Skip to content

Commit 36a3f76

Browse files
committed
release: 2.75
1 parent dd864cd commit 36a3f76

File tree

7 files changed

+343
-3
lines changed

7 files changed

+343
-3
lines changed

NEWS.md

Lines changed: 62 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,65 @@
1+
# New in snapd 2.75
2+
* FDE: run early boot check only once per boot
3+
* FDE: update secboot to revision 77bc2457cc76
4+
* FDE: add degraded state for status API
5+
* FDE: prevent resealing tasks from running together
6+
* FDE: enable using keyslot tokens to store protected keys for UC26+
7+
* FDE: early commit kcmdline config transaction in update-gadget-cmdline to mitigate possible race condition
8+
* FDE: ensure extra snapd kcmdline fragments are applied
9+
* FDE: remove old secboot activation API calls
10+
* LP: #2137543 disable translations in formatted output for snapctl services
11+
* LP: #2142655 improve snap size reporting precision in `snap info` output
12+
* LP: #2141461 allow snap-update-ns to read /proc/pid/auxv
13+
* LP: #2138268 kerberos-tickets: new interface allow access to kerberos tickets stored in /tmp
14+
* LP: #2075560 make snap-specific systemd cgroup mandatory for snaps using core26 and later, improve messaging for failure scenarios
15+
* LP: #2043993 preserve stale connections of broken snaps
16+
* LP: #2139664 snap-confine: remove race condition triggered by hat profile
17+
* LP: #2139065 skip 70-snap.*.rules when building dracut initramfs
18+
* LP: #2002697 error early on removal without purge if home is in NFS mount
19+
* Interfaces: block-devices: allow Xen block devices
20+
* Interfaces: u2f-devices: add Tokey 3 FIDO
21+
* Interfaces: devlxd: new interface allowing acccess to LXD devlxd socket and APIs
22+
* Interfaces: browser-support: allow reading pressure stall info information
23+
* Interfaces: network-setup-control: allow additional netplan files access
24+
* Interfaces: desktop: allow access kvantum, lxqt, and gtk4 configuration files
25+
* Interfaces: system-observe: allow fdinfo access for GPU monitoring
26+
* Interfaces: ubuntu-pro-control: allow access to Ubuntu Advantage client configuration
27+
* Prompting: add API endpoint to ask whether application should have access
28+
* Prompting: add support for audio-record prompting via API endpoint
29+
* Prompting: store snap name instead of apparmor label in requests
30+
* Prompting: respond with 503 to API requests when prompting subsystem is shutting down
31+
* Prompting: generalize prompting subsystem to support requests from outside AppArmor
32+
* Confdb: unset data for missing paths in set request
33+
* Confdb: return 400 for API requests with missing filter constraints
34+
* Confdb: return 400 for API requests with unmatched filter constraints
35+
* Confdb: support typed constraints in confdb filtering
36+
* Confdb: fixed unmarshalling transaction with placeholder path in deltas
37+
* Confdb: refresh confdb-schema assertions during manual refresh
38+
* Remote device management (experimental): add skeleton device management manager
39+
* Remote device management (experimental): add message exchange loop
40+
* Components: add `snap component` command, include component summary in `snap info` output
41+
* Components: enforce validation sets when installing components
42+
* configcore: add `system.motd` configuration option to customize message of the day (motd)
43+
* libsnap-confine-private: improve data handling error
44+
* snap-bootstrap: use libblkid for disk information to speed up boot
45+
* snap-confine: use ld cache from the app base for core26+
46+
* snap: add riscv ISA detection for snaps
47+
* squashfs: reduce memory footprint of single file extraction
48+
* Add experimental snap delta format
49+
* Enable early download of seed snaps during refresh
50+
* Enable parallel downloads of essential snaps during refresh
51+
* Disallow removing components required by validation sets
52+
* Make `snap prepare-image` fail on --validation=ignore if model has enforced validation-sets
53+
* Fix correctly handling interrupted snap downloads
54+
* Fix handling of store throttling for refresh-app-awareness monitored snaps
55+
* Stop removed "endure" services on refresh
56+
* Install by default from the initramfs for UC26+, removing the need for a reboot after installation
57+
* Keep minidebuginfo in snapd snap
58+
* Remove enforce-validation-sets need for network
59+
* Opportunistic discarding of mount namespace when updating slot providers
60+
* Support for delaying updates of snap mount namespaces when refreshing slot providers
61+
* Use application CommonID as default source for desktop ID
62+
163
# New in snapd 2.74.1
264
* FDE: measure DeployedMode and AuditMode variables if they appear as disabled in the event log to avoid a potential reseal-failure boot loop
365
* LP: #2141328 FDE: reuse preinstall check context during install to account for user-ignored errors

packaging/arch/PKGBUILD

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ pkgdesc="Service and tools for management of snap packages."
1111
depends=('squashfs-tools' 'libseccomp' 'libsystemd' 'libcap' 'apparmor')
1212
optdepends=('bash-completion: bash completion support'
1313
'xdg-desktop-portal: desktop integration')
14-
pkgver=2.74.1
14+
pkgver=2.75
1515
pkgrel=1
1616
arch=('x86_64' 'i686' 'armv7h' 'aarch64')
1717
url="https://github.com/snapcore/snapd"

packaging/debian-sid/changelog

Lines changed: 92 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,95 @@
1+
snapd (2.75-1) unstable; urgency=medium
2+
3+
* New upstream release, LP: #2143747
4+
- FDE: run early boot check only once per boot
5+
- FDE: update secboot to revision 77bc2457cc76
6+
- FDE: add degraded state for status API
7+
- FDE: prevent resealing tasks from running together
8+
- FDE: enable using keyslot tokens to store protected keys for UC26+
9+
- FDE: early commit kcmdline config transaction in update-gadget-
10+
cmdline to mitigate possible race condition
11+
- FDE: ensure extra snapd kcmdline fragments are applied
12+
- FDE: remove old secboot activation API calls
13+
- LP: #2137543 disable translations in formatted output for snapctl
14+
services
15+
- LP: #2142655 improve snap size reporting precision in snap info
16+
output
17+
- LP: #2141461 allow snap-update-ns to read /proc/pid/auxv
18+
- LP: #2138268 kerberos-tickets: new interface allow access to
19+
kerberos tickets stored in /tmp
20+
- LP: #2075560 make snap-specific systemd cgroup mandatory for snaps
21+
using core26 and later, improve messaging for failure scenarios
22+
- LP: #2043993 preserve stale connections of broken snaps
23+
- LP: #2139664 snap-confine: remove race condition triggered by hat
24+
profile
25+
- LP: #2139065 skip 70-snap.*.rules when building dracut initramfs
26+
- LP: #2002697 error early on removal without purge if home is in
27+
NFS mount
28+
- Interfaces: block-devices: allow Xen block devices
29+
- Interfaces: u2f-devices: add Tokey 3 FIDO
30+
- Interfaces: devlxd: new interface allowing acccess to LXD devlxd
31+
socket and APIs
32+
- Interfaces: browser-support: allow reading pressure stall info
33+
information
34+
- Interfaces: network-setup-control: allow additional netplan files
35+
access
36+
- Interfaces: desktop: allow access kvantum, lxqt, and gtk4
37+
configuration files
38+
- Interfaces: system-observe: allow fdinfo access for GPU monitoring
39+
- Interfaces: ubuntu-pro-control: allow access to Ubuntu Advantage
40+
client configuration
41+
- Prompting: add API endpoint to ask whether application should have
42+
access
43+
- Prompting: add support for audio-record prompting via API endpoint
44+
- Prompting: store snap name instead of apparmor label in requests
45+
- Prompting: respond with 503 to API requests when prompting
46+
subsystem is shutting down
47+
- Prompting: generalize prompting subsystem to support requests from
48+
outside AppArmor
49+
- Confdb: unset data for missing paths in set request
50+
- Confdb: return 400 for API requests with missing filter
51+
constraints
52+
- Confdb: return 400 for API requests with unmatched filter
53+
constraints
54+
- Confdb: support typed constraints in confdb filtering
55+
- Confdb: fixed unmarshalling transaction with placeholder path in
56+
deltas
57+
- Confdb: refresh confdb-schema assertions during manual refresh
58+
- Remote device management (experimental): add skeleton device
59+
management manager
60+
- Remote device management (experimental): add message exchange loop
61+
- Components: add snap component command, include component summary
62+
in snap info output
63+
- Components: enforce validation sets when installing components
64+
- configcore: add system.motd configuration option to customize
65+
message of the day (motd)
66+
- libsnap-confine-private: improve data handling error
67+
- snap-bootstrap: use libblkid for disk information to speed up boot
68+
- snap-confine: use ld cache from the app base for core26+
69+
- snap: add riscv ISA detection for snaps
70+
- squashfs: reduce memory footprint of single file extraction
71+
- Add experimental snap delta format
72+
- Enable early download of seed snaps during refresh
73+
- Enable parallel downloads of essential snaps during refresh
74+
- Disallow removing components required by validation sets
75+
- Make snap prepare-image fail on --validation=ignore if model has
76+
enforced validation-sets
77+
- Fix correctly handling interrupted snap downloads
78+
- Fix handling of store throttling for refresh-app-awareness
79+
monitored snaps
80+
- Stop removed "endure" services on refresh
81+
- Install by default from the initramfs for UC26+, removing the need
82+
for a reboot after installation
83+
- Keep minidebuginfo in snapd snap
84+
- Remove enforce-validation-sets need for network
85+
- Opportunistic discarding of mount namespace when updating slot
86+
providers
87+
- Support for delaying updates of snap mount namespaces when
88+
refreshing slot providers
89+
- Use application CommonID as default source for desktop ID
90+
91+
-- Katie May <katie.may@canonical.com> Mon, 09 Mar 2026 17:10:13 +0100
92+
193
snapd (2.74.1-1) unstable; urgency=medium
294

395
* New upstream release, LP: #2138629

packaging/fedora/snapd.spec

Lines changed: 90 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -114,7 +114,7 @@
114114
%endif
115115

116116
Name: snapd
117-
Version: 2.74.1
117+
Version: 2.75
118118
Release: 0%{?dist}
119119
Summary: A transactional software package manager
120120
License: GPL-3.0-only
@@ -1009,6 +1009,95 @@ fi
10091009
%endif
10101010

10111011
%changelog
1012+
* Mon Mar 09 2026 Katie May <katie.may@canonical.com>
1013+
- New upstream release 2.75
1014+
- FDE: run early boot check only once per boot
1015+
- FDE: update secboot to revision 77bc2457cc76
1016+
- FDE: add degraded state for status API
1017+
- FDE: prevent resealing tasks from running together
1018+
- FDE: enable using keyslot tokens to store protected keys for UC26+
1019+
- FDE: early commit kcmdline config transaction in update-gadget-
1020+
cmdline to mitigate possible race condition
1021+
- FDE: ensure extra snapd kcmdline fragments are applied
1022+
- FDE: remove old secboot activation API calls
1023+
- LP: #2137543 disable translations in formatted output for snapctl
1024+
services
1025+
- LP: #2142655 improve snap size reporting precision in snap info
1026+
output
1027+
- LP: #2141461 allow snap-update-ns to read /proc/pid/auxv
1028+
- LP: #2138268 kerberos-tickets: new interface allow access to
1029+
kerberos tickets stored in /tmp
1030+
- LP: #2075560 make snap-specific systemd cgroup mandatory for snaps
1031+
using core26 and later, improve messaging for failure scenarios
1032+
- LP: #2043993 preserve stale connections of broken snaps
1033+
- LP: #2139664 snap-confine: remove race condition triggered by hat
1034+
profile
1035+
- LP: #2139065 skip 70-snap.*.rules when building dracut initramfs
1036+
- LP: #2002697 error early on removal without purge if home is in
1037+
NFS mount
1038+
- Interfaces: block-devices: allow Xen block devices
1039+
- Interfaces: u2f-devices: add Tokey 3 FIDO
1040+
- Interfaces: devlxd: new interface allowing acccess to LXD devlxd
1041+
socket and APIs
1042+
- Interfaces: browser-support: allow reading pressure stall info
1043+
information
1044+
- Interfaces: network-setup-control: allow additional netplan files
1045+
access
1046+
- Interfaces: desktop: allow access kvantum, lxqt, and gtk4
1047+
configuration files
1048+
- Interfaces: system-observe: allow fdinfo access for GPU monitoring
1049+
- Interfaces: ubuntu-pro-control: allow access to Ubuntu Advantage
1050+
client configuration
1051+
- Prompting: add API endpoint to ask whether application should have
1052+
access
1053+
- Prompting: add support for audio-record prompting via API endpoint
1054+
- Prompting: store snap name instead of apparmor label in requests
1055+
- Prompting: respond with 503 to API requests when prompting
1056+
subsystem is shutting down
1057+
- Prompting: generalize prompting subsystem to support requests from
1058+
outside AppArmor
1059+
- Confdb: unset data for missing paths in set request
1060+
- Confdb: return 400 for API requests with missing filter
1061+
constraints
1062+
- Confdb: return 400 for API requests with unmatched filter
1063+
constraints
1064+
- Confdb: support typed constraints in confdb filtering
1065+
- Confdb: fixed unmarshalling transaction with placeholder path in
1066+
deltas
1067+
- Confdb: refresh confdb-schema assertions during manual refresh
1068+
- Remote device management (experimental): add skeleton device
1069+
management manager
1070+
- Remote device management (experimental): add message exchange loop
1071+
- Components: add snap component command, include component summary
1072+
in snap info output
1073+
- Components: enforce validation sets when installing components
1074+
- configcore: add system.motd configuration option to customize
1075+
message of the day (motd)
1076+
- libsnap-confine-private: improve data handling error
1077+
- snap-bootstrap: use libblkid for disk information to speed up boot
1078+
- snap-confine: use ld cache from the app base for core26+
1079+
- snap: add riscv ISA detection for snaps
1080+
- squashfs: reduce memory footprint of single file extraction
1081+
- Add experimental snap delta format
1082+
- Enable early download of seed snaps during refresh
1083+
- Enable parallel downloads of essential snaps during refresh
1084+
- Disallow removing components required by validation sets
1085+
- Make snap prepare-image fail on --validation=ignore if model has
1086+
enforced validation-sets
1087+
- Fix correctly handling interrupted snap downloads
1088+
- Fix handling of store throttling for refresh-app-awareness
1089+
monitored snaps
1090+
- Stop removed "endure" services on refresh
1091+
- Install by default from the initramfs for UC26+, removing the need
1092+
for a reboot after installation
1093+
- Keep minidebuginfo in snapd snap
1094+
- Remove enforce-validation-sets need for network
1095+
- Opportunistic discarding of mount namespace when updating slot
1096+
providers
1097+
- Support for delaying updates of snap mount namespaces when
1098+
refreshing slot providers
1099+
- Use application CommonID as default source for desktop ID
1100+
10121101
* Thu Feb 12 2026 Ernest Lotter <ernest.lotter@canonical.com>
10131102
- New upstream release 2.74.1
10141103
- FDE: measure DeployedMode and AuditMode variables if they appear

packaging/opensuse/snapd.changes

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,8 @@
1+
-------------------------------------------------------------------
2+
Mon Mar 09 16:10:13 UTC 2026 - katie.may@canonical.com
3+
4+
- Update to upstream release 2.75
5+
16
-------------------------------------------------------------------
27
Thu Feb 12 19:27:23 UTC 2026 - ernest.lotter@canonical.com
38

packaging/opensuse/snapd.spec

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -100,7 +100,7 @@
100100

101101

102102
Name: snapd
103-
Version: 2.74.1
103+
Version: 2.75
104104
Release: 0
105105
Summary: Tools enabling systems to work with .snap files
106106
License: GPL-3.0

packaging/ubuntu-16.04/changelog

Lines changed: 92 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,95 @@
1+
snapd (2.75) xenial; urgency=medium
2+
3+
* New upstream release, LP: #2143747
4+
- FDE: run early boot check only once per boot
5+
- FDE: update secboot to revision 77bc2457cc76
6+
- FDE: add degraded state for status API
7+
- FDE: prevent resealing tasks from running together
8+
- FDE: enable using keyslot tokens to store protected keys for UC26+
9+
- FDE: early commit kcmdline config transaction in update-gadget-
10+
cmdline to mitigate possible race condition
11+
- FDE: ensure extra snapd kcmdline fragments are applied
12+
- FDE: remove old secboot activation API calls
13+
- LP: #2137543 disable translations in formatted output for snapctl
14+
services
15+
- LP: #2142655 improve snap size reporting precision in snap info
16+
output
17+
- LP: #2141461 allow snap-update-ns to read /proc/pid/auxv
18+
- LP: #2138268 kerberos-tickets: new interface allow access to
19+
kerberos tickets stored in /tmp
20+
- LP: #2075560 make snap-specific systemd cgroup mandatory for snaps
21+
using core26 and later, improve messaging for failure scenarios
22+
- LP: #2043993 preserve stale connections of broken snaps
23+
- LP: #2139664 snap-confine: remove race condition triggered by hat
24+
profile
25+
- LP: #2139065 skip 70-snap.*.rules when building dracut initramfs
26+
- LP: #2002697 error early on removal without purge if home is in
27+
NFS mount
28+
- Interfaces: block-devices: allow Xen block devices
29+
- Interfaces: u2f-devices: add Tokey 3 FIDO
30+
- Interfaces: devlxd: new interface allowing acccess to LXD devlxd
31+
socket and APIs
32+
- Interfaces: browser-support: allow reading pressure stall info
33+
information
34+
- Interfaces: network-setup-control: allow additional netplan files
35+
access
36+
- Interfaces: desktop: allow access kvantum, lxqt, and gtk4
37+
configuration files
38+
- Interfaces: system-observe: allow fdinfo access for GPU monitoring
39+
- Interfaces: ubuntu-pro-control: allow access to Ubuntu Advantage
40+
client configuration
41+
- Prompting: add API endpoint to ask whether application should have
42+
access
43+
- Prompting: add support for audio-record prompting via API endpoint
44+
- Prompting: store snap name instead of apparmor label in requests
45+
- Prompting: respond with 503 to API requests when prompting
46+
subsystem is shutting down
47+
- Prompting: generalize prompting subsystem to support requests from
48+
outside AppArmor
49+
- Confdb: unset data for missing paths in set request
50+
- Confdb: return 400 for API requests with missing filter
51+
constraints
52+
- Confdb: return 400 for API requests with unmatched filter
53+
constraints
54+
- Confdb: support typed constraints in confdb filtering
55+
- Confdb: fixed unmarshalling transaction with placeholder path in
56+
deltas
57+
- Confdb: refresh confdb-schema assertions during manual refresh
58+
- Remote device management (experimental): add skeleton device
59+
management manager
60+
- Remote device management (experimental): add message exchange loop
61+
- Components: add snap component command, include component summary
62+
in snap info output
63+
- Components: enforce validation sets when installing components
64+
- configcore: add system.motd configuration option to customize
65+
message of the day (motd)
66+
- libsnap-confine-private: improve data handling error
67+
- snap-bootstrap: use libblkid for disk information to speed up boot
68+
- snap-confine: use ld cache from the app base for core26+
69+
- snap: add riscv ISA detection for snaps
70+
- squashfs: reduce memory footprint of single file extraction
71+
- Add experimental snap delta format
72+
- Enable early download of seed snaps during refresh
73+
- Enable parallel downloads of essential snaps during refresh
74+
- Disallow removing components required by validation sets
75+
- Make snap prepare-image fail on --validation=ignore if model has
76+
enforced validation-sets
77+
- Fix correctly handling interrupted snap downloads
78+
- Fix handling of store throttling for refresh-app-awareness
79+
monitored snaps
80+
- Stop removed "endure" services on refresh
81+
- Install by default from the initramfs for UC26+, removing the need
82+
for a reboot after installation
83+
- Keep minidebuginfo in snapd snap
84+
- Remove enforce-validation-sets need for network
85+
- Opportunistic discarding of mount namespace when updating slot
86+
providers
87+
- Support for delaying updates of snap mount namespaces when
88+
refreshing slot providers
89+
- Use application CommonID as default source for desktop ID
90+
91+
-- Katie May <katie.may@canonical.com> Mon, 09 Mar 2026 17:10:13 +0100
92+
193
snapd (2.74.1) xenial; urgency=medium
294

395
* New upstream release, LP: #2138629

0 commit comments

Comments
 (0)