/srv/irclogs.ubuntu.com/2010/04/21/#ubuntu-devel.txt

slangaseksmoser: I guess bug #567392 is the one causing you eucalyptus problems?  how fast does libvirtd run out of fds?00:36
ubottuLaunchpad bug 567392 in libvirt "__virExec:362 : cannot create pipe: Too many open files" [High,In progress] https://launchpad.net/bugs/56739200:36
slangasekttx: ^^ kirkland asked this fix to be considered for RC; that means respins of ubuntu-server, and ubuntu and kubuntu DVDs00:36
smoserslangasek, well, its not the only thing.00:38
smoserbut it leaks 1 per start/stop00:38
smoserso 1000 instances ends up hitting the default fd limit00:38
smoser(of 1024)00:39
slangasekand are users are going to go through 1000 instances between the time it takes us to release RC and the time it takes us to push the fixed libvirt for final?00:39
lifelessslangasek: the canonical UEC instance probably will00:41
smoserslangasek, i think probably not.00:44
smoserslangasek, its also extremely easy to fix00:44
smoserif you just 'sudo restart libvirt-bin' on the node controllers00:45
slangasekthe limit is per-node-controller, yes?00:45
smoserright00:46
smoserthats why dustin (with 3) or the UEC in our data center (with a more than that) never saw it, but i did with my measly 1 node controller00:46
slangaseklifeless: ^^ 1000 instances on a single NC, in 2 days?00:46
smosermy guess is that number would be high for a single phsyical node even on amazon.00:48
smoserto me its unrealistic other than testing00:48
lifelessslangasek: well, the dx hudson does lots of fairly short builds, and its only one user. I may be being alarmist.00:48
slangaseklifeless: ok; I still think we're better off just pushing it immediately post-RC, rather than eating up another 10 tester-hours of time to revalidate00:51
lifelessslangasek: works for me; was just adding data.00:52
slangaseklifeless: appreciated :)00:52
=== blueyed_ is now known as blueyed
slangasekdirecthex: should I be expecting to see that indicator-application upload in the freeze queue?01:17
directhexslangasek, someone else uploaded it, whereupon it built but failed to upload01:20
directhexSubject: [Build #1699116] i386 build of indicator-application 0.0.19-0ubuntu4 in ubuntu lucid RELEASE (directhex PPA)01:20
directhexDate: 19/04/10 13:12:5801:20
slangasekdirecthex: eh, I meant to the Lucid archive, not to a PPA01:20
directhexwas that a PPA upload? i must've gotten confused01:21
slangasekit says PPA in the subject, so I assume so :)01:21
directhexah, so it was. serves me right for not naming PPA uploads with a ppa version number01:21
directhexso "oops"01:21
directhexi'll upload now01:21
slangasekcheers :)01:22
directhexdputted01:28
directhexnow i should go to bed01:28
slangasekKeybuk: bug #507881> what changed your mind about a blacklist of /proc/bus/usb in mountall being viable?01:28
ubottuLaunchpad bug 507881 in plymouth "Plymouth doesn't show messages sent before the splash screen is visible" [High,Fix committed] https://launchpad.net/bugs/50788101:28
directhexRejected:01:35
directhexSigner is not permitted to upload to the component 'main'.01:35
directhexslangasek, ^^01:35
directhexanyway, bed01:43
slangasekdirecthex: ah; put it somewhere for sponsorship?01:50
ajmitchhopefully it's the one in his PPA now01:51
slangasekajmitch: hmm; probably, but I'm not going to guess - it can wait till he's back02:00
rickspencer3_slangasek, seems like you might know this ...02:03
rickspencer3_is there a way we can get a list of "stuff" in Ubuntu that uses /usr/lib/libglitz-glx.so.102:03
rickspencer3_?02:03
slangasekrickspencer3_: apt-cache rdepends libglitz-glx102:04
rickspencer3_thanks slangasek02:04
slangasekrickspencer3_: that works because /usr/lib/libglitz-glx.so.1 is shipped in the aptly-named libglitz-glx1 package; if it had been in a package with other libraries, acquiring a precise count would be more involved02:05
ScottKDo we have any kind of policy that suggests one should replace Vcs-foo fields in debian/control with XS-Debian-Vcs-foo fields?02:08
slangasekI'm not aware of a policy02:09
ScottKI'm wondering because the topgit upload in the queue has such a change.02:09
ScottKIt seems to me something we shouldn't just randomly do.02:10
slangasekI think it's good /practice/ to move the fields aside when they don't point at something corresponding to the package in question02:10
ScottKCorresponding exactly or generally?02:10
slangasekbut since there's no policy on the name to change it to, and practice has varied, I always fail to do it myself02:10
slangasekScottK: exactly, IMHO02:10
ScottKOK.02:11
slangasekif I can't find the current package revision in the referenced Vcs-*, the field shouldn't be there02:11
ScottKPerhaps then update-maintainer should also remove such fields.02:11
ajmitchit's something that's happened for awhile on some packages02:12
slangasekI think that would be good02:12
* ScottK makes a bug.02:12
slangasekit won't have the desired result for Vcs-Git if Debian and Ubuntu share a git repository, but the Vcs-Git fields are inappropriately underspecified anyway02:12
ajmitchI suspect it's done from a desire that 'apt-get source' not give the wrong information02:12
ScottKSeems like overkill for minor deviations to me, but OK.02:13
slangasekwell, I'd like it to be automatable via update-maintainer, and in the absence of such automation haven't been doing it :)02:16
ScottKBug filed.02:16
ScottKMaybe someone will feel inspired.02:17
ajmitchMaking it point to the proper ubuntu branch could be done02:17
ajmitche.g. Vcs-Bzr: http://code.launchpad.net/ubuntu/+source/apache202:18
ajmitchrequestsync isn't liking me today, is the job that updates the version of debian packages in LP having a bad day?02:21
ScottKDoesn't requestsync use rmadison?02:23
ajmitchI didn't check what it uses for looking up the version of packages in sid02:24
ajmitchit's just a new debian revision of gpt that I want synced to fix a FTBFS, nothing major02:25
ajmitchlooks like it does use the information on LP for the version (which is out-of-date)02:27
ScottKNice.02:31
ajmitchI should just create the bug the old-fashioned way, I tested that it built02:32
slangasekajmitch: unless devs are explicitly committing to the ubuntu bzr branch, I don't think it makes sense to tag it in debian/control; debcheckout et al could just be modified to look there by default02:43
Keybukslangasek: huh?02:58
KeybukI've never thought a blacklist of usbfs is viable02:58
KeybukI think that's stupid02:58
Keybukadding any workaround just for that means we're basically working around bad advice given on ubuntu forums02:59
Keybukand that sets a dangerous precedence :P02:59
psusiKeybuk, I just got e2defrag working with extents ;)03:02
psusiKeybuk, also I was looking at the ureadhead code today... I need to go test it now because I decided to try converting the hda readahead to multithread like ssd.. that should put a stop to that big block of zero IO during all the sequential open() calls03:03
Keybukoh, interesting03:04
Keybukwould love to see the before/after blktrace of that!03:04
psusiwell, combined with defrag it should be one gigantic sequential read ;)03:05
psusieven with the threads sending down requests a bit out of order, they should get combined and ordered in the queue by the elevator03:06
psusiand if a thread has to block waiting on a directory or indirect block read, the others can queue up a few more reads to be batched03:07
kirklandslangasek: i concur that that upload can be pushed post RC03:54
kirklandslangasek: basically ttx and I decided to leave that one in the hands of the release team03:54
kirklandslangasek: as such, it was only a "proposal" for RC inclusion03:54
cody-somervilleHow odd. When trying to stream mpegs with Firefox and libtotem-cone-plugin.so I get the codecs needed dialogue and then when I click search for codecs it tries searching for the "text/html" codec, lol.03:59
ScottKProbably not included due to patents.04:00
ScottK;-)04:00
rickspencer3slangasek, hello04:39
slangasekKeybuk: oh; well, you certainly were /discussing/ a blacklist of usbfs, apparently I misunderstood your position on it.  I guess that brings me back to my assertion that blocking virtual-filesystems on unknown nodev mounts doesn't make sense05:32
slangasekkirkland: hmm, but you marked it for -updates; I was thinking we would still want to grab that in post-RC, no?05:33
slangasek(between RC and final)05:33
kirklandslangasek: if that were acceptable, yes05:33
kirklandslangasek: i assumed we wanted to keep as much unchanged as possible between RC and GA05:34
kirklandslangasek: so i started prepping these as SRUs05:34
slangasekwe do, but that seems like a case where the risks and rewards are well scoped05:34
kirklandslangasek: libvirt -- yes, i think so;  very clear fix, IMHO05:34
kirklandslangasek: in this case, shall I re-target at 10.04?05:36
slangasekkirkland: yes, please05:36
kirklandslangasek: cheers05:36
Keybukslangasek: I can't remember why it does05:45
Keybukmountall needs a test suite05:45
Keybukbecause apparently I didn't add that line of code05:46
Keybukion did ;)05:46
slangasekah05:47
slangasekion: ping05:47
KeybukI think it's more that it's a creeping thing05:48
Keybukit was added to avoid filesystem checks05:48
Keybukand crept up to mean more as the code changed05:48
ionWhat did i break? :-P05:48
Keybukoh, nothing05:48
Keybukwas just trying to work out why "none" in the device column makes a filesystem hold up "virtual-filesystems"05:49
slangasekion: right, ^^ that - since any problem with such an fstab entry means you can never boot, because of a circular dep between plymouth-splash up to skip the broken fs, and virtual-filesystems05:50
Keybukbut yeah05:51
Keybuklooks like it just crept up the code05:51
Keybukit'll probably break something to remove it of course05:51
Keybukbut it's that kind of code05:51
slangasekKeybuk: can you think of any specific bugs you would expect us to need to guard against if changing that, or is it just general nervousness about a late change?05:53
Keybuknervousness05:53
Keybukthough the worst that should happen is that anything with "none" as a device becomes local05:53
Keybukso it just means it won't hold up virtual-filesystems05:53
Keybukand appear on plymouth05:54
Keybukso it's probably ok05:54
slangasekI think there are few possible bugs that would both escape notice during testing *and* be worse than a boot hang that can only be resolved with init=/bin/sh05:54
Keybukbut I keep saying that05:54
Keybukand the world burns05:54
Keybuklast time I patched mountall, Iceland exploded05:54
slangasekoh, I thought Iceland exploded as a pre-consequence of you and jiboumans inventing teleportation to get home05:55
KeybukI did a tech talk on Monday05:57
nixternalpfft, that volcano has nothing on jono after eating white castle05:57
KeybukI started off with "thankyou for inviting me to be here, and thank you for setting off a Volcano in Iceland to make sure I could do it"05:57
Keybuk(tech talk at Google)05:58
slangasekheh05:58
Keybukslangasek: http://bazaar.launchpad.net/~ubuntu-branches/ubuntu/lucid/mountall/lucid/revision/32006:02
Keybukknock yourself out06:02
Keybukif the world burns, I'll deny all knowledge and claim you forged the commit message to make it look like it came from me06:02
slangasekright :)06:03
nixternalirc logs are like cockroaches though, they will survive06:03
slangasekstill need to fix the plymouth flush code so we can do that final mountall upload06:03
Keybuknixternal: those can be edited06:04
Keybukthe only thing I can't do is get home06:04
nixternalthat would be a lot of editing though....06:04
* nixternal locks down rsh and ssh06:04
nixternalcan't edit mine!06:04
nixternalhahahahaha06:04
nixternali can edit your logs, i just can't get home!06:04
ScottKnixternal: Don't say that to the guy that writes your boot loader06:04
Keybuknixternal: init --version06:05
Keybuksee where it says "Written by" ? :)06:05
* slangasek grins06:05
nixternaldoesn't say Written by anywhere06:05
nixternalso foo on you :D06:05
slangasekKeybuk: btw, bug #567592 doesn't look very nice; I thought this was fixed in mountall 2.1306:05
ubottuLaunchpad bug 567592 in plymouth "rm: cannot remove `/var/lib/urandom/random-seed': Read-only file system" [Undecided,New] https://launchpad.net/bugs/56759206:05
Keybukslangasek: that's fixed06:06
lucasa06:06
lucasoops06:06
slangasekKeybuk: hggdh reports it with a uec image that has mountall 2.13 in it06:07
ionkeybuk: The r87 commit message says ‘don’t queue filesystem check when device is "none"’ but the code checks whether type is "none". My r100 actually adds the line to make the change r87 appears to have intended. I can’t seem to remember what specific case of device being "none" caused a problem.06:07
Keybukyeah06:07
kirklandslangasek: Keybuk: that was today's image06:07
Keybukbut I reckon that log is "conveniently edited"06:07
kirklandwhere today = yesterday now06:07
Keybukion: yeah, I just propogated that behaviour up06:07
kirklandlatest at the time, anyway06:07
KeybukI would expect that it's *failed* to mount /06:07
Keybuke.g. mount or fsck returned an error06:08
Keybukrather than got bored06:08
slangasekmmk06:09
Keybukthe bit at the end of the comment implies that06:09
Keybukin that case, it has to either skip or start a shell06:09
Keybukit doesn't start a shell, since then it might overlap with X or getty or stuff06:10
slangasekKeybuk: at the end of which comment?06:10
Keybuk#306:10
Keybuk"and mountall refused to mount / (more correctly, refused to remount it rw)."06:11
slangasekwell, that's just a restatement of the log line: | mountall: Skipping mounting / since Plymouth is not available06:11
Keybukthat to me sounds more like Scott is trying to tell us mount failed, not mountall didn't try06:11
Keybukyes, but what I mean is that there's mount errors missing here06:11
Keybuk--debug might be telling (since it will tell us the exit codes)06:11
Keybukbut I'm pretty convinced this is a case where mount -o remount,rw / has failed06:11
Keybuknot a case of mountall got bored06:11
slangasekok06:12
Keybuknothing mountall can do there ;)06:12
Keybukthat's why we have plymouth - to ask the user06:12
slangasekgoing to be nontrivial to confirm that this is the case, I guess06:12
Keybuk--debug should prove it06:12
slangasekit's non-trivial to edit an upstart job to set --debug in the UEC image06:12
Keybukthey should make that trivial ;-)06:13
slangasekheh06:13
=== ara_ is now known as ara
=== ara is now known as Guest45645
=== Guest45645 is now known as ara_
=== ara_ is now known as ara
=== radoe_ is now known as radoe
zygamvo: morning08:14
mvohi08:14
zygamvo: I signed up to the software-center+pkgcon sprint on UDS08:15
zygaI'm looking forward to that :-)08:15
pittiGood morning08:18
joaopintogood morning08:21
dholbachgood morning08:24
mvohey dholbach08:25
dholbachhey mvo08:25
amitkslangasek: have you had a chance to look at bug 563618?08:30
ubottuLaunchpad bug 563618 in util-linux "Ignoring a broken clock results in infinite reboots; not ignoring results in fsck failure; no solution to this problem" [High,Triaged] https://launchpad.net/bugs/56361808:30
slangasekamitk: no; that's going to have to be post-rc, regardless08:37
slangasekamitk: and I'm still trying to fight my way up through the stack of plymouth/mountall bugs08:37
amitkslangasek: ack, thanks.08:42
slangasekKeybuk: so, that change seems to make mountall fail at mounting /tmp08:52
trijntjeWhat would be a good place to find someone knowledgeable about empathy to ask the meaning of some strings?08:53
joaopintoslangasek, about the vboxsf issue, it might affect other packages providing filesystems support via kernel modules, maybe a warning message should be sent ?08:55
slangasekjoaopinto: a warning message where to whom?  The vboxsf init script was clearly buggy anyway, even before mountall it would be running way later than the mount scripts08:56
joaopintoslangasek, to -motu or something like that :) I assuming there are other packages providing such modules, which were working on karmic's boot order and will fail now08:59
slangasekjoaopinto: frankly, if there are other packages like that (and I don't know why there would be), either the people who care about them have already noticed or there are no people that care about them so I wouldn't expect broadcasting to the developers to have any effect09:03
joaopintook :\09:04
IntuitiveNippleTesting Alternate CD for PowerPC (2010-04-19), installer reports failure during "Install and Setup software" but I can find no mention of errors in the logs, and running the next step (install yaboot) continues on without apparent problems (so far). Are there any logs I should capture to investigate this in either the chroot /target or the installer ?09:15
persia/var/log/syslog (outside the chroot) is often interesting09:17
IntuitiveNippleThanks, I'll save that into the /target/ to look at later09:17
IntuitiveNippleI'm just testing a boot from the installed system now, to find out if anything did mess up09:18
persiaIntuitiveNipple: There's a "Save Debug information" option from the main menu, which will save all the files you need.09:18
IntuitiveNippleOh yeah! thanks for reminding me :)09:18
slangasekKeybuk: hmm - this code already special cases fuse mounts?09:19
=== almaisan-away is now known as al-maisan
IntuitiveNipplepersia: OK, looking at the running installed system, it looks as if the failed step was where the choice of meta flavour (ubuntu-desktop, etc.)  should have been offered. The installed system only has ubuntu-minimal. Nothing in the logs to give a clue though. I'll repeat the install to see if it is reproducible, and report a bug if so.09:21
phuanghi09:32
phuangmy PPA seems be locked. all build failed by uploading failed09:33
phuangHere is one build. https://launchpad.net/~shawn-p-huang/+archive/ppa/+build/170107709:33
phuanganyone can help me?09:33
cody-somervillephuang, Not here. Go to #launchpad for help with PPAs.09:34
phuangcody-somerville, thanks09:34
dholbachwgrant: HAPPY BIRTHDAY! :)09:43
wgrantdholbach: Thanks!09:43
directhexslangasek, i uploaded the final indicator-application package to one of my PPAs, but i'm getting more "failed to upload"s following successful builds - "Lockfile /var/lock/process-upload-buildd.lock in use"09:44
wgrantdirecthex: That should be OK now.09:45
wgrantdirecthex: When did it fail?09:45
wgrantLP had a couple of crises over the past hour or so.09:45
directhexwgrant, few minutes ago09:45
directhex2010-04-21 08:37:29 DEBUG   Lockfile /var/lock/process-upload-buildd.lock in use09:45
wgrantHmmmmm. Concerning.09:45
directhexBuild #1701095 and #170109609:46
james_whappy birthday wgrant09:46
wgrantdirecthex: Which PPA? Build IDs are only useful if I also know the archive.09:47
wgrantThanks james_w.09:47
directhexsamarium and iridium for 9609:48
directhexosmium for 9509:48
wgrantdirecthex: should be OK now.09:54
wgrantCascading failures FTW.09:54
directhexwgrant, can you rescore the builds?09:55
slangasekKeybuk: ok, /tmp sorted - needed to poke a bit so the placeholder handling code was still happy09:55
wgrantdirecthex: I have no privileges beyond MOTU.09:57
wgrantSo, no.09:57
directhexboo09:58
directhexi386 build seems to be happening now anyway09:58
freehi! I have python-specific packaging question10:26
persiafree: Which one?10:27
freeI have a package whose postinst depends on python-pycurl, and that fails when upgrading from hardy to lucid because the python-pycurl package in hardy is compiled against Python 2.4 and APT decide to upgrade it *after* my package10:28
freepersia: ^^^10:28
freeso one solution would be to explicitely depend on a specific python version like Depends: python2.6-pycurl10:28
StevenKOr depend on python-pycurl (> (Hardy's version))10:28
freebut having a lot of python dependencies that seem a bit sub-optimal, I was wondering if there is a better alternative10:28
* persia likes StevenK's suggestion10:29
freeStevenK, persia: yeah, the only thing is that I have to do that manually for all my python dependencies10:29
freeand maintain that10:29
persiaThe other option is to adjust the maintainer script to work also with python2.4-pycurl10:29
freeStevenK, persia: I see, I think I'll eat the bullet and go for versions thanks!10:31
Chipzzfree: isn't that exactly what Pre-Depends is for?10:40
cjwatsonno, it is not10:40
freeChipzz: you Pre-Depends if you need a package to be fully installed and configured even before APT tries to unpack your package10:40
slangasekI think Bob the Angry Flower needs to get his gimp on and speak out about Pre-Depends10:41
directhexuse a trigger!10:41
james_wfree: does the package depend on python-pycurl at all currently?10:48
freejames_w: it does10:49
freejames_w: more details on bug #56306310:49
ubottuLaunchpad bug 563063 in landscape-client "Problem with pycurl dependency during upgrade from hardy to lucid" [High,In progress] https://launchpad.net/bugs/56306310:49
james_wfree: I don't have that call in my copy of the postinst, is it not in the lucid package yet?10:53
freejames_w: it is, but that is kicked in EC2 instances when starting the service from the postinst script10:55
tseliotpitti, slangasek: any opinions on bug #567699 and #567690 ?12:00
ubottuLaunchpad bug 567699 in nvidia-graphics-drivers "Ensure nvidia package works in future for PAE kernel installs" [Undecided,New] https://launchpad.net/bugs/56769912:00
ubottuLaunchpad bug 567690 in fglrx-installer "Ensure fglrx package work in future for PAE kernel installs" [Undecided,New] https://launchpad.net/bugs/56769012:00
pittitseliot: hm, getting the right kernel headers indeed has always been a problem; I just don't understand why adding another alternative makes any difference here?12:05
persiatseliot: If you7re doing that, could you consider all the *other* available flavours?12:05
pittidoesn't linux-headers-generic-pae provide linux-headers?12:05
tseliotpersia: that's my point12:05
tseliotpitti: yes, I think it does12:05
* tseliot doubts that there's a way to get this right12:06
persiaThere isn't a way to get it right.12:06
persiaThe closest would be to catch when the available headers and the running kernel differ, and offer to install the matching headers for the user.12:07
persia(this is also true for all dkms-based packages)12:07
tseliotcan you add some comments in the bug report, please?12:07
pittithen I don't really understand how that could help in the slightest12:12
pittitseliot: no, there isn't; we can't express "we need the same kernel header flavour as the installed kernel" in dependencies12:12
pittiwe could only check that in dkms/jockey at most12:12
pitti*nod*12:12
pittitseliot: commented; I guess we should duplicate the bugs and reassign to jockey/dkms12:12
pittibah, except that LP times out on me12:12
pittiah, it's my backup rsync run of doom, which makes my internet connection useless12:12
tseliotpitti: thanks12:12
pitti(comment went through now)12:13
tseliotpersia, pitti: thanks for your comments12:13
yofelshort question: how do you tell upstart to boot to runlevel 3?12:15
yofel(from grub if possible)12:16
=== MacSlow is now known as MacSlow|lunch
joaopintoyofel, guessing from reading /etc/init.d/rc-sysinit.conf, you can use the runlevel number on the linux kernel line12:21
joaopintoops, init, not init.d12:22
yofelah, thanks for finding that12:22
cjwatsonyofel: you know runlevel 3 isn't what it means on RH-based systems, right?12:26
cjwatsonyofel: on Debian-based systems, runlevels 2, 3, 4, and 5 are identical by default, and left to the sysadmin to customise; in particular runlevel 3 does not mean "boot without graphics" by default12:27
yofelcjwatson: I know, but I wanted to test something later and couldn't find if that's still possible12:27
cjwatsonok, it's just a common confusion so I thought I'd mention it12:28
pittislangasek: hm, I think I need a second opinion about bug 56604612:31
ubottuLaunchpad bug 566046 in gnome-keyring "the login password is stored in the user's keyring" [High,In progress] https://launchpad.net/bugs/56604612:31
pittislangasek: I now have a patch which stops adding the user's password to the keyring, and removes it on upgrade as well; but it potentially breaks this "user.keystore" feature (which I haven't found out how to use it at all)12:32
pittislangasek: so the question is whether we put it into lucid final to stop spreading cleartext passwords and sort out the possible breakage later in SRU, or whether we do one big and upstream approved fix later on in -updates12:33
pittislangasek: upstream didn't respond at all yet, and at this point I need his input12:33
slangasekpitti: is the password stored encrypted or decrypted on disk?12:34
pittiI tested it thoroughly on new users, existing users with and without the password, and normal keyring operations (passwords for empathy accounts, and the like)12:34
pittislangasek: encrypted12:35
pittislangasek: but since the keyring gets unlocked during login, every process can retrieve the cleartext through g-keyring12:35
* slangasek nods12:35
slangasekbut in practice that's only a problem if you have a malicious process running as the user, right?12:36
pittiit's not _such_ a big deal, given that every other password for your web accounts, wifi networks, etc. can also be gotten from the keyring c12:36
pittibut the security team seems to be quite eager about it12:36
pittislangasek: correct12:36
pittiif the user isn't logged in, there's no way to get the passphrase12:36
slangasekpitti: then I think I would prefer SRU12:36
pittislangasek: ok, my feeling as well, thanks; I'll get an ack from security team for this, too12:37
cjwatsonKeybuk: bug 554009 seems to be a regression from your wait-for-root work12:38
ubottuLaunchpad bug 554009 in initramfs-tools "Resume from disk (swapfile) fails" [Medium,Triaged] https://launchpad.net/bugs/55400912:38
simmelI'm creating a Ubuntu package and I am currently using .install files to copy some files on install. There is one file though that I ONLY want to install if it doesn't exist (otherwise, just leave the original file be), can someone point me in the right direction to do this?13:26
simmel(sorry if this is the wrong channel, redirect me elsewhere if possible)13:27
cjwatsonsimmel: erm - you mean, only if it doesn't exist on the user's system when they come to install the .deb?13:27
persiasimmel: Adding a conditional to debian/rules is likely easiest ([ ! -f foo ] && install -m ...)13:27
cjwatsonsimmel: if so that sounds like an odd requirement.  Could you go into specifics?13:28
simmelcjwatson: No, only install one of the files in the package if the files doesn't exist.13:30
persiasimmel: At package creation time, or at package install time?13:31
cjwatsondoesn't exist where?13:31
cjwatsonspecifics would help if you can :)13:31
simmelpersia: Ok, but then I would have to remove it too when the package is uninstalled, right? package install time.13:31
cjwatsonisn't that what I said, and you said no?13:31
persiasimmel: Why do you want to do this?  Which file?13:31
cjwatsonthe reason we're asking these questions is that there are various possibilities and the best one depends on why you're trying to do this.13:32
simmelIt's a post-install configuration file. For host specific configurations that that is applied to configurations of certain applications (think: user/passord/server to connect to)13:33
cjwatsonmake it a conffile, then?13:33
persiaOr don't ship it, and then create it in the postinst (e.g. postfix main.cf)13:33
cjwatsonif it's a conffile, dpkg will prompt the user if there's a conflict.  if you don't want that (although consider the consequences of your configuration file never being upgraded unless you go to some effort ...), then creating it in the postinst would work13:34
lamontinteresting.  postfix {main,master}.cf aren't registered as conffiles... something tells me I should fix that13:37
simmelIs the conffiles like package-name.install?13:37
simmelI mean, do they behave in the same way?13:37
Chipzzjust wondering; isn't #ubuntu-motu normally used for packaging questions?13:37
persialamont: Should main.cf be a conffile?  Depending on what one does with the postinst, it may never be generated (No Configuation).13:37
lamontpersia: if generated, it should confess13:38
simmelcjwatson: Can I somehow in the package specify that dpkg never should prompt? (like always use the one that the user already has or such)13:38
persiaChipzz: The answering of packaging questions was distributed to all development teams as part of Archive Reorganisation.  #ubuntu-packaging exists as a catch-all for random packaging that any team doesn't want to support (e.g. PPA work, work on derivatives, etc.)13:38
Chipzzoh, when did that happen?13:39
persiaEarly February or so.13:39
ChipzzI recall users being redirected to #ubuntu-motu up to a couple of months ago13:40
persiaYeah, that matches my timeframes :)13:40
Chipzzs/users/packaging questions/13:40
simmelChipzz: motu meaning what?13:43
persiasimmel: conffiles is just a way of marking certain configuration.  If you install stuff to /etc it gests marked as conffiles by default.  There's no way short of maintainer scripts to never bother the user.  If it's host specific data, I'd recommending finding a formal you know will work for all eternity, and then separating that from the rest of the configuration, to ease updates of the non-host-specific configuration.13:43
=== MacSlow|lunch is now known as MacSlow
simmelpersia: It is seperated (in a seperate file and folder atleast).13:46
simmelThank you persia and cjwatson for your time and answers. I will take this information up with my colleges and chose which one of the two suggested solutions we will take. Next time I will ask in #ubuntu-packaging13:48
simmelerr, choose13:49
persiaThen create it in postinst based on user's answers to questions *OR* ship an empty config as a conffile and detail how to add to it in a README (depending on the risks/implications of having it just run with the install-time supplied credentials)13:49
persia(or even, ship an empty config as conffile and modify it in postinst)13:50
=== ogra_ is now known as ogra
=== DrPepperKid is now known as MacSlow
=== sconklin-gone is now known as sconklin
mdeslaurpitti: take a look at bug #56787914:23
ubottuLaunchpad bug 567879 in gnome-keyring "gnome-keyring no longer enforces application permissions" [Undecided,New] https://launchpad.net/bugs/56787914:23
seb128urg, the new gnome-keyring is a fail, we should have stayed away from it for lucid14:31
tfried2001sad face14:32
mdeslaurpitti: actually, never mind, I just closed the bug.14:36
seb128mdeslaur, was that the prompt which was judged confusing rather than useful and dropped upstream due to that?14:38
mdeslaurseb128: well, the security value of it was doubtful, and I kind of agree now.14:39
mdeslaurseb128: is Stef Walter the only upstream on gnome-keyring?14:40
pittiright, this was totally worthless14:40
pittiany application could have faked such a dialog14:40
seb128mdeslaur, yes14:40
mdeslaurit was worthless as gnome-keyring should probably be a root process and access granted with policykit, etc.14:40
seb128mdeslaur, I've been mailing "flooding" him for 1.5 months now14:40
seb128he got a baby like 2 months ago and doesn't have too much hacking time atm, he sent an email before that saying he would probably not read all bugzilla traffict but to contact him by email for issues that need to be looked at14:41
mdeslaurseb128: so, no chance of meeting with him at UDS? :P14:42
seb128he has been looking at the bugs I mentioned via email but not on a very responsive timeline14:42
pittionce we know what this user.keystore is for, I think we can just upload the patch that we have14:42
seb128mdeslaur, I doubt it14:42
mdeslaurpitti: I was under the impression it was the pkcs11 cert store, but I may be mistaken14:42
ograseb128, heh, i'm back to stuttering ...14:56
ograogra@osiris:~$ cat /sys/kernel/debug/dri/0/gem_objects|grep "object bytes"14:56
ogra-169566208 object bytes14:56
ografun14:56
ograso RAOF was apparently right with his assumption14:56
seb128ogra: right, read #ubuntu-desktop discussion14:57
* zyga has a company now, woot :-)15:02
pittizyga: oh, congrats! building a new empire? :-)15:04
joaopintoKeybuk, http://pastebin.com/NVWXUS7Y, any idea why /lap is never attempted to be mounted ?15:07
slangasekjoaopinto: run mountall --debug?15:08
slangasekjoaopinto: and according to the last line, all filesystems *were* mounted15:09
joaopintoslangasek, because he opened an hacked tty and did the manual mount :)15:09
slangasekjoaopinto: the 'manual intervention here' is shown three lines after the last mountall message15:10
joaopintoops, right, it was after mountall after all15:11
slangasekjoaopinto: anyway, if something didn't mount right, we'll need mountall --debug to sift through15:11
joaopintook, I am trying to convince him to open a bug report :P15:11
slangasekjoaopinto: bug #567910?15:12
ubottuLaunchpad bug 567910 in mountall "filesystem not getting mounted" [Undecided,New] https://launchpad.net/bugs/56791015:12
slangasekugh, "nodev"?15:12
joaopintooh, great :)15:12
slangasekso, this looks like it might be a duplicate of the many reports of LVM+mountall problems that I haven't been able to reproduce15:13
joaopintoslangasek, he is at #ubuntu+1, might help15:15
slangasekprobably not; I've already asked all the questions I've been able to think of regarding those bugs15:16
joaopintook :\15:17
joaopintohum15:20
joaopinto                /* Check through the known filesystems, if this is a nodev15:21
joaopinto                 * filesystem then mark the mount as such so we don't wait15:21
joaopinto                 * for any device to be ready.15:21
joaopintothey should still be mounted right ? just having a nobootwait behavior15:21
joaopintoI mean, there should still be an attempt to mount15:22
slangasekjoaopinto: no, that's nothing like nobootwait15:26
slangasekif you mark it 'nodev', mountall will try to mount it *immediately*, without first waiting for the device15:26
slangasekso if it needs a device in order to mount, and the device isn't there yet, --> fail15:27
slangasekI have no idea why anyone would mark their LVs 'nodev'15:27
slangasekunless they thought it was analogous to 'nosuid', I guess15:28
joaopintobut from the log there is no attempt to mount that filesystem15:28
slangasekthe log is also uselessly incomplete.  Need a debugging log15:28
jdongif I've got a struct {char* a; int b};, what Ubuntu security feature is causing a SIGABORT when a strcpy into "a" attempts to overwrite "b"?15:29
jdongis that -fstack-protector at work?15:29
slangasekoh, wait - that *is* what the 'nodev' mount option does, sigh15:29
slangasekkeyword overload bad for brane15:29
zygapitti: I hope that's the ubuntu empire :-)15:29
hyperairjdong: you shouldn't get a sigabrt at all, afaik.15:30
hyperairjdong: in the first place, doesn't char * a point somewhere else, so you won't overflow onto b?15:30
slangasekjdong: -fstack-protector might have something to do with it, but fyi, it's not 'b' that would be overwritten in an overflow15:30
hyperairjdong: unless you meant char a[something]15:30
jdonghyperair: yeah sorry for the lazy notation, I meant char a[something]15:30
jdongI've got someone's bot simulator here that contains such a vulnerability...15:31
hyperairafaik if it's in a struct it's all part of the same memory so you can just overflow over with no issues? =\15:31
hyperairor maybe i'm wrong15:31
jdongon Ubuntu I was unable to even go 1 character beyond the end without the program blowing up15:31
jdongbut on RHEL it can be exploited as expected15:32
hyperairjdong: i can't seem to reproduce that.15:34
sistpoty|workjdong: I doubt that a security feature can prevent overwriting b during runtime w.o. violating the c standard (though it's been some time since I a last poked at the standard)15:35
sistpoty|workjdong: however it might be that overwriting is already visible at compile time from -Dfortify_sources, so...15:35
jdongah, whoops15:35
jdongwrong test case15:36
jdongincorrectly simplified test case15:36
jdongthe two resources in the struct are malloced15:36
jdongthey seem to be coincidentally adjacent in RHEL though15:36
sistpoty|workheh, everything malloc'ed is a different corner ;)15:37
jdongindeed it is15:37
jdongand ok, that actually makes sense why it's possible15:37
joaopintoslangasek, I was misreading both the source and the mount manual, "nodev" mount option is not related to the "nodev" property from /proc/filesystems15:53
slangasekright15:53
slangasekwhich I knew, then forgot :)15:53
slangasekpitti: confused by your email; the 114 patch was introduced Mar 31, not Apr 15?16:01
=== doko_ is now known as doko
pittislangasek: oops, yes16:02
* pitti fixes wiki page16:03
dawningQuestion: Is there going to be a 10.04 Beta 3? Is there any point?16:39
pittidawning: the Release Candidate is due tomorrow, and next Thursday is the final16:40
dawningSounds good, thanks pitti16:40
=== icarus901 is now known as stevemaresca
=== stevemaresca is now known as icarus901
=== bjf is now known as bjf[afk]
zygadoko: ping16:58
=== bjf[afk] is now known as bjf
Keybukcjwatson: I don't see why that's a regression17:28
Keybukhis resume= and root= are identical17:28
Keybukthat's clearly not going to work17:28
dokozyga: ?17:34
Keybukslangasek: argh, your -r 323 is *WRONG*17:34
zygadoko: here or in private?17:34
dokocjwatson: http://people.canonical.com/~doko/tmp/ ppa1 built without multiarch, ppa2 with normal glibc and -fno-strict-aliasing, ppa3 without opt17:35
Keybukslangasek: reverted in 324 with explanation17:39
Keybukslangasek: Re:  #553745 - I don't have any handle on it, I've been unable to replicate17:45
Keybukmy only theory had been the patch you tried17:45
=== beuno is now known as beuno-lunch
* hyperair wishes that the window manager would retain control even when applications have menus open18:04
hyperairevery time liferea hangs, i have to switch to a vt to kill it.18:05
hyperairi mean every time it hangs while i'm either right clicking or drag dropping18:05
cjwatsonKeybuk: as I interpreted it, the point of that bug was that resume_offset isn't implemented in wait-for-root18:12
cjwatsonI didn't debug whether the rest of his setup was sane18:12
Keybukcjwatson: it doesn't need to be implemented in wait-for-root ?18:12
cjwatsonoh, maybe I misunderstood the bug then18:12
hyperairresume_offset? are we supporting swap files for resume now?18:12
Keybukno, i think the reporter has misunderstood that resume from swap files *doesn't work*18:12
Keybukand never has18:12
hyperairah18:13
cjwatsonhe explicitly claimed that his setup worked in karmic; perhaps he was lucky18:14
KeybukI tend to assume they lie18:14
hyperairbut you can never get them to admit that.18:14
Keybukwait-for-root simply replaces the bad loop that looked for nodes in /dev and kept running blkid and udevadm settle18:15
Keybukinstead actually listening to uevents18:15
Keybukcomparing the hardy and lucid local-premount/resume scripts, they've changed quite a bit otherwise18:16
kklimondahyperair: when liferea hangs try alt+f - it helps here to unblock it18:16
hyperairkklimonda: what's that supposed to do?18:17
hyperairkklimonda: but anyway i think the real problem is that X is to susceptible to being hijacked by a hanging application =\18:17
=== dendrobates is now known as dendro-afk
hyperairkklimonda: in the first place, why does liferea hang so much? firefox uses sqlite, banshee uses sqlite. i don't see them hanging like this.18:18
Keybukcjwatson: in fact, looking at the current version, it flat out doesn't support resuming from files ;)18:20
kklimondahyperair: when I drag and drop in applications and I get locked (I can't do anything in X because I'm locked in drag&drop mode) opening application menu tends to help.. and I have no idea why does liferea hang so much.. I've hoped that 1.7 would help but no luck :/18:20
hyperairkklimonda: the worst part is that there is nothing better >_>18:20
hyperairkklimonda: so i'm stuck with either crap, or crappier crap.18:21
kklimondahyperair: heh, true - that's the only reason I use liferea :/18:21
hyperairkklimonda: the best part is that upstream is either ignorant to the whole liferea-suckiness, or not seeing the issue at all.18:23
dylan-mkklimonda: Hey, drag+drop hanging used to happen to me reallly often with Liferea, too! That was a year ago, though :o18:30
dylan-mIt taught me one thing: mouse grabs are terrible, evil things and we really need a "release mouse grabs" key18:30
dylan-m(Since then I've used Feedly, but I'm just surprised it still happens after all the refactoring)18:31
hyperairfeedly?18:31
hyperairah feedly.18:32
hyperairthe whole point for me to use an rss reader is so i don't have to open firefox18:32
hyperairthat bl**dy mem hog18:32
dylan-mhyperair: Cute web service + Firefox / Chrome extension that plugs in to Google Reader, but is sadly not open source so we can't borrow their secrets :)18:32
hyperairdylan-m: heh.18:33
hyperairdylan-m: i'm betting that giving liferea a multithreaded interface would do the job.18:33
hyperairdylan-m: like I/O, one thread. UI, one thread.18:33
hyperairthen yay no more hangs.18:33
hyperairafaik liferea's hangs are caused by sqlite doing blocking writes followed by syncs.18:34
dylan-mhyperair: everything that ever performs a grab should be doing it in a separate thread. It's an insanely risky operation18:34
hyperairdylan-m: i agree.18:34
hyperairdylan-m: well, even then menus suck.18:34
hyperairdylan-m: especially when you open a menu and liferea chooses to hang at that point.18:35
=== yofel_ is now known as yofel
keesjdong: /me is curious to see your sigabrt reproducer18:36
=== beuno-lunch is now known as beuno
matgeekSerious boot problem - mountall still does not handle >=4 LVM logical volumes.18:53
matgeekThis is to do with lucid.18:54
Keybukmountall doesn't handle LVM at all18:54
Keybukif you're experiencing problems with LVM, you're experiencing problems with LVM18:54
matgeekKeybuk: Definitely not.  I have been triaging this one for the last few days.  My LVM volumes are perfectly fine.18:55
Keybukif you're convinced it's a mountall issue, do you have a patch?18:56
joaopintothere was another person reporting LVM problems today, with mountall18:56
matgeekKeybuk: I am working on it.  It is early in boot process - therefore harder to debug and get at with gdb etc.18:56
KeybukI think that LVM is busted in Lucid18:56
Keybukmy hunch is that a recent kernel broke it18:56
KeybukI've seen people report things like "volumes not activated" etc.18:56
Keybukand it's clear from the debugging that no uevents for them are generated18:56
Keybukenough to make me convinced that it's not a mountall problem18:57
matgeekI am running kernel.org 2.6.33.2.  LVM utils are fine.18:57
joaopintohe was able to "resume" mountall by doing a manual mount18:57
Keybukthat doesn't really mean much18:57
matgeekYes, that is what I have been doing.  I have noticed udev creating the symlinks in /dev/<volume_name>18:57
matgeekI suspect that udev is working correctly, and that there is a race in mountall.18:58
joaopintoI am refering to bug 56791018:58
ubottuLaunchpad bug 567910 in mountall "filesystem not getting mounted" [Undecided,New] https://launchpad.net/bugs/56791018:58
Keybukfirst debugging step - add --debug to the exec line in /etc/init/mountall.conf and grab /var/log/boot.log when done18:58
matgeekThe plymouht integration seems to have created problems.18:58
Keybukmatgeek: sorry, but I disagree; there is no race in mountall18:58
Keybukall the debugging I've seen shows that mountall never gets told that the LVM devices are ready18:58
matgeekWell, do you watn to come and see it on my laptop???18:58
Keybuksure18:58
matgeekI am a DM with considerable Sys admin experience.  I know what I am talking about.18:59
Keybukthat's nice18:59
matgeekI am here raisning the problem as even with the latest software it still persists.18:59
Keybukno, you're here bitching and being unhelpful19:00
Keybuk<Keybuk> first debugging step - add --debug to the exec line in /etc/init/mountall.conf and grab /var/log/boot.log when done19:00
Keybuk^ that would be helpful and helping prove there's a problem19:00
Keybukright now, there is no proof of any bug19:00
matgeekOK, I am trying to prevent a release with a serious mount probelm on boot.19:00
zygamatgeek: which arch are you running19:00
Keybukmatgeek: if you want to do that, you need to prove there's a serious problem19:01
matgeekKeybuk: Don't just easily write me off as venting.19:01
matgeekI do not have that much time to debug and patch.19:01
zygaseveral days ago slangasek tracked a kernel bug where LVM drivers were not part of the kernel and ppc systems would not boot19:01
Keybukmatgeek: and don't just easily write us off as being idiotic enough to ship with something not working19:01
joaopintomatgeek, calm down, the problem is known, is being worked, if you can please provide more info on the bug I have mentioned above19:01
Keybukjoaopinto: the problem is not known and is not being worked19:01
Keybukmatgeek: http://www.chiark.greenend.org.uk/~sgtatham/bugs.html19:02
matgeekOK: I will go and do the hard yards on Saturday.  I will attempt to get boot logs loaded today against relevant bug.19:02
joaopintoKeybuk, the bug is known, was reported a few hours ago, and I have done some work on it, please calm down19:02
KeybukGive the programmer some credit for basic intelligence: if the program really didn't work at all, they would probably have noticed. Since they haven't noticed, it must be working for them. Therefore, either you are doing something differently from them, or your environment is different from theirs. They need information; providing this information is the purpose of a bug report. More information is almost always better than19:02
Keybukless.19:02
Keybukmatgeek: Saturday will be too late to hold up the release19:03
Keybukjoaopinto: I'm quite calm; like I said, I'm convinced there is an LVM bug somewhere - not a mountall bug19:03
matgeekKeybuk:  Understand.  This bug is hard to find as it involves >= 4 lvm logical volumes coming up.  early boot process debug is difficult.  I can understand how it has been missed.19:03
ryeHello, all. Question - i did dput file.sources w/o specifying  ppa:rye/ppa - it said "Uploading to ubuntu", should I notify anybody to prevent this package into going anywhere?19:03
joaopintoKeybuk, there is a problem, for the user it is irrelevant for the exact package, and you tend to ignore there is more than mountall on Ubuntu19:03
Keybukjoaopinto: yes, that's because I ignore anything outside of my lines of responsibility ;-)19:04
joaopintohe is not arguing about mountall, he is just reporting a problem with his LVM setup, which I believed to be mountall related19:04
ryeThe package in question is "henplus_0.9.8.ds1-0ubuntu1~ppa2~lucid"19:04
matgeekFYI, i have been using Linux since kernel 0.99.19:04
arandrye: it will just get rejected, unless you do have uploade rights to ubuntu main.19:04
joaopintoKeybuk, right, but that is not nice when you do it pushing people for helping with other problems19:05
Keybukthis is not a channel for reporting bugs, this is a channel for assisting in the development of Ubuntu - I expect anyone reporting problems here to also be willing to work on the fixes19:05
joaopintoI mean, for not helping19:05
arandrye: No need to do anything. Just make sure to delete the *upload file if you want to upload it again.19:05
ryei hope i don't... Ok, is the current topic about failure to mount LVM volumes during boot ?19:05
joaopintomatgeek, just update the bug report, some will check it depending on how much people it affects and how important it is compared to other known and being worked problems19:06
Keybukso if someone comes in saying they have problems with LVM, I'll help point at where I think the current problem is to help them continue to work the problem19:06
keesdoko: are you able to trivially reproduce 393022 ?19:06
joaopintoKeybuk, could you tell me the LVM related package I should assign the bug to ?19:07
Keybukjoaopinto: lvm219:08
joaopintoKeybuk, ok, I am going to reassign the bug based on your input19:08
Keybukjoaopinto: I've just done that19:08
Keybukif you're referring to bug #56791019:08
ubottuLaunchpad bug 567910 in mountall "filesystem not getting mounted" [Undecided,New] https://launchpad.net/bugs/56791019:08
joaopintogrr, ok19:08
joaopintoyes, that one19:09
Keybukthe debug log there shows no try_udev_device for laplv19:09
hyperairkklimonda: http://launchpadlibrarian.net/27733951/fsyncbegone.c \o/19:15
gbear14275anyone here able to talk to power management (specifically battery management)?  I have questions about setting charging thresholds for my new li-ion battery.19:15
Keybukjoaopinto: an interesting debugging technique might be19:15
Keybuklet mountall fail and go to a maintenance shell19:16
Keybukthen run "mountall --debug" and get *that* output19:16
Keybuk(from the maintenance shell)19:16
joaopintomountall did not fail19:16
Keybuk-v19:17
gbear14275are there any gui's available to help set charging profiles for my battery?  If not, how can I set my charging profiles?19:17
zygahyperair: what are you doing with those functions?19:17
hyperairzyga: doing nothing.19:17
zygagbear14275: try #ubuntu please19:17
zygahyperair: they looked nice for LD_PRELOAD, right?19:17
hyperairzyga: making them no-op. i don't really need that much data integrity with liferea, since ext4's journalling fine.19:18
hyperairzyga: yes, correct.19:18
=== animAgus is now known as _silentAssassin
Keybukjoaopinto: what do you mean by "did not fail" ?19:18
jdongkees: ah, the backtrace comes from 14:14 < temugen> /lib/tls/i686/cmov/libc.so.6(__fortify_fail+0x48)[0xb72fded8]19:26
jdongkees: ah, -O2 and higher enables that check.19:27
jdonghyperair: ^^^19:27
hyperairjdong: eh?19:27
jdonghyperair: strcpy is hardened at -O2 and above by default19:28
hyperairjdong: ah that's cool.19:28
jdonghyperair: so if you strcpy 11 chars into a char[10] it'll bork at -O2+19:28
hyperairinteresting.19:28
jdongthe software I was trying to exploit was indeed -O319:28
hyperairbut isn't -O supposed to optimize things, rather than add more sanity checks?19:28
hyperairi'm curious as to how it did the sanity check, as well.19:29
jdonghyperair: no I think -O means "don't assume instructions are executed as written"19:29
hyperairah.19:29
jdongand that excuses the use of a replacement magical strcpy and such19:29
jdongagain, kees could give us the real answer :)19:29
hyperairjdong: actually -O in the manpage is documented as Optimize.19:30
jdonghttp://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html19:31
keesjdong: yes, it detects buffer overflows when it knows the size of the buffer.19:34
keesjdong: https://wiki.ubuntu.com/CompilerFlags19:34
jdongkees: cool. I didn't know DFORTIFY_SOURCE involved runtime checks, and I also didn't know it was tied into -O flags.19:34
keesjdong: i.e. gcc+glibc believe the code is doing something unsafe.19:34
jdongkees: surely enough, compiling with the right CFLAGS in RHEL produced an identical result19:35
keesjdong: yup, lots of runtimes checks.  all documented in above wiki (including the -O2 and higher bit)19:35
jdong*nods*19:35
jdongthat's pretty cool19:35
keesjdong: this is why Ubuntu is safer than RHEL -- we changed the defaults in our compiler.  :)19:35
jdongyeah, I really like that.19:35
keesRHEL just uses those flags for their package builds.19:35
jdongheh I always ASSumed that RHEL would be more proactively secure than Ubuntu19:36
jdongnot the case :)19:36
keesnot since intrepid.  :)19:37
jdongkees: you'll love the backstory. For a friend's final project in a programming course, grading was done via an automatic server, assumed to be on RHEL....19:37
jdongkees: it had a filename[80] and a blind strcpy, kids tried to exploit that19:37
jdongunfortunately the grading was done on an Ubuntu box. people who tried to exploit that didn't score very high.19:37
keeshah19:37
keesreal-world success!19:37
jdongyep!19:38
Nafaijdong: Nice!19:38
jdongalways cool to see these features doing something useful in the real world19:39
hyperairnow time to publicise this =p19:40
hyperairand get it dugg, slashdotted and the like =p19:40
jdongkees: any guesses as to why RHEL wouldn't turn these features on by default? Is compatibility a huge issue?19:41
jdongI mean, RHEL is pretty aggressively marketed for its security technologies; it'd seem like that's a priority for them19:41
hyperairnot to mention the patch seems to come from redhat in the first place19:42
jdongoh yeah, most of this hardened toolchain stuff originated from RedHat/Fedora19:44
keesjdong: they're too timid.19:45
keesjdong: since it catches a lot of actual problems, people like the whine.  "but it _used_ to compile and run fine!"19:45
jdongthe irony is, I'd expect their SELinux-by-default to be even a worse offender at "gah it worked before!"19:46
jdongespecially with LAMP apps19:46
jcastrolool, you still have an X200? How's your wireless? Mine started going to sleep.19:46
keesjdong: but I (and others) demanded it be done in Ubuntu, since it improves code quality so much.  that said, there are rare cases when gcc gets it wrong.  (usually via insane by valid tricks in source code)19:46
elmojdong: it's easy to turn SELinux off19:46
elmojdong: it's less easy to recompile everything19:46
jdongelmo: ah, that's true indeed19:46
jdongand so many sysadmins do seem to turn it off19:46
keesjdong: they did develop a lot of it (especially fortify), but stack protector was bounced around for ages before.19:47
jdong*nods*19:48
keesa lot of credit goes to OpenWall and solar designer, actually.19:49
dokokees: no19:49
keesdoko: okay.  I commented on the python upstream bug, trying to add any missing information.  sounds like they're just popping a stack19:49
dokokees: thanks19:53
dokokees: the *link* with -O119:54
dokothey even19:54
* Keybuk hugs -Wl,-O119:54
keesdoko: oh! okay, I misunderstood.19:54
Keybukjoaopinto: ooooooh, I've just noticed something!19:57
Keybukare you able to replicate the "LVM doesn't mount" bug?19:57
joaopintoKeybuk, nope, I was just proxying a support request from #ubuntu+1, I just known it was a XFS filesystem using LVM20:01
Keybukjoaopinto: damn20:02
KeybukI have a theory20:02
Keybukif I'm right, it actually turns out to be a mountall bug after all20:02
Keybukthere's a line of code missing20:02
Keybukand this sounds a lot like a different bug we had20:02
=== animAgus is now known as _silentAssassin
KeybukI'll build a package and get them to try it20:04
=== kusum1 is now known as kusum
=== al-maisan is now known as almaisan-away
joaopintohow is the default timezone on the installer selected ?20:59
TMKCodesIs anywhere in ubuntu needed help from "new" c developer?21:12
cjwatsondoko: belatedly - thanks, will try those21:13
cjwatsondoko: I should test busybox-udeb ppa1 with the libc6-udeb from your PPA, right?21:14
sabdflTMKCodes:  lots to do - check out the "how to contribute" page on the wiki21:14
TMKCodessabdfl i did read it already.21:15
sabdflok21:15
cjwatsonTMKCodes: in my experience, it's better to find a problem that's annoying you personally and try to solve it (then repeat lots and lots of times!), than to try to filter it in advance by the language21:17
cjwatsonjoaopinto: geoip21:17
cjwatsonjoaopinto: fallback from that to a language-specific value21:18
TMKCodescjwatson my problem is i dont have any problems with ubuntu atm21:18
cjwatsonnot trying hard enough ... ;-)21:18
TMKCodesWell i have some boot issues, have not looked into it.21:18
cjwatsonthere are some bugs tagged 'bitesize', although not as many as there should be21:19
TMKCodesDamn at last i found the bug tracker at launchpad.. Really hate that site.21:19
cjwatsonand actually it's possible those are more trivial packaging kinds of bugs rather than anything that involves C21:19
TMKCodesWell.. C problems would be nice, but packaging problems are ok too xD21:20
TMKCodespackaging is the place where most start contributing.21:20
cjwatsonseriously though - I got seriously into Debian development back in the day by way of somebody posting a message of the form "<this really important program> really sucks, can somebody fix it?"21:20
TMKCodes:P21:20
cjwatsonand it was a program I used, and I could replicate a fair bit of the suckage, so I did21:20
TMKCodesYeah i can understand that.21:21
cjwatsonI'd done some packaging before that, but it's really just a means to an end21:21
joaopintothe default for my country seems far from ideal, an island is the default instead of the mainland21:21
joaopintoshould I file a bug for ubiquity ?21:22
cjwatsonanyway, point is, this worked because I had a personal interest in fixing the problems - it probably wouldn't have done otherwise21:22
cjwatsonjoaopinto: like I say, the defaults often come from geoip ...21:22
TMKCodesI have used ubuntu for several years, but there's been much problems with me so i've just waited bit for someone to fix the problem.21:22
cjwatsonjoaopinto: what country?21:22
ogra_cmpcjoaopinto, likely because your provider routes through that island21:22
cjwatsonogra_cmpc: not necessarily, some of the geoip server's defaults are dubious21:22
ogra_cmpcah21:22
joaopintocjwatson, Portugal21:22
cjwatson  else if ( strcmp (country, "PT") == 0 ) {21:23
cjwatson    timezone = "Atlantic/Azores";21:23
cjwatson  }21:23
* cjwatson hits geoip with a wet fish21:23
cjwatsonjoaopinto: bug on geoip, please21:23
joaopintouhh21:23
ogra_cmpclol21:23
joaopinto:)21:23
TMKCodesi found the bug that i need to fix.21:23
TMKCodesbug number 1..21:24
ogra_cmpcTMKCodes, thats rather a yeam effort :)21:24
ogra_cmpc*team21:24
TMKCodes:P21:24
joaopintocjohnston, geoip-database <- ?21:24
cjohnston:-P21:24
joaopintogrrr, cjwatson21:24
cjwatsonsadly, while geoip figures out the country accurately and sometimes an accurate region within it, the timezone it returns is hardcoded really stupidly21:24
cjwatsonjoaopinto: no, geoip.  it's hardcoded.  don't ask. :-(21:25
joaopintocjwatson, where did you paste that code from ? the code is wrong...21:25
cjwatsonfrom the geoip source package21:25
cjwatsonlibGeoIP/timeZone.c21:25
ogra_cmpcjoaopinto, yes thats why he pasted it :)21:25
cjwatsonI agree it's wrong, but I'd want to send it upstream21:25
ogra_cmpcuse it in your bug report21:26
cjwatsonand we'd need to backport the fix to our servers21:26
cjwatsonit's the geoip package *on the server* that matters21:26
joaopintowhat, geoip uses source code for the translation ?21:26
cjwatsonyes21:26
cjwatsonit's not pretty21:26
cjwatsonI was kind of horrified when I found that, when dealing with a previous bug of the same form for another country21:26
cjwatson(bug 517621)21:27
ubottuLaunchpad bug 517621 in ubiquity "Default setting of zh_CN locale incorrect" [Undecided,Fix released] https://launchpad.net/bugs/51762121:27
ogra_cmpcover time it will be great though if we use it by default21:27
ogra_cmpcwas probably a bit risky to include it now ... we should have done that in karmic already21:27
tormodpitti, I have a fix for the broken -dbg/-dbgsym packages in bug 56241821:28
ubottuLaunchpad bug 562418 in xorg-server "many -dbg packages have debug symbols mismatch" [Undecided,Confirmed] https://launchpad.net/bugs/56241821:28
Sarvatt\o/ \o/ \o/ thanks tormod!21:29
joaopintodone, bug 568067, I guess it doesn't need a patch from me :P21:30
ubottuLaunchpad bug 568067 in geoip "Default timezone for the country 'PT' is wrong, should be 'Europe/Lisbon'" [Undecided,New] https://launchpad.net/bugs/56806721:30
joaopintoI guess it's low importance to be fixed before final :\21:32
tormodSarvatt, simple fix but a bitch to hunt down :)21:32
cjwatsonjoaopinto: because the operative code is on the server, it doesn't matter if it makes final21:35
looljcastro: I have a X301; wireless is okay-ish, but had some issues during the cycle21:35
loolwould disconnect at random21:35
loolit's decent now21:35
cjwatsonjoaopinto: we can fix it whenever, and all users will get the fix instantly on deployment21:35
joaopintoah, server side geoip ok, much better :)21:35
cjwatsonso we should focus on things that don't have that property21:35
mvoccheney: hi, if you could review https://code.edge.launchpad.net/~mvo/openoffice/3.2.0-lucid/+merge/23875 that would be nice. I will go to bed now so no rush21:36
barryjames_w: any chance you're still around?22:13
james_wbarry: I am22:13
james_wso, yes I guess22:13
barryjames_w: :)  can we talk about lazr.restfulclient?22:13
james_wyup22:14
barryjames_w: so, i'm trying to get a branch for lucid up to 0.9.13 or .14.  iiuc, there is no lp:debian branch for it even though it's in testing:22:14
barryhttp://packages.debian.org/source/squeeze/lazr.restfulclient22:14
barryjames_w: but it also looks like we have an ubuntu specific patch, so bzr import-dsc didn't do what i expected it to do22:15
barryjames_w: and of course, i can't just merge in lp:lazr.restfulclient22:15
barry(no common ancestor)22:15
barryjames_w: it also looks like debian svn has 0.9.14 in it though no source package yet22:16
barryafaict22:16
barryjames_w: so i'm wondering, what is the best way to update the package for lucid?22:16
james_wbarry: the sid branch has it I think?22:16
barryjames_w: let's see if i can find that :)22:17
james_wlp:debian/sid/lazr.restfulclient22:17
barrythanks22:18
barryjames_w: yep, that looks more sane22:18
james_wthe reason that the squeeze branch doesn't have it yet is that gina hasn't picked it up yet22:19
barryjames_w: conflict on the Maintainer and Uploaders fields, but that should be easily resolved22:19
james_wyeah, jelmer filed a bug about smarter merging of debian/control22:19
barryjames_w: cool, this is exactly what i was looking for, thanks.  do you want to review the branch when i push it?22:20
james_wsure22:20
barryjames_w: cool, thanks22:20
james_wit would be tomorrow for me though22:20
barryyep, no worries22:20
dokocjwatson: yes, the libc6 udeb from the ppa22:25
=== sconklin is now known as sconklin-gone
keesdoko: that python issue is from an already-fixed kernel bug23:37
dokokees: fixed in which version?23:37
keesdoko: all.  it was fixed when karmic released, and went into stable kernels on mar 16th.23:38
keesdoko: I put all the details in the upstream python bug23:39
keesdoko: I might be able to find all the bug reports in LP that are dups of this kernel issue, actually.  they stand out when you examine the ProcMaps.txt file23:40
dokokees: cool, thanks!23:41
keesdoko: sure thing :)23:41
cjwatsondoko: neither (libc6-udeb/ppa + busybox ppa1) nor busybox ppa2 makes any difference23:56
cjwatsontrying 3 now23:56

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!