| === petevg is now known as petevg_afk | ||
| mup | Bug #1684343 opened: For candicate release is appearing on dragonboard the message "ERROR hal_remove_bsskey response failed err" <Snappy:New> <https://launchpad.net/bugs/1684343> | 03:22 |
|---|---|---|
| mup | PR snapcraft#1266 closed: tests: report coverage only in unit tests <Created by elopio> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/1266> | 03:22 |
| zyga | good morning | 06:18 |
| koza | hey | 06:21 |
| mup | PR snapd#3201 closed: interfaces: re-add reverted ioctl and quotactl (revert 21bc6b9f) <Created by jdstrand> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/3201> | 07:09 |
| zyga | hey mvo, how are you doing today? | 07:12 |
| mup | PR snapd#3206 closed: [2.24] Add maintscript helper to remove usr.lib.snapd.snap-confine in snap-confine <Created by mvo5> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/3206> | 07:12 |
| mup | PR snapd#3210 closed: [2.24] tests: relax network-bind interface regexps <Created by mvo5> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/3210> | 07:12 |
| mvo | hey zyga! I'm doing fine, how are you? | 07:12 |
| zyga | mvo: good, 3rd night in the tent now :) I used a sleeping bag this time, had a full night sleep for the first time (earlier I would wake up as it's not that warm at night yet) :-) | 07:13 |
| zyga | mvo: doing reviews, then will jump into a problem I didn't solve last evening | 07:13 |
| mvo | zyga: tent> fun! | 07:14 |
| zyga | pstolowski: commented on the disconnect PR, have look please | 07:26 |
| pstolowski | zyga, sure, thanks | 07:26 |
| pstolowski | zyga, and i commented on 3208 | 07:31 |
| zyga | pstolowski: repliiied | 07:32 |
| pstolowski | zyga, very good point about new snapd running old tasks, thanks! | 07:33 |
| zyga | pstolowski: my suggestion would be a patch that converts such a task to the new configuration | 07:33 |
| zyga | pstolowski: but that's not without issues itself | 07:33 |
| zyga | pstolowski: though unlike other patches it would not need to be undone | 07:34 |
| zyga | pstolowski: as old snapd can handle that too | 07:34 |
| pstolowski | let's create a forum topic maybe | 07:34 |
| zyga | OK | 07:34 |
| === chihchun_afk is now known as chihchun | ||
| pstolowski | actually existing topic is fine for that | 07:36 |
| mvo | pstolowski: looks like 3070 has a open question from gustavo - is that addressed? if so, I think the PR is good to go | 07:56 |
| mup | PR snapd#3207 closed: tests: relax network-bind interface regexps <Created by mvo5> <Merged by stolowski> <https://github.com/snapcore/snapd/pull/3207> | 07:56 |
| pstolowski | mvo, thanks, if you mean the comment re having a test for revert case, than yes, it's addressed, i've just added a comment | 07:59 |
| mvo | pstolowski: great, thank you. | 08:00 |
| mvo | pstolowski: it looekd addressed to me but I wanted to double check :) | 08:00 |
| mup | PR snapd#3070 closed: overlord: maintain per-revision snapshots of snap configuration <Created by stolowski> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/3070> | 08:02 |
| Chipaca | good morning! | 08:06 |
| zyga | Chipaca: good morning, how are you feeling? | 08:07 |
| * Chipaca is back from the dead | 08:07 | |
| Chipaca | zyga— no fever today, but something is still up | 08:07 |
| Chipaca | as if my vision had lag | 08:07 |
| mwhudson | https://forum.snapcraft.io/t/snapcraft-autopkgktest-failure-in-zesty/337 oh god | 08:08 |
| Chipaca | can we tell it >= instead of =? | 08:09 |
| Chipaca | no, we can't ("E: Unable to locate package hello>") | 08:10 |
| pstolowski | do we actually need to specify version number there? | 08:13 |
| mwhudson | you could make a dummy package that depended on hello (>= whatever) | 08:13 |
| mwhudson | and install that | 08:13 |
| mwhudson | sbuild and pbuilder both have helpers for that iirc | 08:14 |
| mwhudson | bit of a run around though | 08:14 |
| morphis_ | mwhudson: hey! if you didn't saw it yet: https://github.com/snapcore/snapd/pull/3156 | 08:21 |
| mup | PR snapd#3156: many: support debian in our CI <Created by morphis> <https://github.com/snapcore/snapd/pull/3156> | 08:21 |
| mwhudson | morphis_: nice | 08:34 |
| morphis_ | mwhudson: its close to be ready, just three remaining tests I need to debug | 08:34 |
| morphis_ | mwhudson: btw. are there any big differences in the debian packaging bits to what we have in the snapd tree? | 08:34 |
| mwhudson | morphis_: well the devendoring is the big thing i guess? | 08:35 |
| mwhudson | otherwise, no not really i think | 08:35 |
| * mwhudson is not here btw | 08:35 | |
| morphis_ | mwhudson: you mean you have individual deb packages in debian for each golang package snapd uses | 08:35 |
| morphis_ | mwhudson: ah :-) | 08:36 |
| mvo | morphis_: 3177 has a unit test failure it seems (just in case you have not seen it already) | 08:36 |
| pstolowski | Chipaca, is https://bugs.launchpad.net/snapd/+bug/1660970 going to be covered by your tab-completion work? | 08:40 |
| mup | Bug #1660970: snap info could autocomplete against installed snaps <snapd:New> <https://launchpad.net/bugs/1660970> | 08:40 |
| morphis_ | mvo: yeah, thanks, already looking into that one | 08:43 |
| Chipaca | pstolowski— umm | 08:43 |
| Chipaca | pstolowski— so, no | 08:43 |
| morphis_ | mvo: looks like something broke after my last rebase on master | 08:44 |
| Chipaca | but let me read the bug; it's probably invalid, at least as stated in the title | 08:44 |
| Chipaca | pstolowski— i can fix this easily :-) | 08:46 |
| pstolowski | Chipaca, :) cool | 08:47 |
| renat | Hi! It's Renat from Screenly=) I have another question to you=) | 08:47 |
| zyga | hey renat | 08:48 |
| renat | We configured auto-connection for our snap almost successfully, but dbus plugs and slots don't connect automatically to each other=( | 08:48 |
| renat | Let me post here our snap config | 08:49 |
| zyga | to each other where? in one snap? | 08:49 |
| renat | zyga, yes | 08:50 |
| renat | https://paste.ubuntu.com/24419051/ | 08:50 |
| zyga | renat: not sure why yet BUT, if you use core from the edge channel then each auto-connect logs why it doens't do something | 08:52 |
| zyga | renat: so you could install your snap and just read the message | 08:52 |
| renat | I will try, thanks! | 08:53 |
| === chihchun is now known as chihchun_afk | ||
| Chipaca | zyga— is there any reason why 'snap interfaces' isn't completing? (i mean one level up from "because the code isn't written") | 09:03 |
| zyga | Chipaca: no | 09:05 |
| Chipaca | zyga— same question but about disconnect, now :-) | 09:05 |
| zyga | Chipaca: also completion for connect is not as smart as I wish it was | 09:05 |
| zyga | Chipaca: same answer :) | 09:05 |
| Chipaca | zyga— oh? tell me more | 09:05 |
| zyga | I think connect was a proof of concept | 09:05 |
| zyga | and that was just merged but I didn't iterate | 09:05 |
| Chipaca | ah | 09:05 |
| zyga | if you look at connect, it's really dumb | 09:05 |
| zyga | what it should really do | 09:05 |
| zyga | is complete only those that you can connect in practice | 09:05 |
| * zyga is stuck at a harder part of update-ns | 09:06 | |
| Chipaca | zyga— how can you know what you can connect? | 09:07 |
| zyga | I think I will break for a moment and do something else, explore the easier parts again and write spread tests | 09:07 |
| zyga | Chipaca: well, the interfaces must match | 09:07 |
| Chipaca | zyga— oh you mean for the second argument? | 09:07 |
| zyga | Chipaca: but also you need to see that something can have more than one connection at a time | 09:07 |
| zyga | Chipaca: and when you factor in hooks it's even more interesting | 09:07 |
| Chipaca | right now the second arg doesn't complete at all | 09:07 |
| zyga | Chipaca: yes | 09:07 |
| zyga | Chipaca: anyway, look at it and think, I'm sure you will come up with a more complete picture than my rusty memory | 09:08 |
| Chipaca | grmbl | 09:08 |
| Chipaca | zyga— I'll start with the simpler stuff :-) | 09:10 |
| icey | any ideas why suddenly I have `Issues while validating snapcraft.yaml: snapcraft validation file is missing from installation path` | 09:17 |
| icey | well, with apt or source, snap seems to work fine :) | 09:17 |
| mup | Bug #1684525 opened: panic: assignment to entry in nil map <Snappy:New> <https://launchpad.net/bugs/1684525> | 09:18 |
| Chipaca | zyga— ^ that backtrace talks about content interface | 09:29 |
| zyga | Chipaca: I fixed that yesterday | 09:29 |
| Chipaca | :-) | 09:29 |
| wligtenberg | I need to log into a webex meeting, I know it can be a pain to set up on ubuntu 16.04 64 bit. Would it be possible to create a snap with firefox and the correct java packages so that everything will just work? It should also connect to webcam and sound. What would the difficulty level be? | 09:33 |
| zyga | wligtenberg: after a firefox snap exists, not high | 09:33 |
| zyga | wligtenberg: before, I'd wait | 09:33 |
| wligtenberg | zyga: does a firefox snap exist? I am not fully aware of all snaps :) | 09:35 |
| zyga | wligtenberg: I don't think a stable one exists yet | 09:35 |
| wligtenberg | zyga: ok, thanks. Then I will have to resort to the windows VM I guess. It would be a very cool use case I think. No more try all these things and you might get it to work, but just use this snap. :) | 09:36 |
| ogra_ | iirc there is a chrome one though (but also only in the edge channel) | 09:36 |
| zyga | I agree, I think it's coming though | 09:37 |
| wligtenberg | Although it would be even better if Cisco would just play nice with Linux... | 09:37 |
| ogra_ | snap install chrome-test --edge | 09:37 |
| wligtenberg | ogra_: As far as I know, chrome is more difficult since it has stopped java support, which is required. | 09:37 |
| ogra_ | thats the proprietary chrome though ... it might have more than chromium (it takes 5min to try out if you want to check ,... snaps are easily installed/uninstalled without any harm for your system) | 09:38 |
| wligtenberg | ogra_: good point, will just see if it works. :) | 09:39 |
| ogra_ | ;) | 09:39 |
| Chipaca | and that's 5 minutes on *ogra_'s* connection :-) | 09:47 |
| ogra_ | haha, yeah | 09:47 |
| Chipaca | he's got a very speedy dialup | 09:47 |
| Chipaca | :-) | 09:47 |
| zyga | I-S-D-N | 09:49 |
| === chihchun_afk is now known as chihchun | ||
| ogra_ | of them get you 1.2Mbit!) | 09:55 |
| ogra_ | bah | 09:55 |
| ogra_ | (10 of them get you 1.2Mbit!) | 09:55 |
| mcphail | wligtenberg: curious to know if you can get this to work. Was hoping to join a webex next week | 09:59 |
| awi | hi | 10:08 |
| mup | PR snapd#3213 opened: snap: require snap name for 'revert' <Created by stolowski> <https://github.com/snapcore/snapd/pull/3213> | 10:12 |
| wligtenberg | ogra_ mcpahil: using the chrome snap does not work. It downloads a java webstart thingy but cannot execute that. | 10:49 |
| ogra_ | well, was worth a try at least | 10:50 |
| wligtenberg | ogra_ I agree, it is the beauty of snaps :) | 10:51 |
| mvo | niemeyer: if you could add tags for sergio and elopio to the forum, that would be great! this way we can use @upcoming @sergio to assign things to them :) | 10:52 |
| pstolowski | refresh-delta-from-core failed in my branch https://travis-ci.org/snapcore/snapd/builds/223897482 | 10:55 |
| mvo | pstolowski: when did that fail? about ~3h ago there was a misconfiguration in u1 | 10:56 |
| mvo | pstolowski: if its a recent failure we need to talk to them again | 10:56 |
| pstolowski | mvo, 4 minutes ago if travis is not laying | 10:56 |
| mvo | pstolowski: hm, then I think we need to talk to #u1 | 10:57 |
| pstolowski | mvo, who is our person to talk to? | 10:58 |
| pstolowski | mvo, ah, ok, i see you raised that already | 10:59 |
| mvo | pstolowski: yes | 10:59 |
| pstolowski | thanks! | 10:59 |
| zyga | pstolowski: FYI I saw that many times this week | 11:02 |
| mup | PR snapcraft#1267 closed: meta: override the version with version-script <Created by sergiusens> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/1267> | 11:04 |
| ogra_ | mvo, hmm ... i think we need to either finally land the systemd changes in xenial or at least update our package https://forum.snapcraft.io/t/cant-install-libudev-dev-in-classic/333/3 | 11:15 |
| wligtenberg | mcpahil: This docker approach seems to work https://hub.docker.com/r/dnk8n/docker-webex/ , at least I can join the webex test. After tonight I will know more. I will try this, and have my windows VM as backup. | 11:31 |
| mup | PR snapd#3214 opened: cmd/snap: iterate interface tab completion <Created by chipaca> <https://github.com/snapcore/snapd/pull/3214> | 11:32 |
| wligtenberg | So I was definitely not the first person with the idea :) | 11:32 |
| mup | PR core-build#6 opened: add the initramfs-tools-ubuntu-core package source <Created by ogra1> <https://github.com/snapcore/core-build/pull/6> | 11:44 |
| mvo | ogra_: yeah, just noticed this too. very annoying, its the result of https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1659195 | 11:48 |
| mup | Bug #1659195: resolver regression on ubuntu-core from #1636912 <systemd (Ubuntu):Confirmed> <https://launchpad.net/bugs/1659195> | 11:48 |
| ogra_ | yeah | 11:48 |
| pstolowski | mvo, nice idea with using iptables for 3197! looks very promising | 12:00 |
| mup | PR snapcraft#1268 opened: Added link to forums in the Get in touch section <Created by Ads20000> <https://github.com/snapcore/snapcraft/pull/1268> | 12:19 |
| renat`` | Hi, again=) | 12:24 |
| renat`` | zyga, seems, it doesn't connect because of multiple candidates for connection. | 12:25 |
| renat`` | Apr 20 09:02:10 localhost.localdomain /usr/lib/snapd/snapd[1181]: task.go:303: DEBUG: 2017-04-20T09:02:10Z INFO cannot auto connect udisks2:service (slot auto-connection), candidates found: "screenly-client:udisks2, udisks2:client" | 12:25 |
| renat`` | 12:25 | |
| renat`` | For example. | 12:25 |
| renat`` | How do I specify slots for auto-connection? | 12:25 |
| renat`` | In this particular situation - I want both, but there is another message: | 12:26 |
| renat`` | auto connect screenly-client:command-dbus-client (plug auto-connection), candidates found: "screenly-client:command-dbus-server, screenly-client:ping-dbus-server, screenly-client:playlist-dbus-server" | 12:26 |
| renat`` | 12:26 | |
| renat`` | And I only want to connect to one of them. | 12:26 |
| zyga | renat``: I started discussing this topic here https://forum.snapcraft.io/t/what-should-the-auto-connect-logic-be-like/312 | 12:30 |
| renat`` | Thanks! Joining | 12:31 |
| morphis_ | zyga: joining us? | 12:31 |
| zyga | oh | 12:32 |
| zyga | sorry sure | 12:32 |
| zyga | no notification :/ | 12:32 |
| morphis_ | mvo: 2.24 is going out today or next thursday? | 12:53 |
| mvo | morphis_: the tenative plan is today, we will talk about it in todays standup, feel free to join, its in 7min | 12:53 |
| mvo | morphis_: tenative because there is a lot of stuff tagged as 2.25 which is not in yet | 12:54 |
| morphis_ | mvo: ok, I have another meeting in 5min but that is already all I wanted, thanks :-) | 12:55 |
| mvo | morphis_: we need to consult JamieBennett on this too, the stable release is currently done by him. if 2.24 goes out today or not is something we also discussed via mail with tony but no final decision yet afaik | 12:57 |
| morphis_ | ok | 12:58 |
| morphis_ | mvo: I was more interested of the perspective when we can push the packages for fedora/suse/yocto out | 12:58 |
| mvo | morphis_: aha, I see. for those 2.24 is fine to push out (it is already released upstream). if you mean 2.25 (which is the next release which is currently wrapped up), then today is the tentative plan but things might get delayed because of $stuff | 13:00 |
| morphis_ | mvo: I was thinking more of we should always align to the stable core snap with that release as their may be dependencies | 13:01 |
| Chipaca | zyga— standup | 13:02 |
| zyga | ah, sorry | 13:03 |
| mup | PR snapcraft#1269 opened: tests: fix package version pinning tests <Created by sergiusens> <https://github.com/snapcore/snapcraft/pull/1269> | 13:38 |
| Son_Goku | mvo: let me know if we are releasing 2.24 today, so that I can push the button to release it for all Fedora releases | 13:40 |
| pedronis | mvo: fwiw systemd-run takes a --slice= and I see a user-USER.slice but then there's also a session-xx.scope under the slice and I don't see systemd-run taking a scope | 13:45 |
| * zyga -> lunch | 13:58 | |
| niemeyer | mvo: Done | 14:04 |
| niemeyer | 527 members on the devices mailing list.. there we go again | 14:04 |
| mup | PR snapd#3213 closed: snap: require snap name for 'revert' <Created by stolowski> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/3213> | 14:17 |
| ogra_ | niemeyer, FYI https://github.com/snapcore/core/blob/master/live-build/hooks/500-create-xdg-wrapper.binary#L28 is what we allow today ... when we change the whole thing i think snap-confine should actually look up which mimetypes are supported on the desktop side and put some file on top of that mimeapps.list file relfecting reality on the desktop side ... (would be a quesrtion to zyga how hard that would be to implement) | 14:23 |
| Chipaca | ogra_— note there are two sides to the allowing, and i think niemeyer was pointing to the other side | 14:24 |
| ogra_ | ah | 14:24 |
| ogra_ | *that* was the misunderstanding then :) | 14:24 |
| Chipaca | ogra_— either that, or there are two implementations of the same thing written in completely different languages | 14:25 |
| niemeyer | ogra_: Yes, what is inside core or the snap is irrelevant.. | 14:25 |
| ogra_ | niemeyer, not for the snaps | 14:25 |
| ogra_ | niemeyer, if my snap wants a file:// url this will not work today | 14:25 |
| niemeyer | ogra_: In terms of security, the snap can perform that dbus-send call with whatsoever it wants | 14:26 |
| ogra_ | so the info that the desktop knows how to handle file:// is a valuable info we should forward to the inside of core (which is what my question above is about, regarding snap-confine) | 14:26 |
| ogra_ | sure but it will be a no-op for anything we dont define in that file | 14:27 |
| ogra_ | (or even cause an error on the snap dside, havent tested this) | 14:27 |
| niemeyer | !?!? | 14:27 |
| niemeyer | ogra_: This is completely irrelevant.. dbus won't consult that file to perform the call, nor will the daemon on the other side | 14:27 |
| * ogra_ has the feeling ou dont understand me ... | 14:28 | |
| Chipaca | ogra_— gustavo is talking about security | 14:28 |
| Chipaca | ogra_— you're talking about usability | 14:28 |
| Chipaca | both are needed | 14:28 |
| ogra_ | right | 14:28 |
| niemeyer | ogra_: I have the feeling we're talking across purposes indeed.. you raised security concerns in our call today. That's what I'm talking about. | 14:29 |
| ogra_ | i talk about what the snap sees and what the user ends up with in the current situation | 14:29 |
| ogra_ | if we re-do the world we need to re-do this bit too ... thats all i'm saying | 14:29 |
| ogra_ | (and i propose that snap-confine handles it) | 14:29 |
| ogra_ | niemeyer, that were no security concerns but rather "xdg-open will open anything, not just a browser ... completely unrelated to security | 14:30 |
| niemeyer | ogra_: If a snap could open anything with xdg-open, that'd be a major security concern.. that's exactly the topic above. | 14:31 |
| niemeyer | ogra_: It can't, and it's not because of those files you referred to | 14:32 |
| ogra_ | well, thats an xdg-open thing ... | 14:32 |
| niemeyer | ogra_: But because the daemon will anything not accepted | 14:32 |
| niemeyer | * the daemon will reject | 14:32 |
| niemeyer | ogra_: We don't use xdg-open *at all* today.. it's simply an executable with the same name | 14:32 |
| ogra_ | right, currently the mimeapps.list file makes us reject even before it goes anywhere | 14:32 |
| niemeyer | ogra_: Once more (and last, I think), mimeapps is irrelevant.. the dbus call that is inside that xdg-open call can be carried with any URL.. it's the daemon that will prevent arbitrary URLs from being opened | 14:33 |
| ogra_ | what i'm saying from a UX/snap perspective is that we should have that bit dynamically based on the capabilities the actual desktop exposes | 14:33 |
| niemeyer | ogra_: You're flipping back and forth between UX and statements such as "xdg-open can open anything".. | 14:34 |
| niemeyer | ogra_: Our xdg-open can't... | 14:34 |
| niemeyer | and it shouldn't | 14:34 |
| ogra_ | it should allow the exact same any other desktop app is capable to when using a MRL/URL | 14:35 |
| ogra_ | which is defined on the desktop side | 14:35 |
| ogra_ | but not carried through as info to the core snap | 14:35 |
| niemeyer | ogra_: Nope, our xdg-open needs to be security aware... | 14:35 |
| niemeyer | ogra_: and btw, mvo is right.. polkit is unrelated.. the daemon would need to integrate with polkit for it to work, and it doesn't today | 14:36 |
| ogra_ | well, then we shoudl make that work ... but since you want to drop that anyway i wont argue about security anymore ;) | 14:36 |
| niemeyer | ogra_: Don't worry about that feature. We'll sort it out. | 14:37 |
| morphis | niemeyer, ogra_: I think there are two things we're mixing here, one is carrying what we have right now (http://) forward also to other distributions and the other thing is support for other URI's like tel:// or similar | 14:37 |
| niemeyer | ogra_: We're not dropping anything.. we're evaluating a different way of doing it that might help cross-distribution support. It's about being open minded enough to accept exploring ideas and perhaps falling back if it turns out to be a dead end. | 14:37 |
| morphis | once we have sorted the first one we can use the same implementation to add more things if needed | 14:37 |
| ogra_ | morphis, right, that was my point ... the core snap should have the info what the desktop side supports before even offering it to the snap | 14:38 |
| niemeyer | morphis: Right | 14:38 |
| morphis | ogra_: what do you mean by that? what kind of info should the core snap have? | 14:38 |
| ogra_ | morphis, mime types | 14:38 |
| morphis | right, but that is a different story we can solve later on | 14:39 |
| ogra_ | morphis, https://github.com/snapcore/core/blob/master/live-build/hooks/500-create-xdg-wrapper.binary#L23 defines the supported mime types a snap sees | 14:39 |
| morphis | we first need a way to talk with the classic desktop at all | 14:39 |
| niemeyer | ogra_: You had several points, actually, and most of your posts on that thread don't contribute to the conversation but rather just create controversy.. and in some cases are just plain wrong, such as the polkit statements. Please try to collaborate towards a solution. | 14:39 |
| ogra_ | morphis, and since i try to drop any arguing about security, thats another bit i would like to see solved which is why i brought it up here | 14:39 |
| niemeyer | ogra_: For contrast, see morphis's last post on the thread. This is what good feedback looks like. | 14:39 |
| morphis | ogra_: shouldn't that be just x-scheme-handler/http;x-scheme-handler/https ? | 14:40 |
| morphis | ogra_: as that are the only two mime types snapd-xdg-open currently allows | 14:40 |
| ogra_ | morphis, PRs accepted :) i thought we hand through mailto as well at least | 14:41 |
| morphis | ogra_: we do? | 14:41 |
| ogra_ | (that script isnt mine, i think tvoss wrote it initially) | 14:41 |
| morphis | ah right | 14:41 |
| morphis | https://github.com/snapcore/snapd-xdg-open/blob/master/src/snapd-xdg-open.c#L67 | 14:41 |
| morphis | both should be in sync always and I agree there could be a better way to keep both in sync | 14:42 |
| ogra_ | rigth | 14:42 |
| morphis | ala letting snapd ship both xdg-open and xdg-open.desktop so we can control both | 14:42 |
| morphis | in the same place | 14:42 |
| Saviq | hey all, any idea which plug we'd need to connect to get an Electron app to work confined? http://pastebin.ubuntu.com/24420540/ is the denial I'm getting | 14:42 |
| ogra_ | Saviq, i thought only browser-support | 14:43 |
| morphis | Saviq: there is an attribute for the browser-support interface you may have to set too | 14:43 |
| morphis | https://github.com/snapcore/snapd/blob/master/interfaces/builtin/browser_support.go#L250 | 14:43 |
| morphis | allow-sandbox: true | 14:43 |
| Saviq | morphis, aha, any idea if that can be done with auto connection? | 14:44 |
| morphis | Saviq: you need to ask at the store level for a proper snap-declaration assertion for this | 14:44 |
| ogra_ | Saviq, all my electron snaps did auto-connect over here ... | 14:44 |
| ogra_ | so that shoudl definitely work fine | 14:45 |
| morphis | Saviq: but could be that you can set some switches for electron too to disable sandboxing for chrome | 14:45 |
| ogra_ | snap install snapcraft-forum ... or rocketchat-desktop ... | 14:45 |
| morphis | niemeyer: so how do we take this further? do you want some more time to think about this or should I get a meeting up to discuss this with all involved people? | 14:45 |
| Saviq | ogra_, you using electron-builder? | 14:45 |
| ogra_ | Saviq, i think ryan uses it for the snapcraft-forum one ... not sure about the rocketchat one | 14:46 |
| ogra_ | (sadly ryan didnt publish his snapcraft.yaml) | 14:46 |
| Saviq | might be because it's autogenerated by electron-builder ;) | 14:46 |
| niemeyer | morphis: My last hope is being able to properly ask systemd itself to fire the process inside the user session.. mvo is not super optimistic, but said he'd have a quick look into it. If that turns out difficult or awkward, then we'll need to go back to having a daemon inside the user session. | 14:46 |
| ogra_ | ah | 14:46 |
| morphis | niemeyer: the problem with that is that systemd doesn't control the user session on all distros | 14:47 |
| ogra_ | niemeyer, you dont need any daemon (and we never had one) | 14:47 |
| morphis | niemeyer: on 14.04 and 16.04 it doesn, on 16.10 you could use systemd-run --user to do that | 14:47 |
| ogra_ | niemeyer, there is just a dbus listener service ... that doesnt mean anything is running | 14:47 |
| morphis | niemeyer: so it is possible but not really portable | 14:47 |
| niemeyer | ogra_: I'm sure morphis understands what I'm talking about | 14:47 |
| niemeyer | morphis: I see.. hmmm | 14:48 |
| morphis | niemeyer: I can give `systemd-run --user`a try later on on 16.10 if that would solve it but that would be a super long term solution | 14:48 |
| niemeyer | morphis: Isn't that a short cut for a more complex set of options that might be used in 14.04.. I note it supports --slice | 14:49 |
| morphis | niemeyer: given that we need to support 14.04 / 16.04 till 2020 | 14:49 |
| morphis | niemeyer: --slice isn't enough as it doesn't affect the process hiearchy | 14:49 |
| morphis | I used that in my example I gave on the forum post | 14:50 |
| niemeyer | morphis: --user is a way of selecting which service manager it's talking to, right? | 14:50 |
| morphis | right | 14:50 |
| niemeyer | morphis: Can't we explicitly select that service manager some other way? | 14:51 |
| niemeyer | morphis: Manipulating environment or whatever | 14:51 |
| morphis | niemeyer: we can hack and get the DBUS_SESSION_ADDR from a process inside the session and then talk to it | 14:51 |
| niemeyer | morphis: How does it find out the proper service manager nowadays? | 14:51 |
| niemeyer | morphis: Sounds promising | 14:51 |
| morphis | however that doesn't solve the problem that we have to support upstart and systemd | 14:51 |
| morphis | niemeyer: its defined somewhere within the lightdm configuration if I am not wrong | 14:52 |
| niemeyer | morphis: snapd doesn't work with upstart today, I think | 14:52 |
| morphis | niemeyer: right | 14:52 |
| niemeyer | morphis: Ah, wait, I get what you mean | 14:52 |
| niemeyer | Need to step out for a couple of minutes.. brb | 14:52 |
| morphis | niemeyer: we basically need to support for initctl --user and systemctl --user and for the upstart variant we need to craft our own .conf file and ship it as part of the snapd deb package | 14:52 |
| morphis | niemeyer: I think that really adds only more complexity to the whole situation than we want | 14:53 |
| jdstrand | Saviq: briwser-support should be all you need. don't specify 'allow-sandbox: true' since electron apps don't need it | 14:55 |
| ogra_ | morphis, well, things like openbox dont even use upstart or systemd as session managers (while the DM cares for logind and dbus to always run for any desktop) | 14:55 |
| morphis | ogra_: right, that is what I meant with my last comment more or less, we have too many case to consider if we go this route which takes aways the simplicity we want to achive | 14:56 |
| jdstrand | Saviq: you might have to set an env var or something to disable the sandbox, but I don't think that is necessary (someone could correct me) | 14:56 |
| ogra_ | exactly | 14:56 |
| Saviq | jdstrand, I didn't, but still getting denials like http://pastebin.ubuntu.com/24420628/ - doesn't work unless --devmode | 14:56 |
| morphis | jdstrand: the electron apps don't use chromium sanboxing? | 14:57 |
| ogra_ | i dont think any webapps can | 14:57 |
| Saviq | only thing about sandbox I can find is https://electron.atom.io/docs/api/sandbox-option/ but that doesn't seem to be that | 14:57 |
| ogra_ | iirc you have to actually invoke the binary with --no-snadbox | 14:57 |
| ogra_ | yeah | 14:58 |
| niemeyer | morphis: Ack, does feel like a can of worms | 14:58 |
| ogra_ | /snap/snapcraft-forum/4/snapcraft-forum --type=renderer --no-sandbox --primordial-pipe-token=31B373498D | 14:58 |
| morphis | niemeyer: yes :-) | 14:58 |
| ogra_ | Saviq, ^^^ | 14:58 |
| morphis | ogra_: ah! | 14:58 |
| morphis | --no-sandbox is the key here | 14:59 |
| ogra_ | yeah | 14:59 |
| morphis | ogra_: is electron using that by default? | 14:59 |
| Saviq | ogra_, ack, thanks! | 14:59 |
| ogra_ | morphis, i dont know ... i would expect electron-builder to actually default to it | 14:59 |
| ogra_ | when building a snap :) | 14:59 |
| jdstrand | morphis: they can use seccomp but not userns. electron apps don't need it, they are snappy sandboxed | 14:59 |
| morphis | jdstrand: right | 14:59 |
| jdstrand | allow-sandbox: true allows use of userns but grants a ton of privilege, so it is only used for official browsers | 15:00 |
| * jdstrand takes a note to update the review tools to mention --no-sandbox with electron apps | 15:01 | |
| * jdstrand also updates the wiki | 15:01 | |
| ogra_ | sergiusens, github sends me mondrian artwork about snaopcraft by mail suddenly ! | 15:04 |
| ogra_ | (the color selection is a bit boring though ... only red, green and grey) | 15:04 |
| apw | ogra_, hey did we jsut release a new core snap ? | 15:16 |
| apw | i seem to have a lost loop device showing up which looks to be the 1337 version of the core snap | 15:17 |
| Saviq | ogra_, hrmf, should I see something when running snapcraft-forum? I'm seeing "mmap() failed: Permission denied" and the same DENIAL... nothing else ¿? | 15:33 |
| Saviq | hmm hmm, works with --devmode, /me starts thinking this is something special about his host... | 15:35 |
| Saviq | like... zesty | 15:35 |
| mup | Bug #1684893 opened: "fonts", "themes" and "icons" interfaces for desktop apps <snapd-interface> <Snappy:New> <https://launchpad.net/bugs/1684893> | 15:50 |
| mup | Bug #1684896 opened: sha3-384 mismatch downloading lxd <Snappy:New> <https://launchpad.net/bugs/1684896> | 15:50 |
| === chihchun is now known as chihchun_afk | ||
| sergiusens | ogra_: err, what? | 16:02 |
| ogra_ | apw, not me, either JamieBennett or mvo do the releases nowadays | 16:03 |
| sergiusens | Saviq: kernel >=4.10 needs snapd 2.24 | 16:03 |
| ogra_ | Saviq, yeah there was a forum thread about it | 16:03 |
| * sergiusens wonders why people still discuss things here :-P | 16:03 | |
| mup | Bug #1684896 changed: sha3-384 mismatch downloading lxd <snapd:New> <https://launchpad.net/bugs/1684896> | 16:05 |
| * Saviq upgrades snapd | 16:06 | |
| sergiusens | mvo: are you pushing to zesty as the latest distro series possible and are you finding hassle in trying to do that? | 16:10 |
| mvo | sergiusens: I'm pushing to zesty via the normal SRUs, I find it the same hassle as the other SRUs. or is that not the question? | 16:12 |
| sergiusens | mvo: great, that is what I wanted to hear; was wondering if we were asked to wait for z+1 and anything like that | 16:12 |
| cachio | ogra_, hey, I am starting some test automation for console conf, any advice about how to start that? | 16:13 |
| ogra_ | cachio, you want to read up about system-user assertions ... | 16:13 |
| ogra_ | not sure if we have anything for the networking side though ... | 16:14 |
| cachio | ogra_, ok, nice | 16:14 |
| cachio | ogra_, do you know where is the code stored for console conf? | 16:15 |
| ogra_ | cachio, it is the source package of "subiquity" ... not sure where the actual code lives, i would suspect on launchpad ... mwhudson is your man for details, he maintains it | 16:16 |
| mup | PR snapcraft#1269 closed: tests: fix package version pinning tests <Created by sergiusens> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/1269> | 16:17 |
| cachio | ogra_, ok I'll look up tx | 16:17 |
| ogra_ | i guess you can somehow find it under the subiquity project on LP | 16:17 |
| kyrofa | ogra_, that's on GH now I think: https://github.com/CanonicalLtd/subiquity | 16:23 |
| ogra_ | sergiusens, re -> mondrian .... https://codecov.io/gh/snapcore/snapcraft/pull/1263?src=pr&el=continue | 16:23 |
| mup | PR snapcraft#1263: Pass through commands into the lxd container <Created by kalikiana> <https://github.com/snapcore/snapcraft/pull/1263> | 16:23 |
| ogra_ | sergiusens, seems to send these reports to everyone and his grandmas addressbook by mail ... | 16:24 |
| ogra_ | (i dont mind, but it should really use more colors :P ) | 16:25 |
| mup | PR snapd#3215 opened: tests: address review comments from #3186 <Created by fgimenez> <https://github.com/snapcore/snapd/pull/3215> | 16:29 |
| kyrofa | Oh cachio I guess that github subiquity link was for you | 16:37 |
| kyrofa | Man that word is hard to type | 16:38 |
| cachio | ky, yes I saw that, thanks | 16:38 |
| cachio | kyrofa, yes I saw that, thanks | 16:38 |
| mup | PR snapcraft#1270 opened: release changelog for 2.29 <Created by sergiusens> <https://github.com/snapcore/snapcraft/pull/1270> | 17:02 |
| === lutostag_ is now known as lutostag | ||
| morphis | jdstrand: do you have time to look at https://github.com/snapcore/snapd/pull/3177 again today? | 17:26 |
| mup | PR snapd#3177: cmd/snap: make users Xauthority file available in snap environment <Created by morphis> <https://github.com/snapcore/snapd/pull/3177> | 17:26 |
| jdstrand | morphis: yeah | 17:27 |
| morphis | jdstrand: thanks! | 17:27 |
| jdstrand | let me phrase that another way. I'll look at it today :) | 17:27 |
| jdstrand | let's leave having time out of it :P | 17:27 |
| mvo | morphis: I fixed a bunch of conflicts and reopened 2592 | 17:31 |
| mup | PR snapd#2592 opened: many: add support for session dbus services via snaps <Created by mvo5> <https://github.com/snapcore/snapd/pull/2592> | 17:31 |
| mvo | morphis: we talked about this the other day, tomorrow I will continue with ensureing the snapd.conf is always available and refinements, then the session dbus bit should be good, we can then talk about system dbus too, hopefully straightforward | 17:32 |
| Facu | git related question: I proposed a branch for snapcraft, and a change was requested; should I go back to my branch, do the change... and then what? one commit, then *squash* that commit to have only one in the branch, and then push? | 17:55 |
| kyrofa | Facu, no, don't squash, the reviewers will be hard-pressed to see what changed | 18:03 |
| kyrofa | Facu, just push up a new commit with the changes requested | 18:03 |
| Facu | kyrofa, ah, thanks! | 18:03 |
| kyrofa | Facu, any time, thanks for caring enough to ask! That's a good sign ;) | 18:04 |
| Facu | :) | 18:04 |
| icey | what are the requirements to get an alias accepted as the default way to access an app without renaming a snap? | 18:54 |
| kyrofa | icey, just make a forum post in the store category requesting it | 19:03 |
| icey | kyrofa: is the forum tied at all into SSO? | 19:04 |
| kyrofa | icey, I don't think so yet | 19:05 |
| icey | also, possible to get a review on new snap ripgrep, with classic confinement? | 19:05 |
| icey | or | 19:07 |
| icey | is there an interface for full filesystem access? | 19:07 |
| mup | PR snapd#3203 closed: interfaces/mount: add ReadMountInfo and LoadMountInfo <Created by zyga> <Merged by zyga> <https://github.com/snapcore/snapd/pull/3203> | 19:07 |
| mup | PR snapd#3216 opened: cmd/snap-update-ns: add actual implementation <Created by zyga> <https://github.com/snapcore/snapd/pull/3216> | 19:07 |
| icey | for reference, upstream pull request: https://github.com/BurntSushi/ripgrep/pull/455 :) | 19:14 |
| mup | PR BurntSushi/ripgrep#455: Add snapcraft.yaml <Created by ChrisMacNaughton> <https://github.com/BurntSushi/ripgrep/pull/455> | 19:14 |
| mup | PR snapcraft#1271 opened: tests: increase the staging registration limit to 100 <Created by elopio> <https://github.com/snapcore/snapcraft/pull/1271> | 20:02 |
| zyga | gah gah gah | 20:20 |
| zyga | my algorithm sucks | 20:21 |
| zyga | this is surprisingly a hard problem :/ | 20:22 |
| zyga | given mountinfo data and a particular mount command answer if the command has ran and can be skipped | 20:22 |
| === lutostag_ is now known as lutostag | ||
| lutostag | can somebody take a quick peek at https://bugs.launchpad.net/snappy/+bug/1679210 to at least triage it? | 21:22 |
| mup | Bug #1679210: snap install --revision tracks stable by default <Snappy:New> <https://launchpad.net/bugs/1679210> | 21:22 |
| === mup_ is now known as mup | ||
| catbus1 | Hi, I assume the proprietary software/binaries can be snapped, how do I make it available to my paying customer? | 21:39 |
| catbus1 | and I assume if I don't want automatic update, I just don't update the channel like 'stable' the customers have access to, right? | 21:40 |
| qengho | catbus1: There's a pricing model in the Ubuntu store, if you want to sell it that way, or you can run your own store, or you can put it anyone's store and make it available to everyone to download and test for some kind of license key file at startup. | 22:02 |
| qengho | catbus1: as for updates, you can make a kind of sub-channel, I think. So, you each customer or class of customer gets their own channel and you update by flipping states in the store. | 22:04 |
| catbus1 | qengho: thanks. | 22:10 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!