Classic confinement for "pebble"

[emitorino]

Hi @cjdc,

@cjdc

Yes. At least in theory, since I couldn’t make it fully work just by using those paths (Pebble starts, but hangs…I’d need to dig further to understand why).

Have you tried using system-files instead to access the defaults $PEBBLE and $PEBBLE_SOCKET dirs in /var/lib?

@cjdc

Hi. I’d say it falls into the “orchestration software” category.

Although this category is supported for running workloads on systems without traditional users, I see we have granted classic for similar situations in the past. Still, we are seeing snaps like juju moving to strict confinement so I wonder if you could explore alternatives to make pebble a strictly confined snap instead. @pedronis can you weight in?