/srv/irclogs.ubuntu.com/2017/04/07/#snappy.txt

Pharaoh_AtemHey everyone, if there's anyone interested in trying out snappy on Fedora, it'd be great if you could test out snapd02:07
Pharaoh_Atemmore details here: https://forum.snapcraft.io/t/call-for-testing-snapd-2-23-on-fedora/127/602:07
olympionexdoes anybody know if there has been any other progress on this snap download connection reset bug? https://bugs.launchpad.net/software-center-agent/+bug/161776503:47
mupBug #1617765: Connections reset when downloading snaps from CDN <Snapcraft:New> <Software Center Agent:New> <snapd (Ubuntu):Confirmed> <https://launchpad.net/bugs/1617765>03:47
olympionexmy experience is similar to the comments from others on that bug, it seems to affect snapcraft being run inside containers in particular03:49
olympionexhave tried both building inside lxd and docker containers and the core snap fails to download the vast majority of the time03:50
morphis_mwhudson: ping05:04
=== morphis_ is now known as morphis
mupPR snapd#3151 opened: Small adjustments for debian deb builds and packaging symlink for Debian Sid <Created by morphis> <https://github.com/snapcore/snapd/pull/3151>05:04
mupPR snapd#3151 closed: Small adjustments for debian deb builds and packaging symlink for Debian Sid <Created by morphis> <Closed by morphis> <https://github.com/snapcore/snapd/pull/3151>05:15
=== chihchun_afk is now known as chihchun
zygao/06:43
zygamvo: I will take a small detour to check something that gustavo requested (build system tweaks)06:44
zygamvo: meanwhile can you do a review on updates to https://github.com/snapcore/snapd/pull/314506:44
mupPR snapd#3145: overlord/ifacestate: fix auto-connect during core snap transition <Created by zyga> <https://github.com/snapcore/snapd/pull/3145>06:44
zygamvo: and let's plan how to change the plug names on core06:44
zygamvo: (i.e. how to test that)06:44
zygamvo: so that we don't cauese any regressions with this move06:45
zygamvo: after the build system detour I will look at ensuring plug/slot name uniqueness validation06:45
zygamvo: we have code for that but apparently it's not used or working06:45
zygamvo: (I suspect the way implicit slots are added side-steps that)06:45
mupPR snapd#3152 opened: store: make hash error message more accurate <Created by mvo5> <https://github.com/snapcore/snapd/pull/3152>06:46
mvozyga: ok06:46
sabdflmcphail, we will figure out security in wayland06:57
sabdflwe need to do that anyway to get snaps to be amazing on a GNOME desktop06:57
sabdflbut we will keep Mir for IoT projects where security and simplicity are the main requirement06:58
zygaabout wayland, I think we could use a test on fedora 25 + wayland to see how the interface shoud look like, I think it will be relatively straightforward06:58
zygaand try the same on ubuntu with apparmor to see what's to do with confinement06:59
zygamorphis was recently working on better X11 auth support for snaps06:59
zygaand that feels in line with similar work for wayland06:59
zygamvo: ok, experiment done07:05
zyganow looking at plut/slot uniqueness again07:06
mvothanks zyga07:06
mvofgimenez: could you please have a look at 3148? it needs a second review and is pretty simple (I hope :)07:07
AimiliusHello, I'm trying to update the snapd PKGBUILD on archlinux form 2.21 to 2.23.6. I removed the biuld patches that move the /snap dir to /var/lib/snapd/snap and updated the verison number. Everytime I would try to build snapd, I would get a linking error I cannot resolve. https://pastebin.com/YY3Pa3U807:07
fgimenezmvo: sure on it07:07
mvofgimenez: btw, is the re-exec spread-cron happy now? with the new snapd now being build?07:08
zygaAimilius: hello! welcome :-) looking at the diff07:08
zygaer, log :)07:08
zygaAimilius: aha, I think I know what's wrong07:09
AimiliusThat was quick :)07:09
zygaAimilius: can you do a master snapshot pleaes07:09
zygaAimilius: I landed a PR that makes the build system more flexible07:09
zygaAimilius: look at cmd/autogen.sh07:09
fgimenezmvo: nope it seems to have the same errors https://travis-ci.org/snapcore/spread-cron/builds/21954933107:10
zygaAimilius: the problem is related to the set of libraries that are linked into snap-confine statically07:10
zygaAimilius: in master each library (that can) has a knob to control if it is linked dynamically or statically07:10
zygaAimilius: and the defaults are all dynamically as that is most easy to compile on all distributions07:10
zygaAimilius: in 2.23.6 that wasn't the case07:10
zygaAimilius: we are working on 2.24 now (not sure if it goes out today as we found some old bugs last night and want to fix them) but if you take master you will have a better chance at building it07:11
Aimiliuszyga: I'm trying to rebuild now07:11
zygaAimilius: excellent!07:11
fgimenezmvo: snapd 2.23.6+201704061805.git.996da23~ubuntu16.04.1 in that execution, is that ok?07:12
mvofgimenez: that sounds good07:13
AimiliusMaster builds fine, though some checks fail07:15
AimiliusI believe they are about apparmor confinement (test_restrictions test_complain_missed and test_unrestriced_missed, so I didn't excpect that would work07:17
mvozyga: one quick question in your 3145 PR - if correct I can quickly push a branch for core07:17
zygamvo: looking07:18
AimiliusOh, they're about the linux-grsec restrictions07:18
AimiliusSo everything works fine07:18
zygamvo: yes, that's correct, also replied there07:18
zygaAimilius: those are about seccomp I think07:18
zygaAimilius: aha07:18
zygaAimilius: interesting, feel free to report those on the forum, I'm sure the security team will be interested in them07:19
Aimiliuszyga: I've got linux-grsec installed, that blocks unpriviliged dmesg access07:19
zygaaha07:19
Aimiliuszyga: The test-suites try to access dmesg, so that doesn't work07:19
mvozyga: ta, I will push a branch for core with that fix07:19
zygamvo: OK07:19
Aimiliuszyga: I think on plain linux (without grsecurity) it'll work fine07:20
zygamvo: branch with plug/slot uniqueness enforcement on AddPlug/AddSlot is almost ready07:21
mvozyga: it looks like snapcraft.yaml does not allow to use: "plugs: network-bind-hook: interface: network-bind" :/07:28
mvozyga: the valications allows only flat strings arrays07:29
mvozyga: whichi is very stange07:29
kristbaum_jdstrand I have had an "review pending" on my snap for five or six days. Is this normal, should I change something? I just wanted to try and upload an beta of mdt for testing.. it's namespace is mdt.kristbaum.07:29
mvozyga: hm, looks like its just a bit of a strange syntax07:30
zygamvo: no, you need to spell that differently07:31
zygamvo: like this:07:31
mvozyga: yeah, silly me07:31
zygamvo: plugs:\n  network-bind-plug:\n    interface: network-bind07:31
Aimiliuszyga: After a build on clean linux (without-grsecurity) the tests still fail. https://pastebin.com/WH1JBmMe07:33
mupPR core#32 opened: Rename core-support,network-bind plugs to make them unique <Created by mvo5> <https://github.com/snapcore/core/pull/32>07:34
zygamvo: have a look at https://github.com/snapcore/snapd/pull/3153 please07:35
mupPR snapd#3153: interfaces: validate plug/slot uniqueness <Created by zyga> <https://github.com/snapcore/snapd/pull/3153>07:35
mupPR snapd#3153 opened: interfaces: validate plug/slot uniqueness <Created by zyga> <https://github.com/snapcore/snapd/pull/3153>07:36
zygaAimilius: hmm, can you please open a topic for that on https://forum.snapcraft.io/ - make sure to report the kernel version used07:36
zygaAimilius: we may carry some seccomp fixes07:36
zygaAimilius: not sure yet, we'll check it out07:36
AimiliusOk, I'll open a topic07:36
zygamorphis: ^^ have a look please07:36
Aimiliuszyga: uname -a Linux glorfindel 4.9.20-1-lts #1 SMP Fri Mar 31 15:23:31 CEST 2017 x86_64 GNU/Linux07:36
zygamvo: note that this branch may be a flag day for core revert07:37
zygamvo: as previous core won't validate and because the plugs are explicitly defined and slots are implicitly added later, may be dysfunctional (no network-bind slot, no core-support slot)07:37
zygamvo: I can do a separate patch that fixes this by detecting it and changing the snap via implicit.go07:38
zygamvo: let me know what you think07:38
zygamvo: I also thing we could use a `snap --validate ./path/to/file.snap` command07:39
zyga(^ internal hidden thing maybe)07:39
mvozyga: hm, if we need a flag day we need to think about this more carefully, maybe a HO in a bit for some brainstorm?07:40
zygamvo: yes07:41
zygamvo: I think we can avoid it07:41
zygamvo: if we teach snapd to just rename those two plugs07:41
zygamvo: (core:network-bind -> core:network-bind-plug) (same for core-support)07:41
zygamvo: then no flag day needed07:41
zygamvo: do you want to jump into a HO to discuss?07:41
zygamvo: I'm in the standup HO if you want to07:43
mvozyga: yes, one minute, just addressing some things07:44
zygamvo: though sligthly complex, depending on where we do this exactly07:44
mupPR core#32 closed: Rename core-support,network-bind plugs to make them unique <Created by mvo5> <Closed by mvo5> <https://github.com/snapcore/core/pull/32>07:44
morphisAimilius, zyga: looking07:52
AimiliusI posted a topic on the forum here: https://forum.snapcraft.io/t/checks-fail-on-arch-linux/200/107:54
morphisAimilius: thanks, will respond there once I find something07:58
Aimiliusmorphis: thanks for your effort07:58
morphisnp07:58
morphisAimilius: you're not building on a kernel with AppArmor support, right?08:00
Aimiliuszgrep APPARMOR /proc/config.gz # CONFIG_SECURITY_APPARMOR is not set08:01
Aimiliusmorphis: though I do use apparmor08:01
morphisAimilius: ok, then you should compile snap-confine with --disable-apparmor08:01
morphisAimilius: how when the kernel side support is disabled?08:01
AimiliusI normally run linux-grsecurity with apparmor compiled08:02
AimiliusBut the tests didn't like the dmesg restrictions so I booted my normal kernel without grsecurity and apparmor08:02
morphisAimilius: ok, when you don't have AppArmor in the kernel you should build with --disable-apparmor --disable-seccomp08:03
Aimiliusmorphis: I'm running this command to build snap-confine ./autogen.sh --prefix=/usr --disable-apparmor --enable-merged-usr08:03
morphiswe don't have runtime detection (yet)08:03
morphisplease add --disable-seccomp too08:03
zygamorphis: without apparmor the seccomp tests wont run either, I think the logic there assumes both08:03
Aimiliusmorphis: does snap-confine depend on out-of-tree seccomp patches08:04
Aimiliusmorphis: because the arch kernel does support seccomp08:04
Aimiliusmorphis; and I have libseccomp installed08:04
morphisAimilius: the problem is that only using seccomp will unhide a few problems nobody didn't look into yet08:04
morphissafest is to disable both right now08:04
AimiliusOk, rebuilding08:05
=== chihchun is now known as chihchun_afk
Aimiliusmorphis: if I add --disable-seccomp, the checks still fail08:06
morphisAimilius: ok08:06
morphisAimilius: can you paste the log output for that?08:06
Aimiliusmorphis: sure08:06
mcphailsabdfl: thanks. Sorry Plan A didn't work out. Loved what you were trying to do08:07
Aimiliusmorphis: https://pastebin.com/v2sh2f7Z08:07
morphisAimilius: will look in a bit08:10
Aimiliusmorphis: I'll have to go leave soon08:11
morphisAimilius: ok08:11
AimiliusBut I'll look at the forum this afternoon08:11
morphisAimilius: I will see that I get an Arch setup and try to reproduce08:11
Aimiliusmorphis: Shall I post my PKGBUILD?08:12
morphisAimilius: please!08:12
Aimiliusmorphis: https://pastebin.com/qRRNSYmz08:13
AimiliusI use a ugly hack to install the systemd unit files08:13
morphisAimilius: ok, we have something better for this in 2.2408:13
Aimiliusmorphis: But with the --nocheck option, it appears to install08:13
Aimiliusmorphis: great to hear08:13
morphisAimilius: something like make -C data/systemd DESTDIR=... install will do the job then08:14
Aimiliusmorphis: that was what I did08:14
morphisah08:14
Aimiliusmorphis: with SYSTEMDUNITDIR=/usr/lib/systemd/system, because of the usr merge08:14
morphisok, that is then what you should do08:14
AimiliusBut it felt like I shouldn't use a Makefile there08:15
=== chihchun_afk is now known as chihchun
zygamvo: have a look a tthis please https://github.com/snapcore/snapd/compare/master...zyga:rename-clashing-core-plugs?expand=108:18
zygamvo: that's what I was thinking about (tests WIP)08:18
zygamvo: essentially this is the essence: https://github.com/snapcore/snapd/commit/59ae873d82883f8887ac7c55bead62e60ab749f608:18
zyga(the last two patches are new in this brancH)08:18
Kristbaum__Is somebody here that is responsible for manual reviews in the snap store?08:34
zygaKristbaum__: I think so08:39
zygaKristbaum__: I think you may have better luck on forum.snapcraft.io, using the "store" category08:40
zygaKristbaum__: as they are in different timezones08:40
zygaKristbaum__: and you may get more organized replies there08:40
Kristbaum__zygra okay will try that08:43
zygaKristbaum__: thanks!08:45
zygamvo: I'm adding tests to RenamePlug09:03
zygamvo: adding tests to ifacestate09:09
morphisactually running snapd spread tests in QEMU doesn't look much reliable these days ..09:11
zygamorphis: why? what are you getting?09:12
zygamorphis: I sometimes get startup errors but if it runs, it is quite reliable09:12
morphistimeouts for apt-get09:12
morphisala "running late"09:12
morphissometimes network connectivity dies09:12
morphisbut could be that I have a debian container I am trying to run the tests in09:12
zygamorphis: late is normal09:12
zygamorphis: aha, I dind't try it that way09:12
morphiszyga: should the lxd backend work these days?09:13
Chipacamorphis— apt update/upgrade the base image to keep the time in check09:13
Chipacaotherwise each test run does that, and it's hella slow :-)09:13
morphisChipaca: yeah doing that right now09:14
Chipaca(that's a technical term)09:14
pstolowskimvo, #3070 failed again, the failures seem to be unrelated to the branch, i.e. snap confine test failures, gccgo failures09:14
Chipacamorphis— niemeyer has a cron job for this, but not sure if it's reusable for qemu09:14
morphisChipaca: let me check09:14
zygamorphis: I don't know09:15
zygamorphis: we don't exercise it I think09:15
morphiszyga: ok, worth a try later09:18
morphiszyga: but I must say using the debian openstack images is working like a charm so far09:18
zygamorphis: nice!09:24
zygamorphis: can you add instructions on how to get them to spread-qemu-images please?09:24
morphiszyga: had to modify the adt-* script a bit but will send a PR for your spread images repo later today or on monday09:24
morphiszyga: you had a chance to test snapd on fedora yesterday again?09:27
morphisSon_Goku: any more testing from your side happend? I've added +1 to all three bodhi requests now09:29
zygamorphis: nice09:30
zygamorphis: no, I didn't we found a new set of bugs that delayed 2.24 release09:30
zygamorphis: I'm still working on fixing them09:30
morphisok09:30
morphiszyga: what kind of bugs?09:30
zygamorphis: https://forum.snapcraft.io/t/duplicate-plug-slot-names-inside-the-core-snap/184/709:32
zygamvo: ok, I'm adding one more correction, I will migrate connection state as well09:34
zygamvo: that is done, just adding tests09:34
morphiszyga: I see09:36
mupPR snapd#3148 closed: errtracker: never send errtracker reports when running under SNAPPY_TESTING <Created by mvo5> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/3148>09:38
zygamvo: ok ready09:41
zygamvo: let me open a PR09:42
mvopstolowski: some of the test failures in 3070 look real09:48
mvozyga: ok09:48
mupPR snapd#3154 opened: many: rename two core plugs that clash with slot names <Created by zyga> <https://github.com/snapcore/snapd/pull/3154>09:50
zygaChipaca: hey, mvo is off now09:50
zygaChipaca: I need a hand with critical 2.24 reviews09:50
Chipacazyga— shoot09:51
Chipacazyga— or i can look myself :-)09:51
Chipacaon it09:51
zygaChipaca: https://github.com/snapcore/snapd/milestone/609:52
zygaChipaca: there are two approaches used09:52
zygaChipaca: (and both should land)09:52
zygaChipaca: I added one more branch to 2.2409:52
zygaChipaca: - rename everything when starting so even old core snap is correct09:54
Chipacawhy is our test suite brittle all of a sudden :-(09:54
zygaChipaca: this is done in https://github.com/snapcore/snapd/pull/315409:54
mupPR snapd#3154: many: rename two core plugs that clash with slot names <Created by zyga> <https://github.com/snapcore/snapd/pull/3154>09:54
zygaChipaca: - validate everything so it doesn't happen again09:55
zygaChipaca: https://github.com/snapcore/snapd/pull/315309:55
mupPR snapd#3153: interfaces: validate plug/slot uniqueness <Created by zyga> <https://github.com/snapcore/snapd/pull/3153>09:55
zygaChipaca: and lastly because we found this by fixing a bug in core transition09:55
Chipacasnapd#3145 needs niemeyer to re-review i guess09:55
mupPR snapd#3145: overlord/ifacestate: fix auto-connect during core snap transition <Created by zyga> <https://github.com/snapcore/snapd/pull/3145>09:55
zygaChipaca: this branch fixes the damage done there https://github.com/snapcore/snapd/pull/3145/files09:56
Chipaca(as he marked it as Changes Needed)09:56
zygayep09:57
zygathat's fine09:57
zygaI want to go through the first round on the two new PRs09:57
Chipacazyga— wouldn't it make sense, in snapd#3154, for you to also test RenamePlug for a case where a plug and slot have the same name?10:03
mupPR snapd#3154: many: rename two core plugs that clash with slot names <Created by zyga> <https://github.com/snapcore/snapd/pull/3154>10:03
tvosspedronis: hey there, I was looking into replacing the exec'ing of ssh-keygen with using openssl via CGO as in: http://pastebin.ubuntu.com/24333148/10:03
zygaChipaca: sure, can do10:03
* zyga does10:03
tvosspedronis: do you have any guidelines on how to use CGo? Like place actual implementation into .c file or some such?10:03
zygatvoss: look at...10:06
zygatvoss: https://github.com/snapcore/snapd/pull/309510:06
mupPR snapd#3095: cmd/snap-update-ns: add C preamble for setns <Created by zyga> <https://github.com/snapcore/snapd/pull/3095>10:06
zygaChipaca: ha, I cannot10:06
zygaChipaca: it's validated now10:06
zygaChipaca: http://pastebin.ubuntu.com/24333233/10:07
tvosszyga: ack10:09
Chipacazyga— state twiddling direclty?10:09
Chipacazyga— or make a for-testing way of overriding the validation10:10
Chipacabecause clearly you can be in that state10:10
Chipacaso we need to test it10:10
zygaChipaca: I'll think of something10:11
zygaChipaca: good point about being able to be in that state10:11
Chipacazyga— I'm now wanting to check it even more, to make sure we don't break people that are in that state already10:11
zygaChipaca: look at the other branches and suggest ideas10:12
zygaChipaca: note that it is not strictly speaking "hurtful" to have clashing names10:13
zygaChipaca: but we want to get away from that10:13
pedronisI think it's a matter of order of things in the other branch fixing this10:13
pedronisbut we need to be able to load the state to fix it10:13
Chipacazyga— idea: make space probes look futuristic to trick aliens into thinking we're more advanced than we are10:13
zygapedronis: state is not validated there (just connections are changed)10:13
zygapedronis: and interfaces.ConnRef has no validation10:14
Chipacazyga— or did you mean ideas that were relevant to the branch10:14
pedronisdon't we do a big add all the snaps thing10:14
mvoChipaca: re brittle> https://forum.snapcraft.io/t/hashsum-failures-during-tests/198 is what I see in a bunch of them10:14
pedroniszyga: initializes does addSnaps, no?10:14
zygapedronis: aha, good point10:15
pedronisI don't see the aha there but yes, bit of a chicken and egg problem10:16
zygaChipaca: ok, I have something for that now10:16
zygapedronis: well, if we load core snap and validate it10:16
Chipacamvo— D:10:16
zygapedronis: it won't reach that point10:16
pedronisso it explodes10:16
pedronisis that aha?10:16
* pedronis has probably no sense of humur today10:17
zygaChipaca: have a look, just pushed10:17
* Chipaca hugs pedronis 10:17
pedronisanyway I agree with Gustavo's yesterday point that we need to tread carefully through these fixes10:17
zygapedronis: yes, I totally agree10:17
pedroniswill one of our spread tests exercise thiss? like the upgrade one?10:18
zygapedronis: spread tests do exercise this already10:18
zygapedronis: well, not directly this10:19
* pedronis anyway, lunch10:19
zygapedronis: but the branch that adds validation is all read10:19
zygared*10:19
zygapedronis: because now core doesn't validate anymore10:19
Chipacazyga— dude, stop with the Not(IsNIl) :-)10:20
pshodany way to create env variables or signals that can be accessed by two different processes inside a snap env?10:21
zygaChipaca: how should I do it?10:21
Chipacazyga— NotNil10:21
Chipacazyga— compare the failing output and you'll see what i mean10:22
zygaChipaca: oooh, didn't know about it :)10:22
zygaChipaca: ack, will do10:22
pshodmy snap exposes a noejs app which spawns a sh script which fires a banary10:22
pshodbinary10:22
Chipacapshod— one easy way is to use the filesystem10:23
Chipacapshod— that includes, for example, a unix socket10:23
pshodi am notifying the event by writing into a file10:23
pshodand then if the file has a particular content10:23
pshodi close my watch in the node app10:24
pshodchipaca : the sh script should write unto a socket and the node app listens on the socket?10:24
pshodzyga: help help help!10:25
Chipacapshod— it depends on what you need to do, etc etc10:25
Chipacapshod— please tell us more10:25
pshodill try to be concise10:25
zygapshod: so10:26
zygapshod: if you set environment from a running process10:26
Chipacapstolowski— “- Download snap "core" (1577) from channel "stable" (unexpected EOF)” <- just got that :-(10:26
pshodsnap exposes a node app -> spawns a sh script that fires a binary->binary reads data from a sensor and writes into a file in SNAP_COMMON->node app reads the file and posts to a REST server10:26
zygapshod: you cannot just "see" that easily in other processes without looking at /proc10:26
zygapshod: not sure what you meant by a signal10:27
zygapshod: tell me what you want to achieve10:27
Chipacapshod— with you so far10:27
zygapshod: (not how)10:27
zygapshod: and we'll recommend osmething10:27
pstolowskiChipaca, is this with current code, or latest release?10:27
Chipacapstolowski— https://travis-ci.org/snapcore/snapd/builds/21932781510:27
pshodno the node app is configurable..we pass the number of tmes the binary writes into the fuke10:28
pshodfile*10:28
Chipacapstolowski— upgrade/basic failed with that10:28
pshodnow what I have done is, i modifies the sensor binary so that after writing the said "n" observations into the file10:28
zygaChipaca: https://github.com/snapcore/snapd/pull/3154#discussion_r110359632 (updated and added tests)10:28
mupPR snapd#3154: many: rename two core plugs that clash with slot names <Created by zyga> <https://github.com/snapcore/snapd/pull/3154>10:28
pshodoverwriting*10:28
pshodit writes "Closing Session"10:28
pshodso when i read the file from SNAP_COMMON10:29
pshodand see it's contents as "Clossing Session" I remove the watch from SNAP_COMMON and my node app exits gracefully10:29
pstolowskiChipaca, uhm. not good. would be great to find out how to provoke 'unexpected eof' in the test. what I did recently was a test with closing client connections, and that triggers normal EOF10:29
pshodpeople dont like this design and I am not pretty confident about it too10:30
pshod:|10:30
Chipacapstolowski— send a RST10:30
zygapshod: today I'm focusing on 2.24 release and I don't have much time to help10:30
Chipacapshod— ah, so this is what you're doing now and you need to improve it?10:30
zygapshod: maybe ask on the forum and we'll get to that10:30
Chipacapshod— yeah, maybe it's better as a forum question, rather long-winded for here10:31
pshodzyga : hey thank you!10:31
Chipacapshod— nothing wrong with the file-based approach as long as you're using locking appropriately10:31
Chipacapshod— but there are other ways, sure10:31
pshodzyga: have gotten much help from you in the past :D10:31
zygapshod: I'll gladly help next week but I need to focus on fixing something we just found out that is affecting core10:32
zygapshod: namely https://forum.snapcraft.io/t/duplicate-plug-slot-names-inside-the-core-snap/184/610:32
Chipacapstolowski— no i don't know *how* to send a RST, i know a RST is the usual cause for that unexpected eof10:32
zygapshod: we won't release today (Friday = bad idea) but I want it to be ready10:32
pshodchipaca : locking is done properly, I suggested we just update a variable which gets updated when API for posting is called10:32
zygapstolowski: network throttling things sent RSTs to kill connections10:32
pstolowskiChipaca, exactly... i'll look into that later, thanks. in the meantime - E_TOOMANYISSUES_ATM10:32
pshodbut that was rejected too.10:32
pshodzyga : duplicate plug names10:33
Chipacapshod— ok, open a forum thread, write everything out there please10:33
pshodzyga: sounds too much of fun :P10:33
pshodchipaca : on it10:33
Chipacapshod— what you want to achieve, what you are doing now, why it was rejected/requested to be improved, what other things were proposed but also rejected10:34
zygapedronis, Chipaca, pstolowski, mvo: I'm looking for proposals on how to fix the chicken/egg problem on core's snap.yaml: we need to load an invalid file to fix it10:34
Chipacapshod— the 'what you want to achieve' there is missing in what you've written so far, afaict10:34
zygamy naive idea is to add a way to load snap.Info that's invalid10:34
zygause that on the core snap only10:34
zygaand apply the fix right there10:34
zyga(the fix is currently in interface manager but it should move to snap manager)10:34
mvozyga: how about a forum.snapcraft.io topic? to have an archived discussion?10:35
zygamvo: +110:35
pshodchipaca : will do it like that10:35
mupPR core#32 opened: Rename core-support,network-bind plugs to make them unique <Created by mvo5> <https://github.com/snapcore/core/pull/32>10:36
zygacommented on the forum about it10:38
zygahttps://forum.snapcraft.io/t/duplicate-plug-slot-names-inside-the-core-snap/184/9?u=zyga10:38
pshodchipaca : wont i be able to register using my company id?10:39
Chipacapshod— I don't know. It's not (yet) tied into login.ubuntu.com, if that is what you mean10:40
Chipacazyga— what calls snap.Validate on startup?10:50
mikeb_Hi, I need some help with snapcraft.yaml syntax.  I'm trying to implement a command wrapper to start my apps.  I'm trying to pass a command and its arguments to the wrapper, but I can't get the syntax correct.  For example -  command: usr/bin/mywrapper --wrapper-arg1 --wrapper-arg2  --exec '$SNAP/usr/bin/cmd --cmd-arg1 --cmd-arg2'.  Snapd parses cmd-arg1 and cmd-arg2 as arguments to usr/bin/mywrapper.  What is the syntax to put them al10:56
mikeb_What is the syntax to put them all in the string as the --exec argument?10:56
zygaChipaca: when you load the state, I think that's in snapmgr somewhere10:57
zygaChipaca: look at the interface manager, it asks for all the snaps and adds active ones to the repository10:57
zygaChipaca: with the validation code in place we will naver reach that spot10:57
zygaChipaca: as we will crash and burn on invalid core10:57
Chipacamikeb_— can you share the yaml in a pastebin?10:57
mikeb_Chipaca: sure10:58
Chipacazyga— I see interface/repo.go:73 calling ValidateName, but no Validate call10:59
Chipacainterfaces*10:59
pshodchipaca : i should tag my entry as "other"?10:59
mikeb_https://pastebin.com/GhCBe4Gd11:00
Chipacamikeb_— ok, that seems alright. Can you show me the .service file that gets generated?11:01
mikeb_Chpaca: is the generate service file located in the prime area? Or is it generated at snap install time?11:03
Chipacamikeb_— it'll be in /etc/systemd/system11:05
Chipacamikeb_— called something obvious11:05
Chipacamikeb_— ah, at install itme11:05
Chipacatime*11:05
mikeb_Chipaca: my install is failing, so I can't get to it.11:06
Chipacaah11:07
Chipacamikeb_— how is it failing?11:07
mikeb_Chpaca: https://pastebin.com/4Ufw8WcE11:07
Chipacamikeb_— that happens on 'snap install', i take it11:10
Chipacaor snap try11:10
mikeb_Chipaca: snap install11:10
mikeb_Chipaca: on a Ubuntu-core system11:11
Chipacamikeb_— so, what's *probably* happening is that the quoting there reaches the .service file intact, and then systemd reads it wrong11:11
ChipacaI need to test this11:11
Chipacagive me a bit11:11
Chipaca(it's a bug at our end, but there's a workaround if this is the case)11:11
mikeb_Chipaca: okay.  Thanks!11:11
* zyga will work on fixing the migration situation after lunch11:13
zygattyl!11:13
pedroniszyga: rememeber that we setup-profiles twice for core11:14
pedronisthe first time with old snapd code11:14
pedronisthe 2nd with new snapd code11:14
pedronisand that one has passed managers init at that point11:14
zygapedronis: good point11:14
zygapedronis: thank you!11:14
pedronisso need to think a bit exactly what sees what here11:15
zygapedronis: let's discuss this at the call, I think (all) of PRs are unlikely to land today11:15
Chipacamikeb_— huh, that's strange. When trying to do this myself I get an error.11:15
Chipacamikeb_— in that the command can't contain quotes11:15
Chipacamikeb_— so maybe you're in an older version that didn't validate this? i'd say move the long command into a shell script and use that as the command in the yaml11:16
mikeb_Chipaca: FYI context - I have a snap that is made up of many .deb packages all with services to start up.  I'm trying to come up with a wrapper that will deal with service before/after/wants/requires/etc as well as the various preinst/postinst/prerm/postrm/etc11:16
pedroniszyga: I mean it might turn out that is less to do that we think,  (some fixes don't make sense), though there's the no reexec case as well to keep in mind, we don't reexec everywhere yet, do we?11:18
mikeb_Chipaca: I'm running snapcraft 2.2811:18
Chipacamikeb_— sound slike fun11:18
Chipacamikeb_— I get this: error: cannot read snap info for /home/john/canonical/snappy/src/github.com/snapcore/snapd/tests/lib/snaps/test-snapd-service: app description field 'command' contains illegal "bin/start foo bar \"baz quux\"" (legal: '^[A-Za-z0-9/. _#:-]*$')11:19
mikeb_Chipaca:  The upstream packages are still changing a lot.  It's more fun to try to manually translate all the service and inst files to snapcraft apps:11:20
pedronisChipaca: seems indeed that we don't support quotes in commands11:21
pedronis(never did I think,  maybe we need to ? )11:21
mikeb_Chipaca: That's unfortunate...11:21
Chipacamikeb_— however, note you can set a per-app 'environment' entry that does have quotes11:23
pedronisChipaca: not sure though that env var in a command do the right thing11:24
Chipacapedronis— they get set in the environ of the service11:25
mikeb_Chipaca: I hadn't thought to escape my quotes in the yaml file.  That actually seems to be working... almost.  Give me a few to play around a bit more.11:25
pedronisthough you can always use a wrapper11:25
ChipacaApr 07 12:25:33 fogey snap[17032]: FOO=$'there once was a man from nantucket\nwho was very bad at limericks\n'11:25
Chipaca^ that's from11:26
Chipaca  environment:11:26
Chipaca    FOO: |11:26
Chipaca      there once was a man from nantucket11:26
Chipaca      who was very bad at limericks11:26
Chipacamakes it all the way through, newlines and all11:26
pedronisChipaca: sorry, what I was saying is that I don't know if:  command: bin/x $FOO   works11:27
pedronis(I suspect not, might be wrong)11:27
Chipacapedronis— no because $ is not in [A-Za-z0-9/. _#:-]11:27
pedroniseven if it were11:27
Chipacamikeb_— what version of snapd are you on? (output of “snap version”)11:28
Chipacapedronis— and, no, environment key is applied by snap run, not by systemd11:29
pedronisChipaca: I don't I understand your suggestion, I mean, it's not a direct transformation11:30
pedronisChipaca: cannot tunr    bin/x "a b"   into   FOO="a b"  bin/x $FOO11:30
Chipacapedronis— mikeb_ is writing a wrapper for a bunch of services11:30
Chipacapedronis— for a single snap to handle ordering of services itself11:31
mikeb_Chipaca: snapd 2.23.611:31
Chipacaas we don't expose ordering11:31
mikeb_among other things...11:31
pedronisChipaca: I think I should give up helping, I don't have context11:31
Chipacapedronis— as such, he's currently taking a bunch of options to his script from the commandline itself11:31
Chipacabut we dont' support that (and apparently we've introduced a breaking change around this between 2.23.6 and now? i need to dig a little)11:32
pedronisah, ok, I though it was tryign to call directly something not under his control11:32
Chipacapedronis— but instead they *could* take it from environ11:32
pedronisyes11:32
Chipacait's probably not as nice11:32
Chipacak? k.11:33
Chipaca:-)11:33
pedronisworking beats nice, I suppose11:33
Chipacamikeb_— I'm on 2.23.6 as well. something doesn't add up :-/11:33
Chipacaah11:33
pedronisseems there's confusion around env from yaml working or not11:33
Chipacamikeb_— what's in your *snap.yaml*?11:33
Chipacamikeb_— in prime/meta/snap.yaml11:33
pedronisI have seen an open topic about that11:34
Chipacamup— poke kyrofa11:34
Chipacaah, no ldap11:34
pedronishttps://forum.snapcraft.io/t/declaratively-defining-environment-variables/175/311:34
Chipacait's 4am for kyle, i'll ask later11:35
pedronisit actually pings you at the end11:35
pedronisthat topic11:35
Chipacame? nevah!11:35
pedronisfwiw11:35
* Chipaca looks11:35
pedroniswell Gustavo does11:35
mikeb_Chipaca: With the escaped quotes, it seems to be working as I intended.  I'm trying to fix some bugs in my test code right now, but the '--cmd' seems to be getting through now.11:35
Chipacamikeb_— i suspect snapcraft might be helping, hence me asking for your snap.yaml :-)11:36
mikeb_Chipaca: Sorry, had to deal with an interrupt.  snap.yaml on the way.11:41
Chipacamikeb_— no worries11:41
Chipacaspeaking of interrupts, lunch would be nice sometime11:41
Son_Gokuanyone have any idea why I'm getting this error?11:41
Son_Goku- Download snap "core" (1577) from channel "stable" (sha3-384 mismatch after patching "core": got 3ca758bb05ff3a422fffa2c02018aaf63909417180b3e902eaddcf0cbc4d4c317bfe26ac5c39567bc69abb94ece0d1e8 but expected cbdff81206101ef7063f2f91a4c3f36e1ad946fe8a809eca4c21fa5335968dfc0c696e5f364cbc9a4c83590aceb3fc15)11:41
ChipacaSon_Goku— in tests, or in real life?11:41
zygare11:41
Son_Gokureal life11:41
Chipacawhee11:41
Son_GokuI'm trying to do "sudo snap install hello-world"11:42
Son_Gokusnapd 2.23.6 + Fedora 2511:42
ChipacaSon_Goku— you crazy bleeding-edger you11:42
zygapedronis: we don't reexec everywhere (reading backlog and responding)11:42
Chipaca:-)11:42
ChipacaSon_Goku— can you pastebin `journalctl -u snapd`? the bit around the install in particular, not the whole thing :-)11:42
zygaSon_Goku: I think there's some issue in deltas11:43
zygaSon_Goku: I saw michael do some changes there today11:43
Chipacazyga— michael's change is around the error, which always mentions deltas even if it's not a delta11:43
zygaSon_Goku: hey man :) nice to see you today11:43
zygahah11:43
zygaI mean, "aha"11:44
Chipacazyga— you can mean both11:44
mikeb_Chipaca:  https://pastebin.com/fc9jN3wd - I added prime/command-test-daemonize-notify.wrapper to the end of the paste.11:44
Chipacariiight11:44
zygaok, I'll get back to the key issue at hand11:44
Chipacamikeb_— so snapcraft is wrapping things for you11:44
Chipacamikeb_— that's why you're not seeing the error about using quotes in there :-)11:44
Chipacabut it's doing a bad job of it11:44
Chipaca:-)11:45
Son_GokuChipaca, zyga: https://paste.fedoraproject.org/paste/hzxtldZltZyI94LRqVeKr15M1UNdIGYhyRLivL9gydE=11:45
mikeb_Chipaca: yes, wrapper for a wrapper for a command.  Fun.  Doesn't snapcraft always generate wrappers for commands?11:45
Chipacamikeb_— probably, yes11:46
zygamikeb_: there's a plan to stop that eventually11:46
morphisSon_Goku: doesn't look good but maybe because of a network error?11:47
morphisdidn't had problems here switching between different core's11:47
* Son_Goku shrugs11:47
zygahow do we compute the has? internally?11:47
zygamaybe bug in golang that's fixed in ubuntu or maybe different (subtly) output in an external program?11:48
zygamaybe delta?11:48
Son_Gokuwell, we're on golang 1.7.5 on Fedora 2511:48
zygaSon_Goku: the reverse may be true :-)11:49
Son_Gokuit could also just be this VM, but I doubt it11:49
Son_Gokuwell fuck it11:50
Son_Gokua reboot fixed everything11:50
* Son_Goku shrugs11:50
Son_GokuChipaca: lol i dunno anymore11:51
Son_Gokumaybe my VM was screwy?11:51
morphispossible11:51
morphisseeing some network issues from time to time here11:51
Son_GokuI could have just been lucky, I guess11:51
Chipacafwiw11:52
Chipacawe're getting that error in tests11:52
Chipacaoccasionally11:52
Chipacai suspect the cdn11:52
Son_Gokuhuh11:52
Son_Gokumaybe related, then11:52
Son_Gokuwell, that would explain corruption in the core snap download11:52
Chipacamhmm11:52
Son_Gokuand when I tried to fetch it myself, nothing happened :?11:52
Son_Gokuit timed out11:53
Chipacaencouraging11:53
Son_Gokuwell, it worked this time11:53
davidcalleCan someone on 16.04 check if snap:// links work? http://www.omgubuntu.co.uk/2017/02/snap-url-support-coming-ubuntu-software-app-plus-love-news11:53
Son_Gokuso at least it passed the smell test11:53
ChipacaSon_Goku— that does not make it better (in fact, the opposite :) )11:53
Son_GokuChipaca: I know :(11:54
Son_Gokubut I'm trying to make sure I didn't screw up everything with my Fedora packaging changes11:54
Son_Goku;)11:54
Chipacadavidcalle— I'm on 16.04, clicked the snap link, it went to xdg-open, which laughed a very deep laugh11:54
Son_Gokuhaha11:55
Son_Gokuactually, this is interesting11:55
Chipacadavidcalle— actually it returned 0, no error output, so it seems to *think* it worked11:55
Son_Gokusnapd forced my VM's resolution down to 800x60011:55
Son_Gokuwtf11:55
davidcalleChipaca, ahaha, ok, no software center popping up?11:55
Chipacadavidcalle— correct11:55
ChipacaSon_Goku— you need to scale the qubit's strangeness down a notch11:56
Chipacadamn quantum-entangled snapd11:56
morphisSon_Goku: really?11:56
davidcalleChipaca: thanks for the gunea pigging :)11:57
Son_Gokumorphis: yes really11:57
morphisSon_Goku: do you have the vbox drivers installed?11:57
Son_Gokuit happened the moment the core snap finished installing11:57
morphisSon_Goku: anything in dmesg/journal?11:57
Son_Gokuno, this is VMware Fusion, so open-vm-tools and regular vmware drivers are used11:57
zygaSon_Goku: log out and log in without wayland11:58
Son_GokuI'm using Plasma, with Xorg11:58
zygaSon_Goku: hmm, then no idea11:59
zygaSon_Goku: snapd doesn't touch anything X related11:59
zygaSon_Goku: does it work if you remove snapd and reboot?11:59
Son_Gokuwell, everything is fine *after* installing the core snap11:59
Son_Gokuit's just the act of installing the core snap seems to snap the resolution down to what it is when sddm is launched12:00
Chipacadavidcalle— oink oink (or, rather, squee squee)12:00
Son_Gokusddm is Wayland, I think12:00
zygasddm?12:00
Son_Gokusddm, Simple Desktop Display Manager12:00
Son_Gokufrom the Hawaii OS (now Liri OS) guys12:00
Son_Gokuit replaced kdm for Plasma 512:00
* zyga says "maaagic"12:01
zygano idea,12:01
morphisSon_Goku: btw. can you check with a gui snap too on KDE12:02
Son_Gokulol i dunno12:02
morphisSon_Goku: like krita12:02
Son_Gokumorphis: I'm playing ohmygiraffe :)12:02
morphisSon_Goku: good, so we're not affected by https://bugzilla.opensuse.org/show_bug.cgi?id=1031501#c312:03
Son_Gokuwe probably will be once Fedora 25 transitions to Plasma 5.912:04
Son_Gokumorphis: Plasma 5.9 tightens the security a little bit12:05
Son_GokuI'm still on Plasma 5.812:05
Son_Gokuit'll probably fail on Fedora 26 KDE, you should try12:06
morphisSon_Goku: yeah maybe12:06
morphisSon_Goku: if it does we have a fix for that upcoming12:06
morphisnot 2.24 bur 2.25 maybe12:06
morphisjdstrand: ping12:06
Son_Gokumorphis, zyga: anyway, I can't give karma for the snapd updates, so I need you guys to do so and find someone get it up to +3 across the board12:08
Son_Gokuand it has to be someone with a FAS account, because anonymous karma doesn't count for karma :/12:09
morphisSon_Goku: yes, I gave +1 already12:09
morphisSon_Goku: you think you can find someone12:09
Son_GokuI'm going to try12:09
Son_Gokumorphis: zyga's karma was zeroed out, so he has to do it again12:11
morphisyes12:14
morphisSon_Goku: I've asked him already but he seems to be under time pressure to get things fixed for 2.2412:14
zygayes, sorry12:14
morphisnp12:14
Son_Gokuit only takes a couple of minutes to hit +1s for everything, since he's already tested it :)12:14
zygathe clashing names need to be fixed really urgently12:14
zygaSon_Goku: I didn't really test the new packages12:14
zygaSon_Goku: I'd like to really test them before +112:15
zygaSon_Goku: (I mean after the next upload)12:15
Son_Gokuthe only change is that I added the scriptlet to autostart them12:15
zygaah12:15
Son_Gokuwell, and I bumped to snapd-glib 1.10, but we can't really test that with anything12:15
zygawell, I'll +1 after testing it at least once still :)12:15
zygathat's the point of the process12:15
Son_Gokuright12:15
Son_GokuI just bundled that update with it because I want the buildsystem error emails to go away...12:16
Son_Gokuerr, dependency error emails12:16
zyga(not talking about glib specifically)12:16
Son_Gokuright12:17
Son_Gokuwell, the sooner snapd and snapd-glib hit stable, the sooner that gnome-software can move to using it entirely12:18
Son_Goku(snapd-glib, I mean)12:18
Son_Gokubecause then hughsie will be able to test against it12:18
zygapedronis: looking at snap/*.go, we don't seem to validate loaded yaml's12:22
zygapedronis: validation is in ReadInfoFromSnapFile but I don't see any calls to that yet12:23
zygapedronis: specifically if you look at ReadInfo which is defined just above12:24
zygapedronis: we just don't validate it12:24
zygapedronis: and ReadInfo is used in readInfoAnyway12:24
zygapedronis: which in turn powers CurrentInfo12:24
zygapedronis: so this is both good and bad12:25
zygapedronis: it's bad for obvious reason, we should validate12:25
zygapedronis: it's good that maybe the rollback is "easier" as ... we don't validate12:25
zygapedronis: but I'd like to ask you if this is for a reason, the missing validation12:25
Chipacazyga— validation is done on ingestion12:26
Chipacacurrently12:26
Chipacazyga— which, not as good, we should do it on load, but it's there12:27
zygaChipaca: hmmm12:28
zygaChipaca: any reason not to always validate?12:28
Chipacazyga— validation needs to be versioned?12:28
Chipacaother than that, no12:28
zygaChipaca: I also worry that some "fixups" (see broken.go) are done in other places, it feels like this is responsibility for snap/ (package) to hide and do this internally12:28
Chipacazyga— i mean, changing validation means patching12:28
zygaChipaca: why?12:28
zygaChipaca: patching as in overlord patches?12:29
Chipacazyga— because valid state suddenly can become invalid without it12:29
Chipacazyga— yes12:29
zygaaha12:29
jdstrandmorphis: hey12:29
zygabut we don't store info in state?12:29
morphisjdstrand: hey!12:29
zygaChipaca: so "state" is still valid12:29
zygaChipaca: we may just notice disk is (and was) invalid12:30
morphisjdstrand: I've pushed up an initial version of the Xauthority handling at https://forum.snapcraft.io/t/migrate-x11-authentication-cookies-into-snap-environment/116/1012:30
jdstrandmorphis: I'll add it to my list12:30
morphisjdstrand: and implemented simple parsing of the Xauthority file, is that ok for you to do validation of that file?12:30
morphisjdstrand: we don't have the xauth binary everywhere so need another way to handle this12:31
jdstrandmorphis: I think simple parsing is good enough. I mean, X is supposed to handle it itself and we aren't trying to protect the user from herself12:31
morphisright12:31
morphisjdstrand: then let me go and prep a PR for this then we can do a proper review12:32
jdstrandok12:32
ogra_niemeyer, your opinion on bug 1674509 (regarding the last four/five comments) would be valuable ...12:36
mupBug #1674509: Unable to find bluetooth device on RPi3 running Ubuntu Core 16 <snapd-interface> <Snappy:Confirmed> <linux-raspi2 (Ubuntu):Invalid by p-pisati> <https://launchpad.net/bugs/1674509>12:36
mikeb_Chipaca: Just a follow up. It looks like surrounding my command arguments with escaped quote does, in fact, work as expected.  Now I have to figure out why my wrapper'daemonization is not12:41
mikeb_working.12:41
zygatvoss: some small reviews on the rsa branch13:00
zygapstolowski: standup?13:02
tvosszyga: thanks, looking13:03
Son_Gokuzyga: all we need is one more +1 and then snapd rolls out to stable for F2513:11
Son_Gokuhttps://bodhi.fedoraproject.org/updates/FEDORA-2017-37a733162013:11
zygaSon_Goku: just after my standup13:11
zygaSon_Goku: I'll boot my VMs and try13:12
zygaSon_Goku: thanks for tracking this!13:12
Son_Gokuexcellent13:12
Son_Gokumhall119: it's happening! :D13:12
Son_Gokuzyga: if you do it quick enough, it might even sync out today!13:13
zygaSon_Goku: I didn't buy 16GB of ram (it's 250 euro) so I'm still on 4G, with that and firefox and chrome I cannot do it now13:15
Son_Gokudamn13:16
zygaSon_Goku: testing f25 server now13:30
* zyga hugs "dnf install --enablerepo=updates-testing snapd"13:38
zygamorphis: F25 server is good to go13:53
morphiszyga: great!13:54
zygamorphis: added my +113:55
zygagoing to try F24 while I wait for 26 alpha to download13:55
morphiszyga: what a wonderful weekend present13:56
zygamorphis: indeed13:56
pedronisniemeyer: it might be easier to do a separate preparatory branch though, because with these decisions AliasesStatus the type goes ways, that's a boring but big diff in itself I think14:05
mupPR snapcraft#1242 opened: kernel_plugin: use CROSS_COMPILE to override the default toolchain <Created by piso77> <https://github.com/snapcore/snapcraft/pull/1242>14:06
niemeyerpedronis: Happy to follow your guidance on how to organize the changes in the easiest way14:06
ChipacaSLIGHTLY_UPSET_COMPILE14:06
pedronisniemeyer: thanks, I'll try and see just how big that is and go fromt there14:06
zygaChipaca: ?14:11
Chipacazyga— CROSS_COMPILE?14:12
ogra_zyga, that was a reaction to the PR line i think :)#14:12
zygaah14:12
zygaI missed that :)14:12
zyga(got used to ignoring what humble mup says)14:12
zygadoes ext4 do background initialization14:14
zygaso you can format quickly14:14
zygaand it will finish it in the background over time?14:14
niemeyerogra_: Replied in the bug14:15
morphiszyga, niemeyer: what kind of ubuntu images are you using on Linode as a base? regular cloud images?14:24
Pharaoh_Atemzyga: snapd for Fedora 24 needs +1 karma to go stable: https://bodhi.fedoraproject.org/updates/FEDORA-2017-ce0fdd87a414:28
zygamorphis: we use ubuntu images that were modified to be like vanilla ubunut, that is booting with grub and with ubuntu kernel14:28
zygaPharaoh_Atem: 24 is next on my list14:28
Pharaoh_AtemF25 and F26 have the karma to go stable14:28
Pharaoh_Atemso F24 is key now14:28
zygaPharaoh_Atem: oh great, I will test 24 and skip 26 then14:29
zygaI reverted to the initial install snapshot14:29
zygaso "dnf update" takes a long while14:29
tvosspedronis: so I'm looking into the BIO mem_buf stuff, encoding the key to a mem_buf BIO fails (not due to insufficient memory). Investigating14:30
morphiszyga: ok, wondering if we can just use the official openstack debian images as a base and initialize them once via cloud-init14:31
morphisPharaoh_Atem: looks like F25 is close now :-)14:31
morphisPharaoh_Atem: who is the third one who gave +1 for F25?14:32
zygamorphis: seems very sensible14:32
morphisok14:32
Pharaoh_Atemmorphis: decathorpe (Fabio Valentini)14:32
Pharaoh_Atemhe's the guy packaging Pantheon Desktop for Fedora14:33
Pharaoh_AtemI asked him to test it out :)14:33
Pharaoh_AtemGL is busted with nvidia on Fedora, though14:33
Pharaoh_Atemit crashed for him when he tried to use ohmygiraffe14:33
pedronistvoss: ok, I hope it can be made to work14:33
zygaPharaoh_Atem: that's expected :/14:34
zygaPharaoh_Atem: we need to redesign that14:34
* zyga wishes he had more ram and maybe dedicated, non-spare-junk HDD for the VMs14:35
morphisPharaoh_Atem: nvidia is still broken?14:36
Pharaoh_AtemYep14:36
zygamorphis: yes, there was never support for fedora+nvidia14:37
zygaPharaoh_Atem: tell me, is Fabio using drivers from the archive (if so, which package) or from nvidia directly?14:37
Pharaoh_Atemfrom the negativo17 repository, I believe14:37
Pharaoh_Atemor rpmfusion14:37
Pharaoh_Atemone of the two14:37
zygaPharaoh_Atem: ok14:37
zygaI know how to fix it, just not a high priority (yet)14:37
zygaand no time (yet)14:37
zygafirst need to get mount world in order14:38
morphiszyga: feel free to give me pointers for a fix14:38
zygamorphis: we don't print anything useful on isntall14:39
zygamorphis: we should say "please log out to get PATH updates"14:39
zygaor similar useful advice14:39
zygamorphis, Pharaoh_Atem: there are selinux denials because of loopback mounted snaps14:41
zygafor the gnome-shell14:41
Pharaoh_Atem:/14:41
* Pharaoh_Atem makes a note to set up a Fedora Workstation system14:42
zygatype=AVC msg=audit(1491576072.251:282): avc:  denied  { getattr } for  pid=1044 comm="gnome-shell" path="/dev/loop-control" dev="devtmpfs" ino=16235 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:loop_control_device_t:s0 tclass=chr_file permissive=014:42
zygacan we correct that from snapd-selinux14:42
zygaI suspect it should go to gnome-shell selinux directly too14:42
Pharaoh_Atemwe cannot14:43
Pharaoh_Atemwell, we *could*14:43
Pharaoh_Atemthe gnome guys would kill us, though14:43
morphis:-D14:43
morphisI think there is a reason why this is denied for gnome-shell14:43
Pharaoh_Atemyeah14:43
Pharaoh_Atemit's out of scope for snapd-selinux anyway14:43
morphisbut why is it trying to do this at all?14:43
Pharaoh_Atemmaybe it's probing disks?14:44
zygamorphis, Pharaoh_Atem: let's file a bug and correct this in the main policy14:44
zygaPharaoh_Atem: yes, I suspect so14:44
zygatype=AVC msg=audit(1491575811.619:770): avc:  denied  { create } for  pid=39655 comm="systemctl" name="var-lib-snapd-snap-hello\x2dworld-27.mount" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:systemd_unit_file_t:s0 tclass=lnk_file permissive=114:45
zygaI have 50 selinux denials after installing hello-world and rebooting in workstation14:45
morphisPharaoh_Atem, zyga: yeah lets get a bug and lets see why this happens and where we fix the best way14:45
zygaPharaoh_Atem: shall I report those on bugzilla now?14:45
Pharaoh_AtemYes14:45
zygakk14:45
zygaPharaoh_Atem: on redhat bugzilla, under fedora?14:46
Pharaoh_Atemyes14:46
Pharaoh_Atemcomponent would be the source package name14:46
zygaok14:47
Pharaoh_Atemwell, at least the snappy denials are occurring permissively :D14:47
zygaPharaoh_Atem: yeah but for gnome-shell it is a real denial14:48
Pharaoh_Atemyeah14:48
morphiszyga: yeah something we need to fix14:51
zygamorphis: I would love to get rid of the myriad of denials too14:51
zygamorphis: even if they are in complain mode14:51
zygamorphis: 100% of the users will see that14:51
zygaand it's just annoying14:51
morphisyes14:51
morphisPharaoh_Atem, zyga: so do we hold the release back until early next week?14:52
zygahttps://bugzilla.redhat.com/show_bug.cgi?id=144020714:52
zygamorphis: no, I think we can release14:53
zygamorphis: release, iterate14:53
morphiszyga: fine for me14:54
=== larryprice_ is now known as larryprice
zygamorphis: can you install f25 workstation14:54
zygamorphis: snapshot it, install snapd + hello-world14:54
zygamorphis: and file all the bugs (on snapd in bugzilla) for each unique denial14:54
zygamorphis: it will be a while but I think that's the way to track them14:55
zygamorphis: I can help this weekend as I was hoping to see something selinux for a while14:55
zygamorphis: maybe I can squash one or two14:55
morphiszyga: can do this on monday, for today I want to finish what I have currently14:55
zygamorphis: ok14:56
zygamorphis: let me do one as an example14:56
morphisok14:57
zygaPharaoh_Atem, morphis: https://bugzilla.redhat.com/show_bug.cgi?id=144020814:59
zygasuggestions on how to report those are welcome15:00
zygamorphis: fixing those might take a while but we should at least fix the majority that may be as easy as a few extra rules in the policy15:01
morphisyeah15:01
zygaok, booting f24 now15:01
morphiszyga: can you add them to https://trello.com/c/Fvtml6A1/26-fedora-fix-selinux-denials ?15:01
morphiszyga: the bug links I mean15:01
zygamorphis: trello15:02
zygamorphis: no, trello is dead15:02
morphiszyga: it isn't :-)15:02
morphisthat is for my cross-distro work15:02
morphisnothing else15:02
zygamorphis: let's be consistent15:02
zygamorphis: if anything use the forum15:02
morphiszyga: lets not discuss this here, this has a different scope but I am fine with a forum post for this too15:03
zygamorphis: +15:04
zygamorphis: +115:04
Pharaoh_Atemzyga: are you able to give the F24 update a +1 yet?15:10
zygaPharaoh_Atem: yes, now mid way dnf update15:10
zygaPharaoh_Atem: at 335/763 updates15:10
* Pharaoh_Atem is trying to beat the clock for when bodhi mash starts15:11
zygaPharaoh_Atem: when is that?15:11
zygaPharaoh_Atem: I will be ready in 10-15 minutes15:11
zyga(437 now)15:12
Pharaoh_AtemI don't know15:12
Pharaoh_Atemit's usually around now15:12
zygaaha15:12
zygawell15:12
zygaif we miss it, when is the next one?15:12
zygadaily15:12
zyga?15:12
Pharaoh_Atemlemme check15:12
zygathank you15:12
tvosspedronis: I'll take a quick break15:13
zyga500/763 updates15:13
zygasome updates are bigger than others...15:14
ogra_thanks for implanting sesame street music in my head now...15:14
Pharaoh_Atemzyga: it's irregular, but it happens about once a day15:15
zyga620 now15:15
zygastill more than 10 minutes away I suspect, then all the disk IO starts and reboot and more installs15:15
Pharaoh_Atemyou know, you didn't have to do a full update...15:16
zygathis is f24 vanilla iso install15:16
zygaI wanted it to be more realistic15:16
Pharaoh_Atemoh dear15:16
Pharaoh_Atemwow15:16
Pharaoh_Atemyou reset all the way back to GA?15:16
zyga(as I said, snapshot :)15:16
zyga741 now15:16
zygaDRPMs now15:18
=== JanC is now known as Guest75772
=== JanC_ is now known as JanC
pedronispstolowski: I tried quickly, the issue is simply that json doesn't work with map[interface{}]interface{}15:25
pedronis(even if the value have correct types)15:26
pstolowskipedronis, yes, in fact json spec says only strings can be used as keys15:27
jfmcarreiraheyyy guys15:28
jfmcarreiraany help on this error? cannot create user data directory: /nfs/home/jcarreira.it/snap/vlc/x1: Read-only file system15:28
zygajfmcarreira: hey15:29
ogra_jfmcarreira, looks like you are not trying to write to $SNAP_DATA but to $SNAP15:29
zygato put your home directory on NFS you need to do some extra things15:29
zygajfmcarreira: there's a bug report with details on launchpad15:29
ogra_(or rather $SNAP_USER_DATA in your case)15:29
ogra_oh15:29
zygajfmcarreira: I cannot find it now (busy)15:29
ogra_ignore me15:29
zygajfmcarreira: but quick suggestion:15:30
ogra_zyga, is right15:30
zygajfmcarreira: for now you will have issues with network denials and this is a kernel/nfs limitation15:30
zygajfmcarreira: if you --bind mount your home directory under /home/ you will have a better experience15:30
zygajfmcarreira: but it won't work really15:30
pedronispstolowski: yes, but this is an implementation detail, it could go over the key and still do the job if they are strings, but it doesn't15:30
pedronispstolowski: anyway wrote a bit more in the forum15:30
pstolowskipedronis, ty15:32
jfmcarreirazyga: ok thanks for the help.. but i only have ubuntu on a NFS system15:37
zygaPharaoh_Atem: finally updated15:39
zygahmm, I don't get tab-completion on fc2415:44
zygamorphis, Pharaoh_Atem: we don't install tab completion files15:45
Pharaoh_Atemdo we have tab completion files to install?15:45
morphisPharaoh_Atem: yes15:46
zygaPharaoh_Atem: yes15:46
zygaPharaoh_Atem: I do that in suse15:46
zygaPharaoh_Atem: it's just one file really15:46
Pharaoh_Atemwell gee, I wish I had known :/15:46
morphisPharaoh_Atem: no bad, lets do it with the next release :-)15:46
zygaPharaoh_Atem: (and thanks to Chipaca's magic) they will now tab complete into snaps with confinement (really nice code to read)15:46
Chipaca*blush*15:47
* zyga hugs Chipaca 15:47
zygareally great stuff!15:47
zygaPharaoh_Atem: +1 to release15:48
Pharaoh_Atemdoesn't help me here :)15:49
Pharaoh_Atemhttps://bodhi.fedoraproject.org/updates/FEDORA-2017-ce0fdd87a415:49
zygaPharaoh_Atem: I was typing it there already :D15:49
zygaPharaoh_Atem: saved15:50
zygaPharaoh_Atem: after this is out I'll gladly get my feet wet and make a few trivial suggestions15:50
zygaPharaoh_Atem: do we need +3 for F24 / F26?15:50
Pharaoh_Atemnope15:50
Pharaoh_AtemI lowered the karma req so that they'd all make it15:51
zygaok15:51
Pharaoh_Atemthough feel free to add feedback there too :)15:51
zygaI'll test 26 now15:51
zygaand EOD15:51
Pharaoh_Atemokay15:51
zygathe 2.24 issues are for next week or this evening, I have some ideas but too taxed mentally today15:51
zygaoh one more thing15:52
zygaPharaoh_Atem, morphis: do you have any fedora booted?15:52
zygaI just shut down to install 2615:52
zygawhat does "snap version" say?15:53
zygais it correct?15:53
zygaPharaoh_Atem: release release release16:02
Pharaoh_Atemzyga: looks like it already mashed... https://bodhi.fedoraproject.org/masher/16:07
Pharaoh_Atem:(16:07
Pharaoh_Atemzyga: it'll mash again early tomorrow, I think16:08
Pharaoh_Atemthough it may happen earlier, who knows16:08
zygaPharaoh_Atem: that's fine16:09
zygaPharaoh_Atem: so once this is out can we do the tab completion and some tweaks over weekend?16:09
Pharaoh_Atemzyga: yeah16:10
zygaPharaoh_Atem: great, I'll do that16:10
mupPR snapcraft#1240 closed: cli: improve push output <Created by sergiusens> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/1240>16:27
jdstrandniemeyer: hi! :) re 'I'd put that ahead of pretty much anything else'> were you talking to me or Sergio?16:29
niemeyerOops.. fixing :)16:29
jdstrandok. I'll get to that other bit. it is slowly moving up the list16:30
niemeyerThanks16:30
mupPR snapd#3155 opened: snapstate: simplify AliasesStatus down to just an AutoAliasesDisabled bool flag (aliases v2) <Created by pedronis> <https://github.com/snapcore/snapd/pull/3155>16:36
* zyga takes a break now16:37
pedronisniemeyer: created snapd#3155 and then used it to simplify snapd#308716:39
mupPR snapd#3155: snapstate: simplify AliasesStatus down to just an AutoAliasesDisabled bool flag (aliases v2) <Created by pedronis> <https://github.com/snapcore/snapd/pull/3155>16:39
mupPR snapd#3087: overlord/snapstate: introduce tasks for aliases v2 semantics with temporary names for now (aliases v2) <Critical> <Created by pedronis> <https://github.com/snapcore/snapd/pull/3087>16:39
niemeyerpedronis: Thanks!17:09
niemeyerpedronis: Tests filaed on 3155.. the issue mvo reported with checksum problems on partial downloads17:46
niemeyerRetrying17:46
pedronisthanks17:46
morphiszyga: https://paste.ubuntu.com/24335332/ doesn't look bad for the first day working on this :-)17:47
=== chihchun is now known as chihchun_afk
niemeyerTaking a break18:03
Guest123Is it possible to install Ubuntu Core without an Ubuntu One account?18:13
kyrofaGuest123, install, yes. SSH into, no18:18
Guest123Is it possible to install Ubuntu Core without an Ubuntu One account?18:30
=== elfgoh__ is now known as elfgoh
coreycbsergiusens_, hi, i added some details to bug 1675479. i have a work around but i'm not sure what's different in our environments that you weren't able to reproduce.19:58
mupBug #1675479: python plugin doesn't work for namespace packages <openstack> <plugin> <Snapcraft:New> <https://launchpad.net/bugs/1675479>19:58
coreycbsergiusens_, probably can lower that from high though since i have a workaround19:59
tvossokay, when using unsafe.Pointer, is ownership transferred to the go runtime?20:30
tvosss/unsafe.Pointer/C.GoBytes/20:30
tvosspedronis: done,just updated the PR with changes to avoid file operations20:56
jdstrandsabdfl: fyi, I already started poking at wayland: https://forum.snapcraft.io/t/wayland-dconf-and-xdg-runtime-dir/186/220:59
jdstrandsabdfl: I've got gnome/wayland now running on my laptop and plan to work on the initial interfaces21:00
kyrofajdstrand, nice21:01
jdstrandsabdfl: (fyi based on backscroll from earlier today)21:02
jdstrandit's kinda interesting cause snaps with gnome/wayland/portals should be a nice desktop security story21:03
mupPR snapcraft#1243 opened: tests: update the location of the upstream retry autopkgtests script <Created by elopio> <https://github.com/snapcore/snapcraft/pull/1243>21:09
sabdflhi jdstrand, thank you21:19
sabdflyes i think we can bring those two ideas together very neatly21:19
sabdflportals bear a startling resemblance to helpers so all the concepts are in place21:20
sabdfland i'll be glad to have snaps be first class across all the major desktops21:20
jdstrandindeed21:20
jdstrandand they do bear a startling resemblance to helpers-- they were clearly inspired by our work :)21:21
ahoneybunsabdfl: are you taking about the flavors?21:29
sabdflahoneybun, and upstream21:30
ahoneybunright other distros too then21:30
* ahoneybun dreams of a snap that can detect the desktop (gtk, qt) and change the UI to that21:31
mupPR snapcraft#1243 closed: tests: update the location of the upstream retry autopkgtests script <Created by elopio> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/1243>22:15
=== jgrimm is now known as jgrimm-away
lutostaganybody know how to set dns servers on core 16?22:39

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!