From 9732dd37cc8b9df33d9ff35580e50f38480e758f Mon Sep 17 00:00:00 2001 From: Maciek Borzecki Date: Oct 04 2019 12:26:05 +0000 Subject: Release 2.42 to Fedora - remove unnecessary patches - tweak BuildRequires order - drop indent from build requirements, as it's not needed - updated Go provides list Signed-off-by: Maciek Borzecki --- diff --git a/0001-cmd-use-libtool-for-the-internal-library.patch b/0001-cmd-use-libtool-for-the-internal-library.patch deleted file mode 100644 index 647f2d6..0000000 --- a/0001-cmd-use-libtool-for-the-internal-library.patch +++ /dev/null @@ -1,149 +0,0 @@ -From 0bbbfa5e6482a153561e6776837a735f371e8848 Mon Sep 17 00:00:00 2001 -From: Zygmunt Krynicki -Date: Mon, 6 Mar 2017 20:26:26 +0100 -Subject: [PATCH] cmd: use libtool for the internal library - -This just cuts some hassle integration with how the helper library is -built. I could never get to pass the right -fPIC/-fpie combination -otherwise. - -Signed-off-by: Zygmunt Krynicki ---- - cmd/Makefile.am | 32 ++++++++++++++++---------------- - cmd/configure.ac | 3 ++- - 2 files changed, 18 insertions(+), 17 deletions(-) - -diff --git a/cmd/Makefile.am b/cmd/Makefile.am -index 88fa15305..52ee780bf 100644 ---- a/cmd/Makefile.am -+++ b/cmd/Makefile.am -@@ -98,12 +98,12 @@ snap-seccomp/snap-seccomp: snap-seccomp/*.go - cd snap-seccomp && GOPATH=$(or $(GOPATH),$(realpath $(srcdir)/../../../../..)) go build -v - - ## --## libsnap-confine-private.a -+## libsnap-confine-private.la - ## - --noinst_LIBRARIES += libsnap-confine-private.a -+noinst_LTLIBRARIES = libsnap-confine-private.la - --libsnap_confine_private_a_SOURCES = \ -+libsnap_confine_private_la_SOURCES = \ - libsnap-confine-private/apparmor-support.c \ - libsnap-confine-private/apparmor-support.h \ - libsnap-confine-private/cgroup-freezer-support.c \ -@@ -141,11 +141,11 @@ libsnap_confine_private_a_SOURCES = \ - libsnap-confine-private/tool.h \ - libsnap-confine-private/utils.c \ - libsnap-confine-private/utils.h --libsnap_confine_private_a_CFLAGS = $(CHECK_CFLAGS) -+libsnap_confine_private_la_CFLAGS = $(CHECK_CFLAGS) - --noinst_LIBRARIES += libsnap-confine-private-debug.a --libsnap_confine_private_debug_a_SOURCES = $(libsnap_confine_private_a_SOURCES) --libsnap_confine_private_debug_a_CFLAGS = $(CHECK_CFLAGS) -DSNAP_CONFINE_DEBUG_BUILD=1 -+noinst_LTLIBRARIES += libsnap-confine-private-debug.la -+libsnap_confine_private_debug_la_SOURCES = $(libsnap_confine_private_la_SOURCES) -+libsnap_confine_private_debug_la_CFLAGS = $(CHECK_CFLAGS) -DSNAP_CONFINE_DEBUG_BUILD=1 - - if WITH_UNIT_TESTS - noinst_PROGRAMS += libsnap-confine-private/unit-tests -@@ -196,7 +196,7 @@ noinst_PROGRAMS += decode-mount-opts/decode-mount-opts - - decode_mount_opts_decode_mount_opts_SOURCES = \ - decode-mount-opts/decode-mount-opts.c --decode_mount_opts_decode_mount_opts_LDADD = libsnap-confine-private.a -+decode_mount_opts_decode_mount_opts_LDADD = libsnap-confine-private.la - decode_mount_opts_decode_mount_opts_STATIC = - - if STATIC_LIBCAP -@@ -252,7 +252,7 @@ snap_confine_snap_confine_SOURCES = \ - - snap_confine_snap_confine_CFLAGS = $(CHECK_CFLAGS) $(AM_CFLAGS) -DLIBEXECDIR=\"$(libexecdir)\" -DNATIVE_LIBDIR=\"$(libdir)\" - snap_confine_snap_confine_LDFLAGS = $(AM_LDFLAGS) --snap_confine_snap_confine_LDADD = libsnap-confine-private.a -+snap_confine_snap_confine_LDADD = libsnap-confine-private.la - snap_confine_snap_confine_CFLAGS += $(LIBUDEV_CFLAGS) - snap_confine_snap_confine_LDADD += $(snap_confine_snap_confine_extra_libs) - # _STATIC is where we collect statically linked in libraries -@@ -308,7 +308,7 @@ noinst_PROGRAMS += snap-confine/snap-confine-debug - snap_confine_snap_confine_debug_SOURCES = $(snap_confine_snap_confine_SOURCES) - snap_confine_snap_confine_debug_CFLAGS = $(snap_confine_snap_confine_CFLAGS) - snap_confine_snap_confine_debug_LDFLAGS = $(snap_confine_snap_confine_LDFLAGS) --snap_confine_snap_confine_debug_LDADD = libsnap-confine-private-debug.a $(snap_confine_snap_confine_extra_libs) -+snap_confine_snap_confine_debug_LDADD = libsnap-confine-private-debug.la $(snap_confine_snap_confine_extra_libs) - snap_confine_snap_confine_debug_CFLAGS += -DSNAP_CONFINE_DEBUG_BUILD=1 - snap_confine_snap_confine_debug_STATIC = $(snap_confine_snap_confine_STATIC) - -@@ -443,7 +443,7 @@ snap_discard_ns_snap_discard_ns_SOURCES = \ - snap-discard-ns/snap-discard-ns.c - snap_discard_ns_snap_discard_ns_CFLAGS = $(CHECK_CFLAGS) $(AM_CFLAGS) - snap_discard_ns_snap_discard_ns_LDFLAGS = $(AM_LDFLAGS) --snap_discard_ns_snap_discard_ns_LDADD = libsnap-confine-private.a -+snap_discard_ns_snap_discard_ns_LDADD = libsnap-confine-private.la - snap_discard_ns_snap_discard_ns_STATIC = - - # Use a hacked rule if we're doing static build. This allows us to inject the LIBS += .. rule below. -@@ -463,7 +463,7 @@ system_shutdown_system_shutdown_SOURCES = \ - system-shutdown/system-shutdown-utils.c \ - system-shutdown/system-shutdown-utils.h \ - system-shutdown/system-shutdown.c --system_shutdown_system_shutdown_LDADD = libsnap-confine-private.a -+system_shutdown_system_shutdown_LDADD = libsnap-confine-private.la - system_shutdown_system_shutdown_CFLAGS = $(CHECK_CFLAGS) $(filter-out -fPIE -pie,$(CFLAGS)) -static - system_shutdown_system_shutdown_LDFLAGS = $(filter-out -fPIE -pie,$(LDFLAGS)) -static - -@@ -473,7 +473,7 @@ system_shutdown_unit_tests_SOURCES = \ - libsnap-confine-private/unit-tests-main.c \ - libsnap-confine-private/unit-tests.c \ - system-shutdown/system-shutdown-utils-test.c --system_shutdown_unit_tests_LDADD = libsnap-confine-private.a -+system_shutdown_unit_tests_LDADD = libsnap-confine-private.la - system_shutdown_unit_tests_CFLAGS = $(GLIB_CFLAGS) - system_shutdown_unit_tests_LDADD += $(GLIB_LIBS) - endif -@@ -487,7 +487,7 @@ libexec_PROGRAMS += snap-gdb-shim/snap-gdb-shim - snap_gdb_shim_snap_gdb_shim_SOURCES = \ - snap-gdb-shim/snap-gdb-shim.c - --snap_gdb_shim_snap_gdb_shim_LDADD = libsnap-confine-private.a -+snap_gdb_shim_snap_gdb_shim_LDADD = libsnap-confine-private.la - - ## - ## snapd-generator -@@ -497,7 +497,7 @@ systemdsystemgeneratordir = $(SYSTEMD_SYSTEM_GENERATOR_DIR) - systemdsystemgenerator_PROGRAMS = snapd-generator/snapd-generator - - snapd_generator_snapd_generator_SOURCES = snapd-generator/main.c --snapd_generator_snapd_generator_LDADD = libsnap-confine-private.a -+snapd_generator_snapd_generator_LDADD = libsnap-confine-private.la - - ## - ## snapd-env-generator -@@ -507,7 +507,7 @@ systemdsystemenvgeneratordir=$(SYSTEMD_SYSTEM_ENV_GENERATOR_DIR) - systemdsystemenvgenerator_PROGRAMS = snapd-env-generator/snapd-env-generator - - snapd_env_generator_snapd_env_generator_SOURCES = snapd-env-generator/main.c --snapd_env_generator_snapd_env_generator_LDADD = libsnap-confine-private.a -+snapd_env_generator_snapd_env_generator_LDADD = libsnap-confine-private.la - EXTRA_DIST += snapd-env-generator/snapd-env-generator.rst - - if HAVE_RST2MAN -diff --git a/cmd/configure.ac b/cmd/configure.ac -index 352089f52..30ffa55b0 100644 ---- a/cmd/configure.ac -+++ b/cmd/configure.ac -@@ -11,7 +11,8 @@ AC_PROG_CC_C99 - AC_PROG_CPP - AC_PROG_INSTALL - AC_PROG_MAKE_SET --AC_PROG_RANLIB -+AC_PROG_LIBTOOL -+AC_CONFIG_MACRO_DIR([m4]) - - AC_LANG([C]) - # Checks for libraries. --- -2.21.0 - diff --git a/snapd-PR7109-gracefully-degrade-on-cgroup-v2.patch b/snapd-PR7109-gracefully-degrade-on-cgroup-v2.patch deleted file mode 100644 index e738a6e..0000000 --- a/snapd-PR7109-gracefully-degrade-on-cgroup-v2.patch +++ /dev/null @@ -1,217 +0,0 @@ -From 94c0c38e5779a9ae53e6fbc6643e65dc1bb91ae9 Mon Sep 17 00:00:00 2001 -From: Michael Vogt -Date: Mon, 15 Jul 2019 13:48:06 +0200 -Subject: [PATCH 1/4] snap-confine: fallback gracefully on a cgroup v2 only - system - -On a cgroup v2 only system we cannot use certain features like -freezer or pid cgroups yet. In order to not die() when we run -on such systems this PR implements detection and skipping of -those. - -This will have to be done "properly" but for now it ensures -that snaps continue to run on cgroup v2 only systems. ---- - cmd/libsnap-confine-private/cgroup-support.c | 16 ++++++++++++++++ - cmd/libsnap-confine-private/cgroup-support.h | 7 +++++++ - cmd/snap-confine/ns-support.c | 3 ++- - cmd/snap-confine/snap-confine.c | 16 +++++++++++----- - 4 files changed, 36 insertions(+), 6 deletions(-) - -diff --git a/cmd/libsnap-confine-private/cgroup-support.c b/cmd/libsnap-confine-private/cgroup-support.c -index 03dc4b160f8..c61d516a474 100644 ---- a/cmd/libsnap-confine-private/cgroup-support.c -+++ b/cmd/libsnap-confine-private/cgroup-support.c -@@ -25,6 +25,7 @@ - #include - #include - #include -+#include - #include - - #include "cleanup-funcs.h" -@@ -66,3 +67,18 @@ void sc_cgroup_create_and_join(const char *parent, const char *name, pid_t pid) - } - debug("moved process %ld to cgroup hierarchy %s/%s", (long)pid, parent, name); - } -+ -+static const char *cgroup_dir = "/sys/fs/cgroup"; -+// from statfs(2) -+static const int CGROUP2_SUPER_MAGIC = 0x63677270; -+ -+bool sc_cgroup_is_v2() { -+ struct statfs buf; -+ -+ int err = statfs(cgroup_dir, &buf); -+ if (err == 0 && buf.f_type == CGROUP2_SUPER_MAGIC) { -+ fprintf(stderr, "WARNING: cgroup v2 is not fully supported yet\n"); -+ return true; -+ } -+ return false; -+} -diff --git a/cmd/libsnap-confine-private/cgroup-support.h b/cmd/libsnap-confine-private/cgroup-support.h -index 33e5ccc90bc..f7f0ebaf9b4 100644 ---- a/cmd/libsnap-confine-private/cgroup-support.h -+++ b/cmd/libsnap-confine-private/cgroup-support.h -@@ -19,6 +19,7 @@ - #define SC_CGROUP_SUPPORT_H - - #include -+#include - - /** - * sc_cgroup_create_and_join joins, perhaps creating, a cgroup hierarchy. -@@ -30,4 +31,10 @@ - **/ - void sc_cgroup_create_and_join(const char *parent, const char *name, pid_t pid); - -+/** -+ * sc_cgroup_is_v2() returns true if running on cgroups v2 -+ * -+ **/ -+bool sc_cgroup_is_v2(void); -+ - #endif -diff --git a/cmd/snap-confine/ns-support.c b/cmd/snap-confine/ns-support.c -index 672f18b6a0c..c3d958b1136 100644 ---- a/cmd/snap-confine/ns-support.c -+++ b/cmd/snap-confine/ns-support.c -@@ -39,6 +39,7 @@ - #include - - #include "../libsnap-confine-private/cgroup-freezer-support.h" -+#include "../libsnap-confine-private/cgroup-support.h" - #include "../libsnap-confine-private/classic.h" - #include "../libsnap-confine-private/cleanup-funcs.h" - #include "../libsnap-confine-private/infofile.h" -@@ -486,7 +487,7 @@ static int sc_inspect_and_maybe_discard_stale_ns(int mnt_fd, - debug("preserved mount is not stale, reusing"); - return 0; - case SC_DISCARD_SHOULD: -- if (sc_cgroup_freezer_occupied(inv->snap_instance)) { -+ if (!sc_cgroup_is_v2() && sc_cgroup_freezer_occupied(inv->snap_instance)) { - // Some processes are still using the namespace so we cannot discard it - // as that would fracture the view that the set of processes inside - // have on what is mounted. -diff --git a/cmd/snap-confine/snap-confine.c b/cmd/snap-confine/snap-confine.c -index ac2f0375df8..a4f49883262 100644 ---- a/cmd/snap-confine/snap-confine.c -+++ b/cmd/snap-confine/snap-confine.c -@@ -35,6 +35,7 @@ - #include "../libsnap-confine-private/apparmor-support.h" - #include "../libsnap-confine-private/cgroup-freezer-support.h" - #include "../libsnap-confine-private/cgroup-pids-support.h" -+#include "../libsnap-confine-private/cgroup-support.h" - #include "../libsnap-confine-private/classic.h" - #include "../libsnap-confine-private/cleanup-funcs.h" - #include "../libsnap-confine-private/feature.h" -@@ -574,8 +575,11 @@ static void enter_non_classic_execution_environment(sc_invocation * inv, - - /** Populate and join the device control group. */ - struct snappy_udev udev_s; -- if (snappy_udev_init(inv->security_tag, &udev_s) == 0) -- setup_devices_cgroup(inv->security_tag, &udev_s); -+ if (snappy_udev_init(inv->security_tag, &udev_s) == 0) { -+ if (sc_cgroup_is_v2()) { -+ setup_devices_cgroup(inv->security_tag, &udev_s); -+ } -+ } - snappy_udev_cleanup(&udev_s); - - /** -@@ -675,9 +679,11 @@ static void enter_non_classic_execution_environment(sc_invocation * inv, - die("cannot set effective group id to root"); - } - } -- sc_cgroup_freezer_join(inv->snap_instance, getpid()); -- if (sc_feature_enabled(SC_FEATURE_REFRESH_APP_AWARENESS)) { -- sc_cgroup_pids_join(inv->security_tag, getpid()); -+ if (!sc_cgroup_is_v2()) { -+ sc_cgroup_freezer_join(inv->snap_instance, getpid()); -+ if (sc_feature_enabled(SC_FEATURE_REFRESH_APP_AWARENESS)) { -+ sc_cgroup_pids_join(inv->security_tag, getpid()); -+ } - } - if (geteuid() == 0 && real_gid != 0) { - if (setegid(real_gid) != 0) { - -From a0d617f5404f63e7792394d9609cbae83f2aaedc Mon Sep 17 00:00:00 2001 -From: Michael Vogt -Date: Mon, 15 Jul 2019 21:03:40 +0200 -Subject: [PATCH 2/4] snap-confine: fix snappy_udev_init() check - -Co-Authored-By: Ian Johnson ---- - cmd/snap-confine/snap-confine.c | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/cmd/snap-confine/snap-confine.c b/cmd/snap-confine/snap-confine.c -index a4f49883262..e1d4905395f 100644 ---- a/cmd/snap-confine/snap-confine.c -+++ b/cmd/snap-confine/snap-confine.c -@@ -576,7 +576,7 @@ static void enter_non_classic_execution_environment(sc_invocation * inv, - /** Populate and join the device control group. */ - struct snappy_udev udev_s; - if (snappy_udev_init(inv->security_tag, &udev_s) == 0) { -- if (sc_cgroup_is_v2()) { -+ if (!sc_cgroup_is_v2()) { - setup_devices_cgroup(inv->security_tag, &udev_s); - } - } - -From 64e2759c455ef31b48cbae1225b883e84f6f4a6c Mon Sep 17 00:00:00 2001 -From: Michael Vogt -Date: Mon, 22 Jul 2019 17:28:56 +0200 -Subject: [PATCH 3/4] cgroup-support.c: define CGRUOP2_SUPER_MAGIC if not - defined and add comment around sc_cgroup_is_v2 - ---- - cmd/libsnap-confine-private/cgroup-support.c | 8 +++++++- - 1 file changed, 7 insertions(+), 1 deletion(-) - -diff --git a/cmd/libsnap-confine-private/cgroup-support.c b/cmd/libsnap-confine-private/cgroup-support.c -index c61d516a474..a790f3032a6 100644 ---- a/cmd/libsnap-confine-private/cgroup-support.c -+++ b/cmd/libsnap-confine-private/cgroup-support.c -@@ -69,9 +69,15 @@ void sc_cgroup_create_and_join(const char *parent, const char *name, pid_t pid) - } - - static const char *cgroup_dir = "/sys/fs/cgroup"; -+ - // from statfs(2) --static const int CGROUP2_SUPER_MAGIC = 0x63677270; -+#ifndef CGRUOP2_SUPER_MAGIC -+#define CGROUP2_SUPER_MAGIC = 0x63677270; -+#endif - -+// Detect if we are running in cgroup v2 unified mode (as opposed to -+// hybrid or legacy) The algorithm is described in -+// https://systemd.io/CGROUP_DELEGATION.html - bool sc_cgroup_is_v2() { - struct statfs buf; - - -From 5705fcd6c6c684cffbe54dda5cef8b3aa918e838 Mon Sep 17 00:00:00 2001 -From: Michael Vogt -Date: Tue, 23 Jul 2019 15:15:16 +0200 -Subject: [PATCH 4/4] cmd/libsnap-confine-private/cgroup-support.c: fix - incorrect #define - -Co-Authored-By: Maciej Borzecki ---- - cmd/libsnap-confine-private/cgroup-support.c | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/cmd/libsnap-confine-private/cgroup-support.c b/cmd/libsnap-confine-private/cgroup-support.c -index a790f3032a6..ee955b9441e 100644 ---- a/cmd/libsnap-confine-private/cgroup-support.c -+++ b/cmd/libsnap-confine-private/cgroup-support.c -@@ -72,7 +72,7 @@ static const char *cgroup_dir = "/sys/fs/cgroup"; - - // from statfs(2) - #ifndef CGRUOP2_SUPER_MAGIC --#define CGROUP2_SUPER_MAGIC = 0x63677270; -+#define CGROUP2_SUPER_MAGIC 0x63677270 - #endif - - // Detect if we are running in cgroup v2 unified mode (as opposed to diff --git a/snapd.spec b/snapd.spec index cd85dda..9717f73 100644 --- a/snapd.spec +++ b/snapd.spec @@ -73,7 +73,7 @@ %{!?_systemd_system_env_generator_dir: %global _systemd_system_env_generator_dir %{_prefix}/lib/systemd/system-environment-generators} Name: snapd -Version: 2.41 +Version: 2.42 Release: 1%{?dist} Summary: A transactional software package manager License: GPLv3 @@ -81,12 +81,6 @@ URL: https://%{provider_prefix} Source0: https://%{provider_prefix}/releases/download/%{version}/%{name}_%{version}.no-vendor.tar.xz Source1: https://%{provider_prefix}/releases/download/%{version}/%{name}_%{version}.only-vendor.tar.xz -# Upstream proposed PR: https://github.com/snapcore/snapd/pull/3162 -Patch0001: 0001-cmd-use-libtool-for-the-internal-library.patch - -# Upstream proposed PR: https://github.com/snapcore/snapd/pull/7109 -Patch7109: snapd-PR7109-gracefully-degrade-on-cgroup-v2.patch - %if 0%{?with_goarches} # e.g. el6 has ppc64 arch without gcc-go, so EA tag is required ExclusiveArch: %{?go_arches:%{go_arches}}%{!?go_arches:%{ix86} x86_64 %{arm}} @@ -138,8 +132,8 @@ BuildRequires: golang(github.com/juju/ratelimit) BuildRequires: golang(github.com/kr/pretty) BuildRequires: golang(github.com/kr/text) BuildRequires: golang(github.com/mvo5/goconfigparser) -BuildRequires: golang(github.com/snapcore/go-gettext) BuildRequires: golang(github.com/seccomp/libseccomp-golang) +BuildRequires: golang(github.com/snapcore/go-gettext) BuildRequires: golang(golang.org/x/crypto/openpgp/armor) BuildRequires: golang(golang.org/x/crypto/openpgp/packet) BuildRequires: golang(golang.org/x/crypto/sha3) @@ -165,7 +159,6 @@ BuildRequires: libtool BuildRequires: gcc BuildRequires: gettext BuildRequires: gnupg -BuildRequires: indent BuildRequires: pkgconfig(glib-2.0) BuildRequires: pkgconfig(libcap) BuildRequires: pkgconfig(libseccomp) @@ -231,8 +224,8 @@ Requires: golang(github.com/juju/ratelimit) Requires: golang(github.com/kr/pretty) Requires: golang(github.com/kr/text) Requires: golang(github.com/mvo5/goconfigparser) -Requires: golang(github.com/snapcore/go-gettext) Requires: golang(github.com/seccomp/libseccomp-golang) +Requires: golang(github.com/snapcore/go-gettext) Requires: golang(golang.org/x/crypto/openpgp/armor) Requires: golang(golang.org/x/crypto/openpgp/packet) Requires: golang(golang.org/x/crypto/sha3) @@ -284,7 +277,9 @@ Provides: golang(%{import_path}/boot) = %{version}-%{release} Provides: golang(%{import_path}/boot/boottest) = %{version}-%{release} Provides: golang(%{import_path}/bootloader) = %{version}-%{release} Provides: golang(%{import_path}/bootloader/androidbootenv) = %{version}-%{release} +Provides: golang(%{import_path}/bootloader/bootloadertest) = %{version}-%{release} Provides: golang(%{import_path}/bootloader/grubenv) = %{version}-%{release} +Provides: golang(%{import_path}/bootloader/lkenv) = %{version}-%{release} Provides: golang(%{import_path}/bootloader/ubootenv) = %{version}-%{release} Provides: golang(%{import_path}/client) = %{version}-%{release} Provides: golang(%{import_path}/cmd) = %{version}-%{release} @@ -336,6 +331,7 @@ Provides: golang(%{import_path}/overlord/configstate/proxyconf) = %{version Provides: golang(%{import_path}/overlord/configstate/settings) = %{version}-%{release} Provides: golang(%{import_path}/overlord/devicestate) = %{version}-%{release} Provides: golang(%{import_path}/overlord/devicestate/devicestatetest) = %{version}-%{release} +Provides: golang(%{import_path}/overlord/devicestate/internal) = %{version}-%{release} Provides: golang(%{import_path}/overlord/healthstate) = %{version}-%{release} Provides: golang(%{import_path}/overlord/hookstate) = %{version}-%{release} Provides: golang(%{import_path}/overlord/hookstate/ctlcmd) = %{version}-%{release} @@ -357,10 +353,14 @@ Provides: golang(%{import_path}/polkit) = %{version}-%{release} Provides: golang(%{import_path}/progress) = %{version}-%{release} Provides: golang(%{import_path}/progress/progresstest) = %{version}-%{release} Provides: golang(%{import_path}/release) = %{version}-%{release} +Provides: golang(%{import_path}/sandbox/cgroup) = %{version}-%{release} Provides: golang(%{import_path}/sandbox/seccomp) = %{version}-%{release} Provides: golang(%{import_path}/sanity) = %{version}-%{release} +Provides: golang(%{import_path}/seed) = %{version}-%{release} +Provides: golang(%{import_path}/seed/seedtest) = %{version}-%{release} Provides: golang(%{import_path}/selinux) = %{version}-%{release} Provides: golang(%{import_path}/snap) = %{version}-%{release} +Provides: golang(%{import_path}/snap/channel) = %{version}-%{release} Provides: golang(%{import_path}/snap/naming) = %{version}-%{release} Provides: golang(%{import_path}/snap/pack) = %{version}-%{release} Provides: golang(%{import_path}/snap/snapdir) = %{version}-%{release} @@ -371,6 +371,7 @@ Provides: golang(%{import_path}/spdx) = %{version}-%{release} Provides: golang(%{import_path}/store) = %{version}-%{release} Provides: golang(%{import_path}/store/storetest) = %{version}-%{release} Provides: golang(%{import_path}/strutil) = %{version}-%{release} +Provides: golang(%{import_path}/strutil/chrorder) = %{version}-%{release} Provides: golang(%{import_path}/strutil/quantity) = %{version}-%{release} Provides: golang(%{import_path}/strutil/shlex) = %{version}-%{release} Provides: golang(%{import_path}/systemd) = %{version}-%{release} @@ -638,6 +639,10 @@ sort -u -o devel.file-list devel.file-list %endif %check +for binary in snap-exec snap-update-ns snapctl; do + ldd bin/$binary | grep 'not a dynamic executable' +done + # snapd tests %if 0%{?with_check} && 0%{?with_unit_test} && 0%{?with_devel} %if ! 0%{?with_bundled} @@ -824,6 +829,234 @@ fi %changelog +* Fri Oct 4 2019 Maciek Borzecki - 2.42-1 +- Release snapd 2.42 to Fedora +- Drop libtool patch +- Drop cgroupv2 patch, changes are available in the release + +* Tue Oct 01 2019 Michael Vogt +- New upstream release 2.42 + - tests: disable {contacts,calendar}-service tests on debian-sid + - tests/main/snap-run: disable strace test cases on Arch + - cmd/system-shutdown: include correct prototype for die + - snap/naming: add test for hook name connect-plug-i2c + - cmd/snap-confine: allow digits in hook names + - gadget: do not fail the update when old gadget snap is missing + bare content + - tests: disable {contacts,calendar}-service tests on Arch Linux + - tests: move "centos-7" to unstable systems + - interfaces/docker-support,kubernetes-support: misc updates for + strict k8s + - packaging: remove obsolete usr.lib.snapd.snap-confine in + postinst + - tests: add test that ensures our snapfuse binary actually works + - packaging: use snapfuse_ll to speed up snapfuse performance + - usersession/userd: make sure to export DBus interfaces before + requesting a name + - data/selinux: allow snapd to issue sigkill to journalctl + - store: download propagates options to delta download + - wrappers: allow snaps to install icon theme icons + - debug: state-inspect debugging utility + - sandbox/cgroup: introduce cgroup wrappers package + - snap-confine: fix return value checks for udev functions + - cmd/model: output tweaks, add'l tests + - wrappers/services: add ServicesEnableState + unit tests + - tests: fix newline and wrong test name pointed out in previous PRs + - tests: extend mount-ns test to handle mimics + - run-checks, tests/main/go: allow gofmt checks to be skipped on + 19.10 + - tests/main/interfaces-{calendar,contacts}-service: disable on + 19.10 + - tests: part3 making tests work on ubuntu-core-18 + - tests: fix interfaces-timeserver-control on 19.10 + - overlord/snapstate: config revision code cleanup and extra tests + - devicestate: allow remodel to different kernels + - overlord,daemon: adjust startup timeout via EXTEND_TIMEOUT_USEC + using an estimate + - tests/main/many: increase kill-timeout to 5m + - interfaces/kubernetes-support: allow systemd-run to ptrace read + unconfined + - snapstate: auto transition on experimental.snapd-snap=true + - tests: retry checking until the written file on desktop-portal- + filechooser + - tests: unit test for a refresh failing on configure hook + - tests: remove mount_id and parent_id from mount-ns test data + - tests: move classic-ubuntu-core-transition* to nightly + - tests/mountinfo-tool: proper formatting of opt_fields + - overlord/configstate: special-case "null" in transaction Changes() + - snap-confine: fallback gracefully on a cgroup v2 only system + - tests: debian sid now ships new seccomp, adjust tests + - tests: explicitly restore after using LXD + - snapstate: make progress reporting less granular + - bootloader: little kernel support + - fixme: rename ubuntu*architectures to dpkg*architectures + - tests: run dbus-launch inside a systemd unit + - channel: introduce Resolve and ResolveLocked + - tests: run failing tests on ubuntu eoan due to is now set as + unstable + - systemd: detach rather than unmount .mount units + - cmd/snap-confine: add unit tests for sc_invocation, cleanup memory + leaks in tests + - boot,dirs,image: introduce boot.MakeBootable, use it in image + instead of ad hoc code + - cmd/snap-update-ns: clarify sharing comment + - tests/overlord/snapstate: refactor for cleaner test failures + - cmd/snap-update-ns: don't propagate detaching changes + - interfaces: allow reading mutter Xauthority file + - cmd/snap-confine: fix /snap duplication in legacy mode + - tests: fix mountinfo-tool filtering when used with rewriting + - seed,image,o/devicestate: extract seed loading to seed/seed16.go + - many: pass the rootdir and options to bootloader.Find + - tests: part5 making tests work on ubuntu-core-18 + - cmd/snap-confine: keep track of snap instance name and the snap + name + - cmd: unify die() across C programs + - tests: add functions to make an abstraction for the snaps + - packaging/fedora, tests/lib/prepare-restore: helper tool for + packing sources for RPM + - cmd/snap: improve help and error msg for snapshot commands + - hookstate/ctlcmd: fix snapctl set help message + - cmd/snap: don't append / to snap name just because a dir exists + - tests: support fastly-global.cdn.snapcraft.io url on proxy-no-core + test + - tests: add --quiet switch to retry-tool + - tests: add unstable stage for travis execution + - tests: disable interfaces-timeserver-control on 19.10 + - tests: don't guess in is_classic_confinement_supported + - boot, etc: simplify BootParticipant (etc) usage + - tests: verify retry-tool not retrying missing commands + - tests: rewrite "retry" command as retry-tool + - tests: move debug section after restore + - cmd/libsnap-confine-private, cmd/s-c: use constants for + snap/instance name lengths + - tests: measure behavior of the device cgroup + - boot, bootloader, o/devicestate: boot env manip goes in boot + - tests: enabling ubuntu 19.10-64 on spread.yaml + - tests: fix ephemeral mount table in left over by prepare + - tests: add version-tool for comparing versions + - cmd/libsnap: make feature flag enum 1< - 2.41-1 - Release 2.41 to Fedora (RH#1722957) - Add proposed patches to gracefully degrade on cgroups v2 (RH#1438079)