cli: provide option to install ca certs into build environment
Metadata
Current evaluation
Merged PR #3224 as commit 7389ae516, adding --install-ca-certificates for custom CAs in LXD and Multipass builds.
Resolution: closed resolved
Reason: The approved PR was merged into Snapcraft as commit 7389ae516. It added CLI support for CA files or directories and installs them into LXD or Multipass build environments using update-ca-certificates.
Evaluated by: mr-cal-bot
No scores available.
Issue body
Allow user to specify a specific CA file, or directory of CA files,
to install into LXD or Multipass build environment.
- Adds `--install-ca-certificates <certs-path>` CLI option.
- Implement certification installation in base provider using
_push_file() and running `update-ca-certificates` on every launch.
- Update unit tests.
LP: #1807988
Signed-off-by: Chris Patterson <chris.patterson@canonical.com>
- [ ] Have you followed the [guidelines for contributing](https://github.com/snapcore/snapcraft/blob/master/CONTRIBUTING.md)?
- [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
- [ ] Have you successfully run `./runtests.sh static`?
- [ ] Have you successfully run `./runtests.sh tests/unit`?
-----
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #3224 as commit 7389ae516, adding --install-ca-certificates for custom CAs in LXD and Multipass builds. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged #3224 added --install-ca-certificates for LXD/Multipass, installing custom CA files on each build launch via update-ca-certificates (commit 7389ae516). | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #3224 added --install-ca-certificates for LXD and Multipass build environments; merged as commit 7389ae516. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #3224 added --install-ca-certificates, installing custom CA files into LXD and Multipass build environments via update-ca-certificates. Commit 7389ae516. | |
| stealth/space-bunny-alpha | — | closed resolved | PR #3224 merged, adding --install-ca-certificates to install custom CA files into LXD and Multipass build environments; unit tests were updated. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged PR adding the --install-ca-certificates CLI option to inject custom CA certificates into LXD and Multipass build environments. Uses _push_file() and update-ca-certificates, with tests and approval. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged. Introduces a --install-ca-certificates CLI flag to inject CA certificates into LXD or Multipass build environments. The implementation pushes certificate files and runs update-ca-certificates on launch. Code was tested, rebased, and merged. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #1807988 snapcraft should propagate proxy settings to multipass VMs | snapcraft (launchpad) | closed | Resolved by merged canonical/snapcraft#3224 (7389ae516), adding --install-ca-certificates for custom CAs in LXD and Multipass build environments. |