/srv/irclogs.ubuntu.com/2018/07/29/#ubuntu-devel.txt

dokotsimonq2: could you have a look at https://objectstorage.prodstack4-5.canonical.com/v1/AUTH_77e2ada1e7a84929a74ba3b87153c0ac/autopkgtest-cosmic/cosmic/amd64/s/spyder-unittest/20180727_095719_aee99@/log.gz ?04:42
infinitywxl: Hey, could you apply another round of Democracy(tm) to https://launchpad.net/~techboard/+members ?06:00
Bert_2Hi, we're updating our webworkers from 16.04 to 18.04 and noticed there's a bit of a problem in 18.04 with libcurl. Both libcurl3 and libcurl4 actually supply .so files for libcurl4 (so that's weird for sure), on top of that some packages depends on the 3 package and others on the 4 package, so that leaves it difficult to keep everything installed (php-curl requires 4, shibboleth requires 3)12:19
Bert_2So, is that a mistake or what's the idea behind that?12:19
mdeslaurxnox: ^13:33
mdeslaurxnox: is the libcurl3 package support to provide libcurl.so.4, in conflict with libcurl4?13:34
mdeslaurs/support/supposed/13:35
TJ-bug #177648913:35
ubottubug 1776489 in xmltooling (Ubuntu) "libxmltooling7 depends on libcurl3, which has been replaced by libcurl4 in Bionic" [Undecided,Confirmed] https://launchpad.net/bugs/177648913:35
juliankthis seems so wrong13:38
Bert_2juliank: I agree13:40
mdeslauroh, looks like libcurl3 has been shipping libcurl.so.4 for a long time13:44
TJ-there's a note in the changelog about it13:49
xnoxBert_2, mdeslaur, TJ-, juliank - the plan was to remove libcurl3 completely, and move over to libcurl4 throughout..... however, there is a package that not only depends on curl with openssl 1.0 ABI/API. Thus everything in the archive has moved onto libcurl4 with openssl1.1, but xmltooling....14:06
xnoxthe only way to keep xmltooling installable and usable to build documentation/packages was to reintroduce libcurl3 with openssl1.0 that ships libcurl4.so =/14:07
xnoxit is extremely bad and ungly14:07
juliankxnox: why doesn't it ship a libcurl3 so?14:07
juliankwere there other API breaks?14:07
juliankor a libcurl-openssl1.so.414:08
xnoxcurl ones no, but things that try to access openssl ctx get confused as that has changed.14:08
xnoxjuliank, i can't remember the soname mess and why it had to be libcurl4 now, but things would have been broken or something.14:09
juliankhmm14:09
juliankodd14:09
xnoxjuliank, i'm confused how shibboleth-sp2  is involved, since as per tracker it was only http://people.canonical.com/~ubuntu-archive/transitions/html/curl4.html xmltooling14:09
xnoxthat was the last remaining package that needed libcurl314:09
xnoxit has libxmltooling7 dep14:10
xnoxjuliank, glory detail https://launchpad.net/ubuntu/+source/curl3/7.58.0-2ubuntu2 and https://launchpad.net/ubuntu/+source/xmltooling/1.6.4-1ubuntu214:15
juliankxnox: details is a strong word14:18
juliank:D14:18
juliankI remembber there was something, but not what14:19
TJ-I've found a major problem with the vagrant-libvirt package on 18.04 where it defaults to attaching its management network to "eth0" with no way to change that, and yet due to persistent network names, eth0 rarely exists, so vagrant boxes fail to start. I've located the upstream issue report and found that latest code has a patch that helps admins configure it now. Would this need to be pulled in via14:20
TJ-Debian > 18.10 first, then SRU 18.04, or could we pull directly to 18.04 since it breaks vagrant fundamentally?14:20
TJ-Upstream issue (see my comments at the very end) is https://github.com/vagrant-libvirt/vagrant-libvirt/issues/60914:20
TJ-I'm about to open an Ubuntu bug to track this14:20
TJ-Bug #178422914:34
ubottubug 1784229 in vagrant-libvirt (Ubuntu) "18.04: VM fails to start due to management_network assuming non-existent interface eth0" [Undecided,New] https://launchpad.net/bugs/178422914:34
xnoxBert_2, so i see xml-security-c v2.0 out which appears to compile fine against openssl 1.1.... i wonder if recompiling all the new things from source is the answer here... to get all the things working.14:35
Bert_2xnox: well yeah, we can't really compile shib ourselves on these production machines14:37
xnoxBert_2, i understand.14:37
Bert_2I mean, we are students and stuff, but the application we run are of a sort of important to a large amount (10-60k) students14:38
xnoxBert_2, i wonder if we will be able to provide the upgraded curl4/openssl1.1 stack via backports or srus.14:38
Bert_2and we are struggling to even get shib to run properly with the workaround in the blogpost14:38
Bert_2xnox: I personally think SRUS would be appropriate in this case, since shib2 is just plain broken right now and it's a universe package anyway14:39
xnoxBert_2, i have not read the blogpost. If I were you, I would assume shib is not available on 18.04 yet. And either stick to 16.04, or run shib things from xenial lxd container on bionic host.14:39
xnoxBert_2, when we did this botch, we were expecting to fix it properly in time for bionic release =/14:39
Bert_2an LXD container is not an option in this case since php requires curl414:39
xnoxbut clearly that didn't happen.14:39
Bert_2yeah, clearly :P14:40
Bert_2but yeah, we sorta assumed things were more tested/safe now that 18.04.1 was around14:40
xnoxBert_2, i secretely expected that noboby is using this one little niche thing..... how young and wrong was I.14:40
TJ-Bert_2: could you use a proxy connection from 18.04 into an LXD-16.04 container for this functionality ?14:40
Bert_2we are looking into reinstalling to 16.04 if we have to, but we really don't want to14:41
=== joachim is now known as Guest22259
Bert_2TJ-: maybe if we proxy PHP out to something else, but that would also be quite a lot of work for just a few students, and hard to test14:41
Bert_2and that would leave our FastCGI users confused14:42
Bert_2since apache would run in the LXD container14:42
Bert_2Ok, we got it working with the workaround/hack14:46
Bert_2turns out they've changed the user that runs shibd14:46
Bert_2therefore shibd can't read the certificate/key pair it needs14:46
Bert_2and it doesn't log that problem, so we had strace it14:47
Bert_2that's really not nice...14:47
xnoxcharming!14:47
Bert_2such a change should be in the release notes14:47
Bert_2love 2 unrelated issues intermixing, makes things extra spicy <314:47
xnoxBert_2, reading the blog post, i think we should be able to fix up the libcurl3/libcurl4 mess as an SRU.14:48
Bert_2xnox: we agree14:49
Bert_23 people have been working on this for several hours here :P14:49
Bert_2and I think a fix should be easy14:49
Bert_2any idea who is willing to sponsor/do this, and what the ETA might be (days, weeks, months)?14:50
Bert_2xnox: I've added a bug on the situation with the user change in shib, since it also results in upgrade issues: https://bugs.launchpad.net/ubuntu/+source/shibboleth-sp2/+bug/178423115:26
ubottuLaunchpad bug 1784231 in shibboleth-sp2 (Ubuntu) "Unreported change of shibd user" [Undecided,Confirmed]15:26
=== joachim is now known as Guest81566
TJ-who/which channel is responsible for the cloud-images archives?18:55
Ionicwhat's the first version to support the :all multi-arch annotation for dependencies? seems like that's not working for trusty... and maybe even xenial18:56
tsimonq2doko: ack19:22
Unit193xnox: Huh, what caused you to update libtorrent-rasterbar?21:14
wxlinfinity: not enough takers on the call for applicants?21:59
dokoUnit193: boost?22:38

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!