release: 2.75.3 - #16993
Closed
maykathm wants to merge 23 commits into
Closed
Conversation
The following fixes was specifically required to improve FDE: canonical/secboot#515 make sure to interpret bit 30 of HSTS6 correctly canonical/secboot#514 policy check for degraded firmware shouldn't fail on unexpected event types canonical/secboot#521 do not fail on unknown vendor defined event types in the TCG log The update also includes other fixes.
* secboot: update to rev 7557d93 for TPM/FDE bug fixes
- Access to the HFSTS registers via the HECI is not possible on systems
that use Intel's High Assurance Platform mode. The startup ACM mirrors
some BootGuard policy settings to a MSR so this can be checked as a
workaround.
- Do not fail preinstall check due to lack of TPM_CAP_AUTH_POLICIES.
* secboot: update to rev 3f8b98c for TPM/FDE bug fixes
- Access to the HFSTS registers via the HECI is not possible on systems
that use Intel's High Assurance Platform mode. The startup ACM mirrors
some BootGuard policy settings to a MSR so this can be checked as a
workaround. This is a partial fix.
- Permit pre-OS application launches from SPI flash in PCR4. Fixes:
- canonical/secboot#509
- FR-12927
- Relax recovery key parsing. Rather than permitting each group of 5 digits
be separated by an optional '-', just permit an arbitrary number of '-' or
whitespace characters instead. Fixes:
- FR-11924
- Do not fail preinstall check due to lack of TPM_CAP_AUTH_POLICIES. Fixes:
- canonical/secboot#408
- The PCR4 and PCR7 checks were relying on the BootCurrent EFI variable to
identify the EV_EFI_BOOT_SERVICES_APPLICATION. Instead, assume that the
first OS-present EV_EFI_BOOT_SERVICES_APPLICATION event that isn't Absolute
is the initial OS loader. Fixes:
- canonical/secboot#517
- canonical/secboot#519
* tests/nested: adapt error message to secboot change
* tests/nested/manual: review improvements
Update the loop device back-file path matching to accept snaps from either `/run/mnt/ubuntu-seed/` or `/run/mnt/data/`, as UC26+ systems may mount from ubuntu-seed on first boot.
…for device initialization (canonical#16903)
is needed in the tests.
Kernel stub fails to load initrd with error EFI_OUT_OF_RESOURCES.
On UC26 we hide python in a different place to the usual so the default apparmor template does not allow running it - however we need it in the path for our test scripts.
Replace hardcoded `/usr/bin/python3` shebangs with `/usr/bin/env python3` as python3 is not in /usr/bin in UC26.
As we do not have cloud-init in the default track, so the image used in the main suite does not use it. The core26 cloud-init track is already tested in the nested tests.
Add nested_get_base_channel() function to centralize logic for determining the appropriate base snap channel. This function handles special cases for core26 systems and cloud-init configurations, and replaces direct usage of CORE_CHANNEL variable throughout the codebase.
on UC26 images, by setting appropriately the path.
Signed-off-by: Miguel Pires <miguel.pires@canonical.com>
…fter the test, bump size (canonical#16954) Ensure that the state before and after the state is consistent. Specifically, mount units created during suite prepare are carried over to the test, thus mounting a tmpfs on top of /var/lib/snapd creates a discrepancy between e.g. unit files under /etc/systemd/system and actual snapd state. Adding purge ensures that the system state and snapd state match again. Signed-off-by: Maciej Borzecki <maciej.borzecki@canonical.com>
Pass PATH from spread.yaml instead of adding a path to the default one when using su to run a command, to help maintainability.
…cal#16968) * tests: use 5.21 channel for LXD on 20.04 systems and older * tests: add comment explaining why we're using 5.21
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## release/2.75 #16993 +/- ##
================================================
+ Coverage 77.56% 77.62% +0.05%
================================================
Files 1359 1353 -6
Lines 187970 187895 -75
Branches 2446 2446
================================================
+ Hits 145793 145847 +54
+ Misses 33367 33240 -127
+ Partials 8810 8808 -2
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
|
Thu Apr 30 08:44:09 UTC 2026 Failures:Preparing:
Executing:
Restoring:
Skipped tests from snapd-testing-skipIf you wish to have any of the below tests run in your PR, in your PR description, add 'unskip:' followed by a copy-and-pasted list (without variants) of the below tests you wish to run (unskip plus test list must be valid yaml)
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
7 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
DEBEMAIL="Katie May <katie.may@canonical.com>" release-tools/changelog.py 2.75.3 2143882 NEWS.mdLP bugs: https://launchpad.net/snapd/+milestone/2.75
SRU bug: https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/2143882
Jira: https://warthogs.atlassian.net/browse/SNAPDENG-36538
CHERRY PICKED:
Functional fixes:
Test fixes:
Requires rebase merge