Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
53 commits
Select commit Hold shift + click to select a range
da9754b
tests: update preseed-reset to account for new logic leaving snap dir…
maykathm Jan 20, 2026
95290b7
tests: remove setuid on snap-confine in snap-confine-from-core (#16464)
maykathm Jan 21, 2026
b48c634
tests: use type instead of which when copying false over snap-confine…
maykathm Jan 22, 2026
5d53841
test: fix muinstaller-real (#16447)
ernestl Jan 23, 2026
90d674c
tests/nested/manual: correct matching seeding time past a minute (#16…
ernestl Jan 23, 2026
36807f0
spread: use 16GB for focal on google (#16496)
maykathm Jan 26, 2026
47f62f7
github, tests: get store creds tests running on master (#16481)
maykathm Jan 27, 2026
70b7de4
tests: skip kernel-base-gadget tests when running beta validation (#1…
sergiocazzolato Jan 27, 2026
19ee56f
tests: migrate tests.exec is-skipped to new skip format (#16501)
sergiocazzolato Jan 28, 2026
5f10b20
tests/main/layout-content-refresh-connect-hooks: verify mount namespa…
bboozzoo Jan 28, 2026
e7ff05f
tests/nested/manual: fix muinstaller (#16483)
ernestl Jan 29, 2026
cb9980e
tests: fix build-with-kernel-modules-components by updating modules c…
sergiocazzolato Jan 29, 2026
764bf0e
tests: move main tests to new skip format - part 4 (#16514)
sergiocazzolato Jan 30, 2026
cbe9114
tests: fix sru validation (#16524)
sergiocazzolato Jan 30, 2026
36186ea
tests: move main tests to new skip format - part 2 (#16512)
sergiocazzolato Jan 30, 2026
502794b
tests: move main tests to new skip format - part 3 (#16513)
sergiocazzolato Jan 30, 2026
eba5a62
secboot: update to rev e638825ef829 (#16521)
ernestl Jan 30, 2026
c10b824
tests: move main tests to new skip format - part 1 (#16511)
sergiocazzolato Jan 30, 2026
bf1cf55
tests: enable some nested tests by setting up proper kernel declarati…
andrewphelpsj Feb 2, 2026
58f0199
tests: fix interfaces-block-devices when fde is used (#16523)
sergiocazzolato Feb 2, 2026
d2e7ca9
tests/lib/nested.sh: disable cloud-init check on core26 for now
valentindavid Jan 30, 2026
108a48d
snap-confine: add CAP_SYS_RESOURCE
zyga Jan 30, 2026
d37bb70
packaging/fedora: add cap_sys_resource
zyga Jan 30, 2026
739a1ac
tests: verify that snap-confine can raise RLIMIT_MEMLOCK
zyga Jan 30, 2026
c4bbdab
tests: increase the timeout used for arm64 servers in openstack-ext (…
sergiocazzolato Feb 2, 2026
f5f9476
interfaces: camera: add locking permission for /dev/video devices (#1…
ernestl Feb 3, 2026
d54b57b
cmd/libsnap-confine-private/device-cgroup-support: bump devices BPF m…
bboozzoo Jan 29, 2026
7c77218
tests/main/layout-content-provider-change, fakestore: add a test mixi…
bboozzoo Jan 21, 2026
4e5f1ac
daemon/api_system_secureboot.go: allow multiple payloads in db update
valentindavid Feb 3, 2026
40aa615
overlord/fdestate/secure_boot_update.go: forward correct key database…
valentindavid Feb 4, 2026
4e84cc9
overlord/fdestate/secure_boot_update.go: force reseal on cleanup
valentindavid Feb 4, 2026
38f0c2f
interfaces/seccomp: allow memfd_secret (#16545)
bboozzoo Feb 5, 2026
021f6b9
tests: increase nested 24/26 disk size to 30GB (#16548)
ernestl Feb 4, 2026
43c1a65
tests/main, tests/upgrade, : fix main/snap-ns-forward-compat, main/up…
ernestl Feb 5, 2026
28c3d57
tests: skip i18n test on noble (#16560)
maykathm Feb 6, 2026
8586fa8
interfaces/seccomp: allow pidfd_open syscall
zyga Jan 22, 2026
343760c
interfaces/seccomp: explain why we allow pidfd_open
zyga Feb 2, 2026
676fdd8
tests: add test for pidfd_open
zyga Jan 22, 2026
a1a4c35
tests: extend pidfd_open test to check waitid behavior
zyga Feb 2, 2026
b24447d
tests: fix packing system data on debian-12
zyga Feb 4, 2026
36023da
release: 2.74.1
ernestl Feb 6, 2026
6d8c879
tests: update test credentials (#16567)
maykathm Feb 10, 2026
298fd63
mkversion.sh: correct for deb release flow (#16572)
ernestl Feb 10, 2026
eca393a
Revert "release: 2.74.1"
ernestl Feb 10, 2026
c724171
overlord/devicestate, secboot: install setup encryption check must us…
ernestl Feb 11, 2026
f785b81
overlord/devicestate: fix do-install-setup-storage-encryption check f…
ernestl Feb 11, 2026
08870c2
tests/nested/manual: add workaround for cloud-init issue (#16570)
ernestl Feb 9, 2026
607c17d
Revert "wrappers/internal: add implicit graphical user daemons (#1632…
ernestl Feb 12, 2026
3f07aa4
tests/lib/external/snapd-testing-tools: update to rev 78c5e35 (#16590)
ernestl Feb 12, 2026
0ea25ad
release: 2.74.1
ernestl Feb 12, 2026
a91973c
Merge branch 'master' into changelogs-2.74.1
ernestl Feb 13, 2026
fcec7f4
Merge branch 'master' into changelogs-2.74.1
ernestl Feb 18, 2026
4f44fb3
Merge branch 'master' into changelogs-2.74.1
ernestl Feb 18, 2026
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 10 additions & 0 deletions NEWS.md
Original file line number Diff line number Diff line change
@@ -1,3 +1,13 @@
# New in snapd 2.74.1
* FDE: measure DeployedMode and AuditMode variables if they appear as disabled in the event log to avoid a potential reseal-failure boot loop
* LP: #2141328 FDE: reuse preinstall check context during install to account for user-ignored errors
* LP: #2139611 FDE: fix db updates by allowing multiple payloads
* LP: #2139300 snap-confine: add CAP_SYS_RESOURCE to allow raising memory lock limit when required
* LP: #2139099 snap-confine: bump the max element count of the BPF map used to store IDs of allowed/matched devices to 1000
* LP: #2141607 Desktop: revert change that caused user daemons declaring the desktop plug to implicitly depend on graphical-session.target
* Interfaces: Added pidfd_open and memfd_secret to seccomp template
* Interfaces: camera | add locking permission for /dev/video

# New in snapd 2.74
* FDE: use new activation API from secboot
* FDE: use activation API also with non keydata keys
Expand Down
2 changes: 1 addition & 1 deletion packaging/arch/PKGBUILD
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ pkgdesc="Service and tools for management of snap packages."
depends=('squashfs-tools' 'libseccomp' 'libsystemd' 'libcap' 'apparmor')
optdepends=('bash-completion: bash completion support'
'xdg-desktop-portal: desktop integration')
pkgver=2.74
pkgver=2.74.1
pkgrel=1
arch=('x86_64' 'i686' 'armv7h' 'aarch64')
url="https://github.com/snapcore/snapd"
Expand Down
21 changes: 21 additions & 0 deletions packaging/debian-sid/changelog
Original file line number Diff line number Diff line change
@@ -1,3 +1,24 @@
snapd (2.74.1-1) unstable; urgency=medium

* New upstream release, LP: #2138629
- FDE: measure DeployedMode and AuditMode variables if they appear
as disabled in the event log to avoid a potential reseal-failure
boot loop
- LP: #2141328 FDE: reuse preinstall check context during install to
account for user-ignored errors
- LP: #2139611 FDE: fix db updates by allowing multiple payloads
- LP: #2139300 snap-confine: add CAP_SYS_RESOURCE to allow raising
memory lock limit when required
- LP: #2139099 snap-confine: bump the max element count of the BPF
map used to store IDs of allowed/matched devices to 1000
- LP: #2141607 Desktop: revert change that caused user daemons
declaring the desktop plug to implicitly depend on graphical-
session.target
- Interfaces: Added pidfd_open and memfd_secret to seccomp template
- Interfaces: camera | add locking permission for /dev/video

-- Ernest Lotter <ernest.lotter@canonical.com> Thu, 12 Feb 2026 21:27:23 +0200

snapd (2.74-1) unstable; urgency=medium

* New upstream release, LP: #2138629
Expand Down
20 changes: 19 additions & 1 deletion packaging/fedora/snapd.spec
Original file line number Diff line number Diff line change
Expand Up @@ -114,7 +114,7 @@
%endif

Name: snapd
Version: 2.74
Version: 2.74.1
Release: 0%{?dist}
Summary: A transactional software package manager
License: GPL-3.0-only
Expand Down Expand Up @@ -1008,6 +1008,24 @@ fi
%endif

%changelog
* Thu Feb 12 2026 Ernest Lotter <ernest.lotter@canonical.com>
- New upstream release 2.74.1
- FDE: measure DeployedMode and AuditMode variables if they appear
as disabled in the event log to avoid a potential reseal-failure
boot loop
- LP: #2141328 FDE: reuse preinstall check context during install to
account for user-ignored errors
- LP: #2139611 FDE: fix db updates by allowing multiple payloads
- LP: #2139300 snap-confine: add CAP_SYS_RESOURCE to allow raising
memory lock limit when required
- LP: #2139099 snap-confine: bump the max element count of the BPF
map used to store IDs of allowed/matched devices to 1000
- LP: #2141607 Desktop: revert change that caused user daemons
declaring the desktop plug to implicitly depend on graphical-
session.target
- Interfaces: Added pidfd_open and memfd_secret to seccomp template
- Interfaces: camera | add locking permission for /dev/video

* Tue Jan 20 2026 Ernest Lotter <ernest.lotter@canonical.com>
- New upstream release 2.74
- FDE: use new activation API from secboot
Expand Down
5 changes: 5 additions & 0 deletions packaging/opensuse/snapd.changes
Original file line number Diff line number Diff line change
@@ -1,3 +1,8 @@
-------------------------------------------------------------------
Thu Feb 12 19:27:23 UTC 2026 - ernest.lotter@canonical.com

- Update to upstream release 2.74.1

-------------------------------------------------------------------
Tue Jan 20 16:54:17 UTC 2026 - ernest.lotter@canonical.com

Expand Down
2 changes: 1 addition & 1 deletion packaging/opensuse/snapd.spec
Original file line number Diff line number Diff line change
Expand Up @@ -100,7 +100,7 @@


Name: snapd
Version: 2.74
Version: 2.74.1
Release: 0
Summary: Tools enabling systems to work with .snap files
License: GPL-3.0
Expand Down
21 changes: 21 additions & 0 deletions packaging/ubuntu-16.04/changelog
Original file line number Diff line number Diff line change
@@ -1,3 +1,24 @@
snapd (2.74.1) xenial; urgency=medium

* New upstream release, LP: #2138629
- FDE: measure DeployedMode and AuditMode variables if they appear
as disabled in the event log to avoid a potential reseal-failure
boot loop
- LP: #2141328 FDE: reuse preinstall check context during install to
account for user-ignored errors
- LP: #2139611 FDE: fix db updates by allowing multiple payloads
- LP: #2139300 snap-confine: add CAP_SYS_RESOURCE to allow raising
memory lock limit when required
- LP: #2139099 snap-confine: bump the max element count of the BPF
map used to store IDs of allowed/matched devices to 1000
- LP: #2141607 Desktop: revert change that caused user daemons
declaring the desktop plug to implicitly depend on graphical-
session.target
- Interfaces: Added pidfd_open and memfd_secret to seccomp template
- Interfaces: camera | add locking permission for /dev/video

-- Ernest Lotter <ernest.lotter@canonical.com> Thu, 12 Feb 2026 21:27:23 +0200

snapd (2.74) xenial; urgency=medium

* New upstream release, LP: #2138629
Expand Down
Loading