When using custom cherrytux kernel, cannot run snap applications like yakyak

[sundarnagarajan]

To reproduce:

• Use custom kernel 4.13.9 as created using make_rdp_iso.sh
• Run sudo snap install yakyak
• Run yakyak Will see error message:

  snap-confine has elevated permissions and is not confined but should be. Refusing to continue to avoid permission escalation attacks

[sundarnagarajan]

Unix.stackexchange.com report - no solution

[sundarnagarajan]

Reported here relating to Anbox. From one of the replies:

I guess the reason here is that the snap-confine binary in Ubuntu has AppArmor support enabled but your kernel from GalliumOS misses certain patches to confine snaps properly. All pending AppArmor patches are meant to land in the 4.14 upstream release of the kernel. So as long as that isn't out your only option is to switch to an Ubuntu based kernel on an Ubuntu based operating system

That should probably be: 'your only option is to switch to an Ubuntu compiled kernel' Pity Ubuntu doesn't release 4.13 kernels for Xenial Xerus 16.04 (They do have their mainline kernel repository , but I hear that those kernels don't work with snap-confine either! The Ubuntu mainline kernel builds are described in more detail here.

[sundarnagarajan]

Using instructions from this discussion, I was able to get yakyak to work.

* Navigate to /snap/APPNAME/current/
* Find launch binary
* Run the launch binary

Worked for yakyak snap application, on kernel 4.14.6

Can also directly launch snap application using full path - e.g. for yakyak: /snap/yakyak/current/yakyak