snapd

~mvo/snapd/+git/snapd-mvo:spread-test-apparmor-parser-expr-simplify

  1. Git
  2. lp:~mvo/snapd/+git/snapd-mvo
  3. spread-test-apparmor-parser-expr-simp...
Last commit made on 2023-06-27
Get this branch:
git clone -b spread-test-apparmor-parser-expr-simplify https://git.launchpad.net/~mvo/snapd/+git/snapd-mvo

Branch merges

Branch information

Name:
spread-test-apparmor-parser-expr-simplify
Repository:
lp:~mvo/snapd/+git/snapd-mvo

Recent commits

084012f... by Michael Vogt

tests: add test that explores `apparmor_parser {,no-}expr-simplify`

When apparmor_parser is used with `-O no-expr-simplify` it can
go into a expoential memory/cpu usage pattern when there are
lines with `/**/`. We dealt with that in the past by adding
special helpers like `AddParametricSnippet`, see 9c74887908b.

But it seems we have reached the limits for this now as we have
various interfaces that e.g. contain `/sys/devices/**/.../**` like
patterns which when combined seems to cause issues that make the
parser easily consume more than 1G of memory.

This commit has an example snap that combines some of the problematic
interfaces and demonstrates that it cannot be compiled with less
than 900M (the real number is probably closer to 1G) when
`no-expr-simplify` is used. It then shows that it does work with
the default apparmor options.

9100903... by Sergio Cazzolato

tests: fix the core20-new-snapd-does-not-break-old-initrd test (#12911)

The test needs to use an old pc snap as the new one is making fail the
boot process (error: bad shim signature) as the shim was updated to
revoke old stuff because of security.

bd642de... by Valentin David

image: relax version checks for preseeding

7ddd30a... by Sergio Cazzolato

Skip store-state test on external backend

This is because the following error: "cannot work with the staging store
without a testing build with compiled-in staging keys"

58f646b... by Samuele Pedroni

overlord: carry the target snap version in SnapSetup.Version

this is useful to be aware of it when looking at changes, for example
to make conflict decisions

refreshCandidate.Version is absorbed by SnapSetup.Version, the code
in o/hookstate/ctlcmd/refresh.go does not change

7411048... by Zeyad Gouda

cmd/snap/cmd_aliases: update stale aliases cmd help text

Remove section mentioning 'snap alias --reset' which is now out
of date as it was removed by commit e2d7e0ebd8d.

Signed-off-by: Zeyad Gouda <email address hidden>

18f4aa7... by Alfonso Sanchez-Beato

daemon: check mime type for POST /v2/model

45b57be... by Alfonso Sanchez-Beato

client,cmd: support for offline remodeling

This adds options --snap and --assertion to the "snap remodel"
command, which can be used to pass local files to snapd so offline
remodelling is possible.

347977d... by Miguel Pires

tests: increase retry in pre-download test

Increase a retry in a function used to determined whether a new change
has been created. Since it's used after a snapd restart (when forcing
an auto-refresh), the timeout wasn't enough to ensure that snapd had
started, auto-refreshed and triggered the pre-download flow.

Signed-off-by: Miguel Pires <email address hidden>

b36a5c1... by Peter Sabaini

interfaces: allow loopback as a block-device

Allowing loopback devices in the block-devices interface would be
convenient for testing and proof-of-concept setups for users of
snaps that consume block devices such as MicroCeph

Use case 1: allow a snap to utilize a preconfigured loopback bdev, for
instance allow MicroCeph to use a loopback device as an OSD for
testing or other non-performance critical work

Use case 2: allow a snap to create a loopback device automatically;
e.g. for the above scenario MicroCeph could automatically set up a
loop bdev for use as an OSD

Signed-off-by: Peter Sabaini <email address hidden>