I would like to request classic confinement for the pi-coding-agent snap. The snap itself is based on opencode snap packaging and the goal is eventually move it under the ubuntu-snaps account.
- name: pi-coding-agent
- description: Pi coding agent
- snapcraft: pi-coding-agent-snap/snap/snapcraft.yaml at master · canonical/pi-coding-agent-snap · GitHub
- upstream: https://github.com/earendil-works/pi
- upstream-relation: downstream packager
- supported-category: IDEs, terminal emulators
- reasoning: The harness needs to execute various host tools, such as grep, curl, git and many others as part of the agentic coding loop. It also often needs unrestricted access to the host system, especially if/when running in a dedicated throwaway VMs or LXD containers. In essence, the required access cannot be easily mediated without significantly impairing the harness’ usability.
I understand that strict confinement is generally preferred over classic.
I’ve tried the existing interfaces to make the snap to work under strict confinement.