File snapd.spec of Package snapd

# spec file for package snapd
#
# Copyright (c) 2017 Zygmunt Krynicki <zygmunt.krynicki@canonical.com>
# Copyright (c) 2018 Neal Gompa <ngompa13@gmail.com>
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.

# Please submit bugfixes or comments via http://bugs.opensuse.org/

# Test keys: used for internal testing in snapd.
%bcond_with testkeys

# Enable AppArmor on openSUSE Tumbleweed (post 15.0) or higher
# N.B.: Prior to openSUSE Tumbleweed in May 2018, the AppArmor userspace in SUSE
# did not support what we needed to be able to turn on basic integration.
%if 0%{?suse_version} >= 1550
%bcond_without apparmor
%else
%bcond_with apparmor
%endif

# The list of systemd services we are expected to ship. Note that this does
# not include services that are only required on core systems.
%global systemd_services_list snapd.socket snapd.service snapd.seeded.service snapd.failure.service %{?with_apparmor:snapd.apparmor.service}
%global systemd_user_services_list snapd.session-agent.socket

# Alternate snap mount directory: not used by openSUSE.
# If this spec file is integrated into Fedora then consider
# adding global with_alt_snap_mount_dir 1 then.
%global snap_mount_dir /snap

# Compat macros
%{!?make_build: %global make_build %{__make} %{?_smp_mflags}}
%{?!_environmentdir: %global _environmentdir %{_prefix}/lib/environment.d}
%{?!_userunitdir: %global _userunitdir %{_prefix}/lib/systemd/user}

# Define the variable for systemd generators, if missing.
%{?!_systemdgeneratordir: %global _systemdgeneratordir %{_prefix}/lib/systemd/system-generators}
%{?!_systemdusergeneratordir: %global _systemdusergeneratordir %{_prefix}/lib/systemd/user-generators}
%{?!_systemd_system_env_generator_dir: %global _systemd_system_env_generator_dir %{_prefix}/lib/systemd/system-environment-generators}
%{?!_systemd_user_env_generator_dir: %global _systemd_user_env_generator_dir %{_prefix}/lib/systemd/user-environment-generators}

# This is fixed in SUSE Linux 15
# Cf. https://build.opensuse.org/package/rdiff/Base:System/rpm?linkrev=base&rev=396
%if 0%{?suse_version} < 1500
%global _sharedstatedir %{_localstatedir}/lib
%endif

%global provider        github
%global provider_tld    com
%global project         snapcore
%global repo            snapd
%global provider_prefix %{provider}.%{provider_tld}/%{project}/%{repo}
%global import_path     %{provider_prefix}

# Additional entry of $GOPATH during the build process.
# This is designed to be a sub-directory of {_builddir}/{name}-{version}
# because that directory is automatically cleaned-up by the build process.
%global indigo_gopath   %{_builddir}/%{name}-%{version}/gopath

# Directory where "name-version" directory from upstream taball is unpacked to.
# This directory is arranged so that it is already contained inside the future
# GOPATH so that nothing needs to be moved or copied for "go build" to work.
%global indigo_srcdir   %{indigo_gopath}/src/%{import_path}

# Set if multilib is enabled for supported arches
%ifarch x86_64 aarch64 %{power64} s390x
%global with_multilib 1
%endif


Name:           snapd
Version:        2.42.5
Release:        0
Summary:        Tools enabling systems to work with .snap files
License:        GPL-3.0
Group:          System/Packages
Url:            https://%{import_path}
Source0:        https://github.com/snapcore/snapd/releases/download/%{version}/%{name}_%{version}.vendor.tar.xz
Source1:        snapd-rpmlintrc
Patch1:         opensuse131.patch
%if (0%{?sle_version} >= 120200 || 0%{?suse_version} >= 1500) && 0%{?is_opensuse}
BuildRequires:  ShellCheck
%endif
BuildRequires:  autoconf
BuildRequires:  automake
BuildRequires:  glib2-devel
BuildRequires:  glibc-devel-static
BuildRequires:  go >= 1.9
BuildRequires:  gpg2
BuildRequires:  indent
BuildRequires:  libcap-devel
BuildRequires:  libseccomp-devel
BuildRequires:  libtool
BuildRequires:  libudev-devel
BuildRequires:  libuuid-devel
BuildRequires:  make
BuildRequires:  openssh
BuildRequires:  pkg-config
BuildRequires:  python-docutils
BuildRequires:  python3-docutils
BuildRequires:  squashfs
# Due to: rpm -q --whatprovides /usr/share/pkgconfig/systemd.pc
BuildRequires:  systemd
BuildRequires:  systemd-rpm-macros
BuildRequires:  systemd-devel
BuildRequires:  timezone
BuildRequires:  udev
BuildRequires:  xfsprogs-devel
BuildRequires:  xz
%ifarch x86_64
# This is needed for seccomp tests
BuildRequires:  glibc-devel-32bit glibc-32bit
BuildRequires:  glibc-devel-static-32bit
BuildRequires:  gcc-32bit
%endif

%if %{with apparmor}
BuildRequires:  libapparmor-devel
BuildRequires:  apparmor-rpm-macros
%endif

PreReq:         permissions

Requires(post): permissions
%if %{with apparmor}
Requires:       apparmor-parser
Requires:       apparmor-profiles
%endif
Requires:       gpg2
Requires:       openssh
Requires:       squashfs

# Old versions of xdg-document-portal can expose data belonging to
# other confied apps.  Older OpenSUSE releases are unlikely to change,
# so for now limit this to Tumbleweed.
%if 0%{?suse_version} >= 1550
Conflicts:      xdg-desktop-portal < 0.11
%endif

%{?systemd_requires}

%description
This package contains that snapd daemon and the snap command line tool.
Together they can be used to install, refresh (update), remove and configure
snap packages on a system. Snap packages are a novel format based on simple
principles. Bundle your dependencies, run in a predictable environment, use
modern kernel features for setting up the execution environment and security.
The same binary snap package can be installed and used on many diverse systems
such as Debian, Fedora and OpenSUSE as well as their multiple derivatives.

This package contains the official build, endorsed by snapd developers. It is
updated as soon as new upstream releases are made and is designed to live in
the system:snappy repository.

%prep
# NOTE: Instead of using setup -q we are unpacking a subdirectory of the source
# tarball into a directory that is automatically on the future GOPATH. This
# means that while go doesn't care at all the current working directory is not
# the top-level directory of the source tarball which some people may find
# unusual.

# Create indigo compatible build layout.
mkdir -p %{indigo_srcdir}
tar -axf %{_sourcedir}/%{name}_%{version}.vendor.tar.xz --strip-components=1 -C %{indigo_srcdir}

# Patch the source in the place it got extracted to.
pushd %{indigo_srcdir}
# Add patch0 -p1 ... as appropriate here.
%patch1 -p1
popd


# Generate snapd.defines.mk, this file is included by snapd.mk. It contains a
# number of variable definitions that are set based on their RPM equivalents.
# Since we can apply any conditional overrides here in the spec file we can
# maintain one consistent set of variables across the spec and makefile worlds.
cat >snapd.defines.mk <<__DEFINES__
# This file is generated by openSUSE's snapd.spec
# Directory variables.
prefix = %{_prefix}
bindir = %{_bindir}
sbindir = %{_sbindir}
libexecdir = %{_libexecdir}
mandir = %{_mandir}
datadir = %{_datadir}
localstatedir = %{_localstatedir}
sharedstatedir = %{_sharedstatedir}
unitdir = %{_unitdir}
# Build configuration
with_core_bits = 0
with_alt_snap_mount_dir = %{!?with_alt_snap_mount_dir:0}%{?with_alt_snap_mount_dir:1}
with_apparmor = %{with apparmor}
with_testkeys = %{with_testkeys}
__DEFINES__

# Set the version that is compiled into the various executables/
pushd %{indigo_srcdir}
./mkversion.sh %{version}-%{release}
popd

# Sanity check, ensure that systemd system generator directory is in agreement between the build system and packaging.
if [ "$(pkg-config --variable=systemdsystemgeneratordir systemd)" != "%{_systemdgeneratordir}" ]; then
  echo "pkg-confing and rpm macros disagree about the location of systemd system generator directory"
  exit 1
fi

# Enable hardening; Also see https://bugzilla.redhat.com/show_bug.cgi?id=1343892
CFLAGS="$RPM_OPT_FLAGS -fPIC -Wl,-z,relro -Wl,-z,now"
CXXFLAGS="$RPM_OPT_FLAGS -fPIC -Wl,-z,relro -Wl,-z,now"
LDFLAGS=""

# On openSUSE Leap 15 or more recent build position independent executables.
# For a helpful guide about the versions and macros used below, please see:
# https://en.opensuse.org/openSUSE:Build_Service_cross_distribution_howto
%if 0%{?suse_version} >= 1500
CFLAGS="$CFLAGS -fPIE"
CXXFLAGS="$CXXFLAGS -fPIE"
LDFLAGS="$LDFLAGS -pie"
%endif

export CFLAGS
export CXXFLAGS
export LDFLAGS

# Generate autotools build system files.
pushd %{indigo_srcdir}/cmd
autoreconf -i -f

%configure \
    %{!?with_apparmor:--disable-apparmor} \
    %{?with_apparmor:--enable-apparmor} \
    --libexecdir=%{_libexecdir}/snapd \
    --enable-nvidia-biarch \
    %{?with_multilib:--with-32bit-libdir=%{_prefix}/lib} \
    --with-snap-mount-dir=%{snap_mount_dir} \
    --enable-merged-usr

popd

%build
%make_build -C %{indigo_srcdir}/cmd
# Use the common packaging helper for building.
#
# NOTE: indigo_gopath takes priority over GOPATH. This ensures that we
# build the code that we intended in case GOPATH points to another copy.
%make_build -f %{indigo_srcdir}/packaging/snapd.mk GOPATH=%{indigo_gopath}:$GOPATH all

%check
#%%make_build -C %%{indigo_srcdir}/cmd check
# Use the common packaging helper for testing.
#%%make_build -f %%{indigo_srcdir}/packaging/snapd.mk GOPATH=%%{indigo_gopath}:$GOPATH check

%install
# Install all systemd and dbus units, and env files.
%make_install -C %{indigo_srcdir}/data \
		BINDIR=%{_bindir} \
		LIBEXECDIR=%{_libexecdir} \
		SYSTEMDSYSTEMUNITDIR=%{_unitdir} \
		SNAP_MOUNT_DIR=%{snap_mount_dir}
# Install all the C executables.
%make_install -C %{indigo_srcdir}/cmd
# Use the common packaging helper for bulk of installation.
%make_install -f %{indigo_srcdir}/packaging/snapd.mk install

# Undo special permissions of the void directory. We handle that in RPM files
# section below.
chmod 755 %{buildroot}%{_localstatedir}/lib/snapd/void

# Install local permissions policy for snap-confine. This should be removed
# once snap-confine is added to the permissions package. This is done following
# the recommendations on
# https://en.opensuse.org/openSUSE:Package_security_guidelines
install -m 644 -D %{indigo_srcdir}/packaging/opensuse/permissions %{buildroot}%{_sysconfdir}/permissions.d/snapd
install -m 644 -D %{indigo_srcdir}/packaging/opensuse/permissions.paranoid %{buildroot}%{_sysconfdir}/permissions.d/snapd.paranoid

# See https://en.opensuse.org/openSUSE:Packaging_checks#suse-missing-rclink for details
install -d %{buildroot}%{_sbindir}
ln -sf %{_sbindir}/service %{buildroot}%{_sbindir}/rcsnapd
ln -sf %{_sbindir}/service %{buildroot}%{_sbindir}/rcsnapd.seeded
%if %{with apparmor}
ln -sf %{_sbindir}/service %{buildroot}%{_sbindir}/rcsnapd.apparmor
%endif

# Install Polkit configuration.
# TODO: This should be handled by data makefile.
install -m 644 -D %{indigo_srcdir}/data/polkit/io.snapcraft.snapd.policy %{buildroot}%{_datadir}/polkit-1/actions

# Install the "info" data file with snapd version
# TODO: This should be handled by data makefile.
install -m 644 -D %{indigo_srcdir}/data/info %{buildroot}%{_libexecdir}/snapd/info

# Install bash completion for "snap"
# TODO: This should be handled by data makefile.
install -m 644 -D %{indigo_srcdir}/data/completion/snap %{buildroot}%{_datadir}/bash-completion/completions/snap
install -m 644 -D %{indigo_srcdir}/data/completion/complete.sh %{buildroot}%{_libexecdir}/snapd
install -m 644 -D %{indigo_srcdir}/data/completion/etelpmoc.sh %{buildroot}%{_libexecdir}/snapd

%verifyscript
%verify_permissions -e %{_libexecdir}/snapd/snap-confine

%pre
%service_add_pre %{systemd_services_list}

%post
%set_permissions %{_libexecdir}/snapd/snap-confine
%if %{with apparmor}
%apparmor_reload /etc/apparmor.d/usr.lib.snapd.snap-confine
%endif
%service_add_post %{systemd_services_list}
#%%systemd_user_post %%{systemd_user_services_list}
case ":$PATH:" in
    *:/snap/bin:*)
        ;;
    *)
        echo "Please reboot, logout/login or source /etc/profile to have /snap/bin added to PATH."
        echo "On a Tumbleweed system you need to run: systemctl enable snapd.apparmor.service"
        ;;
esac

%preun
%service_del_preun %{systemd_services_list}
#%%systemd_user_preun %%{systemd_user_services_list}
if [ $1 -eq 0 ]; then
    %{_libexecdir}/snapd/snap-mgmt --purge || :
fi

%postun
%service_del_postun %{systemd_services_list}
#%%systemd_user_postun %%{systemd_user_services_list}

%files

# Configuration files
%config %{_sysconfdir}/permissions.d/snapd
%config %{_sysconfdir}/permissions.d/snapd.paranoid
%config %{_sysconfdir}/profile.d/snapd.sh

# Directories
%dir %attr(0111,root,root) %{_sharedstatedir}/snapd/void
%dir %{_datadir}/dbus-1
%dir %{_datadir}/dbus-1/services
%dir %{_datadir}/polkit-1
%dir %{_datadir}/polkit-1/actions
%dir %{_environmentdir}
%dir %{_libexecdir}/snapd
%dir %{_localstatedir}/cache/snapd
%dir %{_sharedstatedir}/snapd
%dir %{_sharedstatedir}/snapd/apparmor
%dir %{_sharedstatedir}/snapd/apparmor/profiles
%dir %{_sharedstatedir}/snapd/apparmor/snap-confine
%dir %{_sharedstatedir}/snapd/assertions
%dir %{_sharedstatedir}/snapd/cache
%dir %{_sharedstatedir}/snapd/cookie
%dir %{_sharedstatedir}/snapd/desktop
%dir %{_sharedstatedir}/snapd/desktop/applications
%dir %{_sharedstatedir}/snapd/device
%dir %{_sharedstatedir}/snapd/hostfs
%dir %{_sharedstatedir}/snapd/lib
%dir %{_sharedstatedir}/snapd/lib/gl
%dir %{_sharedstatedir}/snapd/lib/gl32
%dir %{_sharedstatedir}/snapd/lib/glvnd
%dir %{_sharedstatedir}/snapd/lib/vulkan
%dir %{_sharedstatedir}/snapd/mount
%dir %{_sharedstatedir}/snapd/seccomp
%dir %{_sharedstatedir}/snapd/seccomp/bpf
%dir %{_sharedstatedir}/snapd/sequence
%dir %{_sharedstatedir}/snapd/snaps
%dir %{_systemd_system_env_generator_dir}
%dir %{_systemdgeneratordir}
%dir %{_userunitdir}
%dir %{snap_mount_dir}
%dir %{snap_mount_dir}/bin

# Ghost entries for things created at runtime
%ghost %dir %{_localstatedir}/snap
%ghost %{_localstatedir}/cache/snapd/commands
%ghost %{_localstatedir}/cache/snapd/names
%ghost %{_localstatedir}/cache/snapd/sections
%ghost %{_sharedstatedir}/snapd/seccomp/bpf/global.bin
%ghost %{_sharedstatedir}/snapd/state.json
%ghost %{_sharedstatedir}/snapd/system-key
%ghost %{snap_mount_dir}/README
%verify(not user group mode) %attr(06755,root,root) %{_libexecdir}/snapd/snap-confine
%{_bindir}/snap
%{_bindir}/snapctl
%{_datadir}/applications/snap-handle-link.desktop
%{_datadir}/bash-completion/completions/snap
%{_datadir}/dbus-1/services/io.snapcraft.Launcher.service
%{_datadir}/dbus-1/services/io.snapcraft.Settings.service
%{_datadir}/polkit-1/actions/io.snapcraft.snapd.policy
%{_environmentdir}/990-snapd.conf
%{_libexecdir}/snapd/complete.sh
%{_libexecdir}/snapd/etelpmoc.sh
%{_libexecdir}/snapd/info
%{_libexecdir}/snapd/snap-device-helper
%{_libexecdir}/snapd/snap-discard-ns
%{_libexecdir}/snapd/snap-exec
%{_libexecdir}/snapd/snap-gdb-shim
%{_libexecdir}/snapd/snap-mgmt
%{_libexecdir}/snapd/snap-seccomp
%{_libexecdir}/snapd/snap-update-ns
%{_libexecdir}/snapd/snapctl
%{_libexecdir}/snapd/snapd
%{_libexecdir}/snapd/snapd.run-from-snap
%{_mandir}/man8/snap-confine.8*
%{_mandir}/man8/snap-discard-ns.8*
%{_mandir}/man8/snap.8*
%{_mandir}/man8/snapd-env-generator.8*
%{_sbindir}/rcsnapd
%{_sbindir}/rcsnapd.seeded
%{_sysconfdir}/xdg/autostart/snap-userd-autostart.desktop
%{_systemd_system_env_generator_dir}/snapd-env-generator
%{_systemdgeneratordir}/snapd-generator
%{_unitdir}/snapd.failure.service
%{_unitdir}/snapd.seeded.service
%{_unitdir}/snapd.service
%{_unitdir}/snapd.socket
%{_userunitdir}/snapd.session-agent.service
%{_userunitdir}/snapd.session-agent.socket

# When apparmor is enabled there are some additional entries.
%if %{with apparmor}
%config %{_sysconfdir}/apparmor.d
%{_libexecdir}/snapd/snapd-apparmor
%{_sbindir}/rcsnapd.apparmor
%{_sysconfdir}/apparmor.d/usr.lib.snapd.snap-confine
%{_unitdir}/snapd.apparmor.service
%endif

%changelog
* Tue Jan  7 2020 me@zygoon.pl
- New upstream maintenance release (2.42.5)
  - snap-confine: revert, with comment, explicit unix deny for nested lxd
  - Disable mount-ns test on 16.04. It is too flaky currently
* Thu Nov 28 2019 me@zygoon.pl
- New upstream maintenance release (2.42.4)
  - 2.42.3 was short lived and not used
* Wed Nov 20 2019 me@zygoon.pl
- New upstream release (2.42.2)
* Tue Nov 19 2019 me@zygoon.pl
- New upstream release (2.42.1)
* Thu Oct  3 2019 me@zygoon.pl
- New upstream release (2.42)
* Mon Sep 30 2019 me@zygoon.pl
- Cherry pick https://github.com/snapcore/snapd/pull/7422
  to fix https://bugs.launchpad.net/snapd/+bug/1842615
* Mon Sep 30 2019 me@zygoon.pl
- New upstream release (2.41)
  - sorry for skipping 2.40
* Fri May 31 2019 me@zygoon.pl
- Cherry pick 0004-cmd-snap-update-ns-detach-unused-mount-points.patch
  to address https://bugs.launchpad.net/snapd/+bug/1831010
* Thu May 30 2019 me@zygoon.pl
- Cherry pick two patches that fix the test suite when running
  in a network namespace with only the loopback device.
* Wed May 29 2019 me@zygoon.pl
- New upstream release
* Fri May 24 2019 me@zygoon.pl
- New upstream release
  - synchronize snapd.spec with upstream packaging
* Thu Feb 28 2019 me@zygoon.pl
- New upstream release
* Tue Feb 19 2019 me@zygoon.pl
- New upstream release
* Fri Feb  8 2019 me@zygoon.pl
- New upstream release
* Tue Jan 29 2019 me@zygoon.pl
- New upstream release
* Wed Jan 23 2019 me@zygoon.pl
- New upstream release
- Drop patch applied upstream 0001-cmd-snap-confine-allow-mapping-more-libc-shards.patch
* Tue Dec 18 2018 me@zygoon.pl
- New upstream maintenance release
* Fri Nov 30 2018 me@zygoon.pl
- New upstream maintenance release bringing application startup improvements
  for classically confined software as well as multiple bug-fixes.
* Sun Nov 18 2018 me@zygoon.pl
- Cherry pick fix to https://bugs.launchpad.net/snapd/+bug/1803903
* Fri Nov  9 2018 me@zygoon.pl
- New upstream maintenance release 2.36.1
  - Drop patch 0001-cmd-snap-confine-remove-stale-mount-profile-along-st.patch
    cherry-picked from the release branch.
- Add snapd.failure.service to list of managed services
* Mon Nov  5 2018 me@zygoon.pl
- Update to upstream release 2.36
- Drop the use of go-packaging
  - not recommended by current maintainers
  - prepare for the switch to indigo
- Synchronize packaging with upstream snapd
- Add missing build dependency on systemd, fixes missing pkg-config directory
  locations and subsequent disagreement between rpm macros
- Cherry pick 0001-cmd-snap-confine-remove-stale-mount-profile-along-st.patch
  from 2.36.1 release branch. High impact potential for desktop users.
* Fri Jun 22 2018 me@zygoon.pl
- Fixed changelog chronology
* Fri Jun 22 2018 me@zygoon.pl
- Update to upstream release 2.33.1
- Sync with snapd upstream packaging
- Backport support for apparmor on tumbleweed
- Install polkit files
- Load snap-confine apparmor profile in post, if apparmor is enabled
- Adjust badness of polkit-untracked-privlege
* Fri Jun  8 2018 mvo@fastmail.fm
- Update to upstream release 2.33
* Mon May 28 2018 ngompa13@gmail.com
- Refactor to support openSUSE Tumbleweed and Leap 42.3 and 15.0
- Enable AppArmor support for openSUSE Tumbleweed (post Leap 15.0)
- Enable support for handling the proprietary nvidia driver
- Drop ancient spec stuff that was being ignored by RPM anyway
- Drop spurious find command that didn't do anything...
* Wed May 16 2018 mvo@fastmail.fm
- Update to upstream release 2.32.9
* Fri May 11 2018 mvo@fastmail.fm
- Update to upstream release 2.32.8
* Fri May 11 2018 mvo@fastmail.fm
- Update to upstream release 2.32.7
* Sun Apr 29 2018 mvo@fastmail.fm
- Update to upstream release 2.32.6
* Mon Apr 16 2018 mvo@fastmail.fm
- Update to upstream release 2.32.5
* Wed Apr 11 2018 mvo@fastmail.fm
- Update to upstream release 2.32.4
* Wed Apr 11 2018 mvo@fastmail.fm
- Update to upstream release 2.32.3.2
* Wed Apr 11 2018 mvo@fastmail.fm
- Update to upstream release 2.32.3.1
* Thu Apr  5 2018 mvo@fastmail.fm
- Update to upstream release 2.32.3
* Sat Mar 31 2018 mvo@fastmail.fm
- Update to upstream release 2.32.2
* Mon Mar 26 2018 mvo@fastmail.fm
- Update to upstream release 2.32.1
* Sat Mar 24 2018 mvo@fastmail.fm
- Update to upstream release 2.32
* Tue Feb 20 2018 mvo@fastmail.fm
- Update to upstream release 2.31.1
* Tue Feb  6 2018 mvo@fastmail.fm
- Update to upstream release 2.31
* Sat Nov 18 2017 mvo@fastmail.fm
- Update to upstream release 2.30
* Fri Nov 17 2017 mvo@fastmail.fm
- Update to upstream release 2.29.4
* Thu Nov  9 2017 mvo@fastmail.fm
- Update to upstream release 2.29.3
* Fri Nov  3 2017 mvo@fastmail.fm
- Update to upstream release 2.29.2
* Fri Nov  3 2017 mvo@fastmail.fm
- Update to upstream release 2.29.1
* Mon Oct 30 2017 mvo@fastmail.fm
- Update to upstream release 2.29
* Wed Oct 11 2017 mvo@fastmail.fm
- Update to upstream release 2.28.4
* Wed Oct 11 2017 mvo@fastmail.fm
- Update to upstream release 2.28.3
* Tue Oct 10 2017 mvo@fastmail.fm
- Update to upstream release 2.28.2
* Wed Sep 27 2017 mvo@fastmail.fm
- Update to upstream release 2.28.1
* Mon Sep 25 2017 mvo@fastmail.fm
- Update to upstream release 2.28
* Thu Sep  7 2017 mvo@fastmail.fm
- Update to upstream release 2.27.6
* Wed Aug 30 2017 mvo@fastmail.fm
- Update to upstream release 2.27.5
* Thu Aug 24 2017 mvo@fastmail.fm
- Update to upstream release 2.27.4
* Fri Aug 18 2017 mvo@fastmail.fm
- Update to upstream release 2.27.3
* Wed Aug 16 2017 mvo@fastmail.fm
- Update to upstream release 2.27.2
* Mon Aug 14 2017 mvo@fastmail.fm
- Update to upstream release 2.27.1
* Thu Aug 10 2017 mvo@fastmail.fm
- Update to upstream release 2.27
* Fri May 19 2017 morphis@gravedo.de
- Add bind() syscall to default seccomp policy to allow execution
  of snap hooks.
- Do not share /etc/ssl with the host but use the one from the core
  snap.
* Wed May 10 2017 morphis@gravedo.de
- Update to upstream release 2.25
* Thu Apr 13 2017 morphis@gravedo.de
- Update to upstream release 2.24
* Thu Mar 30 2017 morphis@gravedo.de
- Update to upstream release 2.23.6
* Thu Mar 23 2017 morphis@gravedo.de
- Update to upstream release 2.23.5
- Disable seccomp support to work around bugs in snap-confine
  (see https://bugs.launchpad.net/snappy/+bug/1674193 for details)
* Wed Mar  8 2017 me@zygoon.pl
- Fix log-out prompt to be displayed only when really necessary.
- Fix installation of /usr/lib/snapd/info (version information)
- Install bash completion for "snap"
* Wed Mar  8 2017 me@zygoon.pl
- New upstream release.
  More details are available at https://github.com/snapcore/snapd/releases/tag/2.23.1
* Tue Mar  7 2017 me@zygoon.pl
- Add PATH integration and post-install message asking the user to logout to
  see PATH changes.
* Tue Mar  7 2017 me@zygoon.pl
- (hacky) Disable shellcheck as it is missing on Leap 42.1
* Tue Mar  7 2017 me@zygoon.pl
- (hacky) fix the 32bit build
* Mon Mar  6 2017 me@zygoon.pl
- Initial package based on fully vendorized source tarball