← Back to issue list

snapcraft and Snap Store validation rules mismatch for `classic` snaps

View original Github issue

Metadata

Project
snapcraft
Number
#5595
Type
issue
State
open
Author
dmitry-lyfar
Labels
Status: Triaged Type: Bug
Created
Updated
Closed

Current evaluation

Classic snaps with managed unix sockets cannot be published: snapd's snap pack requires the network-bind plug for sockets, but the store rejects classic snaps with plugs. Triaged and blocked on snapd/review-tools (LP bug 2117121); maintainer keeping it open.

Suggested action: keep open

Reason: Maintainer @mr-cal explicitly triaged this (Status: Triaged, Type: Bug labels) and stated on 2025-07-17: 'we'll leave this issue open here until it's resolved between snapd and review-tools.' The fix is external to snapcraft (snapd validate.go vs review-tools policy), tracked in upstream LP bug 2117121, so it should stay open as a tracked blocker even though it has been quiet for over a year.

Impact: 45 Quick Win: 18.0 Staleness: 65 Complexity: 60 Confidence: 85 Support Request: 10

Issue body

### Bug Description It's not possible to publish a `classic` snap that has a daemon with a managed unix socket, something like this: ``` myd: environment: command: commands/run_daemon daemon: notify restart-condition: on-failure sockets: unix: listen-stream: $SNAP_COMMON/myd/myd.socket socket-mode: 0666 plugs: - network-bind ``` due to the difference between snapcraft (aka `snap pack` from snapd in this case) validation rules and the store's validation rules. The former will respond with: ``` Cannot pack snap: error: cannot validate snap "workshop": invalid definition of application "workshopd": "network-bind" interface plug is required when sockets are used Detailed information: Command '['snap', 'pack', '--check-skeleton', PosixPath('/root/prime')]' returned non-zero exit status 1. ``` If the plug is removed then, then the snap will be packed but the Store will complain on upload: ``` - confinement 'classic' not allowed with plugs/slots ``` See also https://github.com/canonical/snapd/blob/846d56dff4ac86e820d20ad5157f522de4df6db6/snap/validate.go#L917 ### To Reproduce See the description. ### Environment - Ubuntu 24.04 LTS ### snapcraft.yaml ```yaml myd: environment: command: commands/run_daemon daemon: notify restart-condition: on-failure sockets: unix: listen-stream: $SNAP_COMMON/myd/myd.socket socket-mode: 0666 plugs: - network-bind ``` ### Relevant log output ```shell See the description. ``` ### Additional context _No response_

Evaluation history

Date Model Scores Action Summary
qwen/qwen3.8-27b
Impact: 45
Quick Win: 18.0
Staleness: 65
Complexity: 60
Confidence: 85
Support Request: 10
keep open Classic snaps with managed unix sockets cannot be published: snapd's snap pack requires the network-bind plug for sockets, but the store rejects classic snaps with plugs. Triaged and blocked on snapd/review-tools (LP bug 2117121); maintainer keeping it open.
qwen/qwen3.6-35b-a3b
Staleness: 65
Complexity: 40
Confidence: 95
Support Request: 5
keep open Validation rule mismatch for classic snaps with managed unix sockets between snapcraft and Snap Store. Triaged, tracked internally, and kept open pending upstream fix.
qwen3.6-35b-a3b-mtp-q6
Staleness: 65
Complexity: 70
Confidence: 95
Support Request: 5
keep open Mismatch between snapcraft and Snap Store validation rules prevents publishing classic snaps with unix sockets. Maintainer acknowledged and will keep open until upstream snapd/review-tools resolve the conflict.
qwen3.6-35b-a3b-mtp-q6
Staleness: 35
Complexity: 50
Confidence: 90
Support Request: 10
keep open Validation mismatch between snapcraft and Snap Store blocks publishing classic snaps with managed unix sockets. Adding network-bind fails snapcraft, removing it fails store upload. Triaged and open, awaiting upstream resolution in snapd and review-tools.

Update history

No update history recorded yet.

Related work

  • Blocked By: snapd#2117121 (confidence 80%)

    Upstream Launchpad bug (bugs.launchpad.net/snapd/+bug/2117121) filed by the reporter on 2025-07-17; the snapd/review-tools validation mismatch must be resolved there before snapcraft users can publish such snaps.

Related issues

No related issues found above the similarity threshold.