New bugfix release 2.55.3

New bugfix release

New bugfix release 2.55.2

New snapd release 2.55.2

See https://forum.snapcraft.io/t/the-snapd-roadmap/1973 for high-level overview.

• cmd/snap-update-ns: actually use entirely non-existent dirs

New bugfix release 2.55.1

New snapd release 2.55.1

See https://forum.snapcraft.io/t/the-snapd-roadmap/1973 for high-level overview.

• cmd/snap-update-ns/change_test.go: use non-exist name foo-runtime
  instead

New major release 2.55

What's Changed

• release: 2.54 by @mvo5 in #11185
• build-aux: detect/fix dirty git revisions while snapcraft building by @mvo5 in #11188
• tests: tidy up the top-level of ubuntu-seed during tests by @pedronis in #11186
• release: 2.54.1 by @mvo5 in #11191
• tests: fixed an issue with retrieval of the squashfuse repo by @are-scenic in #11183
• cmd/snap-device-helper: fix variable name typo in the unit tests by @bboozzoo in #11193
• packaging: Update openSUSE spec file with apparmor-parser and datadir for fish by @skriesch in #11192
• i/b/mount-control: support creating tmpfs mounts by @mardy in #11190
• gadget: do not crash if gadget.yaml has an empty Volumes section by @mvo5 in #11182
• data/selinux: allow poking /proc/xen by @bboozzoo in #11194
• tests: fix remodel-kernel test when running on external devices by @mvo5 in #11195
• tests/core/failover: replace boot-state with snap debug boot-vars by @bboozzoo in #11196
• tests/lib/tools/tests.invariant: add invariant for detecting broken snaps by @anonymouse64 in #11163
• build-aux/snap/snapcraft.yaml: use build-packages, don't fail dirty builds by @anonymouse64 in #11197
• tests/nested/manual/core20-to-core22: wait for device to be initialized before starting a remodel by @bboozzoo in #11203
• tests/lib/tools/tests.invariant: simplify check by @anonymouse64 in #11204
• packaging, bloader, github: restore cleanliness of snapd info file; check in GA workflow by @anonymouse64 in #11211
• tests: do not test microk8s-smoke on arm by @mvo5 in #11213
• tests: ensure that test-snapd-kernel-module-load is removed by @mvo5 in #11215
• tests: exclude interfaces-kernel-module load on arm by @mvo5 in #11214
• gadget/install/partition.go: wait for udev settle when creating partitions too by @anonymouse64 in #11127
• interfaces: add a polkit interface by @jhenstridge in #10219
• overlord: fix issue with concurrent execution of two snapd processes by @mardy in #11146
• packaging: merge 2.54.2 changelog back to master by @anonymouse64 in #11217
• tests: fix testing in trusty qemu by @mvo5 in #11212
• tests: do not run k8s smoke test on 32 bit systems by @mvo5 in #11222
• tests: fix fwupd interface test in debian sid by @mardy in #11225
• cmd/snap, cmd/snap-confine: extend manpage, update links by @bboozzoo in #11224
• data/env: treat XDG_DATA_DIRS like PATH for fish by @jduchateau in #11221
• usersession: implement method to close notifications via usersession REST API by @stolowski in #11066
• cmd: support installing multiple local snaps by @MiguelPires in #11201
• tests/lib/uc20-create-partitions/main.go: setup a logger for messages by @anonymouse64 in #11219
• tests: re-enable kernel-module-load tests on arm by @mardy in #11223
• gadget: allow gadget struct with unspecified filesystem to match part with fs by @anonymouse64 in #11207
• cmd/snap/quota: fix typo in the help message by @anonymouse64 in #11238
• spread.yaml: add debian-{10,11}, drop debian-9 by @mvo5 in #11227
• HACKING.md: add dbus-x11 to packages needed to run unit tests by @anonymouse64 in #11237
• tests: workaround missing bluez snap by @mardy in #11226
• gadget: resolve index ambiguity between OnDiskStructure and LaidOutStructure by @anonymouse64 in #11234
• cmd/snap, daemon: add debug command for getting OnDiskVolume dump by @anonymouse64 in #11229
• tests/lib/prepare-restore: use go install rather than go get by @bboozzoo in #11239
• tests: ubuntu-image 2.0 compatibility fixes by @bboozzoo in #11073
• tests: fix parallel-install-basic on external UC16 devices by @mvo5 in #11240
• tests: fix tests/core/create-user on testflinger pi3 by @mvo5 in #11246
• cmd/snap: rm unnecessary validation by @MiguelPires in #11249
• tests/main/snap-info: use yaml.safe_load rather than yaml.load by @bboozzoo in #11243
• cmd/snap: setup tracking cgroup when invoking a service directly as a user by @bboozzoo in #11231
• interfaces: allow access to new at-spi socket location in desktop-legacy by @jhenstridge in #11208
• spread-shellcheck: use safe_load rather than load with a loder by @bboozzoo in #11254
• tests: fix uses of fakestore new-snap-declaration by @bboozzoo in #11199
• gadget: misc helper fixes for implicit system-data role handling by @anonymouse64 in #11230
• gadget: fix typo with filesystem message by @anonymouse64 in #11257
• tests/nested/manual/minimal-smoke: bump mem to 512 for unencrypted case too by @anonymouse64 in #11259
• mount-control: step 3 by @mardy in #10864
• systemd: add NeedDaemonReload to the unit state by @kubiko in #11241
• overlord/h/c/umount: remove handling of required parameter by @mardy in #11266
• go.mod: tidy up by @bboozzoo in #11265
• i/builtin/xilinx-dma: add interface for Xilinx DMA driver by @alexclewontin in #10924
• store: fix flaky test by @MiguelPires in #11267
• o/snapstate: migrate to hidden dir on refresh/install by @MiguelPires in #11169
• o/ifacestate: add convenience Active() method to ConnectionState struct by @stolowski in #11233
• systemd: enable batched calls for systemd calls operation on units by @kubiko in #11242
• cmd/snap: adjust /cmd to migration changes by @MiguelPires in #11262
• tests: setup snapd remodel testing bits by @bboozzoo in #11122
• run-checks, check-commit-email.py: check commit email addresses for validity by @anonymouse64 in #11269
• configcore: implement netplan write support via dbus by @mvo5 in #10752
• check-commit-email: do not fail when current dir is not under git by @bboozzoo in #11281
• tests/lib/prepare.sh: add debug kernel command line params via gadget on UC20 by @anonymouse64 in #10716
• gadget/update.go: add DiskTraitsFromDeviceAndValidate by @anonymouse64 in #11084
• packaging/ubuntu-16.04/control: adjust libfuse3 dependency as suggested by @anonymouse64 in #11276
• osutils: deal with ENOENT in UserMaybeSudoUser() by @mvo5 in #11275
• tests: add jammy to spread executions by @sergiocazzolato in #11274
• spread-shellcheck: add a caching layer by @bboozzoo in #11279
• packaging,tests: fix running autopkgtest by @mvo5 in #11253
• tests: cross store remodel by @bboozzoo in #11277
• interfaces/shared-memory: support single wild-cards in the read/write paths by @anonymouse64 in #11268
• tests: spread test snap dir migration by @MiguelPires in #11280
• tests: fix running tests.invariant on testflinger systems by @mvo5 in #11250
• packaging, systemd: fix socket (re-)start race by @xnox in #11287
• cmd/snapd-apparmor: fix bad variable initialization by @bboozzoo in #11285
• osutil/mkfs: Expose option for --lib flag in fakeroot call by @jawn-smith in #11284
• tests: drop 21.04 tests (it's EOL) by @mvo5 in #11283
• overlord: small refactoring of group quota implementation in preparation of multiple quota values by @Meulengracht in #11247
• mkversion: check t...

New bugfix release 2.54.4

New bugfix release

• t/m/interfaces-network-manager: use different channel depending on
  system
• many: backport attrer interface changes to 2.54
• tests: skip version check on lp-1871652 for sru validation
• i/builtin: allow modem-manager interface to access some files in
  sysfs
• snapstate: make "remove vulnerable version" message more
  friendly
• tests: fix "undo purging" step in snap-run-devmode-classic
• o/snapstate: deal with potentially invalid type of refresh.retain
  value due to lax validation
• interfaces: custom-device
• packaging/ubuntu-16.04/control: adjust libfuse3 dependency
• data/env: fix fish env for all versions of fish
• packaging/ubuntu-16.04/snapd.postinst: start socket and service
  first
• interfaces/u2f-devices: add U2F-TOKEN
• interfaces/seccomp: Add rseq to base seccomp template
• tests: remove disabled snaps before calling save_snapd_state
• overlord: skip manager tests on riscv for now
• interfaces/opengl: add support for ARM Mali
• devicestate: ensure permissions of /var/lib/snapd/void are
  correct
• cmd/snap-update-ns: convert some unexpected decimal file mode
  constants to octal.
• interfaces/shared-memory: support single wild-cards in the
  read/write paths
• packaging: fix running autopkgtest
• i/builtin/xilinx-dma-host: add interface for Xilinx DMA driver
• tests: fix tests/core/create-user on testflinger pi3
• tests: fix parallel-install-basic on external UC16 devices
• tests: re-enable kernel-module-load tests on arm
• tests: do not run k8s smoke test on 32 bit systems

New security update release 2.54.3

• SECURITY UPDATE: Local privilege escalation
  • snap-confine: Add validations of the location of the snap-confine
    binary within snapd.
  • snap-confine: Fix race condition in snap-confine when preparing a
    private mount namespace for a snap.
  • CVE-2021-44730
  • CVE-2021-44731
• SECURITY UPDATE: Data injection from malicious snaps
  • interfaces: Add validations of snap content interface and layout
    paths in snapd.
  • CVE-2021-4120
  • LP: #1949368

New bugfix release 2.54.2

New snapd release 2.54.2

See https://forum.snapcraft.io/t/the-snapd-roadmap/1973 for high-level overview.

• tests: exclude interfaces-kernel-module load on arm
• tests: ensure that test-snapd-kernel-module-load is removed
• tests: do not test microk8s-smoke on arm
• tests/core/failover: replace boot-state with snap debug boot-vars
• tests: use snap info|awk to extract tracking channel
• tests: fix remodel-kernel test when running on external devices
• .github/workflows/test.yaml: also check internal snapd version for cleanliness
• packaging/ubuntu-16.04/rules: eliminate seccomp modification
• bootloader/assets/grub_*cfg_asset.go: update Copyright
• build-aux/snap/snapcraft.yaml: adjust comment about get-version
• .github/workflows/test.yaml: add check in github actions for dirty snapd snaps
• build-aux/snap/snapcraft.yaml: use build-packages, don't fail dirty builds
• data/selinux: allow poking /proc/xen

New bugfix release 2.54.1

New bugfix release for the major 2.54 release:

• buid-aux: set version before calling ./generate-packaging-dir
  This fixes the "dirty" suffix in the auto-generated version

New major release 2.54

Major update for snapd 2.54

New bugfix release 2.53.4

New snapd release 2.53.4

See https://forum.snapcraft.io/t/the-snapd-roadmap/1973 for high-level overview.

• devicestate: mock devicestate.MockTimeutilIsNTPSynchronized to avoid host env leaking into tests
• timeutil: return NoTimedate1Error if it can't connect to the system bus

And thus ends the terrible reign of snapd 2.53.3 which failed to build in launchpad giving birth to snapd 2.53.4