Request auto-connection for system-files in "chisel"

store-requests privileged-interfaces
1
  • name: chisel
  • description: Chisel is a software tool for carving and cutting Debian packages!
  • snapcraft: chisel/snap/snapcraft.yaml at main · canonical/chisel · GitHub
  • upstream: GitHub - canonical/chisel
  • upstream-relation: main contributors
  • interfaces:
    • system-files:
      • request-type: auto-connection
      • reasoning: when slicing packages from the Ubuntu Pro archives, Chisel uses the underlying Pro host’s APT credentials to authenticate with the Ubuntu Pro archives.

(FYI @rebornplusplus)

1 Like
2

Whilst this access expose sensitive information, it seems to be the needed for the snap functionality. Thus, +1 from me for granting chisel the requested system-files interface. It may me also good to rename the interface from pro-credentials to etc-apt-auth-conf-d following the our usual naming convention.

snapcraft.yaml fragment:

plugs:
  pro-credentials:
    interface: system-files
    read:
      - /etc/apt/auth.conf.d
      - /etc/apt/auth.conf.d/90ubuntu-advantage
1 Like
3

Thanks. ok for the renaming → chore(snap): rename system-files interface by cjdcordeiro · Pull Request #190 · canonical/chisel · GitHub

4

Given the above reasoning, +1 from me as well

1 Like
5

+2 votes for, 0 votes against, granting auto-connect of interface system-files (etc-apt-auth-conf-d) to snap chisel. Publisher is vetted. This is now live.

1 Like
6

Hi again, I just manually uploaded a version of the snap (v1.1.0) that the CI failed to build, and I’m hitting the constraint again. @cav @jslarraz could you please have a look? I’d like to promote v1.1.0 to candidate

7

hi @cjdc - I have added the plug name change and it should be working now! Let me know if there are any issues that come up

1 Like
8

it worked thanks @cav

1 Like