need help with freedomotic snappy app

[Jamie Strandboge]

On 05/19/2015 11:27 AM, mauro at freedomotic.com wrote:
> HiJamie
> sorry for delay.
> Thanks for your suggestions.
> I created another package but I can't install on Raspi2 with the following
> error
> Last login: Tue May 19 16:01:40 2015
> (RaspberryPi2)ubuntu at localhost:~$ dir
> freedomotic_5.6.0_armhf.snap
> (RaspberryPi2)ubuntu at localhost:~$ sudo snappy install
> --allow-unauthenticated freedomotic_5.6.0_armhf.snap
> Installing freedomotic_5.6.0_armhf.snap
> 2015/05/19 16:05:55 Signature check failed, but installing anyway as
> requested
> mkdir /apps/freedomotic/5.6.0/jre/lib/security: permission denied
> unpack freedomotic_5.6.0_armhf.snap to /apps/freedomotic/5.6.0 failed with
> exit status 1
> (RaspberryPi2)ubuntu at localhost:~$
> 
> I'm using the image from
> http://people.canonical.com/~lool/pi2-device-and-oem/pi2.img.gz
> The installed ubuntu core is 2015-04-10 and not updated to May as in your
> mail. The update command doesn't work as reported in
> https://developer.ubuntu.com/en/snappy/start/
> 
Loic, can you comment on this?

> Do you think it's related to missing updated core?
> And how to solve?
> 

No, '/apps/freedomotic/5.6.0/jre/lib/security' is in the install directory and
writing to this is a violation of the snappy FHS[5] (same type of error that I
mentioned before (see below)).

I'm not sure what the app is trying to do with this directory. You either need
to ship the directory and what the apps expects there or modify the app to
create this directory in SNAP_APP_DATA_PATH.

...

>>
>> After making these changes, the app gets farther along, but has another
>> security denial:
>> apparmor="DENIED" operation="mknod"
>> profile="freedomotic.sideload_freedomotic_5.6.0"
>> name="/apps/freedomotic.sideload/5.6.0/freedomotic/plugins/objects/base-t
>> hings/data/cmd/index.txt" pid=6557 comm="java" requested_mask="c"
>> denied_mask="c" fsuid=0 ouid=0
>>
>> the app is incorrectly trying to write to the read-only install
>> directory-- security policy enforces the snappy FHS[5]. It should instead
>> be modified to write out to SNAP_APP_DATA_PATH.
...

>> References:
>> [5]https://developer.ubuntu.com/en/snappy/guides/filesystem-layout/


-- 
Jamie Strandboge                 http://www.ubuntu.com/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/snappy-devel/attachments/20150519/55c22f7b/attachment.pgp>