This bug cannot be reproduced on jammy with the snapd deb of any
version, since the system apparmor parser does not support the
prompting. For completeness, here is a demonstration that the error
doesn't occur with either 2.72+22.04 or 2.73+22.04.

Testing for jammy-proposed:
==============================

1. (Fail to) Reproduce the error on jammy deb snapd 2.72+ubuntu22.04 (on jammy):
---------------------------------------------------------------------------

The system apparmor parser on jammy does not support the apparmor-
prompting experimental feature, so this bug cannot be reproduced on
jammy. (The default kernel does not support prompting either, though the
hwe kernel does support prompting.)

If we update to the hwe kernel and then carry out the same steps as on
other releases:

Created request-rules.json file with 10002 rules using the following
python script:
https://gist.github.com/olivercalder/ab99293cd888b231871d6b0fd51fa5c1

Ensure the prompting-client snap is installed.

Confirm the snapd version:
```
$ snap version
snap          2.72+ubuntu22.04
snapd         2.72+ubuntu22.04
series        16
ubuntu        22.04
kernel        6.8.0-87-generic
architecture  amd64
```

Ensure prompting is initially disabled:
```
sudo snap set system experimental.apparmor-prompting=false
```

Copy the request rules file to the location:
```
sudo mkdir -p /var/lib/snapd/interfaces-requests
sudo cp request-rules.json /var/lib/snapd/interfaces-requests/request-rules.json
```

Attempt to enable prompting:
```
sudo snap set system experimental.apparmor-prompting=true
```

We get the following error:
```
error: cannot perform the following tasks:
- Run configure hook of "core" snap (run hook "configure": cannot enable 
prompting feature as it is not supported by the system: apparmor parser does 
not support the prompt qualifier)
```

If we try to run a snap command, it returns immediately:
```
$ snap list
Name               Version                         Rev    Tracking       
Publisher   Notes
bare               1.0                             5      latest/stable  
canonical✓  base
core20             20250822                        2682   latest/stable  
canonical✓  base
core22             20251009                        2163   latest/stable  
canonical✓  base
gnome-42-2204      0+git.837775c-sdk0+git.7b07595  226    latest/stable  
canonical✓  -
gtk-common-themes  0.1-81-g442e511                 1535   latest/stable  
canonical✓  -
lxd                5.0.5-5c60378                   36558  5.0/stable/…   
canonical✓  -
prompting-client   0+git.d542a5d                   104    latest/stable  
canonical✓  -
snapd              2.72                            25577  latest/stable  
canonical✓  snapd
```

Thus, this bug does not occur with snapd 2.72+ubuntu22.04.

2. Update to jammy-proposed deb snapd 2.73+ubuntu22.04 (on jammy):
--------------------------------------------------------------------------

Created request-rules.json file with 10002 rules using the following
python script:
https://gist.github.com/olivercalder/ab99293cd888b231871d6b0fd51fa5c1

Ensure the prompting-client snap is installed.

Confirm the snapd version:
```
$ snap version
snap          2.73+ubuntu22.04
snapd         2.73+ubuntu22.04
series        16
ubuntu        22.04
kernel        6.8.0-87-generic
architecture  amd64
```

Ensure prompting is initially disabled:
```
sudo snap set system experimental.apparmor-prompting=false
```

Copy the request rules file to the location:
```
sudo mkdir -p /var/lib/snapd/interfaces-requests
sudo cp request-rules.json /var/lib/snapd/interfaces-requests/request-rules.json
```

Enable prompting:
```
sudo snap set system experimental.apparmor-prompting=true
```

We get the following error:
```
error: cannot perform the following tasks:
- Run configure hook of "core" snap (run hook "configure": cannot enable 
prompting feature as it is not supported by the system: apparmor parser does 
not support the prompt qualifier)
```

If we try to run a snap command, it returns immediately:
```
$ snap list
Name               Version                         Rev    Tracking       
Publisher   Notes
bare               1.0                             5      latest/stable  
canonical✓  base
core20             20250822                        2682   latest/stable  
canonical✓  base
core22             20251009                        2163   latest/stable  
canonical✓  base
gnome-42-2204      0+git.837775c-sdk0+git.7b07595  226    latest/stable  
canonical✓  -
gtk-common-themes  0.1-81-g442e511                 1535   latest/stable  
canonical✓  -
lxd                5.0.5-5c60378                   36558  5.0/stable/…   
canonical✓  -
prompting-client   0+git.d542a5d                   104    latest/stable  
canonical✓  -
snapd              2.72                            25577  latest/stable  
canonical✓  snapd
```

Therefore, I can confirm that the bug also does not occur with snapd
2.73+ubuntu22.04 on jammy.

** Tags removed: verification-needed-jammy
** Tags added: verification-done-jammy

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2127189

Title:
  Too many permission prompting rules can prevent snapd to start

To manage notifications about this bug go to:
https://bugs.launchpad.net/snapd/+bug/2127189/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to