confinement: devmode is ignored by 'snap install'
Metadata
Current evaluation
Closed as working-as-designed: kyrofa and ycheng-twn explained `confinement: devmode` declares the snap unconfined, so snapd deliberately requires `snap install --devmode`; silently honouring it would be a security hole. Use the --devmode flag.
Resolution: closed not a bug
Reason: No code change was made; maintainers closed the bug explaining that a devmode-declared snap must be installed explicitly with `snap install --devmode`. kyrofa noted snapd intentionally refuses to silently switch to devmode because a malicious publisher could distribute an unconfined snap unnoticed. The documented workaround is the --devmode flag.
Evaluated by: mr-cal-bot
No scores available.
Issue body
OS: KDE Neon User edition (16.04 derivative)
snap version: 2.16ubuntu3
snapd version: 2.16ubuntu3
snapcraft version: 2.22.1
I'm creating a snap, and currently have the confinement property set to devmode. If I try and install it, it tells me that it cannot mount the snap because it requires devmode or confinement override. I've attached the snapcraft.yaml that I'm working on.
Steps to reproduce:
1. Run 'snapcraft' on the attached snapcraft.yaml
2. Run 'snap install *output.snap* --dangerous'
Actual result:
error: cannot perform the following tasks:
- Mount snap "chocolate-doom" (unset) (snap "chocolate-doom" requires devmode or confinement override)
Expected result:
The snap should install normally
Workaround:
Run snap install with the --devmode flag.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed not a bug | Closed as working-as-designed: kyrofa and ycheng-twn explained `confinement: devmode` declares the snap unconfined, so snapd deliberately requires `snap install --devmode`; silently honouring it would be a security hole. Use the --devmode flag. | |
| stealth/space-bunny-alpha | — | closed not a bug | Closed as working-as-designed: maintainers (kyrofa, ycheng-twn) explained snapd must be told --devmode to install an unconfined snap; silently honouring `confinement: devmode` would be a security hole. Use `snap install --devmode`. | |
| stealth/space-bunny-alpha | — | closed stale | Closed without a fix: Launchpad bug 1645151 was marked closed, but devmode snaps still require snap install --devmode rather than only snap install --dangerous. | |
| qwen/qwen3.6-35b-a3b | — | — | Closed without resolution or comments. The --devmode flag remains required for installation, as the manifest setting does not bypass the override requirement. | |
| qwen/qwen3.6-35b-a3b | — | — | Closed. Rejected as expected behavior; the --devmode flag remains mandatory during installation regardless of the YAML confinement setting. | |
| qwen/qwen3.6-35b-a3b | — | — | closed without resolution, likely abandoned. The snap install command continues to ignore devmode confinement from snapcraft.yaml, requiring the --devmode flag workaround. No fix was implemented or merged. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Abandoned without resolution or discussion. Installation still requires the --devmode flag despite devmode confinement being set in snapcraft.yaml. |
Update history
| Date | Change |
|---|---|
| created |
Related issues
No related issues found above the similarity threshold.