Hi everyone, below you will find the updates from the Desktop team from the last week. If you’re interested in discussing a topic please start a thread in the Desktop area of Discourse.
We also have our weekly meeting on IRC. We meet on Tuesday at 13:30 UTC in #ubuntu-desktop on Freenode. There will be an “Any Other Business” section at the end where you are welcome to raise topics. These topics might be discussed during the meeting, or afterwards depending on the time, depth of conversation, topic and so on.
Last week’s notes are here: Desktop Team Updates - Monday 31st August 2020
snapd theme installation support:
snapd PR #9043 (refactor REST API authentication) is still waiting on a security review.
- Put togther snapd PR #9292 as a follow up refactor as a step towards distinguishing forbidden errors that will always fail and those that might succeed if run as root.
- Proposed snapd PR #9268, implementing the theme installation API: a GET request to check whether theme snaps are available, and a POST request to install missing snaps. Still needs a spread test.
- Still to do is to make the theme API available to a snap without having to plug
snapd-control. This would look something like:
- Define a new interface to act as a marker.
- Create a new access checker that allows requests on
snapd-snap.socket (i.e. what
snapctl talks to), provided the calling process belongs to a snap that has plugged the above interface. This would either be determined by cgroup membership, or having the client pass the value of
- Have the theme API use the new access checker.
- We also need updated snap declarations from the store to verify that snapd’s greedy plug feature behaves the way we expect it to.
Ubuntu Core GDM experiment.
- I’ve been experimenting with integrating
gnome-initial-setup into the image as a replacement for creating a user account via snapd assertion auto import. It’s not quite working yet, which I am debugging.
- My first thought was that it was failing due to
/etc/passwd being read only. I’ve tried replacing
useradd with a wrapper that injects the
--extrausers argument (to create the user in
/var/lib/extrausers/passwd), but it’s not obvious it is getting that far.
- We also attempted to add the
network-manager snap to the image, but rolled back after it resulted in an image that would not seed correctly due to it containing multiple base snaps. From the sound of it, this should be fixed in the next release, so I’ll give it another shot soon.