/srv/irclogs.ubuntu.com/2020/07/17/#snappy.txt

=== Eighth_Doctor is now known as Conan_Kudo
=== Conan_Kudo is now known as Eighth_Doctor
mupPR snapd#9027 opened: tests: refresh/revert snapd in uc20 <Created by sergiocazzolato> <https://github.com/snapcore/snapd/pull/9027>02:40
mborzeckimorning05:47
mborzeckiheh, looks our spread images don't have moreutils by default06:24
mborzeckimvo: hey06:44
mborzeckimvo: snap downloads don't work06:45
jameshis there any way to get ubuntu-image to include a system-user assertion in the resulting image?06:46
mvomborzecki: wut?06:46
mvomborzecki: what exactly is broken?06:46
mvomborzecki: store again?06:47
mborzeckimvo: yes, the status page lists the search api and downlaods as down06:48
mvo:/06:48
mvook06:48
mborzeckimvo: and they do appear down06:48
mupPR snapd#9015 closed: cmd/snap-preseed: handle relative chroot path <Bug> <Preseeding 🍞> <Created by stolowski> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/9015>06:56
pstolowskimorning07:02
mvogood morning pstolowski07:02
mborzeckipstolowski: hey07:16
mupPR snapd#9028 opened: interfaces: new helpers to get and compare system key, for use with seeding debug api (1/N) <Needs Samuele review> <Preseeding 🍞> <Created by stolowski> <https://github.com/snapcore/snapd/pull/9028>08:01
pedronispstolowski: small remarks there08:10
pstolowskity08:10
mborzeckiquick errand, back in 3008:46
jameshpedronis: I had a chat with wgrant earlier today.  His main concerns about the theme API was that it was specific to the theme use case rather than being something more generic.08:59
mborzeckire09:01
zygahello09:16
mvozyga: hey, how are you today?09:18
zygamvo hey09:18
zygamvo, like shit in the human centipede, I think09:19
zyganot well at all09:19
zygamvo, tired09:20
mvozyga: :( oh no09:20
zygayesterday was incredibly painful, sleeping a little here and there and otherwise just trying to find a position with least pain09:22
zygatoday morning was similar but it's somewhat better now so I grabbed the laptop09:22
zygaI will try to push forward with PRs09:22
mvozyga: thanks! and good luck that the meds help a bit more09:23
zyga28th is the day09:23
zyganot that far away now09:23
jameshxnox: fyi, you should now be able to build core20 using "snapcraft --use-lxd" for edge Snapcraft09:30
jameshmight be useful to you09:30
pedronisjamesh: thanks, let's discuss next week, what it means if anything09:40
pedroniszyga: hi, do you remember why in the system-key we list only the top directories in /sys/kernel/security/apparmor/features, for some directories, it makes sense like file or ptrace, the level below has a lot detail that isn't that variable, but something like the policy dir has versions which has supported ABIs I think, so there "policy" alone is not very informative/significative09:52
zygalet me think09:55
zygaI don't recall why we did this - thinking about it now perhaps because the combinations that actually exists are limited but that's a stretch09:55
zygaofftopic: I get a change to vendor.json after get-deps.sh09:56
zyga-                       "checksumSHA1": "UUnaKjQAEIclOm5Aqe2VmrMiQJY=",09:56
zyga+                       "checksumSHA1": "jK98PjsZS3gPOZfc+pqIQaz6r1A=",09:56
zygathat's secboot09:56
zygais that known?09:56
pedronisyes, but I have different diff there09:57
pedronishave you got the latest of both masters?09:57
pedronismy diff is like this:09:58
pedronis-                       "checksumSHA1": "fqejS2llZXw3gLnOYhg7pcSlY+Q=",09:58
pedronis+                       "checksumSHA1": "Yfj2ZrgRrklXrshCM1RxH5pvUY8="09:58
zygare, sorry I was taking meds10:04
zygaI have latest master, I just pulled10:05
zygaas for both masters, I don't have secboot checked out separately10:05
zygaweird10:06
mupPR snapd#9029 opened: api: seeding debug api (2/N) <Preseeding 🍞> <Created by stolowski> <https://github.com/snapcore/snapd/pull/9029>10:07
mborzeckiagain quick errand, back in 3010:21
mupPR snapd#9030 opened: bootloader/assets: helpers for registering per-edition snippets, register snippets for grub <UC20> <Created by bboozzoo> <https://github.com/snapcore/snapd/pull/9030>10:22
mupPR snapd#9022 closed: usersession/userd: do not modify XDG_DATA_DIRS when calling xdg-open <Created by mvo5> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/9022>10:37
zygahmm, we don't have a debian 10 image?10:54
mborzeckire11:03
mborzeckizyga: but we have sid :P11:03
mborzeckiand oldstable :/11:03
zygamborzecki we actually have 1011:04
zygait's just not used11:04
zygaanyway, I have what I needed11:04
xnoxjamesh:  horay!11:07
jameshxnox: this is the relevant change: https://github.com/snapcore/snapcraft/pull/3218 -- Snapcraft will now enable security.syscalls.intercept.mknod on the container if there is kernel support, which allows the few mknod calls to succeed.11:09
mupPR snapcraft#3218: lxd: enable security.syscalls.intercept.mknod if supported to allow snaps to create some device nodes <bug> <Created by jhenstridge> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/3218>11:09
zygawe should get the new leap image11:20
mborzeckizyga: 15.2?11:31
zyganew leap version, yeah11:31
zygawe seem to have the image? (not sure if cachio made this ahead of time or if we are inheriting one somehow)11:32
=== ijohnson|EOD is now known as ijohnson
ijohnsonmorning folks11:38
zygahello Ian11:39
ijohnsonhey zyga11:40
zygacurious, even leap 15.2 has relatively old systemd11:45
zyga23411:45
zygamborzecki took a while but I updated https://github.com/snapcore/snapd/pull/8977 - not much change but I think it's ready for another look11:52
mupPR #8977: cmd/snap: track started apps and hooks <Created by zyga> <https://github.com/snapcore/snapd/pull/8977>11:52
mborzeckizyga: k, will take a look11:52
zygathanks!11:52
* zyga afk for 10 minutes12:03
ijohnsonI have now officially hit the same problem as popey, where I have too many snaps installed and no longer get refreshes :-/12:15
ijohnsonpedronis: did the bulk refresh stuff you worked on already land in edge ?12:15
pedronisijohnson: no, it's blocked on the store fixing perf issues12:15
ijohnsonah ok12:16
* ijohnson snap removes many things in the meantime12:16
popeyI worked around this by wiping my laptop12:16
popeyI now only have 68 snaps12:16
ijohnsonI just realized I had 98 snaps this morning12:17
popeyI had 300 at one point12:17
ijohnsonoh wow that's impressive you could even get to that point :-D12:17
popeyNot wishing to brag :)12:17
popeyIkr12:17
popeyAlso 2x all of them12:17
ijohnsonah right, also I have 207 .snap files in my /var/lib/snapd/snaps12:19
ijohnsonalthough also I did manually set snapd to keep 5 revisions12:19
mupPR snapd#9031 opened: interfaces/audio-playback: let pulseaudio own org.pulseaudio.Server <Created by alfonsosanchezbeato> <https://github.com/snapcore/snapd/pull/9031>12:37
mupPR snapd#9032 opened: secboot: add call to reseal an existing key <UC20> <Created by cmatsuoka> <https://github.com/snapcore/snapd/pull/9032>12:42
mupPR snapcraft#3220 closed: review tools: link or copy snap to snap common <bug> <Created by sergiusens> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/3220>13:00
mupPR snapd#9033 opened: osutil, many: add helper for checking whether the process is a go test binary  <Created by bboozzoo> <https://github.com/snapcore/snapd/pull/9033>13:07
mupPR snapd#9034 opened: cmd/snap-seccomp/syscalls: add faccessat2 <Simple 😃> <Created by bboozzoo> <https://github.com/snapcore/snapd/pull/9034>13:33
zygamborzecki, so about https://github.com/snapcore/snapd/pull/897713:46
mupPR #8977: cmd/snap: track started apps and hooks <Created by zyga> <https://github.com/snapcore/snapd/pull/8977>13:46
zygamborzecki apart from failures in master I think it looks good13:46
zygaI played with it it some more and ran some more tests in a loop to be sure13:46
zygabtw, who is looking at the seccomp test failure?13:48
mborzeckizyga: #903413:56
mupPR #9034: cmd/snap-seccomp/syscalls: add faccessat2 <Simple 😃> <Created by bboozzoo> <https://github.com/snapcore/snapd/pull/9034>13:56
zygaah, thanks!13:57
zygamerge it already :)13:58
zygahmm, interfaces-pulseaudio is failing14:02
* zyga lunch14:14
cachiozyga, could you please take a look to #897314:54
mupPR #8973: tests: moving journalctl.sh to a new journal-state tool <Created by sergiocazzolato> <https://github.com/snapcore/snapd/pull/8973>14:54
zygasure14:55
cachiozyga, and this #890314:55
mupPR #8903: tests: new core config helper <Created by sergiocazzolato> <https://github.com/snapcore/snapd/pull/8903>14:55
cachiozyga, thanks a lot14:55
zygasure, one it14:55
zygaon it*14:55
mupPR snapcraft#3221 opened: repo: install requested build-package versions <Created by cjp256> <https://github.com/snapcore/snapcraft/pull/3221>14:55
zygacachio first done, please look15:02
zyga+1 assuming the two comments are adjusted15:03
zygauh, one hour till next pill15:04
zygaI hate this time15:04
zygaafk for a while15:10
ijohnsonmvo: looks like https://github.com/snapcore/snapd/pull/9024 is ready, the only failed tests look like store failures15:56
mupPR #9024: sysconfig/cloudinit: add RestrictCloudInit <Created by mvo5> <https://github.com/snapcore/snapd/pull/9024>15:56
mupPR snapd#9035 opened: o/devicestate: save seeding/preseeding times for use with debug seeding api (3/N) <Preseeding 🍞> <Created by stolowski> <https://github.com/snapcore/snapd/pull/9035>16:03
ijohnsonmvo: if you're still around, if you could close and re-open #9026, I added the "Run nested" label, so all the nested spread tests in that PR will actually run so we should be able to see those pass in Github which would be cool16:50
mupPR #9026: tests/nested/manual: add spread tests for cloud-init vuln <Run nested> <Created by mvo5> <https://github.com/snapcore/snapd/pull/9026>16:50
ijohnsoncachio: if you have time could you take a look at the nested spread tests in #9026 ?16:52
mupPR #9026: tests/nested/manual: add spread tests for cloud-init vuln <Run nested> <Created by mvo5> <https://github.com/snapcore/snapd/pull/9026>16:52
=== ijohnson is now known as ijohnson|lunch
mupPR snapd#9036 opened: snapshots: import of a snapshot set <Created by slimjim777> <https://github.com/snapcore/snapd/pull/9036>16:53
zygamvo https://github.com/snapcore/snapd/pull/903717:03
mupPR #9037: tests: adjust xdg-open after launcher changes <Simple 😃> <⚠ Critical> <Created by zyga> <https://github.com/snapcore/snapd/pull/9037>17:03
mupPR snapd#9037 opened: tests: adjust xdg-open after launcher changes <Simple 😃> <⚠ Critical> <Created by zyga> <https://github.com/snapcore/snapd/pull/9037>17:04
zygabrb17:04
pedroniswe have 80 open pull requests17:08
pedronisthere's some practical reasons for that, but we'll probably need to go back to mostly reviewing soon17:08
zygapedronis ^ that one is easy and fixes (partially) master17:08
=== ijohnson|lunch is now known as ijohnson
ijohnsonzyga: approved your xdg-open PR17:20
zygathanks :)17:20
zygathis will need force-merge or merge into the other fix branch from maciek17:21
zyga(for seccomp)17:21
ijohnsonzyga: ah right, yeah I added critical label to the other one and will check in on that to merge17:22
ijohnsonah but wait that one will also break on xdg-open too17:22
zygaack17:22
ijohnsonand there goes mvo with sudo git merge powers17:22
zygavader: noooooo17:26
cachioijohnson, hey, if you have time could you please take a look to #8903?18:09
mupPR #8903: tests: new core config helper <Created by sergiocazzolato> <https://github.com/snapcore/snapd/pull/8903>18:09
ijohnsoncachio: sure, did you see my ping about the nested cloud-init PR?18:09
cachioijohnson, no18:20
cachiochecking now18:20
ijohnsonthanks18:20
ijohnsonthose tests were what we landed for the cloud-init CVE18:20
cachioijohnson, I'll need to change how we run the nested tests because we are creating many nested/manual tests18:55
ijohnsoncachio: yes that PR adds 8 more nested tests18:56
ijohnsoncachio: is it a workers issue ?18:56
cachioyes18:56
cachioI'll split the nightly suite in 2 jobs18:56
cachio1 for nightly18:56
cachioand 1 nested18:56
cachioand perhaps 1 manual18:57
ijohnsonok, makes sense18:57
cachioalso because those use different spread params18:57
cachiospread env vars18:57
cachioyou are taking the #9026 when mvo is on vacations?18:58
mupPR #9026: tests/nested/manual: add spread tests for cloud-init vuln <Run nested> <Created by mvo5> <https://github.com/snapcore/snapd/pull/9026>18:58
ijohnsoncachio: I'd prefer if we could land 9026 as-is first if that's okay with you and then yes I will work on any follow-ups needed18:59
ijohnsonit would be good to make sure that master gets the fix for the CVE asap, in case there are devices that are only following edge, they will not get the fix yet since the fix is only on stable19:00
ijohnsongranted that's a very small number of devices I think, but still19:00
cachioijohnson, ok, I think the only important is to avoind installing/removing genisoimage19:00
cachiothis could break the following tests19:00
ijohnsoncachio: sure I think I can push a change, what's the issue with genisoimage ?19:00
ijohnsonah is that package already installed ?19:00
cachioyes19:00
cachiowe do that inthe spread.yaml19:01
cachiowhile the suite is preapred19:01
ijohnsoncachio: let me push up a change for that then to mvo's pr19:01
cachioijohnson,  then there are some other cosmetic stuff that can wait19:01
ijohnsonok19:02
ijohnsoncachio: pushed up a change to not install/remove genisoimage19:04
cachioijohnson, thanks19:05
cachiolet me check a bit more and I'll approve it19:05
ijohnsoncachio: I'd like to close and re-open 9026 actually, so that we can have the nested spread runs run too, do you know if it works to add the label to the pr after it is opened ? I seem to recall it doesn't work to add the label afterwards19:09
ijohnsonbut I also don't know if I can re-open the PR if I close it since mvo is the one who opened it19:09
ijohnsonI suppose I could re-open it with a new PR number myself19:09
cachioijohnson, I can also run the tests here and paste hte result19:10
ijohnsonokay that works too19:10
cachioijohnson, +119:50
cachioattached all the logs19:50
ijohnsonThanks cachio19:54
cachioijohnson, yaw19:54
mupPR snapd#8903 closed: tests: new core config helper <Created by sergiocazzolato> <Merged by sergiocazzolato> <https://github.com/snapcore/snapd/pull/8903>20:30
* sdhd-sascha damn, just going backing back to SuSE... But the Kubic Distro didn't work with Rancher.... Hmm... (Then i look for an channel to talk... couldn't find some...20:40
sdhd-saschaI wonder, what is really "open"source...20:41
sdhd-saschaohOh, i talk .... But ... ;-)20:51
sdhd-saschaijohnson: you, can't slowly me?22:19
sdhd-saschaoh, i hope you know, that i just mean it with "words"22:22
sdhd-saschaijohnson: i'm already repeatly read my text... and nothind is true!!!22:26
sdhd-saschaijohnson: i'm sorry ;-)22:29
sdhd-saschaijohnson: i'm damn fucking angry, about our wourld!!! ...22:31
sdhd-saschaif i had a problem, whit to much beer.. i know where "ubuntu" is... but i didn't know where i can distorquer them .... ?  hmmm.... (me ...)22:37
sdhd-saschai want to say, that other ompanys are not here...22:38
sdhd-saschaijohnson: how are you ? i'm not angry?22:42
sdhd-sascha(dont now) I can learn.22:47

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!