Remodelling

The set of snaps that make up a device, and govern its capabilities, are controlled by the model assertion, alongside the snap assertions in a given recovery system.

The model assertion contains:

  • Identification information, such as brand account id and model name.
  • Which essential snaps make up the device system, including the gadget snap, kernel snap and the boot base snap with the root filesystem.
  • Other required or optional snaps that implement the device functionality.
  • Additional options for the defined device, such as grade.

When one or more of the above elements change, the updated model assertion and its associated image are deployed to the device, authenticated and linked through its serial assertion, to the store. This process is called remodelling.

One example of remodelling is Upgrading Ubuntu Core.

The remodelling process is triggered by either updating the model assertion, running the snap remodel command, or from the snapd the REST API (the last two require snapd 2.61 or later).


Remodelling viability

Remodelling is the responsibility of the snap daemon (snapd) running on the device. It both mediates the update process and the re-registration of the device after the update (if required). But the complexity and viability of the remodelling process is dependent on several factors outside of snapd’s control.

At its simplest, a device can be successfully remodelled when using the same model name and the same dedicated Snap Store but with a new model revision where the only difference is an added or removed snap, or changed snap track or channel. The device also needs to have a Serial assertion.

But if the dedicated Snap Store needs to change, even under the same brand scope, this requires the acquisition of a new serial assertion, and the success or failure of such a process will depend on the context.

With a dedicated Snap Store, the following types of remodelling contexts are possible:

  • same brand/model → same dedicated Snap Store
    Works as a simple contextual carrier for the new model.
  • same brand/model → different dedicated Snap Store
    Keeps access to the device state kept on the remodel change, creates a store that uses that state, and then refers to the new dedicated Snap Store. Requires a new serial in the Serial Vault and the creation of a new Serial assertion.

Remodelling compatibility

The below permutations of the remodelling contexts are all valid:

brand store model name + snaps - snaps
same same same yes yes
same same different yes yes
same different same yes yes
same different different yes yes

If a validation set has been defined for the old model and the new model, or just the new model, the snaps installed during the remodelling process must follow the validation set rules.

Remodelling snap removal

The remodelling process does not automatically remove snaps which are no longer marked as required or optional in the new model assertion. Those snaps stay in the system and keep receiving updates, but since they are no longer required by the model, it is possible to remove them.

The general practice is that either the operator who invoked snap remodel command, or the management agent which started the remodel process, is responsible for requesting removal of said snaps. If snap data is no longer needed, the remove request should include the purge option to remove all data associated with the removed snap.

Offline remodelling

A network connection is not required if there is local access to:

  • the target Model assertion with a new revision
    The series, brand-id, and model fields cannot currently be different from the original model.
  • assertions for any referenced snaps
    This includes snap-declaration and snap-revision assertions and the keys necessary for validation of the former.

The snap remodel command can then be used to list the required snaps and assertions for the new model:

snap remodel --snap kernel.snap --assertion kernel.assert \
--snap pc.snap --assertion pc.assert my-new-model

This works even when a new base has been installed, such as core22 on a core20 system, for instance.

If a snap or assertion is not available locally, either referenced directly from the command line or cached on the system in /var/lib/snapd/snaps, then the remodel procedure will fail unless the --offline flag is added to the snap remodel command.

Offline remodelling with --offline

From snapd 2.61.2 onwards, the snap remodel command includes an optional --offline flag.

The --offline flag forces snapd to perform the requested remodel process without requiring a network connection, regardless of whether the specified snaps are available locally or not.

This impacts models using new channels and updated validation sets:

  • Channel switching

    If an offline remodel with --offline requests a snap to switch channels, the channel will be changed without refreshing the snap. The snap will be refreshed to the new channel with either the next manual refresh or the next auto-refresh.

  • Validation sets

    If a model includes a validation set that constrains any snaps in the model to specific revisions, an offline remodel requires that either the correct revision of the snap is provided with the --snap flag, or it must already be installed. An offline remodel will fail if the remodelling process cannot find a revision that is required by any of the new model’s validation sets.

1 Like

Can one remodel across more than one release of UC? That is, UC20 to UC24? Is that theoretically supported?

Sorry for the long delay on this, but yes. Apparently it is possible to remodel across released. I’ll update the doc to reflect this.

@degville, cross brand remodelling is not supported. Could you please remove the last line in the remodelling compatibility table?

Thank you

Done - thank you for letting me know!

For online remodeling it not very explicit that the device needs to have a serial assertion for the starting model to start with.

For offline:

If switching to a different model, a new serial assertion is also required.

this is conceptually true but also not supported atm, offline remodel atm cannot change the model but only update it to a new revision

Thanks for this added context on both the the serial assertion requirement, and the model not currently being able to change. I’ve hopefully updated the document to make it clearer.

I think we should mention that remodelling process does not remove snaps which are no longer part of the target model. Those snaps stay in the system and will keep getting updates, but since they are no longer required by the model, it is possible to remove them (which would not be possible otherwise).

The general assumption is that the process is started by either an explicit snap remodel.. command or some sort of management agent (which plugs snapd-control), then we expect said agent (or the operator) to remove any outstanding snaps which are no longer needed.

1 Like