← Back to issue list

Please include .*.hmac files by default in stage and prime

View original Github issue

Metadata

Project
snapcraft
Number
#4310
Type
issue
State
open
Author
xnox
Labels
Created
Updated
Closed

Current evaluation

Request to include hidden .*.hmac files in default stage/prime copy patterns for FIPS kernel builds; unlabelled, no maintainer response, last activity 536 days ago.

Suggested action: needs triage

Reason: No labels, no comments, no assignee — no sign of maintainer triage. The reporter (xnox, a known Ubuntu kernel/snap contributor) describes a real gap: hidden .*.hmac files are not copied from CRAFT_PART_INSTALL to stage/prime, breaking FIPS kernel snaps, and works around it with an override-prime cp. No evidence in craft-parts or snapcraft that this was fixed (no 'hmac' matches in either repo), so it should be triaged rather than closed.

Impact: 55 Quick Win: 33.0 Staleness: 75 Complexity: 40 Confidence: 60 Support Request: 10

Issue body

### Bug Description when staging FIPS builds of packages that include hmac files - i.e. `.vmlinuz-5.15.0-1000-fips.hmac` corresponding to `vmlinuz-5.15.0-1000-fips` file, the `.*.hmac` files are not copied from CRAFT_PART_INSTALL into stage, and not copied from stage to prime. I guess none of the hidden files are currently copied by default (probably good), but `.*.hmac` files should be copied, as otherwise everything is broken. Please ensure that `.*.hmac` are included in the default copy file patterns to stage and to prime. ### To Reproduce n/a ### Environment n/a ### snapcraft.yaml ```yaml override-prime: | cp "$CRAFT_PART_INSTALL"/.kernel.efi-*.hmac "$CRAFT_PRIME"/.kernel.efi.hmac craftctl default ``` ### Relevant log output ```shell n/a ``` ### Additional context _No response_

Evaluation history

Date Model Scores Action Summary
qwen/qwen3.8-27b
Impact: 55
Quick Win: 33.0
Staleness: 75
Complexity: 40
Confidence: 60
Support Request: 10
needs triage Request to include hidden .*.hmac files in default stage/prime copy patterns for FIPS kernel builds; unlabelled, no maintainer response, last activity 536 days ago.
qwen/qwen3.6-35b-a3b
Staleness: 95
Complexity: 15
Confidence: 80
Support Request: 10
needs triage Request to include .*.hmac files in default stage and prime copy patterns for FIPS builds. Untriaged, inactive for over a year, no maintainer response.
qwen3.6-35b-a3b-mtp-q6
Staleness: 95
Complexity: 15
Confidence: 70
Support Request: 10
close stale Request to include .*.hmac files in default stage and prime copy patterns. Unlabelled, zero maintainer comments, and inactive for over three years.
qwen3.6-35b-a3b-mtp-q6
Staleness: 95
Complexity: 15
Confidence: 80
Support Request: 5
close stale .hmac files are excluded from default stage and prime copy patterns, breaking FIPS builds. Request to add .* .hmac to defaults. Open, unassigned, inactive for 460 days, needs triage.

Update history

No update history recorded yet.

Related issues

No related issues found above the similarity threshold.