=== chihchun_afk is now known as chihchun === chihchun is now known as chihchun_afk === chihchun_afk is now known as chihchun [06:36] hello [06:55] good morning [07:06] good morning [07:09] good morning === zbenjamin_ is now known as zbenjamin === chihchun is now known as chihchun_afk [07:40] mvo, hey hey [07:40] can you kick off a build of https://code.launchpad.net/~snappy-dev/+recipe/snapcraft-daily? [07:40] why is it not set to automatic? [07:41] or daily [07:41] or whatever the setting is [07:43] dholbach: sure, let me check why its not automatic [07:43] <3 [07:44] fixed and triggered a new build [07:48] mvo, https://code.launchpad.net/~dholbach/snapcraft/build-deps-syntax/+merge/269853 [07:50] * mvo hugs dholbach [07:50] ppisati, mind to take a look at bug 1491094 ? [07:50] bug 1491094 in linux (Ubuntu) "wifi USB dongle fails to work with musb-hdrc error" [Undecided,Incomplete] https://launchpad.net/bugs/1491094 [07:51] mvo, once it's merged we can try to build the branch again ;-) [07:51] ogra_: BBB? or rpi2? [07:52] ogra_: i guess the first [07:52] mvo, merged === chihchun_afk is now known as chihchun [07:56] ppisati, yeah ... [07:56] ppisati, sadly rick seems to be back on US timezone, so it might take a bit to get a full syslog [08:04] ogra_: do you know if he receive just a single warning or more than one? [08:05] *yawn* [08:06] mo'in people [08:09] ppisati, i had him re-plug it a few times and he said thats all that is printed in syslo [08:09] g [08:10] ogra_: so just a single warning, i guess [08:10] as i understand it it should use the rt2800usb ... but seems the kernel doesnt even get that far [08:11] (we also tried plugging with the module manually loaded which according to rick made no difference at all ... ) [08:12] and on a x6 box, it worked, right? [08:13] testing on a vivid kernel would be awesome [08:13] i thinnk so ... [08:13] *x86 [08:13] let me add some comments to the lp bug [08:13] cool, thanks [08:13] this thing [08:13] "Product: Љ" [08:13] this is particularli scary [08:13] thats minicom i bet [08:14] (getting the actual syslog would likely help a lot) [08:15] ppisati, there is another bug where your input might help ... bug 1489412 [08:15] bug 1489412 in Snappy "RPi2: connection not realiable" [Undecided,New] https://launchpad.net/bugs/1489412 [08:15] i'm notz really sure what to do with it ... turning off turbo mode on the NIC seems to help a little, but doesnt make the issue go away [08:17] ogra_: so, about the smsc9xx there [08:17] ogra_: i spinned a new kernel with min_free = 32k [08:17] and i rebased on the latest 3.19 stable [08:17] ogra_: but i didn't update the meta yet [08:17] ah, cool, i'll make sure to pull that in for 15.04.3 [08:17] ogra_: when is the release? [08:18] my script doesnt use the meta, it just pulls the newest binary kernel from your PPA [08:18] not sure [08:18] mvo, do we have some schedule for 15.04.3 ? [08:19] or ETA [08:21] ogra_: I'm not aware of one [08:21] ppisati, so the debian way then :) when its ready [08:21] :( [08:22] i would like to have some testing before we mass deploy [08:22] you know... [08:22] (which means if you want something specifically, we can hold it back for that) [08:23] well, we can indeed ask for testing and haven people use the 15.04 edge channel [08:29] about the first bug, i have a match for that usb vendor/product id on a 4.2 wily kernel: [08:29] drivers/net/wireless/mediatek/mt7601u/usb.c: { USB_DEVICE(0x148f, 0x7601) }, [08:29] but i don't have that match on 3.19 [08:30] and [08:30] Documentation/usb/hotplug.txt: USB_DEVICE (vendorId, productId) [08:32] ah [08:57] https://code.launchpad.net/~dholbach/snapcraft/require-ant/+merge/269864 === greyback__ is now known as greyback [09:47] hey rsalveti, I was playing around with snapcraft a bit more - do you think I should triage the list of open bugs right now and tag the ones which have to do with first user experience or something, so we can have all of them in one list? if yes, which name should we use? [09:47] mvo, ^ too [09:47] https://code.launchpad.net/~dholbach/snapcraft/require-ant/+merge/269864 is a quick fix I could do myself :) === chihchun is now known as chihchun_afk [10:00] Snappy Ubuntu Core on Banana Pi BPI-M2 http://forum.banana-pi.org/t/snappy-ubuntu-core-on-banana-pi-bpi-m2/432 [10:23] guest42315, nice ! [10:33] pitti: script -qfc [10:39] Chipaca: heh, nice trick! do you know how much overhead that has? [10:39] pitti: about 23 [10:39] maybe 24 [10:39] I mean per line/read/block [10:39] (what's that unit?) [10:40] pitti: sorry, i was being mean. I have no idea of overhead, but I don't think it's much. It does create a file. [10:40] script -qfc "sh -c 'sleep 30 & echo payload'" /dev/null |cat [10:40] even that works [10:40] but this unifies stdout and stderr, doesn't it? [10:41] hm, probably [10:41] is that bad? [10:41] ah yes, it does [10:41] I need to keep them separate/intact, yes [10:42] but it's a nice trick anyway for other use cases, much simpler than using redirection and tail -f [10:42] and having to clean up tail === chihchun_afk is now known as chihchun [10:42] so thanks for the trick! [10:43] pitti: and if you take it deeper? [10:43] pitti: e.g. script -qfc '1>stdout 2>stderr commands here' [10:44] I played around with exec, redirections, fifos, bash's <(command) all morning; it's ridiculously difficult [10:44] Chipaca: yeah, and then tail -f them both; that's what autopkgtest does on the "outside", as that only needs to be set up once per test [10:44] but once for every single command is heavier (and also it's brittle as hell), so I was hoping there was something simpler [10:45] ah, you probably also want -e, to get the exit code of the process [10:45] it took me two months or so to get that "background tail -f" robust enough, and it's still far from perfect [10:45] pitti: are you ssh'ing in, or how are you running these things? [10:45] Chipaca: depends on the backend; "schroot", "lxc-attach", "ssh", or via a socket for Qemu's case (serial console) [10:46] uff [10:47] pitti: for ssh, a simple -t works [10:47] ie ssh -t yadda yadda [10:47] pitti: what you want is to have a tty [10:47] right, with PTYs there's no problem [10:48] pitti: but it's simple enough, i think, in C [10:48] pitti: so maybe you need to write a little C :) [10:48] yeah, in C it wouldn't be a problem at all [10:48] just that I can't assume that I'm able to compile anything on the target [10:48] then write C :) [10:48] my testbed could be a read-only phone or snappy without even a compiler [10:49] pitti: it's standard library C; you can cross-compile it without breaking a sweat [10:50] Chipaca: well, setting that up (lots of C code and making autopkgtest depend on lots of cross compilers and dynamically shoveling binaries to the testbed) sounds a lot harder than my ugly 15 lines of "kill leftover processes" shell hack :/ [10:50] arm-linux-gnueabihf-gcc-4.9 -Wall -o blah blah.c && scp/put/cp/whatevs && etc [10:50] maybe perl [10:50] perl-base is still essential [10:50] pitti: I'd expect you to say that two months ago, before spending two months on tail :) [10:50] pitti, store the PIDs in a file and loop over it with kill when the parent dies ? [10:51] via a trap cleanup command ... [10:51] pitti: perl works, also, i think [10:51] anyway, quite a number of people have answered, and I found some related discussions on various forums [10:51] so at least I'm now reasonably sure that I wasn't missing something obvious [10:52] ogra_: you'd have to strace -f to grab all the clones & forks [10:53] Chipaca, well, or just start everything through a wrapper function [11:03] pitti: "try" from libio-pty-perl's examples is probably a good place to start [11:10] anyway. to lunch. [12:04] ogra@anubis:~/datengrab/images/snappy$ sudo ubuntu-device-flash core --channel edge --device device-pi2-0.16.tar.xz --oem pi2.canonical --developer-mode --install webdm -o kvm-rolling.img rolling [12:04] [sudo] password for ogra: [12:04] WARNING: this option should only be used to build azure images [12:04] Determining oem configuration [12:04] great ... [12:04] now if it could tell me *WHICH* option "this option" is :P [12:06] ah, obviously --device ... [12:12] debug output is overrated [12:16] heh [12:26] hey, is there an easy way to change the channel that my bbb is on? [12:26] I think I'd like to get daily updates on it [12:29] rickspencer3, no idea if that works ... but try system-image-cli --switch (with a lot of -vvv to increase verbosity) [12:29] * rickspencer3 tries [12:30] i guess switching channels will become easier as soon as we dropped system-image [12:30] ogra_, does it not need an argument for the channel to switch to? [12:30] sure, like on the phone [12:30] (up to you want you want to switch to) [12:31] ogra_, so, I want to switch to 15.04 edge, is there somewhere that shows me how to formulate that argument? [12:32] ubuntu-core/15.04/edge ... [12:32] note that this channel is on manual though [12:32] only gets builds if we upload changes to the PPA or before a release [12:32] manual is good for edge, I think [12:33] ogra_, oh, is there a better channel if I want to test latest bug fixes, etc...? [12:33] fwiw, channel switching is Not Supported [12:33] wily ... ubuntu-core/rolling/edge ... that has daily builds but also the highest chance of breaking [12:34] Chipaca, i think it worked for me last time on RPi ... but cant roll back or some such [12:34] ogra_, so, the argument is ubuntu-core/rolling/edge ? [12:34] yes [12:34] i'm not saying it won't work; i'm saying if it works, huzzah, but if it breaks oh well :) [12:34] yeah [12:35] and it will get automatically update each day, and maybe break a lot? [12:35] i dont remember what was broken on my RPi test ... but iirc it initially worked ... and either didnt upgrade or didnt roll back anymore [12:35] I guess I can just get another sd card and put a more stable version on it :) [12:35] yeah [12:35] looks like it is trying to upgrade it :) [12:36] [systemimage] Sep 02 12:35:29 2015 (1239) Upgrade path is 155 :) [12:36] (note the ":)" is mine [12:36] well, we should add more smileys to log output :) [12:37] you could then also indicate error severity through them ;) [12:38] :/ <- bad ... :( <- severely bad ... X( <- totally dead [12:39] ogra_, that would be brilliant [12:39] or just emojis [12:39] says it is rebooting, I'll take that as a good sign [12:39] well, UTF8 is often broken in serial terminal apps :) [12:39] but yeah, emojis would rock [12:39] emoticons it is, let's get the spec started ;) [12:42] well, it didn't reboot itself [12:42] * rickspencer3 reboots, braces for impact [12:44] ogra_, so, it rebooted and my led blinking snap started! [12:44] I take that as a good sign [12:44] is there a way for me to confirm that I am now on the channel that I wanted to be on? [12:46] rickspencer3, sudo snappy list -v [12:46] abd system-image-cli -i [12:46] ubuntu-core 2015-07-29 4 ubuntu* [12:46] ubuntu-core 2015-09-02 155 ubuntu [12:46] seems it didnt switch [12:47] oh? [12:47] oh well, I guess I'll just set up a new sd card with the right channel later [12:47] * indicates the active one [12:47] at least it didn't hose my board [12:47] you can force the swtich ... one sec [12:48] fw_printenv |grep ^snappy_ab [12:48] what does that print ? [12:48] (BeagleBoneBlack)ubuntu@localhost:~$ fw_printenv |grep ^snappy_ab [12:48] Cannot access MTD device /boot/uboot/uboot.env: No such file or directory [12:49] oh [12:49] hmm, you said this install is old .. [12:49] seems it is really old :) [12:49] ogra_, if this is going to become a yak shaving exercise, I suggest that we call channel switching "unsupported" and I can flash a new sd card at my leisure [12:50] we *do* call it unsupported ;) [12:50] well, right, that's my point ;) [12:50] but you are running into issues with an ancient bootloader setup [12:50] ok, sounds like a reflash is in order anyway, then [12:50] it wouldnt even switch on normal upgrade i fear [12:51] yeah [12:51] are there any docs on how I would use use snappy config? [12:51] well, it isnt very user friendly yet [12:51] I want to write a snap where you can define the gpio pin to use after installing the snap [12:51] you need to create a yaml file and pipe it into the command [12:52] ogra_, so, I could write go code that takes an argument in a form post [12:52] uses that to write a yaml file [12:52] i think sergiusens had some demo code for that [12:52] piping from a here doc [12:52] then pipes that yaml file in snappy config? [12:52] oh, if you want to do it on image level you should be able to define it in the package.yaml of a custom oem snap [12:53] ogra_, no, I want to do it on the snap level [12:53] i.e. the snap is in the store [12:53] (where you would also define your app snap as a requirement) [12:53] then it can be configured to use the specified gpio pins [12:53] ah, right, yeah , then you need to create a yaml file and run snappy config manually after install [12:54] so the end user will have to edit the yaml file on the board and run the command [12:54] ouch [12:54] nah, it will be more userfriendly [12:54] but this is the status quo [12:55] we have to many other construction areas atm ... config is only very basic yet [12:56] ok, I'll look at sergiusens code when he wakes up if he can point me to it :) [12:56] rickspencer3: I don't have any code [12:56] oh [12:56] lol [12:56] * sergiusens has been awake for 3 hours already [12:56] ogra_: rickspencer3 you can also do snappy install [snap] [config] [12:56] sergiusens, I meant "wake up" in a totally figurative way :) [12:56] sergiusens, is there documentation that I can use anywhere? [12:57] ah, thats new to me [12:57] ogra_: it's in the --help (snappy install --help) [12:58] so, my idea for the snap is that when the board is ready to be connected to over ssh, it blinks a led [12:58] sergiusens, yeah i tried "snappy help" :P [12:58] (no, i'm lying indeed) [12:59] is there a way that a snap could easily tell if ssh is ready? [12:59] i.e. from Go code? [12:59] rickspencer3: so you indeed want a config to configure where that LED is [12:59] sergiusens, yeah [12:59] rickspencer3: you would need special permissions to check it at the service level [13:00] rickspencer3: the thing you can do today is poll the port and wait for the ssh signature [13:00] there are 2 things I don't know: 1. how to determine if ssh is running, 2. how to allow the developer to config the gpio pin [13:00] sergiusens, I can't do that with just the normal network permissions? [13:00] seems like I could do a loop and just ping it over localhost? [13:00] rickspencer3: yes, we don't have any security in place for fine grained networking :-/ [13:01] sergiusens, yes I can do that, or yes I can't do that? [13:01] rickspencer3: ping over localhost or over the main interface [13:01] ogra_: rickspencer3: cdparanoia has emoticons for status output [13:01] rickspencer3: yes you can! [13:01] ok, that sounds easy enough [13:01] :-) Normal operation, low/no jitter [13:01] :-| Normal operation, considerable jitter [13:01] :-/ Read drift [13:01] :-P Unreported loss of streaming in atomic read operation [13:01] 8-| Finding read problems at same point during reread; hard to correct [13:01] :-0 SCSI/ATAPI transport error [13:01] :-( Scratch detected [13:01] ;-( Gave up trying to perform a correction [13:01] 8-X Aborted read due to known, uncorrectable error [13:01] :^D Finished extracting [13:02] hah [13:02] Chipaca: that reminds me of mac system 7 [13:15] c.Check(logs, DeepEquals, []map[string]interface{}{{"a": 1}, {"a": 2}}) [13:15] ... obtained []map[string]interface {} = []map[string]interface {}{map[string]interface {}{"a":1}, map[string]interface {}{"a":2}} [13:15] ... expected []map[string]interface {} = []map[string]interface {}{map[string]interface {}{"a":1}, map[string]interface {}{"a":2}} [13:15] * Chipaca goes looking for somebody to wap over the head [13:17] Alexander -- this is Viktor from Screenly. Sorry, forgot your nick, but please just wanted to join the channel and say hi. [13:17] asac: ^ [13:18] Thanks :) [13:19] Oh and i see mectors is hanging out here too :) [13:20] mvip of course [13:20] :) [13:21] o/ mvip [13:24] Need to brush up on my bitchx skills. Haven't spent much time on IRC in the last decade :) [13:29] Hello there. I need some help that I can't find yet on Google. How do I add to may #cloud-config DOCKER_OPTIONS :/ does anyone use it? [13:30] Is it possible to write to /var/lib/apps/docker/1.6.2.003/etc/docker.conf via cloud-config? [13:30] Are there any examples out there of running X11 apps in snaps? [13:31] bartkusedvinas: isn't /var residing on /, which is mounter r/o? [13:34] you are right, it is read only [13:35] zyga: There is a rumor that you're working (and close to completing) pip support for snapcraft. Is it true? [13:35] bartkusedvinas i'm by no mean a Snappy expert, but my guess is that it's mounted as r/o on boot. As such, you can not modify that file (unless you hackishly re-mount it *inside* cloudinit) === chihchun is now known as chihchun_afk [13:36] bartkusedvinas: Snaps themselves have a configuration interface, which the docker framework should use. I'm not sure if it is though. [13:36] mvip: sounds right... tho, i bet that those who are using docker want to add DOCKER_OPTIONS='-H tcp://0.0.0.0:4243' [13:37] however i can't find what is the right approch to do so [13:37] bartkusedvinas, the shipped cloud-init is only used for bringing up the system ... [13:37] not for tinkering with snaps [13:37] mvip: I think that deb2snap was used to make some Xapps run, but I can't think of an example. [13:37] mvip: Is there are particular one you're trying to run? Many have Mir backends available as well. [13:38] bartkusedvinas, well, you are likely not using docker standalone ... but run something in it [13:38] bartkusedvinas, for that something you would create a snap that uses the docker framework [13:38] and in that snap you would set such options [13:38] tedg: Well, yeah, have some things in mind, but was just curious if there were any examples out there. `deb2snap` seems somewhat hackish. [13:39] mvip: It is :-) [13:39] tedg: :) [13:39] Just out of curiousity, how's Docker configured on Snappy. Is it run on the host, or is it running within a snap? [13:39] Because I saw a Docker snap when I was playing with it on the RasPi === kickinz1|afk is now known as kickinz1 [13:40] mvip: I wrote up an examle using Qt/QML, but that is with the Mir backend: http://gould.cx/ted/blog/Creating_a_QML_snap_with_Snapcraft [13:40] bartkusedvinas, i guess kickinz1|afk could help (if he werent afk) he maintains the docker framework snap and also the owncloud snap that uses it [13:40] tedg: Oh cool. Thanks. [13:40] mvip docker is a framework snap [13:40] kickinz1 ah ok [13:40] still getting used to the Snappy lingo [13:40] ha, speaking of the devil :) [13:41] thanks. i want to try snappy as alternative to coreos [13:41] with coreos i had the following cloud-config which would open access to docker https://gist.github.com/edvinasbartkus/8ed0e61a7c7980c087f1 [13:42] so I would be able to use deploy tools to deploy to coreos docker's my containers [13:43] yeah, this is the stuff you would do in a start script of the snap i talked about [13:43] i see [13:45] http://paste.ubuntu.com/12253305/ i.e. this is the start script used by the owncloud snap [13:45] i assume you would have something similar in a coreos-docker.snap [13:45] kickinz1 so if Docker is a Snappy framework, i then presume it is running on the host and then snappy is responsible for communicating with Docker, right? [13:47] mvip, yes, docker is running on the host, there are some specific apparmor profile management. [13:47] I was expecting to find some easy recipie like this https://gist.github.com/edvinasbartkus/a99dd8bf12f717c7c6f5 :)) [13:47] kickinz1 got it. Thanks. [13:48] @orgra_ thanks for the hint to the script. will try to improvise my way ;) [13:48] bartkusedvinas: No such command! [13:48] mvip, but for now you can connect directly to docker-daemon, be aware, that if you want to do some docker build, docker load/save, you need to have your files in $HOME/apps/docker.$VERSION/ [13:48] @nothal yeah, i am aware :) i was expecting just to have such easy solution :P [13:48] bartkusedvinas: No such command! [13:49] $HOME/apps/docker/$VERSION/ [13:49] bartkusedvinas, well, i'm pretty sure such an easy setup is possible too ... [13:49] kickinz1 got it. [13:50] bartkusedvinas, the point in snappy is that you are completely confined ... so you would never modify any of the system setup of docker but ship your own [13:50] pitti: question for you sir [13:51] pitti: what should "journalctl -q -u something-that-does-not-exist" print, given the -q? [13:52] @ogra_ thanks [13:52] bartkusedvinas: No such command! [13:52] you should leave out the @ :) [13:54] oh :) sorry for being newby [13:54] and even spelling like a newbie :)) [13:55] Chipaca: you mean wrt. the -- No entries --? -q is documented as "Suppresses any warning messages regarding inaccessible system journals when run as a normal user.", but I see how one would want to shut up that message too :) [13:55] no worries ... [13:55] usually the ubuntu bots dont use @ but ! ... nothal is special in this channel [13:55] pitti: the "No journal files were found." was more the thing i was expecting it to suppress [13:56] as it stands -o json outputs json except when it doesn't [13:56] making it somewhat annoying :) [13:56] Chipaca: I don't get that [13:56] $ journalctl -q -u something-that-does-not-exist [13:57] -- No entries -- [13:57] $ [13:57] $ journalctl -q -u potato [13:57] No journal files were found. [13:57] -- No entries -- [13:57] sergiusens, is there a switch for snapcraft to force-rebuild everything? or how do you normally use it? (rm -rf parts stage snap; snapcraft)? [13:59] Chipaca: but this should be fixed anyway -- "-- no entries --" is quite useless for json output/parsing too [14:02] tedg: hehe [14:02] tedg: yes, let's talk [14:03] tedg: I'm working on this hard [14:03] tedg: and I'd love to have an accomplice [14:04] zyga: Do you have a branch pushed? [14:05] tedg: no, I got into a few blockers, if you want we can sync and talk about that but I'm packed with meetings now [14:05] tedg: we could invite you to a meeting in 25 minutes (monthly catch up on snappy) [14:05] tedg: that could help as wel [14:05] well [14:05] zyga: Uhm, okay. I'm not looking for more meetings ;-) [14:06] * ogra_ notes down ... ted ... looking for more meetings ... [14:07] Heh, thanks ogra_ [14:07] :) [14:07] lol [14:07] tedg: so let's just talk here [14:07] tedg: tell me about your approach [14:08] tedg: and I'll tell you what I did and what I got stuck on [14:08] zyga: I was looking at adding a field to the python projects for adding a requirements.txt [14:08] zyga: Grab it, install it, party on. ← my approach :-) [14:08] tedg: mmm [14:09] tedg: have you run into the numerous issues in python3app implementation today [14:09] tedg: it's pretty much all wrong now [14:09] tedg: it bleeds the python stuff from the system into the snap stage area [14:09] Not sure what python3app is? python3-project ? [14:09] yep [14:09] I never remember if it's -project or -application [14:09] but yes [14:10] e.g. you pip install requirements and it ignores stuff you have locally installed [14:10] Ah, I don't have anything from pip locally installed :-) [14:10] not from pip [14:10] from the system [14:10] I have patched that heavily [14:10] So it needs to restrict its search path. Sounds like an envvar? [14:10] tedg: more than that [14:11] tedg: you really need to run the python from the stage area [14:11] tedg: there's no clean way to do it otherwise [14:11] tedg: and you essentially need to do what virtualenv does to be correct [14:11] Sure, but that's handled by setting up the path correctly. [14:11] tedg: then there are some interesting issues related to that but that's [14:11] tedg: path? yeah [14:11] tedg: well [14:11] tedg: no, just running the right python explicitly [14:12] Eh, okay. That can work too. [14:12] tedg: anyway, it's clear that you just run the right python with the right extra PYTHONHOME helpers and perhaps python -S (so that site is not imported) [14:12] tedg: then you get empty python and pip install works [14:12] tedg: I ran into some other issues though [14:12] tedg: and that's where I'm stuck now (though just stuck with ENOTIME) [14:12] zyga: K, do you have a branch somewhere that I can look at? [14:13] dholbach: I'm rm'ing, but I do want to at least add a 'clean' statement [14:13] tedg: I have it locally but it's all teribble as I was trying to figure out how to upstream it [14:13] tedg: let me show you the diff in a sec [14:13] (really stuck in meetings) [14:14] sergiusens, it looks like it's necessary to remove the sideloaded package in a snappy system as well when using snappy-remote and not updating the version number [14:14] so I can't just build a new snap and snappy-remote it again [14:15] dholbach: oh, Chipaca fixed that, for rolling at least [14:15] <3 [14:15] I love you guys [14:16] sergiusens, oh ? including apparmor profile updating ? [14:16] (i thinnk that didnt work in the past) [14:17] tedg: can you tell me more about what test projects you are trying to bundle with pip? [14:18] ogra_: dholbach the version is basically ignored and hashed, sideloading has no upgrade paths in any case, so it is all fine [14:19] ah, cool [14:19] in the past even for locally sideloaded snaps the apparmor profile wasnt updated when i didnt bump the version [14:22]