-
Notifications
You must be signed in to change notification settings - Fork 114
Labels
Milestone
Description
The maintenance of the (almost 60) AppArmor patches adds a significant maintenance burden for our kernels. These patches are only needed for strict confinement of Snaps.
To decrease the maintenance burden we should drop support for Snaps and move users over to Flatpak, seeing as 1) there is little progress on upstreaming the patches, 2) Flatpak seems to have won the battle for the desktop and 3) there is (in my opinion) no value in only supporting unconfined Snaps.
Note that Apparmor support will remain enabled in the kernel. Only the additional patches are removed.
Plan is as follows:
- Create a plan (this issue) ✔️
- Enable the migration and improve the QoL around Flatpaks: ✔️
- unsnap #323
- host-spawn #322
- flatpak: Add systemd services for automatic updates solus-packages/flatpak#1
- Enable flathub by default flatpak: Enable flathub by default #3430
- Remove
snapd
from ISOs d20ba5d
- Create migration documentation ✔️
Initially in this issue- Followed by an article on the help center (Add docs for Snap help-center-docs#555).
- Let staff and developers try the migration and gather feedback. ✔️
- Find issues in the migration documentation and fix them.
- Are there any packages that are missing? (unsnap: Missing Flatpak/Snap equivalents #3282)
- Two cut-off dates:
- On the sync after 2024-07-05 users can voluntarily switch while Snap is fully maintained. After this date the AppArmor patches will be dropped and snaps can only be used without strict confinement. ✔️
- After
2025-01-01TDB snap will be completely deprecated. Update: there is some progress on the upstream Apparmor patches, so we're holding off on deprecation for the time being.
- Communicate this to users via:
- Socials/Forum: https://discuss.getsol.us/d/10750-dropping-apparmor-kernel-patches/12
- Warning on the snap command: snapd: Add confinement warning #3211
- Notification when running GUI snaps: snapd: Add confinement warning #3211
Sub-issues
Metadata
Metadata
Assignees
Labels
Type
Projects
Status
In Progress