/srv/irclogs.ubuntu.com/2017/10/25/#snappy.txt

=== wgrant__ is now known as wgrant
zyga-solusgood morning05:31
zyga-solusmwhudson: I'll look into packaging this week05:35
zyga-solusmwhudson: sorry for not having any time for that lately05:35
zyga-solusgood morning mvo :)05:37
zyga-solusmvo: I got a +1 from jdstrand on 4008, could you please do 2nd review?05:38
zyga-solusmvo: that branch is on the critical path towards layouts05:39
zyga-solusmvo: and I'd love it if we could pull it into 2.29.205:39
mvohey zyga-solus - good morning05:40
=== JanC_ is now known as JanC
mvozyga-solus: pr looks very good, I added some cosmetic suggestions and I'm fine pulling this in for 2.2906:06
zyga-solusthank you06:12
=== chihchun_afk is now known as chihchun
kalikianagood morning, snappy06:46
zyga-solusgood morning kalikiana06:53
mwhudsonzyga-solus: me neither07:31
mwhudsonzyga-solus: i refreshed the patches, so i think it's build-dep updates and try to build07:31
zyga-solusthank you, that sounds good07:32
mwhudsonlet me check i pushed that much to alioth :)07:32
zyga-solusthank you :)07:34
mwhudsonseems i did!07:35
=== chihchun is now known as chihchun_afk
=== chihchun_afk is now known as chihchun
Tribaalhi folks! I just got an extra rasperri pi 3 and would love to use it for Ubuntu core. What would you all use it for? Nextcloud?08:02
Tribaalwhat's the new snapped hotness? :p08:02
zyga-solusmvo: hey08:07
zyga-solusmvo: I updated 400808:07
zyga-solusmvo: could you please look at secureMkdirAll again? I'm not using defer but if you feel strongly about it I can reiterate08:08
=== JoshStrobl is now known as JoshStrobl|zzz
mvozyga-solus: thanks, I check it out. out of curiosity, whats wrong with defer there?08:14
zyga-solusmvo: nothing technically, there are two reasons (perhaps three) that I didn't use defer for08:14
zyga-solusmvo: it was a rewrite from C and I kept the style08:15
zyga-solusmvo: I check for all possible errors, including from close (unless already handling an error)08:15
zyga-solusmvo: and defer would keep more FDs open then we need (one for each path segment)08:15
zyga-solusmvo: if you prefer defer I can re-work the code to use defer and adjust tests to match08:15
mvozyga-solus: ok, that makes sense. I was thinking the fd usage would be it08:16
zyga-solusmvo: it's not a very strong argument arguably as in typical cases it would keep a handful of FDs open at most08:17
zyga-solusmvo: I'll try defer quickly, if it's not too ugly we can merge that ;)08:17
zyga-solusmvo: pushed with defer08:23
zyga-solusmvo: have a look at patch here please: https://github.com/snapcore/snapd/pull/4008/commits/1a4d21279aedfbad71357ee031cca068af8e485008:24
mupPR #4008: cmd/snap-update-ns: create missing mount points automatically <Created by zyga> <https://github.com/snapcore/snapd/pull/4008>08:24
* zyga-solus -> ENOTEA brb08:24
mvozyga-solus: it says "done" to the rename of EnsureMountPointImpl but the name is still EnsureMountPointImpl not EnsureMountPoint ?08:25
mvozyga-solus: I like it but no super strong opinion either, just feel more "natural"08:27
zyga-solusmvo: oh, I must have missed it, I renamed the other Impl, correcting now08:50
skjensenMorning guys, I have got past the error I had yesterday building the image for the jetson tk1. I'm now at step 8: populate_filesystems. But I'm missing the  MLO.08:51
zyga-solusno, wait, I dropped that patch entirely :/08:51
skjensenI have tried to go through the uboot build steps in a terminal and it isn't building the MLO, anyone who can point me in the right direction of figuring out how to build a MLO or why ubuntu-image build expects to find one?08:52
zyga-solusskjensen: sorry, I don't know much about uboot :/08:53
zyga-solusmvo: ok, all done now08:53
* zyga-solus didn't make tea but instead walked his daughter to school to help08:54
Chipacazyga-solus: to help what?08:55
zyga-solusChipaca: to help her, it's raining all the time and her backpack was very heavy today08:55
Chipacazyga-solus: you're supposed to let the rain water get out of the backpack08:56
zyga-solus:D08:58
zyga-solusChipaca: how would they have their swimming classes if I did?08:58
Chipacazyga-solus: fair point08:59
pedronismvo: hi, did you see my comment from last evening?08:59
zyga-solusChipaca: can I frame you into a review of one function?09:00
Chipacazyga-solus: you can try09:00
zyga-solusChipaca: can you please have a look at secureMkdirAll in 4008 please09:00
zyga-solusChipaca: it's very sensitive to get right and mvo found a bug already today09:00
mvopedronis: yeah, I think it makes sense. I have no managed to start with it though but I think I'm done with the xdg-settings for now until I get a review from jamie again so I will look at it next09:02
pedronismvo: thx09:05
Chipacazyga-solus: I don't understand your answer wrt path vs path/filepath09:05
pstolowskimvo, hey, the autokpgtest failure on 4072 look unrelated to the change (spread passed), i think it's safe to merge isn't it?09:06
Chipacazyga-solus: filepath is path for filesystem stuff, path is a more generic thing (for, say, the web)09:06
pedronisChipaca: snapd#4075 needs a review, it's mostly undoing a previouw checking and starting going in a different direction (in store/ )09:06
mupPR #4075: many: reorg things in preparation to make handling of the base url in store dynamic  <Created by pedronis> <https://github.com/snapcore/snapd/pull/4075>09:06
zyga-solusChipaca: aha09:06
Chipacapedronis: a'ight, i'll get to it after looking at zyga's09:07
zyga-solusChipaca: I didn't get that, I'll switch to filepath09:07
zyga-solusChipaca: done09:08
mvopstolowski: indeed, thank you09:08
mupPR snapd#4072 closed: daemon: use newChange() in changeAliases for consistency <Created by mvo5> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/4072>09:08
Chipacazyga-solus: path.go still uses path though09:10
zyga-solusChipaca: path.go?09:11
zyga-solusah I see09:12
ChipacaOTOH grepping shows a few places09:12
Chipacamaybe i should fix in a separate pr09:12
zyga-solusdone09:12
zyga-soluspushed09:13
Chipacazyga-solus: jamie asked that you add a comment about why secureMkdirAll doesn't take relative paths, and you said 'done', but i don't see the comment; is it somewhere else?09:15
zyga-solusChipaca: man, I added that comment, did I break my rebase?09:15
* zyga-solus looks09:15
zyga-solusyep09:16
zyga-solusit's not there :/09:16
* zyga-solus looks at reflog09:16
zyga-soluspushed09:17
* Chipaca worries09:18
zyga-solusI just checked, nothing else is lost09:20
mvomwhudson: could you please check https://bugs.launchpad.net/ubuntu/+source/golang-1.7/+bug/1726706 and comment if that is safe? there is concern from the sru team that this changes existing behavior on unrelated architectures09:22
mupBug #1726706: Fails to build snapd on ppc64el <golang-1.7 (Ubuntu):Fix Released> <golang-1.7 (Ubuntu Zesty):New> <https://launchpad.net/bugs/1726706>09:22
Chipacazyga-solus: how much bikeshedding is acceptable on this?09:24
Chipacazyga-solus: 3? :-)09:24
zyga-solusChipaca: any amount, what else did you find?09:24
mwhudsonmvo: sure09:25
pstolowskimvo, looks like Sergio has been waiting for your feedback on 3994 (and it's a very small change)09:25
Chipacazyga-solus: i'll comment on the pr09:25
mvopstolowski: thanks, I just checked and have the same question as you :)09:27
pstolowskigood :)09:27
mwhudsonmvo: where did the sru team express their concerns?09:30
mvomwhudson: on irc via /query *cough*09:30
mwhudsonmvo: hooray09:30
seb128mvo, hey, do you know what's the status of making classic snaps to work on 17.10?09:31
mvomwhudson: I will ask apw to voice his concern about https://launchpad.net/bugs/1726706  in the bug :) but if you can just confirm its an ok change (with your golang maintainer/upstream head on, that would be great)09:32
mupBug #1726706: Fails to build snapd on ppc64el <golang-1.7 (Ubuntu):Fix Released> <golang-1.7 (Ubuntu Zesty):New> <https://launchpad.net/bugs/1726706>09:32
mwhudsonmvo: done09:32
mvoseb128: I'm not sure we are tracking this right now, aiui snapcraft is working on a fix, maybe kalikiana knows more?09:32
mvomwhudson: thank you!09:32
seb128mvo, seems like an important issue? we have projects that were trying to go the snap way and are considering not doing that after all and going back to some other format since snaps don't work for them on current Ubuntu :-/09:34
mvoseb128: yes, it sucks. I will raise it during the standup to make sure it gets attention and a proper analysis. is there a forum topic already?09:35
ogra_seb128, i think snapcraft works on droopping all LD_LIBARY_PATH stuff for that and to make all classic snaps use rpath ...09:37
* ogra_ looks fo the PR ... 09:37
Chipacazyga-solus: i was wrong :-)09:38
zyga-solusChipaca: about what?09:39
ogra_seb128, https://github.com/snapcore/snapcraft/pull/1632 and https://github.com/snapcore/snapcraft/pull/1635 (seems both are merged in master already... though i guess all existing classic snaps need to be re-built)09:42
mupPR snapcraft#1632: libraries: exclude the full set of libc6 <bug> <Created by sergiusens> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/1632>09:42
mupPR snapcraft#1635: snap: remove leaking LD_LIBRARY_PATH <bug> <Created by kyrofa> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/1635>09:42
seb128mvo, ogra_, thanks09:43
kalikianamvo: Fix for...?09:44
seb128mvo, https://forum.snapcraft.io/t/classic-snaps-failing-on-ubuntu-17-10/2324/ is the forum post ... from what ogra_ replied it seems to be worked, would still be good to make sure it's properly tracked and know when it might land09:44
* kalikiana reading the backlog09:44
seb128kalikiana, ^09:44
seb128ogra_, kalikiana, mvo , could somebody post an update on that forum topic? it has several users asking for a status update in the course of the recent weeks and they just got silence in return so far09:45
kalikianaseb128: Good call. We've got some fixes for library exclusion and LD_LIBRARY_PATH handling in the pipeline. Will have to check exactly which bits apply to this topic09:46
ogra_seb128, well, kyrofa and sergiusens have been working on it ... either of them should be able to give updates (i dont know more than whats in the discussion and the PRs)09:46
seb128kyrofa, sergiusens, ^ could you update that forum post before we get people who consider stopping their snap actually doing that because they feel like the system is buggy and nobody cares to update them on the issues?09:52
Chipacazyga-solus: curse you! why am i reading open_by_handle_at(2) at this time of the morning09:55
ogra_Chipaca, dude! now you made us all read it !09:56
Chipacaogra_: it's all dem bionic badgers09:57
ogra_heh09:57
zyga-solusChipaca: haha10:02
zyga-solusChipaca: I read it too, did you find anything interesting?10:03
Chipacazyga-solus: no, it nerdsniped me, is all10:06
Chipacazyga-solus: commented on the pr10:06
zyga-solusChipaca: thank you10:09
zyga-solusChipaca: I can add O_PATH easily10:10
zyga-solusChipaca: please look at the defer vs hand-made cleanup response10:10
mupPR snapd#4052 closed: tests: check for invalid udev files during all tests <Created by mvo5> <Merged by stolowski> <https://github.com/snapcore/snapd/pull/4052>10:10
Chipacazyga-solus: yes i know you added the defers10:10
Chipacazyga-solus: i thought the better solution would be to move the body of the loop to a helper, but it doesn't help10:10
pstolowskiChipaca, hey, 4050 has a conflict10:11
Chipaca(that's why it took me some time to review: i wrote what i thought would help, and it didn't)10:11
Chipacapstolowski: lies!10:11
* Chipaca looks10:11
pstolowski:)10:11
Chipacaa PR that's been open for over a week, having a conflict? i'm shocked10:11
Chipacafixing...10:12
zyga-solusChipaca: yes, I was thinking about that but there's no nicer way with defer10:12
zyga-solusChipaca: python refcount would be better10:12
mupPR snapd#4007 closed: interfaces: add plugRef/slotRef helpers for PlugInfo/SlotInfo <Created by stolowski> <Merged by stolowski> <https://github.com/snapcore/snapd/pull/4007>10:13
Chipacazyga-solus: not really, as the refcount cleanup is not deterministic10:13
Chipacazyga-solus: at least with defers when you're done you're done10:13
zyga-solusChipaca: in CPython it is deterministic10:14
Chipacatrue10:15
Chipacabut who still uses cpython :-p10:15
* Chipaca knows the answer is 'everybody'10:15
Chipacamvo: remember `tidyNoticef`? did you have a better name in mind?10:17
Chipacai'm touching that pr anyway to resolve a conflict so i might as well address this10:17
seb128kalikiana, thanks for posting on that forum discussion10:20
kalikianaSure. Thanks for bring it up. I try to follow what's going on but sometimes it's just a lot to read.10:20
Chipacai hadn't noticed github's favicon now shows the state of the tests10:30
Chipacanice10:30
skjensenIs it possible to unpack a gadget snap?10:32
mvoChipaca: hm, I need to think about a better name but names are hard10:33
Chipacaskjensen: you can unpack it with unsquashfs, or you can mount it by hand10:33
zyga-solusChipaca: updated again10:34
Chipacaskjensen: snaps are just squashfs10:34
skjensenExcellent.. Thanks I will try that and try understand what I have packed down into the gadget.. :)10:34
Chipaca:-)10:34
Chipacazyga-solus: ack. On samuele's pr now, i'll check back later (unless i forget :-)10:35
zyga-solusthank you!10:35
zyga-solusI'll look at my other PRs that are close to landing10:35
Chipacamvo: I'll just call it noticef, and add a comment10:36
mvoChipaca: ok10:41
pstolowskiChipaca, got travis failure on completion test https://travis-ci.org/snapcore/snapd/builds/292510395?utm_source=github_status&utm_medium=notification , thought you might want to know10:53
Chipacapstolowski: in prepare10:54
Chipacanice one10:55
Chipaca'tar: /var/lib/snapd: file changed as we read it'10:55
niemeyerpedronis: About your comment yesterday, perhaps the right place is indeed the handler of the "configure" task handler11:07
niemeyerpedronis: Oh, wait.. the task is actually a hook task11:08
niemeyerHmm11:08
pedronisniemeyer: yea, so a level up11:08
pedronisconfigstate.Configure11:08
pedroniswhich needs to create the hook task or a different one11:08
pedronisunless we had overriding pluggability into hooks themselves11:08
pedroniswhich seems a bit overkill unless we have another use case11:09
niemeyerpedronis: The cheapest seems to be intercepting it within the hook handler itself11:09
niemeyerpedronis: Well.. or we just have a new handler inside configstate11:10
pedronisthe 2nd one was my idea11:10
pedronisI mean hacking in doRunHook is probably cheap but is strange unless we do it as a general mechanism, but then is not that cheap anymore11:11
niemeyerpedronis: Sounds good.. these other options in HookSetup probably don't make much sense either way11:12
niemeyerpedronis: "configure-snapd"?11:12
pedronissounds reasonable11:13
pedronismvo: ^11:13
Facuelopio, sergiusens, hello! do you know how could I get reviews here? https://github.com/snapcore/snapcraft/pull/1634 thanks!11:14
mupPR snapcraft#1634: Push metadata to the Store <Created by facundobatista> <https://github.com/snapcore/snapcraft/pull/1634>11:14
kalikianaFacu: For some reason there was no GitHub notifications of your replies... let me have another look now.11:24
kalikianaSo thanks for pinging on that!11:25
Facukalikiana, :)11:25
kalikianaThe other guys will be around later. I can check also who would help review11:25
niemeyerpedronis, mvo: https://forum.snapcraft.io/t/special-casing-the-core-configuration/259411:29
kalikianaFacu: I added some comments - I'm still slightly confused, though, regarding the arch in update_metadata... what relevance does it have there, if it's unused in the failing code path?11:35
kalikianaMaybe the error should be changed?11:36
niemeyerpedronis: When you have a moment, would you mind to pass your eyes over #4070.. I think it's good to go, but it wouldn't heart to have another pair of eyes there to check we didn't miss something11:36
mupPR #4070: hooks/configure: queue service restarts <Created by stolowski> <https://github.com/snapcore/snapd/pull/4070>11:36
pstolowskithanks niemeyer11:37
niemeyerpstolowski: np11:37
Facukalikiana, mmm... I see that SnapNotFoundError supports *not* receiving the arch11:38
pstolowskiniemeyer, btw, any chance to have your eyes on #4013 before your holidays?11:38
mupPR #4013: repo, daemon: use PlugInfo, SlotInfo <Created by stolowski> <https://github.com/snapcore/snapd/pull/4013>11:38
mvoniemeyer, pedronis thanks for this, I'm working on this now11:39
Facukalikiana, OTOH, see for example the function get_snap_status in that file; it builds the error with the arch even if the situation that led to the error has nothing to do with the arch (it happened to have the arch because it's just used later)11:40
pedronisniemeyer: I'll look at 4070 in a bit11:42
niemeyerpedronis: Thanks!11:42
niemeyermvo: np11:42
niemeyerackk: PR reviewed, and LGTM11:42
niemeyerackk: We need a second review on it11:43
niemeyerI don't recall who was involved in the socket activation conversations..11:43
kalikianaFacu: I'd say rather not use it if nothing in the method does. It makes a lot more sense to me anyway11:44
niemeyerAh, Chipaca would be a great reviewer here I think11:45
niemeyerChipaca: #3916!11:45
mupPR #3916: snap,wrappers: add support for socket activation <Created by albertodonato> <https://github.com/snapcore/snapd/pull/3916>11:45
Facukalikiana, let's do that11:45
niemeyerpstolowski: Yeah, I'm hoping so.. it's looking like a long day :)11:46
Facukalikiana, do you have any idea about that ACL failure in Travis?11:47
ackkthanks niemeyer11:48
kalikianaFacu: You mean CLI? Try merging master. The check can get confused when there's new commits.11:48
kalikianaCLA, even11:49
=== chihchun is now known as chihchun_afk
ogra_skjensen, MLO is only expected if you defined it ... if your board doesnt use one you indeed dont need to add it to the gadget.yaml (sorry, only saw you now in the backlog)11:54
ogra_skjensen, here is an example gadget without MLO https://github.com/ogra1/nanopi-neo-gadget ... note that you need to find the right size and offset values for your board indeed ...11:55
pedronisniemeyer: pstolowski:  about #4070, +1 with some comments11:55
mupPR #4070: hooks/configure: queue service restarts <Created by stolowski> <https://github.com/snapcore/snapd/pull/4070>11:55
pedronisand questions11:56
pedronispstolowski: it seems some of your "upcoming" were in 2.28, time to remove the tags ?11:57
niemeyerpedronis: Good points11:57
niemeyerDefinitely worth testing, and documenting in the snapctl description11:58
niemeyerpedronis, pstolowski: The flag also seems useful for the near future.. I'd wait until we have some experience, though, even to make sure we won't have to revert this decision based on user feedback11:58
niemeyerI'd name it as --now if it comes11:59
pedronisyea11:59
pedronisupdated my comment12:00
niemeyerThanks!12:01
Facukalikiana, ack, will merge master, thanks12:01
skjensenogra_ thanks I will try to build the snap without.. :)12:02
skjensenogra_ how do you find the correct size and offset values?12:03
ogra_skjensen, i think i wrote about thet in my blog ...12:03
ogra_*that12:03
skjensenokay, I will have another read through the blog.. :)12:03
ogra_https://ograblog.wordpress.com/2017/05/30/building-u-boot-gadget-snap-packages-from-source/12:04
ogra_under "creating the gadget.yaml "12:04
ogra_you need to know the values typically used for your board ... then you can convert them to byte offsets and size12:05
skjensenyes..12:06
skjensenogra_ any chance you know the difference between u-boot.img u-boot-tegra.bin u-boot-dtb-tegra.bin u-boot-nodtb-tegra.bin I see you used the u-boot.img in your example for the bbb but the nanopo is using u-boot-sunxi-with-spl.bin so a bin file.. I got both from building u-boot so which to choose?12:20
ogra_skjensen, oh, no idea, i'd start with u-boot-tegra.bin12:23
ogra_try to find some docs about that from someone wh has done this before12:24
skjensenOkay..12:24
jdstrandwillcooke: hey, I had an idea about speeding up gnome snaps on first launch12:44
jdstrandwillcooke: it isn't fully formed or anything, but snappy has this thing 'userd' that runs as the user in the user's session. it seems plausible that it could be the thing that compiles the gschemas12:45
willcookejdstrand, we're planning on layouts allowing us to use the compiled schemas which should shave a couple of seconds at least of start-up12:49
willcookejdstrand, I'll ask jamesh to sync with you on that topic12:49
jdstrandwillcooke: I'm actually involved in the layouts work, so if he can solve it there, even better12:49
willcookejdstrand, nice one.  I'll drop James an email now anyway12:50
pstolowskipedronis, thanks for the review, good points. i'll check my 'upcoming' tags, thanks12:52
Chipacaanybody know a snap that has a service and a command?12:55
pedronisChipaca: network-manager13:00
pedronisChipaca: it's an interesting example though, because we don't want (for now) people installing it on classic13:02
zyga-ubuntuChipaca: fun fact: no fchown with O_PATH13:02
zyga-ubuntuChipaca: also, standup13:03
noise][Chipaca: postgresql?13:05
arubislanderHi, I have a question. Say I have a snap that needs access to /tmp what interface(s) should it connect to?13:26
zyga-ubuntuarubislander: hey13:30
zyga-ubuntuarubislander: /tmp is always available but it is private to the snap13:31
zyga-ubuntuarubislander: no snap can use the real host-side /tmp directory13:31
zyga-ubuntuarubislander: there is no interface that controls this currently13:31
zyga-ubuntuarubislander: why do you need access to the host-side /tmp?13:31
arubislanderWell, it was more that I am using the libreoffice snap, and every time I want to directly open a file downloaded in firefox I get a permissions error thrown. I need to save the file first to a location in my home folder.13:34
arubislanderSo I was thinking that maybe there should be an interface for /tmp access just like there is for removable media access.13:35
arubislanderzyga-ubuntu: O, I see the convention here is to make it explicit who you are talking too. Apologies for the previous omissions.13:36
Chipacanoise][: the postgres snaps have no daemons13:38
Chipacanoise][: i suspect this is a bug13:38
noise][odd.13:39
noise][Chipaca: etcd has both13:40
Chipacayes yes it does13:41
jdstrandzyga-ubuntu: 'daemon is not so portable actually'. what failed with daemon?13:47
jdstrandit is defined by the LSB as required13:47
jdstrandI'm curious because of something I am working on13:48
zyga-ubuntujdstrand: solus13:48
zyga-ubuntujdstrand: I switched to nobody nogroup13:48
zyga-ubuntuarubislander: no worries :)13:49
zyga-ubuntuarubislander: real /tmp is in /var/lib/snapd/hostfs/tmp but it's not accessible13:49
zyga-ubuntujdstrand: I think ikey would know why daemon group is not available there :)13:49
zyga-ubuntujdstrand: thank you for the reviews, I think the two branches are much better now13:51
zyga-ubuntujdstrand: I'm curious to know what you are working on now13:51
jdstrandwell, the uid/gid priv dropping work13:51
jdstrandbut it isn't something I have much time to focus on unfortunately13:51
zyga-ubuntujdstrand: uid/gid priv dropping where? I'm not familiar with this topic13:53
zyga-ubuntuah13:53
=== JoshStrobl|zzz is now known as JoshStrobl
zyga-ubuntuyou mean in-snap users?13:53
zyga-ubuntu(users and grops)13:53
zyga-ubuntu*groups)13:53
jdstrandzyga-ubuntu: that is one of 4 use cases, yes13:53
jdstrandhttps://forum.snapcraft.io/t/snappy-users-and-groups-take-2/146113:54
jdstrandthe topic was renamed to focus on only one use case though...13:54
jdstrandikey: fyi> http://refspecs.linuxfoundation.org/LSB_5.0.0/LSB-Core-generic/LSB-Core-generic/usernames.html13:55
jdstrandikey: 'daemon' is listed under 'Required User & Group Names'13:55
jdstrandzyga-ubuntu: you might consider the fact that 'nobody' is optional under LSB and 'nogroup' is not lised as anything (I think 'nogroup' is a Debian-ism iirc)13:56
jdstrandzyga-ubuntu: perhaps your PR should use 'bin/bin' or continue to use 'daemon/daemon' and pick something else on solus?13:57
jdstrandanyway, I'm not blocking on that. it is just the test code13:57
pedronisniemeyer: would be good to have your input here https://forum.snapcraft.io/t/new-install-refresh-api-with-the-store/2269/6 if you have any immediate feedback13:58
zyga-ubuntujdstrand: eh, good point14:02
zyga-ubuntujdstrand: maybe I cna put a list of things and if any of those work, pass the tset14:02
zyga-ubuntu*test14:02
mupPR snapcraft#1639 opened: grammar: to statement <Created by kalikiana> <https://github.com/snapcore/snapcraft/pull/1639>14:04
zyga-ubuntumvo: FYI, I just want to get this under someone's radar: https://bugs.launchpad.net/snappy/+bug/172388114:13
mupBug #1723881: [Feature Request] Support pre-invoke and post-invoke commands as DPkg::Pre-Invoke and DPkg::Post-Invoke in APT <Snappy:New> <https://launchpad.net/bugs/1723881>14:13
* zyga-ubuntu breaks for lunch14:16
arubislanderzyga-ubuntu: thanks for the info. /tmp not being accessible, is that a confinement security based decision?14:29
* jdstrand -> errands and lunch14:34
Chipacamvo: can i nominate #4050 for 2.19rcN?14:41
mupPR #4050: cmd/snap: tell translators about arg names and descs req's <Created by chipaca> <https://github.com/snapcore/snapd/pull/4050>14:41
Chipacamvo: also can i have a review of it :-)14:42
om26erhey popey, can you share the snapcraft.yaml of yakyak, probably a comment here: https://github.com/yakyak/yakyak/issues/741 would be nice.14:43
zyga-ubuntuarubislander: yes14:44
zyga-ubuntuarubislander: for isolation each snap sees a private /tmp14:44
om26erpopey: someone actually proposed snap packaging a few months ago for yakyak: https://github.com/yakyak/yakyak/pull/752 but that didn't go much far. (and the diff looks weird)14:45
mupPR yakyak/yakyak#752: Added Snap Support <Created by OctoPenguin> <https://github.com/yakyak/yakyak/pull/752>14:45
cachiomvo, is this the error that you mentioned in trusty https://paste.ubuntu.com/25817308/14:45
cachio?14:45
zyga-ubuntudarn, I didn't plug my laptop and it suspended14:46
kyrofaogra_, kalikiana seb128 mvo not completely fixed yet, but definitely a high priority14:48
kyrofaogra_, kalikiana seb128 mvo we've landed a few PRs that make progress, but we're still missing patchelf changes14:49
kyrofaWhich is in progress14:49
kyrofaI'll update the forum thread14:49
kalikiana+114:49
kyrofaseb128, thank you for the ping, we should have been updating it as we made progress14:49
mvocachio: I have not seen this one yet :/14:50
cachiomvo, ok14:51
seb128kyrofa, thanks14:52
mupPR snapd#3989 closed: client, daemon: rest api to configure store api <Blocked> <Created by atomatt> <Closed by pedronis> <https://github.com/snapcore/snapd/pull/3989>15:05
elopiosnappy-m-o 1630 xenial:amd64:integrationtests15:05
mupPR snapd#3990 closed: cmd/snap,client,daemon: support set/unset of store front <Blocked> <Created by atomatt> <Closed by pedronis> <https://github.com/snapcore/snapd/pull/3990>15:06
elopiosnappy-m-o autopkgtest 1630 xenial:amd64:integrationtests15:08
snappy-m-oelopio: I've just triggered your test.15:09
zyga-ubuntuhrm15:11
pedronisChipaca: any reason not to merge #4062,  you addressed the objection afaict.15:11
mupPR #4062: cmd/snap: warn when a snap is not from the tracking channel <Created by chipaca> <https://github.com/snapcore/snapd/pull/4062>15:11
Chipacapedronis: I did, but I don't like to merge while it's still 'changes requested'15:13
Chipacaalthough I now see a "dismiss review" button15:13
* Chipaca grins evily15:13
=== cachio_ is now known as cachio_lunch
kyrofasnappy-m-o, autopkgtest 1636 xenial:amd6415:14
snappy-m-okyrofa: I've just triggered your test.15:14
mupPR snapd#3965 closed: interfaces/mount: add support for parsing x-snapd.{mode,uid,gid}= <Created by zyga> <Merged by zyga> <https://github.com/snapcore/snapd/pull/3965>15:15
mupPR snapd#3999 closed: cmd/snap-confine: add detection of stale mount namespace <Created by zyga> <Merged by zyga> <https://github.com/snapcore/snapd/pull/3999>15:15
mupPR snapd#4062 closed: cmd/snap: warn when a snap is not from the tracking channel <Created by chipaca> <Merged by chipaca> <https://github.com/snapcore/snapd/pull/4062>15:16
Chipacasnappy-m-o: dance for us15:16
snappy-m-oCommand ":" / ": dance" not found.15:16
arubislanderzyga-ubuntu: check15:20
pedronismvo: what's the status of #4060, I see it has two +1 but some open nitpicks ?15:20
mupPR #4060: interfaces: clean system apparmor cache on core device <Created by mvo5> <https://github.com/snapcore/snapd/pull/4060>15:20
kyrofaseb128, update given15:22
mvopedronis: indeed, I will get to it later, forgot about those15:23
=== Eleventh_Doctor is now known as Pharaoh_Atem
seb128kyrofa, thanks15:26
popeyom26er: kk15:28
* Chipaca hugs pedronis 15:36
Chipacathank you for doing this15:36
kyrofaHey jdstrand, review-wise, can I claim the same dbus common name in two snaps?15:41
mvozyga-ubuntu: do you have any idea about https://bugs.launchpad.net/snapd/+bug/1721518 ? the most interessting part if #3 actually, on trusty apprently sometimes interface connections get lost15:42
mupBug #1721518: Latest snapd in Trusty is broken after reboot because of systemd units start ordering <snapd:In Progress by inaddy> <https://launchpad.net/bugs/1721518>15:42
zyga-ubuntumvo: looking15:44
zyga-ubuntumvo: that's very interesting15:45
zyga-ubuntumvo: no idaa, come to think of it, maybe something we are doing is wiping our state15:45
zyga-ubuntumvo: maybe some 1st boot logic?15:45
mvozyga-ubuntu: interessting idea15:45
zyga-ubuntumvo: nothing that I can think of would remove connections15:45
zyga-ubuntumvo: especially if the snap is present15:46
zyga-ubuntumvo: and it seems it is as there are slots there from core15:46
mvozyga-ubuntu: the annoying part is that its on trusty and we have lost the knowledge about the details there15:46
zyga-ubuntumvo: yes but I think we are not in a terrible situation, the set of units is closed, it's just deputy-systemd and snapd systemd units15:46
zyga-ubuntumvo: we can see what starts when and what happens15:47
zyga-ubuntumvo: the downside is that last time I looked there was no logging on 14.0415:47
zyga-ubuntumvo: I can look but I'm in a car now15:47
zyga-ubuntumvo: tell me what you know15:48
mvozyga-ubuntu: heh, no worries15:48
zyga-ubuntumvo: did you manage to reproduce it?15:48
mvozyga-ubuntu: I don't know anything at this point :( I have not yet found time to reproduce/debug. was mostly wondering if you saw any of this before, if not, thats fine. I can look tomorrow morning if I can reproduce (some people from landscape wait for this)15:49
zyga-ubuntumvo: I saw one instance15:50
zyga-ubuntumvo: but it was _not_ on 14.0415:50
mvozyga-ubuntu: oh?!?15:50
zyga-ubuntumvo: sergio reported it on his surface15:50
zyga-ubuntumvo: not sure what the conditions were but it wasn't 14.04 for sure15:50
kalikianakyrofa: Perhaps you'd like to have a look at snapcraft#1639 - as written in the description that's not implementing the "on..to.." yet. I'm still working on that (and still pondering how to not make it too ugly, haha). Was wondering if it should be done in one bigger PR or rather two separate ones...15:50
mupPR snapcraft#1639: grammar: to statement <Created by kalikiana> <https://github.com/snapcore/snapcraft/pull/1639>15:50
zyga-ubuntumvo: I can setup a test loop15:50
zyga-ubuntumvo: just not sure what the steps are, boot trusty, <snapshot> install snapd, reboot, test hello world, <rollback>15:51
zyga-ubuntumvo: at each time hello-world should have iface connections15:51
mvocachio_lunch: hey, if you have a free slot in between the other work, would you mind to try to reproduce https://bugs.launchpad.net/snapd/+bug/1721518 ?15:51
mupBug #1721518: Latest snapd in Trusty is broken after reboot because of systemd units start ordering <snapd:In Progress by inaddy> <https://launchpad.net/bugs/1721518>15:51
zyga-ubuntumvo: I can also install other snaps (maybe the one used in the report matters)15:51
=== cachio_lunch is now known as cachio
zyga-ubuntumvo: I can tweak my python script for snapshots to test this very quckly (many loops)15:51
cachiomvo, sure15:51
zyga-ubuntumvo: but that looks like a half day effort tomorrow morning15:52
* kalikiana will be leaving in a few minutes, but feel free to respond here anyway15:52
mvozyga-ubuntu: canonical-livepatch is the important one. if you or cachio (timezone wise it might be better for him as its earlier there) could check that would be great15:52
mvozyga-ubuntu: yeah, lets see if cachio  can easily reproduce and then we decide what to do15:52
mupPR snapd#4076 opened: many: handle core configuration internally instead of using the core configure hook <Created by mvo5> <https://github.com/snapcore/snapd/pull/4076>15:52
zyga-ubuntumvo: ok, Ill let cachio work on this today and I'll attack it first thing tomorrow15:52
mvozyga-ubuntu: \o/ lets sync on it in the morning15:52
zyga-ubuntuI'm working on the overlayfs PR now but I have some tests to adjusts after rebasing15:52
zyga-ubuntumvo: sounds good,15:52
kyrofakalikiana, will do15:53
mvozyga-ubuntu: ta15:53
kalikianaThanks!15:57
kalikianasergiusens: Maybe you wanna check this one? It's store-related and needs another reviewer snapcraft#163416:01
mupPR snapcraft#1634: Push metadata to the Store <Created by facundobatista> <https://github.com/snapcore/snapcraft/pull/1634>16:01
pedronismvo: I left some initial comments in #4076, but looking code afaict16:13
mupPR #4076: many: handle core configuration internally instead of using the core configure hook <Created by mvo5> <https://github.com/snapcore/snapd/pull/4076>16:13
niemeyerpedronis: Thanks, will definitely look today16:18
mupPR snapd#4077 opened: spdx: fix for WITH syntax, require a license name before the operator <Created by matiasb> <https://github.com/snapcore/snapd/pull/4077>16:25
pedronismvo, I meant "looking good"16:31
niemeyerpedronis: I'm slightly confused about the question about epoch16:40
niemeyerpedronis: How can the server possibly respect the epoch if it doesn't know it?16:40
cachiomvo, I could reproduce the error16:54
kyrofasnappy-m-o, autopkgtest 1583 xenial:amd6416:57
snappy-m-okyrofa: I've just triggered your test.16:57
cachiomvo, http://paste.ubuntu.com/25818102/17:02
cachiomvo, I don't see anything weird apart of that17:10
* zyga-ubuntu is stuck in a traffic jam17:23
zyga-ubunturunning spread tests17:23
zyga-ubuntuwatching the rain17:23
zyga-ubuntu...17:23
cachiozyga-ubuntu, I could reproduce the error in trusty17:26
cachioraining here too :)17:26
cachiofalling hail now17:28
cachiokenvandine, hey17:39
pedronisniemeyer: I think, they are thinking of going from revision to the epoch info looking at the info in the store17:39
niemeyerpedronis: I see.. but that wouldn't work for the local case17:40
cachiokenvandine, trying to access to gsettings schemas from a test snap17:40
kenvandinehey cachio17:40
cachiokenvandine, I am using the desktop interface but I can just access by using devmode17:41
pedronisniemeyer: yes, but the local case doesn't quite fit into things, it's really special, we don't have a snap-id either for that case, it's really a cross of an install and refresh17:41
kenvandinecachio, you need the gsettings interface too17:41
cachiokenvandine, yes17:41
cachiokenvandine, I can access to if I manually set the schemas dir to /var/lib/snapd/hostfs/usr/share/glib-2.0/schemas17:42
cachiokenvandine, and I am in devmode17:42
cachiokenvandine, is there any other way to access the user schemas?17:42
mvopedronis: yay, thanks a lot for your review!17:42
mvocachio: thanks, thats great. well, not great but at least easy to reproduce17:43
cachiomvo, yes, first attempt17:43
mvocachio: what comments did you run? exactly the same as in the bugreport? I wonder why none of our existing tests caught this :(17:44
* mvo gets the feeling that however many tests you have, its never enough17:44
kenvandinecachio, i haven't needed to change any schemas dir17:45
kenvandineall my gnome snaps work just fine17:45
kenvandinecachio, which snap are you working on?17:45
cachiokenvandine, do you have an example?17:45
cachiokenvandine, I would like to see how you are building the snaps, tx17:46
kenvandinehttp://bazaar.launchpad.net/~ubuntu-desktop/gnome-calculator/snap/view/head:/snapcraft.yaml17:46
cachiomvo, I have the same question17:46
kenvandinecachio, is an example17:46
cachiokenvandine, tx17:46
kenvandinecachio, and it has to be built with the ubuntu-desktop/gnome-3-26 PPA enabled17:46
cachiomvo, I'll gonna make a review of the tests to see if we need a new tests or what happened17:47
zyga-ubuntucachio: can you tell me what you did to reproduce? I will do the same17:47
cachiozyga-ubuntu, just updated with apt17:48
zyga-ubuntucaa17:48
mvocachio: thanks for chasing this, much appreciated17:48
zyga-ubuntucachio: aha, just that? did you have any set of snaps installed?17:48
cachioand then followed the steps in the bug17:48
zyga-ubuntuah, ok, so the canonical-livepatch is relevant to the bug?17:48
mvocachio: I will look into it in my morning (in ~11h) to see if I can find the root cause17:48
cachioI removed snapd, and then installed 2.27.5 from the archive17:48
zyga-ubuntucachio: so the steps are:17:49
zyga-ubuntucachio: boot 14.0417:49
zyga-ubuntucachio: install/update snapd17:49
zyga-ubuntucachio: install canonical-livepatch17:49
cachio2.27.517:49
zyga-ubuntucachio: ... ?17:49
zyga-ubuntucachio: can you tell me which kernel you had around when the bug happened17:49
zyga-ubuntucachio: (running)17:49
cachiozyga-ubuntu, 4.4.0-89-generic17:50
zyga-ubuntucachio: ok17:50
cachiothen you rebboot17:50
cachiothen install hello-world and see that everything goes ok17:50
cachiothen you reboot again17:50
zyga-ubuntucachio: so after reboot is's okay17:50
zyga-ubuntucachio: aha, go on17:50
cachioand when you do snap intergaces, you see there are not interfaces listed17:51
zyga-ubuntucachio: when you started and before the 1st reboot, were you on 4.x already?17:51
cachiozyga-ubuntu, yes17:51
mvothe instructions sound like a spread test is not too hard to write for this (which is nice)17:51
cachiomvo, should be easy17:51
cachioI'll try to do it17:51
mvo\o/17:54
pedronismvo: seems the change about configure made it so that we run it also on classic but now it fails seeing it cannot be, but we want some bits run also on classic, we need to reorg that somehow17:57
pedronisor we ignore errors differently18:00
niemeyerpedronis: Indeed, but ideally we'd still try to handle it correctly18:02
jdstrandkyrofa: review-wise, yes, so long as it makes sense for both18:02
niemeyerpedronis: Based on the name18:02
niemeyerpedronis: and we might prevent obvious breakage by not allowing the epoch to go through18:02
pedronisniemeyer: yes, but unclear we would put epoch in the context (the context doesn't have names, just snap-id), as I see it it woulb be a special case of "install" or its own "refresh-local" or something18:03
niemeyerpedronis: Hmm18:04
pedroniswe could support both snap-ids and names in context18:04
pedronisbut not a fan of that18:04
niemeyerpedronis: Yeah, I guess it'd be special indeed, and we probably don't want to send names at all cases18:04
niemeyerpedronis: So sounds worth not bothering for now18:04
pedronisyes, I think it's special enough, we can fit it in later but with some special casing18:05
pedronisbut not worth making general changes based on it18:05
pedronisniemeyer: I think the conclusion is tha we don't strictly need epoch in context, I don't know if we still want to be explict though, or better leave the server to do revision->epoch lookup18:06
niemeyerpedronis: I think it wouldn't hurt to have it either way18:08
niemeyerpedronis: But I also can't argue for it with a good argument18:08
pedronisI think it's best to leave it out, at least there's no situation in which the client can send somebody that is "wrong"18:11
pedroniss/somebody/something/18:12
=== JanC_ is now known as JanC
mcphailogra_: is porting ubuntu core to a new ARM device something a semi-technical semi-literate numpty like me would be capable of doing? I'd love to run core on my sheevaplug device, instead of debian19:10
kyrofaYou're still using a sheevaplug? Nice, I've got my old one sitting here19:13
kyrofaHowever, I seem to remember that being arm619:13
kyrofaWhich Ubuntu doesn't support19:13
mcphailkyrofa: I have yet to find anything more reliable, to be honest. It just keeps working.19:13
kyrofamcphail, yeah I was on that train for a while as well. Used a few different plug computers. They kept eating my SD cards, though19:14
kyrofamcphail, the Mirabox was the best19:15
kyrofaDual USB 3, dual gigabit ethernet19:15
mcphailI use the SD card for as little as possible. Most of my stuff is on the internal flash with an external usb drive bind-mounted over it19:15
kyrofaAh, good idea19:15
mcphailIt is a PITA to update when a new debian version comes out, though. Messing about with uboot is never fun. That's why the snappy model is attractive19:17
kyrofamcphail, just to double-check, can I see a `cat /proc/cpuinfo` ?19:17
mcphailhttp://termbin.com/1tev19:19
mcphailDoes core require a certain feature set?19:21
kyrofamcphail, armv519:24
kyrofamcphail, Ubuntu hasn't supported that since... what... 9.10?19:24
kyrofamcphail, and by extension, Ubuntu Core19:24
mupPR snapd#4070 closed: hooks/configure: queue service restarts <Created by stolowski> <Merged by stolowski> <https://github.com/snapcore/snapd/pull/4070>19:24
mcphailkyrofa: aah. But I can build my own kernel snap, can't I?19:25
kyrofamcphail, ogra_ is the expert here of course, but I don't think your quest will end in happiness19:25
mcphailshame19:25
kyrofamcphail, oh sure. But consider the core snap, and the support archs in the store19:25
kyrofas/support/supported/19:26
mcphailHmm. Isn't armhf backwards compatiblke?19:26
kyrofaBackwards compatible to... what?19:27
zyga-ubuntua armv5 binary to run on arvm719:27
zyga-ubuntuan*19:28
mcphailarmel19:28
mcphaildebian moved from armel to armhf with ARMv7 CPUs. That's when Ubuntu dropped sheevaplug support, but debian continued its armel port as well. I _think_ I've run armhf packages on the asheevaplug in the past (certainly, I run syncthing which is just packaged in a generic "arm" repo). I don't really understand this stuff ;)19:31
youngcCan anyone here help with a snapcraft make error?19:38
kyrofamcphail, I don't think it works that direction-- I suspect hard-float instructions aren't supported on soft-float hardware, but the other way around might be possible19:39
kyrofamcphail, but yeah, I don't pretend to be an expert either19:39
kyrofaI also think it's beyond just the floating point hardware19:40
kyrofayoungc, hit me :)19:40
mcphailkyrofa: thanks. You're probably right. I've just run "readelf -h syncthing | grep Flags" and it looks like it is ARM EABI v5. I suspect they release it that way and it will probably be forward compatible19:43
youngchere we go... As far as using make goes it works, but... when I use the following command "make -f ./Makefile-Linux.x86_64 all" the make fails. Mind you I can manually go to the folder and type make and it works.19:44
youngcmore info just a sec19:44
youngcit seems to be failing due to the actual folder is trying to run from19:45
youngcbut not sure19:47
youngcthe code is here: https://github.com/chadyoungdell/benchmark.io.iometer.snap19:48
kyrofayoungc, when you "manually go to the folder and type make", it uses a different Makefile19:49
kyrofayoungc, unless you're missing a step?19:49
kyrofaLet me pull this thing real quick19:49
kyrofaelopio, loving all the bitesize bugs19:51
kyrofayoungc, try `makefile: src/Makefile-Linux.x86_64`19:53
kyrofayoungc, it's relative to the root of the source19:53
kyrofayoungc, which in the tarball, has that makefile in the `src/` dir19:54
youngcI did that before this and had the same failure - let me try again real quick19:54
kyrofayoungc, it still doesn't build, looks like the makefile is missing some things, but that'll get you unblocked anyway19:55
kyrofayoungc, I get "make: *** No rule to make target 'IOGlobals.o', needed by 'dynamo'.  Stop."19:55
youngcthats what I get to19:55
kyrofayoungc, definitely not the same error19:56
youngcif you open the file Makefile-Linux.x86_64 and modifiy IOGlobals.o to src/IOGlobals.o that file actually compiles19:56
youngcsorry, I meant after I chaned the file to what you asked19:57
kyrofayoungc, you might find this works better: https://pastebin.ubuntu.com/25818987/19:57
kyrofayoungc, sounds like the cwd needs to be in src/ basically19:58
kyrofayoungc, so that will help19:58
kyrofayoungc, note the `source-subdir`19:58
youngcok, let me try that19:58
kyrofayoungc, also note the removal of `src` from `makefile`19:58
kyrofabasically that will run `cd src && make -f Makefileblahblah` instead19:59
youngccool!! that works19:59
kyrofaGood deal20:00
youngcI did not know that you could add the source-subdir to something other than git20:00
youngcthanks for the help20:00
kyrofayoungc, any time :)20:00
Odd_Blokesergiusens: o/ Am I doing something wrong, or are dots not allowed in app names?20:01
kyrofaOdd_Bloke, app names consist of upper- and lower-case alphanumeric characters and hyphens. They cannot start or end with a hyphen20:02
kyrofaNo periods20:02
Odd_BlokeHmph.20:03
Odd_BlokeFair enough.20:03
popeysergiusens: https://forum.snapcraft.io/t/snapcraft-unable-to-install-core-snap/2599 - what am I doing wrong?20:20
elopiokyrofa these two PRs have been very challenging for my English. They will need many of your reviews.20:41
kyrofaelopio, my pleasure, of course20:43
kyrofaelopio, oh! Your regular nick again, eh?20:43
elopioI had to change my password...20:44
elopioMatrix is fun.20:44
kyrofaYeah, top-of-the-line user experience, I've noticed20:52
jdstrandroadmr: fyi, https://dashboard.snapcraft.io/dev/snaps/7385/rev/995/ got stuck too. I requested to re-review20:58
roadmrjdstrand: let's have a look20:59
jdstrandroadmr: that didn't seem to help20:59
jdstrand(the re-review)20:59
jdstrandroadmr: https://dashboard.snapcraft.io/dev/snaps/8324/rev/51/ too. 19 hours ago, review tools passed21:00
jdstrandroadmr: could this have something to do with the pacemaker bug?21:00
roadmrpacemaker bug??21:00
mupPR snapd#4078 opened: tests: new test to check interfaces after reboot the system <Created by sergiocazzolato> <https://github.com/snapcore/snapd/pull/4078>21:01
roadmrso - 8324 does seem stuck but 7385 doesn't21:01
roadmrgive me a sec to check the admin21:01
roadmroh, 7385 too, I was looking at wrong rev21:01
jdstrandroadmr: https://launchpadlibrarian.net/342811432/pacemaker_1.1.14-2ubuntu1.2_1.1.14-2ubuntu1.3.diff.gz21:01
jdstrandroadmr: I'm just curious-- cj watson mentioned something dying before that fix21:02
roadmrjdstrand: probably not, this seems related to celery processes in the store's application units grabbing tasks which they then don't process21:03
jdstrandroadmr: ok, 7385-- it just took longer than I expected. looks like my re-review request got it unstuck21:03
roadmrjdstrand: ok - I do see 8324 in the "stuck" queue21:03
roadmrjdstrand: do you have the "run the automated review again" button in https://dashboard.snapcraft.io/dev/snaps/8324/rev/51/ ?21:04
jdstrandroadmr: ok, I won't touch 8324 and let you do whatever you need21:04
jdstrandroadmr: I do21:04
jdstrandI can do that. I didn't know if you wanted to look at 8324 more closely21:04
roadmrjdstrand: give me a sec to just check if it correlates with a rollout (which is when we see celery weirdness happening)21:05
roadmrjdstrand: ok, I kicked 8324 so we don't block it. We did match it with a rollout yesterday, so we'll figure out a way to keep this from happening21:09
roadmrbut it might, while we do figure out a way :) so let me know of any weirdness21:09
kyrofajdstrand, I just got a bug report from a user trying to install my snap on digitalocean, but getting "cannot perform readlinkat() on the mount namespace file descriptor of the init process: Permission denied"21:18
jdstrandroadmr: ackc21:18
kyrofajdstrand, any clues regarding what might be the issue there?21:18
jdstrandkyrofa: sounds like the kernel blocked snap-confine. are there any security denials?21:21
jdstrandkyrofa: fyi, this is line 132 in cmd/snap-confine/ns-support.c21:22
kyrofajdstrand, I'll check21:23
jdstrandkyrofa: if there is no denial, this is code zyga wrote so he may be more familiar with it. but would likely need a forum post with kernel version, etc21:24
kyrofajdstrand, does this look odd? Oct 25 17:40:26 portfolio kernel: [  223.174251] type=1400 audit(1508967626.765:94): apparmor="DENIED" operation="ptrace" profile="/snap/core/3247/usr/lib/snapd/snap-confine" pid=2427 comm="snap-confine" requested_mask="read" denied_mask="read" peer="unconfined"21:48
jdstrandkyrofa: it does21:49
jdstrandkyrofa: I'm curious if this rule would fix it: ptrace (read) peer=unconfined,21:50
jdstrandkyrofa: we already have this rule which is meant to cover this: ptrace trace peer=unconfined,21:51
jdstrandkyrofa: so it is possible that the Digital Ocean kernel is behaving differently21:51
jdstrandkyrofa: (in snap-confine's profile)21:52
kyrofajdstrand, it's not re-execing using the profile in the core snap?21:52
jdstrandkyrofa: hmm? I don't know anything about the vm that this would be running in21:53
kyrofajdstrand, sorry, rephrasing: where is snap-confine's profile?21:53
jdstrandkyrofa: yes, that is the question. and the answer depends on if it is re-execing :)21:54
kyrofaOh! So I DID ask the right question, haha21:54
kyrofajdstrand, I believe it's good old Ubuntu 16.0421:54
jdstrandkyrofa: well, if that was your question, I didn't understand it :P21:54
jdstrandanyhoo21:54
kyrofajdstrand, boo :(21:55
jdstrandso, if Ubuntu 16.04, then it should be reexecing21:55
kyrofaBut I can still copy the profile off, edit it, and load it21:55
jdstrandyou'll want to obtain the version of core. look at /snap/core/current and see what it is pointing to21:55
kyrofajdstrand, 3247 given the denial above, no?21:56
jdstrandthen it will be /etc/apparmor.d/snap.core.3247.usr.lib.snapd.snap-confine21:56
jdstrandkyrofa: I suggest copying that file to ~21:56
jdstrandthen modify it, then do: sudo apparmor_parser -r ~/snap.core.3247.usr.lib.snapd.snap-confine21:56
kyrofajdstrand, excellent, thank you21:57
kyrofaI'll get back to you21:57
jdstrandthat was harsh. I had a terminal open with an ssh session to a vm. I start to type in it and I didn't notice that typing into showed the connection was broken. then I sudo shutdown the 'vm' and tore down my session22:00
jdstrandfun!22:00
kyrofaOouuch22:00
kyrofajdstrand, teach YOU to type looking at your fingers22:01
jdstrandkyrofa: so, what I was going to say was make sure you add the rule to the main profile, not the mount-helper child profile22:01
jdstrandwell, the vm is stopped now22:01
jdstrandso I achieved at least that much :)22:02
jdstrandkyrofa: if that works, let me know and give the output of cat /proc/version_signature22:03
kyrofajdstrand, I only see one `ptrace trace peer=unconfined` in there22:03
kyrofajdstrand, I'm just replacing it... no?22:03
jdstrandkyrofa: don't replace. add22:04
kyrofaJust right below?22:04
jdstrandyeah22:04
kyrofajdstrand, double-checking: the filename that I hand to apparmor_parser doesn't matter, right?22:05
jdstrandkyrofa: correct22:06
kyrofajdstrand, one more double-check: https://pastebin.ubuntu.com/25819686/22:06
kyrofaHaha, dangit, flip the args22:07
jdstrandkyrofa: the diff is backwards, but yes22:07
* jdstrand nods22:07
kyrofaOkay good22:07
jdstrandkyrofa: wait whoops22:07
jdstrandkyrofa: you forgot the trailing comma22:07
kyrofaAh, good catch22:07
jdstrandkyrofa: this is also a safe action. if you jack it up, a reboot gives you the profile on the system since you didn't modify it22:08
kyrofajdstrand, indeed, thank you!22:12
jdstrandkyrofa: did it work?22:13
kyrofajdstrand, working on it, this is async I'm afraid22:17
jdstrandgotcha22:17
kyrofajdstrand, side note, I was trying to tweak the profile myself and send it to him, only to learn that I seemingly can't access anything in my home directory with "snap-confine" in the name from a confined snap22:17
kyrofajdstrand, is that true?22:17
kyrofajdstrand, https://pastebin.ubuntu.com/25819750/22:18
jdstrandkyrofa: you are within a confined snap?22:18
kyrofajdstrand, indeed22:18
jdstrandkyrofa: and the home interface is connected?22:19
jdstrandkyrofa: it seems it would be since foo-bar-baz is there22:19
kyrofajdstrand, yep. Note the pastebin. It works as long as "snap-confine" isn't part of the file name :P22:19
kyrofajdstrand, wait, no sorry, only if snap-confine is starting the file name22:22
jdstrandok22:22
jdstrandI was going to say, I couldn't see how foo-bar-snap-confine wouldn't work22:22
jdstrandkyrofa: it is this gem: http://paste.ubuntu.com/25819780/22:23
kyrofajdstrand, haha, ouch22:23
jdstrandkyrofa: it's incomplete22:24
jdstrandI'll add a todo for that22:24
kyrofajdstrand, thank you!22:24
kyrofajdstrand, that profile tweak did the trick22:26
kyrofajdstrand, another interesting tidbit: this box was upgraded from trusty22:26
jdstrandkyrofa: ok, what is the kernel? cat /proc/version_signature22:27
kyrofajdstrand, Ubuntu 3.13.0-71.114-generic 3.13.11-ckt2922:28
jdstrandkyrofa: alright, so that there is your problem. you need the xenial kernel22:28
jdstrandI'm surprised things are working as well as it is22:29
kyrofaSo do-release-upgrade doesn't upgrade the kernel?22:29
jdstrandkyrofa: it absolutely should have22:29
jdstrandkyrofa: perhaps the kernel was pinned? something went awry in the upgrade? grub didn't get updated?22:30
jdstrandthere are a lot of things that could've gone wrong22:30
jdstrandkyrofa: sudo apt-get install linux-generic22:30
jdstrandthat may provide a clue if it is pinned. beyond that, they need to upgrade their kernel22:31
kyrofaThanks jdstrand there are actually two people saying this happened on digitalocean22:32
kyrofaSomething weird is happening over there22:32
jdstrandyeah. huh22:33
jdstrandkyrofa: is this a xen environment?22:33
kyrofajdstrand, great question, I have no idea how they do it22:33
jdstrandcause maybe it is Digital Ocean's kernel (that happens to be an Ubuntu kernel)22:33
jdstrandsome hosting environments do things like that22:34
mupPR core#38 closed: Add another pi-config option <Created by sergey-borovkov> <https://github.com/snapcore/core/pull/38>22:50
mupPR core#58 closed: use `snapctl internal configure-core` to configure core <Created by mvo5> <https://github.com/snapcore/core/pull/58>22:50
mupPR core#62 closed: create xdg-settings inside the core snap <Created by mvo5> <https://github.com/snapcore/core/pull/62>22:50
mupPR core#38 opened: Add another pi-config option <Created by sergey-borovkov> <https://github.com/snapcore/core/pull/38>22:51
mupPR core#58 opened: use `snapctl internal configure-core` to configure core <Created by mvo5> <https://github.com/snapcore/core/pull/58>22:51
mupPR core#62 opened: create xdg-settings inside the core snap <Created by mvo5> <https://github.com/snapcore/core/pull/62>22:51
kyrofajdstrand, finally, all resolved now23:09
kyrofajdstrand, https://www.digitalocean.com/community/tutorials/how-to-update-a-digitalocean-server-s-kernel23:09
kyrofajdstrand, tl;dr older droplets manage their kernel differently, outside the machine in the dashboard23:10
kyrofajdstrand, so even after updating, while the new kernel was installed, it wasn't booting into it23:10
nacckyrofa: yeah, it's a pretty regular FAQ in #ubuntu sadly23:10
kyrofajdstrand, once we got that sorted, snaps work fine23:10
kyrofanacc, brutal man23:10
kyrofaWeird way to structure a system23:11
nacckyrofa: we'll be debugging some weird issue and it'll turn out they are runnig some random kernel :)23:11
kyrofaBut it sounds like they know that, and don't do it anymore23:11
nacckyrofa: VPS are a pain in that regard23:11
kyrofanacc, oh yeah, that happens all the time, definitely23:11
kyrofanacc, but trying to figure out why a kernel isn't being booted, despite grub looking perfect... ?23:11
kyrofanacc, do you see that often?23:11
nacckyrofa: not off the top of my head -- but i often default to blaminng the VPS provider if they are on any kind of VPS23:12
nacc:)23:12
kyrofanacc, heh23:12
jdstrandkyrofa: interesting, thanks!23:35
kyrofajdstrand, thank YOU23:36
kyrofaDidn't even consider asking about the kernel23:36
kyrofaSorry for the wild goose chase23:36
kyrofaNow I know23:36

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!