Allow disabling file-based keyring fallback
Metadata
Current evaluation
Add and document SNAPCRAFT_DISABLE_FILE_BASED_KEYRING so tools such as ubuntu-image can require credentials in the system keyring; still triaged and open.
Suggested action: keep open
Reason: The issue is explicitly marked Status: Triaged, and the current repository has no occurrence of SNAPCRAFT_DISABLE_FILE_BASED_KEYRING; its authentication documentation still says Snapcraft falls back to file-based storage. The variable and documentation requirements are precise, although implementation may also require coordination with the craft-store keyring backend.
Evaluated by: mr-cal-bot
Impact:
46
Quick Win:
19
Complexity:
52
Confidence:
91
Actionability:
84
Issue body
### What needs to get done
* Add an environment variable `SNAPCRAFT_DISABLE_FILE_BASED_KEYRING`.
* Document how to disable the file-based keyring backend.
### Why it needs to get done
Tools like [`ubuntu-image`](https://snapcraft.io/install/ubuntu-image/ubuntu) depend on keys created by snapcraft. If snapcraft uses a file-based backend, then other tools will have no access to those keys in the system keyring.
The user experience is confusing, because `snapcraft list-keys` will show keys that aren't accessible from the system keyring.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha |
Impact:
46
Quick Win:
19
Complexity:
52
Confidence:
91
Actionability:
84
|
keep open | Add and document SNAPCRAFT_DISABLE_FILE_BASED_KEYRING so tools such as ubuntu-image can require credentials in the system keyring; still triaged and open. | |
| qwen/qwen3.6-35b-a3b |
Impact:
35
Quick Win:
20
Complexity:
25
Confidence:
75
Actionability:
75
|
keep open | Enhancement to add SNAPCRAFT_DISABLE_FILE_BASED_KEYRING env var to disable file-based keyring fallback. Triaged and open, not yet implemented. | |
| qwen/qwen3.8-27b |
Impact:
40
Quick Win:
26
Staleness:
55
Complexity:
35
Confidence:
70
Support Request:
10
|
keep open | Enhancement to add SNAPCRAFT_DISABLE_FILE_BASED_KEYRING env var and docs so snapcraft can avoid the file-based keyring fallback, which hides keys from tools like ubuntu-image. Triaged (Status: Triaged, Type: Enhancement) but no implementation yet; craft-store already exposes a file_fallback flag. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
75
Complexity:
15
Confidence:
85
Support Request:
5
|
keep open | Enhancement to add an environment variable disabling the file-based keyring backend, addressing cross-tool key accessibility. Currently triaged but inactive for over six months with only a Jira sync comment. | |
| qwen3.6-35b-a3b-mtp-q6 |
Staleness:
75
Complexity:
20
Confidence:
75
Support Request:
10
|
keep open | Enhancement to add an environment variable disabling the file-based keyring backend, improving cross-tool key accessibility. Currently triaged but inactive for over a year. |
Update history
No update history recorded yet.
Related issues
No related issues found above the similarity threshold.