/srv/irclogs.ubuntu.com/2017/03/02/#snappy.txt

mupPR snapd#2970 opened: Add support for retrieving snap history from API <Created by justincan> <https://github.com/snapcore/snapd/pull/2970>03:02
mupPR snapcraft#1165 closed: beta <Created by snappy-m-o> <Closed by elopio> <https://github.com/snapcore/snapcraft/pull/1165>04:01
mupPR snapcraft#1167 opened: tests:install wget in the container that triggers the beta tests <Created by elopio> <https://github.com/snapcore/snapcraft/pull/1167>04:01
=== nhaines_ is now known as nhaines
mupPR snapd#2959 closed: data: re-add snapd.refresh.{timer,service} with weekly schedule <Created by mvo5> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/2959>07:07
mupPR snapd#2971 opened: data: ship "snap.mount" service that ensures /snap is MS_SHARED <Created by mvo5> <https://github.com/snapcore/snapd/pull/2971>07:23
mupPR snapd#2972 opened: cmd/libsnap: add sc_quote_string <Created by zyga> <https://github.com/snapcore/snapd/pull/2972>08:15
mupPR snapd#2973 opened: cmd/snap-confine: use sc_do_mount everywhere <Created by zyga> <https://github.com/snapcore/snapd/pull/2973>08:57
mupPR snapcraft#1168 opened: Add support for 7-zip sources <Created by tim-sueberkrueb> <https://github.com/snapcore/snapcraft/pull/1168>09:21
=== JamesTait is now known as Guest34673
=== Guest34673 is now known as JamesTait
pshodinstalledsnappy ubuntu for pi310:02
pshodable to ssh into it with my sso login10:02
pshodhow do i install my snaps developed at host10:02
pshod?10:02
mupBug #1669329 opened: "error: cannot install snap has changes in progress" should exit >1 <Snappy:New> <https://launchpad.net/bugs/1669329>10:07
ogra_pshod, snap install ...10:14
pshodi would also want to develop for the pi310:16
pshodcan i scp my snap into the pi?10:16
ogra_well, unless your snap only contains shell scripts you probably want to build on the pi to get the binaries built for the armhf architecture10:18
ogra_you can easily set up a classic development environment on the pi:10:18
ogra_snap install classic --devmode --edge10:18
ogra_sudo classic10:18
pshodi want to build for the pi arch so either i will have to develop on board or using alaunchpad project10:18
ogra_then ... in the classic shell ... sudo apt update and you are good to go ... it behaves like any other ubuntu in there10:19
pshodbuilding on board sounds better10:19
pshodwhy whould i sudo apt update?10:19
ogra_to exit the classic shell you can just hit ctrl-d (or type exit) ... to enter it again just run "sudo classic" again10:19
pshodif release my snap onto edge or beta10:20
pshodthen i can use only snap install10:20
ogra_the classic shel gives you a deb based system ... you can apt install snapcraft to build snaps10:20
pshodyes yes10:20
ogra_the shell shares the same home dir with the outside snap system10:20
pshoddoesnt that bring in security vulnerablities?10:21
ogra_so once you built your snap inside the classic shell, you exit it and run snap install /path/to/your.snap to install it10:21
ogra_only if you give people full access to the board :)10:21
pshodif i develop there then I wont have to publish my snap too10:22
pshodhmmmm10:22
pshodi can always remove the classic env10:22
pshodright?10:22
ogra_(teh classic shell cant run system daemons (well, it can if you manually start them for dev. purposes, but they wont auto-start))10:22
ogra_just snap remove classic and it is all gone10:22
pshodbefore sending it to production i would do that then10:22
pshodogra: remember _prasen_?10:23
pshodi guess that is the user name i was using10:23
ogra_if it is a larger project launchpad is surely better for building and all ... but for quick iteration and development on the board the classic shell is the best option10:23
ogra_yup, i do :)10:23
pshodtrying to run core on a vm10:23
pshodwell I have got the pi now10:23
pshod:D10:23
pshodhey!10:24
pshodhell everything is better outside the office10:24
pshodtook the pi home yesterday10:24
pshodwas able to do some stuff10:24
pshodbrought it back10:24
pshodnetwork proxy and lack of hdmi monitor10:25
pshod:'(10:25
ogra_sad10:26
pshodyes10:30
RumpleI have a package stuck on 'Manual review pending', and can't push a new version - which would fix the review issue. The same issue as in https://bugs.launchpad.net/snapcraft/+bug/163213610:56
mupBug #1632136: Releasing a new snap is blocked by a previous uploading pending manual review <store> <Snapcraft:New> <Software Center Agent:New> <https://launchpad.net/bugs/1632136>10:56
RumpleCan the 'Manual review pending' revision be removed? The package is fancon11:06
mupPR snapd#2954 closed: overlord: phase 2 with 2nd setup-profiles and hook done after restart for core installation <Created by pedronis> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/2954>11:30
mupPR snapd#2974 opened: many: add new (hidden) `snap debug ensure-state-soon` command and use in tests <Created by mvo5> <https://github.com/snapcore/snapd/pull/2974>11:31
mupPR snapd#2975 opened: overlord/snapstate: small cleanup of ensureForceDevmodeDropsDevmodeFromState <Created by chipaca> <https://github.com/snapcore/snapd/pull/2975>11:57
gbisson_hi all, what's the latest stable core version/rev of snappy?13:09
gbisson_I built an image for my platform (i.MX6Q) and get core     16-2     1292  canonical  -13:09
=== gbisson_ is now known as gbisson
gbissonhowever when I look at RPi3 I get: core        16-2          1267  canonical  -13:10
gbisson(even after a snap refresh)13:10
gbissonwhy aren't the two revisions aligned?13:10
ogra_gbisson, run snap info core on both of them ;)13:11
ogra_i assume you use different channels (unless they are actually different arches ... i.e. arm64 vs armhf)13:12
gbissonogra_: thanks yes my boards tracks beta...13:13
ogra_i'd use edge while doing development13:14
gbissonwhereas rpi follows stable which makes sense13:14
gbissonogra_: thanks for the quick reply13:14
ogra_(it rarely breaks)13:14
gbissonwell the problem I have with beta it that I can't install snapwbe13:14
gbissonsnapweb13:14
ogra_oh ?13:14
ogra_whats the error ?13:14
gbissonerror: cannot install "snapweb": snap "snapweb" has changes in progress13:14
gbissonso I'd rather stick to the stable version ;)13:15
ogra_and snap changes ? what does it tell ??13:15
ogra_(you can see details with "snap change $changenumber")13:15
gbissonhttp://pastebin.com/TqkCk93613:16
gbissonnothing about snapweb I think13:16
ogra_Error   2017-03-01T17:39:40Z  2017-03-01T17:39:49Z  Install "webdm" snap13:16
gbissonthen I tried webdm13:16
gbissonbut it's not the same right?13:16
ogra_no, indeed13:16
gbissonI have to say webdm/snapweb is confusing13:16
ogra_webdm was the old name of snapweb13:16
gbissondepending on the website you read it's either one or the other that is mentioned13:17
gbissonhow can I clear the snap changes ?13:17
ogra_well, old docs might still mention webdm13:17
gbissonhow can I switch to stable channel for core?13:17
ogra_sure13:17
ogra_snap refresh core --stable13:17
gbissonerror: cannot refresh "core": snap "core" has changes in progress13:18
gbissonI'm cursed13:18
gbisson1    Doing   2017-03-01T17:06:27Z  -                     Initialize system state13:19
gbissonisn't this stuck somehow?13:19
ogra_looks like13:19
ogra_how did you create that image ... looks like there are issues with it13:20
gbissonyes I'll check that process, thanks for the precious feedback13:20
ogra_not properly signed assertion, broken gadget or some such13:20
gbissonyes it's weird cause I don't see my kernel snap13:20
ogra_yeah, that definitely means it wasnt properly initialized13:20
gbissonyep, I'll let you know, thanks!13:21
ogra_core, kernel and gadget should always be there before you do anything13:21
ogra_else it would install a core ... rthats definitely worng13:21
jdstrandmvo: thanks for reviewing and merging my branches yesterday :)14:32
mupPR snapd#2714 closed: interfaces: interface to allow autopilot introspection <Created by sbaldassin> <Merged by jdstrand> <https://github.com/snapcore/snapd/pull/2714>14:57
mterrydidrocks: looks like in snapd trunk, the content: field for content interfaces is now mandatory -- so that bit of doc in snapcraft-desktop-helpers might need updating to include it15:24
didrocksmterry: hum, is that an error? on the spec it's told that content is implicitely plugname is not named15:25
didrocksunsure if zyga is around ^15:26
didrocksif so, it's a regression compared to previous behavior15:26
mterryagreed it's a regression compared to before15:30
mupPR snapd#2969 opened: interfaces: mediate netlink sockets via seccomp <Created by jdstrand> <https://github.com/snapcore/snapd/pull/2969>15:30
mterryBut spec is correct for latest stable release at least15:30
mterryJust won't be soon15:30
didrocksmterry: mind opening a bug? :)15:31
didrocksshould be high/critical before release15:31
didrocksmvo: ^15:31
didrockslet's avoid that regression15:31
jdstrandmorphis: hey, fyi https://github.com/snapcore/snapd/pull/2969. This is the PR I was talking about last week15:32
mupPR snapd#2969: interfaces: mediate netlink sockets via seccomp <Created by jdstrand> <https://github.com/snapcore/snapd/pull/2969>15:32
morphisjdstrand: oh nice15:32
mterrydidrocks: https://bugs.launchpad.net/snappy/+bug/166947615:33
mupBug #1669476: content: piece of content interfaces now mandatory in trunk <Snappy:New> <https://launchpad.net/bugs/1669476>15:33
mupBug #1669476 opened: content: piece of content interfaces now mandatory in trunk <Snappy:New> <https://launchpad.net/bugs/1669476>15:33
didrocksmterry: commented, thanks! I hope mvo is going to have a look at it15:35
mupBug #1669477 opened: Snap installed as devmode can end up running confined <Snappy:New> <https://launchpad.net/bugs/1669477>15:36
morphisjdstrand: btw. I am going to hook up our CI soon so it runs nightly against edge for the core snap so that we spot problems early on15:38
pedronisdidrocks: which spec?15:46
jdstrandmorphis: that sounds great :)15:56
mupPR snapd#2967 closed: tests: remove workaround for docker again, snap-declaration is fixed now <Created by mvo5> <Merged by pedronis> <https://github.com/snapcore/snapd/pull/2967>16:02
amosbirdhi16:30
amosbirddoes snap support centos 6?16:31
ogra_amosbird, https://github.com/snapcore/snapd/wiki/Distributions16:33
amosbirdhmm16:34
mvodidrocks: looking now16:36
mvodidrocks: I will look over the code, I don't remember reviewing that16:36
didrocksmvo: thanks!16:38
cvldrgHi, would anyone help me to install wget or curl with snao ?17:43
jocelopio: hi, do you think the plainbox-provider plugin PR will be ok to go in next snapcraft release?18:03
elopiojoc: oh, I hope so. I'm seeing that the test error is not related to your change. I'll hit update to get a fresh run.18:06
jocelopio: great, thank you18:07
jdstrandtyhicks: hey, wondering if you would have time to review the description and my comments in this PR: https://github.com/snapcore/snapd/pull/2969 (ie, don't need a code review yet (unless you want to), just verify the approach and advise on my comment)18:10
mupPR snapd#2969: interfaces: mediate netlink sockets via seccomp <Created by jdstrand> <https://github.com/snapcore/snapd/pull/2969>18:10
mupPR # closed: snapd#2230, snapd#2302, snapd#2592, snapd#2624, snapd#2644, snapd#2749, snapd#2752, snapd#2782, snapd#2787, snapd#2793, snapd#2837, snapd#2855, snapd#2869, snapd#2877, snapd#2895, snapd#2929, snapd#2930, snapd#2932, snapd#2938, snapd#2941, snapd#2942, snapd#2944, snapd#2947,18:10
mupsnapd#2950, snapd#2951, snapd#2952, snapd#2953, snapd#2963, snapd#2969, snapd#2970, snapd#2971, snapd#2972, snapd#2973, snapd#2974, snapd#297518:10
geniiWhoa18:10
jdstrandtyhicks: if now isn't convenient, I have other things I can work on18:10
mupPR # opened: snapd#2230, snapd#2302, snapd#2592, snapd#2624, snapd#2644, snapd#2749, snapd#2752, snapd#2782, snapd#2787, snapd#2793, snapd#2837, snapd#2855, snapd#2869, snapd#2877, snapd#2895, snapd#2929, snapd#2930, snapd#2932, snapd#2938, snapd#2941, snapd#2942, snapd#2944, snapd#2947,18:11
mupsnapd#2950, snapd#2951, snapd#2952, snapd#2953, snapd#2963, snapd#2969, snapd#2970, snapd#2971, snapd#2972, snapd#2973, snapd#2974, snapd#297518:11
tyhicksjdstrand: how come you were thinking that netlink_sendmsg() doesn't call out to the LSM in some situations?18:18
mupPR snapd#2977 opened: releasing package snapd version 2.23 <Created by mvo5> <https://github.com/snapcore/snapd/pull/2977>18:18
tyhicksI quickly walked through netlink_sendmsg() but don't see any short circuits for the root user18:18
tyhicksjdstrand: oh, I think I see it now18:19
* tyhicks reads18:19
jdstrandtyhicks: early in the function. search for -EPERM18:20
tyhicksjdstrand: that's equiv to DAC being applied before MAC (the only time the LSM isn't called is when the user doesn't have CAP_NET_ADMIN and the sendmsg() fails)18:21
jdstrandtyhicks: yes18:22
tyhicksjdstrand: ah! I thought you were saying that LSM is bypassed in some non-error conditions18:22
tyhicksI misunderstood18:22
jdstrandtyhicks: no. I was only saying that I observed socket(AF_NETLINK, ..., NETLINK_ROUTE) as root did not go through the lsm18:23
tyhicksok18:23
tyhicksI need to go back and read the first comment in the PR18:23
tyhicksthere looks to be a good amount to digest so it'll take me a little bit18:24
jdstrandtyhicks: because if I remove 'socket AF_NETLINK - NETLINK_ROUTE', I get a seccomp denial. if I add it, I get no apparmor denial for a lack of 'network netlink ...,' rule18:24
tyhicksjdstrand: ok, I'm still missing some context on why you think the netlink-audit and netlink-connector "escape hatches" are needed18:33
tyhicksI can say that NETLINK_AUDIT will be needed by any trusted helpers that audit through the audit subsystem (dbus-daemon is an example)18:36
jdstrandtyhicks: currently, NETLINK_AUDIT is only in account-control. I did a rdepends on libaudit1 and there was enough there that made me feel like a 3rd party app may try to use it18:37
jdstrandtyhicks: and we wouldn't want something that simply uses 'python-audit' to be able to create user accounts18:38
tyhicksjdstrand: ok, I understand the desire for netlink-audit18:38
tyhicksjdstrand: you didn't justify netlink-connector very much18:39
tyhicksjdstrand: it has been years since I looked at NETLINK_CONNECTOR but I don't remember anything using it18:39
jdstrandtyhicks: NETLINK_CONNECTOR isn't used in any of the policy, but I saw it in a few places on codesearch18:40
jdstrandlvm2, ulatencyd, ruby-god, powerstat and v86d18:40
jdstrandand stress-ng18:41
tyhicksjdstrand: ok, that makes some sense but note that we won't be able to mediate individual NETLINK_CONNECTOR users18:42
jdstrandtyhicks: my concern is that we had a bare socket rule before and that all accesses aren't going through the lsm. I was hoping every AF_NETLINK would need a corresponding 'network netlink <type>' rule, but at least with NETLINK_ROUTE, that isn't the case18:42
tyhicksjdstrand: from what I remember, it is just a common transport mechanism and anything that we can NETLINK_CONNECTOR access to will be able to set up a side channel18:42
tyhickss/that we can/that we grant/18:43
jdstrandtyhicks: right, which is why I thought a separate interface that requires manual connection would be good18:43
jdstrandsame with audit18:43
mupPR snapcraft#1169 opened: tests: update the ftp source for integration test <Created by elopio> <https://github.com/snapcore/snapcraft/pull/1169>18:43
tyhickswell, not quite the same18:43
tyhicksI think the routing for NETLINK_CONNECTOR is done based on the addr.nl_groups value18:44
jdstrandtyhicks: because we are now mediating all socket(AF_NETLINK, ...) socket calls, I wanted to make sure people had a way to do what they could do before18:44
jdstrandtyhicks: all I meant by same was the base declaration requires manual connection18:44
tyhicksah, gotcha18:45
jdstrandtyhicks: is that a +1 on netlink-audit and netlink-connector?18:47
tyhicksjdstrand: still confused about one thing... the java server that hit the NETLINK_ROUTE seccomp denial worked fine after you added the seccomp rule even thought you didn't add an apparmor rule?18:48
jdstrandtyhicks: that is precisely correct, which was puzzling. I did not chase down why18:48
tyhicksjdstrand: ok, +1 on both (I'll leave a comment) but I'm going to spend a little bit of time looking at the NETLINK_ROUTE code path18:50
jdstrandtyhicks: ok, thanks (on both)18:54
lazyPowermvo is my new hero. Holy cow the response time on http://pad.lv/1668659 is intense. Just wanted to stop by and say thanks for all the help both in here and on the bug everyone.20:28
=== JanC_ is now known as JanC
jhodappIs there a standard place that I should put a custom wrapper script in for an app for my snap's source tree?21:20
kyrofajhodapp, nope, it's completely your playground!21:21
kyrofajdstrand, I typically just put stuff like that in a bin/ dir in the root of the snap21:21
jhodappkyrofa, so putting it in snap/ is not bad? I heard that snap/ is starting to become standard directory for other things21:21
kyrofajdstrand, sorry, I meant jhodapp21:21
jhodappit's ok, that happens to jdstrand and me all the time :)21:21
kyrofajhodapp, I'm just so used to typing his nick! :P21:22
kyrofajhodapp, anyway, you're right-- snap is actually not the best place21:22
kyrofajhodapp, snapcraft likes to own that dir21:22
jhodappok, I saw another snap use it and I copied that...so I'll make sure to move away from that21:22
jhodappthanks kyrofa21:22
kyrofajhodapp, so you're not asking about where it should be the _final_ snap so much as asking for recommendations about how to organize your source tree?21:22
jhodappkyrofa, yes exactly21:23
kyrofajhodapp, I typically make a src/ directory, with a subdirectory for each part21:23
jhodappkyrofa, hmm interesting21:23
jhodappkyrofa, this might be something to start recommending...maybe a blog post or whatnot21:24
kyrofajhodapp, yeah, perhaps elopio and I could put together a weekly "tips and tricks" post of some kind21:25
jhodappkyrofa, would love that...snaps are so powerful with so much choice...knowing best practices would be *very* helpful21:26
jhodappkyrofa, to take off of Effective C++, could be an Effective Snapping series21:26
kyrofaAh, my favorite book21:26
jhodappmine too :)21:26
kyrofajhodapp, you and I need to meet sometime ;)21:27
jhodapphaha, cheers21:27
kyrofaHmm. That came off creepier than I anticipated21:27
jhodappno I got your gist ;)21:27
jhodappno worries21:27
kyrofaHahaha21:27
kyrofaelopio, how do you feel about something along those lines? ^^21:27
jdstrandmwhudson: fyi, I approved your snap, but you need to release it still21:39
mwhudsonjdstrand: thanks21:39
mwhudsonhuh snap install core in my lxd container downloads 5 megs really quickly then fails22:03
mwhudsonoutside the container it is much slower but appears to be working?22:03
mwhudsonoh no, snap download core in the container is slow and working too22:04
mwhudsonhm if i've run snap download, how do i make snapd see the assertions file?22:08
kyrofamwhudson, snap ack22:09
kyrofamwhudson, then you can just `snap install` without --dangerous22:09
mwhudsonkyrofa: oh of course22:10
mwhudsonmount: wrong fs type, bad option, bad superblock on /var/lib/snapd/snaps/core_1395.snap,22:11
mwhudsoneh what22:11
kyrofamwhudson, do you have squashfuse?22:11
mwhudsonyes22:11
kyrofamwhudson, you've reached the limit of my expertise :P22:11
kyrofa(I've not tried this before)22:12
mwhudsoni'm trying to reproduce that thing where classic snap builds on !amd64 don't work22:13
mwhudson"interpreter /snap/core/current/i386-linux-gnu/ld-2.23.so"22:15
mwhudsonthat path looks pretty unlikely22:15
mwhudsonit's missing a /lib22:15
mwhudsonbecause someone didn't understand how symlink resolution works??22:17
kyrofaHmm... it actually looks like i386 is missing the core-dynamic-linker field all-together22:18
kyrofaSo it does a readlink on /snap/core/current/lib/ld-linux.so.2 and appends that to /snap/core/current22:21
kyrofaWhich of course won't work if the link is relative22:22
kyrofamwhudson, is that what you're talking about?22:22
mwhudsonkyrofa: yes22:25
kyrofaYeah, it should make that link relative to the core path before appending back onto it22:26
mwhudsonuh i hope /lib/ld-linux.so.2 is always a symlink22:30
kyrofaIndeed22:31
mwhudsonoh readlink raises if it's not a symlink22:43
mwhudsonthat's at least confusing than if it just returned its argument22:44
mwhudson*less confusing22:44
elopiokyrofa: +1. Like a short post of a couple of paragraphs? Or like a tutorial to snap something from 0, including an interesting detail?22:59
kyrofaelopio, I was thinking something relatively short and sweet. The Effective Snapping idea was excellent23:00
mwhudsonhttps://github.com/snapcore/snapcraft/pull/117023:01
mupPR snapcraft#1170: core: fix symlink resolution in get_core_dynamic_linker <Created by mwhudson> <https://github.com/snapcore/snapcraft/pull/1170>23:01
mupPR snapcraft#1170 opened: core: fix symlink resolution in get_core_dynamic_linker <Created by mwhudson> <https://github.com/snapcore/snapcraft/pull/1170>23:02
kyrofaThanks for that mwhudson23:02
mwhudsonafter the amount of time i spent figuring out what was going on, the least i can do is save anyone else from the pain23:02
mwhudsonnow can i have the fix on launchpad pls? :)23:03

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!