apparmor warnings about /.sass-cache/
---------------

It is safe to ignore these warnings.

If the versions of packages that provide sass files for openqa do not match the
version openqa was built with, the AssetPack plugin of mojolicious will rebuild
the minified CSS when openqa starts.

ruby-sass (which is used for this process) has a hard-wired default cache
setting of `/.sass-cache/`. That directory does not exist, and should not exist.
Nevertheless ruby-sass tries to create it, and apparmor will log that attempt
being denied, but this is harmless, so don't worry about it.

Sadly, this is not something that can currently be fixed, because ruby-sass is
obsolete, and the recommended replacement (dash-sass) depends upon dash, which
is not in Debian.


geekotest group (since 4.6.1712926289.b0d689b52-1)
---------------

If you want a user to be able to create new jobs on the local system (e.g. by
running `openqa-clone-job`) then they will generally need to be able to write to
the `iso` and `hdd` image directories under `/var/lib/openqa/share/factory/`.

In order to enable that, those directories now default to being owned by the
`geekotest` group, and having the group S-bit set. This means that a user can be
given the required permissions by adding them to the `geekotest` group.

The package tries to avoid touching local changes, so if you had already made
your own arrangements the upgrade should leave your settings as they are.

 -- Philip Hands <phil@hands.com>, Thu, 28 May 2026 17:16:15 +0200
