=== jamesh__ is now known as jamesh
=== soren_ is now known as soren
pittirbasak: init-system-helpers shouldn't have apparmor-profile-load, it should go back to upstart; see bug 143268306:29
ubottubug 1432683 in upstart (Ubuntu) "apt-get install lxc doesn't load required apparmor profiles" [Critical,Triaged] https://launchpad.net/bugs/143268306:29
pittirbasak: but of course the breaks/replaces are missing, that was a merge error; thanks for pointing out! fix uploaded06:29
FourDollarsHi, is anyone able to review my patch of https://code.launchpad.net/~fourdollars/ubuntu/trusty/efibootmgr/1460521/+merge/260676?06:35
ricotzdoko__, hi, jfyi, happing on wily as well: https://bugzilla.redhat.com/show_bug.cgi?id=115527306:39
ubottubugzilla.redhat.com bug 1155273 in automake "ar: `u' modifier ignored since `D' is the default (see `U')" [High,Assigned]06:39
dholbachgood morning07:28
seb128hey dholbach07:30
dholbachhey seb12807:32
rbasakpitti: "as it's only being used in upstart jobs" I'm not sure this is true. That's why we moved it.07:47
rbasakpitti: it belongs in something generic as it's not upstart-specific.07:47
pittirbasak: IMHO it belongs into (and is in) apparmor07:48
rbasakpitti: the problem with it being in apparmor is that apparmor is optional.07:48
pittihow is that a problem?07:48
rbasakpitti: so we can't depend on apparmor for the wrapper to exist if we want to unconditionally call the wrapper.07:49
rbasakhallyn_: ^^07:49
pittiright, you shouldn't unconditionally call the wrapper :)07:49
rbasakIIRC hallyn wanted a way to unconditionally call *something*, so that had to go somewhere generic that can be depended on.07:50
pittiinit.d scripts/systemd units always need to check for that, as this wrapper is ubuntu specific07:50
pittiand if they need to check for it anyway, they can just as well work on other distros and call the apparmor loader right away07:50
pittirbasak: LXC checks for it (and checks for the apparmor scirpt, not the i-s-h helper)07:51
infinitypitti: I'm down with the argument that perhaps all references to the sciprt/wrapper should be conditionalised to avoid the dep altogether, but it's still probably true that we need to ship the wrapper and keep the breaks/replaces for 14.04->16.04 upgrades.07:52
rbasakpitti: if everyone is fine to always [ -x /lib/apparmor/profile-load ] first, then I'm fine with the wrapper going away.07:52
pittiinfinity: right; I added back the breaks/replaces for the time being, until that gets cleaned up07:53
infinityThe only way to make sure people always call it right, though, is to turn it into a debhelper snippet or something.07:53
pittiand we only ever called /lib/init/apparmor-profile-load in upstart jobs, so let's clean this up over time07:53
infinity(Well, for the maintainer script invocations, people are on their own for init jobs)07:54
infinitybdmurray: Oh, and regarding your comment in LP: #1458630, I wouldn't discourage people filing bugs on current-LTS to current-non-LTS upgrades, since even if we don't officially support that, they're beta-testing current-LTS to next-LTS for us.08:01
ubottuLaunchpad bug 1458630 in init-system-helpers (Ubuntu) "broken package init-system-helpers: attempt to rewrite other package files" [High,Fix committed] https://launchpad.net/bugs/145863008:01
cjwatsonseb128: I was on vacation.  Merged now08:53
seb128cjwatson, hey, thanks ;-)08:53
cjwatsonAnyone know why there's unmerged azure.device.tar.gz stuff on nusakan's cdimage deployment?08:55
=== sitter_ is now known as sittr
=== sittr is now known as sitter
=== doko__ is now known as doko
=== Malsasa_ is now known as Malsasa
=== larsu_ is now known as larsu
=== marcusto_ is now known as marcustomlinson
FourDollarsHi, does anyone have time to review my patch of https://code.launchpad.net/~fourdollars/ubuntu/trusty/efibootmgr/1460521/+merge/260705 ?11:18
FourDollarsThere are some OEM projects blocked by https://bugs.launchpad.net/ubuntu/+source/efibootmgr/+bug/1460521. :-(11:22
ubottuUbuntu bug 1460521 in efibootmgr (Ubuntu) "UEFI BootOrder is not empty after I removed the last boot entry." [Undecided,New]11:22
=== MacSlow is now known as MacSlow|lunch
=== dholbach_ is now known as dholbach
=== MacSlow|lunch is now known as MacSlow
=== gammax90 is now known as gammax
pittiuh, what kind of disaster struck our buildds?12:32
=== _salem is now known as salem_
cjwatsonpitti: Not clear what happened, perhaps some kind of network blip.  Re-enabling13:06
pitticjwatson: cheers13:08
=== Malsasa_ is now known as Malsasa
=== joet is now known as josepht
smoserteward, slow response to ping13:52
smoserbut here now13:52
=== psivaa-lunch is now known as psivaa
pittihallyn: ah, I followed xnox's unified hierarchy work on the upstream ML14:57
bdmurrayinfinity: I thought the recommended path in this case was from T-U-V-W or T->X not T->W.14:57
pittihallyn: that's also nice work, it should allow us to simplify/drop the unpriv LXC hacks/patches, right?14:57
pittibdmurray: right, but ideally we want last LTS -> today's devel series upgrade to always work14:58
pittibdmurray: as we need that for last LTS -> next LTS anyway14:58
xnoxpitti: i'm trying for it to work with name=systemd mount and unified mount at the same time.... e.g. do runtime detection. cause we will need that for live upgrade / re-exec.14:58
pittibdmurray: so it's true that we don't officially support it, but we appreciate bug reports anyway14:58
bdmurraypitti: understood15:01
hallynpitti: we'll see :)15:22
hallynpitti: which unpriv lxc hacks?15:22
pittihallyn: this one mostly: http://anonscm.debian.org/cgit/pkg-systemd/systemd.git/tree/debian/patches/core-Put-session-scopes-into-all-cgroup-controllers.patch?h=ubuntu15:23
hallynxnox: but i haven't looked closely yet - were you saying you were able to mount freezer in both unified and non-unified hierarchy at the same time?15:23
hallynpitti: oh, not at all.15:23
xnoxhallyn: that is possible with extra kernel command line which might not be desirable.15:23
hallynxnox: that's a step up - i thought the docs said it wasn't possible at all15:24
pittihallyn: it's what caused that cpu hotplug "I need my cpuset controller back" bug report, and it generally seems unfriendly to have to pre-allocate all controllers for upriv LXC that way15:24
xnoxhallyn: what i was doing so far is, mount legacy controllers where they are. mount unified hierchy in /sys/fs/cgroup/systemd and get benefit of the cgroup.populated file15:24
pittihallyn: i. e. that still smells like an userspace workaround for "we want proper cgroup namespaces" to me?15:24
hallynpitti: well there's more to it than that.  cgroupns may let us drop cgmangaer, but unpriv users still would need for systemd to set them up so that they can create a new cgroupns inthe frest place15:25
hallyni think15:25
hallynxnox: if we're going to support 12.04 and 14.04 containers under 16.04, we'll need all current controllers mounted non-hierarchy (along side hierachical)15:26
hallynuh, non-unified that is15:26
hallynpitti: but i think we can work together to make it all more seamless (for unpriv containers).15:27
hallynof course, the stumbling block will be lxc using systemd's api15:28
pittihallyn: right, that'd be nice; aside from that "I stomp over all controllers" unfriendliness didn't cause much trouble, but it's a bit of a tech debt15:28
hallynanyway first i'll look at xnox's patchset :)  and by first i mean first by way of systemd stuff, not first thing i'm working on :)15:28
pittihallyn: hehe15:28
hallynpitti: couldn't quite parse that15:29
pittihallyn: anyway, I'm happy to give you a tour through the debian git, how we maintain patches etc., if/once you want; just let me know if/when you want to start with something15:29
hallyn(missing comma somewhere?  or i'm misreading)15:29
hallynpitti: thanks, sounds good!15:29
pittihallyn: ... unfriendliness "the patch" didnt' cause much trouble15:30
pittihallyn: eek :) -- (but it's time to make dinner anyway, bbl)15:30
=== arges_ is now known as arges
=== spineau is now known as spineau_afk
=== spineau_afk is now known as spineau
=== gammax90 is now known as gammax
=== anthonyf is now known as Guest41448
=== anthonyf is now known as Guest28879
=== alai is now known as alai-afk
=== salem_ is now known as _salem

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!