=== vying is now known as Guest52107 === chriadam|away is now known as chriadam [00:41] Has anyone succeeded in dualbooting (via dualboot.sh) with Cyanogenmod 11? [01:08] rsalveti: ever seen something like: D/ACDB-LOADER( 1833): No existing ION info in ACDB driver ? [01:10] sergiusens: hm, not sure, but I'd guess so [01:10] sergiusens: why? === I is now known as Guest9170 === Guest9170 is now known as I_Do_Believe [01:12] rsalveti: can't make calls on this mako... [01:13] rsalveti: but I just swapped SIMs, my SIM scissoring might have busted the one I bought today :-P [01:15] sergiusens: right :-) [01:16] provisioning worked, and it seems to be registered on the network as well [01:17] rsalveti: on another topic, is this common? E/MP-Decision( 1064): Error 13 setting online status to 0 for cpu3 ... have a bunch of those here... [01:17] sergiusens: yeah, that's because of ogra_'s changes during init [01:18] but nothing critical, just annoying indeed [01:19] you can disable the upstart job that forces the cores online [01:19] rsalveti: rsalvetiso I still get those weird errors when making a call, but seems to work now [01:19] rsalveti: we should suppress those at least [01:20] sergiusens: right, afaik some are coming from a binary blob [01:20] sergiusens, impossible [01:20] MP-Decision is a binary blob ... [01:20] E/MP-Decision is from the blob then? [01:20] meh [01:20] suppress them in logcat itself then :-) [01:20] if you want it quiet to see logs disable /etc/init/no-cpu-hotplug.conf [01:39] is there a dbus service to get the device's location? [02:10] cwayne: there's location-service [02:11] rsalveti: how would you call that from a scope? [02:11] cwayne: hm, not sure, better ping mandel or tvoss [02:11] never used that interface === chihchun is now known as chihchun_afk === chihchun_afk is now known as chihchun === chihchun is now known as chihchun_afk [03:35] It seems Cyanogenmod 11 update (released yesterday?) messed up dualboot.sh, causing UbuntuInstall.apk to be put in the right location, but it's logic doesn't work. [03:35] That is, no icon appears in the app list. === marcusto_ is now known as marcustomlinson_ [05:20] anyone know why 'run application on device' failed by Ubuntu-SDK? === chihchun_afk is now known as chihchun [06:16] good morning [06:18] dholbach: good morning. :) [06:18] hey nhaines [06:19] I'm bummed. I went to update my Miiverse webapp on Friday and it's completely broken. And when I updated it to use the instructions given on developer.ubuntu.com it stayed broken. [06:19] Works on my desktop but not on the phone. [06:19] Before bed I'll reboot my phone into Ubuntu and capture some error messages. [06:19] But apparently webapp-container in trusty and in utopic are completely incompatible. [06:21] Luckily I'm not as angry about it today, so I should be in a much better mood when I write on the list. :) === psivaa-afk is now known as psivaa [07:51] * asac installs latest devel promotion \o/ [08:12] Good morning all; happy Eat Your Vegetables Day! :-D [08:14] thx :D didn't know there was anything like tah === gnu is now known as Guest9087 [08:28] whee [08:29] didrocks, would you have time to drop by in the landing meeting ? there was a question coming up about why the silos are all configured to build without -proposed, do you know anything about that ? [08:30] ogra_: I can come, but the answer is easy I guess: I think it's just that it was not reenable after utopic opened [08:30] ogra_: I cut that off at release opening times as there are some troubles [08:31] but otherwise, it should pick them, so it's just an oversight to not reenable them [08:31] didrocks, ok [08:31] didrocks, thanks === agajewiak is now known as groveover [08:36] hi dpm ! I forgot to "prepare for android update", and now it seems I can't neither update nor uninstall dual boot. any tip to at least uninstall so i can reinstall again? [08:37] hi la_juyis, does doing a regular dualboot install (i.e. running dualboot.sh) not work? [08:38] dpm, nope, didn [08:38] t work either :/ [08:39] la_juyis, what error are you getting, or where is the installation getting stuck? [08:39] dpm, that's the thing. I don't get any errors [08:39] it seems like it worked, but then either trying to update or reboot into ubuntu does nothing [08:40] la_juyis, have you got the SuperUser app installed? [08:40] on the Android side [08:40] la_juyis, and have you tried running the Dual Boot app on the Android side and reinstalling Ubuntu? [08:43] dpm, yes, I do have it installed. [08:43] dpm, how can i reinstall ubuntu? :) [08:44] dpm, in the menu i just see prepare for the update, uninstall and update storage use [08:46] la_juyis, you can use the "Uninstall Ubuntu" menu option (it won't remove your user data unless you explicitly tell it to) and then reinstall [08:49] la_juyis, also check that even if the SuperSU app shows in the list of apps, that you can run it too. [08:49] dpm, so with the reverting of the split greeter a bunch of greeter translations are gone (i guess nobody bothered to translate stuff that was initially supposed to be dropped) ... [08:50] is anyone looking into that ? [08:50] ogra_, I had no idea, which translations? lightdm? [08:50] dpm, nope, the greeter is part of unity8 afaik ... [08:51] i can run the app. and even after tapping "uninstall" it doesn't offer me the option to reinstall. rather the uninstall option keeps showing :/ [08:51] i see some of the "xx songs player today" messages not translated etc ... [08:51] dpm, Saviq should be able to point you in the right direction [08:51] ogra_, ah, that's not Unity, that comes from each app [08:52] ogra_, dpm, the infographics system is changing completely anyway [08:52] oh, ok ... well, it was translated in the split greeter (or at least there were nore translated strings, it wasnt complete there either) [08:52] s/nore/more/ [08:52] although there's a compat layer for the old approach [08:52] ogra_, so the translations should still be shipped from within each app, perhaps something broke the loading of the infographics translations in the post-split greeter? [08:54] might be, i only see the symptoms :) [08:54] la_juyis, hm, weird. The only thing I can think of is to close and restart the app. If that does not work, then I'd recommend to ping ondra for dualboot help [08:54] ogra_, TBH I can't confirm what you're seeing, but that might be because I've never seen infographics translated from any app.. [08:55] Saviq, most (not all) were properly translated for me with the split greeter setup [08:55] now there are less of them translated ... but it could indeed be an app regression === chriadam is now known as chriadam|away [09:04] dpm, thanks. no success on this side so i'll ping him [09:05] dpm: hey! [09:05] la_juyis, argh, sorry to hear that, so yes, I'm sure he should be able to help [09:06] hey, morning sil2100! === chrisccoulson_ is now known as chrisccoulson [09:08] Anyone know what the expected schedule for landing the bootsplash is? [09:08] la_juyis: have you updated android recently? [09:09] ondra, hi! I don't seem to be able to update, reboot or uninstall ubuntu after a -I must admit- not careful android upgrade. [09:09] ondra, indeed :/ [09:10] ondra, i don't mind reinstalling ubuntu, but i can't do that either ATM [09:10] la_juyis: no your Ubuntu and dualboot app is fine [09:11] la_juyis: Android update just wipe out SU, so dualboot app cannot gain su [09:11] la_juyis: you just need to reinstall SU and then everything will be fine [09:11] dpm: could you help us out a bit? We would need someone non-english native-speaker to check which of our core applications are missing translations in our latest proposed image :) [09:12] ondra, i have the superuser app installed. is there any other i need? [09:13] ondra, i also tried running dualboot.sh so it could get whatever it needed, but no luck there either [09:13] so can't reinstall, can [09:13] t uninstall :) [09:14] sil2100, sure, just give me a few minutes, I'm using dualboot and I'm having problems updating to the latest image [09:17] la_juyis: when you run SU app, does it say something, it needs su native binary which is removed by Android update [09:17] la_juyis: dualboot.sh should reinstall it though, can you paste somewhere output of dualboot.sh so I can have a look what is the problem [09:19] dpm: thanks! :) [09:20] ondra, sure, let me paste it [09:21] ondra, pastebin.ubuntu.com/7657487/ [09:22] ondra, dualboot.sh does not seem to install the SuperSU app. I'm having that same problem myself: I used the option to prepare Android update, did Android update, ran dualboot.sh and SuperSU is listed in the apps list, but does not find a su binary [09:23] so rebooting to Ubuntu fails, as it cannot find the super user app [09:24] ondra, here's my dualboot.sh output: http://pastebin.ubuntu.com/7657498/ [09:25] sil2100, I think in the meantime I'll start an emulator. Which apps should I be looking for for missing translations? And why do we expect translations to be missing? [09:28] dpm: so, we know for instance that the dialer-app is missing translations right now, because we released a new dialer-app without the new translation enablement... with the dropping of the desktop translations we want to make sure nothing got missed out, and maybe make a list of which apps still need to work [09:28] ricmm, hey, do you know if that's a known issue? http://paste.ubuntu.com/7657512/ [09:29] ricmm, robert_ancell is hitting that when trying to run unity8 desktop on current utopic [09:29] dpm, good eye! [09:29] ricmm, seems like platform-api ish [09:29] dpm, so I had installed superuser app, but now I've installed supersu and it's updating! [09:30] la_juyis, ah, cool. How did you do the SuperSU install? [09:30] dpm, via google play [09:30] i'll update the wiki [09:31] (unless there's a better way to do it?) [09:32] dpm, so instead of re running dualboot.sh just re install supersu app, right? [09:33] seb128: cache = 0x7fff4b22dc24 "libubuntu_application_api_test.so.1" [09:33] he is probably using a mixed up set of platform-api/unity-mir/unity8-desktop-session packages [09:33] la_juyis, that does not seem to work for me, unfortunately. I've got SuperSU installed already, but it's still complaining about the missing su binary, so let's wait first for what ondra has to say [09:33] similar to the time it wasnt working for you [09:34] due to an incomplete upgrade [09:34] dpm, what about trying to uninstall it and install it again manually? [09:35] la_juyis, yeah, tried that too, but dualboot.sh installs it in the system partition, so it cannot be uninstalled. I can only uninstall subsequent updates from Google Play, but not the version that dualboot.sh installed [09:35] ricmm, hum, ok, I was under the impression he dist-upgraded/was uptodate [09:35] ricmm, could it be a package missing? [09:37] ricmm, sorry, I don't much more info, doing debugging through other side of the world via email and a day delay in replies ;-) === dandrader is now known as dandrader|afk [09:44] seb128: right so his issue is that he didnt upgrade unity8-desktop-session-mir [09:44] because thats the one that sets that wrong env var [09:44] the latest package in utopic does the correct thing [09:44] so, I guess he might've done an upgrade but not necesarily a dist upgrade? not sure [09:45] ricmm, I've sent him an email, thanks [09:45] ricmm, it might be that he has a local hacked version as well [09:49] dpm, la_juyis sorry was on call [09:50] dpm: hmm, looks like script things there is already su on your device [09:50] dpm: can you check $ adb shell [09:50] dpm: and then su [09:50] la_juyis: ^^ [09:51] ondra, that seems to work [09:52] I get this prompt after running su on the command line: 1|shell@mako:/ $ [09:52] ondra, i could get su [09:52] after giving permissions from the phone supersu app [09:52] seb128: probably, the change is only in the upstart job so it should be trivial to incorporate in his work [09:53] ricmm, yeah, I think I've enough info to write him an useful reply, thanks ;-) [09:54] la_juyis, dpm : so you can run su from shell and then call "ls /data" and it will show you content? [09:54] la_juyis: OK that looks fine then === dandrader|afk is now known as dandrader [09:54] ogra_, is it a known issue that when upgrading to the latest libgcc1 in the archive (1:4.9.0-7ubuntu1) all applications fail to start? [09:54] la_juyis: then go to SU app, remove permissions for Dualboot app and try to start ubuntu from dualboot app, it should request permissions again [09:55] oSoMoN, nope ... Mirv had some upgrade issues too but different (he couldnt boot) [09:55] ogra_, I’ll file a bug then, it looks pretty critical [09:56] i think sil2100 wants to build an image today, we should see then if it actuall yhappens on properly built images too [09:56] dpm: can you get sudo in your shell? [09:56] ondra, right [09:57] ondra, I cannot get 'ls /data' to show the contents of /data, no [09:57] dpm: then your sudo is broken [09:57] ogra_, I don’t see why it wouldn’t, I just installed a clean #85, verified that apps start, then upgraded only libgcc1 and all apps fail to start [09:57] dpm: did you get request to grand permissions when you called su? [09:57] ondra, no [09:58] so I did adb shell [09:58] dpm: if not, just run "$ dualboot.sh full" that should reinstall SU [09:58] then su [09:58] dpm: yep [09:58] oSoMoN, did you tell doko about it (in #ubuntu-devel) ? [09:58] dpm: what did it say when you did su? [09:58] ondra, it said nothing [09:58] ogra_, nope, let me do that [09:58] ++ [09:58] dpm: yeah reinstall SU [09:59] ondra, how? With 'dualboot.sh FULL'? [10:00] ondra, 'dualboot.sh FULL' gives me "error: device not found", even though adb devices shows it [10:00] dpm: yea " $ dualboot.sh full" [10:04] ondra, so running 'dualboot.sh full' actually uninstalled SuperSU, I no longer have it listed in my apps :/ [10:06] dpm: what, that is even more strange [10:06] ondra, but installing SuperSU from Google Play then fixes it [10:06] dpm: can you send me please log [10:07] ondra, which log? [10:07] dpm: no it's OK, so it installed that needed su binary, that cannot be installed from store [10:07] dpm: so is SU now working? [10:08] ondra, yep, after I installed it from the store. I know what happened: 'dualboot.sh full' fails to download the SuperSU zip, but continues with the installation nevertheless [10:08] dpm: OK [10:09] dpm: yeah there is new version of SU, but I was hopping it will still succeed to download [10:09] dpm: so is dualboot now working> [10:09] ? [10:09] ondra, so line 9 is where it shows the message that the .zip file cannot be downloaded: http://pastebin.ubuntu.com/7657668/ [10:10] ondra, yes, it's working now, but we should either update the wiki or fix the script to download the right .zip file [10:10] dpm: yep [10:10] ondra, can I leave it in your hands to do one of the two? [10:11] dpm: if we update script, what is the process? [10:12] ondra, from what I know Alex requests IS to upload the script to humpolec.ubuntu.com, but I don't do the releases, so best talk to him [10:12] dpm: OK === vrruiz_ is now known as rvr [10:13] thanks ondra === MacSlow is now known as MacSlow|lunch [10:24] dpm: but it download it fine from your script, and tested locally it also download it correctly [10:25] dpm: there is bug in Android, that sometimes SU app disappears, I saw it happening before, it's good work around to install it from store though [10:26] any ideas what can be wrong here? http://pastebin.ubuntu.com/7657726/ [10:26] I flash image 83, but then when the device reboots it is stuck in the Google screen [10:26] and when I cat /etc/ubuntu-build (I can still adb to the device) it says it is image 84 [10:26] ondra, yes, but in any case, it seems that the Android update breaks su, so the full workaround is to run 'dualboot.sh full' and then install SuperSU from the store. [10:27] dpm: normally that dualboot.sh full should be enough [10:27] oSoMoN: did you reboot after the upgrade? [10:27] dpm: I think when SU disappeared it was more specific to your phone [10:28] dpm: it did not happen to me [10:28] Mirv, no, does rebooting help? [10:28] oSoMoN: no, you just get everything broken at that point [10:28] dpm: for me re-running dualboot.sh was enough to get SU pack [10:28] back [10:28] oSoMoN: downgrading gcc works [10:28] oSoMoN: since t1mp was also seeing the same, I just made a tarball http://people.canonical.com/~tjyrinki/gcc/fix_gcc.tar that has deb:s that can be dpkg -i *.deb:d on the device [10:29] Mirv, thanks, that’s handy [10:30] Mirv, not true ... everything thats not C++ works fine :P [10:32] hehe [10:39] where are click packages installed on device again? [10:39] * t1mp is looking for notes-app source [10:40] it is not included in /opt/click.ubuntu.com [10:43] ok found it === dandrader is now known as dandrader|afk [11:13] t1mp: where did you find it? D: [11:14] nhaines, /usr/share/click/preinstalled/ [11:14] (i guess) [11:14] ogra_: thanks. :) [11:17] click list --manifest should show you [11:19] nhaines: click pkgdir com.ubuntu.notes :) [11:19] * Laney learns [11:19] ! === chihchun is now known as chihchun_afk === dandrader|afk is now known as dandrader [11:51] t1mp: yay. :) [11:52] I'm actually getting some work done today using pomodoros. I'm using an Android app to keep score, but on my second monitor on my computer I'm running the Ubuntu clock app and using that timer. :) [11:52] There are a couple bugs that are kind of touchy but I guess they're not worth reporting since the app's going to be tossed out and restarted? [11:52] Very useful to see a nice countdown on the screen though. :) [11:55] nhaines: actually if they are feature requests, do report them since timer and stopwatch will be added in the clock app post RTM. Also we are moving code from the old clock app to the new one, so any improvements in the old clock app benefits the new one to an extent. [11:55] nik90: that's very good to know! [11:55] nhaines: :) [11:55] They were actually more like interaction quirks. [11:56] Maybe I should write a pomodoro app for Ubuntu then. :) I'll see if the existing app has any source code free. Better to contribute to what's already working. [11:57] nhaines: we actually got some contributions to the stopwatch in the old clock app from some new contributors. The design for the old clock app has been opened up. So anybody can jump in and fix it. [11:57] popey: do you know who the welcome screen devs are? === alan_g is now known as alan_g|lunch [12:03] nik90: no, part of unity8 so guess they hang out in #ubuntu-unity, Saviq may know? [12:03] nik90, wassup? [12:04] popey: thnx [12:04] Saviq: I got a design for the clock app where I need to show full screen notifications in the welcome screen when an alarm is triggered [12:05] Saviq: https://docs.google.com/presentation/d/1JvDyhsW17d1-Mz8OY1YMBKwfRI2z9qgyRjbujEsxEMk/edit#slide=id.g18895458d_00 [12:05] Saviq: is that possible in the current implementation? [12:05] sounds like one for MacSlow [12:06] nik90, no, and it's not design that I got signed off yet [12:06] nik90, so it won't happen for some time at least [12:06] nik90, it's only being discussed now whether we should allow full-screen notifications on the greeter now, but it's not nearly designed yet [12:06] nik90, so fall back to the standard bubble for now [12:06] Saviq: ok I just wanted to ask around about that [12:07] Saviq: ok, as long as it is at least being discussed that is fine [12:07] Saviq: I assume that means it cannot be ready for RTM? (I can let my designer know) === dandrader is now known as dandrader|afk === davidcalle_ is now known as davidcalle === MacSlow|lunch is now known as MacSlow === alan_g|lunch is now known as alan_g === boiko_ is now known as boiko [12:55] stgraber: you are not in -ci-eng? [12:55] :) [12:55] barry: stgraber: can you help thostr_ to reconfigure a silo while sil etc. are afk? [13:04] thostr_: i can try! [13:10] barry: Mirv has done it by now [13:11] thostr_: k [13:22] dbarth_: oSoMoNhey, any reason why I can't see attached PDFs in gmail? [13:47] mardy, hey, is signond supposed to run in unity8 sessions? === dandrader|afk is now known as dandrader [13:49] seb128: it's a dbus service that should only run as long as it needs to run, afaik === gnu is now known as Guest44549 [13:53] seb128: yes [13:53] sergiusens: we miss download support in oxide right now [13:53] my device has been stuck on the google image for a pretty long time (~40 minutes) after flashing #85 :/ [13:53] sergiusens: that's the branch alex-abreu merged proposed recently; it's in review [13:53] dbarth_: but shouldn't I get the prerender of the pdf from the web as well? [13:53] https://code.launchpad.net/~abreu-alexandre/oxide/add-download-requested-support [13:53] dobey, mardy: trying on a fresh unity8-desktop utopic install, installing click fails, the score log has "Failed to connect to socket /run/user/1000/signong/socket: No such file or directory" [13:54] sergiusens: you mean on the desktop? [13:54] seb128: ignore that "critical" [13:54] seb128: if installing click fails, there is some other problem most likely [13:54] dbarth_: I'm talking about phone; then again, I'm asking as a dumb user [13:54] :-) [13:54] seb128: did the progress bar in the preview fill up? [13:55] sergiusens: nw [13:55] sergiusens: it works on the desktop, the pdf pre-render [13:55] sergiusens: but i don't think they have it on mobile [13:55] let me check ios though [13:56] dobey, it displays directly a fully downloaded, but maybe the things I tried are just small, not sure [13:56] sergiusens: right, it goes to mail-attachment something, which is a link to the actual attachemnt, hence the need for download suppotr [13:57] seb128: if you didn't get an error in the UI about needing to log in, and the progress bar filled up, then the problem is with the actual install of the downloaded click package, not the credentials or download [13:57] seb128: ie, the "pkcon install-local" likely failed [13:57] dobey, ok, thanks, so we are probably back tot packagekit backend issues [13:57] right [13:57] dobey, should the click but in some .cache dir? [13:58] but->be [13:58] seb128: i think it gets downloaded in ~/.local/share/ubuntu-download-manager or something like that [13:58] dbarth_: thanks [13:58] seb128: definitely under .local/share/ somewhere, but don't remember the exact path. [13:59] dobey, nothing in there :/ [13:59] dbarth_: one more; I can't do more than one login from the gmail webapp, is that on purpose? [13:59] dobey, I'm going to try to debug, I just got misleading by the signond error in the logs, thanks for pointing out that it's not the issue [14:00] .local/share/ubuntu-download-manager/Downloads/ [14:00] that's the path where they get downloaded to [14:00] k [14:00] the directory is there, but empty [14:00] seb128: check ~/.cache/upstart/scope-registry.log for error message about the command failing [14:01] dobey, I've a warning in there "InstallingPreview got error in getting credentials during startDownload" [14:01] seb128: also, do a search and clear the search, to see if the app shows up in installed apps [14:01] seb128: oh weird [14:02] seb128: you should have gotten the preview about a login error in that case [14:02] dobey, not, it's list in the "available" section [14:02] ok [14:04] dobey, sorry, that was an old entry, I clean/retried, I get "QIODevice::read: device not open" and "Network error: "Operation canceled (5)" [14:04] seb128: ok, that looks like a network connection issue :-/ [14:05] I can ping outside without issue though :/ [14:06] seb128: yeah. i can open amazon webapp on my nexus 4 and it seems to work ok, but when i try to search for available apps, add a u1 account, or install the system image update, on wifi, it doesn't work [14:06] seb128: i've seen that specific issue with QIODevice happen on my phone before though, and a reboot fixed it [14:06] :/ [14:06] let me try a reboot [14:07] seb128: sorry this is a pain to debug. way too many gears for wrenches to fall into. :-/ [14:08] not your fault, thanks for reply/trying to help there! [14:09] dobey, download worked after a reboot, it's in .local/share/u-d-m/Download [14:09] seb128: cool. and it also failed to install? [14:10] I'm trying to boot ubuntu but can't get past bootlogo. last_kmsg only says "Kernel panic - not syncing: Attempted to kill init!" and no other useful info. How can I debug the issue ? [14:10] yes, but I guess there we are back to the pk issues [14:10] dobey, mvo has those as "known issues" [14:10] seb128: that's a harmless warning, there's a branch to remove it [14:10] yep, pkcon is failing [14:10] right [14:15] anyone? [14:19] Agontuk: maybe ask in #ubuntu-kernel for help debugging kernel panics [14:21] OK. I didn't know there's another channel :) === Ursinha is now known as Ursinha-afk === alan_g is now known as alan_g|tea === Ursinha-afk is now known as Ursinha === alan_g|tea is now known as alan_g [14:42] Mirv, we’re ready to release a new version of oxide, so I’ll request a landing to go through the CI train, but it’s a bit of a special package that currently can’t be built from just a branch, we have a build ready in https://launchpad.net/~ubuntu-mozilla-security/+archive/ppa, so I guess we could copy it to the silo PPA once assigned, would that work? [14:44] mdeslaur, why do we use polkit at all if we make it depend on a group ? polkit is exactly designed for not having to use group permissions but seats and session permissions based on consolekit/logind [14:44] Mirv: fyi, I can help with the pocket copy if needed (also, this is something I/we've done in the past with a number of packages) [14:47] yeah, a binary copy is possible as the ppa is enabling all archs build (not sure if it builds against -proposed though) [14:47] ogra_: not quite... we use polkit to control access to stuff that makes sense to simply give to whoever has access to the console, but we mostly use policykit to grant privileges to the default user that is in the sudo group [14:48] sounds a bit like abusing the tool to me [14:48] ogra_: the stuff that we grant access to the console user has been audited to make sure it can't be used to escalate privileges [14:48] ogra_: no, that's exactly what it was designed for [14:48] hmm, k [14:48] great, so I’ll file a landing request [14:48] ogra_: the stuff that requires the user to be in the sudo group typically either hasn't been audited, or is known to enable some sort of privilege escalation [14:49] mdeslaur, that is an issue we *will* have to solve then ... latest if the first customer who wants a locked down phone comes around [14:49] ogra_: yes, definitely...and we're going to have to plan for it, as it's going to be a lot of work [14:50] Mirv, sil2100: so I’ve filed a landing request for oxide 1.0.2 but we don’t have an associated MR, can I get a silo anyway? [14:50] ogra_: I'm not opposed to removing root access...it just needs to be done right, or else it's security theatre [14:51] i seriously wasnt aware of that, since i know that polkit had been designed back then to get away from /etc/group|password stuff and to abstract that on a higher level [14:51] you caught me a bit by surprise that we tie it into sudo :) [14:51] I really preferred it when we called the group "admin" [14:51] well, thats just a name ... [14:52] that we tie the tool into a group but still use logind is the bit that seems weird to me [14:53] we have multiple access rights, basically: Everybody, console users, admins without a password, and admins with a password [14:53] the tie-in with logind is just for the "console users" part [14:54] hmm, k [14:56] tedg, heyo! I just wanted to confirm that the locked-user support in indicators is still scoped work, despite the unsplitting of the greeter (even the integrated greeter will need support for that) [14:58] mterry, Uhm, we were discussing it. Frankly I was a bit against it, seems we've given up on any semblance of security there... [14:58] Not sure why we'd put things in accounts service just to pull them out in the same session. [14:59] oSoMoN: hi! Let me get back to you in a moment [15:00] * ogra_ thinks we should keep the greeter in the shell and turn the lightdm greeter into a "user chooser" ... then make the shell always start locked by default [15:00] (for all users) [15:00] tedg, in the same session? [15:00] tedg, well we're also planning to use a split greeter on the unity8 desktop images this cycle [15:00] tedg, so they'll be useful there [15:01] tedg, and it's not like we have *no* security -- we'll disable adb by default [15:01] tedg, between that and confinement, the user's password in a keyfile won't be as world-readable as it sounds [15:02] mterry, Sure, as long as unity8 has no bugs, we're good :-) [15:03] oSoMoN: ok, I'm back for your disposal [15:03] tedg, fair enough. Though that does just put us on an even footing with iOS and presumably Android [15:03] tedg, we can surpass them post RTM [15:04] sil2100, thanks :) so I need a silo for landing request on line 37, without a MR associated to it (we’ll binary copy packages from an existing PPA) [15:05] oSoMoN: oh, ok ;) Then in this case we would need the names of the source packages you'll copy into the PPA in the 'Additional sources packages to land' [15:05] oSoMoN: then once you do binary copies to this PPA, CI Train can track them and be able to release them into the world [15:06] mterry, I'm not sure how we'd do it in the same session. The way the indicators are built is that they have a model, and then that drives the display. We're bringing up a different model depending on whether we're in the greeter or not. (i.e. live data vs. account service data). So it's not trivial to do. Hate doing it for a small time when we know it's not what we really want. [15:06] Guys, anyone can help me with the kernel panic problem? I don't know how to debug it :( [15:07] sil2100, ok, done [15:08] tedg, do you know much about the unity8-side code? Could it just switch models as the greeter comes in? [15:08] mterry, tedg, why do we need to split out the greeter at all ? [15:09] oSoMoN: let me assign a silo then [15:09] mterry, Not sure that we get a signal or anything like that, I think it's all in Unity8. They probably should tell logind though. [15:10] ogra_, So that the lock screen runs in a different user. If there's a bug, you don't compromise the user's session, only the lightdm session. Also, so that login passwords aren't evaluted in the user's session. [15:10] mterry, tedg, cant we keep the locking part in the shell and have a simple passwordless user selector as the greeter ... would just need some pam maginc in the lock screen [15:10] ogra_, we'll *need* a split greeter for use cases like encrypted home. And even when that's not the case, we like a split greeter for security reasons (harder to break in due to bugs in unity8 and the pam helpers can be run as root that way, which is how they expect to be run -- some don't work as the user) [15:11] hmm, k [15:11] tedg, but isn't choice of model in the unity8 code? It could just start reading from a different exported model from the service [15:11] mterry, data model not menu model :-) [15:12] mterry, So yes, it could choose a different menu, but that's mostly display in our world. [15:12] mterry, So we can have less data on that display. [15:12] mterry, But I'm not sure of all the control elements. Like you need a PIN to access settings. [15:13] we also cant leave that session running ... it needs to free up the ram after logging in [15:13] Eh, need to sit down and draw it out. [15:14] tedg, I see what you're saying about data/menu models.. Hm [15:14] ogra_, Sure, the only reason to keep it running is to make it start faster. Other tricks can be played. [15:14] right [15:15] mterry, How does the launcher handle it? Does it just manually pop a PIN prompt if an application is selected? [15:16] tedg, I'd have to see what the current code does -- the desired behavior, what we did for split mode, is to look like an unlock attempt if you launch an app, but when you unlock, we also launch the app like you asked [15:17] and/or launch it when you press the button, but I'd have to ask design about the implications of doing that [15:18] mterry, How do I turn on PIN unlocking? [15:18] ogra_, oops i've fallen into the reboot trap [15:18] ogra_, is it possible to get out of? [15:19] ogra_, or am i basically done until the next build? [15:21] tedg, edit ~/.unity8-greeter-demo and do something like: [15:21] [General] [15:21] password=pin [15:21] passwordValue=1234 [15:21] tedg, there are a few visual oddities with it now I believe -- I need to land a unity8 branch to bring it back up to code [15:21] it bitrot since the last time we were using it [15:23] * tedg set his password to 1111 so know one knows it by reading the IRC log [15:23] no one [15:24] tedg, :) [15:24] brendand, reboot trap ? [15:24] brendand, by using apt ? [15:24] mterry, Hmm, no, that didn't seem to work. [15:25] ogra_, well i rebooted and now i'm stuck on the google screen. it's probably the issue you were discussing with doko earlier [15:25] tedg, uh oh [15:25] tedg, oh oh [15:25] brendand, right i guess there is no easy way out but re-flashing ... doko has a new libstdc++6 in a PPA but not yet in the archive [15:25] tedg, change [General] to [phablet] [15:26]