← Back to issue list

Part's source directory needs to be read-only

View original Github issue

Metadata

Project
craft-parts
Number
#1026
Type
issue
State
open
Author
vpa1977
Labels
—
Created
Updated
Closed
—

Current evaluation

Request to protect part source directories from build-step mutations so subsequent builds produce consistent output; the reproducibility concern remains unassessed.

Suggested action: needs triage

Reason: The report identifies a concrete reproducibility failure: a build step may modify CRAFT_PART_SRC, causing the second build to differ. However, it provides no reproducer and does not define whether protection should cover all lifecycle steps or only builds, especially for plugins that intentionally modify sources; the issue also has no labels, maintainer response, or other triage evidence.

Evaluated by: mr-cal-bot

Impact: 58 Quick Win: 9 Complexity: 74 Confidence: 86 Actionability: 58

Issue body

### What needs to get done Part's source directory needs to be read-only. ### Why it needs to get done Writable source directory causes the inconsistent build results. The part's build step may modify the sources and the second build will produce different output.

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha
Impact: 58
Quick Win: 9
Complexity: 74
Confidence: 86
Actionability: 58
needs triage Request to protect part source directories from build-step mutations so subsequent builds produce consistent output; the reproducibility concern remains unassessed.
qwen/qwen3.6-35b-a3b
Impact: 50
Quick Win: 18
Complexity: 40
Confidence: 70
Actionability: 60
needs triage Feature request to make part's source directory read-only to prevent build steps from modifying sources and causing inconsistent build results. Unlabelled, no maintainer engagement.
qwen/qwen3.8-27b
Impact: 45
Quick Win: 11
Staleness: 82
Complexity: 75
Confidence: 78
Support Request: 10
needs triage Feature request to make part source directories read-only so build steps cannot modify sources and cause inconsistent rebuilds. No labels, no comments, no maintainer activity in ~550 days; no read-only enforcement found in current code.
qwen/qwen3.6-35b-a3b
Staleness: 90
Complexity: 45
Confidence: 85
Support Request: 10
needs triage Request to enforce read-only permissions on part source directories to prevent build-step modifications and ensure reproducible builds. Currently unlabelled and inactive for over 16 months.
qwen3.6-35b-a3b-mtp-q6
Staleness: 90
Complexity: 20
Confidence: 85
Support Request: 10
needs triage External contributor requested making the part's source directory read-only to prevent build steps from modifying sources and causing inconsistent build results. No maintainer response or labels after ~16 months.

Update history

No update history recorded yet.

Related issues

No related issues found above the similarity threshold.