Snap name: instant-lab
Publisher: swayan-basu
Plugs requested: docker
Auto-connect: Yes
Rationale:
instant-lab is a containerized cybersecurity practice environment designed for Raspberry Pi and Linux systems. It provisions, manages, and interacts with local Docker containers and security monitoring services on the host machine. Because it relies on communicating with the host Docker engine, it requires automatic connection to the host Docker daemon socket via the docker interface under strict confinement.
Link to codebase: https://github.com/swayan-basu/Instant_lab/tree/strict-docker
This request has been added to the queue for review by the @reviewers team.
Hello @swayan-basu,
Due to the privileged access the docker interface provides, it is considered a super-privileged interface and requires classic-level project maturity and trust in the publisher for auto-connection. Considering that the technical requirements for docker are clear but this seems to be a fresh project, this is a +1 from me for granting use-of/manual-connection for the docker interface for the instant-lab snap, but a -1 from me for auto-connection.
What do other reviewers think?
1 Like
Hello @swayan-basu 
The docker interface is a super-privileged interface and it grants the plugged snap access to the Docker daemon socket, which effectively confers device ownership to the snap. A snap with the docker plug can create, manage, and control all Docker containers on the host, which in turn can access host resources with minimal confinement.
Because of this, I am on the same page with @elisehdy , this is a +1also from my side, for grantingmanual-connection of the docker interface to the instant-lab snap, but a -1 from me for auto-connection.
1 Like
Thank you @elisehdy and @yomonokio for the review! I completely understand security concerns for a new project. I accept the manual-connection requirement and will document the snap connect step in the project’s README.
1 Like
Hello again @swayan-basu,
This request is approved, I will now proceed with publisher vetting.
+2 votes for, 0 votes against, granting use-of interface docker to snap instant-lab and the publisher is vetted.
@swayan-basu, please let me know when you have uploaded a strict version of the instant-lab snap with docker declared so I can grant this access. Thank you!
1 Like
Hello @elisehdy! I have uploaded Revision #7 (v0.2.0) under strict confinement declaring the docker plug and automated review has passed. Please go ahead and finalize the grant access when you have a moment. Thank you!
@swayan-basu, great thank you! This is now live.
Please let me know if you run into any further issues.