The following are included in the switch to strict confinement:
* Set snapcraft.yaml confinement to strict and restore/update plugs
* Drop building of python as it's not required for strict snaps
* Switch back to running apps under root
Change-Id: I4704cac75230df5514ce42cdd6cde2b7ad9ed9b3
Enable the ability for default config files to be overridden.
Also refresh the README while documenting how default config files can
be overridden.
Change-Id: I792475bd20adda2626bbf3775924a21c811df15e
The symlinks setup key is dropped, and SNAP_COMMON is used as the
root directory where setup dirs, templates, and copyfiles are
installed. This aligns better with how snaps should behave.
Change-Id: Ie9c6ba930798dcb6c0bfd43a6504d3fdb357befa
Classic confinement allows the snap to behave like a traditionally
packaged application with full access to the system, and enables the
use of traditional directories such as /etc and /var/log.
We will continue to store all of the snap's files in $SNAP* directories.
This enables the snap to cleanup after itself if it is removed. However,
traditional directory locations are symlinked to their corresponding
$SNAP* directories.
For example, glance configs are installed in $SNAP_COMMON/etc/glance
which has a symlink at /etc/glance.
The glance apps then use the traditional directories when running
commands and services.
Change-Id: Ic763f9c8f34ab3096e8592520db00cdf81b0d9ef
Corey Bryant