=== devil is now known as Guest8411 === chihchun_afk is now known as chihchun === Guest8411 is now known as devil_ [07:28] PR snapd#2352 closed: tests: save/restore /snap/core/current symlink [07:50] good morning [07:55] good morning [07:55] hey guys [08:01] bonjello [08:43] sergiusens: Hey do you have a minute? I have troube registering a key with snapcraft, only get "Key registration failed: The account-key-request assertion is not valid." === markusfluer_ is now known as markusfluer [09:28] ogra_: hey [09:28] ogra_: good morning, how are you? [09:48] zyga, fine, whats up ? [09:59] ogra_: hey i played around with snappy on the weekend and on my outdated Kernel 3.10 i get some apparmor denies from snap-confine - is there a list/instructions of what a Kernel needs to support nowadays? [09:59] ogra_: The exact problem is [20615.733900] type=1400 audit(1480285192.166:21): apparmor="DENIED" operation="mount" info="failed mntpnt match" error=-13 profile="/usr/lib/snapd/snap-confine//mount-namespace-capture-helper" name="/run/snapd/ns/hello-world.mnt/" pid=2537 comm="snap-confine" srcname="/" flags="rw, bind" (essentially happens on running anything provided by a snap) [10:03] longsleep, yeah, snapd uses namespaces now ... not sure what kernel feature you need there though [10:03] ogra_: hey, I have a question about bug ... [10:03] PR snapd#2362 opened: daemon: ensure `snap try` installs core if its missing [10:03] longsleep: hmm, I may be able to help with that [10:03] one sec [10:03] ogra_: do you recall this bug https://bugs.launchpad.net/snappy/+bug/1558944 ? [10:03] Bug #1558944: modprobe.d directory is created in /etc/modprobe.d/ [10:04] zyga, yep [10:04] ogra_: yeah i got user namespaces and stuff and lxc/lxd works just fine - this is Kernel 3.10 plus a lot of patches i did a while ago to get lxd running. [10:05] longsleep: this errors is about when snap-confine tries to capture the mount namespace via a bind mount on the nsnfs sfs file sye [10:06] longsleep: let me check the man page [10:06] longsleep: technically since 3.8 [10:07] longsleep: but this is not kernel itself but apparmor on snap-confine [10:07] zyga: Kernel config: https://github.com/longsleep/linux-pine64/blob/pine64-hacks-1.2/arch/arm64/configs/sun50iw1p1smp_linux_defconfig + https://github.com/longsleep/build-pine64-image/blob/snappy/snappy/kernel/snapcraft.yaml#L15-L20 [10:07] longsleep: does that kernel have the full apaprmor patch set applied? [10:07] zyga: yes [10:07] zyga: not sure how exactly "full apparmor" is defined though [10:07] longsleep: hmmm, can you file a bug on launchpad.net/snap-confine with the kernel config and the patches applied (perhaps git gree), I can try to check it out [10:08] longsleep: thre are two branches that are in review that would let you run snap-confine without confinement that would perhaps unblock this [10:08] longsleep: you can try those out [10:08] zyga: yes tonight when i am at home again - do you have a link? [10:08] longsleep: yes, just opening [10:08] zyga, your bug is a duplicate of Bug 1638524 [10:08] Bug #1638524: /etc/modprobe.d adds one to much directory level

[10:09] https://github.com/snapcore/snap-confine/tree/use-aa-support [10:09] rebuild snap-confine with this [10:09] and remove the apparmor profile entirely [10:09] ogra_: checking [10:09] zyga: ok then it will run unconfined, this would help to know if that is the problem? [10:10] ogra_: thank you! :) [10:10] longsleep: yes [10:10] Bug #1558944 changed: modprobe.d directory is created in /etc/modprobe.d/ [10:10] ogra_: Any advance on https://bugs.launchpad.net/snappy/+bug/1639878 ? That's currently blocking us from publishing Ubuntu Core to Azure. [10:10] Bug #1639878: pc-kernel.snap missing drivers necessary for Hyper-v [10:11] zyga: if you scroll down a bit on https://github.com/longsleep/linux-pine64/commits/pine64-hacks-1.2?after=1od8aSrvwOrJAFEQq6ob8d%2FRHfIrMzQ%3D then you see what i merged for apparmor support back then [10:11] (UBUNTU: SAUCE stuff) [10:11] maybe its too old or something was added since april [10:12] longsleep: maybe, but I'm not a kernel expert, you'd have to check again [10:12] zyga: yeah will do thanks! [10:28] Bug #1645271 opened: User unable to disable service [10:41] Odd_Bloke, on my TODO for this week [10:42] ogra_: <3 [10:45] (this needs a bit per-arch love first, we dont want all these modules on arm images for example) === hikiko is now known as hikiko|ln [11:50] PR snapd#2363 opened: snap: support "daemon: notify" in snap.yaml [11:54] morning all [11:54] hello all, has anybody hear of an issue of using the jdk plugin with a java swing gui? [11:54] is it possible to use the install from a snapcraft part as part of the build env for another? [11:55] specifically I'd like to build libvirt-python (using the python module) against libvirt built in a previous part [11:56] sergiusens, ^^ is that possible? [11:59] I have been told that the jdk plugin is headless as I need the x11 server how do I cure this in my wrapper? [12:09] hi, is there a (trivial?) way to tell snapcraft cleanbuild to set a proxy for the lxd it creates? [12:09] I set a proxy for lxc, via lxc config, but that doesn't affect the ubuntu install running inside the lxd [12:26] PR snapd#2362 closed: daemon: ensure `snap try` installs core if it's missing [12:29] oh wait - that might actually be happening already [12:30] I have been told that the jdk plugin is headless could this be the reason why my java program crashes when I try to start it with sudo? [12:41] how would I load a part which contains the jdk headers ? === hikiko|ln is now known as hikiko [13:23] how do I do this? "If you only need to embed a Java runtime, add a part with the jdk type." === jamieben_ is now known as JamieBennett [13:28] gerry_: perhaps ask kyrofa or sergiusens when they are around or ask on the mailing list where others can google it easier [13:31] zyga: thanks for the advice, on this list? snapcraft@lists.snapcraft.io [13:33] gerry_: yes, this one [13:34] gerry_: both of the gentelmen I mentioned are in US-ish timezones so it may be better if you are "far away" from them [13:35] ok thank you very much for your help === chihchun is now known as chihchun_afk === jgrimm-out is now known as jgrimm [14:04] jdstrand: hey [14:05] jdstrand: are you around today? [14:05] zyga: hey, yes [14:05] I just got online [14:06] jdstrand: hey :) [14:06] jdstrand: how were your holildays? [14:07] jdstrand: I have a few things I'd like your input on [14:07] jdstrand: some are more trivial than others, I think the most important one is the XDG_RUNTIME_DIR design [14:07] zyga: they were pretty laid back but nice, thanks :) how was your weekend? [14:07] jdstrand: can you please ping me when you have the time to talk about that? [14:07] jdstrand: great, I was in a theme park with my family; lots of fun and memories :) [14:07] zyga: nice! [14:08] zyga: and sure-- it'll be a few minutes-- lots of pings and emails [14:08] jdstrand: no worries, same here :) [14:08] and by a few minutes, I mean a little while [14:14] PR snapd#2364 opened: overlord: increase test timeout and improve failure message [14:59] PR snapd#2365 opened: interfaces: fix system-observe interface to work with ps_mem [15:02] PR snapcraft#930 opened: Parser support remote dependencies === devil is now known as Guest29760 [15:19] mvo, ping [15:27] alex-abreu: pong [15:27] mvo, just a quick question, just wondering if me & david can be added to the snappy dev team? [15:29] alex-abreu: in github? or in LP ? or both? [15:29] mvo, LP [15:29] PR snapd#2366 opened: interfaces: apparmor support for classic confinement [15:30] alex-abreu: sure, done [15:31] mvo, thank you [15:40] jdstrand, I am getting this error in the automated review of the ofono snap: "not allowed by 'deny-connection/on-classic' in base declaration declaration-snap-v2_slots_deny-connection (service, ofono)", is that happening because latest snapd is still not used by the store? [15:40] abeato: no, that is because there is no snap declaration for it [15:41] abeato: let me add one [15:41] jdstrand, ack, thanks [15:44] abeato: done. you can press the publish button now [15:46] jdstrand, nice! [15:47] and published :) [15:50] PR snapcraft#931 opened: parser: add support for origin-{branch,commit,tag} [16:02] is it possible to poke the CI to have it run again without a new push? ref: https://github.com/snapcore/snapcraft/pull/908 [16:02] PR snapcraft#908: Let Rust plugin fetch dependencies in pull [16:03] icey: you should be able to rerun travis tests, as for other CI, I don't know [16:03] zyga: travis passes, autopkgtests failed [16:03] icey: AFAIK pitti was the one that set this up, I don't know how to restart that [16:04] icey: yes it is, you need the shared secret for that; mvo has it [16:06] sorry, snapcraft, not snapd -- that would be sergiusens [16:09] Bug #1645377 opened: AppArmor policy error for networking at initialization, even with the correct network plug. [16:10] Poke about bug 1642669 -- it's preventing us from supporting snap installation in the unity8-session snap. We're not sure this is supposed to work or if we should be using a different method of installation [16:10] Bug #1642669: PolicyKit doesn't work inside snaps, preventing snap installation in unity8 [16:17] PR snapd#2367 opened: store: fix mismatch for snap download hash mismatch error message [16:19] PR snapd#2354 closed: release: releasing package snapd version 2.18 [16:21] Bug #1645377 changed: AppArmor policy error for networking at initialization, even with the correct network plug.

[16:23] PR snapd#2367 closed: store: fix mismatch for snap download hash mismatch error message [16:30] jdstrand: will you be able to do a pass over snap-confine pull requests today? [16:30] Bug #1592901 changed: gvfs confinement issues

[16:45] zyga, I've tried build a deb of snapd locally and in a PPA> [16:45] It is failing :-( [16:46] debian/rules:67: recipe for target 'override_dh_auto_build' failed [16:46] Anything familiar about that? [16:46] I've tried a local build too, same issue. [16:46] I'd like to test some of my changes before submitting a pr. [16:48] Is anyone here who might be able to help me to get a key registered at the store with snapcraft? I only get "Key registration failed: The account-key-request assertion is not valid." [16:59] flexiondotorg: you need to run govendor AFAIK, look at how debian/gbp.conf file please [17:00] zyga, OK. I'll double check. [17:00] Thanks. [17:28] oSoMoN: would you be willing to make a blog post about what you posted on G+ re: ubuntu-app-platform snap? [17:30] mhall119, I don’t mind, where would that be published? [17:34] developer.ubuntu.com would be appropriate for that [17:34] do you have editor access to it? [17:43] Bug #1645407 opened: interface required: network namespace management

[17:46] PR snapd#2368 opened: tests: parameterize remote store [17:49] Bug #1645410 opened: interface required: openvswitch

[17:58] Bug #1645413 opened: gvfs confinement issues (directory listing) === Guest29760 is now known as devil_ === pmcg1 is now known as pmcgowan [18:06] mhall119, I don’t think so [18:16] jdstrand: any chance for some reviews/chat? [18:17] zyga: I'm moving to that now [18:17] jdstrand: great, I'll be here for a few more hours [18:22] Bug #1645407 changed: interface required: network namespace management

[18:35] PR snapcraft#932 opened: Implement `enable-ci travis --refresh` command [19:07] Bug #1645445 opened: Turtlebot needs /dev/kobuki [19:24] oSoMoN: you should be able to login at https://developer.ubuntu.com/openid/login/ now [19:24] go to (menu at the top) Zinnia->New Entry [19:24] and include the categories English and Article [19:25] ping me if you need help, the interface can be confusing [19:58] zyga: added bug https://bugs.launchpad.net/snap-confine/+bug/1645457, going to give https://github.com/snapcore/snap-confine/tree/use-aa-support a shot now [19:58] Bug #1645457: cannot bind-mount the mount namespace file on Kernel 3.10 === JanC_ is now known as JanC [20:07] longsleep: ok [20:11] jdstrand: I'd like to land https://github.com/snapcore/snap-confine/pull/197/files [20:11] PR snap-confine#197: Fix spread tests preventing Ubuntu 16.04 i386 from passing [20:11] jdstrand: unless you want to spend some time reviweing it in detail I'll just merge it [20:16] zyga: mhm - seems i cannot cross compile snap-confine for arm64 :/ 'no package 'glib-2.0' found [20:17] zyga: any idea if i could do that somehow on the device even when snap-confine does not work? [20:17] longsleep: you probably need all the build-deps cross compiled [20:17] zyga: yeah :/ [20:17] longsleep: aka get the aarch64 version of them [20:17] longsleep: (it's pretty easy) [20:17] longsleep: if you don't know how to do that just build it natively on arm [20:17] zyga: yes but i do not have enough disk space on my laptop :) [20:17] longsleep: install the classic snap [20:17] longsleep: no, I mean, you can just get them from the archive [20:18] longsleep: add arm64 arch to your apt sources [20:18] zyga: yes but i have to install them - and rootfs is pretty much full :( [20:18] though I don't cross compile on arm often [20:18] longsleep: well, just wait then, I'll sort things out :) [20:18] i can do it on arm64 - if i can install and run classic on my half working snappy install [20:19] longsleep: your shell is unconfined, remember that [20:20] zyga: looks fine to me [20:20] zyga: yes but how to switch to classic now? [20:20] root@localhost:~# classic [20:20] cannot bind-mount the mount namespace file /proc/3965/ns/mnt -> classic.mnt. errmsg: Permission denied [20:21] chicken egg problem? [20:21] longsleep: classic is a snap, you don't need it if you have a rootfs [20:21] longsleep: just do it manually [20:22] longsleep: but again, if you don't want to figure out the chain of things that are required to check a potential fix then please just wait [20:22] zyga: well i want to learn details as much as possible - so if i can figure out things without asking too many stupid questions then i will continue [20:23] longsleep: I'm happy to give you the answers if you want to dig deeper [20:24] zyga: awesome ! so i did not follow you above, what do you mean "do it manually" if i have a rootfs? [20:24] https://github.com/zyga/devtools/blob/master/classic.sh [20:24] zyga: i mean i can download arm64 rootfs and chroot into it - somehting like that? [20:24] I didn't try it for a while [20:24] but that did do the trick before [20:25] zyga: ah cool, let me try [20:25] and it can be used to learn what it takes to have "classic" [20:27] zyga: looks about right and pretty much what i had done now manually [20:30] PR snapd#2350 closed: tests: include /boot in saved state (including bootenv and any kernels) [21:48] zyga: so i got snap-confine compiled, any suggestion on how to replace it now for testing? [22:30] zyga: i probably did something wrong, but the self-compiled snap-confine from use-aa-support branch segfaults when running it like /root/xenial/root/snap-confine/src/snap-confine snap.hello-world.env /snap/hello-world/27/bin/env [22:30] Segmentation fault [23:26] PR snapd#2348 closed: debian/rules: build with -buildoptions=pie