~snappy-dev/snapd/+git/snapd-pawel:validation-sets/spread-test-enforcing

Last commit made on 2021-10-25
Get this branch:
git clone -b validation-sets/spread-test-enforcing https://git.launchpad.net/~snappy-dev/snapd/+git/snapd-pawel

Branch merges

Branch information

Name:
validation-sets/spread-test-enforcing
Repository:
lp:~snappy-dev/snapd/+git/snapd-pawel

Recent commits

fbd486e... by Paweł Stołowski

Move restore before execute.

889d364... by Paweł Stołowski

Move validation set cleanup to restore section.

9e8232c... by Paweł Stołowski

Forget both validation sets at the end of the test to avoid issue with
removing the snaps on restore.

76089d8... by Paweł Stołowski

Also check that validation set becomes invalid after installing a snap
with --ignore-validation.

5097e52... by Paweł Stołowski

Test validation enforcing.

eb4d86c... by Samuele Pedroni

interfaces: skip connection of netlink interface on older systems

Merge pull request #10938 from mardy/netlink-trusty

This is based on top of #10941

The test fails with an error like:

2021-10-15T15:28:09.8662790Z AppArmor parser error for /var/lib/snapd/apparmor/profiles/snap.test-snapd-policy-app-consumer.netlink-audit in /var/lib/snapd/apparmor/profiles/snap.test-snapd-policy-app-consumer.netlink-audit at line 576: Invalid capability audit_read.

d13b483... by Samuele Pedroni

asserts, o/snapstate: honor IgnoreValidation flag when checking installed snaps

Merge pull request #10950 from stolowski/validation-sets/ignore-validation-on-enforce

Handle IgnoreValidation flag from snapstate when checking installed snaps against enforced validation sets. Without this, after installing/refreshing a snap that violates validation set(s) with snap install/refresh --ignore-validation, it would be impossible to enable any other validation set on the system, because the offending snap would cause validation error from InstalledSnaps() helper. Note it is not possible to simply not pass such snaps to CheckInstalledSnaps(), because that would raise constraint errors if they were required, therefore the fix requires passing a map of snaps to be ignored.

As an exception to this, we want snap validate output to indicate invalid validation sets to the user as this is the way for the user to examine the setup.

a044a48... by Samuele Pedroni

tests/main/apparmor-batch-reload: fix fake apparmor_parser to handle --preprocess

Merge pull request #10971 from bboozzoo/bboozzoo/fix-apparmor-batch-reload-test-capability-bpf

Fix the mock apparmor_parser such that the parser feature detection still works
correctly. A followup to #10951

ac50439... by Maciej Borzecki

tests/main/apparmor-batch-reload: fix fake apparmor_parser to handle --preprocess

Fix the mock apparmor_parser such that the parser feature detection still works
correctly.

Signed-off-by: Maciej Borzecki <email address hidden>

493fc3d... by Alberto Mardegan

tests: skip connection of Qualcomm IPC on trusty