fix(remote-build): set a known path to cacerts
Metadata
Current evaluation
Merged PR #4526 (commit b5ab95268) set a known CA-certificates path for remote-build, fixing OpenSSL/pygit2 failures in #4510 and #4520.
Resolution: closed resolved
Reason: The maintainer-authored PR was approved by two reviewers and merged. Commit b5ab95268 resolves both linked certificate-path failures.
Evaluated by: mr-cal-bot
No scores available.
Issue body
- [ ] Have you followed the [guidelines for contributing](https://github.com/snapcore/snapcraft/blob/master/CONTRIBUTING.md)?
- [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
- [ ] Have you successfully run `make lint`?
- [ ] Have you successfully run `pytest tests/unit`?
-----
I personally tried this on Fedora
Fixes #4510
Fixes #4520
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #4526 (commit b5ab95268) set a known CA-certificates path for remote-build, fixing OpenSSL/pygit2 failures in #4510 and #4520. | |
| stealth/space-bunny-alpha | — | closed resolved | Set a known CA certificate path for pygit2 remote builds, fixing launch and OpenSSL certificate failures. Merged as PR #4526 in commit b5ab95268. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #4526 (commit b5ab95268) set a known CA-certificates path for remote-build, fixing OpenSSL/pygit2 failures reported in #4510 and #4520. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #4526 fixed remote-build OpenSSL certificate failures by setting a known CA certificates path, resolving #4510 and #4520 (commit b5ab95268). | |
| qwen/qwen3.6-35b-a3b | — | — | Merged fix for remote-build setting a known cacerts path, resolving issues #4510 and #4520. Approved by two reviewers, passed CI, and modified one file (+18/-1). Codecov reported a minor coverage decrease but the change was accepted and merged. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged fix configuring a known cacerts path for remote-build, resolving issues #4510 and #4520. Approved and merged by sergiusens despite minor Codecov coverage drop, standardizing certificate handling across environments. |
Update history
No update history recorded yet.
Related work
-
Related To:
canonical/snapcraft#4510
(confidence 100%)
Snapcraft launch failure addressed by the merged cacerts-path fix.
-
Related To:
canonical/snapcraft#4520
(confidence 100%)
Remote-build OpenSSL regression addressed by PR #4526.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #211 fix(remote-build): set a known path to cacerts | craft-application | merged | Merged PR #211 as commit 86e1c2b5, setting a known CA-certificates path so pygit2 remote-build operations work under snap confinement. | |
| #4520 regression: remote-build fails OpenSSL error | snapcraft | closed | Fixed remote-build's pygit2 TLS certificate failure by configuring a known CA-certificates path in commit b5ab95268; the fix was released to the candidate channel. |