/srv/irclogs.ubuntu.com/2020/02/21/#snappy.txt

cachioijohnson, hey00:24
cachioI left a comment in the PR00:24
cachiothe issue can be reproduced00:24
* cachio dinner00:35
mupPR snapd#8150 closed: tests: ask tar to speak English <Simple πŸ˜ƒ> <Created by zyga> <Merged by zyga> <https://github.com/snapcore/snapd/pull/8150>01:02
mupPR snapcraft#2951 opened: snap-packaging: remove broken host-compatibility check for runner <Created by cjp256> <https://github.com/snapcore/snapcraft/pull/2951>02:21
mupPR snapd#8173 opened: tests: adding arch-linux execution <Created by sergiocazzolato> <https://github.com/snapcore/snapd/pull/8173>03:08
mborzeckimorning06:19
mborzeckihm https://community.spotify.com/t5/Desktop-Linux/Spotify-Snap-randomly-stopped-working/td-p/490198706:39
mupPR snapd#8172 closed: snapcraft.yaml: add python3-apt, tzdata as build-deps for the snapd snap <Created by anonymouse64> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/8172>07:33
pedronismvo: hi, can you review or get a review for #8130 ?07:34
mupPR #8130: overlord, state: don't abort changes if spawn time before StartOfOperationTime (2/2) <Preseeding 🍞> <Created by stolowski> <https://github.com/snapcore/snapd/pull/8130>07:34
pedronismborzecki: #8136 needs a 2nd review from you07:40
mupPR #8136: boot: write current_kernels in bootstate20, makebootable <UC20> <Created by anonymouse64> <https://github.com/snapcore/snapd/pull/8136>07:40
mborzeckipedronis: hi, will do07:41
mborzeckimvo: morning, evdev sucks, golang-evdev and python-evdev are buggy ;)07:41
mborzeckii'm not sure how libinput author didn'g go crazy07:42
mvopedronis: hey, good morning07:46
mvopedronis: sure, let me review this07:46
mvomborzecki: uh, oh no07:46
mvomborzecki: even for our (relatively) simple use-case it sucks?07:47
mborzeckimvo: yeah, good to use different test systems, the laptop keybiard and VM input device behaves completely differntly than my other keyboard07:48
mvomborzecki: oh, woah07:48
mvomborzecki: I did test with vm and with my thinkpad keyboard and for the simple things I did it was ok but sad to hear that it's so annyoing07:49
mborzeckimvo: some devices emit repeated keys, some do not, so we need to sync the initial state, then we have to actually look at key up/down rather than repeating event07:49
mborzeckialso, golang-evdev SetRepeatRate() is buggy and parameter meaning/order is swapped than what i see in the kernel code that interprets them ;)07:49
mborzecki(same for python-evdev)07:50
mborzeckinonetheless, SetRepeatRate() does nothing with my other keyboard, there's no repeat at all :P07:50
pedronismborzecki: does any of this correlate with reported capabilities or it's random?07:50
pedronisI mean can we know from caps if it does repeat or not?07:51
mborzeckipedronis: no, there's no capability that states that you get repeat events07:51
pedronisok07:51
mborzeckioh, and libinput ignores kernel autorepat events07:51
mborzeckilike totally07:51
pedronisyesterady I was reading something and it sounded like there are hardware auto-repeat, and some at higher levels07:52
mborzeckihttps://gitlab.freedesktop.org/libinput/libinput/blob/master/src/evdev-fallback.c#L537 afaict they synthesize their own events07:52
pedronisand they might even interfere07:52
mborzeckie->value corrsponds to our KeyHold07:53
zygagood morning07:53
mborzeckipedronis: so i'm refactoring this to get the initial state of the keys as libinput does it, and then observe the up event and look at the time key is held07:54
mborzeckizyga: hey07:54
zygaare we low level input engineers now too? :)07:54
mborzeckiand, fwiw the golang-evdev does not include a wrapper to get the initial state of keys :P so had to pull out the ioctls and do it myself07:54
mvomborzecki: hm, if we only get up/down reliable that would make the UX really not nice07:54
mborzeckimvo: right, thus it's check initial state, then observe down if it appears and see if it's down for <n> amount of time07:55
mborzeckiand the goroutine leaks, bc we have the same problem as with netlink socket07:56
mvomborzecki: aha, nice07:56
mvomborzecki: that makes sense07:56
zygamborzecki: do you want my fix for that?07:56
pedronismborzecki: which reminds me, can you review #810107:57
mborzeckizyga: it's not critical, it's a short lived process, but ultimately we'll need a fix, either yours or the Stopper thing07:57
mupPR #8101: netlink: fix/support stopping goroutines reading netlink raw sockets <Created by mvo5> <https://github.com/snapcore/snapd/pull/8101>07:57
zygaack07:57
mborzeckioh, and will have to step out for a bit late to some blood tests07:58
pstolowskimorning08:01
* zyga recalls he has to do blood tests as well but needs to get an appointment first08:02
zygahey pawel08:02
pedronismborzecki: what's the status of #8081 ?08:05
mupPR #8081: tests/main/user-session-env: add test verifying environment variables inside the user session <Simple πŸ˜ƒ> <Created by bboozzoo> <https://github.com/snapcore/snapd/pull/8081>08:05
mborzeckipedronis: it should be good to go08:07
mborzeckilet me merge master there08:07
pedronismborzecki: so it works in other distros but not ubuntu/debian ?08:12
mborzeckipedronis: zsh? yes, there's a lp bug i linked there08:12
mborzeckifwiw zsh has a sh compat mode for loading /etc/profile, it's used on fedora, arch and and probably suse too08:14
mborzeckithe downside is that there's no standard way to do drop-in files for zsh like /etc/profile.d, otherwise we could fix it easily08:15
pedronisyes, that bug doesn't seem to be going anywhere08:15
mborzeckiand it's been there for a while now08:16
zygahmm08:21
zygamborzecki: I'm using zsh on my mac for a while08:21
zygais there really not standard way?08:21
* zyga looks at zsh in Ubuntu08:21
zygamborzecki: can you please review https://github.com/snapcore/snapd/pull/8171 -- the failover test is still causing some pain08:22
mupPR #8171: cmd/snap-failure/snapd: also rm snapd.socket if it still exists <Simple πŸ˜ƒ> <Created by anonymouse64> <https://github.com/snapcore/snapd/pull/8171>08:22
mborzeckizyga: added a note https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/1640514/comments/3008:28
mupBug #1640514: /snap/bin is not added to the PATH when using zsh <patch> <Snappy:Fix Released> <snapd (Ubuntu):Confirmed> <zsh (Ubuntu):Invalid> <snapd (Ubuntu08:28
mupXenial):Confirmed> <zsh (Ubuntu Xenial):Invalid> <snapd (Ubuntu Bionic):Fix Released> <zsh (Ubuntu Bionic):Invalid> <https://launchpad.net/bugs/1640514>08:28
mborzeckidoubt this will help the bug move forward08:28
zygammm08:29
zygayeah, I see08:30
zygaman, everything is hard08:30
* mborzecki has 3 keyboards connected to his pc now08:33
pedronismvo: I reviewed #814208:33
mupPR #8142: client: add support for "ResumeToken", "HeaderPeek" to download <Created by mvo5> <https://github.com/snapcore/snapd/pull/8142>08:33
mupPR snapd#8130 closed: overlord, state: don't abort changes if spawn time before StartOfOperationTime (2/2) <Preseeding 🍞> <Created by stolowski> <Merged by pedronis> <https://github.com/snapcore/snapd/pull/8130>08:33
mvopedronis: nice, thank you08:35
pstolowskiyay, thanks for reviews08:35
pstolowskipedronis: would you like to take a quick look at https://github.com/snapcore/snapd/pull/8120 or can I land (has +2 already)08:36
pstolowski?08:36
mupPR #8120: cmd/snap-preseed: snapd version check for the target <Preseeding 🍞> <Created by stolowski> <https://github.com/snapcore/snapd/pull/8120>08:36
pedronispstolowski: I did skim it08:36
pedronispstolowski: related to reviews, can you finish reviewing #810108:37
mupPR #8101: netlink: fix/support stopping goroutines reading netlink raw sockets <Created by mvo5> <https://github.com/snapcore/snapd/pull/8101>08:37
pstolowskipedronis: i made 2 or 3 comments there08:38
pedronispstolowski: I know, do you want to block it on them?08:40
zygaI need to fetch something, back in 3008:40
pstolowskipedronis: no, it's fine as a potential followup (if the comments make sense at all)08:41
pedronispstolowski: I expect the gc test to be a bit of a pain to write tbh08:41
pstolowskipedronis: i've never played with this aspect in go... wouldn't runtime.GC() make it deterministic for the test?08:45
pedronispstolowski: possibly, somebody has to try08:45
pedronisabout the comment, I'm happy to mention the GC in a follow up, if there no more comments08:46
pedronisI asked mborzecki to review #810108:46
pedronisas well08:46
mupPR #8101: netlink: fix/support stopping goroutines reading netlink raw sockets <Created by mvo5> <https://github.com/snapcore/snapd/pull/8101>08:46
pedronispstolowski: is not just the GC, is also finalizers, I don't remember in which thread they are run08:49
pedronispstolowski: the docs have this to say:  The finalizer is scheduled to run at some arbitrary time after the program can no longer reach the object to which obj points.08:50
pstolowskipedronis: i see, it's tricky, you probably looked at https://medium.com/a-journey-with-go/go-finalizers-786df8e1768708:57
pedronispstolowski: I meand, maybe it's trivial, maybe not08:58
pedronismvo: you have a weird code typo in 8142 now, also made a nitpick suggestion given it needs at least another commit09:04
mvopedronis: I just noticed and force pushed the typo thing, sorry for that09:06
pedronismvo: +1, it needs a 2nd review now, maybe pawel or zygmunt09:12
ackkhi, is the snapd version which supports default tracks targeted to be in focal?09:16
mvopedronis: thank you09:22
mvoackk: yes, we plan to go with 2.4409:22
ackkmvo, nice, thanks09:22
* zyga looks forward to end of winter holidays on Monday09:26
zygamvo: which branch is that?09:26
mvozyga: what branch?09:27
zygato review09:27
mupPR snapd#8154 closed: tests: reset PS1 before possibly interactive dash <Created by zyga> <Merged by zyga> <https://github.com/snapcore/snapd/pull/8154>09:27
mvozyga: 814209:27
ackkmvo, is there an ETA for that? asking since we'd like to have the maas transitional package point to the default track09:28
zygahey ackk09:29
ackkhi zyga09:29
zygaI heard there is some progress on the issue you were long plagued by09:29
zygaI hope we can get to the bottom if ot09:29
zyga*of it09:29
ackkzyga, the snapfuse one? well I can't reproduce it on another machine with 20.04, I hope I can reinstall my laptop soon w/20.04 and test there09:30
mvoackk: 4-5 weeks until it's in stable09:31
ackkotoh mvo sort of managed to reproduce it09:31
ackkmvo, will you also upload to focal? or will it just be in the snapd snap ?09:31
mvoackk: we plan to upload to focal09:33
ackkmvo, awesome, thanks09:35
zygamvo: done09:40
mvozyga: thank you!09:41
mborzeckihmm so, the input seems ot be working09:43
mvomborzecki: yay09:46
mupPR snapd#8101 closed: netlink: fix/support stopping goroutines reading netlink raw sockets <Created by mvo5> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/8101>09:47
mborzeckimvo: heh, it's super ugly ;)09:49
zygapstolowski: https://github.com/snapcore/snapd/pull/8170#discussion_r38249143909:55
mupPR #8170: snap-preseed: support for preseeding of snapd and core18 <Preseeding 🍞> <Created by stolowski> <https://github.com/snapcore/snapd/pull/8170>09:55
pstolowskizyga: ty09:57
mborzeckidamn, i'm late for the blood tests, got to go10:03
mborzeckipushed the changes to #815610:03
mupPR #8156: cmd/snap-bootstrap: subcommand to detect UC chooser trigger <UC20> <β›” Blocked> <Created by bboozzoo> <https://github.com/snapcore/snapd/pull/8156>10:04
pedronispstolowski: I made a comment in 817010:16
pedroniszyga: whats the status of 8133 ?10:17
zygapedronis: I think it is non-essential but I want jamie to look at it first10:18
zygapedronis: after 7614 lands it is no longer needed10:18
zygapedronis: if it doesn't land it may be a factor for device assignment on arch10:18
zygapedronis: but I didn't debug deeper to know10:19
pedroniswhat's the highest priority of these: https://github.com/snapcore/snapd/pulls?utf8=%E2%9C%93&q=is%3Aopen+is%3Apr+review-requested%3Ajdstrand+author%3Azyga10:20
zygapedronis: currently 8123 - jamie was looking at yesterday evening but said he will finish in the morning as priority request came in and he had to stop10:21
zygathen 761410:21
zygaapart from that last one I'm no longer blocked10:21
zygaI'm iterating on 7825 and it will be ready soon10:22
pedronisI labeled the first and I'm tagging 7614 for 2.4510:22
zygathank you10:22
zygathat's great10:22
zygahttps://www.irccloud.com/pastebin/eM7kmuRb/10:23
zygaFAIL: overlord_test.go:694: overlordSuite.TestEnsureLoopPruneAbortsOld10:23
pedronisah fun10:23
pedronispstolowski: ^10:24
zygadarn, my shell still sucks10:24
zygabrb, need to get coffee10:24
zygapstolowski: the PR it failed on changes some C code, not related to any overlord bits10:24
zygabrb10:24
pstolowskipedronis,zyga : ah, overlordSuite.TestEnsureLoopPruneAbortsOld seems flaky, checking10:25
pedronispstolowski switching to take control over the ticker channel is probably the best way forward10:26
pedronisif there's no easy fix10:26
pstolowskipedronis: i can prep a quick PR to bump sleep to 1500 (currently 1000) to match all other overlord tests. then will work on proper change in a followup?10:27
pedronispstolowski: if that helps10:28
pedronispstolowski: I made another comment in 817010:29
pedronisunrelatedly10:29
pedronispstolowski: I made a nitpick comment in 8210, can be taken care in a follow up,  I think it can be merged otherwise10:34
zygaback with coffee10:35
pstolowskipedronis: great, thanks, will do a followup10:35
zygaok, let's fix that shell mistake10:36
zygaand land another big branch :)10:36
mupPR snapd#8174 opened: tests: bump sleep time of the new overlord tests <Simple πŸ˜ƒ> <Created by stolowski> <https://github.com/snapcore/snapd/pull/8174>10:49
zygapstolowski: looking at preseed.sh10:51
zygapstolowski: umount_ubuntu_image can be simplified10:51
zygapstolowski: you can just umount -l "$IMAGE_MOUNTPOINT/sys"10:51
zygapstolowski: or better yet, use mount-tool to iterate over them10:52
zygapstolowski: just nitpick on the code10:52
zygathe part about qemu-nbd is interesting10:52
zygaI need to look at it closer later today if I can10:52
zygapstolowski: and in setup_preseeding, I would add head -n 1 to ensure that find only gives us one result10:53
pstolowskizyga: nice, thanks, i can address this when later (and i didn't forget about the other issue you found in error path of service wrapers, on my list)10:53
pstolowskis/when//10:54
zygapstolowski: sure, just looking at it because it said mount :)10:54
pstolowskiheh10:54
zygaand I'm waiting for spread to prepare to see if my new shell expression is better10:54
mupPR snapd#8153 closed: [RFC] "snap run --explain" with different formating <Skip spread> <Created by mvo5> <Closed by mvo5> <https://github.com/snapcore/snapd/pull/8153>10:55
zygamvo: hey, what's going on with explain there?10:56
zygamvo: I should be able to help soon10:57
zygamvo: this looks important https://bugs.launchpad.net/snapd/+bug/186409610:59
mupBug #1864096: Incomplete search path(s) for xdelta3 executable <snapd:New> <https://launchpad.net/bugs/1864096>10:59
zygamvo: we may be hitting the store for more downloads than necessary10:59
zygapedronis: ^10:59
mvozyga: it's not clear to me how to push this forward or if the pr I just closed is even the right direction so I closed it to avoid wasting ppls time10:59
mvozyga: let me look11:00
zygamvo: can we chat about it (explain) later today11:00
zygamvo: just pull me into a call if you have a moment and feel like it11:00
mvozyga: ok11:00
mvozyga: do you look into this xdelta thing or should I ? should be a simple fix but yeah, agreed that it's annoying11:01
zygamvo: let me, I'm waiting for another cycle of spread11:01
zygayeah11:01
zygamvo: and something for 2.4411:01
zygato save on all the bits over all the fiber11:01
pedronismvo: zyga: there's little point discussion explain without me, I don't think mvo PR was too far off, but it's all in the details at this point11:01
zygapedronis: aha11:02
zygapedronis: is there something we can do to make it progress?11:02
pedronisit's probably best to just sketch the api somewhere with usage examples11:02
pedronisthan modify the full PR11:02
zygak11:02
zygaok11:02
pedronismy issue with the last iteration, is mostly how you had to use explain and start_section independently to into a section, even though conceptually is one thing11:04
mvozyga: if you want you have a look at my latest code, maybe you have creative ideas, anyway, we can have a quick brainstorm to sketch some api11:04
pedroniss/to into/to intro/11:04
mvopedronis: right, yeah, that's a problem11:05
mvopedronis: there could be a _start_section(text) and "explain_indented()". but probaly needs a bit more time to sketch out something. anyway, having a brainstorm with zyga is probably a good idea and then we can get back to you11:06
pedronisok11:07
pedronismvo: also ideally there should be only one function to add a string entry and one for key: value. that probably needs some more state11:09
mvozyga: can we close 8113 now that it looks like we go with 8123 ?11:09
* zyga checks the numbers :)11:09
zygaI don't remember branch names that well11:09
zygamvo: I think so but jamie said he will review both today morning11:10
zygamvo: let's wait one more morning please11:10
zygamvo: he was looking into it last night but something urgent pulled him11:10
mvopedronis: yeah, the in-list could be part of the state, we will explore that11:11
pedronismvo: the point of that it should be hard to add a non "-" prefixed entry in the middle of a list, etc11:11
mvopedronis: ok11:11
mvopedronis: https://github.com/snapcore/snapd/pull/7728/files#diff-e4c8d0c72c7b412376e0a04e6ad4db41R37 is an example where this is mixed11:12
mupPR #7728: cmd: implement snap run --explain <Created by zyga> <https://github.com/snapcore/snapd/pull/7728>11:12
mvoi.e. - Creating new per-snap mount namespace11:12
mvo      desired mount profile: /var/lib/snapd/mount/snap.test-snapd-sh.fstab11:12
mvopedronis: but maybe the output should change11:12
zygabut that's by design11:12
zygathat was what the output was meant to look like11:13
pedronismvo: I don't understand in which sense it's mixed11:13
pedronisthere's a list that containts k: v sections11:13
pedronisthese thing need to next to some extent11:14
pedroniss/next/nest/11:14
mvopedronis: the list-item has a different indent than the following line, that's what I mean11:16
pedronismvo: I'm probably being obtuse, I still don't understand11:17
mvopedronis: let me look at your suggestions with fresh eyes I'm probably just haven't thought it through yet11:18
pedronismvo: I can try to write down a strawman of api signatures, if that helps11:21
pedronismvo: https://paste.ubuntu.com/p/qRvD3thMdz/11:30
mupPR snapd#8120 closed: cmd/snap-preseed: snapd version check for the target <Preseeding 🍞> <Created by stolowski> <Merged by stolowski> <https://github.com/snapcore/snapd/pull/8120>11:38
mvopedronis: thank you11:43
mborzeckire11:51
zygahey maciek11:54
zygahmm11:57
zygaerrtracker tests are failing for me on 20.0411:58
* zyga looks11:58
zygahttps://twitter.com/ubuntu/status/123079531075624550512:00
mborzeckibrace yourselves, bug reports are coming? :)12:02
zygabrb,12:04
mborzeckihmm random unit test failure in overlord ensure loop? https://paste.ubuntu.com/p/3sxTTChNzh/12:09
sdhd-saschahey :-)12:14
sdhd-saschaIs there a way, to do something like that:12:14
sdhd-sascha```12:14
sdhd-sascha$ sudo snap install --dangerous --classic <(wget -q -O- https://github.com/sd-hd/runner-snap/releases/download/v2.165.2-19/runner-snap-v2.165.2-19)12:14
sdhd-saschaerror: cannot open: "/dev/fd/63"12:14
sdhd-sascha```12:14
sdhd-saschaThe problem here seems to be `sudo`12:14
sdhd-saschaWith `root` it works.12:14
zygamborzecki: PaweΕ‚ sent a PR for that failure12:17
mborzeckiah, cool, my mind is still stuck with input and debuild/dpkg -i snapd & ubuntu-core-initramfs loop12:18
sdhd-saschaI can't find a option for sudo, to preserve the file descriptors on fork :-(12:25
sdhd-saschaOh, i found it `sudo -C <num>` . Now i get `sudo: you are not permitted to use the -C option`12:28
sdhd-saschaThank you. I will figure it out now.12:28
pedronissdhd-sascha: either way, snap install takes only snap names or filenames, it doesn't install from stdin12:32
mborzeckihaha, so got the chooser trigger and service into initramfs and in my vm, the initramfs pivots earlier than the trigger is fired ;)12:32
sdhd-saschapedronis the `<( ... )` inside bash, creates a file descriptor12:32
sdhd-saschapedronis: so it's like a local file. But wget is non `sudo/root` but `snap install` is uid=0...12:33
sdhd-saschapedronis if often do this: `diff <(grep ....) <(grep ...)12:34
sdhd-saschapedronis: this is nice:12:35
sdhd-sascha```12:35
sdhd-sascha$ ls -l <(echo "hello world")12:35
sdhd-saschalr-x------ 1 sascha sascha 64 Feb 21 13:34 /dev/fd/63 -> 'pipe:[22821730]'12:35
sdhd-sascha```12:35
zygahmm12:35
zygaanyone here using 20.0412:35
zygaor otherwise, can anyone run errtracker tests?12:35
zygathey keep failing for me and I cannot see why12:35
* zyga digs into that12:38
zygabah, another spread wasted on prune failure12:41
sdhd-saschapedronis: i got it :-)12:55
sdhd-saschaI added this line to /etc/sudoers: `Defaults        closefrom_override`12:55
sdhd-saschaThen this works:12:55
sdhd-sascha`sudo -C 99999 snap install --dangerous --classic <(wget -q -O- https://github.com/sd-hd/runner-snap/releases/download/v2.165.2-19/runner-snap-v2.165.2-19)`12:55
sdhd-saschaThank you :-)12:55
pstolowskicachio: hi, have you enabled manual/preseed test in nightly?13:08
zygagaah13:11
zygaI debugged it13:11
zygamissing mocking13:11
mupPR snapcraft#2948 closed: Regenerate the GDK pixbuf loaders cache file if for whatever reason it isn't there (LP: #1863801) <Created by oSoMoN> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/2948>13:17
zygalp times out13:19
zygaeh13:19
zygaok13:19
zygaI'm parking this for now: https://bugs.launchpad.net/snapd/+bug/186419713:20
mupBug #1864197: errtracker unit tests interact with real whoopsie.service <snapd:New> <https://launchpad.net/bugs/1864197>13:20
=== pedronis_ is now known as pedronis
sdhd-saschaCan i give snapcraft a default configuration for a snap? Or better use hooks for setting them ?13:20
sdhd-saschaWait. I ask on #snapcraft. Sorry13:22
zygasdhd-sascha: 1) no 2) it could13:23
sdhd-saschazyga: thank you :-)13:23
mupPR snapd#8175 opened: store: rely on CommandFromSystem snap to find xdelta3 <Created by zyga> <https://github.com/snapcore/snapd/pull/8175>13:28
zygamvo: I opened https://github.com/snapcore/snapd/pull/8175 as draft, I have a small second patch that improves CommandFromSystemSnap but it's not essential13:29
mupPR #8175: store: rely on CommandFromSystemSnap to find xdelta3 <Created by zyga> <https://github.com/snapcore/snapd/pull/8175>13:29
zygapstolowski: master is broken on TestEnsureLoopPruneAbortsOld13:30
zygapstolowski: what's the state of your PR, I see it is yellow13:30
pstolowskizyga: PR is already up but fails on random stuff13:30
zygawhich stuff?13:30
pstolowskizyga: timed out on prepare13:31
zygaaha13:31
zygaoh well :)13:31
pedronismvo: I did a pass on #8100, the main issue there is how we name things13:36
mupPR #8100: httputil: add support for extra snapd certs <Created by mvo5> <https://github.com/snapcore/snapd/pull/8100>13:36
zygapstolowski: do you know why it got worse?13:39
zygaI see it now even in travis-ran quick run of tests13:39
zygaeven before spread starts13:39
pstolowskiwhat do you see? the failure of TestEnsureLoopPruneAbortsOld?13:40
zygayes13:40
zygahttps://github.com/snapcore/snapd/pull/8175 look here https://travis-ci.org/snapcore/snapd/builds/65345512113:40
mupPR #8175: store: rely on CommandFromSystemSnap to find xdelta3 <Created by zyga> <https://github.com/snapcore/snapd/pull/8175>13:40
pstolowskizyga: i didn't get worse, it landed yesterday and we probably were lucky. I used 1000ms timeout instead of 1500 like every other test does in this testsuite13:40
zygammmm13:41
zygaI see13:41
zygaok13:41
zygalet's fix that with spread pass-through maybe13:41
zygait's super annoying when master breaks and we restart everything like a stuck computer13:41
pstolowskizyga: ok, added the label although i wonder what happens after it already is in progress. perhaps it needs to pass anyway ;). it would only help on opening the pr?13:43
zygadunno13:43
zygawe'll find out13:43
zygathank you! :)13:43
sdhd-saschaShould `snapctl get <key>` return an error, if the key does not exist ? Maybe as additional param ?13:55
sdhd-sascha`parts/snapd/src/overlord/hookstate/ctlcmd/get.go`13:55
sdhd-saschaThen i could use on bash this: `user=$(snapctl get --errror-on-missing || echo "root")`13:55
sdhd-saschai mean: `user=$(snapctl get --errror-on-missing userkey || echo "root")`13:55
zygapstolowski: it is in14:00
pstolowskizyga: great; did it pass?14:00
zygait got green14:01
mupPR snapd#8174 closed: tests: bump sleep time of the new overlord tests <Simple πŸ˜ƒ> <Skip spread> <⚠ Critical> <Created by stolowski> <Merged by zyga> <https://github.com/snapcore/snapd/pull/8174>14:01
zygabut I didn't look14:01
zygaI just want it in, we can iterate more now14:01
zygapstolowski: it did pass14:01
zygapstolowski: it ran a full iteration of tests14:01
pstolowskigood14:01
pedronismborzecki: #6708 seems to have a real failure atm14:37
mupPR #6708: tests/main/buildmode: verify usability of PIE hardening for deb packages <β›” Blocked> <Created by bboozzoo> <https://github.com/snapcore/snapd/pull/6708>14:37
pedronisijohnson: what's the status with #8152, will push more to it? should we close it until it's more ready?14:38
mupPR #8152: managers_test: add uc20 kernel snap update happy and panic tests <Test Robustness> <UC20> <Created by anonymouse64> <https://github.com/snapcore/snapd/pull/8152>14:38
ijohnsonpedronis: it's fine to close it I need to push more changes to it, but it will likely look different14:38
pedronisijohnson: then better to close it, there is still quite a chain behind it anyway14:39
pedronisafaiu14:39
ijohnsonyes, also I'll close 8151 too14:39
mupPR snapd#8151 closed: cmd/snap-bootstrap/initramfs-mounts: only write modeenv if it changed <Simple πŸ˜ƒ> <UC20> <Created by anonymouse64> <Closed by anonymouse64> <https://github.com/snapcore/snapd/pull/8151>14:40
ijohnsonpedronis: are you going to close it or should I?14:40
jdstrandzyga, pedronis: fyi, finish PR 812314:41
mupPR #8123: interfaces/network-control: bring /var/lib/dhcp from host (approach b) <Bug> <Security-High> <Created by zyga> <https://github.com/snapcore/snapd/pull/8123>14:41
zygajdstrand: ack14:41
zygajdstrand: can we close the (a) variant now?14:41
jdstrand(I did PR 8113 yesterday)14:41
mupPR #8113: cmd/snap-confine: bring /var/lib/dhcp from host, if present (approach a) <Bug> <Created by zyga> <https://github.com/snapcore/snapd/pull/8113>14:41
jdstrandzyga: I think you need to read my PR review :)14:41
zygaok14:41
zygajdstrand: this PR will create /var/lib/dhcp on the host when it exists14:42
zygadid you mean to say14:42
zygawhen it not exists?14:42
zygaor do I parse that wrong?14:42
jdstrandzyga: typo, reload14:42
zygaok14:42
jdstrandso, my opinion on closing 8113 is that it is up to you. 8123 can be made ok, but perhaps it should come later14:45
zygaI see, I have no strong preference to either - I did (b) based on a comment on (a) -14:45
jdstrandzyga: the future is definitely b14:46
pedronison that agree14:46
pedroniswe really want to move to the style of b14:46
zygaI only have one thing that I feel stronger about - if the interface promises write access to $foo and $foo is a read only empty place-holder in the core snap we have a problem - it needs to be resolved somehow14:46
jdstrandzyga: but up to your team's priorities on how to tackle it14:46
pedronisbecause things in snap-confine don't scale14:46
zygaI think in this case making the directory is the actual correct thing to do, even if that's perhaps a new thing snapd does14:46
* ijohnson goes to close #815214:47
mupPR #8152: managers_test: add uc20 kernel snap update happy and panic tests <Test Robustness> <UC20> <Created by anonymouse64> <https://github.com/snapcore/snapd/pull/8152>14:47
zygaas for the rest, I'll read the feedback carefully14:47
zygaI'll discuss with pedronis and mvo as to what to do for 2.4414:47
zygaand beyond14:47
jdstrandzyga: that bit about auto ns rules is just me thinking out loud14:47
jdstrandI feel pretty strongly that we shouldn't leak the dir creation to hostfs14:47
zygajdstrand: but that's the actual intent, to interact with the host - that's how I understand the interface14:48
zygaotherwise access to /var/lib/dhcp is meaningless because there is nothing there14:48
jdstrandzyga: but the act is hollow. there is nothing on the host looking at /var/lib/dhcp14:48
mupPR snapd#8152 closed: managers_test: add uc20 kernel snap update happy and panic tests <Test Robustness> <UC20> <Created by anonymouse64> <Closed by anonymouse64> <https://github.com/snapcore/snapd/pull/8152>14:48
zygajdstrand: the question is time, yet, perhaps the snap will put files there and users will follow docs to go and find them14:49
pedronisjdstrand: notice though that the directory could be created in the host later than connection time14:49
zygajdstrand: perhaps later on classic app goes to loop14:49
zygajdstrand: it's not such clear cut IMO14:49
jdstrandzyga: the snap can put anything it wants there. the *host* is not looking at them14:49
jdstrandzyga: we aren't trying to create an alternate storage location, we're trying to let the snap interact with the host via things in this dir14:49
zygajdstrand: perhaps a monitoring solution does, you can install dhcpd from a snap and tie it to something else; I think it's not out of the question that is a possible use case14:50
jdstrandzyga: a dhcpd snap is going to use content then14:50
pedroniswell the interface gives rw access under there14:50
zygaI think we need to consider three options: 1) change the interface so that this is not a problem 2) do not create the directory 3) create the directory14:51
zygaand pick something sensible out of that set14:51
pedronisjdstrand: to be clear not creating it is fine, but what if it gets created in the host after the interface was connected?14:51
jdstrandI don't know how else to say it. the apparmor rules are there because at one time they meant something. on a system without /var/lib/dhcp, they don't mean anything14:52
zygapedronis: interface connection creates it on the host14:52
zygapedronis: it's really visible in /var/lib/dhcp that's the logic of (b) now14:52
pedroniszyga: yes, but jdstrand doesn't want that behavior14:52
zygaah14:52
pedronisbut what behavior does he want14:52
zygasorry, I misunderstood your question14:52
pedronisin that case14:52
jdstrandeg, on a system with no /var/lib/dhcp, the snap starts, the dir is created, it puts a lease file in there. *nothing* on the host will do anything with *anything* the snap puts in there14:53
jdstrandit is a hollow act14:53
zygajdstrand: sure but maybe that's good enough14:53
zygajdstrand: because users are trained to look there14:53
jdstrandif the dir exists, the monitor might be looking for things in there that will *never* come14:53
zyga(e.g. admins)14:53
jdstrandhuh?14:53
zygajdstrand: I can install core system14:53
zygajdstrand: install a dhcp solution there14:53
zygajdstrand: and get it to operate my network14:53
zygajdstrand: I can go to /var/lib/dhcp14:53
zygaand even though it wasn't there before, I see files the snap has put there14:54
jdstrandzyga: that is a totally different thing14:54
zygalogs, leases, etc14:54
zygajdstrand: (on second though that system could be either core or classic)14:54
jdstrandzyga: this is about implied plugs, you are talking about a slot14:54
mvozyga: in a meeting right now, will try to read backlog14:54
zygajdstrand: I think I'm talking about neither - just the user experience of installing a snap and seeing lease files in a familiar location14:54
zygajdstrand: but perhaps I don't understand your point of view14:54
zygajdstrand: because I think I'm saying the same thing now14:55
jdstrandzyga: the user experience is already different on a system without a dhcpd solution. there is no /var/lib/dhcpd14:55
jdstrandzyga: that is the implied case, which is all network-control implements14:56
jdstrandzyga: a slot implementation for dhcpd would either need a new interface or network-control adjusted accordingly to be either implied or slot provided14:56
zygajdstrand: I think the question is, if you have no /var/lib/$foo and a snap managing it is installed, should it see a private copy of $foo and the host is not altered or not14:57
zygajdstrand: isn't dhcpd just a network socket? you can probably implement one with network-bind already14:57
zygajdstrand: I can see a point where /var/lib/$foo is really stored in $SNAP_DATA14:57
zyga(and layouts can be used to make the per-snap view more familiar)14:58
zygabut I can also counter that to say that we give snaps host access for a reason (there are specific interfaces and implicit mounts performed by snap confine)14:58
zygaI really think it's not a correctness POV just a policy of what we want to do14:59
zygaeither way is fine if we are consistent and it is documented well14:59
pedronisjdstrand: anyway, you haven't answered what is your expectation, if the directory gets created host side after a snap is connected. should we just ignore this, should we monitor creation and try to patch the rules and namespace after the fact?14:59
jdstrandjdstrand: ime, it doesn't make sense for an *implied* plugs interface to create a dir. the implied interface is about interacting with core or classic. by definition, if /var/lib/dhcp doesn't exist on core/classic, there can be no interaction with core/classic via /var/lib/dhcp14:59
zygajdstrand: for the record, it does exist on core but some classic distributions do not have it in the images we use15:00
jdstrandpedronis: I put in the PR a suggestion. I think we need the equivalent behavior of .is_optional. ie, at runtime, snap-update-ns sees if it exists, if it does, cool, do what is in the PR now. if not, move along15:01
jdstrandzyga: that's fine. it is probably a bug on core if it ships the directory but isn't using it, but that is a different issue15:02
zygajdstrand: we can do that, though creation on the host is not monitored by anything so it would not be "plugged" into the app at a later stage until some other mount operation did it by coincidence15:02
zygajdstrand: it works on core16 + core16 because of implicit sharing15:02
zygajdstrand: it is broken on core18 because then sharing is not automatic (hence (a) was quickly made)15:03
zygathat's just for context, it's not changing what you said15:03
jdstrandzyga: snap-update-ns may need to be updated then, sure. this is getting at why I thought 8113 first would at least fix the bug. we already have thought about this by introducing .is_optional btw. with 8123, we just need to think through what the right implementation would be for when to perform the mount15:04
zygajdstrand: I understand, I think for that we'd need a component to monitor directories and react (snapd, inotify, etc) but it's somewhat fragile and racy by its very nature (100% uptime of said component)15:05
zygabut we could come up with something15:05
jdstrandzyga: basically, my suggestion is that the PR is as it is now, but with snap-update-ns being modified to know when to check for dir existence and skip the creation if it doesn't15:05
zygaI wonder what the snap should see before that directory exists on the host15:05
zygaan empty directory from the base?15:05
jdstrandzyga: I didn't see it as that complicated, but maybe I am being naive15:05
zygajdstrand: I understane15:05
zyga*d15:06
jdstrandzyga: eg, snap-update-ns on first run/after discard does the check and skips if not there15:06
jdstrandzyga: that would by 'enough' for me to approve the PR. trying to handle avoiding a snap-discard-ns after someone installs dhcpd via deb/rpm could be a later step. of, snap-update-ns notices that it now exists but there is a mount namesapce, so it dtrt15:08
pedroniszyga: I don't think we need to monitor directories until somebody really needs it15:08
jdstrands/of,/or,/15:08
pedronisdchp is not such a case15:08
zygamhm15:08
jdstrandpedronis: ?15:08
pedronisI was answering to: zyga> jdstrand: I understand, I think for that we'd need a component to monitor directories and react (snapd, inotify, etc) but it's somewhat fragile and racy by its very nature (100% uptime of said component)15:09
jdstrandI don't think we need a monitor15:09
zyganote that technically handling it like .is_optional is not hard, if that's the semantics we are after I can make the changes easily15:10
zygaif that's the agreement I will get to work15:10
jdstrandI mean maybe we could, it is not that different from connecting a content interface I guess, but it doesn't seem unreasonable to restart the snap if dhcpd is installed after the fact. that is up to you. we don't really doing anything that I am aware of with already running snaps when things change in other things exposed via implied interfaces15:11
pedronisI think it works for now, there may be use cases where it doesn't make sense, but shouldn't stop to progress a bit15:11
jdstrand(and by restart the snap, I am saying that is user-driven, not snapd)15:11
pedronisI mean that doing what is_optional does15:11
zygaack15:11
zygasure, I'll make that happen15:11
pedronishow close is a) to land?15:12
zygaa) could land now I guess15:12
zygaI can undo a) in an iteration of b)15:12
zygalet me double check15:12
pedronisjdstrand: I don't see a review by you in a) ?15:12
pedroniszyga: jdstrand: anyway I would be fine landing a) in 2.44 and trying to aim for b) in 2.4515:13
jdstrandpedronis: I will approve now. I didn't yesterday (I left a comment) because I didn't want a second approval to accidentally imply 'merge me now'15:13
zygaok15:13
pedronisassuming a) gets 2 +115:13
zygathat's fine with me, we fix the bug for 2.44 and make it nicer as we move on, most of the code in (b) is good, there's a small improvement on how some bits are computed that Jamie suggested and a few tweaks to implement is_optional semantics15:14
zygaand a revert of a)15:14
zygaand we should be able to have it next week15:14
zygaare we in agreement?15:14
jdstrand8113 is approved15:14
jdstrandzyga: note, those auto-rules aren't a requirement. it just feels like a missed opportunity, but maybe with more thought, we can't (or we can only do some safely)15:15
* jdstrand is fine with whatever you decide in terms of priorities15:16
zygaI suspect we can. Your comment there was spot on. It will be hard to understand in a short while otherwise15:16
pedronisanyway that comment is why I think it feels like 2.45 material15:17
jdstrandthat was my feeling as well, but again, I defer15:17
pedronisit would be good to make doing such things reasonable15:17
pedronis /readable15:17
zygaYes I think that’s a worthy goal :-)15:17
zygaOk I think we are in agreement now15:18
zygaI take your silence as a yes15:18
jdstrandwhile we are in agreement, I will also mention since you said this is actually a cross-distro thing, that if snapd created /var/lib/dhcp, a fedora/arch/whoever user would probably file a bug asking why snapd is littering the filesystem15:20
jdstrand(I can almost read the report in my head ;)15:20
jdstrandso it is good to avoid that bug as well :)15:20
pedronisI moved b to 2.4515:20
zygajdstrand: I’m not sure. It’s just the package selection we have. Installing some other bit in those systems would create that directory15:20
jdstrandzyga: right, but if they *don't* install it but snapd is just putting it there, I can easily see someone complaining15:21
zygaYeah, but only when connecting to something that might use it15:21
zygaNot just out of the box15:21
jdstrandregardless, we are in agreement for other reasons so my thoughts on avoided potential bugs doesn't really mean anything :)15:22
zygaYes!15:22
zygaI’ll get to it after current branches move15:22
* jdstrand has a *lot* of experience with rather, shall we say, opinionated users in dealing with triaging random bugs flagged as security in Ubuntu ;)15:23
jdstrandperhaps I'm jaded... :)15:23
* cachio lunch15:24
jdstrandanyway, cool15:25
jdstrandagain, sorry it took awhile to get to these. while 8113 and 8123 weren't terribly time consuming, they were behind 7825 and I needed a big hunk of time for that one that was really hard to find15:25
jdstrand7980 needed a fair chunk as well15:26
jdstrandanyhoo, past all those. unfortunately, there are other big ones in my list...15:26
jdstrandbut hey, it is all before 2.44 so... :)15:26
jdstrand(not to mention 8165 that floated in. coverity is really awesome, but investigating its findings takes time)15:28
zygaOh, about that the Coverity is confusing and there are 3 things from the scan in 201715:32
zygaI’ll fix them next week15:32
zygaThey are shown in a different list15:32
zygaback from dinner15:54
mupPR snapd#8113 closed: cmd/snap-confine: bring /var/lib/dhcp from host, if present (approach a) <Bug> <Created by zyga> <Merged by zyga> <https://github.com/snapcore/snapd/pull/8113>15:56
mupPR snapd#8175 closed: store: rely on CommandFromSystemSnap to find xdelta3 <Created by zyga> <Merged by zyga> <https://github.com/snapcore/snapd/pull/8175>15:56
zygajdstrand: one more thing, do you think you can quickly look at https://github.com/snapcore/snapd/pull/8133 and tell me if that's something we should even do - it pops up on arch with apparmor when using device assignment15:57
mupPR #8133: cmd/snap-confine: allow snap-confine to load nss libs <β›” Blocked> <Created by zyga> <https://github.com/snapcore/snapd/pull/8133>15:57
zygajdstrand: the diff is just 5 lines of snap-confine profile15:57
jdstrandyeah, I planned to15:57
zygaI'm somewhat meh, probably not worth it but I don't have arch and didn't see it myself15:57
zygaand it will go away with the changes in snap-confine anyway15:58
zygathanks!15:58
* zyga is down to 1115:58
jdstrandzyga: I have an opinion and context for it15:59
* jdstrand is responding15:59
zygathanks!15:59
zygahttps://github.com/snapcore/snapd/pull/8171 needs a 2nd review16:03
mupPR #8171: cmd/snap-failure/snapd: also rm snapd.socket if it still exists <Simple πŸ˜ƒ> <Created by anonymouse64> <https://github.com/snapcore/snapd/pull/8171>16:03
zygacachio: can you rebase https://github.com/snapcore/snapd/pull/817316:04
mupPR #8173: tests: adding arch-linux execution <Simple πŸ˜ƒ> <Created by sergiocazzolato> <https://github.com/snapcore/snapd/pull/8173>16:04
zygapedronis: I summarized the discussion on https://github.com/snapcore/snapd/pull/8123#issuecomment-58971912816:07
mupPR #8123: interfaces/network-control: bring /var/lib/dhcp from host (approach b) <Bug> <Created by zyga> <https://github.com/snapcore/snapd/pull/8123>16:07
mborzeckimvo: pedronis: slightly meh, but i added Before=console-conf@tty1 and changes the service to Type=oneshot, consoleconf now waits for trigger to exit, so we don't have to stop it explicitly, the downside its that console-conf start is delayed by the amount of time we wait for the trigger16:11
mupPR snapcraft#2951 closed: snap-packaging: remove broken host-compatibility check for runner <Created by cjp256> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/2951>16:12
mvomborzecki: I think that's not too bad, how long do we wait?16:12
pedronismborzecki: yea, we'll need to rethink this but for now at least is correct16:12
mborzeckimvo: i can set the deafult timeout to say 10s, and the key must be held for 2s to trigger the event, upon which it exits right away, so if you hold the key the delay isn't as problematic16:13
jdstrandzyga: done16:13
zygaI read16:14
zygathanks16:14
zygathat's my understanding as well16:14
zygaI'll flip it around and merge with your implicit approval, is that okay?16:14
jdstrandzyga: well, I requested changes. just ping me and I'll scan/approve16:15
jdstrandit is still morning here so I'm not going anywhere for a while :)16:15
zygajdstrand: ack16:16
zygaI'll just do it now16:16
zygajdstrand: done16:18
jdstrandzyga: well, sorry, but I'd prefer them at the every end with the other explicit denials. having it here clutters that section16:19
zygajdstrand: sure16:20
jdstrandthanks!16:20
* jdstrand is poised to approve16:20
zygadone16:21
ijohnsoncachio: let me know if you want me to remove the changes adding snap-auto-import-asserts-spools, snap-auto-import-asserts and snap-auto-mount tests for ARM devices, I'm happy to enable those later and land #8140 sooner, I'm adding your requested changes now16:21
mupPR #8140: tests: enable more tests for UC20/UC18 <Test Robustness> <UC20> <Created by anonymouse64> <https://github.com/snapcore/snapd/pull/8140>16:21
* zyga high-fives jdstrand for fast review cycles :)16:21
ijohnsoncachio: I made the other changes except for the uc20 arm model names, do we know what those model names will look like? will it be the same as the uc18 ones just with s/18/20/ ?16:24
mupPR snapcraft#2950 closed: meta: Snap to_dict() cleanup <Created by cjp256> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/2950>16:27
* zyga breaks for a moment to let the laptop charge and back up16:28
jdstrandzyga: done16:30
jdstrand 516:30
jdstrando/16:30
zyga:-)16:36
cachioijohnson, nice16:45
cachioyes, I prefer to enable those tests later for arm16:45
ijohnsoncachio: ack16:50
ijohnsonDid you see my questing about the name of the arm model16:50
cachioijohnson, no yet, I am with amazon linux, I'll see that in 5 minutes16:52
ijohnsonSure no rush16:53
zygapstolowski: https://github.com/snapcore/snapd/pull/8170/files#diff-eb9825aa18d9bbbcc41ca31728af8157R88 still needs work, right?16:55
mupPR #8170: snap-preseed: support for preseeding of snapd and core18 <Preseeding 🍞> <Created by stolowski> <https://github.com/snapcore/snapd/pull/8170>16:55
zygaI am on child care service now16:55
zygafingers crossed she doesn't wake up for a few hours16:56
zyga$wife and $kids went for groceries now16:56
pstolowskizyga: yes, it needs work16:56
zygaok16:56
zygapedronis: does this ring a bell?17:07
zyga Feb 20 20:41:39 jbl-ThinkPad-P53 snapd[1101]: stateengine.go:150: state ensure error: devicemgr: cannot resolve prerequisite assertion: account (EH9A6Xg1QtCjYt4v3QlBVTPLAHDvEIn6)17:07
cachioijohnson, answered17:08
pedroniszyga: what's the context17:08
ijohnsonthanks cachio17:08
cachiobut no idea17:09
zygapedronis: https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/186411317:09
mupBug #1864113: snapd.seeded.service never starts <amd64> <apport-bug> <focal> <rls-ff-incoming> <snapd (Ubuntu):Confirmed> <https://launchpad.net/bugs/1864113>17:09
zygapedronis: seeded never completes17:09
pedronissomebody didn't build the seed properly17:10
zygathis is focal server ISO17:10
zygaperhaps we need to ping foundations?17:10
pedronisyes17:11
zygashould I reach out to steve?17:11
pedronisI don't know, it's not snapd bug though17:11
pedronisit's an image bug17:11
mborzeckiidk if it's related but built core20 and the install got stuck and never completed17:11
cachioijohnson, perhaps we could just skip the test on uc20 until we have the names17:12
ijohnsoncachio: I think I'll just have the test be skipped on uc20 arm17:12
ijohnsonpedronis: zyga: sounds like the issue that was just reported in #snappy-internal a while ago17:13
zygaaha, thank you, I'll check17:13
cachioijohnson, makes sense, thanks17:15
mborzeckiwondering whether we should limit the chooser only to specific ttys eg. tty1 & ttyS017:16
pedronismborzecki: that's what I asked17:16
pedronisit should be at least an option at some point17:17
mborzeckiok, so i've got the patches for subiquity, ubuntu-core-initramfs, core20 and snapd now17:18
mborzeckithere's one weird sceanrio when i'm trying to invoke the chooser when the system boots right after install, for some reason the chooser-trigger service does not start consistenty17:19
mborzeckibut it's just fine on subsequent boots17:19
mborzeckinvm, more on monday probably17:19
mupPR snapd#7980 closed: packaging,snap-confine: stop being setgid root <Created by zyga> <Merged by zyga> <https://github.com/snapcore/snapd/pull/7980>17:24
zygathat's in, woot17:29
ijohnsonnice zyga so that's the last of the opensuse requested changes ?17:33
zygaijohnson: close17:33
zygaijohnson: there are a few more, I need to revisit17:33
zygawe need to fix SNAP_COOKIE17:33
zygaijohnson: they also asked for a group to control snap-confine executability17:33
ijohnsonzyga: ah right I remember this now too17:33
zygaso that it's group executable only17:33
zygaI think that's a low hanging fruit17:33
zygajdstrand: ^ right? snap-confine being root:snapd-users and only g+x17:34
zygaijohnson: I may apply that last bit in a suse specific patch though17:34
zygaand there's the issue of +s snap-confine in core17:34
jdstrandotoh, I do seem to remember that17:34
mupPR snapd#8176 opened: tests: adding amazon linux to google backend <Created by sergiocazzolato> <https://github.com/snapcore/snapd/pull/8176>17:35
jdstrand4750 root:something17:35
zygaI need to look if I can mount core without setuid root17:35
zygajdstrand: mhm17:35
pedroniszyga: I fixed SNAP_COOKIE17:35
zygapedronis: oh, cool, I didn't know that17:35
pedronisI think17:35
zygaI'll go through their review next week and update the bug on monday17:35
zygabut I think this is a hell lot closer now :)17:36
jdstrandzyga: we probably need some niceties in snap run to fail gracefully in that environment for people not in the group17:36
zygajdstrand: indeed17:36
jdstrandzyga: or at least, double check it :)17:36
zygajdstrand: but fortunately that's in snap-run so not security critical and can be easily made to be nice17:36
pedroniszyga: jdstrand: https://github.com/snapcore/snapd/blob/master/overlord/snapstate/cookies.go#L15217:36
zygathat's great!17:36
zygaThanks for the reference, I'll use it in the review of their review17:37
pedronisand https://github.com/snapcore/snapd/blob/master/randutil/crypto.go17:37
jdstrandzyga: yep17:37
* cachio afk - doc appointment17:37
mupPR snapcraft#2932 closed: elf: resolve paths in `ldd()` to purge relative path components <Created by cjp256> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/2932>18:27
mupPR snapd#8177 opened: cmd/snap-bootstrap/initramfs-mounts: mount the snapd snap in run-mode too <UC20> <Created by anonymouse64> <https://github.com/snapcore/snapd/pull/8177>19:08
mupPR core20#22 opened: run-snapd-from-snap: don't try to load a snapd snap from the seed anymore <Created by anonymouse64> <https://github.com/snapcore/core20/pull/22>19:11
sdezielhello, I'm trying to export a custom variable for a snap but can't find how/where to do that19:23
ijohnsonsdeziel: you mean in a snap you are developing?19:25
sdezielijohnson: no, sorry I was not clear. I want to export it in a snap I *use* (chromium to be precise)19:30
ijohnsoncan you just do `VAR=thing chromium` ?19:30
ijohnsonerr is there a reason you can't just do that ?19:30
sdezielideally, it would work when I click the chromium's icon19:30
sdezielijohnson: I was thinking of something like /etc/environments in the snap's FS19:31
ijohnsonAFAIK, /etc/environment should work for snaps too19:31
sdezielright but that's system-wide, not snap specific19:32
ijohnsonHmm, I don't think we have something like that that's per-snap and per-installation. Since you want it when you click an icon, you might be able to fiddle with the desktop file19:34
sdezielijohnson: isn't the desktop file recreated on every snap refresh?19:36
ijohnsonhmm perhaps they are. I'm not super familiar with how desktop files work, perhaps you could ask someone in #ubuntu-desktop ?19:39
sdezielijohnson: "MESA_GLSL_CACHE_DISABLE=true chromium" didn't run which I would be inclined to think is normal assuming there is some env scrubbing going on19:45
sdeziels/didn't run/didn't work/19:45
ijohnsonhmm that's odd19:46
ijohnsonthat works for me:19:46
ijohnsonhttps://www.irccloud.com/pastebin/v4uNy7Ru/19:46
ijohnsonand if I try that with the chromium snap it works too, at least with --shell.19:46
ijohnsonit's possible that the chromium snap specifically is doing some sort of env scrubbing19:47
sdezielijohnson: my bad, I had another chromium instance running which prevented the flag to be picked19:47
sdezielit does work to use that var=$val prefix19:47
sdezielijohnson: thanks for your help btw19:51
ijohnsonnp happy to help, good luck with the desktop icon thing19:52
sdezielijohnson: I do have a workaround but I still believe it's not a special edge case to want to export vars per-snap. Any idea where I could make that wishlist request?19:53
ijohnsonyou could file a bug at bugs.launchpad.net/snapd or you could make a forum post at forum.snapcraft.io about it19:53
sdezielthx19:54
sdezielto close the loop: https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/186424020:03
mupBug #1864240: [wishlist] allow setting per-snap environment variables <snapd (Ubuntu):New> <https://launchpad.net/bugs/1864240>20:03
sdezielthanks again ijohnson, have a nice weekend!20:04
NickZpedronis: what's up with this? Are we getting this in the near future? https://github.com/snapcore/snapd/pull/749020:42
mupPR #7490: interfaces/app-launch: support confined snaps launching other snaps <Needs Samuele review> <Created by AlanGriffiths> <Closed by pedronis> <https://github.com/snapcore/snapd/pull/7490>20:42
mupPR snapcraft#2940 closed: build providers: remove use of cloud-init <Created by sergiusens> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/2940>20:54
NickZI'm having issues with my snaps; It seems that it's not actually registering my apps with their associated file types, even though I have specified the Mime types in the desktop file. Has anyone else gotten this working?21:14
zygajdstrand: store rejects new snap-confine mode21:29
zygaJust FYI21:29
jdstrandah, yes, it would21:29
* jdstrand adjusts tools 21:29
jdstrandzyga: where are you seeing this? core? core18? core20? snapd? all of the above?21:30
zygaI got a mail https://launchpad.net/~snappy-dev/+snap/snapd-master/+build/84377921:31
zygaBut probably snapd and core need rule updates21:31
ijohnsonjdstrand: I assume that this will be for just snapd and core snaps, core18 and core20 don't ship snap-confine21:31
zygaCore18 and core20 are devoid of snapd21:31
jdstrandijohnson: ah, yes. thanks21:32
zygaThank you Jamie. I didn’t think about this beforehand21:32
* cachio afk21:41
kinghatsnaps take a while to start up but subsequent launches of the same app are "snappy". does that mean they are held in memory or how does that work?21:52
roadmrkinghat: which snap?21:54
zygakinghat: snap install snapd-hacker-toolbelt21:59
zygakinghat: time snapd-hacker-toolbelt.busybox true21:59
zygakinghat: time snapd-hacker-toolbelt.busybox true21:59
zygakinghat: I can answer your questions later if you stay on IRC (or hop back tomorrow)21:59
zygaas it's 11PM here22:00
kinghatroadmr: most all of them. though i just started htop and it was "snappy". postman wasnt.22:00
roadmrπŸŒƒ22:00
roadmrkinghat: well htop is a CLI application while postman is graphical (IIRC) and there were some issues with e.g. font caches needing regeneration for graphical snaps. So the slow first startup time is due to e.g. fonts being rebuilt, and subsequent runs are faster because fonts are built :) snaps are not cached in memory, at least not beyond possibly OS-managed disk caching22:01
kinghatchromium too. most of my snaps take time to load initially then are fine after until im in a new session.22:01
roadmrkinghat: note I say "were", as I thought it had been fixed22:01
roadmrhttps://forum.snapcraft.io/t/improving-first-run-performance-of-desktop-app-snaps/294422:02

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!