Mailinglist Archive: opensuse-factory (914 mails)

< Previous Next >
[opensuse-factory] snapd for openSUSE
Hey everyone,

we're going to submit the snapd package to the openSUSE Factory branch
soon. snapd is the central component of the snap ecosystem. See
https://snapcraft.io/ for more details about snap & snapd. The package
is available through the system:snappy:snapd repository on OBS
(https://build.opensuse.org/package/show/system:snappy/snapd) for quite
some time and went through various iterations.

There are a few things we need to solve before we can sent the package
review request:

* Passing the security review on #9860501
(https://bugzilla.opensuse.org/show_bug.cgi?id=986050) to get the
snap-confine utility added to the setsuid whitelist in openSUSE.

- There were a few things found in the security review of the
snap-confine code @zyga is currently working through and will push PRs
to the upstream snap project real soon. We will backport those changes
to the packaging tree in order to get them included as part of a stable
snapd release.

- Right now the package ships with an override for the setsuid bit for
snap-confine until we have it hadded to the distro wide whitelist. This
is a blocker for the merge into openSUSE Factory.

* Discuss if we can use golang vendorization. We saw that packages like
the ones for docker or kubernetes are using golang vendorization instead
of packaging all dependencies into individual packages like Fedora is
doing. The snapd package right now uses golang vendoring too and we
would like to keep that unless there is any feedback that requires us to
package each individual golang module into an individual package. For a
complete list of all golang modules used by snapd have a look at the
govendor configuration file
(https://github.com/snapcore/snapd/blob/master/vendor/vendor.json)

Other than that the snapd package is in a good shape.

If you're interested please reach out to Zygmund (in CC) or me.

regards,
Simon
--
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse-factory+owner@xxxxxxxxxxxx

< Previous Next >
Follow Ups