Set PATH on the rock for bare bases
Metadata
Current evaluation
Closed without a repository fix. The request was tracked via internal Jira ticket CRAFT-3437, indicating the security improvement for bare base PATH configuration was moved to internal development rather than resolved here.
Suggested action: —
No scores available.
Issue body
### What needs to get done
When packing a rock with a `bare` base, set the `PATH` environment variable.
### Why it needs to get done
For security - an empty PATH will mean the implicitly addition of the current working directory.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Closed without a repository fix. The request was tracked via internal Jira ticket CRAFT-3437, indicating the security improvement for bare base PATH configuration was moved to internal development rather than resolved here. | |
| qwen/qwen3.6-35b-a3b | — | — | Closed without implementation. The request to set PATH for bare base rocks was synced to internal Jira ticket CRAFT-3437. No code changes or pull requests were merged. | |
| qwen/qwen3.6-35b-a3b | — | — | Setting PATH for bare base rocks was closed without implementation. No fix or merge details were provided, indicating the change was deferred or abandoned. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Closed and deferred to internal tracking via Jira ticket CRAFT-3437. The request to set PATH for bare base rocks was abandoned without a public fix or merge. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Request to configure PATH for bare base rocks was closed without implementation. No fix or pull request was submitted, indicating the task was abandoned. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #729 Improve detection/setting of the PATH environment variable | rockcraft | open | Rockcraft issue to generalize empty-PATH detection beyond bare-based rocks; set_default_path still only handles bare. Labeled good first issue, last activity 381 days ago. A contributor claimed #725 fixed it, but code confirms it's unfixed. | |
| #725 fix: set PATH on bare-based rocks | rockcraft | merged | Merged fix that sets the default Ubuntu PATH on bare-based rocks images to mitigate security risks if the Pebble entrypoint is bypassed. Approved by three reviewers, passed CI, and resolves issue #711. |