Classic confinement request for fgqc


#1

I work at a non-profit that recycles, repairs and sells second hand computers. We have some QC tools that we run on those machines. Those QC tools do various tasks like installing upgrades, looking at hardware info/status, etc.

We need classic confinement in order for the snap to be able to do those tasks.

The snap name is fgqc (currently pending manual review).


#2

I think you should be able to use strict mode for hardware info and status. What kind of upgrades are you installing? debs? rpms? Something else?


#3

Debs. We install Ubuntu on our machines. The classic mode is required (I think) just for installing packages onto the host system.


#4

@niemeyer, here is another use case for classic for installing. It seems to be a subset of what was discussed here: Classic confinement request for ubup, but the main use case is installing/upgrading debs.


#5

sounds like it is the time for an interface to talk to apt-daemon :wink:


#6

@jdstrand Indeed, it looks like a very similar case.

@UnlawfulMonad Can you please read that topic linked by @jdstrand as I believe most comments there apply here as well.


#7

@jdstrand @niemeyer I read through the thread and if I’ve understood correctly there tends to be a hesitation to allow new classic snaps since the goal is to remove classic confinement in the future.

I understand these concerns however I don’t believe there’s any way to get this to work without classic confinement or am I mistaken?


#8

@UnlawfulMonad As hinted in the other thread, it’s not a single aspect that we take into account but the overall context for the application. Such management platforms for example is one thing that we’ve been trying to avoid, at least right now, because even if it’s in good faith and for productive reasons, these tools have code in them that looks a lot like a controlled backdoor, which makes it harder to review and easier to have serious bugs on because, again it’s part of the nature of the application in the first place. Also, that kind of application in general can manage itself, so the benefit of having it as a snap is somewhat limited.