Set PATH on the rock for bare bases
Metadata
Current evaluation
Fixed in canonical/rockcraft#725 via commit b81a12c8, which sets Pebble's standard PATH on bare-based rock images.
Resolution: closed resolved
Reason: PR #725 was merged with commit b81a12c8, adding the default Pebble PATH to bare-based rock images and documenting the change.
Evaluated by: mr-cal-bot
No scores available.
Issue body
### What needs to get done
When packing a rock with a `bare` base, set the `PATH` environment variable.
### Why it needs to get done
For security - an empty PATH will mean the implicitly addition of the current working directory.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Fixed in canonical/rockcraft#725 via commit b81a12c8, which sets Pebble's standard PATH on bare-based rock images. | |
| stealth/space-bunny-alpha | — | closed resolved | Fixed in canonical/rockcraft#725 via commit b81a12c8, which sets Pebble’s standard PATH on bare-based rock images. | |
| qwen/qwen3.6-35b-a3b | — | — | Closed without a repository fix. The request was tracked via internal Jira ticket CRAFT-3437, indicating the security improvement for bare base PATH configuration was moved to internal development rather than resolved here. | |
| qwen/qwen3.6-35b-a3b | — | — | Closed without implementation. The request to set PATH for bare base rocks was synced to internal Jira ticket CRAFT-3437. No code changes or pull requests were merged. | |
| qwen/qwen3.6-35b-a3b | — | — | Setting PATH for bare base rocks was closed without implementation. No fix or merge details were provided, indicating the change was deferred or abandoned. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Closed and deferred to internal tracking via Jira ticket CRAFT-3437. The request to set PATH for bare base rocks was abandoned without a public fix or merge. |
Update history
No update history recorded yet.
Related work
-
Likely Fixed By:
canonical/rockcraft#725
(confidence 100%)
Merged PR implementing the PATH change in commit b81a12c8.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #725 fix: set PATH on bare-based rocks | rockcraft | merged | Merged in #725 via commit b81a12c8, setting Pebble’s standard Ubuntu PATH on bare-based rock images to avoid an empty or unset image PATH. | |
| #1170 missing sticky bit in PEBBLE_PATH | rockcraft | closed | Rockcraft now sets Pebble's default directory to mode 01777, adding the missing sticky bit; the fix was merged in canonical/rockcraft#1317 (88c7ae17). |