-confine: check for rst2man on configure
        - snap: show `snap --help` output when just running `snap`
        - interface/builtin: drop the obsolete checks in udisks2
          SanitizeSlot
        - cmd/snap: remove currency switch following UX review
        - spread: find top-level directory before running generate-
          packaging-dir
        - interface hooks: prepare plug slot hooks (step 1)
        - i18n: use github.com/mvo5/gettext.go (pure go) for i18n to avoid
          cgo
        - many: put a marker in the User-Agent sent by snapd/snap when under
          testingThe User-Agent will look like:
        - tests: fix -reuse and -resend when govendor is missing
        - snap: provide friendlier `snap find` message when no snaps are
          found
        - tests: fix mkversions.sh failure on zesty
        - spread: install build-essentail unconditionally
        - spread: improve qemu ubuntu-14.04-{32,64} support
        - overlord/snapstate,daemon: implement GET /v2/aliases handling
        - store: retry user info request
        - tests: port more snap-confine regression tests
        - tests: cancel the scheduled reboot on ubuntu-core-upgrade-no-gc
          and restore state
        - tests: debug zesty autopkgtest failures
        - overlord/snapstate: use keyed fields on literals
        - tests: use MATCH in install-remove-multi
        - tests: increase wait time for service to be up
        - tests: make debug-each succeed if DENIED doesn't match
        - tests: skip packaging dir generation for non-git based autopkgtest
          runs
        - tests: port refresh-all-undo to MATCH
        - tests: improve snap connect test
        - tests: port additional snap-confine regression tests
        - tests: show --version when it matches unknown
        - tests: optionally use apt proxy for qemu
        - tests: add hello-classic test
        - many: behave more consistently when pointed to staging and
          possibly the fake store
        - overlord/ifacestate: remove stale comments
        - interfaces/apparmor: ignore snippets in classic confinement
        - tests: port first regression test from snap-confine
        - cmd/snap-confine: disable old tests
    
     -- Michael Vogt <email address hidden>  Fri, 13 Jan 2017 19:39:51 +0100
  • snapd (2.20.1ubuntu1) xenial; urgency=medium
    
      * New upstream release, LP: #1648520
        - generate-packaging-dir: Skip when not running from a git
          checkout. This fixes an autopkgtest failure.
    
    snapd (2.20.1) xenial; urgency=medium
    
      * New upstream release, LP: #1648520
        - tests: enable the ppc64el tests again
        - tests: add classic confinement test
        - tests: run snap confine tests in debian/rules already
    
    snapd (2.20) xenial; urgency=medium
    
      * New upstream release, LP: #1648520
        - many: implement  "snap alias --reset" using snapstate.ResetAliases
        - debian: use a packaging branch for 14.04
        - store: retry downloads on io.Copy errors and sha3 checksum errors
        - snap: show apps in `snap info`
        - store: send an explicit X-Ubuntu-Classic header to the store
        - overlord/snapstate: implement snapstate.ResetAliases
        - interfaces/builtin: add dbus interface
        - tests: fix tests on 17.04
        - store: use mocked retry strategy to make store tests faster
        - overlord: apply auto-aliases information from the snap-declaration
          on install or refresh
        - many: prepare landing on trusty
        - many: implement snap unalias using snapstate.Unalias
        - overlord/snapstate: fixing the placement/grouping of some
          functions
        - interfaces: support network namespaces via 'ip netns' in network-
          control
        - interfaces/builtin: fix pulseaudio apparmor rules
        - interfaces/builtin: add iio interface
        - tests: update custom core snap with the freshly build snap-confine
        - interfaces: use sysd.{Disable,Stop} instead of sysd.DisableNow()
        - overlord,overlord/snapstate: implement snapstate.Unalias by
          generalizing the "alias" task
        - interfaces: misc openstack snap enablement
        - cmd/snap: mock terminal.ReadPassword instead of using /dev/ptmx
        - notifications, daemon: kill the unsupported events endpoint
        - client: only allow Dangerous option in InstallPath
        - overlord/ifacestate: no interface checks if no snap id
        - many: implement alias command
        - snap: tweak snap install output as designed by Mark
        - debian: fix Pre-Depends on dpkg
        - tests: check if snap-confine --version is unknown
        - cmd/snap-confine: allow content interface mounts
        - tests: remove ppa:snappy-dev/image again
        - interfaces/apparmor: allow access to core snap
        - tests: remove snap-confine/ubuntu-core-launcher after the tests
        - overlord,overlord/snapstate: implement snapstate.Alias
        - cmd/snap: reject "snap disconnect foo"
        - debian: add split ubuntu-core-launcher and snap-confine packages
        - cmd: fix mkversion.sh and add regression test
        - overlord/snapstate: setup/remove aliases as we link/unlink snaps
        - cmd/snap,tests: alias support in snap run
        - snap/snapenv: don't obscure HOME if snap uses classic confinement
        - store: decode response.Body json inside retry loops
        - cmd/snap-confine: fix compilation on platforms with gcc < 4.9.0
        - vendor: update tomb package fixing context support
    
    snapd (2.19) xenial; urgency=medium
    
      * New upstream release, LP: #1648520
        - cmd/snap-confine: disable support for XDG_RUNTIME_DIR
        - cmd/snap-confine/tests: fix stale path after move to snapd
        - cmd/snap-confine: don't use __attribute__((nonull))
        - snap: add description to `snap info`
        - snap: show last refresh time
        - store: switch default delta format from xdelta to xdelta3
        - interfaces: fix system-observe interface to work with ps_mem
        - debian: add missing ca-certificates dependency
        - cmd/snap-confine: add support for classic confinement
        - snapstate/backend: add backend methods to manage aliases
        - tests: re-enable snap-confine unit tests via spread
        - many: merge snap-confine into snapd
        - many: add support for classic confinement
        - snap: abort install with ctrl+c
        - cmd/snap: change terms accept URL following UX review
        - interfaces/apparmor: use distinct apparmor template for classic
        - snap: add snap size to `snap info`
        - interfaces: add unconfined access to modem-manager
        - snap: support for parsing and exposing on snap.Info aliases
        - debian: disable autopkgtests on ppc64el
        - snap: disable support for socket activation
        - tests: fix incorrect restore of the current symlink
        - asserts: introduce auto-aliases header in snap-declaration
        - interfaces/seccomp: add support for classic confinement
        - tests: do not use external snaps
        - daemon: close the dup()ed file descriptor to not leak it
        - overlord, daemon, progress: enable building snapd without CGO
        - daemon, store: let snap info find things in any channel
        - store: retry tweaks and logging
        - snap: Improve `snap --help` output as designed by Mark
        - interfaces/builtin: fix incorrect udev rule in i2c
        - overlord: increase test timeout and improve failure message
        - snap: remove unused experimental command
        - debian: remove unneeded conflict against the "snappy" package
        - daemon, strutil: move daemon.quotedNames to strutil.Quoted
        - docs: document SNAP_DEBUG_HTTP in HACKING.md
        - cmd/snap: have some completers
        - snap: support "daemon: notify" in snap.yaml
        - snap: fix try command when daemon linie is added
        - interfaces: apparmor support for classic confinement
        - debian/rules: build with -buildoptions=pie
        - tests: include /boot in saved state (including bootenv and any
          kernels)
        - daemon: ensure `snap try` installs core if it's missing
        - tests: save/restore /snap/core/current symlink
        - tests: decrease the number of expected featured apps
        - tests: add set -e to the prepare ssh script
        - cmd/snap: add tests for section completion; fix bugs.
        - cmd/snap: document 'snap list --all'
    
    snapd (2.18.1) xenial; urgency=medium
    
      * New upstream release, LP: #1644625
        - daemon: fix crash when `snap refresh` contains a single update
        - fix unhandled error from io.Copy() in download()
        - interfaces/builtin: fix incorrect udev rule in i2c
    
    snapd (2.18) xenial; urgency=medium
    
      * New upstream release, LP: #1644625
        - store: retry on io.EOF
        - tests: skip pty tests on ppc64el and powerpc
        - client, cmd/snap: introducing "snap info"
        - snap: do exit 0 on install/remove if that snap is already
          installed or already removed
        - snap: add `snap watch <change-id>` to attach to a running change
        - store: retry downloads using retry loop
        - snap: try doesn't require snap-dir when run in snap's directory
        - daemon: show what will change in the "refresh-all" changes
        - tests: disable autorefresh for the external backend
        - snap: add `snap list -a` to show all snaps (even inactive ones)
        - many: unify boolean env var handling
        - overlord/ifacestate: don't setup jailmode snaps with devmode
          confinement
        - snapstate: do not garbage collect the snaps used by the bootenv
        - debian: drop hard xdelta dependency for now
        - snap: make `snap login` ask for email if not given as argument
        - osutil: fix build on armhf (arm in go-arch) and powerpc (ppc in
          go-arch)
        - many: rename DevmodeConfinement to DevModeConfinement
        - store: resp.Body.Close() missing in ReadyToBuy
        - many: use ConfinementOptions instead of ConfinementType
        - snap, daemon, store: fake the channel map in the REST API
        - misc: run github.com/gordonklaus/ineffassign as part of the static
          checks
        - docs: add goreportcard badge and remove coveralls badge
        - tests: force gofmt -s in static checks
        - many: run gofmt -s -w on all the code
        - store: DRY actual retry code
        - many: fix various errors uncovered by goreportcard.com
        - interfaces/builtin: allow additional shared memory for webkit
        - many: some more missing snapState->snapst
        - asserts: introduce an optional freeform display-name for model
        - interfaces/builtin: rename usb-raw to raw-usb
        - progress: init pbar with correct total value
        - daemon/api.go: add quotedNames() helper
        - interfaces: add ConfinementOptions type
        - tests: add a test about the extra bits that prepare-device can
          specify for device registration
        - tests: check that gpio device nodes are exported after reboot
        - tests: parameterize core channel with env var for classic too
        - many: rename variable "ss" to "snapsup" or "snapst" or "st"
          (depending on context)
        - tests: do not use external snaps in spread
        - store: retry buy request
        - store: retry store.Find
        - store: retry assertion store call
        - store: retry call for snap details
        - many: use snap.ConfinementType rather than bool devmode
        - daemon: if a bad snap is posted it is not an internal error but a
          bad request
        - client: add "Snap.Screenshots" to the client API
        - interfaces: update base declaration documentation and policy for
          on-classic and snap-type
        - store: check payment method before TOS for a better UX
        - interfaces: allow sched_setaffinity in process-control
        - tests: parameterize core channel with env var
        - tests: ensure that the XDG_ env contains at least XDG_RUNTIME_DIR
        - interfaces: fcitx also listens on the session bus for Qt apps
        - store: retry ListRefresh
        - snap: use "Password of <email>:" in the `snap login`
        - many: reshuffle how we load/inject tests keys so image doesn't
          need assertstate anymore
        - store: use range requests if we have a local file already
        - dirs,interfaces,overlord,snap,snapenv,test: export per-snap
          XDG_RUNTIME_DIR per user
        - osutil: make RealUser only look at SUDO_USER when uid==0
        - tests: do not use the ppa:snappy-dev/image in the tests
        - store: retry readyToBuy request
        - tests: increase `expect` timeouts
        - static tests: add spell check
        - tests: add debug to all flaky expect tests
        - systemd: correct the mount arguments when mounting with squashfuse
        - interfaces: add avahi-observe
        - store: bring delta downloads back
        - interfaces: add alsa
        - interfaces/builtin: fix a broken test that snuck into master
        - osutil: add chattr funcs
        - image: init "snap_mode" on image creation time to avoid ugly
          messages
        - tests: test-snapd-fuse-consumer needs python-fuse as a build-
          package
        - interfaces/builtin: add i2c interface
        - interfaces: add ofono interface
        - tests: do not use hello-world in our tests
        - snap: add support for classic confinement
        - interfaces: remove LegacyAutoConnect() from the interfaces
        - interfaces: miscellaneous policy updates
        - tests: run autopkgtests in the autopkgtest.ubuntu.com
          infrastructure
        - Implement lxd-client interface exposing the lxd snap
        - asserts: validate optional account username
        - many: remove unnecessary snap name parameter from buying endpoint
        - tests: do not hardcode the size of /dev/ram0
        - tests: add test that ensures the right content for /etc/os-release
        - spread tests: fix snap mode check
        - docs: fix path for source files location in HACKING.md
        - interfaces/builtin/mir: allow slot to make recvfrom syscalls
        - store: sections/featured snaps store support
    
     -- Michael Vogt <email address hidden>  Mon, 02 Jan 2017 10:10:38 +0100
  • snapd (2.20.1) xenial; urgency=medium
    
      * New upstream release, LP: #1648520
        - tests: enable the ppc64el tests again
        - tests: add classic confinement test
        - tests: run snap confine tests in debian/rules already
    
    snapd (2.20) xenial; urgency=medium
    
      * New upstream release, LP: #1648520
        - many: implement  "snap alias --reset" using snapstate.ResetAliases
        - debian: use a packaging branch for 14.04
        - store: retry downloads on io.Copy errors and sha3 checksum errors
        - snap: show apps in `snap info`
        - store: send an explicit X-Ubuntu-Classic header to the store
        - overlord/snapstate: implement snapstate.ResetAliases
        - interfaces/builtin: add dbus interface
        - tests: fix tests on 17.04
        - store: use mocked retry strategy to make store tests faster
        - overlord: apply auto-aliases information from the snap-declaration
          on install or refresh
        - many: prepare landing on trusty
        - many: implement snap unalias using snapstate.Unalias
        - overlord/snapstate: fixing the placement/grouping of some
          functions
        - interfaces: support network namespaces via 'ip netns' in network-
          control
        - interfaces/builtin: fix pulseaudio apparmor rules
        - interfaces/builtin: add iio interface
        - tests: update custom core snap with the freshly build snap-confine
        - interfaces: use sysd.{Disable,Stop} instead of sysd.DisableNow()
        - overlord,overlord/snapstate: implement snapstate.Unalias by
          generalizing the "alias" task
        - interfaces: misc openstack snap enablement
        - cmd/snap: mock terminal.ReadPassword instead of using /dev/ptmx
        - notifications, daemon: kill the unsupported events endpoint
        - client: only allow Dangerous option in InstallPath
        - overlord/ifacestate: no interface checks if no snap id
        - many: implement alias command
        - snap: tweak snap install output as designed by Mark
        - debian: fix Pre-Depends on dpkg
        - tests: check if snap-confine --version is unknown
        - cmd/snap-confine: allow content interface mounts
        - tests: remove ppa:snappy-dev/image again
        - interfaces/apparmor: allow access to core snap
        - tests: remove snap-confine/ubuntu-core-launcher after the tests
        - overlord,overlord/snapstate: implement snapstate.Alias
        - cmd/snap: reject "snap disconnect foo"
        - debian: add split ubuntu-core-launcher and snap-confine packages
        - cmd: fix mkversion.sh and add regression test
        - overlord/snapstate: setup/remove aliases as we link/unlink snaps
        - cmd/snap,tests: alias support in snap run
        - snap/snapenv: don't obscure HOME if snap uses classic confinement
        - store: decode response.Body json inside retry loops
        - cmd/snap-confine: fix compilation on platforms with gcc < 4.9.0
        - vendor: update tomb package fixing context support
    
    snapd (2.19) xenial; urgency=medium
    
      * New upstream release, LP: #1648520
        - cmd/snap-confine: disable support for XDG_RUNTIME_DIR
        - cmd/snap-confine/tests: fix stale path after move to snapd
        - cmd/snap-confine: don't use __attribute__((nonull))
        - snap: add description to `snap info`
        - snap: show last refresh time
        - store: switch default delta format from xdelta to xdelta3
        - interfaces: fix system-observe interface to work with ps_mem
        - debian: add missing ca-certificates dependency
        - cmd/snap-confine: add support for classic confinement
        - snapstate/backend: add backend methods to manage aliases
        - tests: re-enable snap-confine unit tests via spread
        - many: merge snap-confine into snapd
        - many: add support for classic confinement
        - snap: abort install with ctrl+c
        - cmd/snap: change terms accept URL following UX review
        - interfaces/apparmor: use distinct apparmor template for classic
        - snap: add snap size to `snap info`
        - interfaces: add unconfined access to modem-manager
        - snap: support for parsing and exposing on snap.Info aliases
        - debian: disable autopkgtests on ppc64el
        - snap: disable support for socket activation
        - tests: fix incorrect restore of the current symlink
        - asserts: introduce auto-aliases header in snap-declaration
        - interfaces/seccomp: add support for classic confinement
        - tests: do not use external snaps
        - daemon: close the dup()ed file descriptor to not leak it
        - overlord, daemon, progress: enable building snapd without CGO
        - daemon, store: let snap info find things in any channel
        - store: retry tweaks and logging
        - snap: Improve `snap --help` output as designed by Mark
        - interfaces/builtin: fix incorrect udev rule in i2c
        - overlord: increase test timeout and improve failure message
        - snap: remove unused experimental command
        - debian: remove unneeded conflict against the "snappy" package
        - daemon, strutil: move daemon.quotedNames to strutil.Quoted
        - docs: document SNAP_DEBUG_HTTP in HACKING.md
        - cmd/snap: have some completers
        - snap: support "daemon: notify" in snap.yaml
        - snap: fix try command when daemon linie is added
        - interfaces: apparmor support for classic confinement
        - debian/rules: build with -buildoptions=pie
        - tests: include /boot in saved state (including bootenv and any
          kernels)
        - daemon: ensure `snap try` installs core if it's missing
        - tests: save/restore /snap/core/current symlink
        - tests: decrease the number of expected featured apps
        - tests: add set -e to the prepare ssh script
        - cmd/snap: add tests for section completion; fix bugs.
        - cmd/snap: document 'snap list --all'
    
    snapd (2.18.1) xenial; urgency=medium
    
      * New upstream release, LP: #1644625
        - daemon: fix crash when `snap refresh` contains a single update
        - fix unhandled error from io.Copy() in download()
        - interfaces/builtin: fix incorrect udev rule in i2c
    
    snapd (2.18) xenial; urgency=medium
    
      * New upstream release, LP: #1644625
        - store: retry on io.EOF
        - tests: skip pty tests on ppc64el and powerpc
        - client, cmd/snap: introducing "snap info"
        - snap: do exit 0 on install/remove if that snap is already
          installed or already removed
        - snap: add `snap watch <change-id>` to attach to a running change
        - store: retry downloads using retry loop
        - snap: try doesn't require snap-dir when run in snap's directory
        - daemon: show what will change in the "refresh-all" changes
        - tests: disable autorefresh for the external backend
        - snap: add `snap list -a` to show all snaps (even inactive ones)
        - many: unify boolean env var handling
        - overlord/ifacestate: don't setup jailmode snaps with devmode
          confinement
        - snapstate: do not garbage collect the snaps used by the bootenv
        - debian: drop hard xdelta dependency for now
        - snap: make `snap login` ask for email if not given as argument
        - osutil: fix build on armhf (arm in go-arch) and powerpc (ppc in
          go-arch)
        - many: rename DevmodeConfinement to DevModeConfinement
        - store: resp.Body.Close() missing in ReadyToBuy
        - many: use ConfinementOptions instead of ConfinementType
        - snap, daemon, store: fake the channel map in the REST API
        - misc: run github.com/gordonklaus/ineffassign as part of the static
          checks
        - docs: add goreportcard badge and remove coveralls badge
        - tests: force gofmt -s in static checks
        - many: run gofmt -s -w on all the code
        - store: DRY actual retry code
        - many: fix various errors uncovered by goreportcard.com
        - interfaces/builtin: allow additional shared memory for webkit
        - many: some more missing snapState->snapst
        - asserts: introduce an optional freeform display-name for model
        - interfaces/builtin: rename usb-raw to raw-usb
        - progress: init pbar with correct total value
        - daemon/api.go: add quotedNames() helper
        - interfaces: add ConfinementOptions type
        - tests: add a test about the extra bits that prepare-device can
          specify for device registration
        - tests: check that gpio device nodes are exported after reboot
        - tests: parameterize core channel with env var for classic too
        - many: rename variable "ss" to "snapsup" or "snapst" or "st"
          (depending on context)
        - tests: do not use external snaps in spread
        - store: retry buy request
        - store: retry store.Find
        - store: retry assertion store call
        - store: retry call for snap details
        - many: use snap.ConfinementType rather than bool devmode
        - daemon: if a bad snap is posted it is not an internal error but a
          bad request
        - client: add "Snap.Screenshots" to the client API
        - interfaces: update base declaration documentation and policy for
          on-classic and snap-type
        - store: check payment method before TOS for a better UX
        - interfaces: allow sched_setaffinity in process-control
        - tests: parameterize core channel with env var
        - tests: ensure that the XDG_ env contains at least XDG_RUNTIME_DIR
        - interfaces: fcitx also listens on the session bus for Qt apps
        - store: retry ListRefresh
        - snap: use "Password of <email>:" in the `snap login`
        - many: reshuffle how we load/inject tests keys so image doesn't
          need assertstate anymore
        - store: use range requests if we have a local file already
        - dirs,interfaces,overlord,snap,snapenv,test: export per-snap
          XDG_RUNTIME_DIR per user
        - osutil: make RealUser only look at SUDO_USER when uid==0
        - tests: do not use the ppa:snappy-dev/image in the tests
        - store: retry readyToBuy request
        - tests: increase `expect` timeouts
        - static tests: add spell check
        - tests: add debug to all flaky expect tests
        - systemd: correct the mount arguments when mounting with squashfuse
        - interfaces: add avahi-observe
        - store: bring delta downloads back
        - interfaces: add alsa
        - interfaces/builtin: fix a broken test that snuck into master
        - osutil: add chattr funcs
        - image: init "snap_mode" on image creation time to avoid ugly
          messages
        - tests: test-snapd-fuse-consumer needs python-fuse as a build-
          package
        - interfaces/builtin: add i2c interface
        - interfaces: add ofono interface
        - tests: do not use hello-world in our tests
        - snap: add support for classic confinement
        - interfaces: remove LegacyAutoConnect() from the interfaces
        - interfaces: miscellaneous policy updates
        - tests: run autopkgtests in the autopkgtest.ubuntu.com
          infrastructure
        - Implement lxd-client interface exposing the lxd snap
        - asserts: validate optional account username
        - many: remove unnecessary snap name parameter from buying endpoint
        - tests: do not hardcode the size of /dev/ram0
        - tests: add test that ensures the right content for /etc/os-release
        - spread tests: fix snap mode check
        - docs: fix path for source files location in HACKING.md
        - interfaces/builtin/mir: allow slot to make recvfrom syscalls
        - store: sections/featured snaps store support
    
     -- Michael Vogt <email address hidden>  Mon, 19 Dec 2016 11:53:29 +0100
  • snapd (2.20ubuntu1) xenial; urgency=medium
    
      [ Michael Vogt ]
      * Remove Launchpad-Bugs-Fixed references as requested by the SRU
        team
    
      [ Steve Langasek ]
      * Revert change to disable running autopkgtests on ppc64el.  Even if we
        decide to ignore a test failure, the tests should still always be run so
        we can see results.
    
    snapd (2.20) xenial; urgency=medium
    
      * New upstream release, LP: #1648520
        - many: implement  "snap alias --reset" using snapstate.ResetAliases
        - debian: use a packaging branch for 14.04
        - store: retry downloads on io.Copy errors and sha3 checksum errors
        - snap: show apps in `snap info`
        - store: send an explicit X-Ubuntu-Classic header to the store
        - overlord/snapstate: implement snapstate.ResetAliases
        - interfaces/builtin: add dbus interface
        - tests: fix tests on 17.04
        - store: use mocked retry strategy to make store tests faster
        - overlord: apply auto-aliases information from the snap-declaration
          on install or refresh
        - many: prepare landing on trusty
        - many: implement snap unalias using snapstate.Unalias
        - overlord/snapstate: fixing the placement/grouping of some
          functions
        - interfaces: support network namespaces via 'ip netns' in network-
          control
        - interfaces/builtin: fix pulseaudio apparmor rules
        - interfaces/builtin: add iio interface
        - tests: update custom core snap with the freshly build snap-confine
        - interfaces: use sysd.{Disable,Stop} instead of sysd.DisableNow()
        - overlord,overlord/snapstate: implement snapstate.Unalias by
          generalizing the "alias" task
        - interfaces: misc openstack snap enablement
        - cmd/snap: mock terminal.ReadPassword instead of using /dev/ptmx
        - notifications, daemon: kill the unsupported events endpoint
        - client: only allow Dangerous option in InstallPath
        - overlord/ifacestate: no interface checks if no snap id
        - many: implement alias command
        - snap: tweak snap install output as designed by Mark
        - debian: fix Pre-Depends on dpkg
        - tests: check if snap-confine --version is unknown
        - cmd/snap-confine: allow content interface mounts
        - tests: remove ppa:snappy-dev/image again
        - interfaces/apparmor: allow access to core snap
        - tests: remove snap-confine/ubuntu-core-launcher after the tests
        - overlord,overlord/snapstate: implement snapstate.Alias
        - cmd/snap: reject "snap disconnect foo"
        - debian: add split ubuntu-core-launcher and snap-confine packages
        - cmd: fix mkversion.sh and add regression test
        - overlord/snapstate: setup/remove aliases as we link/unlink snaps
        - cmd/snap,tests: alias support in snap run
        - snap/snapenv: don't obscure HOME if snap uses classic confinement
        - store: decode response.Body json inside retry loops
        - cmd/snap-confine: fix compilation on platforms with gcc < 4.9.0
        - vendor: update tomb package fixing context support
    
     -- Steve Langasek <email address hidden>  Fri, 16 Dec 2016 11:17:15 -0800
  • snapd (2.17.1ubuntu1) xenial; urgency=medium
    
      * drop xdelta dependency
    
    snapd (2.17.1) xenial; urgency=medium
    
      * New upstream release, LP: #1637215:
        - release: os-release on core has changed
        - tests: /dev/ptmx does not work on powerpc, skip here
        - docs: moved to github.com/snapcore/snapd/wiki (#2258)
        - debian: golang is not installable on powerpc, use golang-any
    
    snapd (2.17) xenial; urgency=medium
    
      * New upstream release, LP: #1637215:
        - overlord/ifacestate: add unit tests for undo of setup-snap-
          security (#2243)
        - daemon,overlord,snap,tests: download to .partial in final dir
          (#2237)
        - overlord/state: marshaling tests for lanes (#2245)
        - overlord/state: introduce state lanes (#2241)
        - overlord/snapstate: fix revert+refresh (#2224)
        - interfaces/sytemd: enable/disable generated service units (#2229)
        - many: fix incorrect security files generation on undo
        - overlord/snapstate: add dynamic snapdX.Y assumes (#2227)
        - interfaces: network-manager: give slot full read-write access to
          /run/NetworkManager
        - docs: update the name of the command for the cross-build
        - overlord/snapstate: fix missing argument to Noticef
        - snapstate: ensure gadget/core/kernel can not be disabled (#2218)
        - asserts: limit to 1y only if len(models) == 0 (#2219)
        - debian: only install share/locale if available (missing on
          powerpc)
        - overlrod/snapstate: fix revert followed by refresh to old-current
          (#2214)
        - interfaces/builtin: network-manager and bluez can change hostname
          (#2204)
        - snap: switch the auto-import dir to /run/snapd/auto-import
        - docs: less details about cloud.cfg as requested in trello (#2206)
        - spread.yaml: Ensure ubuntu user has passwordless sudo for
          autopkgtests (#2201)
        - interfaces/builtin: add dcdbas-control interface
        - boot: do not set boot to try mode if the revision is unchanged
        - interfaces: add shutdown interface (#2162)
        - interfaces: add system-power-control interface
        - many: use the new systemd backend for configuring GPIOs
        - overlord/ifacestate: setup security for slots before plugs
        - snap: spool assertion candidates if snapd is not up yet
        - store,daemon,overlord: download things to a partials dir
        - asserts,daemon: implement system-user-authority header/concept
        - interfaces/builtin: home base declaration rule using on-classic
          for its policy
        - interfaces/builtin: finish decl based checks
        - asserts: bump snap-declaration to allow signing with new-style
          plugs and slots
        - overlord: checks for kernel installation/refresh based on model
          assertion and previous kernel
        - tests/lib/fakestore: fix logic to distinguish assertion not found
          errors
        - client: add a few explicit error types (around the request cycle)
        - tests/lib/fakestore/cmd/fakestore: make it log, and fix a typo
        - overlord/snapstate: two bugs for one
        - snappy: disable auto-import of assertions on classic (#2122)
        - overlord/snapstate: move trash cleanup to a cleanup handler
          (#2173)
        - daemon: make create-user --known fail on classic without --force-
          managed (#2123)
        - asserts,interfaces/policy: implement on-classic plug/slot
          constraints
        - overlord: check that the first installed gadget matches the model
          assertion
        - tests: use the snapd-control-consumer snap from the store
        - cmd/snap: make snap run not talk to snapd for finding the revision
        - snap/squashfs: try to hard link instead of copying. Also, switch
          to osutil.CopyFile for cp invocation.
        - store: send supported max-format when retrieving assertions
        - snapstate, devicestate: do not remove seed
        - boot,image,overlord,partition: read/write boot variables in single
          operation
        - tests: reenable ubuntu-core tests on qemu
        - asserts,interfaces/policy: allow OR-ing of subrule constraints in
          plug/slot rules
        - many: move from flags as ints to flags as structs-of-bools (#2156)
        - many: add supports for keeping and finding assertions with
          different format iterations
        - snap: stop using ubuntu-core-launcher, use snap-confine
        - many: introduce an assertion format iteration concept, refuse to
          add unsupported assertion
        - interfaces: tweak wording and comment
        - spread.yaml: dump apparmor denials on spread failure
        - tests: unflake ubuntu-core-reboot (#2150)
        - cmd/snap: tweak unknown command error message (#2139)
        - client,daemon,cmd: add payment-declined error kind (#2107)
        - cmd/snap: update remove command help (#2145)
        - many: removed frameworks target and fixed service files (#2138)
        - asserts,snap: validate attributes to a JSON-compatible type subset
          (#2140)
        - asserts: remove unused serial-proof type
        - tests: skip auto-import tests on systems without test keys (#2142)
        - overlord/devicestate: don't spam the debug log on classic (#2141)
        - cmd/snap: simplify auto-import mountinfo parsing (#2135)
        - tests: run ubuntu-core upgrades on isolated machine (#2137)
        - overlord/devicestate: recover seeding from old external approach
          (#2134)
        - overlord: merge overlord/boot pkg into overlord/devicestate
          (#2118)
        - daemon: add postCreateUserSuite test suite (#2124)
        - tests: abort tests if an update process is scheduled (#2119)
        - snapstate: avoid reboots if nothing in the boot setup has changed
          (#2117)
        - cmd/snap: do not auto-import from loop or non-dev devices (#2121)
        - tests: add spread test for `snap auto-import` (#2126)
        - tests: add test for auto-mount assertion import (#2127)
        - osutil: add missing unit tests for IsMounted (#2133)
        - tests: check for failure creating user on managed ubuntu-core
          systems (#2096)
        - snap: ignore /dev/loop addings from udev (#2111)
        - tests: remove snapd.boot-ok reference (#2109)
        - tests: enable tests related to the home interface in all-snaps
          (#2106)
        - snapstate: only import defaults from gadget on install (#2105)
        - many: move firstboot code into the snapd daemon (#2033)
        - store: send correct JSON type of string for expected payment
          amount (#2103)
        - cmd/snap: rename is-managed to managed and tune (#2102)
        - interfaces,overlord/ifacestate: initial cleaning up of no arg
          AutoConnect related bits (#2090)
        - client, cmd: prompt for password when buying (#2086)
        - snapstate: fix hanging `snap remove` if snap is no longer mounted
        - image: support gadget specific cloud.conf file (#2101)
        - cmd/snap,ctlcmd: fix behavior of snap(ctl) get (#2093)
        - store: local users download from the anonymous url (#2100)
        - docs/hooks.md: fix typos (#2099)
        - many: check installation of slots and plugs against declarations
        - docs: fix missing "=" in the systemd-active docs
        - store: do not set store auth for local users (#2092)
        - interfaces,overlord/ifacestate: use declaration-based checking for
          auto-connect (#2071)
        - overlord, daemon, snap: support gadget config defaults (#2082)The
          main semantic changes are:
        - tests: fix snap-disconnect tests after core rename (#2088)
        - client,daemon,overlord,cmd: add /v2/users and create-user on auto-
          import (#2074)
        - many: abbreviated forms of disconnect (#2066)
        - asserts: require lowercase model until insensitive matching is
          ready (#2076)
        - cmd/snap: add version command, same as --version (#2075)
        - all: use "core" by default but allow "ubuntu-core" still (#2070)
        - overlord/devicestate, docs/hooks.md: nest prepare-device
          configuration options
        - daemon: fix login API to return local macaroons (#2078)
        - daemon: do not hardcode UID in userLookup (#2080)
        - client, cmd: connect fixes (#2026)
        - many: preparations for switching most of autoconnect to use the
          declarationsfor now:
        - overlord/auth: update CheckMacaroon to verify local snapd
          macaroons (#2069)
        - cmd/snap: trivial auto-import and download tweaks (#2067)
        - interfaces: add repo.ResolveConnect that handles name resolution
        - interfaces/policy: introduce InstallCandidate and its checks
        - interfaces/policy,overlord: check connection requests against the
          declarations in ifacestate
        - many: setup snapd macaroon for local users (#2051)Next step: do
          snapd macaroons verification.
        - interfaces/policy: implement snap-id/publisher-id checks
        - many: change Connect to take ConnRef instead of strings (#2060)
        - snap: auto mount block devices and import assertions (#2047)
        - daemon: add `snap create-user --force-managed` support (#2041)
        - docs: remove references to removed buying features (#2057)
        - interfaces,docs: allow sharing SNAP{,_DATA,_COMMON} via content
          iface (#2063)
        - interfaces: add Plug/Slot/Connection reference helpers (#2056)
        - client,daemon,cmd/snap: improve create-user APIs (#2054)
        - many: introduce snap refresh --ignore-validation <snap> to
          override refresh validation (#2052)
        - daemon: add support for `snap create-user --known` (#2040)
        - interfaces/policy: start of interface policy checking code based
          on declarations (#2050)
        - overlord/configstate: support nested configuration (#2039)
        - asserts,interfaces/builtin,overlord/assertstate: introduce base-
          declaration (#2037)
        - interfaces: builtin: Allow writing DHCP lease files to
          /run/NetworkManager/dhcp (#2049)
        - many: remove all traces of the /v2/buy/methods endpoint (#2045)
        - tests: add external spread backend (#1918)
        - asserts: parse the slot rules in snap-declarations (#2035)
        - interfaces: allow read of /etc/ld.so.preload by default for armhf
          on series 16 (#2048)
        - store: change purchase to order and store clean up first pass
          (#2043)
        - daemon, store: switch to new store APIs in snapd (#2036)
        - many: add email to UserState (#2038)
        - asserts: support parsing the plugs stanza i.e. plug rules in snap-
          declarations (#2027)
        - store: apply deltas if explicitly enabled (#2031)
        - tests: fix create-key/snap-sign test isolation (#2032)
        - snap/implicit: don't restrict the camera iface to clasic (#2025)
        - client, cmd: change buy command to match UX document (#2011)
        - coreconfig: nuke it. Also, ignore po/snappy.pot. (#2030)
        - store: download deltas if explicitly enabled (#2017)
        - many: allow use of the system user assertion with create-user
          (#1990)
        - asserts,overlord,snap: add prepare-device hook for device
          registration (#2005)
        - debian: adjust packaging for trusty/deputy systemd (#2003)
        - asserts: introduce AttributeConstraints (#2015)
        - interface/builtin: access system bus on screen-inhibit-control
        - tests: add firewall-control interface test (#2009)
        - snapstate: pass errors from ListRefresh in updateInfo (#2018)
        - README: add links to IRC, mailing list and social media (#2022)
        - docs: add `configure` hook to hooks list (#2024)LP: #1596629
        - cmd/snap,configstate: rename apply-config variables to configure.
          (#2023)
        - store: retry download on 500 (#2019)
        - interfaces/builtin: support time and date settings via
          'org.freedesktop.timedate1 (#1832)
    
     -- Michael Vogt <email address hidden>  Wed, 23 Nov 2016 17:50:52 +0100
  • snapd (2.17.1) xenial; urgency=medium
    
      * New upstream release, LP: #1637215:
        - release: os-release on core has changed
        - tests: /dev/ptmx does not work on powerpc, skip here
        - docs: moved to github.com/snapcore/snapd/wiki (#2258)
        - debian: golang is not installable on powerpc, use golang-any
    
    snapd (2.17) xenial; urgency=medium
    
      * New upstream release, LP: #1637215:
        - overlord/ifacestate: add unit tests for undo of setup-snap-
          security (#2243)
        - daemon,overlord,snap,tests: download to .partial in final dir
          (#2237)
        - overlord/state: marshaling tests for lanes (#2245)
        - overlord/state: introduce state lanes (#2241)
        - overlord/snapstate: fix revert+refresh (#2224)
        - interfaces/sytemd: enable/disable generated service units (#2229)
        - many: fix incorrect security files generation on undo
        - overlord/snapstate: add dynamic snapdX.Y assumes (#2227)
        - interfaces: network-manager: give slot full read-write access to
          /run/NetworkManager
        - docs: update the name of the command for the cross-build
        - overlord/snapstate: fix missing argument to Noticef
        - snapstate: ensure gadget/core/kernel can not be disabled (#2218)
        - asserts: limit to 1y only if len(models) == 0 (#2219)
        - debian: only install share/locale if available (missing on
          powerpc)
        - overlrod/snapstate: fix revert followed by refresh to old-current
          (#2214)
        - interfaces/builtin: network-manager and bluez can change hostname
          (#2204)
        - snap: switch the auto-import dir to /run/snapd/auto-import
        - docs: less details about cloud.cfg as requested in trello (#2206)
        - spread.yaml: Ensure ubuntu user has passwordless sudo for
          autopkgtests (#2201)
        - interfaces/builtin: add dcdbas-control interface
        - boot: do not set boot to try mode if the revision is unchanged
        - interfaces: add shutdown interface (#2162)
        - interfaces: add system-power-control interface
        - many: use the new systemd backend for configuring GPIOs
        - overlord/ifacestate: setup security for slots before plugs
        - snap: spool assertion candidates if snapd is not up yet
        - store,daemon,overlord: download things to a partials dir
        - asserts,daemon: implement system-user-authority header/concept
        - interfaces/builtin: home base declaration rule using on-classic
          for its policy
        - interfaces/builtin: finish decl based checks
        - asserts: bump snap-declaration to allow signing with new-style
          plugs and slots
        - overlord: checks for kernel installation/refresh based on model
          assertion and previous kernel
        - tests/lib/fakestore: fix logic to distinguish assertion not found
          errors
        - client: add a few explicit error types (around the request cycle)
        - tests/lib/fakestore/cmd/fakestore: make it log, and fix a typo
        - overlord/snapstate: two bugs for one
        - snappy: disable auto-import of assertions on classic (#2122)
        - overlord/snapstate: move trash cleanup to a cleanup handler
          (#2173)
        - daemon: make create-user --known fail on classic without --force-
          managed (#2123)
        - asserts,interfaces/policy: implement on-classic plug/slot
          constraints
        - overlord: check that the first installed gadget matches the model
          assertion
        - tests: use the snapd-control-consumer snap from the store
        - cmd/snap: make snap run not talk to snapd for finding the revision
        - snap/squashfs: try to hard link instead of copying. Also, switch
          to osutil.CopyFile for cp invocation.
        - store: send supported max-format when retrieving assertions
        - snapstate, devicestate: do not remove seed
        - boot,image,overlord,partition: read/write boot variables in single
          operation
        - tests: reenable ubuntu-core tests on qemu
        - asserts,interfaces/policy: allow OR-ing of subrule constraints in
          plug/slot rules
        - many: move from flags as ints to flags as structs-of-bools (#2156)
        - many: add supports for keeping and finding assertions with
          different format iterations
        - snap: stop using ubuntu-core-launcher, use snap-confine
        - many: introduce an assertion format iteration concept, refuse to
          add unsupported assertion
        - interfaces: tweak wording and comment
        - spread.yaml: dump apparmor denials on spread failure
        - tests: unflake ubuntu-core-reboot (#2150)
        - cmd/snap: tweak unknown command error message (#2139)
        - client,daemon,cmd: add payment-declined error kind (#2107)
        - cmd/snap: update remove command help (#2145)
        - many: removed frameworks target and fixed service files (#2138)
        - asserts,snap: validate attributes to a JSON-compatible type subset
          (#2140)
        - asserts: remove unused serial-proof type
        - tests: skip auto-import tests on systems without test keys (#2142)
        - overlord/devicestate: don't spam the debug log on classic (#2141)
        - cmd/snap: simplify auto-import mountinfo parsing (#2135)
        - tests: run ubuntu-core upgrades on isolated machine (#2137)
        - overlord/devicestate: recover seeding from old external approach
          (#2134)
        - overlord: merge overlord/boot pkg into overlord/devicestate
          (#2118)
        - daemon: add postCreateUserSuite test suite (#2124)
        - tests: abort tests if an update process is scheduled (#2119)
        - snapstate: avoid reboots if nothing in the boot setup has changed
          (#2117)
        - cmd/snap: do not auto-import from loop or non-dev devices (#2121)
        - tests: add spread test for `snap auto-import` (#2126)
        - tests: add test for auto-mount assertion import (#2127)
        - osutil: add missing unit tests for IsMounted (#2133)
        - tests: check for failure creating user on managed ubuntu-core
          systems (#2096)
        - snap: ignore /dev/loop addings from udev (#2111)
        - tests: remove snapd.boot-ok reference (#2109)
        - tests: enable tests related to the home interface in all-snaps
          (#2106)
        - snapstate: only import defaults from gadget on install (#2105)
        - many: move firstboot code into the snapd daemon (#2033)
        - store: send correct JSON type of string for expected payment
          amount (#2103)
        - cmd/snap: rename is-managed to managed and tune (#2102)
        - interfaces,overlord/ifacestate: initial cleaning up of no arg
          AutoConnect related bits (#2090)
        - client, cmd: prompt for password when buying (#2086)
        - snapstate: fix hanging `snap remove` if snap is no longer mounted
        - image: support gadget specific cloud.conf file (#2101)
        - cmd/snap,ctlcmd: fix behavior of snap(ctl) get (#2093)
        - store: local users download from the anonymous url (#2100)
        - docs/hooks.md: fix typos (#2099)
        - many: check installation of slots and plugs against declarations
        - docs: fix missing "=" in the systemd-active docs
        - store: do not set store auth for local users (#2092)
        - interfaces,overlord/ifacestate: use declaration-based checking for
          auto-connect (#2071)
        - overlord, daemon, snap: support gadget config defaults (#2082)The
          main semantic changes are:
        - tests: fix snap-disconnect tests after core rename (#2088)
        - client,daemon,overlord,cmd: add /v2/users and create-user on auto-
          import (#2074)
        - many: abbreviated forms of disconnect (#2066)
        - asserts: require lowercase model until insensitive matching is
          ready (#2076)
        - cmd/snap: add version command, same as --version (#2075)
        - all: use "core" by default but allow "ubuntu-core" still (#2070)
        - overlord/devicestate, docs/hooks.md: nest prepare-device
          configuration options
        - daemon: fix login API to return local macaroons (#2078)
        - daemon: do not hardcode UID in userLookup (#2080)
        - client, cmd: connect fixes (#2026)
        - many: preparations for switching most of autoconnect to use the
          declarationsfor now:
        - overlord/auth: update CheckMacaroon to verify local snapd
          macaroons (#2069)
        - cmd/snap: trivial auto-import and download tweaks (#2067)
        - interfaces: add repo.ResolveConnect that handles name resolution
        - interfaces/policy: introduce InstallCandidate and its checks
        - interfaces/policy,overlord: check connection requests against the
          declarations in ifacestate
        - many: setup snapd macaroon for local users (#2051)Next step: do
          snapd macaroons verification.
        - interfaces/policy: implement snap-id/publisher-id checks
        - many: change Connect to take ConnRef instead of strings (#2060)
        - snap: auto mount block devices and import assertions (#2047)
        - daemon: add `snap create-user --force-managed` support (#2041)
        - docs: remove references to removed buying features (#2057)
        - interfaces,docs: allow sharing SNAP{,_DATA,_COMMON} via content
          iface (#2063)
        - interfaces: add Plug/Slot/Connection reference helpers (#2056)
        - client,daemon,cmd/snap: improve create-user APIs (#2054)
        - many: introduce snap refresh --ignore-validation <snap> to
          override refresh validation (#2052)
        - daemon: add support for `snap create-user --known` (#2040)
        - interfaces/policy: start of interface policy checking code based
          on declarations (#2050)
        - overlord/configstate: support nested configuration (#2039)
        - asserts,interfaces/builtin,overlord/assertstate: introduce base-
          declaration (#2037)
        - interfaces: builtin: Allow writing DHCP lease files to
          /run/NetworkManager/dhcp (#2049)
        - many: remove all traces of the /v2/buy/methods endpoint (#2045)
        - tests: add external spread backend (#1918)
        - asserts: parse the slot rules in snap-declarations (#2035)
        - interfaces: allow read of /etc/ld.so.preload by default for armhf
          on series 16 (#2048)
        - store: change purchase to order and store clean up first pass
          (#2043)
        - daemon, store: switch to new store APIs in snapd (#2036)
        - many: add email to UserState (#2038)
        - asserts: support parsing the plugs stanza i.e. plug rules in snap-
          declarations (#2027)
        - store: apply deltas if explicitly enabled (#2031)
        - tests: fix create-key/snap-sign test isolation (#2032)
        - snap/implicit: don't restrict the camera iface to clasic (#2025)
        - client, cmd: change buy command to match UX document (#2011)
        - coreconfig: nuke it. Also, ignore po/snappy.pot. (#2030)
        - store: download deltas if explicitly enabled (#2017)
        - many: allow use of the system user assertion with create-user
          (#1990)
        - asserts,overlord,snap: add prepare-device hook for device
          registration (#2005)
        - debian: adjust packaging for trusty/deputy systemd (#2003)
        - asserts: introduce AttributeConstraints (#2015)
        - interface/builtin: access system bus on screen-inhibit-control
        - tests: add firewall-control interface test (#2009)
        - snapstate: pass errors from ListRefresh in updateInfo (#2018)
        - README: add links to IRC, mailing list and social media (#2022)
        - docs: add `configure` hook to hooks list (#2024)LP: #1596629
        - cmd/snap,configstate: rename apply-config variables to configure.
          (#2023)
        - store: retry download on 500 (#2019)
        - interfaces/builtin: support time and date settings via
          'org.freedesktop.timedate1 (#1832)
    
     -- Michael Vogt <email address hidden>  Fri, 04 Nov 2016 18:13:10 +0200
  • snapd (2.16ubuntu3) xenial; urgency=medium
    
      * debian/control:
        - also add a dependency to "snap-confine" to unbreak armhf
          (LP: #1634236)
    
    snapd (2.16ubuntu2) xenial; urgency=medium
    
      * fix FTBFS on powerpc by ensuring that share/ is available
        in the source tree
    
    snapd (2.16ubuntu1) xenial; urgency=medium
    
      * debian/control:
        - fix version dependency of ubuntu-core-launcher to unbreak armhf
          (LP: #1634236)
    
     -- Michael Vogt <email address hidden>  Tue, 18 Oct 2016 20:27:50 +0200
  • snapd (2.16ubuntu2) xenial; urgency=medium
    
      * fix FTBFS on powerpc by ensuring that share/ is available
        in the source tree
    
    snapd (2.16ubuntu1) xenial; urgency=medium
    
      * debian/control:
        - fix version dependency of ubuntu-core-launcher to unbreak armhf
          (LP: #1634236)
    
     -- Michael Vogt <email address hidden>  Tue, 18 Oct 2016 15:40:38 +0200
  • snapd (2.16ubuntu1) xenial; urgency=medium
    
      * debian/control:
        - fix version dependency of ubuntu-core-launcher to unbreak armhf
          (LP: #1634236)
    
     -- Michael Vogt <email address hidden>  Mon, 17 Oct 2016 21:19:21 +0200
  • snapd (2.16) xenial; urgency=medium
    
      * New upstream release, LP: #1628425
        - overlord/state: prune old empty changes
        - interfaces: ppp: load needed kernel module (#2007)
        - interfaces/builtin: add missing rule to allow run-parts to
          execute all resolvconf scripts
        - many: rename apply-config hook to configure
        - tests: use new spread `debug` feature
        - many: finish `snap set` API.
        - overlord: fix and simplify configstate.Transaction
        - assertions: add system-user assertion
        - snap: add `snap known --remote`
        - tests: replace systemd-run with on-the-fly generation of units.
        - overlord/boot: switch to using assertstate.Batch
        - snap, daemon, store: pass through screenshots from store
        - image: add meta/gadget.yaml infrastructure
        - tests: add test benchmark script
        - daemon: add the actual ssh keys that got added to the create-user
          response
        - daemon: add REST API behind `snap get`
        - debian: re-add golang-github-gosexy-gettext-dev
        - tests: added install_local function
        - interfaces/builtin: fix resolvconf permissions for network-manager
          interface
        - tests: use apt as compatible with trusty
        - many: discard preserved namespace after removing snap
        - daemon, overlord, store: add ReadyToBuy API to snapd
        - many: add support for installing/removing multiple snaps
        - progress: use New64 and fix output newline
        - interfaces/builtin: allow network-manager to access netplan conf
          files
        - tests: build once and install test snap from cache
        - overlord/state: introduce cleanup support
        - snap: move/clarify Info.Broken
        - ctlcmd: add snapctl get.
        - overlord,store: clean up serial-proof plumbing code
        - interfaces/builtin: add network-setup-observe interface
        - daemon,overlord/assertstate: support streams of assertions with
          snap ack
        - snapd: kmod backend
        - tests: ensure HOME is also set correctly
        - configstate,hookstate: add snapctl set
        - tests: disable broken create-key test
        - interfaces: adjust bluetooth-control to allow getsockopt (LP:
          #1613572)
        - tests: add a test for core about device initialization and device
          registration and auth
        - many: show snap name before the download progress bar
        - interfaces/builtin: add rcvfrom for client connected plugs to mir
          interface
        - asserts: support for maps in assertions
        - tests: increase timeout for key generation in create-key test
        - many: validate refreshes against validation assertions by gating
          snaps
        - interfaces/apparmor: allow 'm' in default policy for snap-exec
        - many: avoid snap.InfoFromSnapYaml in tests
        - interfaces/builtin: allow /dev/net/tun with network-control
        - tests: add spread test for snap create-key/snap sign
        - tests: add missing quotes in security-device-cgroups/task.yaml
        - interfaces: drop ErrUnknownSecurity
        - store: add "ready to buy" method
        - snap/snapenv, tests: use root's data dirs when running via sudo
        - interfaces/builtin: add initial docker interface
        - snap: remove extra newline after progress is done
        - docs: fix formating of HACKING.md "Testing snapd"
        - store : add requestOptions.ExtraHeaders so that individual
          requests can customise headers.
        - many: use unique plug/slot names in tests
        - tests: add tests for the classic dimension
        - many: add vendoring of dependencies by default
        - tests: use in-tree snap{ctl,-exec} for all tests
        - many: support snapctl -h
        - tests: adjust regex after changes in stat output
        - store,snap: initial support for delta downloads
        - interfaces/builtin: add run/udev/data paths to mir interface
        - snap: lessen annoyance of implicit interface tests
        - tests: ensure http{,s}_proxy is defined inside the fake-store
        - interfaces: allow xdg-open in unity7, unity7 cleanups
        - daemon,store: move store login user logic to store
        - tests: replace realpath with readlink -f for trusty support.
        - tests: add https_proxy into environment as well
        - interfaces/builtin: allow mmaping pulseaudio buffers
    
     -- Michael Vogt <email address hidden>  Wed, 28 Sep 2016 11:09:27 +0200
  • snapd (2.15.2ubuntu1) xenial; urgency=medium
    
      * New upstream release, LP: #1623579
        - snap/snapenv, tests: use root's data dirs when running via sudo
          (cherry pick PR: #1857)
        - tests: add https_proxy into environment
          (cherry pick PR: #1926)
        - interfaces: allow xdg-open in unity7, unity7 cleanups
          (cherry pick PR: #1946)
        - tests: ensure http{,s}_proxy is defined inside the fake-store
          (cherry pick PR: #1949)
    
    snapd (2.15.2) xenial; urgency=medium
    
      * New upstream release, LP: #1623579
        - asserts: define a bit less terse Ref.String
        - interfaces: disable auto-connect in libvirt interface
        - asserts: check that validation assertions are signed by the
          publisher of the gating snap
    
    snapd (2.15.1) xenial; urgency=medium
    
      * New upstream release, LP: #1623579
        - image: ensure local snaps are put last in seed.yaml
        - asserts: revert change that made the account-key's name mandatory.
        - many: refresh all snap decls
        - interfaces/apparmor: allow reading /etc/environment
    
    snapd (2.15) xenial; urgency=medium
    
      * New upstream release, LP: #1623579
        - tests: disable prepare-image-grub test in autopkgtest
        - interfaces: allow special casing for auto-connect until we have
          assertions
        - docs: add a little documentation on hooks.
        - hookstate,daemon: don't mock HookRunner, mock command.
        - tests: add http_proxy to /etc/environment in the autopkgtest
          environment
        - backends: first bits of kernel-module security backend
        - tests: ensure openssh-server is installed in autopkgtest
        - tests: make ubuntu-core tests more robust
        - many: mostly work to support ABA upgrades
        - cmd/snap: do runtime linting of descriptions
        - spread.yaml: don't assume LANG is set
        - snap: fix SNAP* environment merging in `snap run`
        - CONTRIBUTING.md: remove integration-tests, include spread
        - store: don't discard error body from request device session call
        - docs: add create-user documentation
        - cmd/snap: match UX document for message when buying without login
        - firstboot: do not overwrite any existing netplan config
        - tests: add debug output to ubuntu-core-update-rollback-
          stresstest:
        - tests/lib/prepare.sh: test that classic does not setting bootvars
        - snap: run all tests with gpg2
        - asserts: basic support for validation assertion and refresh-
          control
        - interfaces: miscellaneous policy updates for default, browser-
          support and camera
        - snap: (re)add --force-dangerous compat option
        - tests: ensure SUDO_{USER,GID} is unset in the spread tests
        - many: clean out left over references to integration tests
        - overlord/auth,store: fix raciness in updating device/user in state
          through authcontext and other issuesbonus fixes:
        - tests: fix spread tests on yakkety
        - store: refactor auth/refresh tests
        - asserts: use gpg --fixed-list-mode to be compatible with both gpg1
          and gpg2
        - cmd/snap: i18n option descriptions
        - asserts: required account key name header
        - tests: add yakkety test host
        - packaging: make sure debhelper-generated snippet is invoked on
          postrm
        - snap,store: capture newest digest from the store, make it
          DownloadInfo only
        - tests: add upower-observe spread test
        - Merge github.com:snapcore/snapd
        - tests: fixes to actually run the spread tests inside autopkgtest
        - cmd/snap: make "snap find" error nicer.
        - tests: get the gadget name from snap list
        - cmd/snap: tweak help of 'snap download'
        - cmd/snap,image: teach snap download to download also assertions
        - interfaces/builtin: tweak opengl interface
        - interfaces: serial-port use udevUsbDeviceSnippet
        - store: ensure the payment methods method handles auth failure
        - overlord/snapstate: support revert flags
        - many: add snap configuration to REST API
        - tests: use ubuntu-image for the ubuntu-core-16 image creation
        - cmd/snap: serialise empty keys list as [] rather than null
        - cmd/snap,client: add snap set and snap get commands
        - asserts: update trusted account-key asserts with names
        - overlord/snapstate: misc fixes/tweaks/cleanups
        - image: have prepare-image set devmode correctly
        - overlord/boot: have firstboot support assertion files with
          multiple assertions
        - daemon: bail from enable and disable if revision given, and from
          multi-op if unsupported optons given
        - osutil: call sync after cp if
          requested.overlord/snapstate/backend: switch to use osutil instead
          of another buggy call to cp
        - cmd/snap: generate account-key-request "since" header in UTC
        - many: use symlinks instead of wrappers
        - tests: remove silly [Service] entry from snapd.socket.d/local.conf
        - store: switch device session to use device-session-request
          assertion
        - snap: ensure that plug and slot names are unique
        - cmd/snap: fix test suite (no Exit(0) on tests!)
        - interfaces: add interface for hidraw devices
        - tests: use the real model assertion when creating the core test
          image
        - interfaces/builtin: add udisks2 and removable-media interfaces
        - interface: network_manager: enable resolvconf
        - interfaces/builtin: usb serial-port support via udev
        - interfaces/udev: support noneSecurityTag keyed snippets
        - snap: switch to the new agreed regexp for snap names
        - tests: adjust test setup after ubuntu user removal
        - many: start services only after the snap is fully ready (link-snap
          was run)
        - asserts: don't have Add/Check panic in the face of unsupported no-
          authority assertions
        - asserts: initial support to generate/sign snap-build assertions
        - asserts: support checking account-key-request assertions
        - overlord: introduce AuthContext.DeviceSessionRequest with support
          in devicestate
        - overlord/state: fix for reloaded task/change crashing on Set if
          checkpointed w. no custom data  yet
        - snapd.refresh.service: require snap.socket and /snap/*/current.
        - many: spell --force-dangerous as just --dangerous, devmode should
          imply it
        - overlord/devicestate: try to fetch/refresh the signing key of
          serial (also in case is not there yet)
        - image,overlord/boot,snap: metadata from asserts for image snaps
        - many: automatically restart all-snap devices after os/kernel
          updates
        - interfaces: modem-manager: ignore camera
        - firstboot: only configure en* and eth* interfaces by default
        - interfaces: fix interface handling on no-app snaps
        - snap: set user variables even if HOME is unset (like with systemd
          services)
    
     -- Michael Vogt <email address hidden>  Wed, 21 Sep 2016 17:21:12 +0200
  • snapd (2.15.2) xenial; urgency=medium
    
      * New upstream release, LP: #1623579
        - asserts: define a bit less terse Ref.String
        - interfaces: disable auto-connect in libvirt interface
        - asserts: check that validation assertions are signed by the
          publisher of the gating snap
    
    snapd (2.15.1) xenial; urgency=medium
    
      * New upstream release, LP: #1623579
        - image: ensure local snaps are put last in seed.yaml
        - asserts: revert change that made the account-key's name mandatory.
        - many: refresh all snap decls
        - interfaces/apparmor: allow reading /etc/environment
    
    snapd (2.15) xenial; urgency=medium
    
      * New upstream release, LP: #1623579
        - tests: disable prepare-image-grub test in autopkgtest
        - interfaces: allow special casing for auto-connect until we have
          assertions
        - docs: add a little documentation on hooks.
        - hookstate,daemon: don't mock HookRunner, mock command.
        - tests: add http_proxy to /etc/environment in the autopkgtest
          environment
        - backends: first bits of kernel-module security backend
        - tests: ensure openssh-server is installed in autopkgtest
        - tests: make ubuntu-core tests more robust
        - many: mostly work to support ABA upgrades
        - cmd/snap: do runtime linting of descriptions
        - spread.yaml: don't assume LANG is set
        - snap: fix SNAP* environment merging in `snap run`
        - CONTRIBUTING.md: remove integration-tests, include spread
        - store: don't discard error body from request device session call
        - docs: add create-user documentation
        - cmd/snap: match UX document for message when buying without login
        - firstboot: do not overwrite any existing netplan config
        - tests: add debug output to ubuntu-core-update-rollback-
          stresstest:
        - tests/lib/prepare.sh: test that classic does not setting bootvars
        - snap: run all tests with gpg2
        - asserts: basic support for validation assertion and refresh-
          control
        - interfaces: miscellaneous policy updates for default, browser-
          support and camera
        - snap: (re)add --force-dangerous compat option
        - tests: ensure SUDO_{USER,GID} is unset in the spread tests
        - many: clean out left over references to integration tests
        - overlord/auth,store: fix raciness in updating device/user in state
          through authcontext and other issuesbonus fixes:
        - tests: fix spread tests on yakkety
        - store: refactor auth/refresh tests
        - asserts: use gpg --fixed-list-mode to be compatible with both gpg1
          and gpg2
        - cmd/snap: i18n option descriptions
        - asserts: required account key name header
        - tests: add yakkety test host
        - packaging: make sure debhelper-generated snippet is invoked on
          postrm
        - snap,store: capture newest digest from the store, make it
          DownloadInfo only
        - tests: add upower-observe spread test
        - Merge github.com:snapcore/snapd
        - tests: fixes to actually run the spread tests inside autopkgtest
        - cmd/snap: make "snap find" error nicer.
        - tests: get the gadget name from snap list
        - cmd/snap: tweak help of 'snap download'
        - cmd/snap,image: teach snap download to download also assertions
        - interfaces/builtin: tweak opengl interface
        - interfaces: serial-port use udevUsbDeviceSnippet
        - store: ensure the payment methods method handles auth failure
        - overlord/snapstate: support revert flags
        - many: add snap configuration to REST API
        - tests: use ubuntu-image for the ubuntu-core-16 image creation
        - cmd/snap: serialise empty keys list as [] rather than null
        - cmd/snap,client: add snap set and snap get commands
        - asserts: update trusted account-key asserts with names
        - overlord/snapstate: misc fixes/tweaks/cleanups
        - image: have prepare-image set devmode correctly
        - overlord/boot: have firstboot support assertion files with
          multiple assertions
        - daemon: bail from enable and disable if revision given, and from
          multi-op if unsupported optons given
        - osutil: call sync after cp if
          requested.overlord/snapstate/backend: switch to use osutil instead
          of another buggy call to cp
        - cmd/snap: generate account-key-request "since" header in UTC
        - many: use symlinks instead of wrappers
        - tests: remove silly [Service] entry from snapd.socket.d/local.conf
        - store: switch device session to use device-session-request
          assertion
        - snap: ensure that plug and slot names are unique
        - cmd/snap: fix test suite (no Exit(0) on tests!)
        - interfaces: add interface for hidraw devices
        - tests: use the real model assertion when creating the core test
          image
        - interfaces/builtin: add udisks2 and removable-media interfaces
        - interface: network_manager: enable resolvconf
        - interfaces/builtin: usb serial-port support via udev
        - interfaces/udev: support noneSecurityTag keyed snippets
        - snap: switch to the new agreed regexp for snap names
        - tests: adjust test setup after ubuntu user removal
        - many: start services only after the snap is fully ready (link-snap
          was run)
        - asserts: don't have Add/Check panic in the face of unsupported no-
          authority assertions
        - asserts: initial support to generate/sign snap-build assertions
        - asserts: support checking account-key-request assertions
        - overlord: introduce AuthContext.DeviceSessionRequest with support
          in devicestate
        - overlord/state: fix for reloaded task/change crashing on Set if
          checkpointed w. no custom data  yet
        - snapd.refresh.service: require snap.socket and /snap/*/current.
        - many: spell --force-dangerous as just --dangerous, devmode should
          imply it
        - overlord/devicestate: try to fetch/refresh the signing key of
          serial (also in case is not there yet)
        - image,overlord/boot,snap: metadata from asserts for image snaps
        - many: automatically restart all-snap devices after os/kernel
          updates
        - interfaces: modem-manager: ignore camera
        - firstboot: only configure en* and eth* interfaces by default
        - interfaces: fix interface handling on no-app snaps
        - snap: set user variables even if HOME is unset (like with systemd
          services)
    
     -- Michael Vogt <email address hidden>  Mon, 19 Sep 2016 10:42:29 +0200
  • snapd (2.15) xenial; urgency=medium
    
      * New upstream release, LP: #1623579
        - tests: disable prepare-image-grub test in autopkgtest
        - interfaces: allow special casing for auto-connect until we have
          assertions
        - docs: add a little documentation on hooks.
        - hookstate,daemon: don't mock HookRunner, mock command.
        - tests: add http_proxy to /etc/environment in the autopkgtest
          environment
        - backends: first bits of kernel-module security backend
        - tests: ensure openssh-server is installed in autopkgtest
        - tests: make ubuntu-core tests more robust
        - many: mostly work to support ABA upgrades
        - cmd/snap: do runtime linting of descriptions
        - spread.yaml: don't assume LANG is set
        - snap: fix SNAP* environment merging in `snap run`
        - CONTRIBUTING.md: remove integration-tests, include spread
        - store: don't discard error body from request device session call
        - docs: add create-user documentation
        - cmd/snap: match UX document for message when buying without login
        - firstboot: do not overwrite any existing netplan config
        - tests: add debug output to ubuntu-core-update-rollback-
          stresstest:
        - tests/lib/prepare.sh: test that classic does not setting bootvars
        - snap: run all tests with gpg2
        - asserts: basic support for validation assertion and refresh-
          control
        - interfaces: miscellaneous policy updates for default, browser-
          support and camera
        - snap: (re)add --force-dangerous compat option
        - tests: ensure SUDO_{USER,GID} is unset in the spread tests
        - many: clean out left over references to integration tests
        - overlord/auth,store: fix raciness in updating device/user in state
          through authcontext and other issuesbonus fixes:
        - tests: fix spread tests on yakkety
        - store: refactor auth/refresh tests
        - asserts: use gpg --fixed-list-mode to be compatible with both gpg1
          and gpg2
        - cmd/snap: i18n option descriptions
        - asserts: required account key name header
        - tests: add yakkety test host
        - packaging: make sure debhelper-generated snippet is invoked on
          postrm
        - snap,store: capture newest digest from the store, make it
          DownloadInfo only
        - tests: add upower-observe spread test
        - Merge github.com:snapcore/snapd
        - tests: fixes to actually run the spread tests inside autopkgtest
        - cmd/snap: make "snap find" error nicer.
        - tests: get the gadget name from snap list
        - cmd/snap: tweak help of 'snap download'
        - cmd/snap,image: teach snap download to download also assertions
        - interfaces/builtin: tweak opengl interface
        - interfaces: serial-port use udevUsbDeviceSnippet
        - store: ensure the payment methods method handles auth failure
        - overlord/snapstate: support revert flags
        - many: add snap configuration to REST API
        - tests: use ubuntu-image for the ubuntu-core-16 image creation
        - cmd/snap: serialise empty keys list as [] rather than null
        - cmd/snap,client: add snap set and snap get commands
        - asserts: update trusted account-key asserts with names
        - overlord/snapstate: misc fixes/tweaks/cleanups
        - image: have prepare-image set devmode correctly
        - overlord/boot: have firstboot support assertion files with
          multiple assertions
        - daemon: bail from enable and disable if revision given, and from
          multi-op if unsupported optons given
        - osutil: call sync after cp if
          requested.overlord/snapstate/backend: switch to use osutil instead
          of another buggy call to cp
        - cmd/snap: generate account-key-request "since" header in UTC
        - many: use symlinks instead of wrappers
        - tests: remove silly [Service] entry from snapd.socket.d/local.conf
        - store: switch device session to use device-session-request
          assertion
        - snap: ensure that plug and slot names are unique
        - cmd/snap: fix test suite (no Exit(0) on tests!)
        - interfaces: add interface for hidraw devices
        - tests: use the real model assertion when creating the core test
          image
        - interfaces/builtin: add udisks2 and removable-media interfaces
        - interface: network_manager: enable resolvconf
        - interfaces/builtin: usb serial-port support via udev
        - interfaces/udev: support noneSecurityTag keyed snippets
        - snap: switch to the new agreed regexp for snap names
        - tests: adjust test setup after ubuntu user removal
        - many: start services only after the snap is fully ready (link-snap
          was run)
        - asserts: don't have Add/Check panic in the face of unsupported no-
          authority assertions
        - asserts: initial support to generate/sign snap-build assertions
        - asserts: support checking account-key-request assertions
        - overlord: introduce AuthContext.DeviceSessionRequest with support
          in devicestate
        - overlord/state: fix for reloaded task/change crashing on Set if
          checkpointed w. no custom data  yet
        - snapd.refresh.service: require snap.socket and /snap/*/current.
        - many: spell --force-dangerous as just --dangerous, devmode should
          imply it
        - overlord/devicestate: try to fetch/refresh the signing key of
          serial (also in case is not there yet)
        - image,overlord/boot,snap: metadata from asserts for image snaps
        - many: automatically restart all-snap devices after os/kernel
          updates
        - interfaces: modem-manager: ignore camera
        - firstboot: only configure en* and eth* interfaces by default
        - interfaces: fix interface handling on no-app snaps
        - snap: set user variables even if HOME is unset (like with systemd
          services)
    
     -- Michael Vogt <email address hidden>  Fri, 16 Sep 2016 07:46:22 +0200
  • snapd (2.14.2~16.04) xenial; urgency=medium
    
      * New upstream release: LP: #1618095
        - tests: use the spread tests with the adhoc interface inside
          autopkgtest
        - interfaces: add fwupd interface
        - asserts,cmd/snap: add "name" header to account-key(-request)
        - client,cmd/snap: display os-release data only on classic
        - asserts/tool,cmd/snap: introduce hidden "snap sign"
        - many: when installing snap file derive metadata from assertions
          unless --force-dangerous
        - osutil: tweak the createUserTests a bit and extract common code
        - debian: umount --lazy before rm on snapd.postrm
        - interfaces: updates to default policy, browser-support, and x11
        - store: set initial device session
        - interfaces: add upower-observe interface (LP: #1595813)
        - tests: use beta u-d-f in test by default
        - interfaces/builtin: allow writing on /dev/vhci in bluetooth-
          control
        - interfaces/builtin: allow /dev/vhci on bluetooth-control
        - tests: port integration tests to spread
        - snapstate: use umount --lazy when removing the mount units
        - spread: enable halt-timeout, tweak image selection
        - tests: fix firstboot-assertions to actually be runnable on classic
          again
        - asserts: introduce device-session-request
        - interfaces: add screen-inhibit-control interface (LP: #1604880)
        - firstboot: change location of netplan config
        - overlord/devicestate: some cleanups and solving a couple todos
        - daemon,overlord: add subcommand handling to snapctl
    
    snapd (2.14.1) xenial; urgency=medium
    
      * New upstream release: LP: #1618095
        - snap-exec: add support for commands with internal args in snap-
          exec
        - store: refresh expired device sessions
        - debian: re-add ubuntu-core-snapd-units as a transitional package
        - image: snap assertions into image
        - overlord/assertstate,asserts/snapasserts: give snap assertions
          helpers a package, introduce ReconstructSideInfo
        - docs/interfaces: Add empty line after lxd-support title
        - README: cover the new /run/snapd-snap.socket
        - daemon: make socket split backward-compatible.
    
    snapd (2.14) xenial; urgency=medium
    
      * New upstream release: LP: #1618095
        - cmd: enable SNAP_REEXEC only if it is set to SNAP_REEXEC=1
        - osutil: fix create-user on classic
        - firstboot: disable firstboot on classic for now
        - cmd/snap: add export-key --account= option
        - many: split public snapd REST API into separate socket.
        - many: drop ubuntu-core-snapd-units package, use release.OnClassic
          instead
        - tests: add content-shareing binary test that excersises snap-
          confine
        - snap: use "up to date" instead of "up-to-date"
        - asserts: add an account-key-request assertion
        - asserts: fix GPG key generation parameters
        - tests, integration-tests: implement the cups-control manual test
          as a spread test
        - many: clarify/tie down model assertion
        - cmd/snap: add "snap download" command
        - integration-tests: remove them in favour of the spread tests
        - tests: test all snap ubuntu core upgrade
        - many: support install and remove by revision
        - overlord/state: prevent change ready => unready
        - tests: fixes to make the ubuntu-core-16 image usable with
          -keep/-reuse
        - asserts: authority-id and brand-id of serial must match
        - firstboot: generate netplan config rather than ifupdown
        - store: request device session macaroon from store
        - tests: add workaround for u-d-f to unblock all-snap image tests
        - tests: the stable ubuntu-core snap has snap run support now
        - many: use make StripGlobalRootDir public
        - asserts: add some stricter checks around format
        - many: have AuthContext expose device store-id, serial and serial-
          proof signing to the store
        - tests: fix "tests/main/ack" to not break if asserts are alreay
          there
        - tests/main/ack: fix test/style
        - snap: add key management commands
        - firstboot: add firstboot assertions importing
    
     -- Michael Vogt <email address hidden>  Thu, 01 Sep 2016 18:52:05 +0200
  • snapd (2.14.1) xenial; urgency=medium
    
      * New upstream release: LP: #1618095
        - snap-exec: add support for commands with internal args in snap-
          exec
        - store: refresh expired device sessions
        - debian: re-add ubuntu-core-snapd-units as a transitional package
        - image: snap assertions into image
        - overlord/assertstate,asserts/snapasserts: give snap assertions
          helpers a package, introduce ReconstructSideInfo
        - docs/interfaces: Add empty line after lxd-support title
        - README: cover the new /run/snapd-snap.socket
        - daemon: make socket split backward-compatible.
    
    snapd (2.14) xenial; urgency=medium
    
      * New upstream release: LP: #1618095
        - cmd: enable SNAP_REEXEC only if it is set to SNAP_REEXEC=1
        - osutil: fix create-user on classic
        - firstboot: disable firstboot on classic for now
        - cmd/snap: add export-key --account= option
        - many: split public snapd REST API into separate socket.
        - many: drop ubuntu-core-snapd-units package, use release.OnClassic
          instead
        - tests: add content-shareing binary test that excersises snap-
          confine
        - snap: use "up to date" instead of "up-to-date"
        - asserts: add an account-key-request assertion
        - asserts: fix GPG key generation parameters
        - tests, integration-tests: implement the cups-control manual test
          as a spread test
        - many: clarify/tie down model assertion
        - cmd/snap: add "snap download" command
        - integration-tests: remove them in favour of the spread tests
        - tests: test all snap ubuntu core upgrade
        - many: support install and remove by revision
        - overlord/state: prevent change ready => unready
        - tests: fixes to make the ubuntu-core-16 image usable with
          -keep/-reuse
        - asserts: authority-id and brand-id of serial must match
        - firstboot: generate netplan config rather than ifupdown
        - store: request device session macaroon from store
        - tests: add workaround for u-d-f to unblock all-snap image tests
        - tests: the stable ubuntu-core snap has snap run support now
        - many: use make StripGlobalRootDir public
        - asserts: add some stricter checks around format
        - many: have AuthContext expose device store-id, serial and serial-
          proof signing to the store
        - tests: fix "tests/main/ack" to not break if asserts are alreay
          there
        - tests/main/ack: fix test/style
        - snap: add key management commands
        - firstboot: add firstboot assertions importing
    
     -- Michael Vogt <email address hidden>  Tue, 30 Aug 2016 16:43:29 +0200
  • snapd (2.13) xenial; urgency=medium
    
      * New upstream release: LP: #1616157
        - many: respect dirs.SnapSnapsDir in tests
        - tests: update listing test for latest stable image
        - many: hook in start of code to fetch/check assertions when
          installing snap from store
        - boot: add missing udevadm mock to fix FTBFS
        - interfaces: add lxd-support interface
        - dirs,snap: handle empty root directory in SetRootDir
        - dirs,snap: define methods for SNAP_USER_DATA and SNAP_USER_COMMON
        - tests: spread all-snap test cleanup
        - tests: add all-snap spread image tests
        - store,tests: have just one envvar SNAPPY_USE_STAGING_STORE to
          control talking to staging
        - overlord/hookstate: use snap run posix parameters.
        - interfaces/builtin: allow bind in the network interface
        - asserts,overlord/devicestate: simplify private key/key pairs APIs,
          they take just key ids
        - dependencies: update godeps
        - boot: add support for "devmode: {true,false}" in seed.yaml
        - many: teach prepare-image to copy the model assertion (and
          prereqs) into the seed area of the image
        - tests: start teaching the fakestore about assertions
        - asserts/sysdb: embed the new format official root/trusted
          assertions
        - overlord/devicestate: first pass at device registration logic
        - tests: add process-control interface spread test
        - tests: disable unity test
        - tests: adapt to new spread version
        - asserts: add serial-proof device assertion
        - client, cmd/snap: use the new multi-refresh endpoint
        - many: preparations for image code to fetch model prereqs
        - debian: add extra checks when debian/snapd.postrm purge is run
        - overlord/snapstate, daemon: support for multi-snap refresh
        - tests: do not leave "squashfs-root" around
        - snap-exec: Fix broken `snap run --shell` and add test
        - overlord/snapstate: check changes to SnapState for conflicts also.
        - docs/interfaces: change snappy command to snap
        - tests: test `snap run --hook` using in-tree snap-exec.
        - partition: ensure that snap_{kernel,core} is not overriden with an
          empty value
        - asserts,overlord/assertstate: introduce an assertstate task
          handler to fetch snap assertions
        - spread: disable re-exec to always test development tree.
        - interfaces: implement a fuse interface
        - interfaces/hardware-observe.go: re-add /run/udev/data
        - overlord/assertstate,daemon: reorg how the assert manager exposes
          the assertion db and adding to it
        - release: Remove "UBUNTU_CODENAME" from the test data
        - many: implement snapctl command.
        - interfaces: mpris updates (fix unconfined introspection, add name
          attribute)
        - asserts: export DecodePublicKey
        - asserts: introduce support for assertions with no authority,
          implement serial-request
        - interfaces: bluez: add a few more tests to verify interface
          connection works
        - interfaces: bluez: add missing mount security snippet case
        - interfaces: add kernel-module interface for module insertion.
        - integration-tests: look for ubuntu-device-flash on PATH before
          calling sudo
        - client, cmd, daemon, osutil: support --yaml and --sudoer flags for
          create-user
        - spread: use snap-confine from ppa:snappy-dev/image for the tests
        - many: move to purely hash based key lookup and to new
          key/signature format (v1)
        - spread: Use /home/gopath in spread.yaml
        - tests: base security spread tests
    
     -- Michael Vogt <email address hidden>  Wed, 24 Aug 2016 14:48:28 +0200
  • snapd (2.12+0.16.04) xenial; urgency=medium
    
      * debian/snapd.postrm:
        - remove purge for now to unblock the SRU (LP: #1605303)
      * spread.yaml:
        - reset previous "purge" for now
    
    snapd (2.12) xenial; urgency=medium
    
      * New upstream release: LP: #1612362
        - many: do not require root for `snap prepare-image`
        - tests: prevent restore error on test failure
        - osutil: change escaping for create-user's sudoers
        - docs: private flag doesn't exist on /v2/find (it's select)
        - snap: do not sort the result of `snap find`
        - interfaces/builtin: add gpio interface
        - partition: fix cleaning of the boot variables on the second good
          boot
        - tests: add udev rules spread test
        - docs: fix references to refresh action
        - interfaces/udev,osutil: avoid doubled rules and put all in a per
          snap file
        - store: minor store improvements from previous reviews
        - many: support interactive payments in snapd, filter from command
          line
        - docs/interfaces.md: improve interfaces documentation
        - overlord,store: set store device authorization header
        - store: add device nonce API support
        - many: various fixes around the `create-user` command
        - client, osutil: chown the auth file
        - interfaces/builtin: add transitional browser-support interface
        - snap: don't load unsupported implicit hooks.
        - cmd/snap,cmd/snap-exec: support hooks again.
        - interfaces/builtin: improve pulseaudio interface
        - asserts: make account-key's `until` optional to represent a never-
          expiring key
        - store: refactor newRequest/doRequest to take requestOptions
        - tests: allow-downgrades on upgrade test to prevent version errors
        - daemon: stop using group membership as succedaneous of running
          things with sudo
        - interfaces: add bluetooth-control interfaces
        - many: remove integration-test coverage metrics
        - daemon,docs: drop license docs and error kind
        - tests: add network-control interface spread test
        - tests: add hardware-observe spread test
        - interfaces: add system-trace interface LP: #1600085
        - boot: use `cp -aLv` instead of `cp -a` (no symlinks on vfat)
        - store: soft-refresh discharge macaroon from store when required
        - partition: clear snap_try_{kernel,core} on success
        - tests: add snapd-control interface spread test
        - tests: add locale-control write spread test
        - store: fix buy method after some refactoring broke it
        - interfaces/builtin: read perms for network devices in network-
          observe
        - interfaces: also allow rfkill in network_control
        - snapstate: remove artifacts from a snap try dir that vanished
        - client, cmd/snap: better errors for empty snap list result
        - wrappers: set BAMF_DESKTOP_FILE_HINT for unity
        - many: cleanup/update rest.md; improve auth errors
        - interfaces: miscelleneous policy updates for default, log-observe,
          mount-observe, opengl, pulseaudio, system-observe and unity7
        - interfaces: add process-control interface (LP: #1598225)
        - osutil: support both "nobody" and "nogroup" for grpnam tests
        - cmd: support defaulting to the user's preferred payment method
        - overlord: actually run hooks.
        - overlord/state,overlord/ifacestate: define basic infrastructure
          for and then setting up serialising of interface mgr tasks
        - asserts: add Assertion.Prerequisites and SigningKey, Ref and
          FindTrusted
        - overlord/snapstate: ensure calls to store are done without the
          state lock held
        - asserts,client: switch snap-build and snap-revision to be indexed
          by snap-sha3-384
        - many: make seed.yaml on firstboot mandatory and include sideInfo
        - asserts,many: start supporting structured headers using the new
          parseHeaders
        - many: update code for the new snap_mode
        - tests: added spread find private test
        - store: deal with 404 froms the SSO store properly
        - snap: remove meta/kernel.yaml again
        - daemon: always mock release info in tests
        - snapstate: drop revisions after "current" on refresh
        - asserts: introduce new parseHeadersThis introduces the new
          parseHeaders returning map[string]interface{} and capable of
          accepting:
        - asserts: remove/disable comma separated lists and their uses
    
     -- Michael Vogt <email address hidden>  Fri, 12 Aug 2016 11:09:45 +0200
  • snapd (2.11+0.16.04) xenial; urgency=medium
    
      * debian/snapd.postrm:
        - remove purge for now to unblock the SRU (LP: #1605303)
      * spread.yaml:
        - reset previous "purge" for now
    
     -- Michael Vogt <email address hidden>  Mon, 01 Aug 2016 15:45:21 +0200
  • snapd (2.0.10) xenial; urgency=medium
    
      *  New upstream release: LP: #1597329
        - interfaces: also allow @{PROC}/@{pid}/mountinfo and
          @{PROC}/@{pid}/mountstats
        - interfaces: allow read access to /etc/machine-id and
          @{PROC}/@{pid}/smaps
        - interfaces: miscelleneous policy updates for default, log-observe
          and system-observe
        - snapstate: add logging after a successful doLinkSnap
        - tests, integration-tests: port try tests to spread
        - store, cmd/snapd: send a basic user-agent to the store
        - store: add buy method
        - client: retry on failed GETs
        - tests: actual refresh test
        - docs: REST API update
        - interfaces: add mount support for hooks.
        - interfaces: add udev support for hooks.
        - interfaces: add dbus support for hooks.
        - tests, integration-tests: port refresh test to spread
        - tests, integration-tests: port change errors test to spread
        - overlord/ifacestate: don't retry snap security setup
        - integration-tests: remove unused file
        - tests: manage the socket unit when reseting state
        - overlord: improve organization of state patches
        - tests: wait for snapd listening after reset
        - interfaces/builtin: allow other sr*/scd* optical devices
        - systemd: add support for squashfuse
        - snap: make snaps vanishing less fatal for the system
        - snap-exec: os.Exec() needs argv0 in the args[] slice too
        - many: add new `create-user` command
        - interfaces: auto-connect content interfaces with the same content
          and developer
        - snapstate: add Current revision to SnapState
        - readme: tweak readme blurb
        - integration-tests: wait for listening port instead of active
          service reported by systemd
        - many: rename Current -> {CurrentSideInfo,CurrentInfo}
        - spread: fix home interface test after suite move
        - many: name unversioned data.
        - interfaces: add "content" interface
        - overlord/snapstate: defaultBackend can go away now
        - debian: comment to remember why the timer is setup like it is
        - tests,spread.yaml: introduce an upgrade test, support/split into
          two suites for this
        - overlord,overlord/snapstate: ensure we keep snap type in snapstate
          of each snap
        - many: rework the firstboot support
        - integration-tests: fix test failure
        - spread: keep core on suite restore
        - tests: temporary fix for state reset
        - overlord: add infrastructure for simple state format/content
          migrations
        - interfaces: add seccomp support for hooks.
        - interfaces: allow gvfs shares in home and temporarily allow
          socketcall by default (LP: #1592901, LP: #1594675)
        - tests, integration-tests: port network-bind interface tests to
          spread
        - snap,snap/snaptest: use PopulateDir/MakeTestSnapWithFiles directly
          and remove MockSnapWithHooks
        - interfaces: add mpris interface
        - tests: enable `snap run` on i386
        - tests, integration-tests: port network interface test to spread
        - tests, integration-tests: port interfaces cli to spread
        - tests, integration-tests: port leftover install tests to spread
        - interfaces: add apparmor support for hooks.
        - tests, integration-tests: port log-observe interface tests to
          spread
        - asserts: improve Decode doc comment about assertion format
        - tests: moved snaps to lib
        - many: add the camera interface
        - many: add optical-drive interface
        - interfaces: auto-connect home if running on classic
        - spread: bump gccgo test timeout
        - interfaces: use security tags to index security snippets.
        - daemon, overlord/snapstate, store: send confinement header to the
          store for install
        - spread: run tests on 16.04 i386 concurrently
        - tests,integration-tests: port install error tests to spread
        - interfaces: add a serial-port interface
        - tests, integration-tests, debian: port sideload install tests to
          spread
        - interfaces: add new bind security backend and refactor
          backendtests
        - snap: load and validate implicit hooks.
        - tests: add a build/run test for gccgo in spread
        - cmd/snap/cmd_login: Adjust message after adding support for wheel
          group
        - tests, integration-tests: ported install from store tests to
          spread
        - snap: make `snap change <taskid>` show task progress
        - tests, integration-tests: port search tests to spread
        - overlord/state,daemon: make abort proceed immediately, fix doc
          comment, improve tests
        - daemon: extend privileged access to users in "wheel" group
        - snap: tweak `snap refresh` and `snap refresh --list` outputTiny
          branch that does three things:
        - interfaces: refactor auto-connection candidate check
        - snap: add support for snap {install,refresh}
          --{edge,beta,candidate,stable}
        - release: don't force KDE Neon into devmode.
    
     -- Michael Vogt <email address hidden>  Wed, 29 Jun 2016 21:02:39 +0200
  • snapd (2.0.9) xenial; urgency=medium
    
      * New upstream release: LP: #1593201
        - snap: add the magic redirect part of `snap run`
        - tests, integration-tests: port server related tests to spread
        - overlord/snapstate: log restarting in the task
        - daemon: test restart wiring, fix setup/teardown
        - cmd: don't show the price if a snap has already been purchased
        - tests, integration-tests: port listing tests to spread
        - integration-tests: do not try to kill ubuntu-clock-app.clock (no
          longer a process)
        - several: tie up overlord's restart handler into daemon; adjust
          snap to cope
        - tests, integration-tests: port abort tests to spread
        - integration-tests: fix flaky TestRemoveBusyRetries
        - testutils: refactor/mock exec
        - snap,cmd: add hook support to snap run.
        - overlord/snapstate: remove Download from backend
        - store: use a custom logging transport
        - overlord/hookstate: implement basic HookManager.
        - spread: move the suite restore to restore-each
        - asserts: turn model os into model core field, making it also more
          like the kernel and gadget fields
        - asserts: / is not allowed in primary key headers, follow the store
          in this
        - release: enable full confinement on Elementary 0.4
        - integration-tests: fix another i386 autopkgtest failure.
        - cmd/snap: create SNAP_USER_DATA and common dirs in `snap run`
        - many: have the installation of the core snap request a restart (on
          classic)
        - asserts: allow to load also account assertions into the trusted
          set
        - many: install snaps in devmode on distributions without complete
          apparmor and seccomp support
        - spread: run on travis
        - snapenv: do not hardcode amd64 in tests
        - spread: initial harness and first test
        - interfaces: miscelleneous policy updates for chromium, x86,
          opengl, etc
        - integration-tests: remove daemon to use the log-observe interface
        - client: remove client.Revision and import snap.Revision instead
        - integration-tests: wait for network-bind service in try test
        - many: move over from snappy to snapstate/backend SetupSnap and
          related code
        - integration-tests: add interfaces cli tests
        - snapenv: cleanup snapenv.{Basic,User}
        - cmd/snap: also print slots that connect to the wanted snap (LP:
          #1590704)
        - asserts: error style, use "cannot" instead of "failed to"
          following the main decided style
        - integration-tests: wait until the network-bind service is up
          before testing
        - many: add new `snap run` command
        - snappy: unexport snappy.Install and snappy.Overlord.{Un,}Install
        - many: add some shared testing helpers to snap/snaptest and to
          boot/boottest
        - rest-api: support to send apps per snap (LP: #1564076)
    
     -- Michael Vogt <email address hidden>  Thu, 16 Jun 2016 13:56:12 +0200
  • snapd (2.0.8) xenial; urgency=medium
    
      * New upstream release: LP: #1589534
        - debian: make `snap refresh` times more random (LP: #1537793)
        - cmd: ExecInCoreSnap looks in "core" snap first, and only in
          "ubuntu-core" snap if rev>125.
        - cmd/snap: have 'snap list' display helper message on stderr
          (LP: #1587445)
        - snap: make app names more restrictive.
    
     -- Michael Vogt <email address hidden>  Wed, 08 Jun 2016 07:56:58 +0200
  • snapd (2.0.7) xenial; urgency=medium
    
      * New upstream release: LP: #1589534
        - debian: do not ship  /etc/ld.so.conf.d/snappy.conf (LP: #1589006)
        - debian: fix snapd.refresh.service install and usage (LP: #1588977)
        - ovlerlord/state: actually support task setting themself as
          done/undone
        - snap: do not use "." import in revision_test.go, as this breaks
          gccgo-6 (fix build failure on powerpc)
        - interfaces: add fcitx and mozc input methods to unity7
        - interfaces: add global gsettings interfaces
        - interfaces: autoconnect home and doc updates (LP: #1588886)
        - integration-tests: remove
          abortSuite.TestAbortWithValidIdInDoingStatus
        - many: adding backward compatible code to upgrade SnapSetup.Flags
        - overlord/snapstate: handle sideloading over an old sideloaded snap
          without panicing
        - interfaces: add socketcall() to the network/network-bind
          interfaces (LP: #1588100)
        - overlord/snapstate,snappy: move over CanRemoveThis moves over the
          CanRemove check to snapstate itself.overlord/snapstate
        - snappy: move over CanRemove
        - overlord/snapstate,snappy: move over CopyData and Remove*Data code
    
    snapd (2.0.6) xenial; urgency=medium
    
      * New upstream release: LP: #1588052:
        - many: repository moved to snapcore/snapd
        - debian: add transitional pkg for the github location change
        - snap: ensure `snap try` work with relative paths
        - debian: drop run/build dependency on lsb-release
        - asserts/tool: gpg key pair manager
        - many: add new snap-exec
        - many: implement `snap refresh --list` and  `snap refresh`
        - snap: add parsing support for hooks.
        - many: add the cups interface
        - interfaces: misc policy fixes (LP: #1583794)
        - many: add `snap try`
        - interfaces: allow using sysctl and scmp_sys_resolver for parsing
          kernel logs
        - debian: make snapd get its environ from /etc/environment
        - daemon,client,snap: revisions are now strings
        - interfaces: allow access to new ibus abstract socket path
          LP: #1580463
        - integration-tests: add remove tests
        - asserts: stronger crypto choices and follow better latest designs
        - snappy,daemon: hollow out more of snappy (either removing or not
          exporting stuff on its way out), snappy/gadget.go is gone
        - asserts: rename device-serial to serial
        - asserts: rename identity to account (and username access)
        - integration-tests: add changes tests
        - backend: add tests for environment wrapper generation
        - interfaces/builtin: add location-control interface
        - overlord/snapstate: move over check snap logic from snappy
        - release: use os-release instead of lsb-release for cross-distro
          use
        - asserts: allow empty snap-name for snap-declaration
        - interfaces/builtin,docs,snap: add the pulseaudio interface
        - many: add support for an environment map inside snap.yaml
        - overlord/snapstate: increase robustness of doLinkSnap/undoLinkSnap
          with sanity unit tests
        - snap: parse epoch property
        - snappy: do nothing in SetNextBoot when running on classic
        - snap: validate snap type
        - integration-tests: extend find command tests
        - asserts: extend tests to cover mandatory and empty headers
        - tests: stop the update-pot check in run-checks
        - snap: parse confinement property.
        - store: change applyUbuntuStoreHeaders to not take accept, and to
          take a channel
        - many: struct-based revisions, new representation
        - interfaces: remove 'audit deny' rules from network_control.go
        - interfaces: add  com.canonical.UrlLauncher.XdgOpen to unity7
          interface
        - interfaces: firewall-control can access xtables lock file
        - interfaces: allow unity7 AppMenu
        - interfaces: allow unity7 launcher API
        - interfaces/builtin: add location-observe interface
        - snap: fixed snap empty list text LP: #1587445
    
     -- Michael Vogt <email address hidden>  Mon, 06 Jun 2016 16:35:50 +0200
  • snapd (2.0.6) xenial; urgency=medium
    
      * New upstream release: LP: #1588052:
        - many: repository moved to snapcore/snapd
        - debian: add transitional pkg for the github location change
        - snap: ensure `snap try` work with relative paths
        - debian: drop run/build dependency on lsb-release
        - asserts/tool: gpg key pair manager
        - many: add new snap-exec
        - many: implement `snap refresh --list` and  `snap refresh`
        - snap: add parsing support for hooks.
        - many: add the cups interface
        - interfaces: misc policy fixes (LP: #1583794)
        - many: add `snap try`
        - interfaces: allow using sysctl and scmp_sys_resolver for parsing
          kernel logs
        - debian: make snapd get its environ from /etc/environment
        - daemon,client,snap: revisions are now strings
        - interfaces: allow access to new ibus abstract socket path
          LP: #1580463
        - integration-tests: add remove tests
        - asserts: stronger crypto choices and follow better latest designs
        - snappy,daemon: hollow out more of snappy (either removing or not
          exporting stuff on its way out), snappy/gadget.go is gone
        - asserts: rename device-serial to serial
        - asserts: rename identity to account (and username access)
        - integration-tests: add changes tests
        - backend: add tests for environment wrapper generation
        - interfaces/builtin: add location-control interface
        - overlord/snapstate: move over check snap logic from snappy
        - release: use os-release instead of lsb-release for cross-distro
          use
        - asserts: allow empty snap-name for snap-declaration
        - interfaces/builtin,docs,snap: add the pulseaudio interface
        - many: add support for an environment map inside snap.yaml
        - overlord/snapstate: increase robustness of doLinkSnap/undoLinkSnap
          with sanity unit tests
        - snap: parse epoch property
        - snappy: do nothing in SetNextBoot when running on classic
        - snap: validate snap type
        - integration-tests: extend find command tests
        - asserts: extend tests to cover mandatory and empty headers
        - tests: stop the update-pot check in run-checks
        - snap: parse confinement property.
        - store: change applyUbuntuStoreHeaders to not take accept, and to
          take a channel
        - many: struct-based revisions, new representation
        - interfaces: remove 'audit deny' rules from network_control.go
        - interfaces: add  com.canonical.UrlLauncher.XdgOpen to unity7
          interface
        - interfaces: firewall-control can access xtables lock file
        - interfaces: allow unity7 AppMenu
        - interfaces: allow unity7 launcher API
        - interfaces/builtin: add location-observe interface
        - snap: fixed snap empty list text LP: #1587445
    
     -- Michael Vogt <email address hidden>  Thu, 02 Jun 2016 08:23:50 +0200
  • snapd (2.0.5) xenial; urgency=medium
    
      * New upstream release: LP: #1583085
        - interfaces: add dbusmenu, freedesktop and kde notifications to
          unity7 (LP: #1573188)
        - daemon: make localSnapInfo return SnapState
        - cmd: make snap list with no snaps not special
        - debian: workaround for XDG_DATA_DIRS issues
        - cmd,po: fix conflicts, apply review from #1154
        - snap,store: load and store the private flag sent by the store in
          SideInfo
        - interfaces/apparmor/template.go: adjust /dev/shm to be more usable
        - store: use purchase decorator in Snap and FindSnaps
        - interfaces: first version of the networkmanager interface
        - snap, snappy: implement the new (minmimal) kernel spec
        - cmd/snap, debian: move manpage generation to depend on an environ
          key; also, fix completion
    
    snapd (2.0.4) xenial; urgency=medium
    
      * New upstream release:
        - interfaces: cleanup explicit denies
        - integration-tests: remove the ancient integration daemon tests
        - integration-tests: add network-bind interface test
        - integration-tests: add actual checks for undoing install
        - integration-tests: add store login test
        - snap: add certain implicit slots only on classic
        - integration-tests: add coverage flags to snapd.service ExecStart
          setting when building from branch
        - integration-tests: remove the tests for features removed in 16.04.
        - daemon, overlord/snapstate: "(de)activate" is no longer a thing
        - docs: update meta.md and security.md for current snappy
        - debian: always start snapd
        - integration-tests: add test for undoing failed install
        - overlord: handle ensureNext being in the past
        - overlord/snapstate,overlord/snapstate/backend,snappy: start
          backend porting LinkSnap and UnlinkSnap
        - debian/tests: add reboot capability to autopkgtest and execute
          snapPersistsSuite
        - daemon,snappy,progress: drop license agreement broken logic
        - daemon,client,cmd/snap: nice access denied message
          (LP: #1574829)
        - daemon: add user parameter to all commands
        - snap, store: rework purchase methods into decorators
        - many: simplify release package and add OnClassic
        - interfaces: miscellaneous policy updates
        - snappy,wrappers: move desktop files handling to wrappers
        - snappy: remove some obviously dead code
        - interfaces/builtin: quote apparmor label
        - many: remove the gadget yaml support from snappy
        - snappy,systemd,wrappers: move service units generation to wrappers
        - store: add method to determine if a snap must be bought
        - store: add methods to read purchases from the store
        - wrappers,snappy: move binary wrapper generation to new package
          wrappers
        - snap: add `snap help` command
        - integration-tests: remove framework-test data and avoid using
          config-snap for now
        - add integration test to verify fix for LP: #1571721
    
     -- Michael Vogt <email address hidden>  Thu, 19 May 2016 15:29:16 +0200
  • snapd (2.0.3) xenial; urgency=medium
    
      * New upstream micro release:
        - integration-tests, debian/tests: add unity snap autopkg test
        - snappy: introduce first feature flag for assumes: common-data-dir
        - timeout,snap: add YAML unmarshal function for timeout.Timeout
        - many: go into state.Retry state when unmounting a snap fails.
          (LP: #1571721, #1575399)
        - daemon,client,cmd/snap: improve output after snap
          install/refresh/remove (LP: #1574830)
        - integration-tests, debian/tests: add test for home interface
        - interfaces,overlord: support unversioned data
        - interfaces/builtin: improve the bluez interface
        - cmd: don't include the unit tests when building with go test -c
          for integration tests
        - integration-tests: teach some new trick to the fake store,
          reenable the app refresh test
        - many: move with some simplifications test snap building to
          snap/snaptest
        - asserts: define type for revision related errors
        - snap/snaptest,daemon,overlord/ifacestate,overlord/snapstate: unify
          mocking snaps behind MockSnap
        - snappy: fix openSnapFile's handling of sideInfo
        - daemon: improve snap sideload form handling
        - snap: add short and long description to the man-page
          (LP: #1570280)
        - snappy: remove unused SetProperty
        - snappy: use more accurate test data
        - integration-tests: add a integration test about remove removing
          all revisions
        - overlord/snapstate: make "snap remove" remove all revisions of a
          snap (LP: #1571710)
        - integration-tests: re-enable a bunch of integration tests
        - snappy: remove unused dbus code
        - overlord/ifacestate: fix setup-profiles to use new snap revision
          for setup (LP: #1572463)
        - integration-tests: add regression test for auth bug LP:#1571491
        - client, snap: remove obsolete TypeCore which was used in the old
          SystemImage days
        - integration-tests: add apparmor test
        - cmd: don't perform type assertion when we know error to be nil
        - client: list correct snap types
        - intefaces/builtin: allow getsockname on connected x11 plugs
          (LP: #1574526)
        - daemon,overlord/snapstate: read name out of sideloaded snap early,
          improved change summary
        - overlord: keep tasks unlinked from a change hidden, prune them
        - integration-tests: snap list on fresh boot is good again
        - integration-tests: add partial term to the find test
        - integration-tests: changed default release to 16
        - integration-tests: add regression test for snaps not present after
          reboot
        - integration-tests: network interface
        - integration-tests: add proxy related environment variables to
          snapd env file
        - README.md: snappy => snap
        - etc: trivial typo fix (LP:#1569892)
        - debian: remove unneeded /var/lib/snapd/apparmor/additional
          directory (LP: #1569577)
    
     -- Michael Vogt <email address hidden>  Tue, 03 May 2016 07:51:57 +0200
  • snapd (2.0.2) xenial; urgency=medium
    
      * New upstream release:
        - systemd: add multi-user.target (LP: #1572125)
        - release: our series is 16
        - integration-tests: fix snapd binary path for mounting the daemon
          built from branch
        - overlord,snap: add firstboot state sync
    
     -- Michael Vogt <email address hidden>  Tue, 19 Apr 2016 16:02:44 +0200
  • snapd (2.0.1) xenial; urgency=medium
    
      * client,daemon,overlord: fix authentication:
        - fix incorrect authenication check (LP: #1571491)
    
     -- Michael Vogt <email address hidden>  Mon, 18 Apr 2016 07:24:33 +0200
  • snapd (2.0) xenial; urgency=medium
    
      * New upstream release:
        - debian: put snapd in /usr/lib/snapd/
        - cmd/snap: minor polishing
        - cmd,client,daemon: add snap abort command
        - overlord: don't hold locks when callling backends
        - release,store,daemon: no more default-channel, release=>series
        - many: drop support for deprecated environment variables
          (SNAP_APP_*)
        - many: support individual ids in changes cmd
        - overlord/state: use numeric change and task ids
        - overlord/auth,daemon,client,cmd/snap: logout
        - daemon: don't install ubuntu-core twice
        - daemon,client,overlord/state,cmd: add changes command
        - interfaces/dbus: drop superfluous backslash from template
        - daemon, overlord/snapstate: updates are users too!
        - cmd/snap,daemon,overlord/ifacestate: add support for developer
          mode
        - daemon,overlord/snapstate: on refresh use the remembered channel,
          default to stable channel otherwise
        - cmd/snap: improve UX of snap interfaces when there are no results
        - overlord/state: include time in task log messages
        - overlord: prune and abort old changes and tasks
        - overlord/ifacestate: add implicit slots in setup-profiles
        - daemon,overlord: setup authentication for store downloads
        - daemon: macaroon-authed users are like root, and sudoers can login
        - daemon,client,docs: send install options to daemon
    
     -- Michael Vogt <email address hidden>  Sat, 16 Apr 2016 22:15:40 +0200
  • snapd (1.9.4.1) xenial; urgency=medium
    
      * Ensures that setup-profile adds implicit slots
    
     -- Michael Vogt <email address hidden>  Sat, 16 Apr 2016 09:48:13 +0200
  • snapd (1.9.4) xenial; urgency=medium
    
      * New upstream release:
        - etc: fix desktop file location
        - overlord/snapstate: stop an update once download sees the revision
          is already installed
        - overlord: make SnapState.DevMode a method, store flags
        - snappy: no more snapYaml in snappy.Snap
        - daemon,cmd,dirs,lockfile: drop all lockfiles
        - debian: use sudo in setup of the proxy environment
        - snap/snapenv,snappy,systemd: expose SNAP_REVISION to app
          environment
        - snap: validate similarly to what we did with old snapYaml info
          from squashfs snaps
        - daemon,store: plug in authentication for store search/details
        - overlord/snapstate: fix JSON name of SnapState.Candidate
        - overlord/snapstate: start using revisions higher than 100000 for
          local installs (sideloads)
        - interfaces,overlorf/ifacestate: honor user choice and don't auto-
          connect disconnected plugs
        - overlord/auth,daemon,client: hide user ids again
        - daemon,overlord/snapstate: back /snaps (and so snap list) using
          state
        - daemon,client,overlord/auth: rework state auth data
        - overlord/snapstate: disable Activate and Deactivate
        - debian: fix silly typo in autopkgtest setup
        - overlord/ifacestate: remove connection state with discard-conns
          task, on the removal of last snap
        - daemon,client: rename API update action to refresh
        - cmd/snap: rework login to be more resilient
        - overlord/snapstate: deny two changes on one snap
        - snappy: fix crash on certain snap.yaml
        - systemd: use native systemctl enable instead of our own
          implementation
        - store: add workaround for misbehaving store
        - debian: make autopkgtest use the right env vars
        - state: log do/undo status too when a task is run
        - docs: update rest.md with price information
        - daemon: only include price property if the snap is non-free
        - daemon, client, cmd/snap: connect/disconnect now async
        - snap,snappy: allow snaps to require system features
        - integration-tests: fix report of skips in SetUpTest method
        - snappy: clean out major bits (still using Installed) now
          unreferenced as cmd/snappy is gone
        - daemon/api,overlord/auth: add helper to get UserState from a
          client request
    
     -- Michael Vogt <email address hidden>  Fri, 15 Apr 2016 23:30:00 +0200
  • snapd (1.9.3) xenial; urgency=medium
    
      * New upstream release:
        - many: prepare for opengl support on classic
        - interfaces/apparmor: load all apparmor profiles on snap setup
        - daemon,client: move async resource to change in meta
        - debian: disable autopilot
        - snap: add basic progress reporting
        - client,cmd,daemon,snap,store: show the price of snaps in the cli
        - state: add minimal taskrunner logging
        - daemon,snap,overlord/snapstate: in the API get the snap icon using
          state
        - client,daemon,overlord: don't guess snap file vs. name
        - overlord/ifacestate: reload snap connections when setting up
          security for a given snap
        - snappy: remove cmd/snappy (superseded in favour of cmd/snap)
        - interfaecs/apparmor: remove all traces of old-security from
          apparmor backend
        - interfaces/builtin: add bluez interface
        - overlord/ifacestate: don't crash if connection cannot be reloaded
        - debian: add searchSuite to autopkgtest
        - client, daemon, cmd/snap: no more tasks; everything is changes
        - client: send authorization header in client requests
        - client, daemon: marshal suggested currency over REST
        - docs, snap: enumerate snap types correctly in docs and comments
        - many: add store authenticator parameter
        - overlord/ifacestate,daemon: setup security on conect and
          disconnect
        - interfaces/apparmor: remove unused apparmor variables
        - snapstate: add missing "TaskProgressAdapter.Write()" for working
          progress reporting
        - many: clean out snap config related code not for OS
        - daemon,client,cmd: return snap list from /v2/snaps
        - docs: update `/v2/snaps` endpoint documentation
        - interfaces: rename developerMode to devMode
        - daemon,client,overlord: progress current => done
        - daemon,client,cmd/snap: move query metadata to top-level doc
        - interfaces: add TestSecurityBackend
        - many: replace typographic quotes with ASCII
        - client, daemon: rework rest changes to export "ready" and "err"
        - overlord/snapstate,snap,store: track snap-id in side-info and
          therefore in state
        - daemon: improve mocking  of interfaces API tests
        - integration-tests: remove origins in default snap names for udf
          call
        - integration-test: use "snap list" in GetCurrentVersion
        - many: almost no more NewInstalledSnap reading manifest from
          snapstate and backend
        - daemon: auto install ubuntu-core if missing
        - oauth,store: remove OAuth authentication logic
        - overlord/ifacestate: simplify some tests with implicit manager
          initalization
        - store, snappy: move away from hitting details directly
        - overlord/ifacestate: reload connections when restarting the
          manager
        - overlord/ifacestate: increase flexibility of unit tests
        - overlord: use state to discover all installed snaps
        - overlord/ifacestate: track connections in the state
        - many: separate copy-data from unlinking of current snap
        - overlord/auth,store/auth: add macaroon authenticator to UserState
        - client: support for /v2/changes and /v2/changes/{id}
        - daemon/api,overlord/auth: rework authenticated users information
          in state
    
     -- Michael Vogt <email address hidden>  Thu, 14 Apr 2016 23:29:43 +0200
  • snapd (1.9.2) xenial; urgency=medium
    
      * New upstream release:
        - cmd/snap,daemon,store: rework login command to use daemon login
          API
        - store: cache suggested currency from the store
        - overlord/ifacestate: modularize and extend tests
        - integration-tests: reenable failure tests
        - daemon: include progress in rest changes
        - daemon, overlord/state: expose individual changes
        - overlord/ifacestate: drop duplicate package comment
        - overlord/ifacestate: allow tests to override security backends
        - cmd/snap: install *.snap and *.snap.* as files too
        - interfaces/apparmor: replace /var/lib/snap with /var/snap
        - daemon,overlord/ifacestate: connect REST API to interfaces in the
          overlord
        - debian: remove unneeded dependencies from snapd
        - overlord/state: checkpoint on final progress only
        - osutil: introduce IsUIDInAny
        - overlord/snapstate: rename GetSnapState to Get, SetSnapState to
          Set
        - daemon: add id to changes json
        - overlord/snapstate: SetSnapState() needs locks
        - overlord: fix broken tests
        - overlord/snapstate,overlord/ifacestate: reimplement SnapInfo (as
          Info) actually using the state
    
     -- Michael Vogt <email address hidden>  Wed, 13 Apr 2016 17:27:00 +0200
  • snapd (1.9.1.1) xenial; urgency=medium
    
      * debian/tests/control:
        - add git to make autopkgtest work
    
     -- Michael Vogt <email address hidden>  Tue, 12 Apr 2016 17:19:19 +0200
  • snapd (1.9.1) xenial; urgency=medium
    
      * Add warning about installing ubuntu-core-snapd-units on Desktop systems.
      * Add ${misc:Depends} to ubuntu-core-snapd-units.
      * interfaces,overlord: add support for auto-connecting plugs on
        install
      * fix sideloading snaps and (re)add tests for this
      * add `ca-certificates` to the test-dependencies to fix autopkgtest
        failure on armhf
    
     -- Michael Vogt <email address hidden>  Tue, 12 Apr 2016 14:39:57 +0200
  • snapd (1.9) xenial; urgency=medium
    
      * rename source and binary package to "snapd"
      * update directory layout to final 16.04 layout
      * use `snap` command instead of the previous `snappy`
      * use `interface` based security
      * use new state engine for install/update/remove
    
     -- Michael Vogt <email address hidden>  Tue, 12 Apr 2016 01:05:09 +0200