lxd downloads inspector does not recognize request
Metadata
Current evaluation
Fixed by merged PR #462 (commit 34fa1ae), "fix(inspectors/lxd): detect releases image request": the LXD rootfs/simple-streams URL regex now matches /buildd/releases/<series>/<datestamp>/<image>.tar.gz as well as /buildd/daily. Tracked internally as FETCH-28.
Resolution: closed resolved
Reason: Maintainer cmatsuoka closed the issue with "Fixed in #462"; PR #462 merged as commit 34fa1ae, adding a "buildd/releases/noble/release-20250810/..." test case in inspectors/lxd/rootfs_test.go and documenting the pattern as /buildd/(daily|releases)/<series>/<datestamp>/<name>.tar.gz.
Evaluated by: mr-cal-bot
No scores available.
Issue body
### Bug Description
The `lxd.simple-streams.download` inspector does not recognize the following url: `http://cloud-images.ubuntu.com/buildd/releases/noble/release-20250810/noble-server-cloudimg-amd64-lxd_combined.tar.gz`. The actual response gets parsed fine, I think it's a problem with the regex.
I'm attaching the full session report, but it's quite big and has unrelated rejections:
[metadata-403-clean.json](https://github.com/user-attachments/files/22300353/metadata-403-clean.json)
### To Reproduce
Try to pack a `core24` snap with `edge` snapcraft. Not sure if `edge` snapcraft is needed but the craft tools have started pulling in from `buildd/releases/noble` instead of `buildd/daily` [somewhat recently](https://github.com/canonical/craft-providers/commit/dd365bff8f1af0c330159954f89ab0d69dbb7b77)
### Relevant log output
```shell
{
"artifact-metadata-version": "0.2",
"request-inspection": {
"default": {
"opinion": "Unknown",
"reason": "the request was not recognized by any format inspector"
}
},
"response-inspection": {
"lxd.rootfs": {
"opinion": "Approved",
"reason": "valid LXD rootfs tarball",
"annotations": {
"architecture": "x86_64",
"creation-date": 1754849594,
"os": "Ubuntu",
"series": "noble"
}
},
"lxd.simple-streams.download": {
"opinion": "Unknown",
"reason": "simple streams product item matches digest",
"annotations": {
"product-item-path": "noble/release-20250810/noble-server-cloudimg-amd64-lxd_combined.tar.gz",
"sha256": "d3ed9e5b640fd93762cacfa1ffcad6b7874023a3c063dcf0bd782ffde6c675ba"
}
}
},
"result": "Rejected",
"metadata": {
"type": "application/x.canonical.lxd-rootfs",
"sha1": "3b0a19ad8366a1804bef89901d5ec5544a090df2",
"sha256": "d3ed9e5b640fd93762cacfa1ffcad6b7874023a3c063dcf0bd782ffde6c675ba",
"size": 187589864,
"name": "LXD rootfs image",
"version": "1754849594",
"vendor": "",
"description": "Ubuntu buildd noble amd64",
"author": "",
"architecture": "amd64",
"license": ""
},
"downloads": [
{
"start-time": "2025-09-11T17:21:44.322579885Z",
"end-time": "2025-09-11T17:21:46.404545835Z",
"method": "GET",
"url": "http://cloud-images.ubuntu.com/buildd/releases/noble/release-20250810/noble-server-cloudimg-amd64-lxd_combined.tar.gz",
"address": "10.142.105.236:35848",
"user-agent": "LXD 5.21.4 LTS (Linux; x86_64; 6.8.0; Ubuntu; 22.04) (dir 1)",
"request-header": {
"Accept-Encoding": [
"gzip"
],
"Connection": [
"close"
],
"User-Agent": [
"LXD 5.21.4 LTS (Linux; x86_64; 6.8.0; Ubuntu; 22.04) (dir 1)"
],
"X-Fetch-Session-Id": [
"aec72c7e8eb2429ba173cd48a63c3128"
]
},
...
```
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Fixed by merged PR #462 (commit 34fa1ae), "fix(inspectors/lxd): detect releases image request": the LXD rootfs/simple-streams URL regex now matches /buildd/releases/<series>/<datestamp>/<image>.tar.gz as well as /buildd/daily. Tracked internally as FETCH-28. | |
| stealth/space-bunny-alpha | — | closed resolved | Fixed LXD buildd release-image request recognition by adding support alongside daily snapshots. Merged in canonical/fetch-service#462 via commit 34fa1ae. | |
| qwen/qwen3.6-35b-a3b | — | — | The lxd.simple-streams.download inspector regex failed to recognize specific cloud image URLs, rejecting valid downloads. The bug was resolved and merged in pull request #462. |
Update history
| Date | Change |
|---|---|
| created |
Related work
-
Likely Fixed By:
canonical/fetch-service#462
(confidence 99%)
Merged PR extending the LXD inspector URL regex to cover the releases path; issue comment cites it as the fix.
-
Related To:
canonical/fetch-service#427
(confidence 70%)
Original PR adding the lxd.simple-streams.download inspector whose regex was too restrictive.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #462 fix(inspectors/lxd): detect releases image request | fetch-service | merged | Merged PR #462 (34fa1ae) fixed LXD rootfs detection for release images as well as daily snapshots; the change shipped in fetch-service 0.10.0. | |
| #427 feat(i/lxd): simple streams download inspector for lxd | fetch-service | merged | Merged #427 as c3d099d, adding LXD Simple Streams download inspection to validate downloaded rootfs image digests against product listings. | |
| #434 fix(i/lxd): make lxd download inspector more strict | fetch-service | merged | Merged PR #434 as commit a7ebcd5, tightening LXD download format verification so Snap assertion downloads are not rejected. |