Execute parts as `run_user`

Metadata

Project: rockcraft
Number: #1291
Type: issue
State: open
Author: sed-i
Labels: —
Created: 2026-07-09 07:21 AM UTC
Updated: 2026-07-21 02:49 PM UTC
Closed: —

Current evaluation

Feature request: run all parts as the non-root UID/GID when `run_user: _daemon_` is declared, removing manual chown/chmod overrides. Open, unlabelled, no maintainer response; only an outside contributor asked to work on it.

Suggested action: needs triage

Reason: The issue has no labels, no assignee and no maintainer comment — the only comment is from @OchukoWH (2026-07-21) asking 'is this issue still open? I would love to work on it', which is not triage. It is a valid but under-specified feature: the body states the goal ('execute all parts as the non-root UID, GID by default') but gives no acceptance criteria or example of the expected outcome, leaving ambiguity about whether all parts (including extension/service-generated ones) become non-root and how existing root-assuming recipes are handled. Repository tooling was unavailable ('No pinned SHA available for project rockcraft'), so I could not confirm whether run_user: _daemon_ handling already exists in the current code, which caps confidence.

Evaluated by: mr-cal-bot

Impact: 30 Quick Win: 5 Complexity: 65 Confidence: 55 Actionability: 45

Issue body

### Check existing issues - [x] I've verified that this request isn't described by any existing issues. ### Request Following up on #1290, it would be handy if, as soon as `run_user: _daemon_` is declared, rockcraft would execute all parts as the non-root UID, GID by default, to avoid needing `chmod`s and `chown`s in `*-override` sections. Ref: - https://github.com/canonical/alertmanager-rock/pull/64 ### The problem it solves Currently, non-root setup is quite manual and pollutes pristine rockcraft.yaml with manual steps.

Evaluation history

Date	Model	Scores	Action	Summary
2026-10-02 08:27 PM UTC	stealth/space-bunny-alpha	Impact: 30 Quick Win: 5 Complexity: 65 Confidence: 55 Actionability: 45	needs triage	Feature request: run all parts as the non-root UID/GID when `run_user: _daemon_` is declared, removing manual chown/chmod overrides. Open, unlabelled, no maintainer response; only an outside contributor asked to work on it.
2026-09-24 09:17 PM UTC	stealth/space-bunny-alpha	Impact: 55 Quick Win: 9 Complexity: 74 Confidence: 92 Actionability: 64	needs triage	Requests executing all parts as UID/GID 584792 when run_user is _daemon_, eliminating manual chown/chmod overrides; open, unlabelled, and awaiting maintainer triage.
2026-09-05 04:16 PM UTC	qwen3.6-35b-a3b-mtp-q6	Impact: 70 Quick Win: 28 Staleness: 45 Complexity: 60 Confidence: 70 Support Request: 20	needs triage	Feature request to execute parts as run_user to avoid manual chmod/chown steps. Open for contribution, awaiting maintainer triage.
2026-07-22 02:48 PM UTC	qwen/qwen3.6-35b-a3b	Staleness: 20 Complexity: 60 Confidence: 85 Support Request: 0	keep open	Feature request to automatically execute parts as run_user to avoid manual chmod/chown steps. Open for contribution.
2026-07-09 08:05 AM UTC	qwen3.6-35b-a3b-mtp-q6	Staleness: 5 Complexity: 45 Confidence: 90 Support Request: 10	needs triage	Feature request to automatically run all build parts as a non-root user when run_user is specified, avoiding manual permission overrides. Currently unlabelled and awaiting maintainer review.

Update history

Date	Change
2026-07-21 02:49 PM UTC	updated

Related work

Related To: rockcraft#1290 (confidence 90%)
Explicitly cited in the body ('Following up on #1290'); that issue asks for dedicated daemon UID/GID variables instead of hardcoding 584792, so both target the same manual non-root setup pain.

Related issues

No related issues found above the similarity threshold.