Snapd 2.71 Release Update

Dear Snapd Community,

We’re pleased to share that snapd 2.71 snap is available for testing in the candidate channel.

Highlights

  • Support for TPM backed Full Disk Encryption on Ubuntu 25.10

Notable updates

  • Fix offline remodel case where we switched to a channel without an actual refresh
  • Reject system key mismatch advice when not yet seeded (LP: #2114923)
  • Make removal of last active revision of a snap equal to snap remove (LP: #2112551)
  • Allow non-gpt in fallback mode to support RPi (LP: #2114779)
  • Fix `snap debug connectivity` check for RISC-V (LP: #2112544)
  • Exclude snap/snapd/preseeding when generating preseed tarball (LP: #2112332)
  • Fix snap command progress reporting (LP: #1952500)
  • Interfaces: kerberos-tickets | add new interface (LP: #1849346)
  • Interfaces: log-observe | add capability dac_read_search (LP: #2098780)
  • Interfaces: block-devices | opt-in access to individual partitions (LP: #2033883)

More about TPM backed FDE on Ubuntu Core and Ubuntu 25.10

To support hybrid Ubuntu 25.10+ systems, we’ve introduced a new key format. On Ubuntu Core this change is transparent to users, but it enables us to transition from file-based key storage to storing keys in the LUKS2 header (with header redundancy) on core26.

On previous versions of Ubuntu Core, once a reboot required a recovery key, the device would continue prompting for that key on every subsequent boot. This could be particularly problematic for unattended or remote devices. This behavior was improved so that after a firmware update, entering the recovery key triggers an automatic repair and restores normal unattended boot operation without further prompts.

The fwupd tool is available both as a deb and as a snap providing a unified way to install and manage system firmware updates. Support has been added for updating the UEFI DBX (UEFI Secure Boot forbidden signatures database) without requiring a recovery key on reboot. This ensures that both hybrid Ubuntu 25.10+ and Ubuntu Core devices with Full Disk Encryption seamlessly apply DBX updates.

For an overview on TPM backed FDE for hybrid Ubuntu 25.10, see: TPM/FDE progress for Ubuntu 25.10

What’s next

For the release plan and complete list of changes, please refer to the full release notes.

The next release Snapd 2.72 is estimated to start on 22 September and be available by 27 October.

Feel free to provide your test feedback here or directly in Launchpad. To help fast track investigations please provide (1) details about the system, (2) snapd version(s) and (3) steps to reproduce the issue.

We greatly appreciate your contributions and support!

1 Like

We are busy releasing snapd 2.71 snap to the stable channel. Progressive releases for amd64, arm64 and armhf started and ppc64el, riscv64 and s390x should be available immediately.

Snapd 2.71 deb is available in Ubuntu Questing and we’re working to release it to Jammy, Noble, and Plucky in the coming days.

Snapd 2.71 is now also available on Jammy, Noble and Plucky:


Furthermore, Questing received a deb only bugfix release Snapd 2.71.1+ubuntu25.10.1 that addresses a Questing specific installation bug discovered on a Framework12 laptop:

LP: #2125439 FDE: update secboot to revision f8400226f49a to fix possible preinstall secboot panic when secure boot is disabled.

1 Like