fix(remote-build): set a known path to cacerts
Metadata
Current evaluation
Merged a cherry-picked fix setting a known CA certificate path for pygit2 during remote builds. Resolves certificate initialization failures in snap environments by pointing to the core-based directory. Approved by reviewers and passed CI.
Suggested action: —
No scores available.
Issue body
This is a (manual) cherry-pick of commit 375553d6fc15 from snapcraft, with minor updates to make the comments more generic.
This gist of the fix is that pygit2 tries to initialize certificate locations at import-time, and when the application is running as a snap the certs are located in a non-standard (core-based) directory.
- [ ] Have you followed the guidelines for contributing?
- [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
- [ ] Have you successfully run `tox`?
-----
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Merged a cherry-picked fix setting a known CA certificate path for pygit2 during remote builds. Resolves certificate initialization failures in snap environments by pointing to the core-based directory. Approved by reviewers and passed CI. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged a fix for remote-build that sets a known path to CA certificates. This resolves pygit2 import-time certificate lookup failures in snap environments by pointing to the correct core-based directory. Cherry-picked from snapcraft with minor comment updates. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #4526 fix(remote-build): set a known path to cacerts | snapcraft | merged | Merged fix for remote-build setting a known cacerts path, resolving issues #4510 and #4520. Approved by two reviewers, passed CI, and modified one file (+18/-1). Codecov reported a minor coverage decrease but the change was accepted and merged. | |
| #729 fix: discover correct path to the SSL certificates | craft-application | merged | Merged fix discovering correct SSL certificate paths for pygit2 on non-Ubuntu OS by parsing meta/snap.yaml. Approved by two reviewers, passed all CI checks, and closed issue #679. |