-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 17 Apr 2024 09:02:58 +0200 Source: snapd Architecture: source Version: 2.62-1 Distribution: unstable Urgency: medium Maintainer: Michael Hudson-Doyle <mwhudson@debian.org> Changed-By: Zygmunt Krynicki <me@zygoon.pl> Changes: snapd (2.62-1) unstable; urgency=medium . [ Ernest Lotter ] * New upstream release, LP: #2058277 - Aspects based configuration schema support (experimental) - Refresh app awareness support for UI (experimental) - Support for user daemons by introducing new control switches --user/--system/--users for service start/stop/restart (experimental) - Add AppArmor prompting experimental flag (feature currently unsupported) - Installation of local snap components of type test - Packaging of components with snap pack - Expose experimental features supported/enabled in snapd REST API endpoint /v2/system-info - Support creating and removing recovery systems for use by factory reset - Enable API route for creating and removing recovery systems using /v2/systems with action create and /v2/systems/{label} with action remove - Lift requirements for fde-setup hook for single boot install - Enable single reboot gadget update for UC20+ - Allow core to be removed on classic systems - Support for remodeling on hybrid systems - Install desktop files on Ubuntu Core and update after snapd upgrade - Upgrade sandbox features to account for cgroup v2 device filtering - Support snaps to manage their own cgroups - Add support for AppArmor 4.0 unconfined profile mode - Add AppArmor based read access to /etc/default/keyboard - Upgrade to squashfuse 0.5.0 - Support useradd utility to enable removing Perl dependency for UC24+ - Support for recovery-chooser to use console-conf snap - Add support for --uid/--gid using strace-static - Add support for notices (from pebble) and expose via the snapd REST API endpoints /v2/notices and /v2/notice - Add polkit authentication for snapd REST API endpoints /v2/snaps/{snap}/conf and /v2/apps - Add refresh-inhibit field to snapd REST API endpoint /v2/snaps - Add refresh-inhibited select query to REST API endpoint /v2/snaps - Take into account validation sets during remodeling - Improve offline remodeling to use installed revisions of snaps to fulfill the remodel revision requirement - Add rpi configuration option sdtv_mode - When snapd snap is not installed, pin policy ABI to 4.0 or 3.0 if present on host - Fix gadget zero-sized disk mapping caused by not ignoring zero sized storage traits - Fix gadget install case where size of existing partition was not correctly taken into account - Fix trying to unmount early kernel mount if it does not exist - Fix restarting mount units on snapd start - Fix call to udev in preseed mode - Fix to ensure always setting up the device cgroup for base bare and core24+ - Fix not copying data from newly set homedirs on revision change - Fix leaving behind empty snap home directories after snap is removed (resulting in broken symlink) - Fix to avoid using libzstd from host by adding to snapd snap - Fix autorefresh to correctly handle forever refresh hold - Fix username regex allowed for system-user assertion to not allow '+' - Fix incorrect application icon for notification after autorefresh completion - Fix to restart mount units when changed - Fix to support AppArmor running under incus - Fix case of snap-update-ns dropping synthetic mounts due to failure to match desired mount dependencies - Fix parsing of base snap version to enable pre-seeding of Ubuntu Core Desktop - Fix packaging and tests for various distributions - Add remoteproc interface to allow developers to interact with Remote Processor Framework which enables snaps to load firmware to ARM Cortex microcontrollers - Add kernel-control interface to enable controlling the kernel firmware search path - Add nfs-mount interface to allow mounting of NFS shares - Add ros-opt-data interface to allow snaps to access the host /opt/ros/ paths - Add snap-refresh-observe interface that provides refresh-app- awareness clients access to relevant snapd API endpoints - steam-support interface: generalize Pressure Vessel root paths and allow access to driver information, features and container versions - steam-support interface: make implicit on Ubuntu Core Desktop - desktop interface: improved support for Ubuntu Core Desktop and limit autoconnection to implicit slots - cups-control interface: make autoconnect depend on presence of cupsd on host to ensure it works on classic systems - opengl interface: allow read access to /usr/share/nvidia - personal-files interface: extend to support automatic creation of missing parent directories in write paths - network-control interface: allow creating /run/resolveconf - network-setup-control and network-setup-observe interfaces: allow busctl bind as required for systemd 254+ - libvirt interface: allow r/w access to /run/libvirt/libvirt-sock- ro and read access to /var/lib/libvirt/dnsmasq/** - fwupd interface: allow access to IMPI devices (including locking of device nodes), sysfs attributes needed by amdgpu and the COD capsule update directory - uio interface: allow configuring UIO drivers from userspace libraries - serial-port interface: add support for NXP Layerscape SoC - lxd-support interface: add attribute enable-unconfined-mode to require LXD to opt-in to run unconfined - block-devices interface: add support for ZFS volumes - system-packages-doc interface: add support for reading jquery and sphinx documentation - system-packages-doc interface: workaround to prevent autoconnect failure for snaps using base bare - microceph-support interface: allow more types of block devices to be added as an OSD - mount-observe interface: allow read access to /proc/{pid}/task/{tid}/mounts and proc/{pid}/task/{tid}/mountinfo - polkit interface: changed to not be implicit on core because installing policy files is not possible - upower-observe interface: allow stats refresh - gpg-public-keys interface: allow creating lock file for certain gpg operations - shutdown interface: allow access to SetRebootParameter method - media-control interface: allow device file locking - u2f-devices interface: support for Trustkey G310H, JaCarta U2F, Kensington VeriMark Guard, RSA DS100, Google Titan v2 Checksums-Sha1: 6a0500062404662bc9736a8a905254eebd0c8564 3461 snapd_2.62-1.dsc 483c76ebf73e5b1aa53925a484933f32472d6f71 12732311 snapd_2.62.orig.tar.gz 552b7ea4988cb79d699ab8d198668cf93f4f6cd8 136104 snapd_2.62-1.debian.tar.xz 279265e081b09c21e7b39cce8aea6c33d721c8ea 14700 snapd_2.62-1_source.buildinfo Checksums-Sha256: d203647d8aa43dff94606adb4c1dbcd3c586343b96fed6c28858c6c2a6b9e31f 3461 snapd_2.62-1.dsc 41d7506639994cdad2789614f15f4baf3dee52d27269b10e69ee7012e4777a41 12732311 snapd_2.62.orig.tar.gz 7dc7952cd3cdd3c8b3ca1e1cf122713788182824b849a67ea43613f3687ac8b4 136104 snapd_2.62-1.debian.tar.xz ccbae420fbed1000667435b4fa859be7e42a67fa38bd7fb4a809f556bbfc5f4f 14700 snapd_2.62-1_source.buildinfo Files: a565ba3753c678de10b4a4f89ddf004e 3461 devel optional snapd_2.62-1.dsc 64d0f7091bdff8d3d1cba718bc6e7264 12732311 devel optional snapd_2.62.orig.tar.gz d8e743e062be2bb4a54c6aaaa16a71e0 136104 devel optional snapd_2.62-1.debian.tar.xz 26d31f4572d0b34b3834fe552835300e 14700 devel optional snapd_2.62-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCgAyFiEEt2ztm0XK8VV9JxpqKJTpOijGe0cFAmYfdGwUHHprcnluaWNr aUBnbWFpbC5jb20ACgkQKJTpOijGe0c1DRAAjkdLV65b7BdckKW1ZcZG2zAZEIPc HRlVXN/W3dzuNSFm6kv47dT908oF27OkoCFGasc2tWcnZ0zm3L7a9+r+N+3YhS9s L+WDu+oh/mSL2x7z/gs48TlHJ7d4kRFMJHnusJ4SVSI7iKWwjpshZpf4zcFBzLq3 wFXL4rWrVa2ZIVOf68YWk4u93q65RIm3oH9pe8ZMIgoAT/sbw7x/tOD4gKTc3dfL DAgyhME6xrQXELKMyTMjHdBL/tmu+OmM8fe1/i2TbshkjWJaEzSaTaPPohAp4AWu paOS+XjFDniz+fhZ8m4/YogHNCF3d4/99PsH8VXtDGb0FgsP3RRq/lxKbD2JqGO1 u5/XzllwvSBeVYZpTzCMKsH55QkWv6Df5zoZSAJNHhua1bP+h6xKXPqAxL1pqdVK UeA17vB/70/Avo5r2NiJ4OVxYn8qWxBl+xj1IoaVL6tDeCHE2STCypWmSd5m2+ik HGF7PUqUWBytSvtTh7TIGSs1hexHDx057iLJ6zJbxYkyEa36g3AkRP3LqnFTicjd OQYgkNn32OMgwgalsRGxiYUiqY4IfrPwql3NV9vCIdDZqcU1NMlJmILviN7Cqh9J GUGZdZ9vafugt7DUl5bfV2nvZI4RQxz6fYkRSdmxIyNTuXQgedWQyz8tJJSY2KZq LsEGcCBsKYdIdrE= =oy6Y -----END PGP SIGNATURE-----
Attachment:
pgpbuv_b7B5x4.pgp
Description: PGP signature