=== beuno_ is now known as beuno === devil is now known as Guest90181 === chihchun_afk is now known as chihchun === Guest90181 is now known as devil_ [07:34] good morning [07:38] Guten Morgen dholbach [07:46] salut didrocks [07:54] kgunn, in your mir-snaps article I removed the references to the snappy tools ppa - it should be available everywhere in xenial [07:58] zyga: sorry, this PR does not really say much to me -- except for two comments it doesn't seem udev related at all? [08:05] good mornign [08:06] pitti: hey, thanks for looking at it [08:06] pitti: this how snappy will reload udev rules when something security-related changes [08:06] pitti: (we write or remove some udev rules) [08:06] pitti: this is just a sanity check review [09:12] Good morning [09:12] I think i encountered an issue while making mine own apparmor profile [09:13] the error looks like Mar 11 09:08:30 localhost kernel: [64990.973666] audit: type=1400 audit(1457687310.712:69): apparmor="DENIED" operation="open" profile="/usr/bin/ubuntu-core-launcher" name="/home/ubuntu/snaps/ad.sideload/LScnlHLRglbn/snaps/" pid=4159 comm="ubuntu-core-lau" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000 [09:55] mvo, Trevinho, did the u7 .desktop file support land yesterday? I wasn't sure which package to look at [09:55] dpm: it landed but stuck in xenial-proposed due to a build failure [09:55] on powerpc [09:56] linkedinyou: dpm the package is the snappy one though [09:57] Ouch... Autocompletion... [09:57] mvo, Trevinho, ok, thanks 'ubuntu-snappy', then? [09:57] mvo, While I have you here: I don't quite understand how upgrades for the ubuntu-core snap work on the desktop. Do they happen automatically or do I need to upgrade it manually? [09:58] dpm: there is a systemd job that will auto-update ubuntu-core [09:58] aha! [09:58] I was getting confused [09:58] I had tried [09:58] $ sudo snappy update ubuntu-core [09:58] the given snap is not installed [10:04] dpm: hm, that is a bug, I think because we use channels now in some internal api [10:11] mvo, where is the best place to file bugs for snappy, as the one you've just mentioned? [10:12] dpm: the launchpad https://bugs.launchpad.net/snappy [10:12] great, thanks [10:12] dpm: and pining us also helps [10:14] Hi Snappy users. I have a question about adding 3rd party kernel module to the snappy kernel. Is it an easy task or I have to rebuild the whole image? [10:16] cr0nx, you have to rebuiold the kernel snap [10:17] mvo, ok, filed http://pad.lv/1556018 [10:17] Launchpad bug 1556018 in Snappy "Cannot manually update ubuntu-core snap" [Undecided,New] [10:18] ogra_ do you have any recommeded document about how to rebuild kernel snap? [10:21] cr0nx, snapcraft offers a kernel plugin ... though that builds completely from source [10:22] if you want to add a binary module http://cdimage.ubuntu.com/ubuntu-core/daily-preinstalled/current/ has the device tarballs that are used as input for our kernel snaps ... they are all based on deb packages from the ubuntu archive ... [10:23] https://launchpad.net/~mvo/snappy/mksnap-os-kernel has the scripts to turn a device tarball into a snap (note: requires xenial's snappy) [10:26] perfect! thank you for your help. These are my first steps with snappy, but it seems to me as a great option for dedicated appliance I am working on. Do you know if somebody using snappy in a production env/product ? [10:27] dell seels its industrial gateways perinstalled with snappy [10:27] *sells [10:27] and there are several drone manufacturers shi9pping snappy based drones [10:33] wow, exciting! And also last question: do you have any experience running snappy kernel with grsecurity patch ? [10:34] nope, but note that we use seccomp, cgroups and apparmor massively in snappy ... not sure if the grsecurity patches change their behavior [10:35] better ASLR is always better [10:35] ok ogra_ [10:36] thank you very much for your help. I appreciate [10:36] here is a snapcraft.yaml for use with the snapcraft kernel plugin https://github.com/sergiusens/snapcraft/blob/feature/1552168/kernel-plugin/examples/kernel/snapcraft.yaml [10:37] (you'd just create a wrokdir, put that yaml file in there and run "snapcraft" ... the rest is automatic [10:37] ) [10:39] coool! [10:39] (though there is no concept of pathes i think, which means you might need your own git tree with your patch on top) [10:39] *patches [10:45] is there a click package for mythtv on ubuntu-core? [10:45] where do i even go to find packages? [10:48] click package ? this isnt #click :P [10:48] https://uappexplorer.com/ offers a search option for snaps in the store [10:49] well i specifically need a click package that works on snappy ubuntu core [10:49] i'm not sure what the difference is [10:49] that doesnt exist [10:49] oh? [10:49] click is deb based, snap is something completely new [10:49] there is no compatibility [10:50] https://myapps.developer.ubuntu.com/dev/click-apps/?format=snap [10:50] what does this URL mean? [10:50] this is where you end up at the end of the snappy tour [10:51] that shows your snappy packages in the store if you have any ... [10:51] and is the place to upload them if you produce any [10:52] why does it contain "click" [10:52] no idea, i never looked at the url [10:52] it is what you get to when clicking on "Ubuntu Core" at the top menu on the page [10:52] this is why i thought i needed a click package [10:52] in snap format [10:53] for actual click packages you'D go to "Ubuntu Personal" ... [10:53] the tour doesn't actually explain any of this, which is why i am reduced to guessing based on urls [10:54] well, the store UI is far from being complete ... i guess the web devs just re-used the click UIs for now [10:55] ali1234, https://lists.ubuntu.com/archives/snappy-app-devel/2016-March/000636.html [10:55] that is what you want when creating snaps nowadays ... i guess docs will updated on release day [10:56] *will get [10:56] i don't want to create a snap though [10:56] i want someone else to have already done it for me [10:56] heh [10:57] according to the tour, it is recommended to use 14.04, but "this" version of snapcraft only works on 16.04 (what "this" version means is not explained) [10:57] ogra_: BTW: why docker version is so old? are you using backporting or it is really 1.6.2 version ? [10:58] ali1234, all older snapcrafts and older images will be obsolete with 16.04 [10:58] cr0nx, no idea, i dont maintain that snap [10:58] (and have never used it) [10:59] ali1234, 16.04 is essentially snappys "1.0" release [10:59] great, but 1604 isn't released, therefore i am not running it [11:00] well, you have to ... or at least have to use a chroot if you want to build snaps for 16.04 [11:00] i don't want to build snaps for 16.04 [11:00] i want to build snaps for the current release, because that is what i will be deploying [11:00] well, then you have to use the old manual ways [11:01] ok [11:01] but that it will be EOL in 5 weeks [11:01] but my main point is that the tour literally contradicts itself [11:01] *note that [11:01] yes, it will be overhauled for release, as i said [11:13] Do we support the Odroid devices (yet)? like http://www.hardkernel.com/main/products/prdt_info.php?g_code=G145457216438 ? [11:14] popey, longsleep (from spreed) did maintain one ... not sure hw has a 16.04 version and he wasnt around for some days [11:14] *not sure if [11:14] hm, okay. [11:17] can i run snapcraft on snappy core? is there a snappy package for it? [11:18] you can run: sudo snappy enable-classic; snappy shell classic [11:18] and then just apt-get install snapcraft [11:19] is that a good idea? [11:19] that is the purpose of the classic mode, so yes [11:19] (it runs a container on top of the readonly rootfs that just adds the missing pieces for a "normal" dpkg based rootfs) [11:22] where can i get a snappy 16.04 image for raspberry pi 2? [11:22] http://people.canonical.com/~mvo/all-snaps/ [11:23] what does "all" refer t in the filename? [11:23] either grab the pre-made one ... (thats a few days old though) or grab ubuntu-device-flash from there to build your own [11:23] thats the new "all-snaps" image format, it means that everythiong is now a snap [11:23] does building my own require 16.04? [11:24] (rootfs, kernel, gadget (which is bootloader and device definitions)) [11:25] no, ubuntu-device-flash is a static binary ... you should be able to use it on older releases [11:25] if i have a pi3, is the arm64 version a good idea? [11:25] (it probably makes sense to apt-get install ubuntu-devcie-flash first, there are some deps like kpartx) [11:25] no [11:25] the pi3 can not run arm64 code yet [11:25] that waits for a binary blob update from broadcom [11:26] oh yeah, i heard about that [11:26] (the currtent bootloader initializes the board in 32bit mode yet) [11:26] and for snappy i'm also waiting for a u-boot port ... thats also not completely done yet [11:26] it can initialize in 64 bit mode, but the kernel will fail when it tries to talk to the 32 bit videocore code [11:26] * ogra_ has 2 pi3's lying here but not all bits exist yet) [11:27] right [11:27] something to do with kernel pointers being passed through videocore [11:27] i definitely plan to have an image for it ... [11:27] and once arm64 works fully on it, even an arm64 image [11:28] today the only arm64 board we support is the dragonboard though === chihchun is now known as chihchun_afk [12:02] Good morning [12:23] Good morning @21:22 in Osaka [12:24] how can I get a .snap file of a snap from a store? [12:24] is it possible to get the URL of a snap? [12:25] for example to check where `snappy-debug` will be downloaded from? [12:33] techraf, there is uappexplorer.com ... not sure if it provides download links though [12:36] hi, I am just hearing about snappy, just want to know the difference between it and docker [12:37] ogra_, I'm not sure if these are the same apps that I was thinking of.. [12:37] @ogra_, I'm not sure if these are the same apps that I was thinking of... [12:37] techraf: No such command! [12:37] snappy isnt a container system (you can use containers in it) [12:37] techraf, there is a search option for snappy [12:37] techraf: there is an api for the store. you could poke that and get the url to the snaps [12:37] https://uappexplorer.com/apps?sort=relevance&type=snappy [12:37] techraf: or you might find them in my mirror http://popey.mooo.com/mirror/clicks/2016/03/2016-03-11-050001/ [12:38] techraf, you can use the store API from the terminal [12:38] popey, argh, you're too fast [12:39] oh, these _are_ the same apps and store indeed shows a direct link to https://public.apps.ubuntu.com/anon/download/canonical/docker.canonical/docker.canonical_1.6.2.005-16.04.1-1_all.snap [12:39] that's the one [12:39] techraf, curl http://search.apps.ubuntu.com/api/v1/package/snappy-debug [12:40] beeray, welcome! [12:40] does _all.snap mean all architectures? Actually I was looking for armhc [12:40] beeray, Docker and Snappy solve completely separate problems [12:41] techraf, yes, all means all arches (that can mean it only contains scripts, but also that it ships binaries for all of them and switches according to the arch you run it on) [12:41] beeray, Docker is a virtualization technology, and Snappy/Ubuntu Core is an operating system [12:42] beeray, may I ask what you read that led you to believe they were similar? [12:42] ok , thanks so much guyz [12:43] so that mean I can use it to develop app, and it means it can run docker container as well [12:43] yeah [12:43] beeray, you got it [12:43] Just want to ask, is it faster than running docker on main ubuntu or other linux distros [12:44] ali1234: I have snappy on a pi2 here, and have two ssh sessions to it, one in 'snappy' mode, and one in 'classic' mode. I use classic to build snaps using snapcraft, and then switch to the 'snappy' mode session to test install them, as they share the same $home [12:44] most likely, since you can run apps in a securely confined way natively ... without having to have a container layer underneath [12:44] popey: that sounds like what i need [12:45] ali1234, see, we thought of you :) [12:45] although I did run out of space at one point [12:45] does snappy auto expand to fill the sd card? [12:45] i am going to use a 32Gb card [12:45] it should, yes [12:46] check with df, i heard recently that the auto-resize diidnt work for someone [12:46] (i'm currently re-writing it though) [12:46] /dev/mmcblk0p2 3.4G 3.2G 90M 98% /home [12:46] it's a 16GB sd card [12:46] looks fine [12:46] thank you ogra_, popey, kyrofa - I got to do a homework with downloaded .snap now :) [12:47] so looks like it didn't [12:47] oh [12:47] yeah, then it didnt [12:47] /dev/mmcblk0p2 270336 31250000 30979665 14.8G 83 Linux [12:47] there should be logs in /run/initramfs [12:47] reported by fdisk [12:48] 1454620756: start [12:48] writable: clean, 41877/229824 files, 618695/917504 blocks [12:48] 1454620757: end [12:48] does classic have a limited amount of space? [12:48] nope [12:48] hmm [12:49] but it can only use as much space as your writable partition has indeed [12:49] my other one running edge, seems to have worked /dev/mmcblk0p2 29G 947M 26G 4% /home [12:49] please file a bug against initramfs-tools-ubuntu-core that the resize didnt work [12:49] (32GB card in that one) [12:49] So i guess no bug needed if it's fixed in edge? [12:49] not sure it is fixed in edge :) [12:50] currently working on virtualization with docker, just want to ask if I can install docker on it, and then run container through the docker. OR is it possible like I read to develop app test it and run it on snappy without the need for container [12:50] hm [12:50] beeray, both is possible :) [12:51] pls explain, you know each app is independent in container , how do they work in docker [12:51] there is a docker snap you can install an use if you want ... to just run your app in [12:52] and also regarding RPi , can snappy replace the raspian or debian or ubuntu that we do install in RPi. if so what are the benefits [12:52] at the same time you can use snapcraft and just develop a snap for your app that runs it natively [12:53] it is really up to you ... [12:54] though by experience i'd not really run docker on something as underpowered as a rpi [12:58] does the rpi2 image work on rpi3? [12:58] transactional updates are surely a big benefit (of the OS as well as of the snaps) ... the very high level of security and reliability are surely also putting it far above a deb based system (readonly filesystem apps are completely confined and cant just access stuff on the OS etc) [12:59] ali1234, nope [12:59] as i said, needs u-boot to be finished [12:59] i know srwarren is on it, shouldnt take long til he has something stable [13:00] is it expected that the SD activity led does not work? [13:00] oh nvm, it does work, it's just really slow [13:00] after the rootfs booted it works [13:00] the first boot takes a while since it resizes the OS and does some basic setup via cloud-init [13:01] subsequent boots are a lot faster [13:01] thanks guyz [13:01] what is cloud-init? i don't like the sound of that [13:02] ali1234, it creates ssh keys and sets up the default user (in snappys case, it can generally do a lot more we dont use) [13:03] so it's basically oem-setup for the cloud? [13:03] right [13:03] okay, makes sense [13:03] well, in actual cloud-setups it does a lot more (installing debs and such, partitioning the cloud instance etc etc) [13:03] more like d-i [13:03] but as i said, snappy only uses the user setup and ssh key generator [13:09] sorry to jump in [13:09] So what is the difference between snappy and main Ubuntu [13:10] for ubuntu-core on RPi - before "sudo snappy enable-classic; snappy shell classic" [13:10] do I need to install ubuntu-classic? [13:11] mvo, did you by chance see bug #1555569 - is there a human-readable name in snap.yaml equivalent to title in a Click manifest? Would that be summary? [13:11] Error: Launchpad bug 1555569 could not be found [13:14] or it's not yet official? [13:15] techraf, nope, it should work by default (in the 16.04 images) [13:16] well, it needs to download the container content (which "sudo snappy enable-classic" does) [13:22] ogra_, that explains why it does not work here on 15.10 :) [13:29] okay it must have finished booting by now [13:30] how do i log in? [13:34] ubuntu/ubuntu [13:34] what is the IP? [13:34] dhcp [13:34] or plug into a display and keyboard and login locall of course [13:36] okay i am logged in [13:36] it doesn't have a hostname [13:36] probably explains why avahi doesn't work [13:36] ubuntu@localhost:~$ [13:36] /dev/mmcblk0p2 3.4G 158M 3.1G 5% /writable [13:37] ali1234, if webdm is installed try webdm.local [13:37] what is webdm [13:37] i tried wemdb.local from the tour, but it does not work [13:38] ali1234, a web-based package manager, if you will [13:38] .local is avahi [13:38] there is no avahi address associated with the IP [13:38] kyrofa, webdm isnt ported to interfaces yet [13:38] ali1234, .local is just a convention. avahi is one of many ways to get mdns [13:39] ogra_, ahh [13:39] * ogra_ is waiting for that too [13:39] so the writable partition didn't resize either [13:39] kyrofa, btw, what abotu an owncloud update ? :) [13:39] ali1234, yeah, thats a bug [13:40] ogra_, amd64 has been rebuilt, but my rpi2 is crapping out on me [13:40] can i just e2resize it? [13:40] you can file it against initramfs-tools-ubuntu-core ... i'm working on fixing that though [13:40] ogra_, I'm not sure if it's my SD card, the flash drive I'm using for swap, or a hardware issue [13:40] :( [13:41] ogra_, the video gets all weird, like the text is garbled. It works for another half hour or so, then it's just gone [13:41] wow [13:41] that sounds very broken [13:41] ogra_, yeah, feels like hw [13:42] ali1234, any logs in /run/initramfs/ ? [13:42] Unfortunately it's the only arm I have... so I'm crossing my fingers for LP to finish allowing internet access in its builders [13:42] yes, resize-writable.log [13:42] any errors in there ? [13:42] yes, e2fsck errors [13:43] ah [13:43] http://paste.ubuntu.com/15347369/ [13:43] k, that gives me some pointer what to look for [13:44] well, but it finished fine ... lparted should have kicked in next ... weird that it didnt [13:45] -l [13:47] also these http://paste.ubuntu.com/15347403/ [13:48] hmm [13:48] where does that BYT come from [13:48] "i dunno lol" [13:49] where does any of that output come from? [13:49] initrd [13:49] ogra_, rebooting the rpi2, I have evbug lines all over my syslog [13:50] there is an awfully ugly resize script [13:50] kyrofa, lovely ... sounds like kernel then [13:51] JamesTait: I think the best we have is indeed summary [13:51] (well, awfully ugly for GPT disks ... pretty standard for mbr ones) [13:51] ogra_, should I log a bug, then? [13:51] kyrofa, yeah and attach the syslog ... against linux-raspi2 for the start [13:52] would it help if i did it again with a serial console? [13:52] no, all output is redirected to the log files ... you would only see some echos "resizing foo ..." [13:53] as i said, i'm working on it [13:53] since thats just an mbr disk you can easily resize it with gnome-disks or gparted in your PC for now .... to work around the bug [13:57] ogra_ where can I get ubuntu core 16.04 for RPi? [13:57] http://people.canonical.com/~mvo/all-snaps/ [13:57] techraf, http://people.canonical.com/~mvo/all-snaps/ [14:00] thank you [14:05] uh... something weird just happened [14:06] http://paste.ubuntu.com/15347526/ [14:06] i didn't do anything [14:06] ali1234, auto update notification :) [14:07] so it just reboots any time by default? [14:07] if autoupdate is enabled, yes [14:08] i'll need to automatically defer that [14:08] (which it is by default) [14:08] if mythtv is recording something it should wait until the recording finishes, then reboot [14:10] so you disable it with snappy config ubuntu-core ... [14:12] echo -e "config:\n ubuntu-core:\n autoupdate: false\n" | sudo snappy config ubuntu-core -- - [14:12] that should do [14:12] (note the spaces are essential, it is yaml) [14:14] i don't want to disable it though. i just want to make sure the system doesn't reboot while it is doing something important [14:14] well, its an on/off thing currently [14:15] i agree that tthere should be finer grained inhibition ... but thats not there yet [14:18] (there migh be a way via the REST api though) [14:33] elopio, standup? [14:33] kyrofa: I'm trying to join. [14:33] Oh google [14:36] How am I supposed to debug a snap with gdbserver ? [14:36] from the classic shell you can attach to the pid [14:36] the program crashes at startup [14:37] s/program/snap/ [14:37] ah, then probably by using strace from your startup script or some such ... [14:37] and if I run gdbserver in the confined env, it is killed because of syscall 136 (personnality) [14:37] (which indeed requires re-snapping) [14:39] i think jdstrand had some clever way of using an overlayfs from classic, so you can dynamically hack your shell scripts in the snap dir etc [14:39] from the startup script I've put something like if [ "$DEBUG" = "1" ]; then exec gdbserver :1234 $SNAP/usr/bin/wifid; else exec $SNAP/usr/bin/wifid; fi [14:39] but gdbserver does not like being sandboxed [14:40] mvo, so we're currently discussing the removal of the tagline field from click packages - I had mistakenly thought it was a field that we parsed from the click manifest, when in fact the upoader has to enter it in the upload form. [14:41] mvo, the intention originally was to finally split it out into a separate field, and parse summary from snap.yaml into there - it sounds like a better approach might be to drop tagline entirely and parse summary into what clicks call title. [14:47] fgimenez: I rewrote the dep8 test to use the test deps from source, but I still can't find them if I'm not inside the tests directory. [14:48] I don't understand what I'm doing wrong. This should be the same as when we compile the tests binary. [14:51] huh, weird. It works if I first generate the binary. [14:51] elopio, mm we do this when building the binaries "command.Dir = filepath.Join(os.Getenv("GOPATH"), projectSrcPath)", are you using shell script for the dep8 test? [14:52] shell script. [14:52] but it worked, I think I'm happy with this. Not as ugly as before. [14:52] I'll propose the branch for you to see. [14:54] jdstrand: hey [14:54] zyga: hey [14:55] I saw the emails, I'm discussing it with the team [14:57] jdstrand: thanks [14:57] jdstrand: let's sync before EOD, I'd like to know what I stand on === ahayzen_ is now known as ahayzen [15:05] zyga: yes, that is why I started discussing it immediately after I came on :) === chihchun_afk is now known as chihchun [15:24] mvo: https://github.com/ubuntu-core/snappy/pull/646 [15:24] autopkgtest. [15:24] elopio: thats wonderful, thanks a lot! [15:25] didrocks: hey, I can't help but comment since you sent the reminder-- the timing for surveying people on 16.04 snappy development is interesting since I imagine everyone is going to be incredibly frustrated since a ton of things are still in flight [15:26] and that is going to continue for at least a couple of weeks [15:26] 2 cents [15:26] are we re-defining interfaces again next week ? [15:26] :P [15:27] not plugs/slots/etc but yes in that now that that is settled, the actual interfaces are going to land [15:27] jdstrand, yeah I'm prepared for angry responses :P [15:27] jdstrand: yeah, that's what I first told to Daniel about the timing [15:28] and old-security/caps names are not going to be the same as the os slots [15:28] but at least, we can measure, reassess, progress [15:28] yeah, I look forward to that, I lost a build because of a trailing "," in a json security.override [15:28] and no angryness on install! :p [15:29] I guess in one sense you will have a nice baseline-- your next survey should have an overwhelmingly more positive response, so it'll look great then! :) [15:29] Hahaha [15:29] didrocks: click-review whould've noticed that [15:29] should've [15:30] didrocks: but security-override was literally *horrible* in 15.04 :) [15:30] didrocks: I think you are the only person who used it [15:30] jdstrand, not so! I've used it now [15:31] yay? [15:31] :P [15:31] :) [15:31] I mean, it does stuff... [15:36] it does somewhat worked yeah :) [15:36] but I'm happy we move to something more modern [15:37] kyrofa: speaking of which, you have an answer on http://askubuntu.com/questions/744696/how-to-create-snappy-nodejs-web-application :) [15:39] didrocks, heh [16:01] jdstrand: any chance you can approve lxd 2.0.0 rc3? [16:01] ogra_, ysionneau: fyi, this is in my notes: http://paste.ubuntu.com/15348328/ [16:02] ogra_, ysionneau: obviously the technique can be extended in various ways [16:02] stgraber: I thought I did? [16:02] *if* yoour kernel has overlayfs [16:02] :) [16:02] stgraber: is this a new one or from earlier this week? [16:02] ogra_: indeed [16:02] jdstrand: that was rc2, I pushed rc3 last night [16:02] ah [16:02] yes, I can do that [16:09] Hi Folks. I am experimenting with custom Snappy o/s image creation for our hardware. I was able to use "mk-snappy" scripts to create a custom kernel snap. I am picking up os snap from nightly builds. I used device-flash to create the .img file [16:10] But I observe that ubuntu-core cannot be updated to newer versions as it is shown as sideloaded. [16:10] http://pastebin.com/wLehLKHZ [16:10] Any idea how we can overwrite sideload'ed apps with signed version from snappy store? [16:10] you cant [16:11] upload your snaps to the store ;) [16:11] (and push your updates through it too) [16:11] okay..I am using the os snap provided. [16:11] But it still shows up as sideloaded. [16:12] you make ubuntu-device-flash use it from the store ? [16:12] or did you download it locally [16:13] Got it. I am downloading the snaps and tar balls locally and creating the img file using device-flash. [16:13] thats your issue :) [16:13] I see what you are saying, if I tell device-flash to use o/s snap directly from store it will allow me to upgrade it. [16:14] you just want: --os ubuntu-core.canonical [16:14] You see, we want our own customer kernel snap to be sideloaded. But ubuntu-core, we want it from the store. [16:14] that will download the signed one from the store and it will not be marked as sideloaded [16:15] okay let me modify the scripts to do --os ubuntu-core.canonical [16:15] Thanks for the tip ogra_ ! [16:15] if you want to upgrade your kernels you should consider uploading them too though [16:16] W.r.t kernel, yeah we will get there soon. [16:16] ogra_: What about gardget snap? canonical-pc? [16:17] --gadget ??? [16:25] mvo, ogra_: do you know when snappy 16.04 images will live on cdimage.u.c? [16:25] dholbach, no [16:25] do we know who's working on this? [16:25] me if in doubt [16:26] we have the fragments on http://cdimage.ubuntu.com/ubuntu-core/daily-preinstalled/current/ (kernel and os snap) but these need to be automatically pulled into the store .... and thnen we need some automated way to run u-d-f [16:27] and as i just said in my mail we need the new all-snaps u-d-f to land first in the archive [16:27] as i also said in my mail i could do an alpha release manually ... but since the interfaces are still not final i'm not sure thats such a good idea [16:28] (people will have to re-do their snaps again once it is stable) [16:28] mh [16:29] mvo, when will the u-d-f for all-snaps land ? any reason to hold it back ? [16:36] ogra_, Yes. Now I am able to see ubuntu-core snap installed with correct version and Developer. [16:36] great :) [16:37] Cool. But, I have question now. [16:37] The reason why were doing custom o/s snap was to work around a problem in Snappy. [16:37] a custom os snap is definitely the wrong way to work around any problems :) [16:38] Our C application residing inside our snap package is allergic to dash and wants bash as default shell. [16:38] Now is there a way in Snappy to specify /bin/sh to be bash for a Snap application. [16:38] we might remove bash from the image at some point [16:38] I believe this is a feature that needs to be exported by the Snappy infrastructure. [16:38] andf your snaps should realyl not rely on anything in the os snap [16:39] okay..here is the catch. [16:39] "/bin/sh" is hardcoded when system("") libc API is used. [16:39] i think the right way would be to allow snapcraft to ship a /bin/sh override so you can ship your own shell insuide and the ubuntu-core-launcher would just point to whatever your snap ships [16:39] So we do not want to hack libc to point to some other /bin/xxxx. [16:40] jdstrand, ^^^ [16:40] Hi. Does a golang client library exist for the snappy REST api? or should i just use net/http. [16:40] jdstrand, and idea if it is possible to override /bin/sh from the launcher for a snap ? [16:41] i could imagine people shipping ksh scripts or tcsh scripts in their snaps would want that too [16:51] is there a capability to allow a snap to use mount ? [16:52] i dont think so [16:52] I'd like to have some rw directory accessible from several snaps [16:53] I wanted to mount -o bind some /writable/parrot directory in /tmp/parrot (the sandboxed /tmp) for each snap [16:53] i think the interfaces model will offer that (you would have a disk-provider snap or some such that your other snaps can consume) but thats not there yet [16:53] but no luck :p [16:54] probably zyga can tell where we stand with that [16:54] ok thanks! [16:54] i know he works on interfaces [16:54] but i doubt you will be able to actually use mount :) [16:55] well mount is not mandatory I just wanted some solution to share some files [16:55] and actually right now I want to share a named unix socket [16:55] yeah [16:55] * ogra_ usually just dumps all bits that need to share a dir into one snap [16:56] i.e. http://bazaar.launchpad.net/~ogra/+junk/upnp-server/files .... ships minidlna and lighttpd that share the same dir [16:57] yes that's one solution, but it's not something we can do for everything [16:57] that would end up like : parrot-firmware.snap [16:57] instead of having several snaps [16:58] well, whats the advantage of having several snaps ? [16:58] + we want to allow developers to do snaps which would be able to communicate with our autopilot running in another snap (a parrot snap) [16:58] (apart from requiring a lot more maintenance) [16:58] and that means : shared memories, udp/tcp/unix sockets [16:58] and files [16:58] yeah, the interfaces model will allow all that i think [16:59] good :) [16:59] is there some text somewhere describing this idea? (even if it's not implemented at the moment, I get it) [16:59] so that I can grab the idea [16:59] not sure ... since we collect all such stuff in google docs i lost the overbview [17:00] i'm sure there is some doc *somewhere* [17:04] ogra_: eek, yuck. /me notes system() is almost always unsafe.... I can't think of a way to do that in anyway that would be considered sane [17:05] the scripts should be adjusted to be posix compliant or the system() calls should be replaced with something that does what they want [17:05] well, you could have a special libc that allows an env var for /bin/sh to override the system one .... and force-seed that var to an in-snap binary [17:05] but thats indeed very ugly [17:06] jdstrand, would it be bad to make seccomp actually block system() ? [17:06] this all gets back to us defaulting to dash which we did in 6.10 [17:06] (i assume this would make half the Sw non-functional) [17:06] we can't block system(), that isn't a syscall [17:07] yeah [17:07] libc implements system() with execl which is ultimately the execve syscall [17:07] * ogra_ sighs ... 3rd firefox crash out f the blue in 1h ... FF 45 is really not for 15.10 it seems :( [17:08] hmm, doesnt libc actually respect the SHELL env var ? [17:11] hmm, not according to http://www.scratchbox.org/documentation/general/tutorials/glibcenv.html [17:12] ogra_, Jdstrand: I am reading your conversation. Interesting points! [17:13] rajen, we have a porting doc to make shell scripts properly POSIX compliant btw https://wiki.ubuntu.com/DashAsBinSh ... perhaps that helps ? [17:13] hmmm even from the same snap, if I run 2 apps, each one will get a different /tmp, right? [17:13] but I can share files with $SNAP_DATA :) [17:13] ysionneau, yeah, i think there is a bug open for that [17:13] ogra_: ok [17:13] Okay dash/bash for scripts. Yes we fixed all that. [17:13] The issues are with our C application. [17:13] /tmp should be per snap, not per app [17:14] agreed [17:14] jdstrand, ogra_: this is the actual problem we are trying to work around with http://stackoverflow.com/questions/35642734/ld-preload-not-applied-to-command-given-through-system-in-dash-but-working-wi [17:18] you could maybe LD_PRELOAD system() so it uses bash [17:19] that doesnt solve the general issue that snaps fully rely on the os shell though [17:19] I don't think that was possible. [17:21] jdstrand, _IO_execl ("/bin/sh", "sh", "-c", command, (char *) 0); [17:21] glibc code does this. There is no escape from this I guess. [17:22] _IO_new_proc_open() [17:25] hi all, where can I find documentation about the new "interfaces" in snappy and how to build a snappy that provides new ones? [17:26] mhall119, in someones brain :P [17:29] who's brain to I need to extract? :) [17:30] mhall119: mine [17:30] mhall119: what do you need [17:31] zyga: to learn more about snappy, but specifically I want to understand the best way of providing a single ubuntu-sdk-libs snap package that other snap application packages can depend on [17:32] niemeyer: oh, so code reuse [17:32] er [17:32] mhall119: ^^ [17:32] yes [17:32] niemeyer: sorry, habbit :) [17:32] ;) [17:33] mhall119: we discussed that times and again and the bottom line is that right now we don't have an off-the shelf solution; I'm pretty confident we could make one but that's something we're not working on now [17:33] zyga: with 16.04 desktop introducing snappy support, I'd like to make our new ecosystem of convergence apps available on it [17:33] mhall119: the focus is to finish what we planned and that's very much what we are doing [17:33] mhall119: I understand, it's just not ready yet [17:34] mhall119: there's a few different ways we could do that, it's a bit complex around the edges [17:34] ok, then where can I learn about snappy interfaces more generally? [17:34] mhall119: and we don't want to get back to debs and dependency issues [17:34] mhall119: the core idea is super simple, it's a way for two snaps to interact [17:34] mhall119: fyi, I think you are about 1 week early [17:34] mhall119: using a well defined "protocol" [17:35] mhall119: whatever that is (could be some actual protocol, could be just an agreement to write to a file, etc) [17:35] mhall119: in about that time, much of this will be landed and presumably docs/... updated [17:35] mhall119: yep, jdstrand is right [17:35] mhall119: I'm working on plugging it all together; next week we'll have that in trunk and we'll focus on docs, polish and tons of interfaces [17:35] jdstrand: ok, who is working on landing that and writing those docs? [17:35] mhall119: and to see what's the next focus for us [17:36] mhall119: I suspect I'll work on that though I bet jdstrand will help me a lot in actual writing proper english :) [17:36] zyga: ack, I will come annoy you about it next Friday then :) [17:36] mhall119: gladly! [17:36] mhall119: sorry, I wish I could give it to you and the world today [17:36] mhall119: (about that, time for a coffee and another pull request) [17:37] zyga: I can say for sure after all that is there and the old-security/caps stuff is implemented, we should look hard at the existing frameworks (docker, lxd, mir, bluez, pulseaudio and nm) [17:37] zyga: a week is not so bad, I can wait that long :) [17:37] zyga: each will likely present different challenges to work through. eg, sockets, dbus bus policy, etc [17:42] jdstrand: totally agree [17:44] (I cannot stand my office today, moved downstairs to see real living human beings) [17:44] jdstrand: I'd like to land udev/apparmor branches that I posted [17:45] jdstrand: while my attempt to reconcile snappy/security.go with interfaces failed miserably (everything is terrible ;-) I got a lot of things done [17:48] zyga-phone: hehe, I doubt everything is terrible. Things are coming along! be happy :) [17:49] jdstrand: we parse the _name_ of the file with the apparmor profile in hw-assign, I tried to decouple that so we can rename the file but I gave up [17:50] jdstrand: I'd rather implement interfaces and developer mode and burn hw-assign with fire [17:50] zyga-phone: hw-assign gone, sure. I am curious what we'll do for say, assigning /dev/video0 to a snap [17:51] voodoo [17:51] ie, what these interfaces will look like wrt the os and gadget slots [17:51] (build a little camera out of straw ... ascrifice a chicken ... and hope the app works then) [17:51] jdstrand: enable developer mode, work with us on a proper interface [17:51] jdstrand: doing /dev/* assignment through interfaces is trivial (i have implemented this iface locally) [17:52] jdstrand: doing hw-assign requires going through a maze of legacy code [17:53] ok, so you implemented the hw-assign functionality as an interface (that's fine and it will probably be useful for devs in the early stages), I more meant what does a proper interface look like for these things [17:53] it is more pondering [17:53] I guess we'll see :) [17:56] jdstrand: it would always depend on what is being assigned so that there's interoperability === chihchun is now known as chihchun_afk [18:28] hi [18:28] is it possible to use smartphone as a developement board for projects [18:29] since...todays smartphones are built on SOC s .. [18:29] pls post your views [18:31] Ash___, sure, but aren't the bootloaders pretty locked down in most cases? [18:31] Is anyone working on this issue? https://bugs.launchpad.net/snappy/+bug/1552458 [18:31] Launchpad bug 1552458 in Snappy "Sharing tmp directory across multiple commands in a snap app" [Undecided,New] [18:31] I hope this gets fixed soon so that we can prepare our snaps in time for 16.04 release [18:31] hi kyrofa.. [18:32] can u just dive deeper ...to get better understanding [18:33] Ash___, I'm not sure how much deeper we can go there. If phones were that easy to use, you wouldn't need to hack them to root them etc. [18:34] Ash___, you're right, all the hardware is probably there (other than stuff like GPIO etc. that's on a typical dev board) [18:35] yeah, we should leverage its power.... [18:36] Lets work together to use smarthone as a embedded system's heart [18:39] Ash___, honestly I'd rather use something a bit more open [18:42] yeah, u r correct...even me too like to use in the same way....but as we see...the prices of smartphones are becoming cheap..in terms of prices and they are loaded with all sensors...processor....display...wifi...bluetooth....4G..3g..what not... === devil is now known as Guest86684 === Guest86684 is now known as devil_ === devil_ is now known as devil__ === JanC_ is now known as JanC [20:57] I'd rather use something like an arm chromebook for dev / building as it has an integral screen and keyboard, and integrated IO ports [20:57] so easier to debug when it messes up