Please add build log link when one is available
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Snap Store Server |
Confirmed
|
Medium
|
Maximiliano Bertacchini | ||
Software Center Agent |
Fix Released
|
Medium
|
Maximiliano Bertacchini |
Bug Description
I remember talking about this a number of times but when I looked for a bug, I couldn't find one. Crossposted with the form at: https:/
Knowing the provenance of a snap revision can be a key component in trusting a snap and its publisher. It has always been planned that when we know where a snap came from (eg, an LP build, etc) the store would record the build log link in its database. Once it is in the database:
* the store could provide a link for the revision of the snap (eg, at https:/
* an API could be exposed so that a user can obtain the build log url
* snapd could at some point do interesting things with this information such as display the build log url with snap info, offer controls to the user to only allow installs/refreshes if a public build log is available, etc
This is particularly useful for the open source community for all the reasons why Linux distributions make their build logs public (indeed, just today I heard again "if only I could examine the build, I might be able to better trust the snap"). This is somewhat useful as a reviewer (though admittedly, we focus on the publisher, not the contents of the snap) and is one of the steps towards controls for enforcing constraints on the use of classic (https:/
affects: | software-center-agent → snapstore |
Changed in snapstore: | |
status: | Triaged → In Progress |
Changed in snapstore: | |
assignee: | Maximiliano Bertacchini (maxiberta) → nobody |
status: | In Progress → Confirmed |
Changed in snapstore: | |
assignee: | nobody → Maximiliano Bertacchini (maxiberta) |
Changed in snapstore: | |
status: | Confirmed → In Progress |
tags: | added: feature |
Launchpad has included this information in snaps it builds since late April or thereabouts (https:/ /code.launchpad .net/~cjwatson/ launchpad- buildd/ snap-image- info/+merge/ 341806): it's in image-info. build_url in snap/manifest.yaml. The store should be able to pick it up from there.