[ubuntu/xenial-proposed] snapd 2.32.3.2 (Accepted)

Michael Vogt michael.vogt at ubuntu.com
Wed Apr 11 12:53:07 UTC 2018


snapd (2.32.3.2) xenial; urgency=medium

  * New upstream release, LP: #1756173
    - errtracker: make TestJournalErrorSilentError work on
      gccgo
    - errtracker: check for whoopsie.service instead of reading
      /etc/whoopsie

snapd (2.32.3.1) xenial; urgency=medium

  * New upstream release, LP: #1756173
    - debian: add gbp.conf script to build snapd via `gbp
      buildpackage`
    - tests: add check for OOM error after each test
    - cmd/snap-seccomp: graceful handling of non-multilib host
    - interfaces/shutdown: allow calling SetWallMessage
    - data/selinux: Give snapd access to more aspects of the system
    - daemon,overlord/hookstate: stop/wait for running hooks before
      closing the snapctl socket
    - cmd/snap-confine: ignore missing cgroups in snap-device-helper
    - interfaces: misc updates for default, firewall-control, fuse-
      support and process-control
    - overlord: test fix, address corner case

snapd (2.32.3) xenial; urgency=medium

  *  New upstream release, LP: #1756173
    - ifacestate: add to the repo also snaps that are pending being
      activated but have a done setup-profiles
    - snapstate: inject autoconnect tasks in doLinkSnap for regular
      snaps
    - cmd/snap-confine: allow creating missing gl32, gl, vulkan dirs
    - errtracker: add more fields to aid debugging
    - interfaces: make system-key more robust against invalid fstab
      entries
    - cmd/snap-mgmt: remove timers, udev rules, dbus policy files
    - overlord,interfaces: be more vocal about broken snaps and read
      errors
    - osutil: fix fstab parser to allow for # in field values

snapd (2.32.2) xenial; urgency=medium

  *  New upstream release, LP: #1756173
    - interfaces/content: add rule so slot can access writable files at
      plug's mountpoint
    - tests: adjust canonical-livepatch test on GCE
    - interfaces/serial: change pattern not to exclude /dev/ttymxc
    - spread.yaml: switch Fedora 27 tests to manual
    - store: Sections and WriteCatalogs need to strictly send device
      auth only if the device has a custom store
    - configstate: give a chance to immediately recompute the next
      refresh time when schedules are set
    - cmd/snap-confine: attempt to detect if multiarch host uses arch
      triplets
    - vendor: update gopkg.in/yaml.v2 to the latest version (#4945)

snapd (2.32.1) xenial; urgency=medium

  *  New upstream release, LP: #1756173
    - cmd/snapd: make sure signal handlers are established during early
      daemon startup
    - osutil: use tilde suffix for temporary files used for atomic
      replacement
    - cmd/snap-confine: apparmor: allow creating prefix path for
      gl/vulkan
    - tests: disentangle etc vs extrausers in core tests
    - packaging: fix changelogs' typo

snapd (2.32) xenial; urgency=medium

  *  New upstream release, LP: #1756173
    - snap: make `snap run` look at the system-key for security profiles
    - overlord/configstate: change how ssh is stopped/started
    - cmd/snap-confine: nvidia: preserve globbed file prefix
    - advisor: deal with missing commands.db file
    - interfaces,release: probe seccomp features lazily
    - interfaces: harden snap-update-ns profile
    - polkit: Pass caller uid to PolicyKit authority
    - tests: change debug for layout test
    - cmd/snap-confine: don't use per-snap s-u-n profile
    - many: backported fixes for layouts and symlinks
    - cmd/snap-confine: nvidia: add tls/libnvidia-tls.so* glob
    - cmd/snap-update-ns: use x-snapd.{synthetic,needed-by} in practice
    - snap: Call SanitizePlugsSlots from InfoFromSnapYaml
    - cmd/snap-confine: fix ptrace rule with snap-confine peer
    - tests: update tests to deal with s390x quirks
    - snapstate: add compat mode for default-provider"snapname:ifname"
    - snap-confine: fallback to /lib/udev/snappy-app-dev if the core is
      older
    - tests: a bunch of test fixes for s390x from looking at the
      autopkgtest logs
    - packaging: recommend "gnupg" instead of "gnupg1 | gnupg"
    - interfaces/builtin: let MM change qmi device attributes
    - debian: undo snap.mount system unit removal
    - snap: don't create empty Change with "Hold" state on disconnect
    - tests: add workaround for s390x failure
    - tests: make autopkgtest tests more targeted
    - many: propagate contexts enough to be able to mark store
      operations done from the Ensure loop
    - store: cleanup test naming, dropping remoteRepo and
      UbuntuStore(Repository)? references
    - store: reorg auth refresh
    - tests: autopkgtest may have non edge core too
    - data: translate polkit strings
    - snapstate: put layout feature behind feature flag
    - errtracker: respect the /etc/whoopsie configuration
    - overlord/snapstate: hold refreshes for 2h after seeding on classic
    - many: cherry-pick relevant `go vet` 1.10 fixes to 2.32
    - snap/squashfs: when installing from seed, try symlink before cp
    - wrappers: services which are socket or timer activated should not
      be started during boot
    - many: generate and use per-snap snap-update-ns profile
    - many: support holding refreshes by setting refresh.hold
    - snap-confine, snap-seccomp: utilize new seccomp logging features
    - many: remove snapd.refresh.{timer,service}
    - many: add the snapd-generator
    - polkit: do not shadow dbus errors, avoid panic in case of errors
    - polkit: ensure error is properly set if dialog is dismissed
    - xdgopenproxy: integrate xdg-open implementation into snapctl
    - userd: add an OpenFile method for launching local files with xdg-
      open
    - asserts:  use a timestamp for the assertion after the signing key
      has been created
    - ifacestate: be consistent passing Retry.After as named field
    - interfaces/apparmor,system-key: add upperdir snippets for strict
      snaps on livecd
      interfaces/apparmor,system-key: add upperdir snippets for strict
      snaps
    - configstate: when disable "ssh" we must disable the "sshd"
      service
    - store: don't ask for snap_yaml_raw except on the details endpoint
    - osutil: handle file being matched by multiple patterns
    - cmd/snap-update-ns: use recursive bind mounts for writable mimic
    - cmd/snap-update-ns: use syscall.Symlink instead of os.Symlink
    - interfaces/screen-inhibit-control,network-status: fix dbus path
      and interface typos
    - interfaces/network-status: fix use of '/' in interface in DBus
      rule
    - interfaces/screen-inhibit-control: fix use of '.' in path in DBus
      rule
    - overlord/snapstate: fix task iteration order in
      TestDoPrereqRetryWhenBaseInFlight
    - interfaces: add an interface for gnome-online-accounts D-Bus
      service
    - snap: pass full timer spec in `snap run --timer`
    - cmd/snap: introduce `snap run --timer`
    - snapstate: auto install default-providers for content snaps
    - hooks/strutil: limit the number of data read from the hooks to
      avoid oom
    - osutil: aggregate mockable symbols
    - tests: make sure snapd is running before attempting to remove
      leftover snaps
    - timeutil: account for 24h wrap when flattening clock spans
    - many: send  new Snap-CDN header with none or with cloud instance
      placement info as needed
    - cmd/snap-update-ns,testutil: move syscall testing helpers
    - tests: disable interfaces-location-control on s390x
    - tests: new spread test for gpio-memory-control interface
    - tests: spread test for broadcom-asic-control interface
    - tests: make restore of interfaces-password-manager-service more
      robust
    - tests/lib/prepare-restore: sync journal before rotating and
      vacuuming
    - overlord/snapstate: use spread in the default refresh schedule
    - tests: fixes for autopkgtest in bionic
    - timeutil: introduce helpers for checking it time falls inside the
      schedule
    - cmd/snap-repair,httputil: set snap-repair User-Agent on requests
    - vendor: resync formatting of vendor.json
    - snapstate/ifacestate: auto-connect tasks
    - cmd/snap: also include tracking channel in list output.
    - interfaces/apparmor: use snap revision with surrounding '.' when
      replacing in glob
    - debian,vendor: import github.com/snapcore/squashfs and use
    - many: implement "refresh-mode: {restart,endure,...}" for services
    - daemon: make the ast-inspecting test smarter; drop 'exceptions'
    - tests: new spread test for kvm interface
    - cmd/snap: tweaks to 'snap info' output
    - snap: remove underscore from version validator regexp
    - testutil: add File{Matches,Equals,Contains} checkers.
    - snap: improve the version validator's error messages.
    - osutil: refactor EnsureFileState to separate out the comparator
    - timeutil: fix scheduling on nth weekday of the month
    - cmd/snap-update-ns: small refactor for upcoming per-user mounts
    - many: rename snappy-app-dev to snap-device-helper
    - systemd: add default target for timers
    - interfaces: miscellaneous policy updates for home, opengl, time-
      control, network, et al
    - cmd/snap: linter cleanups
    - interfaces/mount: generate per-user mount profiles
    - cmd/snap: use proper help strings for `snap userd --help`
    - packaging: provide a compat symlink for snappy-app-dev
    - interfaces/time-control,netlink-audit: adjust for util-linux
      compiled with libaudit
    - tests: adding new test to validate the raw-usb interface
    - snap: add support for `snap run --gdb`
    - interfaces/builtin: allow MM to access login1
    - packaging: fix build on sbuild
    - store: revert PR#4532 and do not display displayname
    - interfaces/mount: add support for per-user mount entries
    - cmd/system-shutdown: move sync to be even more pessimistic
    - osutil: reimplement IsMounted with LoadMountInfo
    - tests/main/ubuntu-core-services: enable snapd.refresh.timer for
      the test
    - many: don't allow layout construction to silently fail
    - interfaces/apparmor: ensure snap-confine profile for reexec is
      current
    - interfaces/apparmor: generalize apparmor load and unload helpers
    - tests: removing packages which are not needed anymore to generate
      random data
    - snap: improve `snap run` comments/naming
    - snap: allow options for --strace, e.g. `snap run --strace="-tt"`
    - tests: fix spread test failures on 18.04
    - systemd: update comment on SocketsTarget
    - osutil: add and update docstrings
    - osutil: parse mount entries without options field
    - interfaces: mock away real mountinfo/fstab
    - many: move /lib/udev/snappy-app-dev to /usr/lib/snapd/snappy-app-
      dev
    - overlord/snapstate/backend: perform cleanup if snap setup fails
    - tests/lib/prepare: disable snapd.refresh.timer
    - daemon: remove redundant UserOK markings from api commands
    - snap: introduce  timer service data types and validation
    - cmd/snap: fix UX of snap services
    - daemon: allow `snapctl get` from any uid
    - debian, snap: only static link libseccomp in snap-seccomp on
      ubuntu
    - all: snap versions are now validated
    - many: add nfs-home flag to system-key
    - snap: disallow layouts in various special directories
    - cmd/snap: add help for service commands.
    - devicestate: fix autopkgtest failure in
      TestDoRequestSerialErrorsOnNoHost
    - snap,interfaces: allow using bind-file layouts
    - many: move mount code to osutil
    - snap: understand directories in layout blacklist
    - snap: use custom unsquashfsStderrWriter for unsquashfs error
      detection
    - tests/main/user-data-handling: get rid of ordering bug
    - snap: exclude `gettimeofday` from `snap run --strace`
    - tests: check if snapd.socket is active before stoping it
    - snap: sort layout elements before validating
    - strutil: introducing MatchCounter
    - snap: detect unsquashfs write failures
    - spread: add missing ubuntu-18.04-arm64 to available autopkgtest
      machines
    - cmd/snap-confine: allow mounting anywhere, effectively
    - daemon: improve ucrednet code for the snap.socket
    - release, interfaces: add new release.AppArmorFeatures helper
    - snap: apply some golint suggestions
    - many: add interfaces.SystemKey() helper
    - tests: new snaps to test installs nightly
    - tests: skip alsa interface test when the system does not have any
      audio devices
    - debian/rules: workaround for
      https://github.com/golang/go/issues/23721
    - interfaces/apparmor: early support for snap-update-ns snippets
    - wrappers: cleanup enabled service sockets
    - cmd/snap-update-ns: large refactor / update of unit tests
    - interfaces/apparmor: remove leaked future layout code
    - many: allow constructing layouts (phase 1)
    - data/systemd: for debugging/testing use /etc/environment also for
      snap-repair runs
    - cmd/snap-confine: create lib/{gl,gl32,vulkan} under /var/lib/snapd
      and chown as root:root
    - overlord/configstate/config: make [GS]etSnapConfig use *RawMessage
    - daemon: refactor snapFooMany helpers a little
    - cmd/snap-confine: allow snap-update-ns to chown things
    - interfaces/apparmor: use a helper to set the scope
    - overlord/configstate/config: make SetSnapConfig delete on empty
    - osutil: make MkdirAllChown clean the path passed in
    - many: at seeding try to capture cloud information into core config
      under "cloud"
    - cmd/snap: add completion conversion helper to increase DRY
    - many: remove "content" argument from snaptest.MockSnap()
    - osutil: allow using many globs in EnsureDirState
    - cmd/snap-confine: fix read-only filesystem when mounting nvidia
      files in biarch
    - tests: use root path to /home/test/tmp to avoid lack of space
      issue
    - packaging: create /var/lib/snapd/lib/{gl,gl32,vulkan} as part of
      packaging
    - tests: update kill-timeout focused on making tests pass on boards
    - advisor: ensure commands.db has mode 0644 and add test
    - snap: improve validation of snap layouts
    - tests: ensure disabled services are masked
    - interfaces/desktop-legacy,unity7: support gtk2/gvfs gtk_show_uri()
    - systemd, wrappers: start all snap services in one systemctl call
    - mir: software clients need access to shared memory /dev/shm/#*
    - snap: add support for `snap advise-snap pkgName`
    - snap: fix command-not-found on core devices
    - tests: new spead test for openvswitch-support interface
    - tests: add integration for local snap licenses
    - config: add (Get|Set)SnapConfig to do bulk config e.g. from
      snapshots
    - cmd/snap: display snap license information
    - tests: enable content sharing test for $SNAP
    - osutil: add ContextWriter and RunWithContext helpers.
    - osutil: add DirExists and IsDirNotExist

snapd (2.31.2) xenial; urgency=medium

  *  New upstream release, LP: #1745217
    - many: add the snapd-generator
    - polkit: ensure error is properly set if dialog is dismissed
    - xdgopenproxy: integrate xdg-open implementation into snapctl
    - userd: add an OpenFile method for launching local files with xdg-
      open
    - configstate: when disable "ssh" we must disable the "sshd"
      service
    - many: remove snapd.refresh.{timer,service}
    - interfaces/builtin: allow MM to access login1
    - timeutil: account for 24h wrap when flattening clock spans
    - interfaces/screen-inhibit-control,network-status: fix dbus path
      and interface typos
    - systemd, wrappers: start all snap services in one systemctl
      call
    - tests: disable interfaces-location-control on s390x

snapd (2.31.1) xenial; urgency=medium

  * New upstream release, LP: #1745217
    - tests: multiple autopkgtest related fixes for 18.04
    - overlord/snapstate: use spread in the default refresh schedule
    - timeutil: fix scheduling on nth weekday of the month
    - interfaces: miscellaneous policy updates for home, opengl, time-
      control, network, et al
    - cmd/snap: use proper help strings for `snap userd --help`
    - interfaces/time-control,netlink-audit: adjust for util-linux
      compiled with libaudit
    - rules: do not static link on powerpc
    - packaging: revert LDFLAGS rewrite again after building snap-
      seccomp
    - store: revert PR#4532 and do not display displayname
    - daemon: allow `snapctl get` from any uid
    - debian, snap: only static link libseccomp in snap-seccomp on
      ubuntu
    - daemon: improve ucrednet code for the snap.socket

snapd (2.31) xenial; urgency=medium

  * New upstream release, LP: #1745217
    - cmd/snap-confine: allow snap-update-ns to chown things
    - cmd/snap-confine: fix read-only filesystem when mounting nvidia
      files in biarch
    - packaging: create /var/lib/snapd/lib/{gl,gl32,vulkan} as part of
      packaging
    - advisor: ensure commands.db has mode 0644 and add test
    - interfaces/desktop-legacy,unity7: support gtk2/gvfs gtk_show_uri()
    - snap: improve validation of snap layoutsRules for validating
      layouts:
    - snap: fix command-not-found on core devices
    - cmd/snap: display snap license information
    - tests: enable content sharing test for $SNAP
    - userd: add support for a simple UI that can be used from userd
    - snap-confine/nvidia: Support legacy biarch trees for GLVND systems
    - tests: generic detection of gadget and kernel snaps
    - cmd/snap-update-ns: refactor and improve Change.Perform to handle
      EROFS
    - cmd/snap: improve output when snaps were found in a section or the
      section is invalid
    - cmd/snap-confine,tests: hide message about stale base snap
    - cmd/snap-mgmt: fix out of source tree build
    - strutil/quantity: new package that exports formatFoo (from
      progress)
    - cmd/snap: snap refresh --time with new and legacy schedules
    - state: unknown tasks handler
    - cmd/snap-confine,data/systemd: fix removal of snaps inside LXD
    - snap: add io.snapcraft.Settings to `snap userd`
    - spread: remove more EOLed releases
    - snap: tidy up top-level help output
    - snap: fix race in `snap run --strace`
    - tests: update "searching" test to match store changes
    - store: use the "publisher" when populating the "publisher" field
    - snap: make `snap find --section` show all sections
    - tests: new test to validate location control interface
    - many: add new `snap refresh --amend <snap>` command
    - tests/main/kernel-snap-refresh-on-core: skip the whole test if
      edge and stable are the same version
    - tests: set test kernel-snap-refresh-on-core to manual
    - tests: new spread test for interface gpg-keys
    - packaging/fedora: Merge changes from Fedora Dist-Git plus trivial
      fix
    - interfaces: miscellaneous policy updates
    - interfaces/builtin: Replace Solus support with GLVND support
    - tests/main/kernel-snap-refresh-on-core: do not fail if edge and
      stable kernels are the same version
    - snap: add `snap run --strace` to be able to strace snap apps
    - tests: new spread test for ssh-keys interface
    - errtracker: include detected virtualisation
    - tests: add new kernel refresh/revert test for spread-cron
    - interfaces/builtin: blacklist zigbee dongle
    - cmd/snap-confine: discard stale mount namespaces
    - cmd: remove unused execArg0/execEnv
    - snap,interfaces/mount: disallow nobody/nogroup
    - cmd/snap: improve `snap aliases` output when no aliases are
      defined
    - tests/lib/snaps/test-snapd-service: refactor service reload
    - tests: new spread test for gpg-public-keys interface
    - tests: new spread test for ssh-public-keys interface
    - spread: setup machine creation on Linode
    - interfaces/builtin: allow introspecting UDisks2
    - interfaces/builtin: add support for content "source" section
    - tests: new spread test for netlink-audit interface
    - daemon: avoid panic'ing building an error response w/no snaps
      given
    - interfaces/mount,snap: early support for snap layouts
    - daemon: unlock state even if RefreshSchedule() fails
    - arch: add "armv8l" to ubuntuArchFromKernelArch table
    - tests: fix for test interface-netlink-connector
    - data/dbus: add AssumedAppArmorLabel=unconfined
    - advisor: use forked bolt to make it work on ppc
    - overlord/snapstate: record the 'kind' of conflicting change
    - dirs: fix snap mount dir on Manjaro
    - overlord/{snapstate,configstate}, daemon: introduce refresh.timer,
      fallback to refresh.schedule
    - config: add support for `snap set core proxy.no_proxy=...`
    - snap-mgmt: extend spread tests, stop, disable and cleanup snap
      services
    - spread.yaml: add fedora 27
    - cmd/snap-confine: allow snap-update-ns to poke writable holes in
      $SNAP
    - packaging/14.04: move linux-generic-lts-xenial to recommends
    - osutil/sys: ppc has 32-bit getuid already
    - snapstate: make no autorefresh message clearer
    - spread: try to enable Fedora once more
    - overlord/snapstate: do a minimal sanity check on containers
    - configcore: ensure config.txt has a final newline
    - cmd/libsnap-confine-private: print failed mount/umount regardless
      of SNAP_CONFINE_DEBUG
    - debian/tests: add missing autopkgtest test dependencies for debian
    - image: port ini handling to goconfigparser
    - tests/main/snap-service-after-before: add test for after/before
      service ordering
    - tests: enabling opensuse for tests
    - tests: update auto-refresh-private to match messages from current
      master
    - dirs: check if distro 'is like' fedora when picking path to
      libexecdir
    - tests: fix "job canceled" issue and improve cleanup for snaps
    - cmd/libsnap-confine-private: add debug build of libsnap-confine-
      private.a, link it into snap-confine-debug
    - vendor: remove x/sys/unix to fix builds on arm64 and powerpc
    - image: let consume snapcraft export-login files from tooling
    - interfaces/mir: allow Wayland socket and non-root sockets
    - interfaces/builtin: use snap.{Plug,Slot}Info over
      interfaces.{Plug,Slot}
    - tests: add simple snap-mgmt test
    - wrappers: autogenerate After/Before in systemd's service files for
      apps
    - snap: add usage hints in `snap download`
    - snap: provide more meaningful errors for installMany and friends
    - cmd/snap: show header/footer when `snap find` is used without
      arguments
    - overlord/snapstate: for Enable's tasks refer to the first task
      with snap-setup, do not duplicate
    - tests: add hard-coded fully expired macaroons to run related tests
    - cmd/snap-update-ns: new test features
    - cmd/snap-update-ns: we don't want to bind mount symlinks
    - interfaces/mount: test OptsToCommonFlags, filter out x-snapd.
      options
    - cmd/snap-update-ns: untangle upcoming cyclic initialization
    - client, daemon: update user's email when logging in with new
      account
    - tests: ensure snap-confine apparmor profile is parsable
    - snap: do not leak internal errors on install/refresh etc
    - snap: fix missing error check when multiple snaps are refreshed
    - spread: trying to re-enable tests on Fedora
    - snap: fix gadget.yaml parsing for multi volume gadgets
    - snap: give the snap.Container interface a Walk method
    - snap: rename `snap advise-command` to `snap advise-snap --command`
    - overlord/snapstate: no refresh just for hints if there was a
      recent regular full refresh
    - progress: switch ansimeter's Spin() to use a spinner
    - snap: support `command-not-found` symlink for `snap advise-
      command`
    - daemon: store email, ID and macaroon when creating a new user
    - snap: app startup after/before validation
    - timeutil: refresh timer take 2
    - store, daemon/api: Rename MyAppsServer, point to
      dashboard.snapcraft.io instead
    - tests: use "quiet" helper instead of "dnf -q" to get errors on
      failures
    - cmd/snap-update-ns: improve mocking for tests
    - many: implement the advisor backend, populate it from the store
    - tests: make less calls to the package manager
    - tests/main/confinement-classic: enable the test on Fedora
    - snap: do not leak internal network errors to the user
    - snap: use stdout instead of stderr for "fetching" message
    - tests: fix test whoami, share successful_login.exp
    - many: refresh with appropriate creds
    - snap: add new `snap advice-command` skeleton
    - tests: add test that ensures we never parse versions as numbers
    - overlord/snapstate: override Snapstate.UserID in refresh if the
      installing user is gone
    - interfaces: allow socket "shutdown" syscall in default profile
    - snap: print friendly message if `snap keys` is empty
    - cmd/snap-update-ns: add execWritableMimic
    - snap: make `snap info invalid-snap` output more user friendly
    - cmd/snap,  tests/main/classic-confinement: fix snap-exec path when
      running under classic confinement
    - overlord/ifacestate: fix disable/enable cycle to setup security
    - snap: fix snap find " " output
    - daemon: add new polkit action to manage interfaces
    - packaging/arch: disable services when removing
    - asserts/signtool: support for building tools on top that fill-
      in/compute some headers
    - cmd: clarify "This leaves %s tracking %s." message
    - daemon: return "bad-query" error kind for store.ErrBadQuery
    - taskrunner/many: KnownTaskKinds helper
    - tests/main/interfaces-fuse_support: fix confinement, allow
      unmount, fix spread tests
    - snap: use the -no-fragments mksquashfs option
    - data/selinux: allow messages from policykit
    - tests: fix catalog-update wait loop
    - tests/lib/prepare-restore: disable rate limiting in journald
    - tests: change interfaces-fuse_support to be debug friendly
    - tests/main/postrm-purge: stop snapd before purge
    - This is an example of test log:https://paste.ubuntu.com/26215170/
    - tests/main/interfaces-fuse_support: dump more debugging
      information
    - interfaces/dbus: adjust slot policy for listen, accept and accept4
      syscalls
    - tests: save the snapd-state without compression
    - tests/main/searching: handle changes in featured snaps list
    - overlord/snapstate: fix auto-refresh summary for 2 snaps
    - overlord/auth,daemon: introduce an explicit auth.ErrInvalidUser
    - interfaces: add /proc/partitions to system-observe (This addresses
      LP#1708527.)
    - tests/lib: introduce helpers for setting up /dev/random using
      /dev/urandom in project prepare
    - tests: new test for interface network status
    - interfaces: interfaces: also add an app/hook-specific udev RUN
      rule for hotplugging
    - tests: fix external backend for tests that need DEBUG output
    - tests: do not disable refresh timer on external backend
    - client: send all snap related bool json fields
    - interfaces/desktop,unity7: allow status/activate/lock of
      screensavers
    - tests/main: source mkpinentry.sh
    - tests: fix security-device-cgroups-serial-port test for rpi and db
    - cmd/snap-mgmt: add more directories for cleanup and refactor
      purge() code
    - snap: YAML and data structures for app before/after ordering
    - tests: set TRUST_TEST_KEYS=false for all the external backends
    - packaging/arch: install snap-mgmt tool
    - tests: add support on tests for cm3 gadget
    - interfaces/removable-media: also allow 'k' (lock)
    - interfaces: use ConnectedPlug/ConnectedSlot types (step 2)
    - interfaces: rename sanitize methods
    - devicestate: fix misbehaving test when using systemd-resolved
    - interfaces: added Ref() helpers, restored more detailed error
      message on spi iface
    - debian: make "gnupg" a recommends
    - interfaces/many: misc updates for default, browser-support,
      opengl, desktop, unity7, x11
    - interfaces: PlugInfo/SlotInfo/ConnectedPlug/ConnectedSlot
      attribute helpers
    - interfaces: update fixme comments
    - tests: make interfaces-snapd-control-with-manage more robust
    - userd: generalize dbusInterface
    - interfaces: use ConnectedPlug/ConnectedSlot types (step 1)
    - hookstate: add compat "configure-snapd" task.
    - config, overlord/snapstate, timeutil: rename ParseSchedule to
      ParseLegacySchedule
    - tests: adding tests for time*-control interfaces
    - tests: new test to check interfaces after reboot the system
    - cmd/snap-mgmt: fixes
    - packaging/opensuse-42.2: package and use snap-mgmt
    - corecfg: also "mask" services when disabling them
    - cmd/snap-mgmt: introduce snap-mgmt tool
    - configstate: simplify ConfigManager
    - interfaces: add gpio-memory-control interface
    - cmd: disable check-syntax-c
    - packaging/arch: add bash-completion as optional dependency
    - corecfg: rename package to overlord/configstate/configcore
    - wrappers: fix unit tests to use dirs.SnapMountDir
    - osutil/sys: reimplement getuid and chown with the right int type
    - interfaces-netlink-connector: fix sourcing snaps.sh

snapd (2.30) xenial; urgency=medium

  * New upstream release, LP: #1735344
    - tests: set TRUST_TEST_KEYS=false for all the external backends
    - tests: fix external backend for tests that need DEBUG output
    - tests: do not disable refresh timer on external backend
    - client: send all snap related bool json fields
    - interfaces: interfaces: also add an app/hook-specific udev RUN
      rule for hotplugging
    - interfaces/desktop,unity7: allow status/activate/lock of
      screensavers
    - tests/main: source mkpinentry.sh
    - devicestate: use a different nowhere domain
    - interfaces: add ssh-keys, ssh-public-keys, gpg-keys and gpg-public
      keys interfaces
    - interfaces/many: misc updates for default, browser-support, opengl,
      desktop, unity7, x11
    - devicestate: fix misbehaving test when using systemd-resolved
    - interfaces/removable-media: also allow 'k' (lock)
    - interfaces/many: misc updates for default, browser-support,
      opengl, desktop, unity7, x11
    - corecfg: also "mask" services when disabling them
    - tests: add support for autopkgtests on s390x
    - snapstate: support for pre-refresh hook
    - many: allow to configure core before it is installed
    - devicestate: fix unkeyed fields error
    - snap-confine: create mount target for lib32,vulkan on demand
    - snapstate: add support for refresh.schedule=managed
    - cmd/snap-update-ns: teach update logic to handle synthetic changes
    - many: remove configure-snapd task again and handle internally
    - snap: fix TestDirAndFileMethods() test to work with gccgo
    - debian: ensure /var/lib/snapd/lib/vulkan is available
    - cmd/snap-confine: use #include instead of bare include
    - snapstate: store userID in snapstate
    - snapd.dirs: add var/lib/snapd/lib/gl32
    - timeutil, overlod/snapstate: cleanup remaining pieces of timeutil
      weekday support
    - packaging/arch: install missing directories, manpages and version
      info
    - snapstate,store: store if a snap is a paid snap in the sideinfo
    - packaging/arch: pre-create snapd directories when packaging
    - tests/main/manpages: set LC_ALL=C as man may complain if the
      locale is unset or unsupported
    - repo: ConnectedPlug and ConnectedSlot types
    - snapd: fix handling of undo in the taskrunner
    - store: fix download caching and add integration test
    - snapstate: move autorefresh code into autoRefresh helper
    - snapctl: don't error out on start/stop/restart from configure hook
      during install or refresh
    - cmd/snap-update-ns: add planWritableMimic
    - deamon: don't omit responses, even if null
    - tests: add test for frame buffer interface
    - tests/lib: fix shellcheck errors
    - apparmor: generate the snap-confine re-exec profile for
      AppArmor{Partial,Full}
    - tests: remove obsolete workaround
    - snap: use existing files in `snap download` if digest/size matches
    - tests: merge pepare-project.sh into prepare-restore.sh
    - tests: cache snaps to $TESTSLIB/cache
    - tests: set -e, -o pipefail in prepare-restore.sh
    - apparmor: generate the snap-confine re-exec profile for
      AppArmor{Partial,Full}
    - cmd/snap-seccomp: fix uid/gid restrictions tests on Arch
    - tests: document and slightly refactor prepare/restore code
    - snapstate: ensure RefreshSchedule() gives accurate results
    - snapstate: add new refresh-hints helper and use it
    - spread.yaml,tests: move most of project-wide prepare/restore to
      separate file
    - timeutil: introduce helpers for weekdays and TimeOfDay
    - tests: adding new test for uhid interface
    - cmd/libsnap: fix parsing of empty mountinfo fields
    - overlord/devicestate:  best effort to go to early full retries for
      registration on the like of DNS no host
    - spread.yaml: bump delta ref to 2.29
    - tests: adding test to test physical memory observe interface
    - cmd, errtracker: get rid of SNAP_DID_REEXEC environment
    - timeutil: remove support to parse weekday schedules
    - snap-confine: add workaround for snap-confine on 4.13/upstream
    - store: do not log the http body for catalog updates
    - snapstate: move catalogRefresh into its own helper
    - spread.yaml: fix shellcheck issues and trivial refactor
    - spread.yaml: move prepare-each closer to restore-each
    - spread.yaml: increase workers for opensuse to 3
    - tests: force delete when tests are restore to avoid suite failure
    - test: ignore /snap/README
    - interfaces/opengl: also allow read on 'revision' in
      /sys/devices/pci...
    - interfaces/screen-inhibit-control: fix case in screen inhibit
      control
    - asserts/sysdb: panic early if pointed to staging but staging keys
      are not compiled-in
    - interfaces: allow /bin/chown and fchownat to root:root
    - timeutil: include test input in error message in
      TestParseSchedule()
    - interfaces/browser-support: adjust base declaration for auto-
      connection
    - snap-confine: fix snap-confine under lxd
    - store: bit less aggressive retry strategy
    - tests: add new `fakestore new-snap-{declaration,revision}` helpers
    - cmd/snap-update-ns: add secureMkfileAll
    - snap: use field names when initializing composite literals
    - HACKING: fix path in snap install
    - store: add support for flags in ListRefresh()
    - interfaces: remove invalid plugs/slots from SnapInfo on
      sanitization.
    - debian: add missing udev dependency
    - snap/validate: extend socket validation tests
    - interfaces: add "refresh-schedule" attribute to snapd-control
    - interfaces/builtin/account_control: use gid owning /etc/shadow to
      setup seccomp rules
    - cmd/snap-update-ns: tweak changePerform
    - interfaces,tests: skip unknown plug/slot interfaces
    - tests: disable interfaces-network-control-tuntap
    - cmd: use a preinit_array function rather than parsing
      /proc/self/cmdline
    - interfaces/time*_control: explicitly deny noisy read on
      /proc/1/environ
    - cmd/snap-update-ns: misc cleanups
    - snapd: allow hooks to have slots
    - fakestore: add go-flags to prepare for `new-snap-declaration` cmd
    - interfaces/browser-support: add shm path for nwjs
    - many: add magic /snap/README file
    - overlord/snapstate: support completion for command aliases
    - tests: re-enable tun/tap test on Debian
    - snap,wrappers: add support for socket activation
    - repo: use PlugInfo and SlotInfo for permanent plugs/slots
    - tests/interfaces-network-control-tuntap: disable on debian-
      unstable for now
    - cmd/snap-confine: Loosen the NVIDIA Vulkan ICD glob
    - cmd/snap-update-ns: detect and report read-only filesystems
    - cmd/snap-update-ns: re-factor secureMkdirAll into
      secureMk{Prefix,Dir}
    - run-checks, tests/lib/snaps/: shellcheck fixes
    - corecfg: validate refresh.schedule when it is applied
    - tests: adjust test to match stderr
    - snapd: fix snap cookie bugs
    - packaging/arch: do not quote MAKEFLAGS
    - state: add change.LaneTasks helper
    - cmd/snap-update-ns: do not assume 'nogroup' exists
    - tests/lib: handle distro specific grub-editenv naming
    - cmd/snap-confine: Add missing bi-arch NVIDIA filesthe
      `/var/lib/snapd/lib/gl:/var/lib/snapd/lib/gl/vdpau` paths within
    - cmd: Support exposing NVIDIA Vulkan ICD files to the snaps
    - cmd/snap-confine: Implement full 32-bit NVIDIA driver support
    - packaging/arch: packaging update
    - cmd/snap-confine: Support bash as base runtime entry
    - wrappers: do not error on incorrect Exec= lines
    - interfaces: fix udev tagging for hooks
    - tests/set-proxy-store: exclude ubuntu-core-16 via systems: key
    - tests: new tests for network setup control and observe interfaces
    - osutil: add helper for obtaining group ID of given file path
    - daemon,overlord/snapstate: return snap-not-installed error in more
      cases
    - interfaces/builtin/lxd_support: allow discovering of host's os-
      release
    - configstate: add support for configure-snapd for
      snapstate.IgnoreHookError
    - tests:  add a spread test for proxy.store setting together with
      store assertion
    - cmd/snap-seccomp: do not use group 'shadow' in tests
    - asserts/assertstest:  fix use of hardcoded value when the passed
      or default keys should be used
    - interfaces/many: misc policy updates for browser-support, cups-
      control and network-status
    - tests: fix xdg-open-compat
    - daemon: for /v2/logs, 404 when no services are found
    - packaging/fedora: Merge changes from Fedora Dist-Git
    - cmd/snap-update-ns: add new helpers for mount entries
    - cmd/snap-confine: Respect biarch nature of libdirs
    - cmd/snap-confine: Ensure snap-confine is allowed to access os-
      release
    - cmd: fix re-exec bug with classic confinement for host snapd <
      2.28
    - interfaces/kmod: simplify loadModules now that errors are ignored
    - tests: disable xdg-open-compat test
    - tests: add test that checks core reverts on core devices
    - dirs: use alt root when checking classic confinement support
      without …
    - interfaces/kmod: treat failure to load module as non-fatal
    - cmd/snap-update-ns: fix golint and some stale comments
    - corecfg:  support setting proxy.store if there's a matching store
      assertion
    - overlord/snapstate: toggle ignore-validation as needed as we do
      for channel
    - tests: fix security-device-cgroup* tests on devices with
      framebuffer
    - interfaces/raw-usb: match on SUBSYSTEM, not SUBSYSTEMS
    - interfaces: add USB interface number attribute in udev rule for
      serial-port interface
    - overlord/devicestate: switch to the new endpoints for registration
    - snap-update-ns: add missing unit test for desired/current profile
      handling
    - cmd/{snap-confine,libsnap-confine-private,snap-shutdown}: cleanup
      low-level C bits
    - ifacestate: make interfaces.Repository available via state cache
    - overlord/snapstate: cleanups around switch-snap*
    - cmd/snapd,client,daemon: display ignore-validation flag through
      the notes mechanism
    - cmd/snap-update-ns: add logging to snap-update-ns
    - many: have a timestamp on store assertions
    - many: lookup and use the URL from a store assertion if one is set
      for use
    - tests/test-snapd-service: fix shellcheck issues
    - tests: new test for hardware-random-control interface
    - tests: use `snap change --last=install` in snapd-reexec test
    - repo, daemon: use PlugInfo, SlotInfo
    - many: handle core configuration internally instead of using the
      core configure hook
    - tests: refactor and expand content interface test
    - snap-seccomp: skip in-kernel bpf tests for socket() in trusty/i386
    - cmd/snap-update-ns: allow Change.Perform to return changes
    - snap-confine: Support biarch Linux distribution confinement
    - partition/ubootenv: don't panic when uboot.env is missing the eof
      marker
    - cmd/snap-update-ns: allow fault injection to provide dynamic
      result
    - interfaces/mount: exspose mount.{Escape,Unescape}
    - snapctl: added long help to stop/start/restart command
    - cmd/snap-update-ns: create missing mount points automatically.
    - cmd: downgrade log message in InternalToolPath to Debugf()
    - tests: wait for service status change & file update in the test to
      avoid races
    - daemon, store: forward SSO invalid credentials errors as 401
      Unauthorized responses
    - spdx: fix for WITH syntax, require a license name before the
      operator
    - many: reorg things in preparation to make handling of the base url
      in store dynamic
    - hooks/configure: queue service restarts
    - cmd/snap: warn when a snap is not from the tracking channel
    - interfaces/mount: add support for parsing x-snapd.{mode,uid,gid}=
    - cmd/snap-confine: add detection of stale mount namespace
    - interfaces: add plugRef/slotRef helpers for PlugInfo/SlotInfo
    - tests: check for invalid udev files during all tests
    - daemon: use newChange() in changeAliases for consistency
    - servicestate: use taskset
    - many: add support for /home on NFS
    - packaging,spread: fix and re-enable opensuse builds

Date: Wed, 11 Apr 2018 12:40:09 +0200
Changed-By: Michael Vogt <michael.vogt at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/snapd/2.32.3.2
-------------- next part --------------
Format: 1.8
Date: Wed, 11 Apr 2018 12:40:09 +0200
Source: snapd
Binary: golang-github-ubuntu-core-snappy-dev golang-github-snapcore-snapd-dev snapd ubuntu-snappy ubuntu-snappy-cli ubuntu-core-snapd-units snap-confine ubuntu-core-launcher snapd-xdg-open
Architecture: source
Version: 2.32.3.2
Distribution: xenial
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Michael Vogt <michael.vogt at ubuntu.com>
Description:
 golang-github-snapcore-snapd-dev - snappy development go packages.
 golang-github-ubuntu-core-snappy-dev - transitional dummy package
 snap-confine - Transitional package for snapd
 snapd      - Daemon and tooling that enable snap packages
 snapd-xdg-open - Transitional package for snapd-xdg-open
 ubuntu-core-launcher - Transitional package for snapd
 ubuntu-core-snapd-units - transitional dummy package
 ubuntu-snappy - transitional dummy package
 ubuntu-snappy-cli - transitional dummy package
Launchpad-Bugs-Fixed: 1735344 1745217 1756173
Changes:
 snapd (2.32.3.2) xenial; urgency=medium
 .
   * New upstream release, LP: #1756173
     - errtracker: make TestJournalErrorSilentError work on
       gccgo
     - errtracker: check for whoopsie.service instead of reading
       /etc/whoopsie
 .
 snapd (2.32.3.1) xenial; urgency=medium
 .
   * New upstream release, LP: #1756173
     - debian: add gbp.conf script to build snapd via `gbp
       buildpackage`
     - tests: add check for OOM error after each test
     - cmd/snap-seccomp: graceful handling of non-multilib host
     - interfaces/shutdown: allow calling SetWallMessage
     - data/selinux: Give snapd access to more aspects of the system
     - daemon,overlord/hookstate: stop/wait for running hooks before
       closing the snapctl socket
     - cmd/snap-confine: ignore missing cgroups in snap-device-helper
     - interfaces: misc updates for default, firewall-control, fuse-
       support and process-control
     - overlord: test fix, address corner case
 .
 snapd (2.32.3) xenial; urgency=medium
 .
   *  New upstream release, LP: #1756173
     - ifacestate: add to the repo also snaps that are pending being
       activated but have a done setup-profiles
     - snapstate: inject autoconnect tasks in doLinkSnap for regular
       snaps
     - cmd/snap-confine: allow creating missing gl32, gl, vulkan dirs
     - errtracker: add more fields to aid debugging
     - interfaces: make system-key more robust against invalid fstab
       entries
     - cmd/snap-mgmt: remove timers, udev rules, dbus policy files
     - overlord,interfaces: be more vocal about broken snaps and read
       errors
     - osutil: fix fstab parser to allow for # in field values
 .
 snapd (2.32.2) xenial; urgency=medium
 .
   *  New upstream release, LP: #1756173
     - interfaces/content: add rule so slot can access writable files at
       plug's mountpoint
     - tests: adjust canonical-livepatch test on GCE
     - interfaces/serial: change pattern not to exclude /dev/ttymxc
     - spread.yaml: switch Fedora 27 tests to manual
     - store: Sections and WriteCatalogs need to strictly send device
       auth only if the device has a custom store
     - configstate: give a chance to immediately recompute the next
       refresh time when schedules are set
     - cmd/snap-confine: attempt to detect if multiarch host uses arch
       triplets
     - vendor: update gopkg.in/yaml.v2 to the latest version (#4945)
 .
 snapd (2.32.1) xenial; urgency=medium
 .
   *  New upstream release, LP: #1756173
     - cmd/snapd: make sure signal handlers are established during early
       daemon startup
     - osutil: use tilde suffix for temporary files used for atomic
       replacement
     - cmd/snap-confine: apparmor: allow creating prefix path for
       gl/vulkan
     - tests: disentangle etc vs extrausers in core tests
     - packaging: fix changelogs' typo
 .
 snapd (2.32) xenial; urgency=medium
 .
   *  New upstream release, LP: #1756173
     - snap: make `snap run` look at the system-key for security profiles
     - overlord/configstate: change how ssh is stopped/started
     - cmd/snap-confine: nvidia: preserve globbed file prefix
     - advisor: deal with missing commands.db file
     - interfaces,release: probe seccomp features lazily
     - interfaces: harden snap-update-ns profile
     - polkit: Pass caller uid to PolicyKit authority
     - tests: change debug for layout test
     - cmd/snap-confine: don't use per-snap s-u-n profile
     - many: backported fixes for layouts and symlinks
     - cmd/snap-confine: nvidia: add tls/libnvidia-tls.so* glob
     - cmd/snap-update-ns: use x-snapd.{synthetic,needed-by} in practice
     - snap: Call SanitizePlugsSlots from InfoFromSnapYaml
     - cmd/snap-confine: fix ptrace rule with snap-confine peer
     - tests: update tests to deal with s390x quirks
     - snapstate: add compat mode for default-provider"snapname:ifname"
     - snap-confine: fallback to /lib/udev/snappy-app-dev if the core is
       older
     - tests: a bunch of test fixes for s390x from looking at the
       autopkgtest logs
     - packaging: recommend "gnupg" instead of "gnupg1 | gnupg"
     - interfaces/builtin: let MM change qmi device attributes
     - debian: undo snap.mount system unit removal
     - snap: don't create empty Change with "Hold" state on disconnect
     - tests: add workaround for s390x failure
     - tests: make autopkgtest tests more targeted
     - many: propagate contexts enough to be able to mark store
       operations done from the Ensure loop
     - store: cleanup test naming, dropping remoteRepo and
       UbuntuStore(Repository)? references
     - store: reorg auth refresh
     - tests: autopkgtest may have non edge core too
     - data: translate polkit strings
     - snapstate: put layout feature behind feature flag
     - errtracker: respect the /etc/whoopsie configuration
     - overlord/snapstate: hold refreshes for 2h after seeding on classic
     - many: cherry-pick relevant `go vet` 1.10 fixes to 2.32
     - snap/squashfs: when installing from seed, try symlink before cp
     - wrappers: services which are socket or timer activated should not
       be started during boot
     - many: generate and use per-snap snap-update-ns profile
     - many: support holding refreshes by setting refresh.hold
     - snap-confine, snap-seccomp: utilize new seccomp logging features
     - many: remove snapd.refresh.{timer,service}
     - many: add the snapd-generator
     - polkit: do not shadow dbus errors, avoid panic in case of errors
     - polkit: ensure error is properly set if dialog is dismissed
     - xdgopenproxy: integrate xdg-open implementation into snapctl
     - userd: add an OpenFile method for launching local files with xdg-
       open
     - asserts:  use a timestamp for the assertion after the signing key
       has been created
     - ifacestate: be consistent passing Retry.After as named field
     - interfaces/apparmor,system-key: add upperdir snippets for strict
       snaps on livecd
       interfaces/apparmor,system-key: add upperdir snippets for strict
       snaps
     - configstate: when disable "ssh" we must disable the "sshd"
       service
     - store: don't ask for snap_yaml_raw except on the details endpoint
     - osutil: handle file being matched by multiple patterns
     - cmd/snap-update-ns: use recursive bind mounts for writable mimic
     - cmd/snap-update-ns: use syscall.Symlink instead of os.Symlink
     - interfaces/screen-inhibit-control,network-status: fix dbus path
       and interface typos
     - interfaces/network-status: fix use of '/' in interface in DBus
       rule
     - interfaces/screen-inhibit-control: fix use of '.' in path in DBus
       rule
     - overlord/snapstate: fix task iteration order in
       TestDoPrereqRetryWhenBaseInFlight
     - interfaces: add an interface for gnome-online-accounts D-Bus
       service
     - snap: pass full timer spec in `snap run --timer`
     - cmd/snap: introduce `snap run --timer`
     - snapstate: auto install default-providers for content snaps
     - hooks/strutil: limit the number of data read from the hooks to
       avoid oom
     - osutil: aggregate mockable symbols
     - tests: make sure snapd is running before attempting to remove
       leftover snaps
     - timeutil: account for 24h wrap when flattening clock spans
     - many: send  new Snap-CDN header with none or with cloud instance
       placement info as needed
     - cmd/snap-update-ns,testutil: move syscall testing helpers
     - tests: disable interfaces-location-control on s390x
     - tests: new spread test for gpio-memory-control interface
     - tests: spread test for broadcom-asic-control interface
     - tests: make restore of interfaces-password-manager-service more
       robust
     - tests/lib/prepare-restore: sync journal before rotating and
       vacuuming
     - overlord/snapstate: use spread in the default refresh schedule
     - tests: fixes for autopkgtest in bionic
     - timeutil: introduce helpers for checking it time falls inside the
       schedule
     - cmd/snap-repair,httputil: set snap-repair User-Agent on requests
     - vendor: resync formatting of vendor.json
     - snapstate/ifacestate: auto-connect tasks
     - cmd/snap: also include tracking channel in list output.
     - interfaces/apparmor: use snap revision with surrounding '.' when
       replacing in glob
     - debian,vendor: import github.com/snapcore/squashfs and use
     - many: implement "refresh-mode: {restart,endure,...}" for services
     - daemon: make the ast-inspecting test smarter; drop 'exceptions'
     - tests: new spread test for kvm interface
     - cmd/snap: tweaks to 'snap info' output
     - snap: remove underscore from version validator regexp
     - testutil: add File{Matches,Equals,Contains} checkers.
     - snap: improve the version validator's error messages.
     - osutil: refactor EnsureFileState to separate out the comparator
     - timeutil: fix scheduling on nth weekday of the month
     - cmd/snap-update-ns: small refactor for upcoming per-user mounts
     - many: rename snappy-app-dev to snap-device-helper
     - systemd: add default target for timers
     - interfaces: miscellaneous policy updates for home, opengl, time-
       control, network, et al
     - cmd/snap: linter cleanups
     - interfaces/mount: generate per-user mount profiles
     - cmd/snap: use proper help strings for `snap userd --help`
     - packaging: provide a compat symlink for snappy-app-dev
     - interfaces/time-control,netlink-audit: adjust for util-linux
       compiled with libaudit
     - tests: adding new test to validate the raw-usb interface
     - snap: add support for `snap run --gdb`
     - interfaces/builtin: allow MM to access login1
     - packaging: fix build on sbuild
     - store: revert PR#4532 and do not display displayname
     - interfaces/mount: add support for per-user mount entries
     - cmd/system-shutdown: move sync to be even more pessimistic
     - osutil: reimplement IsMounted with LoadMountInfo
     - tests/main/ubuntu-core-services: enable snapd.refresh.timer for
       the test
     - many: don't allow layout construction to silently fail
     - interfaces/apparmor: ensure snap-confine profile for reexec is
       current
     - interfaces/apparmor: generalize apparmor load and unload helpers
     - tests: removing packages which are not needed anymore to generate
       random data
     - snap: improve `snap run` comments/naming
     - snap: allow options for --strace, e.g. `snap run --strace="-tt"`
     - tests: fix spread test failures on 18.04
     - systemd: update comment on SocketsTarget
     - osutil: add and update docstrings
     - osutil: parse mount entries without options field
     - interfaces: mock away real mountinfo/fstab
     - many: move /lib/udev/snappy-app-dev to /usr/lib/snapd/snappy-app-
       dev
     - overlord/snapstate/backend: perform cleanup if snap setup fails
     - tests/lib/prepare: disable snapd.refresh.timer
     - daemon: remove redundant UserOK markings from api commands
     - snap: introduce  timer service data types and validation
     - cmd/snap: fix UX of snap services
     - daemon: allow `snapctl get` from any uid
     - debian, snap: only static link libseccomp in snap-seccomp on
       ubuntu
     - all: snap versions are now validated
     - many: add nfs-home flag to system-key
     - snap: disallow layouts in various special directories
     - cmd/snap: add help for service commands.
     - devicestate: fix autopkgtest failure in
       TestDoRequestSerialErrorsOnNoHost
     - snap,interfaces: allow using bind-file layouts
     - many: move mount code to osutil
     - snap: understand directories in layout blacklist
     - snap: use custom unsquashfsStderrWriter for unsquashfs error
       detection
     - tests/main/user-data-handling: get rid of ordering bug
     - snap: exclude `gettimeofday` from `snap run --strace`
     - tests: check if snapd.socket is active before stoping it
     - snap: sort layout elements before validating
     - strutil: introducing MatchCounter
     - snap: detect unsquashfs write failures
     - spread: add missing ubuntu-18.04-arm64 to available autopkgtest
       machines
     - cmd/snap-confine: allow mounting anywhere, effectively
     - daemon: improve ucrednet code for the snap.socket
     - release, interfaces: add new release.AppArmorFeatures helper
     - snap: apply some golint suggestions
     - many: add interfaces.SystemKey() helper
     - tests: new snaps to test installs nightly
     - tests: skip alsa interface test when the system does not have any
       audio devices
     - debian/rules: workaround for
       https://github.com/golang/go/issues/23721
     - interfaces/apparmor: early support for snap-update-ns snippets
     - wrappers: cleanup enabled service sockets
     - cmd/snap-update-ns: large refactor / update of unit tests
     - interfaces/apparmor: remove leaked future layout code
     - many: allow constructing layouts (phase 1)
     - data/systemd: for debugging/testing use /etc/environment also for
       snap-repair runs
     - cmd/snap-confine: create lib/{gl,gl32,vulkan} under /var/lib/snapd
       and chown as root:root
     - overlord/configstate/config: make [GS]etSnapConfig use *RawMessage
     - daemon: refactor snapFooMany helpers a little
     - cmd/snap-confine: allow snap-update-ns to chown things
     - interfaces/apparmor: use a helper to set the scope
     - overlord/configstate/config: make SetSnapConfig delete on empty
     - osutil: make MkdirAllChown clean the path passed in
     - many: at seeding try to capture cloud information into core config
       under "cloud"
     - cmd/snap: add completion conversion helper to increase DRY
     - many: remove "content" argument from snaptest.MockSnap()
     - osutil: allow using many globs in EnsureDirState
     - cmd/snap-confine: fix read-only filesystem when mounting nvidia
       files in biarch
     - tests: use root path to /home/test/tmp to avoid lack of space
       issue
     - packaging: create /var/lib/snapd/lib/{gl,gl32,vulkan} as part of
       packaging
     - tests: update kill-timeout focused on making tests pass on boards
     - advisor: ensure commands.db has mode 0644 and add test
     - snap: improve validation of snap layouts
     - tests: ensure disabled services are masked
     - interfaces/desktop-legacy,unity7: support gtk2/gvfs gtk_show_uri()
     - systemd, wrappers: start all snap services in one systemctl call
     - mir: software clients need access to shared memory /dev/shm/#*
     - snap: add support for `snap advise-snap pkgName`
     - snap: fix command-not-found on core devices
     - tests: new spead test for openvswitch-support interface
     - tests: add integration for local snap licenses
     - config: add (Get|Set)SnapConfig to do bulk config e.g. from
       snapshots
     - cmd/snap: display snap license information
     - tests: enable content sharing test for $SNAP
     - osutil: add ContextWriter and RunWithContext helpers.
     - osutil: add DirExists and IsDirNotExist
 .
 snapd (2.31.2) xenial; urgency=medium
 .
   *  New upstream release, LP: #1745217
     - many: add the snapd-generator
     - polkit: ensure error is properly set if dialog is dismissed
     - xdgopenproxy: integrate xdg-open implementation into snapctl
     - userd: add an OpenFile method for launching local files with xdg-
       open
     - configstate: when disable "ssh" we must disable the "sshd"
       service
     - many: remove snapd.refresh.{timer,service}
     - interfaces/builtin: allow MM to access login1
     - timeutil: account for 24h wrap when flattening clock spans
     - interfaces/screen-inhibit-control,network-status: fix dbus path
       and interface typos
     - systemd, wrappers: start all snap services in one systemctl
       call
     - tests: disable interfaces-location-control on s390x
 .
 snapd (2.31.1) xenial; urgency=medium
 .
   * New upstream release, LP: #1745217
     - tests: multiple autopkgtest related fixes for 18.04
     - overlord/snapstate: use spread in the default refresh schedule
     - timeutil: fix scheduling on nth weekday of the month
     - interfaces: miscellaneous policy updates for home, opengl, time-
       control, network, et al
     - cmd/snap: use proper help strings for `snap userd --help`
     - interfaces/time-control,netlink-audit: adjust for util-linux
       compiled with libaudit
     - rules: do not static link on powerpc
     - packaging: revert LDFLAGS rewrite again after building snap-
       seccomp
     - store: revert PR#4532 and do not display displayname
     - daemon: allow `snapctl get` from any uid
     - debian, snap: only static link libseccomp in snap-seccomp on
       ubuntu
     - daemon: improve ucrednet code for the snap.socket
 .
 snapd (2.31) xenial; urgency=medium
 .
   * New upstream release, LP: #1745217
     - cmd/snap-confine: allow snap-update-ns to chown things
     - cmd/snap-confine: fix read-only filesystem when mounting nvidia
       files in biarch
     - packaging: create /var/lib/snapd/lib/{gl,gl32,vulkan} as part of
       packaging
     - advisor: ensure commands.db has mode 0644 and add test
     - interfaces/desktop-legacy,unity7: support gtk2/gvfs gtk_show_uri()
     - snap: improve validation of snap layoutsRules for validating
       layouts:
     - snap: fix command-not-found on core devices
     - cmd/snap: display snap license information
     - tests: enable content sharing test for $SNAP
     - userd: add support for a simple UI that can be used from userd
     - snap-confine/nvidia: Support legacy biarch trees for GLVND systems
     - tests: generic detection of gadget and kernel snaps
     - cmd/snap-update-ns: refactor and improve Change.Perform to handle
       EROFS
     - cmd/snap: improve output when snaps were found in a section or the
       section is invalid
     - cmd/snap-confine,tests: hide message about stale base snap
     - cmd/snap-mgmt: fix out of source tree build
     - strutil/quantity: new package that exports formatFoo (from
       progress)
     - cmd/snap: snap refresh --time with new and legacy schedules
     - state: unknown tasks handler
     - cmd/snap-confine,data/systemd: fix removal of snaps inside LXD
     - snap: add io.snapcraft.Settings to `snap userd`
     - spread: remove more EOLed releases
     - snap: tidy up top-level help output
     - snap: fix race in `snap run --strace`
     - tests: update "searching" test to match store changes
     - store: use the "publisher" when populating the "publisher" field
     - snap: make `snap find --section` show all sections
     - tests: new test to validate location control interface
     - many: add new `snap refresh --amend <snap>` command
     - tests/main/kernel-snap-refresh-on-core: skip the whole test if
       edge and stable are the same version
     - tests: set test kernel-snap-refresh-on-core to manual
     - tests: new spread test for interface gpg-keys
     - packaging/fedora: Merge changes from Fedora Dist-Git plus trivial
       fix
     - interfaces: miscellaneous policy updates
     - interfaces/builtin: Replace Solus support with GLVND support
     - tests/main/kernel-snap-refresh-on-core: do not fail if edge and
       stable kernels are the same version
     - snap: add `snap run --strace` to be able to strace snap apps
     - tests: new spread test for ssh-keys interface
     - errtracker: include detected virtualisation
     - tests: add new kernel refresh/revert test for spread-cron
     - interfaces/builtin: blacklist zigbee dongle
     - cmd/snap-confine: discard stale mount namespaces
     - cmd: remove unused execArg0/execEnv
     - snap,interfaces/mount: disallow nobody/nogroup
     - cmd/snap: improve `snap aliases` output when no aliases are
       defined
     - tests/lib/snaps/test-snapd-service: refactor service reload
     - tests: new spread test for gpg-public-keys interface
     - tests: new spread test for ssh-public-keys interface
     - spread: setup machine creation on Linode
     - interfaces/builtin: allow introspecting UDisks2
     - interfaces/builtin: add support for content "source" section
     - tests: new spread test for netlink-audit interface
     - daemon: avoid panic'ing building an error response w/no snaps
       given
     - interfaces/mount,snap: early support for snap layouts
     - daemon: unlock state even if RefreshSchedule() fails
     - arch: add "armv8l" to ubuntuArchFromKernelArch table
     - tests: fix for test interface-netlink-connector
     - data/dbus: add AssumedAppArmorLabel=unconfined
     - advisor: use forked bolt to make it work on ppc
     - overlord/snapstate: record the 'kind' of conflicting change
     - dirs: fix snap mount dir on Manjaro
     - overlord/{snapstate,configstate}, daemon: introduce refresh.timer,
       fallback to refresh.schedule
     - config: add support for `snap set core proxy.no_proxy=...`
     - snap-mgmt: extend spread tests, stop, disable and cleanup snap
       services
     - spread.yaml: add fedora 27
     - cmd/snap-confine: allow snap-update-ns to poke writable holes in
       $SNAP
     - packaging/14.04: move linux-generic-lts-xenial to recommends
     - osutil/sys: ppc has 32-bit getuid already
     - snapstate: make no autorefresh message clearer
     - spread: try to enable Fedora once more
     - overlord/snapstate: do a minimal sanity check on containers
     - configcore: ensure config.txt has a final newline
     - cmd/libsnap-confine-private: print failed mount/umount regardless
       of SNAP_CONFINE_DEBUG
     - debian/tests: add missing autopkgtest test dependencies for debian
     - image: port ini handling to goconfigparser
     - tests/main/snap-service-after-before: add test for after/before
       service ordering
     - tests: enabling opensuse for tests
     - tests: update auto-refresh-private to match messages from current
       master
     - dirs: check if distro 'is like' fedora when picking path to
       libexecdir
     - tests: fix "job canceled" issue and improve cleanup for snaps
     - cmd/libsnap-confine-private: add debug build of libsnap-confine-
       private.a, link it into snap-confine-debug
     - vendor: remove x/sys/unix to fix builds on arm64 and powerpc
     - image: let consume snapcraft export-login files from tooling
     - interfaces/mir: allow Wayland socket and non-root sockets
     - interfaces/builtin: use snap.{Plug,Slot}Info over
       interfaces.{Plug,Slot}
     - tests: add simple snap-mgmt test
     - wrappers: autogenerate After/Before in systemd's service files for
       apps
     - snap: add usage hints in `snap download`
     - snap: provide more meaningful errors for installMany and friends
     - cmd/snap: show header/footer when `snap find` is used without
       arguments
     - overlord/snapstate: for Enable's tasks refer to the first task
       with snap-setup, do not duplicate
     - tests: add hard-coded fully expired macaroons to run related tests
     - cmd/snap-update-ns: new test features
     - cmd/snap-update-ns: we don't want to bind mount symlinks
     - interfaces/mount: test OptsToCommonFlags, filter out x-snapd.
       options
     - cmd/snap-update-ns: untangle upcoming cyclic initialization
     - client, daemon: update user's email when logging in with new
       account
     - tests: ensure snap-confine apparmor profile is parsable
     - snap: do not leak internal errors on install/refresh etc
     - snap: fix missing error check when multiple snaps are refreshed
     - spread: trying to re-enable tests on Fedora
     - snap: fix gadget.yaml parsing for multi volume gadgets
     - snap: give the snap.Container interface a Walk method
     - snap: rename `snap advise-command` to `snap advise-snap --command`
     - overlord/snapstate: no refresh just for hints if there was a
       recent regular full refresh
     - progress: switch ansimeter's Spin() to use a spinner
     - snap: support `command-not-found` symlink for `snap advise-
       command`
     - daemon: store email, ID and macaroon when creating a new user
     - snap: app startup after/before validation
     - timeutil: refresh timer take 2
     - store, daemon/api: Rename MyAppsServer, point to
       dashboard.snapcraft.io instead
     - tests: use "quiet" helper instead of "dnf -q" to get errors on
       failures
     - cmd/snap-update-ns: improve mocking for tests
     - many: implement the advisor backend, populate it from the store
     - tests: make less calls to the package manager
     - tests/main/confinement-classic: enable the test on Fedora
     - snap: do not leak internal network errors to the user
     - snap: use stdout instead of stderr for "fetching" message
     - tests: fix test whoami, share successful_login.exp
     - many: refresh with appropriate creds
     - snap: add new `snap advice-command` skeleton
     - tests: add test that ensures we never parse versions as numbers
     - overlord/snapstate: override Snapstate.UserID in refresh if the
       installing user is gone
     - interfaces: allow socket "shutdown" syscall in default profile
     - snap: print friendly message if `snap keys` is empty
     - cmd/snap-update-ns: add execWritableMimic
     - snap: make `snap info invalid-snap` output more user friendly
     - cmd/snap,  tests/main/classic-confinement: fix snap-exec path when
       running under classic confinement
     - overlord/ifacestate: fix disable/enable cycle to setup security
     - snap: fix snap find " " output
     - daemon: add new polkit action to manage interfaces
     - packaging/arch: disable services when removing
     - asserts/signtool: support for building tools on top that fill-
       in/compute some headers
     - cmd: clarify "This leaves %s tracking %s." message
     - daemon: return "bad-query" error kind for store.ErrBadQuery
     - taskrunner/many: KnownTaskKinds helper
     - tests/main/interfaces-fuse_support: fix confinement, allow
       unmount, fix spread tests
     - snap: use the -no-fragments mksquashfs option
     - data/selinux: allow messages from policykit
     - tests: fix catalog-update wait loop
     - tests/lib/prepare-restore: disable rate limiting in journald
     - tests: change interfaces-fuse_support to be debug friendly
     - tests/main/postrm-purge: stop snapd before purge
     - This is an example of test log:https://paste.ubuntu.com/26215170/
     - tests/main/interfaces-fuse_support: dump more debugging
       information
     - interfaces/dbus: adjust slot policy for listen, accept and accept4
       syscalls
     - tests: save the snapd-state without compression
     - tests/main/searching: handle changes in featured snaps list
     - overlord/snapstate: fix auto-refresh summary for 2 snaps
     - overlord/auth,daemon: introduce an explicit auth.ErrInvalidUser
     - interfaces: add /proc/partitions to system-observe (This addresses
       LP#1708527.)
     - tests/lib: introduce helpers for setting up /dev/random using
       /dev/urandom in project prepare
     - tests: new test for interface network status
     - interfaces: interfaces: also add an app/hook-specific udev RUN
       rule for hotplugging
     - tests: fix external backend for tests that need DEBUG output
     - tests: do not disable refresh timer on external backend
     - client: send all snap related bool json fields
     - interfaces/desktop,unity7: allow status/activate/lock of
       screensavers
     - tests/main: source mkpinentry.sh
     - tests: fix security-device-cgroups-serial-port test for rpi and db
     - cmd/snap-mgmt: add more directories for cleanup and refactor
       purge() code
     - snap: YAML and data structures for app before/after ordering
     - tests: set TRUST_TEST_KEYS=false for all the external backends
     - packaging/arch: install snap-mgmt tool
     - tests: add support on tests for cm3 gadget
     - interfaces/removable-media: also allow 'k' (lock)
     - interfaces: use ConnectedPlug/ConnectedSlot types (step 2)
     - interfaces: rename sanitize methods
     - devicestate: fix misbehaving test when using systemd-resolved
     - interfaces: added Ref() helpers, restored more detailed error
       message on spi iface
     - debian: make "gnupg" a recommends
     - interfaces/many: misc updates for default, browser-support,
       opengl, desktop, unity7, x11
     - interfaces: PlugInfo/SlotInfo/ConnectedPlug/ConnectedSlot
       attribute helpers
     - interfaces: update fixme comments
     - tests: make interfaces-snapd-control-with-manage more robust
     - userd: generalize dbusInterface
     - interfaces: use ConnectedPlug/ConnectedSlot types (step 1)
     - hookstate: add compat "configure-snapd" task.
     - config, overlord/snapstate, timeutil: rename ParseSchedule to
       ParseLegacySchedule
     - tests: adding tests for time*-control interfaces
     - tests: new test to check interfaces after reboot the system
     - cmd/snap-mgmt: fixes
     - packaging/opensuse-42.2: package and use snap-mgmt
     - corecfg: also "mask" services when disabling them
     - cmd/snap-mgmt: introduce snap-mgmt tool
     - configstate: simplify ConfigManager
     - interfaces: add gpio-memory-control interface
     - cmd: disable check-syntax-c
     - packaging/arch: add bash-completion as optional dependency
     - corecfg: rename package to overlord/configstate/configcore
     - wrappers: fix unit tests to use dirs.SnapMountDir
     - osutil/sys: reimplement getuid and chown with the right int type
     - interfaces-netlink-connector: fix sourcing snaps.sh
 .
 snapd (2.30) xenial; urgency=medium
 .
   * New upstream release, LP: #1735344
     - tests: set TRUST_TEST_KEYS=false for all the external backends
     - tests: fix external backend for tests that need DEBUG output
     - tests: do not disable refresh timer on external backend
     - client: send all snap related bool json fields
     - interfaces: interfaces: also add an app/hook-specific udev RUN
       rule for hotplugging
     - interfaces/desktop,unity7: allow status/activate/lock of
       screensavers
     - tests/main: source mkpinentry.sh
     - devicestate: use a different nowhere domain
     - interfaces: add ssh-keys, ssh-public-keys, gpg-keys and gpg-public
       keys interfaces
     - interfaces/many: misc updates for default, browser-support, opengl,
       desktop, unity7, x11
     - devicestate: fix misbehaving test when using systemd-resolved
     - interfaces/removable-media: also allow 'k' (lock)
     - interfaces/many: misc updates for default, browser-support,
       opengl, desktop, unity7, x11
     - corecfg: also "mask" services when disabling them
     - tests: add support for autopkgtests on s390x
     - snapstate: support for pre-refresh hook
     - many: allow to configure core before it is installed
     - devicestate: fix unkeyed fields error
     - snap-confine: create mount target for lib32,vulkan on demand
     - snapstate: add support for refresh.schedule=managed
     - cmd/snap-update-ns: teach update logic to handle synthetic changes
     - many: remove configure-snapd task again and handle internally
     - snap: fix TestDirAndFileMethods() test to work with gccgo
     - debian: ensure /var/lib/snapd/lib/vulkan is available
     - cmd/snap-confine: use #include instead of bare include
     - snapstate: store userID in snapstate
     - snapd.dirs: add var/lib/snapd/lib/gl32
     - timeutil, overlod/snapstate: cleanup remaining pieces of timeutil
       weekday support
     - packaging/arch: install missing directories, manpages and version
       info
     - snapstate,store: store if a snap is a paid snap in the sideinfo
     - packaging/arch: pre-create snapd directories when packaging
     - tests/main/manpages: set LC_ALL=C as man may complain if the
       locale is unset or unsupported
     - repo: ConnectedPlug and ConnectedSlot types
     - snapd: fix handling of undo in the taskrunner
     - store: fix download caching and add integration test
     - snapstate: move autorefresh code into autoRefresh helper
     - snapctl: don't error out on start/stop/restart from configure hook
       during install or refresh
     - cmd/snap-update-ns: add planWritableMimic
     - deamon: don't omit responses, even if null
     - tests: add test for frame buffer interface
     - tests/lib: fix shellcheck errors
     - apparmor: generate the snap-confine re-exec profile for
       AppArmor{Partial,Full}
     - tests: remove obsolete workaround
     - snap: use existing files in `snap download` if digest/size matches
     - tests: merge pepare-project.sh into prepare-restore.sh
     - tests: cache snaps to $TESTSLIB/cache
     - tests: set -e, -o pipefail in prepare-restore.sh
     - apparmor: generate the snap-confine re-exec profile for
       AppArmor{Partial,Full}
     - cmd/snap-seccomp: fix uid/gid restrictions tests on Arch
     - tests: document and slightly refactor prepare/restore code
     - snapstate: ensure RefreshSchedule() gives accurate results
     - snapstate: add new refresh-hints helper and use it
     - spread.yaml,tests: move most of project-wide prepare/restore to
       separate file
     - timeutil: introduce helpers for weekdays and TimeOfDay
     - tests: adding new test for uhid interface
     - cmd/libsnap: fix parsing of empty mountinfo fields
     - overlord/devicestate:  best effort to go to early full retries for
       registration on the like of DNS no host
     - spread.yaml: bump delta ref to 2.29
     - tests: adding test to test physical memory observe interface
     - cmd, errtracker: get rid of SNAP_DID_REEXEC environment
     - timeutil: remove support to parse weekday schedules
     - snap-confine: add workaround for snap-confine on 4.13/upstream
     - store: do not log the http body for catalog updates
     - snapstate: move catalogRefresh into its own helper
     - spread.yaml: fix shellcheck issues and trivial refactor
     - spread.yaml: move prepare-each closer to restore-each
     - spread.yaml: increase workers for opensuse to 3
     - tests: force delete when tests are restore to avoid suite failure
     - test: ignore /snap/README
     - interfaces/opengl: also allow read on 'revision' in
       /sys/devices/pci...
     - interfaces/screen-inhibit-control: fix case in screen inhibit
       control
     - asserts/sysdb: panic early if pointed to staging but staging keys
       are not compiled-in
     - interfaces: allow /bin/chown and fchownat to root:root
     - timeutil: include test input in error message in
       TestParseSchedule()
     - interfaces/browser-support: adjust base declaration for auto-
       connection
     - snap-confine: fix snap-confine under lxd
     - store: bit less aggressive retry strategy
     - tests: add new `fakestore new-snap-{declaration,revision}` helpers
     - cmd/snap-update-ns: add secureMkfileAll
     - snap: use field names when initializing composite literals
     - HACKING: fix path in snap install
     - store: add support for flags in ListRefresh()
     - interfaces: remove invalid plugs/slots from SnapInfo on
       sanitization.
     - debian: add missing udev dependency
     - snap/validate: extend socket validation tests
     - interfaces: add "refresh-schedule" attribute to snapd-control
     - interfaces/builtin/account_control: use gid owning /etc/shadow to
       setup seccomp rules
     - cmd/snap-update-ns: tweak changePerform
     - interfaces,tests: skip unknown plug/slot interfaces
     - tests: disable interfaces-network-control-tuntap
     - cmd: use a preinit_array function rather than parsing
       /proc/self/cmdline
     - interfaces/time*_control: explicitly deny noisy read on
       /proc/1/environ
     - cmd/snap-update-ns: misc cleanups
     - snapd: allow hooks to have slots
     - fakestore: add go-flags to prepare for `new-snap-declaration` cmd
     - interfaces/browser-support: add shm path for nwjs
     - many: add magic /snap/README file
     - overlord/snapstate: support completion for command aliases
     - tests: re-enable tun/tap test on Debian
     - snap,wrappers: add support for socket activation
     - repo: use PlugInfo and SlotInfo for permanent plugs/slots
     - tests/interfaces-network-control-tuntap: disable on debian-
       unstable for now
     - cmd/snap-confine: Loosen the NVIDIA Vulkan ICD glob
     - cmd/snap-update-ns: detect and report read-only filesystems
     - cmd/snap-update-ns: re-factor secureMkdirAll into
       secureMk{Prefix,Dir}
     - run-checks, tests/lib/snaps/: shellcheck fixes
     - corecfg: validate refresh.schedule when it is applied
     - tests: adjust test to match stderr
     - snapd: fix snap cookie bugs
     - packaging/arch: do not quote MAKEFLAGS
     - state: add change.LaneTasks helper
     - cmd/snap-update-ns: do not assume 'nogroup' exists
     - tests/lib: handle distro specific grub-editenv naming
     - cmd/snap-confine: Add missing bi-arch NVIDIA filesthe
       `/var/lib/snapd/lib/gl:/var/lib/snapd/lib/gl/vdpau` paths within
     - cmd: Support exposing NVIDIA Vulkan ICD files to the snaps
     - cmd/snap-confine: Implement full 32-bit NVIDIA driver support
     - packaging/arch: packaging update
     - cmd/snap-confine: Support bash as base runtime entry
     - wrappers: do not error on incorrect Exec= lines
     - interfaces: fix udev tagging for hooks
     - tests/set-proxy-store: exclude ubuntu-core-16 via systems: key
     - tests: new tests for network setup control and observe interfaces
     - osutil: add helper for obtaining group ID of given file path
     - daemon,overlord/snapstate: return snap-not-installed error in more
       cases
     - interfaces/builtin/lxd_support: allow discovering of host's os-
       release
     - configstate: add support for configure-snapd for
       snapstate.IgnoreHookError
     - tests:  add a spread test for proxy.store setting together with
       store assertion
     - cmd/snap-seccomp: do not use group 'shadow' in tests
     - asserts/assertstest:  fix use of hardcoded value when the passed
       or default keys should be used
     - interfaces/many: misc policy updates for browser-support, cups-
       control and network-status
     - tests: fix xdg-open-compat
     - daemon: for /v2/logs, 404 when no services are found
     - packaging/fedora: Merge changes from Fedora Dist-Git
     - cmd/snap-update-ns: add new helpers for mount entries
     - cmd/snap-confine: Respect biarch nature of libdirs
     - cmd/snap-confine: Ensure snap-confine is allowed to access os-
       release
     - cmd: fix re-exec bug with classic confinement for host snapd <
       2.28
     - interfaces/kmod: simplify loadModules now that errors are ignored
     - tests: disable xdg-open-compat test
     - tests: add test that checks core reverts on core devices
     - dirs: use alt root when checking classic confinement support
       without …
     - interfaces/kmod: treat failure to load module as non-fatal
     - cmd/snap-update-ns: fix golint and some stale comments
     - corecfg:  support setting proxy.store if there's a matching store
       assertion
     - overlord/snapstate: toggle ignore-validation as needed as we do
       for channel
     - tests: fix security-device-cgroup* tests on devices with
       framebuffer
     - interfaces/raw-usb: match on SUBSYSTEM, not SUBSYSTEMS
     - interfaces: add USB interface number attribute in udev rule for
       serial-port interface
     - overlord/devicestate: switch to the new endpoints for registration
     - snap-update-ns: add missing unit test for desired/current profile
       handling
     - cmd/{snap-confine,libsnap-confine-private,snap-shutdown}: cleanup
       low-level C bits
     - ifacestate: make interfaces.Repository available via state cache
     - overlord/snapstate: cleanups around switch-snap*
     - cmd/snapd,client,daemon: display ignore-validation flag through
       the notes mechanism
     - cmd/snap-update-ns: add logging to snap-update-ns
     - many: have a timestamp on store assertions
     - many: lookup and use the URL from a store assertion if one is set
       for use
     - tests/test-snapd-service: fix shellcheck issues
     - tests: new test for hardware-random-control interface
     - tests: use `snap change --last=install` in snapd-reexec test
     - repo, daemon: use PlugInfo, SlotInfo
     - many: handle core configuration internally instead of using the
       core configure hook
     - tests: refactor and expand content interface test
     - snap-seccomp: skip in-kernel bpf tests for socket() in trusty/i386
     - cmd/snap-update-ns: allow Change.Perform to return changes
     - snap-confine: Support biarch Linux distribution confinement
     - partition/ubootenv: don't panic when uboot.env is missing the eof
       marker
     - cmd/snap-update-ns: allow fault injection to provide dynamic
       result
     - interfaces/mount: exspose mount.{Escape,Unescape}
     - snapctl: added long help to stop/start/restart command
     - cmd/snap-update-ns: create missing mount points automatically.
     - cmd: downgrade log message in InternalToolPath to Debugf()
     - tests: wait for service status change & file update in the test to
       avoid races
     - daemon, store: forward SSO invalid credentials errors as 401
       Unauthorized responses
     - spdx: fix for WITH syntax, require a license name before the
       operator
     - many: reorg things in preparation to make handling of the base url
       in store dynamic
     - hooks/configure: queue service restarts
     - cmd/snap: warn when a snap is not from the tracking channel
     - interfaces/mount: add support for parsing x-snapd.{mode,uid,gid}=
     - cmd/snap-confine: add detection of stale mount namespace
     - interfaces: add plugRef/slotRef helpers for PlugInfo/SlotInfo
     - tests: check for invalid udev files during all tests
     - daemon: use newChange() in changeAliases for consistency
     - servicestate: use taskset
     - many: add support for /home on NFS
     - packaging,spread: fix and re-enable opensuse builds
Checksums-Sha1:
 51496b1f01895f043aae8678f96d37b561d6660d 2762 snapd_2.32.3.2.dsc
 f3d6fd03da206afa625f8267535fd780d14ed3c1 1616652 snapd_2.32.3.2.tar.xz
 51827bb3cf71bbd90e06bcb7a3ef6190cb61a10e 15382 snapd_2.32.3.2_source.buildinfo
Checksums-Sha256:
 7b1ad42393df91231522de183239fcb4a3a97925fbf982ef03b8821a2cfb3e92 2762 snapd_2.32.3.2.dsc
 66a2aff3de6005551a4f6ad01b9255438542475f966c4e9f1994baf97a51c130 1616652 snapd_2.32.3.2.tar.xz
 5fa5c56b9a3fe138f6573f503f1b8de48c6f85f1ba54382582122043a10393c0 15382 snapd_2.32.3.2_source.buildinfo
Files:
 cd35701e7ab7c8b5c8d56fb2390752fa 2762 devel optional snapd_2.32.3.2.dsc
 312a8ddb710730b45745b46618f0185f 1616652 devel optional snapd_2.32.3.2.tar.xz
 31aa90afdd2bdedcde76e31aad8e4089 15382 devel optional snapd_2.32.3.2_source.buildinfo


More information about the Xenial-changes mailing list