/srv/irclogs.ubuntu.com/2017/08/04/#snappy.txt

zyga-archo/06:35
=== chihchun_afk is now known as chihchun
PhoenixMagehey zyga-arch06:52
zyga-archhey06:54
PhoenixMagewhat plugin can I use to manaully specify a config file06:54
zyga-archconfig file?06:54
PhoenixMageinstead of ./configure06:54
zyga-archwell, configure is not a config file :)06:55
zyga-archare you using the autotools plugin today?06:55
PhoenixMageSorry, I am lazy :P06:55
PhoenixMageI am for most things06:55
zyga-archif your project is using auto{conf,make} then that's the right way06:55
PhoenixMageI was going to compile openssl06:56
PhoenixMageIt uses ./config06:56
zyga-archif you have some other executable that is "autotools like" then you may need a custom plugin or just use the make plugin and write a makefile with all the rules06:56
zyga-archnot a perfect example but... https://github.com/zyga/python006:56
zyga-archthis uses makefile plugin to essentially do whatever you want06:57
zyga-archnote that openssl is probably in the core snap06:57
zyga-archso you may not want to build it06:57
PhoenixMageI can probably use stage-packages06:58
PhoenixMageCompiling samba says it cant find openssl07:00
=== chihchun is now known as chihchun_afk
zyga-archyou probably want openssl-dev package or something alike07:04
mwhudsonwaiting for travis for 7 hours on https://github.com/snapcore/snapd/pull/3639 now07:06
mupPR snapd#3639: update to version of golang.org/x/crypto currently in Debian unstable <Created by mwhudson> <https://github.com/snapcore/snapd/pull/3639>07:06
zyga-ubuntuhmm07:07
zyga-ubuntuodd07:08
zyga-ubuntuseems like travis bug07:08
PhoenixMageI thought that but openssl-dev doesnt exist anymore.. I'll have to track down the package07:08
zyga-ubuntumwhudson: since vendor.json conficted I'd suggest resolving the conflict and pushing over07:08
mwhudsonzyga-ubuntu: yeah fair enough07:08
PhoenixMagelibssl-dev I love consistency07:10
zyga-ubuntuopenssl is an empty dependency package07:11
zyga-ubuntuit depends on libssl1.0.007:11
zyga-ubuntus/empty/mostly empty/07:11
=== JanC is now known as Guest77859
=== JanC_ is now known as JanC
zyga-ubuntuondra: hey08:30
ondrazyga-arch hey08:56
ondrazyga-suse or here?08:57
zyga-ubuntuondra: commented and updated https://github.com/snapcore/snapd/pull/362408:58
mupPR snapd#3624: interfaces/builtin: rework for avahi interface <Created by kubiko> <https://github.com/snapcore/snapd/pull/3624>08:58
ondrazyga-ubuntu just saw it, good comments and sorry for test code, I used some existing test code, but I guess it's evolving all the time09:01
zyga-ubuntuthat's fine, I didn't expect anything else, the test code is really in disarray09:02
zyga-ubuntubut changing that globally takes some time, ~100 interfaces is a lot of tweaking09:02
* zyga-ubuntu just saw one more thing to weak09:02
zyga-ubuntufixed09:03
zyga-ubuntuok, what's next..09:05
zyga-ubuntuChipaca: 2nd review on https://github.com/snapcore/snapd/pull/3650 please09:05
mupPR snapd#3650: cmd/snap-confine: don't share /etc/nsswitch from host <Created by zyga> <https://github.com/snapcore/snapd/pull/3650>09:05
Chipacahadn't i already done this one?09:05
Chipacasorry09:06
zyga-ubuntumorphis_: do you have a sec to eyeball https://github.com/snapcore/snapd/pull/364909:06
mupPR snapd#3649: packaging: update arch packaging for 2.27 snapshot <Created by zyga> <https://github.com/snapcore/snapd/pull/3649>09:06
Chipacazyga-ubuntu: +109:06
zyga-ubuntuChipaca: thank you!09:06
morphis_zyga-ubuntu: let me check09:06
zyga-ubuntuChipaca: almost down to zero patches for arch :)09:06
Chipacazyga-ubuntu: I _had_ already done it, just forgotten to … you know, *do* do it09:06
zyga-ubuntuChipaca: 2.27.1 will be a nice release09:06
zyga-ubuntuhahaha09:06
zyga-ubuntu :D09:06
mupPR snapd#3650 closed: cmd/snap-confine: don't share /etc/nsswitch from host <Created by zyga> <Merged by zyga> <https://github.com/snapcore/snapd/pull/3650>09:07
zyga-ubuntuChipaca: btw, I read the chatter from last night and noticed you found the double utf8 encoding bug that broke assertions09:07
zyga-ubuntuChipaca: really nice and ouch!09:07
Chipacaharrumph09:08
pedronisit should be fixed now09:08
Chipacanothing nice about double encodes09:08
zyga-ubuntuhttps://github.com/snapcore/snapd/pull/3648 is simple as well09:09
mupPR snapd#3648: release: remove default from VERSION_ID <Created by zyga> <https://github.com/snapcore/snapd/pull/3648>09:09
pedronisChipaca: they fix was easy, but also totally python3 meet http and surrender09:09
zyga-ubuntupedronis: is the fix public to see somewhere?09:09
zyga-ubuntuor just ... to see somewhere?09:09
pedronisno09:09
pedronisanyway it was mostly  s/resp.txt/resp.contet/09:10
pedronis*content09:10
pedronis*text09:10
zyga-ubuntuaha09:10
zyga-ubuntuI see09:10
zyga-ubuntudjango?09:10
pedronisno09:10
morphis_zyga-ubuntu: done09:10
zyga-ubuntumorphis_: thank you09:11
pedronisrequests (I think)09:11
abeatohas anybody seen something like this before?:09:15
abeato$ snap refresh --beta --ignore-validation network-manager09:15
abeatoerror: cannot perform the following tasks:09:15
abeato- Mount snap "network-manager" (218) (installation not allowed by "core-support" plug rule of interface "core-support")09:15
zyga-ubuntumorphis_: replied, thank you, I'll iterate!09:16
* zyga-ubuntu needs to buy more than 4GB of ram09:17
zyga-ubuntumorphis_: will you have a sec to do one more? https://github.com/snapcore/snapd/pull/362209:24
mupPR snapd#3622: tests: enable regression, upgrade and completion test suites for fedora <Created by sergiocazzolato> <https://github.com/snapcore/snapd/pull/3622>09:24
morphis_zyga-ubuntu: if you review my snapd-xdg-open PR again :-)09:24
morphis_zyga-ubuntu: done09:26
zyga-ubuntumorphis_: I will, thank you!09:28
zyga-ubuntumorphis_: basically today I will do just code reviews09:28
morphis_:-)09:28
zyga-ubuntumorphis_: and I may iterate a little on this huge PR https://github.com/snapcore/snapd/pull/3617 to tweak it to my preference09:28
mupPR snapd#3617: Using udev tagging for snap interfaces <Created by adglkh> <https://github.com/snapcore/snapd/pull/3617>09:28
morphis_zyga-ubuntu: please talk with gerry before you do so09:29
morphis_he is actively working on that09:29
zyga-ubuntumorphis_: gerry is adglkh?09:33
morphis_yes09:33
zyga-ubuntumorphis_: is here around somewhere where I can talk?09:33
zyga-ubuntu(I never met him before)09:33
morphis_on slack :-)09:33
zyga-ubuntuuh09:34
morphis_asking him09:34
zyga-ubuntumorphis_: where is he from roughly (timezone)09:34
morphis_china09:34
zyga-ubuntumorphis_: and is he a canonical person?09:34
morphis_yes09:34
morphis_part of my team09:34
zyga-ubuntuwhy slack then? is irc blocked?09:34
zyga-ubuntumorphis_: if he can join here, please ask him09:34
zyga-ubuntuotherwise let me know how to join slack09:34
morphis_zyga-ubuntu: asked him to join here09:36
zyga-ubuntuthank you09:36
zyga-ubuntuI heard there is a crackdown on VPNs in china09:36
zyga-ubuntuso not sure how to talk to people there09:36
zyga-ubuntuwhy are you using slack currently?09:36
zyga-ubuntugary-wzl77: hey!09:37
zyga-ubuntugary-wzl77: nice to meet you, thank you for joining09:37
zyga-ubuntugary-wzl77: and thank you for working on fixing that huge udev issue, that's quite some work09:38
gary-wzl77zyga-ubuntu: Thanks for your code review.09:38
gary-wzl77Yes,  I was told by Simon that you have sth to check with me about udev tagging.09:38
zyga-ubuntugary-wzl77: I wanted to discuss a few ideas, mainly because that branch is huge (I'm still reviewing it)09:38
gary-wzl77sure09:38
zyga-ubuntugary-wzl77: and that I wanted to de-compose it into pieces09:38
zyga-ubuntugary-wzl77: if you don't mind me doing that I can work on the current state of the branch until the diff from there to master shinks to zero09:39
gary-wzl77Never mind :)09:39
gary-wzl77I'll submit changes later on per jamie's comments09:40
zyga-ubuntugary-wzl77: I'll start with your improvement to common interface, then to individual interfaces that can be simplified with it09:40
zyga-ubuntugary-wzl77: yes please, let's keep your PR open and iterating on the udev details09:41
zyga-ubuntugary-wzl77: I'll work on the side, proposing small branches that land in master and also merging master back into your branch09:41
gary-wzl77Nice .thanks09:41
zyga-ubuntugary-wzl77: so that it can shring in diff size09:41
zyga-ubuntugary-wzl77: and then we can hopefully get to the point where everyone agrees and we can just merge it09:41
gary-wzl77RE: Interface simplified09:41
gary-wzl77I spoke to Jamie about it and I've been bit reluctant to do it for complex interface like mir, docker, browser-support and alike09:42
zyga-ubuntugary-wzl77: I understand that given the nature of the bug we are in the red anyway until *all* the interfaces are fixed to use udev tagging09:42
zyga-ubuntugary-wzl77: so I think it's fine to fix interface-by-interface09:42
zyga-ubuntugary-wzl77: and even leave TODO/FIXME markers in things we know need love but are non-trivial to do09:43
gary-wzl77The reason is it will introduce a few code in common function(like connectedPlugAppArmor , connectedSlotAppArmor or permanent**) of commonInterface09:43
gary-wzl77That makes commonInterface a bit fat09:43
zyga-ubuntuthat's fine09:44
zyga-ubuntuit's there to make most of the interface code easy to reason about09:44
zyga-ubuntugary-wzl77: also, I recommend that you stick around on IRC (assuming it is not hard firewall-wise) and on the forum.snapcraft.io09:45
gary-wzl77sure:D09:45
zyga-ubuntugary-wzl77: ok, starting now10:29
gary-wzl77zyga-ubuntu: sure thing, I also left a comment about spread-test in snap-confine. Would you mind to take a look if you find time-slot.10:38
zyga-ubuntugary-wzl77: looking10:39
zyga-ubuntugary-wzl77: huh, git.launchpad.net/snap-confine should be dead10:41
zyga-ubuntugary-wzl77: which tests are you referring to?10:41
gary-wzl77zyga-ubuntu: just generic spread test in snap-confine folder, follow the guidance `make hack` and `run ./spread-prepare`10:50
gary-wzl77zyga-ubuntu: then we will have one dependency issue when building deb package along the way10:50
zyga-ubuntugary-wzl77: in the snapd repo, in snapd/cmd/snap-confine folder?10:51
zyga-ubuntuhmmm10:52
zyga-ubuntumake hack should never be used for spread testing10:52
zyga-ubuntucan you point me to the tests you are thinking about?10:52
gary-wzl77yes10:52
zyga-ubuntunote that the spread tests in snap confine sub-directory are *not* working and need porting10:52
gary-wzl77Okay, that's it10:52
gary-wzl77zyga-ubuntu: I saw a few changes that we submitted recently improving the spread test for each interface.10:58
gary-wzl77Probably we need some tweaks then after we land udev tagging feature10:59
zyga-ubuntudefinitely10:59
mupPR snapd#3657 opened: daemon, client, cmd/snap: implement snap start/stop/restart <Created by chipaca> <https://github.com/snapcore/snapd/pull/3657>11:05
* zyga-ubuntu -> food11:06
Chipacaso, I'm stopping for lunch, and then I need to take one of the boys to the doctor. PR of services ops #n is up, hopefully alright and this PM I'll be working on completion.11:09
* Chipaca out11:09
kjackal__Chipaca: ogra_: Hi again, do we have any news on https://bugs.launchpad.net/snappy/+bug/1687079 ?11:54
mupBug #1687079: cannot change profile for the next exec call: No such file or directory <Snappy:Confirmed> <https://launchpad.net/bugs/1687079>11:54
ogra_kjackal__, what would you expect as a fix beyond a more descriptive error (i doubt mainline will want to hardcode apparmor support) ?11:56
kjackal__ogra_: that bug spawned the discussion we had last week on having daemons wait for the completion of other services before they start up12:03
kjackal__ogra_: honestly I am not sure what the fix for the above bug should be12:04
ogra_oh, that one ... well, that discussion doesnt really look 100% related12:05
ogra_IIRC Chipaca offered to extend the systemd unit generation with options for that ...12:05
kjackal__ogra_: Chipaca: here is the problem we are facing: https://github.com/juju-solutions/bundle-canonical-kubernetes/issues/35712:05
ogra_(which should really be its own whishlist bug or even better a forum topic)12:05
ogra_kjackal__, better make it a forum thred, so it doesnt get lost12:07
ogra_*thread12:07
kjackal__ogra_: like this one: https://forum.snapcraft.io/t/snap-services-on-lxc-after-a-host-reboot/1470 ?12:08
ogra_yeaah12:09
ogra_(that doesnt reflect any of the IRC discussion though)12:10
ogra_(IIRC there was aan offer from Chipaca for a fix ... )12:10
kjackal__ogra_: Chipaca: we said we would setup a meeting next week with your architect, to discuss what we can do about this issue. If I am not mistaken daemons on lxd will not survive a reboot.12:12
ogra_kjackal__, right, but i think he didnt know that niemeyer is (kind of) off this week ...12:13
ogra_it would help if the findings from the discussion would be in the thread though ...12:13
ogra_that forum topic is as undescriptive as it can be (like the bug :) )12:14
ogra_we will need it to end up with a specification what has to be implemented in snapd etc12:15
ogra_(and how)12:15
kjackal__The issue on github is the point where we gather all the info on the incident. Should I link it to the topic?12:16
ogra_kjackal__, i changed the title of the topic ... https://forum.snapcraft.io/t/snap-services-on-lxc-after-a-host-reboot/147012:18
ogra_can you flesh the content out a bit more instead of talking about random snaps and bugs ... (like what do we want to achieve, what has been discussed and offered as possible implementation)12:18
ogra_it should look more like a spec in the end12:19
ogra_that way the snapd guys can just grab it, nod it off and start working on it12:20
kjackal__ok, thanks ogra_12:21
ogra_kjackal__, http://paste.ubuntu.com/25239691/ from my IRC logs12:21
zyga-ubuntukjackal__: which kernel are you using?12:34
ogra_zyga-ubuntu, not kernel related at all, see my paste12:36
ogra_(that linking of these bugs is totally confusing the issue)12:36
ogra_zyga-ubuntu, this is solely about snap services being able to wait for oother services to be up12:37
ogra_(essentially about allowing "After=*" in snapd units of snaps)12:38
zyga-ubuntuaha12:38
zyga-ubuntuok then, not my problem today :)12:38
* zyga-ubuntu gets back to interfaces12:38
ondrazyga-ubuntu double check changes I commented on, I'm not sure about two changes there12:39
zyga-ubuntuondra: thank you, I will in a moment12:41
ondrazyga-ubuntu I might be wrong, just double checking :)12:42
zyga-ubuntuChipaca: question, what kind of tab completion should I get out of http?12:43
zyga-ubuntuI don't see any12:43
abeatozyga- it possible to run a command from inside the snap inside the configure hook?12:44
abeatozyga-ubuntu,  it possible to run a command from inside the snap inside the configure hook?12:45
zyga-ubuntuondra: replied12:45
zyga-ubuntuabeato: which command?12:45
abeatozyga-ubuntu, like using nmcli inside network-manager's configure hook12:45
zyga-ubuntuabeato: all hooks are arbitrary programs, so you can run anything you can otherwise run, remember that you are confined, as usual12:45
zyga-ubuntuabeato: one restriction is you should not run snap's exposed apps via /snap/bin/snap.app again12:46
zyga-ubuntuabeato: instead just run them directly via $SNAP/bin/app12:46
abeatozyga-ubuntu, it is strange because I get permissions error that should not happen if running it as root :  https://pastebin.canonical.com/195195/12:47
zyga-ubuntuoh please not that one12:48
zyga-ubuntucan you repaste to normal one, I don't have my token handy12:48
abeatozyga-ubuntu, http://paste.ubuntu.com/25239783/12:49
zyga-ubuntuthank you, looking12:49
zyga-ubuntuabeato: can you show me the snap.yaml please?12:49
abeatozyga-ubuntu, http://paste.ubuntu.com/25239786/12:50
ogra_abeato, i suspect you need to connect all the interfaces the snap uses first12:50
abeatoogra_, they are connected12:51
zyga-ubuntuogra_: no, not that12:51
zyga-ubuntuabeato: so12:51
ogra_ok12:51
zyga-ubuntuabeato: notice that all the plugs are on the apps12:51
zyga-ubuntuabeato: the hooks don't get any12:51
abeatozyga-ubuntu, can I add plugs to the hooks?12:52
zyga-ubuntuyou need to either define a plug at the top level (where it applies to everything)12:52
niemeyerHelloooo12:52
ondrazyga-ubuntu not sure I follow12:52
zyga-ubuntuor also add a hooks section and add specific plugs to your hook12:52
zyga-ubuntuondra: look at that file, look at the symbols I replaced12:53
ogra_couldnt he call the apps as well ?12:53
abeatoaha, did not know that12:53
ondrazyga-ubuntu why do we need then avahiControlConnectedSlotAppArmor twice there?12:53
abeatozyga-ubuntu, thanks, that is useful :)12:53
zyga-ubuntuondra: before my replacements there were unused snippets12:53
zyga-ubuntuondra: looking12:53
ogra_(if the apps are connected, calling them should work as well, no ?)12:53
zyga-ubuntumaybe some silly mistake on my end12:53
zyga-ubuntuogra_: no12:53
zyga-ubuntuogra_: the hooks have no slots12:53
zyga-ubuntuogra_: according to that def12:53
ondrazyga-ubuntu and idea there was that control also includes rules from observe12:53
zyga-ubuntuoooooh12:53
zyga-ubuntuondra: I'm blind12:53
zyga-ubuntuI didn't see the +12:54
zyga-ubuntuthanks!12:54
ondrazyga-ubuntu so it does not need to be defined same again there12:54
zyga-ubuntuyes, I don't know how I missed that :)12:54
ogra_zyga-ubuntu, why would i need slots ... if i have an app "foobar" that has a plug connected, my hook shoud be able to use foobar12:54
zyga-ubuntuondra: still, I'm somewhat inclined to use a common one12:54
zyga-ubuntuand not do + on snippets12:54
zyga-ubuntujust call the helper twice12:54
ogra_(without any extra plugs or slots)12:54
ondrazyga-ubuntu don't worry I was staring at it for 5mins and even used string compare to make sure :D12:54
zyga-ubuntuogra_: sorry, I meant plugs12:54
zyga-ubuntuogra_: no, that's not how this is designed, the app may need super strong permissions12:55
ondrazyga-ubuntu ahh is that is possible then for sure calling helper twice is better12:55
zyga-ubuntuogra_: and the hook can be separate12:55
zyga-ubuntuogra_: like two apps can get two separate permissions12:55
ogra_is it any different to me executing the foobar app manually ?12:55
ondrazyga-ubuntu shall I do the change?12:55
zyga-ubuntuogra_: each hook and app can have a separate set of plugs12:55
zyga-ubuntuogra_: a plug is either connected or not12:55
ogra_hmm12:55
zyga-ubuntuogra_: but the application of that connection is not the same to all executables12:55
ogra_i wouldnt expect it to work like that as a consumer12:56
zyga-ubuntuogra_: whoever is making the snap can associate a particular app or hook with a particular set of plugs12:56
zyga-ubuntuogra_: so that you can do privilege separation inside one snap12:56
zyga-ubuntuogra_: where nmcli doesn't need the full power to run as network-manager12:56
zyga-ubuntuogra_: and the same thing applies to the hook12:56
zyga-ubuntuogra_: inside that snap only network manager itself needs that12:56
zyga-ubuntuogra_: the hook and the cli tool just need the permission to talk to it12:57
zyga-ubuntuogra_: depending on how you define a plug it is scoped to either everything in the snap (by defining a top-level plug)12:57
zyga-ubuntuogra_: or to a specific set of apps (by refering to a plug from their definitions)12:57
ogra_right, and i would expect that if the cli tool is connected i could call out from any script to it to run it ... even if that script was a hook12:57
zyga-ubuntuogra_: I think hooks have one more quirk but I'm not sure now12:57
zyga-ubuntuogra_: right but he's not calling the CLI tool12:57
zyga-ubuntuogra_: he's running the hook12:58
zyga-ubuntuand the hook runs as its own profile12:58
ogra_yes, what i suggested was calling the cli tool from the hook :)12:58
zyga-ubuntuogra_: and we don't allow profile transitions12:58
zyga-ubuntuogra_: note that the CLI tool has two "instances"12:58
zyga-ubuntuogra_: the /snap/bin/network-manager.cli (say) is one12:58
zyga-ubuntuogra_: and $SNAP/bin/nmcli is another12:58
zyga-ubuntuthat's the same executable12:58
zyga-ubuntubut two profiles12:58
zyga-ubuntuwell12:58
zyga-ubuntuone profile and one no-profile12:59
ogra_right12:59
zyga-ubuntuogra_: the one in /snap sets the profile12:59
zyga-ubuntu(in /snap/bin)12:59
ogra_and i as a user of it would expect that my script can use $SNAP/bin/nmcli12:59
zyga-ubuntuthe other one runs as whoever is running it (it inherits the profile)12:59
ogra_as long as all interfaces for it are cnnected12:59
zyga-ubuntuit can, but nmcli cannot talk to network manager because the hook doesn't have the permission to do so12:59
ogra_wether that script is a hook or some script in my lhomedir12:59
zyga-ubuntubecause as the user (developer of the snap really) that is what was specified12:59
ogra_that seems duplicated to me13:00
zyga-ubuntuI don't understand the script in homedir aspect13:00
zyga-ubuntuogra_: what exactly?13:00
ogra_the only person that can alter the hook is the developer of the snap anyway13:00
zyga-ubuntuogra_: it's like having two apps in a snap13:00
zyga-ubuntuand defining a plug on just one of them13:00
ogra_so why do we need double confinement here13:00
zyga-ubuntuthe other is not getting those permissions13:00
zyga-ubuntuthat's exactly what is going on here13:00
ogra_shipped apps should just be callable from a hook13:00
zyga-ubuntuogra_: it's not double confinement, it's *scoping* the confinement13:00
ogra_(as long as the app interfaces themselves are connected)13:00
zyga-ubuntuogra_: they *are* with the permissions of the *hook*13:01
zyga-ubuntuand a hook is just as any other pap13:01
zyga-ubuntu*app13:01
zyga-ubuntuit has permissions derived from the plugs that apply to it13:01
ogra_well, call it "wrapped confinement" then :)13:01
ogra_its an extra level ...13:01
zyga-ubuntuand the only problem is that the *hook* was not defined as needing that permission (no plug) so it didn't et them13:01
ogra_and i dont get why we'd need that13:01
zyga-ubuntuno, you don't understand13:01
zyga-ubuntuthe hook is not calling /snap/bin/nmcli13:02
zyga-ubuntuif it did there would be a different message13:02
zyga-ubuntuthat this is not allowed13:02
niemeyerChipaca, zyga-ubuntu: standup13:02
zyga-ubuntuoh13:02
zyga-ubuntusorry13:02
zyga-ubuntujoiuning13:02
zyga-ubuntuogra_: let's discuss this later13:02
ogra_i have one level of confinement in the app ... and another layer on top for the hook ... but i'm also the owner of the snap so i dont see the need for the extra confinement in the hook (just adds extra work for me to define additional slot/plug connections ... i have the power to do so anyway but need to separately declare it)13:03
ogra_zyga-ubuntu, yeah13:03
ondrazyga-ubuntu I just pushed change, let me know if this is better way13:05
ogra_nessita_, since you transferred the orangepi-zero gadget i have a giant red "REVOKED" at the top of my dashboard, is there any way to get rid of the snap from my dashboard oveview ?13:09
zyga-ubuntuondra: thank you, I'll check after the call13:11
ondrazyga-ubuntu thanks :)13:13
zyga-ubuntuogra_: those are not levels, those are scopes, each app and hook has its own confinement, you don't get any nested confinement in any place13:13
ogra_well, i need to declare confinement stuff twice when wanting to use foobar in my hook ... once for foobar itself and once for the hook13:14
ogra_what i mean is that any apps shipped inside the snap shouldnt require that to use them from the hook of the same snap13:14
zyga-ubuntuyou *never* apply the conifnement to binaries in the snap13:15
zyga-ubuntuyou only apply them to launchers (the command: section in each app)13:16
ogra_yes13:18
ogra_and my hook should be able to use them from the launchers ... thats what i mean13:19
ogra_without having to specify any additional confinement13:19
zyga-ubuntuit can, that's never the problem, the problem is that they cannot do what they want because how would we know what they need?13:22
zyga-ubuntuyou can *exec* each binary in your snap13:22
ogra_no, then the interfaces for the app dont apply13:22
zyga-ubuntunmcli talks over dbus with network-manager13:22
zyga-ubuntubinary != app13:22
zyga-ubuntuapp is a command13:22
zyga-ubuntuwhat if I have two apps13:22
zyga-ubuntuthat run one binary13:22
zyga-ubuntuwith two different options13:23
ogra_right and there is an interface that applied if i call it as /snap/bin/nmcli13:23
zyga-ubuntuand two different permissions?13:23
ogra_*applies13:23
zyga-ubuntuyes but you cannot call that from inside a snap, that's explicitly denied13:23
ogra_instead of $SNAP/usr/bin/nmcli directly13:23
ogra_yes13:23
ogra_and thats what i'm debating ;)13:23
zyga-ubuntuthat /snap/bin/nmcli should be allowed?13:23
ogra_an app shipped inside my own snap shouldnt be denied when called from inside that same snap13:23
ogra_so that i can use it from a hook without having to jump through hoops13:24
zyga-ubuntuman, that's not the problem13:24
zyga-ubuntuone sec13:24
ogra_indeed the dbus interface still needs to be connected for the app13:24
ogra_(which my hook cant do)13:24
zyga-ubuntuogra_: http://pastebin.ubuntu.com/25239924/13:26
ogra_yeah13:26
zyga-ubuntuogra_: what permissions would you expect to see if the hook runs bin/foo?13:26
ogra_well, my hook should run /snap/bin/a (or b)13:26
ogra_and the normal confinement for a or b should apply13:26
ogra_so that my hook doesnt need any different or separate confinement13:27
zyga-ubunturight13:27
zyga-ubuntuthat I agree with13:27
zyga-ubuntubut this is not allowed today for a few reasons13:27
ogra_and in that case the answer to alfonso above would have been use /snap/bin/nmcli and be done13:28
ogra_the thing is that the person writing the hook has the power to allow this anyway ...13:28
ogra_but needs to jump through more hoops by defining interfaces for the hook today13:28
ogra_apps declared in my snapcraft.yaml shoudl just be usable from my hook without extra work ... thats the point i'm making :)13:29
zyga-ubuntuogra_: right, and that's, as I said, not allowed for a few reason13:30
zyga-ubuntu*reasons13:30
ogra_i dont see any security advantage of the current model13:30
zyga-ubuntuthe primary reason was that it would be tempting to run run stuff from another snap13:30
zyga-ubuntuand at the point when snap-confine runs we don't have a way to reject just those13:31
ogra_well13:31
ogra_i didnt say ""allow calling something from another snap"13:31
ogra_just within the same snap13:31
zyga-ubunturight, but at the time the request comes in there's not enough context to decide13:31
zyga-ubuntuso we reject all of them13:31
ogra_if the app and hook are inside the same ...13:31
zyga-ubuntuand we're back to square one13:31
ogra_ah13:31
ogra_so we'll need meore context :)13:32
ogra_*more13:32
niemeyerpopey: ping13:32
zyga-ubuntuondra: looks good, thank you for noticing :)13:35
ondrazyga-ubuntu thank  you for helping me with PR :)13:35
cachioogra_, I try to configure my pi3 and I see -> Can’t find valid F2FS filesystem in 1th/sth superblock13:39
cachioany idea?13:41
ogra_cachio, thats nothing bad ... just the kernel looping over filesystems13:46
cachiook13:46
cachioogra_, tx13:46
ogra_like it also does for ext2 and ext before it actually mounts an ext4 FS13:46
ogra_*for ext2 and ext313:47
ogra_that also spills some ugly messages13:47
bub_Humm, how do I install X?13:47
bub_X Window.. or some displayservice..13:47
ogra_you mean on UbuntuCore ?13:48
ogra_you cant13:48
ogra_there is not way X ever matches the security model13:48
bub_Aha, haha..13:48
ogra_there is a mir-kiosk snap that you can use for having kiosk apps (standalone fullscreen app)13:48
bub_yeah right, but no way we're going to get Qt with its graphiclibraries run on Ubuntu Core then I Guess13:49
bub_s/Guess/guess13:49
ogra_but indeed your app then needs to support mir13:49
ogra_Qt runs fine on mir-kiosk13:49
popeyniemeyer: heya.13:49
ogra_in fact the demo apps are all Qt13:49
popeyniemeyer: i guess i scheduled the meeting too early?13:49
niemeyerpopey: Yo13:49
niemeyerpopey: No, I was the one screwing up, sorry13:49
niemeyerpopey: Do you want to have a quick catch up now?13:50
bub_ok, so mir-kiosk might save us.. tyty13:50
ogra_bub_, the guys in #ubuntu-mir might know more details13:51
popeyniemeyer: unfortunately I'm a busy for the next 2.5 hours. After that? 16:30 UTC?13:51
niemeyerpopey: Deal13:51
popeyniemeyer: invite sent13:52
niemeyerpopey: Thanks, talk soon13:53
zyga-ubuntuChipaca: hey13:58
zyga-ubuntuaround?13:58
zyga-ubuntuhttps://github.com/snapcore/snapd/pull/365813:58
mupPR snapd#3658: interfaces: add common support for udev <Created by zyga> <https://github.com/snapcore/snapd/pull/3658>13:58
zyga-ubuntuanyway, some small PR for quick landing, I'll iterate on next part13:58
mupPR snapd#3658 opened: interfaces: add common support for udev <Created by zyga> <https://github.com/snapcore/snapd/pull/3658>13:58
cachioogra_, when I insert the sdcard it I showing a disk on /dev/mmcblk014:09
cachioogra_, but not /dev/mmcblk0p014:09
cachiois that a problem?14:09
cachioit has two partitions p1 and p2 instead14:10
zyga-ubuntugary-wzl77: around?14:12
zyga-ubuntuwell, probably not on Friday14:12
Chipacazyga-ubuntu: http's tab completer for bash is rather poor, it only offers options (i.e. type -, hit tab)14:13
* zyga-ubuntu checks14:13
zyga-ubuntunothing14:13
mupPR snapd#3659 opened: tests: fix install-hook test failure <Created by stolowski> <https://github.com/snapcore/snapd/pull/3659>14:13
zyga-ubuntuis that a thing that's out in stable core?14:13
Chipacazyga-ubuntu: have you sourced complete.sh?14:13
zyga-ubuntuChipaca: where is it?14:13
Chipacazyga-ubuntu: /snap/core/current/usr/lib/snapd/complete.sh14:14
pstolowskicachio, ^ fix for the install-hook test failure, for master first. i'll propose fix for 2.27 too if that makes sense?14:14
zyga-ubuntuah14:14
zyga-ubuntuChipaca: right14:14
zyga-ubuntuwe need "re-exec" for that14:14
zyga-ubuntuthanks14:14
ogra_cachio, what would you expect 0p0 to be ? :)14:14
Chipacazyga-ubuntu: we wha?14:14
zyga-ubuntuChipaca: sourced but nothing14:14
zyga-ubuntuChipaca: (let's talk reexec later)14:14
Chipacazyga-ubuntu: complete -p http14:14
Chipacazyga-ubuntu: your trying it before probably loaded _minimal in there14:14
ogra_cachio, /dev/mmcblk0 is the device ... /dev/mmcblk0p1 is system-boot and /dev/mmcblk0p2 is writable ...14:14
zyga-ubuntucomplete -F _minimal http14:15
Chipacazyga-ubuntu: in which case, complete -r http14:15
Chipacazyga-ubuntu: and try agian14:15
ogra_cachio, partitioning starts to count at 1 not at 014:15
ogra_so it should all be fine as is14:15
cachioogra_, ok, it was appearing p014:15
ogra_that would be a massive kernel bug :)14:15
zyga-ubuntuChipaca: that said:14:16
zyga-ubuntuzyga@fyke:~/go/src/github.com/snapcore/snapd/interfaces/builtin$ complete -r h14:16
zyga-ubuntubash: complete: h: brak definicji dla uzupełnienia14:16
zyga-ubuntu(I set locale to english but... well)14:16
gary-wzl77zyga-ubuntu: yeah, still here :D14:16
ogra_ogra@pi3:~$ cat /proc/partitions |grep mmc14:16
ogra_ 179        0    3921920 mmcblk014:16
ogra_ 179        1     131072 mmcblk0p114:16
ogra_ 179        2    3789779 mmcblk0p214:16
zyga-ubuntu"no definitions for completion"14:16
zyga-ubuntugary-wzl77: ah, nice, can you please have a look at14:16
zyga-ubuntuhttps://github.com/snapcore/snapd/pull/365814:16
mupPR snapd#3658: interfaces: add common support for udev <Created by zyga> <https://github.com/snapcore/snapd/pull/3658>14:16
Chipacazyga-ubuntu: literally h, or http?14:16
zyga-ubuntuChipaca: that was a typo, I did write http14:17
gary-wzl77zyga-ubuntu: sure14:17
zyga-ubuntuzyga@fyke:~/go/src/github.com/snapcore/snapd/interfaces/builtin$ complete -r http14:17
zyga-ubuntubash: complete: http: brak definicji dla uzupełnienia14:17
cachioogra_, ok, just trying to understand why it is showing the message that I told you before14:17
Chipacazyga-ubuntu: and complete -p http?14:17
ogra_cachio, hmm, perhaps if you format the raw device instead of partitioning it at all you might get a p0 ... i never did such insanity ... (but could be that cameras or some such do that)14:17
zyga-ubuntu"przed wyruszenie w podróż należy zebrać drużyne"14:17
zyga-ubuntuChipaca: -p says the same thing14:17
Chipacazyga-ubuntu: ok so you dropped the _minimal definition14:18
Chipacaum14:18
Chipacazyga-ubuntu: do you have two shells open and did the other -p in the other one?14:18
cachioogra_, ok, just I wanted to make sure there was not an error on there14:18
zyga-ubuntuChipaca: no, it's all in one shell14:18
ogra_no, the system SD should always have p1 and p214:18
zyga-ubuntuzyga@fyke:~/go/src/github.com/snapcore/snapd/interfaces/builtin$ snap version14:18
zyga-ubuntusnap    2.26.1414:18
zyga-ubuntusnapd   2.26.1414:18
zyga-ubuntuseries  1614:18
zyga-ubuntuubuntu  16.0414:18
zyga-ubuntukernel  4.8.0-58-generic14:18
zyga-ubuntuin case this is relevant14:18
Chipacazyga-ubuntu: ok, what does “type _complete_from_snap” say14:19
zyga-ubuntutons of stuff14:19
zyga-ubuntuthe good thing14:19
Chipacazyga-ubuntu: good14:19
mupPR snapd#3633 closed: overlord/devicestate: fix, don't assume that the serial is backed by a 1-key chain <Created by pedronis> <Merged by pedronis> <https://github.com/snapcore/snapd/pull/3633>14:19
Chipacazyga-ubuntu: so now http -<tab> should do something14:19
zyga-ubuntuit's a function with the code14:19
zyga-ubuntunope :)14:19
zyga-ubuntuit doesn't14:19
zyga-ubuntuwhat are we missing? :)14:19
Chipacazyga-ubuntu: what revision of http do you have?14:20
zyga-ubuntu2114:20
Chipacazyga-ubuntu: what does “complete -p http” say _now_?14:21
zyga-ubuntuno definitions14:21
Chipacazyga-ubuntu: what does “complete -p -D” say?14:21
zyga-ubuntubash: complete: _DefaultCmD_: brak definicji dla uzupełnienia14:21
zyga-ubuntu(little by little I can teach you polish)14:21
Chipacadouble to the you to the eff14:21
Chipacazyga-ubuntu: ok, so, start a new shell14:22
zyga-ubuntureday14:22
zyga-ubuntuready*14:22
Chipacazyga-ubuntu: complete -p -D14:22
zyga-ubuntucomplete -F _completion_loader -D14:22
Chipacazyga-ubuntu: now, source complete.sh14:22
Chipacazyga-ubuntu: note: source, not run, source14:23
zyga-ubuntuk14:23
zyga-ubuntudone14:23
Chipacazyga-ubuntu: complete -p -D14:23
zyga-ubuntucomplete -F _complete_from_snap_maybe -D14:23
Chipacazyga-ubuntu: http -<tab>14:23
zyga-ubuntunothing14:23
Chipacazyga-ubuntu: tab again14:23
zyga-ubuntuI'm tab-tab-tabbing14:23
zyga-ubuntunothing14:23
Chipacazyga-ubuntu: AGAIN14:23
* Chipaca throws things14:24
zyga-ubuntu12s of times actually14:24
* zyga-ubuntu hugs chipaca14:24
zyga-ubuntuwanna hangout?14:24
zyga-ubuntucan it be locale somewhere14:24
Chipacazyga-ubuntu: complete -p -D ?14:24
zyga-ubuntuor something like14:24
zyga-ubuntucomplete -F _complete_from_snap_maybe -D14:24
Chipacazyga-ubuntu: set -x14:24
Chipacazyga-ubuntu: http -<tab><tab>14:24
zyga-ubuntustuff flies14:24
zyga-ubuntuvery chatty14:25
Chipacazyga-ubuntu: _what_ stuff14:25
zyga-ubuntuwanna see?14:25
zyga-ubuntusec14:25
Chipacazyga-ubuntu: set +x now, for sanity14:25
Chipaca;-)14:25
Chipacazyga-ubuntu: please14:25
zyga-ubuntuhttp://pastebin.ubuntu.com/25240232/14:25
zyga-ubuntugary-wzl77: if that looks ok to you +1 it please14:26
zyga-ubuntugary-wzl77: I tweaked some things14:26
zyga-ubuntuI'll merge this into your branch and start iterating on interfaces (I did one as a sanity check)14:26
Chipacazyga-ubuntu: that pastebin makes no sense to me14:27
zyga-ubuntuChipaca: welcome to my world14:27
zyga-ubuntuat least you understand some of it14:28
Chipacazyga-ubuntu: ok, try this14:28
Chipacazyga-ubuntu: complete -F _complete_from_snap http14:28
zyga-ubuntuempty14:28
zyga-ubuntutechnically14:28
zyga-ubuntu$ complete -F _complete_from_snap http14:28
zyga-ubuntu+ complete -F _complete_from_snap http14:28
zyga-ubuntu(nothing else)14:28
Chipacazyga-ubuntu: set +x14:29
zyga-ubuntunow really empty14:29
Chipacazyga-ubuntu: does http -<tab> do stuff now?14:29
zyga-ubuntuYES!14:29
zyga-ubuntuwow14:29
zyga-ubuntuwhat changed?14:29
zyga-ubuntuI see some denials14:29
Chipacazyga-ubuntu: could you pastebin “type _complete_from_snap_maybe”?14:29
zyga-ubuntubut it completes14:29
zyga-ubuntuhttp://pastebin.ubuntu.com/25240249/14:30
Chipacazyga-ubuntu: and could you confirm that complete -p -D is still _complete_from_snap_maybe?14:30
zyga-ubuntusie 04 16:29:25 fyke kernel: audit: type=1400 audit(1501856965.430:1150): apparmor="DENIED" operation="open" profile="snap.http.http" name="/etc/init.d/" pid=13425 comm="bash" requested_mask="r" denied_mask="r" fsuid=1000 ouid=014:30
zyga-ubuntu(unrelated denial)14:30
zyga-ubuntunope14:30
zyga-ubuntu$ complete -p -D14:30
zyga-ubuntubash: complete: _DefaultCmD_: brak definicji dla uzupełnienia14:30
ChipacaWTF14:30
zyga-ubuntu(in the same terminal)14:30
zyga-ubuntuand it still completes OK14:30
Chipacayes now it's completing because of the -F14:31
Chipacait's not going via the default14:31
zyga-ubuntuaha14:31
Chipacazyga-ubuntu: ok, so now14:31
Chipacazyga-ubuntu: compelte -r http14:31
Chipacacomplete*14:31
zyga-ubuntuempty (typo corrected)14:31
Chipacazyga-ubuntu: complete -F _complete_from_snap_maybe -D14:31
zyga-ubuntuempty as well14:31
Chipacazyga-ubuntu: does that end up with http -<tab> working again?14:31
zyga-ubuntuit still works14:32
zyga-ubuntuit didn't break since I said *wow*14:32
Chipacazyga-ubuntu: something is removing the default completer14:32
Chipacazyga-ubuntu: (that's the -D one)14:33
Chipacazyga-ubuntu: so if “complete -p -D” says there's no uzupełnienia, it's bad14:33
zyga-ubuntuthat says14:33
zyga-ubuntucomplete -F _complete_from_snap_maybe -D14:33
Chipacazyga-ubuntu: something's unuzupełnieniaing it!14:33
zyga-ubuntu:') grammar14:34
Chipacazyga-ubuntu: the great unuzupełnieniator!14:34
zyga-ubuntuhahaha14:34
Chipacazyga-ubuntu: why “fyke” btw?14:34
zyga-ubuntufyke is my x25014:34
zyga-ubuntufaroe is my t43014:35
Chipacazyga-ubuntu: i mean, it's a bag net for catching fish14:35
Chipaca(in english i mean)14:35
zyga-ubuntuoh, I just pulled this out of the witcher 3 locations map14:35
Chipacaah :) ok14:35
zyga-ubuntuhttp://witcher.wikia.com/wiki/Fyke_Isle14:36
Chipacak14:36
Chipacaanyway, somehting needs fixing, but not sure what14:36
Chipacai'll dig into it14:36
zyga-ubuntu(read that description)14:36
zyga-ubuntuit's fun :D14:36
Chipacai've got a suspicion that needs checking out14:36
gary-wzl77zyga-ubuntu: I left one comment. please take a look.14:36
zyga-ubuntugary-wzl77: thank you, looking now14:37
cachioniemeyer, I am planning to try a way yo reproduce the error on the reboot for ubuntu-core on linode, are you going to be available this afternon?14:38
zyga-ubuntugary-wzl77: replied, thanks!14:38
zyga-ubuntuChipaca: I feel like getting a coffee14:38
zyga-ubuntudo you need me now or can I just go>14:39
niemeyercachio: Yeah, I have meetings early on, but then I'm available til the end of the day14:39
zyga-ubuntuChipaca: and if you can +1 I'll land and iterate on some stuff14:39
zyga-ubuntuhttps://github.com/snapcore/snapd/pull/365814:39
mupPR snapd#3658: interfaces: add common support for udev <Created by zyga> <https://github.com/snapcore/snapd/pull/3658>14:39
cachioniemeyer, good, I'll ping you once I reproduce the error14:39
zyga-ubuntuChipaca: and as for http itself, it would be great to make it not read /etc/init.d/14:40
zyga-ubuntuChipaca: ok, I'm really going now, I'll be online in 20 minutes14:41
zyga-ubuntujust need to go downstairs to make the coffee there14:41
gary-wzl77zyga-ubuntu: Since we added kvm interface lately,  I'll update it to use my version of UDevConnectedPlug for the time being.14:43
gary-wzl77zyga-ubuntu: And will make some tweaks later after you PR is merged into master.14:43
cachioogra_, getting the resize problem again https://paste.ubuntu.com/25240332/14:44
cachiodoes it help¡14:44
cachio?14:44
cachioit is in the pi314:46
ogra_cachio, i dont see a problem there (just normal fs corrections) ... what do "df -h" and "sudo sgdisk -p /dev/mmcblk0" show ?14:46
ogra_(and did you make sure the SD isnt mounted when dd*ing it ... etc etc ... )14:46
mupPR core#38 closed: Add another pi-config option <Created by sergey-borovkov> <https://github.com/snapcore/core/pull/38>14:48
mupPR core#48 closed: add support for `snap set core proxy.{http,https,ftp,all}` <Created by mvo5> <https://github.com/snapcore/core/pull/48>14:48
cachioogra_, https://paste.ubuntu.com/25240354/14:48
cachioogra_, I'll try again14:48
ogra_cachio, right, your partition table is broken once again ..14:48
mupPR core#38 opened: Add another pi-config option <Created by sergey-borovkov> <https://github.com/snapcore/core/pull/38>14:49
mupPR core#48 opened: add support for `snap set core proxy.{http,https,ftp,all}` <Created by mvo5> <https://github.com/snapcore/core/pull/48>14:49
mupPR core#49 opened: more detailed build instructions <Created by ogra1> <https://github.com/snapcore/core/pull/49>14:49
mupPR # closed: snapd#2807, snapd#2837, snapd#3120, snapd#3260, snapd#3346, snapd#3372, snapd#3398, snapd#3456, snapd#3478, snapd#3484, snapd#3499, snapd#3502, snapd#3520, snapd#3524, snapd#3526, snapd#3556, snapd#3560, snapd#3565, snapd#3568, snapd#3569, snapd#3571, snapd#3573, snapd#3581,14:49
mupsnapd#3585, snapd#3586, snapd#3590, snapd#3593, snapd#3594, snapd#3604, snapd#3616, snapd#3617, snapd#3621, snapd#3622, snapd#3624, snapd#3625, snapd#3632, snapd#3635, snapd#3636, snapd#3639, snapd#3641, snapd#3642, snapd#3643, snapd#3648, snapd#3649, snapd#3657, snapd#3658, snapd#365914:49
mupPR core#48 closed: add support for `snap set core proxy.{http,https,ftp,all}` <Created by mvo5> <https://github.com/snapcore/core/pull/48>14:50
mupPR core#49 closed: more detailed build instructions <Created by ogra1> <https://github.com/snapcore/core/pull/49>14:50
mupPR # opened: snapd#2807, snapd#2837, snapd#3120, snapd#3260, snapd#3346, snapd#3372, snapd#3398, snapd#3456, snapd#3478, snapd#3484, snapd#3499, snapd#3502, snapd#3520, snapd#3524, snapd#3526, snapd#3556, snapd#3560, snapd#3565, snapd#3568, snapd#3569, snapd#3571, snapd#3573, snapd#3581,14:50
mupsnapd#3585, snapd#3586, snapd#3590, snapd#3593, snapd#3594, snapd#3604, snapd#3616, snapd#3617, snapd#3621, snapd#3622, snapd#3624, snapd#3625, snapd#3632, snapd#3635, snapd#3636, snapd#3639, snapd#3641, snapd#3642, snapd#3643, snapd#3648, snapd#3649, snapd#3657, snapd#3658, snapd#365914:50
mupPR core#38 opened: Add another pi-config option <Created by sergey-borovkov> <https://github.com/snapcore/core/pull/38>14:52
mupPR core#49 opened: more detailed build instructions <Created by ogra1> <https://github.com/snapcore/core/pull/49>14:52
mupPR core-build#11 closed: remove cruft from the writable-paths <Created by mvo5> <https://github.com/snapcore/core-build/pull/11>14:54
mupPR # closed: snapcraft#1277, snapcraft#1298, snapcraft#1302, snapcraft#1313, snapcraft#1346, snapcraft#1348, snapcraft#1364, snapcraft#1382, snapcraft#1387, snapcraft#1388, snapcraft#1392, snapcraft#1395, snapcraft#1399, snapcraft#1407, snapcraft#1412, snapcraft#1414, snapcraft#1417,14:55
mupsnapcraft#1419, snapcraft#1420, snapcraft#1425, snapcraft#1427, snapcraft#1428, snapcraft#1429, snapcraft#1430, snapcraft#1432, snapcraft#143514:55
ogra_cachio, perhaps you should file a bug and assign it to me to add more stuff to that log (i think it should perhaps run dh -f and sgdisk -p after the resize and dump that data into the log too )14:56
mupPR # closed: snapd#2807, snapd#2837, snapd#3120, snapd#3260, snapd#3346, snapd#3372, snapd#3398, snapd#3456, snapd#3478, snapd#3484, snapd#3499, snapd#3502, snapd#3520, snapd#3524, snapd#3526, snapd#3556, snapd#3560, snapd#3565, snapd#3568, snapd#3569, snapd#3571, snapd#3573, snapd#3581,14:56
mupsnapd#3585, snapd#3586, snapd#3590, snapd#3593, snapd#3594, snapd#3604, snapd#3616, snapd#3617, snapd#3621, snapd#3622, snapd#3624, snapd#3625, snapd#3632, snapd#3635, snapd#3636, snapd#3639, snapd#3641, snapd#3642, snapd#3643, snapd#3648, snapd#3649, snapd#3657, snapd#3658, snapd#365914:56
ogra_hmpf ... mup going mad again ?14:57
mupPR core-build#11 opened: remove cruft from the writable-paths <Created by mvo5> <https://github.com/snapcore/core-build/pull/11>14:57
mupPR # opened: snapd#2807, snapd#2837, snapd#3120, snapd#3260, snapd#3346, snapd#3372, snapd#3398, snapd#3456, snapd#3478, snapd#3484, snapd#3499, snapd#3502, snapd#3520, snapd#3524, snapd#3526, snapd#3556, snapd#3560, snapd#3565, snapd#3568, snapd#3569, snapd#3571, snapd#3573, snapd#3581,14:57
mupsnapd#3585, snapd#3586, snapd#3590, snapd#3593, snapd#3594, snapd#3604, snapd#3616, snapd#3617, snapd#3621, snapd#3622, snapd#3624, snapd#3625, snapd#3632, snapd#3635, snapd#3636, snapd#3639, snapd#3641, snapd#3642, snapd#3643, snapd#3648, snapd#3649, snapd#3657, snapd#3658, snapd#365914:57
mupPR # closed: snapd#2807, snapd#2837, snapd#3120, snapd#3260, snapd#3346, snapd#3372, snapd#3398, snapd#3456, snapd#3478, snapd#3484, snapd#3499, snapd#3502, snapd#3520, snapd#3524, snapd#3526, snapd#3556, snapd#3560, snapd#3565, snapd#3568, snapd#3569, snapd#3571, snapd#3573, snapd#3581,14:58
mupsnapd#3585, snapd#3586, snapd#3590, snapd#3593, snapd#3594, snapd#3604, snapd#3616, snapd#3617, snapd#3621, snapd#3622, snapd#3624, snapd#3625, snapd#3632, snapd#3635, snapd#3636, snapd#3639, snapd#3641, snapd#3642, snapd#3643, snapd#3648, snapd#3649, snapd#3657, snapd#3658, snapd#365914:58
=== ogra_ is now known as ogra
* ogra holds the flyswatter over mup's head ...15:01
mupPR core-build#11 opened: remove cruft from the writable-paths <Created by mvo5> <https://github.com/snapcore/core-build/pull/11>15:01
mupPR # opened: snapd#2807, snapd#2837, snapd#3120, snapd#3260, snapd#3346, snapd#3372, snapd#3398, snapd#3456, snapd#3478, snapd#3484, snapd#3499, snapd#3502, snapd#3520, snapd#3524, snapd#3526, snapd#3556, snapd#3560, snapd#3565, snapd#3568, snapd#3569, snapd#3571, snapd#3573, snapd#3581,15:01
mupsnapd#3585, snapd#3586, snapd#3590, snapd#3593, snapd#3594, snapd#3604, snapd#3616, snapd#3617, snapd#3621, snapd#3622, snapd#3624, snapd#3625, snapd#3632, snapd#3635, snapd#3636, snapd#3639, snapd#3641, snapd#3642, snapd#3643, snapd#3648, snapd#3649, snapd#3657, snapd#3658, snapd#365915:01
ogra:P15:02
Chipacaogra: thank you15:03
Chipacadoes this mean github is down again?15:04
ograseems fine for my own branches15:21
ograand i can open snapcore ones as well ... (at least via the website)15:21
Saviqhey all, can build.snapcraft.io accept a pre-existing snap name? one that I am a collaborator for?15:25
SaviqI've tried to register https://github.com/MirServer/mir-kiosk-apps, but it says mir-kiosk-apps is already taken and I may file a claim...15:27
ograwell if you want to take it over, file a claim15:27
ograif you just want to upload ... just do it without claiming the name15:28
Saviqogra: how do I do this with build.snapcraft.io? the repo is shown as "Not registered", when trying to register, it tells me that it's taken15:37
ograhmm15:42
ograthats a  question for evan ... who isnt much on IRC anymore recenly15:42
ogratry opening a forum thread i guess15:42
ogra(and ping him there)15:43
Saviqthanks, did so15:48
cachioogra, after make snap refresh and reboot in the pi 3 I see this in the screen https://paste.ubuntu.com/25240921/16:17
cachiois it normal?16:18
pstolowskicachio, do need that fix for install-hook test for 2.27? or only master?16:18
ogracachio, i have this with one SD card that is completely worn out due to too many write cycles to the bootloader config (it used to be my development card where i tested stuff and changed the config like ten times a day) ... smells like the SD is done (at least for booting, i guess you can use it fine in a camera for saving pictures still)16:18
pstolowski*do we*16:18
cachiopstolowski, if it is possible to add that to the nect RC should be great16:19
pstolowskicachio, sure, np, i'll propose a PR16:19
cachiopstolowski, great16:19
cachioogra, ok, I'll try with another one16:20
ogracachio, do you have that card in use for testing for long already ?16:20
cachioogra, no so much16:20
ograhmm16:20
cachioogra, https://paste.ubuntu.com/25240943/16:21
cachiothen I see this16:21
ograyeah16:21
ograthats notmal if it cant find any config anymore16:21
ograthe uboot.env is corrupt16:21
ogra*normal16:21
cachioogra, ok, I'll try with another sdcard in that case16:21
* cachio will need to buy new sd cards soon16:22
ograthe prob here is that the uboot.env always sits at the same sector on the card ... and if you re-write it a lot it gets worn out (that wont happen in nromal use )16:22
cachioogra, ok, that makes sense16:23
ograwhat you see there is just the hardcoded default boot process of uboot16:23
ogra(it falls back to netbooting )16:23
pstolowskicachio, PR #366116:23
ograyour dhcp server obviously serves tftp btw :)16:23
cachiopstolowski, tx16:23
cachioogra, I switched off/on the pi3 and I don't see the error anymore, I could log in16:24
ograyeah16:25
cachioogra, the problem was after restart it16:25
ograit will show up after next kernel or core upgrade again16:25
cachioyes,16:25
ograas soon as the uboot.env file gets written again16:25
cachiojust want I need to test :(16:25
ograyou likely tested the rollback mechanism ;)16:25
ogracheck with snap list ... and snap info what core and pi2-kernel say16:26
cachiohehehe, yes, unfortunately16:26
cachioogra, snap changes is showing the error16:27
ograyeah16:27
cachioI'll try with another sdcard16:27
ograand snap info likely shows you that you are one revision behind on one of core or pi2-kernel16:27
ogra(whatever you updated before the reboot)16:27
cachioogra, which sd card do you recommend for this kind of use16:28
cachio=16:28
cachio?16:28
cachioogra, which brand and type16:29
ograi usually jjust randomly buy a cheap offer at my electronics discounter ... sandisk or transcend typically16:29
ograi have a few 4GB ones in use but also 64G and 128G ones16:29
cachiook16:29
ograi dont think you can still easily buy 4G thogh ... i think 8 is the lowest atm16:30
ogra(at least here in germany ... it bought two new cards before london (that i didnt even unpack yet) and they didnt have smaller than 8 anymore)16:30
cachioogra, ok, I'll try with 8GB ones16:31
Chipacapedronis: have you EOWed yet?17:07
pedronisChipaca: what's the question?17:18
Chipacapedronis: i pushed code to the services branch, was wondering if it what you had in mind, but i'm this >< close from EOW myself as well :-)17:18
pedronisMonday :)17:19
Chipacapedronis: :-)17:20
Chipacapedronis: have a good'un!17:20
pedronissame17:20
Chipacaniemeyer, zyga, ogra, cachio, and you guys too!17:21
Chipaca\o17:21
niemeyero/17:21
superjonotrondoes anybody know the official way to confiure network interfaces in ubuntu core 16?  have yet to find official documentation and files in /etc/network/interfaces.d folder do not seem to have any effect17:38
=== JanC_ is now known as JanC
NeerajI am not able to update the snap on dell 5000 GW did any one tried snap update18:15
* zyga-arch returns18:46
* zyga-arch will make lots of PRs like this: https://github.com/snapcore/snapd/pull/366218:54
cachioniemeyer, running tests to detect reboot issue19:44
niemeyercachio: Ok19:46
Neerajhi anybody used DELL GW5000 "snap refresh " is not working19:47
FacuNeeraj, hello19:57
FacuNeeraj, you opened this?19:57
Facuhttps://forum.snapcraft.io/t/dell-gw5000-snap/155919:57
Neeraj<facu> yes19:59
Neerajyes20:00
FacuNeeraj, sorry, I already commented on the forum20:00
FacuNeeraj, most surely is this (transient) problem: a new version was released for that snap, but still not verified, and (because of a bug) we're failing to serve it properly.20:01
FacuNeeraj, bug is recorded here: https://bugs.launchpad.net/snapstore/+bug/1707206 , it's already fixed, but still not in production (will be rolled out first days next week)20:01
NeerajFacu, thanks for the update20:02
NeerajFacu is their any way to install sanp classic for now20:05
FacuNeeraj, the problem is on refresh, on install it should work ok20:06
NeerajFacu you mean to say that after sucessfull refresh the installation of classic will work20:07
FacuNeeraj, mmm... I say that if you do "snap install something" it will work, that the bug I'm talking about is exposed when you do "snap refresh something"20:08
FacuNeeraj, currently you can not do "snap install something"?20:08
Facu(maybe there's another problema and I'm misleading)20:09
NeerajFacu you are correct I guess after refreshing the installation should work ::: the error is "ERROR snap "classic" assumes unsupported features: snapd2.23 (try to refresh the core snap)"20:10
noise][Neeraj: ah, so your device is quite a bit behind on core updates20:11
FacuNeeraj, I see20:11
noise][Neeraj: what does `snap version` and `'snap info core` show?20:12
Neerajnoise snap version is "  snap --version snap    2.17 snapd   2.17 series  16"20:13
noise][ok, very far behind then :/20:13
NeerajNoise : once I execute "snap info core" i get error :: error: unknown command "info", see "snap --help"20:14
noise][When Facu's fix lands hopefully Mon/Tues that should unblock your 'core' snap refresh and then let you install classic20:14
noise][sorry for the inconvenience20:14
Neerajthanks20:15
cachioniemeyer, Spread-5020:25
cachio173.230.156.15120:26
niemeyercachio: Okay, what should I look for?20:26
cachiothe output in the console20:27
cachioit is not starting after reboot20:27
cachioniemeyer, I need to know what is showing the linode console20:27
cachioniemeyer, or if you can save the disk should be nice too20:29
niemeyercachio: http://paste.ubuntu.com/25242314/20:30
cachioniemeyer, nice20:31
cachioNo space left on device20:31
niemeyerYep20:32
cachioniemeyer, which disk are we using for core runs?20:33
cachioon linode20:33
niemeyercachio: This is what happens before the panic:20:33
niemeyer+ mount -t tmpfs none /tmp20:33
niemeyer+ cp /bin/busybox /tmp20:33
niemeyer+ cp /home/image/all-snap-amd64.img /tmp20:33
niemeyercachio: So it's not actually adisk20:33
niemeyercachio: The tmpfs is too small20:33
niemeyerNot enough memory20:33
cachioI see20:34
niemeyercachio: Problem most likely is that all-snap being too large20:34
niemeyercachio: Sorry, that's obvious.. what I actually mean is20:34
niemeyercachio: The problem most likely is that somehow we're leaving trash around during the test run, and then trying to pack it into that file20:34
niemeyercachio: let me try to give you a debug environment on that machine.. just a second20:35
cachioniemeyer, good, thanks20:35
cachioniemeyer, in this case, the machine did not run any test before the reboot20:40
cachioso, I don't think there is any trash20:40
niemeyercachio: Your spread is still running, right?20:48
cachioniemeyer, it is on travis20:48
cachioniemeyer, if you can save the disk should be great20:49
cachioit will be killed in few minutes20:49
niemeyercachio: Oh, ouch20:49
niemeyercachio: Glad you warned me ;)20:49
niemeyercachio: Okay, the machine should be up again now20:52
niemeyercachio: root has the same password20:52
niemeyercachio: It's a pristine 16.04 image, though20:52
niemeyercachio: Original disk is under /dev/sdc20:52
niemeyercachio: Have fun! :)20:52
cachioniemeyer, I don't have the password :)20:55
cachiohow do I get it?20:55
niemeyercachio: Now you do20:55
cachioniemeyer, :)20:56
cachiotx20:56
niemeyercachio: School run, will bbiab21:03
cachioniemeyer, np21:03
niemeyercachio: Back.. any news?21:43
cachioniemeyer, not yet, trying to reproduce it21:44
* zyga-suse EOWs22:39
cachioniemeyer, the only thing I see is that /tmp is not being cleaned before reboot23:34
cachioand as the first thing the system does when reboots is to mount /tmp23:34
niemeyercachio: How would that be relevant?23:35
cachioin /tmp already are a lot of things23:35
niemeyercachio: But how would that matter?23:37
cachioniemeyer, it is mounting /tmp on memory23:38
cachioso if /tmp has data, it will waste memory on that data23:39
cachioniemeyer, perhaps I am missunderstanding the script23:40
niemeyercachio: Isn't it mounting a tmpfs on /tmp?23:40
cachioyes23:40
cachioniemeyer, or at least it is doing > mount -t tmpfs none /tmp23:40
niemeyercachio: SO how is the data in the underlying /tmp relevant?23:41
cachioniemeyer, is it going to memory that data?23:41
cachioI mean RAM memory?23:42
niemeyercachio: Yeah, tmpfs is supposed to keep the data in memory23:43
cachioniemeyer, my point is that previous to do that, we are storing data in /tmp, this data will go to the RAM, so perhaps when we try to copy the all-snap-amd64.img we go out of memory23:45
niemeyercachio: That's not how mounting works23:45
cachioniemeyer, ok, my bad in that case23:46
niemeyercachio: Once you mount something over a mountpoint, the data under the mounted filesystem just stays there23:46
cachioniemeyer, ok23:47
niemeyerWhat's the size of the data file?23:51
cachioniemeyer, should be about 300 MB23:52
cachioniemeyer, let me check23:53
cachiotrying to run the test on that machine but getting a problem23:54
cachioRun configure hook of "core" snap (run hook "configure": cannot stat /var/lib/snapd/seccomp: No such file or directory)23:54
cachioniemeyer, and the dir exists23:55

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!