/srv/irclogs.ubuntu.com/2017/04/12/#snappy.txt

lutostagon my rpi3 after I snap install pulseaudio I don't see any cards/sinks, anything I need to do to set that up?00:23
Son_Gokumorphis: I think I'll crash and burn if someone suggests double LSM again as a solution01:05
ngaioIs anyone interested in helping me create a snap for Rapid Photo Downloader?01:37
Croephaperhaps if you ask a specific question :)01:40
Croephabut im actually about to go for the day01:41
ngaioCroepha, I'm a bit confused about the relationship between getting something from pip via the requirements.txt and that thing requiring dependencies to be present beforehand01:43
ngaiooutside of a snap environment, one has to apt install all the build requirements first, naturally01:44
Croephaare you using the python plugin in snapcraft?01:44
ngaioI don't know if I should be or not01:44
ngaioit's a python program, but it's dependencies are not trivial01:45
Croephaif you want to do the equivalent of an apt-install for a snap, you can do something called "stage-packages"01:46
Croephabut, that usually isn't the best for python requirements01:47
Croephaim not very familiar with the python plugin, but I think it expects a properly structured python package source, and it will bundle requirements that are specified in the setup.py01:48
greglOne thing i can't get a handle on is how do you make changes to a snap app? I i'll use Hexchat as an example,I usually change the colors in it by changing some config files. Snap is a read only file system,so i am a bit lost here..01:48
Croephagregl: everything that needs to be variable, should be located in one of the writable directories01:49
ngaiook thanks Croepha I'll look into it some more01:49
Croephagregl: use https://snapcraft.io/docs/reference/env01:50
Croephagregl: you could also look at the users home directory for settings files, but that isn't a snap supported thing to do01:50
Croephabut it works01:50
greglCroepha, Ok thanks,I did find the writeable folders..01:51
greglCool .I will look a bit more..01:51
naccok, i must be doing something obviously wrong. given the following yaml: http://paste.ubuntu.com/24364688/ i want the run.sh in snap/run.sh in the same git repository as the main part to be included in the built snap as the application. Basically, add a custom wrapper that is in the same repository02:57
mupPR snapcraft#1250 opened: Fixed links to doc <Created by andyli> <https://github.com/snapcore/snapcraft/pull/1250>03:05
naccbut when i use the builders on launchpad, i just get errors consistently about being unable to find run.sh03:06
naccah, i might be being bit by LP: #1663534 ... i wonder why `snapcraft cleanbuild` on my 17.04 machine at home doesn't complain, though?03:58
mupBug #1663534: Dump plugin can't copy files from snap/ <Snapcraft:Confirmed> <https://launchpad.net/bugs/1663534>03:58
mupPR snapcraft#1251 opened: internal: remove empty lines in the unclean parts message <Created by EduardoVega> <https://github.com/snapcore/snapcraft/pull/1251>05:12
stubI've got revision 9 of a snap published in the stable channel in the store that I can install with 'sudo snap install wal-e --classic'. However, doing that in an lxd container on the same box is getting revision 6.05:46
stubI suspect it is a permissions issue, and the difference is the lxd container is not logged on at all. But I can't see where it is screwed up.05:47
stuboh, got it. The scripted install in the container was using the wrong channel.05:49
=== chihchun_afk is now known as chihchun
* stub wonders if 'snap list' and 'snap refresh' should mention channels05:53
mupPR snapd#3178 closed: Release 2.24 <Created by mvo5> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/3178>06:09
morphis_Son_Goku: you mean AppArmor and SELinux in parallel?06:14
mupPR snapd#3180 opened: many: fixes for `go vet` in go 1.7 <Created by mvo5> <https://github.com/snapcore/snapd/pull/3180>06:32
mvojdstrand: hey, I heard rumors that there is an issue with the renamed snap-confine apparmor profile in 2.24/2.23.6 - if you have more details I would love to hear them06:51
sbeattiemvo: it looked like the ADT tests for the kernel would uninstall the 2.22.6 snapd (without purging and without uninstalling snap-confine) and then later install snapd 2.23.6. Because of that, I think the postrm bit to remove the old snap-confine profile wouldn't get triggered.06:55
sbeattieSo both versions of the profile would exist after the "upgrade".06:56
mvosbeattie: aha, thank you. let me try that06:58
mvosbeattie: do you happen to know if there is a log or a bug available for this?06:59
sbeattiemvo, jdstrand: I'm not sure a bug got filed for it07:00
sbeattiemvo: log is at https://objectstorage.prodstack4-5.canonical.com/v1/AUTH_77e2ada1e7a84929a74ba3b87153c0ac/autopkgtest-xenial/xenial/amd64/l/linux-hwe-edge/20170410_201241_f4dfd@/log.gz07:00
mvosbeattie: ta!07:01
sbeattiemvo: I'm not honestly sure if it's a snapd bug or an ADT bug.07:01
sbeattiebut I can file one in case you decide to upload something on the snapd side to fix/work around it.07:02
mvosbeattie: definitely worth persuing, I suspect that we left a file behind (/etc/apparmor.d/usr.lib.snapd.snap-confine) in some upgrade screnario07:02
zygagood morning07:06
pstolowskihey zyga, morning!07:06
zygahey hey07:09
zygasorry, overslept07:09
zygahow's everything?07:09
sbeattiemvo: https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/168202307:09
mupBug #1682023: snapd/snapd-confine leaves behind /etc/apparmor.d/usr.lib.snapd.snap-confine on upgrade <snapd (Ubuntu):New> <https://launchpad.net/bugs/1682023>07:09
mvothanks sbeattie07:11
mvohey zyga and pstolowski07:11
mvoand good morning fgimenez_ :)07:11
mvofgimenez_: I added a forum topic and invited for you, not sure if that works07:12
fgimenez_mvo: zyga pstolowski good morning07:12
fgimenez_mvo: sure, already ack'ed with a hearth :)07:12
mvosbeattie: apw figured out that on purge the apparmor profile is removed from disk but not unloaded from the kernel. not sure if that is expected behaviour ? maybe a precaution to ensure that running binaries that are removed from disk but still in memory are still protected? in any case it explains the error but its a bit unclear what we can do about it07:13
fgimenez_mvo: i'm currently involved in core validation at candidate too, as soon as that is sorted i'll put hands on the sru07:13
mvofgimenez_: thank you, no problem, I just got asked about it via irc and with a forum topic its much easier for me, I can just point people to that :)07:14
zygasbeattie: if you purge snap-confine does that go away?07:14
fgimenez_mvo: totally, the forum is a huge improvement for that07:15
zygaaha07:15
zygait didn't purge07:15
pstolowskio/07:16
mvozyga: yeah, I suspect we need a dpkg-mainthelper to remove the conffile on the snap-confine package as well07:16
zygamvo: the package gets removed on purge07:17
zygamvo: I tested this when we were working on the .real workaround07:17
apwi think the suggestion is you have old snapd + fat snap-confine installed07:18
apwyou now purge snapd only07:19
apwand then install the -updates snapd07:19
apwi am trying to get into that situation here07:19
mvozyga, apw: http://paste.ubuntu.com/24365745/ might be all we need -  but first we need to reproduce :)07:21
* zyga looks07:22
zygamvo: thank you07:22
* zyga is still sleepy07:22
* mvo hugs zyga07:22
apwmvo, ok reproduced07:28
mvoapw: I think I did so as well and the mainthelper did help me, could you pastebin your steps so that I can double check?07:29
apwmvo, just doing it again with a transcript to be sure i did it sane07:30
mupPR snapd#3181 opened: debian: add maintscript helper to remove usr.lib.snapd.snap-confine in snap-confine <Created by mvo5> <https://github.com/snapcore/snapd/pull/3181>07:32
apwmvo, ok reproduced and documented: http://paste.ubuntu.com/24365841/07:43
apwmvo, shall i add that to the bug as well07:43
mupPR snapd#3182 opened: store: tests for unexpected EOF <Created by stolowski> <https://github.com/snapcore/snapd/pull/3182>07:44
mvoapw: \o/ #3181 should help, I wonder what the easiest way for you to double check might be (if you are still interessted). I could do a PPA build for you? or I just reproduce all your steps once its in master and it gets into our daily edge ppa.07:46
mbrizawhen trying to run the anbox snap in fedora, i get "execv failed: No such file or directory" - is that a problem of snapd or the snap?07:47
apwmvo, if you have a .deb set i thnk i can legitimatly test those by hand to confirm07:47
apwall this because people are not doing upgrades right, sigh07:50
mvoapw: http://people.canonical.com/~mvo/tmp/for-andy/07:51
mvoapw: this one is hopefully good07:51
zygambriza: hey, perhaps snapd, can you please tell me which release are you on?07:53
apwRemoving obsolete conffile /etc/apparmor.d/usr.lib.snapd.snap-confine ...07:54
apwmvo, ^ i assume that is a good sign07:54
apwand i have only the .real07:54
apwso i call that fixed in your packages07:55
morphis_zyga: looks like today is happy we-update-all-distros-with-2.24-day :-)07:55
zygamorphis_: indeed07:57
zygamorphis_: congratulations on android box :)07:57
zygamorphis_: did you try it on fedora, mbriza above said there is something fishy07:57
morphis_zyga: thanks, that was a long overdue thing07:57
morphis_zyga: no, not yet but I know people tried07:57
morphis_zyga: it will be a bit harder as we don't have dkms packages for the binder/ashmem kernel drivers there yet07:58
zygamorphis_: aha07:58
zygamorphis_: how does the snap work?07:59
morphis_zyga: devmode-only :-D07:59
morphis_zyga: and https://github.com/anbox/anbox/blob/master/scripts/container-manager.sh#L3107:59
zygaaha08:00
zygamorphis_: I think you could detect if you have apparmor around you and skip aa-exec08:00
zygamorphis_: but I bet this will come with time08:00
zygambriza: ^^08:00
morphis_zyga: yes, for non-apparmor enabled systems we have08:01
morphis_zyga: https://bugs.launchpad.net/ubuntu/+source/snap-confine/+bug/164716808:01
mupBug #1647168: /dev/ashmem and /dev/binder not usable inside confinement <snap-confine (Ubuntu):New> <https://launchpad.net/bugs/1647168>08:01
morphis_that was the initial reason for the aa-exec call08:02
morphis_didn't investigated that further yet08:02
mvoapw: \o/08:02
mvoapw: if you could comment in https://github.com/snapcore/snapd/pull/3181 that would be great08:03
mupPR snapd#3181: debian: add maintscript helper to remove usr.lib.snapd.snap-confine in snap-confine <Created by mvo5> <https://github.com/snapcore/snapd/pull/3181>08:03
apwmvo, am just making sure i did the test right (i am sure i did) and scipting it08:07
apwmup, ok that worked and i am happy i am sure it did :)08:07
mupapw: I apologize, but I'm pretty strict about only responding to known commands.08:07
apwmvo, ok that worked and i am happy i am sure it did :)08:07
mvo\o/ again!08:08
apwmvo, is that sufficient (as a comment)08:10
mvoapw: absolutely, thank you08:10
abeatoogra_, I have flashed latest rpi3 image, but I am not able to connect to the store from console-conf, is that a known issue? It hangs in "Contacting store..."08:17
ogra_abeato, Bug #163853708:17
mupBug #1638537: snapd eats 100% CPU for about 5 minutes on first boot causing a load of >2.0 <Snappy:New> <snapd (Ubuntu):New> <https://launchpad.net/bugs/1638537>08:17
abeatoogra_, not sure if it is the same, I can enter console-conf, it fails when trying to contact the store08:19
ogra_like ... with an error ?08:21
ogra_or does it just sit there ?08:21
ogra_if the latter ... give it time ... if not, thats something different then08:22
abeatoogra_, sits there, although it has just entered in the end... took really long :/08:22
ogra_yep, there is a fix ... but not landed yet08:22
abeatoweird...08:22
abeatook, good to know08:22
ogra_it generates the device gpg key08:22
abeatoogra_, another thing, which is the recommended way to get wifi working on rpi3?08:23
ogra_and go's routine for that is extremely resource consuming ...08:23
ogra_configure with wired ... ssh in, run: sudo console-conf ... disable wired, enabled wlan, reboot08:23
ogra_the wlan only has issues on the very first boot08:24
abeatoogra_, hm, is disabling wired needed?08:24
ogra_not really ... just the german in me that wants it cleaned up :P08:24
abeatolol08:25
abeatothanks!08:25
pstolowskizyga, hey, do you have a moment to review #3182? it's just a test and I need 2nd review09:02
zygapstolowski: yes, looking09:04
zygapstolowski: stopped mid-way, brb09:10
zygare09:20
zygapstolowski: so, not sure I understand what's going on there, I'll ask a few questions if that's okay09:21
nottrobinhow do I get the ownership of a snap transferred to a different user/namespace?09:23
zyganottrobin: I think you can file a bug in the store09:24
zygahttp://launchpad.net/snapstore09:24
nottrobinta09:24
zygafun fact: scaleway offers ubuntu without 'updates' repository enabled09:25
zygaso just security09:25
zygaand main09:25
zygaI just installed snapd 2.0.2 /o\09:26
nottrobinbug filed: https://bugs.launchpad.net/snapstore/+bug/168206309:26
mupBug #1682063: Transfer documentation-builder from nottrobin to canonicalwebteam <Snap Store:New> <https://launchpad.net/bugs/1682063>09:26
ogra_zyga, hmm, we should probably make a deal with the security team to push it to -security in parallel (like kernels) ... that setup is surely not uncommon09:27
zygapstolowski: commented09:32
zygaogra_: yes, I agree09:32
zygaogra_: but I also wonder if ubuntu is certified there09:32
pstolowskizyga, thanks!09:37
ogra_zyga, well, disabling updates and leaving security on is not uncommon on servers i think09:38
=== pbek_ is now known as pbek
sbeattieogra_: we only push kernels to security when we know of security issues fixed in them; alas, that happens 90% of the time. But we do push non-security toolchain things to security (to fix security builds or boot issue breakages), I suspect snapd would fall under this area.09:43
ogra_sbeattie, yeah09:44
ogra_given the amount of apparmor and seccomp changes each release has :)09:44
zygaogra_: aha, I didn't know that09:44
zygaara: hey, certification question, do we (as canonical) give any guarantee what it means to run "ubuntu" wrt updates? are you expected to have updates disabled when you install ubuntu?09:45
arazyga, not sure I understand the question09:46
zygaara: the case is that scaleway offers xenial images but the sources.list file only lists xenial-security and custom scaleway repo09:46
zygaara: you boot an ubuntu xenial instance from some cloud provider09:46
ogra_zyga, by default they are always on ... but you can indeed preseed installs09:46
zygaara: is it still ubuntu if they disabled updates by default?09:46
arazyga, well, I think you are able to just keep xenial-security (kernel udpates go to the security pocket)09:47
arazyga, that's why those are different pockets09:47
arazyga, in case you just want security-updates but not bug fixes09:47
arazyga, so I guess the answer might be "yes, that's still 'ubuntu'"09:48
zygaara: aha, I see, thanks for clarifying that09:48
zygaara: do you know if we certify scaleway images?09:48
arazyga, no idea, you can ask that question to patricia, she may know09:49
arazyga, (Gaughen)09:49
zygathank you! :)09:49
zygagaughen: do you know if we certify scaleway xenial images?09:50
Chipacathis multiple-services-in-one-snap demo thing is proving to be a trove of fails09:50
Chipacae.g., install it, installation fails because one of the services doesn't start, installation undoes, random services left running09:51
zygaChipaca: smells like 2.25 bugfix09:52
Chipacaif i can get to the bottom of it all in time, sure09:52
Chipaca:-)09:52
Chipacathose two random branches yesterday were a part of it09:52
Chipaca(and there's more weirdness in 'snap try', but i'm leaving that for later)09:52
zygaChipaca: I kind of like EnsureDir approach09:54
zygaChipaca: so we "ensure" service files are in place09:54
zygaChipaca: or that they are fully gone09:54
zygaChipaca: problem with stranded services is also interesting but separate09:54
zygaChipaca: did we forget to kill them09:55
zygaChipaca: or did they just refuse to die for some reason?09:55
Chipacathe service files go away as is appropriate09:55
Chipacathe services themselves don't09:55
Chipacaif i had answers to your questions i'd be a day ahead of where i am :-)09:55
zygaChipaca: :-)09:56
pedronisChipaca: we have a few things that have an undo, but not a undo what we did if we fail in the middle10:00
pedronisChipaca: you can look at doLinkSnap for something that tries to do that properly10:00
zygapedronis: idea10:01
zygapedronis: not sure if good but still10:01
zygapedronis: let's add a "cleanup stack" to a change10:01
zygapedronis: any task can register cleanup actions that only get ran if we fail10:02
pedronis?10:02
zygapedronis: then if we fail we run the undo handlers and the cleanup list10:02
pedroniswell we have cleanup10:02
pedronisnowadays for some stuff10:02
zygapedronis: the reason is that this way each task can have fine-grained elements that get added as the task progresses10:02
zygaoh?10:02
Chipacathere's a cleanup task10:02
zygaso something like this exists?10:02
pedronisnot like this10:02
zygaaha10:02
zygaI was thinking along the lines of:10:03
pedronisI'm mostly worried about the multiplication of concepts10:03
zyga(inside one task)10:03
zygadoA()10:03
pedroniswe have undos10:03
zygaif not error, cleanupOnFailure(undoA)10:03
zygadoB()10:03
zygaif not error, cleanupOnFailure(undoB)10:03
zyga...10:03
pedroniswhat we are not good at is dealing with the task that errored itself10:03
zygaaha10:03
pedronisbut there's defer and stuff for that in theory10:03
zygawell10:03
zygaI worry that some of those concepts span one task10:04
zygaso a chain of tasks in one change assumes some structure10:04
zygawell10:04
zygaanyway, just an idea10:04
zygaI'm looking forward to see what Chipaca comes up with10:04
pedroniswell if undoing one error span tasks10:04
pedronisthen those tasks are not quite right10:04
zygapedronis: I think we are in this situation now still10:05
pedronisthat's a different kind of bug10:05
pedronisnot a reason to add complexity10:05
mupPR snapd#3174 closed: interfaces,overlord: log interface auto-connection failures <Created by zyga> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/3174>10:06
zygaright, I agree10:06
zygathank you mvo!10:06
* zyga considers upgrading to 17.04 to run polaris as IRC client10:06
zygaanyone doing that10:06
zygait has nice UI and nice notification10:06
pstolowskizyga, refactored 3182 test per your commnet10:07
pedronisChipaca: that's that don't manipulate state too much can usually be fixed by calling their undo manually on their failure path10:07
pedroniss/that's/tasks/10:07
mvozyga: 17.04 ftw!10:07
zygamvo: are you on it?10:08
pedronisassuming they are correctly idempotent10:09
pedronisChipaca: we basically need quite a few integration undo tests10:11
pedronismmh, not undo10:12
pedroniserror and undo to be precise10:12
mvozyga: my workstation, works very well10:12
Son_Gokumorphis_: yes10:12
zygapstolowski: thank you!10:14
zygapstolowski: checking10:14
zygapstolowski: commented10:17
pstolowskizyga, looking, thanks10:18
Chipacamvo— on unity 8? :-)10:23
mvoChipaca: *cough*10:29
pstolowskizyga, ok, updated10:31
zygapstolowski: https://github.com/snapcore/snapd/pull/3183 :)10:38
mupPR snapd#3183: interfaces/mount: add parser for mountinfo entries <Created by zyga> <https://github.com/snapcore/snapd/pull/3183>10:38
zygapstolowski: (replied to your PR, just add a comment there and +1)10:38
zygapstolowski: have a look, you reviewed -1 in this series already10:38
mupPR snapd#3104 closed: tests: fix unity test <Created by fgimenez> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/3104>10:39
mupPR snapd#3183 opened: interfaces/mount: add parser for mountinfo entries <Created by zyga> <https://github.com/snapcore/snapd/pull/3183>10:39
zygapstolowski: not sure if I should parse mount and super-block options or optional fields deeply10:39
zygaChipaca: go-ness review appreciated ^^10:39
Son_Gokumvo: you have a typo in your release notes10:43
Son_GokuI think you mean "joystick" instead of "joystrick"10:43
mvoSon_Goku: autsch, thank you! I will fix it10:43
Son_Gokumvo: The 2.24 packages should synchronize out to updates-testing in Fedora in a few hours, so you can probably simultaneously mention Fedora and Ubuntu in the 2.24 release announcement10:44
mvoSon_Goku: awesome! you rock!10:46
zygaSon_Goku: awesome work! :)10:46
* zyga might consider switching to Fedora 25 for daily work 10:47
Son_Gokumvo: I don't know if you make the release announcement usually before or after it is approved to go into ubuntu updates, so if you usually do it after, then I think we should probably push for people to test the Fedora package updates first10:47
Son_Gokuzyga: :D10:47
Son_GokuFedora master race :D10:47
mvoSon_Goku: I draft the release annoucement (its in the forum) and JamieBen_ is now handling the announcing, but usually we announce when its in -proposed10:48
=== JamieBen_ is now known as JamieBennett
Son_Gokuspeak of the devil :P10:49
JamieBennett:)10:49
Son_Gokubut yeah, I submitted the updates to be released to updates-testing yesterday10:50
zyga(especially if someone asks me to work on selinux)10:50
zygaI need to spend some time at the forum today10:50
Son_Gokuso they should go out in a couple hours or so10:50
Son_Gokupeople are also now asking about being able to craft Fedora-based snaps too10:50
zygaSon_Goku: this is a compound question, we can craft a snap that uses fedora bits on top of the current ubuntu-based core snap or a fully fedora based "base" snap that we don't support yet10:54
Son_Gokuyeah, I know10:54
zygaSon_Goku: I think we should get base snaps first10:54
sborovkovHello. I am building gadget snap myself. One of the things I modify is few options of config.txt (gpu_mem and couple of other options). But when I run the resulting image all my options are commented out in config.txt. What does that and how do I prevent that behavior?10:54
morphis_Son_Goku: btw. you want to push 2.24 to stable already now?10:54
Son_Gokuzyga: well we can't do either right now, because snapcraft needs work10:55
zygaSon_Goku: then we will be able to do what people are really asking for: snapd not tied to ubuntu "base"10:55
Son_Gokuzyga: yes10:55
zygaSon_Goku: note that snapcraft is not the only way to make snaps10:55
Son_GokuI know, but it's what we're pushing10:55
zygaSon_Goku: I think initially it is fine to just hand-craft snaps :)10:55
zyga(I love that hame)10:55
zyganame*10:55
morphis_Son_Goku: one thing I talked with zyga about earlier today was that we wait for the official release date as everyone is having it just as candidate right now10:55
zygaSon_Goku: I think snapcraft can only really be done when we have base snaps10:55
Son_Gokuyes10:55
Son_Gokumorphis_: what *is* the official release date?10:56
morphis_4/2410:56
Son_GokuApril 24?!10:56
Son_Gokufor 2.24?10:56
morphis_yes10:56
=== morphis_ is now known as morphis
morphisyes10:56
Son_Gokuwow, that's two weeks from now10:56
zygaSon_Goku: that's confusing10:56
morphisSon_Goku: that is the regular candence time period for a snapd release10:56
zygathe reality is this:10:56
zyga2.24 is in candidate/beta channel now10:56
morphisthrough those two weeks it goes through all kinds of QA10:56
zygait's not a stable release10:56
zygait's a source tarball release10:57
zyga+ invitation to test the binary10:57
zygasince we have channels and are actively using them10:57
zygathe term "release" is not the same10:57
zygaas we traditionally are used to10:57
zygaI think we need to write this down10:57
zygaand use clear terminology all the time10:57
morphiszyga: but if you take the original "release" term, the release date is April 24 and what we have today is more of a 2.24-rc110:57
zygaand attach a short summary to each announcement10:58
Son_Gokuwow, there was literally no point in me pushing 2.24 at all, then10:58
morphisSon_Goku: there is!10:58
zygamorphis: exactly so10:58
morphisSon_Goku: we need to send calls out for testing in the community10:58
Son_Gokumorphis: the problem is that if I'm ahead of Ubuntu, things are going to be broken10:58
Son_GokuVERY broken10:58
morphisa bodhi request is fine but it should land until th real 2.24 is out10:58
Son_GokuUbuntu moves too slowly in almost every regard when it comes to this10:58
Son_Gokubut if we're going to hold back the final release, I better turn off the autopush10:59
zygaSon_Goku: why would they be broken?10:59
zygaSon_Goku: yes, please turn off autopush for this10:59
Son_Gokubecause the core snap is always broken on classic distros when it has an older snapd than what I run11:00
zygaSon_Goku: are you sure/11:00
zygaSon_Goku: why would it be broken?11:00
* Son_Goku shrugs11:00
* zyga tries to understand11:00
zygaChipaca: thanks for the feedback11:00
zygaChipaca: I think I'll leave the int parsing asis11:00
Son_Gokuit's not worth debugging because it's a spaghetti of interface things and weird errors11:00
zygaChipaca: but I was wondering about OptinalFlds11:01
zygaChipaca: and mount and super-block option11:01
zygaSon_Goku: I mean, what error did you see11:01
Son_Gokumainly non-existent interface errors11:01
zygaChipaca: should I call it OptionalFields and make it []string that I really parse?11:01
Son_Gokuthey have no practical effect on Fedora now, since interfaces mean nothing11:01
zygaSon_Goku: which interface specifically?11:01
zygaSon_Goku: this may be an unrealted bug that I need to fix11:01
zyga(same happens on ubuntu now)11:01
Son_Gokuwell, I don't remember, since this was a week ago11:02
zygais it about network-bind or core-support?11:02
Chipacazyga— ah, i might be the wrong person to talk with about names. OptionalFields is probably better than OptionalFlds though11:02
Son_Gokucore-support, I think11:02
zygaif so this is a harmless note and I do need to correct that11:02
zygathere's a branch that's pending merge and it will be in 2.2511:02
Chipacazyga— about whether to leave it as an array, depends what you use it for11:02
Son_Gokuthough it might have also been network stuff *shrugs*11:02
Son_Gokuin any case, it has no appreciable affect in Fedora11:02
zygaSon_Goku: both are expected11:02
Son_Gokusince confinement is broken11:02
zygaSon_Goku: it's not really related to confinement this time :)11:02
zygaSon_Goku: it is the thing where we renamed plugs and there's no nice method to forget old connection11:03
Son_Gokuwell, the interface/plug stuff is enforced through AppArmor11:03
zygaChipaca: ok, let's review/land this and I'll follow up with better names and perhaps deeper parsing11:03
zygamvo: can you review/land https://github.com/snapcore/snapd/pull/3183 for further iteration?11:03
mupPR snapd#3183: interfaces/mount: add parser for mountinfo entries <Created by zyga> <https://github.com/snapcore/snapd/pull/3183>11:03
Son_Gokuzyga, mvo, morphis: Bodhi's auto push on +3 stable karma is disabled11:04
morphisSon_Goku: good!11:04
zygaSon_Goku: thank you!11:04
Son_Gokunow it's basically up to me to push if no one tests after 7 days11:04
zygamvo: maybe we can edit the forum post here to indicate when we expect to release it in binary form and when was the source tarball released11:05
pedroniszyga: Chipaca: yes, Opts is kind of common, Flds not as much11:05
zygahttps://github.com/snapcore/snapd/pull/318311:05
mupPR snapd#3183: interfaces/mount: add parser for mountinfo entries <Created by zyga> <https://github.com/snapcore/snapd/pull/3183>11:05
zygapedronis: +111:05
Son_Gokumorphis, zyga: https://lists.fedoraproject.org/archives/list/devel-announce@lists.fedoraproject.org/message/LT2Y5JKCT2FIM2Q6HMZHNTEXEPGW4JZI/11:05
zygapedronis: I'm inclined to spell it Options as that matches mount.Entry for fstab11:05
morphisSon_Goku: nice!11:06
mvozyga: sure, go ahead, its a wiki (I think)11:06
Son_Gokuzyga, since we're going to have Fedora in parallel to Ubuntu, might as well make the announcement reflect that11:08
zygamvo: can you push the 2.24 tag to master?11:08
zygamvo: ah, I see it now11:09
zygasorry11:09
mvozyga: :)11:10
zygamvo: edited11:10
mvota11:11
sborovkovHello. I am building gadget snap myself. One of the things I modify is few options of config.txt (gpu_mem and couple of other options). But when I run the resulting image all my options are commented out in config.txt. What does that and how do I prevent that behavior? Is that done by configure hook or what?11:14
morphissborovkov: sounds more like the wrong config.txt gets copied into place11:15
mvosborovkov: I think its done by the configure hook, it will unset things that it has not in the internal snapd config iirc11:15
* zyga switches gears for a moment11:16
morphismvo: isn't that coming with 2.24 or is already part of 2.23?11:16
mvomorphis: 2.23.6 has a bug so yeah, only in 2.2411:16
sborovkovmvo: any idea how to change that? I mean I could set those config options myself but that would require additional restart11:16
morphissborovkov: so from which channel is your core snap coming?11:16
sborovkovedge11:17
morphisah11:17
sborovkovmorphis: can't be wrong config.txt - otherwise all my options would not be in there even commented out11:17
morphissborovkov: any specific reason to use edge?11:17
zygapstolowski: https://github.com/snapcore/snapd/pull/318411:17
mupPR snapd#3184: store: misc cleanups in tests <Created by zyga> <https://github.com/snapcore/snapd/pull/3184>11:17
zygasborovkov: maybe bug in ubuntu-image11:17
zygasborovkov: wrt channels11:18
sborovkovmorphis: yes. because it has a bunch of resloved bugs that are blockers11:18
zygaI think it handles that poorly now11:18
mupPR snapd#3184 opened: store: misc cleanups in tests <Created by zyga> <https://github.com/snapcore/snapd/pull/3184>11:18
morphissborovkov: ah I see11:18
sborovkovalso a bit annoying that you can't make ubuntu-image to use your snap for instance from edge channel but core snap from the beta11:18
morphissborovkov: you can manually add snaps to your resulting image11:19
mvosborovkov: we could change the configure hook code to simply ignore anything that is not set. the downside is of course that if you snap core set pi-config.something="" that would go directly into config.txt, i.e. there is no way anymore to uncomment things. but maybe thats ok11:19
* mvo is away for lunch11:19
sborovkovmvo: I am ok with everything. Though just for my case since I build gadget snap myself can't I set those options manually somewhere? So it does not unset them.11:20
morphissborovkov: https://gist.github.com/morphis/abdc1e83ba0578e756073bd89fa128ed11:20
morphissborovkov: especially https://gist.github.com/morphis/abdc1e83ba0578e756073bd89fa128ed#file-create-image-sh-L22511:20
morphissborovkov: if you download the snap before together with its assertion via snap download you can drop the unasserted: true11:21
zygamorphis: scaleway arm servers use patched non ubuntu kernel11:22
zygamorphis: no chance for apparmor11:22
zygamorphis: I don't think it's worth pursuing yet11:22
morphiszyga: ah11:23
morphiszyga: the better go with what plars is building11:23
zygamorphis: yes11:23
zygamorphis: I'll check their x86 VMs out of curiosity11:23
morphis:-)11:23
renatHi, guys=) It's Renat from Screenly=)11:24
renatHi, sborovkov=)11:24
morphisrenat: hey!11:27
renatI have just a small question - snappy core doesn't ship with udisks2 installed, and I should install udisks2 into my snap, is it correct?11:27
morphisrenat: we have a udisks2 snap in the store you can11:27
morphisrenat: you wont be able to get udisks2 into your own snap11:27
pstolowskiChipaca, hey, are you working on any of this https://forum.snapcraft.io/t/easy-way-to-get-last-change/246 ?11:28
renatmorphis, thanks! That's exactly what I need!11:28
Chipacapstolowski— negatory11:28
morphisrenat: there is upcoming documentation for that snap which is currently available here: https://git.launchpad.net/~snappy-hwe-team/snappy-hwe-snaps/+git/udisks2/tree/docs11:28
morphisrenat: but the same will be soon on docs.ubuntu.com11:29
pstolowskiChipaca, ok. bonus question then11:29
renatThanks, morphis!11:29
ChipacaI should charge for these11:29
morphisdavidcalle: you know when a new deployment of the docs will happen?11:29
morphisdavidcalle: especially for https://github.com/CanonicalLtd/ubuntu-core-docs/pull/29 ?11:29
mupPR CanonicalLtd/ubuntu-core-docs#29: Enable udisks2 documentation and fix up broken links <Created by jhodapp> <Merged by caldav> <https://github.com/CanonicalLtd/ubuntu-core-docs/pull/29>11:29
pstolowskiChipaca, yesterday on the standup we discussed making "task" alias for "change" command (and make the latter hidden but still supported), but reading that forum topic makes me think that perhaps I missed something11:31
Chipacathe other way around, making change alias for task11:31
Chipacai did not update the forum after the meeting11:31
Chipacaalso, tasks, not task11:31
davidcallemorphism: later today11:31
pstolowskiChipaca, ah!11:31
Chipaca1 change -> multiple tasks11:31
davidcallemorphis11:32
sborovkovmvo: I am still a bit confused. On the first boot pi-config is not actually set. But it's not like it removes kernel, dtparam and so on and so on from config.txt? Or is it not touching them because they can't be changed via configure hook?11:32
pstolowskichihchun, "tasks" yes. suddenly it all makes more sense and you will not get any more bonus questions, i'm sorry11:32
Chipacapstolowski— and it wouldn't be an alias in the sense that go-flags supports aliases; it'd be a separate hidden command that just calls the other one11:32
pstolowskiuh, Chipaca ^11:32
pstolowskiChipaca, yes yes sure11:32
Chipacawoah, you need four chars to get my name11:33
=== Chipaca is now known as __chip__
__chip__there11:33
__chip__now i'm special11:33
zygamorphis: can we relase 2.24 jointly to suse too?11:33
* __chip__ looks at _28Kb 11:33
pstolowskiin fact I did this change already in cmd, it just felt strange.. "tasks" it's then11:33
__chip__pstolowski— how does it feel strange?11:33
Son_Gokudavidcalle: can we have snappy-docs move to the snapcore org?11:34
pstolowski__chip__, only in that's mutiple tasks realy, plural11:34
morphiszyga: yes, working on that11:34
__chip__pstolowski— ah :-)11:34
ogra_ooh .... Chipaca has wings!11:35
jdstrandmvo: not sure if you saw, but fyi https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/168202311:36
mupBug #1682023: snapd/snap-confine leaves behind /etc/apparmor.d/usr.lib.snapd.snap-confine on upgrade <snapd (Ubuntu):Confirmed> <https://launchpad.net/bugs/1682023>11:36
zygamorphis: sounds good11:36
jdstrandmvo: at, it looks like you probably did see it now that I am reading backscroll11:38
mupPR snapcraft#1247 closed: Fixing Store integration tests <Created by cprov> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/1247>11:45
jdstrandmvo: responded in 318111:45
zygajdstrand: hey11:47
zygajdstrand: can you have a look at https://github.com/snapcore/snapd/pull/3138 -- it is a tiny RFC branch about mounting11:48
mupPR snapd#3138: interfaces/mount: add Change.Perform <Created by zyga> <https://github.com/snapcore/snapd/pull/3138>11:48
pstolowskihttp://www.omgubuntu.co.uk/2017/04/use-snap-fedora11:50
zygamvo: can you have a 2nd look to ensure that we want to land https://github.com/snapcore/snapd/pull/3160/files12:08
mupPR snapd#3160: overlord/ifacestate: automatically rename connections on core snap <Created by zyga> <https://github.com/snapcore/snapd/pull/3160>12:08
mupPR snapd#3182 closed: store: tests for unexpected EOF <Created by stolowski> <Merged by stolowski> <https://github.com/snapcore/snapd/pull/3182>12:09
pstolowskizyga, ^ you will probably need to merge master into 318412:09
zygapstolowski: looking12:10
zygaaha12:10
zygathanks!12:10
* zyga is a bit hungry and parched, sounds like a time for a break12:11
zygadone12:12
zygasee you at the stand-up12:12
zyganiemeyer: please have a look at https://github.com/snapcore/snapd/pull/3138 -- it is on the critical path for update-ns now12:13
mupPR snapd#3138: interfaces/mount: add Change.Perform <Created by zyga> <https://github.com/snapcore/snapd/pull/3138>12:13
morphiszyga, mvo: looks like spread tests are a bit flawky today, is that known?12:16
zygamorphis: URL please12:20
zygamorphis: I didn't see any failures12:20
morphishttps://s3.amazonaws.com/archive.travis-ci.org/jobs/221306064/log.txt12:21
morphislinode:ubuntu-14.04-64:tests/main/refresh-delta-from-core is failing here12:21
morphiszyga: that is for https://github.com/snapcore/snapd/pull/317012:21
mupPR snapd#3170: interfaces/builting: allow read-only access to /sys/module <Created by morphis> <https://github.com/snapcore/snapd/pull/3170>12:21
mupPR snapd#3185 opened: snap: added tasks subcommand <Created by stolowski> <https://github.com/snapcore/snapd/pull/3185>12:23
mvomorphis: https://forum.snapcraft.io/t/autopkgtest-failues-with-master/260 - I think its because of the interfaces change but I did not look deeper12:24
morphismvo: hm ok12:25
morphisthen let me don't count on this and I will wait until the dust settles :-)12:25
zygamorphis: just merge master12:25
zygaaha12:26
zygathe failure is in delta-from-core12:26
zygamorphis: you just joined and disconnected12:30
=== __chip__ is now known as Chipaca
mupPR snapcraft#1252 opened: ci: split plugin integration tests out <Created by sergiusens> <https://github.com/snapcore/snapcraft/pull/1252>12:57
Son_Gokuzyga, morphis: https://lists.fedoraproject.org/admin/lists/ci.lists.fedoraproject.org/13:21
zygaSon_Goku: I got 50313:22
Son_Gokuhmm, Postorius seems to be down13:23
zygaaha13:23
zygawhat was the thing behind the URL?13:23
zygaah, it's up now13:24
Son_Gokuthe mailing list for Fedora CI13:24
morphisah :-)13:25
morphis403 forbidden for me13:25
morphiszyga: btw. did you manage to file all bugs for the SELinux denials on Fedora?13:27
zygamorphis: I filed two13:27
zygamorphis: I didn't file more as we need to check if it makes sense13:27
morphiszyga: have those two on my list13:27
morphisgood13:27
zygamorphis: and I think we need to see if the format is right13:27
zygamorphis: I can file the rest13:28
morphiszyga: lets wait with that13:30
morphisI will look first and then we can decide13:31
Chipacaniemeyer— want me to open a topic about snap service?13:44
niemeyerChipaca: Almost done with it already13:44
Chipacaniemeyer— :-D13:44
* zyga goes to eat that lunch he was meant to earlier 13:44
zygaI'll focus on focum / email after that13:45
zygaenjoy easter holidays o/13:45
niemeyerChipaca: https://forum.snapcraft.io/t/command-line-interface-to-manipulate-services/26213:53
Pharaoh_Atemzyga, morphis, sergiusens: don't forget to respond to mattdm's email :)13:56
sergiusensPharaoh_Atem: yeah, I'll reply with what I know, but leave the other paragraphs we discussed to zyga or morphis13:56
Pharaoh_Atemsergiusens: that's fine13:59
ogra_hah ... the right keyboard for core developers ... finally ... https://www.massdrop.com/buy/vortex-core-4713:59
Chipacaogra_— what, no GOTO key?14:00
ogra_probably at the bottom :)14:00
Chipacaogra_— http://4.bp.blogspot.com/-lUibvtAqm2E/UYVrSpG_4MI/AAAAAAAAAxE/oov7bXRCLw4/s1600/keyboard.jpg14:00
ogra_!14:01
Chipacaogra_— or, rather, http://images.eurogamer.net/2013/articles/1/6/5/1/7/8/3/139143204009.jpg/EG11/resize/600x-1/quality/80/format/jpg14:01
ogra_yeah, i think popey raved about that one before on G+14:01
Chipacaheh14:01
Chipacamassdrop is so expensive from uk though14:02
Chipacaalso, i can't really justify another keyboard14:02
Chipacait is a beaut tho14:02
ogra_heh, yeah, i ddint mean to push you towards buying it ...14:02
jdstrandniemeyer: fyi, I plan to start an 'ownership' topic today. I can layout the various use case that have been accumulating as well as what we discussed yesterday14:02
jdstrandcases*14:03
ogra_i'm typing on the pok3er ... next bigger model with 67 keys14:03
jdstrandniemeyer: and hi!14:03
jdstrandniemeyer: I figured it might be easier this way since I've thought about this for a while (ie, if I lay it out rather than responding with other use cases)14:03
niemeyerjdstrand: Sounds great, thank you!14:04
jdstrandnp14:04
Chipacacuppa tea anyone?14:10
* Chipaca goes14:10
* tvoss tea, earl grey, hot14:12
* genii hugs his pot of coffee instead14:13
* ogra_ joins genii in huggung coffee pots 14:14
morphiszyga: the export_test.go trick is good, but how can I share the best way a Mock* method across modules?14:18
morphisadding it to testsutils?14:19
tvossniemeyer: hey, https://github.com/snapcore/snapd/pull/3130 just went green :) would be great if you could have a look14:21
mupPR snapd#3130: overlord/devicestate: switch to ssh-keygen for device key generation <Created by vosst> <https://github.com/snapcore/snapd/pull/3130>14:21
niemeyertvoss: WIll do.. a bit busy this morning, but will do in the afternoon14:23
tvossniemeyer: great, thank you14:23
* tvoss goes to build docker snaps with configurable cert directory14:24
ogra_would be awesome if that finally landed14:24
ogra_so much back and forth ...14:24
Chipacatvoss— now rewrite it using libressl14:25
* Chipaca hides14:25
tvossChipaca: I would rather look at golang's BigInt and optimize that a little ;)14:26
ogra_make it EvenBiggerInt14:26
=== chihchun is now known as chihchun_afk
bspockWhich folder should be added in my $PATH in order to run the installed snaps?14:27
ogra_bspock, the snapd package adds that autiomatically ...14:28
ogra_(you need to log out and back in if you only just installed snapd though)14:28
bspockogra_: Ah, that's probably my problem. Will try that, thanks14:28
ogra_your path should then have /snap/bin at the end14:28
Chipacatvoss— just math/big.divWVW14:29
Chipacatvoss— although math/big.bitLen probably also14:29
tvossyup, gcd might be candidate as well, haven't look further, though14:29
tvosslooked14:29
sborovkovmvo: btw why does rpi-config has _ converted to '-'. But not everywhere? :) Like here - framebuffer-ignore_alpha14:46
kyrofasborovkov, OCD sniping?14:50
kyrofaI'm unhappy you even typed it here :P14:50
kyrofaogra_ might have an idea14:51
Chipacasborovkov, kyrofa, different things14:53
Chipaca_ is within a name14:53
Chipaca- is between scopes14:53
Chipacalevels14:53
Chipacawhatever you want to call them :-)14:53
kyrofaAh, thanks Chipaca :)14:53
Chipacathere's a hierarchy in there14:53
stub-_-14:53
Chipacatotally (-_-)14:54
Chipaca(i wasn't saying it was a *good* reason :) )14:54
sborovkovHmm, alright. It's just not very convenient when you have a list of config.txt options you want to actually set14:58
sborovkovBecause they all need converted according to different rules then14:58
Chipacasborovkov— do you think you could raise the issue on the forum?15:00
Chipacasounds like something that needs to be spelled out in more detail15:00
sborovkovChipaca: sure, what forum are you talking about15:00
Chipacasborovkov— forum.snapcraft.io15:01
ogra_sborovkov, see topic :)15:01
Chipaca:-)15:01
sborovkovDamn, did not think of that15:01
sborovkovLike that's just a bit inconvenient. Can't even replace dashes with underscores. Because there gpu-mem-256. Need to have 2 maps to convert it.15:01
mupPR snapd#3186 opened: tests: allow installing snapd from -proposed for SRU validation <Created by fgimenez> <https://github.com/snapcore/snapd/pull/3186>15:11
t-monHi everyone! I'wanted to ask how I can access gpio's from my snap since the gpio interface is missing on my system. I'm using snapd on a debian. Is there any other way how I can workaround this for development?15:12
t-monShould I move this question to the forum?15:13
Nicolino_hi all : i don't find a command for producing a list of all avalaible revision of a snap on the store15:15
ChipacaNicolino_— snapcraft history, i think?15:15
Nicolino_thanks15:15
Nicolino_also fot the core?15:15
sborovkovChipaca: according to this hierarchy how are those options called? config_hdmi_boost, hdmi_force_hotplug (I am not sure how to query all supported names...)15:15
ChipacaNicolino_— "for the core"? you mean for the core snap?15:16
ChipacaNicolino_— you can only get the list of revisions of the snaps you have dev rights to15:16
Chipacai mean upload privs15:16
Nicolino_yes  i mean core snap15:16
ogra_well ... there is "snap info core"15:16
ogra_but that only shopws current versions15:17
ChipacaNicolino_— you can't get a list of all revisions15:17
ChipacaNicolino_— you can get a list of published revisions, via 'snap info'15:17
Nicolino_i would test my uboot setting with a core upgrade15:17
Nicolino_i create an device image right now Chipaca15:18
ogra_Nicolino_, just switch channels then15:18
ChipacaNicolino_— you could `snap refresh --beta core`, starting from stable15:18
Chipacayeah15:18
ogra_snap refresh core --edge15:18
Nicolino_thanks a lot to all :D15:18
ogra_(and to switch back later just replace --edge with --stable)15:18
Chipacaogra_— http://i.imgur.com/XbjbHlM.jpg15:27
ogra_:D15:27
mupPR snapd#3183 closed: interfaces/mount: add parser for mountinfo entries <Created by zyga> <Merged by stolowski> <https://github.com/snapcore/snapd/pull/3183>15:49
Croephaanyone know off hand an easy way to get usb keyboard in the initramfs shell?15:56
pstolowskiit would be great to get 2nd review for 3184 and land it quickly, a trivial MP15:58
ChipacaCroepha— ogra_, if anyone16:33
mupPR snapd#3184 closed: store: misc cleanups in tests <Created by zyga> <Merged by chipaca> <https://github.com/snapcore/snapd/pull/3184>16:33
mupPR snapcraft#1252 closed: ci: split plugin integration tests out <Created by sergiusens> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/1252>16:33
mvosborovkov: autsch, if it does not do it everywhere that is a bug16:40
sborovkovmvo:  IS there a way to query all  supported keys? I was checking the names from your post actually https://forum.snapcraft.io/t/configuration-options-for-core-snap/87 - specifically framebuffer-ignore_alpha16:52
ogra_Croepha, no easy way i fear ... you would have to re-pack it and add the respective modules (or simply use a serial console)16:52
Croephaogra_, ok thanks, this is a custom kernel I made 6 months ago, I just finished downloading the Intel NUC image for 16, hopefully that will work, if not I'll rebuild16:54
sborovkovmvo: or was that typo in the post and I can just replace underscores with dashes? :-)16:54
ogra_well, that wont have hid modules either in the initrd16:54
Croephafor the record, im actually using the intel compute stick, and several months ago, the kernel that shipped with didn't have good support for the hardware16:55
ogra_we are very explicit to only include drivers that are needed to find the rootfs16:55
Croephaogra_: ok good to know, im hoping that maybe the new kernel might fix another problem and make the initramfs KB driver unessasary16:55
Croephabut if it doesn't, then I might pop open the device physically and look for serial headers16:56
ogra_that could well be, i remember adding some modules on request of the team that was working with the NUC16:56
Croephathat might be easier then using a custom kernel16:56
ogra_afaik the normal pc-kernel snap should now work16:56
Croephabtw, is the NUC image the same as the regular amd64 image?16:57
Croephalike, is it a generic kernel?16:57
ogra_not sure ... there might be additional snaps in it by defult16:57
ogra_the kernel is definitely the same though16:58
Croephaok good to know16:58
Croephathanks16:58
ogra_that got fixed between 15.04 and 16 snappy images16:58
CroephaI just got a USB 3 thumb-drive, eager to see the perf differences first hand17:00
CroephaI wanted to try the new image, but didn't want to overwrite the image that kinda works on my other thumbdrive17:00
Croephaehh, a bit underwhelming17:06
niemeyertvoss: reviewed, thanks for all the work there!17:08
sborovkovmvo: yeah, it was typo in your post. Nice. Cause I was already doing 2 maps to convert back and forth :-)17:30
Croephaogra_ im assuming that the serial interface for the initramfs requires a real BIOS serial port, i.e. a USB to serial wont work?17:46
ogra_USB to serial would be exactly the opposite17:46
ogra_so no, i dont think it would17:46
Croepharight, thanks, figured Id ask17:47
jdstrandmorphis: I want to think about your bug #1647168 more but will ask here, quickly, snap-confine 1.0.43? shouldn't you be on at least 2.22.6 if not 2.23.6 (proposed)?18:10
mupBug #1647168: /dev/ashmem and /dev/binder not usable inside confinement <snap-confine (Ubuntu):New> <https://launchpad.net/bugs/1647168>18:10
morphisjdstrand: that bug is quite old but thanks for looking into that!18:25
morphisjdstrand: need to see if I can still reproduce this with the latest snapd/snap-confine18:26
morphisjdstrand: http://anbox.io/ is the application I was experiencing this with18:26
=== nacc is now known as Guest42667
=== nacc_ is now known as nacc
pompomJuicehi18:58
kyrofaHey there pompomJuice, welcome18:58
Croephait appears that the pc-kernel rev 60 doesn't support HDMI audio on the intel compute stick19:01
pompomJuiceHow do I get snappy install to install my locally made snapcraft packages? the unauthorized setting does not work?19:02
pompomJuiceInstalling my-open-vm-tools_0.1_amd64.snap Signature verification failed with exit status 1419:02
kyrofapompomJuice, what do you mean mine "unauthorized setting?"19:02
kyrofas/mine/by/19:02
kyrofapompomJuice, ah, installing local snaps requires you to use the --dangerous flag19:03
pompomJuicekyrofa: snappy install --allow-unauthenticated my-open-vm-tools_0.1_amd64.snap19:03
pompomJuicenone of those things work with snappy19:03
pompomJuicejust snap19:03
kyrofapompomJuice, ah, that's snappy 15 speak19:03
kyrofapompomJuice, it's changed a bit since then19:03
pompomJuiceSo are these snappy cloud images usable?19:03
Croephaso, what is the appropriate bug tracker for getting patches into the core kernel?19:04
pompomJuiceI cannot change the channel and I cannot install dangerous modes19:04
kyrofapompomJuice, https://askubuntu.com/questions/822765/snap-install-failure-error-cannot-find-signatures-with-metadata-for-snap19:04
kyrofapompomJuice, is that what you're seeing?19:04
pompomJuicekyrofa: Yes know about those options. The problem I have is I am trying to use the ubuntu core cloud image. It does not comes with snapd. Rather with "snappy"... a front end of sorts for snap19:05
kyrofapompomJuice, that sounds wrong19:06
pompomJuiceit has different options19:06
kyrofaogra_, do you know anything about that ^^ ?19:06
pompomJuiceit does sound wrong!19:06
pompomJuiceI want snapd19:06
pompomJuiceit has what I need19:06
kyrofapompomJuice, yeah, the command called "snappy" is very old. It sounds like you're using a distro based on 15.0419:06
pompomJuicebut this cloud image comes with a noob mode snappy so I was wondering what is going on19:06
kyrofapompomJuice, what cloud image are we talking about? Do you have a link?19:07
pompomJuicekyrofa: http://cloud-images.ubuntu.com/snappy/devel/core/current/19:08
kyrofapompomJuice, whoa, super old19:08
kyrofaThat is indeed 15.0419:09
pompomJuiceok lol19:10
pompomJuiceno wonder I am getting nowhere with this19:10
pompomJuicethanksman19:10
jdstrandmorphis: oh weird that it is quite old, I only just saw it recently19:14
zygahey guys19:17
morphisjdstrand: you think it could have been a bug in snap-confine?19:18
morphiszyga: hey! :-)19:18
jdstrandmorphis: there is a lot going in with bind mounts. I'm not prepared to say what the problem is19:19
zygawhat are you chatting about?19:19
jdstrandthough I have a lot of concerns regarding /dev/binder19:19
morphisjdstrand: ok, then let me try that again and see if is still a problem19:19
jdstrandgoing on*19:19
morphiszyga: https://launchpad.net/bugs/164716819:19
mupBug #1647168: /dev/ashmem and /dev/binder not usable inside confinement <snap-confine (Ubuntu):New> <https://launchpad.net/bugs/1647168>19:19
zygaaha19:20
zygaThis is with snap-confine 1.0.43 on Ubuntu 16.0419:20
jdstrandhey zyga19:20
zygasnap-confine 1.0.4319:20
jdstrandyeah, that was what I mentioned19:20
jdstrandtoo old19:20
* zyga reads the bug 19:20
jdstrandzyga: fyi, I'm not actively looking at it atm. it is on my list to circle back to cause I have some pretty strong opinions about /dev/binder19:21
zygamorphis: do you have the apparmor denials at hand?19:21
zygajdstrand: binder is the android RPC-like IPC right?19:21
jdstrandyes19:21
zygayou syscall and start executing in the same time slice, in another process19:21
jdstrandit is a window to a whole new, glorious attack sruface... err... world19:22
morphiszyga: it is, not I don't that is quite a long time ago19:23
morphisjdstrand: :-)19:23
zygaaha19:23
zygajdstrand: is binder now in the kernel? I didn't know this19:23
zygaand ashmem19:23
zygawow19:23
morphisjdstrand: guess what, we need a binder interface :-)19:23
morphiszyga: its in staging but disable by default in the std. Ubuntu kernel19:23
zygamorphis: aha19:24
morphisI have dkms packages for both19:24
zygawell, I'd say, letem have it for android-support interface19:24
zygaand just grant it to this snap19:24
zygait's all software19:24
zygaand you know19:24
morphisor something like this19:24
zygawindows xp wasn't exactly safe19:24
zyga;-)19:24
morphisfar from :-)19:27
jdstrandzyga: no, this would have to be on an android kernel19:28
jdstrandmorphis: I know you said that, but that is a *lot* more complicated than just saying 'yes, you can use /dev/binder'19:29
morphisjdstrand: yeah :-)19:30
morphisjdstrand: that is one of the cases why anbox will be devmode-only for quite some time19:30
jdstrandzyga: I'm going to pretend your argument was a joke :)19:30
zygajdstrand: well, it was a joke but I was actually serious about it as well, if we don't provide it as an interface everyone will just use devmode; is that better?19:32
jdstrandI don't want to have this conversation :)19:33
jdstrandreally, it depends on what is running on the other side19:34
jdstrandif it is like on Touch, then the services are pruned and hardened19:34
jdstrandit we are exposing the whole android service set, then, no, it probably isn't terribly better than devmode19:35
morphisjdstrand: in this case it would be more granting a single which isn't used outside of the snap19:35
morphisjdstrand: actually I have patches to make binder namespace aware19:36
jdstrandwell, let's not distract ourselves atm :)19:36
morphisabsolutely not :-)19:36
morphisjust thinking out loud19:37
jdstrandI just wanted to put forth that devmode may work better with a newer snapd/snap-confine19:37
* jdstrand nods19:37
jdstrandzyga: "Once Linux 4.13 is released any distribution can choose to enable apparmor and get complete confinement without rebuilding most of snapd" - where did you get 4.13?19:40
Erixhi19:45
Erixi installed nextcloud snap on ubuntu server 16.1019:46
Erixcannot find a2ensite for apache219:46
nacckyrofa: --^ redirected them from #ubuntu-server19:46
kyrofanacc, ah, thank you19:46
Erixthanks nacc19:46
kyrofaErix, nextcloud embeds upstream apache within it. There is no a2ensite19:46
naccnp, figured you'd be able to answer quicker than I :)19:46
kyrofaErix, it ships pre-configured and ready to go, but it's not a general purpose apache19:47
kyrofaIts sole purpose is to serve Nextcloud19:47
Erixkyrofa, I'm kind of newbie about this19:47
redpillare snaps supposed to mount on /snap/bin  ?19:47
kyrofaErix, oh that's okay, let's back up a little :)19:47
kyrofaErix, is this the first time you've setup Nextcloud?19:48
ErixI'm trying to edit a virtualhost config file19:48
kyrofaErix, what is your end goal?19:48
ErixActually I edited but guides tell me to run a2ensite19:48
Erixdirect http to https19:48
ErixI'm following nextcloud guide about https19:49
naccredpill: i think they are mounted on /snap/<snapname>/<rev>19:49
naccredpill: based upon what i see in my test VM :)19:49
kyrofaErix, there's a huge difference between setting Nextcloud up by installing apache, choosing a database, etc. and just installing the snap19:49
kyrofaErix, the snap takes care of all that stuff for you (but limits your power a bit as a result), whereas if you want to setup it all up yourself you can't use the snap19:50
redpillodd my are not19:50
Erixkyrofa, I get that19:50
kyrofaErix, if you want to set it up yourself you need to use the Nextcloud release tarball19:50
Erixit was just too easy19:50
Erix:)19:50
ErixI'm running nextcloud with my little linux knowledge19:50
kyrofaErix, enabling HTTPS using the snap is easy, and you don't need to play with Apache configs to get there19:50
naccredpill: iiuc, /snap/bin is now just a place for symlinks to /usr/bin/snap to live (for each snapped application) -- based upon the one snap i have installed :)19:51
kyrofaErix, assuming you still want to use the snap, what documentation are you following so I can know what you've done?19:51
naccredpill: since /snap/bin is on PATH19:51
Erixkyrofa, https://docs.nextcloud.com/server/11/admin_manual/configuration_server/harden_server.html#use-https-label19:51
redpillty that helps19:52
redpillnacc: ^19:52
naccredpill: i'm not an expert, but that's what i see in my 16.04 vm19:52
kyrofaErix, and what vhost are you editing?19:52
Erixkyrofa, nextcloud.enable-https: section on your snap site is about this also?19:52
naccredpill: you should be able to see what's mounted where with `mount | grep squashfs`19:52
kyrofaErix, indeed19:53
nacckyrofa: is there a general "I installed this snap, how do I use it" functionality? (or even just for nextcloud)?19:53
Erixkyrofa, BTW thanks for the great work19:53
nacckyrofa: i'm thinking similar to regular manpages, but specific to the snap's quirks19:53
Erixit was not poosible for me to install nextcloud without your snap19:53
kyrofanacc, this pretty much: https://github.com/nextcloud/nextcloud-snap#how-to-use19:54
nacckyrofa: ack, just wondering how a user should go from `snap install nextcloud` to that URL without coming here :)19:54
nacckyrofa: i guess `snap info nextcloud` has the url19:54
kyrofanacc, yeah, that's the idea19:54
kyrofanacc, still not super friendly, but I'm not sure how to make it better19:54
nacckyrofa: duly noted for when i see that kind of question in the future, thanks19:55
nacckyrofa: yeah, i was just thinking -- given that you know which commands you are exposing in the yaml, it'd be nice for there to be  blurb for each19:55
kyrofaErix, so: is the snap actually working for you, then? You just want to enable HTTPS?19:55
nacckyrofa: in they yaml, then you could in theory do `snap man nextcloud` and it'd just spit out those fields, if there19:55
kyrofanacc, in the `snap info` output?19:56
nacckyrofa: not "great", but it'd be a bit more user-friendly then "go to this URL"19:56
nacckyrofa: i think it'd be a separate command, or maybe a flag?19:56
kyrofanacc, yeah, best I can do as a snap author is add `-h` options to my commands :P19:56
nacckyrofa: yeah -- i guess we also have to get used to doing <snap_name>[tab] to see the commands19:56
kyrofanacc, indeed. At least for now, yeah19:56
Erixkyrofa, yes19:57
Erixkyrofa, everything works as I like19:57
kyrofaErix, oh, did you figure out how to use `enable-https`?19:58
ErixI just want to force every connection to https19:58
kyrofaAh, okay, sorry. Happy to walk you through if you like19:58
kyrofaErix, `nextcloud.enable-https -h` might be helpful20:00
Erixkyrofa, just reading the -h output20:00
kyrofaGreat minds20:00
mcphailA solution for man pages and bash compketion is needed20:00
kyrofaErix, it really comes down to "how do you want to get your cert/do you already have a cert"20:00
kyrofamcphail, yeah I think both are in the works20:01
mcphailgreat20:01
Erixkyrofa, self-signed seems easier option for me20:02
Erixgoing with that20:02
kyrofaErix, yeah that's pretty easy. Easy to change to something like let's encrypt later if you want20:03
Erixkyrofa, restarted apache20:04
Erixis it done?20:04
kyrofaErix, yep20:04
kyrofaErix, just visit it again and you'll see http redirect to https20:05
Erixkyrofa, I see https but its red and labeled not secure by chrome20:05
kyrofaErix, yeah, because it's self-signed20:05
Erixok. I guessthat20:05
Erixbut it is secure connection20:06
kyrofaErix, you'll need to use Let's Encrypt (or another CA) if you want web browsers to be happy20:06
kyrofaIndeed, it's encrypted20:06
zygare20:06
zygajdstrand: from jjohansen20:06
Erixkyrofa, it was so easy also20:06
Erixthanks again20:06
Erixvery much20:06
kyrofaErix, my pleasure, any time20:07
kyrofaErix, FYI, I also idle in #nextcloud if you ever run into issues20:07
Erixok. I'm there also20:08
ErixAlthough I read as much as needed but20:08
Erixis this right;20:08
Erixsnaps are combinations of pre configured software for a specific target in mind20:09
Erixthats is what I understood20:09
jjohansenzyga: that is the goal, it is possible I want get everything landed by then, especially if some of it gets stuck for testing in the -next tree20:09
jdstrandzyga: hmm, I thought that was an estimation, not a hard date, but I don't know20:10
jdstrandit's super important to be sure20:10
jjohansenjdstrand: yeah, that is the goal20:10
jjohansenI do have some concerns around the extended network mediation, which unix sockets are the first of20:11
zyga_re20:17
zyga_sorry, network20:18
tvossniemeyer: thanks for the review :) let me get to your final remarks20:18
jdstrandzyga_: in case you missed it:20:21
jdstrand15:09 < jjohansen> zyga: that is the goal, it is possible I want get everything20:21
jdstrand                   landed by then, especially if some of it gets stuck for testing20:21
jdstrand                   in the -next tree20:21
zyga_aha20:21
jdstrand15:10 < jdstrand> zyga: hmm, I thought that was an estimation, not a hard date, but20:21
jdstrand                  I don't know20:21
zyga_thank you jdstrand20:21
jdstrand15:10 < jdstrand> it's super important to be sure20:21
jdstrand15:10 < jjohansen> jdstrand: yeah, that is the goal20:21
jdstrand15:11 < jjohansen> I do have some concerns around the extended network mediation,20:21
jdstrand                   which unix sockets are the first of20:21
jdstrandnp20:21
zyga_jjohansen: do you think there will be any pushback?20:21
jjohansenugh, now you have sent /me into panic mode, my deadline is only 7-8 weeks out20:22
* jjohansen so prefers to ignore reality20:23
zyga_hard time to20:23
jjohansenyeah20:23
zyga_in case we get hit, I really enjoy working with you20:24
kyrofaErix, sorry I missed your question. Yeah, that seems like a reasonable way to think of them20:26
Croephadoes there exist a snap for the 4.11 kernel?20:27
tvossniemeyer: done and pushed20:27
stokachufacubatista: around?20:29
stokachugetting a proxy error trying to upload to the store20:29
facubatistastokachu, here20:30
facubatistastokachu, "proxy error"?20:30
stokachuyea20:30
facubatistastokachu, using snapcraft?20:30
stokachuyep20:30
Erixkyrofa, thanks20:30
stokachufacubatista: http://paste.ubuntu.com/24369710/20:30
stokachufacubatista: http://paste.ubuntu.com/24369715/ in its entirety20:31
facubatistastokachu, looks like a generic server error, will take a look20:31
stokachuthanks, a kubernetes release for juju is blocked on us20:31
facubatistastokachu, did you retry?20:33
stokachujust twice20:33
stokachuyou want me to try again?20:33
stokachufacubatista: ^20:35
facubatistastokachu, 1'20:35
facubatistastokachu, mind to try once again? thanks20:42
stokachuok20:43
stokachufacubatista: looks like it went through20:45
facubatistastokachu, oh, ok20:45
stokachufacubatista: what was the issue?20:46
* facubatista has mixed feelings in this situations.. glad it worked, but sad the original problem couldn't be debugged further20:46
facubatistastokachu, we were experiencing some storage issues, I just tried to confirm if it was the case here... but now it worked :/20:46
stokachufacubatista: ah ok20:46
stokachufacubatista: ill let you know on the next issue :D20:47
facubatistastokachu, thanks :)20:47
facubatistastokachu, how big is your snap file?20:49
stokachufacubatista: 92.5MB20:50
facubatistastokachu, thanks! (collecting info for people that also studied these transient errors)20:51
stokachuanytime20:51
mupPR snapcraft#1245 closed: nodejs plugin: add support for yarn <Created by sergiusens> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/1245>21:09
=== koza is now known as koza|away
greglIf I install a snap of a running program (plexmediaserver),will it mess up my running version??21:33
mcphailCan anyone point me to a Rails application which has been snapped? Wondering if I should try to tackle snappificating Mastodon23:16
mwhudsonso something in snapd is filtering out the TMPDIR environment var23:41
mwhudsonany ideas where? grepping isn't finding anything23:41
okymwhudson: do you need to set it?23:55
mwhudsona user of my classic snap wants to set it, yes23:55

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!