[03:33] Bug #1871827 opened: git ubuntu submit fails on focal [05:58] https://github.com/snapcore/snapd/pull/8581/checks?check_run_id=631328561 <- persistent journal failed [05:58] PR #8581: tests: port pulseaudio test to session-tool [06:08] PR snapd#8582 opened: github: register matchers before running spread [07:09] morning [07:24] hey pstolowski [07:24] mvo: hi! how is the sprint going? [07:30] hey guys [07:30] I'm doing some test fixes [07:30] pstolowski: do you have backscroll? [07:30] pstolowski: can you see my message at 7:58? [07:31] zyga: i don't have it [07:31] https://github.com/snapcore/snapd/pull/8581/checks?check_run_id=631328561 <- persistent journal failed [07:31] PR #8581: tests: port pulseaudio test to session-tool [07:31] the failure is silly but wonder why [07:38] zyga: yeah it consistent with the previous failures, no idea. looks like snapd gets restarted (or crashes) during configure hook. i will think about a debug section for this test. thanks [07:38] is there something in the logs? [07:42] zyga: nothing obvious, "Running task 84 on Do: Run configure hook of "core" snap" is the last task run, and snap set fails with 'error: cannot communicate with server: Put http://localhost/v2/snaps/core/conf: EOF' [07:42] hmm [07:42] what ran before? [07:43] it's just snap set with true/false in this test [07:43] can you report a bug with the failure fragment, the list of tests that ran before and any additional insight [07:43] I mean tests that ran on this machine before this one [07:43] ah, that [07:43] yep, good idea [07:43] main/cgroup-devices is right before it [07:45] add the complete list [07:45] maybe next time we [07:45] maybe next time we'll know more [07:46] * zyga -> breakfast [07:54] done, https://bugs.launchpad.net/snapd/+bug/1876053 [07:54] Bug #1876053: occasional spread test failure on core-persistent-journal [07:54] thanks! [07:55] one day we'll learn and understand :) [07:56] in the initial version of this code i was restarting journal service which had an undesired effect of restarting snapd during configure hook, but now it's misterious as there is no direct interaction with systemd, just removing/creating journal dir [07:59] do you know why restarting journal restarts snapd? [07:59] is it just snapd that is being restarted in that case? [08:09] dunno [08:11] pstolowski: hmm, perhaps we can do a small experiment with a simple service and see what happens [08:11] maybe it's documented [08:11] I think we ought to know, feels wrong to ship this to devices with potential for failure [08:11] offtopic: https://thepihut.com/products/raspberry-pi-high-quality-camera-lens !!! :) [08:12] i'm so getting this [08:12] and setting up a monitoring with a pi :) [08:12] and botland has it [08:12] https://botland.com.pl/pl/szukaj?controller=search&orderby=position&orderway=desc&search_query=Nowa+kamera+do+Raspberry+Pi&submit_search= [08:20] morning [08:23] mborzecki: hey [08:35] pstolowski: when you have a couple of minutes, could you please double check trello doing? just making sure it's a bit more up-to-date [08:35] mvo: sure [08:36] pstolowski: fwiw, the current trello has a bit too many lanes, this will get cleaned in the following days, so don't worry if it's a bit crowded :) [09:12] I need reviews for https://github.com/snapcore/snapd/pull/7825 [09:12] PR #7825: many: use transient scope for tracking apps and hooks [09:12] it's super close and I'd love to land it this week [09:20] zyga: can yuo remind me whether the session-tool stops the session after the command exits? [09:21] no, because --prepare enables linger and --restore disables linger [09:21] what are you seeing? [09:22] so `session-tool -u test --restore` will kill the session then in restore right? [09:22] yes [09:29] it would be good to focus on making master less red [09:29] something broke in debian-sid now, we cannot compile our golang+C tests [09:29] would be worth taking a look, [09:29] I can in ~3-4 hours [09:29] but perhaps someone can fix it faster [09:30] zyga: got log? [09:30] mborzecki: plenty, check any of my latest PRs [09:30] mborzecki: asm/geneeric.h is missing or something like that [09:30] mborzecki: it fails each time [09:30] mborzecki: on tests/unit/go [09:30] master seems to be green [09:30] mborzecki: nope, it's red red red here :) [09:30] mborzecki: or did it magically go away just as it showed up? [09:31] zyga: https://github.com/snapcore/snapd/commits/master looks green [09:31] mborzecki: try debian-sid-64:tests/unit/go [09:31] the tick is confusing [09:31] it's just travis [09:31] w8, what's that tick? [09:31] we don't run spread there [09:31] pfff [09:31] yeah [09:31] yeah [09:32] omg [09:32] ? [09:32] so, the gh actions only runs on PRs [09:32] yes [09:32] we configured that deliberately [09:32] ok, so we do not run spread on master then [09:32] otherwise everything costs x2 more [09:32] we said we should extend that to run on all landings to release branches [09:33] as we land things regularly it's a reasonable tradeoff [09:33] PR snapd#8583 opened: tests: add debug to core-persistent-journal test [09:33] 2020-04-29T17:55:01.8596162Z + su -l -c 'XDG_RUNTIME_DIR="/run/user/12345" DBUS_SESSION_BUS_ADDRESS="" test-snapd-desktop.cmd xdg-open http://www.example.org' test [09:33] 2020-04-29T17:55:01.8596782Z user-open error: exec: "dbus-launch": executable file not found in $PATH [09:33] heh, on sid [09:33] mborzecki: I really want to burn user.sh and the hacks with fire [09:33] all those XDGD_RUNTIME_DIR=... things are so bogus [09:33] mborzecki: I have a patch that moves one more tests over [09:34] maybe I can remove all of them today [09:34] I'm stuck on "serious" reviews anway [09:34] ok, let me see what i can do about that snap-seccomp unit test failing on sid [09:34] thanks! [09:34] one by one [09:34] and we can ask mvo to merge despite other failures [09:34] I'd love to end the week with totally green master [09:34] so that next week is not like a torture :/ [09:38] zyga: can you take a look at https://github.com/snapcore/snapd/pull/8580 ? or even try it out if you have zsh installed [09:39] PR #8580: data/completion: add `snap` command completion for zsh [09:39] mborzecki: sure [09:39] just dropping _snap file into /usr/share/zsh/vendor-completions/ should do the trick [09:39] or site-functions on other non deb distros [09:40] now that it works locally i see i've been missing out on some goodies :P [09:42] btw the zsh documentation is awful [09:42] that doesn't seem to work [09:44] I installed that on my system [09:44] invoked zsh [09:44] and nothing [09:44] in comparison other completers work ok [09:46] reviewed [09:46] hmmm [09:47] also packaging seems to be broken [09:47] (check the various error logs) [09:50] heh, forgot to list the file for opensuse [09:51] check the suse error [09:52] it says something is listed twice [09:52] maybe a drive-by [09:53] zyga: https://asciinema.org/a/wXGEu1Ky2To2osTCJ8Wl1rD8b [09:53] weird [09:53] that's not what I'm seeing [09:54] I'll recheck [09:54] zyga: on ubuntu you need to move it to /usr/share/zsh/vendor-completins/_snap (with _) [09:54] that's where I put it [09:55] I naively tried to debug it by sourcing [09:56] fyke% source _snap [09:56] _setup:37: compstate: assignment to invalid subscript range [09:56] no, it won't work that way :) [09:59] I don't know how to debug it [10:00] zyga: that's on opensuse? [10:00] no, focal [10:00] weird, right [10:01] but I didn't set shell to zsh [10:01] just execed zsh [10:01] maybe that's why? [10:02] idk, maybe you need to enable completion? try `autoload -Uz compinit ; compinit` ? [10:02] it works for everything else in that directory [10:02] all the other commands generate completios [10:02] *completions [10:03] zyga: did you wget/curl the file or pasted it? [10:03] ... [10:03] pasted [10:03] is that relevant? [10:03] Omg :D [10:04] check whether the first line is `#compdef snap` [10:04] it is [10:04] idk, wget https://raw.githubusercontent.com/snapcore/snapd/060556f7adcf748546cd7c3c97f3254f0bd58644/data/completion/_snap ? :) [10:05] same result [10:06] pfff idk then [10:06] can you try? [10:06] you could try an wipe ~/.zshrc if you're not to used to it and start over [10:06] I mean, just spawn focal (multipass) and put that file [10:07] mborzecki: my zshrc is empty [10:07] zyga: that asciinema is on 20.04 [10:07] mborzecki: yes but from spread [10:07] mborzecki: maybe there's a more magic button somewhere [10:07] ah, ok [10:10] zyga: yup, works [10:10] IDK [10:10] let's ship it then ;D [10:11] I tried setting the GO_... variable for completions and that does print stuff [10:11] did you exec zsh or did you do something more elaborate? [10:11] zyga: rm ~/.zshrc and run zsh again, that should suggest using the default config [10:11] tried [10:12] doesn't fix this issue :) [10:12] zyga@fyke ~ % snap inst [10:12] Completing `file' or `corrections' [10:12] I hit at inst [10:14] zyga: gcc-multilib isn't installed in sid images [10:14] zyga: that's why the unit test fails [10:14] cool, ping me for a patch [10:16] btw. i don't understand why test/unit build and install the snapd package [10:17] mborzecki: weird [10:17] probably for no reason at all? [10:17] that's a huge waste of time [10:17] I also wonder where we waste time [10:17] run 10 tests on a single machine [10:17] with -repeat 10 [10:17] that does "true" [10:17] also, building the package runs unit tests /o\ [10:17] it's incredibly slow [10:17] we are probably wasting loads of time doing something silly somewhere [10:20] uff, at least we pass nocheck to deb-bp [10:20] dpkg-buildpackage [10:39] PR core#113 opened: Makefile: conditionally use the "edge" PPA in live-build [10:47] zyga: https://github.com/snapcore/snapd/pull/8584 [10:48] PR #8584: packaging/debian-sid: add gcc-multilib to build deps [10:48] PR snapd#8584 opened: packaging/debian-sid: add gcc-multilib to build deps [10:48] mborzecki: are we running tests on debian? [10:48] as in, unit tests while building the debian sid package? [10:54] zyga: it was the one that failed in this test [10:54] #8537 needs 2nd review [10:54] PR #8537: store: handle error-list in fetch-assertions results [10:54] pstolowski: trying to review that since morning [10:55] zyga: there's only a bunch of systems we don't run unit tests on: [-ubuntu-core-*, -fedora-*, -opensuse-*, -arch-*, -amazon-*, -centos-*] [10:55] mborzecki: my question was different, we had a missing dependency, how come it didn't come up when building snapd in a pristine environment of a buidd? [10:55] mborzecki: are we running unit tests on package build on debian? [10:56] zyga: perhaps gcc-multilib is one of base dependencies already included? [10:57] zyga: which test runs buildd? i don't see one [10:57] mborzecki: perhaps :) [10:57] mborzecki: I mean "make check" style [10:57] go test ./... [10:57] PR snapd#8585 opened: release: 2.44.5 [10:59] zyga: prepare sets nocheck in DEB_BUILD_OPTIONS, there's a nightly test that runs sbuild, but nobody looks at the result? [10:59] heh [10:59] ok [10:59] thanks for fixing htis [10:59] *this [11:01] zyga: where are the nightly test results? [11:01] replied to https://github.com/snapcore/snapd/pull/8581 [11:01] PR #8581: tests: port pulseaudio test to session-tool [11:01] I have no idea [11:01] probably nowhere [11:01] just read the travis runs [11:01] cachio probably knows [11:08] zyga: so mvo pointed me to where the nightly tests are and as suspected sbuild test was failing, but even before it reached the package build step /o\ [11:09] heh [11:09] where are the results? [11:18] * pstolowski lunch + errand [11:19] zyga: https://travis-ci.org/github/snapcore/spread-cron/branches and look for nightly [11:19] mmm [11:19] thanks [11:20] hm, we don't install sbuild and then run sbuild in the test [11:20] perhaps sbuild is no longer in the sid image? [11:20] IIRC we did but perhaps we stopped [11:20] for efficiency? [11:22] idk, let me check that test [11:22] hm sbuild is installed, wth? [11:28] next chromium issue: https://bugs.launchpad.net/snapd/+bug/1876083 [11:28] Bug #1876083: chromium snap from focal fails DNS lookups, or delays them [11:32] doko: in your report you said "that is using IPv6 only" - what do you mean by that? [11:33] hm idk, looks like sbuild-createchroot is broken [11:33] zyga: my provider is doing IPv6 by default [11:33] I see [11:33] doko: what are the consequences of that, that you don't have an ipv4 address? that you cannot resolve ipv4 domains? [11:34] no, I have an ipv4 address [11:37] mborzecki: we should nuke fedora 28, 29 [11:37] and perhaps 30 [11:37] and just have 31 and 32 [11:37] 30 is eol in a mongth? [11:37] I will look after I wrap up this task [11:37] mborzecki: yeah, they go very quickly [11:37] the nature of fedora community is to move on [11:37] zyga: fwiw, the examples in sbuild-createchroot manpage don't work either, pfff [11:37] mborzecki: haha [11:37] I was in that same boat [11:38] mborzecki: with my recent debian maintainer hat [11:38] mborzecki: the wiki is broken [11:38] mborzecki: but also all of the tools behave different if they detect debian vs ubuntu [11:38] which is enormously confusing [11:39] eh, a wall of perl code :* [11:39] :( [11:39] heh [11:39] if that helps I have a magic line that gives you a working cowbuilder [11:39] it's really really great [11:39] and I use it for git-buildpackage [11:39] but most of the documentation is broken [11:40] and there is some overlap between those tools that doesn't help [11:40] btw, I need to thank stgraber and the team [11:40] lxd is really amazing [11:40] it's revolutionized how I think about systems [11:40] and the container registry is fantastic [11:41] I would love to have a vagrant-like tool for lxd [11:41] that bridges a project directory to the container ootb [11:56] zyga, hey [11:56] hey [11:56] I was trying to merge the no recommends branch [11:56] zyga, but I see these errors https://paste.ubuntu.com/p/BhXjghQ6Nh/ [11:56] https://paste.ubuntu.com/p/hNRPxH7n6D/ [11:56] both in the same test [11:57] zyga, I already tried with other dependencies [11:57] any idea what could be the cause? [11:57] lack of /lib/systemd/user/dbus.socket [11:58] I rewrote this test (though I haven't pushed it as I'm working on a prerequisite) [11:58] is that the only failure? [11:58] zyga, yes [11:58] do you have a debug shell? [11:59] no, let me create it [11:59] is dbus-user-session installed? [11:59] no [11:59] but it pass in other systems where it is not installed [12:00] ah, I missed that there are two test failures [12:00] zyga, yes, different [12:00] dbus-launch is a separate problem [12:00] the tests are really written in a way that won't work [12:00] I'm working on porting them over [12:01] zyga, I can disable it for those systems [12:02] and then we fix it [12:02] zyga, does it make sense? [12:02] can you add a comment like "TODO:session-tool: port and re-enable" [12:02] yeah [12:02] cachio: do you know if we are using different instances by any chance? [12:02] we've noticed that tests are much slower today [12:03] zyga, no [12:03] same [12:04] ok [12:05] zyga, I'll check [12:05] mborzecki: ^^ what do you think about the comments to disable the two tests sergio mentioned [12:05] cachio: today I'm going through failing tests and porting to session-tool, to unbreak from random annoying failures [12:05] so at some point I'll go through all the user.sh users and make them more robust [12:06] yes [12:07] zyga, it caused several issues already [12:10] zyga, pushed the change nad added the comment in both tests disabled [12:11] thanks [12:11] just disabled the failinf systems [12:11] not the test [12:11] do you need a review for the test changes? [12:11] cachio: uh, that's a bit heavy, I think we should not disable debian-sid [12:11] it is already apporoved [12:11] 19.10 is a different story and I would not mind dropping it TBH [12:11] cachio: oh? where is it? [12:12] zyga #8468 [12:12] PR #8468: tests: adding option --no-install-recommends option also when install all the deps [12:13] cachio: ah, ok, [12:13] I misunderstood what you said [12:13] mborzecki: https://github.com/snapcore/snapd/pull/8468#pullrequestreview-403460795 [12:14] PR #8468: tests: adding option --no-install-recommends option also when install all the deps [12:34] zyga: yay, Chipaca is presenting ;) [12:35] watching :) [12:35] zyga: thanks for spotting, i left a comment there [12:35] cool! [12:37] jdstrand: thanks, but now I'm facing LP: #1876083 [12:37] Bug #1876083: chromium snap from focal fails DNS lookups, or delays them [12:37] oops, wrong channel [12:40] mvo: can we merge https://github.com/snapcore/snapd/pull/8584 ? we'll need another PR for the xdg-desktop-portal test [12:40] PR #8584: packaging/debian-sid: add gcc-multilib to build deps [12:40] (needs your superpowers) [12:43] sure [12:43] ta [12:43] PR snapd#8584 closed: packaging/debian-sid: add gcc-multilib to build deps [12:43] mvo: thank you! [13:46] small improvement to session-tool, will replace some hand-crafted checks elsewhere: https://github.com/snapcore/snapd/pull/8586 [13:46] PR #8586: tests: add session-tool --has-systemd-and-dbus [13:46] PR snapd#8585 closed: release: 2.44.5 [13:46] PR snapd#8586 opened: tests: add session-tool --has-systemd-and-dbus [13:46] currently a draft, running one more pass of the full set, will open shortly [13:47] google:debian-sid-64:tests/main/xdg-open-portal fails in a weird way [13:47] user-open error: exec: "dbus-launch": executable file not found in $PATH [13:49] mborzecki: yeah, we looked at this [13:49] mborzecki: cachio disabled this test, it's on my list to port next [13:49] zyga: i replaced some bits with session tool, but i tlooks like the user dbus is not started [13:49] yeah, I know [13:49] my test actually shows that :) [13:49] i'm probably doing something wrong here [13:50] dbus-session-bus is not preinstalled [13:55] presumably --no-install-recommends [13:55] cmatsuoka, using new snapd still getting stuck https://paste.ubuntu.com/p/gScx3yH59y/ [13:55] cmatsuoka, line 1353 [13:55] is the last I see [13:56] let me see... [13:56] thanks [13:57] cachio: this is happening in graham's image as well [13:57] cmatsuoka, ahh [13:58] cachio: did you inject snap-bootstrap into the initramfs? [13:58] cmatsuoka, yes [13:58] I'm investigating here to see what could be happening [13:59] zyga: ok, fixed the portal-open test, but other portal tests need fixing too now [13:59] cmatsuoka, I am running repack_snapd_snap_with_deb_content_and_run_mode_firstboot_tweaks [13:59] mborzecki: ok [13:59] for the image [14:02] mborzecki: I moved the TPM-related stuff from initramfs-mounts to secboot in PR #8577, could you have a look when you have time? It's trying to not expose TPM to initramfs-mounts so it could work later with a TrustZone-based solution as well [14:02] PR #8577: [RFC] secboot,cmd/snap-bootstrap: move initramfs-mounts tpm access to secboot [14:09] cmatsuoka: sure [14:09] zyga: i think i've ported the portal tests now [14:09] mborzecki: to session-tool? :-) [14:09] yeah [14:09] \o/ [14:09] awesome [14:09] push that! [14:09] I'm looking at the user-env test [14:10] I mean, I ported it but I'm adding some more bits before that can be proposed [14:10] I have a working branch that removes user.sh [14:10] and just fixes stuff that breaks [14:10] mborzecki: did you port all of the portal tests? [14:11] zyga: xdg-open-portal and desktop-portal-{filechooser,screenshot,open-file,open-uri} [14:11] awesome [14:12] ijohnson: I pushed to https://github.com/snapcore/snapd/pull/8586 and opened it normally now [14:13] PR #8586: tests: add session-tool --has-systemd-and-dbus [14:13] ijohnson: I made a small change to move the test to a new task [14:13] ijohnson: and I highlighted that https://github.com/snapcore/snapd/pull/8586/files#diff-e14795fd89d2bab1c7f6486851d463c0R15 sid has no session support somehow [14:13] this test is nice because it will show us changes in the distros [14:13] cmatsuoka: i think you added some standup notes under friday (tomorrow) [14:13] that's awesome very nice [14:13] I was thinking to move tumbleweed, sid and arch to unstable [14:14] is arch unstable ? [14:14] so that they reflect the unstable nature of the distributions they are [14:14] arch seems to be relatively stable for us recently I think [14:14] maybe I'm wrong though [14:14] so that we can get a heads up in case it affects the rest of the stack over time [14:14] ijohnson: yeah, it's relatively stable [14:14] but the point is not the measure our feeling about snapd in that distribution [14:14] but to measure the stability of the distribution - in the sense of debian stable [14:14] not sure if this makes sense to you [14:15] since those distributions move rapidly they can change like the wind at a seaside town :) [14:15] PR core18#152 opened: Make .disk/info visible on the root partition [14:15] mborzecki: I'm starting my annotations for the next day after the current SU to be in sync with people that have SU at the end of the day [14:16] (so the activities between SUs can be reviewed in the next SU) [14:20] ijohnson: one more small improvement, https://github.com/snapcore/snapd/pull/8587 [14:20] PR #8587: tests: session-tool allows preparing/restoring for many users [14:20] this will be used by changed user-env test [14:20] PR snapd#8587 opened: tests: session-tool allows preparing/restoring for many users [14:20] that has test and test-zsh users [14:25] PR snapd#8588 opened: tests: port portals test to session-tool, fix portal tests on sid [14:25] zyga: ^^ [14:25] looking [14:26] mborzecki: the pkg change is tricky, I would rather depend on it in snapd [14:26] mborzecki: otherwise we are testing something and users are running something else [14:26] mborzecki: wdyt? [14:26] zyga: suggests/reccomends? [14:26] yeah [14:26] suggests seems ok [14:26] or recommends [14:26] though we no-install-recommends [14:26] heh :) [14:26] not sure [14:26] aren't we suggsting/recommending portals already? [14:26] just don't want to let it slip like that [14:27] if we do we should bundle dbus in the same set [14:27] i would expect that to pull in relevant dbus packages [14:27] popey ping! I believe this will need your "blessings" https://forum.snapcraft.io/t/auto-connection-request-for-easy-installer/17063 [14:27] the portal teardown should happen beore --restore [14:27] inside the portals you can probably remove loads of redudancy as well [14:27] om26er bless you [14:27] it still calls start_user_session [14:27] and uses as_user [14:28] mborzecki: ^ review here :) [14:28] degville, cachio: something changed between gadget 96 and 98 that's causing the problem [14:28] zyga: portals teardown removes files and so on, it should probably be done after we know that session is stopped [14:29] mborzecki: look closer [14:29] it does more [14:29] purge_user_session-data [14:29] and stop_user_session [14:29] I think those two must go [14:29] cmatsuoka: ah, thanks for the update. [14:29] degville: I'll diff them to see what changed [14:30] cmatsuoka: could it be https://github.com/snapcore/pc-amd64-gadget/pull/45 ? [14:30] PR pc-amd64-gadget#45: Use UC20 signed grub [14:30] om26er I'll take a look [14:31] ijohnson: it looks very suspicious [14:31] mborzecki: reviewed but it's the same as I said here [14:31] cmatsuoka: indeed [14:31] popey thanks. I am in touch with the upstream, I was asked to help with snap packaging. After quite a few iterations we came to the point of pushing it to store. [14:31] mborzecki: thank you so much for pushing this :) [14:33] zyga: hmm not sure which portal helpers, there's only 2 of those, and they no longer start or stop session [14:33] cmatsuoka, ahhh [14:33] * zyga looks [14:34] ijohnson: this looks suspicious too: [14:34] mborzecki: doh! [14:34] I'm blind [14:34] this is so weird [14:34] - - shim-signed=1.41+15+1552672080.a4a1fbe-0ubuntu1 [14:34] - - shim=15+1552672080.a4a1fbe-0ubuntu1 [14:34] + - shim-signed=1.40.3+15+1533136590.3beb971-0ubuntu1 [14:34] + - shim=15+1533136590.3beb971-0ubuntu1 [14:34] I didn't see this file before :) [14:34] cmatsuoka, I'll try in that case by using the pc snap from stable [14:34] cmatsuoka: so the version of shim was reverted to an older one? [14:34] mborzecki: +1 [14:35] om26er it's a really nice looking app! [14:35] ijohnson: it seems so, and if this older one is the one without chris coulson's patches, it would fail like that [14:35] mborzecki: can you remove . user.sh in desktop-portal.sh? [14:36] cmatsuoka: yeah makes sense probably needs a comment from Dmitri [14:38] ijohnson: I pinged him about that [14:39] ack [14:43] degville, cachio: bad shim in recent gadgets, dimitri is fixing it [14:43] mborzecki: superb [14:43] mborzecki: we will have much fewer users of user.sh [14:44] cmatsuoka, awesome [14:44] cmatsuoka: thank you! [14:44] cmatsuoka, the fun part is that I tried with older snapd snap, pckernel snap and core20 snap [14:44] cmatsuoka, but didnt try with older pc snap [14:46] when unlock fails, the prime suspects are the command line and shim, and they're both from gadget [14:46] mborzecki: once your branch lands this will be fixed, right? [14:46] https://github.com/snapcore/snapd/pull/8586/files#diff-e14795fd89d2bab1c7f6486851d463c0R19 [14:46] PR #8586: tests: add session-tool --has-systemd-and-dbus [14:46] debian-sid-*/test exception will disappear [14:53] how do i restart github actions if they seem to be stuck? https://github.com/snapcore/snapd/pull/8583 [14:53] PR #8583: tests: add debug to core-persistent-journal test [14:57] pstolowski: looking [14:57] close and reopen [14:57] I saw that once before [14:57] seems like event got lost [14:57] mhm [14:57] ok,thanks [14:57] queued :) [14:58] and in progress [14:59] I'll break now [14:59] back hurts [15:00] magic [15:00] magic? :) [15:00] could you ask mvo to merge the two session-tool improvements once they are green enough [15:00] I have more follow ups that this enables [15:10] mborzecki: I approved https://github.com/snapcore/snapd/pull/8580#pullrequestreview-403616086 [15:10] PR #8580: data/completion: add `snap` command completion for zsh [15:10] but there's a conflict now [15:12] mborzecki: maybe move pkgver next to pgkname [15:12] so that it conflicts less frequently [15:17] ijohnson: https://github.com/snapcore/snapd/pull/8576#pullrequestreview-403618621 [15:17] PR #8576: tests/main/lxd: add test for snaps inside nested lxd containers not working [15:18] anyone up for #8583? needs 2nd review, it's a simple test change [15:18] PR #8583: tests: add debug to core-persistent-journal test [15:19] pstolowski: perhaps just ask mvo, master is broken now so you will nedd an override anyway [15:20] zyga, mvo: have you guys seen any problems with snapd in lxd with focal images? running into https://pastebin.canonical.com/p/SkdNKHCyNy/ [15:20] snapd seems to fail to initialize the system [15:21] morphis: can you do snap tasks 1 or [345] [15:21] I don't think we've seen this [15:21] https://pastebin.canonical.com/p/fwChrpCB49/ [15:21] didn't knew `snap tasks` gives you that level of details [15:22] this is a LXD container with: https://pastebin.canonical.com/p/fQJHJq5R6t/ [15:22] which works fine for bionic [15:23] morphis: so the preinstall hook fails [15:23] hmmm [15:23] er, install hook [15:23] 2020-04-30T14:58:46Z ERROR run hook "install": cannot perform operation: mount --rbind /var/lib/dhcp /tmp/snap.rootfs_hzQTBP//var/lib/dhcp: Permission denied [15:23] oh [15:23] that's new! [15:23] this is surprising [15:23] morphis: do you have denials? [15:23] on the host container [15:23] container host [15:24] jdstrand: ^ remember this? [15:24] I wonder if there's a regression that the lxd profile doesn't allow snapd to perform this [15:25] zyga: let me check [15:25] morphis: does it go away if you rmdir /var/lib/dhcp in the machine that you "snap install lxd" on? [15:25] we won't try it then [15:25] zyga: https://pastebin.canonical.com/p/NHKWyxpwQj/ [15:26] let me check [15:26] [ 1113.914649] audit: type=1400 audit(1588259357.291:359): apparmor="DENIED" operation="mount" info="failed srcname match" error=-13 profile="/usr/lib/snapd/snap-confine" name="/tmp/snap.rootfs_de7sTW/var/lib/dhcp/" pid=61879 comm="snap-confine" srcname="/var/lib/dhcp/" flags="rw, rbind" [15:26] that looks like it [15:26] what's up with locking /dev/null? [15:26] but the container has lxc.apparmor.profile=unconfined so I wouldn't expect that [15:26] hmmm [15:26] is that supported for snapd? [15:27] I'm never sure what the various lxd configuration options do [15:27] and which disable nested apparmor [15:27] jdstrand: maybe libc? [15:27] we have a lxd-profile.yaml in our lxd charm which adjusts the container config, k8s does the same AFAIK [15:28] https://github.com/charmed-kubernetes/charm-kubernetes-master/blob/master/lxd-profile.yaml [15:28] I've never seen that before [15:28] we have this rule: [15:28] mount options=(rw rbind) /var/lib/dhcp/ -> /tmp/snap.rootfs_*/var/lib/dhcp/, [15:28] mount options=(rw rslave) -> /tmp/snap.rootfs_*/var/lib/dhcp/, [15:28] which should cover the dhcp directory you had [15:28] I wonder what's wrong there [15:29] morphis: can you file a bug with repro instructions, [15:29] I'm going into a meeting, but if you set lxc.apparmor.profile=unconfined, I'm not sure the profile stacking is going to work correctly [15:29] zyga: rmdir /var/lib/dhcp doesn't seem to help [15:29] that is a stgraber question [15:29] now it runs into: 2020-04-30T15:28:45Z ERROR run hook "install": cannot open file /sys/fs/cgroup/freezer/snap.lxd/cgroup.procs: Permission denied [15:29] morphis: it's late today and I wanted to focus on some more bits but I will try to look either later today or on Monday (I'm off tomorrow) [15:29] zyga: sounds good! [15:29] morphis: I'm suspecting this is an unsupported config, please make sure to loop in stgraber [15:29] jdstrand: will check with him later [15:30] this is because the policy is shared between the host and the container I think [15:30] and we should document this somehow [15:30] because there is no stacking [15:30] yeah, I think jamie is spot on [15:30] yikes [15:30] * jdstrand -> meeting [15:30] just wondering as this worked well for bionic [15:31] yeah, I forget otoh the details of how lxd sets up the profile stacking [15:31] but this sounds like what I described [15:31] morphis: some incorrect configurations do seem to work [15:31] morphis: but not by design [15:31] and it depends heavily by what is on the container [15:32] zyga: what's broken in master now? [15:33] pstolowski: a few tests [15:33] pstolowski: but those are all with PRs now I think [15:33] pstolowski: your branch will likely fail on them [15:35] pstolowski: watch https://github.com/snapcore/snapd/pull/8588 :) [15:35] PR #8588: tests: port portals test to session-tool, fix portal tests on sid [15:35] maybe it will be green [15:35] then we can just work normally again [15:36] great [15:36] ty [15:36] cmatsuoka, I used the pc 93 and I see the same problem [15:44] zyga, jdstrand: dropping "lxc.apparmor.profile=unconfined" fixes it [15:47] great :) [15:49] mvo: could you please override/merge https://github.com/snapcore/snapd/pull/8586 [15:49] PR #8586: tests: add session-tool --has-systemd-and-dbus [15:49] it's +2 and it fails on a known debian-sid failure maciek has fixed in a separate branch [15:49] thanks! [15:50] PR snapd#8586 closed: tests: add session-tool --has-systemd-and-dbus [15:50] mborzecki: can you merge master into https://github.com/snapcore/snapd/pull/8588 and remove the debian-sid-*/test exception from tests/main/session-tool-support [15:50] PR #8588: tests: port portals test to session-tool, fix portal tests on sid [15:51] mborzecki: or I'll just open a follow-up as soon as this lands [15:51] opensuse has fails on degraded systemd unit [15:51] I had a look and it both looks familiar [15:51] and weird [15:51] not sure if we can just disable that service? [15:51] it's something related to tty, let me check... [15:54] cachio: 96 should work [15:56] cmatsuoka, it is not published anymore right? [15:57] cachio: no, the current one is 98 [16:01] PR snapd#8589 opened: tests: port user-session-env to session-tool [16:02] ijohnson: I opened one more https://github.com/snapcore/snapd/pull/8589 <- I'm somewhat worried about 14.04 test coverage thourh, not sure if this is something I should bring back with a separate test that just tests "env" [16:02] PR #8589: tests: port user-session-env to session-tool [16:03] ijohnson: actually, the realization that 14.04's systemd build is *not* connected to dbus was my biggest worry/surprise recently [16:03] ijohnson: I don't think we really had this internalized before [16:03] morphis: glad to hear [16:03] mborzecki: I think we have only one user of user.sh left [16:04] once that is gone I will update the PR from jamesh [16:04] jamesh: ^ if you are reading backlogs, we are working on removing user.sh hacks [16:04] jamesh: but we don't want to leave you on ice [16:05] morphis: lxc.apparmor.profile=unconfined will break apparmor, don't do that [16:05] morphis: and that would indeed cause breakage for the snap [16:05] yeah, makes sense [16:06] something we should fix at https://github.com/charmed-kubernetes/charm-kubernetes-master/blob/master/lxd-profile.yaml#L5 as well unless they use it different [16:09] morphis: imperfect but interesting https://github.com/search?l=&q=lxc.apparmor.profile%3Dunconfined+language%3AYAML&type=Code [16:09] jdstrand: ^ all the unconfined lxds [16:12] stgraber: do you know if there's a way for snapd to detect that it's running in lxd and that lxc.apparmor.profile=unconfined has been set? [16:29] zyga: it's doable, yeah [16:31] zyga: updated #8588 [16:31] PR #8588: tests: port portals test to session-tool, fix portal tests on sid [16:32] looking [16:32] and feel a bit dizzy, just traversed through QDesktopServices down to xdgDesktopPortalOpenFile() and omg [16:33] mborzecki: I think you need to drop the sid fragment now [16:33] mborzecki: because your PR adds the dbus-user-session package to sid [16:33] and that will be detected by tests/main/session-tool-support [16:33] mborzecki: what did you find? [16:36] zyga: if /sys/kernel/security/apparmor/.ns_level doesn't exist or is < 1 + /proc/self/attr/current is unconfined [16:36] zyga: i think there's a bug in the portal handler, https://flatpak.github.io/xdg-desktop-portal/portal-docs.html#gdbus-org.freedesktop.portal.OpenURI states that calling that with file:// fails (by design), while the QDesktopServices::openURL() calls that for file:// [16:36] zyga: that should indicate lxc.apparmor.profile=unconfined I think [16:36] stgraber: I'll try that, thanks! [16:36] hmm [16:36] mborzecki: is there any remapping done? [16:36] I didn't check though, perhaps that's a question to jamesh/kenvandine [16:37] mborzecki: we could also ask flatpak developers [16:37] zyga: and there's an unhappy user in the forum [16:37] zyga: i mean that's the spec, and the portal works according to the spec [16:37] mmmm [16:38] zyga: suggested the user to drop file:// from the url, which triggers the path that calls OpenFile() [16:38] mborzecki: ah, I thought the bug is in the app itself [16:38] and it seems you say that the problem is with the usage pattern [16:38] but i can understand his frustration, even if he files a bug, and it gets fixed, it's probably not goiung to see the fix for the next 6 months or so [16:39] /snap/test-snapd-desktop/x1/bin/cmd: 4: exec: sh -c 'echo hello world': not found [16:39] mborzecki: we could fix it in qt [16:39] is the app using a shared qt runtime? [16:40] zyga: i could even submit a patch if i got qt building locally and signed cla, but that's like a over-the-weekend recreational activity ;) [16:41] I think the desktop team can help with that [16:51] hmm otoh, that app is in qt, i see a segfault starting it on arch [17:01] PR snapd#8468 closed: tests: adding option --no-install-recommends option also when install all the deps [17:04] cachio: \o/ [17:05] cachio, mborzecki: make sure there's a follow-up for https://github.com/snapcore/snapd/pull/8468#discussion_r417975489 please [17:05] PR #8468: tests: adding option --no-install-recommends option also when install all the deps [17:05] cachio: thank you for pushing this forward :) [17:07] zyga, yaw [17:07] :) [17:08] * cachio lunch [17:08] hello, anyone by chance have thoughts on https://travis-ci.org/github/snapcore/snapcraft/jobs/681562924#L432 ? this is the first time i've seen snap report that LXD is already installed, but `lxd` not found... [17:09] fwiw, it happened on the 20.04 image [17:09] cjp256: probably $PATH [17:09] can you debug with echo $PATH [17:09] or you can work around with "snap run ..." [17:13] zyga: there's a bunch of other tests that ran fine alongside it. Appears random. I'll restart it and see if it repros, then I'll print PATH. === ijohnson is now known as ijohnson|lunch [17:13] cjp256: you can debug it with things like echo $PATH, snap list, find /snap/bin [17:14] will do, thanks [17:15] type=AVC msg=audit(04/30/20 17:13:46.842:526) : avc: denied { write open } for pid=27614 comm=systemd-logind path=/var/lib/systemd/linger/test dev="sda1" ino=417790 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:object_r:init_var_lib_t:s0 tclass=file permissive=1 [17:15] but I think that's actually my fault [17:15] :) [17:15] fixing now === ijohnson|lunch is now known as ijohnson [18:08] PR snapd#8590 opened: tests: port selinux-clean to session-tool [18:21] PR snapcraft#3100 opened: Removed ``key`` from ``progressive`` dict following changes in the server API [19:06] PR snapcraft#3098 closed: build providers: bootstrap with dirmngr [19:14] ijohnson: you may want to have a 2nd look at https://github.com/snapcore/snapd/pull/8590 [19:14] PR #8590: tests: port selinux-clean to session-tool [19:14] I added one more bugfix for session-tool on selinxu [19:14] *selinux [19:14] namely this: https://github.com/snapcore/snapd/pull/8590/files#diff-a8fce2de6a6829d98f798117050b6c93R287 [19:15] * ijohnson should probably stop reviewing things that are drafts [19:15] haha [19:15] I'm very grateful that you did [19:15] makes fixing those annoying failures gratifying :) [19:16] do non selinux systems just ignore The SELinuxContext in the dbus call to StartTansientUnit ? [19:16] zyga: ^ [19:16] yeah [19:16] cool [19:16] session-tool is this little thing that turns out to be a big sprawling mess [19:16] but I think it's better than what we had before :) [19:18] it's at least more uniformly a big sprawling mess [19:18] and when it's used everywhere it makes it easier for everything to be closer to the right thing [19:20] hopefully very close to having that [19:20] I need to update incoming branches that use user.sh as well [19:21] there's one heavy use in user session services branch [19:24] I hope we can land all the test fixes [19:24] we have 73 PRs [19:24] but a good chunk of those are recent fixes [19:27] I pushed a small patch to https://github.com/snapcore/snapd/pull/8588 to reflect a new test in master [19:27] PR #8588: tests: port portals test to session-tool, fix portal tests on sid [19:28] I think I'll EOD now [19:29] it's almost 21:30 here [19:29] mvo: are you going to be around tomorrow? [19:39] zyga: yes [19:39] ok [19:57] cmatsuoka, https://paste.ubuntu.com/p/hxnGhxdH7F/ [19:57] works well with the pc 96 [19:57] \o/ [20:13] so, I need to wait for the new gadget