unfortunately the situtation is very complex. We make use of PEST (https://pesthomepage.org/) to facilitate inverse modelling. For this we require that the geothermal model needs to be cloned to a lot of “agent” nodes automatically; the python scripts must hence form part of geothermal model project and we have no control over the locations of the project folders.
Further the user must do their own analysis (results of which are being fed back into our Volsung simulators). We can not anticipate what kind of analysis they will do and what python (or other) scripts and libraries they require for this, so it’s hard to provide them with good options unless we allow them to execute arbitrary code.
In addition the simulation package encompasses a lot of different hardware and system requirements (network drives, desktop application access, etc). So far I have managed to squeeze these into the “strict” requirements by opening up the corresponding confinements; however I had to make a lot of functional sacrifices which I am not too happy about. Switching to “classic” confinement would solve all these issues for us and would allow the user full functionality of the software - and given that they actually pay a lot of money per license seat it would be only fair for them to have this functionality.
Snaps tick sooooo many good boxes for us and so far the only drawback that I have found are the limitations imposed by the strict confinement.