Snap: use strict confinement (fix #48) - Githubissues

LCVcode / jockey

MIT License

2 stars 3 forks source link

Snap: use strict confinement (fix #48) #50

Closed johnlettman closed 2 weeks ago

johnlettman commented 2 weeks ago

Description

Fixes #48. Moves the snap to strict confinement with tight coupling with the Juju snap.

Type of Change

[ ] New feature
[x] Bug fix
[ ] Documentation update
[ ] Refactoring
[ ] Hotfix
[x] Security fix

Testing

Installed and tested new snap
Invoked snap environment to test juju from within
Checked edge-cases

Impact

Snap strict confinement requires the following interfaces until it's on Snap Store:

sudo snap connect juju-jockey:juju-bin juju:juju-bin
for x in dot-local-share-juju home ssh-keys network; do
  sudo snap connect "juju-jockey:${x}"
done

Checklist

[x] I have documented my code with docstrings and comments, particularly in hard-to-understand areas.
[x] My changes adhere to the coding and style guidelines of the project and pass linting.
[x] My changes generate no new warnings.