Skip to content

Set Linux confinement to classic#1154

Closed
Stefterv wants to merge 1 commit intoprocessing:mainfrom
Stefterv:classic-confinement
Closed

Set Linux confinement to classic#1154
Stefterv wants to merge 1 commit intoprocessing:mainfrom
Stefterv:classic-confinement

Conversation

@Stefterv
Copy link
Copy Markdown
Member

@Stefterv Stefterv commented Jun 19, 2025 •
edited
Loading

Snap’s containment features seemed like a good way to offer a more secure binary, so we initially opted in. In hindsight, that choice introduced more restrictions than expected for Processing’s typical use cases, particularly in education or when using serial devices, custom libraries, or sketches that expect full file access.

See further discussion here: https://discourse.processing.org/t/integration-of-processing-into-ubuntu/46568/5

  • Request Classic confinement from Snap

Fixes #1186
Fixes #1147
Fixes #1119
Fixes #995

@Stefterv
Copy link
Copy Markdown
Member Author

Stefterv commented Jun 19, 2025

Setting the confinement to classic directly breaks forks of the repo that will not get this permission. So would need to be migrated to an environment variable.

@Stefterv
Copy link
Copy Markdown
Member Author

Stefterv commented Jun 19, 2025

Also looks like - confinement 'classic' not allowed with plugs/slots the existing plugs would need to be removed

@SableRaf
Copy link
Copy Markdown
Collaborator

SableRaf commented Jul 16, 2025

Request for classic confinement has been made: https://forum.snapcraft.io/t/classic-confinement-request-for-processing/47746

@SableRaf SableRaf mentioned this pull request Jul 16, 2025
Open
@Stefterv Stefterv added this to the 4.4.6 milestone Aug 11, 2025
@Stefterv Stefterv closed this Aug 14, 2025
@SableRaf