snappy:release/2.64

Last commit made on 2024-07-25
Get this branch:
git clone -b release/2.64 https://git.launchpad.net/snappy

Branch merges

Branch information

Name:
release/2.64
Repository:
lp:snappy

Recent commits

98a40cf... by Ernest Lotter

release: 2.64

509fa45... by Philip Meulengracht

wrappers: correctly deal with activated services during service restart (#14242)

* wrappers: correctly deal with activated services during restart - before it would not restart the activation units, but just the primary unit, which is wrong

* wrappers: restart activators before the primary unit

3b211fa... by Zygmunt Krynicki

interfaces: switch steam to unrestricted seccomp profile (#14230)

To match similar changes to apparmor, steam-support will no longer
restrict launched games with a seccomp profile. Steam still relies on an
internal sandbox system, and the interaction of the two sandboxes has
had ill effects historically, with broken features, degraded performance
(real-time scheduling) or extensive logging.

Jira: https://warthogs.atlassian.net/browse/SNAPDENG-24864

Signed-off-by: Zygmunt Krynicki <email address hidden>

05a9735... by Zygmunt Krynicki

interfaces,sandbox: transition steam to permissive apparmor profile (#14229)

* sandbox/apparmor: mask allow all rule until apparmor 4.0.2

Compilation of allow all is broken in apparmor_parser until version
4.0.2 and later. Ubuntu 24.04 shipped with 4.0.0~beta3, and had an SRU
based on 4.0.1. Detect the version and mask the presence of allow all
unless apparmor parser 4.0.2, or newer, is used.

Signed-off-by: John Johansen <email address hidden>
Signed-off-by: Zygmunt Krynicki <email address hidden>

* sandbox/apparmor: remove stray newline

Signed-off-by: Zygmunt Krynicki <email address hidden>

* sandbox/apparmor: add feature probe for io_uring mediation

Signed-off-by: Zygmunt Krynicki <email address hidden>

* interfaces: transition steam_support to use allow all,

Steam needs very broad permissions, and needs to be able to run a
broad set of different games with different permissions requirements.
Steam updates often require an update to the permissions in the
steam_support interface.

To ease support and ensure a good user experience move steam_support
to a profile that allows all permissions. This will prevent the steam
snap from breaking when steam updates, or a new game is added
requiring permissions that are not covered.

For newer versions of apparmor (4.0.2 and later) use the "allow all,"
rule, which will dynamically expand to all supported permissions.

For older versions of apparmor use the set of apparmor rule classes
supported before apparmor 4.0.2.

Signed-off-by: John Johansen <email address hidden>
Signed-off-by: Zygmunt Krynicki <email address hidden>

* interfaces/builtin: apply userns, mqueue and io_uring conditionally

Signed-off-by: Zygmunt Krynicki <email address hidden>

---------

Signed-off-by: John Johansen <email address hidden>
Signed-off-by: Zygmunt Krynicki <email address hidden>
Co-authored-by: John Johansen <email address hidden>

32a51cb... by Maciej Borzecki

tests/main/sudo-env: add Arch to distros using secure_path, verify workaround

With update of sudo to 1.9.15.p5-2 in Arch, sudo's secure_path is enabled by
default through:
https://gitlab.archlinux.org/archlinux/packaging/packages/sudo/-/commit/e5e504db273b7b0a3990da6a8acf9d515d654ec6

Account for this in the test and verify the workaround added to archwiki at
https://wiki.archlinux.org/title/Snap#Sudo

Signed-off-by: Maciej Borzecki <email address hidden>

c1fb52a... by Zygmunt Krynicki

tests,github,spread: fix debian prepare logic (#14226)

* spread: exclude *.pyc when sending project data

Python cache files are binary and may upset building the Debian package
from our fake orig tarball.

Signed-off-by: Zygmunt Krynicki <email address hidden>

* tests: exclude *.pyc when building debian orig tarball

We may get additional pyc files from the host running spread,
for example from the log analysis tools.

Signed-off-by: Zygmunt Krynicki <email address hidden>

* tests: use retry instead of manual loop

Signed-off-by: Zygmunt Krynicki <email address hidden>

* tests: use retry instead of manual loop (2)

Signed-off-by: Zygmunt Krynicki <email address hidden>

* github: don't write python bytecode when running analyzers

Depending on how things are started, the resulting python cache files
become visible as new binary files and may upset building a Debian
package, as binary files cannot be represented as a patch.

Signed-off-by: Zygmunt Krynicki <email address hidden>

* github: fix grammar in test name

Signed-off-by: Zygmunt Krynicki <email address hidden>

---------

Signed-off-by: Zygmunt Krynicki <email address hidden>

c8fbbb4... by Sergio Cazzolato

tests: fix preseed tests (#14224)

I see several preseed tests failing in master branch because no disk
space.

This change adds more space for the failing systems.

f846940... by Sergio Cazzolato

tests: fix muinstaller-real and recovery-system-offline tests (#14219)

* tests: fix muinstaller-real test on uc24

The pc gadget in 24/edge is copying the executables to
/ubuntu-seed/EFI/ubuntu instead of /ubuntu-seed/EFI/boot

* fix also recovery-system-offline test

Stable channel is blocked for hello-world snap, so we need to specify
the edge channel to refresh it.

3ae3867... by Sergio Cazzolato

tests: fixes uc24 nested tests - part 3 (#14114)

* tests: fixes for nested tests in uc24

* Squashed 'tests/lib/external/snapd-testing-tools/' changes from 1c8efb77e1..1e309f41c6

1e309f41c6 change how legacy parameter is determine in remote.pull
c43c35f7e3 run remote refresh and wait-for for xenial (skip bionic)
5262d30da7 make sure the test jobs are executed in runners with the spread label
cb74259b7a add openstack systems
0b41fd40d3 fix tests.pkgs on arch-linux
558e109793 run fedora-40 spread tests in openstack
6f6187416d fix list implementation
b4a5439c9b added more type annotatios to log_helper
58da1e36c3 mypy cleaned
1ff651e680 update wording of remote.pull
18615b1667 just usc scp -O when ssh version is -ge 9
cc68c9868b Added type annotations for log-filter
66f90d10cd Adding -O to scp command to make it compatible in uc24 tests
496cb7b5b3 removing support for centos-8
f2eef30db4 Updated the log helper and log parser
5a375ebf73 Formatting for python utils
d3eed3faa5 fix codespell in CODE_OF_CONDUCT.md
18bcca6b14 new log helper
d60381fcd9 add run number to filtered filename
5dde2d67b8 consider the tests execution in main
6b9a3aabcc change filtered log name
b2756aa579 default file is .filtered.log
500b9dace4 Fix tests workflow
45db26a3d2 fix shellcheck error in log-filter
fe45c27b7d create a var to store filter params
5a9b66d7dc filter spread results
51f9b055af New tool used to filter the spread.log output
b8d20c1d5b fix snaps.name test with correct siffix spelling
f640ac72e3 Add missing test details
f0754df304 Filter the error y debug output in log-parser
fc10196efd Add suggestions to details
94ac5ffe58 Add details on tests
501578c719 add more checks in os.query to check is-core_xx
e8929207ff fix os-query for ubuntu comparing with core
226114641f os.query won't check SPREAD_SYSTEM anymore to compare core systems
b89ec98b23 use local variables in os.query tool
dacfd81de9 fix is_core functions
1db5214d5f Improve the remote docs (#36)
2e4a3153a2 1 more comment
3a0fc57e1e add explanation about why we check for ( Do | Doing )
4cf8e635bf fix os.query test after merge
b89b4f8647 fix artifacts name
d30cee6da0 Merge remote-tracking branch 'upstream/main'
5ef5dcbe8f Tests use artifacts in spread tests (#51)
555c43d2ab Support auto-refresh with Do instead of Doing
96c2b0c19c remove tests support for ubuntu 23.04 (EoL)
74082c0c34 Tests improve remote wait (#49)
5121bfb659 remove support for opensuse leap 15.4 (#48)
30df700d08 Add new systems support (#47)
1f08938925 Support check amazon linux version (#46)
43533bdd97 Change the exit value checking for test formats (#45)
3c88244c04 Update check-test-format to support a dir and a list of files (#44)
510d95f429 add extra check for error in auto-refresh detection function
3289d4031b Try open the log with latin-1 encoding when utf-8 is not working
9db785499f improved how the tools are waiting for system reboot
2a5c4414a3 fix shellcheck errors
5e7b63883d Fixes for osquery and tests pkgs (#43)
4c9145e2ac support reboot waiting for auto-refresh
45768f5188 show changes in unknown status after refresh
8013c30c2a Remove support for ubuntu 22.10
b32b80bf54 Fix remote.rait-for test in bionic
5675c625e9 Enable fedora 38
55f4471957 Support for new oss
f2e88b357c New tool used to query spread json reports
cacd35ede0 utils/spread-shellcheck: explain disabled warnings (#42)
c82afb2dee Support --no-install-recommends parameter when installing dependencies with tests.pkgs
b84eea92e2 spread-shellcheck: fix quotes in environment variables (#41)
ab1e51c29f New comparison in os-query for core systems (#40)
e5ae22a5d4 systemd units can be overwritten
63540b845a Fix error messages in remote pull and push
75e8a426a5 make sure the unit is removed in tests.systemd test
9089ff5c02 Update tests to use the new tests.systemd stop-unit
44ecd5e56a Move tests.systemd stop-units to stop-unit
01a2a83b4b Update tests.systemd to have stop units as systemd.sh
162e93bd35 update tests.systemd CLI options to be the same than retry command
14aa43a405 new feature to re-run failed spread tests (#39)
604cb782db Fix shellcheck in systemd tool
bfc71082c8 Update the tests.systemd to allow parameters waiting for service status
8a2d0a99df Adding quiet tool and removing set +-x from tests.pkgs
d90935d2a4 A comment explaining about the default values for wait-for
3232c5dba7 Add support for ubuntu 23.04
a7164fba07 remove fedora 35 support, add fedora 37 support
89b9eb5301 Update systems supported
92bb6a0664 Include snap-sufix in the snaps.name tool

git-subtree-dir: tests/lib/external/snapd-testing-tools
git-subtree-split: 1e309f41c6f18a359ebc01652dac31643ddb2708

* test fixes and missing models aded

* fix shellcheck

* adding test-snapd-tools-core24 and updating pkgdb.sh

* fix core20-kernel-reseal test

* fix shellcheck

* updating gadget.yaml files

* fix core20-kernel-reseal test

* improve fix for core20-kernel-reseal test

* fix core20-kernel-reseal test

* remove xxd lines and minor fixes

* removing xxd

* fix again !=

051c301... by Zeyad Gouda

tests: create empty seed dir for images without seed (#14215)

* tests: create empty seed dir for images without seed

This because in Ubuntu 24.04 there is no longer any seeded snaps in
base or minimal cloud images.
- https://bugs.launchpad.net/ubuntu/+source/ubuntu-meta/+bug/2051346
- https://bugs.launchpad.net/ubuntu/+source/ubuntu-meta/+bug/2051572

Signed-off-by: Zeyad Gouda <email address hidden>

* tests/lib/preseed.sh: add quotes to variable

Signed-off-by: Zeyad Gouda <email address hidden>

* tests/nested/manual/preseed: skip lxd checks for noble

This because in Ubuntu 24.04 there is no longer any seeded snaps in
base or minimal cloud images.
- https://bugs.launchpad.net/ubuntu/+source/ubuntu-meta/+bug/2051346
- https://bugs.launchpad.net/ubuntu/+source/ubuntu-meta/+bug/2051572

Signed-off-by: Zeyad Gouda <email address hidden>

---------

Signed-off-by: Zeyad Gouda <email address hidden>