← Back to issue list

feat: mknod intercepts now configurable from LXDProvider

View original Github issue

Metadata

Project
craft-providers
Number
#717
Type
pull request
State
merged
Author
mattculler
Labels
—
Created
Updated
Closed

Current evaluation

Merged #717, adding an intercept_mknod option to LXDProvider so dependent applications can enable or disable LXD mknod interception; released in 2.2.0.

Resolution: closed resolved

Reason: PR #717 was merged after approval and propagated intercept_mknod from LXDProvider to LXD instances. The 2.2.0 changelog confirms that dependent projects can disable LXD mknod interception.

Evaluated by: mr-cal-bot

No scores available.

Issue body

- [ ] Have you followed the guidelines for contributing? - [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)? - [ ] Have you successfully run `tox`? ----- Allow `craft-application`'s `ProviderService` to dis/allow intercepting `mknod` calls in LXD. https://github.com/canonical/craft-application/pull/607

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Merged #717, adding an intercept_mknod option to LXDProvider so dependent applications can enable or disable LXD mknod interception; released in 2.2.0.
qwen/qwen3.6-35b-a3b — closed resolved Merged, enabling configurable mknod intercepts in LXDProvider for craft-application's ProviderService.

Update history

Date Change
created

Related work

Related issues

Issue Project State Summary Similarity
#191 Don't set security.syscalls.intercept.mknod=true for LXD provider craft-providers closed Resolved by merged PR #717 (commit 6ceb498), released in 2.2.0: LXDProvider gained an intercept_mknod option so applications can disable automatic mknod interception.
80%
#607 feat: allow use of interceptable `mknod` in `ProviderService` craft-application open Wires ProviderService’s LXD setup to craft-providers’ new intercept_mknod argument, with tests. No failures are reported, but two requested-change reviews remain unresolved and many checks are pending.
75%
#3218 lxd: enable security.syscalls.intercept.mknod if supported to allow snaps to create some device nodes snapcraft merged Merged PR #3218 enabled LXD mknod interception only on supported kernels, allowing safe device-node creation while preserving compatibility with hosts such as Ubuntu 16.04.
73%