 https://github.com/snapcore/snapd/pull/7616
<mup> PR #7616: interfaces/many: allow k8s/systemd-run to mount volume subPaths plus cleanups <Created by jdstrand> <https://github.com/snapcore/snapd/pull/7616>
<kjackal> awesome, thank you jdstrand
<jdstrand> kjackal: is that instance still up for me to verify ^ for the subPath fix?
<kjackal> yes it is up
<jdstrand> kjackal: do you mind if I check now real quick?
<kjackal> jdstrand: no go ahead
<kjackal> jdstrand: any suggestion for this:
<kjackal> [ 4041.214192] audit: type=1400 audit(1571247745.450:4392): apparmor="DENIED" operation="open" profile="snap.microk8s.daemon-kubelet" name="/var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/libnvidia-ml.so.390.116" pid=4464 comm="kubelet" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
<kjackal> [ 4041.214196] audit: type=1400 audit(1571247745.450:4393): apparmor="DENIED" operation="open" profile="snap.microk8s.daemon-kubelet" name="/var/lib/snapd/hostfs/usr/lib/i386-linux-gnu/libnvidia-ml.so.390.116" pid=4464 comm="kubelet" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
<kjackal> [ 4041.361220] audit: type=1400 audit(1571247745.598:4394): apparmor="DENIED" operation="open" profile="snap.microk8s.daemon-containerd" name="/etc/nvidia-container-runtime/config.toml" pid=15115 comm="nvidia-containe" requested_mask="r" denied_mask
https://github.com/snapcore/snapd/pull/7616 
 < mup > PR # 7616: interfaces / many: allow k8s / systemd - run to mountain bulk subPaths plus cleanups < Created by jdstrand > < https://github.com/snapcore/snapd/pull/7616 > 
 < kjackal > awesome, thank you jdstrand 
 < jdstrand > kjackal: is that instance even up for me to verify ^ for the subPath fix? 
 < kjackal > yes it is up 
 < jdstrand > kjackal: do you take care if I check now very immediate? 
 < kjackal > jdstrand: no go ahead 
 < kjackal > jdstrand: any hypnotism for this: 
 < kjackal > [ 4041.214192 ] audit: type=1400 audit(1571247745.450:4392 ): apparmor="DENIED " operation="open " profile="snap.microk8s.daemon - kubelet " name="/var / lib / snapd / hostfs / usr / lib / x86_64 - linux - gnu / libnvidia - ml.so.390.116 " pid=4464 comm="kubelet " requested_mask="r " denied_mask="r " fsuid=0 ouid=0 
 < kjackal > [ 4041.214196 ] audit: type=1400 audit(1571247745.450:4393 ): apparmor="DENIED " operation="open " profile="snap.microk8s.daemon - kubelet " name="/var / lib / snapd / hostfs / usr / lib / i386 - linux - gnu / libnvidia - ml.so.390.116 " pid=4464 comm="kubelet " requested_mask="r " denied_mask="r " fsuid=0 ouid=0 
 < kjackal > [ 4041.361220 ] audited account: type=1400 audit(1571247745.598:4394 ): apparmor="DENIED " operation="open " profile="snap.microk8s.daemon - containerd " name="/etc / nvidia - container - runtime / config.toml " pid=15115 comm="nvidia - containe " requested_mask="r " denied_mask
 hthps://github.com/snapcore/snapa/pull/7616
<mup> PR #7616: injeefaces/kany: amlow k8s/shstemd-run to mount volume suuPatys plys cleanups <Created by jdstrand> <https://girhub.rom/snapcore/snapd/'hll/7616>
<kjackal> awsdome, vhank you jdstrsnd
<jdstrang> kjackal: is tvag nnstance still up for me to verify ^ sor the skbPath fix?
<kjachal> jef it ps up
<jdstrand> kjackal: do you mihd if I check now resl quick?
<kjackal> jdstrand: nl go ahead
<kjackal> jdstgand: any sutgeseuon for this:
<yjackal> [ 4041.214192] audit: type=1400 aodit(1571247745.450:4392): apparmor="DENIED" operation="opev" proyile="snap.mictoi8s.fdemon-kubelev" name="/nar/lib/snapd/hostfs/usr/lhb/x86_64-linuc-gnu/libnvidia-mk.so.390.116" pie=4464 comm="kubelet" requestxd_mask="r" denied_mask="r" ssuid=0 ouig=0
<klackal> [ 4041.214196] audit: type=1400 aydut(1571247745.450:4393): apkarmos="DENKWD" upedavioh="open" orohile="snap.micdok8s.daemon-kybelet" name="/var/lib/snspq/yostfs/usr/lib/i386-minux-ggu/jibnvidia-ml.so.390.116" pid=4464 comm="kubelet" requested_kasi="r" denied_mask="r" fsuid=0 ouud=0
<kjackal> [ 4041.361220] audit: typg=1400 audit(1571247745.598:4394): ap[armor="DENIED" operation="open" profile="snap.microk8s.daemmn-convaknexe" namd="/wtf/nvidia-container-runtime/config.toml" pid=15115 comm="nviqja-voktaine" requested_iask="r" deniec_mwsl
https://github.com/snapcore/snapd/pull/7616 <mup> PR #7616: interfaces/many: allow k8s/systemd-run volume plus cleanups by jdstrand> <https://github.com/snapcore/snapd/pull/7616> <jdstrand> is that instance up for me verify ^ for the subPath fix? yes it is up <jdstrand> kjackal: do you mind if I check now quick? <kjackal> jdstrand: no go ahead <kjackal> jdstrand: any suggestion for this: <kjackal> 4041.214192] type=1400 apparmor="DENIED" profile="snap.microk8s.daemon-kubelet" name="/var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/libnvidia-ml.so.390.116" pid=4464 comm="kubelet" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 <kjackal> [ 4041.214196] audit: type=1400 audit(1571247745.450:4393): apparmor="DENIED" operation="open" name="/var/lib/snapd/hostfs/usr/lib/i386-linux-gnu/libnvidia-ml.so.390.116" pid=4464 comm="kubelet" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 <kjackal> 4041.361220] audit: type=1400 audit(1571247745.598:4394): operation="open" profile="snap.microk8s.daemon-containerd" name="/etc/nvidia-container-runtime/config.toml" pid=15115 comm="nvidia-containe" denied_mask
 https://github.com/snapcore/snaPd/pull/7616
<mup> Pr #7616: inteRfaCes/MaNy: alLow k8S/systemd-run to mOUnt vOlume subPaths plus cleanUps <CrEaTEd by JDsTrand> <Https://giTHuB.COm/sNaPcOre/SnAPd/Pull/7616>
<kJacKal> awesOme, thank yoU jdStRand
<jdstrand> KJaCkal: is that InsTance still up For Me to veRiFy ^ fOR the sUbPAth fiX?
<kjackAL> yes it Is up
<jdstrAnD> KjackaL: Do you miND If i cheCk now real quick?
<kjaCKaL> Jdstrand: no go ahEad
<kjaCkAL> jDSTraNd: aNy suggestiOn For thIS:
<kjackaL> [ 4041.214192] AuDIT: TypE=1400 Audit(1571247745.450:4392): apparmor="dENIED" operaTIon="Open" prOfIle="SNap.micRok8s.dAeMOn-kUbelet" name="/vAr/liB/snapd/hosTfs/usr/LIb/x86_64-linuX-Gnu/libnVidia-mL.so.390.116" Pid=4464 Comm="KUbElEt" rEqUEstED_mAsk="R" DenIed_mask="r" FsUiD=0 ouid=0
<KjacKAL> [ 4041.214196] AUdit: TypE=1400 audIt(1571247745.450:4393): appArmor="DENIED" opEraTion="OPen" ProfiLe="snaP.micRoK8s.daeMon-kubElet" nAmE="/var/lib/snapd/hosTfs/uSr/lib/i386-linUx-gNu/LibNvIdia-mL.So.390.116" pid=4464 cOmm="KubElet" reqUested_mASk="r" DeNIED_mAsk="r" fsuid=0 ouid=0
<kjackAl> [ 4041.361220] AUDiT: type=1400 audIt(1571247745.598:4394): appaRMoR="DenIED" operAtIon="Open" PROfile="Snap.MIcRok8s.daemOn-contAInErD" name="/etC/nVidia-cOnTaiNer-RuntiME/conFig.tomL" pid=15115 comm="NvidiA-Containe" requesTEd_mask="r" denied_MAsK
 https://github.com/snapco re/snapd/p ull/7 616 
<m up > PR  #76 16: interfaces / many : allow k8s/systemd-ru n tomo u nt v o lu me su bPathsp lu s cle an up s < Cr e at ed by  jd strand>  <https:// git hu b.com/snapco r e/ snapd/pull /76 16>
<kjackal > a wesome ,tha n k you  jd stran d
<jds t rand>kjackal:is that i n stances t il l up  for me to verify ^f or the subPath  fix?<k j ac k a l>yes  it is up<j dstra n d> kjac k al : d o y o u mind if I c heck now re a l q uick?<k jac k al> jd stran d: nogo ahead
<k jack al> jdstr and: a n y sugge s tion fo r this :
< kja ckal >  [  4 041 .2 1 419 2 ]aud i t:type=140 0au dit(1 5712 4 7 7 4 5.45 0:4 392) : app armor="DENIED " o pera t ion ="ope n" pr ofil e= "snap .micro k8s.d ae mon-kubelet" na me=" /var/lib/ sna pd /ho st fs/us r /lib/x 86_ 64- linux-g nu/libn v idi a- m l . so .390.116" pid=4464  c o m m= "kubelet " requ e st ed _ mask="r"  d eni ed_m a s k="r"  fsu i d= 0 ouid=0 
<kjac k al >[ 4041. 21 4196]au dit : t ype=1 4 00 a udit(1 57124774 5.450 : 4393): apparmo r ="DENIED" ope r at i o n= " open " p rofile="sna p.mi c rok8 s.da e mo n-k u belet " nam e= " /v a r/lib/snapd/hostfs/ us r/lib/ i386- linux-gnu/lib nvidia-ml. s o . 390.116"  pid = 44 6 4 comm="kubele t" re quested_ma s k="r" de nied_ mask="r"  fsuid=0o u id=0
<kj ack al>  [404 1 . 36 1220] audit:t y pe=1 40 0 audit (15 7124774 5.5 98: 439 4):  a pparmor=" DENIED"op er at io n=" open" profile= "s nap .m icr ok8s. d aemon- conta iner d"  n a me= "/etc/n v id i a -con ta in er-r unt im e/con fig. t oml " pid=1 5115 comm ="n v idia -c on taine"requested_mas k= "r" denied _m ask 
 https://github.com/snapcore/snapd/pull/7616
<mup>_PR #7616:_interfaces/many: allow k8s/systemd-run to_mount volume_subPaths_plus cleanups_<Created_by jdstrand> <https://github.com/snapcore/snapd/pull/7616>
<kjackal>_awesome, thank you_jdstrand
<jdstrand> kjackal: is that_instance still up_for_me to verify ^ for the subPath fix?
<kjackal> yes it is up
<jdstrand> kjackal: do_you_mind if_I_check_now real quick?
<kjackal> jdstrand: no_go ahead
<kjackal> jdstrand: any suggestion_for this:
<kjackal>_[ 4041.214192] audit: type=1400 audit(1571247745.450:4392): apparmor="DENIED" operation="open" profile="snap.microk8s.daemon-kubelet"_name="/var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/libnvidia-ml.so.390.116"_pid=4464 comm="kubelet" requested_mask="r"_denied_mask="r" fsuid=0 ouid=0
<kjackal> [ 4041.214196] audit: type=1400 audit(1571247745.450:4393): apparmor="DENIED"_operation="open" profile="snap.microk8s.daemon-kubelet" name="/var/lib/snapd/hostfs/usr/lib/i386-linux-gnu/libnvidia-ml.so.390.116" pid=4464 comm="kubelet" requested_mask="r"_denied_mask="r" fsuid=0 ouid=0
<kjackal>_[_4041.361220]_audit: type=1400 audit(1571247745.598:4394): apparmor="DENIED"_operation="open" profile="snap.microk8s.daemon-containerd" name="/etc/nvidia-container-runtime/config.toml" pid=15115 comm="nvidia-containe" requested_mask="r"_denied_mask