Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for snaps #582

Merged
merged 45 commits into from
Mar 1, 2024
Merged

Add support for snaps #582

merged 45 commits into from
Mar 1, 2024

Conversation

damonbarry
Copy link
Member

This change updates the repo to support building IoT Identity Service components as snaps. One of the main differences with snaps is that they run in a tightly confined sandbox, so many hard-coded references to users and filesystem paths had to be adapted to support compile-time variables.

micahl and others added 30 commits October 27, 2022 08:02
…ng environments

Signed-off-by: Alex Lewontin <alex.lewontin@canonical.com>
Signed-off-by: Alex Lewontin <alex.lewontin@canonical.com>
Signed-off-by: Alex Lewontin <alex.lewontin@canonical.com>
Signed-off-by: Alex Lewontin <alex.lewontin@canonical.com>
Co-authored-by: Micah Lewis <1009123+micahl@users.noreply.github.com>
Signed-off-by: Alex Lewontin <alex.lewontin@canonical.com>
Signed-off-by: Alex Lewontin <alex.lewontin@canonical.com>
Co-authored-by: Micah Lewis <1009123+micahl@users.noreply.github.com>
Signed-off-by: Alex Lewontin <alex.lewontin@canonical.com>
Signed-off-by: Alex Lewontin <alex.lewontin@canonical.com>
Signed-off-by: Alex Lewontin <alex.lewontin@canonical.com>
Signed-off-by: Alex Lewontin <alex.lewontin@canonical.com>
The aziotctl_common::config::write_file function first changes ownership
of a file, then changes the permissions.

Changing the permissions on a file owned by another user requires
CAP_FOWNER. While this is not normally a problem for root, the
assumption that root ALWAYS has CAP_FOWNER is erroneous (snaps are a
counter example).

This commit simply reorders the operation, so that the file is still
owned by the creator when the permissions get changed.

Signed-off-by: Alex Lewontin <alex.lewontin@canonical.com>
Signed-off-by: Alex Lewontin <alex.lewontin@canonical.com>
Signed-off-by: Alex Lewontin <alex.lewontin@canonical.com>
Signed-off-by: Alex Lewontin <alex.lewontin@canonical.com>
Co-authored-by: Damon Barry <damonb@microsoft.com>
@damonbarry damonbarry marked this pull request as ready for review March 1, 2024 00:19
@kodiakhq kodiakhq bot merged commit 9f5c079 into main Mar 1, 2024
152 checks passed
@kodiakhq kodiakhq bot deleted the feature/snapping branch March 1, 2024 00:20
damonbarry added a commit to damonbarry/iot-identity-service that referenced this pull request Mar 1, 2024
This change updates the repo to support building IoT Identity Service components as snaps. One of the main differences with snaps is that they run in a tightly confined sandbox, so many hard-coded references to users and filesystem paths had to be adapted to support compile-time variables.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants