component.go

// -*- Mode: Go; indent-tabs-mode: t -*-

/*
 * Copyright (C) 2023 Canonical Ltd
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 3 as
 * published by the Free Software Foundation.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program.  If not, see <http://www.gnu.org/licenses/>.
 *
 */

package snapstate

import (
	"context"
	"errors"
	"fmt"
	"os"

	"github.com/snapcore/snapd/asserts"
	"github.com/snapcore/snapd/asserts/snapasserts"
	"github.com/snapcore/snapd/i18n"
	"github.com/snapcore/snapd/overlord/snapstate/backend"
	"github.com/snapcore/snapd/overlord/snapstate/sequence"
	"github.com/snapcore/snapd/overlord/state"
	"github.com/snapcore/snapd/snap"
	"github.com/snapcore/snapd/snap/naming"
	"github.com/snapcore/snapd/store"
)

// InstallComponents installs all of the components in the given names list. The
// snap represented by info must already be installed, and all of the components
// in names should not be installed prior to calling this function.
func InstallComponents(
	ctx context.Context,
	st *state.State,
	names []string,
	info *snap.Info,
	vsets *snapasserts.ValidationSets,
	opts Options,
) ([]*state.TaskSet, error) {
	if err := opts.setDefaultLane(st); err != nil {
		return nil, err
	}

	if err := setDefaultSnapstateOptions(st, &opts); err != nil {
		return nil, err
	}

	var snapst SnapState
	err := Get(st, info.InstanceName(), &snapst)
	if err != nil {
		if errors.Is(err, state.ErrNoState) {
			return nil, &snap.NotInstalledError{Snap: info.InstanceName()}
		}
		return nil, err
	}

	if vsets == nil {
		// we only check for already installed components when no validation
		// sets are provided, since this will allow us to refresh and install
		// new components at the same time when resolving validation sets
		var alreadyInstalled []string
		for _, comp := range names {
			if snapst.CurrentComponentSideInfo(naming.NewComponentRef(info.SnapName(), comp)) != nil {
				alreadyInstalled = append(alreadyInstalled, comp)
			}
		}

		if len(alreadyInstalled) > 0 {
			return nil, snap.NewAlreadyInstalledComponentsError(info.SnapName(), alreadyInstalled)
		}
	}

	revOpts := RevisionOptions{
		Revision:       snapst.Current,
		Channel:        snapst.TrackingChannel,
		ValidationSets: vsets,
	}

	if err := revOpts.initializeValidationSets(cachedEnforcedValidationSets(st), opts); err != nil {
		return nil, err
	}

	compsups, err := componentSetupsForInstall(ctx, st, names, snapst, revOpts, opts)
	if err != nil {
		return nil, err
	}

	pres, err := revOpts.ValidationSets.Presence(info)
	if err != nil {
		return nil, err
	}

	comps := make(map[string]snap.Revision, len(compsups))
	for _, comp := range compsups {
		comps[comp.ComponentName()] = comp.Revision()
	}

	if err := checkComponentsPresenceAndRevision(info.SnapName(), comps, pres, "install"); err != nil {
		return nil, err
	}

	snapUserID, err := userIDForSnap(st, &snapst, opts.UserID)
	if err != nil {
		return nil, err
	}

	snapsup := SnapSetup{
		Base:                        info.Base,
		SideInfo:                    &info.SideInfo,
		Channel:                     info.Channel,
		Flags:                       opts.Flags.ForSnapSetup(),
		Type:                        info.Type(),
		Version:                     info.Version,
		PlugsOnly:                   len(info.Slots) == 0,
		InstanceKey:                 info.InstanceKey,
		UserID:                      snapUserID,
		ComponentExclusiveOperation: true,
	}

	setupSecurity := st.NewTask("setup-profiles",
		fmt.Sprintf(i18n.G("Setup snap %q (%s) security profiles"), info.InstanceName(), info.Revision))
	setupSecurity.Set("snap-setup", snapsup)

	var kmodSetup *state.Task
	if requiresKmodSetup(&snapst, compsups) {
		kmodSetup = st.NewTask("prepare-kernel-modules-components", fmt.Sprintf(
			i18n.G("Prepare kernel-modules components for %q%s"), info.InstanceName(), info.Revision,
		))
		kmodSetup.Set("snap-setup-task", setupSecurity.ID())
	}

	lane := generateLane(st, opts)

	tss := make([]*state.TaskSet, 0, len(compsups))
	compSetupIDs := make([]string, 0, len(compsups))
	for _, compsup := range compsups {
		// since we are installing multiple components, we don't want to setup
		// the security profiles until the end
		compsup.MultiComponentInstall = true

		// here we share the setupSecurity and kmodSetup tasks between all of
		// the component task chains. this results in multiple parallel tasks
		// (one per component) that have synchronization points at the
		// setupSecurity and kmodSetup tasks.
		cts, err := doInstallComponent(st, &snapst, compsup, &snapsup, setupSecurity, setupSecurity, kmodSetup, opts.ConflictOptions)
		if err != nil {
			return nil, err
		}

		compSetupIDs = append(compSetupIDs, cts.compSetupTaskID)

		cts.ts.JoinLane(lane)
		tss = append(tss, cts.ts)
	}

	setupSecurity.Set("component-setup-tasks", compSetupIDs)

	ts := state.NewTaskSet(setupSecurity)
	ts.MarkEdge(setupSecurity, SnapSetupEdge)

	if kmodSetup != nil {
		ts.AddTask(kmodSetup)
	}

	// note that this must come after all tasks are added to the task set
	ts.JoinLane(lane)

	return append(tss, ts), nil
}

func componentSetupsForInstall(ctx context.Context, st *state.State, names []string, snapst SnapState, revOpts RevisionOptions, opts Options) ([]ComponentSetup, error) {
	if len(names) == 0 {
		return nil, nil
	}

	current, err := currentSnaps(st)
	if err != nil {
		return nil, err
	}

	userID, err := userIDForSnap(st, &snapst, opts.UserID)
	if err != nil {
		return nil, err
	}
	user, err := userFromUserID(st, userID)
	if err != nil {
		return nil, err
	}

	action, err := installComponentAction(snapst, revOpts, opts)
	if err != nil {
		return nil, err
	}

	refreshOpts, err := refreshOptions(st, &store.RefreshOptions{
		IncludeResources: true,
	})
	if err != nil {
		return nil, err
	}

	sto := Store(st, opts.DeviceCtx)
	st.Unlock()
	sars, _, err := sto.SnapAction(ctx, current, []*store.SnapAction{action}, nil, user, refreshOpts)
	st.Lock()
	if err != nil {
		return nil, err
	}

	if len(sars) != 1 {
		return nil, fmt.Errorf("internal error: expected exactly one snap action result, got %d", len(sars))
	}

	return componentTargetsFromActionResult("install", sars[0], names)
}

// installComponentAction returns a store action that is used to get a list of
// components that are available in the store.
func installComponentAction(snapst SnapState, revOpts RevisionOptions, opts Options) (*store.SnapAction, error) {
	if revOpts.Revision.Unset() {
		return nil, errors.New("internal error: must specify snap revision when installing only components")
	}

	index := snapst.LastIndex(revOpts.Revision)
	if index == -1 {
		return nil, fmt.Errorf("internal error: cannot find snap revision %s in sequence", revOpts.Revision)
	}
	si := snapst.Sequence.SideInfos()[index]

	if si.SnapID == "" {
		return nil, errors.New("internal error: cannot install components for a snap that is unknown to the store")
	}

	// we send a refresh action, since that is what the store requested that
	// we do in this case
	action := &store.SnapAction{
		Action:          "refresh",
		SnapID:          si.SnapID,
		InstanceName:    snapst.InstanceName(),
		ResourceInstall: true,
	}

	if err := completeStoreAction(action, revOpts, opts.Flags.IgnoreValidation); err != nil {
		return nil, err
	}

	return action, nil
}

// InstallComponentPath returns a set of tasks for installing a snap component
// from a file path.
//
// Note that the state must be locked by the caller. The provided SideInfo can
// contain just a name which results in local sideloading of the component, or
// full metadata in which case the component will appear as installed from the
// store.
func InstallComponentPath(st *state.State, csi *snap.ComponentSideInfo, info *snap.Info,
	path string, opts Options) (*state.TaskSet, error) {
	if err := opts.setDefaultLane(st); err != nil {
		return nil, err
	}

	if err := setDefaultSnapstateOptions(st, &opts); err != nil {
		return nil, err
	}

	var snapst SnapState
	// owner snap must be already installed
	err := Get(st, info.InstanceName(), &snapst)
	if err != nil {
		if errors.Is(err, state.ErrNoState) {
			return nil, &snap.NotInstalledError{Snap: info.InstanceName()}
		}
		return nil, err
	}

	// Read ComponentInfo and verify that the component is consistent with the
	// data in the snap info
	compInfo, _, err := backend.OpenComponentFile(path, info, csi)
	if err != nil {
		return nil, err
	}

	snapsup := SnapSetup{
		Base:                        info.Base,
		SideInfo:                    &info.SideInfo,
		Channel:                     info.Channel,
		Flags:                       opts.Flags.ForSnapSetup(),
		Type:                        info.Type(),
		Version:                     info.Version,
		PlugsOnly:                   len(info.Slots) == 0,
		InstanceKey:                 info.InstanceKey,
		ComponentExclusiveOperation: true,
	}
	compSetup := ComponentSetup{
		CompSideInfo: csi,
		CompType:     compInfo.Type,
		CompPath:     path,
		ComponentInstallFlags: ComponentInstallFlags{
			// The file passed around is temporary, make sure it gets removed.
			RemoveComponentPath: true,
		},
	}

	cts, err := doInstallComponent(st, &snapst, compSetup, &snapsup, nil, nil, nil, ConflictOptions{})
	if err != nil {
		return nil, err
	}

	// TODO:COMPS: instead of doing this, we should convert this function to
	// operate on multiple components so that it works like InstallComponents.
	// this would improve performance, especially in the case of kernel module
	// components.
	begin, err := cts.ts.Edge(BeginEdge)
	if err != nil {
		return nil, fmt.Errorf("internal error: cannot find begin edge on component install task set: %v", err)
	}

	begin.Set("component-setup-tasks", []string{cts.compSetupTaskID})
	cts.ts.MarkEdge(begin, SnapSetupEdge)

	cts.ts.JoinLane(generateLane(st, opts))

	return cts.ts, nil
}

type ComponentInstallFlags struct {
	RemoveComponentPath   bool `json:"remove-component-path,omitempty"`
	MultiComponentInstall bool `json:"joint-snap-components-install,omitempty"`
}

type componentInstallTaskSet struct {
	ts              *state.TaskSet
	compSetupTaskID string

	beforeLocalSystemModificationsTasks []*state.Task
	beforeLinkTasks                     []*state.Task
	maybeLinkTask                       *state.Task
	postHookToDiscardTasks              []*state.Task
	maybeDiscardTask                    *state.Task
}

// componentInstallChoreographer orchestrates the construction of a task graph
// for installing a snap component. It provides phase methods that correspond to
// different stages of the installation.
type componentInstallChoreographer struct {
	compsup *ComponentSetup
	snapsup *SnapSetup
	snapst  *SnapState

	// compsupTask is the task that carries the ComponentSetup for this
	// operation. Can optionally be injected by the caller.
	compsupTask *state.Task

	// snapsupTask is the task that carries the SnapSetup for this operation.
	// Can optionally be injected by the caller.
	snapsupTask *state.Task

	// setupSecurityTask is the "setup-security" task that might be injected by the
	// caller.
	setupSecurityTask *state.Task

	// kmodSetupTask is the "prepare-kernel-modules-components" task that might be
	// injected by the caller.
	kmodSetupTask *state.Task
}

func newComponentInstallChoreographer(
	st *state.State,
	snapsup *SnapSetup,
	snapst *SnapState,
	compsup *ComponentSetup,
	copts ConflictOptions,
	snapsupTask, setupSecurityTask, kmodSetupTask *state.Task,
) (*componentInstallChoreographer, error) {
	if compsup.SkipAssertionsDownload {
		return nil, errors.New("internal error: component setup cannot have SkipFetchingAssertions set by caller")
	}

	// if we're doing a revert, we shouldn't attempt to fetch assertions from
	// the store again.
	//
	// if we're installing a component from somewhere on disk, we can't reach
	// out to the store. thus, try and validate the component with what we
	// already have.
	compsup.SkipAssertionsDownload = snapsup.Revert || compsup.CompPath != ""

	if err := ensureSnapAndComponentsAssertionStatus(
		*snapsup.SideInfo, []snap.ComponentSideInfo{*compsup.CompSideInfo},
	); err != nil {
		return nil, err
	}

	if snapst.IsInstalled() && !snapst.Active {
		return nil, fmt.Errorf(
			"cannot install component %q for disabled snap %q",
			compsup.CompSideInfo.Component, snapsup.SideInfo.RealName,
		)
	}

	// we consider the same conflicts as if the component was actually the snap.
	if err := checkChangeConflictIgnoringOneChange(st, snapsup.InstanceName(), snapst, copts); err != nil {
		return nil, err
	}

	return &componentInstallChoreographer{
		snapsup: snapsup,
		snapst:  snapst,
		compsup: compsup,

		// we inject some tasks here. the choreographer considers these when
		// building the full chain and splices them into the correct places. if
		// they're nil, then the choreographer will create them on demand.
		snapsupTask:       snapsupTask,
		setupSecurityTask: setupSecurityTask,
		kmodSetupTask:     kmodSetupTask,
	}, nil
}

// revisionString returns the formatted revision string for task descriptions.
func (cc *componentInstallChoreographer) revisionString() string {
	return fmt.Sprintf(" (%s)", cc.compsup.CompSideInfo.Revision)
}

// revisionIsPresent checks if the component revision already exists on disk.
func (cc *componentInstallChoreographer) revisionIsPresent() bool {
	return cc.snapst.IsComponentRevPresent(cc.compsup.CompSideInfo)
}

// installed checks if the component is currently installed for the current snap
// revision.
func (cc *componentInstallChoreographer) installed() bool {
	return cc.snapst.IsComponentInCurrentSeq(cc.compsup.CompSideInfo.Component)
}

// canDiscardOldRevision checks if the old component revision can be discarded
// after installation.
func (cc *componentInstallChoreographer) canDiscardOldRevision() bool {
	si := cc.snapsup.SideInfo
	csi := cc.compsup.CompSideInfo

	changingComponentRev := false
	if cc.installed() {
		currentRev := cc.snapst.CurrentComponentSideInfo(csi.Component).Revision
		changingComponentRev = currentRev != csi.Revision
	}

	changingSnapRev := cc.snapst.IsInstalled() && cc.snapst.Current != si.Revision

	return !changingSnapRev && changingComponentRev &&
		!cc.snapst.IsCurrentComponentRevInAnyNonCurrentSeq(csi.Component)
}

// targetSnapAlreadyHasComponentRevision reports whether a non-current target
// snap revision already contains the desired component revision. In that case,
// we must skip creating link-component entirely. Otherwise, the undo path
// would end up unlinking a component that should remain linked for that
// snap revision.
func (cc *componentInstallChoreographer) targetSnapAlreadyHasComponentRevision() bool {
	if !cc.snapst.IsInstalled() {
		return false
	}

	targetSnapRevision := cc.snapsup.Revision()
	targetCompSideInfo := cc.compsup.CompSideInfo

	// only consider non-current revisions when checking for the component.
	if cc.snapst.Current == targetSnapRevision {
		// when operating on the current snap revision, we're either going to:
		// * install a new component, for which we'll always need a
		//   link-component task.
		// * change revisions of an already present component. in that case, we
		//   create unlink-current-component and then a later link-component.
		return false
	}

	idx := cc.snapst.LastIndex(targetSnapRevision)
	if idx < 0 {
		return false
	}
	// the target snap revision is already present at idx

	cs := cc.snapst.Sequence.ComponentStateForRev(idx, targetCompSideInfo.Component)
	if cs == nil {
		return false
	}

	return cs.SideInfo.Equal(targetCompSideInfo)
}

func (cc *componentInstallChoreographer) BeforeLocalSystemMod(st *state.State, s *taskChainSpan) ([]*state.Task, error) {
	// Check if we already have the revision in the snaps folder (alters tasks).
	// Note that this will search for all snap revisions in the system.
	needsDownload := cc.compsup.CompPath == "" && !cc.revisionIsPresent()

	var prepare *state.Task
	if needsDownload {
		// if we have a local revision here we go back to that
		prepare = st.NewTask("download-component", fmt.Sprintf(
			i18n.G("Download component %q%s"), cc.compsup.ComponentName(), cc.revisionString()))
	} else {
		prepare = st.NewTask("prepare-component", fmt.Sprintf(
			i18n.G("Prepare component %q%s"), cc.compsup.CompPath, cc.revisionString()))
	}

	if cc.compsupTask != nil {
		prepare.Set("component-setup-task", cc.compsupTask.ID())
	} else {
		prepare.Set("component-setup", cc.compsup)
		prepare.Set("component-setup-task", prepare.ID())
		cc.compsupTask = prepare
	}

	if cc.snapsupTask != nil {
		prepare.Set("snap-setup-task", cc.snapsupTask.ID())
	} else {
		prepare.Set("snap-setup", cc.snapsup)
		prepare.Set("snap-setup-task", prepare.ID())
		cc.snapsupTask = prepare
	}

	// let the task chain builder know that future tasks should have this task data
	// attached to them
	s.SetTaskData(map[string]any{
		"component-setup-task": cc.compsupTask.ID(),
		"snap-setup-task":      cc.snapsupTask.ID(),
	})

	// prepare already has the needed task data attached to it
	s.AppendWithoutData(prepare)
	s.UpdateEdge(prepare, BeginEdge)
	s.UpdateEdge(prepare, LastBeforeLocalModificationsEdge)

	// if the component we're installing has a revision from the store, then we
	// need to validate it. note that we will still run this task even if we're
	// reusing an already installed component, since we will most likely need to
	// fetch a new snap-resource-pair assertion. note that the behavior of
	// validate-component is dependent on ComponentSetup.SkipAssertionsDownload.
	if cc.compsup.Revision().Store() {
		validate := st.NewTask("validate-component", fmt.Sprintf(
			i18n.G("Fetch and check assertions for component %q%s"), cc.compsup.ComponentName(), cc.revisionString()))
		s.Append(validate)
		s.UpdateEdge(validate, LastBeforeLocalModificationsEdge)
	}

	return s.Close()
}

func (cc *componentInstallChoreographer) BeforeLink(st *state.State, s *taskChainSpan) ([]*state.Task, error) {
	csi := cc.compsup.CompSideInfo
	si := cc.snapsup.SideInfo

	// Task that copies the file and creates mount units
	if !cc.revisionIsPresent() {
		mount := st.NewTask("mount-component", fmt.Sprintf(i18n.G("Mount component %q%s"), csi.Component, cc.revisionString()))
		s.Append(mount)
	} else if cc.compsup.RemoveComponentPath {
		// If the revision is local, we will not need the temporary snap. This can happen when e.g.
		// side-loading a local revision again. The path is only needed in the "mount-snap" handler
		// and that is skipped for local revisions.
		if err := os.Remove(cc.compsup.CompPath); err != nil {
			return nil, err
		}
	}

	if !cc.snapsup.Revert && cc.installed() {
		preRefreshHook := SetupPreRefreshComponentHook(st, cc.snapsup.InstanceName(), csi.Component.ComponentName)
		s.Append(preRefreshHook)
	}

	changingSnapRev := cc.snapst.IsInstalled() && cc.snapst.Current != si.Revision

	// note that we don't unlink the current component if we're also changing
	// snap revisions while installing this component. that is because we don't
	// want to remove the component from the state of the previous snap revision
	// (for the purpose of something like a revert). additionally, this is
	// consistent with us keeping previous snap revisions mounted after changing
	// their revision. so we really only want to create this task if we are
	// replacing a component in the current snap revision
	if !changingSnapRev && cc.installed() {
		unlink := st.NewTask("unlink-current-component", fmt.Sprintf(i18n.G("Make current revision for component %q unavailable"), csi.Component))
		s.Append(unlink)
	}

	// (MultiComponentInstall && securityTask == nil) results in the absence of
	// a setup-profiles task. this happens during snap installation, where we
	// reuse the snap's setup-profiles task
	if !cc.compsup.MultiComponentInstall && cc.setupSecurityTask == nil {
		setupSecurity := st.NewTask("setup-profiles", fmt.Sprintf(i18n.G("Setup component %q%s security profiles"), csi.Component, cc.revisionString()))
		s.Append(setupSecurity)
	} else if cc.setupSecurityTask != nil {
		// pre-existing tasks don't get task data added to them, nor do they get
		// added to the task set. just set up the dependency
		s.b.JoinOn(cc.setupSecurityTask)
	}

	return s.Close()
}

func (cc *componentInstallChoreographer) PostHookToBeforeDiscard(st *state.State, s *taskChainSpan) ([]*state.Task, error) {
	csi := cc.compsup.CompSideInfo

	if !cc.installed() {
		hook := SetupInstallComponentHook(st, cc.snapsup.InstanceName(), csi.Component.ComponentName)
		s.Append(hook)
	} else {
		hook := SetupPostRefreshComponentHook(st, cc.snapsup.InstanceName(), csi.Component.ComponentName)
		s.Append(hook)
	}

	// kernel-modules preparation when not handled by a shared task
	if !cc.compsup.MultiComponentInstall && cc.kmodSetupTask == nil && cc.compsup.CompType == snap.KernelModulesComponent {
		cc.kmodSetupTask = st.NewTask("prepare-kernel-modules-components",
			fmt.Sprintf(i18n.G("Prepare kernel-modules component %q%s"), csi.Component, cc.revisionString()))
		s.Append(cc.kmodSetupTask)
	} else if cc.kmodSetupTask != nil {
		// pre-existing tasks don't get task data added to them, nor do they get
		// added to the task set. just set up the dependency
		s.b.JoinOn(cc.kmodSetupTask)
	}

	return s.Close()
}

func (cc *componentInstallChoreographer) choreograph(st *state.State) (componentInstallTaskSet, error) {
	b := newTaskChainBuilder()

	beforeLocalSystemMods, err := cc.BeforeLocalSystemMod(st, b.OpenSpan())
	if err != nil {
		return componentInstallTaskSet{}, err
	}

	beforeLink, err := cc.BeforeLink(st, b.OpenSpan())
	if err != nil {
		return componentInstallTaskSet{}, err
	}

	csi := cc.compsup.CompSideInfo

	// add the link-component task to the chain. note, this isn't part of one of
	// the spans, since callers want to be able to reference it individually
	var maybeLink *state.Task
	if !cc.targetSnapAlreadyHasComponentRevision() {
		// finalize (sets SnapState). when the target revision already contain
		// the desired component state, there is nothing to do.
		maybeLink = st.NewTask(
			"link-component", fmt.Sprintf(
				i18n.G("Make component %q (%s) available to the system"), csi.Component, csi.Revision,
			),
		)
		b.Append(maybeLink)
	}

	postOpHookToBeforeDiscard, err := cc.PostHookToBeforeDiscard(st, b.OpenSpan())
	if err != nil {
		return componentInstallTaskSet{}, err
	}

	// add the discard-component task to the chain. note, this isn't part of one
	// of the spans, since callers want to be able to reference it individually
	var maybeDiscard *state.Task
	if cc.canDiscardOldRevision() {
		// we can only discard the component if all of the following are true:
		// * we are not changing the snap revision
		// * we are actually changing the component revision (or it is not installed)
		// * the component is not used in any other sequence point
		maybeDiscard = st.NewTask("discard-component", fmt.Sprintf(i18n.G("Discard previous revision for component %q"), csi.Component))
		b.Append(maybeDiscard)
	}

	return componentInstallTaskSet{
		ts:              b.TaskSet(),
		compSetupTaskID: cc.compsupTask.ID(),

		beforeLocalSystemModificationsTasks: beforeLocalSystemMods,
		beforeLinkTasks:                     beforeLink,
		maybeLinkTask:                       maybeLink,
		postHookToDiscardTasks:              postOpHookToBeforeDiscard,
		maybeDiscardTask:                    maybeDiscard,
	}, nil
}

// doInstallComponent might be called with the owner snap installed or not.
//
// TODO: make this function, and other relevant places, operate on pointers to
// SnapState, ComponentSetup, and SnapSetup.
func doInstallComponent(
	st *state.State,
	snapst *SnapState,
	compsup ComponentSetup,
	snapsup *SnapSetup,
	snapsupTask *state.Task,
	setupSecurity, kmodSetup *state.Task,
	copts ConflictOptions,
) (componentInstallTaskSet, error) {
	cc, err := newComponentInstallChoreographer(
		st, snapsup, snapst, &compsup, copts,
		snapsupTask, setupSecurity, kmodSetup,
	)
	if err != nil {
		return componentInstallTaskSet{}, err
	}

	cts, err := cc.choreograph(st)
	if err != nil {
		return componentInstallTaskSet{}, err
	}

	return cts, nil
}

type RemoveComponentsOpts struct {
	RefreshProfile bool
	ConflictOptions
}

// RemoveComponents returns a taskset that removes the components in compName
// that belog to snapName.
func RemoveComponents(st *state.State, snapName string, compName []string, opts RemoveComponentsOpts) ([]*state.TaskSet, error) {
	var snapst SnapState
	err := Get(st, snapName, &snapst)
	if err != nil && !errors.Is(err, state.ErrNoState) {
		return nil, err
	}
	if !snapst.IsInstalled() {
		return nil, &snap.NotInstalledError{Snap: snapName, Rev: snap.R(0)}
	}

	info, err := snapst.CurrentInfo()
	if err != nil {
		return nil, err
	}

	var setupSecurity *state.Task
	if opts.RefreshProfile {
		revisionStr := fmt.Sprintf(" (%s)", info.Revision)
		setupSecurity = st.NewTask("setup-profiles",
			fmt.Sprintf(i18n.G("Setup snap %q%s security profiles"), snapName, revisionStr))
	}

	var tss []*state.TaskSet
	for _, comp := range compName {
		cref := naming.NewComponentRef(snapName, comp)
		compst := snapst.CurrentComponentState(cref)
		if compst == nil {
			return nil, &snap.ComponentNotInstalledError{
				NotInstalledError: snap.NotInstalledError{
					Snap: info.InstanceName(),
					Rev:  info.Revision,
				},
				Component: comp,
				CompRev:   snap.R(0),
			}
		}
		ts, err := removeComponentTasks(st, &snapst, compst, info, setupSecurity, opts.ConflictOptions)
		if err != nil {
			return nil, err
		}
		tss = append(tss, ts)
	}

	if opts.RefreshProfile {
		tss = append(tss, state.NewTaskSet(setupSecurity))
	}

	return tss, nil
}

func removeComponentTasks(st *state.State, snapst *SnapState, compst *sequence.ComponentState, info *snap.Info, setupSecurity *state.Task, copts ConflictOptions) (*state.TaskSet, error) {
	instName := info.InstanceName()

	// For the moment we consider the same conflicts as if the component
	// was actually the snap.
	if err := checkChangeConflictIgnoringOneChange(st, instName, nil, copts); err != nil {
		return nil, err
	}

	// check if this component is required by any validation set in enforcing mode
	enforcedSets, err := EnforcedValidationSets(st)
	if err != nil {
		return nil, err
	}
	pres, err := enforcedSets.Presence(info)
	if err != nil {
		return nil, err
	}
	compPres := pres.Component(compst.SideInfo.Component.ComponentName)
	if compPres.Presence == asserts.PresenceRequired {
		return nil, fmt.Errorf("cannot remove component %q as it is required by an enforcing validation set", compst.SideInfo.Component)
	}

	snapSup := &SnapSetup{
		Base:        info.Base,
		SideInfo:    &info.SideInfo,
		Channel:     info.Channel,
		Type:        info.Type(),
		Version:     info.Version,
		PlugsOnly:   len(info.Slots) == 0,
		InstanceKey: info.InstanceKey,
	}
	compSetup := &ComponentSetup{
		CompSideInfo: compst.SideInfo,
		CompType:     compst.CompType,
	}

	removeHook := SetupRemoveComponentHook(st, instName, compst.SideInfo.Component.ComponentName)
	removeHook.Set("component-setup", compSetup)
	removeHook.Set("snap-setup", snapSup)

	setupTask, prev := removeHook, removeHook
	tasks := []*state.Task{removeHook}
	addTask := func(t *state.Task) {
		t.Set("component-setup-task", setupTask.ID())
		t.Set("snap-setup-task", setupTask.ID())
		t.WaitFor(prev)
		tasks = append(tasks, t)
		prev = t
	}

	// Unlink component
	unlink := st.NewTask("unlink-current-component", fmt.Sprintf(i18n.G(
		"Make current revision for component %q unavailable"),
		compst.SideInfo.Component))
	addTask(unlink)

	// For kernel-modules, regenerate drivers tree
	revisionStr := fmt.Sprintf(" (%s)", compst.SideInfo.Revision)
	if compst.CompType == snap.KernelModulesComponent {
		kmodSetup := st.NewTask("prepare-kernel-modules-components",
			fmt.Sprintf(i18n.G("Clear kernel-modules component %q%s"),
				compst.SideInfo.Component, revisionStr))
		addTask(kmodSetup)
	}

	// Refreshing the security profiles happens before discarding the
	// component file, as that task cannot be undone.
	if setupSecurity != nil {
		setupSecurity.WaitFor(prev)
		// We will be overwriting this object if removing multiple
		// components, but should be fine as the SnapSetup does not
		// change (snap still the same).
		setupSecurity.Set("snap-setup-task", setupTask.ID())
		prev = setupSecurity
	}

	// Discard component if not used in other sequence points
	if !snapst.IsCurrentComponentRevInAnyNonCurrentSeq(compSetup.CompSideInfo.Component) {
		discardComp := st.NewTask("discard-component", fmt.Sprintf(i18n.G(
			"Discard previous revision for component %q"),
			compst.SideInfo.Component))
		addTask(discardComp)
	}

	return state.NewTaskSet(tasks...), nil
}