=== chihchun_afk is now known as chihchun === dobey_ is now known as dobey [06:47] Bug #1631270 opened: running a command for a snap in try mode fails on trusty

[07:02] PR snapcraft#927 opened: Add a test script to build external snaps [07:05] bonjello [07:16] hey foxmask [07:17] didrocks: o/ [07:26] hey hey [07:26] hey dholbach [07:27] salut didrocks [08:18] PR snapd#2262 closed: tests: disable autorefresh for the external backend [08:20] fgimenez, was snapd 2.18 already released? should we build new images or have you a link? [08:21] vigo, no 2.18 nor download link yet, we should use images built from the current edge [08:22] fgimenez, ack thanks [08:52] ssue while loading plugin: properties failed to load for 2048-qt-snap: Additional properties are not allowed ('source' was unexpected) [08:53] my craft file - http://paste.ubuntu.com/23526294/ [08:55] ny1 on ? [08:55] PR snapd#2309 closed: daemon: show what will change in the "refresh-all" changes [08:56] Additional properties are not allowed ('source' was unexpected) [08:56] my craft file - http://paste.ubuntu.com/23526294/ [09:07] PR snapd#2346 opened: Misc libvirt fixes [09:08] PR snapd#2334 closed: snap: try doesn't require snap-dir when run in snap's directory [09:08] PR snapd#2335 closed: store: retry downloads using retry loop === ant_ is now known as Guest76191 [09:41] bull: I don't think the nil plugin is taking any source directory [09:41] bull: if you want to ship the content of src, you need to use the dump plugin [09:42] didrocks, now its working [09:42] with plugin qmak [09:42] qmake [09:42] yeah, if you are using qmake in src :) [09:42] great to hear! [09:42] ty [10:02] security tag snap.2048-qt-snap.2048-qt-snap not allowed [10:02] any idea why ? [10:23] hi I have an app written in java I have used a wrapper and a jar when I try to run it, it has an error: "Error: Could not find or load main class" my main class is not called main the line that I think I need to change is: "$JAVA_HOME/jre/bin/java -jar $SNAP/highlighterpdf.jar " but I don't know how to access the main class from here? [10:34] hi what do I add to this line to access the main class (which is not called main) "$JAVA_HOME/jre/bin/java -jar $SNAP/highlighterpdf.jar "? [10:38] PR snapd#2296 closed: snap: add `snap watch ` to attach to a running change [10:53] everything runs fine when I install my java package but when I run it as root it crashes with this exception "No protocol specified Exception in thread "main" java.awt.AWTError: Can't connect to X11 window server" [10:55] PR snapd#2347 opened: overlord: flag required-snaps from model as required and prevent removing them [10:57] PR snapd#2292 closed: snap: do exit 0 on install/remove if that snap is already installed or already removed === Guest76191 is now known as antdillon === chihchun is now known as chihchun_afk === chihchun_afk is now known as chihchun [11:37] tvoss: btw, the failures in spread after removing my hack with /etc/mtab make me think that it's not ready [11:38] tvoss: it looks like systemd and mount and libmount disagree on what's mounted [11:38] pitti: ^^ [11:40] PR snapd#2347 closed: overlord: flag required-snaps from model as required and prevent removing them [11:46] Zyga, that's not happening locally in a qemu [11:47] hi when I run my java app without root it works fine but when I try to run it as root it gives me an exception? [11:48] from the research I have done it seems like root user does not have permission to use x11 but that is as far as I got I do not know how to give the root user the permission it needs [11:52] tvoss: interesting, hmm === Tommy_ is now known as Guest2511 [12:08] tvoss: can you try it on a 14.04 server VM [12:08] tvoss: and see how it behaves? [12:10] Yup [12:16] lool: wanna review something tiny for me: https://github.com/snapcore/snap-confine/pull/194 [12:16] PR snap-confine#194: Make messages from die() nicer [12:30] hi my java app runs fine but when I try and run it with sudo it crashes? [12:32] gerry_: can you show me how it crashes? [12:34] yes it crashes with this exception: No protocol specified Exception in thread "main" java.awt.AWTError: Can't connect to X11 window server [12:34] kyrofa, jdstrand: hey! I have some questions on configure hooks and apparmor/seccomp [12:35] kyrofa: jdstrand: on ubuntu core (so snapd 2.17), here is my simple configure hook in the snap: https://github.com/ubuntu/snow-on-me-snap/blob/master/meta/hooks/configure [12:35] kyrofa: jdstrand: I just put it in meta/hooks/ for now, no special permission as you can see [12:36] however, when the file doesn't exist, despite snapctl get giving me the correct values, I'm getting quite some apparmor denials: https://github.com/ubuntu/snow-on-me-snap/blob/master/meta/hooks/configure [12:36] gerry_: looks like it doesn't have X access, can you run journalctl | grep DENIED [12:36] the second is the "sed" path (when the config file exists), which is hitting a seccomp issue [12:36] didrocks: AFAIK jdstrand is off today [12:36] oh [12:36] didrocks: can you show me the denials please? [12:36] zyga: yeah, look at the pastebin above ^ [12:37] http://paste.ubuntu.com/23527021/ [12:37] (grrr middle click :p) [12:37] I guess the denial is snapctl trying to connect to snapd [12:38] didrocks: I understand now thank you [12:38] didrocks: I believe this is the bug https://bugs.launchpad.net/snap-confine/+bug/1644439 [12:38] Bug #1644439: snap-confine doesn't work from per-snap namespaces it creates [12:38] didrocks: but I never considered it for hooks [12:38] hmmm [12:39] didrocks: do you run your own hooks from your apps? [12:39] zyga: no, I don't [12:39] zyga : a great big long list of "DENIED" this is the first one on the list: Nov 24 11:51:26 gerry-desktop audit[13341]: AVC apparmor="DENIED" operation="create" profile="snap.highlighterpdf.highlighterpdf" pid=13341 comm="java" family="inet6" sock_type="stream" protocol=0 requested_mask="create" denied_mask="create" [12:39] didrocks: ah, no wait [12:39] zyga: here are results from snap install, running the hook first or just snap set , running the hook [12:39] didrocks: my mistake, does your hook use any plugs? [12:40] zyga: no, and I don't think it needs any, correct? [12:40] I expect snapctl is something seen as "internal" and natural for using in the hook without plugs? [12:40] gerry_: can you do "dmesg -c >/dev/null" roun your app with sudo and do: dmesg | grep DENIED | pastebinit [12:40] didrocks: well, it apparently tries to use TCP sockets [12:40] the puzzling part is that I still get the correct value from snapctl [12:40] didrocks: is it a go app? [12:41] zyga: look at my configure hook above: https://github.com/ubuntu/snow-on-me-snap/blob/master/meta/hooks/configure [12:41] no rocket science, no network involved :) [12:41] didrocks: ah, it actually uses snapctl so it is a go app indirectly [12:41] didrocks: for now add a [network, network-bind] plugs [12:41] zyga: I guess most of the hooks would do, right? [12:42] didrocks: please report a bug that says snapctl causes hooks to attempt to open ip/ipv6 tcp connection due to go network startup probing code [12:42] didrocks: thank you [12:42] didrocks: (and this is denied by the profile) [12:42] didrocks: effectively every hook using snapctl will require the two plugs [12:43] zyga: it's just because of the way the code is structured internally? We could avoid that in the future by talking to a file/datastream socket, right? [12:44] and next step, I'll look at sed :p [12:44] didrocks: somewhat [12:45] didrocks: it's because snapctl use go and go has some peculiar code in the standar library that makes it bind to ip / ipv6 sockets to check if ipv6 is supported [12:45] *standard [12:46] zyga: not sure I have done this right its empty [12:47] gerry_: run journalctl -f [12:48] gerry_: and run your app the way that made it crash [12:48] gerry_: and look at the output of the first command [12:51] zyga: oh, I didn't know that, interesting [12:51] thanks for the explanation! I'll hack that in between [12:52] zyga : I have put the output here: http://pastebin.com/APSnrgCz [12:53] gerry_: this error [12:53] Nov 24 13:50:48 gerry-desktop audit[19767]: AVC apparmor="DENIED" operation="capable" profile="snap.highlighterpdf.highlighterpdf" pid=19767 comm="java" capability=1 capname="dac_override" [12:53] gerry_: says that you get a regular permission error, the app tried to open something that it doesn't have access to and since it doesn't have DAC_OVERRIDE capability then it cannot do it [12:53] gerry_: I don't know any more [12:54] zyga: thank you very much for your help [12:58] PR snapd#2340 closed: client, cmd/snap: introducing "snap info" [13:02] Bug #1644546 opened: [console-conf] Network screen continues to account setup with failing configuration [13:09] Anyone has seen this error before? error: cannot install "classic": cannot get nonce from store: Post https://myapps.developer.ubuntu.com/identity/api/v1/nonces: dial tcp: lookup myapps.developer.ubuntu.com on [::1]:53: read udp [::1]:43793->[::1]:53: read: connection refused [13:17] rvr: can you report it [13:17] rvr: and can you show any apparmor denials (dmesg | grep DENIED) [13:17] zyga: Ok [13:17] rvr: looks like ipv6 related bug [13:18] dmesg | grep DENIED shows nothing [13:22] rvr: is that something that happens all the time or just randomly? [13:23] rvr: could be a regular dns failure === hikiko is now known as hikiko|ln [13:40] mvo, the sections PR still is on the list for landing right? [13:40] alex-abreu: yes, its the last remaining one [13:40] alex-abreu: needs a second review, I'm on it to find someone [13:41] mvo, it has conflicts I am updating it now [13:41] alex-abreu: thank you [13:41] mvo, cant you review it yourself? Chipaca did already [13:43] zyga: I think it is related to a network misconfiguration [13:43] zyga: Re-run console-conf and problem is gone [13:46] alex-abreu: I could but gustavo requested changes so ideally he is the one reviewing that his requests are satisfied. if that won't happen I will just do it, but given his timezone I will give him a little bit more time [13:46] mvo, yes makes sesne [13:51] is there a way for me to modify files in the snappying process? i.e. they get installed from a .deb and before being put in the .snap i want to chagne some text files, how do i do that? [13:55] think i found how [14:00] rvr: thanks, if you see this again please report a bug === hikiko|ln is now known as hikiko [14:03] zyga: I'll do [14:09] fgimenez: Error executing external:ubuntu-core-16-arm-32:tests/main/op-remove http://paste.ubuntu.com/23527385/ [14:12] alex-abreu: Submitted the follow up review.. there's one test missing, but LGTM other than that.. it's okay to add the test after the release if mvo wants to merge it earlier to move on with the release, but let's please have it [14:12] alex-abreu: Thanks for all the changes [14:12] rvr, looking [14:13] alex-abreu: As one suggestion for the future, it's useful to provide feedback to every comment on the reviews.. in some cases just "Done" is enough.. in other cases, there were questions that went unanswered, or points that were not clear whether they were addressed or not without digging into reviews and code all over again [14:14] niemeyer, yes you are right ... my default is 'done' unless I comment on it, but yes [14:16] niemeyer, mvo , btw I was wondering about the config schema feature in snapd, is someone having a look at it or is schedule to? ... [14:17] PR snapd#2348 opened: debian/rules: build with -buildoptions=pie [14:17] jdstrand, ^ :-) [14:19] alex-abreu: I will add the test real quick and then it can land AFAICT [14:19] fgimenez: Another one Error executing external:ubuntu-core-16-arm-32:tests/main/refresh:production http://paste.ubuntu.com/23527442/ [14:20] alex-abreu: and its there [14:20] mvo, thx [14:21] alex-abreu: will land as soon as tests are green, thanks again! [14:25] tyhicks: hey [14:25] tyhicks: do you have some time for a few code reviews today [14:25] tyhicks: I need to land a fix to snap-confine's master for the XDG_RUNTIME_DIR [14:26] tyhicks: the fix is almost done (testing) but it would be nicer to land it on top of a few other branches that help out [14:26] tyhicks: this one is totally unrelated but tiny and something I'd like to land for the release: https://github.com/snapcore/snap-confine/pull/194 [14:26] PR snap-confine#194: Make messages from die() nicer [14:26] tyhicks: this is the important prerequisite for the fix: https://github.com/snapcore/snap-confine/pull/193 [14:26] PR snap-confine#193: Replace mkpath with sc_nonfatal_mkpath === chihchun is now known as chihchun_afk [14:28] mvo, thx ! [14:30] alex-abreu: your welcome and thank you for the feature [14:30] rvr, thanks i'll try to reproduce, btw have you tried today with dragonboard from edge? [14:31] fgimenez: Nope, rebuilt the image for the Raspberry Pi 3 and reporting issues that I see along the way [14:32] rvr, ok i'm seeing some issues on db and wanted to confirm, do you know if anyone is trying it today? [14:32] Bug #1644573 opened: snapctl causes hooks to attempt to open ip/ipv6 tcp connection [14:33] fgimenez: Nope [14:33] mvo, np, did you see my comment about the schema thing? [14:35] my java app will only run with sudo in devmode if I run sudo in dangerous mode it crashes can anyone help? [14:36] Hello! How can I search for/get information about snaps from the edge channel? [14:36] sil2100: I don't think it's possible [14:36] sil2100: no public API AFAIK [14:38] I keep thinking I am missing a dependancy in my yaml (maybe for java swing) ? [14:41] or maybe x11 but I have the plug and a stage package "x11-apps" ? [14:44] gah - just tripped over bug 1624497 [14:44] Bug #1624497: complain mode blocks access to nsfs (/proc/self/ns/*) without exec rule

[14:44] soooo close to having running instances on an openstack cloud deployed with snaps in strict mode [14:46] zyga: okay, just passed the test suite on a server image [14:46] sergiusens: hey, can a remote part depend on another remote? [14:51] when I use it as root installed dangerous mode it comes up with this exception Can't connect to X11 window server [14:51] Trevinho it should more so after some refactoring I did, if it doesn't it should [14:51] sergiusens: with didrocks we had this issue.... [14:51] didrocks: thanks for fixing remote parts... [14:52] popey: unsure if it's fixed yet [14:52] is it? [14:52] sergiusens: I listed a remote part as after of the desktop helpers, but once generated the parts fiele was missing the desktop-* things [14:52] * didrocks tries to update [14:52] popey: and how did you see it? :) [14:52] popey: we need to importer to run to confirm it :p [14:52] sergiusens: I was wondering if... it could be because the wiki listed my remote parts after the desktop-* ones, so maybe it didn't parse them yet... or I don't know... [14:53] sergiusens: to be clear, it was related to this https://github.com/ubuntu/snapcraft-desktop-helpers/pull/26 which broke the destkop-* parts, by not making them show up in https://parts.snapcraft.io/v1/parts.yaml [14:53] PR ubuntu/snapcraft-desktop-helpers#26: snapcraft.yaml: add dependency on remote indicator parts [14:54] didrocks: github email [14:54] popey: power! :-) [14:54] didrocks: was just testing when your reply came in [14:54] ahah [14:55] but no, its not fixed yet, as my snapcraft can't find it [14:55] this is very fragile [14:56] PR snapd#2288 closed: Add new store endpoints & snap find support for sections handling [14:56] yeah [14:57] Trevinho ah, so the generator is broken more so than snapcraft's project loader? [14:57] Trevinho if so log a bug and ping josepht on Monday, he's out for thanksgiving [14:57] sergiusens: still on snapcraft project? [14:58] Trevinho yeah, it is all shared code [14:58] sergiusens: can you check the API endpoint? [14:58] Trevinho just detail the problem so we can go over it [14:58] didrocks what API endpoint? [14:58] sergiusens: to ensure it's not listing the part and you are out of it [14:58] sergiusens: just what you get from the importer [14:58] diddledan out of what? [14:58] sergiusens: what is the server code in github? [14:58] didrocks [14:59] all snapcraft pats [14:59] * sergiusens senses diddledan will get many incorrect mentions [14:59] :-p [14:59] (or is it a straight download and you don't post-process?) [14:59] keeps me on my toes :-D [14:59] didrocks straight download and yaml.load [14:59] sergiusens: ok, so obviously importer [15:00] didrocks Trevinho so it doesn't show up here? https://parts.snapcraft.io/v1/parts.yaml [15:00] sergiusens: nope [15:00] Trevinho didrocks sorry but I am having trouble following your statements :-) [15:00] ok, so no show, means importer [15:00] sergiusens: no desktop- apart from desktop-ubuntu-app-platform: [15:00] which was the only one to not have a part relying on another part [15:01] yeah, importer, what's project should Trevinho file a bug against? [15:01] roadmr where is the status page for snapcraft-parser again? [15:01] sergiusens: is it misbehaving? :( [15:01] will be great if we can rerun it straight away [15:01] sergiusens: https://parts.snapcraft.io/v1/status [15:01] roadmr thank you [15:02] sergiusens: looks happy and last run was like 2 minutes ago. I can force a run if you need me to [15:02] roadmr: could you retry a run, yeah? [15:02] I just refreshed the list [15:02] and it's still not here [15:02] depends on how long it's taking to run [15:02] didrocks you can run locally if you want [15:03] didrocks apt install snapcraft-parser [15:03] I will appreciate if we can get it fixed ASAP though [15:03] roadmr I suspect a missing feature [15:03] I have a java app packaged. when I run it normally or sudo in devmode it works but when I run it as sudo in dangerous mode it crashes? [15:03] people start to complain because of this [15:04] didrocks, sergiusens : running now [15:04] /status doesn't have logs though that the parts have been discared [15:04] didrocks: which part is this? [15:04] didrocks everyone wants everything ASAP so you all get into the same queue in the end ;-) [15:04] run finished... [15:04] didrocks it should, which is strange [15:04] sergiusens: I still find that breaking production is priority #0 [15:04] roadmr: https://github.com/ubuntu/snapcraft-desktop-helpers/blob/master/snapcraft.yaml, all "desktop-" [15:04] didrocks did it ever work though? [15:05] apart from desktop-ubuntu-app-platform [15:05] didrocks: I see this [15:05] DEPRECATED: Found a "/" in the name of the 'desktop/gtk2' part [15:05] DEPRECATED: Found a "/" in the name of the 'desktop/gtk3' part [15:05] DEPRECATED: Found a "/" in the name of the 'desktop/qt4' part [15:05] sergiusens: for 5 months, yes, the parts were published [15:05] DEPRECATED: Found a "/" in the name of the 'desktop/qt5' part [15:05] DEPRECATED: Found a "/" in the name of the 'desktop/glib-only' part [15:05] roadmr: and the one with -? [15:05] yeah, I see them! [15:05] great [15:05] sergiusens: it's maybe the most popular parts btw :) [15:06] so, it seems that parts depending on parts are beaking the importer, Trevinho, mind filing a bug? (roadmr, do you know which LP project?) [15:06] thanks roadmr for rerunning it btw :) [15:06] didrocks: no problem, let me know if you need anything else. The parser lives in snapcraft, so unless sergiusens says otherwise, that's where you should file it [15:06] log against snapcraft assign to josepht [15:07] (a heads-up though, Joe is off until Monday) [15:07] and probably (will be) enjoying a delicious turkey :) [15:08] yeah, that's why we went to bother sergiusens (and I reverted the change to get it fixed for people to use it) :) [15:08] thanks guys! [15:08] Trevinho: mind filing the bug? ^ [15:08] didrocks: sure [15:08] * Trevinho does some researches before [15:08] ok :) [15:14] didrocks: so, for tests... snapcraft-parser --index https://wiki.ubuntu.com/snapcraft/parts?action=raw [15:14] is what you want [15:15] or a local file instead [15:18] Trevinho: you can probably try it yourself and fork the repo [15:18] didrocks: yep [15:19] PR snapd#2349 opened: tests: skip pty tests on ppc64el and powerpc [15:28] didrocks, hey, could you add this to the desktop-laucher? export GST_PLUGIN_SYSTEM_PATH=$SNAP/ubuntu-app-platform/usr/lib/$ARCH/gstreamer-1.0 [15:28] Kaleo, found that is missing [15:29] ogra_: https://www.pine64.org/?page_id=3707 next ac100 :) [15:31] hi I have packaged a java app when I run it as sudo in devmode it works fine but when I install it as dangerous it crashes? [15:31] fgimenez: I don't know what happened, but the Raspi 3 doesn't boot correctly now. Some more failures: https://pastebin.canonical.com/171760/ [15:32] fgimenez: Not it is stuck in the boot screen with an initramfs prompt [15:32] gerry_: can you strace it, or dmesg output, or snappy-debug.security scanlog [15:32] gerry_: dmesg and snappy-debug.security scanlog, are probably first port of call [15:33] Bug #1628914 changed: ubuntu-core edge image switched to stable channel unpredictably and became unusable [15:34] popey : here is the output from dmesg : http://paste.ubuntu.com/23527739/ [15:35] gerry_: what interfaces are you using? Looks like you need network and maybe network-bind? [15:38] popey : here is my yaml http://pastebin.com/28ZDTTic [15:38] didrocks: at least isn't an ordering issue :-) [15:39] gerry_: on the phone at the moment, will take a look in a sec [15:39] popey, oooh, nice ! [15:39] no problem :) [15:39] gerry_: add network and network-bind to line 11 [15:40] ok [15:40] (I think) [15:40] but after the call I'll test more [15:42] its still the same but take your time with your call [15:46] hi all [15:46] i need some help. I'm install nextcloud snap [15:46] gerry_: where do i find highlighterpdf-0.1.2.tar.gz ? [15:47] Trevinho: oki! :) [15:48] renato__: it's a private lib, is it Qt or anything looking into this private dirs? [15:48] renato__: I'm reluctant (as said on other bug reports) to add private libs by default until we know exactly what's looking into them [15:48] Trevinho: good! filed the bug report? :) [15:48] my server has 2 ip. When apache staring, it bind on both IPs. How i can set use only One ip [15:49] didrocks, I do not think this is private libraries it is just gst plugins. [15:49] didrocks: in the process of fixing it instead :-P [15:49] Kaleo, right ^^^ [15:49] Trevinho: still good to have a bug report [15:49] httpd.conf - r/o. Maybe i can set network-bind interface ? [15:49] sure [15:50] popey: I only have it here local but the jar is on sourceforge highlighterpdf [15:50] dodik: your snaps need to have some configure hook to be able to parameterize the port they are listening on [15:50] gerry_: ah okay [15:50] dodik: documentation alongside the snaps (if any) should provide those info [15:51] didrocks: https://github.com/nextcloud/nextcloud-snap/blob/master/snapcraft.yaml [15:51] popey : here is the link https://sourceforge.net/projects/highlighterpdf/?source=directory [15:51] this file doesn't have hooks [15:52] dodik: yeah, that's a feature request you should open to them [15:53] rvr, mmm haven't seen that problem before sorry, it seems to be working fine here. btw what power supply are you using for the pi3? i had some issues today (random reboots) and they were caused by a faulty power supply [15:54] fgimenez: 2A power source [15:54] It's the first time that I see this [16:13] I got a separate power block I use for powering the devices http://www.ebay.co.uk/itm/like/172403905875?lpid=122&chn=ps&adgroupid=27378760866&rlsatarget=pla-181484319186&adtype=pla&poi=&googleloc=1007011&device=c&campaignid=620865095&crdt=0 [16:15] http://www.quesh.co.uk/products/?product_id=415 for a better overview that seems to give me reliable power for rpi3 [16:16] PR snapd#2349 closed: tests: skip pty tests on ppc64el and powerpc [16:20] popey: was that a problem only having the jar? [16:28] PR snapd#2350 opened: tests: include /boot in saved state (including bootenv and any kernels) [16:33] gerry_: yeah, sorry, couldn't figure out how to make that work [16:35] PR snapcraft#928 opened: Add missing dependencies to install_requires [16:36] popey: thanks for trying just for you info the package runs off the jar rather than the tar but thank you anyway [16:39] davmor2: I have one of those power supplies, maybe not so fancy :) [16:40]