Permission denied when removing a snap

[james beedy]

Hello,

I am experiencing an issue where snaps cannot be removed on systems with non-native users.

In my scenario, a machine is joined to AD, and autofs and sssd are configured to mount a user's NFS home upon login.

For my user jamesbeedy,

$ juju ssh jamesbeedy@100

jamesbeedy@witty-lion:~$ pwd
/home/jamesbeedy

$ mount | grep jamesbeedy
mynfsserver.com:/gen-home/jamesbeedy on /home/jamesbeedy type nfs (rw,relatime,vers=3,rsize=131072,wsize=524288,namlen=255,hard,proto=tcp,timeo=600,retrans=2,sec=sys,mountaddr=10.254.253.183,mountvers=3,mountport=300,mountproto=udp,local_lock=none,addr=10.254.253.183)

If I install a snap as root, and then use it as my jamesbeedy user, a directory is created in my nfs home, /home/jamesbeedy/snap/pypi-server, which seems to present issues when trying to refresh or remove the snap (see https://paste.ubuntu.com/p/zPXgxmyCF5/).

`journalctl -u snapd --no-pager` shows https://paste.ubuntu.com/p/dsh8ybgKzF/

`kern.log` shows https://paste.ubuntu.com/p/xX46SccZhF/

I'm wondering if there is a known solution to using snaps on systems with non-native users?

Thanks

[Michael Vogt (mvo)]

Thanks for your bugreport.

I created https://github.com/snapcore/snapd/pull/12520 with an addition for our test suite to check if this is easily reproducible.

[Michael Vogt (mvo)]

Can you please check if mounting with "no_root_squash" fixes the issue? Looking at our tests I noticed that we mount with that option.

[james beedy (jamesbeedy)]

hey @mvo, thanks for the response here. Using "no_root_squash" is not an option.

[Billy Olsen (billy-olsen)]

Moving this back to new per the comment in #3.

[james beedy (jamesbeedy)]

@mvo, do you have any other insight on how we might address the issue?

Thanks

[james beedy (jamesbeedy)]

Hello 👋 @mvo and @miguelpires1 - would either of you be willing to have a quick chat about this issue?

Thanks