/srv/irclogs.ubuntu.com/2014/09/11/#ubuntu-devel.txt

andrewrkis the fix for the fact that GtkStatusIcon does not work with Unity included in Utopic?00:46
slangasekdesrt: so mbiebl_ has reopened Debian bug #756076, saying that systemd-shim 8-1 doesn't actually work with logind00:51
ubottuDebian bug 756076 in systemd-shim "does not cleanup sessions when user logs out: No such interface 'org.freedesktop.systemd1.Scope'" [Important,Open] http://bugs.debian.org/75607600:51
slangasekhallyn: cgmanager 0.32-2 uploaded00:58
ScottKSo is phone a long term fork of the regular distro now?01:00
ScottK(trying to figure out how Oli's email relates to other stuff)01:01
slangasekno01:05
slangasekthe exact release cycle alignment is TBD01:06
slangasekthis merely stipulates the cycle by which updates are made available to phone end users01:06
ScottKOK.  Given the content of the updates, I don't see alignment with distro release/updates.01:13
ScottKMaybe someone that understands both could propose how they might relate.01:14
hallynslangasek: thanks.  (the other bug is just the recursive proxy fn calling the on-recursive main fn)01:53
hallynslangasek: 0.32-3 pushed to mentors, but if you want to wait on that that should be fine.  it can probably wait until 0.33 for that matter02:11
hallyn(which should have the listkeys method stgraber needs)02:12
slangasekhallyn: uploaded02:26
hallynslangasek: thanks!02:36
hallynwill sync into utopic tomorrow.02:39
hallynthat's where i expect some bug reports through systemd-shim in containers02:40
Mirvif there's a core-dev around wanting to help, there'd be a packaging ack to ack or nack which changes a funny build-dep to a useful build-dep now that they apparently use it https://ci-train.ubuntu.com/job/ubuntu-landing-010-2-publish/19/artifact/packaging_changes_ubuntu-ui-toolkit_1.1.1239+14.10.20140908-0ubuntu1.diff04:46
pittiGood morning04:47
pittislangasek: yes, I understand it (bit of a long story); I added an ugly workaround last night and will now fix that properly04:47
pittislangasek: can you please push systemd-shim to bzr? I'll do an 8-1exp1 upload now to rebuild against 21504:52
slangasekpitti: yep, pushed04:52
pittislangasek: cheers; mbiebl wants to upload 215 to unstable RSN, so that double-upload won't be necessary any more04:53
slangasekMirv: looking at this diff, I'm more concerned about the dropping of qml files from a package that's part of the SDK - are we sure this isn't an API break?04:54
Mirvbzoltan: http://pastebin.ubuntu.com/8315784/04:57
Mirvbzoltan: so that's regarding the Colors/*.qml04:57
Mirvbzoltan: what about apps that use them?04:58
bzoltanMirv:  none of the System and Core apps are using that, but let m check04:58
bzoltanMirv: slangasek: the Colors/*.qml is not the part of the API offering. No apps should directly use those files.05:03
=== doko_ is now known as doko
slangasekMirv, bzoltan: ok, packaging changes acked05:43
bzoltanslangasek:  thank you :) and thanks for being alert05:44
Mirvthanks!05:48
mvo_jamespage, jamespage_: is  lp:~james-page/software-properties/juno-support  stillrelevant? if so, I have a look now06:33
dholbachgood morning06:42
=== Sweetsha1k is now known as Sweetshark
dokostgraber, zul: looking at the python-lxc package in NEW. is there a reason that you don't build a python3-lxc package?07:19
=== marcoceppi is now known as rosales
=== rosales is now known as marcoceppi
dokopitti, jibel: please give back the python3.4 autopkg test on i38608:41
pittidoko: already done08:41
dokothanks08:41
dokoNBS empty \o/08:54
pittihooray! and so much before release!08:55
pittis/much/long/08:55
nik90stgraber: hey, so I was able to open qtcreator running in the lxc :) I used pretty much the same config you used for google chrome.09:17
nik90stgraber: I am running into 2 issues which I couldn't fix, the first being able to detect a connected N4 phone (/dev/usb doesn't seem to exist) and second being able to create a schroot inside qtcreator.09:18
nik90stgraber: On trying to create a schroot, I get the following message http://paste.ubuntu.com/8317272/09:18
nik90stgraber: in particular the line "E: Cannot install into target '/var/lib/schroot/chroots/click-ubuntu-sdk-14.10-armhf' mounted with noexec or nodev" seems interesting. I don't see any lxc.mount statement which does this. Anyway I can change that to allow creating a schroot09:19
nik90stgraber: sry, I meant can I change that to allow creating a schroot?09:31
dokorobru, dbus-test-runner autopkg tests fail after your recent upload09:36
dokoglance (1:2014.2~b2-0ubuntu2 to 1:2014.2~b3-0ubuntu1)09:38
dokoMaintainer: Ubuntu OpenStack09:38
doko4 days old09:38
dokopython-glance/i386 unsatisfiable Depends: pyhton-osprofiler09:38
dokopython-glance/i386 unsatisfiable Depends: python-ordereddict09:38
dokoNot considered09:38
dokozul, jamespage: just another typo, don't know about python-ordereddict09:38
shadeslayer_mvo_: poke09:40
victorppopey, ping09:42
popeyhello victorp09:44
mvo_hey shadeslayer_ - I'm about to leave for lunch, but I will read scrollback and can answer when I'm back09:45
mvo_shadeslayer_: unless its quick in which case I can answer right away :)09:45
shadeslayer_mvo_: any ideas if appstream in lp is something you will be working on?09:46
mvo_shadeslayer_: I plan to work on client side support in apt to make the content fetching a (optional) part of apt-get update. but nothing more is planed on my part right now09:47
shadeslayer_mvo_: right, but how would content generation work ?09:51
shadeslayer_I.e. extract appstream data from packages09:51
dokopitti, infinity: is the glibc/langpack merge still scheduled for 14.10?09:52
=== dholbach_ is now known as dholbach
cjwatsondoko,stgraber,zul: there's already a python3-lxc in the archive, built from separate source10:03
dokoahh, ok10:05
dokothen I'll accept the one in NEW10:05
dokojamespage, zul: python-oslo.utils MIR is incomplete10:24
Mirvdoko: I got datetime - module not found with python 2.7 on utopic. downgrading to 2.7.8-6ubuntu1 fixed my issue.10:26
Mirvrunning lp:click-toolbelt10:26
dokoMirv, works here10:28
dokoMirv, so please be more specific10:30
dokothere was a change, it is now a builtin instead of an extension10:31
Mirvdoko: yes, I filed bug #1368144 about it now. maybe I'd need to recompile it or something, but at least that's what happens when executing the old ./click-toolbelt with new python. I must admit that click-toolbelt is a bit confusing beast to build for me, so I've tended to use the existing one when possible.10:33
ubottubug 1368144 in python2.7 (Ubuntu) "ImportError: No module named datetime with lp:click-toolbelt" [Undecided,New] https://launchpad.net/bugs/136814410:33
MirvI know that simple import datetime still works10:34
cjwatsonpython-saharaclient needs an MIR from somebody who cares about python-heat10:34
dokoMirv, is there a virtualenv involved?10:38
=== dholbach_ is now known as dholbach
Mirvdoko: yes. so, if this is expected, feel free to mark as invalid. just reporting the oddity.10:42
jamespagedoko, ack - will followup with zul when he starts10:42
jamespagelooking at oslo.utils now10:42
dokoMirv, I guess the python executable is copied into it, but not the standard extensions.10:42
dokojamespage, just fyi, https://launchpad.net/ubuntu/+source/tuskar/0.4.2-2/+build/6072038, requires new nova10:49
cjwatsonshadeslayer_,Riddell: somebody needs to refresh the kubuntu-plasma5 PPA for the libav11 transition, it seems10:50
cjwatson libkf5filemetadata-bin : Depends: libavformat55 (>= 6:10~beta1~) but it is not installable10:50
cjwatson                          Depends: libavutil53 (>= 6:10~beta1~) but it is not installable10:50
cjwatsonthat's the root of the current image build failure10:50
shadeslayer_cjwatson: we're all at Akademy, with shit internet10:50
shadeslayer_so it's going to be hard to get to it before Monday10:50
cjwatsonlooks like just that one package10:51
shadeslayer_I'll try10:51
cjwatsonit's probably just a straight rebuild of kfilemetadata-kf510:51
cjwatsonshadeslayer_: oh wait, I apparently have upload privileges10:52
shadeslayer_ack10:52
shadeslayer_cjwatson: oh awesome :D10:52
cjwatsonthings I did not know.  I'll sort it out then10:52
cjwatsonand I'll not bother with next-staging since it's uninstallable right now anyway ...10:53
=== MacSlow is now known as MacSlow|lunch
jamespagedoko, ack11:05
dokomlankhorst, are there still some xserver binaries to remove?11:12
=== brendand is now known as brendand-afk
dokomlankhorst, should x11-xfs-utils really be demoted?11:28
zuldoko/jamespage: ack11:28
sil2100@pilot in11:30
=== udevbot_ changed the topic of #ubuntu-devel to: Archive: Feature Freeze | Devel of Ubuntu (not support or app devel) | build failures -> http://qa.ubuntuwire.com/ftbfs/ | #ubuntu for support and discussion of lucid -> trusty | #ubuntu-app-devel for app development on Ubuntu http://wiki.ubuntu.com/UbuntuDevelopment | See #ubuntu-bugs for http://bit.ly/lv8soi | Patch Pilots: sil2100
pitticjwatson: what was the trick again to tell "apt-get -o Dir::Etc::sourcelist=/dev/null" to not remove already downloaded indexes again from /var/lib/apt/lists?11:31
pittior mvo_ ^11:31
cjwatsonpitti: --no-list-cleanup11:31
pittiI'd like to only download the indexes from one added source (a local file:// or a PPA), for efficiency11:31
pitticjwatson: ah, cheers!11:31
mvo_pitti: APT::Get::List-Cleanup=false11:31
mvo_aha, or the other one :)11:31
=== _salem is now known as salem_
cjwatsonbut I'm not sure whether that still forgets that the packages from the other sources exist11:32
pittimvo_: ah thanks, "apt-config dump|grep -i clean" (or "grep -i list") didn't give anything, but it's indeed in the manpage11:32
=== udevbot_ is now known as udevbot
pitticjwatson: at least apt-cache policy seems happy11:33
cjwatsoncool11:34
pittisudo apt-get --no-list-cleanup -o Dir::Etc::sourcelist=/etc/apt/sources.list.d/canonical-x-x-staging-utopic.list -o Dir::Etc::sourceparts=/dev/null update11:36
pittithat seems to by and large do what I want11:36
pittiand like 50 times faster :)11:36
mvo_pitti: great11:37
* pitti puts that into autopkgtest and checks whether all the tests are still happy11:37
=== dholbach_ is now known as dholbach
sil2100@pilot out11:41
=== udevbot changed the topic of #ubuntu-devel to: Archive: Feature Freeze | Devel of Ubuntu (not support or app devel) | build failures -> http://qa.ubuntuwire.com/ftbfs/ | #ubuntu for support and discussion of lucid -> trusty | #ubuntu-app-devel for app development on Ubuntu http://wiki.ubuntu.com/UbuntuDevelopment | See #ubuntu-bugs for http://bit.ly/lv8soi | Patch Pilots:
* sil2100 lunch o/11:42
* dholbach hugs sil210012:10
* sil2100 hugs dholbach back12:13
dholbach:)12:13
pittidpm: could you please add http://people.canonical.com/~dpm/data/ubuntu-l10n/ for 14.09 (ubuntu-rtm)?12:15
sil2100;)12:17
=== MacSlow|lunch is now known as MacSlow
dpmpitti, yes, I'll have to talk to wgrant on how to do it. It requires setting up a cron job for an exporter script in LP, and I'm assuming we can do it for ubuntu-rtm/14.09 in the same way we can do it for ubuntu series12:25
pittiyeah, it's pretty well the same12:25
=== brendand-afk is now known as brendand
pittiwgrant: I just filed bug 1368209, I can't explain that myself12:33
ubottubug 1368209 in Launchpad itself "RTM langpack export is missing some domains" [Undecided,New] https://launchpad.net/bugs/136820912:33
pittidpm: I added a WI to https://blueprints.launchpad.net/ubuntu/+spec/qa-u-spanish-translations FYI12:34
dpmthanks pitti, I'm on it12:35
pittidpm: cheers12:35
pitti(just for tracking stuff)12:35
dpmpitti, replied to that bug12:38
pittidpm: yes, unity8's domain is indeed "unity8"; I just diffed our current langpacks with some extra "directly from trunk" imports, I wondered about that too12:41
dpmpitti, yeah, I was surprised that we pull unity as well12:41
dpmalong unity8, I mean12:41
sil2100@pilot in12:42
=== udevbot changed the topic of #ubuntu-devel to: Archive: Feature Freeze | Devel of Ubuntu (not support or app devel) | build failures -> http://qa.ubuntuwire.com/ftbfs/ | #ubuntu for support and discussion of lucid -> trusty | #ubuntu-app-devel for app development on Ubuntu http://wiki.ubuntu.com/UbuntuDevelopment | See #ubuntu-bugs for http://bit.ly/lv8soi | Patch Pilots: sil2100
pittidpm: yeah, it's in the package list, apparenlty something still keeps it in the seeds12:42
pittidpm: but yeah, that one can probably go12:42
pittidpm, wgrant: closed bug then, thanks!12:44
dpmpitti, sent the RT, updated BP12:44
pittidpm: it's great to have you back :)12:44
dpmpitti, thanks, it's great to have you, and I expect it to be for 10 more years at least! ;)12:45
wgrantOh12:46
wgrantI was just going through them all to work out why you were wrong :P12:46
pittiwgrant: I expected that I was, but I wanted to understand why :)12:46
flexiondotorgcjwatson, dholbach is helping get some of the Ubuntu MATE package cleaned up.12:52
flexiondotorgcjwatson, I am also wondering what format I should provide Ubuntu MATE SYSLINUX themes in? I have theme, just not sure if they should be packaged as debs?12:53
=== iulian_ is now known as iulian
desrthallyn: looks like we have troubles :(13:13
dpmseb128, quick question: the translations for indicator-transfer for the RTM distro don't seem to be enabled, and I don't see any templates in its import queue: https://translations.launchpad.net/ubuntu-rtm/14.09/+source/indicator-transfer/, whereas you showed me that the ones on ubuntu/utopic are: https://translations.launchpad.net/ubuntu/utopic/+source/indicator-transfer/ - any ideas why? I'm not quite sure how the upload workflow works between the two13:18
dpm distros13:18
seb128dpm, hey, no idea how those imports work with pocket copies13:19
dpmpitti, perhaps you know? ^13:20
seb128dpm, pitti, oh13:20
seb128it seems like that version just didn't get uploaded to rtm13:21
seb128https://launchpad.net/ubuntu-rtm/+source/indicator-transfer13:21
seb128dpm, let me file a sync request for it13:21
dpmah, that'd explain it, thanks seb12813:21
pittidpm, seb128: ATM I'm still syncing ubuntu langpacks to RTM13:31
pittias ubuntu-rtm langpacks are still blocked by some small things13:32
seb128pitti, blocked?13:34
pittiseb128: main thing for now is getting dpm's translation stats for RTM13:35
pittiI think everything else is sorted out, I did some import queue approvals etc.13:35
seb128pitti, how are stats blocking package copies?13:35
pittiseb128: oh, they don't13:35
pittiseb128: I mean RTM specific langpack builds13:35
seb128oh, ok13:36
pittiseb128: right now I do package copies as we haven't diverted too much13:36
seb128right13:36
stgraberdoko, cjwatson: correct, we ship a python3-only binding as part of the upstream source and don't want to be backward compatible to python2 there. However openstack and some other distros (RHEL) don't ship or don't support python3 quite completely yet so we have that separate source tree with a python2 part of our binding. The main reason for the separation is that we support the python3 binding for 5 years whereas we have absolutely no inte13:57
stgrabernik90: so schroot is going to be tricky I suspect. The reason is that this is an unprivileged container so it's restricted in what it can do since it's not real root. One thing it can't do is create device nodes and that may be what's upsettin schroot.13:59
stgrabernik90: try adding lxc.aa_profile = unconfined to your config and see if that does the trick for schroot, but I doubt that'll be enough :(14:00
stgrabernik90: as for /dev/usb, you did put "lxc.mount.entry = /dev/usb dev/usb none bind,create=dir" in your container's config right?14:00
sil2100@pilot out14:12
=== udevbot changed the topic of #ubuntu-devel to: Archive: Feature Freeze | Devel of Ubuntu (not support or app devel) | build failures -> http://qa.ubuntuwire.com/ftbfs/ | #ubuntu for support and discussion of lucid -> trusty | #ubuntu-app-devel for app development on Ubuntu http://wiki.ubuntu.com/UbuntuDevelopment | See #ubuntu-bugs for http://bit.ly/lv8soi | Patch Pilots:
cjwatsonflexiondotorg: just send the updated images, in formats that match the Ubuntu ones14:24
flexiondotorgcjwatson, So for Ubiquity I should submit a merge proposal to ubquity-slideshow.14:26
flexiondotorgcjwatson, Where do I "send" the SYSLINUX theme too?14:26
nik90stgraber: I tried  "lxc.mount.entry = /dev/usb dev/usb none bind,create=dir" but the container does not start anymore since /dev/usb doesnt exist14:26
nik90stgraber: may be I should instead create a container as root14:27
nik90stgraber: although everytime I open the gui app, it will ask for sudo priviledges I suppose14:27
cjwatsonflexiondotorg: ideally, a merge proposal against lp:~ubuntu-cdimage/debian-cd/ubuntu - the files go in data/utopic/14:28
cjwatsonyou should see the layout there, such as it is14:28
flexiondotorgcjwatson, Perfect. Thanks.14:28
stgrabernik90: hmm, the point of create=dir is that it should be creating it... anyway, you can just mkdir /dev/usb and try again, that should work14:29
nik90stgraber: ok14:30
=== roadmr is now known as roadmr_afk
hallyndesrt: i don't see any bug reports14:47
dokozul: just drop argparse everywhere. it's included in 2.7 and 3.414:49
dokomlankhorst, xorg-server ping14:51
desrthallyn: slangasek said that we got the original report reopen14:55
desrthttp://bugs.debian.org/75607614:55
ubottuDebian bug 756076 in systemd-shim "does not cleanup sessions when user logs out: No such interface 'org.freedesktop.systemd1.Scope'" [Important,Open]14:55
hallynhm.  is there some 'we're done with this method' signal shim needs to send?14:56
desrtya.  the method return message :p14:56
* hallyn starts to suspect that comcast is anti-net-neutrality-ing the ubuntu archive14:56
hallynhm, no, i guess it is ipv6  70% [Connecting to us.archive.ubuntu.com (2001:67c:1562::15)] [Connecting to se14:57
hallyndesrt: i'm trying ot update my system so i can test here14:57
desrtme too14:57
hallynthere we go, disalbed ipv6 in sysctl and now it works15:02
hallynmaybe it's comcast.  i hope it's comcast15:02
hallynstgraber: ^ any known ipv6 bugs in the utopic kenrel right now?15:03
zulstgraber: has the openvsiwtch support made it to utopic yet for lxc?15:03
stgraberhallyn: nothing that I've noticed15:04
stgraberzul: no15:04
zulstgraber: is it?15:04
hallynstgraber: when will you be merging lxc into utopic?15:04
hallynstgraber: and ok, thx, i assume comcast is messing around then15:04
flexiondotorgcjwatson, I'm looking for where I should inject the Ubuntu MATE gfxboot.cfg settings. Looks like in tools/boot/utopic/boot-*. Correct?15:05
stgraberhallyn: once we're done getting the regressions out of master so I can finally tag alpha215:05
hallynregressions?  pshaw15:05
cjwatsonflexiondotorg: yes15:10
slangasekhallyn, desrt: note specifically that mbiebl says this problem was with logind from 215 after a rebuild of systemd-shim15:14
desrtslangasek: not sure i understand why that would make a difference..15:15
slangasekdesrt: I'm merely pointing out the difference, in case anyone has difficulty reproducing it15:15
desrti just installed the update and am now rebooting...15:16
desrthmm... i have 208 here15:18
desrtso he's right15:19
desrtthe cgroup gets cleaned up, but logind doesn't know about it15:19
desrti'll take a look15:19
desrtmaybe there should be a signal or something, indeed15:19
=== roadmr_afk is now known as roadmr
dokozul: python-cliff has the same argparse problem15:39
zuldoko: ack15:39
flexiondotorgcjwatson, Please could you cast an eye over my changes? If all looks good to you I'll submit a merge proposal - http://bazaar.launchpad.net/~ubuntu-mate-dev/ubuntu-cdimage/ubuntu-mate/revision/189815:52
cjwatsonflexiondotorg: it's much easier for me to review after you submit a merge proposal - that's what they're for15:52
flexiondotorgcjwatson, OK.15:52
cjwatsonyou can always commit fixes on top after review (you don't need to resubmit the MP or anything)15:52
cjwatsonwell, assuming you branched from the right place15:53
cjwatsonbut looks like you did15:53
flexiondotorgcjwatson, Merge proposal submitted. Thanks for your help.15:56
mlankhorstdoko: pong?16:00
dokomlankhorst, are there still some xserver binaries to remove?16:01
mlankhorstnvidia-173, glamor-egl, xserver-xorg-video-sis xserver-xorg-video-msm need to be gone16:04
mlankhorstI've asked on #ubuntu-release, no reply yet afaik16:05
flexiondotorgcjwatson, OK, that Merge proposal looks awfully wrong.16:05
flexiondotorgcjwatson, I've submitted it against the wrong branch. I'll resubmit.16:06
mlankhorstoops, xf86-video-msm (source package)16:07
mlankhorstbut after that it should migrate16:07
flexiondotorgcjwatson, I don't appear to be able to submit a merge prospal against lp:~ubuntu-cdimage/debian-cd/ubuntu16:10
mlankhorstdoko: http://people.canonical.com/~ubuntu-archive/proposed-migration/update_output.txt (near the bottom)16:11
cjwatsonflexiondotorg: just mail me the URL then, I'm firefighting something else and can't look now.16:12
flexiondotorgcjwatson, Will do. Thanks.16:12
dokomlankhorst, please can you file a bug and add ubuntu-archive to the subscribers16:12
mlankhorstok16:13
mlankhorstactually that's going to be a bit hard from here... don't have sso access and won't work until monday16:13
mlankhorstlets see..16:14
Elv1313Is it possible to enable ppc and ppc64 build for PPAs? It doesn't seem so ( https://help.launchpad.net/Packaging/PPA#Supported_architectures ), but we got a bug report that the official package doesn't build for it and would like to add ppc to our PPA repository16:58
dokono16:59
cjwatsonElv1313: we may do so in future once we have virtualisation working, but it's not available yet17:01
Elv1313ok thanks17:01
Elv1313arm64 would also be nice17:01
cjwatsonarm64 is possible now, file a ticket on answers.launchpad.net/launchpad17:02
cjwatsonalthough it'll have to build through qemu17:02
Elv1313(but we already have hardware to test that)17:02
cjwatsonqemu-user-static that is17:02
Elv1313or cross compile17:02
dobeyPPAs don't do cross compiling17:03
* Elv1313 would not want to be the one setuping that17:03
cjwatsondobey: (yet; I have been thinking about how to do that ...)17:05
Elv1313Another question, is it totally too late to get an upgraded package into 14.10? We (sflphone) have made a release in July that fix all issues reported by errors.ubuntu.com and then some. The changes are too large to be considered a stable update. We have enough PPA users to have confirmation that this version is much more stable then the one currently in 14.1017:05
dokomlankhorst, there are still reverse dependencies17:05
dobeyElv1313: is it in main or universe?17:06
Elv1313dobey: https://launchpad.net/ubuntu/utopic/+package/sflphone-daemon17:07
dobeyElv1313: it's in universe, so it should be pretty easy to get a newer version in.17:08
cjwatsonit would be very helpful to get the new version into Debian first17:08
cjwatsonmuch easier then for us to just merge, and it helps more people that way17:09
Elv1313dobey: Ok, thanks. If there any protocol to follow? I only pushed stable updates before, never totally new versions17:09
dobeyindeed. especially if it's already there, and the new version can drop the ubuntu-specific changes17:09
Elv1313so email debian guys first?17:09
dobeywhoever maintains it in debian, yeah17:11
Elv1313then, ask again or #ubuntu-devel or fill a launchpad bug?17:11
cjwatsonLP + here17:12
Elv1313ok thanks17:16
RoyKhttps://bugs.launchpad.net/ubuntu/+source/mdadm/+bug/1364091 is this being worked on?17:35
ubottuLaunchpad bug 1364091 in mdadm (Ubuntu) "Possible RAID-6 corruption" [Undecided,New]17:35
=== roadmr is now known as roadmr_afk
smoserhey.18:06
smoseri have a upstart quesiton18:06
smoserit seems from experimenting that a pre-start script does not get a kill on 'stop'. is that right ?18:06
slangaseksmoser: that doesn't sound "right", but perhaps there's a bug.  Maybe check the open bug list to see if it's a known issue?18:29
mlankhorstdoko: nvidia-173 still seems to be a possible fullfilment as dependency for boinc-nvidia-cuda in debian18:47
mlankhorstbut it works fine without18:47
mlankhorstand -ati was fixed in -proposed to not need glamor-egl18:51
desrtslangasek: i think this might actually be vaguely something like a logind bug18:51
desrtslangasek: but it's a bug that wouldn't be a problem in normal circumstances, so that makes it our bug again....18:51
slangasekdesrt: bug-for-bug compatibility18:51
slangasekwelcome to Windows18:51
desrtthe problem is that we never properly signal the _start_ of the session, which leaves a stale job in the 'scope_job' field of the session in logind18:52
desrtat logout time, logind sees this and assumes that it's the _stop_ job still in progress18:52
desrtwhereas abandon doesn't signal completion18:52
desrtlogind for this reason doesn't properly clear the scope_job field when issuing Abandon18:52
desrtshould have a test to fix soon...18:53
desrter... a fix to test :)18:54
slangasekoh, I assumed you were being TDD ;)18:54
desrttests?  in systemd-shim?  surely you kid :p18:54
smoserslangasek, http://paste.ubuntu.com/8321182/19:07
smoseri think that illustrates my point.19:08
smoserand now i'll bother you with what i was trying to do19:08
smoseri was trying to block bringing up of network interfaces until some event had occurred.19:08
slangaseksmoser: are you expecting upstart to kill the sleep process?  that's not the main process of the job; the main process of the job is the shell19:09
smoserit kills neither19:09
slangasekso I would expect one of two things: 1) upstart kills the script, making it the shell's job to clean up the child process; or 2) upstart kills all related processes via cgroupy magic, and the shell doesn't get a chance to tell you what happened19:10
smoserwell, its neither :)19:10
slangaseksure, understood19:10
slangasekI just don't think your script here illustrates that particularly well :)19:10
smoseri would have expected it to send SIGTERM to the script19:10
smoserwell, i avoided the handling of traps to simplify19:11
smoserhttp://paste.ubuntu.com/8321199/19:11
slangaseksmoser: anyway, perhaps compare with wait-for-state, which does exactly this sort of thing with a main script instead of a pre-start script - I don't see that a pre-start gives you anything here (except, apparently, some bugs)19:11
smoser^ that one is what i was actually trying to do.19:11
smoserpre-start allows you to block starting19:11
smoseri dont think starting does19:11
smoserer.. i dont think main script does19:11
slangasekit does if you mark the job 'task'19:11
smoserat least per comments in /etc/init/network-interface-security.conf19:11
slangasekIIRC19:11
smoser# Since we need these profiles to be loaded before any of the above services19:12
smoser# begin running, this service must be a pre-start so that its pre-start19:12
smoser# script finishes before the above services' start scripts begin.19:12
slangaseksmoser: see documentation of 'task' in init(5), which agrees19:12
smoserthat may be out of date.19:12
slangasekor it may have never been true ;)19:12
slangasekwell, for the specific case of n-i-security, it applies because we care about those jobs ending in a 'started' state19:13
slangasekyou may care about that here also, in which case yeah, you can't 'task' it to work around a bug in pre-start handling19:13
smoserwhere do you see information about task that you're pointing me at ?19:14
slangasekI would say that at that point, the only workaround would be polling (ick)19:14
slangaseksmoser: the init(5) manpage?19:14
slangasek      task   This stanza may be used to  specify  that  the  job  is  a  task19:14
slangasek              instead.   This  means  that  the act of starting the job is not19:14
smoserright.19:14
slangasek              considered to be finished until the job itself has been run  and19:14
slangasek              stopped  again,  but  that exiting with a zero exit status means19:14
slangasek              the task has completed successfully and will not be respawned.19:14
smoseri didn't understand that to mean exactly what you said.19:14
smoseri'll try that.19:14
slangasekimplied is that, until the task is 'started', it doesn't release the starting event19:14
smoseryou're aying make my job a task19:15
slangasekyes19:15
smoserand make it 'script' instead of 'pre-script'19:15
* slangasek nods19:15
slangasekand if you /still/ aren't getting signalled, then... ick19:15
smoserhm..19:16
=== _TJ_ is now known as TJ-
desrturg... every further step i take requires me to take one more19:54
=== ken__ is now known as kenvandine
=== roadmr_afk is now known as roadmr
smoserslangasek, http://paste.ubuntu.com/8321639/20:11
smoserthats my cloud-init-blocknet.conf .20:12
smoserdoes not seem to block networking.20:12
smoseras i can ssh in, and see a blocker running (cloud-init-blocknet (network-interface/eth0) start/running, process 465)20:13
slangaseksmoser: er, of course it doesn't block it, where's the word 'task'? :)20:16
smoserbah20:17
smoserok.20:18
smoserwell that fixed that... now to figure out why it wasn't getting stopped.20:18
hallynjdstrand: oh hurray!  i've got apparmor-confined libvirt-lxc containers.20:19
jdstrandhallyn: oh nice!20:19
hallynnow, do we want to make these default?  i think we do, but maybe we'll break someone?20:19
jdstrandI would say 'yes'20:20
hallynok.  i'm going to add this to the libvirt 1.2.8 proposed package, then ping here on the FFE we're waiting on to push 1.2.820:23
hallynjdstrand: one more thing, i notice that upstream libvirt-qemu abstraction has a sub-policy for running qemu-bridge-helper.  i'll add that to ours (in debian/apparmor/lbivirt-qemu) unless you say that's a bad idea20:25
jdstrandno, that's good20:25
jdstrandI think I reviewed it20:26
hallyncool20:28
blkperlhi, I'm running into bug 1124250, would someone be able to push this bug forward?20:30
ubottubug 1124250 in nfs-utils (Ubuntu) "Partially incorrect uid mapping with nfs4/idmapd/ldap-auth" [Undecided,Confirmed] https://launchpad.net/bugs/112425020:30
slangasekblkperl: it doesn't appear that a fix is known, right?  does changing the settings in /proc/sys/kernel/keys, as discussed in the linked RH bug, have any effect?20:33
blkperlslangasek: ok ill try that20:37
=== cmagina_ is now known as cmagina
=== StevenK_ is now known as StevenK
hallynjdstrand: apparmor policy will need a few tweaks though to let an ubuntu container run. :(21:50
jdstrandhallyn: that's ok. that is thankfully not difficult21:56
hallynjdstrand: yeah but i suppose i ought to do it before uploading 1.2.8 (with default=on :)22:01
jdstrandheh, yes :)22:02
jdstrandpretty22:06
jdstrandpeer_addr="@/tmp/.X11-unix/X0��������عg#" peer="unconfined"22:06
sarnoldooo22:06
jdstrandjjohansen: fyi, it happens with peer_addr to (not surprising with shared code)22:07
jdstrandjjohansen: this is what lsof gives me: http://paste.ubuntu.com/8322328/22:08
jdstrandjjohansen: with my policy updates: http://paste.ubuntu.com/8322337/22:09
jdstrandok, wandering off for quite a while22:09
jdstrandjjohansen: oh, hah, didn't mean to past that here22:14
jdstrandpaste22:14
hallynall right think i've got it22:17
hallynnow who to ping about the FFE22:17
hallynoh.  i was wrong.  still hanging at /dev populating22:17
hallynsarnold: hey, so i'm getting this denial message:22:21
hallyntype=1400 audit(1410473999.866:25): apparmor="DENIED" operation="mount" info="failed type match" error=-13 profile="libvirt-4b477da6-28c4-4497-87f1-bafeb853f90b" name="/sys/" pid=1711 comm="mount" flags="rw, nosuid, nodev, noexec, remount"22:21
hallynmy policy does have 'mount fstype=sysfs -> /sys/',22:21
hallynwhat am i missing?  i need a separate remount rule?22:21
sarnoldhallyn: maybe? (at this point you've used the mount rules far more than I have.. :)22:22
hallynheh, yeah but at such long intervals tha ti don't remember anything from one instnace to the next :)22:23
hallynjust allowing 'mount,' allows full container boot, so it's something lik ehtat...22:23
sarnoldhallyn: ah! this might explain it, "Specifically fstype matching currently only works when creating a new mount and not remount, bind, etc."22:24
sarnoldhallyn: hehe22:24
hallynoh, hm, then maybe th eproblem is our rule ot avoid remounting / ro ?22:25
hallyndrat,22:25
hallynwell i may just allow 'mount,' right now just to get this out the door22:25
hallynbc as it stands you can't stop a container once you start one :)22:25
hallyn(bc of dnsmasq policy)22:25
sarnoldhaha22:26
sarnoldthat's .. awesome :)22:26
sarnoldwatch out oracle, we've got our own "unstoppable linux"  :)22:26
hallynwell that was my concern with the way the new unix class was written22:26
hallynit'll have the same sort of implications, but worse22:26
sarnoldhallyn: can you get away with a 'remount /sys/ -> /sys/,  rule?22:27
hallyn(bc any confined daemon will have to be given the right to talk to another daemon over unix sock, aiui)22:27
hallyni'll try!22:27
hallynsarnold: holy schnickities.  that inexplicably makes the container instantly crash22:29
sarnoldhallyn: yikes22:29
hallynoh, i guess it doesn't like the rule,22:30
hallyn2014-09-11 22:28:58.685+0000: 1: error : AppArmorSetSecurityProcessLabel:617 : internal error: error calling aa_change_profile()22:30
sarnold:(22:31
sarnoldsorry, I thoght that would work22:31
hallynuh oh, compiz is at 2.5G, probably time for a 'kill compiz from console after all windows freeze' soon22:31
hallynsarnold: hah, np, thanks for trying.  i guess i'll just try with all the remount flags it gives in the denied msg22:32
hallynall right now mountall is just being annoying22:36
hallynsarnold: got past the sys remount one, now mountall wants to remounta ll th eothers22:36
hallyndrama queen22:37
sarnoldremount ALL the things!22:37
hallynyeah, and all separately.  so i need a remount options=(remount rw) -> /sys/fs/pstore as well as a remount options=(remount ro) -> /sys/fs/pstore,22:40
hallynbut!  it works.22:40
hallynthis is better than good enough for gov work.  ship it!22:41
hallynsarnold: thanks for the moral support :)22:44
sarnoldhallyn: oh man :/ you may be able to use remount options in (remount rw) ... options in (remount ro) ...   rules22:45
hallynsarnold: heh, that would be nice.  lemme try22:46
Logan_xnox: naughty22:47
hallynsarnold: eh, i must not be getting the syntax right - but actually i think separately may be easier to read22:48
=== salem_ is now known as _salem

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!