AppArmor problem? Not sure

snapd
1

Hi sheepish smile

In advance, thank you so much for your time! Here’s my Linux release:

PRETTY_NAME=“Debian GNU/Linux 12 (bookworm)”

NAME=“Debian GNU/Linux”

VERSION_ID=“12”

VERSION=“12 (bookworm)”

VERSION_CODENAME=bookworm

ID=debian

And here is my snap version:

snap 2.57.6-1+b5

snapd 2.57.6-1+b5

series 16

debian 12

kernel 6.6.30-02726-gb84bbdf6955e

And here is my debugging info:

Oct 21 23:21:27 penguin systemd[1]: Starting snapd.service - Snap Daemon…

Oct 21 23:21:27 penguin snapd[1912]: AppArmor status: apparmor not enabled Oct 21 23:21:27 penguin snapd[1912]: overlord.go:263: Acquiring state lock file

Oct 21 23:21:27 penguin snapd[1912]: overlord.go:268: Acquired state lock file

Oct 21 23:21:27 penguin snapd[1912]: daemon.go:247: started snapd/2.57.6-1+b5 (series 16; classic; devmode) debian/12 (amd64) linux/6.6.30-02726-gb84bbdf6955.

Oct 21 23:21:27 penguin snapd[1912]: main.go:129: system does not fully support snapd: cannot mount squashfs image using “squashfs”: mount: /tmp/syscheck-mountpoint-4187126542: mount failed: Operation not permitted.

Oct 21 23:21:27 penguin snapd[1912]: daemon.go:340: adjusting startup timeout by 30s (pessimistic estimate of 30s plus 5s per snap)

Oct 21 23:21:27 penguin snapd[1912]: helpers.go:147: error trying to compare the snap system key: system-key missing on disk

Oct 21 23:21:27 penguin systemd[1]: Started snapd.service - Snap Daemon.

Oct 21 23:21:32 penguin snapd[1912]: daemon.go:521: gracefully waiting for running hooks

Oct 21 23:21:32 penguin snapd[1912]: daemon.go:523: done waiting for running hooks

Oct 21 23:21:32 penguin snapd[1912]: overlord.go:504: Released state lock file

Oct 21 23:21:32 penguin snapd[1912]: daemon stop requested to wait for socket activation

Oct 21 23:21:32 penguin systemd[1]: snapd.service: Deactivated successfully

–

Any insight into this matter would be much appreciated ^~^ I’ve attempted this a couple-o-times, but honestly should have put more effort into making sense of this. Thanx again!

Sincerely,

Jess

2

Bumping this up, bc an answer I do desire. Thank you.

3

Debian has some issues with apparmor, because Apparmor still needs some downstream patches to work perfectly for snaps.

CC: @zyga

4

Hi are you perhaps running this in a container? Snapd needs to be able to mount squashfs images but it seems this is denied in your case. Can you tell us more about you system please?

This does not seem to be related to apparmor.

1 Like
5

Thank you so much for your reply. I’m finally ready to attempt to figure out my Debian environment at 2:36am…after excessive procrastination. Heh.

–Whelp, I have an HP Chromebook x360 11 G1 EE. Here’s what info I could find about it:

In About: "Google ChromeOS. Your Chromebook is up to date. Version 126.0.6478.26O (Official Build) (64-bit)

Additional Details: “Channel: You are correctly on long-term support channel.” (W/option to change channel. I’m not gonna touch this for now.)

Build Details:

image
image3024×4032 3.92 MB

(I’m on my iPhone & am shortcutting via mah camera.) Are you able to see everything clearly? It’s currently in split-screen; however, I don’t think you’ll need this in its entirety.

I can’t find my Android version at all bc, recently–& after creating this topic–I opted to update the “additional security” whatevers on this thing. Consequently, it rebooted w/o Google Play Store. And w/o Snaps, yeah…I don’t believe I can execute APK files on my system. Lolz. So I’m a bit lost now :sunglasses: )

Under Credits, it says: “ChromeOS 15886.84.0 is based on the open source ChromiumOS 15886.84.0.”

There is a humongous list of Packages in this OS. Things like “abseil-cpp-20230802.0: Gentoo Package Stock License. Apache-2.0. Show license | homepage” (1st listed), all the way down to last listed: “Gentoo Package Stock License ZLIB”.

However, I suspect these formalities are irrelevant in my case?

In its settings, one can optionally “add a Linux environment”; & when you do, the default partition size it creates is 10GB. Upon setting up the “Linux environment”, it says in the final step:
“You have a Debian environment. You can run Linux commands, install more tools using the API package manager, and customize your shell.”
Furthermore, in the Chromebook Help pages:
“To protect your computer, your Chromebook runs each app in a “sandbox”. However, all Linux apps run inside the same sandbox. This means a harmful Linux app can affect other Linux apps, but not the rest of your Chromebook.”

How can I get you the additional information that you need concerning the system I’m running?

Cheers, Sir, & thanks again for your time!