[01:10] Hello, anybody tried installing snappy in Fedora? [01:12] The copr repo for feodra , Zyngacore/snapcraft does not work [04:58] What's the deal with --classic snaps on the stable branch? Is there any other way to access /sys/ without --classic? [07:11] Does snapcraft support Fedora? [07:12] The copr seems to be down [08:01] http://cdimage.ubuntu.com/ubuntu-core/16/stable/current/ [08:01] used the pi3 image from here [08:01] cannot get the bluetooth to work [08:02] help help help! [08:10] bluetotooth service not found [08:10] when ran systemctl bluetooth status [08:10] PR snapd#2975 closed: overlord/snapstate: small cleanup of ensureForceDevmodeDropsDevmodeFromState [09:26] PR snapd#2951 closed: interfaces: use seccomp specs [09:35] running core on pi3 [09:35] unable to get the bluetooth working [09:35] http://cdimage.ubuntu.com/ubuntu-core/16/stable/current/ [09:35] using the img from here. [09:35] help! === JamesTait is now known as Guest83668 === Guest83668 is now known as JamesTait === gbisson_ is now known as gbisson [09:55] Hello everyone. Can someone point me to the description of installation Ubuntu Core on Google Compute Engine? [09:56] Is it really possible to make such installation? [09:57] On AWS EC2 found image ubuntu-core16, but failed to find something similar on GCE :( [10:05] PR snapd#2984 opened: interfaces: seccomp test helper [10:19] how to load a service in core env? [10:19] installed classic env in it [10:19] soffokl_: Unfortunately the instructions that existed seem to have disappeared from the snappy websites. But you can use a custom image. [10:20] (There was https://www.ubuntu.com/desktop/snappy#snappy-google in a previous iteration) [11:28] NEED TO MAKE BLUETOOTH WORK ON CORE NOW! [11:28] help help help! [11:31] PR snapd#2985 opened: hookstate: disable configure hook for core on classic [12:03] Hello, what is the best approach to copy a file from the parts/{part}/build directory to the parts/{part}/install directory using an install scriptlet ? [12:04] I wanted to use the $SNAPCRAFT_PART_INSTALL as a target but I can't figure out if there is the equivalent source environment variable === hikiko is now known as hikiko|ln [12:21] nevermind, found it [13:01] caribou: i use "cp -a * $SNAPCRAFT_PART_INSTALL" in my scriptlet, what did you decide on? === hikiko|ln is now known as hikiko [13:16] is zyga back from the grave yet? [13:17] mvo: hey, the 2.23 release tag doesn't match what you did last week [13:17] it's way older [13:26] jdstrand, hi [13:30] mvo: please fix, because there's tons of stuff missing in the 2.23 download I get from GitHub :( [13:31] Son_Goku: in a meeting right now, but what is going wrong? [13:31] mvo: the 2.23 tag published on GitHub is invalid [13:31] Son_Goku: I check in a little bit [13:31] it's over two weeks old [13:31] whereas you just committed 2.23 a few days ago [13:32] so things like my SELinux policy and whatnot are missing [13:32] Son_Goku: yes, definitely wrong, sorry for that, let me fix [13:32] as well as all of zyga's merged fixes for CentOS/Fedora [13:34] Son_Goku: sorry for that! please checkout 2.23 again [13:36] mvo: yay, thanks [13:36] looks right now [13:36] mvo: is the vendored tarball supposed to have an inner directory "snappy.upstream"? [13:36] I would have figured it'd be snapd-2.23 [13:37] Son_Goku: yeah, its an artifcat of the way dpkg-buildpackage did it, I really should fix that, can do after the meeting :) [13:37] mvo: do you know when zyga will get back? [13:38] Son_Goku: I think 2 more days [13:38] okay, thanks [13:38] What's the deal with --classic snaps on the stable branch? Is there any other way to access /sys/ without --classic? [13:44] cjwatson: hey! it seems that all my npm install --global are failing in launchpad (while they do pass on my machine). Can be that I have some in a local cache, but I don't know if there can be some proxy issue IS-side. (https://launchpadlibrarian.net/309867959/buildlog_snap_ubuntu_xenial_amd64_chuck-norris-webserver_BUILDING.txt.gz) (Note that the same package did build successfully on the 27th FYI) [13:45] (the snap proxy isn't IS-side) [13:46] ah ok :) [13:46] didrocks: I dunno, a chmod ENOENT doesn't seem very snap proxy-ish, and it does manage to download other files [13:46] have you tried snapcraft cleanbuild? [13:47] cjwatson: sorry, yeah, I didn't scroll high enough, I was stuck in the "npm install" [13:47] cjwatson: it's probably my side, need to try in cleanbuild, I always forget about this option as my lxd container was broken for a while. Sorry to have bothered you :) [13:48] np - let me know if you still can't get it to work, but it looks more likely to be a bug in the package's build system to me [13:49] cjwatson: agreed [13:53] Son_Goku: should be fixed now [14:06] cachio: hey [14:07] jdstrand, I was creating some performance tests for dbus [14:07] jdstrand, trying to validate dbus performance, then I found something interesting [14:08] jdstrand, I created some scripts in python and one snap which is running these scripts [14:08] when I run the python scripts I get about 50% more of performance compared with the snap execution [14:09] both are executing the same scripts [14:09] mvo: much better :D [14:09] cachio: this is testing the performance of starting a script? [14:10] jdstrand, no, it is measuring the bandwidth when I sent 20k signals [14:11] jdstrand, I is creating a client and a server and the client is creating the signals and the server is counting all the signals that are arriving to the specific address [14:11] cachio: did you factor out the startup cost of starting the snap command? [14:12] jdstrand, no, how can I do that? [14:13] I am not sure if I should [14:13] because the test start when the first message arrives to the server [14:14] the server is getting metrics from the first message to the last [14:15] popey: well, I just realized that the file I had to copy was in the . directory so cp sos.conf $SNAPCRAFT_PART_INSTALL/etc did the trick [14:15] cachio: I'm asking all this for two reasons. 1) tyhicks did extensive testing of dbus performance with the apparmor patches and found performed extremely well for normal and beyond use cases and 2) launching a snap command is not lightwight-- there is ipc to snapd involved, an exec(), reading several files, setting up a seccomp filter, setting up namespaces, etc, etc, then another exec() [14:16] cachio: ok, so if the test is first message to last, that should be ok. if it includes time to get to first message, then it is measuring too much [14:17] cachio: I don't know your test, but if it is waiting for the first message and that appears in the results, a simple way to adjust that would be to starting your timing on the 2nd message [14:18] cachio: and to be clear-- your test is a) start command b) send messages c) stop command and *not* a) start command b) send message c) stop command d) goto 'a' [14:19] jdstrand, the tests are: [14:20] Bug #1670371 opened: Configure hook breaks content interface plug === fnordahl_ is now known as fnordahl [14:20] 1- start command in parallel(2- spammer will send x signals 3- handler will receive those signals and report metrics) 3- stop command [14:21] jdstrand, so the start should not interfere in the tests results [14:23] oops, I think I may have run into a bug with the --classic confinement : [14:23] cachio: to be 100% sure, we can avoid the launcher and isolate apparmor [14:23] if I run the cmd, it appends the same argument over and over (see http://pastebin.ubuntu.com/24124987/) [14:24] I don't get that in --devmode [14:24] cachio: you can do: aa-exec -- /path/to/script [14:24] jdstrand, sure [14:24] cachio: aa-exec is sufficiently lightweight to not skew the results. would be snap.name.command [14:25] could be tied to a denied AppArmor profile request to rw on /dev/tty [14:25] cachio: and also to be 100% clear-- you comparisons are all on the same machine, correct? [14:26] jdstrand, yes [14:26] real hardware [14:27] caribou: the /dev/tty denial is likely harmless, but you can add '/dev/tty rw,' to /var/lib/snapd/apparmor/profiles/nap.your.profile and reload with 'sudo apparmor_parser -r /var/lib/snapd/apparmor/profiles/nap.your.profile' [14:27] er, snap.your.profile [14:28] jdstrand: yeah, was reading on of your comment on a previous bug [14:28] jdstrand: so might not be tied to the CLI option repeating itself forever like the pastebin shows [14:28] jdstrand: let me try that first [14:29] caribou: it wouldn't be impossible that it is tied to it, would just be surprised [14:30] jdstrand: looks quite similar to LP: #1664427 [14:30] Bug #1664427: thefuck snap gets an apparmor denial even in classic confinement [14:31] cachio: fyi, the tests tyhicks did were several years ago, and it was a similar test iirc (he would have the details)-- thousands and thousands in a short time span. iirc it was around 1% overhead, but I could be making that up [14:34] jdstrand: well, it's the snap-confine profile that rejects it [14:34] caribou: ah, well, then yes, add it there [14:35] caribou: but, are you running from your snap a command in /snap/bin? [14:35] caribou: cause that is allowed in classic but not devmode or strict [14:36] caribou: I also think that is the problem in bug #1664427 [14:36] Bug #1664427: thefuck snap gets an apparmor denial even in classic confinement [14:36] jdstrand: well, that's a python script I just invoke it as "command: sosreport" [14:37] jdstrand: and that's the classic mode that is failing, not devmode [14:39] PR snapd#2986 opened: tests: specify the core version to be unsquashfs'ed in the failover tests [14:39] oh right, 1664427 was also with classic. any way, feel free to add that rule to /etc/apparmor.d/usr.lib.snapd.snap-confine. I suspect it won't fix the issue [14:43] jdstrand, http://paste.ubuntu.com/24125055/ [14:44] jdstrand, I ran in my machine the tests, using aa-exec, running the snap command and running python [14:45] I see like a 20% of difference if yo usee the metric 'messages_sec' [14:46] jdstrand: you're right, has nothing to do with it [14:47] cachio: at this point I'm going to point you at tyhicks for historical context. he may bounce it back to me [14:47] cachio: he should be online in a few minutes [14:51] jdstrand, sure, tx [14:55] jdstrand: you just rejected my ffscreencast snap - can I point you to https://bugs.launchpad.net/snapcraft/+bug/1670162 ? I don't believe it needs a .desktop file. [14:55] Bug #1670162: publish complains about desktop file un-necessarily === cachio is now known as cachio_lunch [14:56] popey: if it is a cli tool, why does it need x11? [14:57] jdstrand: it's a screen capture tool. [14:57] uses x11 utils etc [14:59] kyrofa: snap proxy timeout is now two hours rather than one [15:03] PR snapd#2592 closed: many: add support for session dbus services via snaps [15:04] popey: can you request for manual review? [15:05] Bug #1670384 opened: refresh to same revision yields broken SNAP_USER_DIR [15:12] jdstrand: done [15:16] PR snapd#2987 opened: store: download from authenticated URL if there is a device session set [15:29] Bug #1670397 opened: On Debian Stretch (9) /snap/bin is not added to path [15:33] thanks jdstrand [15:52] hi cachio [15:52] cachio: I'm not sure if I still have my old performance testing data [15:53] pmcgowan: hey, do you have a branch with snapcraft.yaml for your webdemo snap? [15:53] cachio: what does messages_sec represent? [15:54] jdstrand, I do, I havent pushed the latest but could [15:54] jdstrand, which bug you interested in [15:55] PR snapd#2980 closed: client, daemon: move "snap list" name filtering into snapd [15:56] i'm trying to build a snap out of only ubuntu packages (mostly a custom command around nmap). i'm running into trouble with missing shared libraries. is there some snapcraft plugin that would automatically include dependent libraries or do i have to code that up myself? i was thinking an 'apt' plugin might be nice for use cases like that [15:57] pmcgowan: the denials included in bug #1667480 [15:57] Bug #1667480: browser-support needs to be an implicit interface, not implicit classic [15:58] pmcgowan: I fixed all of those already, but then I was wanting to test on dragonboard and saw some other stuff I want to investigate [15:58] pmcgowan: I have r19 from the store [15:59] ok the last branch is ok then, https://code.launchpad.net/~pat-mcgowan/+junk/webdemo [15:59] jdstrand, ^ [16:00] pmcgowan: thanks! === JamesTait is now known as Guest7558 === cachio_lunch is now known as cachio [16:14] Bug #1670397 changed: On Debian Stretch (9) /snap/bin is not added to path [16:18] cachio: I found my old benchmarks [16:18] cachio: they were done on a nexus 7 phone [16:19] cachio: at that time, the focus was click confinement and we expected that the common case would be a confined click application (client) talking to an unconfined trusted helper (daemon/service) [16:19] cachio: measured overhead using the dbus-ping-pong test was steady at about 10% [16:20] cachio: it sounds like you're confining both the client and the server in your benchmarks so that may explain the additional overhead [16:21] tyhicks, in some machines I got the 50% of overhead [16:21] tyhicks, i am not sure it is known [16:22] I mean, if this overhead is what you expect or it is so much [16:23] tyhicks, do you want to see the test code? [16:23] just to verify the tests are ok ยก [16:23] ifconfig [16:24] cachio: yes, please share the test code with me [16:24] cachio: 50% overhead should definitely not be happening [16:25] cachio: I landed that code years ago and haven't been involved since so something may have changed [16:25] tyhicks, http://paste.ubuntu.com/24125526/ [16:25] I have a snap here [16:25] http://bazaar.launchpad.net/~sergio-j-cazzolato/ubuntu-performance-tests/trunk/files/head:/resources/apps/kpi-dbus-tests/ [16:25] tyhicks, the snap uses these py files [16:26] tyhicks, the I run the tests running python3