{"push_id":1854372132,"size":506,"distinct_size":259,"ref":"refs/heads/master","head":"d2fdb18ca8ebe00c1d11e69b6cd3f70669127797","before":"8282b09dfabf8f47c9600ce05a4c6e1aa64d649b","commits":[{"sha":"66a94a30e726a990f3614736785bd7fbde8bdba6","author":{"name":"Michael Vogt","email":"d5b909f12f3acd507760f36dcc3f39f624fe872f@ubuntu.com"},"message":"add first sketch of seccomp -> bpf compiler","distinct":false,"url":"https://api.github.com/repos/tokurz/snapd/commits/66a94a30e726a990f3614736785bd7fbde8bdba6"},{"sha":"9bbcd97644d67484acf54551b18327748f30539c","author":{"name":"Michael Vogt","email":"d5b909f12f3acd507760f36dcc3f39f624fe872f@ubuntu.com"},"message":"install snap-seccomp to /usr/lib/snapd","distinct":false,"url":"https://api.github.com/repos/tokurz/snapd/commits/9bbcd97644d67484acf54551b18327748f30539c"},{"sha":"e8c17991ea8dedf2a2bf18238ed2ca5786829b45","author":{"name":"Michael Vogt","email":"d5b909f12f3acd507760f36dcc3f39f624fe872f@ubuntu.com"},"message":"make snap-confine load the bpf directly","distinct":false,"url":"https://api.github.com/repos/tokurz/snapd/commits/e8c17991ea8dedf2a2bf18238ed2ca5786829b45"},{"sha":"a2e13bd3eb9923e98ca5d697fce7312822b5da44","author":{"name":"Michael Vogt","email":"d5b909f12f3acd507760f36dcc3f39f624fe872f@ubuntu.com"},"message":"use generated bpf in snap-confine","distinct":false,"url":"https://api.github.com/repos/tokurz/snapd/commits/a2e13bd3eb9923e98ca5d697fce7312822b5da44"},{"sha":"56896a010cf64851760eb213c3fc0f7a84f96ecb","author":{"name":"Michael Vogt","email":"d5b909f12f3acd507760f36dcc3f39f624fe872f@ubuntu.com"},"message":"add SNAP_CONFINE_DUMP_OLD_SECCOMP and more tweaks","distinct":false,"url":"https://api.github.com/repos/tokurz/snapd/commits/56896a010cf64851760eb213c3fc0f7a84f96ecb"},{"sha":"ba48d7b26e6dbaab21e36f62ac4406ec62a44f59","author":{"name":"Michael Vogt","email":"d5b909f12f3acd507760f36dcc3f39f624fe872f@ubuntu.com"},"message":"remove extra prctl(PR_SET_NO_NEW_PRIVS)","distinct":false,"url":"https://api.github.com/repos/tokurz/snapd/commits/ba48d7b26e6dbaab21e36f62ac4406ec62a44f59"},{"sha":"4d021ae6ce8de4dbf79347885db6488f25ad4a8c","author":{"name":"Michael Vogt","email":"d5b909f12f3acd507760f36dcc3f39f624fe872f@ubuntu.com"},"message":"add proper secondary arch handling","distinct":false,"url":"https://api.github.com/repos/tokurz/snapd/commits/4d021ae6ce8de4dbf79347885db6488f25ad4a8c"},{"sha":"e8e05147a5f2e441518119942001188ec6b80e51","author":{"name":"Michael Vogt","email":"d5b909f12f3acd507760f36dcc3f39f624fe872f@ubuntu.com"},"message":"ensure all bpf is compiled","distinct":false,"url":"https://api.github.com/repos/tokurz/snapd/commits/e8e05147a5f2e441518119942001188ec6b80e51"},{"sha":"ba3888d019327f14848e9a24852b5977f923d3b1","author":{"name":"Michael Vogt","email":"d5b909f12f3acd507760f36dcc3f39f624fe872f@ubuntu.com"},"message":"fix silly string handling error","distinct":false,"url":"https://api.github.com/repos/tokurz/snapd/commits/ba3888d019327f14848e9a24852b5977f923d3b1"},{"sha":"bb291709bc8e4842bec5059238c9bf5843f8ceaf","author":{"name":"Michael Vogt","email":"d5b909f12f3acd507760f36dcc3f39f624fe872f@ubuntu.com"},"message":"add @unrestricted support","distinct":false,"url":"https://api.github.com/repos/tokurz/snapd/commits/bb291709bc8e4842bec5059238c9bf5843f8ceaf"},{"sha":"427483fbc5280e7586b785b556e8860b605340ca","author":{"name":"Zygmunt Krynicki","email":"b4a5ea001e047040e8c9075b67a268293138da2c@zygoon.pl"},"message":"errtracker: include bits of snap-confine apparmor profile (#3421) (#3424)\n\nThis patch extends the error report with information about the used\r\nsnap-confine apparmor profile (as expressed by the text of the file) as\r\nwell as hint of partial dpkg update.\r\n\r\nPartial or failed updates can leave the old (previous) apparmor profile\r\nof snap-confine around (since it is tagged as a conffile) and\r\nsubsequently cause any snap execution to fail with access to\r\n\"/run/snapd/lock\" directory.\r\n\r\nTo test the theory we will now measure the hashes of the current and any\r\n.dpkg-new versions of the apparmor profile of snap-confine and attach\r\nthem to the report.\r\n\r\nSigned-off-by: Zygmunt Krynicki <zygmunt.krynicki@canonical.com>","distinct":false,"url":"https://api.github.com/repos/tokurz/snapd/commits/427483fbc5280e7586b785b556e8860b605340ca"},{"sha":"914ce336ccc60c5d2e2844a467820696a48e8d7c","author":{"name":"Michael Vogt","email":"d5b909f12f3acd507760f36dcc3f39f624fe872f@ubuntu.com"},"message":"Disable \"mknod |N\" in the default seccomp template again\n\nThis partially reverts a previous commit to allow mknod/mknodat\nfor regular files, pipes and sockets (and not block or char\ndevices).\n\nThe reason for the revert is described in:\nhttps://forum.snapcraft.io/t/snapd-2-25-blocked-because-of-possible-revert-race-condition\n\nIn a nutshell there is a race-condition when doing the following:\n$ snap refresh core; snap install daemon; snap revert core; reboot\n\nwhen the system reboots the seccomp profile will contain symbols\n(the |N syntax) that snap-confine from the old core does not\nunderstands. Snapd will rewrite the seccomp profile on startup,\nhowever there is no gurantee currently that this rewrite will\nhappen before the installed software \"daemon\" starts which makes\nthis racy and we see real bugs because of this.\n\nSo we revert the new syntax for now to unblock 2.25+ and work\non a plan to properly fix this.","distinct":false,"url":"https://api.github.com/repos/tokurz/snapd/commits/914ce336ccc60c5d2e2844a467820696a48e8d7c"},{"sha":"e2e876f7691b3dc0a09c22e663e1f8ae3e62169d","author":{"name":"Michael Vogt","email":"d5b909f12f3acd507760f36dcc3f39f624fe872f@ubuntu.com"},"message":"Revert \"interfaces: re-add reverted ioctl and quotactl (revert 21bc6b9f)\"\n\nThis reverts commit 82311cfd14c44d8d8b9b7a0339e30deb1fb0ea59.\n\nThe reason for the revert is described in:\nhttps://forum.snapcraft.io/t/snapd-2-25-blocked-because-of-possible-revert-race-condition","distinct":false,"url":"https://api.github.com/repos/tokurz/snapd/commits/e2e876f7691b3dc0a09c22e663e1f8ae3e62169d"},{"sha":"fea8a2b26392f152b001670a7a4dfdf383369020","author":{"name":"Michael Vogt","email":"13bfec03a06838188bc0e97730abbc734bab1816@gmail.com"},"message":"partly revert aace15ab53 to unbreak core reverts (#3419)","distinct":false,"url":"https://api.github.com/repos/tokurz/snapd/commits/fea8a2b26392f152b001670a7a4dfdf383369020"},{"sha":"b58a542627f376289366df3654d2b221fb1168ed","author":{"name":"Michael Vogt","email":"d5b909f12f3acd507760f36dcc3f39f624fe872f@ubuntu.com"},"message":"add test skeletons, need more work","distinct":false,"url":"https://api.github.com/repos/tokurz/snapd/commits/b58a542627f376289366df3654d2b221fb1168ed"},{"sha":"e8e0780b2cebcaad9ca4f0b28caa6dec9d47e575","author":{"name":"Zygmunt Krynicki","email":"b4a5ea001e047040e8c9075b67a268293138da2c@zygoon.pl"},"message":"errtracker: report if snapd did re-execute itself (#3425)\n\nRe-execution affects which internal tools and which snapd is used.\r\nwhile the current error report shows us hashes of both distribution\r\nand core snapd we always need to guess which one is being used\r\nby inspecting the version string. This makes it more obvious.\r\n\r\nSigned-off-by: Zygmunt Krynicki <zygmunt.krynicki@canonical.com>","distinct":false,"url":"https://api.github.com/repos/tokurz/snapd/commits/e8e0780b2cebcaad9ca4f0b28caa6dec9d47e575"},{"sha":"95010e070c300e2c4ba15503b9f3de70e2ed9d70","author":{"name":"Michael Vogt","email":"d5b909f12f3acd507760f36dcc3f39f624fe872f@ubuntu.com"},"message":"releasing package snapd version 2.26.4","distinct":false,"url":"https://api.github.com/repos/tokurz/snapd/commits/95010e070c300e2c4ba15503b9f3de70e2ed9d70"},{"sha":"771dae9b53315b8e3f843b2d1d9127ef75b56a26","author":{"name":"Michael Vogt","email":"d5b909f12f3acd507760f36dcc3f39f624fe872f@ubuntu.com"},"message":"add TestCompile","distinct":false,"url":"https://api.github.com/repos/tokurz/snapd/commits/771dae9b53315b8e3f843b2d1d9127ef75b56a26"},{"sha":"fa573e9af51c5de24eeb77ded3f62cb2e6b0846d","author":{"name":"Michael Vogt","email":"d5b909f12f3acd507760f36dcc3f39f624fe872f@ubuntu.com"},"message":"improve tests","distinct":false,"url":"https://api.github.com/repos/tokurz/snapd/commits/fa573e9af51c5de24eeb77ded3f62cb2e6b0846d"},{"sha":"5bf5540ca56665db36ceb2bf0563a84f175c914a","author":{"name":"Michael Vogt","email":"d5b909f12f3acd507760f36dcc3f39f624fe872f@ubuntu.com"},"message":"add simulation for argument filtering too","distinct":false,"url":"https://api.github.com/repos/tokurz/snapd/commits/5bf5540ca56665db36ceb2bf0563a84f175c914a"}]}
{"actor":{"display_login":"tokurz"}}