[08:45] <eoli3n> Hi
[08:46] <eoli3n> i have a strange behaviour, i use ldap auth and logins are mail adresses (i know that it is not great, not my decision)
[08:47] <eoli3n> when i try to log with for exemple username.lastnamelastnamelastname@domain.fr on tty
[08:47] <eoli3n> it doesn't ask for password
[08:47] <eoli3n> i can't find the rule
[08:47] <eoli3n> if you remove the dot
[08:47] <eoli3n> usernamelastnamelastnamelastname@domain.fr, it asks for password
[08:48] <seb128> RikMills, hey! we have a poppler transition started, any chance you could look at what calligra and kitinerary (and maybe scribus?) need to build with it? (simple rebuild failed)
[08:48] <RikMills> seb128: already looking :)
[08:48] <eoli3n> any idea what's limit that ?
[08:48] <seb128> RikMills, great, thanks!
[08:49] <RikMills> np
[08:50] <eoli3n> just try to enter that exact username on tty "username.lastnamelastnamelastname@domain.fr"
[08:51] <eoli3n> and you will see that something resets
[12:01] <andrewsh[m]> hi
[12:02] <andrewsh[m]> dear Ubuntu developers, why is the kernel image in Ubuntu readable by root only?
[12:02] <andrewsh[m]> and what would be the best way to package a tool run by a non-root that needs to read the kernel image?
[12:02] <andrewsh[m]> I mean, package for Debian but in an Ubuntu-compatible way
[12:19] <juliank> andrewsh[m]: security?
[12:19] <juliank> andrewsh[m]: My understanding is that you can extract the kernel memory layout from the image and use that for attacks
[12:19] <juliank> andrewsh[m]: hence you need to write a helper and use policykit to limit access to admins
[12:20] <andrewsh[m]> has anyone done anything like this in the past?
[12:20] <andrewsh[m]> anything I can look at as an example?
[12:21] <juliank> probably not
[12:21] <juliank> arighi: so I went crazy and picked the -17 kernel from the PPA and will stress test i915 on there now
[12:22] <cjwatson> https://wiki.ubuntu.com/Security/Features/Historical#kptr-restrict
[12:22] <juliank> because -16 did not help at all, probably due to the off-by-one
[12:22] <cjwatson> andrewsh[m]: ^- at some point I remember having a better reference for that, but there's that at least
[12:25] <juliank> 3 mins into test, stuff is stable
[12:26] <juliank> I'm having one window run Netflix in Chrome and one window run glxgears
[12:26] <juliank> still leaves me enough space for more windows :)
[12:27] <juliank> 1280x1440 is plenty...
[12:28] <juliank> cjwatson: has it been considered to make merge proposals for git redirect to the git branch when you use git, so you can just git fetch the merge proposal url?
[12:28] <andrewsh[m]> I'm asking for a friend^W fakemachine+debos
[12:28] <cjwatson> juliank: We've considered various things like that and will hopefully make some improvements next cycle
[12:28] <andrewsh[m]> it needs a kernel to create a virtual machine to run debootstrap and other things in
[12:28] <cjwatson> (We'd hoped to this cycle, but ran out of time a bit)
[12:31] <juliank> ack
[12:55] <juliank> kernel -17 is stable so far, 30 mins in
[12:57] <tjaalton> juliank: good to hear
[13:25] <doko> mitya57: what's your plan with sphinx 2.x? split out a source package to still build sphinx 1.x for Python2 in focal?
[13:29] <seb128> xnox, hey, how easy for you is it to kick a refresh to the auto-transitions list? would be nice to have gnome-desktop3 and poppler on there
[13:35] <arighi> juliank, thanks! I'm also testing -17 on my test laptop, so far so good
[13:56] <mwhudson> smoser: are you going to upload ssh-import-id ?
[14:11] <smoser> mwhudson: i can do that.
[14:11] <smoser> it felt like i should do a full new release.
[14:11] <smoser> since the version in pypi is not functional with 3.8
[14:12] <mwhudson> smoser: i'm being parochial and only caring about focal but that makes sense
[14:16] <smoser> mwhudson: yeha. i'll do that all now.
[14:16] <mwhudson> smoser: thanks!
[14:16] <smoser> uploadign to focal is easy/known/automated
[14:16] <smoser> but the "new release" stuff is more a pita
[14:25] <rbasak> kanashiro: may I have some help merging ruby-dataobjects-mysql please? I don't see where the upstream VCS for that is - both the Homepage d/control field and the upstream https://rubygems.org/gems/data_objects (I think?) point to https://github.com/datamapper/do which appears dead.
[14:25] <rbasak> So not sure how it would sit with feature freeze.
[14:29] <rbasak> This can wait until after the ruby transition I think.
[14:48] <kanashiro> rbasak, I think it is better to do it after the ruby transition, but yes, upstream seems inactive
[14:50] <kanashiro> rbasak, is this delta something that we can push to Debian? is it work with the current version of mysql in Debian?
[15:03] <seb128> doko, hey, inkscape hits a gcc ICE on ppc64el https://launchpad.net/ubuntu/+source/inkscape/0.92.4-5ubuntu3 is that something you could a look at? we need to rebuild inkscape for the poppler (and gnome-desktop3) transitions
[15:04] <rbasak> kanashiro: yes it's fairly small - just fixes to work against latest MySQL
[15:05] <rbasak> It's not yet appropriate for Debian since Debian doesn't have MySQL 8 yet - that's a separate yet-to-be-completed effort
[15:05] <rbasak> (for Debian to maintain a separate patch just for that)
[15:05] <rbasak> But appropriate for upstream - all that work is still outstanding
[15:09] <kanashiro> rbasak, so let's keep the delta then
[15:10] <kanashiro> and I can do the merge when the time comes
[15:13] <rbasak> Thanks!
[15:21] <doko> seb128: looking, but maybe not today anymore
[15:21] <seb128> doko, no hurry, those transitions need a libreoffice upload, that's not going to build/go through in a day
[15:21] <seb128> doko, I tried to build with O2 in a ppa but my debian/rules foo failed
[15:39] <smoser> mwhudson: why can't anything ever be easy.
[15:39] <smoser> https://bugs.launchpad.net/ssh-import-id/+bug/1865171
[16:03] <mwhudson> smoser: computers were a mistake
[16:29] <seb128> doko, in fact buildign with O2 worked, I will do that for now
[16:41] <smoser> mwhudson: agreed.
[16:41] <smoser> hey. i just uploaded.
[16:41] <smoser> http://paste.ubuntu.com/p/wBbnXsS5ng/
[16:43] <smoser> but i dont see it anywhere in queue
[16:44] <smoser> bah. how do i tell it to do the full upload. if orget.
[16:58] <smoser> ok. fixed. -sa
[17:14] <mwhudson> smoser: thanks
[18:51] <mitya57> doko: For focal it's the best to stick to sphinx 1.8.5.
[18:52] <mitya57> Every major sphinx release breaks many packages, here we have three major releases (2.0, 2.1, 2.2) and I didn't have time to test rebuild reverse dependencies yet.
[18:55] <mitya57> For Debian the number of packages using Python 2 sphinx is decreasing, and having a separate source package for it causes some problems, so I don't want to do that.
[18:57] <mitya57> See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=944913#49 — and some of these are already fixed.
[19:08] <doko> mitya57: yep, asking because numpy 1.8 requires it, and I'd like to update that one ..
[19:11] <mitya57> Maybe disabling docs is the easiest you can do.
[23:15] <CarlFK> amurray: kinda ot, if someone can tell me where to open an issue: https://launchpad.net/dhcp  "Home Page" http://www.isc.org/index.pl?/sw/dhcp/  404  -  https://www.isc.org/dhcp/ is good.
[23:22] <sarnold> CarlFK: probably the email address on https://launchpad.net/~registry which appears to own https://launchpad.net/dhcp