/srv/irclogs.ubuntu.com/2016/11/01/#snappy.txt

mupPR snapd#2234 opened: static tests: add spell check <Created by elopio> <https://github.com/snapcore/snapd/pull/2234>00:21
=== deadk is now known as e
liuxgelopio, ping01:39
=== chihchun is now known as chihchun_afk
mupPR snapcraft#879 opened: The latest icon definition is deprecated <Created by liu-xiao-guo> <https://github.com/snapcore/snapcraft/pull/879>02:02
=== chihchun_afk is now known as chihchun
liuxgI have a .gz file, what should be the source-type to use when I download it in the snapcraft.yaml. I have tried to use zip, bit it does not succeed. thanks05:00
mupPR snapd#2233 closed: docs: update the name of the command for the cross-build <Created by elopio> <Merged by zyga> <https://github.com/snapcore/snapd/pull/2233>05:03
pittiogra_: no holiday, but being stuck in cloud roadmap review sessions all day, laptop-less :) (yesterday)05:20
pittielopio: I didn't see this before, no; did you try this locally? sounds like your way of checking out a github (?) PR doesn't work05:23
mupPR snapd#2235 opened: debian: wrap-and-sort <Created by zyga> <https://github.com/snapcore/snapd/pull/2235>07:04
=== mup_ is now known as mup
mupPR snapd#2228 closed: interfaces/bulitin: allow fwupdmgr refresh on fwupd plug <Critical> <Created by timchen119> <Closed by timchen119> <https://github.com/snapcore/snapd/pull/2228>09:02
mupPR snapd#2236 opened: interfaces: add realsense interface <Created by swem> <https://github.com/snapcore/snapd/pull/2236>09:29
mupPR snapcraft#877 closed: Add new "source-commit" field for VCS sources <Created by stgraber> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/877>10:02
Son_Gokufor the life of me, I can't figure out where the man page is generated from when running snap help --man10:07
Son_Gokuniemeyer: ^10:07
niemeyerSon_Goku: It's generated from the flag metadata in the code itself10:08
Son_Gokuniemeyer, it says the man page is snap(1) rather than snap(8)10:09
Son_GokuI just want to fix that10:09
Son_Gokuor have it fixed10:09
Son_Gokueither way works10:09
niemeyerAh, let me see where the code lives10:09
Son_GokuI tried diving into it yesterday and got lost in the wave of golang things ;)10:09
Son_Gokuniemeyer, it's been a section 8 manpage for a while, but apparently the man page generation code still writes snap(1)10:12
niemeyerSon_Goku: Will be slightly trickier than it sounds: https://github.com/jessevdk/go-flags/blob/master/man.go#L17910:14
Son_Gokueek10:14
niemeyerSon_Goku: Might be easier to patch it locally, if you want a quick fix10:15
faenilhi everyone. I was having a look at snapcraft.io homepage, I saw this line "A snap can declare daemons to be started as well, this one just describes some apps.10:15
Son_Gokuyeah, I think I'm just going to patch the man page itself until that's figured out10:16
faenilbut I'm not sure what that means. "This one?"10:16
faenildoes it refer to the example above?10:16
Son_Gokubut since Debian, Ubuntu, and Fedora install it per the reference debian packaging data (as section 8), the man page is obviously wrong here10:16
niemeyerSon_Goku: Both snap and dpkg are (1) in Ubuntu/Debian10:16
faenil(maybe it needs some rephrasing?)10:16
niemeyer(FWIW)10:16
Son_Gokusnap is in section 810:17
Son_Gokuniemeyer: https://github.com/snapcore/snapd/blob/master/debian/rules#L15710:18
Son_Gokusomeone changed it a while back10:18
niemeyerSon_Goku: $ dpkg -L snapd | grep 'man[0-9]/snap'10:18
niemeyer/usr/share/man/man1/snap.1.gz10:18
Son_Gokuwtf?10:18
Son_Gokubut... https://github.com/snapcore/snapd/commit/d1bd21632f3bca781bb64cb6a62e099f7978658d10:18
Son_GokuI'm completely confused now10:19
niemeyerSon_Goku: We need to kill the debian/ directory really10:19
Son_Gokualright, I'll fix it in the spec for now10:19
Son_GokuI think does belong in 8, though10:19
niemeyerIt's super confusing indeed.. basically it can be out of date with the actual packaging rules in use in Debian and/or Ubuntu10:19
niemeyerSon_Goku: Not any more than dpkg itself10:19
Son_Gokurpm and yum/dnf are in section 810:20
Son_GokuI'm not sure why dpkg isn't10:20
niemeyerSon_Goku: I think it's reasonable10:20
niemeyerSon_Goku: Users care about what is installed too10:20
Son_Gokuapt is in section 8 as well10:20
Son_Gokuas is aptitude and... synaptic?!10:21
Son_Gokusynaptic has a man page...?10:21
niemeyerSon_Goku: But I won't bikeshed much on this one.. it's just a number really10:21
Son_Gokuyeah, meh10:21
Son_GokuI'll just fix it to point to 1 for now10:21
niemeyerand a pretty irrelevant one at that10:21
Son_GokuI don't actually care, but the inconsistency annoyed me10:21
niemeyerYeah10:21
niemeyerHaving it in one is the easiest, given it's hardcoded in go-flags10:22
Son_Gokuthat's a weird and terrible thing to be hardcoded10:22
Son_Gokubut whatever10:22
mupPR snapd#2235 closed: debian: wrap-and-sort <Created by zyga> <Merged by zyga> <https://github.com/snapcore/snapd/pull/2235>10:23
Son_Gokuzyga: ping10:25
Son_Gokuzyga: https://github.com/zyga/snapcore-fedora/pull/1110:26
mupPR zyga/snapcore-fedora#11: Update SELinux subpackage commit and move snap.8 to snap.1 <Created by Conan-Kudo> <https://github.com/zyga/snapcore-fedora/pull/11>10:26
Son_GokuI'm at the point where I don't want to keep hitting it with a hammer anymore10:26
Son_Gokuthe policy *should work* once niemeyer lands the change to stop downloading things into /tmp and download them in /var/lib/snapd/<foodir>10:26
Son_Gokufor the curious, here's what the policy looks like now: https://gitlab.com/Conan_Kudo/snapcore-selinux/blob/master/snappy.te10:27
Son_Gokuit could stand to have some cleanup, but I don't want to do that now10:28
Son_Gokuzyga, please merge the pull request and then update the snapd review with it10:28
Son_GokuI want to approve it already... :/10:28
Son_Gokuthat way the preset rules can make it into Fedora asap10:29
Son_Gokuniemeyer, has the code landed for making it download in /var/lib/snapd/<foodir> yet?10:37
niemeyerSon_Goku: Not yet.. hopefully today10:37
Son_Gokucool10:37
=== dholbach_ is now known as dholbach
tptrhi all, I tried to install http://cdimage.ubuntu.com/ubuntu-snappy/16.04/20160919/ubuntu-core-16-amd64.img.xz on an Intel compute stick (STK1A32SC). It gets stuck when booting, saying 'grep: /proc/device-tree/model: No such file or directory' and later "findfs: unable to resolve 'LABEL=writeable'"10:56
tptrbooting ubuntu-15.04-snappy-amd64-generic.img.xz goes fine on the same hardware.10:56
tptrI am wondering if it is known prob or should I report somewhere?10:58
ogra_tptr, that is from a USB key ?11:00
ogra_(or how do you boot ?)11:00
tptrwell, I boot a normal 16.04 on the stick from a USB key. then download this image, unxz -c ubuntu-15.04-snappy-amd64-generic.img.xz | sudo dd of=/dev/mmcwhatever bs=32M11:01
mupBug #1638248 opened: No 'current' symlink for $SNAP_USER_DATA <Snappy:New> <https://launchpad.net/bugs/1638248>11:02
tptrthen it starts booting OK but then gets stuck at the above mentioned point. Unfortnately keyboard does not work either so cannot interact with it...11:02
tptr( tre instructions from https://developer.ubuntu.com/en/snappy/start/#try-x86 )11:02
ogra_tptr, if you dd directly to the USB key and boot from there, does it work ?11:10
ogra_oh, wait11:10
ogra_you downloaded 15.04 ...11:10
tptrthis is what I do11:10
tptrwith 15.04 it works fine11:10
tptrwith 16.04/20160919/ubuntu-core-16-amd64.img.xz it gets stuk11:11
ogra_well, 15.04 is pretty much EOL (within the next 4 weeks or so) ...11:11
ogra_and completely different too (regarding the overall image design)11:12
tptryes...11:12
tptrthis is why I would love to switch to 16.04 as soon as I can11:12
tptrbut I cannot boot it on this device. due to this problem.11:13
ogra_well, try booting from the USB key11:14
ogra_oh, wait ... you also downloaded the wrong image11:15
ogra_http://cdimage.ubuntu.com/ubuntu-core/xenial/daily-preinstalled/current/ is waht you want11:15
tptraaah ok. I will give this a try. thanks a bunch.11:17
=== hikiko is now known as hikiko|ln
=== hikiko|ln is now known as hikiko
zygaslangasek: can we release snap-confine 1.0.44 into ubuntu?12:38
zygaslangasek: there's some SRU work that needs to happen for that12:39
zygaslangasek: https://bugs.launchpad.net/snap-confine/+milestone/1.0.4412:39
Son_Gokuzyga, can you please update the snapd review with the latest SRPM and spec12:41
sreehai12:41
sreei want to know about ubuntu mobile os12:41
sreecan you help me12:42
Son_Gokusree, you should probably ask in #ubuntu12:42
sreeokay12:42
Son_Gokuzyga: https://bugzilla.redhat.com/show_bug.cgi?id=136782512:43
Son_Gokuzbyszek is waiting on my to approve the package so he can merge the presets in12:44
Son_Gokus/my/me/12:44
Son_Gokuzyga, technically, the selinux policy as-is isn't going to completely work with snapd 2.1612:46
Son_Gokubecause of it downloading to /tmp instead of /var/lib/snapd12:46
Son_Gokubut niemeyer says that change will land today, so you can backport it before making a build in koji and submitting it as an update12:47
femmesnapd is vulnerable to all of these currently, in some form: https://www.cs.arizona.edu/stork/packagemanagersecurity/otherattacks.html12:53
Son_Gokuerm12:55
niemeyerfemme: No, none of them, actually12:55
Son_Gokuit shouldn't be12:55
Son_Gokuthe connection is secured between snapd and the Canonical store12:55
Son_Gokuand the data is document signed and checksummed12:56
Son_Gokufemme, the major Linux distributions today provide mechanisms to defeat those particular attacks12:57
femmethe 'parts' are not signed or checked for integrity any way - it's just a wiki page and it will download and execute whatever is on that page12:57
niemeyerfemme: snapcraft is not snapd12:59
femmeok, my mistake then, snapcraft13:00
Son_Gokusnapcraft has its own issues, sure13:00
niemeyerfemme: This page is about apt and yum, not their build infrastructure13:00
Son_Gokuit's also horribly out of date for apt and yum too13:00
femmeniemeyer: doesn't matter13:00
Son_Gokuboth package managers have solved these issues a long time ago13:00
femmeit's a research paper and they only solved the issues because of it...13:01
niemeyerfemme: Of course it matters.13:01
femmeniemeyer: how?13:01
femmeI humored this channel enough with the pedantic questions yesterday, I hope today won't be a repeat because I won't be coming back13:02
niemeyerfemme: This page is entirely about APT and YUM, and discuss issues related to package management and not how these packages are build13:02
niemeyerbuilt13:02
Son_Gokuthe way packages are built has a different set of issues13:02
niemeyerfemme: If you want to raise issues with snapcraft, that's fine.. but that's completely unrelated to snapd and do the page you pointed out13:02
niemeyerfemme: So, sort of fundamental to the point13:02
femmeniemeyer: it's about dependency management13:03
Son_Gokusnap build infrastructure is quite weak, sure, but that's not necessarily the same as the snap runtime/install infrastructure13:03
femmeSo you're missing a fundamental point13:03
niemeyerfemme: Exactly, and snapcraft is not about package management dependency13:03
femmeniemeyer: then why does it include that functionality?13:03
niemeyerfemme: This is the *build* system13:03
Son_Gokufemme, snaps cannot do direct dependencies13:03
niemeyerfemme: The tone of the conversation is also very unfriendly.. unnecessarily unfriendly13:03
Son_Gokuthey can indirect, capability oriented dependencies13:04
Son_Gokumuch coarser than package deps13:04
niemeyerfemme: I appreciate the point you are trying to make, though.. it's just a bit misguided13:04
femmeNo, I think you either don't understand or you don't care if snapcraft users are targeted.13:04
niemeyerfemme: You are very strongly making the wrong point, instead of kindly making the right one.13:05
Son_Gokufemme, I agree that what you're saying is a problem13:05
Son_Gokubut the issue is, the person you should be talking to isn't even here right now13:05
femmeSon_Goku: I'll probably never talk to them thanks to people like niemeyer13:05
* Son_Goku sighs13:06
mupPR snapd#2237 opened: bugfix: use a .partial file in download to unbreak `snap download` as user <Created by mvo5> <https://github.com/snapcore/snapd/pull/2237>13:06
femmeJust keep up with the pedantics, it's a build system as if it doesn't do dependency resolution in a vulnerable way13:06
Son_Gokuthat went well </sarcasm>13:08
mhall119is there a way to prompt the user for input during the installation of a snap? couchdb needs to setup an admin username and password when you install it13:09
dholbachcan somebody reply to http://askubuntu.com/questions/842792/unable-to-install-ubuntu-snap-in-16-04-lts?13:10
niemeyerYes, security is pedantic femme.13:10
jdstrandkalikiana_: re lxd clients-- it is is limitation of lxd. if you can connect to the lxd socket, you can trivially escape confinement. this is not unlike docker or libvirt (not quite as trivial, but scriptable)13:11
niemeyerI've followed up up privately.13:11
zygaSon_Goku: yes, I'll do it shortly13:11
jdstrandkalikiana_: aiui, they have todos to improve that, I think using acls13:11
zygaSon_Goku: understood13:11
jdstrandhey niemeyer and zyga :)13:11
jdstrandkalikiana_: ah, I see stgraber already anwswered you13:12
mhall119zyga: niemeyer: do we have documentation somewhere about the configuration hook and how to use it?13:13
niemeyermhall119: I'm working on that.. will finish as soon as the holy image is out.13:14
zygajdstrand: hey13:14
mhall119thanks niemeyer, I think that will solve couchdb's needs13:14
femme<    niemeyer> | We know about the *actual* underlying issue, and the fix is planned. <    niemeyer> | I was merely pointing out that this is unrelated to snapd, and to the page you linked saying "snapd is vulnerable to all of those" <    niemeyer> | Your attitude makes it very hard to even start a conversation, though  <    niemeyer> | Yes, I am pedantic. Security is pedantic, very.13:15
femmeYeah, *my attitude* is the problem. It's not like I immediately said I was mistaken and in fact meant snapcraft, right?13:15
mhall119niemeyer: are there any security restrictions on who can call "snap set"?13:16
femmeBut I'm the one that made it hard to start a conversation, sure.13:16
niemeyermhall119: Yeah, root only for now.13:16
mhall119cool13:16
niemeyermhall119: Sorry, more clearly: auth-only for now13:16
niemeyermhall119: As in, works through the API13:16
mhall119so, same auth requirement as was needed to install it in the first place?13:17
zygajdstrand: is everything okay?13:17
niemeyerfemme: the issue of it being a wiki page is being sorted out as we speak.. it was obviously a cheap way to start, and a visible one, which was handy for a while13:17
niemeyerfemme: There will be an actual server handling those things, with proper auth, etc13:17
femmeniemeyer: you could have just said that instead of repeating over and over that they weren't talking about build systems but you instead chose to ignore everything I was saying and when I left to tell me that I was the problem.13:18
jdstrandzyga: yes, I got back and just wanted to say 'hi' :)13:19
zygajdstrand: ah, great to have you back :)13:19
jdstrandthanks! :)13:19
femmethe 'fundamental point' you were talking about, was one you were and still are missing13:19
niemeyerfemme: That's what I've been trying to do. Sorry if I failed at that.13:19
mhall119femme: niemeyer: we're all just trying to get stuff done, there's nothing personal about it, it's just code.13:20
Son_Gokuzyga, I think mvo's PR here is the one that fixes this: https://github.com/snapcore/snapd/pull/223713:21
mupPR snapd#2237: bugfix: use a .partial file in download to unbreak `snap download` as user <Created by mvo5> <https://github.com/snapcore/snapd/pull/2237>13:21
femmeI don't like being talked over by people that think they know more than you.13:21
mhall119give each other the benefit of the doubt, text doesn't lend itself to expression very well, and sometimes we don't come across the way we meant to13:21
mhall119femme: niemeyer just wants to help people use snaps, he wants to help you too. I'm positive he wasn't trying to talk over you13:22
zygaSon_Goku: he's sitting right besides me, I'll update the SRPM when the branch lands13:22
Son_Gokuzyga, did you go ahead and make the SRPM and spec update to the bugzilla ticket, though?13:22
Son_GokuI'd like to go ahead and give it my stamp of approval13:22
femmeGreat, I came here because at the tor project we were considering snaps but this has only left a bad taste in my mouth.13:23
zygaSon_Goku: ah, ok, I'll do that now13:23
zygaSon_Goku: thank you for all the contributions, this is fantastic milestone!13:23
mhall119zyga: Son_Goku: is this the contribution I think it is?13:23
zygafemme: tor can use snaps, you don't have to use the parts wiki13:23
zygamhall119: yes13:23
mhall119\o/13:23
Son_Gokumhall119, yes, it is :D13:23
mhall119Son_Goku: you're going to blog about it somewhere, right? right?13:23
Son_Gokumhall119, yes, yes13:24
zygamhall119: I think many people will :)13:24
Son_Gokuas soon as I have a working version of snapd in the repos, yes13:24
* mhall119 prepares the share/like/+1 button13:24
niemeyerfemme: you don't even have to use snapcraft, strictly speaking13:24
zygafemme: you can very precisely build a snap manually, controlling all the bits13:24
zygafemme: and publish gpg signatures and anything else you want for cross-checks13:25
niemeyerfemme: Again, I'm sorry if it sounded like I was trying to "talk over you" or offend in any other way. The point above is exactly what I was trying to convey, and failed apparently.13:25
femmeWe need reproducible builds so I think that's the only way we can go about it.13:25
zygafemme: and you can13:25
zygafemme: snap is a fancy zip file13:25
zygafemme: just build the content13:25
Son_Gokuehhh13:25
Son_Gokuit's not *quite* that13:25
mhall119a fancy squashfs file13:25
mhall119:)13:25
=== chihchun is now known as chihchun_afk
mupPR snapd#2238 opened: many: fix download as user with nice partial filename <Created by mvo5> <https://github.com/snapcore/snapd/pull/2238>13:26
niemeyerfemme: This should give you ideas: https://github.com/snapcore/snapd/tree/master/tests/lib/snapbuild13:26
qenghoIncidentally, I have a branch of snapcraft that (almost) takes a  source-signed-by: [ 0xGPG, 0xGPG ]  argument in snapcraft yaml parts.13:27
niemeyerfemme: It takes the final content of a snap and simply bundleds it into the .snap file13:27
niemeyerbundles13:27
qenghoI haven't published because GPG is kind of dumb, take ALL instead of ANY OF in its verification step.13:27
Son_Gokuand I've written an independent snap build implementation for core snaps13:28
Son_Gokuhttps://gitlab.com/Conan_Kudo/snapcore-mkrpmdistcoresnap13:28
Son_Gokuit wouldn't take much for me to be able to do snapcraft-like things13:28
niemeyerfemme: These are all snaps we use on the test suite, that we "build" with it: https://github.com/snapcore/snapd/tree/master/tests/lib/snaps13:29
niemeyerfemme: It doesn't actually build anything, though.. it merely packs it up13:29
mhall119niemeyer: are there any plans for an install-time hook?13:30
niemeyerfemme: As an interesting property of the system in this context, the snap is never modified.. the digest of whatever is built on your machine is the digest that lands on the users machine13:30
mhall119it would be useful to bootstrap stuff in $SNAP_DATA or $SNAP_COMMON13:30
niemeyerfemme: And there are two signatures on it, one by the store, one by the snap publisher13:30
niemeyermhall119: configure!13:31
mhall119niemeyer: does that get called at install time? Or only when a user calls snap set?13:31
niemeyermhall119: It's called at install time13:31
niemeyermhall119: and on every refresh13:31
Son_Gokuzyga, my VM is a complete mess now :)13:31
mhall119oh, perfect! Are docs coming for that soon too?13:31
niemeyermhall119: Wait, I need to confirm the second part of it13:32
niemeyermhall119: Definitely at install time13:32
mhall119that's the main one for me13:32
niemeyermhall119: Yeah, it's part of that doc wiki13:32
zygaSon_Goku: build in progress13:33
zygaSon_Goku: /var/tmp/rpm-tmp.XLkaC3: line 62: /home/zyga/rpmbuild/BUILDROOT/snapd-2.16-1.fc24.x86_64/usr/share/man/man1/snap.1: No such file or directory13:36
Son_Gokuuhh13:36
femmeniemeyer: enabling HPKP on wiki.ubuntu.com and snapcraft would go a long way13:36
Son_Gokuyou messed up13:36
niemeyerfemme: We'll drop that entirely, and have a proper database for that content, with proper authentication, etc13:36
Son_Gokuor rather I did13:37
Son_Gokuzyga: https://github.com/zyga/snapcore-fedora/blob/master/snapd.spec#L17213:38
Son_Gokuthat needs to be man113:38
zygaSon_Goku: right13:38
zygaSon_Goku: fixing, thanks13:38
Son_Gokunp13:38
niemeyerfemme: But if you'd like to start sooner, I'd suggest going the snapbuild route.. it's really not that big of a jump. Once we've nailed down these snapcraft edges, should be trivial to move back13:38
niemeyerfemme: We should also have a --no-remote sort of flag13:39
niemeyerfemme: Which forces snapcraft to operate only on local parts13:39
niemeyerI'll talk to Sergio about this13:39
niemeyerserguisens is our snapcraft master13:39
Son_Gokuniemeyer, that would be handy for integration of snapcraft into something like Koji13:40
Son_Gokuor OBS13:40
zygaSon_Goku: uploaded13:41
Son_Gokuyou've uploaded a new SRPM and spec to your fedorapeople space and linked it in the bug?13:42
* Son_Goku doesn't see it...13:42
zygaSon_Goku: bug updated13:43
zygaSon_Goku: really?13:43
zygaSon_Goku: yes, both13:43
Son_Gokuhttps://fedorapeople.org/~zyga/snapd.spec13:43
Son_Gokushows me snapd 2.1213:43
mupPR snapd#2238 closed: many: fix download as user with nice partial filename <Created by mvo5> <Closed by mvo5> <https://github.com/snapcore/snapd/pull/2238>13:43
Son_Gokuand nothing here https://bugzilla.redhat.com/show_bug.cgi?id=136782513:43
zygaoh, sorry wrong directory13:43
zygaand bug was updated separately now13:44
zygaSon_Goku: check now please13:44
Son_Gokuthere we go13:44
* zyga hugs Son_Goku :)13:44
tptr@orga I have just tried with  http://cdimage.ubuntu.com/ubuntu-core/xenial/daily-preinstalled/current/ but I got the same. dd image to intel stick. it starts booting then gets stuck at Running /scripts/local-premount ... grep: /proc/device-tree/model: No such file or directory13:47
nothaltptr: No such command!13:47
tptr@ogra_ :-)13:47
nothaltptr: No such command!13:47
zygaSon_Goku: ok, we just need that patch and we're good13:47
ogra_tptr, thats a red herring (i just rolled a new kernel snap that suppresses that warning)13:48
Son_Gokuzyga: https://bugzilla.redhat.com/show_bug.cgi?id=1367825#c2313:48
ogra_tptr, it shouldnt influence your boot process though ...13:48
zygaSon_Goku: going to create the package now13:49
Son_Goku:D13:49
ogra_tptr, did you try booting directky from usb stick ?13:49
tptrnext line: findfs: unable to resolve 'LABEL=writable'13:49
ogra_right, thats the issue ... but also not the cause13:49
ogra_you said something about mmc13:49
ogra_i assume the missing mmc/SD card driver in the initrd is your issue13:49
Son_Gokuzyga, so far, this was the worst part: https://gitlab.com/Conan_Kudo/snapcore-selinux/commit/6331fd4a058271b0246714bc6746ab1e7ce2aa09 :(13:50
ogra_try booting off USB, if that actually worksd we know for sure13:50
zygaSon_Goku: should I ask for epel as well?13:50
zygaSon_Goku: nice, I need to learn this better13:51
mupPR snapd#2239 opened:  snap, image: fix `snap download` and `snap prepare-image` running as user <Created by mvo5> <https://github.com/snapcore/snapd/pull/2239>13:51
Son_Gokuzyga, let's not bother with EPEL for now13:51
zygaSon_Goku: ok13:52
Son_Gokubut I think it'd be a good idea to start testing epel builds with COPR13:52
Son_GokuI think that EL7 may not require the SELinux policy module right now13:52
zygaSon_Goku: package requested13:52
zygaSon_Goku: good idea13:52
tptryes, so my steps are: 1) I boot a normal ubuntu desktop 16.04 on the stick 2) download and then unxz -c ubuntu-core-16-amd64-rc2.img.xz | sudo dd of=/dev/mmcblk0 3) sync 4) reboot. -> boot starts OK then gets stuck at this point.13:52
ogra_tptr, right, dd to the USB key instead and boot off the os thats on theer, see if that works, then we have proof that it is the missing mmc driver13:54
Mirvmvo on hols?13:54
zygaSon_Goku: after this lands we can finish snapd-glib13:54
tptrok I do that now. thx13:54
zygaSon_Goku: should be a low hanging fruit by now13:54
Son_Gokuzyga, you can start it now, technically13:54
Son_Gokusnapd-glib has no direct dep on snapd13:54
zygaSon_Goku: ok, I'll start that then13:54
Son_Gokuat build time13:54
Son_Gokusnapd and snapd-glib can be submitted to bodhi in the same update along with updated snap-confine (if a new one arrives)13:55
zygaSon_Goku: .44 is good for now I think13:55
zygaSon_Goku: I'll do .45 without patches and then we fuse them into snapd13:55
zygaSon_Goku: (probably)13:55
Son_Gokublech14:03
zygaSon_Goku: some updates for snapd-glib, I'll finish this in the evening as I'd like to test it from python14:03
Son_Gokuokay, cool14:04
zygaSon_Goku: what's about blech?14:04
Son_Gokumerging snap-confine into snapd14:04
zygaSon_Goku: you'll thank me after 3 releases where it's just painless :)14:05
Son_Gokumixing golang and other things, by definition, is not painless14:06
zygaSon_Goku: we'll make the packaging work, then updates are painless, and so is development14:08
zygaSon_Goku: especailly for things like selinux integration, one branch, one CI, one result14:08
Son_Gokutravis sucks, though :/14:09
zygaSon_Goku: spread!14:09
zyga:-)14:09
Son_Gokumugh14:09
Son_Gokuugh14:09
Son_Gokuthat means figuring out lxd14:09
zygaSon_Goku: don't worry about it, I'll make it work brilliantly14:09
zygaSon_Goku: not really, you can use qemu or linode and linode will run fedora CI14:10
Son_Gokuunfortunately, no one has packaged lxd in Fedora :/14:10
Son_Gokuso local spread things with containers don't work14:10
zygaSon_Goku: I think initilly kvm will be much much better14:11
Son_Gokuwe have libvirt/KVM and systemd-nspawn14:12
Son_Gokuand of course, lxc 2.0 itself14:12
Son_Gokuand rkt too14:12
Son_Gokuand of course docker14:12
Son_Gokubut, bleh on docker14:13
Mirvwas store updated already to accept content interface users with the content property defined?14:13
tptrogra_: bingo, intel compute stick is booting ubuntu-core-16-amd64-rc2.img.xz fine from the USB stick.14:15
zygaPharaoh_Atem: https://bugzilla.redhat.com/show_bug.cgi?id=139061614:16
elopioogra_: ping. Have you measured the boot time with cloud-init lately?14:17
ogra_tptr, ok, i'm spinning new daily images, i'll ping you once they are ready (30min or so) they should have the fix14:18
ogra_elopio, i didnt really care for cloud-init since we disabled it by default14:18
tptrah, great, thx14:18
elopioogra_: can you help me to make a gadget snap that enables cloudinit for rpi2? I14:21
elopioI'm going to look for the sources. It might be obvious.14:21
ogra_elopio, i have not the slightest clue how the cloud.cfg needs to look like14:21
ogra_the gadget side is easy though, iirc you just need to include it in the toplevel dir of the gadget14:22
ogra_but i dont know anything about the format14:22
ogra_(with the requirement for a special gadget, i actually doubt that people will use cloud-init on realy hardware ... i.e. non-cloud images)14:23
ogra_*real14:23
elopiothanks ogra_. I'll look for somebody who knows about it. I think this is for cloud people.14:24
elopioI mean, it's coming from the people attending the cloud sprint.14:24
ogra_ah14:24
ogra_well, mvo might know something about the cloud.cfg file14:24
ogra_but he isnt on irc14:24
ogra_(not sure if he took off the week, i see commits from him on github :P )14:25
elopioogra_: yes, I'm talking to him on telegram and passing the messages through to you :)14:25
ogra_lol14:25
ogra_is he to shy for irc ? :)14:25
elopioogra_: irc doesn't have gifs, it's doomed :p14:27
elopioogra_: hey you might like this one: https://github.com/matrix-org/synapse/pull/115814:29
mupPR matrix-org/synapse#1158: Add the packaging metadata to build the synapse snap <Created by elopio> <https://github.com/matrix-org/synapse/pull/1158>14:29
elopiopeer to peer, encrypted, with a bridge to irc.14:29
ogra_elopio, lol ... that name reminds me of https://en.wikipedia.org/wiki/Antitrust_(film)14:30
ogra_nice one though14:32
elopiothat sounds like a terrible film... so I'll watch it during lunch.14:34
ogra_elopio, dude ! you dont know it ? it is the movie where gnome made its first appearnce ever in a movie :)14:35
ogra_tptr, try the amd64 image from http://people.canonical.com/~ogra/snappy/all-snaps/daily/current/14:40
tptrok14:40
ogra_that should have all needed drivers included now14:40
elopiorharper: can you help me generating an image with cloud-init for rpi2?14:44
Croephais there a standard way to include the contents of the linux-firmware debian package in your kernel snap?14:47
mupPR snapd#2240 opened: interfaces: network-manager: give slot full read-write access to /run… <Created by morphis> <https://github.com/snapcore/snapd/pull/2240>14:48
Croephawill stage-packages actually just work?14:48
kyrofaelopio, great film! You'll love it!14:48
elopiokyrofa: we'll see.14:53
kyrofaelopio, let us know14:54
Croephathe only reason I ask, is because every time i make a change to the kernel snapcraft.yaml, it takes like 30 minutes to build the snap...14:55
Pharaoh_Atemzyga: grabbed the review and left a comment already14:58
Pharaoh_Atemalso requested comaintainership for snapd in pkgdb: https://admin.fedoraproject.org/pkgdb/package/rpms/snapd/14:59
tptrogra_: intel stick is booting your image ok from the internal mmc. yey. :-)15:06
tptrthanks a lot for the help15:11
mupPR snapcraft#880 opened: Remove license concepts <Created by sergiusens> <https://github.com/snapcore/snapcraft/pull/880>15:11
ogra_tptr, thanks for verifying the fix ;)15:12
mupPR snapcraft#881 opened: Catkin plugin: Python nodes require gcc/g++ too <Created by kyrofa> <https://github.com/snapcore/snapcraft/pull/881>15:29
mupBug #1638320 opened: remove core snap via snapweb fails but it still removes from the web interface <Snappy:New> <https://launchpad.net/bugs/1638320>15:36
Pharaoh_Atemzyga: snapd-glib approved15:42
zygaPharaoh_Atem: thanks, I'll do the rest :)15:44
mupPR snapd#2240 closed: interfaces: network-manager: give slot full read-write access to /run… <Created by morphis> <Merged by jdstrand> <https://github.com/snapcore/snapd/pull/2240>15:44
mupPR snapcraft#788 closed: support npm install from npm-shrinkwrap.json in nodejs plugin <Created by mvayngrib> <Closed by kyrofa> <https://github.com/snapcore/snapcraft/pull/788>15:44
Croephatptr: is your intel compute stick working with wifi/hdmi audio/ and direct rendering?15:45
Croephai was using the linuxium sources to get those features, had to roll my own kernel15:45
tptrI am using it only for some IoT usecase. no graphics... model is STK1A32SC16:00
tptrjust struggling to make docker available to my own snap somehow...16:01
tptrpreviously I used it with 15.04 snappy image. there wifi was working fine too.16:02
tptrso far all looks good with the 16.04 too... using the above image from ogra_16:03
=== devil is now known as Guest16096
=== JanC_ is now known as JanC
threshhi.  how do I go about the autotools-based project where I need to build something before launching actual configure/make/makeinstall?16:28
Pharaoh_Atemzyga: there's no point in submitted snapd-glib yet16:29
Pharaoh_Atemyou don't have snapd with it16:29
Pharaoh_Atemit's completely useless without it16:29
kyrofathresh, you mean you need to run a command before configure?16:30
threshkyrofa, exactly, yeah.16:30
threshand the command is not autoreconf :)16:30
kyrofathresh, you'll need to create a plugin within your project for snapcraft to use16:31
kyrofathresh, are you familiar with that at all?16:31
zygaPharaoh_Atem: nobody can download and test it16:32
zygaPharaoh_Atem: we'll get snapd in in a few hours16:32
zygaPharaoh_Atem: did you try running any snaps?16:33
Pharaoh_Atemonce built in koji, people can do that16:33
zygaPharaoh_Atem: with some workaround for /tmp?16:33
zygaPharaoh_Atem: ook16:33
threshkyrofa, I'm not.  I'm actually trying to make VLC (http://git.videolan.org/?p=vlc.git;a=tree;f=extras/package/snap) use the contribs (self-built deps) instead of Ubuntu ones, which are outdated (only Zesty seems to have needed ffmpeg).16:33
Pharaoh_AtemI can write a temporary patch to add support for read/write /tmp in the selinux policy16:33
threshkyrofa, any tips on how to do that?  Appreciate it.16:34
zygaPharaoh_Atem: please do16:34
zygaPharaoh_Atem: let's check that it works16:34
zygaPharaoh_Atem: and undo it later tonight16:34
kyrofathresh, of course, let me grab some docs for you16:34
kyrofathresh, here's a high-level example: https://github.com/snapcore/snapcraft/blob/master/docs/plugins.md16:35
zygaPharaoh_Atem: so the package in mater is good, we'd have to rev the policy and later on rev both when it's ready16:35
kyrofathresh, yours might look a little more similar to this one: https://github.com/nextcloud/nextcloud-snap/blob/master/parts/plugins/x-redis.py16:36
kyrofathresh, that one needed to run `make install PREFIX=` instead of `make install DESTDIR=` (the make plugin now supports this, but it didn't at the time)16:37
kyrofathresh, so you can almost copy this, inherit from the autotools plugin, and run the commands you need16:37
threshkyrofa, right, seems easy!  Thanks!16:37
kyrofathresh, any time :)16:37
kyrofaLet me know if you run into problems16:38
mupBug #1638334 opened: snap install not properly generating ConnectedSlot policy when auto-connecting via snap-declaration-allowed connection <Snappy:New> <https://launchpad.net/bugs/1638334>16:40
Pharaoh_Atemzyga: I've added a patch for it16:50
Pharaoh_Atemyou can go ahead and build for all targets and merge it into the update that includes snap-confine and snapd-glib16:51
zygaPharaoh_Atem: I don't know how to merge updates in bodhi16:53
Pharaoh_Atemit's super easy16:53
zygaPharaoh_Atem: did you test it in any way? any hello snaps running?16:53
Pharaoh_AtemI have not, as I'm at work and it's tricky for me to do that16:53
sborovkovHello. Anyone knows how I can trigger first boot again on classic? We are creating image from classic, need it to repartition free space when users use the resulting image16:53
zygaPharaoh_Atem: ok, Ill check16:53
Pharaoh_Atemcool16:53
zygaPharaoh_Atem: FYI: https://github.com/zyga/snapcore-fedora/issues/416:53
zygaPharaoh_Atem: I think we need to try it on a cloud variant too16:54
zygaPharaoh_Atem: but we can do  that after trying workstating16:54
zygaworkstation*16:54
zygaPharaoh_Atem: thank you again :) building now16:55
Pharaoh_AtemI know what's wrong with the cloud thing16:56
Pharaoh_Atemmismatched kernel packages16:56
zygaPharaoh_Atem: can we somehow fix that?16:57
zygaPharaoh_Atem: something we can improve in fedora?16:57
Pharaoh_Atemnot really, people just need to make sure they install kernel-modules matching their kernel, or get things upgraded properly16:57
zygaPharaoh_Atem: or in the dependencies in snapd.spec?16:57
* Pharaoh_Atem shrugs16:57
Pharaoh_Atemthe kernel package is multiversioned16:57
zygaPharaoh_Atem: well, we install kernel-modules via a dependency16:57
zygaPharaoh_Atem: hmm hmm hmm16:57
Pharaoh_Atemthere has been talk of making a DNF plugin to handle this by providing additional, environment specific hints16:58
zygaPharaoh_Atem: ok, at least you've identified the issue correctly, thanks16:58
Pharaoh_Atemsee this thread (relevant in our case as well): http://lists.rpm.org/pipermail/rpm-ecosystem/2016-October/000430.html16:58
zygalooking16:59
threshkyrofa, looks like I got it working, many thanks!17:00
kyrofathresh, excellent!17:00
zygaPharaoh_Atem: maybe those should be snaps? :)17:02
Pharaoh_Atemugh17:03
Pharaoh_Atemwhen snapcraft and snapd are properly decoupled from Ubuntu so that a Fedora-built Snappy Core could be done, we'll talk then17:03
zygaPharaoh_Atem: very soon I hope :)17:03
zygaPharaoh_Atem: one more thing17:09
zygaPharaoh_Atem: lis 01 19:08:45 fedora24 setroubleshoot[51485]: SELinux is preventing snapd from execute access on the file unsquashfs. For complete SELinux messages. run sealert -l 116eed8f-b15a-4a60-9532-3268ba61649717:09
Pharaoh_Atemmrgh17:09
Pharaoh_AtemI thought I got all of those17:09
zygaPharaoh_Atem: but it download now17:09
zygaPharaoh_Atem: we're so so close now17:09
Pharaoh_AtemI'm revoking your bodhi updates17:09
zygaPharaoh_Atem: OK17:10
zygaPharaoh_Atem: is that something we can fix quickly today?17:14
Pharaoh_Atemyes, but I need to set up a fresh VM17:15
Pharaoh_AtemI have to add more rules... :/17:15
AlbertAquestion: if I declare a package through stage-packages is there a way to only include a subset of files from that package?17:23
Pharaoh_Atempurge the files afterward?17:24
AlbertAfor example I've tried this: http://pastebin.ubuntu.com/23412484/17:24
zygaPharaoh_Atem: purge?17:24
zygaPharaoh_Atem: ah, sorry :)17:24
AlbertAbut I get "[Errno 2] No such file or directory: '/home/alberto/source/mir-demos-snap/stage/usr/share/doc-base'" during priming17:24
AlbertAPharaoh_Atem: purge? how though?17:28
=== Guest16096 is now known as devil_
sborovkovHello. Anyone knows how I can trigger first boot again on classic? We are creating image from classic, need it to repartition free space when users flash the resulting image.18:07
ogra_sborovkov, thats not in firstboot but inside the special core initrd (you need to resize before anything gets mounted if you dont want to risk corruption)18:11
ogra_you wont get it on classic18:11
mupPR snapd#2241 opened: overlord/state: introduce state lanes <Created by niemeyer> <https://github.com/snapcore/snapd/pull/2241>18:11
ogra_(without hacking your own resize initrd together)18:12
mupPR snapd#2242 opened: tests: do not use hello-world in our tests <Created by mvo5> <https://github.com/snapcore/snapd/pull/2242>18:17
pmcgowanogra_, if my dragonboard is rebooting itself that means I got a new kernel?18:30
sborovkovogra_: oh ok, that's unfortunate18:33
mupPR snapcraft#882 opened: Python plugin: remove pip packages when cleaning pull <Created by kyrofa> <https://github.com/snapcore/snapcraft/pull/882>18:47
kyrofapmcgowan, either a new kernel or a new core18:54
pmcgowankyrofa, ack thanks18:56
mterryHow do I unpack a snap, so I can quick edit and repack it?19:08
mterryI thought it used to be a command under 'snap', but don't see it any longer19:08
=== JanC_ is now known as JanC
kyrofamterry, you mean snap try?19:56
kyrofamterry, it doesn't quite do that, but it allows you to edit it while mounted rather than going all the way to creating the squashfs19:56
=== robert_ancell_ is now known as robert_ancell
mupPR snapd#2227 closed: overlord/snapstate: add dynamic snapdX.Y assumes <Critical> <Created by niemeyer> <Merged by niemeyer> <https://github.com/snapcore/snapd/pull/2227>20:22
mupPR snapd#2232 closed: many: fix incorrect security files generation on undo <Critical> <Created by mvo5> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/2232>20:23
mupPR snapcraft#882 closed: Python plugin: remove pip packages when cleaning pull <Created by kyrofa> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/882>20:41
ogra_pmcgowan, snap changes (and snap change $changenumber) will tell you ;)20:45
mupPR snapd#2243 opened: overlord/ifacestate: add unit tests for undo of setup-snap-security <Created by zyga> <https://github.com/snapcore/snapd/pull/2243>20:45
pmcgowanogra_, I see it  Update kernel and core snap revisions20:46
ogra_well, then it eventually reboots :)20:46
ogra_the changes should have timestamps so you can see if they match the reboot20:46
pmcgowanyeah it says it requested it20:48
Pharaoh_Atemmhall119 & zyga: the presets have been merged into fedora-release for f24, f25, and rawhide/f2621:05
Pharaoh_AtemFedora 25 final will be the first release of Fedora where the installation of snapd will automatically activate the socket21:06
Pharaoh_Atemso that "snap install" will Just Work(TM)21:06
zygaPharaoh_Atem: :-)21:11
Pharaoh_Atemand snap install hello threw no denials related to the policy :)21:12
mupPR snapd#2239 closed:  snap, image: fix `snap download` and `snap prepare-image` running as user <Created by mvo5> <Closed by niemeyer> <https://github.com/snapcore/snapd/pull/2239>21:32
mupPR snapd#2229 closed: interfaces/sytemd: enable/disable generated service units <Critical> <Created by morphis> <Merged by niemeyer> <https://github.com/snapcore/snapd/pull/2229>21:34
mupPR snapd#2244 opened: snapstae: use lanes when building a "refresh-many" change <Created by mvo5> <https://github.com/snapcore/snapd/pull/2244>21:38
mupPR snapd#2224 closed: overlord/snapstate: update ux around explicit refresh of reverted, an… <Critical> <Created by chipaca> <Merged by niemeyer> <https://github.com/snapcore/snapd/pull/2224>21:46
mupPR snapcraft#883 opened: python plugin: wheel and install in the proper order <Created by sergiusens> <https://github.com/snapcore/snapcraft/pull/883>21:56
mupPR snapd#2241 closed: overlord/state: introduce state lanes <Critical> <Created by niemeyer> <Merged by niemeyer> <https://github.com/snapcore/snapd/pull/2241>21:57
mupPR snapd#2245 opened: overlord/state: marshaling tests for lanes <Created by niemeyer> <https://github.com/snapcore/snapd/pull/2245>22:12
mupPR snapd#2244 closed: snapstate: use lanes when building a "refresh-many" change <Critical> <Created by mvo5> <Closed by niemeyer> <https://github.com/snapcore/snapd/pull/2244>22:43
zygaPharaoh_Atem: around?22:49
mupBug #1638405 opened: libunity not added to LD_LIBRARY_PATH <Snappy:New> <https://launchpad.net/bugs/1638405>23:00
mupPR snapd#2245 closed: overlord/state: marshaling tests for lanes <Critical> <Created by niemeyer> <Merged by niemeyer> <https://github.com/snapcore/snapd/pull/2245>23:02
mupBug #1638405 changed: libunity not added to LD_LIBRARY_PATH <Snapcraft:New> <Snappy:Invalid> <https://launchpad.net/bugs/1638405>23:03
mupPR snapd#2213 closed: tests: skip tests that use expect when expect is not working (like on ppc64el) <Critical> <Created by mvo5> <Closed by niemeyer> <https://github.com/snapcore/snapd/pull/2213>23:07
* mwhudson wonders if the snapd autopkgtest just needs some zesty upload to ppa:snappy-dev/image23:08
mupPR snapd#2237 closed: daemon,overlord,snap,tests: download to .partial in final dir <Critical> <Created by mvo5> <Merged by niemeyer> <https://github.com/snapcore/snapd/pull/2237>23:10
mupPR snapd#2243 closed: overlord/ifacestate: add unit tests for undo of setup-snap-security <Created by zyga> <Merged by niemeyer> <https://github.com/snapcore/snapd/pull/2243>23:13
=== JanC is now known as Guest13101
=== JanC_ is now known as JanC
mupPR snapd#2246 opened: releasing package snapd version 2.17 <Created by mvo5> <https://github.com/snapcore/snapd/pull/2246>23:24

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!