/srv/irclogs.ubuntu.com/2020/01/14/#snappy.txt

geniiIs pulseaudio now snap only install?00:05
cjwatsonpulseaudio is still in Ubuntu.  The snap seems pretty out of date.00:08
cjwatson(still in Ubuntu as a .deb, I mean)00:08
geniicjwatson: Thanks. Looks like an update to 7.5 was reverted to 7.4, causing issues in apt/dpkg00:40
Kyokuis there a way to do full disk encryption on ubuntu core for Pi4 without paying $30,000 for a smart start plugin?01:02
=== diddledan6 is now known as diddledan
mupPR snapcraft#2658 closed: candidate testing <do-not-merge> <Created by sergiusens> <Closed by sergiusens> <https://github.com/snapcore/snapcraft/pull/2658>02:12
mupPR snapcraft#2873 opened: candidate testing <Created by sergiusens> <https://github.com/snapcore/snapcraft/pull/2873>02:12
mborzeckimorning06:24
mupPR snapd#7988 closed: snap: remove "host" output from `snap version` <โš  Critical> <Created by mvo5> <Merged by bboozzoo> <https://github.com/snapcore/snapd/pull/7988>07:08
mborzeckimvo: morning07:37
mborzeckimvo:  can you cherry pick #7988 to 2.43?07:37
mupPR #7988: snap: remove "host" output from `snap version` <โš  Critical> <Created by mvo5> <Merged by bboozzoo> <https://github.com/snapcore/snapd/pull/7988>07:37
mvomborzecki: good morning!07:42
mvomborzecki: yes, will do now07:42
mvomborzecki: do you know if we need anything else for .1 ?07:42
mborzeckimvo: hmm, selinux policy would be nice07:42
mvomborzecki: yeah, could you please tag as 2.43?07:43
mborzeckimvo: https://github.com/snapcore/snapd/pull/7978 want me to open a PR with backport?07:43
mupPR #7978: data/selinux, test/main/selinux-clean: update the test to cover more scenarios <Created by bboozzoo> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/7978>07:43
zygagood morning07:43
mvomborzecki: backport is fine, if its small I can cherry-pick07:43
mvozyga: good morning07:43
zygamvo: .1 release coming for that snap version output changeW?07:43
mvozyga: yes, anything from you we need for .1 ?07:43
zygano, sorry07:44
zygaI'll try to do better today07:44
mvozyga: that's fine07:44
mvozyga: no worries07:44
mvomborzecki: it's just three commits, if they apply cleanly I will just cherry pick them07:44
mborzeckimvo: yeah, that should be fine07:44
mvomborzecki: yeah, no conflicts, done07:45
mborzeckimvo: cool, thank you!07:45
mvomborzecki: thank you !07:46
mvomborzecki: I will wait for pawel and samuele to double check if they think we need to add anything and then proceed with the release of .107:46
mupPR snapd#7981 closed: snap-bootstrap: create encrypted partition <UC20> <Created by cmatsuoka> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/7981>07:52
zygahttps://github.com/snapcore/snapd/pull/7974#issuecomment-574050904 is the weirdest python review I ever made07:58
mupPR #7974: many: run black formatter on all python files <Created by anonymouse64> <https://github.com/snapcore/snapd/pull/7974>07:58
* zyga reviews indirect download PR08:01
pstolowskimornings08:02
zygahey pawel08:12
zygapstolowski: it's coming today08:12
zygapstolowski: :)08:12
pstolowskizyga: yay :)08:13
mvohey pstolowski ! good morning! anything you can think of we need/should include in 2.43.1 ?08:16
pstolowskimvo: hey, nothing from me08:18
mvota08:19
mborzeckierrand, back in 1h or so08:41
zygabrb08:54
pedronismvo: hi, I commented on #798908:56
mupPR #7989: devicestate: do not allow remodel between core20 models <Created by mvo5> <https://github.com/snapcore/snapd/pull/7989>08:56
pedronismborzecki: mvo: #7990 is missing some end of doc comment sentence .08:56
mupPR #7990: many: misc tweaks <Simple ๐Ÿ˜ƒ> <Created by anonymouse64> <https://github.com/snapcore/snapd/pull/7990>08:57
mvopedronis: thank you08:59
mvopedronis: makes sense09:00
zygaback09:05
zygamvo: https://github.com/snapcore/snapd/pull/7977#pullrequestreview-34198274909:27
mupPR #7977: snap: add (hidden) `snap download --indirect` option to download via snapd <Created by mvo5> <https://github.com/snapcore/snapd/pull/7977>09:27
zygamvo: not sure if I'm right, otherwise +109:28
zygamvo: though I want to check one more thing that landed before09:28
zygamvo: as it is realted09:28
zyga*related09:28
zygachecked out, ok09:29
mvozyga: aha, nice one. I need to double check but I think you are right09:34
mvozyga: \o/09:34
mborzeckire09:34
* zyga reviews the SnapAction PR next09:34
zygamvo: just for reference, I checked if the remote download API cannot be used to abuse snapd to write to arbitrary files09:35
zygamvo: but I'm happy to see it is not that09:35
zygamvo: the API is just streaming the file via snapd, correct?09:35
zyga(that's how I understood the api_download.go code)09:35
mvozyga: correct, in this regard there is no change to the old download code, the old code would connect to the download server directly, the new code connects to snapd for the download09:37
zygamvo: right, I was specifically looking for how the write to disk is done09:37
zygamvo: it is done via snap download running as user, which is what was important to me09:37
zygamvo: and specifically there is no path that snapd writes to that could be used to attack anything09:38
Chipacamvo: could we create a test-snapd- snap to test default tracks?09:38
mvozyga: correct09:39
mvoChipaca: yes09:39
Chipacamvo: in the snaps@ account an' everything?09:39
mvoChipaca: please create it under your account for now and then share with me/cachio - I need to create/use the new snapd-testing store account but I have not yet :( probably this is a good time to do that but I don't want to block you09:40
Chipacamvo: ok09:41
pedronisChipaca: share it with me too09:45
zygaChipaca: https://github.com/snapcore/snapd/pull/7984#pullrequestreview-34241197810:14
mupPR #7984: store, overlord/snapstate, etc: SnapAction now returns a []โ€ฆResult <Created by chipaca> <https://github.com/snapcore/snapd/pull/7984>10:14
Chipacazyga: ack10:15
Chipacai'll do it in a followup when i switch to the new snap10:15
pstolowskioh well, we have a bug10:17
zygapstolowski: oh?10:17
pstolowskisnap connections and snap interfaces reports connections for missing slots/plugs (e.g. after refreshing to a snap that doesn't have a plug/slot anymore). the repo doesn't have such plug/slot anymore, but api reads "conns" and doesn't intersect with repo (or snap.yaml data)10:20
zygaI think we knew about this10:20
zygait's reported AFAIK10:20
pstolowskihmm maybe you're right. i think issues around that had a few incarnations10:20
pstolowskifwtw it's just the list of connections affected; security profiles are generated from repo data so they're fine10:21
pstolowskianyway.. i'll look at fixing it10:23
zygapstolowski: do you have an idea on how the fix should look like?10:24
pstolowskizyga: quick/rough one:L maybe collectConnections() in the daemon should (or ifaceMgr.ConnectionStates() one level deeper) intersect conns with repo10:28
pstolowskii'll look at details later. i stumbled on it accidently when working on spread test for snap disconnect --forget10:29
zygapstolowski: I'll give it some thought and get back to you10:32
mborzeckiChipaca: hmm hmm https://forum.snapcraft.io/t/596-523-hours-left-0-bytes-sec/15033/7 IDK what to say ;)10:37
Chipacamborzecki: moved it to the cafe10:38
mborzeckiChipaca: thx10:38
pstolowskizyga: thanks10:40
pedronispstolowski: hi, I did a pass on #798210:41
mupPR #7982: o/snapstate, wrappers: enable services on start <Complex> <โ›” Blocked> <Created by stolowski> <https://github.com/snapcore/snapd/pull/7982>10:41
pstolowskipedronis: ty10:42
mborzeckiquick errand10:44
pedronisChipaca: hi, it seems 7984 can be merged10:48
Chipacapedronis: yep10:48
Chipacapedronis: was waiting for a nod on the next one; don't want to merge it if I then need to change the refactor10:48
Chipacapedronis: but I guess I have that10:49
pedronispstolowski: mborzecki: we need to remember to try to s/GetType/Type/ at some point before .4410:49
Chipacaas your comments were about the details, not about the guts of it10:49
Chipacaso, yeah, merging10:49
pedronisChipaca: one non-blocking question is whether it would make logic sense to move EffectiveChannel to SAR as well or not10:50
mupPR snapd#7984 closed: store, overlord/snapstate, etc: SnapAction now returns a []โ€ฆResult <Created by chipaca> <Merged by chipaca> <https://github.com/snapcore/snapd/pull/7984>10:50
Chipacapedronis: the followup (7986) is red because the snap i use to test isn't in i386, so i decided to create our own snap now10:50
Chipacapedronis: (i had planned to that sometime anyway, which is why i put it in a variable :) )10:51
pstolowskipedronis: right10:51
Chipacapedronis: right10:51
mupPR snapd#7990 closed: many: misc tweaks <Simple ๐Ÿ˜ƒ> <Created by anonymouse64> <Merged by pedronis> <https://github.com/snapcore/snapd/pull/7990>10:51
zygapstolowski: https://forum.snapcraft.io/t/opera-requests-auto-connect-to-gnome-3-28-1804-interface/14505/1411:02
zygapstolowski: can you snap install `opera-developer` it looks like we have a serious autoconnect issue11:02
zygaI just want to double check that it's equally broken on Ubuntu for you11:02
zygalooking at what's going on now11:03
pstolowskizyga: will do in a sec11:03
zygapstolowski: I think it's caused by the snap declaration11:05
pstolowskizyga: confirmed, gnome-3-28 content plug is not autoconnected11:08
zygapstolowski: check my response on the forun11:08
zygapstolowski: I don't recall how that part works11:08
zygapstolowski: if we have a snap declaration with plugs/content/allow-auto-connection entry11:09
zygapstolowski: does it mean _only_ that entry is auto-connected11:09
zygapstolowski: or does it mean that defaults apply but those are extras?11:09
pedroniszyga: yes, if the snap has a content thing like that then it will not use the slot one11:09
zygapedronis: what do you mean by "it will not use the slot one"?11:09
pedronisI mean  that the slot side snap-declaration on gnome-* will not be used11:10
pedronisthe only content auto-connection they wil get is the one they are allowing in their declaration11:10
pedronisthere is n merging11:10
pedronisthere is no merging11:10
zygamhm11:10
zygaso there are two bugs here11:11
zyga1) the declaration for opera-developer needs fixing11:11
zyga2) this is not discoverable much11:11
pedronisdiscoverable what?11:11
pedronisthey asked somebody in the store for that declaration11:11
zygapedronis: snap install did not respect auto-connection that otherwise normally happens11:11
zygapedronis: and didn't say anything about why11:12
pedroniswhy would it? the declaration asked for this11:12
pedronisis not something the user can fix11:12
zygapedronis: why would it? because the developer defined a plug and a default provider11:12
mborzeckire11:12
zygaand we used additional data to ignore that11:12
zygaI think this warrants a message11:12
pedroniszyga: data that they asked for11:12
zygaand I think the existence of that thread agrees11:12
pedronisanyway user != developer11:13
zygapedronis: if I have a snap and I say I want to connect to a default provider snapd should 1) connect to it 2) tell me why it doesn't11:13
pedronisI wonder what is that snap11:13
zygaanything else is silent behavior that defies request11:13
pedronisthis is not a typical scenario11:14
zygano but I think my point stands11:14
pedronisI wonder if they were early adopter of something11:14
zygawe should say "not connecting despite default provider because snap-declaration data <reference> says not to"11:14
zygapedronis: I would also argue that part of no-merging is also a bug / surprising11:15
zygaI know it's the design, since I've been to that meeting11:15
zygabut it's surprising11:15
pedroniszyga: we will not change that11:15
zygapedronis: I think the only thing that really needs to be changed in snapd is to make this more discoverable11:16
pedronisanyway they are connecting to chromium-ffmpeg11:16
pedronisthat's what  that connect is11:16
zygaso that it doesn't require a snapd developer to debug each time11:16
pedronisbut now they need something else to connect to gnome as well11:16
zygapedronis: and if they didn't need ffmpeg they would get the connection to gnome-* by default11:17
zygapedronis: I know you said we're not doing merging but I think you can see how that is surprising11:17
pedroniszyga: the correct solution is probably to move that decl on the chromium-ffmpeg side11:19
pedroniszyga: we publish chromium-ffmpeg it seems, it should have a policy of what snaps can use it (any snaps, some publishers, don't know)11:30
pedroniszyga: to be clear my impression is that this is particularly brittle because content is essentially a completely different interface for each value of the content label11:34
pedronisbut is still a single interface for a our logic11:35
zygapedronis: I agree entirely11:41
zygare11:41
* zyga was upstairs to help with Lucy11:41
zygapedronis: can you comment on the thread with your preference please11:41
zygapedronis: I've advised jdstrand to issue a declaration for opera-* snaps11:41
mborzeckipedronis: updated #797211:45
mupPR #7972: overlord/snapstate, wrappers: undo of snapd on core <Remodel ๐Ÿš‹> <Created by bboozzoo> <https://github.com/snapcore/snapd/pull/7972>11:45
pedroniszyga: btw jdstrand is off this week11:46
pedroniszyga: I need to check something, but my preference would be for chromium-ffmpeg to control access to itself11:46
pedroniswe probably need desktop input on that11:47
zygapedronis: yes, as a tweak to assertions it would be preferable O(1) vs O(N) solution11:49
zygaman, my hand :/11:49
zygamy wrist hurts so badly today, I was wrestling with Janek over weekend and I think I hurt myself11:49
zyga(Janek = son)11:49
zygait was so-so yesterday but today it just hurts to do anything11:49
zygait's my right hand so I don't use it as often but man, so annoying11:50
mvopedronis: I updated 7989 based on your suggestion11:51
cachiomvo, hello11:51
mvocachio: good morning11:51
cachiomvo, any idea if there is any special configuration for qemu to run core20 images? I see this log trying to start the image https://paste.ubuntu.com/p/QKJw2fPmXt/11:52
mvocachio: anything I should add to 2.43.1 before the release?11:52
mvocachio: looking11:52
cachiomvo, no11:52
cachiotests for 2.43 ran almost with almost 100% of pass rate11:52
mvocachio: the pastebin lookslike something is not quite right with the image, do you have a link to the work-in-progress PR of yours? then I can poke a bit how ubuntu-image and qemu are called11:53
mvocachio: e.g. the qemu needs -bios /usr/share/OVMF/...11:54
cachiomvo, this is the branch https://github.com/sergiocazzolato/snapd/tree/tests-enable-nested-on-core2011:54
cachiomvo, I'll try that11:55
mvocachio: /usr/share/OVMF/OVMF_CODE.ms.fd to be precise, but I think it depends on the version of ubuntu where that file is :/11:55
ogramvo, did you see https://forum.snapcraft.io/t/how-to-use-camera-in-ubuntu-core18/14971/5 ? seems the start_x parameter does not work for the core18 pi installs11:56
cachiomvo, thanks for the info, I'll try and debug11:57
mvoogra. meh, I have not, looking12:00
mvocachio: yeah, I suspect that might be it12:00
ograi wonder if there is some pattern match falling over the underscore ?12:00
mvocachio: or at least this must be tweaked too, maybe there is more12:00
mvoogra: I don't think we support "_" in the config, I wonder if start-x=1 will help12:01
mvoogra: but this should behave the same on uc16 and uc18, if not I'm puzzled12:01
* mvo also has not read the whole thread yet, it seems to be quite long12:01
ograogra@pi4:~$ snap set system pi-config.start-x=112:02
ograogra@pi4:~$12:02
ograogra@pi4:~$ snap set system pi-config.start_x=112:02
ograerror: cannot perform the following tasks:12:02
ogra- Run configure hook of "core" snap (invalid option name: "start_x")12:02
ograogra@pi4:~$12:02
ograyeah, its the underscore12:02
pedroniszyga: afaict only opera is connecting to chromium-ffmpeg12:02
pedronisall their various snaps: opera, opera-beta, opera-developer12:03
zygapedronis: still, I think it makes sense to do what you said about the assertions12:04
pedronisyes12:04
mupPR snapcraft#2874 opened: LP-1661626 : Symlink $XDG_RUNTIME_DIR/../dconf/user <Created by MarcusTomlinson> <https://github.com/snapcore/snapcraft/pull/2874>12:04
pedroniszyga: I added something to thread and pinged kenvandine there12:09
zygapedronis: thank you! :)12:09
* Chipaca steps out for a bit12:28
mborzeckipedronis: started adding https://github.com/snapcore/snapd/pull/7991#pullrequestreview-342491713 to ian's PR12:33
mupPR #7991: boot: add HasModeenv to Device <UC20> <Created by anonymouse64> <https://github.com/snapcore/snapd/pull/7991>12:33
mborzeckiquick errand, back in 20 or so12:33
cachiomvo, hey, I see these errors starting the core20 image https://paste.ubuntu.com/p/FJfZdsNVrM/13:09
cachiothese 3 services cannot be started13:09
cachiocorrectly13:10
cachiomvo, do you know if any other configuration is needed for qemu?13:11
mvocachio: the e2scrub_reap service is known, the other two are not13:25
mborzeckire13:28
zygaChipaca: could you please split https://forum.snapcraft.io/t/snapd-2-36-snap-confine-logic-walkthrough/7843/4 into a new topic13:41
zyga"cannot fsck volume mounted on /var/snap"13:41
zygaChipaca: last two messages there please13:41
Chipacazyga: title?13:41
zyga"cannot fsck volume mounted on /var/snap"13:41
Chipacazyga: in snapd?13:42
zygayes please13:42
zygathank you!13:42
Chipacazyga: done13:42
zygasuper :)13:42
Chipacagosh, almost standup time already13:46
Chipacawhere did my morning go13:46
zygaright? :)13:50
mupPR snapd#7993 opened: devicestate: enable encryption based on model grade <Created by cmatsuoka> <https://github.com/snapcore/snapd/pull/7993>13:52
zygamvo: is .1 out?13:54
mvozyga: not yet, one question (if 7879 can be included pending for pedronis  first)13:56
mvozyga: why, do you have something?13:56
zygamvo: I have a 1 liner fix13:56
zygamvo: for a small bug13:56
zygayeah13:56
mvozyga: please push it then13:56
zygayup one sec13:56
mvozyga: and we can decide. thank you13:56
zygamvo: https://github.com/snapcore/snapd/pull/799413:58
mupPR #7994: cmd/snap-discard-ns: fix pattern for .info files <Bug> <Simple ๐Ÿ˜ƒ> <Created by zyga> <https://github.com/snapcore/snapd/pull/7994>13:58
mupPR snapd#7994 opened: cmd/snap-discard-ns: fix pattern for .info files <Bug> <Simple ๐Ÿ˜ƒ> <Created by zyga> <https://github.com/snapcore/snapd/pull/7994>13:58
* Chipaca sneaks in a risk level "mauve"14:04
kenvandineoSoMoN: can you please respond to the question about chromium-ffmpeg in https://forum.snapcraft.io/t/opera-requests-auto-connect-to-gnome-3-28-1804-interface/14505/1914:22
oSoMoNsure14:28
mborzeckiijohnson: looking at https://pastebin.ubuntu.com/p/568vkDFB7P/ from you standup14:33
ijohnsonzyga: thanks for that python0 patch, I commited it to the PR :-)14:33
ijohnsonhopefully the tests are happy again on this14:33
zygaijohnson: my pleasure :)14:34
ijohnsonmborzecki: nice thanks14:34
zygaijohnson: I only know because I made the python0 snap14:34
ijohnsonmborzecki: that one at least is easier cause you have a backtrace from SIGQUIT the other ones are just "timed out" :-(14:34
mborzeckiijohnson: looks like a deadlock, between the snippet at standby_test.go:135 and m.Stop()14:34
ijohnsonzyga: :-) programming archeology indeed14:35
mborzeckiijohnson: there's no channel cleaneup, none of the ch{1,2} are closed, so if the we're stuck in querying the opinions, stop will hang14:35
ijohnsonmborzecki: ah good find14:36
* zyga breaks for lunch 14:40
=== ricab is now known as ricab|lunch
pedronisoSoMoN: sorry, I mean are we genereally comfortable with any snap using chromium-ffmep?14:48
oSoMoNpedronis, the typical use case is third-party browser snaps, but Iย don't see why other snaps couldn't connect to it if they wanted to14:49
pedronisoSoMoN: I'm trying to remove the step where they need to ask for auto-connection, because as opera shows it's likely to get wrong, because all content conection nees to take care holistically14:49
pedronis*needs to be taken care holistically14:50
pstolowskidegville, ijohnson re snapctl start & --enable (if I got Graham's remarks right), it seems that snacptl start --help is not listing enable even though it's in the code; seems that the command descriptions are not set up correctly (i haven't investigated if it works as expected)14:51
degvillepstolowski: thank you! that's exactly what I was looking for.14:52
pstolowskidegville: snap start --help works as expected14:52
pedronisoSoMoN: I have tried to ask this in the forum14:52
degvillepstolowski: thanks!14:53
* cachio lunch and bank14:55
oSoMoNpedronis, that would certainly be better for third-party browser snaps14:57
ijohnsondegville: pstolowski: yes sorry got distracted, shall I still find you the relevant code snippet?15:03
* ijohnson was busy reading about how old python 0.9.1 is 15:04
pstolowskihaha15:04
pstolowskiijohnson: i looked at ctlcmd/start.go and it seems wrong as far as help is concerned. but maybe i misunderstand what the issue was15:05
pstolowskiijohnson: the flag itself should work, i'm talking only about help15:05
ijohnsonpstolowski: yes the help message there does need to be updated15:05
ijohnsondegville: as for finding where snapctl is implemented, were you able to sort through the code? snapctl specifically is a bit weird in that really the command options are stored inside the code for the snapd binary and not in the code for the snapctl binary15:08
degvilleijohnson: yes, thank you! I've got it now - I've got enough to update the docs.15:08
ijohnsondegville: great glad to hear it15:09
pedronisoSoMoN: if you answer on the forum we can take it from there15:11
ijohnsonalso zyga did you have any thoughts on having black run on all the python code in the snapd repo?15:17
zygaijohnson: we should do it15:17
zyga:)15:17
zygaI regard black as a good thing15:17
ijohnsonshould we do it as part of run-checks or like spread-shellcheck do you think ?15:17
ijohnsonpersonally, I wouldn't really be happy if to contribute to snapd (a Go project) I needed to standup python tools just to run checks15:18
ijohnsonso I'm leaning towards having a spread test which checks all the formatting in the python code15:18
zygaijohnson: I would not go there15:18
zygaijohnson: it's not ultra-relevant and any kind of enforced format things ended up sucking IMO15:19
ijohnsonzyga: ok fair enough15:19
pedronisijohnson: I reviewed #7992, it seems to be missing unit tests afaict15:23
mupPR #7992: bootloader: add ExtractedRunKernelImageBootloader interface, implement in grub <UC20> <Created by anonymouse64> <https://github.com/snapcore/snapd/pull/7992>15:23
ijohnsonpedronis: did you mean unit tests of the grub methods?15:24
ijohnsonyes I think I am missing those now that you mention it15:24
pedronisyes15:24
ijohnsonsorry I will add those today15:24
pedronisthere seem to be a buglet as well15:25
pedroniswhich hopefully those will find :)15:25
ijohnsonpedronis: yes :-)15:26
ijohnsonpedronis: also regarding "." do you just mean in comments that are for doc-comments on exported methods or do you mean everywhere I should use "." ?15:26
pedronisijohnson: my POV on that is doc comment for exported things, I don't have a strict pattern for internal comments, it depends15:27
ijohnsonpedronis: ok IMHO I don't think it's needed for internal comments so I will just add to exported doc-comments then15:28
ijohnsonpedronis: do you want me to open the third PR for you to use for context now (even though it has still at least one bug) ?15:28
pedronisijohnson: as you prefer, this one looks good to me, except the missing tests etc15:29
ijohnsonpedronis: ok I wasn't sure if you were able to review the design of that interface without seeing it used in other places15:29
pedronisijohnson: well I proposed that design, so I have I sense how I imagine it used15:30
ijohnsonyes :-)15:30
pedronismy imagination might be wrong, but it doesn't really affect the PR in itself15:31
pedronismborzecki: there's a preexisting bug in readModeenvImpl15:35
mborzeckipedronis: hm?15:35
pedronismborzecki: modeenvPath := filepath.Join(rootdir, dirs.SnapModeenvFile) doesn't make sense15:35
pedronisdirs stuff has already a rootdir in it,  we need a SnapModenvFileUnder helper instead15:36
pedronissame approach as SnapStateFileUnder(rootdir string) for example15:36
mborzeckihah15:36
mborzeckiright15:36
pedronismborzecki: can you look into this when you have moment15:37
mborzeckipedronis: yes, sure15:37
pedronisthx15:37
pedronismborzecki: thansk for the changes to 7991, I made one more nitpick comment that relates to this.15:40
ijohnsonmvo: I noticed https://forum.snapcraft.io/t/the-snapd-roadmap/1973 is a bit out of date now for 2.43 estimates?15:44
mvoijohnson: yes, I need to update it, hopefully later today15:50
ijohnsongreat, thanks15:51
ijohnsonpedronis: as I'm updating the doc-comments on those grub methods it occured to me that currently EnableKernel() and EnableTryKernel() don't check that the kernel snap referenced there exists, do you think we should error out if an incorrect kernel snap is passed to those things?15:52
pedronisalso the only topic there will not make 2.43, but I doubt is the only thing we did in 2.4315:52
=== pedronis_ is now known as pedronis
pedronisijohnson: that makes sense, OTOH Disable should probably be ok even the symlink is not there15:53
ijohnsonpedronis: ack, and yes agreed about Disable()15:53
=== ricab|lunch is now known as ricab
mupPR snapd#7995 opened: debian: check embedded keys for snap-{bootstrap,preseed} too <Created by mvo5> <https://github.com/snapcore/snapd/pull/7995>15:58
pedronisI added some obvious things based on the trello column16:04
zygamborzecki: hey16:15
zygaI saw this denial just now16:15
zygatype=AVC msg=audit(01/14/20 15:50:55.249:2747) : avc:  denied  { mounton } for  pid=25654 comm=snap-update-ns path=/usr/lib/fontconfig/cache dev="sda1" ino=26841099 scontext=system_u:system_r:snappy_mount_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=dir permissive=116:15
zygadoes this ring a bell?16:15
zygathere were a few others16:15
zygahttps://www.irccloud.com/pastebin/Jgba6EB1/16:15
mborzeckizyga: this in tests or a live desktop system?16:19
mborzeckizyga: oh, and is it updated? the labeling bug https://bugzilla.redhat.com/show_bug.cgi?id=1659905 was fixed in july16:21
zygamborzecki: that's from spread16:22
zygamborzecki: it's the unstable suite so maybe it's expected but I wanted to ask you first16:22
mborzeckizyga: centos then?16:22
zygacentos 7, yep16:22
mborzeckizyga: hmmm, it's s-u-n, probably setting u desktop iface mounts right? maybe we should allow that16:24
zygamborzecki: I presume so16:24
mborzeckizyga: i suppose the policy won't get updated on centos7 :/16:25
zygawhy? because it's a separate package?16:25
mborzeckizyga: because selinux-policy-targeted should be fixed to label /usr/lib/fontconfig/cache as fonts_cache_t like it does in F29+, rather than lib_t16:26
zygamborzecki: and it won't be or ... I don't follow, sorry16:27
mborzeckizyga: i can file a bug, but hype seems to be about centos8 now :)16:28
zygaaha16:28
zygaI see16:28
zygathanks, I just wanted to check16:28
mupPR snapd#7989 closed: devicestate: do not allow remodel between core20 models <Created by mvo5> <Merged by pedronis> <https://github.com/snapcore/snapd/pull/7989>16:41
pedronismborzecki: thanks for the changes to 799116:43
pedronisijohnson: I think #7991 can be merged if you are ok with the changes in it16:44
mupPR #7991: boot: add HasModeenv to Device <UC20> <Created by anonymouse64> <https://github.com/snapcore/snapd/pull/7991>16:44
ijohnsonpedronis: ok, let me look I think it's probably fine but give me a minute16:44
pedronisijohnson: np, feel free to tweak/merge at your pace16:44
mupPR snapd#7996 opened: overlord/standby: fix possible deadlock in standby test <Simple ๐Ÿ˜ƒ> <Test Robustness> <Created by bboozzoo> <https://github.com/snapcore/snapd/pull/7996>16:55
mborzeckiijohnson: ^^16:56
zygamborzecki: for .1 as well?16:58
ijohnsonthanks mborzecki17:00
mborzeckithat failing tests/core18/snapd-failover test makes me think we need to improve logging17:03
* zyga EODs and goes to do homework17:13
zygamvo: https://github.com/snapcore/snapd/pull/7994 needs a 2nd review but is otherwise ready17:14
mupPR #7994: cmd/snap-discard-ns: fix pattern for .info files <Bug> <Simple ๐Ÿ˜ƒ> <Created by zyga> <https://github.com/snapcore/snapd/pull/7994>17:14
oSoMoNjdstrand, may Iย ask you to comment on the proposal in bug #1859643 (adding a personal-files plug on $HOME/.pki/nssdb) ?17:23
mupBug #1859643: [snap] cannot use shared NSS db <snap> <chromium-browser (Ubuntu):Triaged by osomon> <https://launchpad.net/bugs/1859643>17:23
pedronisoSoMoN: jdstrand is off this whole week17:26
oSoMoNah, thanks17:27
oSoMoNI'll make a note to ask him again next week17:27
Chipacawoo, #7986 is green17:30
mupPR #7986: store, o/snapstate: send default-tracks header, use RedirectChannel <Created by chipaca> <https://github.com/snapcore/snapd/pull/7986>17:30
Chipaca(needing another review, hint hint)17:30
mvozyga looked at some test timeout right now, will try to look at it right after this17:46
ChipacaEOD for me18:03
Chipaca๐Ÿ‘‹18:03
pedronisijohnson: something seems very unhappy in your HasModeenv branch, not sure why given it's no used yet18:09
ijohnsonpedronis: thanks for the ping, looking now18:09
ijohnsonthough I'm about to head off for lunch so might be after your EOD that I get to the bottom of it18:09
pedronisijohnson: devicestate tests are unhappy18:10
ijohnsonpedronis: ah actually I know why this is happening, but I didn't think it would be caused until my next PR (where I have a fix for this)18:11
ijohnsonpedronis: it seems I will need to bring that fix in18:11
ijohnsonpedronis: not sure why it's caused by the modeenv branch, but the issue is that essentially the snap mapper (i.e. system -> core|snapd) doesn't get reset properly between the uc20 boot tests and uc16 ones18:12
pedronisinteresting18:13
ijohnsonthe fix is to explicitly mock the snap mapper in devicestate in the test setup, adding a cleanup for the restore function18:13
pedronisit doesn't seem the problem though, it happens even running just one test18:16
pedronisijohnson: it's Maciej last change actually18:21
ijohnsonpedronis: oh well then it's not what I ran into then18:22
ijohnsonpedronis: because what I ran into with my future changes was only a problem for multiple tests, not single ones18:22
pedronisyea, no, it's something related to faking Modeenv reading18:22
* cachio afk18:24
ijohnsonpedronis: ok, I'll take care of it after my lunch if you haven't fixed it already18:24
=== ijohnson is now known as ijohnson|lunch
pedronisijohnson: I'm trying to fix it18:24
ijohnson|lunchpedronis: ok thanks18:24
cachiopedronis, hey, do you know if core20 supports cloud config to setup a user18:25
cachioI use cloud-init for core18 on nested vms18:25
cachiobut I think what is failing on core20 is that the user is not being created properly18:26
pedroniscachio: not yet18:26
pedronisI think18:26
pedronisthere's extra work to be done for it to work18:27
cachiopedronis, a user assertion could work?18:27
pedronisthose maybe works18:27
cachiopedronis, ok, I'll try that, thanks!!18:27
pedronisdone18:35
pedronisijohnson|lunch: pushed something (analogous as what we do in bootloader.Find)18:36
mupPR snapd#7997 opened: overlord: increase settle timeout for slow machines <Created by mvo5> <https://github.com/snapcore/snapd/pull/7997>18:37
mupPR snapd#7998 opened: httputil: use shorter timeout in TestRetryRequestTimeoutHandling <Created by mvo5> <https://github.com/snapcore/snapd/pull/7998>18:39
mupPR snapd#7999 opened: devicestate: allow encryption regardless of grade <Created by cmatsuoka> <https://github.com/snapcore/snapd/pull/7999>18:50
=== ijohnson|lunch is now known as ijohnson
ijohnsonpedronis: looks good to me, am I good to merge when green again?18:59
ijohnsonI guess I hadn't totally understood the relationship between the various dirs.Snap___ variables and dirs.GlobalRootDir18:59
pedronisijohnson: well it was simple and implicit, until because of UC20 we need to use them sometimes with rootdirs that are not "/" or the mocked value19:00
ijohnsonright with the /run/mnt/ubuntu-boot and such19:01
pedronisto be clear we could also make the *Under functions more magic19:01
pedronisit wouldn't still cover 100% of the situations though19:02
pedronisso not sure19:02
pedronisit's mostly boot, bootloader that need to care19:02
pedronisijohnson: but yes, feel free to merge if it gets green19:06
ijohnsonpedronis: ack19:09
mupPR snapd#7991 closed: boot: add HasModeenv to Device <UC20> <Created by anonymouse64> <Merged by anonymouse64> <https://github.com/snapcore/snapd/pull/7991>19:20
mupPR snapd#7994 closed: cmd/snap-discard-ns: fix pattern for .info files <Bug> <Simple ๐Ÿ˜ƒ> <Created by zyga> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/7994>19:24
mupPR snapd#7996 closed: overlord/standby: fix possible deadlock in standby test <Simple ๐Ÿ˜ƒ> <Test Robustness> <Created by bboozzoo> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/7996>19:25
mupPR snapd#8000 opened: release: 2.43.1 <Created by mvo5> <https://github.com/snapcore/snapd/pull/8000>19:34
mvocachio: with a bit of luck I can give you 2.43.1 in beta tonight (well, my night :)19:37
cachiomvo, perfecto19:38
cachioI'll monitor the execution once it starts19:38
mvocachio: thank you! just released and baby-sit the build for core now19:39
cachiomvo, nice, you can enjoy your night now :)19:39
mvocachio: almost :) need to trigger the core-beta snap build once the ppa finished building :) but then I will enojoy the night!19:40
ijohnsoncachio: where can I get a version of spread that can boot uc20 images with the PR's that Michael opened? do I just have to build it locally? I seem to remember you telling me about "spread2" that has all the patches we needed20:24
cmatsuokaijohnson: I built it locally, not sure if it's available pre-built20:26
ijohnsoncmatsuoka: sure fair enough. is it just https://github.com/snapcore/spread/pull/96 and https://github.com/snapcore/spread/pull/95 that need to be built into spread to boot uc20 ?20:27
mupPR spread#96: spread: add support for system specific "flags" and use in qemu <Created by mvo5> <https://github.com/snapcore/spread/pull/96>20:27
mupPR spread#95: spread: add support to define a custom bios with the qemu backend <Created by mvo5> <https://github.com/snapcore/spread/pull/95>20:27
cachioijohnson, which PR?20:28
cachio95?20:28
ijohnsoncachio: the PR's I just mentioned, 95 and 96 I think ?20:28
ijohnsonI don't know which PR's are fully needed20:29
cachioijohnson, there is no spread with that20:29
ijohnsoncachio: do I need those PR's to be able to boot uc20 with the ovmf/uefi stuff with the qemu backend?20:30
cachioijohnson, I think just the 9520:31
cachioyou can just build it20:31
ijohnsoncachio: ok I will build locally with 95 then20:31
cachioand use it20:31
ijohnsonthanks20:31
cachioijohnson, np20:31
cmatsuokaijohnson: yes, I used those20:50
cmatsuokaijohnson: one is to use ovmf, and the other is to use virtio? you'll need both, otherwise the system will take 2 minutes to boot20:52
ijohnsoncmatsuoka: thanks yeah I built it with both of those patches21:22
mupPR snapcraft#2875 opened: WIP: split debug information <Created by cjp256> <https://github.com/snapcore/snapcraft/pull/2875>22:30
mupPR snapcraft#2239 closed: WIP: pluginhandler: after building a part, separate debug info from executables and strip them <Created by jhenstridge> <Closed by cjp256> <https://github.com/snapcore/snapcraft/pull/2239>22:48

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!