From ff6da8044d01b719974a69704d4f94971473480c Mon Sep 17 00:00:00 2001 From: Sergio Cazzolato Date: Fri, 24 Jul 2026 18:11:40 -0300 Subject: [PATCH] release: 2.77 --- NEWS.md | 45 +++++++++++++++++++ packaging/arch/PKGBUILD | 2 +- packaging/debian-sid/changelog | 76 ++++++++++++++++++++++++++++++++ packaging/fedora/snapd.spec | 75 ++++++++++++++++++++++++++++++- packaging/opensuse/snapd.changes | 5 +++ packaging/opensuse/snapd.spec | 2 +- packaging/ubuntu-16.04/changelog | 76 ++++++++++++++++++++++++++++++++ packaging/ubuntu-26.04/changelog | 76 ++++++++++++++++++++++++++++++++ 8 files changed, 354 insertions(+), 3 deletions(-) diff --git a/NEWS.md b/NEWS.md index 4858ff1021..27cf9fd453 100644 --- a/NEWS.md +++ b/NEWS.md @@ -1,3 +1,48 @@ +# New in snapd 2.77 +* FDE: add reseal check after snapd refresh +* FDE: allow reprovision without factory reset +* FDE: make reprovision only seal +* FDE: add reprovision recovery key generation API +* FDE: extend /v2/system-info/storage-encrypted to show install-time decisions +* Interfaces: kernel-sched-ext-control | add the kernel sched-ext control interface implementation +* Interfaces: allow reading of /proc/self/smaps_rollup +* Interfaces: allow Wine to execute files accessed via the Document Portal +* Interfaces: allow gtk css in subdirectories +* Interfaces: docker | allow connecting to system-wide docker on classic +* Interfaces: allow the systemd networkctl command +* Interfaces: allow systemd networkd link property changes via D-Bus +* Interfaces: grant default access to memory.high in a snap's cgroup +* Interfaces: fix mountinfo denial for steam and docker interfaces +* Interfaces: add xdg-portal-permission-store interface +* Interfaces: add atkey pid and 7 relative vid support +* Interfaces: make polkit and upower implicit on Core systems only +* Confdb: add validation-sets handler and fix data loss when writing to new schemas or accounts +* Confdb: fix bug on reading uneven lists +* Confdb: support sign-only external keypair backends +* Confdb: support Encode/Decode for builtins +* Remote device management: add post install actions API, apply messages, queue response messages, and sequencing for dispatch of management messages +* Packaging: assign a default label for /tmp/snap-private-tmp and set it during installation +* Packaging: fix service startup during install and session-agent socket handling on Ubuntu 26.04+ +* Packaging: update bundled AppArmor to 5.0.2 and accept the 5.0 ABI when running as deb +* Packaging: use a relative symlink for snapctl and update steam-support udev rules +* Packaging: add back gbp.conf output directory for Ubuntu 26.04 builds +* Packaging: build deb with Go 1.23 for noble and jammy, Go 1.22 for focal +* Cross-distro: update SELinux policy to allow snapd socket activation +* Cross-distro: update SELinux policy to support /etc/ld.so.cache mounting +* Snap: add run-inhibit hints, better component reporting, snap delta support, and improved install handling +* snap-confine: work around kernel mnt_ns_loop() ordering bug on 6.18.x +* Snap-confine: allow inheriting unix sockets from snaps, link to libm, and harden bpffs mounts +* Snap-confine: fix mountinfo parsing, set FD_CLOEXEC on BPF helper fds, and support transparent huge pages +* Snap-update-ns: switch to a multi-pass process for constructing and updating mount namespaces +* Core-initrd: add missing libbpf and systemd dlopen dependencies, and increase mount burst +* Security logging: add seclog API for administrative actions and token create/remove events +* Prompting: re-enable the prompting notice backend and improve validation and error handling +* Cmd/snap: report hidden file access for paths allowed by home when prompting is active +* Cmd/snap: report read-only file access for paths allowed by system-package-doc +* Cmd/snap: fix self-managed cgroup support checks +* Experimental features: graduate layouts, classic-preserves-xdg-runtime-dir, refresh-app-awareness, and dbus-activation features +* Experimental features: warn when setting graduated or default-enabled experimental features and do not store settings for graduated features + # New in snapd 2.76.3 * FDE: support keyboard configuration at install-time for first-boot * FDE: re-enable passphrases/PINs at install-time diff --git a/packaging/arch/PKGBUILD b/packaging/arch/PKGBUILD index f43514b969..f2e9e6e749 100644 --- a/packaging/arch/PKGBUILD +++ b/packaging/arch/PKGBUILD @@ -11,7 +11,7 @@ pkgdesc="Service and tools for management of snap packages." depends=('squashfs-tools' 'libseccomp' 'libsystemd' 'libcap' 'apparmor') optdepends=('bash-completion: bash completion support' 'xdg-desktop-portal: desktop integration') -pkgver=2.76.3 +pkgver=2.77 pkgrel=1 arch=('x86_64' 'i686' 'armv7h' 'aarch64') url="https://github.com/snapcore/snapd" diff --git a/packaging/debian-sid/changelog b/packaging/debian-sid/changelog index 623609d157..700cd4f7b0 100644 --- a/packaging/debian-sid/changelog +++ b/packaging/debian-sid/changelog @@ -1,3 +1,79 @@ +snapd (2.77-1) unstable; urgency=medium + + * New upstream release, LP: #2158102 + - FDE: add reseal check after snapd refresh + - FDE: allow reprovision without factory reset + - FDE: make reprovision only seal + - FDE: add reprovision recovery key generation API + - FDE: extend /v2/system-info/storage-encrypted to show install-time decisions + - Interfaces: kernel-sched-ext-control | add the kernel sched-ext + control interface implementation + - Interfaces: allow reading of /proc/self/smaps_rollup + - Interfaces: allow Wine to execute files accessed via the Document + Portal + - Interfaces: allow gtk css in subdirectories + - Interfaces: docker | allow connecting to system-wide docker on + classic + - Interfaces: allow the systemd networkctl command + - Interfaces: allow systemd networkd link property changes via D-Bus + - Interfaces: grant default access to memory.high in a snap's cgroup + - Interfaces: fix mountinfo denial for steam and docker interfaces + - Interfaces: add xdg-portal-permission-store interface + - Interfaces: add atkey pid and 7 relative vid support + - Interfaces: make polkit and upower implicit on Core systems only + - Confdb: add validation-sets handler and fix data loss when writing + to new schemas or accounts + - Confdb: fix bug on reading uneven lists + - Confdb: support sign-only external keypair backends + - Confdb: support Encode/Decode for builtins + - Remote device management: add post install actions API, apply + messages, queue response messages, and sequencing for dispatch of + management messages + - Packaging: assign a default label for /tmp/snap-private-tmp and + set it during installation + - Packaging: fix service startup during install and session-agent + socket handling on Ubuntu 26.04+ + - Packaging: update bundled AppArmor to 5.0.2 and accept the 5.0 ABI + when running as deb + - Packaging: use a relative symlink for snapctl and update steam- + support udev rules + - Packaging: add back gbp.conf output directory for Ubuntu 26.04 + builds + - Packaging: build deb with Go 1.23 for noble and jammy, Go 1.22 for + focal + - Cross-distro: update SELinux policy to allow snapd socket + activation + - Cross-distro: update SELinux policy to support /etc/ld.so.cache + mounting + - Snap: add run-inhibit hints, better component reporting, snap + delta support, and improved install handling + - snap-confine: work around kernel mnt_ns_loop() ordering bug on + 6.18.x + - Snap-confine: allow inheriting unix sockets from snaps, link to + libm, and harden bpffs mounts + - Snap-confine: fix mountinfo parsing, set FD_CLOEXEC on BPF helper + fds, and support transparent huge pages + - Snap-update-ns: switch to a multi-pass process for constructing + and updating mount namespaces + - Core-initrd: add missing libbpf and systemd dlopen dependencies, + and increase mount burst + - Security logging: add seclog API for administrative actions and + token create/remove events + - Prompting: re-enable the prompting notice backend and improve + validation and error handling + - Cmd/snap: report hidden file access for paths allowed by home when + prompting is active + - Cmd/snap: report read-only file access for paths allowed by + system-package-doc + - Cmd/snap: fix self-managed cgroup support checks + - Experimental features: graduate layouts, classic-preserves-xdg- + runtime-dir, refresh-app-awareness, and dbus-activation features + - Experimental features: warn when setting graduated or default- + enabled experimental features and do not store settings for + graduated features + + -- Sergio Cazzolato Fri, 24 Jul 2026 20:45:05 -0300 + snapd (2.76.3-1) unstable; urgency=medium * New upstream release, LP: #2158301 diff --git a/packaging/fedora/snapd.spec b/packaging/fedora/snapd.spec index 573438174c..2e846af0c5 100644 --- a/packaging/fedora/snapd.spec +++ b/packaging/fedora/snapd.spec @@ -114,7 +114,7 @@ %endif Name: snapd -Version: 2.76.3 +Version: 2.77 Release: 0%{?dist} Summary: A transactional software package manager License: GPL-3.0-only @@ -1025,6 +1025,79 @@ fi %endif %changelog +* Fri Jul 24 2026 Sergio Cazzolato +- New upstream release 2.77 + - FDE: add reseal check after snapd refresh + - FDE: allow reprovision without factory reset + - FDE: make reprovision only seal + - FDE: add reprovision recovery key generation API + - FDE: extend /v2/system-info/storage-encrypted to show install-time decisions + - Interfaces: kernel-sched-ext-control | add the kernel sched-ext + control interface implementation + - Interfaces: allow reading of /proc/self/smaps_rollup + - Interfaces: allow Wine to execute files accessed via the Document + Portal + - Interfaces: allow gtk css in subdirectories + - Interfaces: docker | allow connecting to system-wide docker on + classic + - Interfaces: allow the systemd networkctl command + - Interfaces: allow systemd networkd link property changes via D-Bus + - Interfaces: grant default access to memory.high in a snap's cgroup + - Interfaces: fix mountinfo denial for steam and docker interfaces + - Interfaces: add xdg-portal-permission-store interface + - Interfaces: add atkey pid and 7 relative vid support + - Interfaces: make polkit and upower implicit on Core systems only + - Confdb: add validation-sets handler and fix data loss when writing + to new schemas or accounts + - Confdb: fix bug on reading uneven lists + - Confdb: support sign-only external keypair backends + - Confdb: support Encode/Decode for builtins + - Remote device management: add post install actions API, apply + messages, queue response messages, and sequencing for dispatch of + management messages + - Packaging: assign a default label for /tmp/snap-private-tmp and + set it during installation + - Packaging: fix service startup during install and session-agent + socket handling on Ubuntu 26.04+ + - Packaging: update bundled AppArmor to 5.0.2 and accept the 5.0 ABI + when running as deb + - Packaging: use a relative symlink for snapctl and update steam- + support udev rules + - Packaging: add back gbp.conf output directory for Ubuntu 26.04 + builds + - Packaging: build deb with Go 1.23 for noble and jammy, Go 1.22 for + focal + - Cross-distro: update SELinux policy to allow snapd socket + activation + - Cross-distro: update SELinux policy to support /etc/ld.so.cache + mounting + - Snap: add run-inhibit hints, better component reporting, snap + delta support, and improved install handling + - snap-confine: work around kernel mnt_ns_loop() ordering bug on + 6.18.x + - Snap-confine: allow inheriting unix sockets from snaps, link to + libm, and harden bpffs mounts + - Snap-confine: fix mountinfo parsing, set FD_CLOEXEC on BPF helper + fds, and support transparent huge pages + - Snap-update-ns: switch to a multi-pass process for constructing + and updating mount namespaces + - Core-initrd: add missing libbpf and systemd dlopen dependencies, + and increase mount burst + - Security logging: add seclog API for administrative actions and + token create/remove events + - Prompting: re-enable the prompting notice backend and improve + validation and error handling + - Cmd/snap: report hidden file access for paths allowed by home when + prompting is active + - Cmd/snap: report read-only file access for paths allowed by + system-package-doc + - Cmd/snap: fix self-managed cgroup support checks + - Experimental features: graduate layouts, classic-preserves-xdg- + runtime-dir, refresh-app-awareness, and dbus-activation features + - Experimental features: warn when setting graduated or default- + enabled experimental features and do not store settings for + graduated features + * Tue Jul 07 2026 Katie May - New upstream release 2.76.3 - FDE: support keyboard configuration at install-time for first-boot diff --git a/packaging/opensuse/snapd.changes b/packaging/opensuse/snapd.changes index ea377313cf..27f521277d 100644 --- a/packaging/opensuse/snapd.changes +++ b/packaging/opensuse/snapd.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Fri Jul 24 23:45:05 UTC 2026 - sergio.cazzolato@canonical.com + +- Update to upstream release 2.77 + ------------------------------------------------------------------- Tue Jul 07 08:06:48 UTC 2026 - katie.may@canonical.com diff --git a/packaging/opensuse/snapd.spec b/packaging/opensuse/snapd.spec index 88ba7bc9fb..e89ac59ac4 100644 --- a/packaging/opensuse/snapd.spec +++ b/packaging/opensuse/snapd.spec @@ -115,7 +115,7 @@ Name: snapd -Version: 2.76.3 +Version: 2.77 Release: 0 Summary: Tools enabling systems to work with .snap files License: GPL-3.0 diff --git a/packaging/ubuntu-16.04/changelog b/packaging/ubuntu-16.04/changelog index 28ad89a6a4..5c12938f94 100644 --- a/packaging/ubuntu-16.04/changelog +++ b/packaging/ubuntu-16.04/changelog @@ -1,3 +1,79 @@ +snapd (2.77) xenial; urgency=medium + + * New upstream release, LP: #2158102 + - FDE: add reseal check after snapd refresh + - FDE: allow reprovision without factory reset + - FDE: make reprovision only seal + - FDE: add reprovision recovery key generation API + - FDE: extend /v2/system-info/storage-encrypted to show install-time decisions + - Interfaces: kernel-sched-ext-control | add the kernel sched-ext + control interface implementation + - Interfaces: allow reading of /proc/self/smaps_rollup + - Interfaces: allow Wine to execute files accessed via the Document + Portal + - Interfaces: allow gtk css in subdirectories + - Interfaces: docker | allow connecting to system-wide docker on + classic + - Interfaces: allow the systemd networkctl command + - Interfaces: allow systemd networkd link property changes via D-Bus + - Interfaces: grant default access to memory.high in a snap's cgroup + - Interfaces: fix mountinfo denial for steam and docker interfaces + - Interfaces: add xdg-portal-permission-store interface + - Interfaces: add atkey pid and 7 relative vid support + - Interfaces: make polkit and upower implicit on Core systems only + - Confdb: add validation-sets handler and fix data loss when writing + to new schemas or accounts + - Confdb: fix bug on reading uneven lists + - Confdb: support sign-only external keypair backends + - Confdb: support Encode/Decode for builtins + - Remote device management: add post install actions API, apply + messages, queue response messages, and sequencing for dispatch of + management messages + - Packaging: assign a default label for /tmp/snap-private-tmp and + set it during installation + - Packaging: fix service startup during install and session-agent + socket handling on Ubuntu 26.04+ + - Packaging: update bundled AppArmor to 5.0.2 and accept the 5.0 ABI + when running as deb + - Packaging: use a relative symlink for snapctl and update steam- + support udev rules + - Packaging: add back gbp.conf output directory for Ubuntu 26.04 + builds + - Packaging: build deb with Go 1.23 for noble and jammy, Go 1.22 for + focal + - Cross-distro: update SELinux policy to allow snapd socket + activation + - Cross-distro: update SELinux policy to support /etc/ld.so.cache + mounting + - Snap: add run-inhibit hints, better component reporting, snap + delta support, and improved install handling + - snap-confine: work around kernel mnt_ns_loop() ordering bug on + 6.18.x + - Snap-confine: allow inheriting unix sockets from snaps, link to + libm, and harden bpffs mounts + - Snap-confine: fix mountinfo parsing, set FD_CLOEXEC on BPF helper + fds, and support transparent huge pages + - Snap-update-ns: switch to a multi-pass process for constructing + and updating mount namespaces + - Core-initrd: add missing libbpf and systemd dlopen dependencies, + and increase mount burst + - Security logging: add seclog API for administrative actions and + token create/remove events + - Prompting: re-enable the prompting notice backend and improve + validation and error handling + - Cmd/snap: report hidden file access for paths allowed by home when + prompting is active + - Cmd/snap: report read-only file access for paths allowed by + system-package-doc + - Cmd/snap: fix self-managed cgroup support checks + - Experimental features: graduate layouts, classic-preserves-xdg- + runtime-dir, refresh-app-awareness, and dbus-activation features + - Experimental features: warn when setting graduated or default- + enabled experimental features and do not store settings for + graduated features + + -- Sergio Cazzolato Fri, 24 Jul 2026 20:45:05 -0300 + snapd (2.76.3) xenial; urgency=medium * New upstream release, LP: #2158301 diff --git a/packaging/ubuntu-26.04/changelog b/packaging/ubuntu-26.04/changelog index cadc434c71..dc98b9aab2 100644 --- a/packaging/ubuntu-26.04/changelog +++ b/packaging/ubuntu-26.04/changelog @@ -1,3 +1,79 @@ +snapd (2.77) resolute; urgency=medium + + * New upstream release, LP: #2158102 + - FDE: add reseal check after snapd refresh + - FDE: allow reprovision without factory reset + - FDE: make reprovision only seal + - FDE: add reprovision recovery key generation API + - FDE: extend /v2/system-info/storage-encrypted to show install-time decisions + - Interfaces: kernel-sched-ext-control | add the kernel sched-ext + control interface implementation + - Interfaces: allow reading of /proc/self/smaps_rollup + - Interfaces: allow Wine to execute files accessed via the Document + Portal + - Interfaces: allow gtk css in subdirectories + - Interfaces: docker | allow connecting to system-wide docker on + classic + - Interfaces: allow the systemd networkctl command + - Interfaces: allow systemd networkd link property changes via D-Bus + - Interfaces: grant default access to memory.high in a snap's cgroup + - Interfaces: fix mountinfo denial for steam and docker interfaces + - Interfaces: add xdg-portal-permission-store interface + - Interfaces: add atkey pid and 7 relative vid support + - Interfaces: make polkit and upower implicit on Core systems only + - Confdb: add validation-sets handler and fix data loss when writing + to new schemas or accounts + - Confdb: fix bug on reading uneven lists + - Confdb: support sign-only external keypair backends + - Confdb: support Encode/Decode for builtins + - Remote device management: add post install actions API, apply + messages, queue response messages, and sequencing for dispatch of + management messages + - Packaging: assign a default label for /tmp/snap-private-tmp and + set it during installation + - Packaging: fix service startup during install and session-agent + socket handling on Ubuntu 26.04+ + - Packaging: update bundled AppArmor to 5.0.2 and accept the 5.0 ABI + when running as deb + - Packaging: use a relative symlink for snapctl and update steam- + support udev rules + - Packaging: add back gbp.conf output directory for Ubuntu 26.04 + builds + - Packaging: build deb with Go 1.23 for noble and jammy, Go 1.22 for + focal + - Cross-distro: update SELinux policy to allow snapd socket + activation + - Cross-distro: update SELinux policy to support /etc/ld.so.cache + mounting + - Snap: add run-inhibit hints, better component reporting, snap + delta support, and improved install handling + - snap-confine: work around kernel mnt_ns_loop() ordering bug on + 6.18.x + - Snap-confine: allow inheriting unix sockets from snaps, link to + libm, and harden bpffs mounts + - Snap-confine: fix mountinfo parsing, set FD_CLOEXEC on BPF helper + fds, and support transparent huge pages + - Snap-update-ns: switch to a multi-pass process for constructing + and updating mount namespaces + - Core-initrd: add missing libbpf and systemd dlopen dependencies, + and increase mount burst + - Security logging: add seclog API for administrative actions and + token create/remove events + - Prompting: re-enable the prompting notice backend and improve + validation and error handling + - Cmd/snap: report hidden file access for paths allowed by home when + prompting is active + - Cmd/snap: report read-only file access for paths allowed by + system-package-doc + - Cmd/snap: fix self-managed cgroup support checks + - Experimental features: graduate layouts, classic-preserves-xdg- + runtime-dir, refresh-app-awareness, and dbus-activation features + - Experimental features: warn when setting graduated or default- + enabled experimental features and do not store settings for + graduated features + + -- Sergio Cazzolato Fri, 24 Jul 2026 20:45:05 -0300 + snapd (2.76.3) resolute; urgency=medium * New upstream release, LP: #2158301