ssh-keys
is quite a powerful interface - it provides the snap full access to all of the user’s private keys. Since $HOME
for snaps defaults to SNAP_USER_DATA
(ie $HOME/snap/<snap-name>/<revision>
) users can copy they private keys etc into $SNAP_USER_DATA/.ssh
to allow access to their private keys etc for the given snap - or they could manually connect this interface for the snap as an alternative. As such we think it is prudent to allow the user to actively make this choice and so have not granted auto-connect for ssh-keys
in the past - so -1 from me to auto-connect ssh-keys
and instead I would encourage you to have the snap itself ask the user to either manually copy their keys over so the snap can access them or to manually connect this interface via snap connect lagoon-cli:ssh-keys
if they believe this is required.