launchpad-reviewers team mailing list archive

[Tushar Gupta <mp+484312@xxxxxxxxxxxxxxxxxx>]

Tushar Gupta has proposed merging ~tushar5526/lpci:set-apparmor-config-for-lpci-build-on-focal into lpci:main.

Requested reviews:
  Launchpad code reviewers (launchpad-reviewers)

For more details, see:
https://code.launchpad.net/~tushar5526/lpci/+git/lpcraft/+merge/484312
-- 
Your team Launchpad code reviewers is requested to review the proposed merge of ~tushar5526/lpci:set-apparmor-config-for-lpci-build-on-focal into lpci:main.

diff --git a/lpci/commands/run.py b/lpci/commands/run.py
index e42a8a9..2ae335b 100644
--- a/lpci/commands/run.py
+++ b/lpci/commands/run.py
@@ -551,6 +551,10 @@ def _run_job(
         gpu_nvidia=gpu_nvidia,
         root=root,
     ) as instance:
+        # XXX tushar5526 2025-04-11: relax apparmor permissions to allow
+        # noble builds on focal host. This workaround can be removed once
+        # we have migrated our builders to Noble
+        instance.config_set("raw.apparmor", "mount,")
         snaps = list(itertools.chain(*pm.hook.lpci_install_snaps()))
         for snap in snaps:
             emit.progress(