[00:01] bigjools: around already? [00:33] roaksoax: OTP [01:22] roaksoax: still there? off TP now [01:23] bigjools: ya [01:23] bigjools: so if you saw, the sudoers thing is in place already [01:23] I saw! [01:24] bigjools: the only problem now is being able to access the files under etc/ [01:24] bigjools: the group adding didn't seem to work [01:24] so another option would be to manage those files independently and just symlink [01:24] yeah I guessed it would not yesterday when I looked at it in more detail :( [01:24] i don't know whether that would work [01:25] we could spawn a process using sudo, instead of writing directly [01:26] that could also be an option, Im gonna email to the security list [01:26] or temporarily gain suid? [01:26] I forgot the system call [01:26] in fact I hope Python could even do that [01:26] heh well we need to look into that [01:27] without having an in-depth look, handling it under /var/lib/maas and symlinking to /etc/ might work [01:27] roaksoax: do you want to run with it? you probably overlap better with Jamie [01:27] bigjools: yes, I'll email tomorrow morning the security team [01:27] for advise [01:27] you mean writing to /var/lib/maas, ok, but doesn't it still need root to symlink? [01:28] bigjools: the symlinking would be done on package creation [01:28] bigjools: so maas would modify whatever is in /var/lib/maas/dhcp/* for example [01:29] bigjools: s/package creation/package installation/ [01:29] ah ok [01:29] like we do for dns? [01:29] bigjools: for DNS we do directly on /etc/bind/maas [01:29] * bigjools wonders if dhcp has an inclusion mechanism [01:30] bigjools: so we only need to have a dhcpd.conf right? [01:30] yep [01:30] bigjools: so that could be in /var/lib/maas/dhcp/dhcpd.conf, then we symlink that to /etc/dhcp/dhcpd.conf [01:30] this will eventually need to happen on worker packaging as well [01:31] yep [01:31] that would work [01:31] on package installation is easy thing to create a symlink [01:31] when I say eventually, in about 4-6 weeks :) [01:31] hehe [01:31] >deadlines< [01:31] sounds like fun [01:32] fsvo [01:33] roaksoax: oh BTW, we are running tftp out of the maas tree in precise, right? [01:33] I am about to test it [01:35] hmmm [01:35] maas wants to install python-txtftp still [01:36] should probably fix that :) [01:43] bigjools: in precise it is in the tree [01:43] bigjools: python-txtftp is a depends on quantal, but it is installed from the source in precise [01:44] anyways, i'm off [01:44] have a good day [01:48] roaksoax: it depends on it in precise AFAICS [01:54] python-django-maas depends on python-tftp [01:54] python-django-maas depends on python-txtftp I mean [02:57] bigjools: yeah [02:58] bigjools: that's about right, because the provisioningserver is being shipped with python-django-maas [02:58] ah you're back [02:58] I sent an email 5 mins ago [02:58] bigjools: yeah i just read that's why I came back :) [02:58] :) [02:58] bigjools: so i keep a separate branch for the precise precise package [02:59] roaksoax: sounds like we need two proper packaging branches then :) [02:59] and two recipes [02:59] bigjools: yeah I have them I just haven uploaded it since I wanted to get the cobbler removal in place [02:59] bigjools: but the precise version basically removes whatever is not in the archives (such as python-tx-tftp) [03:01] bigjools: so if you backport a quantal version to precise, it will fail to work [03:01] bigjools: http://paste.ubuntu.com/1171058/ [03:01] bigjools: i'll upload it to a bracnh tomorrow [03:01] bigjools: the problme is (in PPA's) that the tarball differs for each version, and so, PPA's don't alow me to upload [03:01] ah [03:01] indeed [03:02] you need to version them appropriately :) [03:02] bigjools: indeed [03:02] I won't test today then, let me know when you're set [03:03] bigjools: please, do test it today [03:03] bigjools: I have it in ppa:andreserl/ppa [03:03] ok [03:03] I'll let you know how I get on then [03:03] bigjools: ok, awesome then! [03:04] i'm off now for real :) [03:04] have a good day [03:04] roaksoax: cheers! [15:02] bigy [15:02] err === matsubara is now known as matsubara-lunch === matsubara-lunch is now known as matsubara [23:27] hey roaksoax