6.8-rc1 from kernel-ppa/mainline breaks snap

Asked by Joel Oliver

Didn't post a bug as they state not to post bugs on packages that are not part of the supported install base so not sure where to put this.

Compiling the latest 6.8-rc1 from kernel-ppa/mainline breaks all snap packages due to apparmor policies. Falling back to 6.7.0 solves problem.
Running 22.04 LTS base system. Breaks most if not all of snap (mysql, certbot, libvirt...) Here's a sample of some apparmor dmesg output, libvirt works because I symlinked it into "disabled" directory, but was failing before this.

Jan 25 17:12:21 asus-desktop kernel: [167816.802879] audit: type=1400 audit(1706220741.292:295): apparmor="DENIED" operation="file_mmap" class="file" profile="/snap/core/16202/usr/lib/snapd/snap-confine" name="/snap/core/16202/usr/lib/snapd/snap-update-ns" pid=140106 comm="5" requested_mask="m" denied_mask="m" fsuid=0 ouid=0
Jan 25 17:13:03 asus-desktop kernel: [167859.433433] audit: type=1400 audit(1706220783.922:296): apparmor="DENIED" operation="file_mmap" class="file" profile="/snap/core/16202/usr/lib/snapd/snap-confine" name="/snap/core/16202/usr/lib/snapd/snap-exec" pid=140134 comm="snap-exec" requested_mask="m" denied_mask="m" fsuid=1000 ouid=0
Jan 25 17:13:06 asus-desktop kernel: [167862.285615] audit: type=1400 audit(1706220786.774:297): apparmor="DENIED" operation="file_mmap" class="file" profile="/snap/core/16202/usr/lib/snapd/snap-confine" name="/snap/core/16202/usr/lib/snapd/snap-exec" pid=140165 comm="snap-exec" requested_mask="m" denied_mask="m" fsuid=1000 ouid=0
Jan 25 17:13:10 asus-desktop kernel: [167865.823021] audit: type=1400 audit(1706220790.310:298): apparmor="ALLOWED" operation="file_mmap" class="file" profile="dnsmasq" name="/usr/lib/libvirt/libvirt_leaseshelper" pid=140191 comm="libvirt_leasesh" requested_mask="m" denied_mask="m" fsuid=0 ouid=0
Jan 25 17:18:50 asus-desktop kernel: [168205.909497] audit: type=1400 audit(1706221130.383:299): apparmor="DENIED" operation="file_mmap" class="file" profile="/snap/core/16202/usr/lib/snapd/snap-confine" name="/snap/core/16202/usr/lib/snapd/snap-update-ns" pid=141014 comm="5" requested_mask="m" denied_mask="m" fsuid=0 ouid=0
Jan 25 17:23:39 asus-desktop kernel: [168494.777822] audit: type=1400 audit(1706221419.245:300): apparmor="DENIED" operation="file_mmap" class="file" profile="/snap/core/16202/usr/lib/snapd/snap-confine" name="/snap/core/16202/usr/lib/snapd/snap-exec" pid=141447 comm="snap-exec" requested_mask="m" denied_mask="m" fsuid=1000 ouid=0
Jan 25 17:23:43 asus-desktop kernel: [168498.713726] audit: type=1400 audit(1706221423.181:301): apparmor="DENIED" operation="file_mmap" class="file" profile="/snap/core/16202/usr/lib/snapd/snap-confine" name="/snap/core/16202/usr/lib/snapd/snap-exec" pid=141473 comm="snap-exec" requested_mask="m" denied_mask="m" fsuid=1000 ouid=0
Jan 25 17:23:45 asus-desktop kernel: [168501.219270] audit: type=1400 audit(1706221425.685:302): apparmor="DENIED" operation="file_mmap" class="file" profile="/snap/core/16202/usr/lib/snapd/snap-confine" name="/snap/core/16202/usr/lib/snapd/snap-exec" pid=141538 comm="snap-exec" requested_mask="m" denied_mask="m" fsuid=1000 ouid=0

Question information

Language:
English Edit question
Status:
Solved
For:
Ubuntu snap Edit question
Assignee:
No assignee Edit question
Solved by:
Manfred Hampl
Solved:
Last query:
Last reply:
Revision history for this message
Best Manfred Hampl (m-hampl) said :
#1

This is support area for software in the standard Ubuntu repositories.

If you have problems with software from a PPA or other foreign sources, then you are wrong here.

Please also note the remark in https://wiki.ubuntu.com/Kernel/MainlineBuilds#Support_.28BEWARE:_there_is_none.29

Revision history for this message
Joel Oliver (joelol75) said :
#2

Thanks Manfred Hampl, that solved my question.