/srv/irclogs.ubuntu.com/2016/06/24/#snappy.txt

sergiusenselopio can you check https://github.com/ubuntu-core/snapcraft/pull/584 ... I have no vpn here02:08
derpSauceDumb question, can I install snapd on ubuntu 14.04?02:29
dholbachhey hey05:18
=== cpaelzer_ is now known as cpaelzer
netphreakHi, guys!07:03
zygagood mornig07:21
netphreakmorning :)07:22
netphreakAny news on Rpi3 support?07:37
morphismvo: ping08:13
=== davidcalle_afk is now known as davidcalle
mvomorphis: pong08:20
morphismvo: what's up with snapd 2.0.10 ? :-)08:21
mvomorphis: a bit of internal debate, I will enquire about this I think we can do one today otherwise08:21
morphisok08:22
didrockszyga: hum, seems that I'm stuck at removing one snap09:07
didrocks161  Done    2016-06-24T08:31:46Z  2016-06-24T08:31:46Z  Try "atom" snap from "/home/didrocks/work/ubuntu-core/snappy-playpen/atom/prime"09:07
didrocks162  Doing   2016-06-24T09:04:17Z  -                     Remove "atom" snap09:07
didrocksmount | grep atom returns nothing09:07
didrocksand as there are some operations in progress, I can't do anything09:07
zygadidrocks: what does 'snap change 162' say?09:11
didrockszyga: http://paste.ubuntu.com/17792496/09:14
didrocksso, I was able to stop it manually (some processes were hanging the mount point)09:14
didrockshowever, despite unmouting it, not snapd is stuck09:15
didrocksah no, it's done09:15
didrocks(after a while)09:15
didrocksstill the same change #09:15
didrocksbut snap change <this_number> still shows the error09:16
didrocks(which is puzzling)09:16
didrocksat least, now, the transaction is over, thanks zyga :)09:16
zygadidrocks: snapd will recover after 5 minutes09:23
zygadidrocks: we already know about issues when the service doesn't shut down cleanly09:24
zygajdstrand, tyhicks: i've tested the more strict version of snap-confine and it should be merged as tyhicks suggested09:26
zygaI'll adjust some tests and merge it09:26
SnowieHowdy all. Not sure where to report. Installing freecad on ubuntu as a snap didn't produce a working desktop shortcut or cli command. installing it from apt did. Just want to know where to let someone know?09:34
didrocksI think lool followed the freecad guys on their snappy journey ^09:36
ogra_well, works fine here10:00
ogra_freecad.FreeCAD the cli command it installs10:00
ogra_Snowie, ^^10:01
loologra_: did you get a desktop file?10:06
ogra_lool, hmm, i know ii used to have one ...10:07
ogra_seems gone10:07
ogra_or t least not found anymore10:08
ogra_the cli command is definitely still here though and the app starts and runs fine10:08
Snowieogra_: i did try that, but let me give it another go.10:11
ogra_Snowie, are you on an Ubuntu 16.04 install or is that some other distro ?10:12
Snowieogra_: standard 16.0410:13
ogra_k10:13
ogra_same here10:13
* ogra_ is off to the dentist ... (at least something positive on this horrid day :P )10:15
Snowieno joy http://paste.ubuntu.com/17794309/10:15
Snowieogra_: oh. good luck, hope it's not too terrible.10:15
ogra_nah, just a post surgery inspection .. all bad stuff already happened10:16
Snowieogra_: lol. ok, hope all is well then10:16
ogra_Snowie, try freec<tab> ... doesnt that expand to freecad.FreeCAD ?10:16
Snowieogra_: lol, yeah that did it. thanks10:17
ogra_(the binary is actually called like that, not just "freecad")10:17
Snowiestill no icon thought but cheers10:17
ogra_yeah, thats a bug10:17
ogra_the binary should also just become "freecad"10:17
Snowieogra_: and sounds like it's known by that comment too. ok cheers10:17
ogra_well, probably not by the freecad developer10:18
ogra_lool, ^^ can we get him that info somehow (i only know him from IRC)10:18
ogra_anyway ... -> out10:18
loologra_: I was looking for a public link to this email address but https://uappexplorer.com/app/freecad.vejmarie has a weird one10:24
=== bazhang_ is now known as bazhang
ogra_re ...12:32
zygajdstrand, tyhicks: I'd like a final yes/no vote on chdir branch12:41
zygajdstrand, tyhicks: after your decision I'd like to merge remaining branches and release new snap-confine12:48
zygaand work on snapd changes to make policy changes automatic12:48
zygaso that refreshed policy is applied when needed12:48
jdstrandzyga: I responded in the PR13:05
jdstrandzyga: and yay on refreshing policy as needed as being up next :)13:06
jdstrandzyga: interestingly, the apparmor side of that bug (which is not needed for your work) is close to my next thing to work on :)13:07
zygajdstrand: thank you, looking now13:08
zygajdstrand: good point, I'll make the change now13:09
zygajdstrand: cross-distro concern, how can we simplify our work to not have to synchronize various apparmor abstraction across the distros13:09
jdstrandzyga: this isn't actually just a cross distro concern and something we've thought about all along. a) abstractions don't change that much and b) when they do, we push the change both to apparmor upstream and to snapd policy so snapd can realize the benefits immediately13:13
jdstrandwe can periodically prune the duplicate rules in snapd and say snapd required apparmor userspace version x.y.z13:14
jdstrandrequires*13:14
jdstrandzyga: and thank you for merging the arg filtering branch-- it's been a long time coming :)13:17
jdstrandzyga: once snap-confine and snapd 2.0.10 land, that will allow me to fix a whole slew of policy bugs in 2.0.11+13:18
dpmdholbach, good work with summarizing the knowledge extracted from the playpen :)13:24
ret2libchi! for what you know, has there been any attempt to create an opensource store/repo for snaps?13:30
ogra_ret2libc, not for ubuntu .. but see the mailing list, there is a discussion about stores on other distros13:31
ogra_(the "store" is just a webserver after all )13:32
kyrofaret2libc, indeed, keep an eye on the mailing list, efforts are ongoing13:32
zygajdstrand: I need to fix debian-8 builds by taking dpkg-vendor patches from alioth13:33
zygajdstrand: please ignore debian-8 build failures for now13:33
ret2libcogra_ kyrofa thanks, i'll have a look at it13:34
stormchaser3000is there a way i can get my application i have installed from .snap packages to use the system theme?13:35
stormchaser3000and is snapd available on debian 8?13:35
zygastormchaser3000: not in debian 813:35
stormchaser3000oh ok13:36
zygastormchaser3000: system theme support is being explored, it's not easy due to gtk instability with theming13:36
zygastormchaser3000: but we are exploring how to support this13:36
zygastormchaser3000: and there are some technical bits that landed that make it possible to do pratical experiments now13:36
stormchaser3000does snapd work on OpenSUSE tubleweed?13:37
dholbachdpm, thanks13:38
ogra_if it doesnt yet, it will soon13:42
zygajdstrand: https://github.com/snapcore/snap-confine/pull/48/commits/0e690b310d1ce4fb772fab3085015897d62bf7d013:44
zygajdstrand: FYI, just in case I messed up something13:44
kyrofasergiusens, ping13:53
zygajdstrand: https://github.com/snapcore/snap-confine/pull/50/files14:19
ret2libccan snap already run on other distros?14:27
ogra_ret2libc, yes, in several ( zyga has a list i think)14:27
ret2libcwow, that's cool! i really hope it will be adopted by others too14:28
kyrofadholbach, I'd bring up the client cancellation (the broader issue you mentioned) in the channel, but there are too many conversations happening there right now :P14:30
zygaret2libc: yes!14:30
zygaret2libc: there are packages for fedora, arch and gentoo14:30
zygaret2libc: I'm working on packages for suse14:30
zygaret2libc: there's also a package in debian that propagates to ubuntu (snap-confine) and soon snapd too14:31
zygaret2libc: and from debian and ubuntu to many other distributions14:31
zygaret2libc: note that today snappy doesn't support confinement on distributions that don't use the ubuntu kernel, we are working on upstreaming everything and enabling other distributions to support the whole security14:31
ret2libcthat's really nice, zyga!14:31
zygaret2libc: if you have any questions about that I'm all ears :)14:32
dholbachkyrofa, yeah :)14:32
dholbachmaybe a bug report would work better14:32
ret2libczyga: i didn't you were changing the kernel to add features for confinement. aren't you using cgroups?14:32
ret2libcand apparmor?14:32
kyrofaret2libc, among other things14:32
zygaret2libc: we are using cgroups but that's very minor and it's not used most of the time14:33
zygaret2libc: most of the patches are apparmor features that we developed to make this really solid14:33
kyrofaret2libc, https://developer.ubuntu.com/en/snappy/guides/security-whitepaper/ if you're curious14:33
zygaret2libc: those are being upstreamed and I'm looking at building supporting kernels for gentoo and arch14:33
ret2libcahh that's nice! thanks kyrofa14:33
zygaret2libc: but this work is still some time away14:33
ret2libczyga: are those patches available?14:34
zygaret2libc: of course :)14:34
zygattps://git.launchpad.net/~p-pisati/ubuntu/+source/linux/14:34
zygahttps://git.launchpad.net/~p-pisati/ubuntu/+source/linux/14:34
zygagood people tell me that the apparmor features are posted to mainline but it's a process as you probably know14:35
zygaret2libc: there are snappy branches there that contain everything required14:35
zygaret2libc: it's really just the ba14:36
zygaret2libc: it's really just the brand new apparmor features + corresponding configs that make snappy security work14:36
zygaret2libc: seccomp and userspace apparmor bits are already upstream14:36
plarsfgimenez: elopio: Hi, did you see the error I sent when I tried to run it from the branch?14:37
ret2libczyga: i see. thanks a lot for those info14:37
jdstrandzyga, niemeyer: fyi, I'm taking a few minutes to clean up/expand docs/interfaces.md14:40
niemeyerjdstrand: Sweet14:41
niemeyerjdstrand: Btw, there's a problem we need to sort out with the network interface.. zyga is aware of it and looking into it, but it'd be nice if you two could discuss the issue too14:41
jdstrandniemeyer: see your inbox on cleaning up 'Usage'14:41
niemeyerjdstrand: Apparently even a boring network client right now depends on network-bind to do DNS, which kills the point of having the separation14:42
jdstrandthat is surprising14:42
jdstrandis this an i386 thing?14:42
jdstrandcause that might be the socketcall issue14:42
niemeyerjdstrand: Would be good to get that fixed, either by understanding what's going on and fixing it, or by killing network-bind altogether if we cannot avoid the dependency14:42
niemeyerjdstrand: I don't know, zyga has the details14:43
jdstrandis there a bug?14:43
niemeyerzyga: ^14:43
jdstrandok, zyga, please fill me in and with a reproducer14:43
jdstrandcause we've had the separation and its worked for a while. curious what changed14:43
popeyjdstrand: wrt bug 1589671 - I have 2.0.9 and still see the issue, or a similar one - http://paste.ubuntu.com/17803532/14:47
ubottubug 1589671 in Snappy "apparmor failure on udev with opengl interface" [Medium,Fix released] https://launchpad.net/bugs/158967114:47
=== chihchun is now known as chihchun_afk
jdstrandpopey: that's a different issue14:47
popey\o/14:48
popeyI love finding these and keeping you in work :)14:48
popeydo you need me to file a bug for it jdstrand ?14:49
jdstrandyes please. add the snapd-interface tag and the udev denials14:50
popeyokay, thanks.14:52
popeyok, filed bug 159598714:54
ubottubug 1595987 in Snappy "udev denials " [Undecided,New] https://launchpad.net/bugs/159598714:54
jdstrandthanks14:55
gouchisame error here : https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/157086015:03
ubottuLaunchpad bug 1570860 in snapd (Ubuntu) "Love2D needs udev access" [Medium,Triaged]15:03
gouchiabout /run/udev/data/c**15:04
arcade_droidI created a suggestion on Steam's Github to start using Snaps or flatpaks to distribute games in Steam. https://github.com/ValveSoftware/steam-for-linux/issues/4512 Now, the question is, is it possible to partially update a snap to avoid re-downloading 8+GB of data to patch one, simple thing?15:05
arcade_droidFor example.15:05
popeygouchi: ooh, you're looking at love2d?15:06
popeyawesome, I had a play with that a while back but not looked recently15:06
popeywould... "love" to see that snapped15:06
gouchipopey: another project ;-)15:07
popey:)15:07
popeyjdstrand: did I need to file a bug about 32-bit binaries, or was that a 'wontfix'?15:07
gouchipopey: but I like also love2d ;-)15:07
jdstrandpopey: there is a bug already. it is likely won't fix15:07
popey:(15:08
popeyno wine in snaps15:08
popeythat's a shame, having wine/libwine would be a neat way to package up some windows apps (or games) in the store15:08
ret2libczyga: what are exactly those new apparmor features that you want to add?15:09
zygaret2libc: you'd have to go through the patches, there's quite a lot I've heard15:09
zyganiemeyer, jdstrand: I didn't file the bug for this yet15:10
jdstrandpopey: wine doesn't mean 32bit only15:10
zygajdstrand: and FYI, I don't quite know what the root problem is, I tried using spread (a go binary so it might be go specific) and it happily created variou sockets and tried to bind them on startup15:11
zygajdstrand: let me pull the strace log and report this15:11
niemeyerzyga: Can we please get a bug with a reproducer?15:11
niemeyerzyga: Otherwise it'll fall through the cracks15:11
zyganiemeyer: yep, just doing that now15:12
niemeyerzyga: Thanks!15:13
arcade_droidNot sure if my previous message managed to send itself, my connection is a bit wonky. I'll ask again. I created a suggestion on Steam's Github to start using Snaps or flatpaks to distribute games in Steam. https://github.com/ValveSoftware/steam-for-linux/issues/4512 Now, the question is, is it possible to partially update a snap to avoid, for example, re-downloading 8+GB of data to patch one, simple thing?15:13
popeyjdstrand: only 32-bit wine can run 32-bit windows apps, only 64-bit wine can run 64-bit windows apps, and not 32-bit ones AIUI15:13
* popey is getting deja vu15:13
popeyhave we had this conversation already? :)15:13
jdstrandpopey: sure. my point is that you can still ship 64bit wine to run 64bit wine apps15:15
jdstrandpopey: and 32bit wine to run 32bit wine apps15:15
jdstrandarchitectures just needs to match15:16
popeyso 32-bit wine will work on ubuntu-core i386? but not on ubuntu-core amd64?15:16
jdstrandI understand that doesn't address 32bit wine on 64bit machine, but I think there is still good things to be had15:16
jdstrandpopey: sure, why not?15:16
popeywe're in circles :)15:17
popeymy problem is that 32-bit wine doesn't run on amd64 ubuntu-core15:17
popeyand you said earlier that's a wontfix?15:17
jdstrandpopey: you were too general with this statement: "no wine in snaps"15:18
popeyhah, okay15:18
jdstrandpopey: that is not accurate. you *can* have wine if wine matches the arch15:18
popeyok, so a more specific question would be "do we support 32bit binaries in 64-bit host ubuntu-core?"15:19
popeythis isn't a wine specific issue is it?15:19
popey(so skype i386 on amd64 would be equally problematic)15:19
zygajdstrand, niemeyer: https://bugs.launchpad.net/snappy/+bug/159599315:19
ubottuLaunchpad bug 1595993 in Snappy "go binary (spread) uses bind on startup, requiring network-bind" [High,New]15:19
jdstrandthis is a kernel limitation with seccomp15:19
fgimenezplars, looking into it now15:20
ret2libczyga: ok will do!15:21
zygajdstrand: I think that bug above requires some deep dive into go to understand15:21
zygajdstrand: but I wonder if there's something we could do with seccomp filtering to let it be15:21
zygajdstrand: but I don't know, looks terribly like those very carefully profiled security things that only allow a given sequence of syscalls15:22
jdstrandzyga: ok-- it seems it is pretty clearly wanting to use socket. not sure what the problem is?15:22
zygajdstrand: nothing in the code does this15:22
zygajdstrand: it's some startup thing in go or maybe libc15:22
jdstrandsomething in the code is doing it :)15:22
zygajdstrand: and this means that all the software will require network-bind in effect15:22
jdstrandbut that's not true15:23
zygajdstrand: not explicitly, this might be something each executable starts to do15:23
zygajdstrand: I'll dig around, I wanted to report this first15:23
jdstrandthere are plenty of applications that don't need network-bind to use the network15:23
jdstrandit might be a go thing, and yes, we might be able to do arg filtering somehow15:24
jdstrandzyga: why is this 'high'?15:25
jdstrandzyga: it only affects go and people can always specify 'network-bind' which is autoconnected15:26
jdstrandI'm not saying it shouldn't be fixed, I'm saying that it probably shouldn't trump other high priority work15:26
zygajdstrand: I set it to high to investigate what the cause is; if there's something potentially causing many programs to require network-bind without knowing ti15:28
zygait*15:28
jdstrandzyga: so, this application is very clearly binding to a port on the loopback: bind(4, {sa_family=AF_INET6, sin6_port=htons(0)...15:28
jdstrandthat says that network-bind should be used15:28
jdstrandmost programs don't need that15:29
jdstranda go program might, but, so?15:29
jdstrandanyway, yes, it is worth investigating15:29
zygajdstrand: but it's not doing this in the go code, there's no bind there anywhere15:29
zygajdstrand: I want to check if this is endeminc to go runtime15:29
jdstrandbut I'm not worried by this15:29
jdstrandit might be. go does all kinds of stuff15:30
aatchisonHeyo15:30
jdstrandif you look at netstat -atuvpn, you should see it is listening on a port15:30
aatchisonI'm getting the encrypted user directory apparmor error!15:30
jdstrand(one chosen by the kernel)15:30
jdstrandaatchison: that is on the verge of being fixed with the pending snap-confine upload15:31
aatchisoncool15:31
aatchisonhow soon:P I just need a workaround if I can get it15:31
aatchisonCan't tell what's going on15:31
jdstrandaatchison: https://bugs.launchpad.net/snappy/+bug/1574556 has a workaround15:31
ubottuLaunchpad bug 1574556 in ubuntu-core-launcher (Ubuntu Xenial) "apparmor denials reported for encryped HOME" [Medium,Triaged]15:31
aatchisonawesome, thanks15:32
popeyjdstrand: okay, thanks for clarifying :)15:38
popeyI promise not to ask you about 32 bit again ㋛15:38
jdstrandhehe15:40
* jdstrand -> errand15:40
zygajdstrand: the issue is now well-understood15:48
zygajdstrand: I'll look at it next week, I want to focus on bind mount support and next release of snap-confine15:48
zygajdstrand: before you EOW today, can you weight in on https://github.com/snapcore/snap-confine/pull/50 please?15:56
slangasekzyga: fyi, snap-confine 1.0.33-1 has been accepted through Debian NEW now (including source package rename), so should also find its way into yakkety soon16:19
slangasekoh16:19
slangasekexcept that requires a merge16:19
slangaseker, no it doesn't, because it's a new source package name so it'll just take over the binary name16:19
joc_kyrofa: hi, do you how to easily go about setting default_plugin_output correctly in the list plugins tests of snapcraft? (after adding new plugin)16:20
kyrofajoc_, hahaha, aren't those lovely tests?16:20
joc_indeed, super lovely :)16:21
joc_kyrofa: do i need to set some environment variable on my local console to make sure i have correct output width or something?16:25
kyrofajoc_, honestly what I do is I copy/paste the "actual" output16:26
zygaslangasek: that's great news, thank you16:26
kyrofajoc_, watch the test fail, steal the output16:26
kyrofa= 100% useless test16:26
* zyga -> dinner16:47
plarsfgimenez: so running from the branch still doesn't work for me, but running uner checkbox I'm seeing a lot better results running on an allsnaps image vs. classic16:49
fgimenezplars, great! it would be nice anyway to have better logs in both cases, i'm not able to reproduce your error http://paste.ubuntu.com/17809595/ which version of go are you using?16:52
plarsfgimenez: 1.6.116:54
fgimenezplars, that should work.. are you executing from the gopath (not from a symlinked dir)? iirc we needed that when building from branch, not the case anyway16:56
plarsfgimenez: hmm, no I'm not sure what you mean by symlinked dir, I was running from the dir of my checkout. Which I guess go just totally ignores. As soon as the run with checkbox finishes, I'll switch to the one it pulled into my GOPATH and try from there16:57
fgimenezplars, ok let me know how it goes17:00
sergiusenskyrofa pong?17:01
kyrofasergiusens, I was going to ask you a question about the qmake plugin, but I asked in the PR instead17:02
joc_kyrofa: please please please dont land any other plugins before me, i dont want to have rebase and do that all again :p17:03
kyrofajoc_, muhahaha17:03
kyrofajoc_, I've done it twice now, stop whining!17:03
kyrofasergiusens, we really need to toast those list_plugins tests17:04
sergiusenskyrofa we do, but they got a whole lot more special now, didn't they ;-)17:05
sergiusenselopio is the triggered on https://github.com/ubuntu-core/snapcraft/pull/566 running?17:13
elopiosergiusens: no, we are redeploying jenkins again.17:17
jdstrandzyga: done17:17
elopiosergiusens: like 30 minutes to go.17:18
sergiusenselopio yay17:21
sergiusenselopio doesn't matter as I added a comment to that PR for kyrofa ;-)17:21
sergiusenselopio just interested in the adt and examples on that one as snapcraft.internal was touched. If it fails and units pass we have more work to do ;-)17:22
sergiusenszyga how is it going with the font interface, do you know?17:23
elopiosergiusens: yes, when the branch is ready kyrofa can run adt or examples locally :) Or I can help, I have plenty of testbeds around.17:27
elopiojenkins might be ready earlier.17:27
=== devil is now known as Guest24542
aatchisonWould anyone be interested in helping me hack on mycroft snap today?17:52
zygasergiusens: we have the content sharing now, with somewhat different design (only one content can be consumed at a time)17:52
zygasergiusens: with some more work and a test case we should be able to use that to share classic fonts17:53
zygasergiusens: I'm looking at finalizing the snap-confine side of content sharing now17:54
zygasergiusens: do you have a snap that can be used to test this?17:55
zyganote that we don't have the global sharing part yet (we need to allow all canonical-published slots to work this way)17:57
kyrofaelopio, sergiusens that branch is ready for another look. Do I need to run something locally, then?17:57
sergiusenszyga there are non, maybe start big and use kde? :-P17:58
elopiokyrofa: maybe ./runtests.sh snaps --skip-install17:58
elopioif you have a xenial vm, you could run with the install using --ip localhost.17:58
kyrofaelopio, I do, I'll use it17:59
sergiusensaatchison hey, so where are you at with this?17:59
zygasergiusens: kde would be nice but I'd rather have others build something I can split17:59
kyrofaelopio, though it's not localhost. Can I use user@ip instead?17:59
elopiokyrofa: I think that the user is hardcoded to be ubuntu. There's a bug for that.18:00
kyrofaelopio, :(18:00
aatchisonI'm having some issues all around, but I can build a snap. I've just included speech-dispatcher as a stage-package. I could use some help with the pulseaudio interface stuff, as I don't see the interface existing18:00
kyrofaI knew making a VM without ubuntu was dumb18:01
kyrofaI'll just --skip-install18:01
aatchisonI finally figured  out that I needed to use the app armor work around, because I have an encrypted home directory18:01
elopiokyrofa: well, actually making the testbed assuming that ubuntu was the user was dumb.18:02
aatchisonhttps://github.com/MycroftAI/snapcraft-mycroft-core18:02
aatchisonthere is my yaml, if one would like to try18:02
kyrofaelopio, heh18:02
elopiokyrofa: but on your vm you can clone, and run from there. I think you will have to mkdir /home/ubuntu18:02
kyrofaelopio, I seem to remember there being issues using snapd from newly-created users18:02
elopioplease file bugs for anything that makes that experience awful. I'll fix them next week.18:03
sergiusenselopio I've updated #59018:03
sergiusensaatchison but does it work with --devmode, pulseaudio integration that is?18:04
aatchisonI'm getting this error: ALSA lib conf.c:3750:(snd_config_update_r) Cannot access file /usr/share/alsa/alsa.conf18:05
kyrofaelopio, sergiusens crap. Ran out of hard drive space18:05
aatchisonI now see the pulseaudio interface when I run snap interfaces though, which didn't happen before18:06
sergiusensaatchison so pulseaudio != alsa (one may use the other, but they are not the same thing)18:06
sergiusensaatchison forget the interface, is that the error you get in devmode?18:07
aatchisonyeah, I thought that pulse would handle the alsa stuff18:07
elopiosergiusens: I think it is "inexistent" or "unexisting", not "inexisting". kyrofa can confirm.18:07
aatchisonyeah, installed with devmode18:07
sergiusensin other words, don't paint the house if the cement has not dried yet ;-)18:07
sergiusenselopio yeah, I sort of knew that but kept it :-P I can change if needed18:08
sergiusenselopio wait, non-existing is valid english ;-)18:08
sergiusensoh, test name :-P18:08
kyrofasergiusens, elopio nonexistent18:09
elopiokyrofa: I use unexisting. Is that wrong?18:09
sergiusenskyrofa elopio inexisting is also valid, just checked the dictionary ;-)18:10
kyrofaHahaha18:10
kyrofaFine fine, they're all valid. Stupid english18:10
kyrofaJust another reason to learn spanish I guess18:10
zygakyrofa: I'm in a bind now18:11
kyrofazyga, what's up?18:11
zygakyrofa: how come I learned english and not spanish as a kid18:11
kyrofaHahaha18:11
kyrofaYeah no kidding18:11
zygakyrofa: just reacting to your comment above :)18:12
kyrofazyga, does learning english make it harder to learn something else?18:12
zygakyrofa: yes, very18:12
kyrofaI can imagine18:12
zygait made me lazy18:12
zygaall the books and movies are in english18:12
sergiusenselopio kyrofa there, changed it completely so no grammar flame war can happen18:13
elopio:)18:13
sergiusensaatchison oh, why would you need access to that; the core image where this runs on top of doesn't have alsa18:14
sergiusenszyga ideas for that? ^18:14
aatchisonahh, I see. I know that were is an alsa snap, but...18:14
sergiusensaatchison no there is no alsa snap, just pulseaudio18:15
sergiusensaatchison what code is trying to do this and why?18:15
aatchisonmimic, out TTS program, is trying to use an alsa audio device. I don't know why it needs to access that file though18:16
aatchisonThere is pulse audio support in mimic as well18:16
zygasergiusens: alsa is in the kernel, it's always there but confinement refuses access18:17
zygaaatchison: do you have the denial log?18:18
zygaaatchison: and does the code you are working with support pulseaudio?18:18
* zyga is super sleepy18:19
aatchisonhttp://paste.ubuntu.com/17814234/18:19
aatchisonthere is the audit log18:19
aatchisonyeah, it does support pulse audio18:19
zygalooking18:19
aatchisonthanks:)18:20
zygaaatchison: yes, that is clearly alsa18:20
sergiusenszyga his application fails as it wants to access alsa's config18:20
zygasergiusens: those are harmless18:21
zygaaatchison: does this application support pulseaudio as a sound sink?18:21
sergiusenszyga in any case, that isn't a denial in devmode no is it?18:21
aatchisonI...believe so18:21
sergiusenssays ALLOWED18:21
aatchisonlet me check18:21
zygasergiusens: that config file is probably just not there18:22
zygaaatchison: you need libpulse or similar in your snap18:22
aatchisonahh, stage-packages?18:22
zygaaatchison: yes18:22
aatchisonawesome, ok18:23
aatchisonI'll pop that in there18:23
zygaaatchison: and you need o use the pulseaudio plug on that application18:23
aatchisonlike so?:  plugs: [pulseaudio]18:23
aatchisonunder apps:18:23
zygaaatchison: uner the app that needs it18:24
zygaaatchison: pastebin the snapcraft yaml somewhere18:24
aatchisonk, I think I have that bit right18:24
aatchisonk18:24
zygasergiusens: we need something like jsbin for snapcraft.yaml's18:24
kyrofasergiusens, qmake look okay, then?18:24
zygasergiusens: let people paste editable yaml18:24
zygasergiusens: and others to edit that and share18:24
aatchisonhttp://paste.ubuntu.com/17814586/18:26
aatchisonThere it is, didn't add lib pulse yet18:26
wligtenbergok, I am here as well aatchison :)18:27
sergiusenszyga http://linkode.org/  seems to be down, but that is what you want18:27
aatchisonwahoo!18:27
wligtenbergI was already lurking here :)18:27
aatchisonhehe18:27
aatchisonI'm swapping pulse sinks with pavucontrol while mimic is running, seems fine18:28
aatchisonI'll add that lib18:28
arcade_droid> Papers, please!18:29
wligtenbergaatchison, I installed it, which command to run it? mycroft-core.cli-client?18:29
aatchisonmycroft-core.mimic -t "hello" will run mimic18:30
sergiusenskyrofa did the --skip-install tests all work ok?18:30
aatchison.messagebus start, .skills-client start , .speech-client start or .cli-client start18:30
zygaaatchison: so alsa is a nogo, we could add an alsa interface but the problem is that alsa is harder and more limited and also, exclusive, so you'd kill all sound on the host18:30
kyrofasergiusens, still running, I'll ping you. But the code looks okay?18:30
aatchisonahh, ok18:30
wligtenbergtrying mimic results in: failed to create user data directory. errmsg: Permission denied18:31
aatchisonI'm trying with the pulse lib installed18:31
aatchisonoh, you have to use the workaround for encryped home dires18:31
sergiusenskyrofa yeah, all good18:31
kyrofaAwesome18:31
aatchisonhttps://bugs.launchpad.net/snappy/+bug/157455618:31
ubottuLaunchpad bug 1574556 in ubuntu-core-launcher (Ubuntu Xenial) "apparmor denials reported for encryped HOME" [Medium,Triaged]18:31
wligtenbergindeed, my home is encrypted18:31
wligtenbergaatchison: now it does a core dump because it cannot access /usr/share/alsa/alsa.conf18:34
aatchisonya18:34
aatchisontry the mycroft stuff :D18:34
aatchisonif I could at least get the thing to run with cli....18:35
wligtenbergthat is the alsa issue, that was mentioned just now?18:35
aatchisonyeah18:35
aatchisonI'm asking if there is a pulse only flag for mimic18:35
aatchisonadded: stage-packages: [libpulse0] , no dices18:36
wligtenbergaatchison, I get a permission denied on the python dist-packages but is is still referring to the snapcraft parts directory...18:36
aatchisonhrm18:38
aatchisonyeah, I had that happen before18:38
aatchisonI'm not sure why18:38
wligtenbergaatchison: do you remember how you fixed it? :)18:40
kyrofasergiusens, elopio what on earth is this? http://pastebin.ubuntu.com/17815416/18:40
kyrofaAlso, sorry about the lack of line breaks. /me looks at elopio18:41
kyrofaOh there it is: "Plugin org.apache.maven.plugins:maven-resources-plugin:2.6 or one of its dependencies could not be resolved"18:41
aatchisonum, no.. i had that problem before I reinstalled my OS, now I don't have it anymore18:42
kyrofaDangit... now I have to start that suite all over again?!18:42
aatchisonI pushed a new commit to the git18:42
elopiokyrofa: run just yours.18:43
elopio--filter18:43
wligtenbergsnapping the core18:43
elopioand the line breaks were solved in jenkins. I'm not sure I can do anything for the terminal. /me tries...18:43
sergiusenskyrofa network error or our test just broke and we need to update deps, not related to your stuff18:44
sergiusenselopio kyrofa echo interpret escape chars18:44
kyrofasergiusens, elopio both qt examples run fine18:44
elopioship it!18:44
elopiokyrofa: please file a bug for that maven one so I don't forget to debug it.18:45
kyrofaYay! sergiusens sound okay?18:45
sergiusenskyrofa elopio echo -e http://pastebin.ubuntu.com/17815693/18:46
kyrofasergiusens, ah! Nice18:46
sergiusenskyrofa yeah, should be good; elopio find the `echo -e` equivalent for `print` in python18:46
aatchisonok, compiling mimic with the --with-audio=pulseaudio flag, different results:D18:47
kyrofaShipped18:47
elopiokyrofa: but wait, when you see the tests running they print newlines, right?18:47
kyrofaelopio, as they're running, yes. But not for errors18:48
sergiusenselopio kyrofa standup, come on!18:48
elopiosergiusens: omw.18:48
kyrofaHaha, sorry, got distracted pressing the button18:48
kyrofaHey wait a minute... sergiusens isn't even here18:49
sergiusenskyrofa :-D18:49
kyrofaJerk18:49
wligtenbergaarchison, mmm to be sure I installed all updates and rebooted... no luck...18:51
sergiusenszyga http://linkode.org/ is up again18:52
wligtenberganybody else here, that would know why it tries to find a python lib from the parts directory where it got built?18:52
aatchisondang18:53
wligtenbergLet me set up a fresh 16.04 VM then18:55
wligtenbergthis is my dev machine, that got upgraded from 14.04, so it might have some old cruft in the way18:56
aatchisonthat's actually the story of my last machine18:57
aatchisono *snap I think I might have build it with pulse only support, about to push a new commit18:58
wligtenberglol, o snap :)18:59
aatchisonhehe18:59
aatchisonit's so close, I've seen it nearly run lol19:00
aatchisonnext ... serial port stuff :P19:00
aatchisonmimic with pulse worked!19:02
aatchisonone dwon19:02
wligtenbergah, cool!19:04
wligtenberginstalling the vm, haven't been much help yet :)19:04
aatchisonhehe19:05
aatchisonwell, since it takes so much time to find out that some bits are broken, if it builds at all, the more people building the better!19:05
aatchisonI updated the mycroft-core branch to use the correct cli entry point, if that will fly, we have mycroft ala cli19:06
wligtenbergaatchison: but from the version numbering it seems this was still using 0.6.x instead of 0.719:07
aatchisonahh, yeah, it's actually not building from a release anymore19:10
aatchisonI had to modify mycroft-core19:10
aatchisonso, it's on the branch feature/snapcraft19:10
wligtenbergah, I see19:11
wligtenbergso no popey yet?19:11
aatchisonactually, it can have that19:11
aatchisonThe mimic folks are working on a release with the precompiled voice19:11
wligtenbergL) did you hear the latest Ubuntu UK podcast?19:12
aatchisonso we don't have to cludge in this giant, slow flitevox file anymore19:12
wligtenbergsnapcrafting again19:12
aatchisonok, I effed it up19:15
aatchisonclean the pull!19:15
popeyyou making a mycroft snap?19:15
aatchisonmade another commit. I had my entry point all wring19:15
aatchisonyuuup:P19:16
popeysweet19:16
popeyi had a go at that19:16
popeynot straightforward19:16
aatchisonyeah, kinda complex19:16
aatchisonI just got mimic working though!19:16
aatchisonso, at the very least we can snap that up and your voice can live in snapspace19:17
wligtenbergaatchison, do I need to fully rebuild it? (it is still building the first run...)19:19
aatchisonsnapcraft clean19:20
aatchisonthat will clean all the way to the pull stage19:20
aatchisonsnpacraft clean -s build if you only want to clean to the build stage, etc19:20
wligtenbergok, running snapcraft (again)19:22
aatchisonit's running! no mimic voice for some reason, but hey19:23
wligtenbergah, can't wait19:24
aatchisonsweet19:30
sergiusenselopio why does this https://github.com/ubuntu-core/snapcraft/pull/590 not have examples in it, did you disable them?19:31
sergiusenselopio and 'waiting for status' for a while19:31
elopiosergiusens: jenkins is still not up, I'm testing it.19:32
elopioit shows autopkgtest because we have it configured in the github settings as required.19:32
aatchisonok, anything special that I might have to do to enable network connectivity?19:33
wligtenbergaatchison: did mimic work for you? I get an xcb_connection_has_error, shm_open() failed: permisson denied19:33
aatchisondid you try sudo snap install --devmode ?19:33
wligtenbergah, nope19:33
wligtenbergok, that helps, I got an hello from mimic19:35
aatchisonaha! plugs , network19:36
sergiusensaatchison network fr client side things or network-bind for servery ones19:37
aatchisonso glad to be at the "it's running at least" stage19:37
sergiusenskyrofa question about https://github.com/ubuntu-core/snapcraft/pull/580/files19:38
aatchisonclient side to reach the net19:38
sergiusenskyrofa seems the primed_set is not really used for anything now, is it?19:38
aatchisonbut, actually we will need server side too19:38
kyrofasergiusens, true, it doesn't need to exist, but I thought the need might arise to actually track them so I made it19:38
kyrofasergiusens, not necessary though19:39
sergiusenskyrofa ok, was really confused on how primed_dependencies made things work19:39
kyrofaHahaha, just the extra "if" is what solves the problem19:39
sergiusenskyrofa but it was actually the elif :-P19:39
kyrofaYeah... if it's misleading I'll remove it19:39
sergiusenskyrofa it is fine19:39
wligtenbergaatchison: ok, I can start the messagebus and cli-client, but it doesn't seem to be doing anything19:39
kyrofasergiusens, okay19:40
aatchisonmake sure you start the skills too19:40
aatchisonbus -> skills -> client19:40
wligtenbergah, I thought the cli-clinet did that as well19:40
wligtenbergaatchison: speechclient fails19:41
aatchisonyeah, it's looking for pocketsphinx still19:41
sergiusenselopio http://162.213.35.179:8081/ghprbhook/  (issue_comment and pull_request) has a "is timing out" message on github19:42
elopiosergiusens: yes, jenkins is not up yet :D19:42
aatchisonbut cli is giving me a message that device isn't paired, but gives no code. Wondering if it can reach the server19:42
elopiogive me a few minutes. I got one green examples execution. Waiting for the autopkgtest one before enabling.19:43
wligtenbergaatchison: yeah, I also get that, would that also prevent it from going into listening mode?19:43
aatchisonit should still be able to detect the wakeword locally, it needs pocketshpinx though19:43
aatchisonit should also be able to operate with cli only19:43
wligtenbergand how would I then interact with it?19:45
plarsIs there a good solution to running a snap, but not have it think it's running as root? Something I'm working on detects that and helpfully exits telling me I shouldn't run it as root19:51
plarsI don't see anything in the snapcraft schema that allows this to be specified, but then I also wondered about whether it would even have access to $SNAP_DATA and things like that19:52
kyrofaplars, I'm afraid not. Many projects do that unfortunately, for reasons that are not valid within a snap19:52
kyrofaplars, however, in my experience (two projects, apache and php-fpm) there are ways to say "please do as I ask"19:52
kyrofaplars, indeed, SNAP_DATA is owned by root19:53
plarskyrofa: a --just-do-it-dont-warn-me flag? :) I'll check, thanks!19:54
aatchisonwligtenberg, you should be able to just type into the cli whatever question you like19:54
aatchisoneg. 2 + 219:55
aatchisoneg. what's the weather19:55
kyrofaplars, yeah, something like --let-me-shoot-myself-in-the-foot-already19:55
aatchisonbut until it pairs, it will just ask you to pair19:55
wligtenbergaatchison: ok, that issue with no access to python libs, was also because I hadn't used dev-mode when installing. That does mean (if I understand it correctly) that it actually does a weird thing, because it tries to access the python lib from where it is built...19:55
kyrofaplars, for php-fpm it was -R19:55
aatchisonahh, maybe that's the del19:55
wligtenbergaatchison: indeed it asks me to pair :)19:55
aatchisonI'll try that19:56
aatchisonyeah, I have to check the server to see if it's actually trying to connect19:56
wligtenbergaatchison: that's the del?19:56
wligtenbergat least now I can work on my normal machine, instead of a vm19:56
aatchison*deal19:57
wligtenbergah, ok :)19:57
monsterjampHello19:57
aatchisonhello!19:57
wligtenberghi19:58
monsterjampI'm having trouble understanding how the snapcraft.yaml files are formatted and all the examples for the snapcraft.yaml files use make or autotools without passing any arguments. So my question is how would a snapcraft.yaml file look like using make with a target. e.g. on bash I would type "make release"20:00
wligtenbergwouldn't dev-mode also give it access to networking? I thought it would basically remove isolation20:00
aatchisonwell, it's not hitting the server for sure, that I ca nsee20:01
aatchisonhmm20:01
kyrofamonsterjamp, does `make` not use the `release` target?20:01
kyrofamonsterjamp, regardless, you can use the `make-parameters` option20:01
kyrofamonsterjamp, see `snapcraft help make` for more information20:01
kyrofamonsterjamp, but in most cases, it's just make -> make install, so that's what snapcraft does out of the box20:02
monsterjampI see, I haven't tried to make a snap yet, I was just following the "tour" and the tour seemed to avoid my question.20:03
kyrofamonsterjamp, ah ha. Well there you go!20:03
monsterjamp:D20:03
kyrofamonsterjamp, similarly, cmake and autotools have `configflags`20:03
kyrofamonsterjamp, you can run `snapcraft help <plugin>` to learn more about any of them20:04
monsterjampI see, thanks for the help. I'm gonna try to make a snap and see how it goes.20:04
kyrofamonsterjamp, any time! Let us know if you have any questions :)20:05
popeyfeel free to poke us if you have questions20:05
wligtenbergpopey, quick question. installing with --dev-mode removes all isolation, correct?20:06
popeyyou can also do "confinement: devmode" in the yaml20:06
kyrofaMy gift to the world (mainly sergiusens): http://pastebin.ubuntu.com/17820191/20:06
popeybut i dont think it removes all isolation,no20:07
monsterjampAlso I noticed that installing snaps doesn't need sudo, is that intentional?20:07
wligtenbergok, so would we still have networking isolation?20:07
wligtenbergmycroft has issues calling home :)20:07
aatchisonkyrofa, hahaha20:08
kyrofaaatchison, I have a recursion problem somewhere :P20:08
aatchisonsure looks pretty though20:08
elopiohum, I thought that it was slow building the snaps, when it's actually slow executing snap remove :/20:09
kyrofawligtenberg, devmode snaps still get installed in /snap/ and thus are isolated in that manner, but it doesn't require interfaces anymore20:11
kyrofawligtenberg, so it's completely unconfined20:11
wligtenbergkyrofa, so no limitations to network access then?20:11
kyrofawligtenberg, indeed20:11
wligtenbergok, aatchison, so no confinement issue then...20:12
aatchisonhmm20:12
aatchisonI added the network and network-bind plugs, and they are interfacing I can see20:12
kyrofawligtenberg, aatchison but you still have the fact that you're in an isolated container, with your dependencies bundled20:13
kyrofaisolated = dependencies bundled in that case, I guess20:13
kyrofasergiusens, figured out my problem20:17
aatchisonwligtenberg, I added the home plug, so mycroft can create those folders at least20:23
wligtenberggood idea, I have to go now, but I will look at it later. You can always ping me on slack if you want me to check something20:23
aatchisoncool:) thanks for helping me check this out!20:25
sergiusenskyrofa do  tell20:59
* sergiusens i going type slowly as he has popcorn grease on his other hand20:59
sergiusenselopio snapcraft/tests/test_yaml.py in the define PR, what gives?21:05
elopiosergiusens: sorry, I need more information. What is your question?21:06
monsterjampSo snapcraft makes the snap and I can install it but when I try to run my program via bash it returns "Bad system call"21:10
monsterjampsnapcraft.yaml: http://paste.ubuntu.com/17823434/ makefile: http://paste.ubuntu.com/17823441/21:11
elopiosergiusens: oh, I see. For some reason in #590 you removed the subversion lines: https://github.com/ubuntu-core/snapcraft/pull/590/files#diff-8dac611ed32f1d2128779826f0337076L20721:11
sergiusenselopio is it ok to readd it in this one?21:13
elopiosergiusens: sure, why not.21:14
sergiusenselopio this was me trying to work from the tablet and settling with vimdiff21:14
sergiusenselopio also confusing is merging versus rebasing, the panes swap :-P21:15
elopiosergiusens: no harm done.21:17
elopiosergiusens: speaking of confusing, I'm making a mess with this store integration test. It will only be able to run from an ubuntu-core branch, so when we land PRs. And I in order to test it, I need to propose two PRs. Ignore me for now.21:18
josephtmonsterjamp: the Debugging section here might help: https://developer.ubuntu.com/en/snappy/guides/security/21:19
monsterjampI think I'm gonna make a really program and see if I can make a proper snap of it21:35
sergiusenselopio I guess this needs an update branch to at least trigger adt https://github.com/ubuntu-core/snapcraft/pull/60021:39
elopiosergiusens: it sucks that we can't run update in other people's branches.21:40
elopioI guess that would be too much power. But I would trust you to use it for good :)21:40
sergiusenselopio well I am more for just using the main project when its a team thing21:47
sergiusenselopio just like I'd push to ~snappy-dev on launchpad for the team to be able to take over if required21:48
sergiusenselopio example tests failed now... so soon, so fast21:51
* sergiusens connects to the vpn21:51
sergiusenselopio I haven't seen the openstack "too many security groups" error in a while!21:52
elopiomaybe I didn't recover the cleanup job properly.21:53
monsterjampWell I was able to get a simple snap to build/run21:58
elopiodamn, yes, that's not doable in lgw01. I will need more bash superpowers to parse the output there.22:00
monsterjampI can't get my other project to work though22:11
monsterjampWhen I run it via bash it still says "Bad system call22:11
monsterjampI really wish there was a good offline makefile example they had22:17
monsterjampWhy does every example need a remote :/22:18
monsterjampPeople on ##linux are saying I'm getting "Bad system call" since the snap I'm making uses a different glibc version than what's supported by my kernel22:37
monsterjampSo I figured it out, I completely missed the part where you have to add interfaces for the snaps to work23:03
sergiusensmonsterjamp might want to install your snap with --devmode to play around a bit23:08
monsterjampWhat does devmode allow me to do?23:09
monsterjampIs it the same as using snappy-debug?23:09
sergiusensmonsterjamp it runs without confinement23:16
monsterjampOh, now I understand what confinement is23:16
sergiusenselopio seems master is no broken :-/ I'll crank up some fixes (adt)23:16
sergiusenselopio https://github.com/ubuntu-core/snapcraft/pull/60423:28
=== bazhang_ is now known as bazhang

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!