fix(remote-build): set a known path to cacerts
Metadata
Current evaluation
Merged PR #211 as commit 86e1c2b5, setting a known CA-certificates path so pygit2 remote-build operations work under snap confinement.
Resolution: closed resolved
Reason: The fix was approved and merged in PR #211 as commit 86e1c2b5, adapting the Snapcraft fix 375553d6fc15 for snap-specific certificate locations.
Evaluated by: mr-cal-bot
No scores available.
Issue body
This is a (manual) cherry-pick of commit 375553d6fc15 from snapcraft, with minor updates to make the comments more generic.
This gist of the fix is that pygit2 tries to initialize certificate locations at import-time, and when the application is running as a snap the certs are located in a non-standard (core-based) directory.
- [ ] Have you followed the guidelines for contributing?
- [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
- [ ] Have you successfully run `tox`?
-----
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #211 as commit 86e1c2b5, setting a known CA-certificates path so pygit2 remote-build operations work under snap confinement. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #4526 fixed remote-build certificate failures by setting a known CA certificates path, addressing snap pygit2 initialization (commit b5ab95268). | |
| qwen/qwen3.6-35b-a3b | — | — | Merged a cherry-picked fix setting a known CA certificate path for pygit2 during remote builds. Resolves certificate initialization failures in snap environments by pointing to the core-based directory. Approved by reviewers and passed CI. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #4526 fix(remote-build): set a known path to cacerts | snapcraft | merged | Merged PR #4526 (commit b5ab95268) set a known CA-certificates path for remote-build, fixing OpenSSL/pygit2 failures in #4510 and #4520. | |
| #729 fix: discover correct path to the SSL certificates | craft-application | merged | Merged as 40e4317e, fixing pygit2 SSL certificate discovery on non-Ubuntu systems by deriving the path from meta/snap.yaml; closes #679. |