← Back to issue list

Allow Custom Build Certificate Authority And Proxy Credentials

View original Launchpad issue

Metadata

Project
snapcraft (launchpad)
Number
#1859046
Type
issue
State
open
Author
~zicklag
Labels
certificate-authority http-proxy
Created
Updated
Closed
—

Current evaluation

LXD build proxy and custom CA support was implemented through proxy CLI/provider plumbing and an option for installing custom CA certificates in build environments.

Suggested action: close resolved

Reason: Commit 7389ae516 (canonical/snapcraft#3224) added the option to install custom CA certificates into build environments. Proxy support was subsequently added by df3222568 (#3884) and completed by 716a0474f (#3906), which passes HTTP and HTTPS proxy settings into craft-providers; current providers.py still exposes that plumbing for LXD builds.

Evaluated by: mr-cal-bot

Impact: 58 Quick Win: 31 Complexity: 44 Confidence: 91 Actionability: 96

Issue body

In my build environment, I am behind an HTTP proxy with SSL bump. This means that, when building snaps, I need to be able to configure the system certificate authority with my HTTP proxy's certificate and I need to be able to configure the `http_proxy`, `https_proxy`, and `no_proxy` environment variables. I am also building the snap inside a Vagrant VM that cannot support Multipass. This is a feature request asking for a way to provide HTTP proxy and certificate authority information to snapcraft when building with LXD. I have documented how I worked around this by using Docker in a forum topic: https://forum.snapcraft.io/t/how-to-build-a-snap-behind-a-proxy-with-ssl-bump-in-a-vagrant-vm/14975?u=zicklag.

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha
Impact: 58
Quick Win: 31
Complexity: 44
Confidence: 91
Actionability: 96
close resolved LXD build proxy and custom CA support was implemented through proxy CLI/provider plumbing and an option for installing custom CA certificates in build environments.
stealth/space-bunny-alpha
Impact: 56
Quick Win: 15
Complexity: 63
Confidence: 91
Actionability: 70
keep open Proxy variables now reach managed builds, including no_proxy, but custom CA injection for TLS-inspecting LXD builds remains unsupported; the related host-side trust failure is also open.
stealth/space-bunny-alpha
Impact: 47
Quick Win: 14
Complexity: 55
Confidence: 88
Actionability: 64
needs triage Proxy variables are now forwarded to build environments, but no custom CA-certificate injection support was found; the remaining request needs maintainer triage.
qwen/qwen3.8-27b
Impact: 35
Quick Win: 19
Staleness: 62
Complexity: 45
Confidence: 62
Support Request: 35
needs triage Feature request to pass HTTP proxy env vars and custom CA certificates to LXD build environments. Proxy vars (http_proxy, https_proxy, no_proxy) are now forwarded via PR #4973; CA portion appears unaddressed. Issue is 2426 days old with zero maintainer interaction.
qwen/qwen3.6-35b-a3b
Staleness: 95
Complexity: 45
Confidence: 90
Support Request: 10
close stale Feature request to pass custom CA certificates and HTTP proxy settings to LXD build environments in Snapcraft. Inactive for over two years with no maintainer response.
qwen/qwen3.6-35b-a3b
Staleness: 95
Complexity: 65
Confidence: 85
Support Request: 10
close stale Feature request to allow configuring custom certificate authorities and HTTP proxy credentials when building snaps with LXD. Currently unaddressed with no maintainer comments after over two years of inactivity.
qwen3.6-35b-a3b-mtp-q6
Staleness: 98
Complexity: 45
Confidence: 85
Support Request: 10
close stale Feature request to configure HTTP proxy and custom CA certificates when building snaps with LXD. Open for over 6 years with no maintainer response or comments.

Update history

Date Change
created

Related work

  • Likely Fixed By: canonical/snapcraft#3224 (confidence 99%)

    Commit 7389ae516 added the CLI option for installing custom CA certificates into the build environment.

  • Likely Fixed By: canonical/snapcraft#3906 (confidence 96%)

    Commit 716a0474f passes HTTP and HTTPS proxy configuration to craft-providers, following CLI parsing added in df3222568 (#3884).

Related issues

No related issues found above the similarity threshold.