/srv/irclogs.ubuntu.com/2015/06/05/#snappy.txt

sergiusensrsalveti: I need to download the full diff, but yeah, we need a systemd unit to do something on boot00:22
rsalvetisergiusens: right, this change is just something post update00:23
sergiusensmvo: mterry helpers to me feels like a drop zone for things that have no home yet; same for handler, helpers and handlerhelpers... but yeah, I wouldn't mind moving it but I don't want to affect Chipaca's big refactor00:28
sergiusensaffect or be affected00:28
rsalvetisergiusens: do we have a way to get systemd units that would only be executed at first boot/after updates00:53
rsalveti?00:53
sergiusensrsalveti: we would have to do the flag trick (like snappy firstboot)00:57
rsalvetiright00:58
rsalvetiseems to be the only remaining bug we have00:59
rsalvetijdstrand: sergiusens: Chipaca: hm, installed image 78 (15.04/edge), clean, then webdm and tried to install a few snaps, but they are all failing05:11
rsalvetiJun  5 05:08:14 localhost kernel: [   39.097383] audit: type=1400 audit(1433480894.752:22): apparmor="DENIED" operation="mkdir" profile="/usr/bin/ubuntu-core-launcher" name="/tmp/snaps/" pid=1024 comm="ubuntu-core-lau" requested_mask="c" denied_mask="c" fsuid=0 ouid=005:11
rsalvetiJun  5 05:08:14 localhost kernel: [   39.117912] audit: type=1400 audit(1433480894.772:23): apparmor="DENIED" operation="capable" profile="snake.mectors_snake_0.0.5" pid=1024 comm="snakeweb" capability=12  capname="net_admin"05:12
rsalvetixkcd-webserver.canonical gave package not found05:12
rsalvetisystem-status.victor: failed to install: package name with namespace not supported05:12
rsalvetixkcd-webserver installed fine via cmdline though05:14
rsalvetithis is not bug 1460152 since I didn't do any image update05:14
ubottubug 1460152 in Snappy 15.04 "apparmor cache not updated when apparmor.d rules change (breaks 15.04/stable -> 15.04/edge updates)" [Critical,In progress] https://launchpad.net/bugs/146015205:14
mikenrsalveti: it's not related to bug 1460517 is it? (I created that last week, trying to get someone to check whether it's webdm or snappy itself setting those perms)05:31
ubottubug 1460517 in webdm "Cannot run other snaps after first installing webdm" [Undecided,New] https://launchpad.net/bugs/146051705:31
rsalvetimiken: yeah, looks like it05:31
mikenAlthough, that was with stable.05:31
rsalvetihm, will investigate a bit more tomorrow05:32
dholbachgood morning06:39
fgimenezgood morning07:01
zygagood morning07:24
dholbachis it possible to change channels within a core instance?07:29
elopiorsalveti: sergiusens: I would like to get that snappy-merge-integration-tests merged first.07:58
elopiothe only thing that was missing from my review like two weeks ago was that it wanted to sign the deb.07:58
elopioany idea how to get out from emergency mode?08:22
elopioor how did I get into it08:22
elopioI see: Welcome to emergency mode! After logging in, typroot@localhost:~#08:22
Chipacaelopio: where? wha?08:59
JamesTaitGood morning, people! Happy Friday, and happy World Environment Day! 😃09:02
elopioChipaca: my bbb was working two days ago. But today it went nuts.09:06
Chipacaelopio: I don't think we have an emergency boot thing; that sounds like it's booting the debian09:06
Chipacaour emergency boot thing is "boot the other one"09:06
elopioChipaca: without the sd card it boots to debian without problems.09:07
Chipacaelopio: reflash the sd?09:07
Chipacaelopio: get a new sd?09:07
elopioChipaca: I'm reflashing.09:07
Chipacaelopio: have it exorcised?09:07
Chipaca:)09:07
elopioI see messages like:09:08
elopio[   24.948063] FAT-fs (mmcblk0p1): IO charset iso8859-1 not found09:08
elopioI'll just start all over again.09:08
=== dholbach_ is now known as dholbach
ogra_hmm09:57
Chipacaogra_: hmm?10:15
ogra_Chipaca, i was wondering about http://paste.ubuntu.com/11584783/10:21
ogra_(which i see on a really old RPi image here)10:21
Chipacaogra_: people have been getting those, and we looked into it a bit and got nowhere and blamed the sd card10:22
Chipacaogra_: tbh reflashing seems to fix it10:22
ogra_yeah, i should stop using the expensive branded ones i guess :P10:22
Chipacaogra_: if it *isn't* the sd card feeling sorry for itself, i don't know10:22
ogra_it doesnt seem to do any harm for a normal boot ... i'm juzst wondering what happens on upgrades if it goes readonly10:23
Chipacaogra_: only one way to find out10:24
ogra_well, not really ... at least not on a RPi ... not sure the BBB exposes the same thing10:24
fgimenezelopio, rsalveti i've just received the boards =)10:40
elopiofgimenez: nice :)10:40
elopioI've just ran the failed update on my beagle. Works fine here.10:41
fgimenezelopio, good,  on kvm all seems to be fine too for rev 7810:45
fgimenezelopio, i'm finishing some changes in the script to allow the delta upgrade from edge -1 to edge that mentioned sergiusens10:46
sergiusensChipaca: elopio ogra_ I was hoping that my fix to only right to the sdcard when necessary would alleviate this problem11:13
sergiusensoh, the charset issue, there was an initramfs missmatch somewhere along the lines11:14
mattywafternoon everyone11:21
fgimenezsergiusens, about the delta upgrades, they are only available from rev -1 to rev, right?11:22
ogra_sergiusens, the above inst a charset issue ... it is actually bad filesystem blocks ... but as i said, the install is ancient11:26
fgimenezelopio, the full upgrade path stable -> edge -1 (using script) -> edge (using snappy update) works fine too with the latest image in kvm11:29
sergiusensogra_: oh, that can be it11:32
sergiusensfgimenez: rev -1 from the system running snappy's point of view is $version, so you should only be able to update to $version+n11:33
fgimenezsergiusens, ok, i've added already the check to prevent updating to previous versions, i've also added code to download delta files if available for the current_version -> requested_version transition11:39
fgimenezsergiusens, let me know what do you think https://code.launchpad.net/~fgimenez/+junk/system_upgrader11:39
=== tvoss is now known as tvoss|test
=== tvoss|test is now known as tvoss
=== tvoss is now known as tvoss|test
=== tvoss|test is now known as tvoss
jdstrandrsalveti: capability net_admin is not allowed in any policy, so that is expected13:12
jdstrandrsalveti: oh-- the core launcher policy has: /tmp/snap.*/ w,13:14
jdstrandrsalveti: that does *not* match /tmp/snaps13:14
jdstrandrsalveti: I believe miken is right about bug #1460517 and so I added information there13:21
nothalBug #1460517: Cannot run other snaps after first installing webdm <Snappy:New> <Snappy Launcher:New> <http://launchpad.net/bugs/1460517>13:21
ubottubug 1460517 in Snappy Launcher "Cannot run other snaps after first installing webdm" [Undecided,New] https://launchpad.net/bugs/146051713:21
* jdstrand updated the description for bug #146051713:21
mterryHow do I switch channels for snappy?  Like, say I wanted to go from rolling to 15.04/edge13:40
mterryI would have assumed it's system-image-cli, but I recall hearing that doesn't work the same on snappy13:42
* mterry tries anyway13:42
kyrofabeowulf, ping14:00
beowulfkyrofa: pong14:01
kyrofabeowulf, in order to test webdm, I used ubuntu-device-flash to create a rolling image14:01
kyrofabeowulf, is it somehow automatically updated? Webdm, at least?14:02
beowulfkyrofa: you'll get the latest released one from the store, or you can checkout and build it and get tip14:03
kyrofaSo when you release a new version to the store, I automatically get it?14:03
beowulfkyrofa: good question, i'll have to refer you to sergiusens or someone who knows more14:04
beowulfkyrofa: (i don't know about automatic updates)14:04
kyrofabeowulf, the reason I ask: this morning I'm not able to get webdm to install anything14:04
beowulfkyrofa: what was the error?14:04
kyrofabeowulf: DEBUG: [/usr/bin/snappy internal-unpack /tmp/snaps/webdm/0.8/tmp/xkcd-webserver811585830 /apps/xkcd-webserver.canonical/0.5 /] failed: operation not supported14:04
kyrofabeowulf, and webdm returns a 50014:05
kyrofabeowulf, but it was working fine yesterday... so I'm confused14:05
rsalvetijdstrand: nice, that seems to be it14:06
kyrofabeowulf, the web interface seems to break too14:06
kyrofabeowulf, stuck at installing 100%14:06
beowulfkyrofa: yeah, that's a bug14:06
kyrofabeowulf, then it prints "ERROR: xkcd-webserver.canonical failed to install: unpack /tmp/snaps/webdm/0.8/tmp/xkcd-webserver298198856 to /apps/xkcd-webserver.canonical/0.5 failed with exit status 1 "14:06
beowulfkyrofa: the 500 causes that14:06
kyrofabeowulf, you handle it better than the scope does :P14:07
beowulfkyrofa: the bug is the install behaviour does nothing after the 500, so remains in whatever state it was before the 500, which is install progress 100% (which means the download happened and then we died)14:07
kyrofabeowulf, can you verify that webdm is broken?14:08
beowulfsnappy tells webdm the error and webdm does the popup, but then should reset the button or something... basically i'm not sure what to do so have yet to fix it14:08
sergiusensmterry: change channels.ini, the qa doc explains how to do it step by step14:08
beowulfkyrofa: give me a sec to get a new image14:08
sergiusenskyrofa: beowulf as soon as something updates you get the update14:09
kyrofasergiusens, good deal, so I'm not going insane14:09
sergiusensrsalveti: I think your webdm broken on edge scenario is related to the core launcher changes14:09
rsalvetiright14:10
beowulfkyrofa: so there you go, it was his fault *points at random person*14:10
sergiusensrsalveti: jdstrand we are at a point where any change we make needs to work everywhere14:10
mterrysergiusens, sorry but do you know where that qa doc lives?14:10
sergiusensbeowulf: kyrofa I'm guessing it's the latest changes to the core launcher that landed14:10
sergiusensmterry: I will try and search my drive :-P14:11
sergiusensmterry: yay, wasn't so hard https://docs.google.com/document/d/1R_Tw0N0QbEpjFeYf9XnVV8Gp8ldT2Ig0PO6MfR-kuSM/edit14:11
mterrysergiusens, thank you!14:11
sergiusensu r welcome!14:12
mterrysergiusens, I ran "sudo system-image-cli --switch ubuntu-core/15.04/edge" which sat there for a while and finally exited with no message.  And didn't do anything14:12
mterrysergiusens, seems like that should have worked  :-/14:12
kyrofasergiusens, alright, good to know. I'm happy to help in any way I can!14:12
mterryor at least errored out14:12
jdstrandsergiusens: that's fine... I think I am missing context. the rule change I gave in the bug doesn't remove anything, only add /tmp/snaps/14:18
jdstrandsergiusens: therefore it should meet the criteria you just gave14:18
fgimenezelopio, while trying to get the current installed version on kvm in my first attempt i copied code from ubuntu-ota-tests, the dbus client14:25
fgimenezelopio, it fails trying to find com.canonical.SystemImage, do you know why?14:26
elopiofgimenez: I don't. barry is your friend.14:27
longsleepHi folks, when running Â`snappy update` it fails with `Unable to determine bootloder`. Any help? I am new to snappy, managed to build my own image though.14:27
sergiusensmterry: you want to change channels.ini and then run snappy update14:27
* barry is everyone's friend14:28
mterrysergiusens, yeah I figured it out and it's working now14:28
mterrysergiusens, not friendly experience, having to remount and all that jazz14:28
* mterry wants s-i to work14:28
ogra_heh, what for, it is going away14:28
sergiusensjdstrand: good then, I was just going down the path something incompatible changing, but it seems the rule is incorrect; I'll propose an MP14:28
mterryogra_, well then I want its replacement to work  :)14:29
sergiusensmterry: it's not friendly at all; but this is all influx now (channels and os/kernel updates)14:29
mterrysergiusens, yeah I know.  humph14:29
sergiusensmterry: the reason for the document to exist is its unfriendliness :-)14:29
ogra_mterry, the replacement wont know about channels anymore :)14:29
mterryogra_, oh really?  What's the replacement?14:30
mterryI heard s-i was on the outs but didn't hear what's new14:30
ogra_mterry, snaps are the replacement14:30
fgimenezelopio, ok :) barry, it seems that part of the code that we used in ubuntu-ota-tests doesn't work on snappy running in kvm, seems to be unable to find com.canonical.SystemImage14:30
ogra_mterry, the whole image will come from the store in the future14:30
mterryogra_, ...  but channels still exist with snaps14:30
ogra_assembled from snaps14:31
mterryhm14:31
barryfgimenez: you mean, it can't find the dbus service?14:31
fgimenezbarry, yes, wait, i'll paste the error14:31
sergiusenslongsleep: you are missing either a proper entry in the gadget snap (called oem in current releases), valid content in /boot/uboot or /boot/grub ... if you built your image manually make sure you have everything correctly14:31
sergiusensogra_: channels will be per snap; in a sense, we are splitting the concept of channel and release (and moving away from customization channel as well)14:32
longsleepsergiusens: Thanks. Is there any way to debug this - i have put my image builder up at https://github.com/longsleep/snappy-odroidc - i would like to see it working 100%14:33
barryfgimenez: i bet i know why, but do pastebin the error14:33
ogra_sergiusens, right, so there wont be a way to switch14:33
ogra_what you build from is your "channel"14:33
sergiusenslongsleep: I'm working on release activities so I can't help today, but maybe ogra_ can ;-)14:33
mterryWhere is the docker snappy packaging?14:33
* sergiusens tries to deflect ogra_ from asking hard questions14:33
sergiusensor weird statements :-P14:34
longsleepsergiusens: all right - thanks for the hints though :)14:34
ogra_lol ... well, i'm up to my ears in the RPi2 image currently14:34
sergiusensmterry: it's in snappy-hub somewhere14:34
mterryawesome14:34
sergiusensmterry: https://code.launchpad.net/~snappy-dev/snappy-hub/docker14:34
mterryyup, thanks14:34
* mterry hugs sergiusens14:34
fgimenezbarry, here it is http://paste.ubuntu.com/11589316/14:35
* sergiusens hugs back14:35
longsleepIf anyone wants to take a look, https://github.com/longsleep/snappy-odroidc/blob/master/oem/meta/package.yaml, https://github.com/longsleep/snappy-odroidc/blob/master/device/hardware.yaml - feedback highly appreciated14:35
barryfgimenez: does /usr/sbin/system-image-dbus exist?14:36
fgimenezbarry, nope, no system-image-* under /usr/sbin/14:37
barryfgimenez: okay, so here's what i think is going on...14:37
barryfgimenez: while system-image 3.0 was working its slow way to landing in the archive, mvo forked the project for snappy.  but he didn't need the dbus api so i believe the fork does not install system-image-dbus.  the -cli gained some additional functionality so that mvo wouldn't have to call into the dbus service, which he didn't like (he can give you rationale for that).  what i think needs to happen is to *un*fork si 3.0 for snappy,14:40
barryand then install both the system-image-cli and system-image-dbus (and of course system-image-common) packages into the base os.  i think mvo agrees, at least with the unforking, but it hasn't been high enough on his list to get to yet.  si 3.0 is in wily now so there should be no blockers other than round tuits to doing the unfork14:40
longsleepsergiusens, ogra_ : So valid content in /boot/uboot .. looks good to me "a b boot.ini snappy-system.txt"14:41
barrywell, maybe if you need si 3.0 in another channel, but it should be backportable14:42
ogra_longsleep, http://people.canonical.com/~ogra/snappy/odroidc/ thats very old but i think the file contents in the device tarball should still be fine14:43
fgimenezbarry, ok thanks a lot, for now i think that we can go ahead with the current state, but we'll probably need si 3.0 sooner or later, what do you think elopio?14:45
barryfgimenez: you'll definitely want si 3.0.  i guess when mvo gets back online we can talk about a plan to unfork14:46
longsleepogra_: Thanks - only difference to mine i see is that i am not using flashtool-assets and uEnv.txt (shipping boot.ini instead). Booting works, maybe the snappy tool checks on uEnv.txt on update or something?14:47
ogra_longsleep, snapopy requites uEnv.txt in the right place (at least it did once) to recognize the system as booted from uBoot14:48
longsleepogra_: well it does not require it to boot - but maybe some tools check for it.14:50
ogra_thats what i meant14:50
ogra_snappy expects it14:50
longsleepogra_: So you think its worth a shot to ship an empty uEnv.txt and update might work?14:50
ogra_longsleep, update of what exactly ?14:51
ogra_snappy update ubuntu.-core cant work ... unless the image is on the official system-image server (i think at least)14:51
longsleepogra_: sorry - running 'snappy update' fails with Unable to determin bootloader14:51
ogra_try: touch /boot/uboot/uEnv.txt14:52
ogra_(well, with sudo)14:52
barryfgimenez: maybe send an email to the relevant parties and we can discuss an unfork plan/schedule14:52
longsleepogra_: yeah that does something now14:52
longsleepogra_: soe somewhere seems to be a check for uEnv.txt14:53
ogra_yes, as i said above14:53
longsleepogra_: Thanks for the help - i will add an empty one to the image builder for now.14:54
ogra_<ogra_> longsleep, snapopy requites uEnv.txt in the right place (at least it did once) to recognize the system as booted from uBoot14:54
ogra_;)14:54
longsleepogra_: yeah - i got it now - you meant the 'snappy tool' - for me snappy was the whole system. Misunderstanding on my side sorry.14:55
ogra_longsleep, lolo, no, bad naming on our side :)14:55
ogra_*lol even14:55
ogra_we just call everything snappy nowadays :)14:55
fgimenezbarry, ack, thanks!14:57
beunomy dog responds to snappy now as well14:57
longsleepogra_: hehe i think things could be worse than that. Snappy is a nice word too - i like it.14:57
longsleepogra_: its at Applying update now - so things look good!14:57
ogra_yay14:58
longsleepogra_: lets see if it reboots though :)14:58
ogra_it should just ignore the uEnv.txt14:58
longsleepogra_: It booted just fine - awesome!14:59
ogra_:D14:59
mattywdholbach, ping?15:02
dholbachmattyw, pong15:05
mattywdholbach, hey there, just looking at your email about improving the snappy docs, I was about to submit a bug for a nitcpick, but I thought I'd ping instead15:07
dholbacheither way you like it15:12
mattywdholbach, the instructions for snappy-remote on this page https://developer.ubuntu.com/en/snappy/tutorials/build-snaps/ states 8022 for the port to use in ssh, but that's only the port used when doing the redirecting described using the kvm image. I'd be tempted to state explicitly that the port would just be 22 if you were using it directly15:12
dholbachok, I'll file a bug15:12
dholbachthanks for reporting15:12
dholbachbug 146240815:13
ubottubug 1462408 in Ubuntu Developer Portal "Correct snappy-remote port" [Undecided,New] https://launchpad.net/bugs/146240815:13
mattywdholbach, it seems obvious, but there's a lot of new stuffy in snappy, it's nice to know that there are some things that aren't new :)15:13
mattywdholbach, thanks very much for listening :)15:13
dholbachyeah... thanks a bunch for spotting it :)15:14
sergiusensmattyw: dholbach more to the point, not putting a port defaults to 2215:20
elopiofgimenez: yes, please send the email.15:20
elopiofgimenez: sounds like remerging is important. And if mvo has reasons not to use the dbus api, maybe on the tests we should use the cli too. Lets wait for his reply about why...15:21
elopiofgimenez: did you report any bugs from the exploratory testing?15:21
sergiusenselopio: fgimenez no, we don't use the dbus api, we took great lengths to remove it15:21
sergiusenselopio: fgimenez sorry, I forgot to mention that in the standup15:22
fgimenezsergiusens, me too :) then, what should we use instead?15:23
sergiusensfgimenez: system-image cli in json writer mode15:23
sergiusensfgimenez: system-image-cli --machine-readable15:24
sergiusensfgimenez: but I'm not sure what you want to do either15:24
fgimenezsergiusens, yep, i've seen that through the code15:25
fgimenezsergiusens, we have code we used for testing ota on touch, that relies in the dbus api  for querying and calling methods15:26
fgimenezsergiusens, if we want to reuse some of that we need to adapt the calls to system-image-cli15:26
sergiusensfgimenez: yes, I think you want that; in any case, I'm more worried about the core upgrader logic more than the s-i side of things15:27
sergiusensfgimenez: as in testing the core upgrader (which just cares about the files being in the right place)15:27
sergiusensfgimenez: also, if you use dbus, you won't be testing with what snappy uses at all15:28
fgimenezsergiusens, ok thanks, of course the tests should exercise the real system as is, doesn't make sense use dbus then15:37
fgimenezelopio, no more bugs from the exploratory testing, now i'm with the "write snappy app" document15:38
kyrofasergiusens, ping15:42
sergiusenskyrofa: | pong15:42
rsalvetifgimenez: great (just saw the message you got the boards)15:43
kyrofasergiusens, currently the webdm API doesn't contain any information regarding snap cost, so my scope currently has "FREE" hard-coded in. Does the store support non-free snaps?15:43
elopiosergiusens: so, we are making the release today?15:44
sergiusenskyrofa: non free snaps for snappy doesn't exist yet, we don't have an implementation in snappy (client) itself either15:44
sergiusenskyrofa: we know what needs to be done though15:44
sergiusenskyrofa: just needs to happen15:44
kyrofasergiusens, good deal, I just wanted to touch base on it15:45
fgimenezrsalveti, yep :) i haven't put hands on them yet15:45
sergiusenskyrofa: I guess that rest api needs some concept (planned at least to deal with this)15:46
kyrofasergiusens, good call15:47
elopiofgimenez: /me tries the webcam appliance builder.15:49
fgimenezelopio, ok, you may hit the apparmor issue about the /tmp/snaps/ directory15:52
rsalvetielopio: we currently have 3 known blocking things for the release15:58
rsalvetilet me find the links15:59
rsalvetihttps://bugs.launchpad.net/ubuntu-core-launcher/+bug/146051715:59
ubottuUbuntu bug 1460517 in Snappy Launcher 15.04 "ubuntu-core-launcher apparmor denial when creating /tmp/snaps" [Undecided,New]15:59
rsalvetihttps://bugs.launchpad.net/snappy/+bug/146015215:59
ubottuUbuntu bug 1460152 in Snappy 15.04 "apparmor cache not updated when apparmor.d rules change (breaks 15.04/stable -> 15.04/edge updates)" [Critical,In progress]15:59
rsalvetiand investigate if we can land https://trello.com/c/YkdrYyX6/79-rootdelay-300-for-azure-images16:00
rsalvetifgimenez: did you find any other major issue with latest image?16:00
fgimenezrsalveti, nope so far16:00
rsalvetifgimenez: I also built 2 extra armhf ones yesterday to align the image number, just to make it easier to identify the version16:00
rsalvetigreat16:01
elopiorsalveti: thanks, that's useful.16:02
elopiorsalveti: do we need to do some testing on raspberrypi?16:02
rsalvetielopio: not yet, we're waiting ogra_ to produce a newer image first16:02
fgimenezleaving, have a nice weekend everyone o/16:08
sergiusensrsalveti: given that https://code.launchpad.net/~mvo/ubuntu/vivid/ubuntu-core-config/lp1460152-workaround/+merge/261179 is an ubuntu package I will need your help16:15
sergiusensrsalveti: but I approved it as it's working as expected16:15
rsalvetisergiusens: sure16:15
rsalvetisergiusens: I can take care of uploading that to our ppa16:15
rsalvetiand rolling/wily16:15
sergiusensrsalveti: not sure what the procedure is here; since it is an ubuntu package does it require an SRU to merge?16:16
rsalvetisergiusens: yeah, this is the udd branch16:16
rsalvetiI'll just upload to wily, then to our ppa and have another wi for next week to do SRUs for our PPA changes16:17
sergiusensrsalveti: the origin is vivid but the target is trunk so it's all so confusing :-)16:17
Chipacaback! sorry for this. How can I help?16:17
* Chipaca reads a bit of backlog16:17
sergiusensChipaca: sorry for what?16:17
Chipacasergiusens: being late back16:17
sergiusensChipaca: oh, not a problem :-)16:17
rsalvetithere are 2 main things now16:17
rsalvetibug https://bugs.launchpad.net/ubuntu-core-launcher/+bug/146051716:17
ubottuUbuntu bug 1460517 in Snappy Launcher 15.04 "ubuntu-core-launcher apparmor denial when creating /tmp/snaps" [Undecided,New]16:18
rsalvetiand https://trello.com/c/YkdrYyX6/79-rootdelay-300-for-azure-images16:18
sergiusensrsalveti: yeah, going to propose the fix for the core launcher now16:18
rsalvetiif you flash latest, then install webdm and try to install snaps it will eventually fail16:18
rsalvetigreat16:18
sergiusensrsalveti: I bet eventually means after rebooting?16:18
rsalvetisergiusens: don't remember if I rebooted or not16:19
sergiusensChipaca: want to take a look at the trello one?16:19
rsalvetibut can easily test again16:19
rsalvetilet me upload the other package and will give it a try16:19
sergiusensrsalveti: I bet it's an ordering issue16:19
Chipacaalready looking16:19
rsalvetiright16:19
Chipacasergiusens: doesn't 15.04 have private /tmp with this update?16:19
Chipacasergiusens: https://bugs.launchpad.net/ubuntu-core-launcher/+bug/1460517 is about webdm creating /tmp/snaps without -m 01777, right?16:20
ubottuUbuntu bug 1460517 in Snappy Launcher 15.04 "ubuntu-core-launcher apparmor denial when creating /tmp/snaps" [Undecided,New]16:20
=== tvoss is now known as tvoss|test
=== tvoss|test is now known as tvoss
Chipacagah, dunno16:21
Chipacaanyway, rootdelay. sure.16:21
Chipacarootdelay=300 according to the docs ask the kernel to wait 5 minutes before mounting root16:22
Chipacathat seems excessive16:22
Chipacarootdelay=[KNL] Delay (in seconds) to pause before attempting to16:23
Chipacamount the root filesystem16:23
sergiusensrsalveti: with the new way for tmpdirs to be created, webdm and any other app should have independent paths16:23
sergiusensChipaca: yeah, we need to see if that can be added only for azure images16:23
sergiusensChipaca: either in u-d-f or in livecd-rootfs16:23
Chipacapeople really think waiting 5 minutes for a cloud image is reasonable?16:23
* Chipaca boggles16:23
rsalvetiutlemming: ^?16:23
rsalveti300 is indeed a lot16:24
Chipacarsalveti: you know you suck at this "taking the day off" thing, right?16:24
rsalvetiChipaca: I'm doing that, not being a manager today :P16:25
rsalvetibut in reality just waiting to get off for lunch16:25
Chipaca:)16:26
rsalvetisergiusens: comparing core-launcher from wily and from our ppa, the only extra thing we have at wily is "Allow executing from /frameworks"16:27
rsalvetisergiusens: is that wily only?16:27
sergiusensrsalveti: that is wily only16:27
rsalvetigreat16:27
sergiusensrsalveti: until we decide to do a big backport ;-)16:28
rsalvetiright :-)16:28
Chipacajdstrand: once /tmp is a (private) bind mount, do apparmor rules apply to the path as the process "sees" it?16:30
Chipacaif so, /tmp/ should be "do whatever"16:30
Chipacaalthough you're talking about the launcher rules16:31
Chipacaand the launcher is not the one mkdir'ing /tmp/snaps/16:31
Chipacajdstrand: either I am confused, or you are, or a linear combination of both16:31
jdstrandChipaca: this is for the laucnher16:32
Chipacajdstrand: right; the launcher doesn't mkdir /tmp/snaps; it mkdir's /tmp/snap.%d_%s_XXXXXX16:32
Chipacathe "permission denied" for /tmp/snaps/ is for a pre-private-/tmp16:33
jdstrandthe launcher is trying to make /tmp/snaps16:33
Chipacais not :)16:33
jdstrandthe launcher that is causing that denial that is16:33
jdstrandI don't know what launcher that is16:33
Chipacajdstrand: the thing that would mkdir /tmp/snaps was the wrapper, not the launcher16:34
Chipacaunless you're saying there were actualy apparmor denies, it's just regular unix permissions16:35
Chipacabecause webdm would mkdir /tmp/snaps/ without setting it to 0177716:35
Chipacathen anything after that would fail16:35
jdstrandhttps://bugs.launchpad.net/snappy/+bug/146051716:36
ubottuUbuntu bug 1460517 in Snappy Launcher 15.04 "ubuntu-core-launcher apparmor denial when creating /tmp/snaps" [Undecided,New]16:36
sergiusensChipaca: people are complaining that the latest webdm has these issues though16:36
sergiusensChipaca: and the latest webdm has 01777 in it16:36
jdstrandmeh, the denial isn't in the bug16:36
* jdstrand hunts it down16:36
Chipacasergiusens: if they didn't reboot after updating, the bug will still be there16:37
sergiusensChipaca: right, that could be it16:37
Chipacasergiusens: because (i presume) webdm doesn't clean up the old bug, just stops creating it16:37
jdstrandthis is the reported denial:16:37
jdstrandJun  3 11:20:10 localhost kernel: [  134.805380] audit: type=140016:37
jdstrandaudit(1433330410.595:12): apparmor="DENIED" operation="mkdir"16:37
jdstrandprofile="/usr/bin/ubuntu-core-launcher" name="/tmp/snaps/" pid=89516:37
jdstrandcomm="ubuntu-core-lau" requested_mask="c" denied_mask="c" fsuid=0 ouid=016:37
Chipacahowever16:37
jdstrandprofile="/usr/bin/ubuntu-core-launcher"16:37
Chipacathe new launcher, with private /tmp/, should make it all just go away16:37
rsalvetifailing16:38
rsalveti<rsalveti> Jun  5 05:08:14 localhost kernel: [   39.097383] audit: type=1400 audit(1433480894.752:22): apparmor="DENIED" operation="mkdir" profile="/usr/bin/ubuntu-core-launcher" name="/tmp/snaps/" pid=1024 comm="ubuntu-core-lau" requested_mask="c" denied_mask="c" fsuid=0 ouid=016:38
rsalvetiwhat I had earlier today16:38
jdstrandalso, profile="/usr/bin/ubuntu-core-launcher"16:38
sergiusensChipaca: jdstrand on edge I don't see this issue and my tmp's are /tmp/snap.0_hello-dbus-fwk_JuFKMH snap.0_snake.mectors_Dfz11P16:38
sergiusensno /tmp/snaps/ at all16:39
rsalvetithe bug I had was on a clean image16:39
rsalvetijust installed some snaps, then installed webdm, then tried to install additional snaps from the webdm interface16:39
rsalvetiI did reboot once, just don't remember exactly when16:39
sergiusensrsalveti: are you perhaps mixing up bugs?16:39
Chipacarsalveti: what versions of everything?16:40
rsalvetilet me try to reproduce again16:40
sergiusensrsalveti: there is no /tmp/snaps on edge16:40
rsalvetiimage 7816:40
rsalvetithat was the denial I had16:41
rsalvetibut anyway, let me try reproducing it16:41
Chipacasergiusens: well, well. well.16:42
sergiusensChipaca: what did I do now? :(16:42
Chipacathere *is* a /tmp/snaps, *if* apparmor sees it as from "inside"16:43
Chipacathat is: the launcher mounts a private /tmp/ and then creates /tmp/snaps inside that16:43
Chipacathis is after dropping privs, fwiw16:43
Chipacaso if we're seeing DENIEDs with the new code, that's why16:44
Chipaca(face. desk. etc.)16:44
sergiusensChipaca: but that's up to the profile of the snappy package itself, not the core launcher16:44
Chipacano, this is still in the launcher16:44
sergiusensChipaca: so we need to allow for both16:44
Chipacabefore the aa_change_onexec call even16:45
Chipacasergiusens: which is what jdstrand said16:45
Chipacaman, he's so ahead of us, he should buy us beer16:45
sergiusensChipaca: so this is good /tmp/snap{s,.*}/ w,16:45
jdstrandwait, if I'm ahead, why am I buying beer?16:45
jdstrand:P16:45
Chipacajdstrand: you arrived at the bar first16:46
rsalvetilol16:46
jdstrandah16:46
jdstrandI figured you'd buy my beer since I patiently waited for you16:46
jdstrand:)16:46
rsalveti32.40 KB/s from the store16:46
ogra_did someone mention free beer ?16:46
rsalvetiannoying16:46
Chipacaogra_: that's what i heard16:46
* ogra_ thought he got a highlight16:46
Chipacasergiusens: in case an answer was necessary: yes, that should be perfect16:47
sergiusensChipaca: https://code.launchpad.net/~sergiusens/ubuntu-core-launcher/tmpmor/+merge/26125216:49
sergiusensthere then16:49
jdstrandsergiusens, Chipaca: thanks for taking care of this16:49
Chipacasergiusens: there ya go16:50
* rsalveti kicks the store16:50
sergiusensChipaca: heh, tarmac chose to go nuts :/16:51
jdstrandsergiusens: with that merge, what is TMPDIR set to? and, are apps able to write to it?16:52
jdstrandsergiusens: I'm thinking 'no' and there will need to be a corresponding ubuntu-core-security update16:53
sergiusensjdstrand: http://paste.ubuntu.com/11591737/16:54
sergiusensjdstrand: wrt to this whole movement, Chipaca and tyhicks where managing it16:54
Chipacajdstrand: i think u-c-security still has /tmp/snaps/app.origin/tmp/16:55
Chipacajdstrand: and AIUI that will work16:55
jdstrandChipaca: it for sure does16:55
Chipacajdstrand: we could/should drop it to all of /tmp/ later down th eline16:55
Chipacajdstrand: but, baby steps16:55
jdstrandah16:55
jdstrandthat was the bit I was missing16:55
Chipacathe whole idea of making the old tmp was to not have to do the update in lockstep16:55
jdstrandok, no I am catching up :)16:55
jdstrandsee, this little game we are playing is fun16:56
jdstrandgotcha16:56
* Chipaca never likes it when security people talk about "game" and "fun"16:56
jdstrandso, we need a policy update whenever we set TMPDIR to /tmp16:56
Chipacas/whenever/before/16:57
Chipaca:)16:57
jdstrandyeah16:57
jdstrand:)16:57
jdstrandlet me know when you are working on that :)16:57
* Chipaca 'll try16:57
elopiook, I'm tired. I'll EOD.16:58
rsalvetiJun  5 16:58:21 localhost kernel: [  865.945352] audit: type=1400 audit(1433523501.755:19): apparmor="DENIED" operation="mkdir" profile="/usr/bin/ubuntu-core-launcher" name="/tmp/snaps/" pid=4059 comm="ubuntu-core-lau" requested_mask="c" denied_mask="c" fsuid=0 ouid=016:58
elopiowill check back later, and continue testing on monday.16:58
rsalvetijdstrand: Chipaca: sergiusens: when trying to install snake from webdm16:58
elopioenjoy your day.16:58
jdstrandyes16:58
jdstrandrsalveti: yes16:58
rsalvetifirst boot -> installed webdm -> from webdm tried to install snake16:59
rsalvetibut it installed fine16:59
jdstrandrsalveti: the launcher is creating /tmp/snaps inside the private mount before the change profile16:59
rsalvetiright16:59
jdstrandrsalveti: so we need the fix. sergiusens did an MP and it is moving forward now16:59
rsalvetiyeah, makes sense now17:02
* rsalveti is still getting used with all this17:02
rsalvetibut this is so freaking awesome17:02
rsalvetielopio: have a nice weekend!17:03
rsalvetiJun  5 17:03:38 localhost ubuntu-core-launcher[703]: 2015-06-05 17:03:38 ERROR snappy logger.go:199 system-status.victor failed to install: package name with namespace not supported17:04
elopioyou too.17:04
rsalvetinamespace?17:04
sergiusensrsalveti: if it's a framework, it's not allowed17:05
sergiusensif not, not sure17:05
rsalvetiit's not a framework17:05
sergiusensrsalveti: that package has a dot in it's package name most likely17:05
rsalvetihm, right17:05
jdstrandmterry: fyi, I don't recall if I mentioned it, but inotify_* calls were add to wily and 15.04/edge some time ago17:05
rsalvetiwonder if we should have any sort of store validation17:06
rsalvetito see if the user can at least install it17:06
mterryjdstrand, oh nice...17:06
rsalvetihaving broken snaps in there is kind of annoying17:06
sergiusensrsalveti: it shouldn't be there if so, maybe beuno knows17:06
jdstrandnote, the new review tools are going to show an error if there is a dot in the yaml 'name' field17:07
jdstrandof course, I got totally sidetracked from them this week (unfortunately)17:07
sergiusensrsalveti: care to do some dputting for https://code.launchpad.net/~snappy-dev/ubuntu-core-launcher/trunk ?17:08
rsalvetisergiusens: sure17:08
* sergiusens takes advantage of rsalveti's dput service :-)17:09
beunorsalveti, sergiusens, what what?17:13
rsalvetibeuno: system-status.victor snap is failing to even install17:14
rsalvetibut it's available in the store17:14
rsalvetiso was wondering about ways to validate that before even making it available in there17:14
beunorsalveti, I don't think you get to control what crazy stuff people put in the store17:15
beuno:)17:15
rsalvetibeuno: that's fine, but we can do some sort of validation17:15
rsalvetibeuno: if it fails to even install17:15
rsalvetiwhy should we publish it?17:15
beunorsalveti, we just run the review scripts17:15
beunothose don't try to install17:15
rsalvetiright, then what jdstrand said should fix it at least17:15
rsalvetifor this case17:15
beunothat's a heavy-weight process, I think, trying to install17:16
beunowe can, and I'm sure we will17:16
beunobut it's not trivial17:16
rsalvetiright, later as part of CI and so on17:16
beunono, not CI at all17:16
beunopeople will upload random broken stuff that they won't pay for CI17:16
rsalvetisure, in this case, yes17:16
rsalvetiguess channels will at least help17:16
beunoso you probably want ratings and reviews as part of this soon17:17
beunoso people can give feedback to the developer17:17
rsalvetiyup17:17
beunoand hit at others that it's broken17:17
rsalvetisergiusens: will you propose an MR for https://code.launchpad.net/~snappy-dev/ubuntu-core-launcher/15.04 as well?17:19
rsalvetiubuntu-core-config and ubuntu-core-launcher uploaded to wily17:20
rsalveticore-config also uploaded to our ppa17:20
rsalvetijust missing core-launcher17:20
sergiusensrsalveti: ah, got it17:21
rsalvetisergiusens: I can create it17:25
rsalvetithe mr17:25
rsalvetisergiusens: Chipaca: https://code.launchpad.net/~rsalveti/ubuntu-core-launcher/15.04-tmpmor/+merge/26125417:27
rsalvetisimilar to https://code.launchpad.net/~sergiusens/ubuntu-core-launcher/tmpmor/+merge/26125217:27
rsalvetiif all good I can upload that and trigger a new image17:27
sergiusensrsalveti: oh, I just created the same :-P17:28
Chipacarsalveti: I approve.17:28
Chipacasergiusens: go have lunch17:28
sergiusensyay17:28
rsalvetiyeah, thought you were having lunch already :-)17:28
* sergiusens will go have lunch17:28
rsalvetiChipaca: thanks17:28
rsalvetiChipaca: do we have auto-merge and so on for this guy?17:29
sergiusensrsalveti: Chipaca I just set it up17:29
rsalvetigreat17:30
jdstrandrsalveti: heh, I was going through irc trying to see where I wrote up my suggestions on a tutorial for creating/debugging snaps and I only just now saw you asked me to dump the info in https://wiki.ubuntu.com/Snappy/ somewhere. I did so now: https://wiki.ubuntu.com/Snappy/Debugging17:35
jdstrandrsalveti: the other day I wanted to give this to dholbach and the docs team, but now thinking it needs a card. what is your opinion?17:36
zygacan snapps publish systemd units (e.g. a timer unit)17:44
zygaor in other words, how do I write a simple snap that does something every $interval17:44
zygajust loop manually17:44
zygaor is there a better way?17:44
Chipacazyga: we don't expose an easy way for that17:46
Chipacazyga: the systemd unit we create for services has some hooks, but nothing that you could use as a timer afaik17:46
zygaChipaca: ok, so if I write a program that just waits by itself17:46
jdstrandrsalveti: oh, I didn't realize you were off-- please ignore me here and check your inbox on monday :)17:47
zygaChipaca: and it crashes17:47
zygaChipaca: does snappy restart it via the unit?17:47
Chipacazyga: if it's a service, systemd should take care of that yes17:47
zygarsalveti: https://git.launchpad.net/~zyga/+git/pmr/tree/process-merge-requests17:47
zygaChipaca: cool, thanks17:47
Chipacazyga: what does a timer unit look like?17:47
zygarsalveti: very early stuff, tarmac will be my target next week17:47
Chipacamaybe we want to expose that17:47
zygaChipaca: it's a cron replacement unit, let me give you a link17:47
zygaChipaca: http://www.freedesktop.org/software/systemd/man/systemd.timer.html17:48
zygaChipaca: it has some nice features17:48
Chipacaah, so systemd.timer(5)17:48
Chipacanice17:48
zygaChipaca: e.g. I'd love to be able to wake the machine up from suspend to do nightly maintenance17:48
Chipacazyga: that'd be cool, there are lots of things that could use this17:50
Chipacazyga: something for our architects :)17:50
zygayep17:50
* Chipaca resisting to ad-hoc it now that there are people in charge of not ad-hocing stuff17:50
Chipacazyga: want to drop a card in the "incoming proposals" on the trello?17:52
Chipacazyga: https://trello.com/b/4PQViyUQ/snappy-core-stakeholders-backlog17:52
zygaChipaca: wow, gladly17:52
Chipacapersonal will be needing this anyway17:53
Chipacai've got to go make dinner; sergiusens, will bbl to carry on with the webcam thing18:01
zygaChipaca: I cannot add anything to the board there, sorry18:12
sergiusensChipaca: fwiw, snappy autopilot is a systemd timer unit18:42
sergiusensrsalveti: did you trigger a build?19:25
hokkoswhere is the package list of ubuntu snappy core ?20:26
kgunnquestion on uploading a snap to the store....the country thing is confusing, it says pick countries you don't want to distribute in, pick countries to only distribute in...20:28
kgunndoes that mean there's a default if you don't select anythnig ? and what is that default ?20:28
kgunnbeuno: ^20:29
beunokgunn, default, I think, is everything21:04
kgunnk21:05
kgunnmterry: you still about ?21:42
kgunnwas just curious about the 2 yaml files in mir, i get the mir-demo one...but i guess the second has me wondering21:46
kgunnchat on monday i suppose21:46

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!