/srv/irclogs.ubuntu.com/2017/07/11/#snappy.txt

Son_Gokuoh man00:44
Son_Gokuyou've got to be kidding me00:44
Son_Gokumvo forked the golang seccomp bindings? :(00:45
Son_Gokuis there a chance of a happy re-merge?00:45
Son_Gokuoh wait, this fork is trivial00:46
Son_Gokuit's just to do weird things with old libseccomp00:46
mupPR snapd#3577 opened: packaging/fedora: Fix build for snapd <Created by Conan-Kudo> <https://github.com/snapcore/snapd/pull/3577>01:21
=== chihchun_afk is now known as chihchun
mupPR snapd#3500 closed: store: talk to api.snapcraft.io for assertions <Created by cjwatson> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/3500>07:07
lukavhello08:23
lukavis it possible to deploy a single out of tree built kernel module inside a snap? without making a kernel snap?08:25
Chipacalukav: I don't think so, but maybe?09:08
Chipacalukav: I mean, it's not supported as far as I know, but it might be possible09:15
lukavChipaca: there is a kernel-module-control interface in the reference, but I don't know if I need to load the module by a custom script or snap can be configured to do that automatically09:22
Chipacalukav: yes. But can that interface be used to insmod things from your snap?09:25
Chipacalukav: how would you support the different kernels?09:26
lukavChipaca: I will have to try insmoding it, not sure how to go about different kernel version support09:30
Chipacalukav: what are you trying to do?09:31
lukavChipaca: I'm trying to use a camera that requires patching the uvc kernel module09:32
Chipacalukav: it sounds like you're building a device / gadget / thing09:33
lukavChipaca: it will probably end up as a custom ubuntu core device image, but I'm trying to explore my options09:34
Chipacalukav: if your end goal is to have something like a device, you'll presumably be able to control the kernel, so that part'd be fine09:35
Chipacacontrol as in decide which one gets installed, not necessarily roll your own09:35
=== gurmble is now known as grumble
Chipacathe kernel-module-control interface is manually connected, but it'd probably work for development09:36
Chipacalukav: give it a try and let us know how it goes :-)09:37
lukavChipaca: I was initially thinking to have both options, have a snap of my application that can provide the option to access that type of camera by loading a custom uvc kernel module, and a custom device image with the required kernel and application snaps installed09:38
lukavChipaca: sure, thanks for the info09:40
mupPR snapd#3578 opened: store: talk to api.snapcraft.io for purchases <Created by cjwatson> <https://github.com/snapcore/snapd/pull/3578>09:45
pstolowskiChipaca, +1 on #3554 with two very minor comments10:02
Chipacapstolowski: yep, was responding to one of 'em10:06
Chipacapstolowski: you mean to say you don't think having png image data in the journal is useful?10:08
Chipacapstolowski: I don't know what you're talking about10:08
* Chipaca sends an mp3 too, for good measure10:08
Chipaca"this is what the server sounded like as it was dying"10:08
pstolowskiChipaca, I mean numbers vs strings10:09
Chipacai know, i know10:09
Chipacaas i say, that's fine; they're always strings (or []bytes, and then i suddenly honestly don't care)10:09
Chipacawithout a clear non-nonsense use case, i shall continue not caring10:09
mupPR snapd#3576 closed: tests: snap debug confinement does not exists yet in 2.26.x <Created by mvo5> <Closed by mvo5> <https://github.com/snapcore/snapd/pull/3576>10:15
mupPR snapd#3579 opened: snap-seccomp: link libseccomp statically to snap-seccomp <Created by mvo5> <https://github.com/snapcore/snapd/pull/3579>10:18
pstolowskiChipaca, that's fine. it was just to check if you are aware of any actual numbers there and if you aren't, that's ok10:21
zygatest...10:44
zyga\o/10:44
zygamvo: are you reading this?10:44
Chipacazyga: I don't know if mvo was, but I was reading it10:52
zygaChipaca: yay!10:53
zygaso I *may* have working multi-homed network now10:53
zygaon an old sempron class PC10:53
zyga(screw you arm)10:53
* zyga had a very long night10:53
* zyga shuts the whole network contraption and moves it to the desired location11:03
=== chihchun is now known as chihchun_afk
Saviqdavidcalle, hey, any word on https://developer.ubuntu.com/snappy/guides/mir-snaps ?11:33
zygawhee11:59
zygadesk assembled11:59
ppisatiogra_: edge was still running pi2-kernel #30 when #34 was available, so i released #34 in edge12:03
ppisatiogra_: now i found a problem with it, if i release #30 back to edge to i cause breakage or what?12:04
ppisati*do i12:04
ogra_ppisati, thanks ... while i'd really like us to keep edge for manual uploads when testing stuff, we shouldnt exclude it from the auto uploads ... i wonder if thats possible in one of brads scrips12:04
ogra_ppisati, if you release 0 it should update (well, actually downgrade) again12:05
ppisatiogra_: 0?12:05
ogra_*if oyu release 30 (sorry brokwn 3 here)12:05
ppisatiogra_: ok, me tries12:05
ogra_what was the prob ?12:06
ogra_if the boot fails it will auto-rollback anyway12:06
ogra_if it is more subtle like a broken driver it wont indeed12:06
ppisatiogra_: no, the dtb overlay files had the wrong extension (.dtbo)12:07
ogra_ah12:07
ppisatiogra_: well, actually that's the correct extension, it's just that our bootloader is old and doesn't know it12:07
ogra_we shoould update it then :)12:07
ppisatiogra_: so first i fix that part, than i update the bootloader in the archive, test everything, then we can revert this fix and pick the new bootloader tpgether12:07
ogra_so at least with fresh images from edge you get the right thing12:07
ppisatiogra_: actually, it didn't break anything because daily images still had the overlay from #30 in /boot/uboot/overlays/12:08
ogra_i need to re-work the whole gadget stuff anyway ... ondra did the dragonboard already, but pi is still behind12:08
ppisatiogra_: but if i didn't roolback it, i would break overlay in today's daily12:08
ogra_(make it build from upstream u-boot and all )12:08
ppisatiogra_: yes, the gadget update part is really important for us12:09
ppisatiogra_: in stable we are still shipping an old kernel with known vulnerabilities12:09
ogra_well, the update bit is the jjob of the snapd team ...12:09
ogra_i'll adjust the gadgets to use it but first i need the infrastructure12:09
ppisatiogra_: ack, anyhow, the rollback worked12:10
ppisatiogra_: so now i can got get some lunch and later fix this overlay rename thing12:10
ppisatiogra_: ta12:10
ogra_ppisati, right, that is why the blobs and dtbs should in the future be shipped with the kernel snap12:10
ppisatiogra_: did you see this?12:10
ogra_and be copied in place ....12:10
ogra_see what ?12:10
ppisatiogra_: ah crap, it wasn't pushed yet, hold on12:11
ppisatiogra_: here is for the dragonboard - 4833c0343531aee507e80771c83c086da7488a7112:12
ppisatiahhhhhhhh12:12
ppisatiogra_: https://patchwork.ozlabs.org/patch/780737/12:12
ppisatiogra_: and here is for the raspi2 - https://patchwork.ozlabs.org/patch/781277/12:12
ppisatitought for the raspi2, we need the wireless package to enter the archive12:13
ppisatiit builds on LP though, but it'll break locally12:13
ogra_because we cant force PPAs12:14
ogra_you could add a "prepare" scriptlet that downloads the deb and uses dpkg -x or so12:14
ogra_(nice btw)12:15
ogra_(or simply add an extra part that pulls it from the upstream github branch)12:16
ogra_(it is just binary firmware after all)12:16
ppisatiogra_: me goes out for lunch, we can discuss about it later again12:19
* zyga breaks for lunch and will catch up with everyting12:19
mupPR snapcraft#1402 opened: Better explain dependency link processing <Created by evandandrea> <https://github.com/snapcore/snapcraft/pull/1402>12:57
mvofgimenez: I have a 2.26.9~ppa2 in edge on amd64, could you please double check that this fixes the issue you saw on trusty?12:58
fgimenezmvo: sure! on it12:58
mvota12:59
mupPR snapcraft#1398 closed: tests: fix issues with python 3.6 <Created by sergiusens> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/1398>13:00
mupPR snapcraft#1401 closed: Correct capitalisation for PyPI <Created by evandandrea> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/1401>13:00
mupPR snapcraft#1393 closed: python plugin: output json in pip list <Created by elopio> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/1393>13:03
zygaChipaca: hey13:03
zygaChipaca: standup time?13:04
niemeyerChipaca: Oops.. wrong channel.. yeah, that ^13:04
niemeyer:)13:04
mupPR snapcraft#1375 closed: tests: allow to filter tests in docker <Created by elopio> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/1375>13:09
mupPR snapcraft#1383 closed: autotools: Enable cross-compilation support <Created by kalikiana> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/1383>13:15
mupPR snapcraft#1396 closed: rust plugin: unset http_proxy for test_cross_compile <Created by chihchun> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/1396>13:21
Son_Gokucachio, mvo: travis/spread failures in https://github.com/snapcore/snapd/pull/357713:22
mupPR snapd#3577: packaging/fedora, tests: Fix build for snapd and enable a test for Fedora <Created by Conan-Kudo> <https://github.com/snapcore/snapd/pull/3577>13:22
Son_Gokunot sure what happened13:22
cachioSon_Goku, there are some errors to build fedora, I fix them in https://github.com/snapcore/snapd/pull/350513:25
mupPR snapd#3505: PLEASE IGNORE: Enabling main test suite for fedora <Created by morphis> <https://github.com/snapcore/snapd/pull/3505>13:25
Son_Gokuah13:25
Son_Gokucachio, so then that means the fedora test shouldn't be enabled yet anyway13:26
cachioSon_Goku, trying to enable fedora tests for main test suite13:27
mupPR snapd#3051 closed: interfaces: add consoles interface <Blocked> <Decaying> <Created by femdom> <Closed by jdstrand> <https://github.com/snapcore/snapd/pull/3051>13:28
cachioSon_Goku, you can fix that error by changing in the file tests/lib/prepare-project.sh as I did in that PR13:32
jdstrandmvo: hey, looking at https://github.com/snapcore/snapd/pull/3579 you've decided to just use what is in the archive instead of embedded the upstream source? (I read the forum posts but wasn't sure)13:34
mupPR snapd#3579: snap-seccomp: link libseccomp statically to snap-seccomp <Created by mvo5> <https://github.com/snapcore/snapd/pull/3579>13:34
Son_Gokucachio: https://github.com/snapcore/snapd/pull/357713:39
mupPR snapd#3577: packaging/fedora, tests: Fix build for snapd and enable a test for Fedora <Created by Conan-Kudo> <https://github.com/snapcore/snapd/pull/3577>13:39
Son_GokuI added your commit13:40
mvojdstrand: I hit a bit of a roadblock with the embedding releated to tests, gustavo suggested some possible workarounds13:41
cachioSon_Goku, nice, I'll take a look to the results13:41
jdstrandmvo: yeah, that is what I read, but the new PR seems to just use archive packages, correct?13:42
jdstrand(which I happen to prefer in terms of security tracking)13:42
mvojdstrand: correct13:43
mvojdstrand: its as minimal as possible13:43
mvojdstrand: exploring with fgimenez currently if it really fixes all the issues13:43
jdstrandmvo: ok, I wasn't sure another larger PR didn't sneak in-- it was so small :)13:43
mvojdstrand: so because I hit this roadblock, I decided to try the static linking first to unblock us. I'm a bit worried about timing mostly, I want to release. and I think the static linking is not a bad solution, we can still do the full embedding later (once the problem with the tests is better understood)13:44
jdstrandmvo: I commented with +1. Like I said, I personally prefer this PR's approach with my Ubuntu security team hat on, so if you never circle back around, I'm still happy ;)13:46
Son_Gokumvo, I don't particularly prefer to statically link if I don't have to13:47
Son_Gokucan we make this an ubuntu-only special somehow?13:47
Chipacazyga: niemeyer: oops, sorry for not letting you know: i had an annual echp review meeting at standup time13:48
zygaChipaca: echp?13:48
Chipacazyga: ehcp, typo13:48
zygaehcp? :D13:48
Chipacazyga: boys' school stuff13:48
zygaah :)13:49
zygasuch a fancy name13:49
Chipacazyga: “education, health and care plan”13:49
Chipacai've got two of those every year, and a couple of "mini" ones every four months13:50
zygaembedded hampster cthulu party13:50
ChipacaJamieBennett: but the good news is, the other ones i thought were actually this month are in august instead \o/13:50
ChipacaSon_Goku: are the followup commits on snapd#3577 because it failed to actually work once it started actually trying to run tests?13:52
mupPR snapd#3577: packaging/fedora, tests: Fix build for snapd and enable a test for Fedora <Created by Conan-Kudo> <https://github.com/snapcore/snapd/pull/3577>13:52
Son_GokuChipaca: yes13:52
ChipacaSon_Goku: sorry if this sounds uppity, but i'm glad i asked for that then :-D13:52
Son_Gokucachio pointed them out to me13:52
* Son_Goku should also make a script to generate fancy from-git changelogs like the ones mvo does for debian packaging13:53
zygaSon_Goku: woot, thanks!13:53
Son_Gokuzyga: this doesn't fix everything, as there's still problems with the test suite13:53
Son_Gokuand spread is still being flakey13:53
zygaSon_Goku: but it moves a lot towards where it should be13:54
* Son_Goku shrugs13:54
Son_Gokuit was mentioned at the sprint that the spec wasn't working with git master13:54
zygaSon_Goku: I wanted to sync with downstream packaging but I wasted 15 hours on raspberry PIs and other SBC and my modem connection13:54
Son_Gokuand no one wanted to actually fix it, so I just pulled my pending changes and pushed them13:55
zygaSon_Goku: now I even have my desk assembled, soon will be back to operational status13:55
zygaSon_Goku: I love how you improved the packaging btw :13:55
zyga:)13:55
Son_Gokuwell, I was horrified by the mvo5 fork of seccomp-golang13:55
Son_Gokuthen I looked at the fork and was like, "nah, I don't care"13:55
Son_Gokuso I forced it back to mainline13:55
Son_Gokuthe benefits of not using vendored go deps :)13:56
zygaSon_Goku: I just send some review your way14:00
zygaSon_Goku: I think the quoting is off14:00
Son_GokuI ripped it from the original commit in a different PR14:01
Son_Gokuif it's wrong, I'll clean it up14:01
zygaSon_Goku: I think it's wrong14:02
zygaSon_Goku: try it out14:02
Son_Gokuyeah, I think it's wrong14:03
Son_Gokuzyga: done14:05
zygaSon_Goku: approved14:11
Son_Gokunow we wait for spread to fail14:11
* zyga moves modem contraption to the attic, offline for 5 minutes14:11
Son_Goku:)14:12
Saviqkalikiana_, hey, does this ring a bell http://pastebin.ubuntu.com/25068497/? same happens with container builds... the part is just nil plugin with some stage-packages...14:25
mupPR snapcraft#1402 closed: Better explain dependency link processing <Created by evandandrea> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/1402>14:33
fgimenezmvo: after adding the reboot all works fine with 2.26.9 on 14.04 http://paste.ubuntu.com/25068518/ \o/14:35
zyga:-)14:36
fgimenezmvo: i've tried with reexec both disabled (the default for the sru validation) and enabled, in this case only a few tests, the prepare step which was failing passes now14:36
jdstrandsergiusens, tyhicks: thanks to davidcalle, https://developer.ubuntu.com/en/snappy/guides/security-whitepaper/. This is a redirect to the new location at https://developer.ubuntu.com/core/documentation14:52
tyhicksvery nice14:53
cachioSon_Goku, you got another error about permission denied to install packages15:01
coreycbjdstrand: should the openstack auto-aliases should be enabled automatically at this point at install time? i'm on xenial with snapd 2.26.8.15:02
cachioSon_Goku, apply the change in tests/lib/pkgdb.sh from my P15:02
cachioR15:02
cachioSon_Goku, it is to fix that problem15:02
coreycbjdstrand: they don't appear to be, at least for keystone.  but first time using auto-aliases so could be a user error.15:02
Son_Gokuzyga told me to remove it :P15:02
Son_GokuI'll add it back in a bit15:02
Son_Gokuabout to drive15:02
cachioSon_Goku, I am gonna lunch, I'll be back in 20 minuteas15:03
=== cachio is now known as cachio_lunch
mvofgimenez: nice, so all tests looking good so far? great to hear15:05
fgimenezmvo: yep, to be extra sure i've triggered the full suite with reexec enabled and is good so far 121/17515:06
mvofgimenez: much appreciate your care on this, thank you15:08
fgimenezmvo: np, thank you for finding the solution!15:09
jdstrandcoreycb: they should be in effect. let me check something15:09
niemeyerLunch, biab15:09
pstolowskifgimenez, hey, I think you addressed the comments to #3489? if so I'm going to merge it15:17
fgimenezpstolowski: hey, let me check15:18
fgimenezpstolowski: indeed, the changes mentioned in the review were mistakingly done in spread.yaml, all fixed now15:19
pstolowskifgimenez, thanks15:20
fgimenezpstolowski: np thank you15:20
mupPR snapd#3489 closed: tests: add bluetooth-control interface test <Created by fgimenez> <Merged by stolowski> <https://github.com/snapcore/snapd/pull/3489>15:20
jdstrandcoreycb: there is a bug in the store that led me to enter the wrong snap declaration15:22
coreycbjdstrand: ah, ok15:22
jdstrandcoreycb: I'll followup with the store team15:22
coreycbjdstrand: sounds good, thanks15:23
=== JanC is now known as Guest50617
=== JanC_ is now known as JanC
jdstrandcoreycb: actually, strike that. it was only the snap declaration that was wrong. keystone should be fixed now15:27
coreycbjdstrand: cool i'll give it a shot15:27
Saviqsergiusens, hey, does this ring a bell http://pastebin.ubuntu.com/25068497/? same happens with container builds... the part is just nil plugin with some stage-packages...15:28
sergiusensno it really doesn't ring any bell. I can try that here... it only fails on containers? if it is a cleanbuild, add `--debug` at the end and you should get a shell15:32
jdstrandcoreycb: I just fixed glance, neutron and nova. nova-hypervisor was not affected. verified locally with snap install and 'snap aliases'15:36
jdstrandcoreycb: sorry for the hiccup15:36
coreycbjdstrand: np!  it's looking better.  going for a full deploy now. if you don't hear back from me i'm all good.15:38
=== cachio_lunch is now known as cachio
fgimenezi'm EOD'ing now, see you tomorrow o/16:12
untorehcan I disable seccomp in snapd ?16:49
Chipacauntoreh: tell me more16:50
untorehI am trying to run anbox and dmesg is dumping audit with sig=31 so I want to disable seccomp, anbox is using bpf16:51
mupPR snapd#3580 opened: store: configurable base api <Created by atomatt> <https://github.com/snapcore/snapd/pull/3580>16:55
Chipacauntoreh: anbox is only available as a devmode snap16:58
Chipacauntoreh: so the seccomp things are warnings only16:58
Chipacauntoreh: (if they weren't, your application would've been terminated)16:58
zygaChipaca: 31 is SIGSYS17:12
zygaChipaca: seccomp doesn't have advisory mode17:13
Chipacazyga: oh, i thought it did? bah :-(17:13
ogra_Chipaca, anboox is a classic snap ...17:13
Chipacanope17:13
ogra_well, the installer at least17:13
Chipaca  beta:      1-dev     (15) 357MB devmode17:13
Chipaca  edge:      3-7fc8bb4 (37) 357MB devmode17:13
Chipacazyga: i thought it had advisory mode, but not return-error-instead-of-dying mode17:16
Chipacashows how much i know about that side of things =)17:17
zygaChipaca: nope, it has kill or do nothing modes today17:17
zygawhere nothing includes not logging17:17
Chipacathen i don't know how untoreh is seeing what they're seeing17:17
Chipacamaybe they're installing it with --jailmode ?17:18
Chipacaanyhow, eod for me17:18
Chipacacuppa tea and guitar17:18
Chipacao/17:18
mupPR snapd#3505 closed: PLEASE IGNORE: Enabling main test suite for fedora <Created by morphis> <Closed by niemeyer> <https://github.com/snapcore/snapd/pull/3505>17:30
untorehthe installer is classic, andbox is dev17:33
untorehthe bpf profiles are @complain17:34
zygauntoreh: that is equal to no-op for now17:35
* zyga_ got routing metrics reversed18:48
zyga_now things actually should behave /o\18:48
zyga_why isn't home network not just "snap install smart-home-router"18:48
=== zyga_ is now known as zyga
cachioniemeyer, about the PR 3505 that you recently closed, I have all the test cases fixed for fedora19:36
cachioit is ok if I reopen this19:36
cachiothis PR has some overlap with the 357719:37
cachiothe idea is, once the 3577 is merged, then I'll remove the code to fix the building from the 3505 and then I'll propose it for reviewing19:37
mupPR snapd#3505 opened: PLEASE IGNORE: Enabling main test suite for fedora <Created by morphis> <https://github.com/snapcore/snapd/pull/3505>19:55

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!