/srv/irclogs.ubuntu.com/2017/02/10/#snappy.txt

mupPR snapcraft#1132 opened: Revert "qbs plugin: add plugin support for the Qt Build Suite (#1079)" <Created by elopio> <https://github.com/snapcore/snapcraft/pull/1132>00:53
james0rhow would i go about moving the snap dir out of my home dir?01:41
mupPR snapcraft#1120 closed: Update rustup link.  Bug: 1662960 <Created by cholcombe973> <Closed by kyrofa> <https://github.com/snapcore/snapcraft/pull/1120>02:11
=== markusfluer1 is now known as markusfluer
Son_Gokuzyga: ping03:03
Son_Gokuzyga: I found out how to make the selinux policy domain "permissive"03:24
Son_Gokuso now it won't completely shut down snapd when it violates policy03:24
Son_Gokuhttps://gitlab.com/Conan_Kudo/snapcore-selinux/commit/4566045b2d4ab6d72cc8991814753997a53f637703:25
Son_Gokuanyway, "snap run hello" works in enforcing mode now03:33
Son_Gokuthe AVC denials are still made, but the thing doesn't break03:33
Son_Gokuzyga: now, you need to update snapd to the latest version and refresh all the patches for snap-confine and snapd03:34
Son_Gokuand we're *finally* pushing this out to F24+03:34
Son_Gokuand we need to retire snap-confine and obsolete it with a snap-confine provided by snapd source package03:35
Son_Gokuzyga: when I wake up tomorrow morning, I hope to see all of this done ;)03:36
mupPR snapcraft#1133 opened: tests: fix the test that was modifying the environment variables <Created by elopio> <https://github.com/snapcore/snapcraft/pull/1133>06:26
mupPR snapd#2819 closed: packaging/ubuntu-14.04: inform user how to extend PATH with /snap/bin <Created by vosst> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/2819>06:40
=== chihchun_afk is now known as chihchun
zygaSon_Goku: \o/07:27
zygaSon_Goku: I'm going to the doctor now, I'll check back later07:28
zygaSon_Goku: let's try to roll out the package if we can this weekend07:28
mardypstolowski: hi! So... I tried again with a working snapd, but I still get the same message: error: cannot add authorization: open /home/mardy/.snap/auth.json: permission denied08:12
mardypstolowski: any idea what the message is about?08:12
pstolowskimardy, hmm that's a macaroon file used for connections with the store. are the permissions of the file correct? are you trying to do anything unusual from the hooks?08:14
mardypstolowski: no, just snapctl :-) Let me have a look at the file...08:15
pstolowskimardy, this auth file is owned by regular user and permissions are 0600 here on my box08:16
mardypstolowski: it's -rw------- for mardy.mardy (my user)08:16
pstolowskimardy, yeah, that's fine. does journalctl shows anything interesting?08:17
mardypstolowski: a few denials, let me paste them...08:19
mardypstolowski: http://paste.ubuntu.com/23965752/08:20
pstolowskimardy, yeah, these are "expected" and we have a bug opened to get rid of them (we needlessly try to connect to that socket)08:22
pstolowskimardy, but that doesn't cause any issues08:22
pstolowskimardy, can you push all your changes to that branch you gave me earlier?08:23
mardypstolowski: yup08:23
mardypstolowski: all pushed to lp:~mardy/webapps-core/iface-hook-test08:24
mardypstolowski: let me also push my snapd branch, where I've added the online-accounts interface...08:24
mardypstolowski: this is my snapd branch: https://github.com/mardy/snapd/tree/hook-test08:26
pstolowskiok08:26
mardypstolowski: it's snapd master from today, + your branch, + the OA interface08:26
pstolowskimardy, and what do you do to trigger that error?08:29
imexilHi, I was wondering, is there a website where I can browse current registered snaps and see which account they are maintained by?08:33
imexilAlso how can one overtake the maintenance of a snap package that was pushed earlier by another dev that no longer has an interest in maintaining them and agrees to give the rights to me.08:35
pstolowskimardy, also.. do you have encrypted home?08:35
mardypstolowski: the error is triggered when I connect the interface08:36
mardypstolowski: no encrypted home here08:36
pstolowskimardy, do normal store ops (installing snaps from store) work?08:36
imexilogra_,  popey: FYI The kind of feedback I was already assuming from upstream regarding yesterdays discussion/help from you: https://github.com/otfried/ipe-tools/pull/24#issuecomment-27888040808:57
mupPR otfried/ipe-tools#24: Upgrade snap to version 7.2.7 <Created by dietmarw> <Merged by otfried> <https://github.com/otfried/ipe-tools/pull/24>08:57
pstolowskimardy, when you say you trigger it when you connect the interface, do you mean you see it immediately on 'snap connect ...', or on any other operation, *after* the interface was connected?08:58
mupPR snapd#2828 opened: tests: increase service retries <Created by fgimenez> <https://github.com/snapcore/snapd/pull/2828>09:04
mupPR snapcraft#1129 closed: 96boards: fix the dragonboard example <Created by piso77> <Closed by piso77> <https://github.com/snapcore/snapcraft/pull/1129>09:29
zygare09:56
mardypstolowski: sorry, somehow missed your pings :-)10:17
mardypstolowski: yes, I can install snaps from the store (just installed the snappy-debug one)10:17
mardypstolowski: I see it immediately10:17
mardypstolowski: I presume it's part of the stderr of snapctl, but that's only my guess10:18
mvomardy: you are on classic, right? not on an ubuntu-core only system? what is the output of snap version?10:23
pstolowskimardy, doesnt that happen only if interface hooks are in use? do you see it with other connect?10:23
pstolowskimvo, fyi, he is plying with my hooks branch, and they are using snapctl10:24
mardymvo: classic, zesty10:24
mardypstolowski: let me try to remote the call to snapctl10:24
mvomardy: and snapctl gives you this error?10:24
mardymvo: I think it's coming from invoking snapctl from within the hook; if I remove that call, then the error goes away10:28
mardypstolowski: ^10:28
mvomardy: we fixed this about a week ago but you may need to ensure that your snapctl is the one coming from the branch10:29
pstolowskimardy, ok, so we've been discussing it via telegram, apparently this was fixed ~week ago; are you up-to-date?10:29
mardymvo, pstolowski: right, I only rebuilt snapd, not snapctl; let me try...10:35
mardymvo, pstolowski: still getting the same... can you please point me at the commit which fixes it, to make sure that I have it?10:38
mvomardy: https://github.com/snapcore/snapd/pull/275610:39
mupPR snapd#2756: snapctl: add config in client to disable auth and use it in snapctl <Critical> <Created by mvo5> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/2756>10:40
mvomardy: thinking about this, I think you get the snapctl from the core snap. please try "sudo snap refresh core --edge"10:40
mvomardy: that should give you the latest up-to-date snapctl10:41
sborovkovjdstrand: hi, follow up question to my yesterday's question about dbus. I tried the solution you described but I was getting errors when installing snaps about plugs and slots having the same name. Now I changed yaml to this. Did I understand correctly what needs to be done for it to work? https://hastebin.com/ovuxiqiciz.http10:42
mardymvo: mmm... updated, but I still get the same error10:44
mvomardy: hrm, what do you see with "snap version"?10:45
mupPR snapd#2829 opened: tests: add libvirt interface spread test <Created by fgimenez> <https://github.com/snapcore/snapd/pull/2829>10:45
mardysnap    2.22+17.0410:47
mardysnapd   unknown10:47
mardyseries  1610:47
mardyubuntu  17.0410:47
mardymvo: ^10:47
=== chihchun is now known as chihchun_afk
mvomardy: let me investigate this a bit more. as a workaround you can do "mount  -o bind /usr/bin/snapctl /snap/core/current/usr/bin/snapctl"10:57
mvomardy: or instead of /usr/bin/snapctl your own build of it10:57
mardymvo: mmm... still the same10:59
mardymvo: I'll now try with my own build10:59
pedronissnapd unknown ?11:00
mvopedronis: I think he is running from a build dir11:00
mardymvo: oh, if I bind-mount the one I've built, then it works11:01
pedronismvo: doesn't that then use the one outside11:02
mvomardy: yay11:02
mardymvo: maybe the fix did not land to the core snap yet?11:02
mardymvo, pstolowski: anyway, thanks a lot! Now I've something to work on :-)11:02
mvomardy: I will check that, it should be but obviously there is a disconnect between theory and reality11:02
pstolowskimvo, thanks for looking at that!11:03
mupPR snapd#2236 closed: interfaces: add realsense interface <Decaying> <Created by swem> <Closed by niemeyer> <https://github.com/snapcore/snapd/pull/2236>11:08
Son_Gokumvo, morning!11:15
mvohey Son_Goku11:15
Son_Gokuhow are you? :)11:15
mvoSon_Goku: good, thank you! how are you?11:16
Son_Gokua bit groggy, but otherwise fine11:16
mvoSon_Goku: ha! I share that feeling, I need a cup of tea :)11:17
Son_Gokuhehe11:17
Son_GokuI'm pleased that we'll *finally* be able to release snapd into Fedora, though11:17
Son_Gokuunfortunately, I can't do it because there's a bunch of patches that need to be rediffed for snap-confine and snapd, and possibly more patches11:17
Son_Gokuand unfortunately, none of the patches can be upstreamed :(11:18
zygaSon_Goku: hey11:18
zygaSon_Goku: I can help11:18
Son_GokuI mean, you're going to have to do it :/11:19
Son_Gokuwe're so far behind11:19
mvoSon_Goku: meh, that is sad. at the same time, super exciting that it can go in now11:19
zygaSon_Goku: I think we need to ship snap-confine setuid root, I've been digging through the kernel but I didn't find the test that fails without it11:19
Son_Gokuyou *can* use setuid11:19
Son_Gokuit's just not preferred11:19
zygaSon_Goku: oh, in that case one issue less off the table11:19
Son_Gokufile a bug about the cap issue against snapd and we'll switch back once it's fixed11:19
zygaSon_Goku: I think we can figure out the caps but I don't want it to block the release11:20
zygaSon_Goku: yes, I filed it...11:20
zygahttps://bugs.launchpad.net/snapd/+bug/165709911:20
mupBug #1657099:  snap-confine cannot perform namespace capture even with CAP_SYS_ADMIN <snapd:New> <https://launchpad.net/bugs/1657099>11:20
zygathat's the issue11:20
zygaSon_Goku: btw, did you try to refresh the package to 2.22?11:21
Son_Gokunot yet11:21
Son_GokuI just figured out the selinux policy thing before going to sleep11:22
zygaSon_Goku: that's great news, my fedora box is so lonely without snaps :/11:22
zygaSon_Goku: I found a way to run snaps with classic confinement on fedora11:22
zygaSon_Goku: I didn't code the patch yet but I will as soon as I'm done with content11:22
Son_Gokuso, it's not a real solution, but it means that AVC denials won't block snapd11:22
zygaSon_Goku: let's do that, we can iterate on the policy11:22
zygaSon_Goku: but not without being able to use it at the same time11:23
Son_Gokuthat's the point of it :)11:23
mupPR snapcraft#1135 opened: kernel plugin: if dtb target == NULL and arch == (arm||arm64), build and install all dtbs <Created by piso77> <https://github.com/snapcore/snapcraft/pull/1135>11:23
Son_Gokuwe should have done it in the beginning, but I didn't know about it11:23
zygaSon_Goku: I've been fixing some issues in the content interface but this is dragging on due to extra complexity11:23
Son_Gokuand no one told me11:23
Son_GokuI stumbled on it, and realized it resolved our problem11:23
Son_GokuI also have some bad-ish news for you regarding openSUSE packaging11:25
zygaSon_Goku: yes?11:25
Son_Gokuthey've completely changed how Golang packaging is done11:25
zyga!!!11:25
zygado you have a reference?11:25
Son_Gokuwhoo boy do I have one11:25
zygaand what did they decide upon?11:25
Son_Gokuhttps://github.com/openSUSE/golang-packaging/pull/511:26
mupPR openSUSE/golang-packaging#5: fix for SLE11SP3 <Created by marguerite> <Closed by tboerger> <https://github.com/openSUSE/golang-packaging/pull/5>11:26
Son_Gokuthey're now doing the same thing Fedora does11:26
Son_Gokusource code only libraries11:26
Son_Gokubasically, the Docker team and the creator of golang packaging didn't get along11:27
Son_Gokuso the golang packaging creator was forced out, and now openSUSE packaging is closer to Fedora than before11:27
zygaSon_Goku: oh boy11:27
zygaSon_Goku: some heavy words fly there11:27
Son_Gokuyeah11:27
Son_Gokuand of course, it's all still undocumented :(11:28
zygaSon_Goku: after content I should be able to do a deep dive11:28
zygaSon_Goku: with debian in good hands (CI will be working on Debian soon, I heard)11:29
Son_Gokubah11:29
zygaSon_Goku: I plan to split my focus 50/50 on Fedora and Suse11:29
zygaSon_Goku: and after Fedora is operational see if we can build for derivatives and CentOS11:29
Son_Gokuthe only obstacle for RHEL and friends is the go compiler11:29
Son_Gokuif it builds, we're gravy11:29
Son_Gokugolang libraries will need to be refreshed too...11:30
zygaSon_Goku: ok, let's try to win some packages this week; I'm sick but I can hack on this all weekend if we have a chance to solve the problems11:30
Son_GokuI'm not sure how available I will be this weekend11:31
zygaSon_Goku: I didn't follow the drama/discussion closely11:31
Son_GokuI'm going to be at a hackathon on behalf of my company11:32
zygaSon_Goku: but I guess I just have to see how it looks like now11:32
zygaSon_Goku: woot, nice :)11:32
zygaSon_Goku: maybe next week then11:32
mupPR snapcraft#1136 opened: kernel plugin: if kernel's target == NULL, use per-arch default target <Created by piso77> <https://github.com/snapcore/snapcraft/pull/1136>11:32
Son_Gokuzyga: my bit is done :)11:32
Son_Gokuyou've got to refresh snapd.spec and patches up to 2.2211:32
Son_Gokuand move snap-confine into being a subpackage of snapd11:33
zygaSon_Goku: thank you!!11:35
zygaSon_Goku: I'll see if I can get it to all work tonight11:35
mupBug #1663565 opened: Media Keys do not work in strictly confined snaps <isv> <snapd:New> <Snappy:New> <https://launchpad.net/bugs/1663565>11:35
zygaSon_Goku: I'm really happy to see progress in this front11:35
zygaSon_Goku: btw, what about Mageia?11:36
Son_Gokukeep in mind that you'll need to have snap-confine subpackage "Obsoletes: snap-confine < 1.0.44-3"11:36
zygaSon_Goku: ok, will do11:36
Son_Gokuas for Mageia, since there's be zero progress on AppArmor upstreaming, it still doesn't work with stock AppArmor :(11:37
Son_Gokus/be/been/11:37
Son_Gokuso no confinement11:37
Son_Gokubut I can probably get it going derived from the Fedora packages as soon as you've made them and published them11:37
zygaSon_Goku: there's a lot of progress, look at's what in mainline now11:38
zygaSon_Goku: it's not all there but a good chunk did land11:38
zygaSon_Goku: now with the main part out there's been a large number of small fixes (I helped find a few of those :)11:39
zygaSon_Goku: they are all going up11:39
Son_Gokuanyway, it doesn't matter that much since Mageia has no MAC enablement right now11:39
Son_Gokuthat'll have to wait for Mageia 711:39
zygaSon_Goku: can packaging from Fedora be used on Mageia?11:39
Son_Gokuyes11:39
zygaSon_Goku: sounds good11:39
Son_Gokuwe follow the same rules as Fedora11:39
Son_Gokuzyga: also /writable will need to be moved, if that's still a thing11:41
zygaSon_Goku: /writable only exists on core systems11:41
Son_Gokucan it be moved?11:41
zygaSon_Goku: are you talking about making a all-snap image with mageia base?11:42
zygaSon_Goku: /writable doesn't show up anywhere on the filesystem11:42
Son_Gokupotentially, yes11:42
zygaSon_Goku: for a core system it is required and I can explain why11:42
Son_Gokuokay..11:42
zygaSon_Goku: it could be "moved" but there's little reason to IMHO (but we can explore that later)11:42
Son_Gokuit's not something we'll deal with right now11:43
Son_GokuI can't make an all-snap system until snapd and snapcraft remove their ubuntu assumptions anyway11:43
zygaSon_Goku: ogra keeps thinking about buildroot-based base snap11:51
Son_Gokubah11:52
zygaSon_Goku: I think we're getting closer to base snaps, maybe around spring?11:52
ogra_zyga, well, we have better tools in the distro actually :)11:52
zygaSon_Goku: the idea is that a totally separate base opens up a way to experiment11:52
Son_GokuI've already made tooling for producing such base snaps :)11:52
ogra_i think i'd actually use copy_exec() from initramfs-tools with a file list fed into it11:52
Son_Gokuoh, man11:53
Son_Gokuplease don't tell me we can't use dracut?!11:53
Son_Gokuand that Ubuntu Core still doesn't use dracut11:53
Son_GokuDebian has stated their intent to retire initramfs-tools for years11:54
ogra_Son_Goku, no, we dont use dracut, though there were some changes recently that at least allow you to use it in debian and ubuntu12:02
Son_Goku:(12:02
Son_Gokuif Ubuntu Core is the Ubuntu of the future, it should be using dracut :/12:03
ogra_but the above has nothing to do with either ... i just want to use a function from the tools :)12:03
ogra_copy_exec resolves reverse binary and lib dependencies automatically ... if you use it to put any file in place you get exactly the bare minimum of libs and binaries needed to execute what you copy12:04
ogra_while buildroot is nice and all i think we should not stop using ubuntu binaries for creating core12:05
Son_Gokuogra_: well, you can guess what my opinion is :P12:06
ogra_we want the binaries but drop the overhead a deb package puts upon us and limit the set of shipped things to the bare minimum ...12:06
ogra_the current design doesnt allow that since we use a build tool that completely relies in dpkg12:07
ogra_s/in/on12:08
mupBug #1663220 changed: Add support to Secret Service APIs <snapd-interface> <Snappy:New> <https://launchpad.net/bugs/1663220>12:33
mupPR snapd#2723 closed: tests/main: add test case to verify core snap conf option service.ssh.disabled <Created by morphis> <Closed by morphis> <https://github.com/snapcore/snapd/pull/2723>12:57
jdstrandsborovkov: hey, gyi, I'm off today so at best 'in and out' (but mostly out :)13:18
jdstrandsborovkov: but I saw your question, so, per https://github.com/snapcore/snapd/wiki/Interfaces#dbus, you need to use 'name' on both sides13:19
jdstrandsborovkov: your slot looks fine. you need your plugs to also specify 'name: com.screenly'13:19
jdstrandsborovkov: also, if you want to rename your slot, you can use:13:20
jdstrandslots:13:20
jdstrand  something:13:20
jdstrand    interface: dbus13:20
jdstrand    name: com.screenly13:20
jdstrand    bus: system13:20
jdstrandthen your plugs is fine:13:20
jdstrandplugs:13:20
jdstrand  somethingelse:13:21
jdstrand    interface: dbus13:21
jdstrand    name: com.screenly13:21
jdstrand    bus: system13:21
zygajdstrand: o/13:25
jdstrandsborovkov: but you need to have one of your apps 'plugs: [ somethingelse ]' and one 'slots: [ something ]'. as it is now, since none of the apps use 'slots', they all get your toplevel slots, and since at least one of your apps 'plugs' stuff, none of them will get 'somethingelse'13:25
jdstrandsborovkov: see https://git.launchpad.net/~jdstrand/+git/test-hello-dbus/tree/snapcraft.yaml as an example13:25
jdstrandzyga: hey, not sure you saw, but I'm off today13:25
jdstrandsborovkov: good luck! there are others here who can help you if I don't see your followup questions :)13:26
zygajdstrand: oh, I didn't remember; I'm just saying hi :)13:26
jdstrandzyga: heh, ok, hi!13:26
zygajdstrand: nothing to do today :)13:26
jdstrandzyga: I think you've conditioned me to expect a code review when you wave at me :P13:27
sborovkovjdstrand: thanks :)13:27
zygajdstrand: I'm sorry; I should give you a hug and beer sometimes :)13:27
zygajdstrand: nothing to review :)13:27
jdstrandzyga: it's fine! :)13:28
sborovkovHello, can someone help me out and tell me if I got correct syntax here? Want to expose interface by playlist service. And websocket service calls that interface. https://hastebin.com/foluxekeya.pl13:44
mupPR snapcraft#1137 opened: Build-depend on git <Created by cjwatson> <https://github.com/snapcore/snapcraft/pull/1137>13:47
mupPR snapd#2830 opened: allow core_support interface to modify /etc/default/swapfile <Created by ogra1> <https://github.com/snapcore/snapd/pull/2830>14:14
mupBug #1663615 opened: snap broken out of the box on 16.04.1 <Snappy:New> <https://launchpad.net/bugs/1663615>14:24
mupPR snapd#2831 opened: interfaces: add missing recvfrom syscall to dbus interface <Created by mvo5> <https://github.com/snapcore/snapd/pull/2831>14:44
mupBug #1663303 changed: Running snapcraft on Ubuntu 14.04  fails with a traceback <isv> <trusty> <Snapcraft:New> <https://launchpad.net/bugs/1663303>14:46
sergiusensslangasek: more like a feature that only works on xenial14:48
mupPR snapd#2832 opened: interfaces/builtin: add network-setup-control which allows rw access to netplan <Created by morphis> <https://github.com/snapcore/snapd/pull/2832>15:01
araquestion for anyone15:22
araif you have a daemon that requires plug foo to be connected in order to work15:23
mupPR snapcraft#1131 closed: lifecycle: hardcode test_core_snap's PATH <Created by kyrofa> <Closed by kyrofa> <https://github.com/snapcore/snapcraft/pull/1131>15:23
arais there a way to tell snapd to start the daemon only when that plug has been connected?15:23
kyrofaara, unfortunately no15:24
kyrofaara, snapd has no way of knowing that the plug in question is actually required or optional15:25
arakyrofa, OK, thanks for confirming15:25
kyrofaara, e.g. if you managed to write your service such that the plug only extended its functionality15:25
kyrofaara, this is somewhat difficult without seccomp returning ERRNO, but it'll get easier soon15:26
mupPR snapcraft#1133 closed: tests: fix the test that was modifying the environment variables <Created by elopio> <Merged by kyrofa> <https://github.com/snapcore/snapcraft/pull/1133>15:29
jocelopio: hey, i got odd failures in tests after updating my PR again15:51
didrockszyga: hey, are you around? I was able to connect 2 content interfaces which have different "content:" name15:53
kyrofadidrocks, my gift to you: https://lists.ubuntu.com/archives/snapcraft/2016-December/002189.html15:55
didrockskyrofa: thx! I didn't remember your email :p15:56
kyrofadidrocks, haha, no problem15:57
kyleNshould I always see the browser-support interface now, for example on pi2? (I don't: snapd version 2.21)15:57
Blu2_KDE neon to officially support snaps? nice. http://www.omgubuntu.co.uk/2017/02/kde-neon-intergrating-snap-apps15:57
seb128kyrofa, Tony asked on the list but is there a launchpad bug about it?15:59
kyrofaseb128, not that I logged anyway-- I read that it was a known bug and moved on, but I wonder if it's logged16:00
seb128:-/16:00
kyleNkyrofa, should I always see the browser-support interface now, for example on pi2? (I don't: snapd version 2.21)16:01
kyrofakyleN, I thought so, but I'm not 100% sure. It's provided by the core snap16:01
kyrofakyleN, once ogra_ is off of his call he can help16:02
kyleNkyrofa, yes its a builtin but I don't see it. I have a client that needs to use it and they don't see it either. do you have a recommended next step I should take?16:02
zygadidrocks: on a call16:02
kyleNok16:02
didrockszyga: no worry, kyrofa answered. A bug in content interface that you told "known" ;)16:03
=== JanC_ is now known as JanC
kyleNkyrofa, ogra_: on browser-support interface not visible, I reported https://bugs.launchpad.net/snapd/+bug/166365616:22
mupBug #1663656: browser-support interface not reported <snapd:New> <https://launchpad.net/bugs/1663656>16:22
ogra_kyleN, not sure thats actualyl a core interface ... jdstrand would know16:22
ogra_i think it is tied somehow to unity7/x1116:23
kyleNkyrofa, ok. looking for pointers & info here to help a client.16:23
ogra_(which we do not have on the core images)16:23
kyleNogra_, hi. ok so I suppose I can dig into why they need that interface and see if there is an existing one they can use, else we are blocked16:25
ogra_kyleN, well, lets see what jdstrand says perhaps we should have it in core but that might need some extra bits since we dont have any graphics system by default16:25
kyleNogra_, ok16:26
EEightif I want access to a webcam, what should I put in the snap.yaml???17:06
Blu2_https://snapcraft.io/docs/reference/interfaces17:09
brunch875EEight: https://snapcraft.io/docs/reference/interfaces17:09
Blu2_camera17:09
Blu2_1 second faster :D17:09
brunch875blast, I never thought I'd take precisely as long to reply17:09
EEightThis is defined in plugs: right?17:10
Blu2_yes17:11
Blu2_https://snapcraft.io/docs/snaps/metadata17:11
brunch875is it / will it be possible for an user to restrict snap permissions?17:14
brunch875thinking twice about it, this is a silly question; since it's always possible to re-package the snap, right? :p17:15
kyrofabrunch875, can you be more specific?17:15
kyrofabrunch875, no such thing as silly questions!17:15
brunch875kyrofa: let's say some developer makes some... social media snap which asks for camera permission. And I want to use the whole social-media thing but I'm very concerned that the piece of software might spy me using the camera. Can I decide to deny access to the camera completely, even if the snap requires camera persmissions?17:17
kyrofabrunch875, oh certainly, one of my favorite features17:18
kyrofabrunch875, assuming you have any snaps installed, run `snap interfaces`17:19
brunch875any IRC snap I can fetch?17:19
brunch875oh, I could try telegram17:20
kyrofabrunch875, yeah that'll work17:20
ogra_theer should be a hexchat snap too17:20
ogra_even from the upstream guys afaik17:20
kyrofabrunch875, anyway, once you do that, you'll see a list of "slots" on the left and "plugs" on the right17:21
kyrofabrunch875, snaps are confined by using these (they're called interfaces). Plugs plug into slots17:22
kyrofabrunch875, so if an app "plugs into" the camera interface, you can simply use `snap disconnect` to break that connection17:22
kyrofabrunch875, which means it no longer has permission to access the camera17:22
brunch875nice!17:22
* brunch875 applauds17:22
kyrofabrunch875, now, take this with a grain of salt: this will deny access, but not all applications will be written to be HAPPY with that17:23
kyrofabrunch875, ideally the app would just run and say "Ah, can't access the camera, no matter."17:23
EEightlast question, is it true that a snap gets refresh automagically after 24h?17:23
brunch875and yet applications without exception handling will just [rude remark] themselves17:24
kyrofaEEight, four times a day, randomly distributed17:24
kyrofabrunch875, heh17:24
brunch875this design could allow for fake slots17:25
kyrofabrunch875, what would that be, technically?17:26
brunch875well, I was thinking of a fake camera device which was just a video on loop17:26
brunch875so the snapped application could be fooled to believe it was accessing the camera when it was not17:27
cholcombein my snap plugin is it possible to install another snap that is needed to build the snap?17:28
kyrofabrunch875, that sounds difficult to implement in a generic way17:28
kyrofabrunch875, but nothing prevents you from writing a snap that provides a camera slot17:29
brunch875kyrofa: so could I re-route the slot from one snap to another, then?17:29
mupPR snapcraft#1132 closed: Revert "qbs plugin: add plugin support for the Qt Build Suite (#1079)" <Created by elopio> <Merged by kyrofa> <https://github.com/snapcore/snapcraft/pull/1132>17:29
kyrofabrunch875, yes you can17:29
brunch875!! So it already is there! Woah17:30
kyrofabrunch875, just `snap disconnect` it and `snap connect` it to another slot17:30
brunch875brilliant!17:30
ogra_sexy, aint it ? :)17:30
elopiojoc: hey, we got a few issues closing this release. Please rebase with master.17:30
kyrofabrunch875, but it's not that easy-- the camera slot provides apparmor/seccomp snippets to allow hardware access. You'll have to fake that out somehow17:30
brunch875Wow, I'm really excited about snappy now17:30
ogra_welcome to the club :)17:31
jocelopio: we've also noticed that when using master our python parts fail to install17:35
jocelopio: we get clashes with "RECORD" files17:35
brunch875oops, apparently starting a line with !! triggered and ubottu edit request, whatever that means :x17:36
jocelopio: e.g. http://paste.ubuntu.com/23967962/ this doesnt happen with 2.2617:36
elopiokyrofa: did we change something in the conflicts on this release?17:38
* elopio tries.17:39
cholcombeelopio, so in the rust plugin i'm thinking that if i snap rustup i can install that and it might help resolve my issue and eliminate the script needed to choose the correct rustup version17:41
elopiocholcombe: that will make sabdfl very happy.17:42
cholcombeelopio, can you install a snap in a plugin to help that plugin?  that seems like it wouldn't work?17:42
elopiocholcombe: that's how we want to support go1.7 in the go plugin. So we haven't done it yet, but we will do it soon.17:43
cholcombecool.  is there a bug i can watch for that?17:43
elopiocholcombe: https://bugs.launchpad.net/snapcraft/+bug/161698517:43
mupBug #1616985: the go plugin doesn't support go 1.7 <isv> <plugin> <Snapcraft:Confirmed for sergiusens> <https://launchpad.net/bugs/1616985>17:43
cholcombeelopio, cool.  any idea when that might land?  just curious it's not critical or anythign17:45
elopiocholcombe: I think it's on top of the backlog for Sergio, but he's down sick today. Early next week.17:46
cholcombeelopio, nice.  that's rather quick.  i'll keep an eye on this bug17:46
elopiocholcombe: however you can play with that. Take a look how we are installing stage-packages, and change that to call snap install instead of apt install.17:46
cholcombeok17:46
elopiothat's the gist. The most simple implementation is just that. On debs we do some niceties with caches that would be great to do with snaps, but that can come later.17:47
cholcombeyeah17:47
mupPR snapd#2833 opened: many: allow core.refresh.schedule setting <Created by mvo5> <https://github.com/snapcore/snapd/pull/2833>17:48
cholcombeyeah i think that gets me out of the jam.  i install the rustup snap for a given architecture and then build as usual17:48
cholcombeotherwise i'm patching that bash script17:48
EEightok last last question: when uploading my snap on myapps.developer.ubuntu.com will it ever be listed in Ubnuntu Software Center (under the Category that I put in the snap.yaml)?17:53
kyrofaEEight, as long as it is in the stable channel, yes18:20
=== fginther` is now known as fginther
kyrofaHey ogra_ I can't seem to install ubuntu-image from any channel18:46
ogra_kyrofa, hmm, barry maintains it ... did you try devmode ?18:46
kyrofaogra_, "snap not found" for everything. Do you know anything about that? Was it unpublished for some reason?18:46
kyrofaWait... it tells me "not found" if I don't use devmode?!18:47
kyrofaCome on...18:47
ogra_yeah, thats policy18:47
ogra_devmode snaps are never listed in find18:47
=== matteo` is now known as matteo
kyrofaogra_, I don't care if they're not listed in find. Non-stable snaps aren't listed either18:48
kyrofaBut if I forgot to pass --devmode, tell me I made a mistake!18:48
ogra_well, iirc it "is not desired" that find finds anything devmode18:48
kyrofaogra_, I'm not finding though... I'm trying to install18:49
ogra_if it would tell you there is a devmode version that would defeat the purpose18:49
ogra_well, i think it is the same for install18:49
ogra_talk to mark or gustavo :)18:49
ogra_iirc the idea is to discuorage using devmode for actual proted snaps18:50
ogra_promoted18:50
kyrofaogra_, that all makes sense for not showing in find18:50
ogra_well, but why would install be different here18:50
kyrofaogra_, because that implies I know something is there. Particularly when I'm using a non-stable channel18:51
ogra_well, file a bug and lest see ;)18:51
ogra_*lets18:51
kyrofaogra_, haha, yeah18:52
EEightpatcou0118:58
EEightit's me18:58
EEightnot a password18:58
EEight:)18:58
EEightkyrofa: after how many days will it be listed in ubuntu software center?18:59
kyrofaEEight, I _think_ as soon as it makes it to stable. If you can find it with `snap find`, I think it'll be in the software center19:00
EEightI can find it using the search bar in the ubuntu software center & also using snap find, but it's not listed in the Categories (for me Games)19:01
kyrofaEEight, ahhh, you left that out!19:01
kyrofaattente, are snaps not sorted into categories in the software center?19:02
EEightfurthermore, i don't like the fact that I need to ask my users to create an ubuntu one account to install my apps... others app in the ubuntu software center (under categories) do not ask this19:03
kyrofaEEight, I think we all agree with you19:04
kyrofaEEight, we're working on making that better19:04
kyrofaEEight, for what it's worth, you can install from the terminal with `sudo snap install <snapname>` with no UO account19:04
EEightkyrofa: you've been really helpful, thank you. yes i know, but the main idea of deploying to ubuntu was that i would be in the ubuntu software center, simply search in games / kids = install (no terminal, no account)19:06
kyrofaEEight, of course, understood19:06
kyrofaEEight, can you please log a bug about the categories against https://bugs.launchpad.net/ubuntu/+source/gnome-software ?19:08
elopiojoc: still here?19:14
jocelopio: for a few mins19:14
elopiojoc: this PR has the fault, but we need it to support classic: https://github.com/snapcore/snapcraft/pull/1093/files#diff-258c2f9c12b9527559611776a87d8ba5R2619:15
mupPR snapcraft#1093: python plugin: do the right thing with classic <Created by sergiusens> <Merged by kyrofa> <https://github.com/snapcore/snapcraft/pull/1093>19:15
elopiojoc: could you add those RECORD excludes in your snap before leaving? We'll see if we can fix it before the release, and we will see if it affects others.19:16
elopiobut as you are about to leave, maybe better if you leave a workaround just in case :)19:16
jocelopio: so you would like one of the integration test snaps to trigger the conflict?19:19
elopiojoc: no, I mean to get https://git.launchpad.net/checkbox-snappy back to green, it needs those exclussions.19:23
jocoh i see19:24
jocwell i might add it to the integration tests anyway so you don't break it in the future ;)19:26
mupPR snapd#2513 closed: refactor the dialer init code <Created by teknoraver> <Closed by niemeyer> <https://github.com/snapcore/snapd/pull/2513>19:28
ryebotIs there any way to transfer a snap in the store to another owner? Alternatively, rename or delete a snap in the store?19:36
kyrofaryebot, nessita might be able to help you with that19:55
ryebotkyrofa: excellent, thank you :)19:56
elopiomatiasb: do you know what the python RECORD files are for?20:47
elopionessita: ^20:50
elopioI need a python expert :(20:50
Cynervazyga: apologies if i'm too late getting back to you, are you still available today to help me with permissions on the kubelet snap?21:22
mupPR snapcraft#1138 opened: python plugin: exclude the RECORD files <Created by elopio> <https://github.com/snapcore/snapcraft/pull/1138>22:11

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!