diff --git a/.gitignore b/.gitignore index b7d91da..1cf4369 100644 --- a/.gitignore +++ b/.gitignore @@ -86,3 +86,5 @@ /snapd_2.54.3.only-vendor.tar.xz /snapd_2.54.4.no-vendor.tar.xz /snapd_2.54.4.only-vendor.tar.xz +/snapd_2.55.2.no-vendor.tar.xz +/snapd_2.55.2.only-vendor.tar.xz diff --git a/0001-data-selinux-update-the-policy-to-allow-creating-rem.patch b/0001-data-selinux-update-the-policy-to-allow-creating-rem.patch deleted file mode 100644 index 6ba2080..0000000 --- a/0001-data-selinux-update-the-policy-to-allow-creating-rem.patch +++ /dev/null @@ -1,31 +0,0 @@ -From 72f956a58290f30f181a8f3411db495a9d06d267 Mon Sep 17 00:00:00 2001 -Message-Id: <72f956a58290f30f181a8f3411db495a9d06d267.1645092963.git.maciej.zenon.borzecki@canonical.com> -From: Maciej Borzecki -Date: Wed, 2 Feb 2022 09:36:44 +0100 -Subject: [PATCH] data/selinux: update the policy to allow creating/removing - dir under /etc/dbus-1 - -It is possible that system.d may be missing if no services were installed on the -system yet. In which case, snapd will create the directory and thus trigger the -denial. - -Signed-off-by: Maciej Borzecki ---- - data/selinux/snappy.te | 1 + - 1 file changed, 1 insertion(+) - -diff --git a/data/selinux/snappy.te b/data/selinux/snappy.te -index 948280ae7d17430f1ad4ddd25e0d7379aae7f575..4d416fe63ee1287d3e9c08c957fd2f26a5716106 100644 ---- a/data/selinux/snappy.te -+++ b/data/selinux/snappy.te -@@ -157,6 +157,7 @@ selinux_get_enforce_mode(snappy_t) - optional_policy(` - dbus_read_config(snappy_t) - allow snappy_t dbusd_etc_t:file { write create rename unlink }; -+ allow snappy_t dbusd_etc_t:dir { add_name remove_name }; - allow snappy_t dbusd_etc_t:lnk_file { read }; - ') - --- -2.35.1 - diff --git a/0002-data-selinux-update-SELinux-policy-with-more-bpf-all.patch b/0002-data-selinux-update-SELinux-policy-with-more-bpf-all.patch deleted file mode 100644 index 1ff690c..0000000 --- a/0002-data-selinux-update-SELinux-policy-with-more-bpf-all.patch +++ /dev/null @@ -1,31 +0,0 @@ -From 7bed5e4a7f631c5121567664dc0916530c959de6 Mon Sep 17 00:00:00 2001 -Message-Id: <7bed5e4a7f631c5121567664dc0916530c959de6.1645093298.git.maciej.zenon.borzecki@canonical.com> -From: Maciej Borzecki -Date: Wed, 2 Feb 2022 13:15:04 +0100 -Subject: [PATCH] data/selinux: update SELinux policy with more bpf allowances - -Signed-off-by: Maciej Borzecki ---- - data/selinux/snappy.te | 6 ++++++ - 1 file changed, 6 insertions(+) - -diff --git a/data/selinux/snappy.te b/data/selinux/snappy.te -index 948280ae7d17430f1ad4ddd25e0d7379aae7f575..cae01cd2256500caa6b82a56b10ada0093400f03 100644 ---- a/data/selinux/snappy.te -+++ b/data/selinux/snappy.te -@@ -605,6 +605,12 @@ allow snappy_confine_t self:capability { setgid setuid sys_admin sys_chroot dac_ - # device cgroup program, however those bits can only be built on a sufficiently - # recent system - ifndef(`no_bpf',` -+ # memlock rlimit may need to be temporarily incresed when loading a BPF program -+ allow snappy_confine_t self:capability { sys_resource }; -+ allow snappy_confine_t self:process { setrlimit }; -+ # doing BPF things -+ allow snappy_confine_t self:capability2 { bpf perfmon }; -+ # specifically these operations - allow snappy_confine_t self:bpf { map_create map_read map_write prog_load prog_run }; - # snap-confine creates /sys/fs/bpf/snap directory and pings BPF maps inside - fs_manage_bpf_dirs(snappy_confine_t) --- -2.35.1 - diff --git a/0003-data-selinux-snap-confine-may-getattr-device-nodes-w.patch b/0003-data-selinux-snap-confine-may-getattr-device-nodes-w.patch deleted file mode 100644 index 5bcb140..0000000 --- a/0003-data-selinux-snap-confine-may-getattr-device-nodes-w.patch +++ /dev/null @@ -1,27 +0,0 @@ -From 7a9ec10b911133897ce959700e22b49a7c519f0c Mon Sep 17 00:00:00 2001 -Message-Id: <7a9ec10b911133897ce959700e22b49a7c519f0c.1645092977.git.maciej.zenon.borzecki@canonical.com> -From: Maciej Borzecki -Date: Wed, 2 Feb 2022 13:20:04 +0100 -Subject: [PATCH] data/selinux: snap-confine may getattr device nodes when - setting up /dev in the snap namespace - -Signed-off-by: Maciej Borzecki ---- - data/selinux/snappy.te | 1 + - 1 file changed, 1 insertion(+) - -diff --git a/data/selinux/snappy.te b/data/selinux/snappy.te -index cae01cd2256500caa6b82a56b10ada0093400f03..11d7afe4ec14618fcadbc10fbfe21151cf0d7ae7 100644 ---- a/data/selinux/snappy.te -+++ b/data/selinux/snappy.te -@@ -631,6 +631,7 @@ dev_getattr_fs(snappy_confine_t) - dev_getattr_sysfs_fs(snappy_confine_t) - dev_list_sysfs(snappy_confine_t) - dev_read_sysfs(snappy_confine_t) -+dev_getattr_all(snappy_confine_t) - fs_getattr_cgroup(snappy_confine_t) - fs_getattr_hugetlbfs(snappy_confine_t) - fs_getattr_tmpfs(snappy_confine_t) --- -2.35.1 - diff --git a/0004-data-selinux-allow-the-snap-command-to-run-systemctl.patch b/0004-data-selinux-allow-the-snap-command-to-run-systemctl.patch deleted file mode 100644 index 355417d..0000000 --- a/0004-data-selinux-allow-the-snap-command-to-run-systemctl.patch +++ /dev/null @@ -1,32 +0,0 @@ -From e995e0fafe55d0b73889b3995bbd982f4b362307 Mon Sep 17 00:00:00 2001 -Message-Id: -From: Maciej Borzecki -Date: Wed, 23 Feb 2022 07:32:45 +0100 -Subject: [PATCH] data/selinux: allow the snap command to run systemctl - -Which can happen when there is a system key mismatch. Caught in the wild on -Fedora. - -Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=2057103 - -Signed-off-by: Maciej Borzecki ---- - data/selinux/snappy.te | 2 ++ - 1 file changed, 2 insertions(+) - -diff --git a/data/selinux/snappy.te b/data/selinux/snappy.te -index cc6ba5b14b306977eaa555b35d803637c2f5aa3e..c79f789ab00d4bc7e996606d4d63db2ac78d7ebd 100644 ---- a/data/selinux/snappy.te -+++ b/data/selinux/snappy.te -@@ -805,6 +805,8 @@ can_exec(snappy_cli_t, snappy_exec_t) - fs_getattr_tmpfs(snappy_cli_t) - fs_getattr_cgroup(snappy_cli_t) - -+# execute systemctl is-system-running when system-key mismatch is detected -+systemd_exec_systemctl(snappy_cli_t) - - ######################################## - # --- -2.35.1 - diff --git a/snapd.spec b/snapd.spec index a37844a..7365bde 100644 --- a/snapd.spec +++ b/snapd.spec @@ -85,17 +85,13 @@ %{!?_systemd_system_env_generator_dir: %global _systemd_system_env_generator_dir %{_prefix}/lib/systemd/system-environment-generators} Name: snapd -Version: 2.54.4 +Version: 2.55.2 Release: 1%{?dist} Summary: A transactional software package manager License: GPLv3 URL: https://%{provider_prefix} Source0: https://%{provider_prefix}/releases/download/%{version}/%{name}_%{version}.no-vendor.tar.xz Source1: https://%{provider_prefix}/releases/download/%{version}/%{name}_%{version}.only-vendor.tar.xz -Patch0: 0001-data-selinux-update-the-policy-to-allow-creating-rem.patch -Patch1: 0002-data-selinux-update-SELinux-policy-with-more-bpf-all.patch -Patch2: 0003-data-selinux-snap-confine-may-getattr-device-nodes-w.patch -Patch3: 0004-data-selinux-allow-the-snap-command-to-run-systemctl.patch %if 0%{?with_goarches} # e.g. el6 has ppc64 arch without gcc-go, so EA tag is required @@ -269,7 +265,7 @@ Provides: bundled(golang(github.com/juju/ratelimit)) Provides: bundled(golang(github.com/kr/pretty)) Provides: bundled(golang(github.com/kr/text)) Provides: bundled(golang(github.com/mvo5/goconfigparser)) -Provides: bundled(golang(github.com/mvo5/libseccomp-golang)) +Provides: bundled(golang(github.com/seccomp/libseccomp-golang)) Provides: bundled(golang(github.com/snapcore/go-gettext)) Provides: bundled(golang(golang.org/x/crypto/openpgp/armor)) Provides: bundled(golang(golang.org/x/crypto/openpgp/packet)) @@ -511,8 +507,6 @@ BUILDTAGS="nosecboot" %endif %if ! 0%{?with_bundled} -# We don't need mvo5 fork for seccomp, as we have seccomp 2.3.x -sed -e "s:github.com/mvo5/libseccomp-golang:github.com/seccomp/libseccomp-golang:g" -i cmd/snap-seccomp/*.go # We don't need the snapcore fork for bolt - it is just a fix on ppc sed -e "s:github.com/snapcore/bolt:github.com/boltdb/bolt:g" -i advisor/*.go errtracker/*.go %endif @@ -942,6 +936,395 @@ fi %changelog + +* Wed Apr 6 2022 Maciek Borzecki - 2.55.2-1 +- Release 2.55.2 to Fedora + +* Mon Mar 21 2022 Ian Johnson +- New upstream release 2.55.2 + - cmd/snap-update-ns: actually use entirely non-existent dirs + +* Mon Mar 21 2022 Ian Johnson +- New upstream release 2.55.1 + - cmd/snap-update-ns/change_test.go: use non-exist name foo-runtime + instead + +* Mon Mar 21 2022 Ian Johnson +- New upstream release 2.55 + - kernel/fde: add PartitionName to various structs + - osutil/disks: calculate the last usable LBA instead of reading it + - snap/quota: additional validation in resources.go + - o/snapstate: avoid setting up single reboot when update includes + base, kernel and gadget + - overlord/state: add helper for aborting unready lanes + - snap-bootstrap: Partially revert simplifications of mount + dependencies + - cmd/snap-update-ns/change.go: sort needed, desired and not reused + mount entries + - cmd/snap-preseed, image: move preseeding code to image/preseed + - interfaces/docker-support: make generic rules not conflict with + snap-confine + - i/b/modem-manager: provide access to ObjectManager + - i/b/network_{control,manager}.go: add more access to resolved + - overlord/state: drop unused lanes field + - cmd/snap: make 1.18 vet happy + - o/snapstate: allow installing the snapd-desktop-integration snap + even if the user-daemons feature is otherwise disabled + - snap/quota: fix bug in quota group tree validation code + - o/snapstate: make sure that snapd is a prerequisite for updating + base snaps + - bootloader: add support for piboot + - i/seccomp/template.go: add close_range to the allowed syscalls + - snap: add new cpu quotas + - boot: support factory-reset when sealing and resealing + - tests: fix test to avoid editing the test-snapd-tools snap.yaml + file + - dirs: remove unused SnapMetaDir variable + - overlord: extend single reboot test to include a non-base, non- + kernel snap + - github: replace "sanity check" with "quick check" in workflow + - fde: add new DeviceUnlock() call + - many: replace use of "sanity" with more inclusive naming in + comments + - asserts: minimal changes to disable authority-delegation before + full revert + - tests: updating the test-snapd-cups-control-consumer snap to + core20 based + - many: replace use of "sanity" for interface implementation checks + - cmd/snap-preseed: support for core20 preseeding + - cmd: set core22 migration related env vars and update spread test + - interface/opengl: allow read on + /proc/sys/dev/i915/perf_stream_paranoid + - tests/lib/tools/report-mongodb: fix typo in help text + - tests: Include the source github url as part of the mongo db + issues + - o/devicestate: split mocks to separate calls for creating a model + and a gadget + - snap: Add missing zlib + - cmd/snap: add support for rebooting to factory-reset + - interfaces/apparmor: Update base template for systemd-machined + - i/a/template.go: add ld path for jammy + - o/devicestate, daemon: introduce factory-reset mode, allow + switching + - o/state: fix undo with independent tasks in same change and lane + - tests: validate tests tools just on google and qemu backends + - tests/lib/external/snapd-testing-tools: update from upstream + - tests: skip interfaces-cups-control from debian-sid + - Increase the times in snapd-sigterm for arm devices + - interfaces/browser-support: allow RealtimeKit's + MakeThreadRealtimeWithPID + - cmd: misc analyzer fixes + - interfaces/builtin/account-control: allow to execute pam_tally2 + - tests/main/user-session-env: special case bash profile on + Tumbleweed + - o/snapstate: implement transactional lanes for prereqs + - o/snapstate: add core22 migration logic + - tests/main/mount-ns: unmount /run/qemu + - release: 2.54.4 changelog to master + - gadget: add buildVolumeStructureToLocation, + volumeStructureToLocationMap + - interfaces/apparmor: add missing unit tests for special devmode + rules/behavior + - cmd/snap-confine: coverity fixes + - interfaces/systemd: use batch systemd operations + - tests: small adjustments to fix vuln spread tests + - osutil/disks: trigger udev on the partition device node + - interfaces/network-control: add D-Bus rules for resolved too + - interfaces/cpu-control: add extra idleruntime data/reset files to + cpu-control + - packaging/ubuntu-16.04/rules: don't run unit tests on riscv64 + - data/selinux: allow the snap command to run systemctl + - boot: mock amd64 arch for mabootable 20 suite + - testutil: add Backup helper to save/restore values, usually for + mocking + - tests/nested/core/core20-reinstall-partitions: update test summary + - asserts: return an explicit error when key cannot be found + - interfaces: custom-device + - Fix snap-run-gdbserver test by retrying the check + - overlord, boot: fix unit tests on arches other than amd64 + - Get lxd snap from candidate channel + - bootloader: allow different names for the grub binary in different + archs + - cmd/snap-mgmt, packaging: trigger daemon reload after purging unit + files + - tests: add test to ensure consecutive refreshes do garbage + collection of old revs + - o/snapstate: deal with potentially invalid type of refresh.retain + value due to lax validation + - seed,image: changes necessary for ubuntu-image to support + preseeding extra snaps in classic images + - tests: add debugging to snap-confine-tmp-mount + - o/snapstate: add ~/Snap init related to backend + - data/env: cosmetic tweak for fish + - tests: include new testing tools and utils + - wrappers: do not reload the deamon or restart snapd services when + preseeding on core + - Fix smoke/install test for other architectures than pc + - tests: skip boot loader check during testing preparation on s390x + - t/m/interfaces-network-manager: use different channel depending on + system + - o/devicestate: pick system from seed systems/ for preseeding (1/N) + - asserts: add preseed assertion type + - data/env: more workarounds for even older fish shells, provide + reasonable defaults + - tests/main/snap-run-devmode-classic: reinstall snapcraft to clean + up + - gadget/update.go: add buildNewVolumeToDeviceMapping for existing + devices + - tests: allow run spread tests using a private ppaTo validate it + - interfaces/{cpu,power}-control: add more accesses for commercial + device tuning + - gadget: add searchForVolumeWithTraits + tests + - gadget/install: measure and save disk volume traits during + install.Run() + - tests: fix "undo purging" step in snap-run-devmode-classic + - many: move call to shutdown to the boot package + - spread.yaml: add core22 version of rsync to skip + - overlord, o/snapstate: fix mocking on systems without /snap + - many: move boot.Device to snap.Device + - tests: smoke test support for core22 + - tests/nested/snapd-removes-vulnerable-snap-confine-revs: use newer + snaps + - snapstate: make "remove vulnerable version" message more + friendly + - o/devicestate/firstboot_preseed_test.go: remove deadcode + - o/devicestate: preseeding test cleanup + - gadget: refactor StructureEncryption to have a concrete type + instead of map + - tests: add created_at timestamp to mongo issues + - tests: fix security-udev-input-subsystem test + - o/devicestate/handlers_install.go: use --all to get binary data + too for logs + - o/snapstate: rename "corecore" -> "core" + - o/snapstate: implement transactional flag + - tests: skip ~/.snap migration test on openSUSE + - asserts,interfaces/policy: move and prepare DeviceScopeConstraint + for reuse + - asserts: fetching code should fetch authority-delegation + assertions with signing keys as needed + - tests: prepare and restore nested tests + - asserts: first-class support for formatting/encoding signatory-id + - asserts: remove unused function, fix for linter + - gadget: identify/match encryption parts, include in traits info + - asserts,cmd/snap-repair: support delegation when validating + signatures + - many: fix leftover empty snap dirs + - libsnap-confine-private: string functions simplification + - tests/nested/manual/core20-cloud-init-maas-signed-seed-data: add + gadget variant + - interfaces/u2f-devices: add U2F-TOKEN + - tests/core/mem-cgroup-disabled: minor fixups + - data/env: fix fish env for all versions of fish, unexport local + vars, export XDG_DATA_DIRS + - tests: reboot test running remodel + - Add extra disk space to nested images to "avoid No space left on + device" error + - tests: add regression tests for disabled memory cgroup operation + - many: fix issues flagged by golangci and configure it to fail + build + - docs: fix incorrect link + - cmd/snap: rename the verbose logging flag in snap run + - docs: cosmetic cleanups + - cmd/snap-confine: build const data structures at compile- + time + - o/snapstate: reduce maxInhibition for raa by 1s to avoid confusing + notification + - snap-bootstrap: Cleanup dependencies in systemd mounts + - interfaces/seccomp: Add rseq to base seccomp template + - cmd/snap-confine: remove mention of "legacy mode" from comment + - gadget/gadget_test.go: fix variable type + - gadget/gadget.go: add AllDiskVolumeDeviceTraits + - spread: non-functional cleanup of go1.6 legacy + - cmd/snap-confine: update ambiguous comment + - o/snapstate: revert migration on refresh if flag is disabled + - packaging/fedora: sync with downstream, packaging improvements + - tests: updated the documentation to run spread tests using + external backend + - osutil/mkfs: Expose more fakeroot flags + - interfaces/cups: add cups-socket-directory attr, use to specify + mount rules in backend + - tests/main/snap-system-key: reset-failed snapd and snapd.socket + - gadget/install: add unit tests for install.Run() + - tests/nested/manual/remodel-cross-store,remodel-simple: wait for + serial + - vscode: added integrated support for MS VSCODE + - cmd/snap/auto-import: use osutil.LoadMountInfo impl instead + - gadget/install: add unit tests for makeFilesystem, allow mocking + mkfs.Make() + - systemd: batched operations + - gadget/install/partition.go: include DiskIndex in synthesized + OnDiskStructure + - gadget/install: rm unused support for writing non-filesystem + structures + - cmd/snap: close refresh notifications after trying to run a snap + while inhibited + - o/servicestate: revert #11003 checking for memory cgroup being + disabled + - tests/core/failover: verify failover handling with the kernel snap + - snap-confine: allow numbers in hook security tag + - cmd/snap-confine: mount bpffs under /sys/fs/bpf if needed + - spread: switch to CentOS 8 Stream image + - overlord/servicestate: disallow mixing snaps and subgroups. + - cmd/snap: add --debug to snap run + - gadget: mv modelCharateristics to gadgettest.ModelCharacteristics + - cmd/snap: remove use of zenity, use notifications for snap run + inhibition + - o/devicestate: verify that the new model is self contained before + remodeling + - usersession/userd: query xdg-mime to check for fallback handlers + of a given scheme + - gadget, gadgettest: reimplement tests to use new gadgettest + examples.go file + - asserts: start implementing authority-delegationTODO in later PRs: + - overlord: skip manager tests on riscv for now + - o/servicestate: quota group error should be more explanative when + memory cgroup is disabled + - i/builtin: allow modem-manager interface to access some files in + sysfs + - tests: ensure that interface hook works with hotplug plug + - tests: fix repair test failure when run in a loop + - o/snapstate: re-write state after undo migration + - interfaces/opengl: add support for ARM Mali + - tests: enable snap-userd-reexec on ubuntu and debian + - tests: skip bind mount in snapd-snap test when the core snap in + not repacked + - many: add transactional flag to snapd API + - tests: new Jammy image for testing + - asserts: start generalizing attrMatcherGeneralization is along + - tests: ensure the ca-certificates package is installed + - devicestate: ensure permissions of /var/lib/snapd/void are + correct + - many: add altlinux support + - cmd/snap-update-ns: convert some unexpected decimal file mode + constants to octal. + - tests: use system ubuntu-21.10-64 in nested tests + - tests: skip version check on lp-1871652 for sru validation + - snap/quota: add positive tests for the quota.Resources logic + - asserts: start splitting out attrMatcher for reuse to + constraint.go + - systemd: actually test the function passed as a parameter + - tests: fix snaps-state test for sru validation + - many: add Transactional to snapstate.Flags + - gadget: rename DiskVolume...Opts to DiskVolume...Options + - tests: Handle PPAs being served from ppa.launchpadcontent.net + - tests/main/cgroup-tracking-failure: Make it pass when run alone + - tests: skip migration test on centOS + - tests: add back systemd-timesyncd to newer debian distros + - many: add conversion for interface attribute values + - many: unit test fix when SNAPD_DEBUG=1 is set + - gadget/install/partition.go: use device rescan trick only when + gadget says to + - osutil: refactoring the code exporting mocking APIs to other + packages + - mkversion: check that snapd is a git source tree before guessing + the version + - overlord: small refactoring of group quota implementation in + preparation of multiple quota values + - tests: drop 21.04 tests (it's EOL) + - osutil/mkfs: Expose option for --lib flag in fakeroot call + - cmd/snapd-apparmor: fix bad variable initialization + - packaging, systemd: fix socket (re-)start race + - tests: fix running tests.invariant on testflinger systems + - tests: spread test snap dir migration + - interfaces/shared-memory: support single wild-cards in the + read/write paths + - tests: cross store remodel + - packaging,tests: fix running autopkgtest + - spread-shellcheck: add a caching layer + - tests: add jammy to spread executions + - osutils: deal with ENOENT in UserMaybeSudoUser() + - packaging/ubuntu-16.04/control: adjust libfuse3 dependency as + suggested + - gadget/update.go: add DiskTraitsFromDeviceAndValidate + - tests/lib/prepare.sh: add debug kernel command line params via + gadget on UC20 + - check-commit-email: do not fail when current dir is not under git + - configcore: implement netplan write support via dbus + - run-checks, check-commit-email.py: check commit email addresses + for validity + - tests: setup snapd remodel testing bits + - cmd/snap: adjust /cmd to migration changes + - systemd: enable batched calls for systemd calls operation on units + - o/ifacestate: add convenience Active() method to ConnectionState + struct + - o/snapstate: migrate to hidden dir on refresh/install + - store: fix flaky test + - i/builtin/xilinx-dma: add interface for Xilinx DMA driver + - go.mod: tidy up + - overlord/h/c/umount: remove handling of required parameter + - systemd: add NeedDaemonReload to the unit state + - mount-control: step 3 + - tests/nested/manual/minimal-smoke: bump mem to 512 for unencrypted + case too + - gadget: fix typo with filesystem message + - gadget: misc helper fixes for implicit system-data role handling + - tests: fix uses of fakestore new-snap-declaration + - spread-shellcheck: use safe_load rather than load with a loder + - interfaces: allow access to new at-spi socket location in desktop- + legacy + - cmd/snap: setup tracking cgroup when invoking a service directly + as a user + - tests/main/snap-info: use yaml.safe_load rather than yaml.load + - cmd/snap: rm unnecessary validation + - tests: fix `tests/core/create-user` on testflinger pi3 + - tests: fix parallel-install-basic on external UC16 devices + - tests: ubuntu-image 2.0 compatibility fixes + - tests/lib/prepare-restore: use go install rather than go get + - cmd/snap, daemon: add debug command for getting OnDiskVolume + dump + - gadget: resolve index ambiguity between OnDiskStructure and + LaidOutStructuretype: bare structures). + - tests: workaround missing bluez snap + - HACKING.md: add dbus-x11 to packages needed to run unit tests + - spread.yaml: add debian-{10,11}, drop debian-9 + - cmd/snap/quota: fix typo in the help message + - gadget: allow gadget struct with unspecified filesystem to match + part with fs + - tests: re-enable kernel-module-load tests on arm + - tests/lib/uc20-create-partitions/main.go: setup a logger for + messages + - cmd: support installing multiple local snaps + - usersession: implement method to close notifications via + usersession REST API + - data/env: treat XDG_DATA_DIRS like PATH for fish + - cmd/snap, cmd/snap-confine: extend manpage, update links + - tests: fix fwupd interface test in debian sid + - tests: do not run k8s smoke test on 32 bit systems + - tests: fix testing in trusty qemu + - packaging: merge 2.54.2 changelog back to master + - overlord: fix issue with concurrent execution of two snapd + processes + - interfaces: add a polkit interface + - gadget/install/partition.go: wait for udev settle when creating + partitions too + - tests: exclude interfaces-kernel-module load on arm + - tests: ensure that test-snapd-kernel-module-load is + removed + - tests: do not test microk8s-smoke on arm + - packaging, bloader, github: restore cleanliness of snapd info + file; check in GA workflow + - tests/lib/tools/tests.invariant: simplify check + - tests/nested/manual/core20-to-core22: wait for device to be + initialized before starting a remodel + - build-aux/snap/snapcraft.yaml: use build-packages, don't fail + dirty builds + - tests/lib/tools/tests.invariant: add invariant for detecting + broken snaps + - tests/core/failover: replace boot-state with snap debug boot-vars + - tests: fix remodel-kernel test when running on external devices + - data/selinux: allow poking /proc/xen + - gadget: do not crash if gadget.yaml has an empty Volumes section + - i/b/mount-control: support creating tmpfs mounts + - packaging: Update openSUSE spec file with apparmor-parser and + datadir for fish + - cmd/snap-device-helper: fix variable name typo in the unit tests + - tests: fixed an issue with retrieval of the squashfuse repo + - release: 2.54.1 + - tests: tidy up the top-level of ubuntu-seed during tests + - build-aux: detect/fix dirty git revisions while snapcraft + building + - release: 2.54 + * Fri Mar 11 2022 Maciek Borzecki - 2.54.4-1 - Release 2.54.4 to Fedora - Includes a fix for RHBZ#2062678 diff --git a/sources b/sources index 854c729..03ed52b 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (snapd_2.54.4.no-vendor.tar.xz) = 3ee98017d30c18f4367bae224a85bdf9991b37b9240783dfda3ceeac8fdc8332fea5c464de886e33e1b8e390b2c3d2cea515407b5306aadcc0397abf718ebfa0 -SHA512 (snapd_2.54.4.only-vendor.tar.xz) = 481bd06322427f343ac426f2b9ea5ae94acfd91dcf4aa269d85969c9d5e88776f8bed2240f017908e50975d24917e301b1f81d5fe41d2c3793e5bb57fa834811 +SHA512 (snapd_2.55.2.no-vendor.tar.xz) = 0daf84ddb9051df5df35c6c96e0e55acfec5b793ad9d633a7c97e09f4069b11391f493ab22b06aa247f53cd9a1d486835b7c9a090415ff5556885a37c78cdc7e +SHA512 (snapd_2.55.2.only-vendor.tar.xz) = d07552cc468489436917c6931b37e6a4ea52fb71a1bf8e522d55f5b9298d7a158ee0347acef9c522b8dd3ab3681c45b7cd2a79b6f65ebcb3673a2bb4a1d817d5