=== tonyy is now known as tonyyarusso === _jason is now known as jrib [01:31] Hello World! Is it safe to upgrade the hardy kernel to 2.6.24? [01:31] nanley: If you want safe, don't run Hardy. [01:31] lol [01:31] point taken [01:31] * ScottK is not kidding. [01:32] well, safe as in the kernel is the same one that will be in alpha 2? [01:32] or something ready for testing [01:37] * ScottK doesn't know (not running it), but since a lot of kernel stuff is hardware specific, even if I said it worked for me, I don't know what that would really tell you. [01:37] alrighty =] === Fujitsu_ is now known as Fujitsu [04:21] * Hobbsee stabs add & remove programs [04:21] and apport fails too. hurrah [04:26] Hobbsee: but does apport handle its own crashes? :) [04:28] If it doesn't crash repeatedly, maybe it will. [04:28] weird apt-get problem.... dpkg is hanging around defunct for ages after each package.... apt-get is blocking on read(18, ), which is /dev/ptmx === Hobbsee_ is now known as Hobbsee === stu1 is now known as stub [05:14] 0So far, only 8 packages have FTBFS, which is a good sign. [05:16] surely there should be 0 FTBFS packages? [05:22] Hobbsee: You would hope so, but I haven't investigated the exact reasons yet. I'll get as many cleared as ok building and uploaded as I can, then fix up those that FTBFS. [05:49] TheMuso: scary how many packages we still have that depend on glib1.2... [05:49] slomo: They're fighting for buildd attention, I bet [05:51] slomo: Yes, there are heaps. [05:51] 220 odd source packages that need rebuilding. [05:51] they should just disappear *shrug* :) === \sh_away is now known as \sh [07:33] greetings everybody! [07:33] Hola [07:38] hi mpt [07:38] hello MacSlow [07:42] hey MacSlow, mpt [07:43] hi Burgundavia [07:44] how goes facebrowser? [07:46] spec is place... now time for research and devel [07:46] MacSlow, I have a question about Visual Effects [07:46] I remember back in the 1990s it was a huge advance when OSes got live resizing for windows [07:47] and with Visual Effects set to "None", windows have live resizing [07:47] but with the more blingy settings, they don't [07:48] Any particular reason for that? [07:49] mpt, there was no spec or planning at all for the whole set of settings for compiz-plugins [07:49] mpt, I think to remember that some people replied that window-resizing got "terribly slow" for them [07:49] oh, ok [07:49] So live resizing is slower with Compiz than with Metacity? [07:50] mpt, the way the compiz-folks "fixed" it was setting it to this rectangle-mode [07:50] I see [07:50] mpt, only for some GPUs/drivers [07:51] mpt, e.g. on i915 and i965 I don't see the issues [07:54] mpt, I'm certain that the issue people complain about regarding live-resizing windows under compiz will be a thing of the past once the new DRI2 and other Xorg-related things are fully implemented. [07:54] mpt, it will e.g. also provide "zero copy" texture-from-pixmap [07:57] ok [08:07] mpt, there are also some ideas floatint around to speed up live-resize under compiz before those DRI2/Xorg-related pieces are in place... one of them is to allocate larger textures for holding the redirected windows, thus a texture does not have to be reallocated if a window is resized, which in turn speeds up the resizing-process under compiz [08:07] hi pitti [08:09] Hi MacSlow [08:09] Good morning [08:09] hey MacSlow, hi lool [08:10] Salut lool [08:12] keescook: Congrats! [08:20] how do I contribute to the awesome project known as Ubuntu [08:20] sleepster: it depends on what you want to do :) http://www.ubuntu.com/community/participate [08:22] good morning [08:23] you too... [08:23] good Chuck Norris [08:24] question: can I invalid a bug, even if i'm not a member of anything in particular?(bugsquad or whatelse...) [08:26] pochu I want to do everything [08:27] pochu I want to make this the best dang OS in the WORLD [08:27] where do I sign up? [08:28] no need to sign up anywhere, just do it ;-) [08:28] gaspa: Yes. [08:28] Fujitsu: ok, thanks. [08:30] hey mvo, hey seb128 [08:30] good morning Daniel [08:31] hey dholbach! [08:31] hey seb128 [08:32] how do I get involved with a project? [08:32] I read throught he wiki [08:32] s/he/the [08:32] mvo: I didn't do the vte merge so if you want to work on it today ;-) [08:32] sleepster: do you mean a project in Ubuntu? [08:33] seb128: sure, I can do it today [08:34] * seb128 hugs mvo [08:37] good morning mvo! [08:40] * pitti hugs The"♪ I shot the buildd! ♫"Muso [08:41] TheMuso: wouldn't it make sense to use some delay between uploads for such transitions? [08:42] * persia wonders why [08:43] persia: why what? [08:43] Why delay between uploads for a transition. [08:43] to not overload buildds and let a chance to normal uploads to build [08:46] seb128: well, most of the stuff is universe, so main packages will be built first anyway [08:47] pitti: right but still [08:47] it's more a question of mirror load [08:47] pitti: I though it was good practice to not upload hundred in packages in a row [08:47] right, it still is [08:48] speaking of mirror load, I moved OO.o to gutsy-updates yesterday; the DC will love me, I'm sure [08:49] pitti: do you know if there is any hardy language pack update scheduled? [08:49] seb128: in fact the export was started last week, let me check [08:49] https://translations.edge.launchpad.net/ubuntu/hardy/+language-packs [08:49] nothing yet [08:50] oki [08:51] pitti: does language-pack-gnome-*-base get updated in -updates? [08:52] LaserJock: -base is generally stable in a release [08:52] LaserJock: we did a refreshing in dapper because the update packages got too big [08:52] but it's seldom [08:52] ok, so if there are updates they should go in language-pack-gnome-* ? [08:52] right [08:53] * pitti puts a strawberry and a piece of chocolate on top of bug 163794 for mvo :) [08:54] pitti: do they install to the same place? doesn't that create a conflict? [08:54] Launchpad bug 163794 in tzdata "New timezone data 2007j" [Undecided,Fix committed] https://launchpad.net/bugs/163794 [08:54] LaserJock: they do, that's why they Replace: each other [08:54] * mvo hugs pitti [08:54] ah [08:55] pitti: I'm trying to track down why gcompris was not included in the latest lang pack updates [08:55] hm, but it was in the final gutsy ones? [08:56] yes [08:56] I'm told it's in -base but not in the latest updates [08:57] ./language-pack-gnome-sv/data/sv/LC_MESSAGES/gcompris.po [08:57] hm, that's the only one [08:57] (in -updates) [08:58] * pitti does the magic dance to summon carlos [08:58] hmm [08:58] I gave carlos the .pot and I think he said it should be included in the next update [08:59] <\sh> keescook, jdstrand : bug #164501 , gutsy fixes attached...ready for review...thx :) [09:00] Launchpad bug 164501 in wireshark "more security issues with wireshark from 0.99.6 down to ..." [Undecided,In progress] https://launchpad.net/bugs/164501 [09:01] pitti: carlos is on holidays for the month I think [09:06] seb128, pitti: Point taken. They were done in batches, 5 or so minutes appart, once I had confirmed that the packages had built. I still have more left, and I will make an effort to stagger them moreso from now on. [09:07] TheMuso: well, some minutes will make no difference [09:09] seb128: Fair enough, as I said, I'll stagger what I have left moreso than what I tried to do earlier. [09:09] thanks [09:10] pitti: well, I guess I'll email the Rosetta admins and make sure we can make the next lang pack update [09:11] LaserJock: right [09:11] I'll make sure to check the PPA language-pack-gnome-* earlier ;-) [09:12] speaking of which... [09:12] * pitti reenables the dailies [09:13] * LaserJock apologizes to upstream again [09:53] pitti: #163794 is done [09:54] * pitti hugs mvo [09:55] bug #163794 [09:55] Launchpad bug 163794 in tzdata "New timezone data 2007j" [Undecided,Fix committed] https://launchpad.net/bugs/163794 === Amaranth_ is now known as Amaranth [10:05] pitti, are you caring for the pulse transition ? and are you aware that flash wont work with pulse ? [10:06] ogra: transition> ted will do the remainign desktop bits (which mixers to install by default, etc.) [10:06] ogra: flash> no, I'm not; can you please tell my flash plugin that it isn't supposed to work? [10:06] we'll need libflashsupport if we want to use it as default [10:06] ogra: IOW how do you mean? [10:07] Hi [10:07] pitti, http://www.pulseaudio.org/ticket/43 [10:08] there is a lib that fixes the issue, but its very badly packaged upstream and links against lgpl and libssl ... crimsun has a branch linking against tls we should put in the distro https://code.edge.launchpad.net/libflashsupport-pulse [10:08] ogra: doesn't it work for you? flashplugin-nonfree works like a charm for me [10:08] pitti, not on ltsp where we use pulse transport ... [10:09] i'm assuming with pulse as default for the whole desktop the prob will be similar [10:09] ah, then it probably works for me because I don't play anythign over pulse while watching a youtube video, or so [10:10] ogra: can you add that to https://wiki.ubuntu.com/DesktopTeam/Specs/CleanupAudioJumble ? [10:10] i'm not sure, its probably only netwrok transport related (the bug doesnt say much about that)) [10:10] yup, adding [10:10] i'll package the lib anyway, just thought i should point you guys to it [10:10] ogra: thanks [10:11] * TheMuso is actually looking to use padsp to get espeak using portaudio v19 to work via pulse. Initial testing looks good, but I need to play some more. [10:11] ogra: Is setting up LTSP for hardy different to how its done for gutsy et al? [10:11] TheMuso, nope [10:12] ogra: Great, thanks. [10:12] This release, I *REALLY* want speech for that environment to work. [10:12] TheMuso, sudo apt-get install ltsp-server ltsp-server-standalone && sudo ltsp-build-client [10:12] well, it only needs to use the virtual alsa device we have in the users session ... [10:12] ogra: And what needs to happen on the client side? [10:12] nothing [10:13] Ok. [10:13] ltsp-build-client sets up everything for you [10:13] the client just needs to PXE or etherboot from the network [10:13] Ok thanks. [10:14] * TheMuso will obviously have to take down his DHCP server temporarily for this to work, unless theres a way for it to play nice with an existing server [10:14] if i find the time i'll put up a wikipage how to set up a virtualbox thinclient with sound so you can test (indeed its hard to find out if the sound really comes from virtualbox there :) ) [10:14] ogra: Thats why I'd rather use real hardware. [10:15] yea, me too, but i travel a lot and there virtalbox comes in handy ... ;) [10:15] Yep understandable. [10:15] and a thin client in VB doesnt take much (no disk involved) [10:16] Yep. [10:17] ogra: SO does ltsp set up its own DHCP? If so, can that be disabled and adjusted to use an existing server? I'd rather not take down my home network DHCP server if I can help it. [10:18] yup, it can [10:18] Ok thanks. [10:18] ogra: hm, maybe set up the mixer in the VB instance so that it only outputs to the left channel or so? :) [10:18] to make it easier, change my above command to: [10:19] sudo apt-get install ltsp-server libasound2-plugins ltspfs openssh-server nbd-server && sudo ltsp-build-client :) [10:19] that will avoid dhcpd to be installed at all [10:20] but indeed you need some manual work on the existing dhcp server then [10:20] ogra: but then you certainly have to set up your existing dhcp server to have the tftp? [10:20] no, you only need a next-server directive to point to your ltsp server [10:20] so the clients pull their tftp stuff from there [10:20] oh, handy [10:21] ogra: Ok great. What is this virtual alsa device you create, how is it created, and I assume all pulse utilities will see the pulse server anyway and just work? [10:22] thats actually all you need nowadays, since we dont use nfs anymore you dont even need rootpath set :) [10:22] ogra: Oh, much nicer! [10:22] ogra: what do you uuse then? [10:23] TheMuso, pulse runs on the client listening for connections from the server ... in the users session we a) set PULSE_SERVER to point to the client on login and b) run asoundconf set-pulseaudio which creates a virtual alsa device for that etwork tunnel ... usually apps only need to make use of this alsa device then [10:24] Right. [10:24] Chipzz, nbd+squashfs+unionfs :) imagine a liveCD netbooting :) [10:24] oh :) [10:25] th only prob here is that you actually need to reboot all clients if you make changes to the image .... so we keep nfs as an option, but the default is ndb ... which makes ltp booting 10x faster (literally) [10:25] *ltsp [10:30] ogra: nbd == network block device? [10:32] Fujitsu, yep [10:33] I haven't tried LTSP recently... I probably should soon. [10:33] yeah :) [10:34] its just in a massive change though since we make the code ready for fedora upstream ... so things might break along the way to hardy ... [10:35] Is the new stuff in Gutsy? [10:36] yep [10:38] Phew.. I think the dpkg merge is done now. [10:38] * soren wipes sweat off of his brow [10:40] Heh [10:42] soren: Yay! [10:44] eep [10:44] remind me to not upgrade dpkg for a couple days ;) [10:44] * pitti hugs soren [10:44] soren: how bad is the remaining diff? [10:45] soren: debian bug #308285 mentions triggers, but doesn't point to iwj's patch [10:45] Debian bug 308285 in dpkg "Implement triggers to allow running ldconfig" [Wishlist,Open] http://bugs.debian.org/308285 [10:46] pitti: Not all that bad now. A lot of this merge was formatting changes that I needed to inspect to see if they snuck some other bits in that way. [10:46] (nor in any of the 5 duplicates) [10:47] pitti: It's been discussed a bit on the dpkg-dev list. I don't know what the status is, though. [10:47] pitti: I honestly don't know what's keeping it back. [10:49] http://www.mail-archive.com/debian-dpkg@lists.debian.org/msg11922.html [10:49] is the start of the thread, ah [10:50] Yeah. Don't waste your time reading all of it. :) [10:51] It branches off into a discussion about whether git is clever or not. :) [10:51] yeah, I noticed [10:51] but at least the guys are well aware of its existence, and there were a lot of "I want it, too" replies :) [10:59] pitti: Right. I was kind of hoping they'd adopt it before I had to do the merge, but no such luck. With my luck, they'll probably upload a new version tomorrow with trigger support. :( [11:00] ... that doesn't use iwj's implementation [11:00] soren: still better than uploading in half a year :) [11:00] * StevenK watches soren run screaming [11:00] pitti: point :) === pedro is now known as pedro_ [11:05] pedro_: do you have some time today to verify bug 163794? it's rather urgent [11:05] Launchpad bug 163794 in tzdata "New timezone data 2007j" [Undecided,Fix committed] https://launchpad.net/bugs/163794 [11:06] pedro_: sorry, wrong bug; I mean bug 116193 [11:06] Launchpad bug 116193 in tzdata "error upgrading tzdata_2007e to tzdata_2007f" [Medium,Fix committed] https://launchpad.net/bugs/116193 [11:06] pitti: sure i'll do it now [11:06] pedro_: thanks a lot [11:08] pitti: in the test case it say have a clean feisty and then upgrade to current gutsy updates is that correct? [11:08] ArneGoetje, ping [11:08] pedro_: you don't need to upgrade the entire distro; merely upgrading tzdata to gutsy final or -proposed is sufficient [11:09] pedro_: (i. e. to gutsy final to reproduce the bug, and feisty->gutsy-proposed to check the fix) [11:09] ok cool [11:09] pedro_: unfortunately feisty->gutsy-final will ruin /etc/timezone, so you have to reconfigure it when reverting to feisty version for the second test [11:13] pitti: ok, thanks you [11:25] pitti: please give-back: urca unison. Thanks. [11:25] geser: done [11:35] pitti: we're done! [11:35] verification done [11:35] pedro_: rock, thanks! [11:36] you're welcome :-) === iceman_ is now known as iceman === dholbach_ is now known as dholbach [11:42] * Hobbsee waves [11:43] Hi, Hobbsee! [11:43] hey soren! how's it going? [11:43] Better now that I (think I) am done merging dpkg. [11:44] hey Hobbsee ;-) [11:44] soren: hah. how'd you get stuck with it? TIL principle? [11:44] hey again seb128 :) [11:44] Hobbsee: I honestly don't know. [11:44] Hobbsee: that applies from now on :) [11:44] heya pitti! [11:44] pitti: heh [11:44] Hobbsee: Ian TIL, but he's not around. [11:44] ahhh [11:47] TheMuso: there is a new at-spi available, it has been uploaded to debian experimental if you want to merge the new version [11:48] TheMuso: the only ubuntu change has been commited to the debian svn too so it'll be syncable after the next update [11:49] seb128: I knew about the at-spi release, I'm on gnome-announce now. I filed a bug with the bits needed for upload, but I'll merge with Debian and adjust the bug accordingly. [11:49] TheMuso: ok, thanks [11:49] TheMuso: no need to bother [11:50] TheMuso: if you already did the update I'll sponsor this one, there is no debian change [11:50] seb128: Ok. [11:51] anyone know who maintains ubuntustats.com? [11:52] oh dear, they're in trouble [11:53] Haha. [11:58] highvoltage, see info in footer at: http://209.85.173.104/search?q=cache:VCatX8TNPdsJ:bugs.ubuntustats.com/+contact+site:ubuntustats.com&hl=en&ct=clnk&cd=1&gl=au&client=firefox-a [11:58] * elkbuntu <3's google caching :) [11:59] mvo: any plans to make command-not-found work for zsh? [11:59] (and why doesn't it already?) [11:59] highvoltage: beuno is here :) [12:00] * Hobbsee pokes infinity with a large stick [12:02] * Hobbsee hopes for some l-u-m soon [12:03] <\sh> lol [12:03] * Hobbsee would like some wifi [12:04] Riddell: oh, did you NEW the linux binaries? [12:04] Riddell: they FTBFSed on most arches, so I'd rather have rejected them [12:05] (just in case something is wrong in e. g. linux-libc-dev) [12:08] pitti: mm, which ones? [12:09] seb128: weird, your devhelp upload just seems to work; when I built it locally with that change I got a segfault, which is why I didn't upload it [12:09] Riddell: https://launchpad.net/ubuntu/+source/linux/2.6.24-1.1 [12:09] pitti: dunno why you had a segfault, it was working correctly for me so I uploaded [12:09] yeah, and the debs from the archive work fine as well [12:09] *shrug* [12:10] pitti: I'm pretty sure that wasn't me [12:10] * Hobbsee looks innocent [12:10] Riddell: ah, ok [12:11] seb128: "Who always understands what he is doing stays below his capabilities" :) [12:11] pitti: I prefer the other side of that quote. [12:11] I didn't new linux [12:12] it was slangasek's archive day before mine, possibly him [12:12] seb128: I alluded to me not understanding the devhelp crash, not NEWing [12:12] slangasek has archive days? Which day is that? [12:12] soren: Monday [12:12] you guys have been doing some good job, NEW was empty yesterday evening [12:12] all of 'em [12:12] still is. gotta upload more crack, i think [12:12] pitti: Mithrandir doesn't have archive days, then? [12:13] * pitti restrains Hobbsee; it was hard hard work to get it like that :) [12:13] soren: not any more [12:13] pitti: I know, I was just pointing it because I though I might be next on the list of people who could have accepted it ;-) [12:13] * Hobbsee tickles pitti [12:13] pitti: Ok. I didn't know. [12:13] seb128: when I have an archive day, I don't stop until the job is done :) [12:13] seb128: it's all GTK's fault anyway, and so is the linux FTBFS! [12:13] doh [12:13] Hobbsee: I don't use zsh, the readme has some hints on how to make it work. yeah, we should do that by default I guess [12:13] ;-) [12:14] soren: Mithrandir hasn't done regular archive days since mobile started taking all his time, as far as I know [12:14] mvo: right, will look then [12:14] Riddell: http://people.ubuntu.com/~ubuntu-archive/testing/hardy_outdate.txt KTHXBYE :) [12:14] Riddell: Oh. I should stop bothering him about that sort of thing then :) [12:14] soren: it's him you want to bug about givebacks [12:14] * pitti nudges soren to upload dpkg to resolve some of the depwaits on hardy_outdate.txt [12:15] pitti: Dude, that shit is scary. [12:15] soren: (just joking) [12:16] soren: so how about the cdbs merge, for some light relief? [12:16] "Light" [12:16] pitti: I'm pushing it to my ppa in a few minutes. [12:16] Hobbsee: but your long pointy stick is now long enough to reach to the buildd's retry knobs, too [12:16] pitti: indeed :P [12:16] pitti: people seem to know this far too well [12:16] cdbs merge? isn't that mine? [12:16] pitti: did you merge it first for hardy? [12:17] ages ago AFAIK [12:17] oh goody [12:17] cdbs was like the first thing uploaded after the toolchain [12:17] geser: was supposed to. *shakes fist* [12:17] Hobbsee: I've got plenty of merges on my list already, thank you very much. :) [12:17] http://merges.ubuntu.com/c/cdbs -> 404 [12:17] pitti: well, thankyou. that means i can continue to ignore the idea of cdbs and merging :) [12:17] Hobbsee: it's one of my pet packages and it's rather toolchainish, so it went in very early [12:18] excellent! next time, i'll make you sponsor the changes :P [12:18] pitti: oh yes, that's right, because i called you out on the changelog. [12:18] Hobbsee: did that happen? I didn't see anything in bzr [12:18] pitti: when did it go in bzr? [12:18] pitti, could you please give-back cdd on hardy? [12:18] * Hobbsee did the sponsorship in late feisty [12:18] DktrKranz: i'll do it [12:19] DktrKranz: given back [12:19] Hobbsee, thanks [12:19] Hobbsee: erm, dunno, must be years [12:19] pitti: then there are 2 changes that i have never merged in then, sorry :) [12:19] pitti: does it not have a vcs link, or did i ignore it? [12:20] $ asrc cdbs|grep Bzr [12:20] Vcs-Bzr: https://code.launchpad.net/~ubuntu-core-dev/cdbs/ubuntu [12:20] hmmm [12:20] * Hobbsee wonders why she didn't see this [12:21] pitti: why asrc, btw? [12:21] pitti: asrc == apt-cache showsrc ? [12:21] right, sorry [12:21] * Hobbsee uses showsrc [12:21] * pitti believes in Huffmann encoding for often-used aliases [12:22] * Hobbsee wonders how long it's going to take before she's learned that the rmadison aliases have changed [12:22] pitti: Take almost every letter until every person needs to ask what it expands to? [12:22] doesn't help that i occasionally have to do stuff on gutsy, where it's reversed [12:23] How did rmadison change? [12:23] the default distro [12:23] StevenK: I don't normally paste them in alias form in IRC, was just a mistake [12:23] * Hobbsee was using rmadison and urmadison [12:23] you should know, you merged it. [12:23] I did not. [12:23] soren did [12:23] I think irssi nick completion does this; it expands a substr to the most used version of the complete nick. However, that isn't as predicatable (for the human) as pure maximum prefix expansions [12:24] I just changed the default distro since cjwatson said it probably should [12:24] Hobbsee: Ubuntu was the default already. I just updated rmadison --help to actually show that that was the case. [12:24] StevenK: it's your name on the changelog. you cant blame soren, i'm afriad. [12:24] and Ctrl-R in bash already gets you more recent, most unique substr completition [12:24] * Change the default URL parameter of rmadison to be ubuntu. The old [12:24] behaviour can be used by 'rmadison -u debian'. [12:24] -- Steve Kowalik Sun, 11 Nov 2007 08:14:51 +1100 [12:25] Hobbsee: Oh, it's that recent? I thought I had gone mad! [12:25] Bwahaha [12:25] StevenK/cjwatson: if you fixed it, can you mark the bug report as closed... bug #152424 [12:25] Launchpad bug 152424 in devscripts "rmadision should default to 'ubuntu' URL when under Ubuntu." [Wishlist,New] https://launchpad.net/bugs/152424 [12:25] soren: it's changed in hardy and gutsy [12:25] er, between hardy and gutsy [12:25] so gutsy uses old behaviour, hardy uses changed. [12:25] sladen: Aye, thanks [12:26] Hobbsee: I see. [12:26] * soren curses dholbach for not telling him about listadmin a *long* time ago. [12:27] listadmin FTW! [12:27] soren: *g* [12:27] You all knew? [12:27] And noone told me? [12:27] I hate you all. [12:27] Right. [12:27] cjwatson: enlightened me when giving me access to ubuntu-devel [12:27] soren: Kiss kiss [12:27] * Hobbsee did u-u-s all by hand though, for ages [12:27] * soren feels Hobbsee's pain [12:27] * Hobbsee would prefer not to see StevenK and soren kissing, thanks. [12:27] * Hobbsee covers eyes [12:27] * sladen does u-u-e-n-c-o-d-e- by hand though... [12:28] Hobbsee: Did what? It was what, one message every two weeks? [12:28] StevenK: before you sanitized the filter [12:28] Oh on revu [12:28] Yeah well [12:28] sladen: bug 152424 nailed shut, thanks [12:28] Launchpad bug 152424 in devscripts "rmadision should default to 'ubuntu' URL when under Ubuntu." [Wishlist,Fix released] https://launchpad.net/bugs/152424 [12:28] StevenK: now try jpeg in your head [12:29] Treenaks: u-u-s, ubuntu-universe-sponsors, smartalec [12:29] StevenK: uhr, I meant to say sladen: [12:29] StevenK: just steal his camera. [12:29] StevenK: pressed tab too often [12:30] Hobbsee: Ha, still scared of that? :) [12:30] Treenaks: cameras are evil! [12:30] * soren goes to lunch [12:30] * Hobbsee is not photogenic, and therefore hates all cameras. [12:30] * StevenK isn't either [12:30] unless, somehow, the sky falls in, and they manage to take decent pictures, whcih don't make me look like i'm on drugs or something. [12:30] So I switched sides of the camera, I like them better that way [12:31] StevenK: why do you think I'm behind the camera :) [12:32] * StevenK grins [12:32] StevenK: fixed in 2.10.10ubuntu1, *documented* in 2.10.10ubuntu2 :-P [12:33] Actually, it was changed in 2.10.10ubuntu2 [12:34] maybe the changelog is lying; I could ask the person who did the update [12:37] TheMuso: could you try to include the LP number in the changelog so the bugs are closed on upload? [12:37] TheMuso: I did sponsor your at-spi and gnome-orca updates, thanks for the work on those [12:45] ogra: Re: "certificate exception workflow in ffox 3" ... its now like this: http://people.ubuntu.com/~asac/ogra/ [12:46] * Hobbsee waves to asac [12:46] hi Hobbsee !! [12:46] asac: any chance of getting firefox addons upgraded at some point, so it works with ff3? [12:47] asac, is there a chance to skip shot 3 and 4 ? like it was before ? [12:47] ogra: no [12:48] ogra: imo it does a good job [12:48] ogra: its not just "click through" anymore. [12:49] Hobbsee: yes ... I wanted to sort out xulrunner and the gecko embedders first [12:49] asac: ahhh, okay. cool. [12:50] well, the clicking-through just becomes more lengthy and frustrating now :) [12:50] Hobbsee: of course it depends on extension authors supporting ffox 3 [12:51] asac: well, of course. most of them appear to work (more or less) fine when forced. [12:51] the extensions, that is, not the authors. [12:51] asac, id the url prefilled in the dalog ? [12:51] *dialog [12:51] ogra: yes [12:53] mvo: ping [12:54] asac, perfect then :) [12:55] ogra: good. === cjwatson_ is now known as cjwatson [12:56] pitti: hmmm ... remember that you don't add exceptions every day ... so making it a bit harder isn't that bad on its own. imo this solution does a good job in getting users attention while not getting in their way [12:56] asac: I agree [12:56] asac: the root problem is still that people got used to the fact of bad certificates [12:57] asac: however, I see a huge benefit in making a big fuss if a cert *changes* [12:58] accepting the initial one should be much less painful than overiding an unverifieable changed one [12:58] haven't tested what happens in that case [12:58] stdin: hello [12:58] mvo: hi, can you take a look at bug #151005 in compiz for me, it's been bugging kde users for a while [12:59] Launchpad bug 151005 in compiz "Compiz should use kwin as fallback in KDE" [Low,Confirmed] https://launchpad.net/bugs/151005 [12:59] pitti: well, sites change keys all the time.. I wouldn't want a pop-up every year for ssl sites I go to often :) [12:59] stdin: oh, yeah - this one. do you want this is gutsy? or only in hardy? are you familar what needs to be done to make compiz work on kde out of the box? I would like to suport kde better, but lack knownledge about it [12:59] Treenaks: well, but you should want it [13:00] Treenaks: sites which don't have a trusted-path SSL key are bad enough, but if they change their key every other day it's completely pointless [13:00] mvo: what do you need to konw? [13:00] mvo: well, for that bug it should work in both, it's just changing the /usr/bin/compiz script to choose kwin if metacity isn't there [13:01] Hobbsee: how to change the default window manager in the kde session for a start :) [13:01] mvo: as for making compiz support kde properly, that's a bit harder :p [13:01] but right now Firefox bothers me everytime with certs I already ack'ed a thousand times; if it would stop doing that and just cry out if it actually changed, that would be a huge improvement IMHO [13:01] stdin: right [13:01] mvo: as in, to default to compiz? [13:02] Hobbsee: yes. I would like to have it so that if you install e.g. compiz-kde (or some other package that is not installed by default) the default kde window manager is compiz [13:02] elkbuntu: oh, cool [13:03] making kde choose compiz over kde would involve setting $KDEWM somewhere when startkde is called [13:03] *over kwin [13:03] stdin: does it call it in startkde, or does it call it from kdm? [13:04] odes kdm run startkde? [13:04] wait a sec [13:04] * Hobbsee looks at the kde4 versions [13:04] Exec=/usr/lib/kde4/bin/startkde [13:05] Hobbsee: afaik, kdm runs startkde "TryExec=/usr/bin/startkde" /usr/share/xsessions/kde.desktop [13:05] yeah, as above :) [13:05] mvo: right, so yes, it's startkde [13:06] aha, nice. thanks [13:06] we could also check for $KDE_FULL_SESSION in the compiz script to always choose kdm as fallback in kde sessions [13:07] # For $KDE_FULL_SESSION: [13:07] # if test -n "$KDE_FULL_SESSION"; then ... whatever [13:08] looks doable [13:08] yep, that's my thinking [13:08] bingo. [13:08] # if the KDEWM environment variable has been set, then it will be used as KDE's [13:08] # window manager instead of kwin. [13:09] the way I did it in the patch was to say if matacity doesn't exist then use kwin, but that ^ is a better approach [13:09] so, there you go, check if compiz does, if it does, export KDEWM in startkde [13:09] otherwise, leave it as is. problem solved. [13:10] mvo: so we'll have a working compiz in kde by noon? :) [13:13] stdin: i presume that wouldnt' cover someone who had kde and gnome, where compiz failed. [13:16] Hobbsee: the way my patch from the bug works it chooses kwin if it can't find metacity (not great if you have both and are in a kde session), but if you check for $KDE_FULL_SESSION then you can tell if they are in KDE or not [13:16] stdin: hmmm. is it guarenteed to be running the full session, whenever starting kde via startkde? [13:17] startkde sets that variable, so if startkde is ran then it'll be set [13:17] right [13:17] if you start kde manually "kwin & kdesktop & kicker..." then you can clean up your own mess :p [13:18] yeah well [13:18] you have to be kinda desperate to do that [13:29] mvo: you can add export KDEWM at the top of startkde or in /etc/X11/Xsession.d/foo === ember_ is now known as ember [14:04] totem + hardy != love. [14:05] Hobbsee: why? [14:07] Hobbsee, i dont think thats totems fault .. rather the gstreamer codecs [14:07] * ogra has some probs as well with rhythbox here [14:07] rhythmbox [14:07] even with metacity, it occasionally jsut freezes X entirely. [14:08] oh, but i have 270 pending updates ... :) [14:08] * ogra updates [14:08] it may well still be -intel, which does have a tendancy to freez [14:08] e [14:09] bah, n-m is a liar ... it were actually 320 packages [14:09] s/n-m/u-m/ [14:15] ogra: Everything gstreamer related has been broken on my system too. After yesterday's updates, all is back in working order. [14:15] ah, great [14:16] * ogra hopes then he can listen to weenradio again after the upgrade :) [14:16] ...both alsa and gstreamer got updated, so I didn't know who to hug :) [14:16] this oldie station we ship with RB gets boring over time :) [14:16] "classic rock" sorry :) [14:17] Heh :) [14:17] even though it has intresting suggestions for the next canonijam i think :) [14:17] Either Exaile or Listen has a fairly long list of stations, some of which are almost half decent. [14:19] ah, well, i'm somewhat stuck to my favorite :) but that usues mp3 streaming exclusively ... [14:20] * pitti discovers that hardy's RB now shows magnatune and jamendo music shops [14:21] pitti: I've never looked into that. Does it have music you could buy at your local music dealer, or is it more undergroundy kind of stuff? [14:22] * ogra discovered that as well today but didnt look through the titles [14:22] soren: nothing in the list looks very familiar to me [14:22] I just browsed through magnatune [14:22] soren, just try it [14:22] pitti: That could be both good and bad. :) [14:22] cool, you can just click on it and listen, and if I want I can click the 'buy' button [14:23] oh you can actually listen for free ? [14:23] nice [14:23] i didnt click anything ... [14:23] pitti: What does it give you extra if you buy it? [14:23] soren, keep it on your disk ? [14:23] soren: you don't have the "magnatune blabla" ads at the end of each song, apparently [14:23] Oh. [14:23] and mental peace, too [14:24] maybe better quality, too, I don't know [14:24] soren: I just tried it for about 60 seconds :) [14:24] pitti: That makes you the expert :) [14:24] heh [14:25] "Magnatune - We are not evil" [14:25] That's reassuring. [14:25] wow, you can select the price yourself [14:25] cool [14:25] * pitti discovers some blues/country which actually sounds quite nice [14:26] * ogra looks for "canonical all stars" or canonijam ... [14:26] * pitti thinks that THIS is a good way to motivate me to spend 10 bucks [14:26] hmm [14:26] ogra: we need to add the Canonical music shop for that :) [14:26] nothing yet ... i guess our marketing didnt have the right idea yet :) [14:27] ah, indeed [14:27] it will become part of shop.ubuntu-com :) [14:27] (lets walk in apples footprints :P ) === cprov is now known as cprov-lunch [14:30] <\sh> pitti, jamendo is doesn't have this advert stuff...and ogg is nice to have :) CC lic music, too [14:31] \sh: I just bought an album from Magnatune, downloading now (I got .ogg, too) [14:31] \sh: right, just browsing that; but it's a different platform [14:31] i. e. distributing free music for promotion instead of selling albums [14:32] <\sh> pitti, jepp...but it has my favorite songs (jamendo://pornophonique , c64+gameboy+guitar+vocals, germany ... cool stuff...) [14:34] ah, Jamendo has a 'donate to artist' button :) === asac_ is now known as asac [14:37] <\sh> pitti, and you will get a "thx for your cheers" from artists too :) [14:51] hmm, thats funny, why did u-m forcefully install nfs-kernel-server during the upgrade just to tell me it will remove it after the upgrade [14:52] grrr ... and leave portmap behind === Amaranth is now known as Am|Birthday [15:03] gah, apport is noisy on reboots [15:03] asks the same question about 5 times for every app that was open when u-m told me to reboot === Hobbsee_ is now known as Hobbsee [15:07] Hobbsee: what was I supposed to do? [15:07] geser: merge cdbs, but pitti beat you to it [15:07] why should I merge cdbs? [15:08] MoM clearly assigned it to me, so I didn't make any effort of contacting anyone else [15:08] Hobbsee: I touched scons but not cdbs [15:09] scons is waiting on the next upstream release [15:09] geser: oh, scons. whoops [15:09] pitti: out of the block of evil packages with similar names.... [15:09] scons can be updated now. [15:09] lol [15:10] I got fed up waiting for upstream and dumped a snapshot into debian unstable on Monday. [15:10] broonie: is it suitable for a merge or sync? [15:10] Should be. [15:11] pitti: where's the dunce cap? [15:11] * Hobbsee can't find it [15:11] It at least resolves the problem with things that use Configure(). [15:11] pitti: actually, it was the "list of packages that i don't want to do uploads for again" [15:11] which include things like apt, dpkg, scons, cdbs... [15:12] Hobbsee: Ah, the "I feel dirty every time I touch this package" list? [15:12] StevenK: that's the one [15:12] * StevenK has one of those, too [15:13] uuuh, ff-3.0 now uses the same icon as ff-2.0 ... how confusing if you have them both [15:13] * geser will investigate the scons merge and let Hobbsee sponsor it :) [15:13] dream on. [15:13] geser: If packages are on that list, we don't sponsor them either [15:13] i don't even remember what the original one was - or why i ended up sponsoring it [15:14] geser: or make broonie take the changes if appropriate [15:16] The change you've got is a workaround for an issue which nobody except launchpad buildds is likely to run into. [15:16] I'd rather see a proper fix done upstream for it, TBH. === Shely is now known as MJ086 === cprov-lunch is now known as cprov [16:00] Riddell, pitti: heh, no, I didn't NEW process linux [16:01] slangasek: good morning [16:01] the only NEW stuff I got through was some KDE universe stuff [16:01] pitti: morning [16:01] well, not a biggie now, it doesn't matter much except for linux-libc-dev [16:07] it's a mystery then === \sh is now known as \sh_away [16:25] slangasek, latest samba update broke, adduser: The user `ISI\jhaltom' does not exist. [16:25] No idea why it cares about me. ;) [16:26] Ahh. [16:26] I see. Ubuntu specific patch. [16:27] Funny. Since Winbind is stopped when this is running, it can't resolve me. :0 [16:28] Guess a better solution would be to not use adduser... or provide adduser some sort of 'don't check' swithc. [16:34] wasabi: hrm, which Ubuntu-specific patch? [16:34] Adding sysadmin to something [16:34] hold on [16:34] oh [16:34] to the sambashare group [16:34] pitti: I processed linux once alpha-1 was safely out; I think it's important to get boot testing of the new kernel as soon as possible, even if there are some temporary problems [16:34] Yeah, that. [16:34] since we'd like to be able to make it the default in hardy over the next few days [16:34] yeah, "don't use adduser" isn't really the right answer AFAICS [16:35] Sorry, right as I was typing that out I got a phone call. My mind melted. [16:35] Heh. Something feels totally wrong about killing Winbind in the middle of an upgrade while the user is using his desktop, too. [16:35] Maybe that should be adjusted so the time winbind is gone is minimized. [16:36] "You have no name!" [16:36] well, all the solutions for minimizing the downtime of daemons during upgrade are fairly kludgy wrt maintainer script interaction [16:37] I really dislike how if the winbind upgrade fails, my desktop becomes unusable. =( [16:37] Since it's stopped. No new apps can launch. [16:37] er, that's an odd failure mode? [16:38] Using nss_winbind. Apps taht try to find ~ don't tend to handle it well when you don't exist. [16:38] and $HOME isn't set? [16:38] It's set. Not everything uses it in my experience. [16:40] Hehe. sudo stops working too, so you can't even fix it. [16:40] Just saying, Winbind has become a very important member of the running desktop. It should be handled with care. [16:41] Much like dbus. [16:43] Not using adduser doesn't smell right to me either, but a --force-something option might make sense. [16:43] I might be tempted to argue that winbind should not be restarted. [16:43] And should in fact be treated like dbus [16:43] I would disagree strenuously with any attempt to argue that [16:43] Oh? [16:43] though I might be voted down [16:44] slangasek: Which part? Not restarting winbind or adding the --force option? [16:44] well, I don't even think it's right to pass on restarting dbus [16:44] soren: the not restarting [16:44] slangasek: Ah. [16:44] I don't really either. It'd be better if it could be safely restarted like upstart. [16:44] But it can't, can it? [16:44] if "safe" means "must never fail to restart", then no, nothing is safe ;) [16:45] Sure. What I mean is that even during normal operation, a stopped winbind is bad. [16:45] During the time of the preinst and postinst is even bad. [16:45] Upgrading dbus displays the "please reboot your system" notification. [16:45] Yup. [16:46] and if the logged-in user isn't resolved via winbind, that's an unnecessary delay of the restart === \sh_away is now known as \sh [16:46] I definitely thinkg winbind should be restarted. [16:46] Well, then what's the solution to keeping desktops runnign? =/ [16:46] (how did that 'g' sneak in there?) [16:47] wasabi: "assume any package upgrade may be disruptive"? hmm, perhaps I'm not on the same page with the rest of the Ubuntu team yet... :-) [16:48] wasabi: winbind is different from dbus in that dbus keeps connections open and various stuff breaks if that connection disappears. [16:48] wasabi: A winbind not running "just" means that while it's not running, things are... interesting. [16:48] wasabi: everything gets back to normal, when it comes back. [16:48] slangasek, Heh. Well, as long as the system actually presents the user with an option to upgrade, prompting it non stop with little pops up, it should be expected to work right. [16:49] wasabi: If the maintainer scripts are not robust enough to reasonably make sure it comes back up, *that's* the problem, we should fix. [16:49] Alright. So what level of "interesting" are we good with? [16:49] wasabi: well, anything that dies without ~ when $HOME is set is buggy and should be fixed, for starters [16:50] wasabi: What amount of security fixes are you good with not getting applied because you refuse to restart winbind? [16:50] slangasek, I'd respect sudo's decision to not elevate a user whose name it cannot resolve. [16:50] wasabi: for another thing, I hope you have a local, non-winbind user on your system who has sudo privs? [16:50] Yes. I do. It's just a pain to get to it. [16:50] ok [16:50] su won't run without a name either [16:51] Are you sure about that? I don't really think it's unexpected for a piece of software to be able to expect to resolve a uid. [16:51] Err. [16:51] I don't think it's unreasonable. [16:52] I don't think it's reasonable for a piece of software to fail if it can't [16:52] Hmm. [16:52] unless it's something that needs to run setuid() [16:53] then not being able to resolve a name to a uid is fatal, sure :) [16:53] ISI\jhaltom@station-1:/etc/dbus-1/system.d$ sudo /etc/init.d/winbind start [16:53] sudo: uid 1786588783 does not exist in the passwd file! [16:53] =( [16:54] I dunno. Guess I'm fine with all of that. I retract my statement. The maintainer script still needs to work, though. [16:55] su my-local-admin -c "sudo /etc/init.d/winbind start" :) [16:55] su fails. [16:55] it does? [16:55] Yes. [16:55] jhaltom@station-1:/etc/dbus-1/system.d$ su sysadmin [16:55] ISI\jhaltom@station-1:/etc/dbus-1/system.d$ [16:55] exit code 1 [16:55] hmm [16:55] maybe worth a bug === \sh is now known as \sh_away === DelayLama is now known as DreamThief [17:03] slangasek, so is it then accurate to say that apps should not use pam to return home and shell, and should instead use the environment? [17:05] wasabi: apps should not use pam to return home and shell, because pam knows nothing about either ;) [17:05] su explicitly has a set of code which gets the user's name to ensure he exists. [17:05] Err, nSs i mean [17:05] * Get the user's real name. The current UID is used to determine * who has executed su. That user ID must exist. [17:05] wasabi: well, it's worth discussing with the shadow maintainers whether this is the Right Thing [17:06] Could also solve the problem by doing something creative, like ensuring that the current user can always retrieve his information... local nss_winbind cache for the one user. [17:06] That's basically what windows does. [17:08] oh, who knows. I don't care. [17:08] I just want it to work right. heh [17:08] You clearly do. [17:08] :) [17:09] Well, I maintain offices of people. I have an interest in it working. [17:10] lool: thanks! :) === mathiaz_ is now known as mathiaz [17:14] wasabi: how did winbind upgrading fail? [17:14] Don't think it did. [17:14] ok [17:14] Think winbind was just stopped while the adduser thing ran [17:14] right [17:14] and thus the upgrade itself stopped [17:15] ah, erm [17:15] well, that's correctable at least [17:15] I did manually start winbind, and the adduser thing proceeded. [17:15] Sure. Just worries me that it's so fragile. [17:15] we can do a if getent passwd $username ; then adduser ... [17:15] Well, it still needs to be added. [17:16] Can't skip it completely. [17:16] hrm? [17:16] My user is in fact a member of the local admins, and I would expect him to be added to this new group. [17:17] Just so happens he's a domain user. [17:17] which isn't possible when he's not resolvable, so your choices are a) have the samba postinst fail, b) skip the user [17:17] c) work right? [17:17] =( [17:17] nope [17:17] Working right is not an option? [17:17] you have to decide which of a) or b) is what you consider to be "working right" [17:17] Urm. [17:17] This is silly. [17:18] because those are the only two choices, given the information it's possible to determine from inside the samba postinst [17:18] I don't see why we have to talk ourselves into these little corners. [17:18] There is a working right. It should do what it's supposed to do, properly, and especially in a support configuration (using WInbind to let domain users log in) [17:18] i.e., it's not possible to determine whether a user lookup fails due to a temporary resolution failure, or because there's stale data in /etc/groups [17:18] /etc/group [17:19] Again, I'd argue that that's missing the problem. A "temporary resolution failure" is silly. [17:19] There should be no such thing. Any such thing should be a bug. [17:20] User's are not supposed to disappear during normal operation. [17:20] Especially one that's currently logged on. [17:22] nope, it's not missing the problem. There are two problems, and one of them is "what do we do if /etc/group references a username that we can't find?" [17:23] Hmm. You are right, two issues. But you need to define "can't find" clearer. [17:23] not really [17:23] can't find because somebody left something left over? or because of a misplanning in how all the software works together? [17:24] In the first case, I agree. In the second, we should fix the problem that causes it to not be found. [17:25] "we should fix the problem that" is the separate problem, and has no bearing whatsoever on what the behavior of the samba package should be when it fails to find a user [17:26] hey everybody [17:26] ?I have a quick question about apport [17:26] * slangasek waves to EtienneG [17:26] * EtienneG wave back [17:26] I want to use apport-retrace to figure out a segfault [17:27] it complained that my crash report do not have the Package field [17:27] which is right [17:27] how should I make apport write that field when building the crash report ? [17:27] wasabi: there are *only* two options for what samba can do when it reaches this case - it can bail (the current behavior), or it can ignore the missing user, possibly with a warning [17:27] if you have an opinion on which is the correct behavior, I'll take that under advisement [17:27] (hopefully I make sense, I am not 100% sure I get all the naming convention right) [17:28] slangasek: Alternatively, the user migration stuff from admin to sambashare (or whatever) can be done outside of the postinst, but that's really not a very desirable solution either. [17:29] slangasek: I was about to say something about an inist script, but that'll get called from the postinst, too. [17:29] wasabi: but not all temporary resolution failures are bugs in the local system. You may have shoved a user into /etc/group that can only be looked up via winbind, has never been in the local winbind cache, and at the point of the postinst running you have no network connection. Doesn't matter then if you avoid stopping winbind. [17:29] I shall then fail a separate bug: "restarting winbind during upgrade causes desktop mayhem" [17:30] slangasek, I agree with that. [17:30] soren: right, and deferring the decision doesn't solve the problem anyway [17:30] what i mostly fear is that fixing the adduser thing will just hide the other issue. [17:30] soren: you still have to decide what you think you should do with users you can't find :) [17:30] slangasek: Not the inherent one, no. [17:31] slangasek: ..but this particular one, yes. [17:31] slangasek: The particular problem here is that during the upgrade, we shut down winbind, which causes this migration to fail. [17:32] slangasek: The inherent problem, however, is that we have no way to generally deal with users we can't find. [17:32] ...which we can work around in this case. [17:32] I wouldn't want to that, though. I'm just saying. :) [17:33] soren: we stop slapd on upgrade too, what if the users are in LDAP? :) [17:33] right [17:34] I'm entirely in favour of just ignoring the user (possibly issuing a warning). [17:34] It's commonplace for this sort of thing to not be enabled on upgrades, because (here's a shocker) there's no completely sane way to do it. [17:34] Riddell: thanks for this info, I prepared something, but I think i need to keep it disabled, it does not yet work well enough (also the remaining issues get smaller) [17:34] I was surprised to even see an attempt at doing it, actually. :) [17:35] heh [17:36] soren: have there been other system groups added since Ubuntu's inception where there was a group that could even be sensibly templated from? :) [17:39] slangasek: Well, a lot of packages create system groups that users are supposed to be added to if they should be granted access. In most cases, it wouldn't be a completely braindead assumption that if you're ok with people having sudo powers for your entire system, you'd also be ok with them accessing your scanner or whatnot. [17:39] But maybe that's just me. [17:39] :) [17:39] soren: right, but I think in the case of scanners, the relevant group is /older/ than the admin group and created at install time? :) [17:40] slangasek: Ok, bad example. fuse, then. [17:40] ok :) [17:44] We talked about this net usershare thing a while ago, by the way. I was against adding that group, but I was clearly too slow to get to have a say in it :) [17:49] soren: oh? what would be the alternative to adding the group? [17:49] I don't see why anyone would want to specifically grant access to sharing via samba rather than some sort of generic "this user is allowed to share stuff to the network". When the next package comes along that does something like this, perhaps using a different protocol, will we add another group? It's kind of like kvm and virtualbox each adding a group to which you can add users if they should have access to that particular virtualisation techniqu [17:49] so you would've preferred a generic name for the group? [17:49] Yes. [17:49] it's not too late to change :) [17:49] And have it added to base-passwd. (ooh, scary) [17:52] slangasek: True, but the barrier of entry grows significantly when you mention base-passwd. <100 gids are a scarce ressource. [17:52] brb [17:54] soren: < 100? we have way more to play with than that :) [17:55] there's no reason this group needs to be statically assigned [17:55] and even if it were, there's the 60000-64999 range we've never touched ;) [17:56] slangasek: Well, it's hard to predict the future.. [17:57] is "never touched" a synonym for "allocated 18 uids and 8 gids in it"? [17:57] /usr/share/doc/base-passwd/README :-) [17:57] slangasek: At some point, some sort of application that allows you to share stuff over the network might include a sgid binary somewhere. [17:57] slangasek: I had another thought, though. [17:58] setgid binaries can use dynamic system groups provided that the group is created in the preinst [17:58] cjwatson: heh, wow, I don't think I've ever seen any of those :) [17:58] cjwatson: point [17:58] tac-plus has a 6400x user? hhuh [17:58] god knows, I just allocate them === dfiloni is now known as dfiloni-doccia [17:59] there's enough space in the range and a small enough trickle of requests that all I do is double-check that there's a reason that 'adduser --system' isn't good enough [18:00] It might make more sense to just add the much-talked-about "users" group. [18:01] I think the need for the sambausers group is a technical one rather than a policy related one. [18:01] It depends on a directory somewhere that the relevant users can all have write access to. [18:01] we have a users group; it's just that nothing adds normal users to it [18:02] There are two ways to do that (disregarding acl's): 1) Add a new group and add the relevant users to it or 2) make it world writable. [18:02] cjwatson: Wow... You're right. Why arent' we? [18:02] but if you're going to add all normal users to a group and give that group write access to something, you almost might as well make that thing world-writable [18:03] cjwatson: Not so. [18:03] (except if you care about not having it writeable for www-data etc.) [18:03] www-data, granted [18:03] cjwatson: You're still protected from various rogue daemons and such. [18:03] cjwatson: Exactly. [18:03] or ftp [18:03] maybe you're right [18:03] anyhow, we're not doing it because we never have, AFAIK ;-) [18:04] gnome-user-share allows every user to share stuff over the network. [18:04] I don't think there's a particular reason [18:04] That's because it uses fancy avahi magic to allow each user his own apache daemon on a different port. [18:04] No such magic can be done with samba (sanely). [18:04] ...which is why it had to be done this way. [18:05] it'd be trivial to do with the EXTRA_GROUPS / ADD_EXTRA_GROUPS variables in /etc/adduser.conf [18:05] but you'd have to do something about upgrades if you actually wanted to rely on it [18:05] ...but since there are loads of ways a user can share stuff to the network anyway, it's kind of odd that you want to add further restrictions because it's done via samba. [18:05] and probably check that users-admin DTRT as well [18:05] ...this would be solved it all (actual, human) users were members of one common group. [18:05] cjwatson: Yes, upgrades are indeed the Achilles heel of this suggestion. [18:06] ...and the very reason I didn't take it any further when we were first approached about it, and then it got swapped out of my working memory when I went on honeymoon, I think. [18:06] it's not rocket science, I just fear somebody having used gid users for something else [18:06] but maybe we can just declare that that's stupid and add a NEWS.Debian item for it [18:06] LOL [18:07] cjwatson: I'd be fine with that. [18:08] soren: why would you want all "users" to be able to share things over the network via a samba? admin users seems a much more sensible default, to me [18:08] slangasek: Because they can anyway by loads of other means? [18:09] slangasek: gnome-user-share, just to name one. [18:10] soren: hmm, well, gnome-user-share doesn't give users an opportunity to try to find holes in the samba running as root :) [18:10] slangasek: It seems strange to give them 1000 ways to do it, but because of a limitation in the way samba works (it only sensibly works on one port), each user can't have his own samba daemon to much around with. [18:10] slangasek: That's indeed true. [18:10] hm.. [18:11] slangasek: Well... The only additional exposure these users get to samba is by way of putting files into a specific directory. [18:11] sure [18:11] It's not like samba is a daemon that's just tucked away in a corner never interacting with users anyhow. [18:12] btw, samba 3.0.27a-2 just accepted into sid, should cut the Ubuntu delta by half again [18:12] If you've enabled the [homes] share, you have much of the same access already, anyway. [18:13] And every user has that. [18:13] soren: mathiaz has argued against enabling [homes] by default :) [18:14] slangasek: Erm.. Ok. Regardless, the extra attack vector really isn't that much "extra". That's my point. [18:16] Just to clarify: By "And every user has that" I didn't mean "every user has [homes] enabled", but that "if [homes] is enabled, every user has such a share". [18:17] sure [18:17] ...which (assuming samba is sane) should expose the same set of potential vulnerabilities as the net usershare stuff. [18:18] one difference is that [homes] is commonly configured with valid users = %S, and net usershares can be configured to allow access to any authed user. I'm not sure this is significant either. [18:18] Remind me what %S expands to? [18:18] Oh, the owner? [18:18] "share name" [18:18] Same thing. Ok. [18:18] so for each [homes] share, the only valid user is the one whose name matches the share name [18:21] slangasek: Are you pointing this out for the sake of completeness of the discussion, or are you actually saying it's a problem? :) [18:21] I.e. should I bother countering the argument? [18:25] soren: completeness :) [18:25] slangasek: Ok, good :) [18:25] So.. Should we make samba the first package to actually use the users group? [18:26] * soren mumbles TIL and points at slangasek [18:28] "TIL"? [18:28] Touched It Last. [18:30] well, I'm not personally persuaded that the "users" group has the correct semantics for Debian, there may be sites using it that way who don't want all their users to be able to create shares (namespace pollution?) [18:30] The last upload has your name on it. Of course that doesn't de jure means that you're the owner of it, but e.g. for merges, it's often the de facto way to determining who will do it. [18:30] slangasek: True. However, you're also an Ubuntu developer these days, though. [18:31] soren: yes, an Ubuntu developer who just spent a bunch of time reducing the Debian/Ubuntu divergence on the Samba packaging ;) [18:31] * soren mumbles TIL again [18:31] :) [18:32] slangasek: If you're too busy, that's fine. We should just do it sooner rather than later. [18:32] well, unless that implies I'm also the one who gets to /decide/ whether to use a users group, I'm still going to sit here and raise possible counterarguments :-) [18:33] making it "users" does make it more complicated to enact alternate policy decisions [18:33] That's true. [18:33] making it "sharing-users" makes it the distro's responsibility to maintain the group [18:34] but that would already be the case with "users", AFAICS === ogra1 is now known as ogra [19:57] StevenK, bug 174213 is a present for you :) (just had to build the modules for the new kernel) [19:57] Launchpad bug 174213 in virtualbox-ose-modules "cant build with 2.6.24 kernel source" [Undecided,New] https://launchpad.net/bugs/174213 [19:58] (looks like you own vboxdrv :) ) [20:01] Is sporadic loss of keyboard input to GTK+ windows a known issue with Gutsy at this time? [20:01] (I'm not sure if it's limited to GTK+, most of my apps happen to be GTK+-based.) === cjwatson_ is now known as cjwatson === cprov is now known as cprov-out [22:53] doko: could we build icedtea against libungif instead of libgif? it's the only thing that depends on libgif and the two confict [22:53] or doko_ [22:54] Riddell: ? [22:54] doko: could we build icedtea against libungif instead of libgif? it's the only thing that depends on libgif and the two confict [22:55] Riddell: could you file a bug, so that I remember? I never tried [22:55] sure [22:56] Riddell: Why is ungif preferable? [22:57] mjg59: just because everything else in the archive uses it rather than libgif [22:57] Riddell: That sounds like a bug [22:58] libungif is in main, presumably to avoid gif patents [22:59] Riddell: Ungif is unmaintained [22:59] (upstream) [22:59] We should migrate everything to libgif [23:00] Riddell: See http://www.advogato.org/person/badger/diary/51.html [23:00] wow, that hasn't already been done? [23:00] It would seem not [23:01] Given there are bugfixes in libgif that aren't in libungif, I think it's certainly worth it for hardy [23:01] seems sensible [23:05] reported as bug 174252 [23:05] Launchpad bug 174252 in libungif4 "transition to libgif" [Undecided,New] https://launchpad.net/bugs/174252 === asac_ is now known as asac