[Merge] ~simpoir/livecd-rootfs/+git/livecd-rootfs:kinetic-update-apparmor-feat into livecd-rootfs:ubuntu/master

[Dimitri John Ledkov]

On Mon, 17 Oct 2022, 20:30 Steve Langasek, <mp+431611 at code.launchpad.net>
wrote:

> Review: Needs Information
>
> I agree that we should ensure snapd is generating correct cache in the
> chroot that will be applicable on the booted system.
>
> I think it's terrible that any of this stuff is hard-coded in
> livecd-rootfs source.
>
> Any thoughts on how to keep this up-to-date going forward without
> maintaining a clone of a snapshot of a /sys subtree?
>


The changes that result in new seeding capabilities happen infrequently -
when kernel gains new confinement capabilities and snapd learns to use
them. Thus this information roughly needs to be updated twice a year or so.
None of our build time infrastructure boots a target kernel. Ideally this
wouldn't be needed if the livefs builder would boot the target release
instead of the last LTS. Or alternatively we could code livecd-roots to
boot and capture those directories. There is some declarative description
of these, but at the moment kernel doesn't expose those at build time, nor
can snapd-preseed consume these. Hence originally the rsync copy was done
to make all of this work.

>

-- 
https://code.launchpad.net/~simpoir/livecd-rootfs/+git/livecd-rootfs/+merge/431611
Your team Ubuntu Core Development Team is subscribed to branch livecd-rootfs:ubuntu/master.