Backport snap-preseed work from groovy to focal

[Dimitri John Ledkov]

[Impact]

 * livecd-rootfs when building classic images with snaps preseeded doesn't perform any first-boot tasks during image building. It means fist boot is computationally intensive. In groovy, livecd-rootfs gained ability to precompute snap seeding, apparmor profiles making first boot snap seeding a lot faster. Backport the goodies.

[Test Case]

 * Perform stock build of ubuntu-cpc lxd or qcow cloud image

 * Boot and observe they complete boot, and perfrom snap seeding very quickly (i.e. less than a couple of seconds)

[Regression Potential]

 * Images might fail to build, or be missbuilt. However, these changes have been tested on groovy with the same snapd across all SKUs. Thus only groovy-vs-focal incompatibilities may arise.

[Timo Aaltonen (tjaalton)]

Hello Dimitri, or anyone else affected,

Accepted livecd-rootfs into focal-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/livecd-rootfs/2.664.8 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed-focal to verification-done-focal. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-focal. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

[Dimitri John Ledkov (xnox)]

Awaiting on cpc.

[Dimitri John Ledkov (xnox)]

this needs snapd 2.48 before getting released.

[Robert C Jennings (rcj)]

With snapd 2.48 in the store and in the archive we have built test images from the ubuntu-cpc project and verified that snaps are preseeded in the image resulting in reduced seed times during first boot. I'm removing the block and marking this as verification done.

[Łukasz Zemczak (sil2100)]

The verification of the Stable Release Update for livecd-rootfs has completed successfully and the package is now being released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions.

[Launchpad Janitor (janitor)]

This bug was fixed in the package livecd-rootfs - 2.664.8

---------------
livecd-rootfs (2.664.8) focal; urgency=medium

  Backport snap-preseed work from groovy to focal LP: #1896755

  [ Robert C Jennings ]
  * Apply snap-preseed optimizations after seeding snaps

  [ Dimitri John Ledkov ]
  * live-server: remove duplicate snaps, due to overlayfs vs snap-preseed.
  * apparmor: Add generic v5.4 kernel apparmor features
  * apparmor: mount more up-to-date apparmor features in the chroot.
  * seccomp: add more up-to-date seccomp actions
  * seccomp: mount more up-to-date seccomp features
  * apparmor: compile all profiles

  [ Robert C Jennings ]
  * Avoid rbind /sys for chroot snap pre-seeding (cgroups fail to unmount)

  [ Dimitri John Ledkov ]
  * auto/build: use setup|teardown_mountpoint to reduce duplication
  * functions: provide nss_systemd-less nsswitch.conf in chroots.

 -- Dimitri John Ledkov <email address hidden> Mon, 05 Oct 2020 10:33:02 +0100