Confinement 'classic' for semaphore snap

I understand that strict confinement is generally preferred over classic.

I’ve tried the existing interfaces to make the snap to work under strict confinement.

Note that snappy-debug can be used to identify possible required interfaces. See Debugging snaps | Snapcraft documentation for more information.

This request has been added to the queue for review by the @reviewers team.

1 Like

Hi @alexmurray,

How long does it take you to review the application?

As I mentioned, Semaphore require access to the system Ansible, Terraform, OpenTofu, etc.

Isolation does not allow full use of Semaphore because users want control version of Ansible/Terraform/OpenTofu.

You didn’t pick a category above, this is a hard requirement (not a reviewer here, just pointing out your data is incomplete)…

1 Like

Oh, yes. Thank you!

I can’t update the post, can I add it in comment?

Category: orchestration agents/software

1 Like

@alexmurray I have supported strict-mode for a long time, but now we have added support for a number of external tools. Users expect that they will work in Snap too.

The ability to remove the restriction is very important to us. Without it, we will not be able to develop our application.

Hey @fiftin

Usually access to external binaries is not a reason to get classic confinement, and those packages/snaps should be staged instead.

However, in this case, as some of those applications (at least Terraform) are already using classic I think it makes sense to grant semaphore classic, as discussed for Request classic confinement for tf-wrapper

Thus I’m happy to #approve this request after publisher vetting. I’ll contact you via DM to start the publisher vetting process.

Thanks

1 Like

Hi @jslarraz Thanks a lot! I’m looking forward to it!

Publisher is vetted. This is now live.

I noticed that automatic review shows an additional error due to interfaces are not allowed (or needed) with classic confinement. Your snap should passed automatic review after fixing it.

Thanks

Got it. Thank you very much!! I hope now snap will become the main way to install Semaphore!

1 Like