/srv/irclogs.ubuntu.com/2018/03/19/#snappy.txt

=== leftyfb_ is now known as leftyfb
=== leftyfb_ is now known as leftyfb
* Son_Goku waves at sabdfl 02:03
Son_Gokuhey sabdfl02:03
Son_Gokuhow are you doing this evening?02:03
=== nsg_ is now known as nsg
mborzeckimorning06:07
zygagood morning!07:13
zygaI found a silly reason for the symlink issue, there were two checks and I only patched one last week07:14
mborzeckizyga: hey07:14
zygaI noticed late on Friday and started fixing it but stopped because it has huge diff on unit tests07:14
zygaI will finish that now quickly07:14
mborzeckizyga: that's good news07:14
zygayeah, it's from and older part of the code that existed before we had any creation code07:14
zygait just checked if things exist and are of the right type07:15
mborzeckizyga: mhm, ping me if you need a review07:15
mborzeckizyga: in other news, there's another user reporting issues with nvidia on arch with new drivers, i've ordered gt1030 card just now, so i'll probably take a look tomorrow or on wednesday07:17
zygayeah, I saw that07:17
zygaexcellent!07:17
zygaI didn't knew 1030s existed, how much was it?07:17
mborzecki~340pln/80eur07:19
mborzeckiand it's a 30W card07:19
zygathat's pretty neat!07:28
zygaand it will be on modern drivers07:28
zygathank you for doing that, it will definitely help the team07:28
kalikianagood morning, snaooy08:05
pstolowski|afkmorning!08:05
=== pstolowski|afk is now known as pstolowski
mborzeckikalikiana: pstolowski: morning guys08:08
mborzeckizyga: what's the plan with #4509?08:08
mupPR #4509: interfaces/builtin: add support for software-watchdog interface <Created by bboozzoo> <https://github.com/snapcore/snapd/pull/4509>08:08
mborzeckidamn, not that one08:08
zygaoh?08:08
mborzeckizyga: #478108:08
mupPR #4781: wrappers: refactor desktop file sanitizer to support autostart files <Created by bboozzoo> <https://github.com/snapcore/snapd/pull/4781>08:08
mborzeckizyga: must by my unlycky day, not that one obviously :P08:09
mborzeckizyga: #457108:09
mupPR #4571: data, cmd, packaging: use autotools to generate artifacts under data <Created by bboozzoo> <https://github.com/snapcore/snapd/pull/4571>08:09
zygahaha08:09
zygalooking again :)08:09
zygaI _think_ the desire is to drop autotools08:09
zygaso for now this can stay as refrence but we probably won't land it08:10
mborzeckiok08:11
mborzeckihm so hand written makefiles then?08:11
mborzeckizyga: i can look into it, i'm not super busy with anything atm anyway08:15
zygayeah, go for it!08:15
zygaI'm a big fan of pure make08:15
zygaso I'll gladly review08:15
zygaok, I will do two patches08:34
zygaone that is tiny and can land quickly08:34
zygaand one that removes obsolete code that can land later without rushes08:35
zygajust running tests now08:38
zygaa few lines changed, vs what I got last Fridat08:39
zyga(100s, probably close to 1K)08:39
mupPR snapd#4866 opened: tests: make autopkgtest tests more targeted <Created by mvo5> <https://github.com/snapcore/snapd/pull/4866>08:41
zygamborzecki, mvo: https://github.com/snapcore/snapd/pull/486708:44
mupPR #4867: cmd/snap-update-ns: don't fail on existing symlinks <Created by zyga> <https://github.com/snapcore/snapd/pull/4867>08:44
zygathat's the symlink part of the bug08:44
zygafingers crossed08:44
mupPR snapd#4867 opened: cmd/snap-update-ns: don't fail on existing symlinks <Created by zyga> <https://github.com/snapcore/snapd/pull/4867>08:44
zyganow refocusing on not writing to places  that leak to host filesystems08:45
mupPR snapd#4861 closed: store: reorg auth refresh  (2.32) <Created by pedronis> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/4861>08:46
mupPR snapd#4862 closed: store: cleanup test naming, dropping remoteRepo and UbuntuStore(Repository)? references (2.32) <Created by pedronis> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/4862>08:48
mupPR snapd#4865 closed: many: propagate contexts enough to be able to mark store operations done from the Ensure loop (2.32) <Created by pedronis> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/4865>08:54
Chipacagood morning, all!08:54
mvohey Chipaca ! good morning08:56
Chipacathat ! feels like a gnarly binop08:57
Chipacamvo: hiya :-) how was your friday?08:57
pstolowskimorning Chipaca !08:57
Chipacapstolowski: :-)08:57
mvoChipaca: mostly good, about 1h of small panic because of something that looked like a serious snapd bug but turned out to be a glich in the data08:58
mvohey pstolowski08:58
Chipacamvo: no, no, how was your _friday_09:03
pstolowskimvo: o/09:03
Chipacamvo: that thing where you _weren't_ working09:03
mvoChipaca: *cough*09:03
mborzeckiChipaca: hey, thanks for benchmarking the text wrapper thing, must have been a lot of fun :)09:05
Chipacamborzecki: I learned some stuff :-)09:05
mborzeckiChipaca: out of curiosity, have you tried the profiler? :P09:06
Chipacamborzecki: the web clicky thing? not on this code09:07
Chipacamborzecki: on other code yes09:07
mborzeckiChipaca: ah, ok, it's neat though, like how it always amazes non-go guys during presentations09:08
Chipacamborzecki: for this I used the profile flags on go test, and got to a version that was doing over 100MB/s with 0 allocs09:08
Chipacaall rather academic but fun09:09
Chipaca(academic because in real use it's terminal i/o so unless you're on a non-xft xterm, it's got no way of hitting 100MB/s :-) )09:09
Chipacaalso academic because most descriptions shouldn't hit a megabyte :-)09:10
mborzeckihaha nice :)09:10
mborzeckizyga: mvo: systemCoreSnapUnalias?09:11
zygammm09:14
zygawell, +1 because bikeshed :)09:14
mborzeckihahah09:15
mborzeckiwell, renamed & pushed, too late now09:15
mvomborzecki: yeah, fine with me09:16
Chipacazyga: FYI snapped things don't work with nvidia prime in intel mode09:16
mvo(also +1 for zyga )09:16
mborzeckizyga: mvo: thank you for the reviews :)09:16
mvoyw09:16
zygaChipaca: can you please tell me and mborzecki more?09:16
mborzeckiChipaca: that PRIME?09:17
Chipacamborzecki: zyga: have laptop with nvidia prime, which is not a condom nor a subscription service for quicker delivery09:17
Chipacamborzecki: zyga: non-snapped 3d apps work fine in both modes, although of course faster in nvidia mode09:18
Chipacamborzecki: zyga: snapped 3d apps fail to work in intel mode09:18
mvoChipaca: what is the error message?09:19
Chipacaminecraft: https://pastebin.ubuntu.com/p/7pxkxkVVTK/09:20
Chipacaalthough, hold on, ohmygiraffe works09:20
Chipacais that 3d?09:20
mborzeckiChipaca: it has a plug for opengl09:21
Chipacahmm, hmm. so maybe the minecraft snap is buggy, and not our 3d support09:22
mborzeckiChipaca: can you `MESA_DEBUG=1 snap run ohmygiraffe` and see what's in the logs?09:22
Chipacamborzecki: in which logs? on the terminal I just get “Mesa warning: couldn't open libtxc_dxtn.so, software DXTn compression/decompression unavailable”09:23
mborzeckiChipaca: and how about LIBGL_DEBUG=verbose ?09:23
Chipacamborzecki: https://pastebin.ubuntu.com/p/WDT3TDpNcj/09:24
mborzeckiChipaca: looks like it's using intel/mesa now09:27
Chipacamborzecki: yes, it's in intel mode09:27
Chipacathe snapped minecraft crashes in this mode (regular minecraft doesn't)09:27
mborzeckiChipaca: can you also try some other snap, say supertuxkart09:27
Chipacayes09:27
zygaChipaca: it would be interesting to compare an app that crashes inside and outside the snap09:28
zygais this on xenial btw?09:28
Chipacazyga: it doesn't crash outside the snap :-)09:28
zygaright09:28
zygaso the debug log of that09:28
zygaand where it differs is a hint09:28
Chipacazyga: yes, xenial, but xenial as factory-installed09:28
mborzeckibtw. is glxinfo included in any snap?09:29
Chipacaglxinfo in nvidia mode here isn't happy, fwiw09:29
Chipacasomething about  bad libGL version09:29
Chipacasupertuxkart crashes09:30
zygaI think we need to support glvnd natively and remove bundled libraries from snaps09:30
mborzeckiChipaca: woo, badly? backtrace?09:30
Chipacahmmm, somehow supertuxkart loaded the nvrm module09:31
Chipacaweird09:31
Chipacamborzecki: https://pastebin.ubuntu.com/p/6x45s6RNnH/09:32
Chipacamborzecki: no backtrace09:32
mborzeckiChipaca: `[warn   ] [IrrDriver Temp Logger]: Level 2: Could not create GLX rendering context`. same as minecraft09:33
mupPR snapd#4866 closed: tests: make autopkgtest tests more targeted <Created by mvo5> <Merged by zyga> <https://github.com/snapcore/snapd/pull/4866>09:33
vidal72[m]hi, I'm trying to run snap on Archlinux with apparmor but I get denial when trying to start an app AVC apparmor="DENIED" operation="open" profile="snap.qownnotes.qownnotes" name="/var/lib/snapd/snap/qownnotes/906/meta/snap.yaml" pid=32283 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=010:09
zygahttps://www.irccloud.com/pastebin/14klzXuE/10:10
zygavidal72[m]: did you build apparmor enabled kernel?10:10
zygamborzecki: ^10:10
vidal72[m]yes, I use apparmor for a long time, this denial comes from apparmor10:12
vidal72[m]here is appamror profile for this app https://paste.ubuntu.com/p/zwB4Yb57nB/10:12
zygawhich kernel are you on now?10:12
vidal72[m]4.16-rc610:12
zygainteresting10:13
pstolowskizyga: where do you see this error you pasted with https://www.irccloud.com/pastebin/14klzXuE/ ?10:13
zygaso there are permissions to m snap-exec10:13
zygabut not to x it10:13
zygapstolowski: in my bionic box when running run-checks.sh10:13
zygapstolowski: run-checks.sh --unit, to be precise10:13
zygavidal72[m]: if you edit the profile and replace line 194 with10:14
zyga /usr/lib/snapd/snap-exec mr,10:14
zygaand reload the profile with apparmor_parser -r /var/lib/snapd/apparmor/profiles/snap.qownnotes.qownnotes10:14
zygadoes it fix the issue?10:14
pstolowskithat error looks like a copycat of a problem with tests that I fixed a few weeks ago; we were trying to lunch zenity/kdialog for real in unit tests10:17
vidal72[m]zyga: no, same message10:24
zygavidal72[m]: could you please publish your kernel config and tree somewhere?10:25
zygaI cannot answer why this happens instantly10:25
mupPR snapd#4868 opened: [WIP] secure bind mount implementation for use with user mounts <Created by jhenstridge> <https://github.com/snapcore/snapd/pull/4868>10:31
jjohansenzyga: did you get a chance to try the patch. So far it seems to be working good for me, if its good for you throw a comment on the bug and I'll get it sent into the the kt10:32
vidal72[m]zyga: here's my config https://paste.ubuntu.com/p/5rw2Fxxsps/10:32
zygaI read the patch and built it but I didn't do any testing yet, I will have the results for my tomorrow, sorry I had a busy weekend10:33
zygaI'll update the bug today10:33
zygavidal72[m]: thank you, can you please open a thread on forum.snapcraft.io with the basic information and your kernel config and git tree reference10:33
zygaand I will explore that this week10:34
jjohansenzyga: np, and no hurry I just don't want to let it get dropped in the tsunami of other issues, so if you don't get to it this week I will poke you again next10:34
vidal72[m]zyga: ok10:34
zygajjohansen: understood, thank you very much for the patch10:34
zygaI was looking for some kind of race condition but now I understand how it works better10:34
zygado'h10:38
zygaI found a very embarrasing bug10:38
jjohansenzyga: yeah, well it seems that when I did the convertion the racy update of i_link got dropped. My first few attempts at fixing this involved locking and an rcu callback to free the i_link value, needless to say I wasn't happy with those10:38
zygathe bug exsits because I'm not using something I wrote for this specific purpose10:38
zyga(different bug, something I realized on friday and debugged just now)10:40
mborzeckii've uplaoded a snap for debugging issues with graphics, using this snapcraft.yaml https://github.com/bboozzoo/graphics-debug-tools-snap/blob/master/snapcraft.yaml once I requested x11 and opengl it got stuck in manual review, the reason being lack of *.desktop file :/ (there'll hardly be any for cli tools)10:44
Chipacazyga: when is the fix for the DENIED on actions_avail happening?10:45
zygaI didn't discuss this with jdstrand yet, I'm not sure what is the right way10:46
zygasince jamie is back this week it will be on my plate to ask10:46
mvomborzecki: I can help10:52
mvomborzecki: its in10:53
mborzeckimvo: thank you10:53
mvoxnox, mwhudson the autopkgtests run on s390x shows some unusal errors and panics (https://objectstorage.prodstack4-5.canonical.com/v1/AUTH_77e2ada1e7a84929a74ba3b87153c0ac/autopkgtest-bionic/bionic/s390x/s/snapd/20180319_102843_5bafc@/log.gz) - are there known issues with golang1.10 on s390x ?11:10
zygamvo: https://github.com/snapcore/snapd/pull/4867 updated with unit tests and green11:12
mupPR #4867: cmd/snap-update-ns: don't fail on existing symlinks <Created by zyga> <https://github.com/snapcore/snapd/pull/4867>11:12
zyga+1 to merge?11:12
mvozyga: yes11:13
mvozyga: thanks for adding the test11:13
cachiozyga, hey, could yo uplease take a look to #4835?11:18
mupPR #4835: tests: add bionic system to google backend <Created by sergiocazzolato> <https://github.com/snapcore/snapd/pull/4835>11:18
cachiozyga, it is almost ready11:18
zygahmmm11:19
zygathe extra code for stoppping the stopping of the mount unit is worrying, why do we need it?11:19
cachiozyga, this is mvo11:22
cachiozyga, it is to deal with a problem that comes from 2.3111:23
zygaShould that be done by snapd instead so that is not just in test code11:25
cachiozyga, we were researching but the only way to fix that was mounting again the units after install11:25
zygamvo: can you explain the problem please?11:25
mvozyga: sure, so 2.31.X has the snap.mount unit. but 2.32 does not have it anymore. this means that on upgrade dpkg will run the "prerm" of the *old* 2.31.X deb. The default is to stop mount units there. this leads to all childs being unmounted11:27
mvozyga: because it is the old prerm we cannot prevent this umount11:27
mvozyga: I mean, that would be the ideal solution, do something to prevent this and just leave it running11:27
mvozyga: the alternative is to undo what it was doing11:28
zygaright, I understand the prerm issue11:28
zygaso the question is this; is this a real issue that needs to be dealt in more than just test code11:28
zygaah11:28
zygasorry11:28
zygaI'm blind, this is in .postinst11:28
zygaso it's all fine11:28
zygaI read this as somthing in prepare-restore.sh11:28
zyga+1 :-)11:28
mvozyga: ok11:29
mvozyga: fwiw, I'm *not* happy with this code11:29
mvozyga: and it only affects bionic and -proposed users11:29
mvozyga: so the alternative might be to just ask them to reboot. but at the same time, the fixup will also only run for these users so even if the code is buggy for some its not worse than before (I think)11:30
* zyga whispers "it will be there forever" to mvo's ear 11:30
* mvo drops into a coma11:30
mvocachio: 2.31.2 got accepted into -proposed - if you have time (not super urgent) please do the sru validation11:31
cachiomvo, sure11:32
cachiozyga, so, is it ok to merge bionic?11:32
zygadoing some comments there11:33
zygahold on please11:33
cachiomvo, beta validation is ready11:33
cachioOI am waiting for confirmation from qa team11:33
zygacachio, mvo: 4835 reviewed11:35
cachiozyga, thanks11:36
mvocachio: cool, I will prepare 2.32(-final) then and focus on test fixes etc11:37
mvozyga: anything that needs to land from your side in 2.32 still?11:38
zygayes11:38
zygatwo PRs I'm afraid11:38
zygaand everything that is tagged11:38
zyganote that I did _not_ cherry pick anything yet11:38
zygaso I'm afraid still a few PRs to go11:38
zygamvo: https://github.com/snapcore/snapd/pull/4867 is one that's ready to land11:38
mupPR #4867: cmd/snap-update-ns: don't fail on existing symlinks <Created by zyga> <https://github.com/snapcore/snapd/pull/4867>11:38
zygamvo: https://github.com/snapcore/snapd/pull/4765 is a bigger one from the sprint11:39
mupPR #4765: interfaces: harden snap-update-ns profile <Critical> <Created by zyga> <https://github.com/snapcore/snapd/pull/4765>11:39
zygamvo: and two more (small) that I'm brewing11:39
mupPR snapd#4867 closed: cmd/snap-update-ns: don't fail on existing symlinks <Created by zyga> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/4867>11:39
zygamvo: I will try to prepare them both by 14:00 today11:40
zygaand after all the fixes are in master I will look at backport PRs11:41
zygamvo: does that sound acceptable?11:42
mvozyga: sounds good, lets talk during the standup.11:45
zygaok11:45
* cachio afk11:49
xnoxmvo, looks, i have no clue.11:50
mvoxnox: I think I asked before, but is there a porter box for s390x?11:52
xnoxmvo, yes12:03
vidal72[m]zyga: I managed to fix it by changing @{INSTALL_DIR}="/snap" to @{INSTALL_DIR}="/{,var/lib/snapd/}snap" but now I have12:06
vidal72[m]ANOM_ABEND auid=1000 uid=1000 gid=100 ses=1 pid=2319 comm="QOwnNotes" exe="/snap/qownnotes/906/usr/bin/QOwnNotes" sig=6 res=112:06
zygavidal72[m]: I have never seen such a message (ANOM_ABEND)12:07
pbekvidal72[m]: if nothing helps you can use one of the many other install methods of QOwnNotes. ;) http://www.qownnotes.org/installation12:09
vidal72[m]zyga: "Triggered when a processes ends abnormally (with a signal that could cause a core dump, if enabled)."12:09
zygaI see12:09
zygadid you get any other denial?12:10
zygaperhaps it was killed by seccomp12:10
zygathose would be logged by the audit logger12:10
zygavidal72[m]: I think the install dir is a clear omission on our end,12:10
zygado other snaps work?12:10
vidal72[m]zyga: no, only this single message12:11
vidal72[m]zyga: I didn't tried other as I'm strugling to make this one work (first which I tried), I have some other small fixes to usr.lib.snapd.snap-confine12:12
zygavidal72[m]: please send a PR if you can12:13
zygatry the hello snap12:13
zygait's very basic12:13
Son_Gokumvo, btw, zyga has access to the Fedora test/porter boxes if you want to work on quirky things with ppc and arm: https://fedoraproject.org/wiki/Test_Machine_Resources_For_Package_Maintainers12:13
vidal72[m]pbek: thx, I can succesfully use qownotes, just not as snap12:15
Son_Gokumvo, and zyga can probably get access to Fedora s390x boxes by requesting them in #fedora-s390x12:16
zygathank you Son_Goku12:16
zygaI _hope_ we won't have to use them :)12:16
zygabut it's good that we have them if we have to12:16
zygaok, one more bug fixed, now looking at the last one12:22
zygaactually, let's break for 512:22
zygaback.hurt()12:22
mupPR snapcraft#2005 closed: pluginhandler: special case go patchelf failures for classic confinement <bug> <Created by sergiusens> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/2005>12:32
mupPR snapd#4869 opened: cmd/snap-update-ns: use x-snapd.{synthetic,needed-by} in practice <Created by zyga> <https://github.com/snapcore/snapd/pull/4869>12:35
* Chipaca -> lunch12:36
Chipacazyga: :-((((12:36
zygawhat's wrong John?12:36
Chipacazyga: take more care of your back12:36
zygayeah, I should take a walk12:37
mupPR snapcraft#2006 closed: many: use packaging logic to get patchelf <Created by sergiusens> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/2006>12:38
mupPR snapd#4870 opened: tests: drop old debug code <Created by zyga> <https://github.com/snapcore/snapd/pull/4870>12:39
* Chipaca -> lunch-making12:42
mupPR snapcraft#2008 opened: Release changelog for 2.40 <Created by sergiusens> <https://github.com/snapcore/snapcraft/pull/2008>12:57
vidal72[m]zyga: hello-world works, in qownnotes the error is: snap run qownnotes12:57
vidal72[m]Fatal: QXcbConnection: Could not connect to display :0 ((null):0, (null))12:57
vidal72[m][1]    5648 abort (core dumped)  snap run qownnotes12:57
vidal72[m]I use xorg12:57
mupPR snapd#4850 closed: many: fix shellcheck warnings in bionic <Created by mvo5> <Merged by zyga> <https://github.com/snapcore/snapd/pull/4850>12:57
zygainteresting, that may hint at a different issue now12:57
zygamborzecki: can you run qownnotes on your arch system?12:58
mborzeckitseliot: installing12:58
mborzeckidamn, wrong person :P12:58
mborzeckizyga: installing12:58
zygapstolowski, cachio: standup time :)13:01
mupPR snapd#4835 closed: tests: add bionic system to google backend <Created by sergiocazzolato> <Merged by sergiocazzolato> <https://github.com/snapcore/snapd/pull/4835>13:07
mupPR snapd#4871 opened: cmd/snap-confine: fix Archlinux compatibility <Created by Erick555> <https://github.com/snapcore/snapd/pull/4871>13:32
vidal72[m]zyga: I created PR with fixes for usr.lib.snapd.snap-confine on Arch ^^13:33
zygavidal72[m]: thank you, I will look at them in a moment13:34
zygavidal72[m]: added one comment13:34
vidal72[m]zyga: I answered13:40
vidal72[m]zyga: I'm talking about this: https://github.com/torvalds/linux/commit/2a4c22426955d4fc04069811997b7390c0fb858e13:46
zygaah, that's very interesting13:46
zygayeah, I think your change looks good13:46
zygaI asked a colleague for a 2nd review13:46
zygavidal72[m]: can you please sign the CLA https://www.ubuntu.com/legal/contributors13:47
vidal72[m]zyga: I tried but it wants me to put something in "Please add the Canonical Project Manager or contact" field13:49
* kalikiana lunch13:49
mborzeckizyga: https://github.com/snapcore/snapd/pull/483213:53
mupPR #4832: tests: move fedora 27 to google backend <Created by sergiocazzolato> <https://github.com/snapcore/snapd/pull/4832>13:53
zygamvo: I'll take a dog+lunch break now and will be back to fix bugs after that14:00
mborzeckioff to pick up the kids from school and the dog from a vet14:06
jdstrandabeato: added to the list. note, just got back from holiday so going through backlog14:10
mupPR snapd#4870 closed: tests: drop old debug code <Created by zyga> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/4870>14:21
zygajdstrand: good morning, welcome back14:43
jdstrandhey zyga, thanks :)14:51
jameshjdstrand, zyga: I'm heading to bed, but I pushed up https://github.com/snapcore/snapd/pull/4868 based on the discussions at the sprint14:52
mupPR #4868: [WIP] secure bind mount implementation for use with user mounts <Created by jhenstridge> <https://github.com/snapcore/snapd/pull/4868>14:52
jameshit'14:53
jameshs got good test coverage, but the question is whether it satisfies the security concerns14:53
zygajamesh: I saw, thank you for starting and pushing that work!14:58
zygajamesh: I _suspect_ so, I'll discuss this with jdstrand14:58
mvomwhudson: just fyi - https://github.com/golang/go/issues/24449 - there is a s390x issue with go1.1015:04
xnoxmvo, so 1.9 is still in bionic, and in main. can you revert to build-depend on 1.9 and/or use 1.9?15:23
mvoxnox: I will just disable coverage on s390x for now and then see what upstream is doing15:25
xnoxmvo, ok.15:25
mvoxnox: but yeah, going to 1.9 might be an option if there is no upstream reaction15:25
mupPR snapd#4872 opened: tests: add workaround for s390x failure <Created by mvo5> <https://github.com/snapcore/snapd/pull/4872>15:30
pedronismvo: when you have a moment could you look at #4829 again,  as I said in my comment to your comment I have to generalize a bit15:46
mupPR #4829: store: Sections and WriteCatalogs need to strictly send device auth only if the device has a custom store <Created by pedronis> <https://github.com/snapcore/snapd/pull/4829>15:46
=== chihchun is now known as chihchun_afk
zygasigh,15:49
zygathis last error is just annoying15:59
zygait's not hard but not easy either15:59
cyphermoxogra_: can I haz help to validate https://bugs.launchpad.net/netplan/+bug/1741910 ?16:08
mupBug #1741910: ath6kl_sdio does not support unbinding <verification-needed-xenial> <netplan:Fix Committed by cyphermox> <nplan (Ubuntu):Fix Released> <nplan (Ubuntu Xenial):Fix Committed> <https://launchpad.net/bugs/1741910>16:08
cyphermox(I don't have any ath6kl_sdio here)16:08
ogra_how dare you !16:08
ogra_:)16:08
ogra_szre, will test :)16:08
ogra_*sure even16:08
cyphermoxta16:08
ogra_cyphermox, hmm, i can only test xenial, we do not have non-core images for any of the devices (and core is 16.04 only atm)16:14
mvopedronis: I saw this, do you mean you want to keep the name and (maybe) consider changing it later?16:14
pedronismvo: no, I changed things more, see PR16:15
mvopedronis: aha, nevermind, just saw it, sorry16:15
vidal72[m]zyga: should I make PR which changes default @{INSTALL_DIR}="/snap" to  @{INSTALL_DIR}="/{,var/lib/snapd/}snap" ? (not sure where it's set)16:15
mvopedronis: nice, I like the diff16:15
cyphermoxogra_: only needed on xenial16:15
ogra_ok16:15
zygavidal72[m]: yes, feel free to push that to this PR or open a new one16:15
zygavidal72[m]: and thank you for contributing! I'm super happy you are an arch user that cares about apparmor16:16
cyphermoxzyga: vidal72[m]: nice, someone mentioned that to me as well yesterday for Fedora16:16
vidal72[m]Probably the only one who uses apparmor with snap...16:17
zygavidal72[m]: I'm curious if there's any movement inside arch to enable apparmor in the distribution16:17
zygadid you have to package apparmor userspace tools or are those available already?16:17
vidal72[m]zyga: don't think so, userspace tools are avalaible in AUR (unofficial user repository)16:19
zygavidal72[m]: I see16:19
Pharaoh_Atemzyga: generally speaking, Arch doesn't want audit enabled in the main kernel16:19
zygawell, it's good to have you, welcome :)16:20
Pharaoh_Atemthe originally had SELinux enabled (with no policy), but the arch devs disliked audit being enabled16:20
Pharaoh_Atemthe official hardened project prefers SELinux as well16:20
vidal72[m]zyga: I see it's defined in https://github.com/snapcore/snapd/blob/master/interfaces/apparmor/template_vars.go#L38 and https://github.com/snapcore/snapd/blob/master/interfaces/apparmor/backend_test.go#L387 but I don't know how16:29
vidal72[m]"/{,var/lib/snapd/}snap" should be expressed in go16:29
mupPR # closed: snapd#3963, snapd#4349, snapd#4358, snapd#4369, snapd#4387, snapd#4399, snapd#4416, snapd#4443, snapd#4497, snapd#4504, snapd#4509, snapd#4510, snapd#4538, snapd#4545, snapd#4551, snapd#4562, snapd#4571, snapd#4578, snapd#4588, snapd#4600, snapd#4672, snapd#4682, snapd#4700,16:30
mupsnapd#4721, snapd#4750, snapd#4765, snapd#4767, snapd#4771, snapd#4772, snapd#4778, snapd#4781, snapd#4790, snapd#4805, snapd#4816, snapd#4819, snapd#4829, snapd#4832, snapd#4833,16:30
mupsnapd#4840, snapd#4841, snapd#4842, snapd#4843, snapd#4844, snapd#4845, snapd#4854, snapd#4858, snapd#4863, snapd#4864, snapd#4868, snapd#4869, snapd#4871, snapd#487216:30
zygahmmm16:30
zygathis is actually a bit more interesting now, that I think of it16:30
zygawhen starting a snap application we do a bind mount from /var/lib/snapd/snap to /snap16:31
mupPR # opened: snapd#3963, snapd#4349, snapd#4358, snapd#4369, snapd#4387, snapd#4399, snapd#4416, snapd#4443, snapd#4497, snapd#4504, snapd#4509, snapd#4510, snapd#4538, snapd#4545, snapd#4551, snapd#4562, snapd#4571, snapd#4578, snapd#4588, snapd#4600, snapd#4672, snapd#4682, snapd#4700,16:31
mupsnapd#4721, snapd#4750, snapd#4765, snapd#4767, snapd#4771, snapd#4772, snapd#4778, snapd#4781, snapd#4790, snapd#4805, snapd#4816, snapd#4819, snapd#4829, snapd#4832, snapd#4833,16:31
mupsnapd#4840, snapd#4841, snapd#4842, snapd#4843, snapd#4844, snapd#4845, snapd#4854, snapd#4858, snapd#4863, snapd#4864, snapd#4868, snapd#4869, snapd#4871, snapd#487216:31
zygaand apparmor should really be conifing /snap/whatever and never care about that other path16:31
zygaso whatever is going on here, makes things break elsewhere so that this happens16:31
zygavidal72[m]: please don't make this change yet16:31
Pharaoh_Atemwhoa16:32
Pharaoh_Atemwtf16:32
zygaPharaoh_Atem: mup restarted / github broke16:32
vidal72[m]zyga: ok16:32
cyphermoxzyga: I think the point was that the bind mount could be elsewhere than /snap, such as /var/lib/snapd/snap-mount (for example)16:33
cyphermoxzyga: just so that other distros who really insist on FHS can be happy.16:33
cyphermox(but yeah, it needs a bit of thought)16:34
Pharaoh_Atemright, for example /var/lib/snapd/snap is where stuff is in Fedora, Arch, etc.16:34
zygacyphermox: yes it can but before the application starts and before the application apparmor profile takes over we relocate that to /snap16:34
zygaso it's not supposed to happen this way16:34
Pharaoh_Atemyeah, but that doesn't happen for classically confined stuff16:34
Pharaoh_Atemyou don't do internal relocation16:34
zygayes, but is that snap classically confined?16:35
zygavidal72[m]: is that snap classically confined (snap info will know)16:35
zygaI strongly doubt that becasue classic template doesn't care about INSTALL PATH16:35
zygaor INSTALL_DIR (sorry)16:35
vidal72[m]zyga: I found that it needs at first /var/lib/snapd/snap/qownnotes/906/meta/snap.yaml and then /snap/qownnotes/906/bin/desktop-launch so both /snap snd /var/lib/snapd/snap are needed16:36
vidal72[m]it uses strict sandbox16:36
vidal72[m]I don't have /snap top direcory on my system16:37
zygavidal72[m]: I know but that directory exists later at runitme16:38
zygavidal72[m]: if it ever sees /var/lib/snapd/snap then the bug is elsewhere16:38
zygavidal72[m]: please try this: snap run --shell hello16:39
zygathen inside that shell run ls /snap16:39
zygait's there at runtime even if your host system doesn't have it16:39
cyphermoxzyga: isn't /snap only created at package install time?16:40
zygacyphermox: no, it's never created16:40
zygait's not in the host at any time16:40
cyphermoxI disagree.16:40
zygathat /snap is really /var/lib/snapd/snap/core/current/snap16:41
cyphermoxit was clearly in the snapd debian/dirs file, and /snap exists on my system :)16:41
cyphermoxzyga: are you talking about an ubuntu-core system?16:41
zygano16:41
zygathis is true in any system16:41
zygacyphermox: ah, the confusion is that we are talking about the arch package16:42
zygaand things are different there because a while ago some arch maintainers decided to opt out of /snap in the package16:42
cyphermoxright16:42
cyphermoxPharaoh_Atem: ^^ maybe you and vidal72[m] should talk16:43
zygavidal72[m]: so to recap, I don't know what happens yet16:43
zygavidal72[m]: but that snap should never need that permission so please don't change that part in template_vars.go16:43
zygacyphermox: I suspect it's either something custom to vidal72[m]'s system or to the new 4.16 kernel16:44
cyphermoxzyga: I don't need to know, I'm not at all familiar with Arch16:44
vidal72[m]zyga: with @{INSTALL_DIR}="/snap" snap run hello-world16:47
vidal72[m] fails as always; with @{INSTALL_DIR}="/{,var/lib/snapd/}snap"  ls /snap fails with: ls: cannot open directory '/snap': Permission denied (blocked by apparmor)16:47
vidal72[m]*snap run --shell hello-world16:48
mvohm, is there a way to see when "snap info go" channel edge devel-b61b1d2 was uploaded?16:51
vidal72[m]zyga: but /snap dir exist inside shell16:52
zygavidal72[m]: right, that just shows what I meant16:53
zygaplease open a forum thread to dicuss this so that it's not lost in this IRC chat16:53
* mvo hugs mwhudson for having up-to-date edge snaps for golang, so helpful 16:54
pedronismvo: ~ on the 19th16:54
mvopedronis: ha! great, so super up-to-date16:55
mvopedronis: thank you16:55
vidal72[m]zyga: I do, do you know what's going on with travis faild in https://github.com/snapcore/snapd/pull/487116:56
mupPR #4871: cmd/snap-confine: fix Archlinux compatibility <Created by Erick555> <https://github.com/snapcore/snapd/pull/4871>16:56
zyganot yet, let me look16:56
mvopedronis: 4829 is good to go I think, feel free to merge/squash16:58
mvopedronis: same for 485416:58
pedronismvo: thanks, running some tests for something else and then I'll clicking on things16:58
mvopedronis: ta16:59
mvopedronis: no rush, just wanted to mention it :)16:59
zygavidal72[m]: that's not related to your PR16:59
zygahmm16:59
mupPR snapd#4829 closed: store: Sections and WriteCatalogs need to strictly send device auth only if the device has a custom store <Created by pedronis> <Merged by pedronis> <https://github.com/snapcore/snapd/pull/4829>17:01
mupPR snapd#4854 closed: devicestate: add DeviceManager.Registered returning a channel closed when the device is known to be registered <Created by pedronis> <Merged by pedronis> <https://github.com/snapcore/snapd/pull/4854>17:02
zygavidal72[m]: restarted tests in your PR, I have never seen that failure, maybe some issue in the recent changes to the testing system17:03
mupPR snapd#4873 opened: many: delay classic registration until first store interaction <Created by pedronis> <https://github.com/snapcore/snapd/pull/4873>17:21
=== pstolowski is now known as pstolowski|afk
mupPR snapcraft#2007 closed: catkin plugin: replace python calls in all profile.d scripts <Created by kyrofa> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/2007>17:38
vidal72[m]zyga: it failed again with similiar error :)17:57
niemeyercachio: spread#53 looks pretty reasonable.. added some comments18:27
mupPR spread#53: Check uptime on system to determine if reboot was done <Created by sergiocazzolato> <https://github.com/snapcore/spread/pull/53>18:27
cachioniemeyer, nice, I'll take a look18:30
cachiothanks18:30
vidal72[m]is it normal that gnome app (gnome-mines) hasn't x11 slot?18:42
vidal72[m]zyga: wow I found what was breaking snap apps - I had disabled Xorg abstract socket!!!18:46
zygavidal72[m]: where did you disable that?18:47
vidal72[m]I run xorg from sddm with "-nolisten local" config option18:49
zygaah18:52
zyga:-)18:52
vidal72[m]zyga: i opened topic about @{INSTALL_DIR} issue: https://forum.snapcraft.io/t/apparmor-issues-with-default-install-dir/456819:24
zygathank you vidal72[m], looking19:27
mupPR snapcraft#2009 opened: Base check for classic <bug> <Created by sergiusens> <https://github.com/snapcore/snapcraft/pull/2009>19:38
Lin-Buo-Renhttps://forum.snapcraft.io/t/documentation-issue-regarding-the-setup-lxd-section-part-of-get-started-with-snapcraft/446720:01
ahasenackhi,20:10
ahasenacksomehow I got a snap with no version number20:10
ahasenackand snapd seems to not like it20:11
ahasenackMar 19 17:09:12 nsnx snapd[8171]: 2018/03/19 17:09:12.233531 helpers.go:110: invalid snap version: cannot be empty20:11
ahasenackroot@nsnx:~# snap list --all20:11
ahasenackerror: cannot list local snaps! cannot find installed snap "core" at revision 411020:11
ahasenackare these two things relateD?20:11
ahasenackjust "snap list" works, and shows the unversioned snap20:11
jnamldkwhen i run keepassx snappy, i get this error "cannot create lock directory /run/snapd/lock: Permission denied";  seems AppArmor fails to create the desired paths, any workaroud?20:29
naccniemeyer: snapd in bionic just broke all my snaps :(20:44
nacc$ git-ubuntu --help20:44
naccinternal error, please report: running "git-ubuntu" failed: cannot find installed snap "git-ubuntu" at revision 40220:44
ahasenackjust what I got above20:44
naccit worked immediately before the snapd update to snapd:amd64 (2.31.1+18.04, 2.32+18.04~pre5)20:44
Odd_BlokeI was having (differently presenting) problems and refreshing to the beta core snap fixed them.20:46
Odd_Blokenacc: ahasenack: ^20:46
naccOdd_Bloke: interesting20:47
niemeyernacc, ahasenack: There was a known bug due to the interaction of a prerm script and a baf behavior of systemd on mount units.. This is supposed to be fixed, I believe.. Easiest workaround is to just reboot20:48
niemeyerThe cause is a snap.mount unit that is stopped by the prerm, when it shouldn't be since it's specific to containers.. systemd doesn't start, but stops the unit, and that chains into stopping every snap mount under it20:49
naccniemeyer: will try it20:52
naccniemeyer: confirmed, reboot fixed the issue20:57
niemeyernacc: Phew20:58
niemeyernacc: Sorry for the trouble.. we're on top of that one already.. I'll confirm with Michael tomorrow the versions affected20:59
naccniemeyer: thanks!20:59
niemeyernacc: In theory the fix should be going out, or be out already20:59
naccniemeyer: ok; yeah i didn't see anything in bionic-proposed to test (when i looked earlier)20:59
ahasenackI'll reboot... at eod :)21:01
Chipacaahasenack: if you need anything earlier, systemctl start snap.<stuff>.mount should fix it21:09
Chipacaahasenack: (tab completion will help figure out the <stuff> bit)21:10
ahasenackthx21:13
=== zarcade_droid is now known as ^arcade_droid
vidal72[m]are snaps supposed to create apparmor denials during normal usage?21:28
Chipacavidal72[m]: they're not supposed to, but some might21:29
Chipacavidal72[m]: why?21:29
vidal72[m]Chipaca: cluttering logs will make managing them harder for me. Is sandbox defined by mantainer or is it created automatically?21:33
Chipacavidal72[m]: if it's bad enough to affect the logs it should be fixable21:33
Chipacavidal72[m]: the ones we don't mind too much are things like java apps that try all sorts of crazy things on startup (but gracefully degrade to things that work and then are happy)21:33
Chipacavidal72[m]: typically there'll be more chatter in the log about profile loads than denials, at least in my use21:35
vidal72[m]Chipaca: chatter are no problem, denials are - especially if you set notification about them :) I have qt app which try access /sys/devices/* at startup.21:37
zygavidal72[m]: hey, about your system, normally snaps don't generate many denials but you are working with apparmor enabled and unpatched kernel, I think we are still missing one feature patch in mainline and this may switch all of confinment into big compain but don't deny mode21:38
zygavidal72[m]: can you paste find /sys/kernel/security/apparmor21:39
Chipacavidal72[m]: there might be an appropriate interface to let the app access /sys/devices (but probably not *, if that was literal)21:39
Chipacavidal72[m]: OTOH if it's really doing that, you could detect you're in a snap and not do it :-)21:40
vidal72[m]zyga: my kernel is patched :) https://paste.ubuntu.com/p/JMJ9VGQZjS/21:41
Chipacavidal72[m]: do you also have the seccomp patches for complain mode?21:42
vidal72[m]Chipaca: I have only those https://gitlab.com/apparmor/apparmor/tree/master/kernel-patches/v4.1521:43
vidal72[m]Chipaca: this app tries to acces my gpu under /sys/devices/21:45
* vidal72[m] sent a long message: vidal72[m]_2018-03-19_21:45:32.txt <https://matrix.org/_matrix/media/v1/download/matrix.org/ndxqEpzSbAFVWSaHTjifuQKZ>21:45
Chipacaniemeyer: not sure if my explanation of the <runes> prefix makes sense, or if I should just drop it; please advise21:45
Chipacavidal72[m]: ooh, i think mborzecki might want to have a look at that21:46
Chipacavidal72[m]: (he'll be around in 9h or so)21:47
zygavidal72[m]: yes it looks like it21:47
zygaChipaca: the patches are in the upstream kernel (for seccomp)21:47
zygauserspace just needs upstream release21:48
zygavidal72[m]: I'm puzzled but not to confuse issues please report each issue separately on the forum21:48
* zyga gets back to being AFK21:48
* Chipaca also is mostly afk, reading scifi and wondering whether to brave the cold to get some tea, or just stay put21:48
=== mcphail_ is now known as mcphail
vidal72[m]I guess it's caused by lack of opengl slot for this app. Is it possible to grant slot access manually?22:01
zygavidal72[m]: you'd have to repackage the app22:14
zygavidal72[m]: you can only connect and disconnect to existing slots22:14
vidal72[m]zyga: ok, I try to contact the developer22:15
sdfsdfay22:33
niemeyerChipaca: The current state and the actual implementation both look nice, actually.. I'm just not sure we need those functions, but for a different reason. I've sent a more detailed review. Let me know what you think22:35
Chipacaniemeyer: ok22:36
Chipacaniemeyer: where did you send it?22:36
niemeyerChipaca: I thought it was in the PR itself22:36
niemeyerIf not, please let me know22:36
Chipacaniemeyer: is it the one starting "Looking through this function"?22:36
niemeyerChipaca: Yeah22:37
Chipacaniemeyer: ah, answered that before answering the others22:37
niemeyerChipaca: Not sure I get what you mean there22:39
sdfsdfcan I put a full lamp stack in snaps22:39
niemeyerChipaca: strings has a LastIndexFunc whose func argument is a rune22:39
Chipacaniemeyer: yes22:39
niemeyerChipaca: Do you mean it's broken?22:39
kyrofasdfsdf, yep22:39
Chipacaniemeyer: no, it's not broken22:39
sdfsdfkyrofa: any guides?22:39
kyrofasdfsdf, take a look at the Nextcloud snap, for example22:39
sdfsdfSnaps are a new idea to me22:39
Chipacaniemeyer: what do you do LastIndexFunc of?22:39
kyrofasdfsdf, it's a little old, but yeah: https://kyrofa.com/posts/installing-nextcloud-can-be-a-snap22:40
Chipacaniemeyer: that is: you want the last unicode.IsSpace before the end of the terminal22:40
niemeyerChipaca: I'm probably missing the trick of the logic22:40
niemeyerChipaca: The logic there is doing:22:40
niemeyeridx = runesLastIndexSpace(text[:width+1])22:41
Chipacayes22:41
niemeyerHow's that different from22:41
niemeyerstrings.LastIndexFunc(text[:width+1], unicode.IsSpace)22:41
niemeyeror similar22:41
sdfsdfkyrofa: Can snaps access the full fat filesystem22:42
kyrofasdfsdf, by default, no they're pretty locked down. You can get more access by using various interfaces, though22:42
Chipacaniemeyer: say text is " • árbol", and width is 522:43
sdfsdfI'm thinking about doing development with Ubuntu Core but I guess I'll use 16.04 LTS22:43
sdfsdfThen make a snap22:43
Chipacaniemeyer: or 10 even :-) i'm generous22:43
kyrofasdfsdf, yeah development on classic Ubuntu is a little easier, but you can use the `classic` snap in Ubuntu Core to get access to a more "classic" environment, e.g. apt etc., which helps with development22:44
niemeyerChipaca: Ok22:44
niemeyer?22:44
Chipacaniemeyer: text[:width+1], if text is a string, is " • árb"22:44
Chipacaniemeyer: whereas there are less than width runes in text22:45
Chipacaso you could just print it22:45
Chipacaniemeyer: if width is 5, text[:width+1] with text as a string gives you " •�"22:46
niemeyerChipaca: This is assuming a brok?en prior implementation of width22:46
niemeyerChipaca: I think?22:46
Chipacaniemeyer: the width is the number of columns of the terminal22:46
Chipacaniemeyer: the terminal doesn't know how many bytes you are going to need in your variable-width encoding to encode the characters you want to show :-)22:47
niemeyerChipaca: It sounds like you are referring to the behavior which is explicitly listed in the current implementation as being a bug still.. let me play that in a different way:22:47
niemeyerChipaca: If width was 80, and the current text was defined to exceed 80, we'd want to cut it to less than 80 at the space..22:48
Chipacaniemeyer: yes22:48
niemeyerChipaca: That's what the logic there does.. it was determined to be in excess when we reach that line already22:48
Chipacaniemeyer: yes22:48
niemeyerChipaca: at len(text) > width {22:48
niemeyerChipaca: This is the same as runeCount(text) > width22:49
Chipacabut that comparison is only possible if text is a []rune22:49
Chipacayes22:49
niemeyerChipaca: Which is what is being done for the padding already..22:49
Chipacayes22:49
Chipacaniemeyer: the comment about it being broken might be confusing you, so let me explain that one first22:50
Chipacaniemeyer: what's broken is that the current implementation counts each rune as having widht 122:50
niemeyerChipaca: Yeah, so that's where I was coming from.. it sounds like the logic might be easily implemented with logic similar to the one already in use there, without any type conversions or even allocations, since the logic is essentially slicing an existing string22:50
Chipacaniemeyer: but that's not true: some runes have widht zero (composing characters), some have width 2 (a lot of east asian things), some have ambiguous width that nobody knows22:50
niemeyer:)22:51
Chipacaniemeyer: no seriously :-)22:51
Chipacaniemeyer: but that's the map from a rune to the width on the terminal22:51
niemeyerChipaca: I haven't looked, but from your comment the slightly depressing part is having no means to simply ask for the width22:52
niemeyerChipaca: But that's an aside22:52
Chipacaniemeyer: and this is the map from the length of the utf8-encoded runes22:52
Chipacaniemeyer: there's a first approximation that's fairly good, if you ignore bugs22:52
Chipaca(but then there are bugs :-) )22:52
niemeyerYeah, +122:52
Chipacaniemeyer: the first approximation is to have two big unicode tables (like the ones in ctrl16.go and ctrl17.go in puritan)22:53
Chipaca(oh also these tables depend on the unicode version...)22:53
Chipaca(... which depends on the go version... )22:53
Chipaca(everything is terrible)22:53
Chipacaanyway, that's getting ahead of this22:53
Chipacathis one is simply accounting for the fact that, for example, len("•") is 322:54
Chipaca(also that's the most-used non-ascii character in current stable amd64 descriptions)22:55
niemeyerChipaca: Right, it sounded like the problem was simple enough to be handled with plain strings, similar to what we already have there for padding, but this isn't really a blocker23:11
mupPR snapcraft#2009 closed: Base check for classic <bug> <Created by sergiusens> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/2009>23:49

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!