Re: ANN: snapcraft 2.28 has been released

[Neal Gompa]

On Sat, Apr 1, 2017 at 5:22 PM, John Lenton  wrote:
> On 31 March 2017 at 21:52, Neal Gompa  wrote:
>> we
>> definitely don't want to use less than SHA256 for snaps.
>
> note snaps use sha3-384 currently; the above discussion is, as I
> understand it, about snapcraft checking upstream checksums at build
> time.
>

Sure, but it's just as important that the inputs can be trusted for a
given snap created by snapcraft, and allowing people to choose weak
algorithms is against that.



-- 
真実はいつも一つ！/ Always, there's only one truth!

-- 
Snapcraft mailing list
Snapcraft@lists.snapcraft.io
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/snapcraft

Re: explicit priming

[Sergio Schvezov]

On Apr 1, 2017 3:51 AM, "Spencer Parkin"  wrote:

Hi,

My snapcraft.yaml file...

https://github.com/spencerparkin/TwistyPuzzle/blob/stable-release/Snap/
snapcraft.yaml

...as you can see, has a new "prime:" section in it.  This wasn't needed in
all my earlier snappings, but to finally get my program snapping correctly
again, I've had to explicitly add some things in there.  I suppose that
snapcraft may not be detecting the "libmir*.so*" files as dependencies.  Is
this a bug in snapcraft?  Why did I need to explicitly add my executable
files and my "Data" directory?  Are these no longer automatically added if
you start to explicitly prime things?


If you curso only added that bin entry you essentially created a whitelist
so all entries would need to be added.


Thanks.  Clearly I'm an novice snap crafter.

BTW, how is the snap/snapcraft project coming along?  Is it doing well,
poor?  Is it catching on?  Is it the ultimate in package technology!?


I cannot answer this question without looking biased 
-- 
Snapcraft mailing list
Snapcraft@lists.snapcraft.io
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/snapcraft

explicit priming

[Spencer Parkin]

Hi,

My snapcraft.yaml file...

https://github.com/spencerparkin/TwistyPuzzle/blob/stable-release/Snap/snapcraft.yaml

...as you can see, has a new "prime:" section in it.  This wasn't needed in
all my earlier snappings, but to finally get my program snapping correctly
again, I've had to explicitly add some things in there.  I suppose that
snapcraft may not be detecting the "libmir*.so*" files as dependencies.  Is
this a bug in snapcraft?  Why did I need to explicitly add my executable
files and my "Data" directory?  Are these no longer automatically added if
you start to explicitly prime things?

Thanks.  Clearly I'm an novice snap crafter.

BTW, how is the snap/snapcraft project coming along?  Is it doing well,
poor?  Is it catching on?  Is it the ultimate in package technology!?

Thanks,
--Spencer
-- 
Snapcraft mailing list
Snapcraft@lists.snapcraft.io
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/snapcraft