/srv/irclogs.ubuntu.com/2013/11/20/#ubuntu-uds-client-2.txt

=== ChanServ changed the topic of #ubuntu-uds-client-2 to: Currently no events are active in this room - http://summit.ubuntu.com/uds-1311/client-2/ - http://irclogs.ubuntu.com/2013/11/20/%23ubuntu-uds-client-2.html
=== ChanServ changed the topic of #ubuntu-uds-client-2 to: Track: Client | Status check on Qt 5 | Url: http://summit.ubuntu.com/uds-1311/meeting/22090/client-1311-stateofqt5/
didrockswho is participating to the Qt5 session? :)13:59
Mirvwelcome anyone to the hangout :) https://plus.google.com/hangouts/_/7ecpjhcv91f5e2g6cvefjmia4414:02
Mirvhttps://plus.google.com/+TimoJyrinki/posts/NeUt19z1V3p14:04
Riddellhi14:08
tsdgeoshi14:08
didrockshey Riddell14:11
didrocksRiddell: wants to join the hangout?14:11
looldidrocks: I think I'll drop to another session about cross-compilation now that I raised the main things I wanted to make sure was taken care of; I trust others know better than me about 5.2 issues/bugs to solve etc.14:14
didrocksRiddell: nice to see you, welcome! :)14:14
didrockslool: agreed14:14
didrockslool: see you!14:14
Mirvthanks everyone, adding some notes still to the pad from discussion14:35
rsalvetiseems we're done already14:36
Mirvrsalveti: yeah, we finished as no new questions or topics were raised.14:39
Mirvnotes in the pad14:39
rsalvetiMirv: thanks14:48
didrockswho is going to lead the mediascanner roadmap?15:01
=== ChanServ changed the topic of #ubuntu-uds-client-2 to: Track: Client | Mediascanner roadmap | Url: http://summit.ubuntu.com/uds-1311/meeting/22110/client-1311-mediascanner-roadmap/
satorisdidrocks: that would be me.15:02
=== alex-abreu|afk is now known as alex-abreu
didrockssatoris: are you joining?15:04
didrockshttps://plus.google.com/hangouts/_/72cpigmmgnfvmfg8d0qugft72c?authuser=015:05
satorisFeel free to join.15:05
jdstrandmediascanner directly usable by apps is useful for application confinement15:09
jdstrandsince it is out of process, 3rd party music players could just use it15:09
jdstrandyes, please do not allow direct access to the sql db. that will limit what 3rd party apps in the app store can do (due to application confinement)15:10
jameshhttp://bazaar.launchpad.net/~mediascanner-team/mediascanner/v2/view/head:/src/mediascanner/MediaStore.hh15:10
jdstrandright now, music-app is unconfined. the apis should support it being confined15:10
ahayzenvthompson, we'll still have to store playlists in our db? but could we reduce it just to the file/uri and query the mediascanner for the metadata?15:13
mhr3QUESTION: with the new mediascanner, apps open the db themselves, right? how is that going to play with confined apps?15:14
vthompsonahayzen,  I believe we'll still need to keep track of playlists. But keeping just the URI might be a way forward. I believe we could do that with grilo as well15:16
jdstrandmhr3: it won't (see above comments). we should provide an api so confined apps don't have to do that15:16
jdstrandwe special cased music-app for 13.10, but it should be confined like everything else15:17
jdstrand(unfortunately, I got called to another session)15:17
ahayzenvthompson, I would be happy working on reworking our side of things to do tht15:17
bfillerQUESTION: is their a library available to do thumbnail generation? we want the mediaplayer-app and gallery-app to use this if so15:18
* jdstrand is still here if you need me15:20
bfillercool!15:21
mhr3bfiller, i think part of it is already in the SDK15:21
bfillerdoes it require any special codeces?15:22
bfillercodecs15:22
bfilleri.e. ffmpeg or any -ugly stuff?15:22
jdstrandjamesh: I'm back a few minutes in the feed (cause I got pulled out). we *could* allow readonly access to the db in apparmor policy. the sqlite db has to be opened in a very specific way to do that. I kind of hoped the mediascanner library would call out to the mediascanner process and the mediascanner process could give the info rather than direct access to the db15:22
jdstrandjamesh: that could be over dbus15:23
mhr3bfiller, depends on what you want to thumbnail :)15:24
mhr3bfiller, ultimately it just pokes gstreamer15:24
jameshjdstrand: the client library lets you open the database in SQLITE_OPEN_READONLY mode, which should be fine with read only confinement right?15:24
bfillermhr3: thanks makes sense15:24
jdstrandjamesh: the confinement could be made to allow that. right now we don't have policy groups for that, but it could be added15:25
mhr3jhodapp, shouldn't such test be somewhere in the media stack? thumbnailer just uses gstreamer to get it15:26
jdstrandjamesh: we have a similar issues with thumbnails btw15:26
jhodappmhr3, yes, but I'd also like to test it at this level...i think the more tests in different use-cases the better15:26
mhr3jhodapp, well it means that thumbnailer will fail only because the media stack will go through a transition15:27
jdstrandjamesh, satoris: sorry if I missed this-- will the mediascanner do the thumbnailing and then apps use these thumbnails?15:28
jhodappmhr3, not sure I'm following15:28
mhr3jhodapp, if something breaks in media stack, it automatically breaks thumbnailer15:28
jhodappmhr3, yes, that's what I want to catch15:28
ahayzenvthompson, is there any other info we need from the mediascanner?15:28
mhr3jhodapp, yet thumbnailer is not able to do anything about it15:28
jhodappmhr3, right15:29
mhr3jhodapp, that's why i think the test shouldn't be there15:29
jhodappmhr3, I guess that's up to the media scanner team then as I still think it's useful15:29
jdstrandQUESTION: what is the hangout url?15:30
vthompsonahayzen, so I think we'll need to maintain a 14.04 specific branch for this capability and possible U1 streaming if we tackle that15:30
jhodapphttps://plus.google.com/hangouts/_/72cpigmmgnfvmfg8d0qugft72c?authuser=015:30
ahayzenvthompson, ok, when is the new mediascanner expected to land?15:31
vthompsonahayzen, sounds like we'll have a PPA to access in some soon-ish timeframe15:32
pstolowski_QUESTION: is QML bindings something you would consider community could help with, or even drive?15:32
ahayzenvthompson, cool, guess we can start doing some things and still use Grilo for the moment?15:32
vthompsonahayzen, I believe we'll have to maintain grilo in Saucy.15:33
jdstrandjhodapp: thanks for the link btw :)15:40
pstolowski_QUESTION ^^ :)15:40
jhodappjdstrand, np15:40
jdstrandvthompson: as an aside-- thanks for all the bug fixes for music-app of late :)15:45
jdstrandI can't wait to get the new player :)15:45
vthompsonjdstrand, :) my pleasure15:45
ahayzenvthompson, i'm gonna go back home anything u need from me?15:46
vthompsonahayzen, nope! Safe travels!15:50
ahayzenvthompson, probably speak in ~1hr :)15:50
=== ChanServ changed the topic of #ubuntu-uds-client-2 to: Track: Client | Online Accounts features for 14.04 | Url: http://summit.ubuntu.com/uds-1311/meeting/22097/client-1311-online-accounts/
dbarthhiya16:01
didrockshey dbarth!16:02
alex-abreuoa it is then16:03
dbarthwho wants to hop on the hangout?16:05
didrockskenvandine: interested?16:05
dbarthjdstrand: ?16:05
dbarthkenvandine: ?16:05
kenvandineyes16:05
jdstranddbarth: I will be in irc. mdeslaur could join the hang out since he is leading this discussion on my team16:06
dbarthah cool16:07
mmccHi folks :)16:09
jdstranddbarth: if you need me to join, I'm here16:09
dbarthok16:12
robrudsmardy: friends uses flickr16:15
ssweeny-udsis the friends flickr plugin installed on the phone?16:16
robrudsssweeny-uds: nope ;-)16:16
robrudsssweeny-uds: only twitter and facebook by default.16:17
ssweeny-udsrobruds: that's what i thought16:17
robrudsssweeny-uds: so I'm just realizing right now for the first time that friends-{flickr,instagram,linkedin} are broken on the phone because they're not installable on a readonly image.16:18
ssweeny-udsrobruds: as a user of third-tier open social networks I've felt pretty marginalized on the phone with no easy way to write friends plugins :)16:18
ssweeny-udsrobruds: yeah that might be a problem...16:18
dbarthssweeny-uds: that's why we need click hooks16:19
dbarthfor OA plugins / auth. providers16:19
ssweeny-udsdbarth: yeah, OA and friends both need them16:19
robrudsssweeny-uds: yeah, there was a session yesterday about the idea of installing plugins with click, so friends will have to be part of that.16:19
dbarthssweeny-uds: but which is currently planned to be a manual process, for partners we can have an audit or agreement with16:19
ssweeny-udsrobruds: we talked about this a few months ago. you said i think that friends plugins would need to be split up into their own processes to allow confinement16:20
robrudsssweeny-uds: well that was based on my understanding of confinement, more than my understanding of friends plugins.16:20
ssweeny-udsah16:20
robrudsssweeny-uds: so i could be wrong16:20
ssweeny-udsmy thinking is if a friends plugin can only access data associated with the account it's "called" with then the security issues aren't so bad16:21
robrudsssweeny-uds: the friends plugins are so simple, don't take up any space. i'd like to just have them all installed by default (I was opposed to the original work of splitting them all up into different packages)16:21
ssweeny-udslike, as long as the twitter plugin can't access your facebook profile the risk is low16:21
ssweeny-udsrobruds: that makes sense16:21
ssweeny-udsrobruds: i'm mostly worried about pushback against click plugins for friends16:22
robrudsssweeny-uds: haha, no. the friends plugins are python modules, they have total access to the entire friends infrastructure, they can do anything.16:22
ssweeny-udsyeah, that's what i was afraid of16:22
ssweeny-udsso there will be security concerns with third-party friends plugins16:23
robrudsssweeny-uds: hmmm, yeah, this is a tricky issue i hadn't previously considered.16:24
ssweeny-udsthere was talk yesterday of manual review for certain types of packages16:24
ssweeny-udsthis might have to fall under that16:24
* cwayne and ssweeny-uds started work on a click-hooks for o-a16:25
cwayne~/.local/share16:25
cwayneu-s-s-o-a needs to be modified to look for qml-plugins in ~16:25
didrockscwayne: ssweeny-uds: robruds: one of you wanting to join the hangout?16:27
dbarthcwayne, ssweeny-uds: do you want to continue the work on that?16:28
dbarththe click hook16:28
robrudsdbarth: mardy: sorry I think ssweeny-uds and i are bit offtopic here16:28
dbarthie, to get that task done in the plan16:28
ssweeny-udsdbarth: yes please16:28
cwaynedbarth, the click hooks should probably be part of the online-accounts system settings package16:28
kenvandinecwayne has been looking at click packages for account plugins16:28
dbarthright16:28
ssweeny-udsdbarth: i'm about 70% done with the patch to the system-settings part16:29
dbarthbut mardy welcomes patches, you see ;)16:29
dbarthssweeny-uds: cool!16:29
dbarthssweeny-uds: did that get a cjwatson review yet?16:29
* cwayne also volunteers to make an sdk template for new online-accounts once we have them as clicks16:29
dbarthawesome!16:29
mardyhttp://developer.ubuntu.com/api/qml/sdk-1.0/16:30
cwaynei think all we're waiting on re: click hooks is getting this fixed: https://bugs.launchpad.net/ubuntu/+source/click/+bug/124582616:30
udsbotuLaunchpad bug 1245826 in click (Ubuntu) "Allow applying a hook to multiple files" [Wishlist,Triaged]16:30
mmccQUESTION: Is there anything currently using signon-ui on ubuntu touch? Our UbuntuOne provider plugin has custom QML UI for login, and needs signon-ui to support QML so we can handle requesting re-authentication for invalidated tokens.16:30
mardyhttp://developer.ubuntu.com/api/qml/sdk-1.0/Ubuntu.OnlineAccounts/16:30
ssweeny-udsdbarth: the patch i'm working on now is just to get the settings UI to load stuff from ~/.local/share/16:31
mmccmardy: this is re your comment on bug 124832616:33
udsbotuUbuntu bug 1248326 in Unity Click Scope "Handle invalidated token in a more user-friendly way" [Undecided,New] https://launchpad.net/bugs/124832616:33
ssweeny-udsthis (multiple possible domains) discussion is also useful for things like owncloud or statusnet which don't have a central server16:38
dbarthssweeny-uds: do you have a working model for that?16:38
dbarthare you constraining urlpatterns?16:38
ssweeny-udsdbarth: i don't know if you can do that. the domain could be anything16:39
dbarthssweeny-uds: oh, meaning, any server where you would host the service?16:39
ssweeny-udsyeah16:39
dbarthi see16:40
dbarthbut are you using a webapp container for this one?16:40
dbarthor would like to do so16:40
ssweeny-udsdbarth: for instance i have statusnet and owncloud services running on my own domain16:40
dbarthwant to hop on the hangout?16:40
ssweeny-udsdbarth: i'm not actually looking to use webapps. i'm talking more generally that i'd like OA to be able to handle decentralized services16:40
dbarththanks everyone for your feedback on the topic17:00
dbarthand for the upcoming contributions more importantly!17:01
dbarthreally appreciated17:01
=== ChanServ changed the topic of #ubuntu-uds-client-2 to: Currently no events are active in this room - http://summit.ubuntu.com/uds-1311/client-2/ - http://irclogs.ubuntu.com/2013/11/20/%23ubuntu-uds-client-2.html
=== ChanServ changed the topic of #ubuntu-uds-client-2 to: Track: Client | Scopes for Unity 8 | Url: http://summit.ubuntu.com/uds-1311/meeting/22099/client-1311-scopes/
olliwho is running this track?17:59
olligot a link to the URL18:00
ollilol18:00
ollilink to the HO18:00
tvoss_didrocks, r u running the hangout?18:03
didrockstvoss_: yeah, want to come?18:03
didrocksthostr: is going to lead it18:03
=== jhodapp is now known as jhodapp|brb
dokowhat's the hangout URL?18:04
didrocksdoko: it's about unity8 scopes18:05
didrocksdoko: are you sure you are in the right room?18:05
tvoss_didrocks, listening in :)18:05
SaviqQUESTION: is JavaScript considered less resource hungry than Python/18:19
Saviq?18:19
olliQUESTION: what's the situation re security & JS?18:20
satorisThe basic memory footprint of Python interpreter is 5MB or so.18:20
mhr3didrocks, can you mute yourself?18:21
didrocksmhr3: sorry, done18:21
mhr3thx18:21
davidcalleAlso, for the record, the memory footprint of a basic running scope is around 9MB.18:21
davidcallePython ^18:21
facundobatistadavidcalle, that have imported all the gio crazyness, right?18:22
davidcallefacundobatista, right18:22
facundobatistadavidcalle, that's not fair ;)18:23
jdstrandfyi, https://wiki.ubuntu.com/SecurityTeam/Specifications/ScopesConfinement18:23
jdstrand(I also added ^ to the pad)18:25
jdstrandQUESTION: can you comment (for the wider community) on how you've addressed privacy wrt to scopes? (ie, briefly detail the work you've done on disabling internet scopes globally and on a per scope basis, etc)18:27
jdstrand(of course the security design feeds in to that too)18:27
jdstrand(but you already mentioned that :)18:28
jdstrandI know the answer-- but thought others might be interested in it :)18:29
alecuregarding the online switch for scopes: the click scope listens to that setting too, and disables getting "suggested apps" from the click webservice when online searches are off. It18:33
alecuit still does the search of locally installed apps18:33
=== jhodapp|brb is now known as jhodapp
pedronis2we are also proxying images, so those don't get to the original server either18:42
=== RoddieKieley1 is now known as RoddieKieley
fugue88What's the name of that "global search" ?18:52
fugue88David mentioned it.18:52
Saviqdavidcalle, ↑18:52
davidcallefugue88, Blippex18:52
fugue88Thanks!18:52
davidcallefugue88, np. Here is a few screenshots : https://plus.google.com/+davidcalle/posts/7E1SDPZie9p18:53
pedronis2thanks18:53
fugue88davidcalle: Cool.  Interesting that they allow you to set "dwell time" and other things.18:54
davidcallefugue88, yes, this is a very interesting search engine.18:54
tvoss_didrocks, ping19:01
=== ChanServ changed the topic of #ubuntu-uds-client-2 to: Track: Client | Go for client side development | Url: http://summit.ubuntu.com/uds-1311/meeting/22030/client-1311-go-for-client-side-development/
tvoss_niemeyer, hey there :) wanna join us on the hangout?19:01
didrockstvoss_: pong19:01
niemeyertvoss_: Sure, link?19:01
tvoss_didrocks, got the ho link for me?19:01
didrockstvoss_: I sent you the links 5 minutes ago :p19:01
* didrocks does again19:01
tvoss_didrocks, don't have it :/19:01
tvoss_didrocks, this time it worked19:02
tvoss_niemeyer, https://plus.google.com/hangouts/_/72cpi68tob23aag0bfji9amh30?authuser=019:02
didrockstvoss_: I sent it to him already FYI ;)19:02
tvoss_jdstrand, wanna join the hangout, too?19:02
tvoss_jdstrand, https://plus.google.com/hangouts/_/72cpi68tob23aag0bfji9amh30?authuser=019:03
jdstrandtvoss_: actually, I was going to attend a different session and have two people here if you need comments from the security team19:03
tvoss_jdstrand, would like to have someone on the hangout, yes19:03
jdstrandtvoss_: if you feel my input is required, I'll attend19:03
tvoss_jdstrand, not necessary, as long as someone from security is here19:03
zygahi19:08
looltvoss_: do we have someone representing SDK team?19:09
tvoss_lool, nope, can you pull zoltan over?19:09
looltvoss_: poked him19:10
pmcgowanlool, I will join for now19:10
fugue88QUESTION: By client side, do you mean GUI, or more generic than just GUI?19:10
tvoss_fugue88, more generic than just UI19:11
fugue88On the other hand, with gcc *maybe* making gccgo a default, it might get some more popularity.19:15
fugue88Of course, we don't have a crystal ball.19:16
cjwatsoncan I have the hangout url?19:16
tvoss_fugue88, look at https://launchpad.net/usensord for example19:16
tvoss_cjwatson, https://plus.google.com/hangouts/_/72cpi68tob23aag0bfji9amh30?authuser=019:16
Saviqcjwatson, https://plus.google.com/hangouts/_/72cpi68tob23aag0bfji9amh30?authuser=019:16
cjwatsonta19:16
zygaIIRC linaro was doing some work on porting go to aarch6419:16
zygahttps://groups.google.com/forum/#!topic/golang-dev/MLaz62sHUc019:16
zygaone of the people there is actually working for canonical19:17
tedgjdstrand, Why is compiling every application an issue?  Tooling?19:19
zygatedg: upgrades probably19:19
Saviqtedg, no, we don't have the sources19:19
zygatedg: imagine if everything is in go :-(19:19
Saviqtedg, think of all the apps in the store - all would need to be recompiled19:20
zygatedg: 10GB upgrade for each security issue?19:20
zygaah, store argument is important too19:20
tedgWell, the store is different.19:20
zygaI don't think go is designed to work well there19:20
tedgWe can't apply security updates to store things mostly.19:20
tedgIt's all BYOD (Bring your own deps)19:20
Saviqtedg, that's why we're talking about "go's stdlib"19:20
Saviqtedg, which would be provided by us19:21
zygatedg: but we can ship fixed libraries (ssl, etc)19:21
tedgPlus things in click packages are confined.  We don't care about security anymore ;-)19:21
fugue88If an app dev has bundled their own crypto library in the click-package, the distro couldn't handle that anyway, right?19:21
zygatedg: mmaaybe19:21
Saviqtedg, see, Jamie is responding right now ;019:21
Saviqdamn shift...19:21
cjwatsonfugue88: their own, sure, but they should be able to use the crypto library in the stdlib without having to update their app every time there's a security vulnerability found in it19:22
fugue88cjwatson: Well, I certainly agree about that, but some things will be bundled and have security concerns nonetheless.19:22
fugue88But the burden on app devs to recompile every time the platform shifts is a big one.19:23
cjwatsonthe perfect must not be the enemy of the good19:23
cjwatsonjust because some things will end up being bundled doesn't mean we shouldn't make efforts to avoid bundling the stdlib with everything19:23
fugue88No no, I agree.19:24
cjwatsontedg: that only means the application can't compromise the rest of the system, not that it cannot be compromised itself19:24
tedgcjwatson, Sure, but that means that the attack surface is much smaller.19:25
tedgcjwatson, And the consequences of the attack.19:25
cjwatsonyes, but not that it should be ignored19:25
cjwatsonI don't think it would be responsible for us to ignore it19:25
tedgI'm not saying it should be ignored, but I am saying that it may not be a blocker considering its size.19:25
SaviqQUESTION: when talking Go/QML, QML in itself is very modular, allows for easy reusability between projects, would a Go QML extension/module be usable outside of a Go application?19:26
kardianosGo support hard float19:30
kardianos(It works on rpi)19:30
loolthanks for the confirmation19:30
tvoss_thx19:30
jdstrandweird, I dropped out (connection was lost)19:32
loolthat's why you looked so static19:32
Saviqniemeyer, thanks, I'm game :)19:33
kardianosGo gc I'm fairly sure now generates PIC as a precursor for generating so objects. They are still attempting to fill the whole shared object story, no timeline yet, but the story is being developed.19:33
cjwatsonWould this be easier if using gccgo?19:33
niemeyerkardianos: Right, and that's not even about Go 1.2..19:33
kardianosCorrect19:33
kardianosI don't think it will be easier then gccgo, but I could be mistaken. Just the runtime story just haven't  been finished.19:34
cjwatsonWell, I ask because I understand (at second hand) that one can already build Go shared objects with gccgo19:35
Saviqlool, no, reusable - and yes - IIUC niemeyer said it's possible - not yet, though19:35
kardianosYou could be correct there.19:35
kardianosNot anymore19:38
kardianosThere is no longer any runtime code generation.19:38
Saviqtvoss_, also, the main() for QML apps is usually minimal (if any), and porting that to Go wouldn't be a substantial task, if needed19:42
tvoss_Saviq, yup, +119:42
Saviqso, yeah, goqmlscene would be enough in most cases19:42
Saviqas qmlscene is enough in most cases now19:42
SaviqQUESTION: any estimate on what could the overhead of a .so with the Go runtime be when used from a C++ application? I assume there would have to be a runtime-per-extension?19:43
* Saviq poking holes, sorry19:44
niemeyerSaviq: A bit early to tell19:44
Saviqniemeyer, right, thanks19:44
sergiusenslool, Mike is using https://code.launchpad.net/~jamesh/go-dbus/trunk19:58
loolthanks19:59
loolit's listed in the bp already19:59
loolactually the topic I wanted to open were which go library bindings we missed19:59
loolbut it seems dbus is not a problem anymore19:59
sergiusenslool, I'm also trying to get these into debian (as well as niemeyer's gocheck)19:59
sergiusenslool, I jsut noticed I'm not 'live' :-/20:00
sergiusenssorry :-)20:00
loolnp20:00
=== ChanServ changed the topic of #ubuntu-uds-client-2 to: Currently no events are active in this room - http://summit.ubuntu.com/uds-1311/client-2/ - http://irclogs.ubuntu.com/2013/11/20/%23ubuntu-uds-client-2.html
Saviqsession has ended → tvoss_ beer20:00
tvoss_Saviq, yup :)20:00
didrocksyeah, but jdstrand had a disruptive not intending to be disruptive but which can be seen as disruptive question :p20:01
pmcgowanout of battery20:01
didrocksoh, the excuse from Pat to drink beers :)20:02
loolwell it's Pat's battery20:03
loolit needs beer to recharge20:03
didrocksheh20:03
loolhe didn't say his *laptop* ran out  ;-)20:04
ogra_thats was a fast beer20:04
lool:-)20:04
AzendaleI'm interested in learning about any bindings from Qt to Go. (Last time I looked, it didn't seem like there really was anything). Can anyone point me in a direction?20:04
ogra_beer injection :)20:04
SaviqAzendale, here's what niemeyer is working on https://github.com/niemeyer/qml20:06
AzendaleSaviq: Thanks!20:07
Saviqo/20:07
=== Ursinha is now known as Ursinha-afk
=== Ursinha-afk is now known as Ursinha

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!