snap denials /etc/gitconfig

[julian-klode]

Running the hugo snap fails with

Building sites … ERROR 2019/08/15 19:04:04 Failed to read Git log: fatal: unknown error occured while reading the configuration files
Total in 125 ms
Error: Error building site: logged 1 error(s)

in dmesg I see:

[140780.553009] audit: type=1400 audit(1565888471.869:1669): apparmor="DENIED" operation="open" profile="snap.hugo.hugo" name="/etc/gitconfig" pid=22857 comm="git" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0                                                                    
[140780.553095] audit: type=1400 audit(1565888471.869:1670): apparmor="DENIED" operation="open" profile="snap.hugo.hugo" name="/etc/gitconfig" pid=22857 comm="git" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0     

[bep]

/cc @anthonyfok

[julian-klode]

You could probably simply set GIT_CONFIG_NOSYSTEM=true in the app launcher in snapcraft.yaml

[stale]

This issue has been automatically marked as stale because it has not had recent activity. The resources of the Hugo team are limited, and so we are asking for your help.
If this is a bug and you can still reproduce this error on the master branch, please reply with all of the information you have about it in order to keep the issue open.
If this is a feature request, and you feel that it is still relevant and valuable, please tell us why.
This issue will automatically be closed in the near future if no further activity occurs. Thank you for all your contributions.

[gerrywastaken]

Indeed running the server like so causes the issue to disappear:
GIT_CONFIG_NOSYSTEM=true hugo serve -D

Thanks @julian-klode !

[jmooring]

Reproducible with snap install of v0.80.0.

sudo git config --system foo.bar "baz"
sudo chmod 644 /etc/gitconfig
git clone --single-branch -b hugo-github-issue-6226 https://github.com/jmooring/hugo-testing hugo-github-issue-6226
cd hugo-github-issue-6226
hugo server

[anthonyfok]

This was fixed in

• Snap: Add {system,user}-gitconfig plugs to read gitconfig #9619 thanks to @ifurther

Once https://forum.snapcraft.io/t/system-files-and-personal-files-request-for-hugo/30598 is approved, the Snap store will allow newer versions of Hugo that can read gitconfig to enter the Snap Store, and then this issue can be closed.

Sorry for my 12-week delay in actually filing that store request.

[github-actions]

This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.