root@localhost:~# SNAP_CONFINE_DEBUG=yes SNAP_NAME=hello-world /root/xenial/root/snap-confine/src/snap-confine snap.hello-world.env /snap/hello-world/27/bin/env
DEBUG: setting argv[0] to snap-confine
DEBUG: security tag is snap.hello-world.env
DEBUG: binary to run is /snap/hello-world/27/bin/env
DEBUG: preparing seccomp profile associated with security tag snap.hello-world.env
DEBUG: host arch (kernel) is '-1073741641'
DEBUG: native arch (userspace) is '-1073741641'
DEBUG: adding compat arch '1073741864'
DEBUG: creating namespace group directory /run/snapd/ns
DEBUG: opening namespace group directory /run/snapd/ns
DEBUG: opening lock file for group directory
DEBUG: locking the namespace group directory
DEBUG: sanity timeout initialized and set for three seconds
DEBUG: sanity timeout reset and disabled
DEBUG: namespace group directory does not require intialization
DEBUG: unlocking the namespace group directory
DEBUG: opening namespace group directory /run/snapd/ns
DEBUG: opening lock file for namespace group hello-world
DEBUG: acquiring exclusive lock for namespace group hello-world
DEBUG: sanity timeout initialized and set for three seconds
DEBUG: sanity timeout reset and disabled
DEBUG: acquired exclusive lock for namespace group hello-world
DEBUG: initializing new namespace group hello-world
DEBUG: forking support process for mount namespace capture
DEBUG: forked support process has pid 17765
DEBUG: DEBUG: unsharing the mount namespace
forked support process has pid 0
DEBUG: changing apparmor hat of the support process for mount namespace capture
DEBUG: ensuring that parent process is still alive
DEBUG: waiting for a eventfd data from the parent process to continue
DEBUG: sanity timeout initialized and set for three seconds
DEBUG: scratch directory for constructing namespace: /tmp/snap.rootfs_SnMU7U
DEBUG: performing operation: mount --make-rshared /
DEBUG: performing operation: mount --bind /tmp/snap.rootfs_SnMU7U /tmp/snap.rootfs_SnMU7U
DEBUG: performing operation: mount --make-unbindable /tmp/snap.rootfs_SnMU7U
DEBUG: performing operation: mount --rbind / /tmp/snap.rootfs_SnMU7U
DEBUG: performing operation: mount --make-rslave /tmp/snap.rootfs_SnMU7U
DEBUG: performing operation: mount --rbind /media /tmp/snap.rootfs_SnMU7U//media
DEBUG: performing operation: mount --bind //etc/alternatives /tmp/snap.rootfs_SnMU7U/etc/alternatives
DEBUG: performing operation: mount --make-slave /tmp/snap.rootfs_SnMU7U/etc/alternatives
DEBUG: performing operation: mount --rbind /snap /tmp/snap.rootfs_SnMU7U/snap
DEBUG: performing operation: mount --make-rslave /tmp/snap.rootfs_SnMU7U/snap
DEBUG: performing operation: mount --bind /tmp/snap.rootfs_SnMU7U//var/lib/snapd/hostfs /tmp/snap.rootfs_SnMU7U//var/lib/snapd/hostfs
DEBUG: performing operation: mount --make-private /tmp/snap.rootfs_SnMU7U//var/lib/snapd/hostfs
DEBUG: performing operation: pivot_root /tmp/snap.rootfs_SnMU7U /tmp/snap.rootfs_SnMU7U//var/lib/snapd/hostfs
DEBUG: performing operation: umount /var/lib/snapd/hostfs//tmp/snap.rootfs_SnMU7U
DEBUG: performing operation: rmdir /var/lib/snapd/hostfs//tmp/snap.rootfs_SnMU7U
DEBUG: performing operation: mount --make-rslave /var/lib/snapd/hostfs
DEBUG: performing operation: umount --lazy /var/lib/snapd/hostfs/sys
DEBUG: performing operation: umount --lazy /var/lib/snapd/hostfs/dev
DEBUG: performing operation: umount --lazy /var/lib/snapd/hostfs/proc
DEBUG: sc_setup_mount_profiles: snap.hello-world.env
DEBUG: opening mount profile /var/lib/snapd/mount/snap.hello-world.env.fstab
DEBUG: mount profile /var/lib/snapd/mount/snap.hello-world.env.fstab doesn't exist, ignoring
DEBUG: asking support process for mount namespace capture (pid: 17765) to perform the capture
DEBUG: sanity timeout reset and disabled
DEBUG: capturing mount namespace of process 17764 in namespace group hello-world
DEBUG: successfully captured mount namespace in namespace group hello-world
DEBUG: waiting for the support process for mount namespace capture to exit
DEBUG: support process for mount namespace capture exited normally
DEBUG: releasing lock for namespace group hello-world
DEBUG: released lock for namespace group hello-world
DEBUG: releasing resources associated wih namespace group hello-world
DEBUG: resetting PATH to values in sync with core snap
DEBUG: snappy_udev_init
DEBUG: requesting changing of apparmor profile on next exec to snap.hello-world.env
DEBUG: raising privileges to load seccomp profile
DEBUG: loading seccomp profile into the kernel
DEBUG: dropping privileges after loading seccomp profile
SNAP_CONFINE_DEBUG=yes