/srv/irclogs.ubuntu.com/2016/11/14/#ubuntu-devel.txt

pittiGood morning07:51
pittirbasak: cheers! removed/promoted07:52
cpaelzergood but somehow weird morning08:12
cpaelzerI'm slowly getting to the point that I just miss something.08:12
cpaelzerCould one of you try http://paste.ubuntu.com/23474596/ and tell me why it ends up with modifications to upstream files?08:12
* cpaelzer is waiting for a shameful "there it is" pointer to come in :-/08:13
sladencpaelzer: these all look like auto-generated files.08:18
cpaelzeryes08:19
cpaelzerbut on all the packages I modified so far that never happened - so I wondered08:19
sladencpaelzer: eg. suse.in (from ./configure), .pc/* (from quilt), .git-commit-message (artifact of an in-progress commit).  The rest is cut off08:19
cpaelzerwhat I wonder is if I'm supposed to undo those changes before an upload08:20
cpaelzerI was able to make a clean debdiff by dropping .pc08:21
cpaelzerbut lintian still is mad at me on dput as the diff.gz contains changes outside of debian/08:21
cpaelzere.g. all the .po changes08:21
sladenecho -e 'unapply-patches\nabort-on-upstream-changes\n' >> debian/source/local-options08:23
sladenshould help with automatically unapplying the quilt patches08:23
sladenbut I would check it out, manually change the debian/changelog.  Check it builds, and be done with it08:23
sladenI can't see the diff, but I expect most of it will be timetstamps08:24
seb128SRU team, could you review https://launchpad.net/ubuntu/xenial/+queue?queue_state=0&queue_text=snapd ? snapd updates made gnome-software not able to install snaps anymore and that new package is needed to fix it (it has already been SRUed to yakkety but the xenial uploads is sitting in the queue for a while)09:25
pittiseb128: okay-ish, but it has a higher versino number than yakkety, so it should be reuploaded as ubuntu1.1~xenial09:36
pitti(rejected with that reason)09:37
seb128pitti, oh, doh, indeed, thanks for spotting that (and for the review)09:37
pittiplease poke me after reuploading09:37
seb128k09:37
seb128thanks!09:38
=== _salem is now known as salem_
LocutusOfBorgkees, hi, you around?12:06
LocutusOfBorgjdstrand, also ^^ I have an apparmor specific question12:07
LocutusOfBorgcan I enforce some sort of global policy, where I forbid access to a specific file, no matter the process/application/user trying to open it?12:08
pittinot with AppArmor, as a process must be in a profile for that12:08
LocutusOfBorgI would like to secure my GPG private key with apparmor configuration12:08
pittithis is what DAC is for -- restrict user/group to root:root and set appropriate permissions12:08
LocutusOfBorgmmm ok, so there is no way to forbid root by looking at it12:09
pittinot towards root, no -- root can also just pry it out of the raw block device, unless you use encryption12:10
pittibut then it can ptrace a process that is allowed to access it12:10
pittiI'm afraid you can't lock root out of files12:10
LocutusOfBorgunless I patch the kernel, to forbid read syscall when the file matches a pattern, but I agree, for raw block device... there is no way12:11
pittiLocutusOfBorg: it's a more useful exercise to block access to the key from other user processes, IMHO12:12
pittias these are the real danger12:12
pittie. g. firefox12:12
sladenrbasak: Git double ++12:54
rbasakThanks :)12:57
juliankBah, the fixes I picked for fixing the locale stuff apt 1.2.16 should be correct, but they don't compile on travis because it's libstdc++6 is too old to have std::put_time (newer builds pull in a newer one by accident...). :(13:37
juliankbdmurray: pitti: What remains to be done about the apt/1.2.15 xenial SRU? The autopkgtest of sbuild and autopkgtest fail, but that's not apt's fault - the failures also happen for other packages. It's been about 2 (silent) weeks since the upload, and I've been running this for about 1.5 months now without any issues on my server.13:46
juliank^ infinity (show a bit enthusiasm, you wanted the autoremove fix that's in there :D)13:59
juliankMeanwhile I got the 1.2.16 patch queue to compile, but it fails the test suite on travis' franken-trusty-wily-stein :/14:01
pittijuliank: right, sbuild fails due to removing procenv14:03
pittiactually no, it's there14:03
pittiand 100 is an apt error code14:04
pittiso that should at least be investigated14:04
juliankpitti: That also occurs with 1.2.10ubuntu1 in -updates as can be seen in https://objectstorage.prodstack4-5.canonical.com/v1/AUTH_77e2ada1e7a84929a74ba3b87153c0ac/autopkgtest-xenial/xenial/amd64/s/sbuild/20160512_132544@/log.gz14:05
juliank(which was triggered by dpkg/1.18.4ubuntu1.114:05
juliankWith yakkety instead of zesty, of course14:06
juliank(that was back in may)14:06
pittiah, ok; releasing then14:08
juliankAlright, thx14:09
jdstrandLocutusOfBorg: you theoretically can replace the unconfined template, but it gets crazy difficult to lock things down cause you'll define a profile that can access it, but unconfined can change_profile into that one, and then things spin out into full system policy, which is a lot of work14:17
jdstrands/template/profile/14:17
jdstrandyou can create a root strong policy fwiw, but your system also needs to run and access stuff and do things so there will be a process somewhere that has enough to access it. it is more fun to think about than to implement for a general purpose system14:19
jdstrandthere are also hardware devices that can be used to aid in this sort of thing. eg, https://www.yubico.com/support/knowledge-base/categories/articles/use-yubikey-openpgp/14:21
LocutusOfBorgthanks jdstrand!15:29
cpaelzerhaving an issue with a build on LP infrastructure I wonder what else I could do to become more similar - it fails on LP, but works on autopkgtest16:16
cpaelzerwhicih should both be cloudimg based right?16:16
cpaelzerwith LP having a modified one (I wonder how slightly or extensive that is)16:17
cpaelzerI created a zesty instance on serverstack to be even closer, but there as well the issue doesn't trigger16:17
cpaelzerif there are common "make it more similar to LP for debuggung" hints that you have please feel free to share16:17
cjwatsoncpaelzer: The usual thing is to take away network access other than to essential facilities like the archive.16:21
dokozul: rejected python-vmware-nsxlib , again missing information in debian/copyright16:22
zuldoko: shoot thanks16:22
cjwatsoncpaelzer: The base image is basically only modified to install launchpad-buildd and friends.16:23
cjwatsoncpaelzer: You can look at lp:launchpad-buildd (especially sbuild-package and sbuildrc) to see how sbuild is run.16:24
cjwatsoncpaelzer: And you can get the chroot that the build is executed in by starting from https://api.launchpad.net/devel/ubuntu/zesty/amd64 etc.16:25
cjwatson(or manage-chroot from lp:ubuntu-archive-tools)16:25
smoserslangasek, how did you make the ascii art showing cloud-init services ?18:51
slangaseksmoser: by hand hnnngh :)18:51
smoserbah18:51
smoserwell then, makes it harder for me to jsut change things and see how it changes therendering :)18:52
sarnolddid you use something like http://www.vim.org/scripts/script.php?script_id=40 or the similar emacs thingy? or by-hand by hand? :)18:53
smosersarnold, that looks neat18:56
sarnoldsmoser: the docs are thick enough that I've never actually -used- it -- I thankfully don't have to draw diagrams often :)18:58
slangaseksarnold: genuinely by hand ;)19:06
slangaseksmoser: there are tools for graphing systemd unit deps, but nothing text-y AFAIK and I'm not proficient19:06
slangaseksmoser: discussion with pitti suggests 'systemd-analyze dot "cloud*"' or 'systemd-analyze dot --order "cloud*"' might be the thing20:04
pittismoser: dot --order "cloud*" → http://people.canonical.com/~pitti/tmp/cloud-all.svg20:04
smoserslangaseks' was prettier :)20:05
pittislangasek also draws graphs with 50% more love than graphviz :)20:05
slangasekand I truncated the graph for legibility20:05
naccsmoser: what do you think about the importer doing no-clean on error?20:06
naccsmoser: i feel like that is a sane default, as i generally don't need to keep the repo around if it successfully imports, but if it fails, i need to debug :)20:06
smosernacc, that seems reasonable.  you dont have to give a dir, though right ?20:07
naccright, it just won't rm -rf the tmp dir20:08
naccsmoser: --^20:08
smoserso in that event if i run that 100 times in a loop (which i'm apt to do with the up arrow) i end up with a ton of wasted disk space.20:09
tewardwhat bug type is for when someone files a bug with `ubuntu-bug`?20:09
smoserobviously solvable by passing --directory20:09
smoserbut it seems that you end up with lots of space taken if you're not aware20:10
naccsmoser: it says pretty explicitly (when no-clean is used) that it's leaving a directory around20:10
naccsmoser: and the path to the same20:10
naccsmoser: again, the odds of anyone running the importer locally is very low :)20:10
smosernacc, to my knowledge 100% of users of it have used it locally20:11
naccsmoser: yes, that's a limitation of the current deployment20:11
smoserso... while you might have one plan, that isnt' reality at the moment at least20:11
naccsmoser: yes, and almost *all* users run w/o --no-clean20:11
naccsmoser: and don't hit errors20:11
naccsmoser: and can't debug20:11
naccsmoser: fine, i'll add another flag20:11
smosernacc, i dont really care. i dont think its bad.20:12
=== King_InuYasha is now known as Son_Goku
* tsimonq2 hunts for patch pilot22:15
tsimonq2Seems Laney and henrix were scheduled for today? Hmmmmmmmmmmmmmm22:18
tsimonq2bug 164131522:18
ubottubug 1641315 in purpose (Ubuntu) "We need a new purpose! (Sync purpose 1.1-2 (universe) from Debian unstable (main))" [Undecided,New] https://launchpad.net/bugs/164131522:18
tsimonq2bug 163665522:19
ubottubug 1636655 in ark (Ubuntu) "Ark no longer opens rar files in 16.10" [Undecided,In progress] https://launchpad.net/bugs/163665522:19
tsimonq2If a MOTU is willing to help me out, that would be awesome.22:21
tsimonq2The first one is a simple Debian sync, should be flawless.22:22
tsimonq2The second one fixes RAR support and needs to get in Zesty before we make an SRU, I assume.22:23
tsimonq2We got a prod from upstream, and it's just that. An upstream commit. acheronuk tested it on Zesty and Yakkety from my test uploads to a PPA.22:24
tsimonq2So I see no reason why that shouldn't be uploaded.22:24
tsimonq2Any takers? ;)22:24
julianktsimonq2: That purpose thing seems a bit dubious. It mentions transitional packages for libkf5purposewidgets5, but there are none.22:33
tsimonq2acheronuk: ^^^^^^^^^^^^^^^^^^^^^^^^^^22:34
juliankAll I see is libkf5purpose5 conflicting and replacing that22:34
juliankHmm, seems like it was dropped in packaging git recently, but apparently the history in that git repo (https://anonscm.debian.org/git/pkg-kde/frameworks/purpose.git) does not quite match the uploads22:36
tsimonq2Kubuntu's packaging BTW, juliank: https://git.launchpad.net/~kubuntu-packagers/kubuntu-packaging/+git/purpose22:39
tsimonq2juliank: So is the problem in our package or Debian's?22:41
=== sunweaver is now known as the-Oracle
=== the-Oracle is now known as sunweaver
julianktsimonq2: I was just wondering where the package is in 1.1-2, but if nothing rdepends on it, that seems fine22:42
tsimonq2On purpose or libkf5purposewidgets5?22:42
juliank(Because it was there in the old package, so syncing it would remove it, so better nothing depends on it)22:42
juliankThe latter22:42
tsimonq2Correct, it seems it's fine.22:43
julianktsimonq2: ack22:46
tsimonq2juliank: Thanks for taking a look at this. ;)22:48
juliankBah, syncpackage "signed" that with my gmail22:49
juliankAh, probably because I changed the lp email22:49
julianktsimonq2: Seems like the sync is now dep-waiting on libkf5kio-dev, because it's actually called kio-dev here. Who could have expected this?22:51
tsimonq2Aha, yes, that's known.22:51
tsimonq2This will be fixed when we upload KDE Frameworks 5.27 soon. Debian transitioned to that package name but uUbuntu didn't yet.22:52
juliankAlright22:53
tsimonq2juliank: Could that be fixed by setting something like "libkf5kio-dev | kio-dev"? We could remove it when that package exists, but it will still allow for the dependency to be set.22:54
tsimonq2It will become a transitional package either way.22:54
juliankFor example.22:54
tsimonq2(kio-dev will)22:55
tsimonq2Hm?22:55
juliankAnother hack might be to just add a "transitional" libkf5kio-dev package to kio for the meantime, so new rdeps of kio can be synced.22:55
juliankAnd then that could become the real one fairly painlessly once 5.27 enters22:55
tsimonq2Oh sure.22:56
tsimonq2Yeah.22:56
juliankBut I don't have any insight into which solution is the better way, that depends on how the rdeps of kio look like22:56
tsimonq2The thing is, the Kubuntu team's only person with upload access recently left, so we'll have to fall back to the old members who still have access but don't participate any more.22:57
tsimonq2So for these things we're going through the sponsorship process.22:57
tsimonq2So I think either one should work, but I don't have the access to Just Do It. :)22:57
tsimonq2Personally I'd rather just add the delta to purpose.22:58
tsimonq2I want to do that because kio-dev becomes a transitional package either way when we upload kio with the next FW.23:00
tsimonq2juliank: So would you like me to file a bug against purpose to go through the sponsorship process on that too, or would you be able to just do it? :)23:01
julianktsimonq2: I can do that23:02
tsimonq2Thank you. :)23:02
julianktsimonq2: I just can't built binaries right now, so we either get lucky or not. If not, we have to deal with this tomorrow (CET)23:03
tsimonq2Fair enough.23:04
tsimonq2juliank: You got a diff I can look at first?23:04
tsimonq2More pairs of eyes if we're relying on luck. ;)23:04
tsimonq2(If not, it should be fine, but still. More is always better. ;) :P)23:05
juliankWell, that part is not the problem. Just if some other part of the build fails somehow :)23:05
tsimonq2Oh ok23:05
tsimonq2Fair enough.23:05
julianktsimonq2: That should be it: http://paste.ubuntu.com/23477837/ - there already is an equivalent dep on kio-dev further up the build-depends23:10
juliankBuild Dependencies seem to be installing23:13
tsimonq2Why would Debian depend on kio-dev as well? O__o23:14
tsimonq2I'll poke the relevant person.23:14
juliankAccident probably23:14
* tsimonq2 watches https://launchpad.net/ubuntu/+source/purpose/1.1-2ubuntu1/+build/1120019023:15
julianktsimonq2: ppc64el is uploading23:15
tsimonq2\o/23:15
tsimonq2juliank: Thanks. :D23:16
tsimonq2Oh, seems kio is Plasma? We'll upload that soon anyways.23:16
tsimonq2juliank: Any chance you could look at ark as well?23:18
* juliank does not know what KDE calls what these days ...23:18
tsimonq2juliank: Plasma is the desktop, Frameworks is the base APIs, and Applications is, well, the Applications.23:19
tsimonq2That's the short version. :)23:19
julianktsimonq2: OK. Let me have a quick look at the ark thing23:20
julianktsimonq2: Looks sane to me, uploaded it. If there's some issue, let me know when I'm awake again :D23:22
tsimonq2juliank: Ok, thank you. :)23:22
Unit193juliank: ...Do I get to bother you about command-not-found this month? :)23:23
juliankUnit193: aaah23:23
juliankUnit193: I want to go to sleep now ...23:23
Unit193juliank: Hah, lovely timing then!  Also perhaps wrong channel..23:24
juliankYea, remind me in 21 hours23:24
* juliank is doing university + apt stuff by day, and misc stuff before going to sleep...23:25
juliankThis reminds me: If someone can test the apt 1.2.16~rc1 in the xenial PPA linked in bug 1592817 and 1611010 and verify that it fixes these bugs, that would be nice. I'm reasonably (like 95%) sure it does, but I can't really be bothered to do this23:32
ubottubug 1611010 in apt (Ubuntu Xenial) "yakkety desktop - non-english installation crashes with /plugininstall.py: ValueError: invalid literal for int() with base 10: ''" [Critical,In progress] https://launchpad.net/bugs/161101023:32
ubottubug 1592817 in gdebi (Ubuntu) "gdebi-gtk crashed with ValueError in update_interface(): could not convert string to float: '0,0000'" [Medium,Confirmed] https://launchpad.net/bugs/159281723:32
juliankAnyway, I'm off now, will be back in about 8 hours23:33

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!