`fuse-control` interface

[fnordahl]

There appears to be some demand for more involved control over fuse filesystems than what is currently provided in the fuse-support interface.

Is there any news on it’s development, and / or is there anything I can do to get involved?

I specifically need to support unmounting of fuse filesystems as my application iteratively mounts and unmounts them while processing its data.

I would love to get my snap out of the devmode dog house

Cursory search provided these related threads from the forum:

Request for classic confinement: parsec

Yes. There is a process for requesting auto-connection as well: Process for aliases, auto-connections and tracks Yes, this is precisely what it means. The aforementioned PR comment discusses that the fuse-support interface has a number of limitations. You would need a new interface called ‘fuse-control’ and for the core snap to ship fusermount for your snap to work in strict mode as non-root, but see below for a complication. You aren’t missing anything. The fuse-support interface is limite…

Classic confinement request for the android-file-transfer snap

In https://github.com/snapcore/snapd/pull/1598#issuecomment-239952977 I discussed the next steps if there was ever a case for a fuse-control interface. It seems like there is now and I would much prefer implementing that instead of granting applications classic. I’ll put it on my todo and will try to get this in for 2.37, however, if you wanted to take a crack at updating snapd, the security policy is laid out in the above url.

Classic confinement request for the go-mtpfs(was: go-mtpfs-brlin) snap

In https://github.com/snapcore/snapd/pull/1598#issuecomment-239952977 I discussed the next steps if there was ever a case for a fuse-control interface. It seems like there is now and I would much prefer implementing that instead of granting applications classic. I’ll put it on my todo and will try to get this in for 2.37, however, if you wanted to take a crack at updating snapd, the security policy is laid out in the above url.

Fuse-support: DENIED failed type match

Right, fuse-support only supports “running” a FUSE filesystem as root and not fusermount or unmounting. For these use cases, a ‘fuse-control’ interface would need to be created, likely with an installation constraint.

[jdstrand]

The work is in backlog but not currently roadmapped. https://github.com/snapcore/snapd/pull/1598#issuecomment-239952977 details the next steps if you want to pick it up.