From ed1e2c8908eb2c4d343e57df12658cb8c1725641 Mon Sep 17 00:00:00 2001
From: m0duspwnens <josh.patterson@securityonionsolutions.com>
Date: Fri, 16 Jun 2023 13:58:45 -0400
Subject: [PATCH] ignore failure notification for Ubuntu Failed to restart
 snapd

---
 setup/so-verify | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/setup/so-verify b/setup/so-verify
index 831b0049c..7e010722c 100755
--- a/setup/so-verify
+++ b/setup/so-verify
@@ -31,6 +31,10 @@ log_has_errors() {
 
     # Ignore Failed: 0 since that is the salt state output, and we detect state failures
     # via Result: False already.
+
+    # This is ignored for Ubuntu
+    # Failed to restart snapd.mounts-pre.target: Operation refused, unit snapd.mounts-pre.target
+    # may be requested by dependency only (it is configured to refuse manual start/stop).
     
     grep -E "FAILED|Failed|failed|ERROR|Result: False" "$setup_log" | \
         grep -vE "The Salt Master has cached the public key for this node" | \
@@ -46,6 +50,7 @@ log_has_errors() {
         grep -vE "code: 100" | \
         grep -vE "/nsm/rules/sigma*" | \
         grep -vE "/nsm/rules/yara*" | \
+        grep -vE "Failed to restart snapd" | \
         grep -vE "Running scope as unit" &> "$error_log"
     
     if [[ $? -eq 0 ]]; then