mupBug #1611083 changed: Users without xenial-updates/universe can't get snapcraft  version 2.11 tour. <Snappy:Invalid> <https://launchpad.net/bugs/1611083>00:12
mupBug #1611080 changed: snapcraft.io says snap find has --broad, but it doesn't <Snappy:Invalid> <https://launchpad.net/bugs/1611080>00:21
mupBug #1611094 changed: http://snapcraft.io/create/ mentions readmes in each tour subdirectory, they are missing <landscape> <Snapcraft:Triaged by didrocks> <Snappy:Invalid> <https://launchpad.net/bugs/1611094>00:21
mupBug #1611098 changed: snap install tab completion lacking filenames <landscape> <Snappy:New> <https://launchpad.net/bugs/1611098>00:24
mupBug #1611099 changed: snap install tab completion lacking filenames <landscape> <Snappy:New> <https://launchpad.net/bugs/1611099>00:27
mupBug #1611108 changed: snap install without sudo asks to login to snap store <apport-bug> <i386> <xenial> <Snappy:New> <snapd (Ubuntu):New> <https://launchpad.net/bugs/1611108>00:34
lpottera debian build plugin would be nice01:17
=== stokachu_ is now known as stokachu
=== mjl_ is now known as mjl
=== chihchun_afk is now known as chihchun
=== davidcalle|afk is now known as davidcalle
=== hikiko is now known as hikiko|afk
=== cydizen_ is now known as cydizen
tealegHey, anyone about?  I have a question.08:38
zygajdstrand: https://github.com/snapcore/snap-confine/pull/9908:38
mupPR snap-confine#99: Disable owner checks for 14.04-style private home <Created by zyga> <https://github.com/snapcore/snap-confine/pull/99>08:38
tealegIs there an easy way to pass environment variables into the environment of an app delivered by a snap?08:44
tealegI've done this currently by wrapping the binary in a shell script that is the publicly available app08:45
tealeg... but that seems to leave the binary itself without the permissions provided by the plugs I associated with the wrapper script.08:45
tealeg(that's my hypothesis at least)08:45
zygatealeg: can you give me a practical example08:46
tealegzyga: sure.08:46
zygatealeg: what you are doing works very well and is used by many apps already08:46
tealegzyga: I have an emacs snap08:46
zygatealeg: there's upcoming upstream support for defining environment in snapcraft.yaml but it's a long way to go (arguably very little works remains but it took as a while to get there)08:47
tealegzyga: when I run emacs from the snap, it cannot read files in my HOME directory, though the wrapper script has the home plug defined08:47
tealegzyga: (with strict confinement turned on, of course)08:48
zygatealeg: how do you determine that it cannot read files in the home directory?08:48
zygatealeg: do you see apparmor denials?08:48
tealegzyga: it tells me that - I try to open a file there, and it says it can't read it08:48
tealegzyga: I can look, just a mo08:48
zygatealeg: can you run 'journalctl -f' and try that now?08:48
tealegzyga: so, yes, apparmour is denying it08:49
tealegzyga: shall I paste the lines someplace?08:50
zygatealeg: yes, please08:50
zygaone line should be enouh08:50
zygaenough *08:50
zygatealeg: please also pastebin your snapcraft.yaml if you can08:50
tealegzyga: ok..08:50
tealegzyga: here's the apparmour: http://pastebin.com/wtxPkVTh08:51
zygaok, that's enough08:51
zygayou cannot open dotfiles08:51
zygaeven with the home plug connected08:51
tealegzyga: oh?08:52
zygathere's an ongoing discussion about this on the mailing list and on launchpad bug reports08:52
tealegzyga: let me try a non-dotfile :-)08:52
tealegzyga: yup, that's it!08:52
tealegzyga: thanks.  OK, I'll accept that as something ongoing for now.  Thanks for your time.08:53
ogra_mvo, wow, you keep the builders busy today :)08:53
zygaogra_: ? :)08:54
mvoogra_: yes, created a candidate ubuntu-core for the next stable update of ubuntu-core08:54
mvoogra_: (the snap)08:54
mvoogra_: its all in the candidate channel now, needs QA testing next08:54
ogra_well, the arm builds are still sitting there (as usual since a week)08:55
mvoogra_: I will do one-off uploads for pi2 and dragonboard kernels that make kernel.img/initrd.img real files, this is important to unbreak ubuntu-image. just fyi09:03
morphisogra_: ok, building kernel snaps with your build scripts doesn't really work, no I get: Warning: no boot file name; using 'C0A8B2C8.img'09:04
ogra_mvo, plkeas only dragonboard, i'm in the middle of setting up the auto-build for pc-kernel and pi2-kernel09:04
ogra_morphis, are you on the lates ?09:04
ogra_morphis, they work fine on LP09:04
mvoogra_: if that is ready today thats good enough, otherwise I will just do it, its not much work and will unbreak people09:04
morphisogra_: hm, let me try that then09:05
ogra_mvo, pc-kernel is ready in 10min or so09:05
mvoogra_: \o/09:05
ysionneauzyga: hmmm your refresh-bits script says I don't have systemd but I do :/09:06
ysionneauit searches for systemd-activate but indeed I don't seem to have it09:06
ogra_mvo, do we want a pc-kernel-i386 or should i just build two arches under the same name ?09:06
zygaysionneau: are you on yakkety?09:06
ysionneauI'm on Debian testing :o09:06
mvoogra_: pi2-kenrel is actually the one where this matters (the filename) and the dragonboard one of course09:06
zygaysionneau: or debian testing, yes09:06
mvoogra_: two under the same name seems ok, unless I hear otherwise09:07
zygaysionneau: i didn;'t have time to figure that out yet, how do you run socket activated services in more recent versions of systemd09:07
mvoogra_: its not clear yet if i386 will be "pc" as well for the gadget name09:07
zygaysionneau: if you figure it out please send me a patch09:07
zygaysionneau: that's something systemd changed upstream, maybe they just renamed the command09:07
ogra_mvo, well, pi3 also ises pi2-kernel, so i  dont think the gadget name is that important09:07
ysionneauzyga: to do that I usually just do a .service with a ListenStream part09:08
ysionneauone unit file for the socket (WantedBy=sockets.target) and one unit file for the service09:08
ysionneauah to actually run it09:09
zygaysionneau: :)09:09
ysionneausystemd-socket-activate <=09:09
ysionneauthis binary09:09
ogra_mvo, i'm picking 4.4.0-35-1 as the version. so we can bump the last part for package specific changes (the branch is set up for auto-build on commits, so if a new kernel lands we bump the version and it auto-builds (later i'll automate that and watch the linux-meta package in -updates)09:11
ogra_is the versioning ok with you ?09:11
ogra_(this is pc-kernel)09:12
zygaysionneau: please try to patch refresh-bits to use this09:12
ysionneauanyway I don't seem to need this since I will run on a target09:12
zygaysionneau: as I said, I'd love to have the patch, I'm just hacking on something eles now (snap-confine)09:12
ysionneauso I guess I'll just comment it since I'm in a hurry09:12
zygaysionneau: there's a bug in --host where it still looks for systemd-activate on the host09:12
ysionneauyep no problem I'll comment the code09:13
zygaysionneau: thanks!09:15
ogra_mvo, https://code.launchpad.net/~snappy-dev/+snap/pc-kernel ---> to build you do: bzr branch lp:pc-kernel-snap -> bump the version in snapcraft.yaml, commit -> bzr push lp:pc-kernel-snap ... go to the url and watch it build for i386 and amd64 :)09:17
mvoogra_: neat09:18
ogra_(or just request a manual build on the page if you dont want to bump the version)09:18
ogra_now setting up the same for pi2-kernel09:18
ogra_note that this comes all from the same branch, they just differ in their snapcraft.yaml09:19
ogra_(we should keep the Makefile in the branches in sync between them)09:20
ysionneauzyga: very cool ! your script succeeded in building snapd o/ Thanks! One small remark, you base your detection on the user space arch by using uname -m on the target, which does not work in case your kernel is aarch64 and user space is armhf. I hardcoded armv7l to make it work09:20
ogra_now the exciting moment ...09:20
* ogra_ watches the snaps being uploaded to the store09:21
ogra_(havent tested that yet)09:21
zygaysionneau: interesting, please feel free to report thos bugs so that at least the problem is not lost09:22
zygaysionneau: (straight on github)09:22
zygaysionneau: and if you have time please send pull requests09:22
mvoogra_: a pi2 kernel upload will not break anything, right? this unblocks my new u-d-f (and ubuntu-image) so I'm keen to put it into the store for testing09:22
ogra_mvo, well, how do you build it09:23
mvoogra_: manual, snapcraft snap09:23
mvoogra_: I just need to fix the symlinks09:23
mvo(as a one-off build)09:23
mvo(its trivial)09:23
ogra_mvo, btw, we need store people to remove the review tools block for kernel for pc-kernel https://myapps.developer.ubuntu.com/dev/click-apps/5507/ (can you approve them =09:23
ysionneauzyga will do the reporting at least, thanks09:24
mvoogra_: I can approve them, one sec09:24
ogra_mvo, well, i would prefer we use the new way right away to test the symlinks there too :) but if you need it right now, go for it ... my set up takes still 10-15min09:24
ogra_(thogh given the state of armhf builders it might end up being 3-4h)09:25
mvoogra_: 10,15min is fine, then I won't waste enegery on it, thank you09:25
mvoogra_: heh :) if 3-4h I may become too impatient ;)09:25
ogra_mvo, can you bump build scores if needed ?09:25
mvoogra_: but its fine, its literally 5min work for me09:25
mvoogra_: unfortunately I can't :/09:25
ogra_k, lets see ...09:26
mvoogra_: I think we should get auto-high-score just like for the old image builds09:26
mvoogra_: kenrels approved09:31
ogra_mvo, https://code.launchpad.net/~snappy-dev/+snap/pi2-kernel ... i asked for a score bump09:37
mvoogra_: ta09:37
ogra_mvo, for that ... same procedure as above ... either bump the version and commit/push ... or do a manual build through LP09:37
mvoogra_: neat09:38
ogra_for dragonboard i'll do a build in my own test branch since i cant really set up the snap package under the snappy-dev name when i dont have the correct name (i dont want to create cruft there)09:39
mvoogra_: +109:39
ysionneauwhen creating an interface, if I want to allow a snap to connect to a unix socket, do I just pretend it's like a file and I just give rw access to the file path ?09:41
ysionneauor does it need some other special rights since it's not really "just" a file?09:42
zygaysionneau: yes09:42
zygaysionneau: it's just a file09:42
zygaysionneau: you will also need to add appropriate system calls like connect and what not09:42
zygaysionneau: but those are easy to add in a whack-a-mole fashion, just keep editing the generated apparmor and seccomp profiles until both sides work09:43
zyga(plug and slot side)09:43
ysionneauyes but then I guess I can just use the network interfaces in the snap?09:43
zygaysionneau: did you see my artice about how to create new interfaces from scratch?09:43
ysionneauor is it cleaner if the "pimp" (that's my interface name) interface dierctly authorizes the network functions?09:43
zygaysionneau: that's subtly different, it's better to be explicit, over time the network interface may only work for AF_INET and AF_INET609:43
ysionneauzyga: nop, but so far it seems pretty simple09:44
zygaysionneau: so don't use it because it gives you extra thnigs you need, put the extra needs into your own iface09:44
zygaysionneau: zygoon.pl09:44
zygaysionneau: do read it please :)09:44
zygaysionneau: feedback is welcome and appreciated09:44
zygaysionneau: if it is real "connect to ip network" then do use the existing network/network-bind interfaces09:45
zygaysionneau: if it is something else, put it into the interface you are creating09:45
ysionneau11:44 < zyga> ysionneau: do read it please :) < ok I will!09:45
ysionneaubtw I created the "issue" on github for your script09:46
ysionneauand added information on the already existing issue about systemd activated sockets09:46
ysionneauzyga: ok then yes I need to add the syscalls in my interface since it's just for the unix socket09:47
zygaysionneau: note that we can now do partial argument filtering via seccomp09:47
ysionneau"partial" ?09:47
zygaysionneau: https://github.com/snapcore/snap-confine#seccomp09:47
ysionneaulike only putting a requirement on arg1 and not arg2 ?09:47
jdstrandwell, when snap-confine finally is SRUd09:48
zygaysionneau: (only integeres, we cannot ever see through pointers)09:48
ysionneauyep I know I've played with seccomp a bit in the past09:48
zygajdstrand: hello :)09:48
jdstrandwhich I think has been a good decision-- we'd have to adjust the Depends of snapd to be a version of snap-confine and that would've stopped snapd uploads :)09:49
jdstrandzyga: hi! :)09:49
ogra_jdstrand, do i have to poke you to get a package exception for "(NEEDS REVIEW) type 'kernel' not allowed lint-snap-v2_snap_type_redflag " for https://myapps.developer.ubuntu.com/dev/click-apps/5507/ ? the builds now come from automatic LP builds (like ubuntu-core)09:51
ogra_or is that a store people thing ?09:51
ogra_(builds now come from https://code.launchpad.net/~snappy-dev/+snap/pc-kernel )09:53
ysionneauI see stuff like that in some apparmor profile : http://pastebin.com/cuynSmmR09:53
ysionneauwhat is it? is this for unix sockets?09:53
jdstrandogra_: you do for the moment but my patch for ubuntu-core can easily be updated for the kernel (and gadget) snaps10:02
jdstrandogra_: do you have a list of registered core, kernel and gadget names that you want me to add?10:02
ogra_jdstrand, cool, i'll give you a list later today10:02
ogra_currently pi2-kernel and pc-kernel ... i have some hope we'll get a proper name for the dragonboard soon ... thats the last one in the list10:03
mvojdstrand: hey, do you have a ecryptfs home system and a spare moment to test something? sudo snap intsall --devmode --edge ubuntu-device-flash and sudo DEBUG_DISK=1 /snap/bin/ubuntu-device-flash core 16 --kernel canonical-snapdragon-linux --gadget canonical-dragon --os ubuntu-core --channel=edge -o $(pwd)/dragon.img gives me an an permission denied error on my ecryptfs system but not on my other system. plus no denias in dmesg and I'm a bit lost10:06
mvoand wonder if its reproducable on other ecryptfs systems10:06
jdstrandmvo: what's the denial? note zyga just committed something to snap-confine yesterday for that10:07
mvojdstrand: no denial that is the "funny" part10:07
jdstrandmvo: I can test in a vm easily enough10:08
jdstrandmvo: xenial system?10:08
mvojdstrand: strace shows me stat("dragon.img") gets a permissions denied, but only if I run it with snap-confine, if I run the binary directly its fine10:08
mvojdstrand: yeah, xenial10:08
mupBug #1612595 opened: 'Bad system call' when running python3 snap in strict mode <Snappy:New> <https://launchpad.net/bugs/1612595>10:10
jdstrandmvo: you said snap-confine-- is this the package from proposed?10:13
mvojdstrand: ups, sorry, ubuntu-core-launcher is the same10:13
mvojdstrand: I meant, when its running under confinement or bind mount stuff10:14
mvojdstrand: its not clear if its the confinment, probably not as no denials, but its something and I suspect it has to do with ecryptfs10:14
jdstrandpulling in -updates now and then will run the command10:14
mvojdstrand: and sorry for hijacking you in your morning :)10:15
jdstrandit's fine. almost done confirming10:15
jdstrandmvo: failed to create user data directory. errmsg: Permission denied10:17
jdstrandmvo: is that what you are seeing?10:17
jdstrandmvo: I see that with ecryptfs. without ecryptfs is works. I do have a denial: sec-xenial-amd64 kernel: [  463.066552] audit: type=1400 audit(1470997002.687:24): apparmor="DENIED" operation="open" profile="/usr/bin/ubuntu-core-launcher" name="/home/.ecryptfs/testuser/.Private/" pid=13878 comm="ubuntu-core-lau" requested_mask="r" denied_mask="r" fsuid=0 ouid=100110:18
ogra_mvo, ok, both kernels are building now ... https://code.launchpad.net/~snappy-dev/+snap/canonical-snapdragon-linux https://code.launchpad.net/~snappy-dev/+snap/pi2-kernel10:18
jdstrandmvo: perhaps you are hitting kernel rate limiting?10:18
ogra_i'll ping you when they are ready for store approval10:18
jdstrandmvo: let me see if zyga's commit yesterday fixed that10:18
ogra_bah, crap FTBFS10:19
mvoogra_: yay10:20
jdstrandmvo: yes, see 450b660ac91d4ced15185dbdbd2b547ae74fdcec10:20
mvojdstrand: this is not what I am seeing, htis error is fixed with the version in -proposed10:20
jdstrandis it?10:20
mvojdstrand: sorry, I should have mentioned this10:20
jdstrandproposed still has .410:20
mvojdstrand: well, in the latest snap confine upload10:20
jdstrandit isn't fixed there10:21
mvojdstrand: its also in the ppa:snappy-dev/image ppa10:21
mvojdstrand: yeah, its not accepted yet10:21
jdstrandI can try that ppa10:21
mvojdstrand: ppa:snappy-dev/image is the one10:22
mvojdstrand: https://launchpad.net/~snappy-dev/+archive/ubuntu/image/+sourcepub/6798247/+listing-archive-extra10:22
jdstrand.7's yeah, I'm there. trying with .710:22
ogra_hmm, looks like snappy-dev can not builod from a branch owned by ~ogra ...10:22
jdstrandmvo: upgrading to .7 it works fine10:24
jdstrandmvo: perhaps you are hitting rate limiting *and* your profile in /etc/apparmor.d/usr.lib.snapd.snap-confine didn't get updated?10:24
jdstrand(it's a conffile)10:25
mvojdstrand: oh, it works fine, the u-d-f is creating a dragon image?10:27
jdstrandmvo: oh wait, I mispoke10:27
mvo(i.e. downloading stuff etc)10:27
jdstrandError creating /home/testuser/dragon.img of size 3899999744 to stage image onto10:28
ogra_mvo, https://myapps.developer.ubuntu.com/dev/click-apps/5573/rev/4/ ready for approval10:28
mvojdstrand: woah, thats a differnt error than the one I got, vm size limitation maybe?10:28
mvoogra_: done10:29
ogra_i'll build a test image :)10:29
jdstrandmvo: it worked outside of ecryptfs10:29
ogra_(while waiting for the dragonboard kernel)10:29
mvojdstrand: oh, interessting10:30
mvojdstrand: the error is different than the one I got though, still interessting10:30
jdstrandAug 12 05:31:26 sec-xenial-amd64 kernel: [ 1346.914860] ecryptfs_encrypt_page: Error attempting to write lower page; rc = [-28]10:31
jdstrandAug 12 05:31:26 sec-xenial-amd64 kernel: [ 1346.914868] ecryptfs_write: Error encrypting page; rc = [-28]10:31
jdstrandmvo: that is my issue ^10:31
zygajdstrand: you ran out of space10:33
jdstrandit looks like I did10:33
jdstrandthat's weird10:34
jdstrandit completes in the non-ecryptfs10:34
jdstrandwhich has the same 'not enough space'10:34
* jdstrand tries to free up some space10:34
mvohrm, 4gb is the minimium right now :/ which is silly, 2 is probably fine10:35
jdstrandgimme a few minutes10:36
mvosure, no rush, I might consider lunch in the meantime :) fwiw, the error I get is "Error: Could not stat device /home/egon/tmp/10/dragon.img - Permission denied." (and strace shows that its indeed parted doing a stat() on that file and gets a permission denied error)10:38
ogra_mvo, before you go, please approve https://myapps.developer.ubuntu.com/dev/click-apps/4739/rev/10/10:39
mvoogra_: sure thing10:40
ogra_ubuntu@localhost:~$ snap list10:40
ogra_Name         Version              Rev  Developer  Notes10:40
ogra_pi2-kernel   4.4.0-1019-raspi2-1  4    canonical  -10:40
ogra_pi3          16.04-0.1            1    canonical  -10:40
ogra_ubuntu-core  16.04.1              215  canonical  -10:40
ogra_pi3 works fine, testing pi2 and dragonboard now10:40
jdstrandmvo: /home/egon/tmp is an interesting path10:41
mvojdstrand: :)10:43
mvoogra_: nice!10:43
ogra_mvo, fyi, once i know all images boot and run, i'll rip out all kernel code from livecd-rootfs, that will massively speed up ubuntu-core builds ...10:44
ogra_(a build should be below/around 5min then)10:44
ogra_happy lunching :)10:45
jdstrandError: Could not stat device /home/testuser/dragon.img - Permission denied.10:49
=== hikiko|afk is now known as hikiko
ogra_ubuntu@localhost:~$ snap list10:57
ogra_Name         Version              Rev  Developer  Notes10:57
ogra_pi2          16.04-0.7            12   canonical  -10:57
ogra_pi2-kernel   4.4.0-1019-raspi2-1  4    canonical  -10:57
ogra_ubuntu-core  16.04.1              219  canonical  -10:57
ogra_pi2 looks good as well ...10:57
jdstrandmvo: ok, I can confirm the issue. stat("/home/testuser/dragon.img", 0x7ffe650b4c40) = -1 EACCES (Permission denied)11:01
jdstrandmvo: I don't know why it is doing that11:02
jdstrandthe file exists11:03
jdstrandbut no denial in the logs suggests DAC11:03
mvojdstrand: thanks for confirming, its super confusing - and outside of ecryptfs it does work for you, right? i.e. in /root ?11:04
jdstrandyes, outside of ecryptfs it works fine11:05
jdstrandI thought it might've had something to do with the directory perms of the user since ecryptfs uses 700 for $HOME. that wasn't it11:06
mvojdstrand: utterly confusing, also working fine when I run it without ubuntu-core-launcher on ecryptfs11:07
* mvo really lunches now11:07
jdstrandmvo: feel free to lunch-- just trying some stuff. I get the same issue if I 'apparmor_parser -R /etc/apparmor.d/usr.lib.snapd.snap-confine11:08
ogra_ubuntu@localhost:~$ snap list11:09
ogra_Name                        Version       Rev  Developer  Notes11:09
ogra_canonical-snapdragon-linux  4.4.0-1022-1  10   canonical  -11:09
ogra_dragonboard                 16.04-0.3     2    canonical  -11:09
ogra_ubuntu-core                 16.04.1       218  canonical  -11:09
ogra_and here we go, dragonboard fine as well11:10
* ogra_ dances11:10
morphisogra_: can you give me again the link to your latest pi3 kernel snap?11:15
ogra_morphis, it is in the store (auto-submitted now)11:18
ysionneauzyga: I didn't follow your blog post yet but so far I just duplicated home.go builtin interface and modified it, but I don't see my interface when doing "snap interfaces". I added my interface in all.go11:18
morphisogra_: yeah, looking for a download link11:18
ogra_morphis, https://code.launchpad.net/~snappy-dev/+snap/pi2-kernel11:20
zygaysionneau: follow my whoole series please, it's lal documented11:24
* zyga has laggy link today11:25
=== chihchun is now known as chihchun_afk
jdstrandmvo: sorry, I think we need tyhicks11:45
ogra_mvo, http://paste.ubuntu.com/23049201/ ... 300 lines dropped \o/11:48
ogra_(well, actually more like 250 lines ... but still :) )11:50
morphismvo, niemeyer: can you guys merge https://github.com/snapcore/snapd/pull/1502 today?11:51
mupPR snapd#1502: Add an interface for tpm <Reviewed> <Created by jessesung> <https://github.com/snapcore/snapd/pull/1502>11:51
jdstrandtyhicks: http://paste.ubuntu.com/23049207/ . Note, depending on the diskspace you might need to rm the dragon.img between switching backing and forth from /home/testuser and /home/foo11:53
mvojdstrand: thanks so much12:07
ysionneauzyga: yeahh I forgot to add my interface to snap/implicit.go :' good it works now12:09
mupPR snapd#1502 closed: Add an interface for tpm <Reviewed> <Created by jessesung> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/1502>12:28
ogra_mvo, i'm building an ubuntu-core with the above livecd-rootfs change now, please dont publish this set until i did some basic local testing with it12:30
danwestjust got a messages from 2.14 that the 'copy' plugin was being deprecated in favor for the 'dump' plugin12:32
danwestbut dump does not seem to be documented on http://snapcraft.io/docs/reference/plugins12:32
popeydanwest: perhaps file an issue at https://github.com/ubuntudesign/snapcraft.io/issues12:36
danwestpopey, so I can do that but do we not have any notes, hints or something? looks like the syntax is completely different than 'copy'12:39
popeysure, one moment12:39
popeyhere's an example of a snapcraft.yaml which has been updated, linked to this so you can see the diff https://github.com/ubuntu/snappy-playpen/issues/21612:40
stokachuzyga: if a snap requires an interface, does that interface get automatically installed?12:40
popeycopy -> dump, files -> organize, basically12:40
zygastokachu: interfaces are not installed, they are a part of snapd12:40
zygastokachu: plugs and slots exits on specific snaps12:40
zygastokachu: except for the core snap that has some implicitly defined slots, those are also defined by snapd12:41
stokachuso if there is a juju plug do i need to make sure juju snap is installed12:41
zygastokachu: or anything else that provides juju slot12:41
stokachulike is there a way to tell my snap that it has dependencies on juju12:41
zygastokachu: but yes12:41
stokachuhow would a user of my snap know to install juju as well?12:41
zygastokachu: not at present12:41
zygastokachu: if the interface name is just juju this could be documented somewhere (or your snap could detect this and recommend something)12:42
zygastokachu: though right now that is not implemented as interface hooks are not yet implemented12:42
stokachudoesn't having dependencies on other snaps defeat the purpose?12:43
zygastokachu: it's not a dependency on a snap, it is a plug that is disconnected12:43
ogra_mvo, ok, a build after the change takes 5-12 min now (fastest arch is 5 min, slowest (s390x) is 13), just amd64 is done in 6min12:43
zygastokachu: that's a *big* differene12:43
stokachuzyga: right but you still have to install another snap to make the plug connected?12:44
zygastokachu: and connect it as well12:44
stokachuso the only way a user would know that is if they readme some documentation after installing my snap?12:44
zygastokachu: yes12:44
zygastokachu: later on your snap can detect this properly and advise the user12:44
stokachuwould it just install it automatically?12:45
zygastokachu: snapd? not at present; I cannot comment on future features that are not planned at this time12:45
zygastokachu: I would recomemnd that you raise this issue on the mailing list as it is an interesting use case12:45
zygastokachu: and I see how it would be interesting to offer more streamlined integration12:45
stokachuwell it's basically doing what apt does12:46
danwestpopey, thanks12:46
zygastokachu: I disagree, there's a big importand difference here; your snap doesn't need juju, it needs what the juju interface provides, a socket, maybe there are many versions of juju12:46
stokachumy snap does need juju though12:47
zygastokachu: or a very popular fork of juju called, say, fufu12:47
stokachui see12:47
zygastokachu: no, it needs juju *socket*, not some juju libraries or executables (as it cannot use those)12:47
stokachubut if i need to bootstrap i need to run juju executable12:48
zygastokachu: you have to include that in your snap, you cannot use executables from other snaps12:48
zygastokachu: that executable can use a juju socket from the juju interface to talk to some juju (or over the network to talk to anything)12:48
mupPR snapd#1550 closed: tests: base security spread tests <Created by fgimenez> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/1550>12:48
stokachuthat clears it up, thanks12:49
zygastokachu: not all the concepts from classic packages and dependencies map to snaps in obvious ways but I strongly believe we're building something better here;12:49
stokachuzyga: so do you think my snap is worth being a snap? i have to call out to other executables like lxc, juju, tail, etc12:50
popeydanwest: no problem12:51
zygastokachu: yes12:51
zygajdstrand: I looked at 14.04 support and it seems that some prctl arguments are not supported12:52
zygajdstrand: do you think it would be sensible to just not support them and not generate / use them in our seccomp profiles?12:52
mupPR snapd#1299 closed: create mir interface <Reviewed> <Created by kgunnfront> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/1299>12:53
jdstrandzyga: hrmm, that is problematic. note that 14.04 also doesn't have apparmor unix mediation12:55
jdstrandzyga: at least with apparmor we can update the tools and they will ignore unix rules on an old kernel12:55
jdstrandzyga: I'm not sure how to do that with seccomp. I guess check for them at compile time and conditionally add them?12:56
mupPR snapd#1671 opened: spread: Use /home/gopath in spread.yaml <Created by mvo5> <https://github.com/snapcore/snapd/pull/1671>13:07
stokachuneed some help with snapcraft, http://paste.ubuntu.com/23049396/ is packaging files twice, see line: 41213:10
stokachuand here is my snapcraft.yaml http://paste.ubuntu.com/23049400/, notice that usr/share still exists in the snap even though i have it to be removed under no-docs13:11
mupBug #1612654 opened: snap interfaces cmd should allow printing of detailed plug/slot info <Snappy:New> <https://launchpad.net/bugs/1612654>13:12
stokachusergiusens: ^13:13
roadmrhey folks! What's the interface I need for being able to use the setpriority syscall? (the application has a nice() call). Is it process-control IIRC? When will that be available? (it's not on my snapd 2.11)13:14
zygajdstrand: yep, we can do that13:15
zygajdstrand: for 14.04, we can update userspace too I guess (along with the kernel)13:15
zygajdstrand: so maybe the idea is to do nothing :)13:15
jdstrandzyga: well, with prctl, I think that is libc. I doubt we want to update that13:15
zygaah I see13:16
zygahmmm, you are right13:16
zygathough if it's just libc, we can hardcode the missing defines (somewhat iffy but it'd probably work)13:16
jdstrandso apparmor should be fine-- SRU the tools and they'll work fine13:17
jdstrandbut yeah, will have to come up with something for snap-confine13:17
jdstrandzyga: we could just distro patch snap-confine on trusty13:18
joc_roadmr: looks like it is in 2.12 which is somewhere in sru13:18
roadmrthanks joc_ !13:18
jdstrandzyga: pull out the ones that don't exist there. it is cheap13:18
kalikianastokachu: you need to remove it in the part it came from. the no-docs part doesn't contain any files13:18
=== JanC is now known as Guest34729
=== JanC_ is now known as JanC
stokachukalikiana: dont i have to define what to include as well if imove it up to the conjure part?13:19
zygajdstrand: yep, but what I'm doing now allows us to do it pretty easily13:19
stokachukalikiana: what about the duplicate files?13:24
stokachuah the python plugin is pulling in those files13:31
jdstrandogra_: fyi, finally circled around to adding pc-kernel and pi2-kernel to the review tools whitelist and it is in r708. I've not requested a store pull yet cause you said there was one more to add13:34
jdstrandogra_: so, ping me when ready13:35
ogra_jdstrand, well, we should probably add that in a separate commit, i'm not sure when niemeyer can actually get hold of sabdfl to finish the dragonboard kernel naming decision13:35
ogra_(but now i poked them both ;) )13:36
jdstrandroadmr (cc noise][): hey, can you pull r708 of the review tools. it isn't urgent for before the weekend, but sometime next week would be good13:36
roadmrjdstrand: sure, checking...13:37
jdstrandroadmr (cc noise][): there might be an exceedingly small r709 based on what ogra_ just said13:37
roadmrjdstrand: zise maters not, we do or do not :)13:38
jdstrandhehe, yeah :)13:38
roadmrjdstrand: ok, I'll pull 708 now so it's in the queue13:38
roadmrjdstrand: any rough ETA on possible 709? so I can remember to ping you $WHENEVER13:38
ogra_roadmr, btw, this is awesome ... having the snaps auto-land ... but ... is there a chance that we can also have the publishing automated some day (for now my morning task will be to go to myapps.d.u.c and click publish for all of the nightly builds, would be nice to not have to do that)13:39
jdstrandroadmr: no-- it is based on others deciding what to name something13:39
roadmrjdstrand: ok no problem, I'll just lurk here then :)13:40
jdstrandroadmr: I'll ping you-- you don't have to poll here13:40
roadmrjdstrand: awesome, thanks!13:40
mupPR snapd#1672 opened: tests: add serial-port interface spread test <Created by fgimenez> <https://github.com/snapcore/snapd/pull/1672>13:40
roadmrogra_: hm let me poke a bit at publish behavior. So this is a new revision of an existing snap, right?13:41
ogra_roadmr, yeah, daily builds of ubuntu-core13:41
roadmrogra_: (I vaguely remember those should be auto-published but I'm sure I'm wrong)13:41
ogra_at least for edge they should get auto publishing ...13:42
ogra_the other channels can stay on manual13:42
jdstrandI thought that was a flag that was toggleable by the publisher (ie, ogra)13:43
ogra_i wouldnt knwo where to toggle it then13:44
jdstrandthe store interface has changed since I last toggled that on something, so not sure it is still there13:44
ogra_perhaps it is at the "create new snap" page ... but ubuntu-core was created ages ago13:46
ogra_i definitely dont see such an option anywhere in the current UI for the existing package13:46
roadmrogra_: ok "There used to be an option to auto-publish - it's gone now"13:47
roadmron the store that is13:47
roadmrogra_: but cjwatson tells me there's an auto-publish thing on Launchpad13:48
ogra_yes, that is what we already use13:48
roadmroh and doesn't that do what you need? Colin says "(intended mainly for use for daily builds and such that publish to edge, but I'm sure there are other uses)"13:49
ogra_well, it is "Automatically Upload"13:49
cjwatsonthere are two things13:49
ogra_and that works fine13:49
cjwatsonautomatically upload and automatically publish13:49
mvojdstrand: I have an update for #1460 for you, I hope with my trivial changes it is now ready for merge13:49
mvojdstrand: (I'm cleaning out old PRs currently)13:49
cjwatsonon the edit page, it's the "Store channels:" widget13:50
cjwatsonso that is absolutely intended to be automatable right now and I believe that's in use13:50
ogra_i dont see any publish related bit here13:50
ogra_not sure if you have powers enough to see https://code.launchpad.net/~snappy-dev/+snap/ubuntu-core/+edit ?13:50
cjwatsonit's spelled "release" there actually13:50
cjwatsonI think because that's what the terminology is eventually intended to be, though right now it's inconsistent13:51
jdstrandmvo: I'll take a look. sorry I didn't circle back to it; it got deprioritized based on sprint outcomes so didn't get back yet13:51
cjwatsonlook under "Automatically upload to store", there's "Store channels" with several checkboxes13:51
ogra_nothing about release on that page for me either13:51
ogra_there is one checkbox per channel13:51
cjwatsonright, and under that it says "Channels to release this snap package to after uploading it to the store."13:51
ogra_(and only edge is checked, since we dont want to auto-upload to the others)13:51
cjwatsonright, so that is auto-publishing13:52
mvojdstrand: sure, totally fine, should be good now with my PR13:52
cjwatsonI'm looking at it right now on prod13:52
cjwatsonalbeit a different page13:52
cjwatsonogra_: screenshot13:52
mvojdstrand: (conflict resolved and review feedback addressed)13:52
cjwatsonogra_: so are you saying that this isn't auto-publishing to edge right now, despite you having checked that box?13:52
ogra_cjwatson, http://imgur.com/a/A29SS and http://imgur.com/a/qQPIj13:53
ogra_i get the thumbs up icon but still have to go to the specific revision, scroll to the bottom and click the publish button13:54
cjwatsonogra_: the text that you say isn't there is in fact there in your screenshot13:54
cjwatsonogra_: "Channels to release this snap package to after uploading it to the store.", right under the "Edge" checkbox13:54
ogra_ah, i thought there should be another set of checkboxes along with it13:55
cjwatsonthat is what those checkboxes do13:55
ogra_ok, well, it only uploads then ... as you can see in the other screenshot13:55
roadmrogra_: tip: the sliding thingy at the top right also allows you to flip publish status, no need to scroll to bottom13:56
roadmr"Publish your application", it will read if it's not published13:56
cjwatsonogra_: what am I looking at in that screenshot that indicates that?  it says "Package status is Published"13:57
ogra_roadmr, http://imgur.com/a/pfVa7 ... no sliding thing there :)13:57
ogra_cjwatson, published are the geen box icons13:57
ogra_cjwatson, reviewed and "ready to publish" are the tumbs up ones13:58
roadmrogra_: it's right there... "Package status is Published" followed by "Unpublish". That package *is* published13:58
roadmrogra_: if it were unpublished (actually, do try it; click on "unpublish") you'd get a "Pubish your application" clickable thingy right htere13:58
ogra_roadmr, the upload isnt13:58
ogra_roadmr, see what revision is selected on the left13:59
cjwatsonogra_: how long are you leaving it before you click publish?  because I'm seeing LP hitting the snap-release endpoint in our logs13:59
roadmrogra_: right, I see that...13:59
ogra_if i scoll down now, there is a publish button at the end of the page13:59
ogra_cjwatson, dunno, the last onse were in that state for about 1h or so13:59
cjwatsonogra_: next time this happens for that snap, please could you not hit Publish and ask me to look at it first?14:00
ogra_i yep14:00
cjwatsonAFAICS LP is doing everything it should14:00
jdstrandmvo: oh, neat! I didn't know you could access a private method from the test.go files with builtin.FooPrivateThing14:01
tedgSo I have a public snap that is published, but I'm getting a 401 unauthorized when trying to install it.14:01
mvojdstrand: yeah, that is the export_test.go pattern, make stuff public *only* for the tests this way14:01
jdstrandI wanted to do that with something else (that I fixed differently)14:01
cjwatsonand we're getting 200 back, so the store is *claiming* that it all worked14:02
tedg- Download snap "inkscape" (14) from channel "candidate" (received an unexpected http response code (401) when trying to download https://public.apps.ubuntu.com/download-snap/tIrcA87dMWthuDORCCRU0VpidK5SBVOc_14.snap)14:02
mvojdstrand: its really convinient in a lot of situations14:02
kalikianatedg: 'snap login' again14:02
jdstrandmvo: yes :)14:02
jdstrandmvo: thanks doubly for the PR-- I wouldn't have known that :)14:02
* jdstrand -> door14:02
tedgkalikiana: Ah, cool. That worked. Does it expire or something?14:03
tedgI wouldn't have thought a public published snap would require a login.14:04
roadmrtedg: it's not the snap's fault14:04
roadmrtedg: at some point you did login, so you have auth creds stored somewhere...14:04
roadmrtedg: but those go stale, that's why you get the 40114:04
tedgroadmr: Ah, I see.14:04
roadmrtedg: if you ever logged in, snapd would send the creds regardless of the snap's freeosity14:04
roadmrtedg: so 1) snap login fixes it now by manually updating the creds14:05
roadmrtedg: soon snapd will take care of refreshing things in the background so you don't have to reauth14:05
roadmrtedg: 3) sorry about that :(14:05
zygamwhudson, jdstrand: can I please have commit access to //anonscm.debian.org/collab-maint/snap-confine.git14:08
zygato the writable side14:09
ogra_mvo, hmm, seems snap refresh for ubuntu-core on the pi2 breaks uboot.env14:13
mvoogra_: in what way?14:13
ogra_after a frefrsh i just had the device sit at the uboot prompt ... a reset got it back booting14:13
mvoogra_: the very first image had a bug that would kill all vars on the first reboot (you reported that iirc). its not this issue, is it? that got fixed14:14
ogra_but after this http://paste.ubuntu.com/23049560/ ... so it worked then ... i have to check what happened with uboot when we have a new ubuntu-core to upgrade to ... i was to slow with attaching screen to see what happened14:15
ogra_mvo, no, then it wouldnt work fine after an extra reset14:15
ogra_i didnt see what actually happened, but fater the reset i saw it writing uboot.env before it attepted the boot ... so there was a saveenv somewhere happeneing14:16
ogra_anyway, with that one obstacle, upgrades seem to work14:17
ogra_the system behaves fine14:17
ogra_next reboot is broken agan14:18
mvoogra_: this looks like snap_core/kernel is unset14:19
ogra_and boots fine again after a reset14:19
mvoogra_: can you dump the environment?14:19
ogra_(and the writing uboot.env is a red herring, it does that every boot)14:19
mvoogra_: I suspect it boots back to the previous core? or is it actually booting the write one?14:19
ogra_it boots to the new core ... seems all fine after calling a reset14:19
ogra_gime a sec while it finished the succesful boot14:20
jdstrandzyga: I'm not a Debian dev (always been on my list, but alas)14:20
* ogra_ reboots14:20
ogra_bah, and now it doesnt fail14:20
ogra_how weird14:20
ogra_this seems to be random14:21
* ogra_ reboots franticly 14:22
DrZHi All14:24
ogra_mvo, could it be that when we update ubuntu-core we update the snap_core var but unset snap_kernel or some such ?14:25
mvoogra_: I don't know, the dump of the environment (or a copy of the uboot.env file for me) would be great14:25
mvoogra_: than I can debug14:25
ogra_mvo, yeah, but it now boots reliably14:26
ogra_so the dump wouldnt help14:26
mvototally random?14:26
ogra_it did that in two boots after the update14:26
DrZDoes anyone find the whole parts thing really confusing??14:26
ogra_and since then the last 5 just worked14:26
DrZI don't understand it14:26
ogra_and i'm on the right ubuntu-core (230)14:26
mupPR snapd#1671 closed: spread: Use /home/gopath in spread.yaml <Created by mvo5> <Merged by niemeyer> <https://github.com/snapcore/snapd/pull/1671>14:27
ogra_mvo, oh, i'm worng it actually switched back to 219 ... so let me try that again ...14:27
* ogra_ snap refreshes ubuntu-core14:27
DrZHow do I know what mystical keywords to use for parts?14:28
ogra_mvo, eeek ... it now refreshes to the last stable ubuntu-core (the image was built with edge) ... so it goes backwards14:29
DrZDo I use the deb package name in stage-packages?14:29
ogra_DrZ, yes14:29
DrZI want to depend on libgraphicsmagick but I don't know how14:29
mvoogra_: yeah, the switching back is expected, if it fails to boot it will revert to the previous one14:29
mvoogra_: that smells like snap_try_core was not setup14:29
ogra_mvo, right, but in my case it actually first booted to 233014:29
ogra_gimme a sec, refreshing with --channel edge14:30
ogra_ok, rebooting now14:30
ogra_or wait ...14:30
DrZ@ogra Thanks!14:30
nothalDrZ: No such command!14:30
ogra_mvo, ^^14:30
ogra_from fw_printenv before reboot14:30
mvoogra_: oh, that is the issue14:31
mvoogra_: thanks, I work on a fix14:31
ogra_mvo, do you notice the issue ?14:31
mvoogra_: yes14:31
ogra_oh, how i love that we can now quickly build ubuntucore for quick update testing ... :)14:32
DrZUnknown plugin for sample ?14:32
roadmrhey folks! the copy plugin says it's deprecated, replace with dump, but dump is not a drop-in replacement and I'm not finding any docs or examples on how to use it. Any pointers?14:36
DrZOh I use this as the plugin for my Qt5 app "desktop/qt5" ?14:36
DrZUnknown plugin desktop/qt5 =/14:37
mupPR snapd#1673 opened: partition: Revert "clear snap_try_{kernel,core} on success" <Created by mvo5> <https://github.com/snapcore/snapd/pull/1673>14:40
DrZhttp://pastebin.com/DAWbwUK5  Anyone have a min?14:42
DrZSource property doesn't match required schema14:43
DrZI give up. This just isn't easy to understand.14:49
stokachuDrZ: hi14:53
stokachuyou need to set keys for each part14:53
DrZOh hi14:53
stokachuDrZ: https://github.com/conjure-up/conjure-up/blob/master/snapcraft/snapcraft.yaml14:53
stokachulook at mine for example14:53
mupPR snapd#1674 opened: Interfaces: Builtin: add Udisks2 and Pluggable Storage <Created by ssweeny> <https://github.com/snapcore/snapd/pull/1674>14:54
jdstrandmvo: ok, I merged it. the integration tests are failing but in a way that looks unrelated14:54
jdstrandmvo: other tests are still running14:54
mvojdstrand: yes, there is a regression with snap-confine14:54
DrZWhich part is the keys/14:55
DrZThe conjure directly under parts:14:56
DrZIs that a key?14:56
stokachuconjure:, juju:14:56
stokachuthose define each section of your parts14:56
stokachuyou can name them whatever you want14:56
DrZOh so my desktop/qt5 is wrong then14:56
stokachulooks like your tabbing is off14:57
stokachueverything under desktop/qt5 should be indented14:57
DrZOmg its doing something!14:58
ogra_magic !14:58
=== oparoz is now known as Guest45987
=== oparoz_ is now known as oparoz
DrZSo it downloaded some stuff then tried to build desktop/qt515:01
DrZThen failed because no make file15:01
DrZor targets15:01
DrZNot sure how to proceed.15:02
ogra_DrZ, try https://gitter.im/ubuntu/snappy-playpen ... they are perhaps better at helpning with snap building15:03
DrZThanks ogra.15:04
DrZSorry for filling up the place with my spam. xP15:04
DrZI'll let myself out. x)15:05
ogra_no, it is fine here, we're all just overly busy today it seems15:05
ogra_this channel is correct ... but your chances are today better in the playpen gitter channel i guess15:06
elopiodidrocks: re https://github.com/ubuntu/snappy-playpen/pull/195#issuecomment-238778585 I need more permissions on the ubuntu org in order to use it in docker hub15:06
mupPR ubuntu/snappy-playpen#195: Add docker files for testing the playpen snaps <Created by elopio> <Merged by didrocks> <https://github.com/ubuntu/snappy-playpen/pull/195>15:06
DrZIts alright I should get busy too.. since im currently at work. Trying to create a snap today on teh side. :)15:06
mupPR snapd#1635 closed: interfaces: builtin: add pluggable storage interface <Created by ssweeny> <Closed by ssweeny> <https://github.com/snapcore/snapd/pull/1635>15:07
mupPR snapcraft#725 opened: Support having the snapcraft.yaml in a subdir <Created by kyrofa> <https://github.com/snapcore/snapcraft/pull/725>15:07
DrZChat later!15:07
mhall119sergiusens: didrocks: is snapcraft cleanbuild completely broken for anything that uses a desktop launcher?15:08
mhall119'ascii' codec can't encode character '\u29f8' in position 19: ordinal not in range(128)15:08
mhall119Command '['lxc', 'exec', 'snapcraft-ethologically-animistic-corrinne', '--', 'snapcraft', 'snap', '--output', 'arduino_1.6.9_amd64.snap']' returned non-zero exit status 115:08
mhall119every time15:08
ogra_mhall119, there is a bug open for that15:09
mhall119which means that it's broken15:09
ogra_bug 160701515:09
mupBug #1607015: 'ascii' codec can't encode character '\u29f8' in position 19: ordinal not in range(128) <Snapcraft:Confirmed> <https://launchpad.net/bugs/1607015>15:09
mhall119reported by Alan Pope  on 2016-07-2715:10
mupPR snapcraft#645 closed: If "source: .." do not copy the current directory into itself <Created by evandandrea> <Closed by kyrofa> <https://github.com/snapcore/snapcraft/pull/645>15:10
mhall119which means it's been broken for at least 15 days now15:10
kalikianamhall119: for anything using remote parts15:10
mhall119is there a work-around, or is that whole part of our developer story just completely blocked right now?15:10
mupBug #1611638 opened: snap upgrade hook <Snappy:In Progress by kyrofa> <snapd (Ubuntu):In Progress> <https://launchpad.net/bugs/1611638>15:13
mhall119didrocks: can we rename the remote parts to something without a / ?15:18
stokachuin my snap: section can i do - usr/bin/binary and then - -usr/bin?15:20
stokachuso that it only includes that one binary and forgets the rest?15:20
ogra_mhall119, iirc thats in the works as well15:21
mhall119stokachu: you might need to do it in the opposite order, -usr/bin and then add usr/bin/binary back15:22
* mhall119 is real sure how the plugin resolves them15:22
mhall119but it should be possible, yes15:22
stokachumhall119: ok lemme try that15:22
stokachumhall119: doesn't work :(15:25
mhall119stokachu: doesn't work either way?15:25
stokachulemme retry the original way i had it15:25
stokachumhall119: yea doesn't work either way15:26
mhall119sergiusens: didrocks: popey: ^^ can you help stokachu with his snap including only select files?15:27
mhall119I've reached the extent of my knowledge on it15:28
stokachulike i just want to pull something like /usr/bin/tail from coreutils but not the rest of the binaries in that package15:28
popeyi haven't used this method to remove files, but I am sure some of the examples in the playpen do15:29
didrocksmhall119: you probably want josepht, he did care of the transition15:29
mhall119and you're doing this in the stage: section? or snap: (which is prime now, I think)15:29
stokachuin the snap:15:29
stokachushould i try stage:?15:29
didrocksmhall119: but we can't rename older/remove without a /, that breaks backward compability15:29
mhall119stokachu: yes, stage would be the place to do it I think15:29
popeywell, we broke backwards compatibility when we went from copy -> dump...15:29
popey(didn't we?)15:30
didrockselopio: which kind of perm do you want?15:30
kalikianastokachu: you want "snap:", that should get you only the files/folders you specify15:30
didrockspopey: yeah, but I don't want to add more15:30
didrockspopey: see the ML discussion15:30
popeyah okay15:30
kalikianastokachu: note that you'll have to whitelist any libs needed in that case15:30
stokachukalikiana: ok so only define what i want and the rest is dropped automatically15:30
didrocksseems like josepht had a plan to avoid breaking it, I'munsure why it doesn't work at all though15:30
kalikianastokachu: yeah15:30
mhall119didrocks: backwards compatibility is alredy broken15:30
stokachukalikiana: so usr/lib won't get pulled in15:30
mhall119literally breaks15:30
didrocksmhall119: and I don't think it's nice for our users15:30
didrocksmhall119: but the desktop launcher is shipping now with a /, with a - and with short name15:31
mhall119it's not, but it's also already happened15:31
didrocks( so 3 parts for each flavor :( )15:31
kalikianastokachu: right. check ldd or run the bin from the snap to see if any libs are missing15:31
didrocksso not sure what you want to do in the git repo?15:31
didrocksseems like something needs to happen on the importer side15:31
stokachukalikiana: ok15:31
didrockselopio: which kind of power do you need for the ubuntu org?15:32
stokachukalikiana: is there a way to just still pull in everything from lib and usr/lib while just including the binaries i want?15:33
stokachuproblem i have is there are 7 binaries i need to use15:33
kalikianastokachu: http://paste.ubuntu.com/23049706/15:35
stokachuok cool15:35
kalikianathe ones with a leading - will be removed15:35
josephtdidrocks, mhall119: we should be able to have entries in the wiki now for each of the non-namespaced versions of the desktop helpers.15:37
josephtmhall119: which one are you using?15:37
mupPR snapcraft#568 closed: New plugin: grunt <Created by mariogrip> <Closed by kyrofa> <https://github.com/snapcore/snapcraft/pull/568>15:37
mhall119josepht: josepht desktop/gtk215:38
argesIs there a 'snappy' place to write data that I want to persist even after the snap gets removed?15:38
elopiodidrocks: I am not sure. I just know that I can't see it in my Users/Organizations in docker hub.15:42
stokachuarges: google photos15:42
josephtmhall119: can you switch to using 'desktop-gtk2' and do a 'snapcraft update' please?15:42
elopiodidrocks: "Automated Builds currently require read and write access since Docker Hub needs to set up a GitHub service hook."15:43
argesstokachu: hah perfect15:43
elopiodidrocks: also: https://docs.docker.com/docker-hub/github/#/github-organizations15:44
jaceknwhere can I find example uses of "dump" plugin?15:44
didrockselopio: on dockerhub, I only have ubuntucore and my name15:44
didrocksah, let me try this15:44
didrockselopio: it seems the ubuntu org was already created but I can't access it either15:45
didrocksthat's why I told you I didn't know this dockerhub shared org worked…15:46
mupPR snapcraft#593 closed: git demo snap update - Bug 1595229 <Created by stub42> <Closed by kyrofa> <https://github.com/snapcore/snapcraft/pull/593>15:46
elopiodidrocks: I'm talking about the organization in github, not in dockerhub, right?15:46
didrockselopio: I meant, if I had enough power on the ubuntu org in github, I should be able to access the dockerhub one, right?15:46
elopiowhat I'm missing is this, I think: "The organization’s administrators may need to go to the Organization’s “Third party access” screen in “Settings” to grant or deny access to the Docker Hub Registry application. This change will apply to all organization members."15:46
lazyPowerwe've set this up on our jujusolutions projects for charmbox, and i have quite a few others15:47
didrocksah ok15:47
didrockslet me try15:47
lazyPowerif you are not an admin, you cannot setup the automated build, its pretty cut and dry15:47
mhall119josepht: appears to be working15:47
lazyPowers/admin/admin in both cases/15:47
elopiodidrocks: no, the github ubuntu org is a different thing. The one I control is called "ubuntu-core", and is not linked in any way with the "ubuntu-core" team in github.15:47
elopioI think it's okay to use this dockerhub ubuntu-core org. The ubuntu one might be too official.15:48
josephtmhall119: great15:48
tyhicksmvo, jdstrand: that eCryptfs bug is a "fun" one15:49
didrockselopio: but you need to create an access request first, right?15:49
jdstrandtyhicks: oh-- I was wondering what you found out15:49
tyhicksmvo, jdstrand: I'm not sure what's happening there and I can't find a simplified reproducer15:49
jdstrandtyhicks: I did notice it was parted15:50
tyhicksjdstrand: there are very few operations on the dragon.img file and its opened file descriptors so I thought it'd be easy to do15:50
jdstrandtyhicks: like, create the image, do parted and it barfs15:50
* jdstrand didn't do that, and that is hardly a simple reproducer15:51
tyhicksjdstrand: it looks like an openat() -> ftruncate() -> close() -> lstat() sequence would do the trick but it isn't15:52
tyhicksecryptfs only returns EACCES in one place so I'll see if that's the location of the failure or if it is somewhere in the VFS15:52
blackboxsw_when running my built gtk-based snap for workrave, I get Gtk-WARNING **: Locale not supported by C library.15:56
blackboxsw_    Using the fallback 'C' locale.15:56
blackboxsw_do I need to pass LC_ALL="en.utf-8" somehow into the snap build process maybe15:57
blackboxsw_I know that question is coming way out of left field. I didn't see any example snaps in the snappy-playpen that do any locale setting magic15:58
blackboxsw_I'm referring to some of the same symtoms as #158435716:00
mupBug #1584357: Snappy GTK applications <snapcraft (Ubuntu):Confirmed> <https://launchpad.net/bugs/1584357>16:00
=== danwest_ is now known as danwest
mupBug #1584456 changed: apparmor denial using ptmx char device <apparmor> <Snappy Launcher:In Progress by jdstrand> <linux (Ubuntu):Confirmed for tyhicks> <https://launchpad.net/bugs/1584456>16:25
mupPR snapd#1633 closed: many: move to purely hash based key lookup and to new key/signature format (v1) <Critical> <Reviewed> <Created by emgee> <Closed by pedronis> <https://github.com/snapcore/snapd/pull/1633>16:30
mupPR snapcraft#726 opened: Implement basic form of `snapcraft register-key` <Created by cjwatson> <https://github.com/snapcore/snapcraft/pull/726>16:43
sabdflogra_, niemeyer, i can chat shortly if you want16:47
niemeyersabdfl: Heya16:50
niemeyerWhat's the topic again? I probably missed the preamble16:52
sabdfli saw a comment referencing you and me, and dragonboard naming16:58
tsimonq2o/ sabdfl :)16:59
mupPR snapcraft#727 opened: Add a new build plugin 'shell' that runs arbitrary shell commands <Created by Magical-Chicken> <https://github.com/snapcore/snapcraft/pull/727>17:13
mupPR snapd#1617 closed: many: move to purely hash based key lookup and to new key/signature format (v1) <Critical> <Created by pedronis> <Merged by pedronis> <https://github.com/snapcore/snapd/pull/1617>17:15
niemeyersabdfl: I need to catch up with the kernel team to sort this out I think.. if we need to unblock this today, I'd just go with dragonboard and dragonboard-kernel..17:18
niemeyersabdfl: The question is whether this kernel is more generic, which might hint at a snapdragon-kernel..17:19
mvotyhicks: please keep me updated on this bug, its very interessting (and head scratching) indeed :)17:22
mupPR snapd#1675 opened: spread: use snap-confine from ppa:snappy-dev/image for the tests <Created by mvo5> <https://github.com/snapcore/snapd/pull/1675>17:27
zygajdstrand: +1 to merge https://github.com/snapcore/snap-confine/pull/9917:46
mupPR snap-confine#99: Disable owner checks for 14.04-style private home <Created by zyga> <Conflict> <https://github.com/snapcore/snap-confine/pull/99>17:46
jdstrandzyga: yes, commented in PR17:49
zygaah, thanks17:50
jdstrandzyga: no, I only *just* did it :)17:51
jdstrandok, I'm time-shifting today so out now17:51
jdstrandhave a nice weekend :)17:51
zygajdstrand: likewise!17:54
jcastrowhat are my options for managing storage in a snap? I am making a snap for snapraid which needs access to disks and arbritrary directories.17:56
jcastroSo no one is confused snapraid is completely unrelated to snappy.17:57
ogra_sabdfl, we need the final na,me for the dragonboard kernel and it was not sure if it should be "dragonborad-kernel" or "snapdragon-kernel"  (as niemeyer explained, there was desire from the kerel team to make it generically usable laster, just via different device trees) ... with the new build setuo i need the name in advance to create an LP project for the snap package17:59
mupBug #1612757 opened: getpid system call is blocked by seccomp under confinement <Snappy:New> <https://launchpad.net/bugs/1612757>18:02
mupBug #1612759 opened: fchown system call is blocked by seccomp under confinement <Snappy:New> <https://launchpad.net/bugs/1612759>18:05
rbasakWhere should I file bugs against the docs?18:14
rbasakThere's "Report a bug on this site" at the bottom, but when I did that for Juju, it didn't end up in the right place.18:14
rbasak(see https://github.com/juju/docs/issues/716)18:15
niemeyerogra_: I suggest unblocking that by naming it dragonboard-kernel.. that's the platform we care about today, and are promising proper support18:22
ogra_niemeyer, ack18:22
niemeyerWe can review these details later, if/when necessary18:22
niemeyercc sabdfl18:22
ogra_mvo, still around ? can you crate a dragonboard-kernel package with the shared account ? (i'll care for the rest (populationetc)18:22
mupPR snapd#1659 closed: wrappers: ensure services have a valid SNAP_USER_DATA dir <Reviewed> <Created by mvo5> <Closed by mvo5> <https://github.com/snapcore/snapd/pull/1659>18:24
mupPR snapd#1674 closed: Interfaces: Builtin: add Udisks2 and Pluggable Storage <Created by ssweeny> <https://github.com/snapcore/snapd/pull/1674>18:24
mvoogra_: sure18:25
mvoogra_: so thats the aggreed name?18:25
ogra_thanks (i dont really want to hold you back from starting your WE though)18:25
ogra_mvo, the name that niemeyer and i just agreed on :)18:26
ogra_worst case we can still change/drop it18:26
sabdflniemeyer, ogra_ +118:27
mvoogra_: name is there, do you have a snap? I think we need a snap so that I can give you collab rights, however I can just tweak the existing canonical-dragon-linux18:27
ogra_mvo, oh, gimme 10mins to set up an LP project then18:27
mvoogra_: ok18:27
ogra_mvo, https://code.launchpad.net/~snappy-dev/+snap/dragonboard-kernel ... (i hope the 39min are a lie there)18:34
ogra_oh, they were ... (it said 339min til it starts)18:35
ogra_should take ~10min18:36
mvoogra_: neato18:39
dobeyhmm, why do i need to use sudo to install a local snap package?18:39
ogra_dobey, why do you need sudo to install a local deb package ?18:39
dobeyogra_: i don't need sudo to install a click18:40
ogra_(its a matter of filesystem permissions)18:40
dobeyogra_: and i'm sure snap install doesn't install files into the snappy snap itself :)18:40
ogra_it installs to /snap18:40
dobeyogra_: and what does logging into a u1 account have to do with filesystem permissions?18:41
dobeyogra_: ie, why do i not need root if i log in and install something from the store, but i do need root otherwise?18:41
ogra_which is a system level dir without special permissions (unlike the /opt tree we use for clisk)18:41
ogra_dobey, click packages dont install system wide, they are bound to the user18:41
argesmvo: thanks for the review of https://github.com/snapcore/snapd/pull/1602. I've pushed updates but I can't seem to get the travis-ci test to pass. It doesn't look like a failure on my part. Will that affect merging?18:41
mupPR snapd#1602: interfaces: add kernel-module interface for module insertion <Reviewed> <Created by arges> <https://github.com/snapcore/snapd/pull/1602>18:41
ogra_snap packages dont18:41
dobeyogra_: /opt tree doesn't have special permissions either. non-root works because pkcon18:41
ogra_dobey, so they effectively use root too ... just through a suid binary managed by pkcon ;)18:42
dobeyogra_: that doesn't explain why i don't need root if i log into the app store with snap18:42
dobeyhttp://www.ubuntu.com/desktop/snappy <- no sudo18:43
dobeyhttp://snapcraft.io/create/ <- sudo18:43
ogra_dobey, you can use snap login18:43
ogra_at any time18:43
ogra_afaik then sudo isnt needed18:43
dobeyso when will snappy use the credentials from online accounts?18:44
ogra_mvo, snap is done, grab it while its hot :)18:44
mvoogra_: already downloading ;)18:44
ogra_it is all so fast now :)18:44
mvoindeed, really nice18:45
ogra_yeah, the best move we ever did18:45
ogra_(regarding builds at least :) )18:45
dobeyogra_: i'm asking this because i need to figure out how to integrate installing of snaps in the store scope for ubuntu personal/phone stuff. "open a terminal and do snap login first" is not an acceptable solution :)18:45
ogra_you could embed a vte widget in your scope then :P18:46
ali1234what does snap login log you in to?18:46
* dobey files a bug against unity8: no terminal widget avaialble for scopes18:46
ogra_dobey, not my area of expetise i fear ... you need the snappy core team or the store guys18:47
dobeyali1234: it's your ubuntu one account credentials18:47
dobeyogra_: well that's why i joined #snappy :)18:47
ali1234so as long as i'm logged in to U1 then i can side load anything without sudo?18:48
dobeyi think i have most of the store stuff figured out18:48
dobeyjust trying to find a way to install a snap without having to do too much extra work, now18:48
ali1234can i build an all-snap image with my own snaps baked in?18:49
mvoogra_: you have mail18:50
ali1234also what exactly is a gadget snap?18:50
ogra_mvo, interesting ... twice actually (same link twice)18:51
ogra_ok, set up for auto-submission ...18:52
* ogra_ triggers another build to test that works as desired18:52
ogra_jdstrand, so it is pc-kernel, pi3-kernel and dragonboard-kernel now18:54
mvoogra_: how can you set it to auto-publish? it seems that works for ubuntu-core somehow?18:55
mvoogra_: no pi2-kernel?18:55
ogra_eeek !18:55
ogra_jdstrand, not pi3-kernel, but pi2-kernel18:55
ogra_mvo, uufff, thanks !18:56
ogra_mvo, we need jamies magic, then it should just work18:56
mvoogra_: aha!18:56
mvoogra_: I build a dragonboard image now (unless you are already on that)18:56
ogra_mvo, no, just go ahead18:57
ogra_i'm waiting for LP to regonize the branch change to actually start an auto-build now18:57
ogra_to see the thing works from start to end18:57
ogra_but LP doesnt seem to see my change or i'm in limbo between some scheduler runs18:58
ali1234is it possible to have the writable partition be a ramdisk?19:08
ogra_ali1234, tricky, give that your readonly bits sit init19:08
ali1234not if they are baked into the initial image, surely?19:09
mvoogra_: could you please check  http://people.canonical.com/~mvo/all-snaps/16/all-snaps-dragonboard.img.xz and check if that works on your dragonboard19:09
ogra_mvo, will do19:09
ogra_(i have to do some RL stuff for about 15min though, but will then ...)19:10
mvoogra_: ta!19:11
=== faenil_ is now known as faenil
dobeyif i filed a bug agaisnt snapd package in ubuntu should i also have it affects snappy project?20:02
ogra_dobey, yes please20:07
ogra_not sure how well snapd package bugs are actually monitored20:07
mupBug #1612783 opened: snapd requires U1 account to install local packages <Canonical System Image:New> <Snappy:New> <snapd (Ubuntu):New> <https://launchpad.net/bugs/1612783>20:08
ahasenackhm, I'm still confused about config files in snaps20:15
ahasenackI thought I could use SNAP_DATA for config files20:15
ahasenackbut the snap itself can't ship files in there, right. That's a place for the snap to store files once it's running20:15
ahasenackso I should copy the config files to $SNAP_DATA on the first run if they are not there yet?20:16
kyrofaahasenack, indeed, that's how to do it right now20:17
kyrofaahasenack, I'm hoping for an install hook that will make that easier20:18
ali1234is it safe to use /tmp/ in a snap?20:23
kyrofaali1234, yes, it's not the system-wide /tmp though20:25
kyrofaali1234, i.e. /tmp to the snap is actually /tmp/snap.foo.bar/ on the system20:25
ali1234thats fine as long as it works20:25
kyrofaali1234, indeed20:25
ahasenackthe new dump plugins, it's not documented yet, is it?20:27
ahasenackI don't see it in http://snapcraft.io/docs/reference/plugins20:27
ahasenacksnapcraft help dump didn't help much, it's just a pointer to other docs20:27
ali1234okay so i've snapped a QML app for raspberry pi eglfs, who wants to try it?20:29
ali1234it needs devmode to access vchiq20:29
kyrofaahasenack, happy to help20:31
ahasenackjust replacing "copy" with "dump" didn't work, so I stayed with "copy" for now :)20:31
kyrofaahasenack, the dump plugin takes the complete source you gave it and copied it into the root of the snap. If you want to filter files out, you can do so using the stage or snap keywords (available to every plugin). If you want to move files around, use the organize keyword (also available to every plugin)20:33
ahasenackI have 3 config files at the root of my snapcraft directory, alongside the yaml. I want thse copied to specific paths inside the snap20:33
ahasenackI have been using copy's "files" key for that20:34
ahasenack        files:20:34
ahasenack          squid-deb-proxy.conf: /usr/share/config/squid-deb-proxy/20:34
kyrofaahasenack, indeed. Here, let me paste something for you20:34
ahasenackhm, stage and prime directories are empty after a build20:38
kyrofaahasenack, http://pastebin.com/kugi0fRV . Sorry for using pastebin, paste.ubuntu.com is undergoing maintenance right now20:39
ahasenackis this new in snapcraft?20:39
ahasenackah, organize20:39
kyrofaahasenack, no, nothing has changed in that regard. What is your definition of "build"? `snapcraft build`? Or a complete run of `snapcraft`?20:40
ahasenackjust "snapcraft"20:40
ahasenackrunning again with the dump plugin now20:40
kyrofaahasenack, then no, stage and prime should not be empty, or the snap will be empty as well20:41
ahasenacksnap was 19Mb big20:41
ahasenackchecking things20:41
ahasenackmaybe it failed to build and that was just the previous version20:41
ahasenackyeah, that was it20:41
ahasenacknew error, haven't seen it before. debugging20:42
ahasenack[Errno 39] Directory not empty: '/home/andreas/snaps/snap-squid-deb-proxy/parts/squid-deb-proxy/install'20:42
kyrofaahasenack, please run with snapcraft -d and paste the output20:43
ahasenackugh, pastebin is awful :)20:46
ahasenackkyrofa: http://pastebin.com/TV0tHCj920:47
kyrofaahasenack, no kidding20:47
ali1234pastebinit supports paste.debian.net i believe20:48
kyrofaahasenack, ugh, that's a big in the dump plugin... sorry :( . To workaround, `rm -rf parts/squid-deb-proxy/install`20:49
kyrofaahasenack, I'll fix that right now20:49
ahasenackdo the rm -rf and then what, snapcraft again?20:49
kyrofaahasenack, indeed20:51
ahasenackit just happens again20:51
ahasenackI guess I would need to specifically ask for an intermediary step, not the whole snapcraft run20:52
kyrofaahasenack, ah, bug #161182720:53
mupBug #1611827: dump plugin with stage-packages fails <Snapcraft:New> <https://launchpad.net/bugs/1611827>20:53
kyrofaahasenack, is that it?20:53
ahasenackok, I'll subscribe20:53
ahasenackyes, I have stage-packages20:54
kyrofaahasenack, workaround for now: put the stage packages on a part that uses the nil plugin20:56
ahasenackis usr/sbin/ from inside the snap in $PATH?21:08
ahasenackexport PATH="$SNAP/bin:$SNAP/usr/bin:$PATH"21:08
ahasenackno :/21:09
ahasenackso I need to move my binary from usr/sbin to usr/bin post-build21:12
kyrofaahasenack, or write a wrapper that adds sbin to the path21:18
kyrofaahasenack, that will get less painful soon when we add environment support21:19
ahasenackthe revision of the snap is part of PATH21:19
ahasenackI think I got it working with "organize"21:19
ahasenacknow it's that known problem of lack dropping privileges21:21
mupPR snapcraft#720 closed: Start the fake parts server only in the tests that need it <Created by elopio> <Merged by kyrofa> <https://github.com/snapcore/snapcraft/pull/720>21:22
kyrofaahasenack, you should be able to use the $SNAP* environment variables21:24
ahasenackkyrofa: thx, have a nice weekend21:27
* ahasenack -> EOW21:27
mupPR snapcraft#728 opened: Use link_or_copy instead of just hard-links for deb cache <Created by kyrofa> <https://github.com/snapcore/snapcraft/pull/728>21:58
mupPR snapcraft#723 closed: Set owner/group for directories in stage and prime <Created by josepht> <Merged by kyrofa> <https://github.com/snapcore/snapcraft/pull/723>22:22
=== evnmar_ is now known as evnmar

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!