snapd.git
21 months agoMerge snapd (2.61.2-2) import into refs/heads/workingbranch
Zygmunt Krynicki [Fri, 8 Mar 2024 14:28:00 +0000 (15:28 +0100)]
Merge snapd (2.61.2-2) import into refs/heads/workingbranch

21 months agoman-page-sections
Michael Hudson-Doyle [Fri, 8 Mar 2024 14:28:00 +0000 (15:28 +0100)]
man-page-sections

Gbp-Pq: Name 0010-man-page-sections.patch

21 months ago[PATCH 7/9] i18n: use dummy localizations to avoid dependencies
Zygmunt Krynicki [Thu, 17 Jan 2019 14:42:35 +0000 (16:42 +0200)]
[PATCH 7/9] i18n: use dummy localizations to avoid dependencies

Upstream snapd uses the github.com/ojii/gettext.go package for access to
translation catalogs. This package is currently not available in Debian
and prevents building the package. As such, replace the real
implementation with a simple dummy one that always uses the English
input strings.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>
Gbp-Pq: Name 0007-i18n-use-dummy-localizations-to-avoid-dependencies.patch

21 months ago[PATCH 5/9] advisor,errtracker: use upstream bolt package
Zygmunt Krynicki [Thu, 17 Jan 2019 13:46:00 +0000 (15:46 +0200)]
[PATCH 5/9] advisor,errtracker: use upstream bolt package

Upstream snapd uses a fork of the bolt package that carries additional
patches for bugs that were discovered by snapd developers. Bolt itself
appears to be an abandoned project and is not accepting any new patches.

In various distributions the upstream bolt package may or may not have
been patched but the forked version was definitely not packaged. As
such, to build snapd in Debian the upstream bolt package name must be
used.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0005-advisor-errtracker-use-upstream-bolt-package.patch

21 months ago[PATCH 4/9] cmd/snap: skip tests depending on text wrapping
Zygmunt Krynicki [Thu, 17 Jan 2019 15:38:41 +0000 (17:38 +0200)]
[PATCH 4/9] cmd/snap: skip tests depending on text wrapping

Upstream snapd contains tests that check the output of various commands
along with the --help command-line argument. The output is wrapped to
match terminal width and for readability. The algorithm for wrapping
has apparently changed across versions of github.com/jessevdk/go-flags.

Since this test is not critical for anything it can be disabled to let
the package build.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0004-cmd-snap-skip-tests-depending-on-text-wrapping.patch

21 months ago[PATCH 3/9] cmd/snap-seccomp: skip tests that use -m32
Zygmunt Krynicki [Thu, 17 Jan 2019 15:21:22 +0000 (17:21 +0200)]
[PATCH 3/9] cmd/snap-seccomp: skip tests that use -m32

Apparently Debian's amd64 compiler somehow cannot compile -m32 mode
binaries. The compilation error is:

multipass@debian-10:~/packaging/snapd/cmd/snap-seccomp$ go test
cannot build multi-lib syscall runner: exit status 1
In file included from /usr/include/errno.h:25,
 from /tmp/check-3806730340354206876/1/seccomp_syscall_runner.c:3:
/usr/include/features.h:424:12: fatal error: sys/cdefs.h: No such file or directory
 #  include <sys/cdefs.h>
    ^~~~~~~~~~~~~
compilation terminated.
OK: 2 passed, 11 skipped

I was unable to resolve this issue, let's disable this test until we can get to
the bottom of it.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0003-cmd-snap-seccomp-skip-tests-that-use-m32.patch

21 months agosnapd (2.61.2-2) unstable; urgency=medium
Zygmunt Krynicki [Fri, 8 Mar 2024 14:28:00 +0000 (15:28 +0100)]
snapd (2.61.2-2) unstable; urgency=medium

  * Build without bolt support to avoid bolt not supporting riscv64

[dgit import unpatched snapd 2.61.2-2]

21 months agoImport snapd_2.61.2-2.debian.tar.xz
Zygmunt Krynicki [Fri, 8 Mar 2024 14:28:00 +0000 (15:28 +0100)]
Import snapd_2.61.2-2.debian.tar.xz

[dgit import tarball snapd 2.61.2-2 snapd_2.61.2-2.debian.tar.xz]

21 months agoImport snapd_2.61.2.orig.tar.gz
Zygmunt Krynicki [Thu, 29 Feb 2024 13:27:52 +0000 (14:27 +0100)]
Import snapd_2.61.2.orig.tar.gz

[dgit import orig snapd_2.61.2.orig.tar.gz]

22 months agoMerge snapd (2.61.1-1) import into refs/heads/workingbranch
Zygmunt Krynicki [Mon, 29 Jan 2024 09:56:42 +0000 (10:56 +0100)]
Merge snapd (2.61.1-1) import into refs/heads/workingbranch

22 months agoman-page-sections
Michael Hudson-Doyle [Mon, 29 Jan 2024 09:56:42 +0000 (10:56 +0100)]
man-page-sections

Gbp-Pq: Name 0010-man-page-sections.patch

22 months ago[PATCH 7/9] i18n: use dummy localizations to avoid dependencies
Zygmunt Krynicki [Thu, 17 Jan 2019 14:42:35 +0000 (16:42 +0200)]
[PATCH 7/9] i18n: use dummy localizations to avoid dependencies

Upstream snapd uses the github.com/ojii/gettext.go package for access to
translation catalogs. This package is currently not available in Debian
and prevents building the package. As such, replace the real
implementation with a simple dummy one that always uses the English
input strings.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>
Gbp-Pq: Name 0007-i18n-use-dummy-localizations-to-avoid-dependencies.patch

22 months ago[PATCH 5/9] advisor,errtracker: use upstream bolt package
Zygmunt Krynicki [Thu, 17 Jan 2019 13:46:00 +0000 (15:46 +0200)]
[PATCH 5/9] advisor,errtracker: use upstream bolt package

Upstream snapd uses a fork of the bolt package that carries additional
patches for bugs that were discovered by snapd developers. Bolt itself
appears to be an abandoned project and is not accepting any new patches.

In various distributions the upstream bolt package may or may not have
been patched but the forked version was definitely not packaged. As
such, to build snapd in Debian the upstream bolt package name must be
used.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0005-advisor-errtracker-use-upstream-bolt-package.patch

22 months ago[PATCH 4/9] cmd/snap: skip tests depending on text wrapping
Zygmunt Krynicki [Thu, 17 Jan 2019 15:38:41 +0000 (17:38 +0200)]
[PATCH 4/9] cmd/snap: skip tests depending on text wrapping

Upstream snapd contains tests that check the output of various commands
along with the --help command-line argument. The output is wrapped to
match terminal width and for readability. The algorithm for wrapping
has apparently changed across versions of github.com/jessevdk/go-flags.

Since this test is not critical for anything it can be disabled to let
the package build.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0004-cmd-snap-skip-tests-depending-on-text-wrapping.patch

22 months ago[PATCH 3/9] cmd/snap-seccomp: skip tests that use -m32
Zygmunt Krynicki [Thu, 17 Jan 2019 15:21:22 +0000 (17:21 +0200)]
[PATCH 3/9] cmd/snap-seccomp: skip tests that use -m32

Apparently Debian's amd64 compiler somehow cannot compile -m32 mode
binaries. The compilation error is:

multipass@debian-10:~/packaging/snapd/cmd/snap-seccomp$ go test
cannot build multi-lib syscall runner: exit status 1
In file included from /usr/include/errno.h:25,
 from /tmp/check-3806730340354206876/1/seccomp_syscall_runner.c:3:
/usr/include/features.h:424:12: fatal error: sys/cdefs.h: No such file or directory
 #  include <sys/cdefs.h>
    ^~~~~~~~~~~~~
compilation terminated.
OK: 2 passed, 11 skipped

I was unable to resolve this issue, let's disable this test until we can get to
the bottom of it.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0003-cmd-snap-seccomp-skip-tests-that-use-m32.patch

22 months agosnapd (2.61.1-1) unstable; urgency=medium
Zygmunt Krynicki [Mon, 29 Jan 2024 09:56:42 +0000 (10:56 +0100)]
snapd (2.61.1-1) unstable; urgency=medium

  [ Ernest Lotter ]
  * New upstream release, LP: #2024007
    - Stop requiring default provider snaps on image building and first
      boot if alternative providers are included and available
    - Fix auth.json access for login as non-root group ID
    - Fix incorrect remodelling conflict when changing track to older
      snapd version
    - Improved check-rerefresh message
    - Fix UC16/18 kernel/gadget update failure due volume mismatch with
      installed disk
    - Stop auto-import of assertions during install modes
    - Desktop interface exposes GetIdletime
    - Polkit interface support for new polkit versions
    - Fix not applying snapd snap changes in tracked channel when remodelling

  [ Zygmunt Krynicki ]
  * Set SNAPD_SKIP_SLOW_TESTS=true avoid hitting firstboot test that are
    time-sensitive and mostly check Ubuntu Core functionality that does not
    affect classic distributions. Similar "workaround" is done on openSUSE.

[dgit import unpatched snapd 2.61.1-1]

22 months agoImport snapd_2.61.1.orig.tar.gz
Zygmunt Krynicki [Mon, 29 Jan 2024 09:56:42 +0000 (10:56 +0100)]
Import snapd_2.61.1.orig.tar.gz

[dgit import orig snapd_2.61.1.orig.tar.gz]

22 months agoImport snapd_2.61.1-1.debian.tar.xz
Zygmunt Krynicki [Mon, 29 Jan 2024 09:56:42 +0000 (10:56 +0100)]
Import snapd_2.61.1-1.debian.tar.xz

[dgit import tarball snapd 2.61.1-1 snapd_2.61.1-1.debian.tar.xz]

2 years agoMerge snapd (2.60.2-1) import into refs/heads/workingbranch
Michael Vogt [Mon, 21 Aug 2023 07:59:54 +0000 (08:59 +0100)]
Merge snapd (2.60.2-1) import into refs/heads/workingbranch

2 years agoman-page-sections
Michael Hudson-Doyle [Mon, 21 Aug 2023 07:59:54 +0000 (08:59 +0100)]
man-page-sections

Gbp-Pq: Name 0010-man-page-sections.patch

2 years ago[PATCH 7/9] i18n: use dummy localizations to avoid dependencies
Zygmunt Krynicki [Thu, 17 Jan 2019 14:42:35 +0000 (16:42 +0200)]
[PATCH 7/9] i18n: use dummy localizations to avoid dependencies

Upstream snapd uses the github.com/ojii/gettext.go package for access to
translation catalogs. This package is currently not available in Debian
and prevents building the package. As such, replace the real
implementation with a simple dummy one that always uses the English
input strings.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>
Gbp-Pq: Name 0007-i18n-use-dummy-localizations-to-avoid-dependencies.patch

2 years ago[PATCH 5/9] advisor,errtracker: use upstream bolt package
Zygmunt Krynicki [Thu, 17 Jan 2019 13:46:00 +0000 (15:46 +0200)]
[PATCH 5/9] advisor,errtracker: use upstream bolt package

Upstream snapd uses a fork of the bolt package that carries additional
patches for bugs that were discovered by snapd developers. Bolt itself
appears to be an abandoned project and is not accepting any new patches.

In various distributions the upstream bolt package may or may not have
been patched but the forked version was definitely not packaged. As
such, to build snapd in Debian the upstream bolt package name must be
used.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0005-advisor-errtracker-use-upstream-bolt-package.patch

2 years ago[PATCH 4/9] cmd/snap: skip tests depending on text wrapping
Zygmunt Krynicki [Thu, 17 Jan 2019 15:38:41 +0000 (17:38 +0200)]
[PATCH 4/9] cmd/snap: skip tests depending on text wrapping

Upstream snapd contains tests that check the output of various commands
along with the --help command-line argument. The output is wrapped to
match terminal width and for readability. The algorithm for wrapping
has apparently changed across versions of github.com/jessevdk/go-flags.

Since this test is not critical for anything it can be disabled to let
the package build.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0004-cmd-snap-skip-tests-depending-on-text-wrapping.patch

2 years ago[PATCH 3/9] cmd/snap-seccomp: skip tests that use -m32
Zygmunt Krynicki [Thu, 17 Jan 2019 15:21:22 +0000 (17:21 +0200)]
[PATCH 3/9] cmd/snap-seccomp: skip tests that use -m32

Apparently Debian's amd64 compiler somehow cannot compile -m32 mode
binaries. The compilation error is:

multipass@debian-10:~/packaging/snapd/cmd/snap-seccomp$ go test
cannot build multi-lib syscall runner: exit status 1
In file included from /usr/include/errno.h:25,
 from /tmp/check-3806730340354206876/1/seccomp_syscall_runner.c:3:
/usr/include/features.h:424:12: fatal error: sys/cdefs.h: No such file or directory
 #  include <sys/cdefs.h>
    ^~~~~~~~~~~~~
compilation terminated.
OK: 2 passed, 11 skipped

I was unable to resolve this issue, let's disable this test until we can get to
the bottom of it.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0003-cmd-snap-seccomp-skip-tests-that-use-m32.patch

2 years agosnapd (2.60.2-1) unstable; urgency=medium
Michael Vogt [Mon, 21 Aug 2023 07:59:54 +0000 (08:59 +0100)]
snapd (2.60.2-1) unstable; urgency=medium

  * New upstream release, LP: #2024007
    - i/builtin: allow directories in private /dev/shm
    - i/builtin: add read access to /proc/task/schedstat in system-
      observe
    - snap-bootstrap: print version information at startup
    - go.mod: update gopkg.in/yaml.v3 to v3.0.1 to fix CVE-2022-28948
    - snap, store: filter out invalid snap edited links from store info
      and persisted state
    - o/configcore: write netplan defaults to 00-snapd-config on seeding
    - snapcraft.yaml: pull in apparmor_parser optimization patches from
      https://gitlab.com/apparmor/apparmor/-/merge_requests/711
    - snap-confine: fix missing \0 after readlink
    - cmd/snap: hide append-integrity-data
    - interfaces/opengl: add support for ARM Mali
  * debian/{control,rules}:
    - sync packaging changes from upstream

[dgit import unpatched snapd 2.60.2-1]

2 years agoImport snapd_2.60.2.orig.tar.gz
Michael Vogt [Mon, 21 Aug 2023 07:59:54 +0000 (08:59 +0100)]
Import snapd_2.60.2.orig.tar.gz

[dgit import orig snapd_2.60.2.orig.tar.gz]

2 years agoImport snapd_2.60.2-1.debian.tar.xz
Michael Vogt [Mon, 21 Aug 2023 07:59:54 +0000 (08:59 +0100)]
Import snapd_2.60.2-1.debian.tar.xz

[dgit import tarball snapd 2.60.2-1 snapd_2.60.2-1.debian.tar.xz]

3 years agoMerge snapd (2.57.6-1) import into refs/heads/workingbranch
Michael Vogt [Thu, 1 Dec 2022 16:35:36 +0000 (16:35 +0000)]
Merge snapd (2.57.6-1) import into refs/heads/workingbranch

3 years agoskip-TestPopulateFromSeedWithConnectHook
Michael Hudson-Doyle [Thu, 1 Dec 2022 16:35:36 +0000 (16:35 +0000)]
skip-TestPopulateFromSeedWithConnectHook

Gbp-Pq: Name 0016-skip-TestPopulateFromSeedWithConnectHook.patch

3 years agofix-build-5bd97b39a03
Michael Hudson-Doyle [Thu, 1 Dec 2022 16:35:36 +0000 (16:35 +0000)]
fix-build-5bd97b39a03

commit 5bd97b39a0321f279f521ee6c8c043778cb3d7d8
Author: Sergio Cazzolato <sergio.cazzolato@canonical.com>
Date:   Tue Aug 23 12:01:00 2022 -0300

    tests: fix sbuild test on debian sid (#12043)

    * Fix sbuild test on debian sid

    The test was failing because of 2 problems:
    1. not enough space in the disk to run the test
    2. it was failing to find package "github.com/canonical/go-tpm2" in the
    file
    src/github.com/snapcore/snapd/tests/nested/manual/core20-da-lockout/getdalockout.go

    The solution for the second point is to add the dummy file so debian
    does not pick it up when building

    * tests: rename getdalockout_dummy.go->getdalockout_nosecboot.go

Co-authored-by: Michael Vogt <mvo@ubuntu.com>
Gbp-Pq: Name 0015-fix-build-5bd97b39a03.patch

3 years agoFix test with godbus 5.0.5
Shengjing Zhu [Sun, 17 Jul 2022 12:07:48 +0000 (20:07 +0800)]
Fix test with godbus 5.0.5

Due to https://github.com/godbus/dbus/pull/265, godbus only sends
auth name.

Forwarded: no

Gbp-Pq: Name 0011-Fix-test-with-godbus-5.0.5.patch

3 years agoman-page-sections
Michael Hudson-Doyle [Thu, 1 Dec 2022 16:35:36 +0000 (16:35 +0000)]
man-page-sections

Gbp-Pq: Name 0010-man-page-sections.patch

3 years ago[PATCH 7/9] i18n: use dummy localizations to avoid dependencies
Zygmunt Krynicki [Thu, 17 Jan 2019 14:42:35 +0000 (16:42 +0200)]
[PATCH 7/9] i18n: use dummy localizations to avoid dependencies

Upstream snapd uses the github.com/ojii/gettext.go package for access to
translation catalogs. This package is currently not available in Debian
and prevents building the package. As such, replace the real
implementation with a simple dummy one that always uses the English
input strings.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>
Gbp-Pq: Name 0007-i18n-use-dummy-localizations-to-avoid-dependencies.patch

3 years ago[PATCH 5/9] advisor,errtracker: use upstream bolt package
Zygmunt Krynicki [Thu, 17 Jan 2019 13:46:00 +0000 (15:46 +0200)]
[PATCH 5/9] advisor,errtracker: use upstream bolt package

Upstream snapd uses a fork of the bolt package that carries additional
patches for bugs that were discovered by snapd developers. Bolt itself
appears to be an abandoned project and is not accepting any new patches.

In various distributions the upstream bolt package may or may not have
been patched but the forked version was definitely not packaged. As
such, to build snapd in Debian the upstream bolt package name must be
used.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0005-advisor-errtracker-use-upstream-bolt-package.patch

3 years ago[PATCH 4/9] cmd/snap: skip tests depending on text wrapping
Zygmunt Krynicki [Thu, 17 Jan 2019 15:38:41 +0000 (17:38 +0200)]
[PATCH 4/9] cmd/snap: skip tests depending on text wrapping

Upstream snapd contains tests that check the output of various commands
along with the --help command-line argument. The output is wrapped to
match terminal width and for readability. The algorithm for wrapping
has apparently changed across versions of github.com/jessevdk/go-flags.

Since this test is not critical for anything it can be disabled to let
the package build.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0004-cmd-snap-skip-tests-depending-on-text-wrapping.patch

3 years ago[PATCH 3/9] cmd/snap-seccomp: skip tests that use -m32
Zygmunt Krynicki [Thu, 17 Jan 2019 15:21:22 +0000 (17:21 +0200)]
[PATCH 3/9] cmd/snap-seccomp: skip tests that use -m32

Apparently Debian's amd64 compiler somehow cannot compile -m32 mode
binaries. The compilation error is:

multipass@debian-10:~/packaging/snapd/cmd/snap-seccomp$ go test
cannot build multi-lib syscall runner: exit status 1
In file included from /usr/include/errno.h:25,
 from /tmp/check-3806730340354206876/1/seccomp_syscall_runner.c:3:
/usr/include/features.h:424:12: fatal error: sys/cdefs.h: No such file or directory
 #  include <sys/cdefs.h>
    ^~~~~~~~~~~~~
compilation terminated.
OK: 2 passed, 11 skipped

I was unable to resolve this issue, let's disable this test until we can get to
the bottom of it.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0003-cmd-snap-seccomp-skip-tests-that-use-m32.patch

3 years ago[PATCH 2/9] cmd/snap-seccomp: skip tests that fail on 4.19
Zygmunt Krynicki [Thu, 17 Jan 2019 15:11:12 +0000 (17:11 +0200)]
[PATCH 2/9] cmd/snap-seccomp: skip tests that fail on 4.19

It seems that the Debian 4.19.0-1 kernel contains a regression in
seccomp execution. While this issue is investigated in parallel along
with the security team, the release of updated snapd package should not
be held by this issue.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0002-cmd-snap-seccomp-skip-tests-that-fail-on-4.19.patch

3 years agosnapd (2.57.6-1) unstable; urgency=high
Michael Vogt [Thu, 1 Dec 2022 16:35:36 +0000 (16:35 +0000)]
snapd (2.57.6-1) unstable; urgency=high

  * SECURITY UPDATE: Local privilege escalation
    - snap-confine: Fix race condition in snap-confine when preparing a
      private tmp mount namespace for a snap
    - CVE-2022-3328
  * sync packaging changes from upstream
  * d/p/0015-fix-build-5bd97b39a03.patch:
    - cherry-pick 5bd97b39a03 to build FTBFS
  * d/p/0016-skip-TestPopulateFromSeedWithConnectHook.patch:
    - skip TestPopulateFromSeedWithConnectHook as it does not
      converge

[dgit import unpatched snapd 2.57.6-1]

3 years agoImport snapd_2.57.6.orig.tar.gz
Michael Vogt [Thu, 1 Dec 2022 16:35:36 +0000 (16:35 +0000)]
Import snapd_2.57.6.orig.tar.gz

[dgit import orig snapd_2.57.6.orig.tar.gz]

3 years agoImport snapd_2.57.6-1.debian.tar.xz
Michael Vogt [Thu, 1 Dec 2022 16:35:36 +0000 (16:35 +0000)]
Import snapd_2.57.6-1.debian.tar.xz

[dgit import tarball snapd 2.57.6-1 snapd_2.57.6-1.debian.tar.xz]

3 years agoMerge snapd (2.54.3-1.1) import into refs/heads/workingbranch
Shengjing Zhu [Sun, 17 Jul 2022 12:18:10 +0000 (13:18 +0100)]
Merge snapd (2.54.3-1.1) import into refs/heads/workingbranch

3 years agoFix test with godbus 5.0.5
Shengjing Zhu [Sun, 17 Jul 2022 12:07:48 +0000 (20:07 +0800)]
Fix test with godbus 5.0.5

Due to https://github.com/godbus/dbus/pull/265, godbus only sends
auth name.

Forwarded: no

Gbp-Pq: Name 0011-Fix-test-with-godbus-5.0.5.patch

3 years agoman-page-sections
Michael Hudson-Doyle [Sun, 17 Jul 2022 12:18:10 +0000 (13:18 +0100)]
man-page-sections

Gbp-Pq: Name 0010-man-page-sections.patch

3 years ago[PATCH 7/9] i18n: use dummy localizations to avoid dependencies
Zygmunt Krynicki [Thu, 17 Jan 2019 14:42:35 +0000 (16:42 +0200)]
[PATCH 7/9] i18n: use dummy localizations to avoid dependencies

Upstream snapd uses the github.com/ojii/gettext.go package for access to
translation catalogs. This package is currently not available in Debian
and prevents building the package. As such, replace the real
implementation with a simple dummy one that always uses the English
input strings.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>
Gbp-Pq: Name 0007-i18n-use-dummy-localizations-to-avoid-dependencies.patch

3 years ago[PATCH 5/9] advisor,errtracker: use upstream bolt package
Zygmunt Krynicki [Thu, 17 Jan 2019 13:46:00 +0000 (15:46 +0200)]
[PATCH 5/9] advisor,errtracker: use upstream bolt package

Upstream snapd uses a fork of the bolt package that carries additional
patches for bugs that were discovered by snapd developers. Bolt itself
appears to be an abandoned project and is not accepting any new patches.

In various distributions the upstream bolt package may or may not have
been patched but the forked version was definitely not packaged. As
such, to build snapd in Debian the upstream bolt package name must be
used.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0005-advisor-errtracker-use-upstream-bolt-package.patch

3 years ago[PATCH 4/9] cmd/snap: skip tests depending on text wrapping
Zygmunt Krynicki [Thu, 17 Jan 2019 15:38:41 +0000 (17:38 +0200)]
[PATCH 4/9] cmd/snap: skip tests depending on text wrapping

Upstream snapd contains tests that check the output of various commands
along with the --help command-line argument. The output is wrapped to
match terminal width and for readability. The algorithm for wrapping
has apparently changed across versions of github.com/jessevdk/go-flags.

Since this test is not critical for anything it can be disabled to let
the package build.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0004-cmd-snap-skip-tests-depending-on-text-wrapping.patch

3 years ago[PATCH 3/9] cmd/snap-seccomp: skip tests that use -m32
Zygmunt Krynicki [Thu, 17 Jan 2019 15:21:22 +0000 (17:21 +0200)]
[PATCH 3/9] cmd/snap-seccomp: skip tests that use -m32

Apparently Debian's amd64 compiler somehow cannot compile -m32 mode
binaries. The compilation error is:

multipass@debian-10:~/packaging/snapd/cmd/snap-seccomp$ go test
cannot build multi-lib syscall runner: exit status 1
In file included from /usr/include/errno.h:25,
 from /tmp/check-3806730340354206876/1/seccomp_syscall_runner.c:3:
/usr/include/features.h:424:12: fatal error: sys/cdefs.h: No such file or directory
 #  include <sys/cdefs.h>
    ^~~~~~~~~~~~~
compilation terminated.
OK: 2 passed, 11 skipped

I was unable to resolve this issue, let's disable this test until we can get to
the bottom of it.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0003-cmd-snap-seccomp-skip-tests-that-use-m32.patch

3 years ago[PATCH 2/9] cmd/snap-seccomp: skip tests that fail on 4.19
Zygmunt Krynicki [Thu, 17 Jan 2019 15:11:12 +0000 (17:11 +0200)]
[PATCH 2/9] cmd/snap-seccomp: skip tests that fail on 4.19

It seems that the Debian 4.19.0-1 kernel contains a regression in
seccomp execution. While this issue is investigated in parallel along
with the security team, the release of updated snapd package should not
be held by this issue.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0002-cmd-snap-seccomp-skip-tests-that-fail-on-4.19.patch

3 years agosnapd (2.54.3-1.1) unstable; urgency=medium
Shengjing Zhu [Sun, 17 Jul 2022 12:18:10 +0000 (13:18 +0100)]
snapd (2.54.3-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Remove unused Build-Depends and replace transitional packages
    (Closes: #1014184)
  * Add patch for failed test with godbus 5.0.5 (Closes: #1008450)

[dgit import unpatched snapd 2.54.3-1.1]

3 years agoImport snapd_2.54.3-1.1.debian.tar.xz
Shengjing Zhu [Sun, 17 Jul 2022 12:18:10 +0000 (13:18 +0100)]
Import snapd_2.54.3-1.1.debian.tar.xz

[dgit import tarball snapd 2.54.3-1.1 snapd_2.54.3-1.1.debian.tar.xz]

3 years agoMerge snapd (2.54.3-1) import into refs/heads/workingbranch
Michael Vogt [Wed, 23 Feb 2022 09:04:21 +0000 (09:04 +0000)]
Merge snapd (2.54.3-1) import into refs/heads/workingbranch

3 years agoImport snapd_2.54.3.orig.tar.gz
Michael Vogt [Wed, 23 Feb 2022 09:04:21 +0000 (09:04 +0000)]
Import snapd_2.54.3.orig.tar.gz

[dgit import orig snapd_2.54.3.orig.tar.gz]

3 years agoman-page-sections
Michael Hudson-Doyle [Wed, 23 Feb 2022 09:04:21 +0000 (09:04 +0000)]
man-page-sections

Gbp-Pq: Name 0010-man-page-sections.patch

3 years ago[PATCH 7/9] i18n: use dummy localizations to avoid dependencies
Zygmunt Krynicki [Thu, 17 Jan 2019 14:42:35 +0000 (16:42 +0200)]
[PATCH 7/9] i18n: use dummy localizations to avoid dependencies

Upstream snapd uses the github.com/ojii/gettext.go package for access to
translation catalogs. This package is currently not available in Debian
and prevents building the package. As such, replace the real
implementation with a simple dummy one that always uses the English
input strings.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>
Gbp-Pq: Name 0007-i18n-use-dummy-localizations-to-avoid-dependencies.patch

3 years ago[PATCH 5/9] advisor,errtracker: use upstream bolt package
Zygmunt Krynicki [Thu, 17 Jan 2019 13:46:00 +0000 (15:46 +0200)]
[PATCH 5/9] advisor,errtracker: use upstream bolt package

Upstream snapd uses a fork of the bolt package that carries additional
patches for bugs that were discovered by snapd developers. Bolt itself
appears to be an abandoned project and is not accepting any new patches.

In various distributions the upstream bolt package may or may not have
been patched but the forked version was definitely not packaged. As
such, to build snapd in Debian the upstream bolt package name must be
used.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0005-advisor-errtracker-use-upstream-bolt-package.patch

3 years ago[PATCH 4/9] cmd/snap: skip tests depending on text wrapping
Zygmunt Krynicki [Thu, 17 Jan 2019 15:38:41 +0000 (17:38 +0200)]
[PATCH 4/9] cmd/snap: skip tests depending on text wrapping

Upstream snapd contains tests that check the output of various commands
along with the --help command-line argument. The output is wrapped to
match terminal width and for readability. The algorithm for wrapping
has apparently changed across versions of github.com/jessevdk/go-flags.

Since this test is not critical for anything it can be disabled to let
the package build.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0004-cmd-snap-skip-tests-depending-on-text-wrapping.patch

3 years ago[PATCH 3/9] cmd/snap-seccomp: skip tests that use -m32
Zygmunt Krynicki [Thu, 17 Jan 2019 15:21:22 +0000 (17:21 +0200)]
[PATCH 3/9] cmd/snap-seccomp: skip tests that use -m32

Apparently Debian's amd64 compiler somehow cannot compile -m32 mode
binaries. The compilation error is:

multipass@debian-10:~/packaging/snapd/cmd/snap-seccomp$ go test
cannot build multi-lib syscall runner: exit status 1
In file included from /usr/include/errno.h:25,
 from /tmp/check-3806730340354206876/1/seccomp_syscall_runner.c:3:
/usr/include/features.h:424:12: fatal error: sys/cdefs.h: No such file or directory
 #  include <sys/cdefs.h>
    ^~~~~~~~~~~~~
compilation terminated.
OK: 2 passed, 11 skipped

I was unable to resolve this issue, let's disable this test until we can get to
the bottom of it.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0003-cmd-snap-seccomp-skip-tests-that-use-m32.patch

3 years ago[PATCH 2/9] cmd/snap-seccomp: skip tests that fail on 4.19
Zygmunt Krynicki [Thu, 17 Jan 2019 15:11:12 +0000 (17:11 +0200)]
[PATCH 2/9] cmd/snap-seccomp: skip tests that fail on 4.19

It seems that the Debian 4.19.0-1 kernel contains a regression in
seccomp execution. While this issue is investigated in parallel along
with the security team, the release of updated snapd package should not
be held by this issue.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0002-cmd-snap-seccomp-skip-tests-that-fail-on-4.19.patch

3 years agosnapd (2.54.3-1) unstable; urgency=high
Michael Vogt [Wed, 23 Feb 2022 09:04:21 +0000 (09:04 +0000)]
snapd (2.54.3-1) unstable; urgency=high

  * SECURITY UPDATE: Local privilege escalation
    - snap-confine: Add validations of the location of the snap-confine
      binary within snapd.
    - snap-confine: Fix race condition in snap-confine when preparing a
      private mount namespace for a snap.
    - CVE-2021-44730
    - CVE-2021-44731
  * SECURITY UPDATE: Data injection from malicious snaps
    - interfaces: Add validations of snap content interface and layout
      paths in snapd.
    - CVE-2021-4120
    - LP: #1949368

[dgit import unpatched snapd 2.54.3-1]

3 years agoImport snapd_2.54.3-1.debian.tar.xz
Michael Vogt [Wed, 23 Feb 2022 09:04:21 +0000 (09:04 +0000)]
Import snapd_2.54.3-1.debian.tar.xz

[dgit import tarball snapd 2.54.3-1 snapd_2.54.3-1.debian.tar.xz]

3 years agoMerge snapd (2.54.1-1) import into refs/heads/workingbranch
Michael Vogt [Mon, 20 Dec 2021 14:15:32 +0000 (14:15 +0000)]
Merge snapd (2.54.1-1) import into refs/heads/workingbranch

3 years agoman-page-sections
Michael Hudson-Doyle [Mon, 20 Dec 2021 14:15:32 +0000 (14:15 +0000)]
man-page-sections

Gbp-Pq: Name 0010-man-page-sections.patch

3 years ago[PATCH 7/9] i18n: use dummy localizations to avoid dependencies
Zygmunt Krynicki [Thu, 17 Jan 2019 14:42:35 +0000 (16:42 +0200)]
[PATCH 7/9] i18n: use dummy localizations to avoid dependencies

Upstream snapd uses the github.com/ojii/gettext.go package for access to
translation catalogs. This package is currently not available in Debian
and prevents building the package. As such, replace the real
implementation with a simple dummy one that always uses the English
input strings.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>
Gbp-Pq: Name 0007-i18n-use-dummy-localizations-to-avoid-dependencies.patch

3 years ago[PATCH 5/9] advisor,errtracker: use upstream bolt package
Zygmunt Krynicki [Thu, 17 Jan 2019 13:46:00 +0000 (15:46 +0200)]
[PATCH 5/9] advisor,errtracker: use upstream bolt package

Upstream snapd uses a fork of the bolt package that carries additional
patches for bugs that were discovered by snapd developers. Bolt itself
appears to be an abandoned project and is not accepting any new patches.

In various distributions the upstream bolt package may or may not have
been patched but the forked version was definitely not packaged. As
such, to build snapd in Debian the upstream bolt package name must be
used.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0005-advisor-errtracker-use-upstream-bolt-package.patch

3 years ago[PATCH 4/9] cmd/snap: skip tests depending on text wrapping
Zygmunt Krynicki [Thu, 17 Jan 2019 15:38:41 +0000 (17:38 +0200)]
[PATCH 4/9] cmd/snap: skip tests depending on text wrapping

Upstream snapd contains tests that check the output of various commands
along with the --help command-line argument. The output is wrapped to
match terminal width and for readability. The algorithm for wrapping
has apparently changed across versions of github.com/jessevdk/go-flags.

Since this test is not critical for anything it can be disabled to let
the package build.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0004-cmd-snap-skip-tests-depending-on-text-wrapping.patch

3 years ago[PATCH 3/9] cmd/snap-seccomp: skip tests that use -m32
Zygmunt Krynicki [Thu, 17 Jan 2019 15:21:22 +0000 (17:21 +0200)]
[PATCH 3/9] cmd/snap-seccomp: skip tests that use -m32

Apparently Debian's amd64 compiler somehow cannot compile -m32 mode
binaries. The compilation error is:

multipass@debian-10:~/packaging/snapd/cmd/snap-seccomp$ go test
cannot build multi-lib syscall runner: exit status 1
In file included from /usr/include/errno.h:25,
 from /tmp/check-3806730340354206876/1/seccomp_syscall_runner.c:3:
/usr/include/features.h:424:12: fatal error: sys/cdefs.h: No such file or directory
 #  include <sys/cdefs.h>
    ^~~~~~~~~~~~~
compilation terminated.
OK: 2 passed, 11 skipped

I was unable to resolve this issue, let's disable this test until we can get to
the bottom of it.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0003-cmd-snap-seccomp-skip-tests-that-use-m32.patch

3 years ago[PATCH 2/9] cmd/snap-seccomp: skip tests that fail on 4.19
Zygmunt Krynicki [Thu, 17 Jan 2019 15:11:12 +0000 (17:11 +0200)]
[PATCH 2/9] cmd/snap-seccomp: skip tests that fail on 4.19

It seems that the Debian 4.19.0-1 kernel contains a regression in
seccomp execution. While this issue is investigated in parallel along
with the security team, the release of updated snapd package should not
be held by this issue.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0002-cmd-snap-seccomp-skip-tests-that-fail-on-4.19.patch

3 years agosnapd (2.54.1-1) unstable; urgency=medium
Michael Vogt [Mon, 20 Dec 2021 14:15:32 +0000 (14:15 +0000)]
snapd (2.54.1-1) unstable; urgency=medium

  * New upstream release, LP: #1955137
    - buid-aux: set version before calling ./generate-packaging-dir
      This fixes the "dirty" suffix in the auto-generated version

  * Upstream fixes for Debian bugs:
    - cgroups v2 are now supported (closes: #934372)
    - transitional package golang-github-ubuntu-core-snappy-dev
      dropped (closes: #940782)
    - support squashfs-tools 4.5 properly (closes: #993233)
    - fix FTBFS (closes: #997257)

  * Updated the debian packaging:
    - add myself to the uploaders (partly addresses 1001999)
    - remove npn-default series patches)
    - bump standards-version to 4.6.0 (required removal of
      non-default series files)

[dgit import unpatched snapd 2.54.1-1]

3 years agoImport snapd_2.54.1.orig.tar.gz
Michael Vogt [Mon, 20 Dec 2021 14:15:32 +0000 (14:15 +0000)]
Import snapd_2.54.1.orig.tar.gz

[dgit import orig snapd_2.54.1.orig.tar.gz]

3 years agoImport snapd_2.54.1-1.debian.tar.xz
Michael Vogt [Mon, 20 Dec 2021 14:15:32 +0000 (14:15 +0000)]
Import snapd_2.54.1-1.debian.tar.xz

[dgit import tarball snapd 2.54.1-1 snapd_2.54.1-1.debian.tar.xz]

4 years agoMerge snapd (2.51.7-2) import into refs/heads/workingbranch
Michael Vogt [Tue, 7 Sep 2021 11:53:22 +0000 (12:53 +0100)]
Merge snapd (2.51.7-2) import into refs/heads/workingbranch

4 years agoman-page-sections
Michael Hudson-Doyle [Tue, 7 Sep 2021 11:53:22 +0000 (12:53 +0100)]
man-page-sections

Gbp-Pq: Name 0010-man-page-sections.patch

4 years ago[PATCH 7/9] i18n: use dummy localizations to avoid dependencies
Zygmunt Krynicki [Thu, 17 Jan 2019 14:42:35 +0000 (16:42 +0200)]
[PATCH 7/9] i18n: use dummy localizations to avoid dependencies

Upstream snapd uses the github.com/ojii/gettext.go package for access to
translation catalogs. This package is currently not available in Debian
and prevents building the package. As such, replace the real
implementation with a simple dummy one that always uses the English
input strings.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>
Gbp-Pq: Name 0007-i18n-use-dummy-localizations-to-avoid-dependencies.patch

4 years ago[PATCH 6/9] systemd: disable snapfuse system
Zygmunt Krynicki [Thu, 17 Jan 2019 13:51:14 +0000 (15:51 +0200)]
[PATCH 6/9] systemd: disable snapfuse system

Upstream snapd uses an elaborate hack to bundle squashfuse under the
name snapfuse, and built as a fake go package. This component is not
available in Debian where bundling elements is not allowed.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>
Gbp-Pq: Name 0006-systemd-disable-snapfuse-system.patch

4 years ago[PATCH 5/9] advisor,errtracker: use upstream bolt package
Zygmunt Krynicki [Thu, 17 Jan 2019 13:46:00 +0000 (15:46 +0200)]
[PATCH 5/9] advisor,errtracker: use upstream bolt package

Upstream snapd uses a fork of the bolt package that carries additional
patches for bugs that were discovered by snapd developers. Bolt itself
appears to be an abandoned project and is not accepting any new patches.

In various distributions the upstream bolt package may or may not have
been patched but the forked version was definitely not packaged. As
such, to build snapd in Debian the upstream bolt package name must be
used.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0005-advisor-errtracker-use-upstream-bolt-package.patch

4 years ago[PATCH 4/9] cmd/snap: skip tests depending on text wrapping
Zygmunt Krynicki [Thu, 17 Jan 2019 15:38:41 +0000 (17:38 +0200)]
[PATCH 4/9] cmd/snap: skip tests depending on text wrapping

Upstream snapd contains tests that check the output of various commands
along with the --help command-line argument. The output is wrapped to
match terminal width and for readability. The algorithm for wrapping
has apparently changed across versions of github.com/jessevdk/go-flags.

Since this test is not critical for anything it can be disabled to let
the package build.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0004-cmd-snap-skip-tests-depending-on-text-wrapping.patch

4 years ago[PATCH 3/9] cmd/snap-seccomp: skip tests that use -m32
Zygmunt Krynicki [Thu, 17 Jan 2019 15:21:22 +0000 (17:21 +0200)]
[PATCH 3/9] cmd/snap-seccomp: skip tests that use -m32

Apparently Debian's amd64 compiler somehow cannot compile -m32 mode
binaries. The compilation error is:

multipass@debian-10:~/packaging/snapd/cmd/snap-seccomp$ go test
cannot build multi-lib syscall runner: exit status 1
In file included from /usr/include/errno.h:25,
 from /tmp/check-3806730340354206876/1/seccomp_syscall_runner.c:3:
/usr/include/features.h:424:12: fatal error: sys/cdefs.h: No such file or directory
 #  include <sys/cdefs.h>
    ^~~~~~~~~~~~~
compilation terminated.
OK: 2 passed, 11 skipped

I was unable to resolve this issue, let's disable this test until we can get to
the bottom of it.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0003-cmd-snap-seccomp-skip-tests-that-use-m32.patch

4 years ago[PATCH 2/9] cmd/snap-seccomp: skip tests that fail on 4.19
Zygmunt Krynicki [Thu, 17 Jan 2019 15:11:12 +0000 (17:11 +0200)]
[PATCH 2/9] cmd/snap-seccomp: skip tests that fail on 4.19

It seems that the Debian 4.19.0-1 kernel contains a regression in
seccomp execution. While this issue is investigated in parallel along
with the security team, the release of updated snapd package should not
be held by this issue.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0002-cmd-snap-seccomp-skip-tests-that-fail-on-4.19.patch

4 years ago[PATCH 1/9] cmd/snap-seccomp: use upstream seccomp package
Zygmunt Krynicki [Thu, 17 Jan 2019 13:48:46 +0000 (15:48 +0200)]
[PATCH 1/9] cmd/snap-seccomp: use upstream seccomp package

Upstream snapd uses a fork that carries additional compatibility patch
required to build snapd for Ubuntu 14.04. This patch is not required with
the latest snapshot of the upstream seccomp golang bindings but they are
neither released upstream nor backported (in their entirety) to Ubuntu
14.04.

The forked seccomp library is not packaged in Debian. As such, to build
snapd, we need to switch to the regular, non-forked package name.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>
Gbp-Pq: Name 0001-cmd-snap-seccomp-use-upstream-seccomp-package.patch

4 years agosnapd (2.51.7-2) unstable; urgency=medium
Michael Vogt [Tue, 7 Sep 2021 11:53:22 +0000 (12:53 +0100)]
snapd (2.51.7-2) unstable; urgency=medium

  * debian: cherry-pick PR#10745
    - cherry pick https://github.com/snapcore/snapd/pull/10745
      (closes: #993783)
  * debian/control:
    - build with go-1.15 for now until snapd-2.52 is released
      which fully supports go.mod

[dgit import unpatched snapd 2.51.7-2]

4 years agoImport snapd_2.51.7-2.debian.tar.xz
Michael Vogt [Tue, 7 Sep 2021 11:53:22 +0000 (12:53 +0100)]
Import snapd_2.51.7-2.debian.tar.xz

[dgit import tarball snapd 2.51.7-2 snapd_2.51.7-2.debian.tar.xz]

4 years agoMerge snapd (2.51.7-1) import into refs/heads/workingbranch
Michael Vogt [Wed, 1 Sep 2021 11:32:06 +0000 (12:32 +0100)]
Merge snapd (2.51.7-1) import into refs/heads/workingbranch

4 years agoImport snapd_2.51.7.orig.tar.gz
Michael Vogt [Wed, 1 Sep 2021 11:32:06 +0000 (12:32 +0100)]
Import snapd_2.51.7.orig.tar.gz

[dgit import orig snapd_2.51.7.orig.tar.gz]

4 years agoman-page-sections
Michael Hudson-Doyle [Wed, 1 Sep 2021 11:32:06 +0000 (12:32 +0100)]
man-page-sections

Gbp-Pq: Name 0010-man-page-sections.patch

4 years ago[PATCH 7/9] i18n: use dummy localizations to avoid dependencies
Zygmunt Krynicki [Thu, 17 Jan 2019 14:42:35 +0000 (16:42 +0200)]
[PATCH 7/9] i18n: use dummy localizations to avoid dependencies

Upstream snapd uses the github.com/ojii/gettext.go package for access to
translation catalogs. This package is currently not available in Debian
and prevents building the package. As such, replace the real
implementation with a simple dummy one that always uses the English
input strings.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>
Gbp-Pq: Name 0007-i18n-use-dummy-localizations-to-avoid-dependencies.patch

4 years ago[PATCH 6/9] systemd: disable snapfuse system
Zygmunt Krynicki [Thu, 17 Jan 2019 13:51:14 +0000 (15:51 +0200)]
[PATCH 6/9] systemd: disable snapfuse system

Upstream snapd uses an elaborate hack to bundle squashfuse under the
name snapfuse, and built as a fake go package. This component is not
available in Debian where bundling elements is not allowed.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>
Gbp-Pq: Name 0006-systemd-disable-snapfuse-system.patch

4 years ago[PATCH 5/9] advisor,errtracker: use upstream bolt package
Zygmunt Krynicki [Thu, 17 Jan 2019 13:46:00 +0000 (15:46 +0200)]
[PATCH 5/9] advisor,errtracker: use upstream bolt package

Upstream snapd uses a fork of the bolt package that carries additional
patches for bugs that were discovered by snapd developers. Bolt itself
appears to be an abandoned project and is not accepting any new patches.

In various distributions the upstream bolt package may or may not have
been patched but the forked version was definitely not packaged. As
such, to build snapd in Debian the upstream bolt package name must be
used.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0005-advisor-errtracker-use-upstream-bolt-package.patch

4 years ago[PATCH 4/9] cmd/snap: skip tests depending on text wrapping
Zygmunt Krynicki [Thu, 17 Jan 2019 15:38:41 +0000 (17:38 +0200)]
[PATCH 4/9] cmd/snap: skip tests depending on text wrapping

Upstream snapd contains tests that check the output of various commands
along with the --help command-line argument. The output is wrapped to
match terminal width and for readability. The algorithm for wrapping
has apparently changed across versions of github.com/jessevdk/go-flags.

Since this test is not critical for anything it can be disabled to let
the package build.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0004-cmd-snap-skip-tests-depending-on-text-wrapping.patch

4 years ago[PATCH 3/9] cmd/snap-seccomp: skip tests that use -m32
Zygmunt Krynicki [Thu, 17 Jan 2019 15:21:22 +0000 (17:21 +0200)]
[PATCH 3/9] cmd/snap-seccomp: skip tests that use -m32

Apparently Debian's amd64 compiler somehow cannot compile -m32 mode
binaries. The compilation error is:

multipass@debian-10:~/packaging/snapd/cmd/snap-seccomp$ go test
cannot build multi-lib syscall runner: exit status 1
In file included from /usr/include/errno.h:25,
 from /tmp/check-3806730340354206876/1/seccomp_syscall_runner.c:3:
/usr/include/features.h:424:12: fatal error: sys/cdefs.h: No such file or directory
 #  include <sys/cdefs.h>
    ^~~~~~~~~~~~~
compilation terminated.
OK: 2 passed, 11 skipped

I was unable to resolve this issue, let's disable this test until we can get to
the bottom of it.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0003-cmd-snap-seccomp-skip-tests-that-use-m32.patch

4 years ago[PATCH 2/9] cmd/snap-seccomp: skip tests that fail on 4.19
Zygmunt Krynicki [Thu, 17 Jan 2019 15:11:12 +0000 (17:11 +0200)]
[PATCH 2/9] cmd/snap-seccomp: skip tests that fail on 4.19

It seems that the Debian 4.19.0-1 kernel contains a regression in
seccomp execution. While this issue is investigated in parallel along
with the security team, the release of updated snapd package should not
be held by this issue.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0002-cmd-snap-seccomp-skip-tests-that-fail-on-4.19.patch

4 years ago[PATCH 1/9] cmd/snap-seccomp: use upstream seccomp package
Zygmunt Krynicki [Thu, 17 Jan 2019 13:48:46 +0000 (15:48 +0200)]
[PATCH 1/9] cmd/snap-seccomp: use upstream seccomp package

Upstream snapd uses a fork that carries additional compatibility patch
required to build snapd for Ubuntu 14.04. This patch is not required with
the latest snapshot of the upstream seccomp golang bindings but they are
neither released upstream nor backported (in their entirety) to Ubuntu
14.04.

The forked seccomp library is not packaged in Debian. As such, to build
snapd, we need to switch to the regular, non-forked package name.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>
Gbp-Pq: Name 0001-cmd-snap-seccomp-use-upstream-seccomp-package.patch

4 years agosnapd (2.51.7-1) unstable; urgency=medium
Michael Vogt [Wed, 1 Sep 2021 11:32:06 +0000 (12:32 +0100)]
snapd (2.51.7-1) unstable; urgency=medium

  * New upstream release, LP: #1929842
    - cmd/snap-seccomp/syscalls: update syscalls list to libseccomp
      v2.2.0-428-g5c22d4b1
    - tests: cherry-pick shellcheck fix `bd730fd4`
    - interfaces/dsp: add /dev/ambad into dsp interface
    - many: shellcheck fixes
    - snapstate: abort kernel refresh if no gadget update can be found
    - overlord: add manager test for "assumes" checking
    - store: deal correctly with "assumes" from the store raw yaml

[dgit import unpatched snapd 2.51.7-1]

4 years agoImport snapd_2.51.7-1.debian.tar.xz
Michael Vogt [Wed, 1 Sep 2021 11:32:06 +0000 (12:32 +0100)]
Import snapd_2.51.7-1.debian.tar.xz

[dgit import tarball snapd 2.51.7-1 snapd_2.51.7-1.debian.tar.xz]

4 years agoMerge snapd (2.49-1) import into refs/heads/workingbranch
Michael Vogt [Wed, 24 Feb 2021 08:23:51 +0000 (08:23 +0000)]
Merge snapd (2.49-1) import into refs/heads/workingbranch

4 years agocherry-pick-pr9936
Michael Hudson-Doyle [Wed, 24 Feb 2021 08:23:51 +0000 (08:23 +0000)]
cherry-pick-pr9936

commit 5c7c00e13285487a472e615d0e483e64b2cfad78
Author: Zygmunt Krynicki <me@zygoon.pl>
Date:   Mon Feb 15 17:14:41 2021 +0000

    Remove apparmor downgrade feature

    Apparmor downgrade was automatically enabled when the running kernel
    supported some, but not all of the features. Since the complete set was
    never upstreamed, this effectively meant that users had less features
    than they otherwise would have.

    Since apparmor is still reported as "partial", nothing changes from the
    point of view of not sending any misleading messages. For certain
    classes of snap packages, this improves the effective confinement on
    systems such as Debian or openSUSE Leap.

    Perfect confinement is still way off, this doesn't change that.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0013-cherry-pick-pr9936.patch

4 years agoman-page-sections
Michael Hudson-Doyle [Wed, 24 Feb 2021 08:23:51 +0000 (08:23 +0000)]
man-page-sections

Gbp-Pq: Name 0010-man-page-sections.patch

4 years ago[PATCH 7/9] i18n: use dummy localizations to avoid dependencies
Zygmunt Krynicki [Thu, 17 Jan 2019 14:42:35 +0000 (16:42 +0200)]
[PATCH 7/9] i18n: use dummy localizations to avoid dependencies

Upstream snapd uses the github.com/ojii/gettext.go package for access to
translation catalogs. This package is currently not available in Debian
and prevents building the package. As such, replace the real
implementation with a simple dummy one that always uses the English
input strings.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0007-i18n-use-dummy-localizations-to-avoid-dependencies.patch

4 years ago[PATCH 6/9] systemd: disable snapfuse system
Zygmunt Krynicki [Thu, 17 Jan 2019 13:51:14 +0000 (15:51 +0200)]
[PATCH 6/9] systemd: disable snapfuse system

Upstream snapd uses an elaborate hack to bundle squashfuse under the
name snapfuse, and built as a fake go package. This component is not
available in Debian where bundling elements is not allowed.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0006-systemd-disable-snapfuse-system.patch

4 years ago[PATCH 5/9] advisor,errtracker: use upstream bolt package
Zygmunt Krynicki [Thu, 17 Jan 2019 13:46:00 +0000 (15:46 +0200)]
[PATCH 5/9] advisor,errtracker: use upstream bolt package

Upstream snapd uses a fork of the bolt package that carries additional
patches for bugs that were discovered by snapd developers. Bolt itself
appears to be an abandoned project and is not accepting any new patches.

In various distributions the upstream bolt package may or may not have
been patched but the forked version was definitely not packaged. As
such, to build snapd in Debian the upstream bolt package name must be
used.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0005-advisor-errtracker-use-upstream-bolt-package.patch

4 years ago[PATCH 4/9] cmd/snap: skip tests depending on text wrapping
Zygmunt Krynicki [Thu, 17 Jan 2019 15:38:41 +0000 (17:38 +0200)]
[PATCH 4/9] cmd/snap: skip tests depending on text wrapping

Upstream snapd contains tests that check the output of various commands
along with the --help command-line argument. The output is wrapped to
match terminal width and for readability. The algorithm for wrapping
has apparently changed across versions of github.com/jessevdk/go-flags.

Since this test is not critical for anything it can be disabled to let
the package build.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
Gbp-Pq: Name 0004-cmd-snap-skip-tests-depending-on-text-wrapping.patch