Ernest Lotter

Generated changelogs with: DEBEMAIL="Ernest Lotter [email protected]" release-tools/changelog.py 2.63 2061179 NEWS.md NEWS.md and changelogs was updated in the final commit: [release: 2.63](https://github.com/snapcore/snapd/pull/13731/commits/9b955c0f4bb07712133b9716c90d0e0c82daace0) SRU: https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/2061179

o/devicestate, o/snapstate: move firstboot configure task after essential snap installs

1

This PR builds on https://github.com/snapcore/snapd/pull/13117 and primarily on https://github.com/snapcore/snapd/pull/13097. Implements draft [spec](https://docs.google.com/document/d/1qQsxCrhlCKUb33_1mdY88sRHeFZStFnydh7mirA3S0Y/edit?usp=drive_link) parts: - Trivial seed install task order - Seed install task order - Preseed install task order Outstanding:...

snap, snap/pack: disallow pack and install of snapd, base and os with specific configure hooks

2

It is currently possible to pack and install `snapd`, `base` and `core` snaps with `default-configure` and `configure` hooks, but those hooks are ignored during [installation](https://github.com/canonical/snapd/blob/master/overlord/snapstate/snapstate.go#L831) and [option setting](https://github.com/canonical/snapd/blob/master/overlord/configstate/configstate.go#L100). My proposal...

On classic systems always install snapd as prerequisite for any snap install. Previously it was only installed on systems that do not have core installed already or to be installed...

Making private snapd release 2.61.4 public. Refer to [counterpart private PR](https://github.com/snapcore/snapd-security-release/pull/3). Important: - Merge commit only to retain commit history - Push tag from counterpart private PR after merge

o/devicestate, o/snapstate: improve firstboot task order

2

Make corrections to firstboot install task order according to spec [SD154 | Firstboot install task order](https://docs.google.com/document/d/1qQsxCrhlCKUb33_1mdY88sRHeFZStFnydh7mirA3S0Y/edit?usp=sharing) This task draws inspiration from earlier, dated work to achieve the same: https://github.com/canonical/snapd/pull/13127 [enable...

many: support sealing and resealing using check result

2

Modified how PCR protection profile is build for sealing and resealing to use information within the preinstall check result and also make use of the modern secboot API. **Sealing using...