snap-confine: mounts happen in the wrong order

Bug #1712930 reported by Kyle Fazzari
42
This bug affects 5 people
Affects Status Importance Assigned to Milestone
snapd
Fix Released
Critical
Zygmunt Krynicki

Bug Description

This manifests itself on any system where / isn't MS_SHARED, in my particular experience, lxd. The side effect is that, when it comes time to garbage collect old snap revisions, they can't be unmounted, thus preventing the update from finishing.

A thorough breakdown of the issue by Stephane is here:

https://discuss.linuxcontainers.org/t/snapd-cant-remove-old-revisions-when-running-inside-lxd/452/3

Zygmunt Krynicki (zyga)
Changed in snapd:
assignee: nobody → Zygmunt Krynicki (zyga)
importance: Undecided → High
status: New → In Progress
Revision history for this message
Kyle Fazzari (kyrofa) wrote :
Changed in snapd:
importance: High → Critical
Revision history for this message
Kyle Fazzari (kyrofa) wrote :

From the sound of the forum post, this is not actually in progress.

Changed in snapd:
status: In Progress → Confirmed
Revision history for this message
Zygmunt Krynicki (zyga) wrote :

I did a few attempts at fixing this bug and I plan to do some more soon but it's still open. The good side is that we now seem to have an agreement with security on how to approach this. The bad thing is that we don't have the fix in place yet and in case we run into more aspects that would intersect security we may need to wait for a moment for a slice of their time.

Revision history for this message
Zygmunt Krynicki (zyga) wrote :

This is now fixed in master and will be released in 2.31

Changed in snapd:
status: Confirmed → Fix Committed
Revision history for this message
Zygmunt Krynicki (zyga) wrote :

This has been fixed and released (eventually) in 2.32.x series.

Changed in snapd:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.