Hiri won't start

snap
1

Hiri snap won’t start on OpenSuse Tubleweed because of denied permission to /etc/sysconfig/clock (I’m pretty sure it’s a AppArmor fault).

Traceback (most recent call last):
  File "hiriapp.py", line 130, in <module>
  File "<frozen importlib._bootstrap>", line 969, in _find_and_load
  File "<frozen importlib._bootstrap>", line 958, in _find_and_load_unlocked
  File "<frozen importlib._bootstrap>", line 673, in _load_unlocked
  File "/home/ubuntu/.virtualenvs/hiri/lib/python3.5/site-packages/PyInstaller/loader/pyimod03_importers.py", line 631, in exec_module
  File "hiri/app/config.py", line 20, in <module>
  File "<frozen importlib._bootstrap>", line 969, in _find_and_load
  File "<frozen importlib._bootstrap>", line 958, in _find_and_load_unlocked
  File "<frozen importlib._bootstrap>", line 673, in _load_unlocked
  File "/home/ubuntu/.virtualenvs/hiri/lib/python3.5/site-packages/PyInstaller/loader/pyimod03_importers.py", line 631, in exec_module
  File "hiri/util/dates.py", line 21, in <module>
  File "site-packages/tzlocal/unix.py", line 131, in get_localzone
  File "site-packages/tzlocal/unix.py", line 85, in _get_localzone
PermissionError: [Errno 13] Permission denied: '/etc/sysconfig/clock'
[31188] Failed to execute script hiriapp
2

Can you paste any denials from journalctl or syslog at the time of the denied access?

3 
type=AVC msg=audit(1535466862.373:326): apparmor="DENIED" operation="open" profile="snap.hiri.hiri" name="/etc/sysconfig/clock" pid=2093 comm="hirimain" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0

[Edit]
Installing Hiri in --classic mode fixes this problem

4

FYI, this has been queued for the next batch of policy updates.

5

This was just merged into trunk and on its way to 2.36: https://github.com/snapcore/snapd/pull/5968

6

Great, thank you. Will test.