`/sys/fs/bpf/snap` errors after upgrade from v2.63+24.04ubuntu0.1 to v2.65.3+24.04

Bug #2086129 reported by Danny

This bug report will be marked for expiration in 58 days if no further activity occurs. (find out why)

6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
snapd
Incomplete
Undecided
Unassigned

Bug Description

I am using Ubuntu Noble v24.04. Fully updated as at 2024-10-31.

Lately I noticed that the following services have been in fail state:
  snap.cups.cupsd
  snap.flutter-gallery.daemon
  snap.multipass.multipassd

I also noticed that the following snap refreshes failed repeatedly over the last week or so:
  joplin-desktop
  simplenote

The errors associated with these were all to do with not being able to read the `/sys/fs/bpf/snap/{snap-name}` directory. When checking these directories they do not exist, but parent directory is OK. I tried creating these directories, but services still failed but with a different error, so removed again.

Both snaps.cups.cupsd and joplin-desktop refresh work in devmode but not classic mode.

Reverting snapd from v2.65.3+24.04 to v2.63+24.04ubuntu0.1 also resolves the problem. The v2.65.3+24.04 version was automatically updated on my system on 2024-10-17. I can see the bpf errors in my journal logs back to 2024-10-25, but only have logs back to the 23rd.

Comparing the `/etc/apparmor.d/usr.lib.snapd.snap-confine.real` files between the two versions reveals extensive changes. I don't have time or expertise to investigate this further.

I have put a hold on snapd v2.65.3+24.04 for the time being.

Revision history for this message
Maciej Borzecki (maciek-borzecki) wrote :

Can you attach the log message? Is there maybe an AppArmor denial in dmesg showing up around the time the error message got logged?

Are you able to run snap applications (not services, AFAIU the ones you listed are services)? Do they fail as well? If so can you run them again adding SNAPD_DEBUG=1 to the environment? eg. `SNAPD_DEBUG=1 multipass --help`.

Changed in snapd:
status: New → Incomplete
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.