debcrafters-packages team mailing list archive

[Launchpad Bug Tracker <1966203@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package snapd - 2.68.5+ubuntu24.04.1

---------------
snapd (2.68.5+ubuntu24.04.1) noble; urgency=medium

  * New upstream release, LP: #2098137
    -LP: #2109843 fix missing preseed files when running in a container

snapd (2.68.4+ubuntu24.04) noble; urgency=medium

    - Snap components: LP: #2104933 workaround for classic 24.04/24.10
      models that incorrectly specify core22 instead of core24
    - Update build dependencies

snapd (2.68.3+ubuntu24.04.3) noble; urgency=medium

    - FDE: use boot mode for FDE hooks
    - FDE: add snap-bootstrap compatibility check to prevent image
      creation with incompatible snapd and kernel snap
    - FDE: add argon2 out-of-process KDF support
    - FDE: have separate mutex for the sections writing a fresh modeenv
    - FDE: LP: #2099709 update secboot to e07f4ae48e98
    - FDE: LP: #2101834 snapd 2.68+ and snap-bootstrap <2.68 fallback to
      old keyring path
    - Confdb: support pruning ephemeral data and process alternative
      types in order
    - core-initrd: look at env to mount directly to /sysroot
    - core-initrd: prepare for Plucky build and split out 24.10
      (Oracular)
    - Fix Plucky snapd deb build issue related to /var/lib/snapd/void
      permissions
    - Fix snapd deb build complaint about ifneq with extra bracket
    - Fix missing primed packages in snapd snap manifest
    - Interfaces: posix-mq | fix incorrect clobbering of global variable
      and make interface more precise
    - Interfaces: opengl | add more kernel fusion driver files
    - Fix snap-confine type specifier type mismatch on armhf
    - FDE: add support for new and more extensible key format that is
      unified between TPM and FDE hook
    - FDE: add support for adding passphrases during installation
    - FDE: update secboot to 30317622bbbc
    - Snap components: make kernel components available on firstboot
      after either initramfs or ephemeral rootfs style install
    - Snap components: mount drivers tree from initramfs so kernel
      modules are available in early boot stages
    - Snap components: support remodeling to models that contain
      components
    - Snap components: support offline remodeling to models that contain
      components
    - Snap components: support creating new recovery systems with
      components
    - Snap components: support downloading components with 'snap
      download' command
    - Snap components: support sideloading asserted components
    - AppArmor Prompting(experimental): improve version checks and
      handling of listener notification protocol for communication with
      kernel AppArmor
    - AppArmor Prompting(experimental): make prompt replies idempotent,
      and have at most one rule for any given path pattern, with
      potentially mixed outcomes and lifespans
    - AppArmor Prompting(experimental): timeout unresolved prompts after
      a period of client inactivity
    - AppArmor Prompting(experimental): return an error if a patch
      request to the API would result in a rule without any permissions
    - AppArmor Prompting(experimental): warn if there is no prompting
      client present but prompting is enabled, or if a prompting-related
      error occurs during snapd startup
    - AppArmor Prompting(experimental): do not log error when converting
      empty permissions to AppArmor permissions
    - Confdb(experimental): rename registries to confdbs (including API
      /v2/registries => /v2/confdb)
    - Confdb(experimental): support marking confdb schemas as ephemeral
    - Confdb(experimental): add confdb-control assertion and feature
      flag
    - Refresh App Awareness(experimental): LP: #2089195 prevent
      possibility of incorrect notification that snap will quit and
      update
    - Confidential VMs: snap-bootstrap support for loading partition
      information from a manifest file for cloudimg-rootfs mode
    - Confidential VMs: snap-bootstrap support for setting up cloudimg-
      rootfs as an overlayfs with integrity protection
    - dm-verity for essential snaps: add support for snap-integrity
      assertion
    - Interfaces: modify AppArmor template to allow owner read on
      @{PROC}/@{pid}/fdinfo/*
    - Interfaces: LP: #2072987 modify AppArmor template to allow using
      setpriv to run daemon as non-root user
    - Interfaces: add configfiles backend that ensures the state of
      configuration files in the filesystem
    - Interfaces: add ldconfig backend that exposes libraries coming
      from snaps to either the rootfs or to other snaps
    - Interfaces: LP: #1712808 disable udev backend when
      inside a container
    - Interfaces: add auditd-support interface that grants audit_control
      capability and required paths for auditd to function
    - Interfaces: add checkbox-support interface that allows
      unrestricted access to all devices
    - Interfaces: fwupd | allow access to dell bios recovery
    - Interfaces: fwupd | allow access to shim and fallback shim
    - Interfaces: mount-control | add mount option validator to detect
      mount option conflicts early
    - Interfaces: cpu-control | add read access to /sys/kernel/irq/
    - Interfaces: locale-control | changed to be implicit on Ubuntu Core
      Desktop
    - Interfaces: microstack-support | support for utilizing of AMD SEV
      capabilities
    - Interfaces: u2f | added missing OneSpan device product IDs
    - Interfaces: auditd-support | grant seccomp setpriority
    - Interfaces: opengl interface | enable parsing of nvidia driver
      information files
    - Interfaces: mount-control interface | add CIFS support
    - Allow mksquashfs 'xattrs' when packing snap types os, core, base
      and snapd as part of work to support non-root snap-confine
    - Upstream/downstream packaging changes and build updates
    - Improve error logs for malformed desktop files to also show which
      desktop file is at fault
    - Provide more precise error message when overriding channels with
      grade during seed creation
    - Expose 'snap prepare-image' validation parameter
    - Add snap-seccomp 'dump' command that dumps the filter rules from a
      compiled profile
    - Add fallback release info location /etc/initrd-release
    - Added core-initrd to snapd repo and fixed issues with ubuntu-core-
      initramfs deb builds
    - Remove stale robust-mount-namespace-updates experimental feature
      flag
    - Remove snapd-snap experimental feature (rejected) and it's feature
      flag
    - Changed snap-bootstrap to mount base directly on /sysroot
    - Mount ubuntu-seed mounted as no-{suid,exec,dev}
    - Mapping volumes to disks: add support for volume-assignments in
      gadget
    - Fix silently broken binaries produced by distro patchelf 0.14.3 by
      using locally build patchelf 0.18
    - Fix mismatch between listed refresh candidates and actual refresh
      due to outdated validation sets
    - Fix 'snap get' to produce compact listing for tty
    - Fix missing store-url by keeping it as part of auxiliary store
      info
    - Fix snap-confine attempting to retrieve device cgroup setup inside
      container where it is not available
    - Fix 'snap set' and 'snap get' panic on empty strings with early
      error checking
    - Fix logger debug entries to show correct caller and file
      information
    - Fix issue preventing hybrid systems from being seeded on first
      boot
    - LP: #1966203 remove auto-import udev rules not required by deb
      package to avoid unwanted syslog errors
    - LP: #1886414 fix progress reporting when stdout is on a tty, but
      stdin is not

 -- Ernest Lotter <ernest.lotter@xxxxxxxxxxxxx>  Wed, 21 May 2025
17:46:09 +0200

** Changed in: snapd (Ubuntu Noble)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of
Debcrafters packages, which is subscribed to systemd in Ubuntu.
https://bugs.launchpad.net/bugs/1966203

Title:
  journal shows "systemd-udevd[2837]: nvme0n1: Process ... failed with
  exit code 1."

Status in snapd:
  Fix Committed
Status in snapd package in Ubuntu:
  Fix Released
Status in systemd package in Ubuntu:
  Invalid
Status in snapd source package in Jammy:
  Fix Committed
Status in snapd source package in Noble:
  Fix Released
Status in snapd source package in Plucky:
  Fix Released
Status in systemd source package in Plucky:
  Confirmed
Status in snapd source package in Questing:
  Fix Released
Status in systemd source package in Questing:
  Invalid

Bug description:
  [SRU] 2.68.5:
  https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/2098137

  [ Impact ]

  Addition of block devices (ACTION=="add", SUBSYSTEM=="block") trigger snapd provided udev rule `udev/rules.d/66-snapd-autoimport.rules`, not intended
  or required for classic systems, causing unwanted errors like `Process '/usr/bin/unshare -m /usr/bin/snap auto-import --mount=/dev/nvme0n1' failed with exit code 1`

  [ Test Plan ]

  1. Produce error with snapd 2.66.1 deb

  insert usb storage
  journalctl -b | grep 'exit code 1'
  expect to find '/usr/bin/unshare -m /usr/bin/snap auto-import --mount=/dev/sdb' failed with exit code 1

  2. Change to snapd 2.68.5 deb

  insert and remove usb storage multiple times
  journalctl -b | grep 'exit code 1'
  should not find any new entries

  Repeat for all targeted Ubuntu releases.

  ---original---

  Configuration:
   OS:jammy-live-server20220320-amd64.iso
   CPU:AMD EPYC 7702 64-Core Processor
   UEFI Version:D8E119A
   BMC Version:D8BT19I
   SSD:Intel 1.60TB NVMe SSD
   Boot mode:legacy
  Reproduce Steps:
   1.Boot into BIOS and set boot mode to legacy
   2.install ubuntu 22.04 on NVMe SSD
   3.Check syslog log
  Current behaviors:
  syslog shows systemd-udevd errors in Ubuntu 22.04
  Feb  9 10:16:19 len systemd-udevd[2837]: nvme0n1: Process '/usr/bin/unshare -m /usr/bin/snap auto-import --mount=/dev/nvme0n1' failed with exit code 1.
  Feb  9 10:16:19 len systemd-udevd[2877]: nvme0n1p3: Process '/usr/bin/unshare -m /usr/bin/snap auto-import --mount=/dev/nvme0n1p3' failed with exit code 1.
  Feb  9 10:16:19 len systemd-udevd[2876]: nvme0n1p2: Process '/usr/bin/unshare -m /usr/bin/snap auto-import --mount=/dev/nvme0n1p2' failed with exit code 1.
  Feb  9 10:16:19 len systemd-udevd[2837]: nvme0n1p1: Process '/usr/bin/unshare -m /usr/bin/snap auto-import --mount=/dev/nvme0n1p1' failed with exit code 1.
  Feb  9 10:16:19 len systemd-udevd[2828]: sr0: Process '/usr/bin/unshare -m /usr/bin/snap auto-import --mount=/dev/sr0' failed with exit code 1.
  Feb  9 10:16:19 len systemd-udevd[2850]: dm-0: Process '/usr/bin/unshare -m /usr/bin/snap auto-import --mount=/dev/dm-0' failed with exit code 1.

To manage notifications about this bug go to:
https://bugs.launchpad.net/snapd/+bug/1966203/+subscriptions