signed model prohibits to override channel, which is still signed

Bug #1856037 reported by Dimitri John Ledkov
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
snapd
Won't Fix
High
Samuele Pedroni

Bug Description

$ ubuntu-image snap --snap snapd=edge ubuntu-core-20-amd64.model
error: cannot override channels, add local snaps or extra snaps with a model of grade higher than dangerous
COMMAND FAILED: snap prepare-image --snap=snapd=edge ubuntu-core-20-amd64.model /tmp/tmpb73d23mh/unpack

$ grep grade ubuntu-core-20-amd64.model
grade: signed

I should be allowed to change channel, of a signed model.

Tags: core20
Changed in snapd:
assignee: nobody → Samuele Pedroni (pedronis)
Changed in snapd:
status: New → Triaged
importance: Undecided → High
Revision history for this message
Samuele Pedroni (pedronis) wrote :

As we discussed recently:

* it is the conceptual intention for signed to mean the run system after installation is defined by signed data, channel overrides would not be signed
* many projects level of gating to their edge channel might pose a slight risk if we would let signed systems use snaps from edge channels

Based on this marking as Won't Fix

Changed in snapd:
status: Triaged → Won't Fix
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.