snapd

~mvo/snapd/+git/snapd-mvo:new-daemon-user-rocks

  1. Git
  2. lp:~mvo/snapd/+git/snapd-mvo
  3. new-daemon-user-rocks
Last commit made on 2023-08-03
Get this branch:
git clone -b new-daemon-user-rocks https://git.launchpad.net/~mvo/snapd/+git/snapd-mvo

Branch merges

Branch information

Name:
new-daemon-user-rocks
Repository:
lp:~mvo/snapd/+git/snapd-mvo

Recent commits

f083d43... by Michael Vogt

osutil: rename EnsureUserGroup->EnsureSnapUserGroup

4e0207a... by Michael Vogt

many: tweak function naming/comment (thanks to Samuele)

1556e04... by Michael Vogt

tests: improve system-users-are-created spread test

b054546... by Michael Vogt

osutil: improve comments

d881685... by Michael Vogt

many: add `_daemon_` as valid system username

With the recent adoption of the `_daemon_` user in the spec RK011
by the rocks team we should follow suite and also support the
new `_daemon_` user for snaps.

This commit implements this support.

22e1eb3... by Sergio Cazzolato

tests: fix error in gadget-config-defaults-to-snaps test (#13033)

* Fix error in gadget-config-defaults-to-snaps test

The test fails when either two variants are executed in the same machine
or the test execution is reapetead

The problem is that the snap lib ie cleaned but the
test-snapd-with-configure and test-snapd-with-default-configure snaps
are leaving leftovers in /snap and /var/snap, so during the second
execution, the files in SNAP_COMMON are the created in the first one.

The solution is to remove test-snapd-with-default-configure and clean
the leftovers for test-snapd-with-configure snap

* fix shellcheck

ab6d918... by Miguel Pires

aspects: optimise aspect tx Get

Cache a copy of the transaction's databag so that a new one doesn't have
to be created and all the deltas applied.

0b69df7... by Zeyad Gouda

interfaces/builtin/pulseaudio_test: fix apparmor checking incorrect permissions

Signed-off-by: Zeyad Gouda <email address hidden>

d0c82eb... by Philip Meulengracht

daemon: allow nil stored rebootInfo

Otherwise this causes getRebootArguments to try to resolve a bootloader when even when there is no RebootInfo set as a part of HandleRestart.

f1de83c... by Sergio Costas

interfaces/audio: allow to provide pipewire/pulse slots from a containerized pipewire/desktop (#12865)

* UDENG-535: allow access to pipewire socket

This PR ports UDENG-418 to upstream, that enables audio in core
Desktop. It allows access to the pipewire socket from snapped
applications, and allows to have pipewire running inside a snap
container. To avoid security issues, it only allows to access
the sockets located at the folder belonging to the snap that
owns the slot.

With this patch, audio works fine in Core Desktop, and also
screen sharing.

* Replace PLUG_SECURITY_TAGS with SLOT_SECURITY_TAGS

* Remove unneeded "ImplicitOnCore: false" statements

* Better explanation for the /etc/pulse rule

* Add pulseaudio tests