I was approached yesterday by @greyback that he was not able to get mir-kiosk up on the pi3 in the daily edge images. Sadly tyring to look into this made me find another serious bug with the images (regression in setting the clock on first boot) that ate my day to fix …
Today i finally got around to inspect the GLES issue… installing mir-libs and mir-kiosk on the latest edge core (16-2.27.5+git352.186fdc0 ) makes mir-kiosk not start with " Error opening DRM device", switching core to --beta or --candidate makes it start up fine.
If mir-kiosk started once under the candidate or beta core snap it keeps working when switching back to edge … seemingly the switch to candidate/beta puts the “broken” udev rule in place and switching back to edge does not update it (to the “fixed” rule that breaks GLES):
So, the SUBSYSTEM=drm is the part that is broken and since it is a parse error, udev proably stops right there. That particular bug is in snapd in master (it was fixed last week) and when you change channels you may end up with a non-loading udev rule. That may, in turn, disable udev tagging so all the confinement is in apparmor control (not the device cgroup). Long story short I think it will be fine with the next master build.
Oh so you mean the commit that landed last week is not in any daily build (if thats the case our build policy of the daily snapd deb seem to be wrong (did the build not happen ?))