[Bug 1797218] Re: snap confine fails on top of overlayroot

2018-10-16 Thread Zygmunt Krynicki
** Changed in: snapd (Ubuntu) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1797218 Title: snap confine fails on top of overlayroot To manage

[Bug 1797218] Re: snap confine fails on top of overlayroot

2018-10-15 Thread Scott Moser
This is reported fixed in snapd 2.35.5+18.10 which was uploaded under SRU bug 1786438. ** Changed in: snapd (Ubuntu) Status: Confirmed => Fix Committed ** Description changed: # Summary snap confinement fails on top of overlayroot - # Steps to reproduce: These steps

[Bug 1797218] Re: snap confine fails on top of overlayroot

2018-10-12 Thread Scott Moser
lots of discussion in irc https://irclogs.ubuntu.com/2018/10/12/%23snappy.html#t13:49 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1797218 Title: snap confine fails on top of overlayroot To

[Bug 1797218] Re: snap confine fails on top of overlayroot

2018-10-12 Thread Scott Moser
Just as information to put here. A change to overlayroot like below actually does make the /proc//mountinfo table in line with what snapd is expecting. I've verified that such an initramfs does have snaps seemingly working. --- /usr/share/initramfs-tools/scripts/init-bottom/overlayroot.dist

[Bug 1797218] Re: snap confine fails on top of overlayroot

2018-10-12 Thread Zygmunt Krynicki
I believe that the pull request referenced above is sufficient to fix this issue. Nothing else has to change. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1797218 Title: snap confine fails on top

[Bug 1797218] Re: snap confine fails on top of overlayroot

2018-10-12 Thread Zygmunt Krynicki
I reproduced the issue and came up with a workaround: https://github.com/snapcore/snapd/pull/5974 The workaround may need additional fix for an unexpected situation (where we need to reload snap-confine's apparmor profile after generating the overlayfs snippet). I'm investigating that now. --

[Bug 1797218] Re: snap confine fails on top of overlayroot

2018-10-12 Thread Zygmunt Krynicki
** Changed in: snapd (Ubuntu) Assignee: (unassigned) => Zygmunt Krynicki (zyga) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1797218 Title: snap confine fails on top of overlayroot To manage

[Bug 1797218] Re: snap confine fails on top of overlayroot

2018-10-11 Thread Joshua Powers
** Description changed: - $ cat /etc/cloud/build.info + # Summary + + snap confinement fails on top of overlayroot + + + # Steps to reproduce: + + These steps are from comment #11, login with root/passw0rd: + + $

[Bug 1797218] Re: snap confine fails on top of overlayroot

2018-10-11 Thread Ryan Harper
I suspect this reloading of profiles from the core snap has something to do with the failure. Oct 11 21:46:42 ubuntu systemd[1]: Mounting Mount unit for core, revision 5548... Oct 11 21:46:42 ubuntu systemd[1]: Mounted Mount unit for core, revision 5548. Oct 11 21:46:43 ubuntu snapd[745]:

[Bug 1797218] Re: snap confine fails on top of overlayroot

2018-10-11 Thread Scott Moser
** Summary changed: - boot hangs in curtin vmtest + snap confine fails on top of overlayroot -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1797218 Title: snap confine fails on top of overlayroot