6.8 Kernel AppArmor Feature Missing on Noble

[Jess Jang]

After the 6.8 rolled out the public cloud team pre publication test were failing on our snap_preseed_optimized test which checks to ensure that snaps are preseeded correctly

This test checks the output of `snap debug seeding` to assert `seed-completion` is present and not empty.

With the recent kernel update this test is failing which indicates a kernel feature mismatch between
the running kernel and the feature set hard-coded in livecd-rootfs for this image.

This will cause boot time to lower about ~200ms.

Proposed MP is adding 6.8 apparmor features to noble branch of livecd-rootfs

Related bugs LP: #2052789

[ Impact ]

Boot will be slowed by ~200ms until this is resolved in livecd-rootfs

[ Test Plan ]

 * build any noble cloud image with 6.8 kernel
 * boot
 * run `snap debug preseed`
 * assert the test described above passes

[ Where problems could occur ]

 * Similar patches already exist for later releases 6.2, 6.5 kernel etc. and have been used on other private customer kernels and all kernels released after 22.04, so there is already a good track record for this patchset and it shouldn't create any issues.

[ Other Info ]

 * This is a time-sensitive issue for a paying customer

[Philip Roche (philroche)]

Subscribing ubuntu-release as per FFE policy. This bug will block noble cloud image release

[Steve Langasek (vorlon)]

this is a bugfix, not a feature. please proceed.

[Utkarsh Gupta (utkarsh)]

Sponsored the upload.

[Launchpad Janitor (janitor)]

This bug was fixed in the package livecd-rootfs - 24.04.52

---------------
livecd-rootfs (24.04.52) noble; urgency=medium

  * Move from hwe-22.04 to hwe-24.04 throughout, hwe-22.04 is obsolete and
    to be dropped from the release pocket imminently.

 -- Steve Langasek <email address hidden> Wed, 27 Mar 2024 12:03:04 -0700