/srv/irclogs.ubuntu.com/2016/11/07/#snappy.txt

ahoneybunmm00:54
ahoneybunmhall119: http://pastebin.ubuntu.com/23439646/00:55
ahoneybunit says I have a too old intltool but I have have a new one00:55
ahoneybun0.51 over 0.5100:55
ahoneybun*0.5000:55
ahoneybunohhh00:55
trustyAre there any limitations to using snap within a chroot? I'm running xenial on a chromebook using crouton. Snapcraft with install-suggested seems to work fine but snap commands fail.01:35
trustysnap list . returns error: cannot list snaps: cannot communicate with server: Get http://localhost/v2/snaps: dial unix /run/snapd-snap.socket: connect: no such file or directory01:37
Son_Gokutrusty, yes01:37
Son_Gokuyou cannot run snaps confined01:37
Son_Gokuor in a space where /dev, /proc, /sys, etc. are fake01:37
Son_Gokuerr, snapd cannot be run confined01:37
Son_Gokusnaps can be run confined, obviously01:39
trustyThat was my suspicion.  Running the commands seemed to be dependent on /run/snapd-snap.socket but it doesn't exist when I try to find it.01:39
trustyThanks for the quick answer, I couldn't find anything mentioning that limitation!01:41
mupPR snapcraft#889 opened: Enable snap revision caching on 'push' <Created by squidsoup> <https://github.com/snapcore/snapcraft/pull/889>03:20
=== chihchun_afk is now known as chihchun
foxmaskbonjello07:27
tsdgeosqengho: on friday you mentioned "post-install runs have to be done at "stage" or "snap" time, when fabricating a snap package.", i've been finding info about how to run commands at "stage" or "snap" time and have failed :/08:50
tsdgeossome pointer?08:50
tsdgeosoh, bad time for him08:51
tsdgeosanyone else? ↑↑↑08:51
didrocksI don't know what he was referring to, but you can't have commands run at stage or snap time08:53
didrockshowever, in the install phase of any parts, you can have a custom plugin acting on the parts/part_name/install/ directory08:54
didrockstsdgeos: what's your use case to try to modify the stage/ or prime/ directory (and not install/ btw?)09:00
tsdgeosdidrocks: need to create the default cursor set09:00
tsdgeosupdate-alternatives --install /usr/share/icons/default/index.theme \09:01
tsdgeos        x-cursor-theme /usr/share/icons/DMZ-White/cursor.theme 10009:01
tsdgeosneed to run this, or create the symlink by hand09:01
tsdgeosi guess i could have a fake cmake part-plugin that ran that command?09:03
=== davmor2_HOLS is now known as davmor2
tsdgeosbut looks kind of dirty09:04
didrockstsdgeos: I'm afraid, you don't have any other options09:15
didrocksand this one can be after: []09:15
mupBug #1639746 opened: Snap launching other snaps <snapd-interface> <Snappy:New> <https://launchpad.net/bugs/1639746>10:03
tsdgeosi deel dirty now10:08
tsdgeoshttps://code.launchpad.net/~aacid/unity8-session-snap/install_cursor_symlink/+merge/31016910:08
spineaudidrocks: I'd add checkbox (our QA test runner) to the list (the one you reported in #1639746) as we do need to run other snap commands from within the test snap10:09
mupBug #1639746: Snap launching other snaps <snapd-interface> <Snappy:New> <https://launchpad.net/bugs/1639746>10:09
spineauzyga is well aware of the issue10:09
didrocksspineau: please do edit comment :)10:14
spineaudidrocks: ok, I will. thanks10:14
mupBug #1638502 opened: Can't cancel email registration step <Snappy:New> <subiquity (Ubuntu):New> <https://launchpad.net/bugs/1638502>11:34
=== chihchun is now known as chihchun_afk
steve___hello11:38
steve___i am quite new to snap actually i just used it the first time. I installed a service which is listening on the public ip address and i connect to it. works fine etc. but i actually want to change it so it will listen on the machines local interface so i can define an apache forward to the service. I am just not sure how to change the interface in snap can anyone point me to the right direction11:39
renato__Mirv, hey, what is the status of the launcher? Do you have something that you want me to try?11:46
kalikiana_stgraber: Seems like the MR now has a weird CI failure where some Go API can't be pulled https://github.com/snapcore/snapd/pull/222511:50
mupPR snapd#2225: Implement lxd-client interface exposing the lxd snap <Created by kalikiana> <https://github.com/snapcore/snapd/pull/2225>11:50
Mirvrenato__: I've a pull request (https://github.com/ubuntu/snapcraft-desktop-helpers/pull/18) not yet need for testing until it's actually really there. meanwhile update (if you did not yet) your references to ubuntu-app-platform, slot name to platform, and content: field to have version ("ubuntu-app-platform1")12:02
mupPR ubuntu/snapcraft-desktop-helpers#18: Initial addition of ubuntu-app-platform shared snap use for Qt and other Ubuntu's libraries <Created by tjyrinki> <https://github.com/ubuntu/snapcraft-desktop-helpers/pull/18>12:02
renato__Mirv, ok let me update that12:04
renato__Mirv, did you test if gtk apps works with this launcher. I was having problems to run calendar app last week12:05
renato__Mirv, I will try compile your snapcraft branch and test it with calendar app12:07
Mirvrenato__: not yet. it's not snapcraft branch but the cloud part branch.12:09
ogra_steve___, i dont think that is something you can manage through the interface ... the interface is mainly an on/off switch for accessing or managing network at all from your snap ... your app would have to manage to only accept connections from 127.0.0.112:11
=== hikiko is now known as hikiko|ln
cjwatsonqengho: "Do we have any way of knowing when snapcraft builder for launchpad-hosted snap building is updated?"  This suggests some confusion about how it works.  Launchpad doesn't have its own snapcraft version; it pulls snapcraft from the archive you point it to.  There's no separate "update Launchpad's version" step.13:02
Son_Gokusergiusens: hey, can you look over https://github.com/snapcore/snapcraft/pull/870?13:07
mupPR snapcraft#870: sources: Add RPM source <Created by Conan-Kudo> <https://github.com/snapcore/snapcraft/pull/870>13:07
FJKong_hello, how can I set a snap have permission to write disk?13:16
FJKong_plugs [home] not enough I think13:17
didrocksFJKong_: where do you want to write? You can only write to some specific directories13:18
didrocks(see the documentation covering this and env variable where you can write to)13:18
FJKong_for example, the snap is a command line tool, it accept input from a file and output to another file,, maybe user want to save result to antwhere he wants13:19
FJKong_antwhere/anywhere13:20
didrocksFJKong_: that's not the snap concept, you can have the home plug to save to home, but otherwise, you need to save in $SNAP_USER_DATA13:28
FJKong_didrocks: I see13:28
didrocksogra_: do you have/want a bug to expose the gpio interface in some boards like pi2/3?13:33
ogra_want :)13:33
ogra_(nobody filed one yet ... )13:33
didrockswhich project?13:33
didrocksI never know for gadget snaps what to use…13:34
ogra_just snappy13:34
didrocksok, doing then!13:34
ogra_(see topic)13:34
didrocksyeah, but we do snapcraft for snapcraft ;)13:34
didrocksand it's ubuntu core technically :p13:34
ogra_well, the umbrella project is still "snappy" ... fgeel free to transition it to a new project name (and happy bug moving :P )13:35
=== hikiko|ln is now known as hikiko
didrocksogra_: we have the launchpad api for this! :-)13:42
mupPR snapd#2268 opened: many: merge snap-confine into snapd <Created by zyga> <https://github.com/snapcore/snapd/pull/2268>13:42
qenghocjwatson: Yes, I was confused. I guess the snapcraft version is the max of what's in the Source-archive Primary/PPA I pick, or the Pocket Updates/Release/Security/Proposed/Backports.13:42
didrocksogra_: if you want to grab it: https://bugs.launchpad.net/snappy/+bug/163979813:43
mupBug #1639798: enable gpio interface for rpi2/3 (and other boards if suited) <Snappy:New> <https://launchpad.net/bugs/1639798>13:43
ogra_joc_, i think you had some example gadget for that, could you paste something to that bug ? ˝^˝^˝^13:44
mupBug #1639798 opened: enable gpio interface for rpi2/3 (and other boards if suited) <Snappy:New> <https://launchpad.net/bugs/1639798>13:44
cjwatsonqengho: More or less, yes.13:44
cjwatsonqengho: Usual apt rules for the sources.list we write out, which you can pretty much infer from the build log.13:44
qenghothx13:46
=== izznogooood is now known as izzno
davmor2ogra_: https://bugs.launchpad.net/ubuntu/+source/subiquity/+bug/1639799 :) your welcome :)13:49
mupBug #1639799: No information provided on how to create an account if you don't have one <subiquity (Ubuntu):New> <https://launchpad.net/bugs/1639799>13:49
kgunndidrocks: hey, figure you might know...is there a recommended way of determining in a helper file if you're on ubuntu-core vs snaps-on-classic?14:10
didrockskgunn: oh, good question, I have some ideas (but hacks)14:11
Mirvdidrocks: isn't [ ! -d directoryname ] standard posix shell too, no need for command execution?14:12
didrocksthe host fs is in /var/lib/snapd/hostfs. I don't know if it's exported as well under ubuntu core, but if it is, you can use some files to """rely""" you are on classic or core14:12
didrockskgunn: this should help you ^ but I'm now curious and the obligatory question is what's your use-case?14:13
didrocksMirv: oh correct, way better :)14:13
Mirvdidrocks: right, pushed, thanks!14:14
kgunndidrocks: Mirv ...so for instance, webbrowser could be on X11-classic, unity8/mir-classic & mir-kiosk-on-core14:14
kgunnso can't just check for mir...14:14
kgunncause it could be either place14:14
didrockskgunn: one sec, testing something14:14
kgunndidrocks: sure...14:15
didrocksMirv: merged, thanks! :)14:15
kgunnkind surprised there's not a bespoke env var or something14:15
didrockskgunn: yeah, kind of same than not having ARCH_TRIPLET as well14:15
ogra_kgunn, hmm ... theoretically /etc7os-release should tell you14:15
ogra_*/etc/os-release14:15
ogra_but i just notice that mvo's patch isnt applied here so on a core image it doesnt say what it should14:16
didrockskgunn: ok, forget the /var/lib/snapd/hostfs idea, the security profile prevents you looking at it (I wonder why we do this bindmount thus)14:17
didrocksmaybe once mvo's pach is merged, ogra_'s suggestion will be the only one ^14:17
kgunnsure14:17
ogra_ARGH "14:17
ogra_!14:17
ogra_http://paste.ubuntu.com/23442090/14:17
kgunnogra_: where is that change? e.g. can i rebuild snapd trunk?14:18
ogra_18-set-os-release.chroot: ....14:18
didrocksogra_: : !!! :)14:18
ogra_(niote the colon)14:18
ogra_i'll fix that now, but the fix will only be in the edge channel14:18
didrockskgunn: seemsit's only on the livefs build ^ :)14:18
kgunnright, figured it was part of the image build step14:19
didrocksMirv: keep me posted if you need help testing once you upload something to the store, I'm interesting to help you there!14:19
kalikiana_kgunn: for the socket path? Sounds like it's the same problem users of the lxd snap will have. My solution so far was to just try and fallback14:19
ogra_FYI http://paste.ubuntu.com/23442095/ this is how it should look like14:20
ogra_kgunn, so checking the ID field should be a good way14:20
kgunnkalikiana_: ta14:21
kgunnogra_: thanks14:21
* kgunn squirells away14:21
Mirvdidrocks: sure, thank you for the quick reviews14:21
didrocksMirv: was an easy task, you did all the hard stuff! :)14:23
kgunnkalikiana_: and just to answer fully, there's a bunch of other env vars that you have to reset to include $SNAP like xdg and mir.... so it's more than just the socket14:24
jdstrandmwhudson: hey-- I saw your email regarding console-conf network rewrite. curious if that will fix ipv6 configuration. over the weekend I tried to setup a static ipv6 address on a bbb and it just wouldn't let me get even down into the form to input the info14:27
jdstrandmwhudson: it was like it did a check to see if it could do ipv6 and failed that and short-circuited. I updated /etc/netplan/00-* and did 'netplan apply' manually and it worked fine14:27
jdstrandmwhudson: I can file a bug if needed. I didn't yet cause I'm not sure yet where that bug should be filed...14:28
mhall119jdstrand: is there an interface currently available that would fix this: https://issues.apache.org/jira/browse/COUCHDB-3226 ?14:31
mhall119Erlang's os_mon library seems to be calling df, and couchdb uses that library to check on disk space usage14:32
mupPR snapd#2247 closed: interfaces/builtin/mir: allow client access to /dev/shm/ <Created by albaguirre> <Closed by albaguirre> <https://github.com/snapcore/snapd/pull/2247>14:33
MikeB_Just wanted to close a loop from a couple weeks ago...14:34
MikeB_I was having problems building a custom kernel snap then using ubuntu-core to build a custom image...14:35
ogra_kgunn, didrocks, ah, i notice mvo already fixed the os-release file ... but only in the edge channel14:36
MikeB_After installing hello-world snap and rebooting; snapd failed to start because snapd was "too old".14:36
ogra_ogra@dragon:~$ grep ^ID /etc/os-release14:37
ogra_ID=ubuntu-core14:37
MikeB_So, with snapcraft kernel plugin modified to pull from stable and using ubuntu-image to build from stable, my custom image now works fine.  I can install hello-world snap and reboot successfully.14:37
ogra_MikeB_, what channel did your image use ?14:37
mhall119niemeyer: where are we with the configure hook documentation? I saw someone asking in the mailing list, and I also would like to start using it for a project I'm working on14:37
ogra_ah, stable14:38
ogra_that was in fact way to old until last thu.14:38
ogra_(when a new stable core snap was released)14:38
ogra_so when you built after thu your image should be fine14:39
MikeB_ogra_, correct.  I waited for stable to get a more modern ubuntu-core and that did seem to solve my problem.14:39
ogra_all builds before thu from the stable channel would have had a 3 months old snapd14:39
didrocksogra_: oh ok :)14:39
jdstrandmhall119: if they shipped df themselves, they could use 'mount-observe'. I'll add df to that interface14:40
MikeB_ogra_, also nice to see that ubuntu-image can now build from stable without the workaround where you have to download the gadgets from ~vorlon/snappy-hub/snappy-systems.  Looks like they are now included in stable.14:41
ogra_yep14:41
ogra_(they have been in edge and beta for months ... but we didnt have a stable release yet)14:42
slangasekogra_: right; I think we ought to have pushed them to stable well before now given that the stuff previously in "stable" wasn't of particular use, but it's done now :)14:48
mhall119jdstrand: that would only work if os_mon called ${SNAP}/bin/df through wouldn't it?14:49
ogra_yeah14:49
didrocksmhall119: $SNAP/bin is in $PATH though via snapcraft or the wrapper script14:49
jdstrandmhall119: or if they set their PATH in a wrapper so that  ${SNAP}/bin is before /bin14:50
mhall119didrocks: I mean, if it's hard coded to look for /bin/df then simply including 'df' in the snap won't help14:50
renato__didrocks, hey I am trying to use Mirv shared content, with calendar app and I am getting this message "No schema files found: doing nothing."14:50
didrocksah, hardcoded… yeah, it's hardcoded :)14:50
didrocksrenato__: sounds like it's gsettings related?14:50
jdstrandoh if it is hard-coded, that is different14:50
renato__didrocks, this is related with gsettings schema, any Idea how to fix that?14:50
mhall119jdstrand: yeah, that's what I'm checking on14:50
didrocksrenato__: do you have/rely on any?14:50
jdstrandthat would also be a really weird thing to do-- they should not do that :)14:50
renato__didrocks, this does not happen with gtk-launch14:51
ogra_haha14:51
mhall119jdstrand: well.....Erlang....14:51
ogra_wishful thinking14:51
jdstrandregardless, I added to my todo to add df to mount-observe14:51
renato__didrocks, yes I am using eds libraries that rely on this14:51
mhall119jdstrand: thanks14:51
wolflarson /j #rocketchat14:51
didrocksrenato__: I think you to stage it then. I doubt Mirv's platform runtime ships them14:51
didrocksrenato__: the launcher still handles them, if you have any14:51
mhall119jdstrand: if 'df' is part of the ubuntu core image, and a snap has mount-observe, is there a risk in allowing it to execute /bin/df directly rather than including it?14:52
jdstrandmhall119: that is what I'm saying. no, there is no risk to that and I will be adding /bin/df to mount-observe14:52
renato__didrocks, I copied this from gtk-launch to my launcher: http://paste.ubuntu.com/23442214/14:52
mhall119jdstrand: ah, perfect, thanks14:53
renato__didrocks, I do not want to use gtk-launch this use a lot of space, we I am trying to avoid that14:53
jdstrandmhall119: the PATH stuff and including df in the snap is just for in the meantime14:53
mhall119jdstrand: do you want me to open a bug report for that?14:53
jdstrandmhall119: you can if it helps you, but I don't need it (it is already in the policy updates card I will be working on soon)14:54
didrocksrenato__: ok, the gsettings schema compilation is harmless, I can add it to common14:54
didrocksrenato__: it will compile them if you have some .xml gsettings schema and $SNAP/usr/lib/$ARCH/glib-2.0/glib-compile-schemas installed14:55
didrocksrenato__: just be aware that until the gsettings interface is fixed, you need the home plug to access your changes from default14:55
renato__didrocks, humm something still missing, since this still not working if I copy this code to my launcher14:56
renato__but it work if I use gtk-launch14:56
didrocksrenato__: don't use the gtk-launch code though, it's quite ugly and not robust, but yeah, you might need a dep, do you have the glib-compile-schemas file?14:56
renato__didrocks, not in my project. Probably this is installed by eds-client libraries that is already part of Mirv package14:57
didrocksrenato__: you need to stage libglib2.0-bin then14:59
didrocksif you don't, already14:59
didrocksI don't think it's part of Mirv's platform runner14:59
didrocks(and TBH, it shouldn't)14:59
renato__didrocks, I do not have any dep on my project anymore14:59
renato__didrocks, yeah Mirv has added glib and gtk on his project. I think15:00
didrocksdid he add the -bin binaries?15:00
didrocksjust check if you snap ship that file ^15:00
renato__didrocks,  I was hopping to replace gtk-launcher with his launcher15:00
renato__didrocks, my snap just ship the application files15:00
didrocksrenato__: that's what I'm trying you to help with :)15:00
didrocksso, can you look if you have that file staged or as part of Mirv's platform runtime? ^15:01
Mirvrenato__: not really, but I added the calendar deps to it (which might be too much if it brings too much in) - qtdeclarative5-ubuntu-syncmonitor0.1 qtcontact5-galera qtorganizer5-eds15:01
renato__Mirv, yes this should work since 'qtorganizer5-eds' depens on ed libs that depend on gtk/glib15:02
renato__but for some reason is not working15:02
didrocksdo you read what I'm writing?15:02
didrocksagain, do you have glib-compile-schemas in your snap?15:02
didrockseither the platform one15:02
didrocksor yours15:02
didrockswithout this, yeah, it will NOT work15:02
didrocksand this isn't shipped in the glib lib packages15:03
didrocksit's only shipped in the -bin package15:03
didrocksas it's a tool15:03
renato__didrocks, not in my snap for sure, let me check Mirv package15:03
renato__didrocks, yes it is present on Mirv package: ./lib/x86_64-linux-gnu/glib-2.0/glib-compile-schemas15:04
didrocksok, so it's available in that special platform path15:05
didrockslet me special case the qt launcher for it then15:05
* didrocks would like to avoid code duplication15:06
didrocksrenato__: can you edit your launcher for a test?15:10
renato__didrocks, sure15:10
renato__didrocks, this is the current code: http://bazaar.launchpad.net/~renatofilho/ubuntu-calendar-app/snappy-runtime/view/head:/snap/ubuntu-calendar-app.wrapper15:11
renato__most of the code was copied from gtk-launcher15:12
didrocksargh, pastebinit fails…15:12
didrocksrenato__: remove the copy from gtk-launcher, you are using desktop-launch, right?15:12
renato__didrocks, no. I was waiting Mirv launcher to land to use it15:13
didrocksrenato__: ah, I did the fix in it15:13
didrocksit's this launcher15:13
didrocksand it's pushed15:13
didrocksI fixed this issue I guess15:13
didrocksmind trying it?15:13
renato__didrocks, sure how I can test it?15:13
didrocksrenato__: the cloud part is desktop-ubuntu-app-platform15:14
didrocksso, just depend on that and prepend your binary with desktop-launch15:14
Mirvrenato__: fetch the newest build of the shared snap too while we don't have yet it in store: https://code.launchpad.net/~timo-jyrinki/+snap/ubuntu-app-platform/+build/9346/+files/ubuntu-app-platform_5.6.1_amd64.snap15:14
Mirvfixed the content versioning to match what was merged to the cloud part15:16
renato__didrocks, do you mean add: "after: [desktop-ubuntu-app-platform]" or just the "plug" entry is enough?15:16
didrocksrenato__: yeah, "after: [desktop-ubuntu-app-platform]"15:16
renato__ok15:16
Mirvrenato__: should I update the parts wiki page to match?15:16
Mirvdidrocks: I mean you ^15:16
didrocksrenato__: then your apps: will have command: dekstop-launch <yourstuff>15:16
didrocksdesktop-launch*15:16
didrocksMirv: what did you change?15:16
renato__Mirv, where is the wiki page?15:16
didrocksoh, you didn't update it to pick it?15:17
Mirvrenato__: ignore15:17
Mirvdidrocks: it doesn't have the desktop-ubuntu-app-platform yet15:17
didrocksMirv: yeah, you need to update the wiki part15:17
Mirvdidrocks: ok, doing15:17
kgunndidrocks: hey, we're using content interface to serve up mir libraries...that can be used for any mir-client....so ultimately, we'd want people to "know" this for them to use and put15:17
kgunninto their yaml, but question is...is there any way to auto-promote this?15:18
kgunnor does the existance of such a desire/convention rely on "people just have to know"15:18
renato__kgunn, we will need a launcher for that too? :(15:18
didrocksrenato__: so, as it's not up to date yet, you need to copy https://github.com/ubuntu/snapcraft-desktop-helpers/blob/master/snapcraft.yaml#L299 (from this line to the end) as an additional part15:18
didrockskgunn: from what I know, we rely on people doing "snapcraft search" (that + blog post), but it seems it fails a little bit as renato__ didn't know about the cloud parts for desktop launcher and still using gtk-launcher15:19
didrockskgunn: that and future documentation15:19
didrockskgunn: I hope codelabs could help unblock people (like having a codelab on using mir in snaps)15:19
didrockssame for qt apps15:19
zygao/15:20
kgunndidrocks: but in a snap world....there are no "wrong answers"15:20
kgunne.g. you can bundle up anything/everything you want....15:20
kgunnso i don't disagree we will have to promote15:20
kgunnbut it would be cool if there were some automagic way (like a "ubuntu-snapcraft-plugin") that scrubbed your yaml15:21
didrockskgunn: I would love having autocompletion on this with at least one IDE integration15:21
kgunnand if it sees you including libs, it could warn...."hey these libs are in this snap via content interface"15:21
didrocks(I guess that would be a great discovery patterns)15:21
Mirvrenato__: didrocks: ok added, there's some 30min delay I think before it's in use. I'll leave meanwhile but we can continue tomorrow.15:21
abeatojdstrand, hi, have some small changes to the modemmanager interface: https://github.com/snapcore/snapd/pull/225215:22
mupPR snapd#2252: interfaces: add unconfined access to modem-manager <Created by alfonsosanchezbeato> <https://github.com/snapcore/snapd/pull/2252>15:22
didrocksMirv: yeah, I gave what to copy for renato__ to not be blocked on that delay ^15:22
didrocksMirv: see you tomorrow :)15:22
Mirvah, ok15:22
abeatojdstrand, note also ofono interface is pending for merge15:22
Mirvrenato__: see the beginning of that yaml file for updated usage instructions on the newest platform snap that I linked you to - changed plug name, "1" in content field.15:23
renato__Mirv, didrocks, ok thanks, let me try that15:28
didrocksMirv: once we are all settled, it would be great to add a "demo/" in the corresponding directory from the desktop launcher15:30
mhall119jdstrand: does ubuntu core provide openssl for snaps to use, or does each snap need to include it's own copy?15:37
jdstrandmhall119: openssl is present and available via the default template15:38
mhall119thanks jdstrand15:39
jdstrandabeato: ack15:39
abeatojdstrand, thanks15:39
renato__didrocks, Mirv , I am getting this now: http://paste.ubuntu.com/23442314/15:47
didrocksrenato__: interesting, do you mind to pastebin bin/desktop-launcher ?15:50
renato__sure15:50
didrocksit's like if there was a syntax error in it, but I don't see what…15:51
renato__didrocks, btw this is my project: https://code.launchpad.net/~renatofilho/ubuntu-calendar-app/snappy-runtime/+merge/31020015:51
didrocksrenato__: ah, up to date?15:51
renato__didrocks, yes with the changes that you asked15:52
didrocksyou still need to do some QML2_IMPORT_PATH mangling?15:52
renato__didrocks, this is the desktop-launcher present on my prime dir: http://paste.ubuntu.com/23442345/15:53
renato__didrocks, yes my app install some qml components.15:53
didrocksrenato__: ah, we should handle that in the launcher then, right now Mirv's patch removed those15:53
didrocksbut yeah, they should be added as well unconditionnally IMHO15:54
renato__didrocks, I agree15:54
didrocks(my goal is for you to have no wrapper)15:54
renato__didrocks, this will be great15:55
kalikiana_Hrm15:55
kalikiana_how do I fix this in my interface apparmor/seccomp?15:55
kalikiana_operation="mknod" [...] denied_mask="c"15:55
jdstrandkalikiana_: you need a 'w' rule15:56
kalikiana_jdstrand: I added rw, no difference15:56
jdstrand'c'reat() maps to 'w'rite15:56
jdstrandkalikiana_: what is the denial and what did you add?15:56
jdstrandkalikiana_: note that mknod is blocked by the seccomp policy so if you added the apparmor rule, seccomp likely blocked it15:57
kalikiana_/var/snap/lxd/common/lxd/client.crt rw, -> audit: type=1400 audit(1478531590.503:437): apparmor="DENIED" operation="mknod" profile="..." name="/var/snap/lxd/common/lxd/client.crt" pid=21756 comm="..." requested_mask="c" denied_mask="c" fsuid=1000 ouid=100015:57
kalikiana_I added mknod and open to apparmor as well15:58
kalikiana_Somehow this worked before, but I never had any of those rules15:58
jdstrandkalikiana_: what does 'snap interfaces' show?15:59
didrocksrenato__: interesting, you can't set variable names with -, this is the issue (in the launcher)16:01
didrocksrenato__: this needs a wider fix, as this is generated, will take me some time, but I have your code and will be able to try it this way16:01
didrocksrenato__: I'll probably work on this tomorrow morning if you don't mind16:01
kalikiana_jdstrand: lxd:lxd                  ubuntu-sdk-target16:01
kalikiana_:home                    ag-mcphail,dekko,handbrake-jz,libreoffice,lxd,neovim-kalikiana,nethack,spread,unity8-session,vlc16:01
kalikiana_:lxd-support             lxd16:01
kalikiana_:network                 dekko,handbrake-jz,libreoffice,lxd,neovim-kalikiana,snapweb,spread,ubuntu-sdk-target,vlc16:01
renato__didrocks, no problem. Thanks a lot16:01
kalikiana_jdstrand: ubuntu-sdk-target is my consumer of the lxd interface16:02
didrocksrenato__: no worry! sorry for the trouble, but as you are the first customer of that functionality, let's say you pay the price ;)16:02
renato__didrocks, send me a e-mail if need need a test16:02
renato__didrocks, yes I know. Thant. and I am here to help16:02
didrocksrenato__: will do! :)16:03
jdstranddidrocks, renato__: note that environment variables may not contain a '-': http://pubs.opengroup.org/onlinepubs/009695399/basedefs/xbd_chap08.html16:03
didrocksjdstrand: yeah, and as it's generated from the make flavor parameters (and qt5-app-ubuntu-platform is the first one to use this)16:04
jdstrandkalikiana_: can you paste the output of 'cat /var/lib/snapd/apaprmor/snap.lxd.lxd'?16:04
didrocksI need to do some sedderie in the make paramater that Mirv used16:04
kalikiana_jdstrand: http://paste.ubuntu.com/23442432/16:07
jdstrandkalikiana_: ok, based on what I am seeing there and the denial, it seems that lxd creates a client cert upon connection with lxc16:11
jdstrandkalikiana_: up above when you pasted the denial, you used an ellipse for the profile name. can you paste the full unredacted denial?16:12
kalikiana_jdstrand: Ah, sure, was just trying to keep it concise. Full line: [32204.339899] audit: type=1400 audit(1478531590.503:437): apparmor="DENIED" operation="mknod" profile="snap.ubuntu-sdk-target.ubuntu-sdk-target" name="/var/snap/lxd/common/lxd/client.crt" pid=21756 comm="usdk-target" requested_mask="c" denied_mask="c" fsuid=1000 ouid=100016:13
kalikiana_jdstrand: the cert file is being written from the api, and this from the client16:14
jdstrand'/var/snap/lxd/common/lxd/client.crt rwk,' should match the above. Did you reload the profile correctly? sudo apparmor_parser -r /var/lib/snapd/apparmor/profiles/snap.ubuntu-sdk-target.ubuntu-sdk-target16:14
jdstrandkalikiana_: (note that any changes in /var/lib/snapd/... will get overwritten on refresh/remove/install/etc)16:15
kalikiana_I rebuilt snapd and reinstalled the client snap every time16:15
kalikiana_No manual editing of profiles16:15
jdstrandkalikiana_: can you run that apparmor_parser command now and try again?16:16
kalikiana_jdstrand: Did that. Same error.16:18
jdstrandkalikiana_: just for my own sanity, can you paste the profile reload line and the new denial?16:19
jdstrandkalikiana_: (both from syslog)16:20
didrocksrenato__: ok, so I fixed the launcher and enhanced it so that you can remove your wrapper16:29
didrocksrenato__: there is still error while loading shared libraries: libQt5Quick.so.5: cannot open shared object file: No such file or directory16:30
didrocksrenato__: which makes sense: find /snap/ubuntu-calendar-app/x1/ubuntu-app-platform/ -name 'libQt5Quick.so.5'16:30
didrocksso it seems Mirv didn'tincludeit16:30
didrocksdidn't include it*16:30
renato__didrocks, humm this is very strange. This is one of the main libraries. Are you sure that you have mirv content mounted? (It does not work well if you launch the app before connect the interface)16:31
renato__let me try that16:32
didrocksrenato__: oh oh oh, you'reright, I didn't connect it :)16:33
didrockssilly me16:33
didrocksrenato__: ah, and his test for the interface to be connected is wrong actually (my fault suggesting it), we need to check a subdirectory16:33
renato__didrocks, yes I faced it a couple of times until I realise that I need to connect it before launch the app for the first time.16:33
didrockscontent-default-provider should really autoconnect…16:34
renato__didrocks, +116:34
renato__didrocks, if you do not connect it before launch the app. you need to remove the app and install it again16:34
jdstrandkalikiana_: so I locally did this (I have the lxd snap installed): http://paste.ubuntu.com/23442569/16:35
didrocksrenato__: fixing the launcher at the same time to yell :)16:35
jdstrandkalikiana_: I suspect you need to: remove the ubuntu-sdk snap, disable the lxd snap, enable the lxd snap, install the ubuntu-sdk snap to make sure that the profile caches are cleared each time16:36
jdstrandkalikiana_: or something along those lines16:37
kalikiana_jdstrand: dmesg doesn't show any denails after the apparmor_parser lines it would seem - which makes no sense to me right now16:37
kalikiana_The client output still shows that it can't write16:37
kalikiana_2016/11/07 17:36:05 failed to open /var/snap/lxd/common/lxd/client.crt for writing: open /var/snap/lxd/common/lxd/client.crt: permission denied16:38
jdstrandkalikiana_: make you you do this: sudo sysctl -w kernel.printk_ratelimit=016:38
jdstrandkalikiana_: it is possible you are hitting kernel rate limiting and seeing no denials16:38
jdstrandkalikiana_: how are you calling lxc? I don't have client.crt with my local test16:39
kalikiana_jdstrand: Go API. It creates the cert when getting the config. http://paste.ubuntu.com/23442591/16:41
jdstrandkalikiana_: and why is the client.crt in the lxd common directory? shouldn't this be down in SNAP_USER_DATA of ubuntu-sdk?16:41
jdstrandkalikiana_: you might be hitting simple unix permissions now. SNAP_COMMON is not writable be a normal user16:42
jdstrandby*16:42
didrockszyga: hey! I'm seeing something weird with the content interface16:42
zygadidrocks: hey16:43
zygadidrocks: what's that?16:43
didrockszyga: it's mounted in a subfolder, but it's like only some directories are exported (which isn't possible via a bindmount, hence I'm puzzled)16:43
didrocksls /snap/ubuntu-app-platform/current16:43
didrocksetc  lib  lib64  meta  ubuntu-app-platform  usr  var16:43
kalikiana_jdstrand: Hmmm I didn't question that before, but now that you mention that.. the path is set by the client, and could well be owned by the client16:43
didrocksnow, the bindmount in the snap:16:43
didrocksdrwxr-xr-x 17 root root 258 Nov  7 14:03 etc16:43
didrocksdrwxr-xr-x  5 root root  74 Nov  7 14:03 usr16:43
jdstrandkalikiana_: in fact, your denial says: fsuid=1000 ouid=1000. 'touch /var/snap/lxd/common/lxd/client.crt' fails: touch: cannot touch '/var/snap/lxd/common/lxd/client.crt': Permission denied16:43
didrockslet me run "mount" to see the mounts the snap is seeing16:43
zygadidrocks: can you show me the relevant plug and slot please?16:44
kalikiana_jdstrand: I was thinking the cert might be shared with other clients. In which case it'd have to be there16:44
jdstrandkalikiana_: (I ran the touch command as non-root obviously). also, I don't like this rule at all anyway: '/var/snap/lxd/common/lxd/client.crt rwk,'. that would mean that any connecting client could overwrite another connecting client's client cert16:45
jdstrandkalikiana_: if that is the case, I think the lxd snap would create that and then you'd use an 'r' rule only16:45
didrockszyga: oh, got it16:46
didrockszyga: Mirv defined     read:16:46
didrocks    - ubuntu-app-platform16:46
didrocksso a subfolder16:46
didrockswhich only contains those 2 ^16:46
didrocksI guess he has some nesting issues16:46
didrockszyga: sorry for bothering you, I should have looked the slot definition first :)16:46
kalikiana_jdstrand: That's a good point. I'll read up on the API and find out if there's a recommendation16:47
zygadidrocks: no worries :-)16:47
didrocksrenato__: so, we are blocked on Mirv fixing the plateform slot tomorrow16:47
jdstrandkalikiana_: cool, thanks16:47
kalikiana_jdstrand: Thank you for helping me debug this!16:47
jdstrandkalikiana_: np. things can get tricky with multiple security mechanisms and kernel rate limiting16:48
renato__didrocks, ok, thanks again. I will wait for him16:49
didrocksrenato__: let's continue tomorrow then :)16:51
hindleI created a snappy package for a small development tool (mostly so I can learn whats involved with a view to creating snappy packages for a large application) - The package (monowinformsspy) is now in a published state. However when I run "snap refresh && snap find monowinformsspy" I get error: no snaps found for "monowinformsspy".17:05
hindleI'm using "myapps.developer.ubuntu.com" to look at the state of the package.17:07
zygahindle: is the package published to the stable channel>17:08
zyga?17:08
zygahindle: (find only shows stable packages)17:08
zygahindle: you can snap install --{edge,beta,candidate} $anypackage17:09
zygahindle: but you have to know the snap name17:09
=== daniel1 is now known as Odd_Bloke
hindlezyga: myapps.developer.ubuntu.com shows me that "Targeted channels" are all unchecked. so I guess its not in any channels. I will try checking some. Thanks.17:11
zygahindle: good luck :)17:11
hindlezyga: thank you that seemed to fix things :)17:11
_markfeatherstonCould anyone point me in the right direction for using the gadget snap?  Does this generate a .snap file that goes to the store as well, or is this just used during image creation?  I'm working on adding new hardware support.17:11
zyga_markfeatherston: yes17:12
zyga_markfeatherston: it is in the store, it can be updated, it is on the device17:12
zyga_markfeatherston: https://github.com/snapcore/snapd/wiki/Gadget-snap17:13
_markfeatherstonthanks, that is good to know.  Do you know how to generate the snap from the yaml?  I've been through that and other documents and i haven't found that yet17:14
zyga_markfeatherston: snapcraft master now supports making gadget snaps17:14
zyga_markfeatherston: or it may have been released lately17:14
_markfeatherstonI'll pull that down, thanks17:14
zyga_markfeatherston: but really, look at what's in existing gadget snaps and look at the docs17:14
zyga_markfeatherston: as long as you build what's needed to boot the device, you're good17:14
cachiotedg, higgins17:26
smoserhey.17:33
smoserif i want to file a bug against snappy kernel, where would i file that ?17:33
smoserhttps://code.launchpad.net/~snappy-dev/pc-kernel-snap/trunk is the source as fas as i can tell17:33
smoserwhere should i file a bug there?17:34
smoserogra_, ^ ?17:34
mupBug #1639878 opened: pc-kernel.snap missing drivers necessary for Hyper-v <Snappy:New> <https://launchpad.net/bugs/1639878>17:45
smoserfiled ^. someone can re-direct ti17:45
smoserit17:45
mwhudsonjdstrand: it doesn't fix that18:17
mwhudsonjdstrand: bugs on https://bugs.launchpad.net/ubuntu/+source/subiquity please18:17
mwhudsonjdstrand: with as much detail as possible please :)18:18
mwhudson(i don't really have a sense of what people want with ipv6)18:18
izznomwhudson, cellphones IOT etc...18:21
mwhudsonizzno: in terms of ui expectations, i mean18:22
izznoah :)18:22
jdstrandmwhudson: ack18:34
mwhudsonjdstrand: it should be easy ish for me to fix this now given that i've just crawled all over the code18:35
mwhudsonjdstrand: just a straight copy of the ipv4 interface would be easiest of course...18:36
jdstrandmwhudson: it might just be that. I need to look at it more carefully so I'll do that in a bit18:37
mwhudsonjdstrand: thanks18:37
_markfeatherstonIs anyone here familiar with how snapd interacts with u-boot environments?  To start with I'm trying to find out if the 128KiB environment is a requirement.18:41
AlbertAtrying to run spread tests locally, but I'm getting this error: "Cannot allocate qemu:ubuntu-16.04-64: cannot launch qemu qemu:ubuntu-16.04-64: exec: "kvm": executable file not found in $PATH19:09
AlbertA"19:09
AlbertAany ideas? I do have kvm in /usr/bin/19:10
mupBug #1639948 opened: exec: /usr/bin/ubuntu-core-launcher: not found <Snappy:New> <https://launchpad.net/bugs/1639948>21:01
mupBug #1639967 opened: Add support to access to some Avahi methods from org.freedesktop.Avahi <Snappy:New> <https://launchpad.net/bugs/1639967>22:41
mcclawhi everyone.23:59

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!