snapd.git
3 years agofix-build-5bd97b39a03
Michael Hudson-Doyle [Thu, 1 Dec 2022 16:35:36 +0000 (16:35 +0000)]
fix-build-5bd97b39a03

commit 5bd97b39a0321f279f521ee6c8c043778cb3d7d8
Author: Sergio Cazzolato <sergio.cazzolato@canonical.com>
Date:   Tue Aug 23 12:01:00 2022 -0300

    tests: fix sbuild test on debian sid (#12043)

    * Fix sbuild test on debian sid

    The test was failing because of 2 problems:
    1. not enough space in the disk to run the test
    2. it was failing to find package "github.com/canonical/go-tpm2" in the
    file
    src/github.com/snapcore/snapd/tests/nested/manual/core20-da-lockout/getdalockout.go

    The solution for the second point is to add the dummy file so debian
    does not pick it up when building

    * tests: rename getdalockout_dummy.go->getdalockout_nosecboot.go

Co-authored-by: Michael Vogt <mvo@ubuntu.com>
Gbp-Pq: Name 0015-fix-build-5bd97b39a03.patch

3 years agoFix test with godbus 5.0.5
Shengjing Zhu [Sun, 17 Jul 2022 12:07:48 +0000 (20:07 +0800)]
Fix test with godbus 5.0.5

Due to https://github.com/godbus/dbus/pull/265, godbus only sends
auth name.

Forwarded: no

Gbp-Pq: Name 0011-Fix-test-with-godbus-5.0.5.patch

3 years agoman-page-sections
Michael Hudson-Doyle [Thu, 1 Dec 2022 16:35:36 +0000 (16:35 +0000)]
man-page-sections

Gbp-Pq: Name 0010-man-page-sections.patch

3 years ago[PATCH 7/9] i18n: use dummy localizations to avoid dependencies
Zygmunt Krynicki [Thu, 17 Jan 2019 14:42:35 +0000 (16:42 +0200)]
[PATCH 7/9] i18n: use dummy localizations to avoid dependencies

Upstream snapd uses the github.com/ojii/gettext.go package for access to
translation catalogs. This package is currently not available in Debian
and prevents building the package. As such, replace the real
implementation with a simple dummy one that always uses the English
input strings.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>
Gbp-Pq: Name 0007-i18n-use-dummy-localizations-to-avoid-dependencies.patch

3 years ago[PATCH 5/9] advisor,errtracker: use upstream bolt package
Zygmunt Krynicki [Thu, 17 Jan 2019 13:46:00 +0000 (15:46 +0200)]
[PATCH 5/9] advisor,errtracker: use upstream bolt package

Upstream snapd uses a fork of the bolt package that carries additional
patches for bugs that were discovered by snapd developers. Bolt itself
appears to be an abandoned project and is not accepting any new patches.

In various distributions the upstream bolt package may or may not have
been patched but the forked version was definitely not packaged. As
such, to build snapd in Debian the upstream bolt package name must be
used.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0005-advisor-errtracker-use-upstream-bolt-package.patch

3 years ago[PATCH 4/9] cmd/snap: skip tests depending on text wrapping
Zygmunt Krynicki [Thu, 17 Jan 2019 15:38:41 +0000 (17:38 +0200)]
[PATCH 4/9] cmd/snap: skip tests depending on text wrapping

Upstream snapd contains tests that check the output of various commands
along with the --help command-line argument. The output is wrapped to
match terminal width and for readability. The algorithm for wrapping
has apparently changed across versions of github.com/jessevdk/go-flags.

Since this test is not critical for anything it can be disabled to let
the package build.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0004-cmd-snap-skip-tests-depending-on-text-wrapping.patch

3 years ago[PATCH 3/9] cmd/snap-seccomp: skip tests that use -m32
Zygmunt Krynicki [Thu, 17 Jan 2019 15:21:22 +0000 (17:21 +0200)]
[PATCH 3/9] cmd/snap-seccomp: skip tests that use -m32

Apparently Debian's amd64 compiler somehow cannot compile -m32 mode
binaries. The compilation error is:

multipass@debian-10:~/packaging/snapd/cmd/snap-seccomp$ go test
cannot build multi-lib syscall runner: exit status 1
In file included from /usr/include/errno.h:25,
 from /tmp/check-3806730340354206876/1/seccomp_syscall_runner.c:3:
/usr/include/features.h:424:12: fatal error: sys/cdefs.h: No such file or directory
 #  include <sys/cdefs.h>
    ^~~~~~~~~~~~~
compilation terminated.
OK: 2 passed, 11 skipped

I was unable to resolve this issue, let's disable this test until we can get to
the bottom of it.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0003-cmd-snap-seccomp-skip-tests-that-use-m32.patch

3 years ago[PATCH 2/9] cmd/snap-seccomp: skip tests that fail on 4.19
Zygmunt Krynicki [Thu, 17 Jan 2019 15:11:12 +0000 (17:11 +0200)]
[PATCH 2/9] cmd/snap-seccomp: skip tests that fail on 4.19

It seems that the Debian 4.19.0-1 kernel contains a regression in
seccomp execution. While this issue is investigated in parallel along
with the security team, the release of updated snapd package should not
be held by this issue.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0002-cmd-snap-seccomp-skip-tests-that-fail-on-4.19.patch

3 years agosnapd (2.57.6-1) unstable; urgency=high
Michael Vogt [Thu, 1 Dec 2022 16:35:36 +0000 (16:35 +0000)]
snapd (2.57.6-1) unstable; urgency=high

  * SECURITY UPDATE: Local privilege escalation
    - snap-confine: Fix race condition in snap-confine when preparing a
      private tmp mount namespace for a snap
    - CVE-2022-3328
  * sync packaging changes from upstream
  * d/p/0015-fix-build-5bd97b39a03.patch:
    - cherry-pick 5bd97b39a03 to build FTBFS
  * d/p/0016-skip-TestPopulateFromSeedWithConnectHook.patch:
    - skip TestPopulateFromSeedWithConnectHook as it does not
      converge

[dgit import unpatched snapd 2.57.6-1]

3 years agoImport snapd_2.57.6.orig.tar.gz
Michael Vogt [Thu, 1 Dec 2022 16:35:36 +0000 (16:35 +0000)]
Import snapd_2.57.6.orig.tar.gz

[dgit import orig snapd_2.57.6.orig.tar.gz]

3 years agoImport snapd_2.57.6-1.debian.tar.xz
Michael Vogt [Thu, 1 Dec 2022 16:35:36 +0000 (16:35 +0000)]
Import snapd_2.57.6-1.debian.tar.xz

[dgit import tarball snapd 2.57.6-1 snapd_2.57.6-1.debian.tar.xz]