[00:27] PR snapcraft#2081 closed: elf: patch everything instead of a subset of elf files [01:04] PR snapcraft#2083 opened: python plugin: properly handle distutils on bionic [01:37] PR snapcraft#1990 closed: tests: build and install snapcraft on osx [01:37] PR snapcraft#2084 opened: Osx travis [01:44] jdstrand, zyga: fyi that corebird issue I mentioned, the profile seems to be vanishing from '/var/lib/snapd/apparmor/profiles/' on every other boot [02:10] [11:39:43 AM] Son_Goku: hey Neal! quick question, do you know if %{gofindfilter} macro is a new addition? I'm having failures trying to use it [02:10] pstolowski, it probably is [02:11] I haven't done any go packaging since new guidelines went out [02:11] but as zyga said, mock is your friend [02:11] you can also enter the mock environment by doing "mock --shell" [02:28] PR snapcraft#2082 closed: Ignore me, throwing to CI [03:16] Hey guys, I do snaps prevent access to source codes? [03:19] PR snapcraft#2085 opened: elf: clear the current runpath before setting the rpath [03:19] I have a project I'd like to deploy and test out but I'm afraid the the source code would be copied. Does making it a snap helps protect the source code? === chihchun_afk is now known as chihchun === pbek_ is now known as pbek [05:07] morning [05:53] good morning [05:53] eraserpencil: hey, just don't put your source code into the snap then [05:53] zyga: hey [05:53] eraserpencil: snaps don't have any copy protection [05:54] * zyga is worried by this: [05:54] jdstrand, zyga: fyi that corebird issue I mentioned, the profile seems to be vanishing from '/var/lib/snapd/apparmor/profiles/' on every other boot === mborzeck1 is now known as mborzecki [06:12] hmm [06:12] why is bionic spread broken? [06:13] zyga: I think there was a kernel update, if it is still broken after a retry we need to investigate [06:14] zyga: and goooood morning [06:14] good morning! [06:14] I merged master a few times, still broken [06:14] mvo: maybe we need to use a more recent snapshot [06:14] zyga: aha, yes, that sounds very reasonable [06:16] PR snapd#5065 opened: spread.yaml: move bionic image forward [06:16] zyga: lets see if -^ helps [06:17] oh cool [06:17] I just made the same :D [06:17] autsch [06:17] ok [06:17] haha, no worries :) [06:27] hmm, have you guys seen https://zulipchat.com/ [06:28] it's fully FOSS [06:35] mvo: Sergio reported that some apparmor profiles disappear randomly on boto [06:35] *boot [06:35] but very frequently [06:39] -buildmode=pie does not work in go anymore [06:39] what? was it removed? [06:40] just doesn't work, left some comments here https://github.com/snapcore/snapd/pull/5064#issuecomment-382098028 [06:40] PR #5064: tests: smaller fixes for Arch tests [06:40] uh [06:41] mvo ^ [06:42] zyga: hm, hm, disappear. just apparmor or also seccomp? [06:43] mvo: I don't know yet, trying to reproduce it [06:43] zyga: ta [06:44] wonder what fedora does [06:49] hm maybe it just doesn't work, non-cgo and pie [07:02] good morning [07:05] * zyga -> dog [07:06] mvo: travis hasn't ran your PR yet [07:06] the one from early morning [07:07] ok [07:22] Actually taking the dog out now [07:36] o/ [07:46] elopio: around? working on vault bits and pieces and wondered if you had time to bring me up to speed on how you are managing the vault snap [07:49] jamespage: hey, just FYI, elopio left Canonical [07:49] zyga: yeah I know ;) === chihchun is now known as chihchun_afk [07:58] zyga: call my request a retrospective handover... === chihchun_afk is now known as chihchun [08:08] mvo: still nothing, is travis broken today? [08:08] zyga: not sure, let me check [08:08] zyga: anything on the vanishing profiles? [08:08] mvo: I tried to reproduce it but no luck [08:08] mvo: I used xenial [08:09] mvo: maybe it is somehow related to the specific kernel sergio is using [08:09] mvo: I will try to sync with him today [08:09] (sergio is not using the stock kernel, he's on a surface enablement kernel) [08:09] zyga: aha, and he is using xenial as well? [08:10] zyga: travis status page says its up [08:10] zyga: but I also see nothing building [08:10] yeah :/ [08:14] mvo: it just started :) [08:20] uhh go build, -extldflags & shell quoting is a mess [08:21] mborzecki: yeah [08:21] I failed to make snap-exec static on suse [08:21] because of rpm macros and the need to quote a space [08:21] it just failed all the way :/ [08:22] and the ldflags to pass static [08:22] anyways, -buildmode=pie & CGO_ENABLED does not work, fedora uses proper go build -buildmode=pie -ldflags="-extldflags '-static'" and it work, did the same for arch [08:22] zyga: i did go build -buildmode=pie -ldflags=-extldflags=-static ;) appears to work [08:28] at some point i gave up and wrote a wrapper and pointed -ldflags=-extld= at it [08:29] mborzecki: oh, smart [08:29] I'll try that [08:29] mwhudson: yeah, it's super confusing [08:30] zyga: afaik it will work if you define a macro in the spec, take a look at fedora spec [08:30] zyga: i mean, you won't have to resort to such ugly tricks [08:35] moin moin [08:35] very spotty network for me today [08:40] anything on fire today? [08:41] Chipaca: zyga had one alarming message but otherwise it seems to be ok [08:41] mvo: was the alarming message "wake up"? [08:41] Chipaca: sergio reported that some apparmor profiles go away on reboot randomly [08:41] but I could not reproduce this [08:41] and I don't know more [08:43] anyone else using the vscode snap on bionic and seen it stop working since rev 32? [08:43] joc: I can try [08:43] (`snap revert` FTW) [08:43] zyga: wait is it sergio, or is it snapcraft [08:44] Chipaca: aren't teplate specializations commutative ;-) [08:44] zyga: that would be really tidy of them [08:44] Chipaca: both of them ;-) [08:44] * zyga is in a silly mood [08:45] pulling vscode in a park at 2.5MB/s [08:45] that's not silly, that's bragging [08:45] hey [08:45] just two blocks from my home [08:45] broadband :) [08:46] vscode snap (r32) broken on ubuntu 18.04 https://www.irccloud.com/pastebin/EiQuCMnT/ [08:46] Are you on your home wifi in the park? [08:46] itsfemme[m]: no, on LTE [08:46] joc: confirmed [08:46] popey: ^ FYI, vscode is missing some things and doesn't work on bionic [08:46] zyga: ack, thanks [08:46] joc: try sublime-text [08:46] it works :) [08:47] so... I've got two +1's on #5027 and it's green, and master's open, so I'm going to go ahead and merge it [08:47] * Chipaca is full of trepidation [08:47] PR #5027: you won't believe how client gets initial support for snapshots [08:47] heh, i've reverted and all is good [08:47] Chipaca: go go go [08:47] Chipaca: LOL [08:47] with that commit message [08:47] mvo: remember to edit the changelog on that :D [08:47] joc: FWIW reverting blacklists the revision, but if they push a new one you'll get it (which is what you want imho) [08:48] Chipaca: yep, happy with that [08:49] zyga: what release? [08:49] popey: revision 32 of vscode [08:49] popey: on bionic [08:49] popey: joc said previous revision worked ok [08:49] works here [08:49] popey: on bionic? [08:50] yes [08:50] popey: r32? [08:50] oh, 32? [08:50] yes :) [08:50] you should update :) [08:50] it used to work, now broke [08:50] what? :D [08:50] test 33 [08:50] does that work? [08:50] I literally just installed it now [08:50] sorry, i think it didnt get promoted, 33 works I think [08:50] checking [08:50] I'm looking at their snapcraft.yaml and it seems they are moving to gtk3 for debs and rpms but did not add it to the snap [08:50] Chipaca: I found a bug :D [08:51] zyga: impossible [08:51] zyga: where? [08:51] PR snapd#5027 closed: you won't believe how client gets initial support for snapshots [08:52] you won't believe what I just found Chipaca https://www.irccloud.com/pastebin/86utZoMt/ [08:52] zyga: whaa? [08:52] Chipaca: ouch, it's a symlink to a brkoen try mode snap [08:52] I mean [08:53] I did snap try on something I kept in ~ [08:53] then I moved it to Documents [08:53] and snap refresh broke [08:53] zyga: ok yes that's a bug, but not a new one -- file it? [08:53] sure [08:56] Chipaca: https://bugs.launchpad.net/snapd/+bug/1764977 [08:56] Bug #1764977: Removing backing directory of try mode snap breaks refresh of other snaps [08:56] Chipaca: it's worse, I cannot snap list [08:56] snap remove [08:56] that's not even broken now [08:56] is that a follow-up of the change pedronis landed [08:56] mvo: ^ this may warrant a .6 :// [08:56] essentially I cannot refresh core now [08:57] zyga: it breaks refreshing everything? if one snap is in broken state? [08:57] yes [08:57] it shouldn't [08:57] it does [08:57] try it [08:57] (literally) [08:58] "No thank you" :D [08:58] we have a bigger bug then [08:58] mvo: snap list, refresh et all are all failing [08:58] > that escalated quickly [08:58] popey: so I believe you [08:58] joc: can you please refresh vscode to edge [08:58] and see if that fixes it [08:58] we didn't change snap list [08:58] afaiu [08:58] i can... [08:58] and communicate with popey wrt promiton of r33 to stable [08:59] pedronis: well :) [08:59] zyga: I doubt this is a new thing [08:59] kwi 18 10:59:22 t470 snapd[2069]: 2018/04/18 10:59:22.512843 snapmgr.go:228: cannot read snap info of snap "classic-snap-analyzer" at revision x4: stat /var/lib/snapd/snaps/classic-snap-analyzer_x4.snap: no such file or directory [08:59] let's put it this way, we tried very carefully not to change snap list [08:59] so I'm a bit confused [08:59] joc: zyga 33 is now in stable [08:59] pedronis: can you just try it, "snap try" one of the test snaps, move it aside and see [09:00] popey: same error: [09:00] I wonder if we have an integration test for snaps in broken state [09:00] joc: can you paste the error somewherre? [09:00] ```/snap/vscode/33/usr/share/code/bin/../code: error while loading shared libraries: libgconf-2.so.4: cannot open shared object file: No such file or directory``` [09:00] mvo: I bet we don't [09:00] popey: you probably have that library installed on your host [09:00] gah [09:00] popey: I wrote an analyzer for classic snaps [09:00] that shows missing libs [09:00] PR snapd#5066 opened: overlord/snapshotstate/backend: introducing the snapshot backend [09:00] _ironically_ it is the snap I moved to another directory [09:01] that broke everything for me now [09:01] joc: we're on it. thanks [09:01] zyga: if you move it back, does it unbreak [09:01] trying [09:01] yes [09:01] That lib is in the snapcraft.yaml though, I just checked [09:01] it unbreaks everything [09:01] itsfemme[m]: it's not loaded from there though [09:02] popey: http://paste.ubuntu.com/p/4sb3wxqNHD/ [09:02] try this and see where it loads the libs from [09:02] zyga: please add that to the bug report just in case it happens to people before we can fix it [09:02] i'd do it myself but my network is already struggling [09:03] Chipaca: I just updated the bug report [09:03] I also bumped it to critical [09:03] it's interesting because people who have broken snaps will stay on 2.32.5 [09:04] until we fix it with classic package [09:04] which is a bit unfortunatel [09:04] *unfortunate [09:04] I'll drop what I was doing and add a spread test onw [09:04] zyga: broken in general, or broken in this particular way [09:05] snaps that are broken [09:05] any old try mode snap that is removed qualifies [09:05] but unfortunately any unmounted snap :/ [09:09] mmh [09:09] zyga: I wonder if you could check if going to a tag like 2.32 and running snapd from there shows that its also broken or not [09:10] mvo: sure [09:10] I have the impression is not new to .5 [09:10] I can just snap refresh to older rev [09:10] it's easier [09:10] mvo: stable is at 2.32.3 still [09:10] trying... [09:11] * zyga hums while LTE does its magic [09:11] 100GB of traffic for my laptop as a free add-on to my low cost phone plan [09:11] I really missed that in spain [09:11] spain has LTE and all but man, not at this quantity [09:11] zyga: pushed the fix to https://github.com/snapcore/snapd/pull/5064 [09:11] PR #5064: tests: smaller fixes for Arch tests [09:12] what reminds me, we should fix the install path of snapd-generator [09:12] pedronis, mvo: confirmed, the bug is also present on 2.32.3 [09:13] ok, that makes more sense [09:13] can someone confirm https://bugs.launchpad.net/snapd/+bug/1764977 [09:13] Bug #1764977: Removing backing directory of try mode snap breaks refresh, listing (at least 2.32.3, till 2.32.5) [09:13] zyga: :( so we need a) integration test b) fix [09:13] mvo: I'm doing (a) now [09:13] zyga: \o/ [09:13] I can do (b) after [09:13] cool [09:13] mvo: is that a .6 then? [09:14] we are doing stat of snaps in some place, but not ignoring errors as we should [09:14] zyga: probably, depends a bit on the diff [09:14] zyga: but I think it does make sense [09:15] yea, confirmed it's in 2.32.3 as well [09:15] it's nor related to the new api stuff or the doMountSnap changes [09:15] it's something older [09:16] ah, I think I know [09:17] maybe [09:17] we have "try-snap-goes-away" test [09:17] I wonder how it didn't catch this! [09:17] mvo: zyga: my suspecte is the InstalledDate code [09:17] oh [09:18] neat, that's probably it [09:18] it's ignoring the case where the snap is set to Broken [09:18] because it's doing an independent Lstat [09:18] * Chipaca whistles innocently [09:19] mmg [09:19] no [09:19] PR snapd#5063 closed: tests: run interfaces-broadcom-asic-control early [09:19] it doesn'r eturn error [09:22] PR snapd#5067 opened: tests: add a regression test for https://bugs.launchpad.net/snapd/+bu… [09:22] I added this test, let's see what happens with it [09:23] zyga: interessting, it looks very similar to the existing test [09:23] * mvo is confused why the existing one does not work, it does not look broken on first glance at least [09:23] mvo: yes, I don't know why that test didn't catch it [09:24] mmh [09:25] it's the MountFile [09:25] not the MountDir [09:25] it's the code to find the size ? [09:26] mmh [09:27] shouldn't [09:27] * zyga tries to find what it might be [09:28] ah [09:28] found it? [09:28] zyga: if you notice the problem is not that the mount goes [09:28] away [09:28] the mount is there [09:28] if you move the dir [09:28] indeed! [09:28] it's still mounted [09:28] but the symlink because dangling [09:28] yes [09:28] so we don't fail where we think we should [09:28] that's it [09:29] so it's the size computation [09:29] it's not really broken [09:29] except it is a bit [09:30] it was added in 74be4020e [09:31] it's a very old bug at least [09:31] it's not a regression [09:32] what is calling .Size()? [09:32] ? [09:33] I mean, what's where's the bug, I see that Size() returns an error if we cannot stat the file [09:33] but where is that used in practice [09:34] grepping for '.Size()' shows nothing weird [09:34] my understanding (unproven) is that we fail here: https://github.com/snapcore/snapd/blob/master/snap/info.go#L801 [09:34] because of the dangling symlink [09:34] is it ReadInfoFromSnapFile [09:34] no [09:35] it's ReadInfo [09:35] ah [09:35] we don't retunr NotFoundError because the mount is there [09:35] yeah, I see [09:35] do you want to fix it? [09:35] or shall I [09:35] I actually not sure how to fix it [09:36] maybe Chipaca has an opionin, is not super clear that that value make even sense when .snap is a symlink to a dir [09:37] something like htis [09:37] http://paste.ubuntu.com/p/C5pHxBYrpM/ [09:37] yeah, the size if bogus in that case [09:37] I just don't want it to break [09:37] it should really walk the snap to calculate [09:37] but that's a separate thing to fix [09:38] fwiw, I am in a debug shell in try-snap-goes-away and snap list is fine and shows it in "broken" state [09:38] (I swapped a condition there in the paste but fixed onw) [09:38] mvo: magic?! [09:38] why [09:38] mvo: it means the mount is gone away [09:39] in the bug case it doesn't [09:39] well, not the mount [09:39] the snap.yaml [09:39] mvo: I think there's a difference between rm the content of the try snap, vs moving it away [09:39] yeah, that would explain it [09:40] there must be a difference :) [09:40] I mean, I understand there's a difference [09:40] mvo: if the try is moved [09:40] the mount is still there [09:40] with a snap.yaml [09:40] so we fail later in ReadInfo [09:40] if you remove the snap.yaml [09:40] then you get the broken state [09:41] we really need two different tests [09:41] I pushed a small patch to my PR [09:41] https://github.com/snapcore/snapd/pull/5067/files check if it makes sense to you please Chipaca [09:41] PR #5067: tests: add a regression test for https://bugs.launchpad.net/snapd/+bu… [09:42] mvo: did you restart https://travis-ci.org/snapcore/snapd/builds/367998252?utm_source=github_status&utm_medium=notification ? [09:42] did it fail? [09:42] anyway I'm not sure it means we need a .6 [09:42] it's been there since a while [09:42] zyga: I didn't touch this one [09:42] pedronis: I agree [09:42] we can do it later [09:42] it's not super typical case [09:42] unless mvo disagrees [09:42] but I think it's ok [09:42] though [09:42] I'd like to see a deb with this [09:43] pedronis: aha, this makes sense, yes [09:43] mvo: maybe it's still worth doing a .6 [09:43] if it is "free" still [09:43] pedronis, zyga I think we should pull the fix in [09:43] as in, people get this deb [09:43] but not necessarily release it [09:43] not SRU wait [09:43] just now and in a rush [09:43] aha [09:43] ok, I'll defer to your call then [09:43] man, it's getting too warm over here [09:44] * zyga moves to the shade [09:44] zyga: I doubt it's that path in side info that is causing this [09:44] zyga: as it's able to read the snap.yaml [09:44] Chipaca: we found the problem [09:44] it's the Size code in ReadInfo [09:45] pedronis: that's what i'm looking at i think [09:45] in https://github.com/snapcore/snapd/pull/5067/files [09:45] PR #5067: tests: add a regression test for https://bugs.launchpad.net/snapd/+bu… [09:45] been there since 2016 [09:45] but the snap.yaml was read ok [09:45] for it to get to the size bit [09:45] yes [09:45] if you move the try dir [09:45] the mount is still fine (until reboot) [09:45] so the snap.yaml is there [09:45] but the .snap symlink is dangling [09:46] augh [09:46] it's different from rm around [09:47] fun [09:48] anyway, it's not recent code [09:48] can we have a comment [09:48] where? who? [09:49] I think I'm lagged to heck [09:52] zyga: with that change, do snaps in this state actually appear as 'broken' in snap list? [09:52] No [09:53] zyga: should they? :-) [09:53] zyga: either that, or the comment on the task.yaml needs fixing [09:53] zyga: actually the whole test won't work? [09:54] I didnt try yet [09:56] I think they should [09:56] Yes [09:56] But they won’t just yet [09:58] zyga: I suspect returning NotFoundError instead of ignoring the not found will dwww [09:58] but i haven't tested :-) [09:58] Yeah, I think so too [10:03] I force pushed this behavior now [10:08] let's see what spread says === chihchun is now known as chihchun_afk [10:09] PR snapd#5065 closed: spread.yaml: move bionic image forward [10:11] mvo: let's hope master is going to be good now [10:14] Chipaca: updated: https://github.com/snapcore/snapd/pull/5067 [10:14] PR #5067: snap,tests : don't fail if we cannot stat MountFile [10:15] * Chipaca looks [10:15] * Chipaca still lagged [10:16] * Ping reply from Chipaca: 41.707 second(s) [10:17] woah [10:17] your packets are going to the moon and back :) [10:17] 3G from the reception of a school in the middle of a field somewhere [10:18] PR snapd#5068 opened: spread: bump delta reference to 2.32.5 [10:19] how are you testing that? [10:21] zyga: testing what? [10:21] the ping [10:22] zyga: thanks for the merge [10:29] zyga: /ping Chipaca [10:30] can you ping me? [10:30] my client doesn't report the time [10:31] * Ping reply from zyga: 0.490 second(s) [10:31] thanks [10:33] zyga: it's very variable today though :-) [10:33] the bar that tells me about ping goes all over the place [10:34] perhaps you are close to several towers and are constantly doing handover between them [10:35] perhaps the uk 3g network is made entirely of spit and wattle [10:35] and not that much wattle either [10:36] haha [10:36] perhaps :) [10:36] come visit me some day [10:39] 3G? isn't that like umts/hsdpa thing? [10:40] https://opensignal.com/networks?z=15&minLat=51.4545&maxLat=51.4705&minLng=-0.2734&maxLng=-0.2287&s=all&t=2-3 <- i'm at the red splotch in the middle of that [10:40] Chipaca, if its so much spit your data should slide through the network fast :) [10:42] zyga: #1764998 [10:42] Bug #1764998: profiles making a run for it [10:48] Sure, just after lunch [11:23] mborzecki: thanks for the review! i'll work on it in a bit [11:23] Chipaca: np [11:29] would someone be able to check who has permissions on the vault charm in the snapstore? [11:30] Son_Goku: hey! I've re-created my spec to follow the new go guidelines, it builds locally but fails on copr on %gometa tag; I've BuildRequires: go-srpm-macros in the spec, do you know what else might be missing? [11:42] I’m heading home [11:48] Son_Goku: hey! I've re-created my spec to follow the new go guidelines, it builds locally but fails on copr on %gometa tag; I've BuildRequires: go-srpm-macros in the spec, do you know what else might be missing? [11:48] %gocratfmeta [11:48] err [11:48] %gocraftmeta [11:48] https://github.com/gofed/go-macros/commit/b8474abd963b4992e8aadd6efbde09833980e985#diff-455385f5d8493917cb83541909b7cfa9 [11:50] Son_Goku: ahh, thanks, let me check [11:54] Son_Goku: Unknown tag: %gocraftmeta (copr, rawhide) [11:54] blech [11:54] someone has goofed [11:56] pstolowski, are you in #fedora-devel? [11:57] Son_Goku: i'm now [11:57] pstolowski, you might want to ask for help there [11:57] because I'm a bit lost myself :( [11:57] * Son_Goku notes that he's been very wary to change how snapd is packaged because go is already hard [11:58] https://www.irccloud.com/pastebin/vEuTRpRH/ [11:59] Son_Goku: it there any BuildRequire that I could be missing? I've this ^ atm [12:02] let me check [12:02] BjornT_: can I bother you with a review? https://github.com/snapcore/snapcraft/pull/2083 [12:02] PR snapcraft#2083: python plugin: properly handle distutils on bionic [12:05] pstolowski, so here's the macros that are available: [12:05] * Rawhide: https://src.fedoraproject.org/rpms/go-srpm-macros/blob/master/f/macros.go-srpm [12:05] * F28: https://src.fedoraproject.org/rpms/go-srpm-macros/blob/f28/f/macros.go-srpm [12:06] * F27: https://src.fedoraproject.org/rpms/go-srpm-macros/blob/f27/f/macros.go-srpm [12:06] * F26: https://src.fedoraproject.org/rpms/go-srpm-macros/blob/f26/f/macros.go-srpm [12:06] pstolowski, just revert back to the old style and mention in the ticket that you need to support F26 for the moment [12:07] off to pick up the kids [12:07] the new style seems to be in a weird state right now and it's not supported at all in F26 [12:14] Son_Goku: doh, i see.. i hope i still have the old file around ;) [12:14] if you don't, you can get it from COPR dist git [12:14] sergiusens: sure [12:14] pstolowski: https://copr-be.cloud.fedoraproject.org/results/pstolowski/go-udev/fedora-27-x86_64/00741447-golang-github-pilebones-go-udev/golang-github-pilebones-go-udev.spec [12:15] old version is still there ;) [12:15] just download that and use it again [12:15] and I’m back [12:18] Son_Goku: right :) [12:18] Son_Goku: thanks for help! [12:22] no problem [12:22] hey, https://github.com/snapcore/snapd/pull/5067 is green :) [12:22] PR #5067: snap,tests : don't fail if we cannot stat MountFile [12:22] mvo, pedronis: ^ can you please review it [12:22] can we land trivial https://github.com/snapcore/snapd/pull/5068 [12:22] PR #5068: spread: bump delta reference to 2.32.5 [12:23] jamesh: hey [12:23] jamesh: I saw some updates on the user mounts branch [12:24] I asked a question there [12:24] also FYI I'm working on somewhat the same idea from another angle (persistence and updates) [12:24] mvo, hey, we got the +1 to go to stable [12:24] I will keep de-conflicting your branch as I move along [12:24] I hope your branch can land soon or at least shrink to 1/10th [12:31] cachio: great, lets talk in the standup [12:36] zyga: that was something I missed when rebasing the branch to clear out what had already been merged. I dropped the patch with those interfaces/mount/backend.go changes [12:37] thanks, I'll check the rest soon [12:37] zyga: I'm hopeful CI will give me a tick this time around [12:37] my plan is to land the locking (done), mount namespace setup (in progress) and persistence [12:37] and then take the privs code from your PR [12:37] as well as the whole run-snap-update-ns as user [12:37] I still have to make some update changes but it's not major I hope [12:38] zyga: from what I can tell, read only bind mounts are broken in snapd master [12:38] oh, I will look into that! [12:38] zyga: this is due to mount() ignoring all flags but MS_BIND and MS_REC for bind mounts [12:39] aww, that makes sense [12:39] man, that's not great then [12:39] so MS_BIND|MS_RDONLY is equivalent to MS_BIND [12:40] Secure.BindMount gets it right, but required some AppArmor changes to match [12:41] hmm hmm [12:41] what's different about the secure bind mount? [12:41] that's what the most recent commit in the PR is doing [12:42] it follows up with a MS_REMOUNT|MS_BIND|MS_RDONLY mount() call [12:42] what about MS_REC? [12:42] what if the initial MS_BIND|MS_REC created multiple bind mounts [12:43] PR snapd#5068 closed: spread: bump delta reference to 2.32.5 [12:43] zyga: at the moment, that errors out. Alex had some code in flatpak/bubblewrap to parse mountinfo to find out what needed remounting. So that would be a possibility [12:44] jamesh: I see, I think I need to look into that [12:44] :( 3rd time now I have side loaded a snap and it's completely nuked xorg on 18.04 [12:44] I read that bubblewrap code [12:44] lost my entire session immediately after a snap was installed. [12:44] zyga: do we have any read only recursive bind mounts? [12:44] popeycore: xwayland or x [12:44] i dont use wayland [12:44] jamesh: no but AFAIR we made all content recursive, no? [12:45] and we can use read only content connections [12:45] still, something to look into [12:45] popeycore: yeah, that happened to me, though I was not on X at the tiem [12:45] *time [12:45] so maybe it's more widespread [12:45] there is no obvious examples in the spread tests, and I don't think you can do it with layouts [12:45] popeycore: did you see my pastebin for checking if classically confined snaps are made correctly? [12:45] i wlil try and reproduce it [12:45] yes, but it's not my snap, it's Wimpress [12:46] and sergio has fixes too [12:46] jamesh: perhaps it's untested, I will look into that [12:46] when AppArmor is used, read only content interface shares are protected [12:46] ah, that's good [12:46] at least we're not breaking something that was working (widely) before [12:46] Just returned from lunch. Will rebuild vscode now. [12:47] PR snapd#5054 closed: snap,wrappers: address review feedback from #5043 (2.32) [12:47] Wimpress: same shout about my pastebin that checks if snap is made correctly [12:48] I would make it a snap but I need jdstrand to ack an extension of system-observe interface [12:49] PR snapd#5064 closed: tests: smaller fixes for Arch tests [12:53] zyga: spread tests failed: I introduced a bug in a unit test, and the user-mounts spread test seems to be failing on debian. I've submitted a fix for the unit test, but not sure why the user-mounts one fails in one place only [12:54] I'll look after the standup [12:54] jamesh: again, I'll try to get your branch merged [12:54] if you want I can take it over entirely [12:55] Issue snapcraft#2071 closed: patchelf to handle RUNPATH [12:55] PR snapcraft#2085 closed: elf: clear the current runpath before setting the rpath [12:55] zyga: it's late here, so I won't check back on it til tomorrow morning. I think it is fairly clean as is, but there is definitely room for further work [12:55] maybe that could go post merge [12:55] thank you for all the work on this! [12:55] (1) recursive read only bind mounts [12:56] (2) get Secure.BindMount to handle file bind mounts [12:56] mvo, zyga, mborzecki could someone take a look to https://github.com/snapcore/spread-images/pull/10 [12:56] PR spread-images#10: New task to add debian-sid as a gce image [12:56] (2) should be pretty easy with the new secure bind mount strategy [12:56] yes, the new secure bind mount is awesome :) [12:56] mvo, zyga mborzecki I have another one with the documentation to push today [12:57] cachio: sorry, I'm not sure I follow [12:57] cachio: this is for building gce images right? [12:58] ah [12:58] I see what you mean now [12:58] mborzecki, yes [12:58] cachio: like the whole bunch of scripts/tools [12:58] create images and update images [12:58] ok, got it [12:58] mborzecki, yes [12:58] I used those to create update all the images we are already using for gce [12:58] cachio: thanks, looking [12:59] cachio: that's quite a diff [12:59] zyga, yes [12:59] sorry [12:59] it started as a small branch to add debian [13:00] but then I ended up adding all the scripts there [13:00] cachio: is is spellcheck clean? [13:01] PR snapcraft#2083 closed: python plugin: properly handle distutils on bionic [13:01] zyga, I'll make a spellcheck run again [13:08] Uhm [13:09] I know "snap remove foo", will remove my data from snap/foo/current, but *why* does "snap install foo" do that? [13:09] (I mean I don't agree with either, but install, removing my data, that's a bit mad) [13:09] popey: can you expand on that please [13:09] popey: install should not do anything [13:09] i had a snap directory containing data for an application [13:09] i tried running the snap, and noticed thaat i no longer have the snap installed [13:10] so i installed it, tried running it and the config is gone [13:10] i literally have a code editor open and it says the file disappeared [13:11] hmmmm [13:11] current is a symlink [13:11] where was the data exactly? [13:12] sure, but I had a text editor open with snap/foo/current/foo.json open [13:12] i realise current is a symlink, but I guess a symlink to an old version [13:12] but I can't tell now because I have installed the snap so the link has been changed [13:13] i wonder if current was a broken symlink or somehow was a directory? [13:13] popey: I don't know yet [13:14] my previous full system crash appears to have crashed in the nvidia driver :( [13:18] interesting [13:18] maybe mutex thing again ^ mborzecki [13:23] that TLS mutex library [13:23] hmm [13:24] popey: log? [13:24] or which snap [13:24] i was installing a local snap [13:24] it is always a local snap [13:25] popey: local as in 'snap try'? [13:25] as in i built it and installed with --dangerous [13:25] lemme try installing again to see if i can reproduce [13:26] popey: hm ok, can i say, pull ohmygiraffe, snap pack and snap install --dangerous then? [13:26] you can try :) [13:27] i just tried to reproduce it, and it didn't crash [13:27] https://errors.ubuntu.com/oops/a598af70-4306-11e8-9dfd-fa163e839e11 [13:27] ^ thats my crash [13:30] https://errors.ubuntu.com/oops/eb22f554-3c0e-11e8-81fe-fa163e171d9b and https://errors.ubuntu.com/oops/8b8b9504-341d-11e8-8901-fa163ed44aae are also mine [13:35] popey: wow, that's the whole xorg crashing? [13:35] yes, my entire desktop goes bang [13:38] not sure that's something that can be attributed to snaps [13:38] popey: i'll try to reproduce it with ohmygiraffe once we finish the standup [13:38] kk [14:02] https://bugs.launchpad.net/snapd/+bug/1756317 looks nasty [14:02] Bug #1756317: Can set garbage for core experimental.layouts [14:05] mborzecki: mvo: we mentioned it yesterday, https://forum.snapcraft.io/t/system-options/87 should document set system [14:06] mvo: we didn't discuss goint to stable, I suppose we nedeed cachio for that [14:09] pedronis: let me update that [14:09] mborzecki: we need to document both (and say 2.32.5+ for the 2nd one) for a while I suspect [14:09] pedronis: yeah, we need him for this, also traditionally we prefer Mon,Tue for this [14:10] zyga: related to the bug from greyback - pr 4600 [14:10] PR #4600: configstate: validate known core.* options [14:10] ack [14:10] 43 patches :) === pstolowski is now known as pstolowski|lunch [14:14] mvo: it needs a review from niemeyer [14:14] ok [14:16] PR snapcraft#2086 opened: tests: update metadata store integration test, no previous push required [14:16] given that .5 is in bionic, do we promote .5 to stable? [14:17] mvo, zyga: That's pretty interesting.. will need to dig in a bit to remind myself about the semantics of the changes map [14:18] I think we should eventually expose something along those lines via the API as well [14:18] Details to be figured [14:19] zyga: .5 is ready for stable promotion we need to decide when we want to do this. traditionally we release to stable Mon,Tue [14:19] (cc niemeyer -^) [14:19] doing it now means we can still react to the outcome [14:19] I think Wed is late in the meaning of "mid week" but it's not too late [14:20] mvo: The delta was just the stop-mode right? [14:21] niemeyer: stop-mode plus new API [14:21] niemeyer: https://github.com/snapcore/snapd/releases/ [14:21] I made the release page show some details for the last few releases I worked on [14:23] zyga: Can we please not do that? [14:23] zyga: We have a roadmap page in the forum.. just point it there [14:23] zyga: Otherwise we have two different places, most likely showing different information [14:24] yes, it doesn't show per release details [14:24] the point releases we made recently I mean [14:24] zyga: it looks exactly like we want it to look [14:24] zyga: If we want to make it look different, we do [14:25] sure, I can make that [14:25] I just thought it is nice to have some information on the GitHub release pages still, I just need to make sure that is in the forum in the end [14:26] zyga: We can point that to the roadmap page.. and we can tune the roadmap page to show more information [14:26] zyga: But we don't want it t be obnoxious [14:27] zyga: What we don't want is multiple people maintaining the same kind of information in different places, with different content [14:29] zyga: Our current roadmap is also much better about providing context about features described.. we need to keep that true.. I'd also prefer to not break down every single patch release in a different section.. [14:29] zyga: I suggest having a call today to talk about how we want that organized [14:29] niemeyer: I'm not sure I agree about not having any information on point releases [14:29] git log is too ra [14:29] *raw [14:30] zyga: That's not what I said [14:31] sergiusens: to answer your question from yesterday, yes seems to be a new problem with 2.40 [14:31] kalikiana: can you help joc out ^? [14:31] zyga: We should highlight relevant deltas, and demote trivial changes [14:32] zyga: We don't need whole sections for trivial changes [14:32] joc: sergiusens what do you need me to help with? [14:32] not me, joc [14:33] kalikiana: I have a snap that we've been building for a while (months), but since 2.40 is failing to build with some python/pip problems [14:35] joc: Can you paste what's failing? [14:35] PR snapd#5069 opened: configcore: validate experimental.layouts option [14:44] Chipaca, just realized a script of mine ended up calling `snap install --channel=` (i.e. no channel at all) which was happily translated to stable instead of yelling at me. Expected? [14:45] Not really a problem, just not what I expected to happen [14:45] And indeed, not what used to happen [14:46] popey: tried both install --dangerous and snap try, no issues [14:46] Yeah, doesn't happen every time, I'm not sure what the critical way to trigger it is [14:48] kyrofa: expected [14:48] Alright [14:49] kyrofa: not sure if it's _right_, but it's expected :-) [14:49] Chipaca, heh, no big deal, just means I need to do my OWN error checking, thanks a lot [14:49] kyrofa: the other option would be to throw an error [14:50] kyrofa: but stable _is_ "" :-) [14:50] Haha [14:50] Yeah no complaint, just a change, wanted to make sure [14:50] kyrofa: it's interesting that you say it's a change [14:51] kyrofa: when did it change? [14:51] My script used to blow up [14:51] I dunno, I'm figuring the core snap updated a while back. My script used to blow up [14:51] (if I forgot to specify a channel) [14:51] Or heck, who knows, maybe it's all in my head [14:54] PR snapd#5070 opened: debian: update LP bug for the 2.32.5 SRU [14:55] kyrofa: did you manage to get anywhere investigating my gimp build? [15:02] zyga: feel free to let me know when 3963 is ready for me to review (I see in backscroll there are failing tests, you may be taking over, etc) [15:02] thanks, I will [15:03] popey: did vscode get dropped back to rev 29? [15:03] mvo, are you going to send to proposed the 32.5? [15:04] popey: because that is still not a working revision for me, the last one i have that works is 27 [15:04] joc: yup, needs more debugging [15:04] ugh [15:04] Wimpress: ^ [15:04] cachio: yes [15:05] cachio: I let you know once it gets accepted there [15:05] mvo, nice [15:05] joc: I've just release rev 27 to stable, beta, candidate [15:06] thanks === pstolowski|lunch is now known as pstolowski [15:09] Wimpress: joc: revision 29 seems ok here :-/ [15:11] aah. the font rendering is a problem.. [15:11] only in the editor window though, the file tree is fine [15:12] diddledan: seems likely to be a host pc specific thing - the error is a missing lib [15:21] zyga: snapcraft doesn't seem to be supporting layouts yet, does it? [15:22] pstolowski: I don't know [15:22] perhaps not [15:22] I usually build snaps by hand [15:22] kyrofa: do you know? ^ [15:23] pstolowski, it does not, but in edge you can use the `passthrough` keyword to indicate a set of things you just want passed into the snap.yaml [15:23] zyga: yeah I could do that, but would prefer something I can easily iterate on/rebuild [15:23] kyrofa: sounds great, thanks! [15:23] pstolowski, actually beta and candidate too-- 2.41 [15:28] pstolowski, zyga: yeah, please participate https://forum.snapcraft.io/t/call-for-testing-snapcraft-2-41/5022 [15:28] sergiusens: yep, i'm just in! === sergiusens_ is now known as sergiusens [15:37] niemeyer, hey, thanks for merging Saviq's fix, so much better [15:42] kyrofa: np [15:42] kyrofa: Does it work now? [15:42] niemeyer, it does, wonderfully [15:42] Saves me a significant amount of time not needing to manually test on those [15:43] mvo: The release notes say the API was back in .4 .. is that not out yet? [15:43] Now if only squashfuse was in trusty so I could do that too... [15:43] kyrofa: Hmm.. we have snapfuse inside core I think [15:44] niemeyer, I can't install snaps in a trusty lxd instance, should I be able to? [15:44] (core itself can't install) [15:46] kyrofa: I don't know if we have other constraints, but the point of having snapfuse was precisely to make containers work [15:50] kyrofa: trusty guest on which host? [15:50] zyga, xenial [15:50] kyrofa: what's the error you see? [15:51] mounting issues, it's been a while since I tried, let me fire one up [15:59] PR snapcraft#2087 opened: Add configuration for AppVeyor [16:06] niemeyer: .4 is not out in stable yet [16:08] niemeyer: I mean .5 is in bionic so .4 is there by implication. but its not available in a stable core snap or in a stable distro release yet, we can release that today (the stable core with .5 is ready) or Monday, its our call (plus we need to get an ack from the store) [16:10] mvo: ok, got it thanks.. let's have that call shortly and we can also use a bit of time to discuss our options there [16:10] ok [16:12] * kalikiana heading out for the day [16:14] zyga, huh, nowadays it's "error: cannot communicate with server: Post http://localhost/v2/snaps/core: dial unix /run/snapd.socket: connect: no such file or directory" [16:14] Seems snapd isn't running [16:14] what's the status of the snapd.service? [16:15] Yikes, systemctl doesn't work either, dbus is busted [16:15] Looks like installing snapd borked things, it pulled in a kernel even though it's a container, wonder if that has something to do with it [16:18] kyrofa: wrt channels (now that i got around to looking), last relevant change seems to be 2016-09 [16:19] Chipaca, I shall plead insanity, then! [16:19] kyrofa: you could also shout and posture and claim that I must be wrong [16:20] :P [16:23] kyrofa: hm, I think we have or had a kernel dependency on trusty [16:24] kyrofa: snapd inside a trusty lxd? [16:24] Chipaca, yep, on xenial host [16:25] kyrofa: I _think_ that isn't meant to work, but I'm not 100% [16:25] zyga: I'm posting on the factory list now, that list is actually alive [16:25] mvo, yeah, looks like that's the case [16:25] stgraber: could you remind me if that's expected to work? [16:25] Caelum: thank you, please keep me posted on the developments :) [16:25] stgraber: 1604 running lxd, a 1404 container in that lxd, running snapd [16:26] Chipaca: not supposed to as 14.04 containers don't have apparmor running [16:26] kyrofa: its a recommends nowdays but still will get pulled in by default. still, that should not kill your dbus :/ [16:26] stgraber: thanks [16:26] kyrofa: neener neener [16:26] Chipaca, I'm tired of you telling me no today [16:26] * Chipaca is extremely professional in all his interactions [16:26] :P [16:27] Thanks for clarifying Chipaca, mvo, stgraber [16:27] kyrofa: hey, don't blame me. Blame .... Elves on strike. (Why do they call EMAG Elf Magic) [16:28] * Chipaca puts away the bofh excuse generator for another year [16:31] * zyga takes a break and goes for a walk [16:32] PR snapcraft#2055 closed: python: bring back support for older versions of pip [16:33] mvo: Ready when you are [16:51] mvo: Hmm.. nm.. I guess your EOD is now at my 1PM local time.. [17:09] oh look at that, it's beer o'clock, and it's lovely outside [17:13] zyga: layouts do not let me bind a subdir under /usr/lib - I get cannot update snap namespace: cannot create writable mimic over "/usr/lib": permission denied; is that by design? [17:13] No [17:13] * genii checks his Beer O'Clock alarm, but it's it's stilll a seemingly forever 3 hours and 47 minutes away yet [17:13] zyga: ok; so i'm trying to do this: /usr/lib/tcltk/x86_64-linux-gnu/tk8.5: [17:13] bind: $SNAP/usr/lib/tcltk/x86_64-linux-gnu/tk8.5 [17:14] What is the denial [17:14] I’m on a bike now [17:15] zyga: [68891.838823] audit: type=1400 audit(1524071502.757:492): apparmor="DENIED" operation="mount" info="failed mntpnt match" error=-13 profile="snap-update-ns.scid" name="/tmp/.snap/usr/lib/" pid=15755 comm="3" srcname="/usr/lib/" flags="rw, rbind" [17:15] zyga: ha, enjoy it then, let's talk tomorrow! [17:15] i'm about to eod anyway === pstolowski is now known as pstolowski|eod [17:17] What is the yaml again [17:18] The source name looks bad [17:18] Backwards [17:26] niemeyer: sorry, real life commitments, but if you have a free slot in 1h I shall be able to attend [17:27] mvo: I certainly do, but don't want to run into your evening.. I didn't realize we had shifted time so much already that my early afternoon is already off-hours for you [17:31] niemeyer: no worries, a quick syncup is fine [17:31] niemeyer: I ping you in ~1h, ok? [17:31] mvo: Deal [17:31] :) [17:34] zyga: https://pastebin.ubuntu.com/p/VgpRx43PVJ/ [18:09] PR snapd#5071 opened: tests: replace snap try when possible to speedup tests execution [18:41] niemeyer: I'm in the hangout channel now [18:43] mvo: OMW! [18:57] is there a way to contribute to https://docs.snapcraft.io/build-snaps/syntax? the most valuable parameter "version-script" is missing. [18:59] PR snapcraft#2003 closed: patches: make the ctypes patch more robust and add armhf arch triplet [19:05] pbek: https://github.com/canonical-docs/snappy-docs/blob/master/build-snaps/syntax.md [19:05] pbek: that's the repo with those docs in. [19:31] pbek: there's a link at the bottom [21:15] PR snapcraft#2088 opened: grammar: support compound on..to statement [22:09] PR snapcraft#2089 opened: many: remove support for remote lxd per project containers