Snappy-debug auto-connect of system-observe

snappy-debug is used to debug snap AppArmor and seccomp denials. To do this it tries to read this directly from /var/log/syslog. However, on Ubuntu Core 18 and 20 etc this file does not exist and so instead snappy-debug will suggest to manually pipe the output from journalctl into it:

alexmurray@ubuntu:~$ snappy-debug
ERROR: '/var/log/syslog' does not exist. Redirect journalctl instead. Eg:
ERROR: $ sudo journalctl --output=short --follow --all | sudo snappy-debug

For this to work correctly though snappy-debug requires access to the /etc/os-release file of the host via /var/lib/snapd/hostfs/etc/os-release through the system-observe plug.

Can snappy-debug please be granted auto-connect of system-observe for this purpose?


1 Like

This seems reasonable for this kind of debugging. +1 from me for auto-connect of the system-observe interface, for read access to the host’s /etc/os-release file.

+1 from me as well for auto-connecting system-observe to snappy-debug for the purposes of debugging AppArmor and seccomp denials

+2 votes for, 0 against, granting auto-connect of system-observe for snappy-debug. This is now live.