/srv/irclogs.ubuntu.com/2015/04/28/#ubuntu-devel.txt

=== tmpRAOF is now known as RAOF
pittiGood morning05:05
pittiinfinity: sudo> erk, sorry; debugging leftover, I'll reupload05:06
pittisarnold: ^05:06
pittisarnold, infinity: reuploaded and tested again05:19
pittiwith dropped sudo and /bin/echo -> printf05:19
pittithanks for spotting!05:19
rlaagerNow that Ubuntu has moved to systemd, is it the plan to update packages to use systemd timers instead of cron jobs?05:30
pittirlaager: all in due time; we still want/need to support upstart until at least 16.04 LTS, and the phone hasn't been switched yet05:32
rlaagerpitti: I ask because if that's the eventual plan, I will update my packages at $WORK sooner (i.e. for the next LTS) rather than later, and it will also affect my suggestions and patches to Ubuntu packages, both in and out of the official repositories.05:34
pittirlaager: it hasn't been officially discussed, but once we stop supporting upstart I see no reason to not use timers05:35
* Unit193 sighs.05:44
ari-tczewwhen vivid+1 is going to be open?05:55
pittiari-tczew: whenever we get a name06:00
Unit193And someone has been slacking on the naming of it. ;)06:02
pittiyeah, this is a non-delegatable task, I'm afraid06:04
pittiwgrant, cjwatson: gcc-4.9 built in the PPA, but again failed to upload: do you know what https://launchpad.net/~ubuntu-core-dev/+archive/ubuntu/ddeb-test/+build/7362665 means?06:24
wgrantpitti: Huh, that reminds me of a bug I fixed in it in 2009.06:33
wgrantpitti: I suspect one of the binaries may have been missing a version in its Source field.06:34
wgrantpitti: It's looking for an epoched source version.06:34
pittiwgrant: some binaries indeed have an epoch (that was what the whole bug was about)06:34
pittibut the source shouldn't need one?06:34
wgrantpitti: But the binaries need to specify their source package.06:35
wgrantIf the name is different, they have a Source: foo field06:35
pittiwgrant: what does "missing a version in its Source field" mean?06:35
wgrantIf the version is also different, they have a Source: foo (1.2.3)06:35
pittimissing Source: field, or missing Version:?06:35
pittiooh!06:35
wgranteg. apt-cache show lib32gcc106:35
pittiI didn't know that06:35
wgrantSource: gccgo-5 (5.1~rc1-0ubuntu1)06:35
pittiI don't test for that, might be in the mangler06:36
pitti Package: fixincludes06:36
pitti Source: gcc-4.9 (4.9.2-10ubuntu13)06:36
pitti Version: 1:4.9.2-10ubuntu1306:36
pittiso that looks ok, right?06:36
pitti Package: fixincludes-dbgsym06:36
wgranthat is correct.06:36
pitti Source: gcc-4.906:36
pitti Version: 1:4.9.2-10ubuntu1306:36
pittibut that would be wrong then06:36
wgrantIndeed.06:37
pittiwgrant: ack, thanks!06:37
* pitti goes to fix that06:37
wgrantI don't remember what exactly my old fix was.06:37
wgrantOhh, unless it was adding the Source field in the first place.06:37
wgrantlaunchpadlibrarian.net/35716468/pkg-create-dbgsym_0.31_0.32.diff.gz06:37
dholbachgood morning06:48
jasabellahi!08:33
wgrantpitti: I think it's reasonable to not fix lucid.08:52
wgrantIt's worth looking at any major differences precise and trusty, though.08:52
pittiwgrant: I backported the fixes to precise08:52
pittithere are a lot more which could be backported, but let's not do everything at once08:52
wgrantRight, just wondering ifthere's anything else interesting for failedtoupload reasons.08:53
pittithere were some fixes to improve the debug links etc., but none that refer to uploading except perhaps cjwatson's Architectures: fix (which I included)08:54
wgrantRight.08:54
pittiwgrant: so I'll let gcc-4.9 finish building for vivid; if that succeeds, I'll upload gcc for precise, trusty, and utopic08:56
wgrantYep, sounds good to me.08:56
wgrantgcc is good at breaking the world.08:56
pittiand I'll copy binutils and some other package for precise once p-c-d publishes for precise08:56
wgrantIf it works, everything that uses debhelper probably does.08:56
wgrantp-c-d ftbfs on precise08:57
pittibinutils is interesting as it calls pkg_create_dbgsym by hand, no debhelper08:57
wgrantYep08:57
pittiwgrant: no, fixed in pitti2 (publishing)08:57
wgrantThe kernel is also interesting, though it worked fine when we tested it last week.08:57
wgrantAhh08:57
wgrantOh, the kernel may not actually use p-c-d08:57
pittibut that doesn't ... yes08:57
wgrantSince it produces -dbgsym .debs and then renames them to ddeb...08:57
pittiit builds .ddebs, but entirely by itself08:57
wgrantIt does use p-c-d, but not to build the main packages.08:58
wgrantIt has some weird autocreated ddebs which are crazy, but they upload at least.08:58
pittibinutils copied08:58
* pitti wonders what to use instead of systemd for precise and trusty -- some complex multi-binary thing which produces ddebs and has epochs08:59
pittiwell, gcc should do for that08:59
pittioh, binutils -- that needs fixing to actually add the ddebs to the .changes09:00
* pitti uploads that09:00
caribouI'm working on fixing a bug both in Ubuntu & Debian so I updated the existing bug on Debian but not getting any response from the maintainer. Should I get someone else in Debian to upload the fix or just add a delta to Ubuntu until the debian maintainer wakes up ?09:05
melodiehello09:06
melodiecaribou which package?09:06
cariboumelodie: python-pywbem09:07
melodiewho is mentioned as maintainers/packages in the .desc file?09:07
cariboumelodie: bug #143499109:07
ubottubug 1434991 in pywbem (Ubuntu Vivid) "python attributeError 'SSLTimeoutError' after upgrade" [Medium,In progress] https://launchpad.net/bugs/143499109:07
cariboumelodie: lemme check09:07
cariboumelodie: Maintainer: Benjamin Kaduk <kaduk@mit.edu>09:08
caribouUploaders: Russ Allbery <rra@debian.org>, Sam Hartman <hartmans@debian.org>09:08
cariboumaybe I should email each one directly instead of relying on the bug update09:08
melodiewait a sec09:09
melodiewhat about https://bugs.launchpad.net/ubuntu/+source/pywbem/+bug/1434991/comments/6 ?09:09
ubottuLaunchpad bug 1434991 in pywbem (Ubuntu Vivid) "python attributeError 'SSLTimeoutError' after upgrade" [Medium,In progress]09:09
cariboumelodie: it's been two weeks now & didn't hear anything from the bug09:10
melodiecaribou when you report a bug in Debian bugs (at debian-mentors I think? you might want to check) you can add the maintainers and packages in copy09:10
cariboumelodie: the bug already existed, I just updated it09:10
melodiecaribou it's not all that fast, if you don't get a response after 3 months you can poke them again09:11
melodiecaribou did you see the last comment in your bug report?09:11
cariboumelodie: I won't wait 3 months to fix the bug in Ubuntu09:11
melodiecaribou what will you do?09:11
melodiemaybe could you add a ppa?09:12
cariboumelodie: add an Ubuntu delta to the package09:12
melodieok09:12
melodieI also seek help for a little thing09:12
cariboumelodie: ppa is not an anwser to existing bugs in our archives09:12
melodiecaribou ok!09:13
melodievery good09:13
cariboumelodie: thanks for your answers btw,09:13
melodiemy thing is about redshift, I'd like to ask confirmation about this: is "vidmode" enabled, or is it not enabled, as I suspect? http://pastebin.com/index/VXsafnbU09:13
melodiecaribou welcome!09:14
melodiecaribou btw, what is your package name in the Debian repos?09:15
melodiepywbm isn't found09:15
cariboumelodie: python-pywbem09:15
cariboumelodie: pywbem is the source pkg09:16
melodiecaribou have you tried the updated version from Debian?09:17
melodieor the one from vivid?09:17
melodie(same thing as updated from Debian)09:18
cariboumelodie: the bug is in all versions up to debian/SID09:18
melodie0.8.0 then?09:18
zygapitti: hey, do you remember bug https://bugs.launchpad.net/intltool/+bug/37787209:19
ubottuLaunchpad bug 377872 in intltool "having a way to specify a source format in the potfiles list would be nice" [High,Triaged]09:19
cariboumelodie: sid has 0.8.0~dev650-109:20
melodiecaribou is your bug here too? https://bugs.debian.org/cgi-bin/pkgreport.cgi?pkg=python-pywbem;dist=unstable09:22
cariboumelodie: yes, it's also referenced in the LP btg09:22
caribous/btg/bug09:22
melodiewhat is "btg" ?09:23
melodieih09:23
melodieoh09:23
melodiebug ok09:23
melodiecaribou you say it is there, but I only see #780264 ?09:24
melodieunless they thought it wasn't an "outstanding bug" ?09:24
cariboumelodie: yep, that's the one. don't bother; I sent and email to the maintainer & uploders. I'll see what they say09:24
pittizyga: I didn't see this before, but it's comprehensible enough09:24
melodiecaribou ok. can you confirm for my question? as "vidmode" not enabled? Is looking for the compiled libs with ldd the right way to go?09:25
zygapitti: you commented on the gnome counterside IIRC09:26
melodieI am hunting the bugs in redshift and redshift-gtk, to get it to work as it should.09:26
cariboumelodie: I don't know about "vidmode", but if you want the list of shared libraries, ldd will do it, hes09:26
caribous/hes/yes09:26
zygapitti: I wanted to ask if you know of a workaround for this, so a project that's not C-based that still uses po/POTFILES.in and intltools09:26
cariboumelodie: good thing, I'm being hit by this one too09:27
=== vrruiz_ is now known as rvr
melodieI just posted 2 bug reports09:27
melodiewith solutions09:27
cariboumelodie: bug # ?09:27
melodiehttps://bugs.launchpad.net/ubuntu/+source/redshift/+bug/1188961/comments/809:27
ubottuLaunchpad bug 1188961 in redshift (Ubuntu) "gtk-redshift don't work at startup" [Medium,Triaged]09:27
pittizyga: I think in a project of mine I craeted a temporary .py symlink to the executable python script, then call intltool, then remove the symlink again09:28
melodieI am not yet satisfied because it works way better in Archlinux, and I will compile from sources to see if adding all options help09:28
zygapitti: thanks, I'll try that09:29
melodiecaribou if you are interested you can follow the link from that one bug report, and there, I added the links to the sources of my research09:29
melodieelse, there is a very recent update available at the redshift project site: https://github.com/jonls/redshift/releases09:30
cariboumelodie: reading...09:32
melodiecaribou sure... I'm going to install the dev tools now (my install is fresh) so I can compile from git09:32
melodiecaribou I compiled and installed successfully with a max of options (looking into configure.ac too) and the compile from git works, but I still don't know why there is no UI for the configuration side.10:08
melodiecaribou I will need to track down what is different with the redshift I have in Archlinux10:09
wgrantpitti: Nice, gcc-4.9 built.10:24
wgrantThat's a *lot* of binaries.10:24
pittiat last!10:24
pittiwgrant: ok, then I'll throw in the precise/trusty/utopic gccs :)10:24
pittiwgrant: systemd/trusty also does that, there's a libgudev dbgsym and libgudev is epoch'ed10:25
wgrantAha10:25
pittiwgrant: there, more buildd fodder :)10:28
pittiwgrant: but I'm fairly certain that this will work now, at least for trusty/utopic (as that's pretty much exactly the same); hopefully also for precise10:29
cjwatsonWorth also remembering that we'll need to copy this into -security.10:30
cjwatsonI think?10:30
wgrantup10:30
pittiyes, I think so10:30
cjwatsonUnless the security PPAs build against -updates.10:30
pittifor the initial hump/tests, having it in -proposed should be enough, as all builds except -security only use that (so copying to -updates isn't very urgent)10:34
wgrant-security needs it very soon.10:34
wgrantOr their builds will fail or do the wrong thing once we turn on the flag.10:34
pittiso assuming the gcc builds work in all releases, I'll upload them to the -proposed queues10:34
wgrantYep10:34
pittido you think we need more tests before accepting them?10:34
wgrantI think if the known weird packages work then everything else should be tractable.10:34
pittiyes, I agree10:34
wgrantI'd like to do a main rebuild, but scalingstack lcy01 remains unhappy.10:34
wgrantI guess we could do a non-virt amd64 rebuild, since the buildds aren't doing anything else anyway...10:34
melodiecaribou this is the tool I was seeking for, isn't available in the repositories: http://www.webupd8.org/2010/07/redshiftgui-protects-your-eyes-when.html10:34
melodiecaribou the project page, if you are interested, http://maoserr.github.io/projects/redshiftgui/10:40
mptcyphermox, Wellark_: What’s the difference between “Wi-Fi security: LEAP” and “Wi-Fi security: WPA Enterprise” + “Authentication: LEAP”?10:48
mdeslaurdholbach: FYI, moving my patch piloting to tomorrow as I have an emergency at the moment11:35
=== MacSlow is now known as MacSlow|lunch
dholbachmdeslaur, sure sure11:59
=== MacSlow|lunch is now known as MacSlow
=== tnkhanh_ is now known as tnkhanh
=== gammax90 is now known as gammax
cyphermoxmpt: it's two very different types of security for wifi networks. One is using straight LEAP for the passphrase (generating dynamic WEP keys), the other is the more typical authentication over 802.1x13:44
=== _salem is now known as salem_
zbenjaminjdstrand: ping, do you have some time to talk about the framework validation issue bzoltan pinged you about a few days ago?14:00
mptcyphermox, thanks. I’m collapsing the 802.1x authentication options into the main security menu, so I think I’ll call the former “LEAP” and the latter “WPA Enterprise LEAP”14:02
jtaylordoko_: how high are the changes clang in vivid gets a sru if I provide an upstream patch?14:03
cyphermoxmpt: there may be some others that are confusing/ambiguous, or need to be added in the future14:03
cyphermoxmpt: also, different WPA enterprise methods require different fields14:03
mptcyphermox, but your “generating dynamic WEP keys” then makes me wonder why “LEAP” and “Dynamic WEP” are distinct options :-]14:08
pittiwgrant, cjwatson: all builds done in the PPA, spot-checking ddebs LGTM; I uploaded the stuff to the -proposed review queues14:09
pittidoko_: ^ FYI14:10
cyphermoxmpt: there is more than one way to generate dynamic wep keys14:10
cyphermoxmpt: one design that looks solid is what Android does. I bet the iPhone is also pretty much handling things the same way. I'm guess that is what you're aiming for?14:12
mpt(╯°□°)╯︵ ʎǝʞ dǝʍ14:13
cjwatsonpitti: Excellent, thanks14:14
mptcyphermox, <https://wiki.ubuntu.com/Networking#wi-fi-authentication-variations>14:14
argesinfinity: whats the status on Vivid sru's? should I be holding off on reviewing tomorrow until w is open for business?14:23
mardyLaney: hi! Was there something you were expecting me to do for bug 1432613? If so, please let me know -- it was not my intention to drop the ball :-)14:25
ubottubug 1432613 in Online Accounts: Account plugins "Facebook and MSN shutting down" [High,In progress] https://launchpad.net/bugs/143261314:25
Laneymardy: yes, we need to upload this to all Ubuntu releases14:25
Laneyprobably not the dropping packages/conflicts part there though - just let them be empty & update the descriptions14:26
melodieplease, does someone know where software-properties-gtk write the changes done? Especially the kinds of updates it is configured to provide? (never - LTS only - each new version) ?14:27
mardyLaney: by "upload" do you literally mean upload (if so, I'm afraid I can't help, I don't have the rights) or creating MPs for the citrain?14:27
mardyLaney: maybe I can prepare the branches, and you do the upload?14:27
Laneymardy: The train can do the upload, we just need to get it in one way or another14:27
mardyLaney: OK, I'll prepare the MPs then14:28
cyphermoxmpt: yeah, it's not ideal :/14:28
wgrantmelodie: That's /etc/update-manager/release-upgrades14:28
melodiewgrant thank you!14:29
mardyLaney: while I'm a it, I think it'd be good to backport also the fix for bug 1430694. OK?15:09
ubottubug 1430694 in Online Accounts: Account plugins "Update Facebook permissions to 2.0 API" [High,In progress] https://launchpad.net/bugs/143069415:09
Laneymardy: sure15:09
Laneyjust add the SRU information to the bugs15:09
mardyLaney: OK15:09
Laneydescription / test case / regression potential15:09
Laneythanks!15:09
mardyLaney: done: can you nominate bug 1430694 for Utopic and Trusty (Vivid is already OK)?15:19
ubottubug 1430694 in Online Accounts: Account plugins "Update Facebook permissions to 2.0 API" [High,In progress] https://launchpad.net/bugs/143069415:19
Laneyk15:19
Laneymardy: done15:20
mardyLaney: do you remember what was the trick to get pagination working in bzr? I must have broken something, and now I've always to type "bzr log | less" explicitly...15:43
=== doko_ is now known as doko
Laneymardy: I am using https://launchpad.net/bzr-pager15:43
mardyLaney: thanks!15:46
mardyLaney: about the backports, should I backport the packaging fixes to vivid, at least? or not backport them at all?15:47
Laneymardy: without them, the packages will just be empty, right?15:52
Laneys/packages/package/15:52
mardyLaney: not really; the account-plugin-facebook will contain the other (working) services; and this is correct15:53
LaneyI mean the wlm one15:54
mardyLaney: the live plugin will contain the live plugin, to create the account; but then, you won't have any use for this account15:54
Laneycan we just not ship this plugin?15:55
LaneyI think it'd be safer for SRU to not change the packages around15:55
mardyLaney: I agree that for Utopic and Trusty we can leave it like this, but I guess we could fix it for vivid15:55
Laneyvivid is stable now too15:55
mardyLaney: we can make it empty, indeed, but I'm wondering if someone could develop an app which could use the live plugin (maybe for IMAP?)15:57
mardyLaney: then they'd want to depend on account-plugin-live, but not being able to use it, if it's empty15:57
mardyLaney: so, IMHO it's better either to force the removal of the package, or to keep it, though fairly useless15:58
Laneywe could drop the recommends15:58
Laneybut keep the package15:58
mardyLaney: +115:58
* Laney nods15:59
pittifginther: hey! would you mind actually attaching the log in bug 1449632?15:59
ubottubug 1449632 in fatrace (Ubuntu) "fatrace autopkgtests assume access to certain CPU registers" [Undecided,New] https://launchpad.net/bugs/144963215:59
pittifginther: which -cpu option are you using there, so that I can reproduce this?15:59
fgintherpitti, oops. sorry about that15:59
infinityarges: vivid SRUs don't block on W in any way.  Review away.16:00
fgintherpitti, there is no --cpu option for creating nova instances, but there may be a way to determine what the openstack cloud is configured to use. I'll try to get back to you on that16:01
argesinfinity: ack16:01
fgintherpitti, log file is attached.16:01
fgintherpitti, I have to run, but will be back later if you leave any questions16:02
mdeslaurpitti, kees, infinity, stgraber, slangasek: tech board meeting?16:02
pittix86      SandyBridge  Intel Xeon E312xx (Sandy Bridge)16:02
pittifginther: nevermind, that ^ I guess16:02
mardyLaney: which target branch should I use for the MPs for empathy? I don't find any "14.04" or "trusty" branches, should I create them?16:06
slangasekmdeslaur: hmm; unfortunately sprinting this week, don't think I can attend, sorry16:06
Laneymardy: Make a new one if we haven't SRUed that release before16:06
pittifginther: nevermind, can reproduce16:06
Laneyedit Vcs-Bzr in debian/control to point to it... I usually just append the release name e.g. ubuntutrusty16:06
mardyLaney: this means that it hasn't, right? http://packages.ubuntu.com/search?suite=trusty&section=all&arch=any&keywords=empathy&searchon=sourcenames16:07
Laneymardy: https://launchpad.net/ubuntu/+source/empathy <- actually we did for trusty but looks like no vcs16:08
* Laney makes one16:08
Laneymardy: okay, lp:~ubuntu-desktop/empathy/ubuntutrusty exists now16:11
mardyLaney: thanks; and as a matter of fact, I wouldn't have had the permissions to push to that branch16:12
mardyLaney: can you please do the same for utopic and vivid?16:12
LaneyI will once there is something to push there16:13
Laneyi.e. your branch16:13
Laneyyou can bzr branch -r tag:<the ubuntu version> to get the right revision to start from16:13
mardyyep, ok16:14
sarnoldpitti: thanks for the ecryptfs fixes; I know a lot of users have hit that..16:14
pittisarnold: yeah; I tried to be defensive, that's why it's a relatively large shell script16:15
sarnold:)16:16
mdeslaur@pilot in16:26
=== udevbot changed the topic of #ubuntu-devel to: Archive: Break Time | Devel of Ubuntu (not support or app devel) | build failures -> http://qa.ubuntuwire.com/ftbfs/ | #ubuntu for support and discussion of lucid -> utopic | #ubuntu-app-devel for app development on Ubuntu http://wiki.ubuntu.com/UbuntuDevelopment | See #ubuntu-bugs for http://bit.ly/lv8soi | Patch Pilots: mdeslaur
mardyLaney: do I understand correctly, that given "version-0ubuntuX" as stable release, the update should be "version-0ubuntuX.1" in debian/changelog?16:31
Laneymardy: If that version is only in one release, otherwise use (e.g.) .14.04.116:32
Laneysee: https://wiki.ubuntu.com/SecurityTeam/UpdatePreparation#Update_the_packaging16:32
mardyLaney: ok, here are the branches: lp:~mardy/empathy/lp1432613-vivid and lp:~mardy/empathy/lp1432613-utopic16:45
mardyLaney: if you create the stable branches, I'll create the MPs16:45
mardyLaney: hopefully I picked the right base revision :-)16:45
Laneymardy: looks good, no need for MP - I'll just push them16:52
mardyLaney: ok, cool; for trusty, and for all versions of account-plugins, I created MPs and subscribed you16:59
LaneyLooking16:59
LaneyI'll have to go in a minute, perhaps someone else can help you upload them17:00
Laneymardy: or I can dput tomorrow (bypassing the train)17:07
=== dholbach_ is now known as dholbach
* cyphermox -> late lunch18:18
=== bduncan_ is now known as bduncan
bobbyzHi guys.  I'm working on creating some upstart scripts and I've been referring to http://upstart.ubuntu.com/cookbook/.  I'm trying to use the 'start on starting <service>' and 'stop on stopping <service>' directives to establish dependencies and it's working in all cases except one: For some reason, I have to manually start the dependent service at least once, or it won't start when the dependee runs on boot.  Is that a known19:08
bobbyz issue?  Am I missing a directive?  My config is here: https://gist.github.com/ziuchkovski/5a78c21aaf16fba9952f19:08
bobbyzSo basically I have to 'sudo service start sidekiq-worker1' at least once, or else when I reboot it isn't started, even though it's dependee service, 'sidekiq' is supposedly started/running19:08
greyback_bobbyz: is upstart also starting a job called "sidekiq"? Is the sidekiq job depending on some startup signal? (e.g. "start on filesystem/mountall/login-session-start"19:36
bobbyzgreyback_: The sidekiq jobs is set for 'start on runlevel [2345]'19:37
greyback_bobbyz: and that's working, yeah?19:37
bobbyzSupposedly...it's just a dummy job in that it doesn't do anything: https://gist.github.com/ziuchkovski/5a78c21aaf16fba9952f#file-sidekiq-conf-L719:37
bobbyzIt's more of a marker to trigger and control a group of worker jobs19:37
bobbyzso 'service sidekiq status' does show started/running on reboot19:38
bobbyzbut the dependent worker jobs all say 'stopped/waiting'19:38
greyback_bobbyz: ok, then upstart started it at least19:38
bobbyzunless I start them manually and reboot again, at which point they all start19:38
greyback_so it works after a reboot?19:39
bobbyzit works after reboot if I manually start those worker jobs at least once19:39
bobbyzif I don't they don't start on reboot19:39
bobbyzso I thought maybe I'm missing a directive19:39
=== salem_ is now known as _salem
greyback_not that I can think of, you seem to be doing the right thing19:40
bobbyzok, I'll dig more on my side then...maybe there's something else going on19:42
bobbyzthanks for taking a look, I appreciate it19:42
greyback_well I'd stick a line in your worker job to ensure it's being started at all - perhaps something else is stopping them immediately?19:44
bobbyzgood idea, I'll try that out20:15
=== zigo_ is now known as zigo
Unit193How would one go about a security update for trusty?  Icecast2 looks like it needs Debian #782120, CVE-2015-3026.20:52
ubottuDebian bug 782120 in icecast2 "icecast2: icecast can be remotely killed by anyone if using <authentication type="url"> and stream_auth option (CVE-2015-3026)" [Important,Open] http://bugs.debian.org/78212020:52
ubottu** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided. (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3026)20:52
melodiehi Unit19320:57
Unit193Howdy.20:57
infinityUnit193: Meet mdeslaur.21:01
infinitymdeslaur: Meet Unit193.21:01
* Unit193 runs.21:02
infinityUnit193: Short answer, though, for universe security updates, you prepare an update, hand it off to the security team to build in their PPA, and they release it for you.21:02
Unit193infinity: Sounds easy enough.  Trying to do the Debian one now.21:03
infinityUnit193: Oh, and mdeslaur clocked out 30m ago, apparently.  You might want to try poking him tomorrow if he doesn't wander by his computer and say hi tonight.21:04
Unit193infinity: Alright.  Thanks for the information.21:06
sarnoldUnit193: this is the url we stuff in all the launchpad bugs asking for universe security updates: https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures21:16
sarnoldUnit193: our cve tracker has a few more open issues for icecast2, if you're going to prepare an update can you please look them over as well? thanks http://people.canonical.com/~ubuntu-security/cve/pkg/icecast2.html21:17
Unit193sarnold: Lovely...  Too bad you can't just upgrade to a fixed version. :P21:23
=== _salem is now known as salem_
sarnoldUnit193: yeah, I know what you mean..21:24
Unit193(I'm already running 2.4.2, which has json output fixes as well.  Oh well.)21:25
Unit193sarnold: With a quick glance, http://paste.openstack.org/show/1gwZe6bjxp8zCKoKw9hn look almost sane?21:41
sarnoldUnit193: nice; we like to include some dep-3 tags in the patches to indicate where they came from, and we like to format the changelogs with SECURITY UPDATE: as a leader, and - CVE-yyyy-nnnn as a standalone line, in case someone's got a text parser for it, https://wiki.ubuntu.com/SecurityTeam/UpdatePreparation#Update_the_packaging21:44
Unit193Dangit.21:45
Unit193http://paste.openstack.org/show/gA31ndECVL75qvx9Vdhv/ I officially dislike security updates.22:01
Unit193sarnold: I know it's not great, but eh.22:03
sarnoldUnit193: but that looks fantastic! :)22:03
sarnoldUnit193: please attach to a bug, mdeslaur ought to get to it tomorrow :) thanks!22:03
Unit193sarnold: I'm pretty sure I'll leave future ones to you fellas.  I suppose I have to file a security bug now too.  Bleh.22:04
sarnoldUnit193: so I shouldn't get my hopes too much and go dangling http://people.canonical.com/~ubuntu-security/cve/universe.html around? :)22:06
Unit193sarnold: Haha, noooo. :P  I'm still working on pushing all my local changes back into Debian or Ubuntu for that matter. :P22:07
sarnoldUnit193: oof :) and I've thought before how nice it would be to have some time to go pushing distro changes back up to upstreams..22:07
melodiehi22:09
Unit193sarnold: Just not having it in my own repo would be a start, at least.  Problem is when you don't want to become the new maintainer in Debian! :P  LP 1449771, btw.22:10
ubottuError: Launchpad bug 1449771 could not be found22:10
melodiewhat does it take as pre-required steps, to compile the sources of a lib in a chroot?22:10
Unit193I set the urgency to 'high', because I had just prepped the jessie-security fix.  wiki says Ubuntu ignores it, so it should be fine.22:16
infinityUnit193: We don't completely ignore urgency, but we ignore it enough for it to mostly not matter.22:35
infinityUnit193: To be fair, for all but sid, Debian pretty much ignores it too.22:35
Unit193https://www.debian.org/doc/manuals/developers-reference/pkgs.html#bug-security-building22:36
infinityUnit193: In that *-security is already prioritized higher on the buildds, and security uploads don't have a migration period.22:36
Unit193infinity: But right, thanks.  I'm sure I'll have to fix something there too. :/22:36
infinityUnit193: Yeah, I think the Debian security team just sets "high" (or higher) to hint things like package frontends to say "hey, this is important".22:36
Unit193Ah.22:37
infinityUnit193: Which isn't an entirely unreasonable thing to do in Ubuntu too, if people use similar frontends.22:37
infinityUnit193: But in both cases, it has almost 0 effect on the uploads, since buildds prefer security, and there's no britney migration in the way.22:37
Unit193infinity: https://wiki.ubuntu.com/SecurityTeam/UpdatePreparation#Update_the_packaging could likely use a change then.22:37
infinityUnit193: Less interesting in Ubuntu proper, as our preferred GUI package updater (update-manager) already highlights security updates via their apt source.22:38
infinity(Which fails miserably for people who discover that all -security updates are mirrored to -updates and disable the former, but whatever)22:39
Unit193infinity: Right, though I don't personally use that.  That's also a bad idea if you use, for example, mirror://mirrors.ubuntu.com/US.txt but hey.  And, at least security updates seem slightly easier in Ubuntu, thanks to sarnold.22:40
infinityUnit193: From my POV as core-dev and a DD, I'd say they're about equally as annoying, but that's the price you pay for being able to upload something that will have zero bake time before it's slammed onto end users' machines.  Need checks and balances in place to make sure what ends up out there isn't crap.22:41
* Unit193 notes down infinity is a DD, for future use... ;)22:42
Unit193infinity: Alright, well lets hope this works then...22:42
* infinity notes that he's been a DD for 13 years, and wonders where the time's gone.22:44
mdeslaurUnit193: thanks for the bug and the debdiff, I'll take a look at it first thing tomorrow22:44
Unit193mdeslaur: Great, thanks.22:45
Unit193infinity: I'm going for packageset and eventually DM once I can get some gpg sigs.22:45
Unit193mdeslaur: Bah, sorry.  I mistargetted that. :/22:51
mdeslaurthat's fine, you can't accept the target nominations anyway22:52
Unit193That is, target distro trusty and not trusty-security.22:53
infinityUnit193: trusty is fine.22:54
infinityUnit193: The security team are literally the only people who target by pocket and they're wrong. :P22:54
Unit193Haha.22:54
mdeslaurheh22:55
mdeslaurinfinity: are you saying we don't need to do it anymore?22:55
infinitymdeslaur: You would only need to do it if you were uploading directly to the archive, which you can't do anyway.22:55
mdeslaurhrm22:55
infinitymdeslaur: Notice how you need to use special PPA paths to make it work (or edit .changes) in your case, since PPAs themselves only know about release pockets.22:55
mdeslaurright, perhaps worth revisiting on a rainy day22:56
infinitymdeslaur: That was tongue-in-cheek, mind you.  In the non-PPA archive model, foo-security is correct, since foo is rewritten to foo-proposed, which you don't want.22:57
infinitymdeslaur: It's just that the non-PPA path isn't one you can take in the current model anyway, so you're causing yourself weird pain (but your tools take care of the pain, AFAIK).22:57
mdeslaurright, I'd have to actually modify my tools to change the behaviour at this point22:58
=== pat__ is now known as pmcgowan
infinitymdeslaur: When I slam security kernels through your PPA, I just target trusty, cause nyah nyah, that's why, but whatever works for you. :)23:00
=== salem_ is now known as _salem

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!