smartboyhwSergioMeneses ah I know how to get rid of the duplicate image itemd in Testdrive now. Thx!00:01
SergioMenesessmartboyhw, :)00:02
tacorwin_I know its late, but is anyone on that i could report a bug to?02:32
TheDrumsYou can always report bugs to the bug tracker.02:39
ubot5If you find a bug in Ubuntu or any of its derivatives, please file a bug using the command « ubuntu-bug <package> » - See https://help.ubuntu.com/community/ReportingBugs for other ways to report bugs.02:39
tacorwin_Thank you. :)02:47
dholbachgood morning06:42
jibelgood morning06:51
pittibonjour jibel07:02
jibelbonjour pitti , ça va ?07:05
pittijibel: ça va bien, merci!07:07
zygagood morning07:07
pittijibel: some bumps from training yesterday, we practiced self-defense again07:08
pittijibel: je me demande pourquoi autant de autopkgtests sont cassé07:08
jibelpitti, ENOSPACE07:09
pittioh :)07:09
jibelpitti, I did some cleanup, and will restart them07:09
pittijibel: merci07:09
pittijibel: is there something leaking, or is it just due to the accumulation of logs?07:09
jibelpitti, do we need libpam-systemd on the jhbuild machine ?07:09
pittijibel: I installed it so that e. g. polkit properly detects that it should use logind07:10
pittiit's a bit of a workaround07:10
pittibut I can apply a different workaround, if it gets in the way07:10
jibelpitti, ah ok, because installation fails07:10
pittiyeah, apparently it cannot mount the cgroup in the container07:10
jibelservice systemd-logind fails to start07:10
pittinot sure why, it's something I've been meaning to ask stgraber07:11
jibelyeah, cgroup inside cgroup07:11
pittiyeah, it doesn't matter; the configure check actually only checks for /sys/fs/cgroup/systemd/07:11
stgraberpitti: yes?07:11
pittistgraber: in our jhbuild container, mounting a cgroup fails; is this expected?07:12
stgraberis that on 13.04?07:12
pittiguest is 13.04, host is (I guess) precise, checking07:12
stgraberoh, actually I think we may be rejecting this in apparmor in all cases. It's just that in 13.04 we made it slightly better when you're doing nesting07:13
stgraberpitti: anyway, yes, mounting cgroups in a container is considered unsafe as it lets you adjust the container's restriction from within07:14
stgraberpitti: if you don't care about this, it's easy to enable cgroups in a custom apparmor profile07:14
pittithat means we can't run logind in a container07:14
pittistgraber: host is 12.10, guest is 13.0407:14
pitti$ sudo mount -t cgroup -o nosuid,noexec,nodev,none,name=systemd systemd /sys/fs/cgroup/systemd07:15
pittimount: block device systemd is write-protected, mounting read-only07:15
pittimount: cannot mount block device systemd read-only07:15
pittiah, indeed07:15
pittiapparmor="DENIED" operation="mount" info="failed type match" error=-13 parent=104752 profile="lxc-container-default" name="/sys/fs/cgroup/systemd/" pid=104821 comm="mount" fstype="cgroup" srcname="systemd" flags="ro, nosuid, nodev, noexec"07:15
stgraberpitti: ok, that specific mount should be safe (as it mounts an empty cgroup), let me come up with an apparmor pattern that matches that one exactly07:15
pittistgraber: i. e. it should be okay to mount new groups, but not change existing ones?07:16
stgraberpitti: well, the problem is that if you use a cgroup controller like "blkio", then it's going to always be shared, and we clearly don't want that07:17
stgraberfor those we have a lxc hook you can add (starting with 13.04) which bind-mounts just the right sub-directories of the cgroup07:17
pittistgraber: ah, sure; I wasn't sure whether cgroups can nest in principle07:17
stgraberanyway, the specific case of systemd should be safe, I'll just confirm that and come up with an extra apparmor rule to cover it07:18
stgraberpitti: gah, no it's not safe...07:20
stgraberpitti: I tried mounting the cgroup in two containers and can see the entry I create in one in the other07:20
pittistgraber: I'll ask Lennart about that; he mentioned this topic (systemd/logind in containers) the other day, maybe he has an ide07:21
pittianyway, it's not urgent for now, but this will become a topic in squishy07:21
stgraberso in theory we could use the same magic as for other cgroups07:21
stgraberwhich is to create "lxc/$container-name" in the cgroup on the host and then bind-mount just the sub-directory in the container07:22
* stgraber quickly checks we don't actually already do that on 13.0407:22
stgraberpitti: we do!07:24
pittistgraber: so upgrading the host to 13.04 should do it?07:25
stgraberpitti: yep, upgrading the host to 13.04, make sure the systemd cgroup is mounted on the host and add "lxc.hook.mount = /usr/share/lxc/hooks/mountcgroups" to the container config07:25
pittiso 13.10 on 13.10 should by and large work, except for this ^ config bit07:26
stgraberyep, which we may end up doing by default by then (I can't think of any security issue with it, so we may as well do it by default for distros that use logind)07:27
pittisplendid; thanks stgraber!07:27
stgrabernp, glad to see our very recent cgroup magic actually works as intended ;)07:27
jibelpitti, I finish the notifications today then we can upgrade the host to 13.04. In any case, it will be a good test a week before the release.07:31
pittijibel: it's not urgent right now, but if you want to do the upgrade anyway, sure07:31
=== smartboyhw_ is now known as smartboyhw
=== ara_ is now known as ara
=== _salem is now known as salem_
chilicuilmorning SergioMeneses14:56
balloonsmorning chilicuil and SergioMeneses14:57
chilicuil~.~/ balloons14:57
SergioMeneseschilicuil, balloons hey hey, how's everything?14:57
balloonsSergioMeneses, pretty good.. Working on expanding out the stats I showed yesterday to make them clearer and show more stuff :)15:02
balloonsI saw your post in Spanish SergioMeneses .. I hope you encourage some more spanish speaking folks to give things a try15:15
smartboyhw_balloons: Or rather, since the passage is dedicated to us, he should have made an English translation:P15:16
SergioMenesesballoons, :) I hope so15:18
SergioMenesessmartboyhw_, aaah15:18
balloonssmartboyhw_, lolol15:22
smartboyhw_SergioMeneses, lolol15:23
* balloons is waiting for a chinese post from smartboyhw_ 15:23
smartboyhw_balloons: Sure, but wait for a century please;P15:24
balloonsa century?15:24
smartboyhw_balloons: Yep:P15:25
SergioMenesesballoons, totally agree jeje15:27
balloonsupdates for everyone in a 1 min15:27
smartboyhw_balloons: What update?15:28
smartboyhw_SergioMeneses: What sort of update you guess will balloons bring?15:38
SergioMenesessmartboyhw_, I have no idea! maybe the chars or something in his blog15:40
SergioMenesesbut I dont know15:40
balloonsI added the other tracker stats :-)15:46
smartboyhw_balloons \o/15:47
smartboyhw_balloons: The new stats are the package testing and laptop testing ones right?15:48
balloonsyea.. I subtitled everything too to make it easier to understand I hope15:48
smartboyhw_SergioMeneses: The Laptop Testing Team is happy now eh? ^^15:48
SergioMenesessmartboyhw_, balloons :O15:49
SergioMenesesawesome! balloons great work!15:49
SergioMeneseslaptop testing is working pretty hard!15:50
SergioMenesesbtw, balloons where do you get this information?15:52
balloonsSergioMeneses, all this information is from public data sources.. launchpad, bzr and the various trackers15:53
balloonsdoes everything make more sense now? that is, do the graphs make sense? do the subtitles help?15:54
smartboyhw_balloons: Do one flavour for me: Package the QA Tracker APIs for me in S-cycle:P15:54
smartboyhw_balloons: It works perfectly!15:54
balloonssmartboyhw_, the tracker api is in python http://iso.qa.ubuntu.com/qatracker/api15:55
balloonsyou could even use it to submit results :-)15:55
SergioMenesesballoons, I see everything perfect! maybe a nice post that would be nice15:55
balloonsimagine a testdrive client that you could browse a testcase and have it pull the image, start and display the testcase for you to run, and let you submit a pass/fail after :-)15:56
smartboyhw_balloons: Whoa!15:56
* SergioMeneses dreams15:56
smartboyhw_That's a S or T cycle target15:56
balloonsyou all have the skills now.. but yea, the api has enough stuff you could conceivably write a desktop client for it15:59
balloonsI'm not sure it makes sense (aka, a whole client) because the site is already there and works well :-)15:59
balloonsbut integration pieces are interesting perhaps15:59
=== smartboyhw is now known as Guest42028
phillwballoons: I look forward to learning about lxc. I feel it may be another tool in the testing armoury to add to Vbox and KVM (although the testdrive people will possibly hate me :D )21:17
balloonslxc is quite nice21:17
balloonsjuju uses it21:18
phillwI'd never heard of it. I only looked it up because it began 'lx' which is often an lxde associated item :)21:18
Noskcajwhat is lxc? and what will it make testdrive people(e.g. me) angry?21:20
phillwoh, and while you're here. I will be sending an 'old fashioned' update for the lubuntu encrypted alternate test case as it should also include the "write the pass phrase down"21:20
phillwNoskcaj: sorry, the ^^ was for balloons, the link for you is http://lxc.sourceforge.net/21:22
Noskcajok, thanks21:22
balloonsphillw, gonna get a commit in?21:23
balloons:-) :-) :-)21:23
Noskcajalso, i'm adding an extra bug to testdrive, very minor21:23
balloonsNoskcaj, in a nutshell lxc is a virtual container for running linux on linux21:24
phillwballoons: nope, I'm going to send you the file :P21:24
balloonsit's more lightweight than running a full vm, but has it's own limitations of course21:25
balloonsphillw, you know I have a new goal now21:25
phillwall vm's have limitations, but I see no reason for it not to be added to our options for testing 13.10 :)21:26
balloonshelp you get a commit21:26
balloonsxephyr is cool too.. since I got it support21:27
Noskcajballoons, lolwut? even that hurts my brain.21:28
balloonsit always you to run an xserver as a window in an existing xserver21:28
balloonswow.. I don't know what's going on..21:28
balloonsbrain and keyboard are disconnected21:28
phillwballoons: only when I have time to upgrade to 13.04 and copy a lot of  http://mgjuddltd.co.uk/ to http://demo.oscommerce.com/ as the sponsor of my dedicated server now wishes to be able to sell on-line. That will take some doing, but it has been agreed that it will not start until after 13.04 is released.21:28
balloonsyou don't run precise on your server21:29
phillwI get sponsorship, but in return, I give my time freely for any support / dev stuff that company needs.21:30
phillwI use 12.10 on piglet. I want to upgrade to 13.04. On my 2nd Hard Drive, I run CentOS 6.4 which is the same as my server. This means I can do the dev work on piglet before committing to the server :)21:31
balloonsI'm switching providers at the end of the month21:32
phillwBut, starting such a thing this close to 13.04 release would be too big a task. The sponsor fully understands that.21:32
phillwballoons: you could do a lot worse than kimsufi, if you are happy to manage your own dedicated server.21:33
balloonscan't beat free.. you know that :-)21:34
phillwindeed :)21:36
phillwI love dead-lines, in fact, the best thing about dead-lines is the wooshing sound that they make as they fly past me :D22:22
=== salem_ is now known as _salem
=== hggdh_ is now known as hggdh

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!