New upstream release 2.65.1
Support building snapd using base Core22 (Snapcraft 8.x)
FIPS: support building FIPS complaint snapd variant that switches
AppArmor: update to latest 4.0.2 release
AppArmor: enable using ABI 4.0 from host parser
AppArmor: fix parser lookup
AppArmor: support AppArmor snippet priorities
AppArmor: allow reading cgroup memory.max file
AppArmor: allow using snap-exec coming from the snapd snap when
AppArmor prompting (experimental): add checks for prompting
AppArmor prompting (experimental): include prompt prefix in
AppArmor prompting (experimental): add common types, constraints,
AppArmor prompting (experimental): add path pattern parsing and
AppArmor prompting (experimental): add path pattern precedence
AppArmor prompting (experimental): add packages to manage
AppArmor prompting (experimental): add prompting API and notice
interfaces-requests-control interface
AppArmor prompting (experimental): feature flag can only be
Registry views (experimental): rename from aspects to registries
Registry views (experimental): support reading registry views and
Registry views (experimental): fetch and refresh registry
Registry views (experimental): restrict view paths from using a
Snap components: support installing snaps and components from
Snap components: support downloading components related assertions
Snap components: support installing components from the store
Snap components: support removing components individually and
Snap components: support kernel modules as components
Snap components: support for component install, pre-refresh and
refresh hooks
Snap components: initial support for building systems that contain
Refresh app awareness (experimental): add data field for
Refresh app awareness (experimental): use the app name from
Refresh app awareness (experimental): give snap-refresh-observe
Improve snap-confine compatibility with nvidia drivers
Allow re-exec when SNAP_REEXEC is set for unlisted distros to
Allow mixing revision and channel on snap install
Generate GNU build ID for Go binaries
Add missing etelpmoc.sh for shell completion
Do not attempt to run snapd on classic when re-exec is disabled
Packaging/build maintenance for Debian sid, Fedora, Arch, openSuse
Add snap debug API command to enable running raw queries
Enable snap-confine snap mount directory detection
Replace global seccomp filter with deny rules in standard seccomp
Remove support for Ubuntu Core Launcher (superseded by snap-
Support creating pending serial bound users after serial assertion
Support disabling cloud-init using kernel command-line
In hybrid systems, apps can refresh without waiting for restarts
Ship snap-debug-info.sh script used for system diagnostics
Improve error messages when attempting to run non-existent snap
Switch to -u UID:GID for strace-static
Support enabling snapd logging with snap set system
level}
Add options system.coredump.enable and system.coredump.maxuse to
coredump on Ubuntu Core
Provide documentation URL for 'snap interface '
Fix snapd riscv64 build
Fix restarting activated services instead of their activator units
Fix potential unexpected auto-refresh of snap on managed schedule
Fix potential segfault by guarding against kernel command-line
Fix proxy entries in /etc/environment with missing newline that
Fix offline remodelling by ignoring prerequisites that will
Fix devmode seccomp deny regression that caused spamming the log
Fix snap lock leak during refresh
Fix not re-pinning validation sets that were already pinned when
Fix handling of unexpected snapd runtime failure
Fix /v2/notices REST API skipping notices with duplicate
Fix comparing systemd versions that may contain pre-release
Fix udev potentially starting before snap-device-helper is made
Fix race in snap seed metadata loading
Fix treating cloud-init exit status 2 as error
Fix to prevent sending refresh complete notification if snap snap-
observe interface is connected
Fix to queue snapctl service commands if run from the default-
to-date config values
Fix stop service failure when the service is not actually running
Fix parsing /proc/PID/mounts with spaces
Add registry interface that provides snaps access to a particular
Add snap-interfaces-requests-control interface to enable prompting
steam-support interface: remove all AppArmor and seccomp
opengl interface: improve compatibility with nvidia drivers
home interface: autoconnect home on Ubuntu Core Desktop
serial-port interface: support RPMsg tty
display-control interface: allow changing LVDS backlight power and
power-control interface: support for battery charging thesholds,
cpu-control interface: allow CPU C-state control
raw-usb interface: support RPi5 and Thinkpad x13s
custom-device interface: allow device file locking
lxd-support interface: allow LXD to self-manage its own cgroup
network-manager interface: support MPTCP sockets
network-control interface: allow plug/slot access to gnutls config
Bus
network-control interface: allow wpa_supplicant dbus api
polkit interface: fix "rw" mount option check
u2f-devices interface: enable additional security keys
desktop interface: enable kde theming support

New upstream release 2.65
Support building snapd using base Core22 (Snapcraft 8.x)
FIPS: support building FIPS complaint snapd variant that switches
AppArmor: update to latest 4.0.2 release
AppArmor: enable using ABI 4.0 from host parser
AppArmor: fix parser lookup
AppArmor: support AppArmor snippet priorities
AppArmor: allow reading cgroup memory.max file
AppArmor: allow using snap-exec coming from the snapd snap when
AppArmor prompting (experimental): add checks for prompting
AppArmor prompting (experimental): include prompt prefix in
AppArmor prompting (experimental): add common types, constraints,
AppArmor prompting (experimental): add path pattern parsing and
AppArmor prompting (experimental): add path pattern precedence
AppArmor prompting (experimental): add packages to manage
AppArmor prompting (experimental): add prompting API and notice
interfaces-requests-control interface
AppArmor prompting (experimental): feature flag can only be
Registry views (experimental): rename from aspects to registries
Registry views (experimental): support reading registry views and
Registry views (experimental): fetch and refresh registry
Registry views (experimental): restrict view paths from using a
Snap components: support installing snaps and components from
Snap components: support downloading components related assertions
Snap components: support installing components from the store
Snap components: support removing components individually and
Snap components: support kernel modules as components
Snap components: support for component install, pre-refresh and
refresh hooks
Snap components: initial support for building systems that contain
Refresh app awareness (experimental): add data field for
Refresh app awareness (experimental): use the app name from
Refresh app awareness (experimental): give snap-refresh-observe
Improve snap-confine compatibility with nvidia drivers
Allow re-exec when SNAP_REEXEC is set for unlisted distros to
Allow mixing revision and channel on snap install
Generate GNU build ID for Go binaries
Add missing etelpmoc.sh for shell completion
Do not attempt to run snapd on classic when re-exec is disabled
Packaging/build maintenance for Debian sid, Fedora, Arch, openSuse
Add snap debug API command to enable running raw queries
Enable snap-confine snap mount directory detection
Replace global seccomp filter with deny rules in standard seccomp
Remove support for Ubuntu Core Launcher (superseded by snap-
Support creating pending serial bound users after serial assertion
Support disabling cloud-init using kernel command-line
In hybrid systems, apps can refresh without waiting for restarts
Ship snap-debug-info.sh script used for system diagnostics
Improve error messages when attempting to run non-existent snap
Switch to -u UID:GID for strace-static
Support enabling snapd logging with snap set system
level}
Add options system.coredump.enable and system.coredump.maxuse to
coredump on Ubuntu Core
Provide documentation URL for 'snap interface '
Fix restarting activated services instead of their activator units
Fix potential unexpected auto-refresh of snap on managed schedule
Fix potential segfault by guarding against kernel command-line
Fix proxy entries in /etc/environment with missing newline that
Fix offline remodelling by ignoring prerequisites that will
Fix devmode seccomp deny regression that caused spamming the log
Fix snap lock leak during refresh
Fix not re-pinning validation sets that were already pinned when
Fix handling of unexpected snapd runtime failure
Fix /v2/notices REST API skipping notices with duplicate
Fix comparing systemd versions that may contain pre-release
Fix udev potentially starting before snap-device-helper is made
Fix race in snap seed metadata loading
Fix treating cloud-init exit status 2 as error
Fix to prevent sending refresh complete notification if snap snap-
observe interface is connected
Fix to queue snapctl service commands if run from the default-
to-date config values
Fix stop service failure when the service is not actually running
Fix parsing /proc/PID/mounts with spaces
Add registry interface that provides snaps access to a particular
Add snap-interfaces-requests-control interface to enable prompting
steam-support interface: remove all AppArmor and seccomp
opengl interface: improve compatibility with nvidia drivers
home interface: autoconnect home on Ubuntu Core Desktop
serial-port interface: support RPMsg tty
display-control interface: allow changing LVDS backlight power and
power-control interface: support for battery charging thesholds,
cpu-control interface: allow CPU C-state control
raw-usb interface: support RPi5 and Thinkpad x13s
custom-device interface: allow device file locking
lxd-support interface: allow LXD to self-manage its own cgroup
network-manager interface: support MPTCP sockets
network-control interface: allow plug/slot access to gnutls config
Bus
network-control interface: allow wpa_supplicant dbus api
polkit interface: fix "rw" mount option check
u2f-devices interface: enable additional security keys
desktop interface: enable kde theming support

convert license to SPDX

convert license to SPDX

New upstream release 2.64
Support building snapd using base Core22 (Snapcraft 8.x)
FIPS: support building FIPS complaint snapd variant that switches
AppArmor: update to AppArmor 4.0.1
AppArmor: support AppArmor snippet priorities
AppArmor prompting: add checks for prompting support, include
AppArmor prompting: include prompt prefix in AppArmor rules if
AppArmor prompting: add common types, constraints, and mappings
AppArmor prompting: add path pattern parsing and matching
Registry views (experimental): rename from aspects to registries
Registry views (experimental): support reading registry views
Registry views (experimental): restrict view paths from using a
Snap components: support installing snaps and components from
Snap components: support downloading components related assertions
Snap components: support installing components from the store (no
Snap components: support removing components (REST API, no CLI)
Snap components: started support for component hooks
Snap components: support kernel modules as components
Refresh app awareness (experimental): add data field for
Refresh app awareness (experimental): use the app name from
Refresh app awareness (experimental): give snap-refresh-observe
Allow re-exec when SNAP_REEXEC is set for unlisted distros to
Generate GNU build ID for Go binaries
Add missing etelpmoc.sh for shell completion
Do not attempt to run snapd on classic when re-exec is disabled
Packaging/build maintenance for Debian sid, Fedora, Arch, openSuse
Add snap debug api command to enable running raw queries
Enable snap-confine snap mount directory detection
Replace global seccomp filter with deny rules in standard seccomp
Remove support for Ubuntu Core Launcher (superseded by snap-
Support creating pending serial bound users after serial assertion
Support disabling cloud-init using kernel command-line
In hybrid systems, apps can refresh without waiting for restarts
Ship snap-debug-info.sh script used for system diagnostics
Improve error messages when attempting to run non-existent snap
Switch to -u UID:GID for strace-static
Support enabling snapd logging with snap set system
level}
Fix restarting activated services instead of their activator units
Fix potential unexpected auto-refresh of snap on managed schedule
Fix potential segfault by guarding against kernel command-line
Fix proxy entries in /etc/environment with missing newline that
Fix offline remodelling by ignoring prerequisites that will
Fix devmode seccomp deny regression that caused spamming the log
Fix snap lock leak during refresh
Fix not re-pinning validation sets that were already pinned when
Fix handling of unexpected snapd runtime failure
Fix /v2/notices REST API skipping notices with duplicate
Fix comparing systemd versions that may contain pre-release
Fix udev potentially starting before snap-device-helper is made
Fix race in snap seed metadata loading
Fix treating cloud-init exit status 2 as error
Fix to prevent sending refresh complete notification if snap snap-
observe interface is connected
Fix to queue snapctl service commands if run from the default-
to-date config values
Fix stop service failure when the service is not actually running
Add registry interface that provides snaps access to a particular
steam-support interface: relaxed AppArmor and seccomp restrictions
home interface: autoconnect home on Ubuntu Core Desktop
serial-port interface: support RPMsg tty
display-control interface: allow changing LVDS backlight power and
power-control interface: support for battery charging thesholds,
cpu-control interface: allow CPU C-state control
raw-usb interface: support RPi5 and Thinkpad x13s
custom-device interface: allow device file locking
lxd-support interface: allow LXD to self-manage its own cgroup
network-manager interface: support MPTCP sockets
network-control interface: allow plug/slot access to gnutls config
Bus

Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild

New upstream release 2.63
Support for snap services to show the current status of user
Refresh app awareness: record snap-run-inhibit notice when
Refresh app awareness: use warnings as fallback for desktop
Aspect based configuration: make request fields in the aspect-
Aspect based configuration: make map keys conform to the same
keys (experimental)
Aspect based configuration: make unset and set behaviour similar
Aspect based configuration: limit nesting level for setting value
Components: use symlinks to point active snap component revisions
Components: add model assertion support for components
Components: fix to ensure local component installation always gets
Add basic support for a CIFS remote filesystem-based home
Add support for AppArmor profile kill mode to avoid snap-confine
Allow more than one interface to grant access to the same API
Allow all snapd service's control group processes to send systemd
Enable not preseeded single boot install
Update secboot to handle new sbatlevel
Fix to not use cgroup for non-strict confined snaps (devmode,
Fix two race conditions relating to freedesktop notifications
Fix missing tunables in snap-update-ns AppArmor template
Fix rejection of snapd snap udev command line by older host snap-
helper
Rework seccomp allow/deny list
Clean up files removed by gadgets
Remove non-viable boot chains to avoid secboot failure
posix_mq interface: add support for missing time64 mqueue syscalls
password-manager-service interface: allow kwalletd version 6
kubernetes-support interface: allow SOCK_SEQPACKET sockets
system-observe interface: allow listing systemd units and their
opengl interface: enable use of nvidia container toolkit CDI

New upstream release 2.62
Aspects based configuration schema support (experimental)
Refresh app awareness support for UI (experimental)
Support for user daemons by introducing new control switches
-user/--system/--users for service start/stop/restart
Add AppArmor prompting experimental flag (feature currently
Installation of local snap components of type test
Packaging of components with snap pack
Expose experimental features supported/enabled in snapd REST API
info
Support creating and removing recovery systems for use by factory
Enable API route for creating and removing recovery systems using
Lift requirements for fde-setup hook for single boot install
Enable single reboot gadget update for UC20+
Allow core to be removed on classic systems
Support for remodeling on hybrid systems
Install desktop files on Ubuntu Core and update after snapd
Upgrade sandbox features to account for cgroup v2 device filtering
Support snaps to manage their own cgroups
Add support for AppArmor 4.0 unconfined profile mode
Add AppArmor based read access to /etc/default/keyboard
Upgrade to squashfuse 0.5.0
Support useradd utility to enable removing Perl dependency for
Support for recovery-chooser to use console-conf snap
Add support for --uid/--gid using strace-static
Add support for notices (from pebble) and expose via the snapd
Add polkit authentication for snapd REST API endpoints
Add refresh-inhibit field to snapd REST API endpoint /v2/snaps
Add refresh-inhibited select query to REST API endpoint /v2/snaps
Take into account validation sets during remodeling
Improve offline remodeling to use installed revisions of snaps to
Add rpi configuration option sdtv_mode
When snapd snap is not installed, pin policy ABI to 4.0 or 3.0 if
Fix gadget zero-sized disk mapping caused by not ignoring zero
Fix gadget install case where size of existing partition was not
Fix trying to unmount early kernel mount if it does not exist
Fix restarting mount units on snapd start
Fix call to udev in preseed mode
Fix to ensure always setting up the device cgroup for base bare
Fix not copying data from newly set homedirs on revision change
Fix leaving behind empty snap home directories after snap is
Fix to avoid using libzstd from host by adding to snapd snap
Fix autorefresh to correctly handle forever refresh hold
Fix username regex allowed for system-user assertion to not allow
Fix incorrect application icon for notification after autorefresh
Fix to restart mount units when changed
Fix to support AppArmor running under incus
Fix case of snap-update-ns dropping synthetic mounts due to
Fix parsing of base snap version to enable pre-seeding of Ubuntu
Fix packaging and tests for various distributions
Add remoteproc interface to allow developers to interact with
Add kernel-control interface to enable controlling the kernel
Add nfs-mount interface to allow mounting of NFS shares
Add ros-opt-data interface to allow snaps to access the host
Add snap-refresh-observe interface that provides refresh-app-
steam-support interface: generalize Pressure Vessel root paths and
steam-support interface: make implicit on Ubuntu Core Desktop
desktop interface: improved support for Ubuntu Core Desktop and
cups-control interface: make autoconnect depend on presence of
opengl interface: allow read access to /usr/share/nvidia
personal-files interface: extend to support automatic creation of
network-control interface: allow creating /run/resolveconf
network-setup-control and network-setup-observe interfaces: allow
libvirt interface: allow r/w access to /run/libvirt/libvirt-sock-
fwupd interface: allow access to IMPI devices (including locking
uio interface: allow configuring UIO drivers from userspace
serial-port interface: add support for NXP Layerscape SoC
lxd-support interface: add attribute enable-unconfined-mode to
in to run unconfined
block-devices interface: add support for ZFS volumes
system-packages-doc interface: add support for reading jquery and
system-packages-doc interface: workaround to prevent autoconnect
microceph-support interface: allow more types of block devices to
mount-observe interface: allow read access to
polkit interface: changed to not be implicit on core because
upower-observe interface: allow stats refresh
gpg-public-keys interface: allow creating lock file for certain
shutdown interface: allow access to SetRebootParameter method
media-control interface: allow device file locking
u2f-devices interface: support for Trustkey G310H, JaCarta U2F,

New upstream release 2.61.3
Install systemd files in correct location for 24.04

New upstream release 2.61.2
Fix to enable plug/slot sanitization for prepare-image
Fix panic when device-service.access=offline
Support offline remodeling
Allow offline update only remodels without serial
Fail early when remodeling to old model revision
Fix to enable plug/slot sanitization for validate-seed
Allow removal of core snap on classic systems
Fix network-control interface denial for file lock on /run/netns
Add well-known core24 snap-id
Fix remodel snap installation order
Prevent remodeling from UC18+ to UC16
Fix cups auto-connect on classic with cups snap installed
u2f-devices interface support for GoTrust Idem Key with USB-C
Fix to restore services after unlink failure
Add libcudnn.so to Nvidia libraries
Fix skipping base snap download due to false snapd downgrade

Rebuild for golang 1.22.0

Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

Changelog resynchronization

Require xdelta on Fedora or EPEL >= 9 (for delta updates)

New upstream release 2.61.1
Stop requiring default provider snaps on image building and first
Fix auth.json access for login as non-root group ID
Fix incorrect remodelling conflict when changing track to older
Improved check-rerefresh message
Fix UC16/18 kernel/gadget update failure due volume mismatch with
Stop auto-import of assertions during install modes
Desktop interface exposes GetIdletime
Polkit interface support for new polkit versions
Fix not applying snapd snap changes in tracked channel when remodelling

New upstream release 2.61
Fix control of activated services in 'snap start' and 'snap stop'
Correctly reflect activated services in 'snap services'
Disabled services are no longer enabled again when snap is
interfaces/builtin: added support for Token2 U2F keys
interfaces/u2f-devices: add Swissbit iShield Key
interfaces/builtin: update gpio apparmor to match pattern that
interfaces: add a polkit-agent interface
interfaces: add pcscd interface
Kernel command-line can now be edited in the gadget.yaml
Only track validation-sets in run-mode, fixes validation-set
Added support for using store.access to disable access to snap
Support for fat16 partition in gadget
Pre-seed authority delegation is now possible
Support new system-user name daemon
Several bug fixes and improvements around remodelling
Offline remodelling support