Issue with installing snap packages - "Sorry, home directories outside of /home needs configuration."

Hi,

I suddenly have issues installing snap packages with Ubuntu 24.04.3 LTS. It started with a failed firexox update some days ago (I think).

sudo snap refresh firefox 
error: cannot perform the following tasks: 
- Run post-refresh hook of "firefox" snap if present (run hook "post-refresh": 
----- 
Sorry, home directories outside of /home needs configuration. 
See https://forum.snapcraft.io/t/11209 for details. 
-----) 
[1] 15130 exit 1 sudo snap refresh firefox

But my home directory is in /home/myname. It’s not a symlink also.

ls -ld /home 
drwxr-xr-x 3 root root 4096 Nov  6  2024 /home

readlink -f /home/myname
/home/myname

getent passwd "$USER" | cut -d: -f6
/home/myname

passwd entry is: myname:x:1000:1000:myname:/home/myname:/usr/bin/zsh

snap version  
snap    2.71
snapd   2.71
series  16
ubuntu  24.04
kernel  6.14.0-29-generic

The root users home directory is /root

My root partition is encrypted via luks and secure boot is enabled because of dual boot with Windows, if this helps in any way

lsblk
NAME        MAJ:MIN RM   SIZE RO TYPE  MOUNTPOINTS
nvme0n1     259:0    0 953.9G  0 disk  
|-nvme0n1p1 259:1    0   500M  0 part  /boot/efi
|-nvme0n1p2 259:2    0   128M  0 part  
|-nvme0n1p3 259:3    0 525.1G  0 part  
|-nvme0n1p4 259:4    0   9.5G  0 part  
`-nvme0n1p5 259:5    0 418.6G  0 part  
  `-rootfs  252:0    0 418.6G  0 crypt /

I tried setting sudo snap set system homedirs=/home with no success.

And I tried reinstalling firefox and then even snapd. Right now I can’t even install the snap-store, which is giving me the same error message “Sorry, home directories outside of /home needs configuration.”.

sudo apt install snapd -> works

sudo snap install hello-world -> works

sudo snap install snap-store
error: cannot perform the following tasks:
- Run configure hook of "snap-store" snap if present (run hook "configure": 
-----
Sorry, home directories outside of /home needs configuration.
See https://forum.snapcraft.io/t/11209 for details.
-----)
[1]    12979 exit 1     sudo snap install snap-store

Snap already worked on this same system.

I have no clue what is going on here. Any Ideas?

Still no idea about what’s going on.

The following code in user-support.c writes the error message:

void setup_user_data(void) {
    const char *user_data = getenv("SNAP_USER_DATA");

    if (user_data == NULL) return;

    // Only support absolute paths.
    if (user_data[0] != '/') {
        die("user data directory must be an absolute path");
    }

    debug("creating user data directory: %s", user_data);
    if (sc_nonfatal_mkpath(user_data, 0755, -1, -1) < 0) {
        if ((errno == EROFS || errno == EACCES) && !sc_startswith(user_data, "/home/")) {
            // clear errno or it will be displayed in die()
            errno = 0;
            // XXX: may point to the right config option here?
            die("Sorry, home directories outside of /home needs configuration.\nSee https://forum.snapcraft.io/t/11209 "
                "for details.");
        }
        die("cannot create user data directory: %s", user_data);
    };
}

So the assumptions is that getenv(“SNAP_USER_DATA”) returns something wrong. But:

snap run --shell hello-world -c 'env | grep SNAP'

SNAP_EUID=1000
SNAP_USER_COMMON=/home/myname/snap/hello-world/common
SNAP_CONTEXT=tHNBfm-MyhU8DAASnD9VbDw1JBEYhSp3yRmKtPjlkf7DnTrrX6al
SNAP_REEXEC=
SNAP_LIBRARY_PATH=/var/lib/snapd/lib/gl:/var/lib/snapd/lib/gl32:/var/lib/snapd/void
SNAP_INSTANCE_NAME=hello-world
SNAP_COMMON=/var/snap/hello-world/common
SNAP_USER_DATA=/home/myname/snap/hello-world/29
SNAP_DATA=/var/snap/hello-world/29
SNAP_REAL_HOME=/home/myname
SNAP_REVISION=29
SNAP_NAME=hello-world
SNAP_COOKIE=tHNBfm-MyhU8DAASnD9VbDw1JBEYhSp3yRmKtPjlkf7DnTrrX6al
SNAP_ARCH=amd64
SNAP_VERSION=6.4
SNAP_UID=1000
SNAP=/snap/hello-world/29
SNAP_INSTANCE_KEY=

So snap is able to find/set the proper SNAP_USER_DATA for installed snaps, but when running hooks something seems to go wrong in snap-confine. And I assume hello-world installs successfully because it doesn’t run any hooks?

Any Idea, why SNAP_USER_DATA could be wrong or empty when running hooks?

What’s in your /etc/passwd? Specifically run getent passwd <your-user-name> and paste the output.

myname:x:1000:1000:myname:/home/myname:/usr/bin/zsh

could that be related to zsh ?

If you create a fresh temporary testuser on the same machine (but keep /bin/bash as the shell), does that account expose the same behavior ?

Same issue with test user, despite bash beeing configured.

getent passwd → testuser3000:x:1001:1001:testuser3000,,,:/home/testuser3000:/bin/bash

1 Like

Thanks for testing, so we can at least exclude this bit 


Just an Idea: Is it possible that snap-confine or something else assumes the home directory to be the root users home in the /root directory? Is there a way to verify this assumption?

Im running “snap install” without sudo, but even with sudo it should work properly, right? (Tried both, same result)

I ran strace on snapd during the installation of snap-store via snap install snap-store, to look for suspicious access locations.

In the following part you see the accessed folders with the count of occurrences in the resulting output.

    194 /home
     28 /home.d
      6 /home/myname
      6 /home/myname/snap
     14 /home/mysql/
	 
	202 /root
      2 /root/snap
      5 /root/snap/snap-store
      6 /root/snap/snap-store/1270
      5 /root/snap/snap-store/common
      3 /root/snap/snap-store/current

And I see the following call

[pid 27261] execve("/snap/snapd/25202/usr/lib/snapd/snap-confine", 
["/snap/snapd/25202/usr/lib/snapd/snap-confine", "--base", "core22", 
"snap.snap-store.hook.configure", "/usr/lib/snapd/snap-exec", 
"--hook=configure", "snap-store"], 

["HOME=/root/snap/snap-store/1270", 

"INVOCATION_ID=88b792110f614cf2b9f4423e1d7f4035", 
"JOURNAL_STREAM=9:8679", 
"LANG=en_GB.UTF-8", 
"LISTEN_FDNAMES=snapd.socket:snapd.socket", 
"LISTEN_FDS=2", 
"LISTEN_PID=1667", 
"MEMORY_PRESSURE_WATCH=/sys/fs/cgroup/system.slice/snapd.service/memory.pressure", 
"MEMORY_PRESSURE_WRITE=c29tZSAyMDAwMDAgMjAwMDAwMAA=", 
"NOTIFY_SOCKET=/run/systemd/notify", 
"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin", 
"SNAP=/snap/snap-store/1270", 
"SNAP_ARCH=amd64", 
"SNAP_COMMON=/var/snap/snap-store/common", 
"SNAP_CONTEXT=gH0wwJyaS57H-oA6AlzLApM2wKo8uHdafCz4AsmsZKY", "SNAP_COOKIE=gH0wwJyaS57H-oA6AlzLApM2wKo8uHdafCz4AsmsZKY", 
"SNAP_DATA=/var/snap/snap-store/1270",
 "SNAP_EUID=0", "SNAP_INSTANCE_KEY=", 
"SNAP_INSTANCE_NAME=snap-store", 
"SNAP_LIBRARY_PATH=/var/lib/snapd/lib/gl:/var/lib/snapd/lib/gl32:/var/lib/snapd/void", "SNAP_NAME=snap-store", 

"SNAP_REAL_HOME=/root", 

"SNAP_REEXEC=", "SNAP_REVISION=1270",
 "SNAP_UID=0", "SNAP_USER_COMMON=/root/snap/snap-store/common", "SNAP_USER_DATA=/root/snap/snap-store/1270", 
"SNAP_VERSION=0+git.90575829", 
"SYSTEMD_EXEC_PID=1667", 

"USER=root", 

"WATCHDOG_PID=1667", 
"WATCHDOG_USEC=300000000", 
"XDG_DATA_DIRS=/var/lib/flatpak/exports/share:/usr/local/share/:/usr/share/", "XDG_RUNTIME_DIR=/run/user/0/snap.snap-store"] <unfinished ...>

To highlight: snap-confine seems to be indeed called with:

"HOME=/root/snap/snap-store/1270", 
"SNAP_REAL_HOME=/root", 
"USER=root"

And fails for this reason, since /root isn’t /home?

But why is it called this way?

And here is the journalctl -u snapd.service output during snap-store installation:

   2902 Sep 03 12:29:21 host-myname snapd[1667]: api_snaps.go:536: Installing snap "snap-store" revision unset
   2903 Sep 03 12:29:33 host-myname snapd[1667]: udevmon.go:149: udev event error: Unable to parse uevent, err: no buffer space available
   2904 Sep 03 12:29:35 host-myname snapd[1667]: backend.go:285: reloading profiles of snap-confine provided by the system snap
   2905 Sep 03 12:29:37 host-myname snapd[1667]: taskrunner.go:304: Change 11 task (Run configure hook of "snap-store" snap if present) failed: run hook "configure":
   2906 Sep 03 12:29:37 host-myname snapd[1667]: -----
   2907 Sep 03 12:29:37 host-myname snapd[1667]: Sorry, home directories outside of /home needs configuration.
   2908 Sep 03 12:29:37 host-myname snapd[1667]: See https://forum.snapcraft.io/t/11209 for details.
   2909 Sep 03 12:29:37 host-myname snapd[1667]: -----
   2910 Sep 03 12:29:38 host-myname snapd[1667]: backend.go:285: reloading profiles of snap-confine provided by the system snap
   2911 Sep 03 12:29:43 host-myname snapd[1667]: udevmon.go:149: udev event error: Unable to parse uevent, err: no buffer space available

and dmesg output:

Wed Sep  3 12:29:27 2025] loop10: detected capacity change from 0 to 22176
[Wed Sep  3 12:29:27 2025] audit: type=1400 audit(1756895368.154:253): apparmor="STATUS" operation="profile_load" profile="unconfined" name="snap-update-ns.snap-store" pid=26708 comm="apparmor_parser"
[Wed Sep  3 12:29:28 2025] audit: type=1400 audit(1756895368.205:254): apparmor="STATUS" operation="profile_load" profile="unconfined" name="snap.snap-store.snap-store" pid=26711 comm="apparmor_parser"
[Wed Sep  3 12:29:28 2025] audit: type=1400 audit(1756895368.206:255): apparmor="STATUS" operation="profile_load" profile="unconfined" name="snap.snap-store.hook.configure" pid=26709 comm="apparmor_parser"
[Wed Sep  3 12:29:28 2025] audit: type=1400 audit(1756895368.208:256): apparmor="STATUS" operation="profile_load" profile="unconfined" name="snap.snap-store.show-updates" pid=26710 comm="apparmor_parser"
[Wed Sep  3 12:29:35 2025] audit: type=1400 audit(1756895375.927:257): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/snap/snapd/25202/usr/lib/snapd/snap-confine" pid=27208 comm="apparmor_parser"
[Wed Sep  3 12:29:35 2025] audit: type=1400 audit(1756895375.927:258): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/snap/snapd/25202/usr/lib/snapd/snap-confine//mount-namespace-capture-helper" pid=27208 comm="apparmor_parser"
[Wed Sep  3 12:29:35 2025] audit: type=1400 audit(1756895376.087:259): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.snap-store.hook.configure" pid=27213 comm="apparmor_parser"
[Wed Sep  3 12:29:35 2025] audit: type=1400 audit(1756895376.155:260): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap-update-ns.snap-store" pid=27212 comm="apparmor_parser"
[Wed Sep  3 12:29:36 2025] audit: type=1400 audit(1756895376.213:261): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.snap-store.snap-store" pid=27215 comm="apparmor_parser"
[Wed Sep  3 12:29:36 2025] audit: type=1400 audit(1756895376.217:262): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.snap-store.show-updates" pid=27214 comm="apparmor_parser"
[Wed Sep  3 12:29:38 2025] audit: type=1400 audit(1756895378.774:263): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/snap/snapd/25202/usr/lib/snapd/snap-confine" pid=27350 comm="apparmor_parser"
[Wed Sep  3 12:29:38 2025] audit: type=1400 audit(1756895378.774:264): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/snap/snapd/25202/usr/lib/snapd/snap-confine//mount-namespace-capture-helper" pid=27350 comm="apparmor_parser"
[Wed Sep  3 12:29:38 2025] audit: type=1400 audit(1756895379.002:265): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="snap-update-ns.snap-store" pid=27352 comm="apparmor_parser"
[Wed Sep  3 12:29:38 2025] audit: type=1400 audit(1756895379.046:266): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="snap.snap-store.hook.configure" pid=27358 comm="apparmor_parser"

That one looks interesting 


Are you using systemd-homed perhaps?

No. systemd-homed is not installed on this system.

Anything in dmesg when the error shows up? Is there a denial related to snap-confine maybe? dmesg | grep DENIED. Also include the output of snap version.

See this other post with a link to launchpad bugs. The error may be reported incorrectly. Have you changed the permissions on /root/snap perhaps?

Version:

snap version               
snap    2.71
snapd   2.71
series  16
ubuntu  24.04
kernel  6.14.0-29-generic

apt policy gnome-software-plugin-snap
gnome-software-plugin-snap:
  Installed: 46.0-1ubuntu2
  Candidate: 46.0-1ubuntu2
  Version table:
 *** 46.0-1ubuntu2 500
        500 http://de.archive.ubuntu.com/ubuntu noble/universe amd64 Packages
        100 /var/lib/dpkg/status

No denials related to snap-confine:

sudo dmesg -T | grep DENIED
[Do Sep  4 10:30:14 2025] audit: type=1400 audit(1756974614.870:154): apparmor="DENIED" operation="mount" class="mount" info="failed flags match" error=-13 profile="snap-update-ns.teams-for-linux" name="/boot/" pid=4378 comm="snap-update-ns" srcname="/var/lib/snapd/hostfs/boot/" flags="rw, bind"
[Do Sep  4 10:30:21 2025] audit: type=1107 audit(1756974621.137:162): pid=1519 uid=101 auid=4294967295 ses=4294967295 subj=unconfined msg='apparmor="DENIED" operation="dbus_method_call"  bus="system" path="/" interface="org.freedesktop.DBus.ObjectManager" member="GetManagedObjects" mask="send" name="org.bluez" pid=4119 label="snap.teams-for-linux.teams-for-linux" peer_pid=1749 peer_label="unconfined"
[Do Sep  4 10:30:22 2025] audit: type=1400 audit(1756974622.167:163): apparmor="DENIED" operation="open" class="file" profile="snap.teams-for-linux.teams-for-linux" name="/etc/vulkan/implicit_layer.d/" pid=4875 comm="teams-for-linux" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[Do Sep  4 10:30:22 2025] audit: type=1400 audit(1756974622.168:164): apparmor="DENIED" operation="open" class="file" profile="snap.teams-for-linux.teams-for-linux" name="/etc/vulkan/implicit_layer.d/" pid=4875 comm="teams-for-linux" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[Do Sep  4 10:30:22 2025] audit: type=1400 audit(1756974622.168:165): apparmor="DENIED" operation="open" class="file" profile="snap.teams-for-linux.teams-for-linux" name="/etc/vulkan/icd.d/" pid=4875 comm="teams-for-linux" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[Do Sep  4 10:30:22 2025] audit: type=1400 audit(1756974622.168:166): apparmor="DENIED" operation="open" class="file" profile="snap.teams-for-linux.teams-for-linux" name="/etc/vulkan/icd.d/" pid=4875 comm="teams-for-linux" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[Do Sep  4 10:30:22 2025] audit: type=1400 audit(1756974622.168:167): apparmor="DENIED" operation="open" class="file" profile="snap.teams-for-linux.teams-for-linux" name="/etc/vulkan/implicit_layer.d/" pid=4875 comm="teams-for-linux" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[Do Sep  4 10:30:22 2025] audit: type=1400 audit(1756974622.168:168): apparmor="DENIED" operation="open" class="file" profile="snap.teams-for-linux.teams-for-linux" name="/etc/vulkan/implicit_layer.d/" pid=4875 comm="teams-for-linux" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[Do Sep  4 10:30:22 2025] audit: type=1400 audit(1756974622.168:169): apparmor="DENIED" operation="open" class="file" profile="snap.teams-for-linux.teams-for-linux" name="/etc/vulkan/icd.d/" pid=4875 comm="teams-for-linux" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[Do Sep  4 10:30:22 2025] audit: type=1400 audit(1756974622.169:170): apparmor="DENIED" operation="open" class="file" profile="snap.teams-for-linux.teams-for-linux" name="/etc/vulkan/implicit_layer.d/" pid=4875 comm="teams-for-linux" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[Do Sep  4 10:30:26 2025] audit: type=1107 audit(1756974626.131:251): pid=1519 uid=101 auid=4294967295 ses=4294967295 subj=unconfined msg='apparmor="DENIED" operation="dbus_signal"  bus="system" path="/org/freedesktop/login1" interface="org.freedesktop.login1.Manager" member="UserRemoved" name=":1.8" mask="receive" pid=4119 label="snap.teams-for-linux.teams-for-linux" peer_pid=1565 peer_label="unconfined"
[Do Sep  4 10:30:26 2025] audit: type=1107 audit(1756974626.131:252): pid=1519 uid=101 auid=4294967295 ses=4294967295 subj=unconfined msg='apparmor="DENIED" operation="dbus_signal"  bus="system" path="/org/freedesktop/login1" interface="org.freedesktop.login1.Manager" member="UserRemoved" name=":1.8" mask="receive" pid=4119 label="snap.teams-for-linux.teams-for-linux" peer_pid=1565 peer_label="unconfined"

And /root/snap persmissions:

drwx------ 2 root root 4096 Sep 4 10:30 snap

Is it expected that snap-confine is called with

"HOME=/root/snap/snap-store/1270", 
"SNAP_REAL_HOME=/root", 
"USER=root"

as described above?

Can you refresh snapd from edge and try again? snap refresh snapd --edge.

Okay I have a new error after installing snapd --edge:

snap install snap-store  
error: cannot perform the following tasks:
- Run configure hook of "snap-store" snap if present (run hook "configure": cannot create user data directory: /root/snap/snap-store/1270: Permission denied)
[1]    7549 exit 1     snap install snap-store

same with sudo snap install.

dmesg:

[Do Sep  4 12:46:18 2025] loop11: detected capacity change from 0 to 22176
[Do Sep  4 12:46:18 2025] kauditd_printk_skb: 6 callbacks suppressed
[Do Sep  4 12:46:18 2025] audit: type=1400 audit(1756982778.560:300): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap-update-ns.snap-store" pid=11728 comm="apparmor_parser"
[Do Sep  4 12:46:18 2025] audit: type=1400 audit(1756982778.604:301): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.snap-store.snap-store" pid=11731 comm="apparmor_parser"
[Do Sep  4 12:46:18 2025] audit: type=1400 audit(1756982778.605:302): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.snap-store.hook.configure" pid=11729 comm="apparmor_parser"
[Do Sep  4 12:46:18 2025] audit: type=1400 audit(1756982778.608:303): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.snap-store.show-updates" pid=11730 comm="apparmor_parser"
[Do Sep  4 12:46:20 2025] audit: type=1400 audit(1756982780.441:304): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/snap/snapd/25493/usr/lib/snapd/snap-confine" pid=12081 comm="apparmor_parser"
[Do Sep  4 12:46:20 2025] audit: type=1400 audit(1756982780.441:305): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/snap/snapd/25493/usr/lib/snapd/snap-confine//mount-namespace-capture-helper" pid=12081 comm="apparmor_parser"
[Do Sep  4 12:46:20 2025] audit: type=1400 audit(1756982780.561:306): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.snap-store.hook.configure" pid=12084 comm="apparmor_parser"
[Do Sep  4 12:46:20 2025] audit: type=1400 audit(1756982780.654:307): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap-update-ns.snap-store" pid=12083 comm="apparmor_parser"
[Do Sep  4 12:46:20 2025] audit: type=1400 audit(1756982780.693:308): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.snap-store.snap-store" pid=12086 comm="apparmor_parser"
[Do Sep  4 12:46:20 2025] audit: type=1400 audit(1756982780.698:309): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.snap-store.show-updates" pid=12085 comm="apparmor_parser"

journalctl -k | grep -i apparmor | grep snap :

Sep 04 12:46:18 host-myname kernel: audit: type=1400 audit(1756982778.560:300): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap-update-ns.snap-store" pid=11728 comm="apparmor_parser"
Sep 04 12:46:18 host-myname kernel: audit: type=1400 audit(1756982778.604:301): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.snap-store.snap-store" pid=11731 comm="apparmor_parser"
Sep 04 12:46:18 host-myname kernel: audit: type=1400 audit(1756982778.605:302): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.snap-store.hook.configure" pid=11729 comm="apparmor_parser"
Sep 04 12:46:18 host-myname kernel: audit: type=1400 audit(1756982778.608:303): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.snap-store.show-updates" pid=11730 comm="apparmor_parser"
Sep 04 12:46:20 host-myname kernel: audit: type=1400 audit(1756982780.441:304): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/snap/snapd/25493/usr/lib/snapd/snap-confine" pid=12081 comm="apparmor_parser"
Sep 04 12:46:20 host-myname kernel: audit: type=1400 audit(1756982780.441:305): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/snap/snapd/25493/usr/lib/snapd/snap-confine//mount-namespace-capture-helper" pid=12081 comm="apparmor_parser"
Sep 04 12:46:20 host-myname kernel: audit: type=1400 audit(1756982780.561:306): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.snap-store.hook.configure" pid=12084 comm="apparmor_parser"
Sep 04 12:46:20 host-myname kernel: audit: type=1400 audit(1756982780.654:307): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap-update-ns.snap-store" pid=12083 comm="apparmor_parser"
Sep 04 12:46:20 host-myname kernel: audit: type=1400 audit(1756982780.693:308): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.snap-store.snap-store" pid=12086 comm="apparmor_parser"
Sep 04 12:46:20 host-myname kernel: audit: type=1400 audit(1756982780.698:309): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.snap-store.show-updates" pid=12085 comm="apparmor_parser"

I posted a similar (or what I now believe is the same) issue here: Home Directory Outside of Home - #4 by FatalKeks

Upon trying the latest suggestion by @mborzecki1 (update snapd to edge, the try refresh again) I am getting the same, new error message as @FatalKeks. This is what leads me to believe our issues are the same.

I have also gone through all of the other posts in this thread and my answers to most of the questions are more or less the same as @FatalKeks; user directory is /home/[username], using bash as shell, no systemd-homed.

Where we differ is that my /root directory has had the user and group changed to ‘gdm’ (not sure how).

drwx------  10 gdm  gdm  4.0K Sep  1 12:20 root

I am 100% sure I didn’t do this myself, so I can only assume it was done by an update or was a side effect of some other change I had made. I took the chance of changing it back to root ownership (since I didn’t know what made the change I wasn’t sure what would happen) and I am now able to update snaps again.

3 Likes

You. Are. My. Hero.

No Idea why or how, but my /root permissions were set to drw-rw-rw- , changing to drwx------ fixed the issue.

Thanks all for your support. :slight_smile:

If I find out, what changed my permissions, I will let you know.

1 Like