/srv/irclogs.ubuntu.com/2017/11/13/#snappy.txt

gsilvaptHello. I was running a Snapcraft tutorial to refresh my memory and for some reason it assumes the command is snap_name.the_name_I_wrote_In_yaml_file00:15
gsilvaptDid I do something wrong?00:15
ikeyhttps://plus.google.com/+Solus-Project/posts/5Cn3P26tbtK <- coolness :D00:17
ikeyfirst soul to run lsi on ubuntu00:17
ikeygsilvapt, from what i understand, if the name in apps: matches the snap name, the original name is preserved00:18
ikeyif the app name is different, and no automatic aliasing is permitted for it (by vote), it'll go to $snap.$app00:18
gsilvaptI just tried that and I think it is not working00:18
gsilvaptI will try keep $snap and $app name equal and add bin/hello to the command field00:18
ikeyright00:18
mupPR snapcraft#1727 closed: integration tests: remove ruby version <bug> <Created by kyrofa> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/1727>00:19
gsilvaptNope, I get "[...] hello can be found in following packages[...]" error00:19
ikeyah right so the alias thing00:19
ikeythe name exists in the ubuntu archive so it wont alias it00:20
ikeyis my understanding00:20
gsilvaptwell, it should somehow, that's why the tutorials mentions it00:20
ikeyprobably best to poke one of the proper snap guys when they're around, timezones permitting00:20
gsilvaptWhen you install the snap, it gives this error. Then you add the app part and it should work after "snapcraft prime" and "snap try"00:21
diddledanthe app needs to be named the same as the snap for it to use that name as the command00:22
diddledanso snapcraft.yaml:00:22
diddledanhttps://www.irccloud.com/pastebin/RaiHmrXU/00:22
diddledannote the position of the hello00:23
gsilvaptPlease, let me know where they differ because I can't tell the difference: https://pastebin.com/kkrEKGnT00:23
gsilvaptI've also tried removing the bin part in the command00:23
diddledanyour command isn't "hello"00:23
diddledanyour command is "gsilva-test-snap"00:23
diddledanso trying to run "hello" won't work00:24
gsilvaptthe only way it works is gsilva-test-snap.hello00:24
gsilvaptand that configuration doesn't even work00:24
ikeythe snap would need to be named hello too, right?00:24
diddledanno. in that yaml your snap will install a command in /snap/bin called "gsilva-test-snap"00:24
gsilvaptgsilva-test-snap.hello only works if apps: hello: command: hello is there00:24
ikeysure but it'd just be "hello" if all those were "hello"00:25
diddledanthe command: bit doesn't affect the name of the command it installs00:25
diddledancommand: is to tell snapd which executable to call when "gsilva-test-snap" is run00:26
gsilvaptdiddledan, then you're basically telling snapcraft changed its functionality along the way and all guides are out-dated?00:26
diddledanif you change apps: gsilva-test-snap to apps: hello then your app name will be "hello" which differs from the name of your snap so it gets appended with a dot00:26
diddledanno00:27
diddledanI'm not saying that at all00:27
gsilvaptdiddledan, it doesn't work, I already mentioned that. When I put hello instead, the only way I can run the command is if I run gsilva-test-snap.hello - which is basically $snapName.$snapApp00:27
diddledanhttps://www.irccloud.com/pastebin/ArgrTEEO/00:28
gsilvaptMoreover, if I change the snap name to hello, then the command hello works alone00:28
gsilvaptAHH00:28
gsilvaptI think I got it00:28
ikeyow i didnt realise that snapd bind mounts the nvidia driver into the target on multiarch00:28
diddledanouch00:29
ikeythats gonna slightly ruin my plans for /var/lib/snapd/gl/32 on ubuntu00:29
ikeyer lib/gl/3200:29
diddledanthat sounds like something to be changed in snapd to support cores other than ubuntu?00:29
ikeywell right now the mount-support-nvidia.c only exposes 64-bit driver to the "guest"00:30
diddledanit's an assumption of filesystem layout which shouldn't be assumed00:30
ikeyi could perhaps change to something like..00:30
ikey/var/lib/snapd/lib/gl/vulkan /var/lib/snapd/lib/gl32 /var/lib/snapd/lib/gl00:30
ikeyer00:31
ikey*lib/vulkan00:31
gsilvaptThanks for the help, diddledan and ikey00:31
ikeynp00:32
ikeyyep i think i like that schema more00:32
ikeyin which case ill pull my PRs and send new ones00:32
ikeyand do both multiarch + biarch together00:32
mupPR snapd#4199 closed: cmd/snap-confine: Add support for 32-bit NVIDIA on biarch <Created by ikeydoherty> <Closed by ikeydoherty> <https://github.com/snapcore/snapd/pull/4199>00:36
mupPR snapd#4206 closed: cmd/snap-confine: Make the vulkan ICD definition available <Created by ikeydoherty> <Closed by ikeydoherty> <https://github.com/snapcore/snapd/pull/4206>00:36
robert_ancelljamesh: Perhaps you might be able to help in https://bugzilla.redhat.com/show_bug.cgi?id=150958600:41
ikeywhat sounds better, "/var/lib/snapd/lib/gl32" or "/var/lib/snapd/lib/gl.x86" ?00:45
* ikey is tending towards gl3200:46
ikeycan't start monday without a bit of bikeshedding :p00:46
robert_ancellSon_Goku: I'm assuming you've gone? The Fedora issue is definitely in snapd, possibly due to missing polkit config (that definitely should be fixed) and some SELinux permissions needing updating?00:47
King_InuYasharobert_ancell: I'm still here00:47
King_InuYashaI've just been playing a video game for the last few hours :)00:48
robert_ancellDon't let me interrupt you then :)00:48
King_InuYashais there a new polkit config I'm supposed to add00:48
King_InuYasha?00:48
King_InuYashabecause this sounds like something new no one told me about00:48
robert_ancellKing_InuYasha: yes. This means we no longer need snapd-login-service 9o/00:48
King_InuYashaoooo00:48
King_InuYashathat'd be nice00:48
King_InuYashawould you be willing to throw the deets into the bugzilla bug so that I can fix it later?00:49
robert_ancellKing_InuYasha: already there00:49
robert_ancellI'm struggling to understand the SELinux stuff though, you might know better there00:49
King_InuYashaI suspect that the introduction of snap-seccomp is probably breaking things00:50
King_InuYashawhat was *supposed* to happen (and is clearly not) is when stuff like this is introduced, something would flag zyga and myself about things like this that'd break snapd in SELinux00:50
King_InuYashasince snapd _still_ can't generate SELinux policies itself, I have to "unlock the gates" so to speak00:51
* King_InuYasha is super annoyed that after a year, still no one has started working on supporting SELinux properly00:51
King_InuYashait's things like this that make me reticent to ship snapd in EPEL00:51
King_InuYashalike, what's the _point_ in shipping snapd for CentOS if I know everything is going to be broken00:52
King_InuYashaand the malarkey about stacked LSMs isn't going to help me at all, because *even if* we stacked AppArmor on SELinux in Fedora, that still doesn't help me for RHEL/CentOS where they're *not* going to do that00:53
* King_InuYasha has a bone to pick with the security people about this, as this is what keeps diverting attention towards even getting this resolved00:53
King_InuYasharobert_ancell: basically, at some point, I need to collect all the AVC denials _again_ and fill them back into the snapd SELinux policy00:54
robert_ancellKing_InuYasha: just keep iterating until it works?00:55
* King_InuYasha sighs00:56
King_InuYashayeah, basically00:56
King_InuYashait's exhausting, though00:56
King_InuYashaand it's so bloody tedious00:56
King_InuYashathis is the shit work that makes me wonder if it's worth doing all this00:57
King_InuYashabecause _no one_ ever helps00:57
King_InuYasharobert_ancell: anyway, it's not your fault00:58
robert_ancell:(00:58
King_InuYashayou've been pretty helpful whenever I've encountered issues with snapd-glib, so for that I thank you00:59
King_InuYashabut snapd is *hard*00:59
King_InuYashaand on top of this, I *still* need to do the work on snapcraft00:59
King_InuYashabut where's the time?00:59
robert_ancellKing_InuYasha: what's the challenges with snapcraft?01:00
King_InuYashawriting the DNF backend to complement the APT one takes time and effort01:01
robert_ancelloh, for pulling in deps01:01
King_InuYashaand it's not helping that Snapcraft does weird things with packages01:01
King_InuYashaand on top of it, someone needs to package LXD for Fedora because the lxd snap is garbage and it makes no sense that it isn't in Fedora01:01
King_InuYashawithout a working lxd, snapcraft cleanbuild is broken01:02
robert_ancellI see01:02
King_InuYashathere's already somebody packaging it in COPR (equivalent to PPA), but it should be migrated to the main Fedora repositories01:03
King_InuYashabut the problem is that I'm just one person, and I have so many things I need to do01:03
robert_ancelloh, at least there's that01:03
King_InuYashaand more stuff keeps piling up01:03
robert_ancellSure, please don't burn out! You've been a huge help getting everything working in the Fedora/RH land01:04
King_InuYashaI'm drowning...01:04
King_InuYashaI've been asking for help in the last few sprints, but aside from that short period where morphis was helping zyga, I've got nothing01:04
King_InuYashaand nowadays, I don't even have zyga01:05
robert_ancellKing_InuYasha: where's the snapd packaging stored? I'll try and write the polkit patch for it01:06
King_InuYashahttps://src.fedoraproject.org/rpms/snapd01:06
King_InuYashaI've been putting off the 2.29.x rebase for a while, because I know a whole bunch of things have changed01:07
ikeyubuntu has /usr/lib32 right?01:07
King_InuYashaikey: no01:07
ikeyas a link01:07
King_InuYashait shouldn't anymore01:08
ikeyhttps://github.com/solus-project/linux-steam-integration/issues/35#issuecomment-34377734601:08
King_InuYashaunless your system is old as shit and you've been upgrading from pre-debplatformlibdirs01:08
ikeybecause the nvidia bit looks for "/usr/lib/nvidia-%d" and im tryna figure out how to get the 32-bit equivalent01:08
King_InuYashayou can't01:09
ikeyi suspect it means directly prodding "/usr/lib/i386-linux-gnu" or some nonsense01:09
King_InuYashayes01:09
King_InuYashaif it's installed there, it'll be there01:09
King_InuYasha32-bit libraries go into nonsense /usr/lib/<platform-triple>01:09
ikeythat person is on ubuntu 17.1001:09
King_InuYashayeah, so the {multiarch} keyword in AppArmor should already take care of that01:10
ikeyi dont think that qualifies as "old as shit"01:10
ikeythats apparmor01:10
ikeynot C01:10
ikeyi need the actual directory01:10
King_InuYashaoh fuck me01:10
ikeythe fuck is your problem?01:10
ikeysome attitude on you01:10
King_InuYashasomething just broke on my end01:10
ikeyill work it out myself01:10
King_InuYashamy UPS just died01:10
King_InuYasha... and there goes my beefy rig :/01:11
King_InuYashaikey: anyway, the ubuntu multiarch *should* be /usr/lib/i386-linux-gnu01:11
King_InuYashait *could* also be i686-linux-gnu since Debian did that transition between jessie and stretch01:11
King_InuYashalemme check real quick01:11
King_InuYashanah, it's i386-linux-gnu01:12
ikeyhttps://packages.ubuntu.com/artful/amd64/nvidia-384/filelist01:12
King_InuYashaugh01:12
ikeyit would appear someone made a legacy-jank-concession01:12
King_InuYashayeah01:12
King_InuYashaI suspect they didn't realize that it was supposed to go into $(LIBDIR) not $(LIBEXECDIR)01:13
ikeyi feel offended for it and i dont even use multiarch01:13
King_InuYashaso they accidentally borked it for multiarch01:13
King_InuYashaso unfortunately, this is an Ubuntu problem01:14
King_InuYashathere's not really a nice way to deal with this, since they don't set this up correctly: https://packages.ubuntu.com/artful/i386/nvidia-384/filelist01:14
ikeyhm01:15
King_InuYashaIn Debian, you're supposed to use platform libdirs to make this work correctly01:16
ikeyok so i could prod lib and allow fail, and prod lib32, and allow fail01:16
King_InuYashayeah01:16
ikeyand in apparmor allow lib{,32}01:16
ikeybecause apparmor is nice for that01:16
* King_InuYasha shrugs01:16
King_InuYashayou'd also want to allow lib64, right?01:16
ikeyeehm01:16
King_InuYashaor is that already allowed?01:16
ikeymultiarch is debian only01:16
ikeyreally01:16
ikeyand its already doing from "just lib"01:16
ikeyfor the biarch stuff then yeah sure01:17
King_InuYasharight, that's what I mean01:17
ikeywe want lib{,32,64}01:17
King_InuYashaand it's not like /usr/lib64 doesn't exist in Debian01:17
ikeyright01:17
King_InuYashait just only has one library in it01:17
ikeyim thinking something like this01:17
ikey  /var/lib/snapd/lib/gl{,32}/** rm,01:17
ikeyand on the nvidia code mount the 32-bit and 64-bit directories01:18
ikeyon the biarch you'd get two tmpfs's01:18
ikeywith symlink farms01:18
King_InuYasharight01:18
ikeyas opposed to my old method of /32 subdir01:18
ikeywhich.. was somewhat short sighted01:18
ikeynow i think of it01:18
King_InuYashaand on deb platform libdirs, you get a single tmpfs01:18
ikeyyeah01:18
ikeyok so this "allow all the 32bits" should be technically trivial and i think my change is sane01:18
ikeyand ill do vulkan separate01:18
* King_InuYasha gives ikey a thumbs-up01:19
ikeybecause thats probably gonna be a copy the icds into tmpfs jobby01:19
King_InuYashahow do you deal with UsrSplit?01:19
ikeyso biarch in the nvidia code means "/usr/lib" "/usr/lib32"01:19
King_InuYashaaka, the arbitrary moving of libs between / and /usr?01:19
ikeyi.e.:01:20
ikey"/usr/lib/libEGL.so*",01:20
ikeywe're only dealing with those dudes there01:20
ikeyso no potential for /lib vs /usr/lib jank01:20
ikeyfwiw solus only has ld-linux symlinks in /lib for libraries01:20
ikeyand everything else is in /usr/lib64 (lib -> lib64 link)01:20
King_InuYasharight01:20
King_InuYashaand you have /usr/lib32 for your i686 libs, iirc01:21
ikeyright01:21
ikeyall of this for darned steam eh01:21
King_InuYashameh01:21
King_InuYashait's Valve's fault :D01:22
ikeymm01:22
King_InuYashathey should fix it01:22
ikeyhttps://hastebin.com/yatafacebe.cs <- seems half sane01:22
ikeyill need to actually compile it now and test but ya01:22
King_InuYashato clarify, there should never be a case of /lib/gl64?01:22
ikeynah01:22
ikey"lib" is considered "native arch"01:22
ikeyin this context01:22
ikeyand "lib32" is "oh hey i found a lib32 variant lets add him too"01:22
ikeyon 32-bit system "lib" would be 32-bit and lib32 would never mount01:23
ikeycuz it wouldnt exist01:23
King_InuYasha... you'd hope01:23
ikeywell i mean it'd be harmless if it did01:23
King_InuYashatechnically, on 32-bit Debian and Ubuntu, it does01:23
ikeylets say someone got cocky on i686 and symlinked lib32 to lib01:23
ikeyso it exists twice01:23
King_InuYashanothing bad really happens then01:23
ikeyworst case scenario you now have the same tmpfs twice01:23
ikeyand its in LD_LIBRARY_PATH01:23
ikeywell SNAP_LIBRARY_PATH and *potentially* LD_LIBRARY_PATH01:23
ikeybut totally harmless01:23
ikeyld will just break at the first usable dude01:24
King_InuYasharight01:24
ikeyand for all the other nastiness, liblsi-intercept.so can kick it in the face and say "no"01:24
King_InuYasha:)01:24
King_InuYashasounds like a plan01:24
ikeyi can add a sanity test to LSI on entry too01:25
ikeyi.e. if /var/lib/snapd/lib/gl/libGL.so.1 exists, but /var/lib/snapd/lib/gl/32/libGL.so.1 *doesn't* exist, start complaining01:25
ikeyif we're 32-bit, complain that store wont work01:25
ikeyif we're 64-bit - complain that nothing will work01:25
ikeyinstead of steams entirely unhelpful "libGL.so.1" error dialog01:25
robert_ancellKing_InuYasha: what command do you use to build from git src branches?01:27
robert_ancelland what's the equivalent of dch?01:34
King_InuYasharobert_ancell: the tool fedpkg is what you're looking for01:34
King_InuYashaand as for bumping changelogs, that rpmdev-bumpspec01:34
King_InuYasha"sudo dnf install /usr/bin/fedpkg /usr/bin/rpmdev-bumpspec"01:34
robert_ancellKing_InuYasha: ta01:35
King_InuYashafor reference: https://www.mankier.com/1/fedpkg & https://www.mankier.com/1/rpmdev-bumpspec01:35
robert_ancellKing_InuYasha: and the equivalent of apt build-dep?01:37
robert_ancellah dnf builddep01:39
King_InuYashayep01:50
King_InuYashathough you can do clean chroot builds by using fedpkg mockbuild when you're in the git repo top dir01:50
King_InuYashaahh, a couple of hours of Sonic Forces have made me feel a lot better :)01:53
* ikey flinches at mere mention of games01:58
ikeycmd/configure:1183:55: "includ" is a misspelling of "include"01:59
ikeyCrushing failure and despair.01:59
ikey*snort*01:59
ikeythe tests dislike a dirty tree :p02:00
King_InuYashahaha02:01
King_InuYashaikey: well, if it makes you feel better, Sonic Forces isn't a Linux game02:01
King_InuYashaI have it on Nintendo Switch :)02:01
ikeyaah ok02:01
King_InuYashaI do wish SEGA would release Sonic games for Linux02:02
King_InuYashabut it's unlikely to happen unless someone has an "in" with SEGA02:02
* King_InuYasha stares intently at ikey02:02
ikeyxD02:02
ikeynah not me02:02
King_InuYasha:'(02:03
King_InuYashayou don't secretly have someone who knows someone who works on Sonic Team in your back pocket? :P02:03
ikeynaaah02:04
ikeybesides i wouldnt wanna be in my back pocket when i sit down..02:04
ikey"ln -s /home/ufee1dead/Projects/snapd src/github.com/snapcore/."02:04
ikey>_>02:04
Son_Gokuhaha02:04
ikeygo doesn't know... shhh :p02:05
Son_Gokuit's the dumbest part about go02:05
ikeyFAILgithub.com/snapcore/snapd/cmd/snap-seccomp1.255s02:05
ikeyCrushing failure and despair.02:05
ikeyaw what02:05
Son_Gokusometimes I wonder what the fuck Google was thinking when they made that language02:05
ikeyuser: unknown user daemon02:06
ikeysudo useradd daemon -s /bin/true -c "lol" -g daemon02:06
ikey>_>02:06
ikeySon_Goku, they played it safe tbh02:08
Son_Goku>_<02:08
ikeyoh cmon seccomp cruft02:08
ikeythis is just silly now02:08
ikeynow i get https://hastebin.com/raw/omukojuzok02:08
ikeyand i had to create that daemon user02:09
ikeyso - im just gonna ignore all seccomp failures from hereon out02:09
ikey^_^02:09
ikeyok that change actually works nicely, now to test its apparmor side is ok02:19
ikeythen to stick on vulkan and opencl02:19
ikeyand we're all happy02:19
ikeybash-4.3$ ls /var/lib/snapd/lib/vulkan02:37
ikey10_nvidia.json10_nvidia_wayland.json02:37
ikey\o/02:37
ikeygah denials.. :D02:37
mupPR snapd#4207 opened: Flesh out NVIDIA support for biarch and multiarch systems <Created by ikeydoherty> <https://github.com/snapcore/snapd/pull/4207>04:15
mupPR snapcraft#1728 opened: beta <Created by snappy-m-o> <https://github.com/snapcore/snapcraft/pull/1728>05:53
mborzeckimorning guys05:57
mborzeckimvo: hi07:01
mvohey mborzecki, good morning07:03
mborzeckihow was your weekend?07:03
mvomborzecki: good, weather was a bit annoying, gray and rainy but everything else was fine :)07:04
mborzeckigreat07:04
mvomborzecki: and yours?07:04
mborzeckiwe had indenepdence day on the 11th, unfortunately the weather was so bad :/ a bit of rain, a bit of snow and windy07:06
mborzeckididn't even try to take my kids to see the festivities07:07
mvomborzecki: meh, sounds like we had about the same weather (except no snow here :)07:10
mborzeckineed to think of a scheme where you stay half a year in europe (the nicer half of the year) and then in the winter you move to southern hemisphere or at least somewhere south there it's cheap and warm07:13
mvomborzecki: ask zyga about that, he might have some ideas ;)07:14
mborzeckimalta should be nice this time of year07:15
mvomborzecki: yeah, gosh, malta is nice07:19
mvomborzecki: don't tempt me, when I look outside I really want to fly immediately :)07:20
mborzeckihahaha07:20
zyga-ubuntuI will send kids to school and I'll be back soon07:22
mvozyga-ubuntu: do you know if 4202 needs a jamie review still?07:23
zyga-ubuntulooking07:25
zyga-ubuntumvo: I think so, he had a look already07:25
mvook07:26
zyga-ubuntumvo: today I will do some code reviews and I'll return to 14.04 / lxd issue07:27
zyga-ubuntumvo: I also plan to resume looking at brave browser not working on 14.0407:28
mvozyga-ubuntu: sounds good, lets try to fix this for 2.3007:28
mborzeckizyga-ubuntu: posted SNAPD_DEBUG from running brave browser07:29
zyga-ubuntumborzecki: thank you, at the forum?07:29
mborzeckiyup07:29
zyga-ubuntuI see it now07:29
zyga-ubuntuI tried running it but it didn't crash outright07:30
zyga-ubuntubut it didn't start up either07:30
zyga-ubuntuneeds some more digging07:30
mborzeckialso, have you seen the problem with teleconsole that popey had?07:30
zyga-ubuntumborzecki: no, I have not07:31
mborzeckihttps://forum.snapcraft.io/t/brave-and-other-apps-dont-launch-on-arch/2770/907:31
zyga-ubuntumborzecki: well, I'll be busy today :)07:32
mborzeckihe's running it in a vm, I tried running in locally and works just fine07:32
zyga-ubuntumborzecki: I wonder if that is CPU age difference07:32
zyga-ubuntumborzecki: perhaps you just have the specific instruction implemented07:32
mborzeckiyup, my rough guess is that ld.so does some optimized mmx/sse/avx code and it's not there in the vm07:32
mborzeckianyways, it's super weird07:33
mupPR snapd#4208 opened: packaging/arch: do not quote MAKEFLAGS <Created by bboozzoo> <https://github.com/snapcore/snapd/pull/4208>07:49
zyga-ubuntumvo: https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/167919108:08
mupBug #1679191: Download snap "conjure-up" from channel "stable" (snap not found) <snapd (Ubuntu):New> <https://launchpad.net/bugs/1679191>08:08
ikeyzyga-ubuntu, got some toys uploaded :p08:10
zyga-ubuntuikey: oh? :-)08:11
ikeyi scrapped my 2 PRs and did another last night08:11
zyga-ubuntuI saw two closed08:11
ikeywhich adds multiarch nvidia support08:11
ikeyhttps://github.com/snapcore/snapd/pull/420708:11
mupPR #4207: Flesh out NVIDIA support for biarch and multiarch systems <Created by ikeydoherty> <https://github.com/snapcore/snapd/pull/4207>08:11
zyga-ubuntuI didn't go through all of github.com/notifications yet08:11
ikeyit just fixes up nvidia into a nice state08:11
zyga-ubuntuaha, nice, I'll have a look soon08:11
ikeyi added a link there to the snaps built against that PR if anyone fancies testing them and playing around at some point08:11
ikey(quite literally "playing" :))08:12
zyga-ubuntuhaha08:12
zyga-ubuntunice, I don't have anything beefy for gaming though08:12
zyga-ubuntuwell, not nvidia08:12
ikeyfrom my angle I can't see why this PR won't work on ubuntu but id love to have the confidence in that assertion08:12
ikeyoh fwiw open sauce drivers will Just Work â„¢ on master08:12
ikeyas it contains its own mesa etc08:12
zyga-ubuntuikey: we made sure we can now test nvidia a little bit more than before08:12
ikeyoh ok08:13
* ikey is rocking a 1060 on the laptop so gets to test that stuff08:13
zyga-ubuntuikey: both mvo and me have oldish nvidia GPUs for testing08:13
ikeyah ok08:13
ikeywell if you ever need me to prod anything with a new gpu lemme know08:13
zyga-ubuntuthank you, I think we will test each candidate core snap this way from now on08:14
zyga-ubuntuto avoid issues like we had during the last release08:14
ikeyyea08:14
ikeygonna pick your brains at some point about execution permissions on mount points under snap08:14
ikeyor "why i get EPERM on hostfs mounts"08:14
ikeybut not on ~08:14
ikeyits gotta be the lower apparmor stuff08:14
zyga-ubuntusure08:15
ikeybut > some point08:15
zyga-ubuntuI'll do my best to help08:15
ikeyi just watched a god awful film and cant brain08:15
zyga-ubuntuwhich one?08:15
ikey"Fallen"08:15
ikeyits on netflix atm08:15
ikeystinks like a fanfilm of twilight08:15
ikeyand maybe written by a 12 year old08:15
zyga-ubuntuikey: I just checked, not available in .pl on netflix08:16
zyga-ubuntuikey: likely a feature then :)08:16
ikeylol ya08:16
* zyga-ubuntu didn't realize ubuntu had a /usr/lib32 directory08:17
ikeyyeah we were all a bit astonished by that one08:17
zyga-ubuntuI wish someone wrote a blog explaining the semantics of the FS08:17
ikeythe nvidia driver packages have the lib32 dirs08:17
zyga-ubuntuis it all just a bunch of legacy08:17
ikeyi was expecting multiarch stuff08:17
zyga-ubuntuand more legacy08:18
zyga-ubuntuand compat glue and symlinks on top?08:18
jameshlib32 is for the x32 pseudo-architecture, IIRC08:18
ikeynah thats libx3208:18
zyga-ubuntujamesh: yeah, that's not x3208:18
* zyga-ubuntu played with x32 last week for some pet project08:18
ikeyhttps://packages.ubuntu.com/zesty/amd64/nvidia-375/filelist08:18
ikey*shrug*08:19
jameshzyga-ubuntu: I think I've got everything addressed in my snap-update-ns PR.  It now removes even more lines of code08:19
mborzeckihuh, weren't these supposed to be under /lib/<arch-tuple> ?08:19
ikeyim guessing theres a reason for it08:19
ikeymore than likely due to the subdirring08:19
ikeyand update-alternatives and all that junk08:19
ikeyor the more elegant name of "compounded beastliness"08:20
ikeyon the other hand it made my PR a whole bunch simpler :P08:20
ikeyfwiw i figured these changes will allow me to follow up with a very simple cuda/opencl enabling PR at some point when i have the ocl-icd patch ready08:23
ikeyas it'll be a clone almost of the vulkan change08:23
ikeythen we can enable opencl/cuda in snaps trivially08:23
ikey(handy for games and blender / nvcc etc)08:23
zyga-ubuntujamesh: hey, I'll gladly look shortly08:26
mwhudsonzyga-ubuntu: i finally poked at snapd 2.29.3 for debian, turns out we need a newer golang-dbus but that should be easy enough08:28
zyga-ubuntumwhudson: thank you! I have my debian box back but I wasn't doing any packaging for a good while now08:29
ikeywondering if i could export some parts of LSI shim as part of an entry point for normal snaps..08:31
ikeyive seen the desktop-helper bash scripts..08:31
ikeygot quite a bit of bootstrap code here https://github.com/solus-project/linux-steam-integration/blob/master/src/shim/shim.c#L18908:32
ikeymight come in useful08:32
zyga-ubuntuikey: entry point .. hmm08:34
zyga-ubuntuikey: you could just put that in a base snap and provide something like lsi-run ...08:34
ikeyyeah08:34
ikeyive been considering an lsi-exec fwiw08:34
ikeyfor other non-steam stuff08:35
ikeymostly for fixing old busted stuff and for the shim side of it..08:35
ikeyits certainly been an interesting experience really getting into the guts of how all this works08:35
ikeylike figuring out how to make .desktop files actually work work08:35
ikeywithout snapcraft08:35
zyga-ubuntuyeah :-)08:36
zyga-ubuntuI really like the largely free-form of packaging this offers08:36
ikeywe're doing a bit of evil in building our snaps atm08:36
ikeywe're using the solus tooling to emit the roots and then snap packing them08:37
zyga-ubuntunothing is evil there08:37
ikeybut then we can do this: https://github.com/solus-project/runtime-snaps/tree/master/support_packages08:37
ikeyand we're overlaying even the normal solus pkgs08:37
ikeyso we stuck a brand new mesa in, some compat libs, etc08:37
ikeyand fwiw, the "make this root good for snapd" isn't that hard08:38
ikeyhttps://github.com/solus-project/runtime-snaps/blob/master/round1.sh#L2808:39
ikeythat one function cleans it up and makes it appropriate for use08:39
ikeyi reversed the lib64 directories to make the apparmor stuff happy for now08:39
ikeyim confident i could modify that script to spit out a base for any given distro08:40
zyga-ubuntudarn, this brave snap doesn't work anywhere08:42
mborzeckianywhere, but my laptop08:43
zyga-ubuntumborzecki: I get nothing, ranging from "some spewing errors" to exiting silently08:43
mborzeckiI get a bunch of logs and a browser window08:44
zyga-ubuntuwoot08:45
zyga-ubuntumborzecki: it just started on 17.10 natively on nvidia08:45
zyga-ubuntuthat's interesting08:45
zyga-ubuntubut it failed on 17.10 with much more recent cpu on intel!?!08:45
* zyga-ubuntu looks08:45
zyga-ubuntuthe old one is i7 though08:45
zyga-ubuntuthe new one is i508:45
mborzecki'snap run brave' vs 'brave' shouldn't be a problem?08:46
zyga-ubuntumborzecki: no, it's the same thing08:46
zyga-ubuntubrave is "curious"08:47
zyga-ubuntuit gets brave-download.globa.ssl.fastly.net/multi-channel/releases/dev/0.19.89/linux64/Brave.tar.bz208:47
mborzeckihttps://i.imgur.com/AR0oW6U.png08:48
mborzeckiwould that be much of a problem if run-checks became #!/bin/bash rather than #!/bin/sh script?08:49
zyga-ubuntumborzecki: I think it's fine08:49
zyga-ubuntumborzecki: but consider /bin/env/python3 :)08:49
mborzeckiyou could make it a go script :) #!/usr/bin/env go run08:49
ikeyis it just arch that its busted on?08:49
zyga-ubuntuikey: no, it works on arch08:50
mborzeckifor once08:50
ikeyo08:50
zyga-ubuntuikey: I think it's only affected by CPU features08:50
ikeyworks here on solus fwiw08:50
zyga-ubuntuikey: it's a strictly confined snap08:50
ikeyhttps://ibin.co/3h8KV3PWG8Qr.png08:50
* zyga-ubuntu is still digging08:50
ikey--edge, w:08:50
zyga-ubuntuhow do you do those pictures?08:50
ikeyCPU:       Quad core Intel Core i7-7700HQ (-HT-MCP-) cache 6144 KB08:50
ikey           clock speeds max 3800 MHz 1 3701 MHz 2 3609 MHz 3 3502 MHz 4 3703 MHz 5 3799 MHz 6 3600 MHz08:50
ikey           7 3601 MHz 8 3600 MHz08:50
ikeyGraphics:  Card NVIDIA GP106M [GeForce GTX 1060 Mobile 6GB]08:50
ikey           Display Server x11 (X.Org 1.18.4 ) driver nvidia Resolution 1920x1080@60.00hz08:50
ikey           OpenGL renderer GeForce GTX 1060/PCIe/SSE2 version 4.5.0 NVIDIA 384.9808:50
ikeyimagebin.ca for le pics08:50
zyga-ubuntu7700HQ, faaast08:51
ikeythis is a laptop believe it or not08:51
ikeyxD08:51
ikeyterrified to unplug it08:51
=== JoshStrobl|zzz is now known as JoshStrobl
zyga-ubuntuI'm on Intel(R) Core(TM) i5-5300U CPU @ 2.30GHz08:51
ikeyah nice08:52
zyga-ubuntubut...08:52
ikeydoes look like brave has some bugs though tbh08:52
zyga-ubuntusomething is fishy08:52
zyga-ubuntuas fish and chips08:52
zyga-ubuntu;-)08:52
ikeymy terminal spam is cranky08:52
zyga-ubuntuon my W510 it runs in 17.10 native08:53
zyga-ubuntuand doesn't start in a 16.04 vm08:53
ikeyive learned to not expect quality from anything that based itself around chromium08:53
zyga-ubuntuon that same box08:53
ikeyerror handling is a lost artform08:53
zyga-ubuntuG08:54
zyga-ubuntuI'm sleepy08:54
zyga-ubuntuit was 14.0408:54
ikeyheh08:54
zyga-ubuntuok, I'll look at 16.0408:54
ikeychromium error handling ~= java error handling..08:54
ikeytry { noShitsGiven(); } catch (Error e) { /* Still not caring */ }08:54
ikeyexception, w/e it is08:55
* ikey has been lucky to not java in a long time :P08:55
zyga-ubuntuerr := doStuff()08:55
ikeyif err != nil ..08:55
ikeylol08:55
zyga-ubuntuif err != nil { err = nil } // suck it08:55
ikeyor my fav08:55
ikeyif err != nil { err2 = err }08:55
ikeyfor the deferred return error swaps08:55
* ikey shudders a bit08:56
* ikey hugs C08:56
zyga-ubuntuI'll look at debian sid now08:56
zyga-ubuntuand then go to 16.0408:56
zyga-ubuntuyeah, I love C too08:56
ikey:D08:56
mwhudsonzyga-ubuntu: lolwhut08:56
mwhudson(sid-amd64)root@aeglos:/build/snapd-CzeWTt/snapd-2.29.3.1# strings _build/bin/snapd|grep  -E "public-key-sha3-384: [a-zA-Z0-9_-]{64}"08:56
mwhudsonpublic-key-sha3-384: d-JcZF9nD9eBw7bwMnH61x-bklnQOhQud1Is6o_cn2wTj8EYDi9musrIT9z2MdAa08:56
mwhudsonpublic-key-sha3-384: -CvQKAwRQ5h3Ffn10FILJoEZUXOv6km9FwA80-Rcj-f-6jadQ89VRswHNiEB9Lxk08:56
ikey"if you blow your foot off, its your own damn fault. you told me to" = C08:56
zyga-ubuntumm?08:57
zyga-ubuntuthere are two keys now08:57
zyga-ubuntuone for generic something something08:57
zyga-ubuntuand one root key08:57
zyga-ubuntusomething something is something that pedronis is deeply familiar with08:57
mupPR snapd#4209 opened: run-checks, tests/lib/snaps/: shellcheck fixes <Created by bboozzoo> <https://github.com/snapcore/snapd/pull/4209>08:57
mwhudsonzyga-ubuntu: ah ok so this is a change i need to bring over to my d/rules i guess08:58
zyga-ubuntumwhudson: yes, it's a desired thing08:58
ikeydoes it make you cry a bit inside having to package up something intended for easy packaging, with something as god awful as debian/rules?08:59
ikeyxD08:59
zyga-ubuntuman, I need to find a better VGA cable08:59
* ikey ducks out08:59
zyga-ubuntuikey: snappy is the $MESSIAH of packaging09:00
zyga-ubuntuendure the pain once09:00
zyga-ubuntubring salvation to everyone09:00
ikeyoooo idk i think i got you beat there09:00
zyga-ubuntuoh09:01
zyga-ubuntushiny09:01
ikeywhatdat?09:02
zyga-ubuntuhttps://twitter.com/zygoon/status/92999788358316032009:02
ikeywow09:02
ikeyyknow thats systemd speak for "I have no idea what I'm doing anymore, I'm kinda hoping udev is gonna bail me out here"09:03
zyga-ubuntu"jinle bells jingle bells, system-s up-to-date"09:03
zyga-ubuntuthis is the offline update09:03
ikeyoh what fun it is to write09:03
zyga-ubuntuI just never saw it before09:03
mvozyga-ubuntu: hrm, hrm, second test this morning that exceededthe time limit for jobs, maybe we need to do something about it09:03
zyga-ubuntuhehe09:03
ikeyhow much you love systemd on void linux forums09:03
ikeyjingle bells..09:03
zyga-ubuntumvo: maybe we need to bump the number of machines again?09:04
mupPR snapd#4201 closed: tests/lib: handle distro specific grub-editenv naming <Created by bboozzoo> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/4201>09:04
mvozyga-ubuntu: yeah, lets see if it was a fluke, otherwise its a topic for the standup09:05
zyga-ubuntuagreed09:05
mupPR snapd#4191 closed: cmd/snap-update-ns: do not assume 'nogroup' exists <Created by bboozzoo> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/4191>09:05
* ikey goes to bed.. damn timezone switch09:14
zyga-ubuntuikey: o/09:15
ikey\o09:15
zyga-ubuntuikey: not in europe anymore?09:15
ikeyi am09:16
ikey4 years working for a US employer and being on their timezones will permanently screw your internal clock09:16
zyga-ubuntumvo: when do we promote 2.29.3?09:16
zyga-ubuntuhmmm09:18
mvozyga-ubuntu: depends on cachio and CE giving us green light09:18
zyga-ubuntu2.27.6 in debian doesn't work very well now09:18
zyga-ubuntu(in sid)09:18
mvozyga-ubuntu: but hopefully today or tomorrow09:19
pstolowskimvo, hey, #4177 needs your re-review, I think it's very close to land09:20
mupPR #4177: state: add change.LaneTasks helper <Created by stolowski> <https://github.com/snapcore/snapd/pull/4177>09:20
zyga-ubuntumvo: debian is broken now09:29
zyga-ubuntumvo: we probably didn't notice because our image is really tracking debian-909:29
mwhudsonwow snapd.postrm is lots of fun09:29
zyga-ubuntumwhudson: I just posted about debian on the forum09:29
zyga-ubuntumwhudson: I wonder if it's any better with 2.29.3?09:29
mwhudsonoh apparmor09:30
mwhudsonwell 2.29 _should_ be better right09:30
mwhudson?09:30
mwhudsonit has all that graceful apparmor degradation stuff09:31
mwhudsoni'm a bit surprised because snap-confine was working with apparmor enabled09:31
zyga-ubuntumwhudson: well, not sure, the "graceful" aspect was for apps, not snap-confine09:31
mwhudsonbut i guess a new kernel enforces more rules now?09:31
zyga-ubuntumwhudson: what does it do for you?09:32
mwhudsoneh i haven't tried it in a while09:32
zyga-ubuntumwhudson: note that this is still 4.13, 4.14 will have more features09:32
mwhudsonzyga-ubuntu: yes, everyone in the whole world saw the enormous flamewar about that09:32
zyga-ubuntumwhudson: you mean "security and linus" thread or something else?09:33
mwhudsoni guess i don't mean a flamewar, i mean linus shouting at people yes09:35
zyga-ubunturight, I just wanted to ensure there's nothing _else_ :-)09:36
zyga-ubuntuit's not a flamewar when you are being nuked from orbit09:36
mupPR snapd#4177 closed: state: add change.LaneTasks helper <Created by stolowski> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/4177>09:46
pstolowskimvo, thanks!09:46
mvopstolowski: thank you!09:46
mwhudsonzyga-ubuntu: yeah i get the same denials09:50
zyga-ubuntumwhudson: thank you for confirming that09:50
zyga-ubuntumwhudson: looks like we need some love there09:50
mwhudsonzyga-ubuntu: we could go back to the hack that installs an empty /etc/apparmor.d/usr.lib.snapd.snap-confine.real09:53
mwhudsonbut i don't want to09:53
mupPR snapd#4208 closed: packaging/arch: do not quote MAKEFLAGS <Created by bboozzoo> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/4208>09:54
mupPR snapd#4152 closed: snapd: fix snap cookie bugs <Created by stolowski> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/4152>09:55
mwhudsonzyga-ubuntu: the installed file looks like it's trying to grant snap-confine the ability to ptrace things :/09:55
mwhudsonzyga-ubuntu: is it possible the debian kernel maintainers screwed something up?09:56
mwhudsonzyga-ubuntu: maybe you can ask jd-strand in a few hours?09:56
mwhudson:)09:56
zyga-ubuntumwhudson: I think this is how the old kernel reacts to open /proc/1/ns/mnt10:00
zyga-ubuntumwhudson: I'll try to fix this today10:00
mvozyga-ubuntu: hey, quick question, do you have an opinion about the question here https://github.com/snapcore/snapd/pull/4161#discussion_r149996883 ?10:00
mupPR #4161: snapstate: add support for refresh.schedule=managed <Created by mvo5> <https://github.com/snapcore/snapd/pull/4161>10:00
zyga-ubuntulooking10:01
zyga-ubuntumvo: replied10:02
mvota10:02
mvozyga-ubuntu: thanks, I like the reply :)10:02
zyga-ubuntuJamieBennett: man, that is one interesting thread10:05
zyga-ubuntuthank you for sharing10:05
JamieBennettzyga-ubuntu: Indeed, AppArmor on Debian will be great.10:06
mborzeckiis it possible to update review sprint page withouth niemeyer around?10:16
zyga-ubuntumborzecki: no, I think not10:16
zyga-ubuntuAFAIK there's a cron thing that refreshes it10:16
zyga-ubuntubut ask gustavo later today10:16
mborzeckizyga-ubuntu: did you get a chance to look at? https://github.com/snapcore/snapd/pull/4185#issuecomment-343520761 :)10:17
mupPR #4185: interfaces/builtin/account_control: use gid owning /etc/shadow to setup seccomp rules <Created by bboozzoo> <https://github.com/snapcore/snapd/pull/4185>10:17
andyrockhey are snaps mounted always under /snap10:19
andyrock?10:19
zyga-ubuntumborzecki: not yet10:20
zyga-ubuntuandyrock: hey10:20
zyga-ubuntuandyrock: no, not always10:20
zyga-ubuntuandyrock: some distributions don't like that and move the mount point to /var/lib/snap10:20
zyga-ubuntuandyrock: however for all snaps that are not using classic confinement, at runtime, the snap will be mounted in /snap/10:20
andyrockzyga-ubuntu mmm I'm working on a fix to hide the snap loop devices from gnome-disk-utility10:21
zyga-ubuntuandyrock: I see10:21
zyga-ubuntuandyrock: we can add a mount option, perhaps, that would say "dont show me"10:21
zyga-ubuntuandyrock: but I'm not aware of any10:21
zyga-ubuntuandyrock: x-app-container x-snapd.snap, or somthing like that10:22
zyga-ubuntu*something10:22
andyrockzyga-ubuntu: 'x-app-container x-snapd.snap' didn't get this part10:25
zyga-ubuntuandyrock: ah, sorry, there's a trend to annotate mount entries using mount options named x-...10:25
zyga-ubuntuandyrock: they don't do anything for the kernel but they are picked up by userspace10:25
zyga-ubuntuandyrock: for instance, gnome-disks makes heavy use of this10:26
zyga-ubuntuandyrock: allowing the use of specific mount flags to choose how the mount point is represented in the UI10:26
zyga-ubuntuandyrock: (icons, labels, show/hide, etc)10:26
andyrockoh nice10:26
andyrockyeah that would be useful10:26
andyrocklet me check10:26
zyga-ubuntuI was proposing that we simply come up with a "this is not a filesystem users care about" flag10:26
zyga-ubuntumaybe there is one we can reuse already, I didn't look10:27
andyrocklet me ask upstream10:27
zyga-ubuntuandyrock: thank you, let me know if there's something we can adapt in snapd to make this easier10:32
* zyga-ubuntu will soon go AFK to relocate to a different site10:33
mvopedronis: hey, good morning. a quick question, I'm looking at https://github.com/snapcore/snapd/pull/4161#discussion_r149998237 right now (for the refresh.schedule=managed branch) and assertstate is a circular import from snapstate. should I create overlord/assertstate/db and move the ReplaceDB,DB code in there and import from snapstate? (similar to what we did for the iface repo access)?10:51
mupPR #4161: snapstate: add support for refresh.schedule=managed <Created by mvo5> <https://github.com/snapcore/snapd/pull/4161>10:51
popeyzyga-ubuntu: is there a typo in https://forum.snapcraft.io/t/brave-browser-snap-on-14-04-wont-launch/2767/7 ?11:08
popey"Arch starts", did you mean the snap starts?11:08
zyga-ubuntupopey: yes11:08
zyga-ubuntupopey: I'll edit the post with some new data soon, I'm still working on this11:08
popeykk11:09
zyga-ubuntupopey: question for you, what was the CPU you used?11:09
popeyit's a vm11:09
popeyso whatever virtualbox makes available?11:09
popeyI can cat cpuinfo in the vm if that helps?11:09
zyga-ubuntupopey: yes11:09
zyga-ubuntupopey: though outside can help too11:10
popeyadded to the thread11:11
zyga-ubuntupopey: hmm, you have a much newer CPU than I do11:12
zyga-ubuntupopey: so I don't think I'm missing instructions11:12
zyga-ubuntus/I'm/you are/11:12
pedronismvo: I don't know, it's a bit a unclear what belongs where11:14
zyga-ubuntuok I need to get going11:15
zyga-ubuntuttyl11:16
mvopedronis: ok, I ignore it for now while working on a spread test11:17
mvopedronis: we can talk later11:17
pedronismvo: I added a comment to the PR about what I think11:19
mvota11:24
niemeyermborzecki: That's how it ought to work.. I'm waiting for timer services to get this somewhere else..(wink wink)11:52
niemeyermborzecki: There's also a small issue with not publishing my key in a random machine, but that's easy to solve by creating a user just for that11:53
niemeyermborzecki: It was updated half an hour ago or so, btw11:54
zyga-ubunture12:00
zyga-ubuntu:-)12:00
niemeyerHellos :)12:00
zyga-ubuntuniemeyer: hey :)12:02
zyga-ubuntuniemeyer: it's raining but I decided not to stay indoors, there's some noise around and it was driving me nuts12:02
zyga-ubuntuI'm in a coffee shop nearby, really nice mood with lots of laptop-bearing people12:03
zyga-ubuntuI wonder if they are all remote workers like me12:03
niemeyerNice12:04
niemeyerI may still build an open-ended co-working place around me some day12:05
niemeyerQuite like the idea12:05
zyga-ubuntuniemeyer: ara did that back a few years ago12:05
zyga-ubuntuniemeyer: she used to run the place for a few years12:05
niemeyerWow, nice.. didn't know that.. would like to have asked her about details12:05
niemeyer(in person)12:05
niemeyerI've been to places elsewhere that I quite enjoyed for the atmosphere and facilities12:06
zyga-ubuntuyeah, I recall she said people matter a lot, I mean having a group of people that want to do this and would be the inhabitants12:07
zyga-ubuntuit seems obvious perhaps but the people make it or break it12:07
zyga-ubuntuas if just that :)12:07
zyga-ubunture, had to reboot for my modem suddently died12:17
zyga-ubuntujdstrand: hey12:25
zyga-ubuntujdstrand: I have two questions for you today:12:26
zyga-ubuntujdstrand: first of all, I recall the recent changes to SUBSYSTEM=usb vs SUBSYSTEMS=usb, we did that for some interfaces but not all of them, is this intentional?12:26
zyga-ubuntujdstrand: second question is how do you think we should proceed on debian as sid has recently enabled apparmor by default and the profile for snap-confine no longer works (ironically I think this is related to linus' opinion on breaking userspace)12:27
zyga-ubuntujdstrand: the question is: should we generate an extra snippet for "4.13 vanilla" for snap-confine so that things still work or should we instead alter the profile to be more permissive in general?12:28
zyga-ubuntujdstrand: I'd like to fix this as soon as we can and include it with 2.29.3 update that mwhudson is working on12:28
ogra_or fix linus :)12:28
zyga-ubuntuogra_: I'll buy him a mac and a gameboy12:28
ogra_haha12:28
ogra_i didnt say "bribe"12:29
zyga-ubuntuno no, it's just a gift to keep him busy12:29
zyga-ubuntulook at this new zelda episode12:29
ogra_heh12:29
zyga-ubuntu100 hours of gameplay12:29
zyga-ubuntu;-)12:29
zyga-ubuntuuse the wiimote to aling the frying pan while you make scrambled eggs in the wilderness12:29
=== JoshStrobl is now known as JoshStrobl|Store
mupPR snapcraft#1729 opened: sources: use arfile to extract debs <bug> <Created by sergiusens> <https://github.com/snapcore/snapcraft/pull/1729>12:31
zyga-ubuntusergiusens: oh, going low-level I see12:31
ogra_hardcore !12:31
zyga-ubuntusergiusens: did you implement arfile?12:31
zyga-ubuntuI had a copy somewhere...12:31
sergiusenszyga-ubuntu I reused the one in debian12:31
sergiusenszyga-ubuntu the debian python pkg that is12:31
zyga-ubuntuah, it's in debian module nowadays, easy12:31
zyga-ubuntuI impemented one in python2.x days for command-not-found12:32
zyga-ubuntu(eons ago)12:32
sergiusenszyga-ubuntu import DebFile loads up apt_inst for some "$reason" which expects /etc/apt to exist12:32
zyga-ubuntusergiusens: is that package easy to install on !ubuntu?12:32
sergiusenszyga-ubuntu according to Son_Goku it is in fedora12:33
zyga-ubuntusergiusens: interesting, cool12:33
sergiusenszyga-ubuntu but this is mostly a problem when we run as a snap12:33
Son_Gokugeez: https://apps.fedoraproject.org/packages/python3-debian12:33
Son_Gokuit's not even hard to verify12:33
Son_Gokuyou say it as if you don't believe me12:33
* zyga-ubuntu hugs Son_Goku 12:34
sergiusensSon_Goku no, I say it as you being the point of verification ;-)12:34
ogra_you didnt bribe him enough ...12:34
Son_Gokuthe problem is that our apt is too old to support python-apt12:34
zyga-ubuntuogra_: but he already has a gameboy :(12:34
Son_Gokuso python-debian is a bit gimped12:34
ogra_zyga-ubuntu, but no mac12:34
Son_Gokuafter all, this is the apt we have: https://apps.fedoraproject.org/packages/apt12:34
zyga-ubuntuogra_: what do you mean, he uses a mac all the time12:35
ogra_uh12:35
zyga-ubuntulast time I looked at least12:35
zyga-ubuntuogra_: not macos though :)12:35
sergiusensI really hope we could get rid of this apt stuff in our code, it is somewhat messy12:35
* ogra_ sdmittedly didnt pay attention to that 12:35
sergiusensbut I am not sure we'd do a better job going down our own path12:35
ogra_*admittedly12:35
* ogra_ hands bitbake and meta-debian to sergiusens 12:36
* sergiusens rejects any offering of more work12:36
jdstrandzyga-ubuntu: re SUBSYSTEM vs SUBSYSTEMS> it was all in how we used SUBSYSTEMS. I checked for other wrong uses of it and there were none that I saw. SUBSYSTEMS is a perfectly valid directive with the right usage; where I changed it we were using it wrong. in other words, I don't think there is anything else we need to worry about wrt that12:36
zyga-ubuntujdstrand: thank you for clarifying that12:37
zyga-ubuntuCC mvo ^ you asked about that a while ago12:37
zyga-ubuntumvo: tl;dr version is that we're okay and no action is required for 2.29.312:37
jdstrandzyga-ubuntu: I'd like to see the denial for snap-confine to decide12:37
sergiusenszyga-ubuntu read you used gnome boxes, does solus work for you on it? I can get through a live session installing, but x doesn't seem to be coming up correctly after the install12:38
zyga-ubuntujdstrand: it's right here: https://forum.snapcraft.io/t/snapd-2-27-6-2-in-debian-sid-blocked-on-apparmor-in-kernel-4-13-0-1/2813/312:38
zyga-ubuntusergiusens: solus is native for me12:38
zyga-ubuntusergiusens: as for gnome-boxes12:38
zyga-ubuntusergiusens: it's all _rough_, install virt-manager12:38
zyga-ubuntusergiusens: and change display type to virtio (from qlx)12:39
zyga-ubuntusergiusens: then things work better12:39
zyga-ubuntusergiusens: some of my VMs work with qxl (is it qxl or qls) some don't12:39
zyga-ubuntusergiusens: the rest work ok with virtio12:39
zyga-ubuntusergiusens: it's a hit/miss, sometimes switching virtual VTs around helps12:39
zyga-ubuntusergiusens: but in general nothing I tried failed when I used the fallback12:40
zyga-ubuntusergiusens: I use it for a range of systems now, having abandoned vmware12:40
jdstrandzyga-ubuntu: I'm puzzled why snap-confine is ptracing itself12:40
zyga-ubuntusergiusens: vmware was much more mature if you are on windows or on older LTS12:40
zyga-ubuntujdstrand: it's not, this is, IMO, the open/stat on /proc/1/ns/mnt12:41
zyga-ubuntujdstrand: I recall seeing this12:41
zyga-ubuntujdstrand: as we were implemeting the feature12:41
jdstrandno, it is12:41
zyga-ubuntujdstrand: of breaking out of snap ns12:41
jdstrandthere are different things about ptrace, but it is doing 'trace' and 'tracedby'12:41
jdstrandptrace read/readby I might've expected12:42
zyga-ubuntujdstrand: it's also doing that on /proc/self/ns/mnt12:42
zyga-ubuntujdstrand: so maybe _that_ is causing itt?12:42
mborzecki+ echo 'ERROR: test-snapd-requires-base should not be installable without test-snapd-base'12:42
mborzeckiERROR: test-snapd-requires-base should not be installable without test-snapd-base12:42
zyga-ubuntujdstrand: in general it's trivial to reproduce, sid just always triggers it now and any snap is good to test12:42
mborzeckiexpected?? ^12:42
zyga-ubuntumborzecki: probably no, mvo's topic I think12:42
jdstrandit might be that the kernel reorganized things to group that open/stat into tracec/tracedby12:42
jdstrandzyga-ubuntu: this says it is with 2.27.6. what about a modern snap-confine?12:43
zyga-ubuntujdstrand: interestingly it's 4.13 bit without out-of-tree apparmor patch12:43
zyga-ubuntujdstrand: same12:43
zyga-ubuntujdstrand: mwhudson confirmed that shortly after I reported it12:43
zyga-ubuntu(on IRC)12:43
zyga-ubuntus/bit/but/12:44
zyga-ubuntujdstrand: so "same as ubuntu exept for patch" ~~ mostly12:44
jdstrandzyga-ubuntu: I think we should have Tyler or jj weigh in. they would probably be able to comment better on the missing out of tree patches12:44
zyga-ubuntujdstrand: ack, I'll look out for them12:44
zyga-ubuntujdstrand: I'd like to fix this as it will affect every distribution that is on the same kernel and pulls in apparmor12:45
ogra_andyrock, did you consider hiding the snap loop mounts on a lower level ... i.e. udev ... like it does for vendor recovery partitions etc in /lib/udev/rules.d/80-udisks2.rules12:45
zyga-ubuntujdstrand: jjohansen ^^ can you please comemnt on https://forum.snapcraft.io/t/snapd-2-27-6-2-in-debian-sid-blocked-on-apparmor-in-kernel-4-13-0-1/2813 -- the context is that debian is now shipping apparmor and enabled by default and we are seeing some unexpected denials on their stock 4.13 kernel; we are looking for possible solutions to overcome the problem but would like your insight into what may12:46
jdstrandzyga-ubuntu: is it not using mount-namespace-capture-helper for some reason?12:46
zyga-ubuntube causing the trace/tracedby mediation there12:46
zyga-ubuntujdstrand: it definitely does that but that's later12:46
zyga-ubuntujdstrand: this stage is before we even fork, to see if we are in the right ns12:46
jdstrandzyga-ubuntu: we have 'ptrace trace peer=unconfined,' for that now12:47
zyga-ubuntujdstrand: is the peer confined if we are tracing ourselves?12:47
jdstrand    # allow snap-confine to read /proc/1/ns/mnt12:47
jdstrand    ptrace trace peer=unconfined,12:47
zyga-ubuntuI mean, snap-confine does look at itself then12:47
zyga-ubuntu(after looking at PID 1)12:47
jdstrandzyga-ubuntu: the peer is us if we are ptracing ourselves, so, yes12:47
zyga-ubuntujdstrand: so ptrace trace peer=$LIBEXECDIR/snapd/snap-confine,12:48
zyga-ubuntu?12:48
jdstrandthe rule would be:12:48
jdstrandptrace (trace, tracedby) peer=$LIBEXECDIR/snapd/snap-confine,12:49
zyga-ubuntuI'll test that12:49
jdstrandbut why doesn't Ubuntu need the patch if that has always been the case?12:49
zyga-ubuntuit looks like something to go into the regular profile12:49
zyga-ubuntuyes, I was wondering that myself12:49
zyga-ubuntuI was about to ask12:49
zyga-ubuntucan we see via --some-magic-option12:49
zyga-ubuntuwhen apparmor_parser says, yeah fine but not understood/implemented so I'll skip this rule12:50
zyga-ubuntuthis question came up in the debian thread12:50
jdstrandI don't know, we need jjohansen to comment now I think. 4.13 and Ubuntu shouldn't be acting differently in this regard I don't think. there seems to be a bug somewhere12:50
zyga-ubuntuand I was wondering if you know if that's accurate enough to find bugs in our profile12:50
jdstrandzyga-ubuntu: oh12:50
zyga-ubuntujdstrand: yes, looks like so12:50
jdstrandzyga-ubuntu: so on Debian with 4.13, the ptrace rule is not recognized?12:51
jdstrandzyga-ubuntu: by the parser?12:51
zyga-ubuntujdstrand: not sure, I didn't try as I found about that that in the opposite order12:51
zyga-ubuntujdstrand: I found the bug and then read on the thread that jamie bennett linked to12:51
zyga-ubuntujdstrand: I just made the connection now recalling this12:51
jdstrandzyga-ubuntu: I didn't read all of your comment. there is no option like that, no12:52
zyga-ubuntu(my ram is a bit used up by 16.04/lxd experiment but I can try shortly)12:52
zyga-ubuntujdstrand: I see12:52
jdstrandwhat the parser does is look at the sysfs and makes decisions. you could mock up a sysfs without the ptrace rule if you wanted, but I'm not sure why that is interesting for this12:52
zyga-ubuntujdstrand: I'll look around, I have two more debugging runs to do12:53
zyga-ubuntujdstrand: lxd is top priority for now12:53
zyga-ubuntujdstrand: then weird works on 16.04, breaks on 14.04 for strict snap12:53
zyga-ubuntujdstrand: btw, as we are talking, I could use your review on https://github.com/snapcore/snapd/pull/416312:54
mupPR #4163: cmd/snap-update-ns: re-factor secureMkdirAll into secureMk{Prefix,Dir} <Created by zyga> <https://github.com/snapcore/snapd/pull/4163>12:54
zyga-ubuntujdstrand: it's just a re-factor but I wanted to make sure you ack it12:54
zyga-ubuntujdstrand: I need it to build other features on top12:54
zyga-ubuntu(not a refactor just for the sake of it)12:54
zyga-ubuntuit has two +1s alredy12:54
jdstrandzyga-ubuntu: yes, this is the one from last week that is at the top of my list12:56
zyga-ubuntujdstrand: thank you12:56
zyga-ubuntujdstrand: I commented on the debian thread and I'll look into it again today to verify if the extra rule makes things work12:57
andyrockogra_: UDISKS_IGNORE is ignored by gnome-disk-utilities13:03
ogra_andyrock, uuh, why is that ?13:03
andyrockit makes sense13:04
andyrockUDISKS_IGNORE is used on a bunch of partitions13:04
ogra_to be able to wipe something essential ?13:04
zyga-ubuntuandyrock: is that a variable we have the udev tag it with13:04
zyga-ubuntuandyrock: or something we can set in the mount option?13:04
jdstrandjjohansen: to summarize backscroll, see https://forum.snapcraft.io/t/snapd-2-27-6-2-in-debian-sid-blocked-on-apparmor-in-kernel-4-13-0-1/2813/313:05
jdstrandjjohansen: a ptrace rule is popping out in vanilla 4.13 on Debian and not on Ubuntu 4.13 on Ubuntu13:05
andyrockogra_: UDISKS_IGNORE is used e.g. on windows recovery partitions13:05
andyrockand other partitions that should be shown13:05
ogra_zyga-ubuntu, ît is used by udisks2 to actually hide something like "dell recovery" and other super essential vendor stuff ... take a look at the bottom of  /lib/udev/rules.d/80-udisks2.rules13:06
andyrockI tried to propose this solution upstream but they will not accept it13:06
zyga-ubuntuogra_: that's ok, we can piggy back on this13:06
zyga-ubuntuandyrock: what did upstream say?13:06
ogra_zyga-ubuntu, right, that was my suggestion13:06
andyrockzyga-ubuntu: upstream is ok with a x-gdu-hide/ignore whatever option13:07
ogra_zyga-ubuntu, its a pretty common mechanism, but if gnome-disk-utilities ignores it it wont help much13:07
zyga-ubuntuandyrock: is one supported now?13:07
zyga-ubuntuandyrock: or is that something we need to implement and send upstream13:07
andyrocknope but I can implement and send without problem13:07
andyrockthat's what they told13:08
zyga-ubuntuandyrock: that's great13:08
zyga-ubuntuandyrock: please document this on the forum, we need to do something to mount units anyway and that fits in nicely13:08
* ogra_ would still do it on a udev level instead of a mount option ... the latter smells slightly hackish13:09
ogra_i.e. introdusce a new udev variable and make that one actually accepted by gnome-disk-utilities13:09
andyrockogra_: how do you specify that at udev level?13:09
ogra_via a rules file that snapd can ship then13:09
andyrocklike how do you are sure that what you're hiding is actually a snap partitions13:10
andyrock*partition13:10
andyrockfor what I know you can just say13:10
andyrockok if it's a loop device and it's a squashfs13:10
andyrockthan hide it13:10
andyrockbut there is no other way to say, if the mount point is in /snap13:11
ogra_KERNEL "loop" ... then check for filesystem and for /var/lib/snap in the source mount13:11
ogra_and ignore the target13:11
ogra_not all distros use /snap13:11
andyrockis the source mount available?13:11
ogra_i guess there is an attribute with the path somewhere ...13:12
andyrockjust monitoring the events I was not able to find it13:12
ogra_there is ENV{ID_FS_TYPE} ... so i guess there is also a path somewhere13:12
andyrockhttps://www.irccloud.com/pastebin/HFhhonyX/13:17
andyrocke.g. this is what I get13:17
=== JoshStrobl|Store is now known as JoshStrobl
ogra_hmm, funny, it actually sets UDISKS_IGNORE=113:18
ogra_you could build on top of that ...13:19
ogra_if "UDISKS_IGNORE=1" and "loop" and "squashfs" it is most likely a snap ... so set "GDISKS_IGNORE=1" and have gnome-disk-utilities catch that13:20
ogra_or if you want it really exact you wrap in a script ... like:13:22
ogra_ogra@styx:~$ losetup -l /dev/loop4 -n -O BACK-FILE13:22
ogra_/var/lib/snapd/snaps/core_2898.snap13:22
ogra_(to wrap a script into the udev rule you use: IMPORT{program} "/bin/sh -c 'losetup -l ENV{DEVANME} -n -O BACK-FILE'" or some such )13:25
andyrockogra_: it sets that because I had a rule to do that\13:25
ogra_ah13:25
ogra_well, then go without it13:26
andyrockbut I want that upstream13:26
ogra_why ? it is a snapd thing ... so have snapd ship a rule that sets your var13:26
ogra_all you need upstream is to have gnome-disk-utilities use that var to ignore the mounts13:26
andyrocksorry I didn't read everthing13:26
andyrockreading now13:27
zyga-ubuntukoza: bluetooth still doesn't let me switch to a2dp13:27
zyga-ubuntukoza: on artful13:27
ogra_zyga-ubuntu, use wried speakers ... better quality anyway :P13:27
zyga-ubuntuogra_: one less cable while on the go13:27
zyga-ubuntuogra_: and being a gunea pig helps others :)13:27
zyga-ubuntuogra_: not everyone knows a BT developer13:28
kozazyga-ubuntu, i know, still remember about this one. it is in the queue just after the commercial related things13:28
zyga-ubuntukoza: AFAIK you said it should work, it's just the default is wrong13:28
zyga-ubuntuif this is still expected unfixed then no news :)13:28
kozazyga-ubuntu, it should not crash, this was fixed last time13:28
zyga-ubuntukoza: it doesn't crash, just doesn't switch13:29
kozazyga-ubuntu, it will however mess the hsp/a2dp things13:29
zyga-ubuntuaha13:29
zyga-ubuntuok13:29
zyga-ubuntu:-)13:29
kozazyga-ubuntu, this is still being worked on, hopefully PA 11 will land in bionic which should improve things13:29
zyga-ubuntukoza: I'll gladly switch when that is there13:30
kozaanyways regardless of the PA version in bionic this one will be tackled as well13:30
ogra_FWIW https://forum.snapcraft.io/t/connecting-bluetooth-audio-devices-pulseaudio-bluez/266913:31
ogra_(we recently landed the PA changes)13:31
ogra_(but that wont help with the general issue of messing hsp/a2dp ... only with the pulse snap using BT audio in general)13:33
* zyga-ubuntu heads back home, see you shortly13:40
=== anewman_ is now known as anewman
mborzeckizyga-ubuntu: pushed a commit to https://github.com/snapcore/snapd/pull/4185 hopefully this will resolve the concerns of stat()ing /etc/shadow frequently14:15
mupPR #4185: interfaces/builtin/account_control: use gid owning /etc/shadow to setup seccomp rules <Created by bboozzoo> <https://github.com/snapcore/snapd/pull/4185>14:15
zyga-ubuntumborzecki: sure, I'll look now14:16
zyga-ubuntupstolowski: two unanswered questions on https://github.com/snapcore/snapd/pull/4108#discussion_r15054123214:16
mupPR #4108: repo: ConnectedPlug and ConnectedSlot types <Created by stolowski> <https://github.com/snapcore/snapd/pull/4108>14:16
mborzeckii'm leaving to pick up my kids and then on to a 3h drive to wroclaw14:16
pstolowskizyga-ubuntu, sorry, meant to answer those and forgot. doing14:17
=== Trevinho|off is now known as Trevinho
zyga-ubuntumborzecki: commented on 4185 now14:22
mupPR snapd#4173 closed: corecfg: validate refresh.schedule when it is applied <Created by mvo5> <Merged by zyga> <https://github.com/snapcore/snapd/pull/4173>14:46
sergiusenselopio you around ?14:47
mupPR snapd#4209 closed: run-checks, tests/lib/snaps/: shellcheck fixes <Created by bboozzoo> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/4209>14:57
elopiosergiusens: I'm here15:02
sergiusenszyga-ubuntu btw, I edited '.config/libvirt/qemu/snapshot/boxes-unknown' andchanged te value from qqxl to virtio in the xml i there and got it going.. my machine crawling now though (I canoot see what I am typing at the moment ;-) )15:04
sergiusenselopio snapcraft#1717, mind just making the change yourself wrt location?15:10
mupPR snapcraft#1717: catkin plugin: check for pip packages in part only <Created by kyrofa> <https://github.com/snapcore/snapcraft/pull/1717>15:10
elopiosergiusens: sure15:16
sergiusenselopio also, any update on that ruby issue?15:17
elopiosergiusens: oh no, this needs the bigger refactor. Otherwise adding a catkin plugin to the plugins suite can get us back to timing out.15:17
elopiothat's why kyrofa and I haven't moved it.15:17
elopiosergiusens: for ruby I'm setting up my rpi. The permission error doesn't make any sense to me.15:18
elopioit worked on arm64 on the dragonboard, so it's not likely that we don't support the arch.15:18
zyga-ubuntuelopio: what issue are you seeing?15:19
zyga-ubuntuikey: hey, can you please "make fmt" in https://github.com/snapcore/snapd/pull/420715:19
mupPR #4207: Flesh out NVIDIA support for biarch and multiarch systems <Created by ikeydoherty> <https://github.com/snapcore/snapd/pull/4207>15:19
sergiusenselopio snapcraft#1729 could use a peek as well15:21
mupPR snapcraft#1729: sources: use arfile to extract debs <bug> <Created by sergiusens> <https://github.com/snapcore/snapcraft/pull/1729>15:21
sergiusenselopio oh, your comment was somewhat loosely phrased then15:22
elopiozyga-ubuntu: http://paste.ubuntu.com/25954649/15:23
sergiusenssnappy-m-o autopkgtest 1717 xenial:armhf artful:amd6415:25
snappy-m-osergiusens: I've just triggered your test.15:25
zyga-ubuntuelopio: where is this running?15:25
zyga-ubuntuelopio: do you see any apparmor denials?15:25
elopiozyga-ubuntu: it's running on autopkgtest infrastructure, armhf. It's running the snapcraft deb, so I would expect no denials, but I could make a branch to collect more information.15:27
zyga-ubuntuelopio: didn't we recently changed how those run?15:28
zyga-ubuntuelopio: perhaps cjwatson knows more15:28
zyga-ubuntuelopio: please try to collect apparmor denials if you can15:28
mupIssue snapcraft#1448 closed: snapcraft build using manifest.yaml <design-required> <Created by sergiusens> <Closed by sergiusens> <https://github.com/snapcore/snapcraft/issue/1448>15:31
mupIssue snapcraft#1628 closed: record lxc image used <Created by sergiusens> <Closed by sergiusens> <https://github.com/snapcore/snapcraft/issue/1628>15:31
mupPR snapcraft#1633 closed:  recording: record information from the image in container builds  <Created by elopio> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/1633>15:31
cjwatsonzyga-ubuntu: autopkgtests aren't me.  Try Laney15:32
cjwatsonelopio: ^-15:32
pstolowskidamn, my spread test issue with service restarts tasks taking too long is fixed with st.EnsureBefore(0) after all..15:32
sergiusenszyga-ubuntu also, why do you assume apparmor? :-)15:32
zyga-ubuntucjwatson: thank you!15:32
zyga-ubuntusergiusens: permission denied is now engraved in my mind15:33
sergiusenszyga-ubuntu I think this is a much more mundane error related to gems and lack of testing on arm15:33
zyga-ubuntuwow, so I'm on 17.1015:38
zyga-ubuntuand I don't have $DISPLAY set15:38
zyga-ubuntuno qemu sdl15:38
zyga-ubuntuwow, that's a new thing for me15:38
jdstrandsergiusens: I'm curious if maybe something started as root and then later accessed as the user15:40
jdstrandelopio: ^15:41
jdstrandjust putting it out there-- I have no particular insight (just sorta looks like that)15:41
* zyga-ubuntu -> dinner15:42
=== JanC_ is now known as JanC
sergiusensjdstrand yeah, maybe; but I would suspect it would affect amd64 as well unless we have quirked the system and put ourselves into a corner16:05
pstolowskipedronis, zyga addressed your comment to 4163, I think it can land16:19
pedronispstolowski: fine by me16:19
andyrockSUBSYSTEM=="block", KERNEL=="loop*", IMPORT{program}="/bin/sh -c '/sbin/losetup -l $env{DEVNAME} -n -O BACK-FILE | /bin/grep -c ^/var/lib/snapd/snaps/ | /bin/sed s/.*/GDISKS_IGNORE=\\0/'"16:24
andyrockogra_: ^^^ this is the only way I found to make it work16:24
andyrockthere are several limitations with udev rules16:24
zyga-ubuntuandyrock: note that we can generate some rules from snapd itself16:25
mupPR snapd#4163 closed: cmd/snap-update-ns: re-factor secureMkdirAll into secureMk{Prefix,Dir} <Created by zyga> <Merged by stolowski> <https://github.com/snapcore/snapd/pull/4163>16:25
zyga-ubuntuandyrock: and ideally we could do something at systemd.mount level16:25
ogra_yeah16:25
ogra_but good to see that it is possible even with that slightly hackish approach16:25
zyga-ubuntupstolowski: jdstrand wanted to review that but that's not a big problem, I'll wait for the review and address anything that may come up16:25
pstolowskizyga-ubuntu, arghh, a second too late16:26
andyrockzyga-ubuntu: I don't mind how the rule is generated :D16:26
andyrockjust that can be generated16:27
pstolowskizyga-ubuntu, just landed this and 416616:27
mupPR snapd#4166 closed: cmd/snap-update-ns: detect and report read-only filesystems <Created by zyga> <Merged by stolowski> <https://github.com/snapcore/snapd/pull/4166>16:27
pstolowskizyga-ubuntu, sorry16:27
ogra_zyga-ubuntu, i wonder if just adding an environment stanza to the systemd.mount unit would do (udev might just pick it up so you could check for the var in the env then)16:27
zyga-ubuntupstolowski: no worries :)16:28
zyga-ubuntupstolowski: thank you, no worries :)16:28
ogra_(there must be some advantage of the close systemd and udev integration )16:28
zyga-ubuntuogra_: worth a try :)16:28
pstolowski1 PR left to get down to 1 page ;)16:28
zyga-ubuntuogra_: yeah, bugs go to the same person ;)16:28
ogra_lol16:28
andyrockogra_: zyga-ubuntu let me give it a try16:31
mupPR snapd#4205 closed: add spread test for allocating TUN/TAP devices with network-control <Created by jdstrand> <Merged by zyga> <https://github.com/snapcore/snapd/pull/4205>16:34
zyga-ubuntupstolowski: btw, https://github.com/snapcore/snapd/pull/4169 is a nicer and shorter diff to review now16:43
mupPR #4169: cmd/snap-update-ns: add secureMkfileAll <Created by zyga> <https://github.com/snapcore/snapd/pull/4169>16:43
pstolowskizyga-ubuntu, great, will take a look16:46
zyga-ubuntupstolowski: thank you16:46
mupPR core#63 closed: 25-create-generic-initrd.chroot: use symlink instead of copy <Created by mvo5> <Merged by mvo5> <https://github.com/snapcore/core/pull/63>16:47
andyrockogra_,zyga-ubuntu if  you want to use sytemd.mount at this point is better to use the mount options16:58
andyrockmount options can be easily retrieved using udisk216:59
zyga-ubuntuandyrock: yep, I agree17:00
andyrockare  /etc/systemd/system/snap*.mount generated or what?17:00
zyga-ubuntuandyrock: yes17:01
zyga-ubuntuandyrock: well, "generated" not via systemd-generate or anyrthing17:02
zyga-ubuntuandyrock: snapd manintains those17:02
andyrockkk17:02
niemeyersergiusens: Heya17:05
niemeyersergiusens: Curious about two updates:17:05
niemeyersergiusens: The clean behavior improvements17:05
niemeyersergiusens: and the interpreter fix for classic snaps17:06
niemeyersergiusens: How're those going?17:06
zyga-ubuntuwow, PRs fit one one page :D17:07
zyga-ubuntujust a little more and we'll be under 20 :D17:07
niemeyerAnd I'm still way behind17:08
zyga-ubuntuniemeyer: but we have interesting rsync /snap posts that saw some eye-opening comments :)17:09
niemeyerzyga-ubuntu: I wonder how to make that more clear, or at least more well known17:15
niemeyerzyga-ubuntu: I've seen multiple people going from disappointment to awe just by being enlightened about that point17:15
zyga-ubuntuniemeyer: yeah, I was thinking if there's a way for rsync to say "OMG multiple filesystems" and bail out or something17:15
niemeyerzyga-ubuntu: Well, we won't be able to touch rsync or du which are the tools people normally use for that17:16
niemeyerzyga-ubuntu: Not in a way that solves the perception problem17:16
zyga-ubuntuniemeyer: /snap/bin/du ;-)17:16
zyga-ubuntujust sayn ';-)17:16
zyga-ubuntuniemeyer: I think it's a problem of doing something new and finding that people are not familiar with the concept17:16
zyga-ubuntuniemeyer: hard to say if there's a technical solution17:16
niemeyerzyga-ubuntu: Perhaps a /snap/NO_THAT_SPACE_IS_NOT_BEING_CONSUMED as a text file17:16
zyga-ubuntuactually17:17
zyga-ubuntu/snap/README.txt could go a very long way17:17
zyga-ubuntuit could have a paragraph of text in 5 most popular language and a forum link17:17
niemeyerOr /snap/DISK-SPACE17:17
niemeyerzyga-ubuntu: But yeah, /snap/README is likely more friendly17:18
zyga-ubuntuniemeyer: something we could manage and update over time, not packaged I assume17:18
niemeyerzyga-ubuntu: Yes, synched on snapd runs17:18
zyga-ubunturight17:18
zyga-ubuntuniemeyer: I may just do that quickly17:18
zyga-ubuntuniemeyer: I'm bored by reviews and it's late17:18
niemeyerzyga-ubuntu: +117:18
niemeyersergiusens I promise to send you a cake if the clean "High priority" bug becomes two years old17:20
niemeyersergiusens: Actually, I'll deliver it personally in the next sprint17:21
zyga-ubuntuniemeyer: the cake is a lie17:25
zyga-ubuntuniemeyer: but I want pics if you do17:25
niemeyerzyga-ubuntu: A lie?17:25
kyrofaniemeyer, you've never played Portal?17:27
kyrofaI'm disappointed in you17:27
niemeyerkyrofa: Oh, I did.. but way too long ago17:27
kyrofaHahaha17:28
niemeyerkyrofa: I didn't play the sequel, though17:28
niemeyerIs it any good?17:28
ogra_https://www.gnu.org/software/guix/17:28
ogra_hmmm17:28
zyga-ubuntuniemeyer: it's very very good17:28
zyga-ubuntuniemeyer: if you have debian commit access you can get a copy for free17:28
kyrofaThey're both great, although I only ever did the coop version (of both), not sure if it's different17:28
ogra_"in addition to standard package management features, supports transactional upgrades and roll-backs, unprivileged package management, per-user profiles, and more."17:28
zyga-ubuntuniemeyer: valve use do thave a promo for all debian developers and maintainers17:28
niemeyerogra_: Gnu luck17:29
niemeyerI mean.. good luck17:29
ogra_heh17:29
zyga-ubuntulol17:29
* ogra_ only just stumbled over it 17:29
zyga-ubuntuThis is GNU luck, there is no warranty17:29
zyga-ubuntuso meta17:29
ogra_stallman snaps ....17:30
ogra_stall-snaps17:30
ogra_or is it flat-stall17:30
niemeyersnap stall17:31
niemeyerOMG, we should have an alias17:31
ogra_lol17:31
niemeyersnap stall --man17:31
ogra_is that the long version of "snap rms" ?17:32
sergiusensniemeyer the clean bug has many subtasks hidden in comments, the just clean dependent parts that need cleaning is done; the re-pull and un-pull stuff has not started17:34
zyga-ubuntuniemeyer: I can smell the LWN article already17:34
zyga-ubuntuniemeyer: ubuntu taunts the father of free software with snapd, tied to proprietary store ;-)17:34
sergiusensniemeyer interpreter fix should be on track, but I cannot provide tangible updates as we are still trying to cut a release17:34
zyga-ubuntuand OMG SKY IS FALLING17:35
niemeyersergiusens: It's going to be two years soon.. it's really time to tackle it17:35
mupPR snapcraft#1722 closed: unit tests: reset log level after test <Created by kyrofa> <Closed by kyrofa> <https://github.com/snapcore/snapcraft/pull/1722>17:35
niemeyersergiusens: Being able to clean a cache is a fundamental part of any cache implementation17:35
ogra_you mean over print("buy bigger disk !!!") ?17:36
niemeyersergiusens: We need to look for the intuitive behavior in those areas17:36
niemeyersergiusens: We should probably not even do "rebuild"17:37
niemeyersergiusens: The intuitive action is simply to do the action in the first place17:37
niemeyersergiusens: So "snapcraft pull foobar" should pull it17:37
niemeyersergiusens: Cached or not17:37
niemeyersergiusens: We're all used to the warts, but I regularly see people stumbling upon just making things work at all, which is a typical issue with caching that is on the way17:38
niemeyerWas reminded of that again by https://forum.snapcraft.io/t/use-of-home-and-network-plugs/2587/3317:39
sergiusensniemeyer so `snapcraft pull` would basically redo and leave you in that state? I thought the bigger problem was local sources changing and running `snapcraft` with no specific target which is another task we are working on17:39
sergiusensbut working on this will put us behind on some roadmap items17:40
niemeyersergiusens: Note that initially the poster apparently had no idea that there was even caching involved.. the report is "snapcraft refuses to work"17:40
niemeyersergiusens: Yes, snapcraft would basically do what is on the label17:41
niemeyersergiusens: pull pulls17:41
niemeyersergiusens: build builds17:41
niemeyersergiusens: If you want caching of step X then don't ask to run step X17:41
niemeyersergiusens: Right now we're harshly responding "Nope!" when asked to do a step17:42
sergiusensok, I'll update you next week on the progress of that item17:42
niemeyersergiusens: Thanks, and sorry for the joke.. we should really just fix this17:43
* sergiusens starts making his way to physiotherapy17:43
sergiusensniemeyer no worries17:43
kyrofaelopio, talk to me about adt. I see pexpect timeouts on armhf and arm64 on the beta PR. Were you able to reproduce the Ruby issues there?17:46
kyrofaShould I fire up my rpi?17:46
sergiusenskyrofa yes!17:46
kyrofasergiusens, you were able to reproduce them?17:46
sergiusensno, I was focusing on other items ;-)17:47
kyrofaOkay, I'll try to reproduce17:47
elopiokyrofa: yes please, my sd cards make everything hard.17:52
elopiokyrofa: I ran in dragonboard with no issues.17:53
* ikey has mental image of a DBZ surfboard17:55
kyrofaI'm flashing now17:56
* ogra_ shades his eyes17:57
* zyga-ubuntu implemented the readme thing, waiting for spread 18:06
kyrofaHmm... it seems snapd isn't running on my newly flashed rpi. I can't create an initial user as a result18:09
kyrofaI'll try rebooting18:09
kyrofaHuh. Still no luck18:11
kyrofazyga-ubuntu, did you make any headway with the lxd issue?18:17
kyrofaLast I heard, you thought you had a solution, but it didn't work?18:21
zyga-ubuntukyrofa: yes, but I had some network issues that wreaked havoc in my iteration18:22
zyga-ubuntukyrofa: I tried and failed with two approaches18:22
zyga-ubuntukyrofa: and I got a 3rd one going that is likely to work18:22
zyga-ubuntukyrofa: stay tuned, I'm still working on this18:23
kyrofazyga-ubuntu, alright, any sort of estimated timeline?18:24
zyga-ubuntukyrofa: I'll tell you tomorrow18:24
zyga-ubuntukyrofa: if it works it's in 2.3018:24
kyrofaAlright, thanks zyga-ubuntu :)18:24
ikeyuploaded some new LSI images which should have compatibility with ubuntu nvidia libraries now..18:25
ikeywe were missing `pthread_setname_np`@GLIBC_2.0 ...18:25
ikeyABI. fun and games. :D18:25
zyga-ubuntuikey: this project of yours is such a fantastic learning experience for me18:26
ikeyoh and me18:26
ikeyfinding all those weird corner cases18:26
ikeydoes show how malleable linux can be though18:26
ikey(with the right hammer)18:26
ikeyive dropped the vendored glibc ABI version to 3.2.0 which should be compatible with ubuntu now18:28
zyga-ubuntuikey: you just need a couple of kilos of unobtanium18:28
zyga-ubuntuaka documentation18:28
ikeylol yea18:28
ikeyfor the whole "how to create a snap" bit or the lsi bit or all of it?18:28
ikeys/snap/base snap.18:28
ikeygdi keyboard18:28
zyga-ubuntufor the low level libc and linker magic mostly18:29
ikeyaah abusing glibc for fun and profit18:29
ikeyfwiw i tried to create a rudimentary LD_AUDIT module a few months back (or more) and it failed miserably18:30
ikeythis is the 2nd time doing it18:30
zyga-ubuntuniemeyer: https://github.com/snapcore/snapd/pull/421018:31
mupPR #4210: many: add magic /snap/README file <Created by zyga> <https://github.com/snapcore/snapd/pull/4210>18:31
zyga-ubuntuniemeyer: just a RFC18:31
zyga-ubuntu:-)18:31
mupPR snapd#4210 opened: many: add magic /snap/README file <Created by zyga> <https://github.com/snapcore/snapd/pull/4210>18:31
niemeyerLooking18:32
zyga-ubu1tuniemeyer: the text is mostly a placeholder, please wordsmith18:32
zyga-ubu1tuniemeyer: there's also a forum link there that needs smilar treatment18:32
kyrofaelopio, while this is going, are there other failures I can help look into?18:46
niemeyerzyga-ubu1tu: Check it out18:47
kyrofaelopio, all the other arm adt results seem to be pexpect timeouts18:48
kyrofaShould I propose bumping them up?18:50
zyga-ubu1tuniemeyer: I think there's some issue on github, your text is empty18:55
zyga-ubu1tuniemeyer: now it's there, reading18:56
niemeyerzyga-ubu1tu: No, there'a an issue with Gustavo18:57
zyga-ubu1tuI'll update the text18:57
niemeyerI can't believe the day is going by that fast..19:09
niemeyerCan I get some extra hours please?19:09
kyrofasergiusens, elopio alright, I'm able to duplicate here. Looking at it now19:20
kyrofaKinda slow going, obviously :P19:21
sergiusenskyrofa question is. Did it ever work? If not I would expect failure on the test and carry on if it becomes too time consuming19:21
kyrofasergiusens, given the error, I doubt it. Want me to just expect failure, then?19:22
kyrofasergiusens, I think I know what the problem is19:25
kyrofaShould be an easy fix. I'll try it, but keep an eye on the time. If things don't work out, I'll expect19:26
kyrofa(failure)19:26
zyga-ubu1tuniemeyer: tell me that19:27
zyga-ubu1tuniemeyer: it's alreday DARK outside for about 5 hours19:27
zyga-ubu1tuniemeyer: days run out faster than time at a roller-coaster19:27
kyrofaReminds me when I used to work in a windowless lab during the winter. I left home when it was dark, and left the lab when it was dark19:28
zyga-ubu1tukyrofa: welcome to the submarine19:29
kyrofaNo kidding19:29
=== zyga-ubu1tu is now known as zyga-ubuntu
ikeyhttps://www.youtube.com/watch?v=3m3JfmExzsQ19:35
ikeyxD19:35
zyga-ubuntuok19:41
zyga-ubuntuso I need someone who speaks Mandarin or Spanish19:42
zyga-ubuntuto translate a tiny snippet of text :)19:42
geniiMaybe someone in #ubuntu-locoteams or #ubuntu-cn would19:54
sergiusenskyrofa so what is the suspicion?20:18
kyrofasergiusens, ruby has a super convoluted arch detection when it comes to generating its arch-specific libdirs20:18
kyrofasergiusens, and the pattern is inconsistent depending on arch20:19
kyrofaSo we're not setting up the RUBYLIB correctly on arm20:19
kyrofathus it can't find files20:19
sergiusenskyrofa hah, so it probably never worked on $arch ;-)20:19
kyrofaIndeed20:19
kyrofaProbably only amd64 and i38620:19
kyrofaWhich means we haven't run adt on those archs since ruby landed... ages ago20:19
* genii ponders aarch64 vs arm6420:20
sergiusenskyrofa we probably have, no one was looking ;-)20:20
sergiusenskyrofa can I get a veridict on #1729 ?20:21
mupPR #1729: tests: spread all-snap test cleanup <Created by mvo5> <Merged by niemeyer> <https://github.com/snapcore/snapd/pull/1729>20:21
sergiusensthe snapcraft one though20:21
sergiusens:-)20:21
kyrofasergiusens, yeah, I just need to actually test it, it's next20:23
kyrofaCode looks good, though20:23
sergiusenstell you what, I'll make it easy. Hey ikey do you still get a crash if you `snap refresh snapcraft --channel stable/pr-1729`? I don't on solus, but triple confirmation is always better :-)20:25
ikeyomg --help works20:26
ikey..big help xD20:26
ikeyty!20:26
mwhudsonmorning20:27
sergiusensikey thanks for corroborating; turns out running `import debian.debfile` causes that as it loads apt_inst which expects /etc/apt to exist (I might be repeating myself here, sorry if I am)20:34
mupPR snapcraft#1730 opened: ruby plugin: be smarter about arch-specific paths <Created by kyrofa> <https://github.com/snapcore/snapcraft/pull/1730>21:18
kyrofaelopio, I just got the ""GET /v2/snaps HTTP/1.1" 200 79" failure again21:34
kyrofasergiusens, elopio ^ that however should fix the ruby issues no arm21:34
kyrofas/no/on/21:35
kyrofasnappy-m-o, autopkgtest 1730 xenial:armhf21:37
snappy-m-okyrofa: I've just triggered your test.21:37
=== cprov_ is now known as cprov
=== icey_ is now known as icey
=== cwayne_ is now known as cwayne
=== arosales_ is now known as arosales
=== Trevinho_ is now known as Trevinho
=== jero is now known as Guest42538
ikeysergiusens, oh cool22:01
ikeysorry was afk there for podcast cruft22:01
sergiusensokey sad that to use the logic to extract an ar archive one would need the full apt machinery by default22:04
sergiusensOops autocorrect22:04
elopiokyrofa: did you get the "GET" print on the same test?22:07
sergiusenskyrofa what do libdirs look like on armhf and arm64?22:08
kyrofasergiusens, lib/ruby/2.4.0/armv7l-linux-eabihf, on amd64 it's lib/ruby/2.4.0/x86_64-linux22:10
kyrofasergiusens, so we made the assumption it was <machine>-<linux> but it's not. I dug into Ruby's autotools stuff and it's... yucky22:10
kyrofasergiusens, not sure what it is on arm64, but elopio said it worked22:11
kyrofaSo I'm guessing aarch64-linux22:15
kyrofaelopio, snapcraft.tests.test_lifecycle.ExecutionTestCase.test_dependency_recursed_correctly22:20
kyrofaelopio, I'm having trouble remember which one it was last time, but I know it was in the lifecycle tests22:20
elopiokyrofa: yes, that's the same one. :/ Maybe we should try your fix, but I'm still not understanding what's going on.22:31
kyrofaMe neither :(22:32
elopiomy experiment with the nuke argument was not successful, because by default we are nuking.22:32
kyrofaI rebased on top of my fix and it's running fine now, though22:32
kyrofaIf I'm the only one hitting it I can continue to do that22:32
elopioit's working for me, but might be luck.22:33
=== dontbeadick is now known as CoderEurope
kyrofaelopio, are there any other known issues that I could be looking at? All the arm failures I see are pexpect timeouts, so I don't know what the current issues are22:44
ikeyis snapd forcing a host os-release into the snap?22:48
gsilvaptAny tips on finding the needed files to implement a change suggested in LP? For instance, https://bugs.launchpad.net/snapcraft/+bug/1590349. How do I know (as an outsider and unfamiliar person to the project) where this section lives?23:16
mupBug #1590349: snapcraft should have a 'version' command <bitesize> <ui> <Snapcraft:Triaged> <https://launchpad.net/bugs/1590349>23:16
kyrofaelopio, ever seen this before? https://pastebin.ubuntu.com/25957073/23:18
kyrofaWe tease out all sorts of fun things running in lxc23:18
kyrofaHey there gsilvapt23:28
gsilvapthi kyrofa23:28
kyrofagsilvapt, really the only way to determine where things are is to start hacking on things until you get a good idea of it, haha23:28
kyrofagsilvapt, or ask one of us to point you in the right direction until you get enough experience with the codebase to know23:29
gsilvaptHum, I figured that could be a possibility. It's just that I feel lost looking at any code base like this and I thought there could be some pro tips I could ask for from you guys23:29
kyrofagsilvapt, for that one, start with the snapcraft/cli package23:29
kyrofagsilvapt, yeah anyone feels lots on a new large project, don't feel overwhelmed. Typically I start by grepping for a string I know if part of the problem, then tracing around in the code from there23:30
gsilvaptAre you telling just from experience or are there any pointers right out of the box?23:30
kyrofagsilvapt, I just gave you one. Here's the flow I'd take for that particular issue23:32
kyrofa$ grep -r "\-\-version" *23:32
gsilvaptOk, lets try figuring out where is that package23:32
kyrofaThat will return several things, one of which is an entry in the changelog. Interesting!23:32
kyrofaSo let's look for that string in `git log`23:32
kyrofaThat leads us to commit be4a92ad709e98975301a19a15025154bd10d8b223:33
kyrofa`git show be4a92ad709e98975301a19a15025154bd10d8b2` would give you a great start toward what files are involved in this23:34
kyrofagsilvapt, see what I mean?23:34
gsilvaptYes, I'm following23:34
kyrofaThat brings you to the snapcraft/cli package that I mentioned23:35
kyrofaLook at a few files in there, you'll see how other commands are structured23:36
kyrofaYou'll also see how --version works, and you should be able to sort of combine the two23:36
gsilvaptSo the file to be changed is actually snapcraft/__init__.py23:37
gsilvaptis that correct?23:37
mupPR snapcraft#1729 closed: sources: use arfile to extract debs <bug> <Created by sergiusens> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/1729>23:42
kyrofaNo, maybe snapcraft/cli/__init__.py, but more likely snapcraft/cli/help.py or create a new file in there23:42
kyrofa(I would suggest a new file)23:43
sergiusensikey in devmode and strict you are pivot rooting into the base snap, so os release would be what that is (unless I got your question wrong)23:44
ikeyyeah its not23:44
sergiusenskyrofa elopio the correct fix for the logging is to use a named logger and not getdefaultLogger23:44
ikeysomeone testing my snap is showing a report of Ubuntu 17.10 from steam23:45
kyrofasergiusens, named logger where? In the log package?23:45
sergiusenskyrofa https://github.com/snapcore/snapcraft/blob/master/snapcraft/internal/log.py#L55 make sure logger_name is not None there23:47
gsilvaptkyrofa, considering the method to retrieve snapcraft version exists when --version is passed in as arguments, is it bad practice if we change it to just be version?23:47
sergiusenskyrofa for the callers of that23:47
kyrofasergiusens, ah, I see23:48
gsilvaptOr rather, version and --version should return the same value. They both exist so we could adjust the respective code bits, right?23:48
sergiusenskyrofa but this is not an easy fix, as all the random getLogger calls would need to change as well23:48
sergiusensthen, setting a log level will only affect our stuff23:48
kyrofagsilvapt, according to the bug, looks like both --version and version are desired23:49
sergiusenskyrofa your fix is fine, but I'd do it at the start of the tests and not at the end23:49
sergiusenskyrofa baseline the loglevel for all the tests23:49
kyrofasergiusens, fair enough. Shall I repropose and log a bug about the loggers?23:49
gsilvaptkyrofa, yes, both are desired to print the version of snapcraft and not the snap itself. Again, if both methods exist, why not convert them to return the same value?23:51
kyrofagsilvapt, hmm, I'm a bit confused-- they don't both exist. But I agree that, when we add `version` it should return the same value as `--version`23:51
sergiusenskyrofa sounds good, but lets get this release out of the way; also, we should stop checking for strict output23:52
gsilvaptHum, I thought version would return the snap's version23:52
gsilvaptSo basically it needs a new class. Ok, this could be tricky for me to implement and it is getting late but I will sketch something to work this one out23:52
kyrofagsilvapt, check the bug again, that discussion was had there23:52
kyrofasergiusens, agreed on both counts, although this is sort of FOR this release since it's in the way of my running adt locally, but we can hack around it for now23:53
sergiusensikey is this written somewhere? some people run things straight from the innards of things (which makes me think sometimes that we should blackbox the snap itself by default...)23:53
gsilvaptYes, I just thought both existed but did different things. They both should return the same thing which is the snapcraft version number.23:54
sergiusenskyrofa we are almost there https://github.com/snapcore/snapcraft/milestone/10 (I am not sleeping until this is tagged btw)23:55
kyrofagsilvapt, you got it-- `snapcraft version` doesn't exist today23:55
kyrofasergiusens, nice23:56
gsilvaptOk, I will work on this for the next couple of days. Need to read a bit more about how is this feature working before implementing a new one23:57
gsilvaptThanks for helping, kyrofa23:57
kyrofasergiusens, elopio do we to move all the catkin integration tests into snapd tests?23:59
kyrofado we WANT rather23:59

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!