after SNAPD remove: how can i remove APPARMOR ?

BTO

i use the Solus-Budgie desk, installed from an older ISO two years ago.
the system is completely updated.
i never installed a SNAP on my system.
i already removed the SNAPD package.

from what i understood, if APPARMOR was only needed for SNAPD:
what are the correct steps to remove APPARMOR from my system?

i already tried to simply remove it, but then there are error-messages during boot like: "apparmor profiles cannot be loaded..."

AAndresH

AppArmor is a very important module for linux and the whole system, if you delete it, the system breaks, since AppArmor is a security module of the Linux kernel, it should not be deleted.

AAndresH

AAndresH Well, I say that it should not be deleted since it is important for security, but reading it says that it can be deleted but it can bring inconveniences to the system, that if no application really needs it it is better to disable it, but if not better not delete it.

Harvey

It is only required on Solus if you use snapd or firejail if you do not you can remove it. In fact newer installs will not have snapd or apparmor installed by default any more.

The error when running sudo eopkg rm apparmor can be ignored and you will not get an error again.

EDIT: This is the error that can be ignored

❯ sudo eopkg rm apparmor
The following list of packages will be removed
in the respective order to satisfy dependencies:
apparmor
Do you want to continue? (yes/no)y
Disabling keyboard interrupts for file operations.
Removing package apparmor
Removed apparmor
 [✓] Syncing filesystems                                                success
 [✓] Updating dynamic library cache                                     success
 [✓] Updating systemd tmpfiles                                          success
 [✓] Reloading systemd configuration                                    success
 [✗] Compiling and Reloading AppArmor profiles                           failed

A copy of the command output follows:

failed to get current cache directory: exec: "apparmor_parser": executable file not found in $PATH


 [✓] Updating manpages database                                         success

Harvey

I forgot about aa-lsm-hook you will want to remove that too if you are removing snapd+apparmor otherwise you will get an error on boot because it can no longer start aa-lsm-hook.service because apparmor_parser no longer exists.

For clarity, new installs don't have aa-lsm-hook either, its a dependency of apparmor

brent

EDIT: Harvey had it first so deleted

mbevks

Harvey I found this thread by searching aa-lsm-hook. When I boot, I get an error:

[FAILED] Failed to start aa-lsm-hook.services - Load AppArmor profiles.

Is this a problem? I assume this has something to do with dropping snap. If I can uninstall something and make the message go away, I'd be happy. But if I need to fix something, I would be very grateful for instructions. Thank you!

BTO

Harvey dear Harvey,
many thanks for your help. to get rid of SNAP and its dependencies i did:

sudo eopkg rm snapd
sudo eopkg rm apparmor
sudo eopkg rm aa-lsm-hook
sudo eopkg rmo

now everything seems to work well, without error messages :-)

Harvey

I already explained it. I assume you have removed snapd and apparmor but have not removed aa-lsm-hook

sudo eopkg rm aa-lsm-hook and reboot, the error will not occur again.