snapcraft.yaml missing network plug: strict snap cannot reach the daemon #621

New issue

Closed

opened 2026-08-09 19:18:06 +00:00 by the.auditor · 0 comments

the.auditor commented

2026-08-09 19:18:06 +00:00

Owner

packaging/snap/snapcraft.yaml uses confinement: strict but declares no plugs on the tpagectl app. A strict-confined snap cannot use the network unless it declares plugs: [network] (auto-connected only when declared). Since tpagectl is a pure HTTP client, the built snap would be unable to reach the daemon.

Add plugs to the app, e.g.:

apps:
  tpagectl:
    command: bin/tpagectl
    plugs: [network, home]

(home allows writing the config file; a dbus plug is additionally needed for Secret Service keychain use.)

See #620

`packaging/snap/snapcraft.yaml` uses `confinement: strict` but declares no plugs on the `tpagectl` app. A strict-confined snap cannot use the network unless it declares `plugs: [network]` (auto-connected only when declared). Since tpagectl is a pure HTTP client, the built snap would be unable to reach the daemon. Add plugs to the app, e.g.: apps: tpagectl: command: bin/tpagectl plugs: [network, home] (`home` allows writing the config file; a `dbus` plug is additionally needed for Secret Service keychain use.) See https://git.lan.thwap.org/thwap/thwap-pagesd/pulls/620

the.auditor added the

Kind/Bug

Priority

Medium

labels

2026-08-09 19:18:10 +00:00