roaksoaxbigjools: around already?00:01
bigjoolsroaksoax: OTP00:33
bigjoolsroaksoax: still there? off TP now01:22
roaksoaxbigjools: ya01:23
roaksoaxbigjools: so if you saw, the sudoers thing is in place already01:23
bigjoolsI saw!01:23
roaksoaxbigjools: the only problem now is being able to access the files under etc/<daemon>01:24
roaksoaxbigjools: the group adding didn't seem to work01:24
roaksoaxso another option would be to manage those files independently and just symlink01:24
bigjoolsyeah I guessed it would not yesterday when I looked at it in more detail :(01:24
roaksoaxi don't know whether that would work01:24
bigjoolswe could spawn a process using sudo, instead of writing directly01:25
roaksoaxthat could also be an option, Im gonna email to the security list01:26
bigjoolsor temporarily gain suid?01:26
bigjoolsI forgot the system call01:26
bigjoolsin fact I hope Python could even do that01:26
roaksoaxheh well we need to look into that01:26
roaksoaxwithout having an in-depth look, handling it under /var/lib/maas and symlinking to /etc/<daemon> might work01:27
bigjoolsroaksoax: do you want to run with it?  you probably overlap better with Jamie01:27
roaksoaxbigjools: yes, I'll email tomorrow morning the security team01:27
roaksoaxfor advise01:27
bigjoolsyou mean writing to /var/lib/maas, ok, but doesn't it still need root to symlink?01:27
roaksoaxbigjools: the symlinking would be done on package creation01:28
roaksoaxbigjools: so maas would modify whatever is in /var/lib/maas/dhcp/* for example01:28
roaksoaxbigjools: s/package creation/package installation/01:29
bigjoolsah ok01:29
bigjoolslike we do for dns?01:29
roaksoaxbigjools: for DNS we do directly on /etc/bind/maas01:29
* bigjools wonders if dhcp has an inclusion mechanism01:29
roaksoaxbigjools: so we only need to have a dhcpd.conf right?01:30
roaksoaxbigjools: so that could be in /var/lib/maas/dhcp/dhcpd.conf, then we symlink that to /etc/dhcp/dhcpd.conf01:30
bigjoolsthis will eventually need to happen on worker packaging as well01:30
bigjoolsthat would work01:31
roaksoaxon package installation is easy thing to create a symlink01:31
bigjoolswhen I say eventually, in about 4-6 weeks :)01:31
roaksoaxsounds like fun01:31
bigjoolsroaksoax: oh BTW, we are running tftp out of the maas tree in precise, right?01:33
bigjoolsI am about to test it01:33
bigjoolsmaas wants to install python-txtftp still01:35
bigjoolsshould probably fix that :)01:36
roaksoaxbigjools: in precise it is in the tree01:43
roaksoaxbigjools: python-txtftp is a depends on quantal, but it is installed from the source in precise01:43
roaksoaxanyways, i'm off01:44
roaksoaxhave a good day01:44
bigjoolsroaksoax: it depends on it in precise AFAICS01:48
bigjoolspython-django-maas depends on python-tftp01:54
bigjoolspython-django-maas depends on python-txtftp I mean01:54
roaksoaxbigjools: yeah02:57
roaksoaxbigjools: that's about right, because the provisioningserver is being shipped with python-django-maas02:58
bigjoolsah you're back02:58
bigjoolsI sent an email 5 mins ago02:58
roaksoaxbigjools: yeah i just read that's why I came back :)02:58
roaksoaxbigjools: so i keep a separate branch for the precise precise package02:58
bigjoolsroaksoax: sounds like we need two proper packaging branches then :)02:59
bigjoolsand two recipes02:59
roaksoaxbigjools: yeah I have them I just haven uploaded it since I wanted to get the cobbler removal in place02:59
roaksoaxbigjools: but the precise version basically removes whatever is not in the archives (such as python-tx-tftp)02:59
roaksoaxbigjools: so if you backport a quantal version to precise, it will fail to work03:01
roaksoaxbigjools: http://paste.ubuntu.com/1171058/03:01
roaksoaxbigjools: i'll upload it to a bracnh tomorrow03:01
roaksoaxbigjools: the problme is (in PPA's) that the tarball differs for each version, and so, PPA's don't alow me to upload03:01
bigjoolsyou need to version them appropriately :)03:02
roaksoaxbigjools: indeed03:02
bigjoolsI won't test today then, let me know when you're set03:02
roaksoaxbigjools: please, do test it today03:03
roaksoaxbigjools: I have it in ppa:andreserl/ppa03:03
bigjoolsI'll let you know how I get on then03:03
roaksoaxbigjools: ok, awesome then!03:03
roaksoaxi'm off now for real :)03:04
roaksoaxhave a good day03:04
bigjoolsroaksoax: cheers!03:04
=== matsubara is now known as matsubara-lunch
=== matsubara-lunch is now known as matsubara
bigjoolshey roaksoax23:27

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!