| roaksoax | bigjools: around already? | 00:01 |
|---|---|---|
| bigjools | roaksoax: OTP | 00:33 |
| bigjools | roaksoax: still there? off TP now | 01:22 |
| roaksoax | bigjools: ya | 01:23 |
| roaksoax | bigjools: so if you saw, the sudoers thing is in place already | 01:23 |
| bigjools | I saw! | 01:23 |
| roaksoax | bigjools: the only problem now is being able to access the files under etc/<daemon> | 01:24 |
| roaksoax | bigjools: the group adding didn't seem to work | 01:24 |
| roaksoax | so another option would be to manage those files independently and just symlink | 01:24 |
| bigjools | yeah I guessed it would not yesterday when I looked at it in more detail :( | 01:24 |
| roaksoax | i don't know whether that would work | 01:24 |
| bigjools | we could spawn a process using sudo, instead of writing directly | 01:25 |
| roaksoax | that could also be an option, Im gonna email to the security list | 01:26 |
| bigjools | or temporarily gain suid? | 01:26 |
| bigjools | I forgot the system call | 01:26 |
| bigjools | in fact I hope Python could even do that | 01:26 |
| roaksoax | heh well we need to look into that | 01:26 |
| roaksoax | without having an in-depth look, handling it under /var/lib/maas and symlinking to /etc/<daemon> might work | 01:27 |
| bigjools | roaksoax: do you want to run with it? you probably overlap better with Jamie | 01:27 |
| roaksoax | bigjools: yes, I'll email tomorrow morning the security team | 01:27 |
| roaksoax | for advise | 01:27 |
| bigjools | you mean writing to /var/lib/maas, ok, but doesn't it still need root to symlink? | 01:27 |
| roaksoax | bigjools: the symlinking would be done on package creation | 01:28 |
| roaksoax | bigjools: so maas would modify whatever is in /var/lib/maas/dhcp/* for example | 01:28 |
| roaksoax | bigjools: s/package creation/package installation/ | 01:29 |
| bigjools | ah ok | 01:29 |
| bigjools | like we do for dns? | 01:29 |
| roaksoax | bigjools: for DNS we do directly on /etc/bind/maas | 01:29 |
| * bigjools wonders if dhcp has an inclusion mechanism | 01:29 | |
| roaksoax | bigjools: so we only need to have a dhcpd.conf right? | 01:30 |
| bigjools | yep | 01:30 |
| roaksoax | bigjools: so that could be in /var/lib/maas/dhcp/dhcpd.conf, then we symlink that to /etc/dhcp/dhcpd.conf | 01:30 |
| bigjools | this will eventually need to happen on worker packaging as well | 01:30 |
| roaksoax | yep | 01:31 |
| bigjools | that would work | 01:31 |
| roaksoax | on package installation is easy thing to create a symlink | 01:31 |
| bigjools | when I say eventually, in about 4-6 weeks :) | 01:31 |
| roaksoax | hehe | 01:31 |
| bigjools | >deadlines< | 01:31 |
| roaksoax | sounds like fun | 01:31 |
| bigjools | fsvo | 01:32 |
| bigjools | roaksoax: oh BTW, we are running tftp out of the maas tree in precise, right? | 01:33 |
| bigjools | I am about to test it | 01:33 |
| bigjools | hmmm | 01:35 |
| bigjools | maas wants to install python-txtftp still | 01:35 |
| bigjools | should probably fix that :) | 01:36 |
| roaksoax | bigjools: in precise it is in the tree | 01:43 |
| roaksoax | bigjools: python-txtftp is a depends on quantal, but it is installed from the source in precise | 01:43 |
| roaksoax | anyways, i'm off | 01:44 |
| roaksoax | have a good day | 01:44 |
| bigjools | roaksoax: it depends on it in precise AFAICS | 01:48 |
| bigjools | python-django-maas depends on python-tftp | 01:54 |
| bigjools | python-django-maas depends on python-txtftp I mean | 01:54 |
| roaksoax | bigjools: yeah | 02:57 |
| roaksoax | bigjools: that's about right, because the provisioningserver is being shipped with python-django-maas | 02:58 |
| bigjools | ah you're back | 02:58 |
| bigjools | I sent an email 5 mins ago | 02:58 |
| roaksoax | bigjools: yeah i just read that's why I came back :) | 02:58 |
| bigjools | :) | 02:58 |
| roaksoax | bigjools: so i keep a separate branch for the precise precise package | 02:58 |
| bigjools | roaksoax: sounds like we need two proper packaging branches then :) | 02:59 |
| bigjools | and two recipes | 02:59 |
| roaksoax | bigjools: yeah I have them I just haven uploaded it since I wanted to get the cobbler removal in place | 02:59 |
| roaksoax | bigjools: but the precise version basically removes whatever is not in the archives (such as python-tx-tftp) | 02:59 |
| roaksoax | bigjools: so if you backport a quantal version to precise, it will fail to work | 03:01 |
| roaksoax | bigjools: http://paste.ubuntu.com/1171058/ | 03:01 |
| roaksoax | bigjools: i'll upload it to a bracnh tomorrow | 03:01 |
| roaksoax | bigjools: the problme is (in PPA's) that the tarball differs for each version, and so, PPA's don't alow me to upload | 03:01 |
| bigjools | ah | 03:01 |
| bigjools | indeed | 03:01 |
| bigjools | you need to version them appropriately :) | 03:02 |
| roaksoax | bigjools: indeed | 03:02 |
| bigjools | I won't test today then, let me know when you're set | 03:02 |
| roaksoax | bigjools: please, do test it today | 03:03 |
| roaksoax | bigjools: I have it in ppa:andreserl/ppa | 03:03 |
| bigjools | ok | 03:03 |
| bigjools | I'll let you know how I get on then | 03:03 |
| roaksoax | bigjools: ok, awesome then! | 03:03 |
| roaksoax | i'm off now for real :) | 03:04 |
| roaksoax | have a good day | 03:04 |
| bigjools | roaksoax: cheers! | 03:04 |
| roaksoax | bigy | 15:02 |
| roaksoax | err | 15:02 |
| === matsubara is now known as matsubara-lunch | ||
| === matsubara-lunch is now known as matsubara | ||
| bigjools | hey roaksoax | 23:27 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!