← Back to issue list

fix(i/lxd): make lxd download inspector more strict

View original Github issue

Metadata

Project
fetch-service
Number
#434
Type
pull request
State
merged
Author
cmatsuoka
Labels
—
Created
Updated
Closed

Current evaluation

Merged PR #434 as commit a7ebcd5, tightening LXD download format verification so Snap assertion downloads are not rejected.

Resolution: closed resolved

Reason: PR #434 was approved and merged into fetch-service as commit a7ebcd5. Its stricter Simple Streams format checks prevent non-matching Snap assertion downloads from being treated as LXD downloads and rejected.

Evaluated by: mr-cal-bot

No scores available.

Issue body

Snap assertion downloads may trigger rejections from the lxd download inspector. Make format verification more strict to avoid this. - [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)? -----

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Merged PR #434 as commit a7ebcd5, tightening LXD download format verification so Snap assertion downloads are not rejected.
stealth/space-bunny-alpha — closed resolved Merged PR #434 (commit a7ebcd5), tightening LXD download format verification so Snap assertion downloads are not rejected.
stealth/space-bunny-alpha — closed resolved Merged #434, tightening LXD download inspector format verification to prevent snap assertion downloads from being rejected.
qwen/qwen3.6-35b-a3b — — Merged a fix making the LXD download inspector format verification stricter to prevent snap assertion download rejections. Approved by two reviewers, passed CI checks, and modified six files with 79 additions and 12 deletions.

Update history

Date Change
created

Related issues

Issue Project State Summary Similarity
#427 feat(i/lxd): simple streams download inspector for lxd fetch-service merged Merged #427 as c3d099d, adding LXD Simple Streams download inspection to validate downloaded rootfs image digests against product listings.
72%
#456 lxd downloads inspector does not recognize request fetch-service closed Fixed by merged PR #462 (commit 34fa1ae), "fix(inspectors/lxd): detect releases image request": the LXD rootfs/simple-streams URL regex now matches /buildd/releases/<series>/<datestamp>/<image>.tar.gz as well as /buildd/daily. Tracked internally as FETCH-28.
71%