=== Eighth_Doctor is now known as Conan_Kudo
=== Conan_Kudo is now known as Eighth_Doctor
[02:40] <mup> PR snapd#9027 opened: tests: refresh/revert snapd in uc20 <Created by sergiocazzolato> <https://github.com/snapcore/snapd/pull/9027>
[05:47] <mborzecki> morning
[06:24] <mborzecki> heh, looks our spread images don't have moreutils by default
[06:44] <mborzecki> mvo: hey
[06:45] <mborzecki> mvo: snap downloads don't work
[06:46] <jamesh> is there any way to get ubuntu-image to include a system-user assertion in the resulting image?
[06:46] <mvo> mborzecki: wut?
[06:46] <mvo> mborzecki: what exactly is broken?
[06:47] <mvo> mborzecki: store again?
[06:48] <mborzecki> mvo: yes, the status page lists the search api and downlaods as down
[06:48] <mvo> :/
[06:48] <mvo> ok
[06:48] <mborzecki> mvo: and they do appear down
[06:56] <mup> PR snapd#9015 closed: cmd/snap-preseed: handle relative chroot path <Bug> <Preseeding 🍞> <Created by stolowski> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/9015>
[07:02] <pstolowski> morning
[07:02] <mvo> good morning pstolowski
[07:16] <mborzecki> pstolowski: hey
[08:01] <mup> PR snapd#9028 opened: interfaces: new helpers to get and compare system key, for use with seeding debug api (1/N) <Needs Samuele review> <Preseeding 🍞> <Created by stolowski> <https://github.com/snapcore/snapd/pull/9028>
[08:10] <pedronis> pstolowski: small remarks there
[08:10] <pstolowski> ty
[08:46] <mborzecki> quick errand, back in 30
[08:59] <jamesh> pedronis: I had a chat with wgrant earlier today.  His main concerns about the theme API was that it was specific to the theme use case rather than being something more generic.
[09:01] <mborzecki> re
[09:16] <zyga> hello
[09:18] <mvo> zyga: hey, how are you today?
[09:18] <zyga> mvo hey
[09:19] <zyga> mvo, like shit in the human centipede, I think
[09:19] <zyga> not well at all
[09:20] <zyga> mvo, tired
[09:20] <mvo> zyga: :( oh no
[09:22] <zyga> yesterday was incredibly painful, sleeping a little here and there and otherwise just trying to find a position with least pain
[09:22] <zyga> today morning was similar but it's somewhat better now so I grabbed the laptop
[09:22] <zyga> I will try to push forward with PRs
[09:23] <mvo> zyga: thanks! and good luck that the meds help a bit more
[09:23] <zyga> 28th is the day
[09:23] <zyga> not that far away now
[09:30] <jamesh> xnox: fyi, you should now be able to build core20 using "snapcraft --use-lxd" for edge Snapcraft
[09:30] <jamesh> might be useful to you
[09:40] <pedronis> jamesh: thanks, let's discuss next week, what it means if anything
[09:52] <pedronis> zyga: hi, do you remember why in the system-key we list only the top directories in /sys/kernel/security/apparmor/features, for some directories, it makes sense like file or ptrace, the level below has a lot detail that isn't that variable, but something like the policy dir has versions which has supported ABIs I think, so there "policy" alone is not very informative/significative
[09:55] <zyga> let me think
[09:55] <zyga> I don't recall why we did this - thinking about it now perhaps because the combinations that actually exists are limited but that's a stretch
[09:56] <zyga> offtopic: I get a change to vendor.json after get-deps.sh
[09:56] <zyga> -                       "checksumSHA1": "UUnaKjQAEIclOm5Aqe2VmrMiQJY=",
[09:56] <zyga> +                       "checksumSHA1": "jK98PjsZS3gPOZfc+pqIQaz6r1A=",
[09:56] <zyga> that's secboot
[09:56] <zyga> is that known?
[09:57] <pedronis> yes, but I have different diff there
[09:57] <pedronis> have you got the latest of both masters?
[09:58] <pedronis> my diff is like this:
[09:58] <pedronis> -                       "checksumSHA1": "fqejS2llZXw3gLnOYhg7pcSlY+Q=",
[09:58] <pedronis> +                       "checksumSHA1": "Yfj2ZrgRrklXrshCM1RxH5pvUY8="
[10:04] <zyga> re, sorry I was taking meds
[10:05] <zyga> I have latest master, I just pulled
[10:05] <zyga> as for both masters, I don't have secboot checked out separately
[10:06] <zyga> weird
[10:07] <mup> PR snapd#9029 opened: api: seeding debug api (2/N) <Preseeding 🍞> <Created by stolowski> <https://github.com/snapcore/snapd/pull/9029>
[10:21] <mborzecki> again quick errand, back in 30
[10:22] <mup> PR snapd#9030 opened: bootloader/assets: helpers for registering per-edition snippets, register snippets for grub <UC20> <Created by bboozzoo> <https://github.com/snapcore/snapd/pull/9030>
[10:37] <mup> PR snapd#9022 closed: usersession/userd: do not modify XDG_DATA_DIRS when calling xdg-open <Created by mvo5> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/9022>
[10:54] <zyga> hmm, we don't have a debian 10 image?
[11:03] <mborzecki> re
[11:03] <mborzecki> zyga: but we have sid :P
[11:03] <mborzecki> and oldstable :/
[11:04] <zyga> mborzecki we actually have 10
[11:04] <zyga> it's just not used
[11:04] <zyga> anyway, I have what I needed
[11:07] <xnox> jamesh:  horay!
[11:09] <jamesh> xnox: this is the relevant change: https://github.com/snapcore/snapcraft/pull/3218 -- Snapcraft will now enable security.syscalls.intercept.mknod on the container if there is kernel support, which allows the few mknod calls to succeed.
[11:09] <mup> PR snapcraft#3218: lxd: enable security.syscalls.intercept.mknod if supported to allow snaps to create some device nodes <bug> <Created by jhenstridge> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/3218>
[11:20] <zyga> we should get the new leap image
[11:31] <mborzecki> zyga: 15.2?
[11:31] <zyga> new leap version, yeah
[11:32] <zyga> we seem to have the image? (not sure if cachio made this ahead of time or if we are inheriting one somehow)
=== ijohnson|EOD is now known as ijohnson
[11:38] <ijohnson> morning folks
[11:39] <zyga> hello Ian
[11:40] <ijohnson> hey zyga
[11:45] <zyga> curious, even leap 15.2 has relatively old systemd
[11:45] <zyga> 234
[11:52] <zyga> mborzecki took a while but I updated https://github.com/snapcore/snapd/pull/8977 - not much change but I think it's ready for another look
[11:52] <mup> PR #8977: cmd/snap: track started apps and hooks <Created by zyga> <https://github.com/snapcore/snapd/pull/8977>
[11:52] <mborzecki> zyga: k, will take a look
[11:52] <zyga> thanks!
[12:03]  * zyga afk for 10 minutes
[12:15] <ijohnson> I have now officially hit the same problem as popey, where I have too many snaps installed and no longer get refreshes :-/
[12:15] <ijohnson> pedronis: did the bulk refresh stuff you worked on already land in edge ?
[12:15] <pedronis> ijohnson: no, it's blocked on the store fixing perf issues
[12:16] <ijohnson> ah ok
[12:16]  * ijohnson snap removes many things in the meantime
[12:16] <popey> I worked around this by wiping my laptop
[12:16] <popey> I now only have 68 snaps
[12:17] <ijohnson> I just realized I had 98 snaps this morning
[12:17] <popey> I had 300 at one point
[12:17] <ijohnson> oh wow that's impressive you could even get to that point :-D
[12:17] <popey> Not wishing to brag :)
[12:17] <popey> Ikr
[12:17] <popey> Also 2x all of them
[12:19] <ijohnson> ah right, also I have 207 .snap files in my /var/lib/snapd/snaps
[12:19] <ijohnson> although also I did manually set snapd to keep 5 revisions
[12:37] <mup> PR snapd#9031 opened: interfaces/audio-playback: let pulseaudio own org.pulseaudio.Server <Created by alfonsosanchezbeato> <https://github.com/snapcore/snapd/pull/9031>
[12:42] <mup> PR snapd#9032 opened: secboot: add call to reseal an existing key <UC20> <Created by cmatsuoka> <https://github.com/snapcore/snapd/pull/9032>
[13:00] <mup> PR snapcraft#3220 closed: review tools: link or copy snap to snap common <bug> <Created by sergiusens> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/3220>
[13:07] <mup> PR snapd#9033 opened: osutil, many: add helper for checking whether the process is a go test binary  <Created by bboozzoo> <https://github.com/snapcore/snapd/pull/9033>
[13:33] <mup> PR snapd#9034 opened: cmd/snap-seccomp/syscalls: add faccessat2 <Simple 😃> <Created by bboozzoo> <https://github.com/snapcore/snapd/pull/9034>
[13:46] <zyga> mborzecki, so about https://github.com/snapcore/snapd/pull/8977
[13:46] <mup> PR #8977: cmd/snap: track started apps and hooks <Created by zyga> <https://github.com/snapcore/snapd/pull/8977>
[13:46] <zyga> mborzecki apart from failures in master I think it looks good
[13:46] <zyga> I played with it it some more and ran some more tests in a loop to be sure
[13:48] <zyga> btw, who is looking at the seccomp test failure?
[13:56] <mborzecki> zyga: #9034
[13:56] <mup> PR #9034: cmd/snap-seccomp/syscalls: add faccessat2 <Simple 😃> <Created by bboozzoo> <https://github.com/snapcore/snapd/pull/9034>
[13:57] <zyga> ah, thanks!
[13:58] <zyga> merge it already :)
[14:02] <zyga> hmm, interfaces-pulseaudio is failing
[14:14]  * zyga lunch
[14:54] <cachio> zyga, could you please take a look to #8973
[14:54] <mup> PR #8973: tests: moving journalctl.sh to a new journal-state tool <Created by sergiocazzolato> <https://github.com/snapcore/snapd/pull/8973>
[14:55] <zyga> sure
[14:55] <cachio> zyga, and this #8903
[14:55] <mup> PR #8903: tests: new core config helper <Created by sergiocazzolato> <https://github.com/snapcore/snapd/pull/8903>
[14:55] <cachio> zyga, thanks a lot
[14:55] <zyga> sure, one it
[14:55] <zyga> on it*
[14:55] <mup> PR snapcraft#3221 opened: repo: install requested build-package versions <Created by cjp256> <https://github.com/snapcore/snapcraft/pull/3221>
[15:02] <zyga> cachio first done, please look
[15:03] <zyga> +1 assuming the two comments are adjusted
[15:04] <zyga> uh, one hour till next pill
[15:04] <zyga> I hate this time
[15:10] <zyga> afk for a while
[15:56] <ijohnson> mvo: looks like https://github.com/snapcore/snapd/pull/9024 is ready, the only failed tests look like store failures
[15:56] <mup> PR #9024: sysconfig/cloudinit: add RestrictCloudInit <Created by mvo5> <https://github.com/snapcore/snapd/pull/9024>
[16:03] <mup> PR snapd#9035 opened: o/devicestate: save seeding/preseeding times for use with debug seeding api (3/N) <Preseeding 🍞> <Created by stolowski> <https://github.com/snapcore/snapd/pull/9035>
[16:50] <ijohnson> mvo: if you're still around, if you could close and re-open #9026, I added the "Run nested" label, so all the nested spread tests in that PR will actually run so we should be able to see those pass in Github which would be cool
[16:50] <mup> PR #9026: tests/nested/manual: add spread tests for cloud-init vuln <Run nested> <Created by mvo5> <https://github.com/snapcore/snapd/pull/9026>
[16:52] <ijohnson> cachio: if you have time could you take a look at the nested spread tests in #9026 ?
[16:52] <mup> PR #9026: tests/nested/manual: add spread tests for cloud-init vuln <Run nested> <Created by mvo5> <https://github.com/snapcore/snapd/pull/9026>
=== ijohnson is now known as ijohnson|lunch
[16:53] <mup> PR snapd#9036 opened: snapshots: import of a snapshot set <Created by slimjim777> <https://github.com/snapcore/snapd/pull/9036>
[17:03] <zyga> mvo https://github.com/snapcore/snapd/pull/9037
[17:03] <mup> PR #9037: tests: adjust xdg-open after launcher changes <Simple 😃> <⚠ Critical> <Created by zyga> <https://github.com/snapcore/snapd/pull/9037>
[17:04] <mup> PR snapd#9037 opened: tests: adjust xdg-open after launcher changes <Simple 😃> <⚠ Critical> <Created by zyga> <https://github.com/snapcore/snapd/pull/9037>
[17:04] <zyga> brb
[17:08] <pedronis> we have 80 open pull requests
[17:08] <pedronis> there's some practical reasons for that, but we'll probably need to go back to mostly reviewing soon
[17:08] <zyga> pedronis ^ that one is easy and fixes (partially) master
=== ijohnson|lunch is now known as ijohnson
[17:20] <ijohnson> zyga: approved your xdg-open PR
[17:20] <zyga> thanks :)
[17:21] <zyga> this will need force-merge or merge into the other fix branch from maciek
[17:21] <zyga> (for seccomp)
[17:22] <ijohnson> zyga: ah right, yeah I added critical label to the other one and will check in on that to merge
[17:22] <ijohnson> ah but wait that one will also break on xdg-open too
[17:22] <zyga> ack
[17:22] <ijohnson> and there goes mvo with sudo git merge powers
[17:26] <zyga> vader: noooooo
[18:09] <cachio> ijohnson, hey, if you have time could you please take a look to #8903?
[18:09] <mup> PR #8903: tests: new core config helper <Created by sergiocazzolato> <https://github.com/snapcore/snapd/pull/8903>
[18:09] <ijohnson> cachio: sure, did you see my ping about the nested cloud-init PR?
[18:20] <cachio> ijohnson, no
[18:20] <cachio> checking now
[18:20] <ijohnson> thanks
[18:20] <ijohnson> those tests were what we landed for the cloud-init CVE
[18:55] <cachio> ijohnson, I'll need to change how we run the nested tests because we are creating many nested/manual tests
[18:56] <ijohnson> cachio: yes that PR adds 8 more nested tests
[18:56] <ijohnson> cachio: is it a workers issue ?
[18:56] <cachio> yes
[18:56] <cachio> I'll split the nightly suite in 2 jobs
[18:56] <cachio> 1 for nightly
[18:56] <cachio> and 1 nested
[18:57] <cachio> and perhaps 1 manual
[18:57] <ijohnson> ok, makes sense
[18:57] <cachio> also because those use different spread params
[18:57] <cachio> spread env vars
[18:58] <cachio> you are taking the #9026 when mvo is on vacations?
[18:58] <mup> PR #9026: tests/nested/manual: add spread tests for cloud-init vuln <Run nested> <Created by mvo5> <https://github.com/snapcore/snapd/pull/9026>
[18:59] <ijohnson> cachio: I'd prefer if we could land 9026 as-is first if that's okay with you and then yes I will work on any follow-ups needed
[19:00] <ijohnson> it would be good to make sure that master gets the fix for the CVE asap, in case there are devices that are only following edge, they will not get the fix yet since the fix is only on stable
[19:00] <ijohnson> granted that's a very small number of devices I think, but still
[19:00] <cachio> ijohnson, ok, I think the only important is to avoind installing/removing genisoimage
[19:00] <cachio> this could break the following tests
[19:00] <ijohnson> cachio: sure I think I can push a change, what's the issue with genisoimage ?
[19:00] <ijohnson> ah is that package already installed ?
[19:00] <cachio> yes
[19:01] <cachio> we do that inthe spread.yaml
[19:01] <cachio> while the suite is preapred
[19:01] <ijohnson> cachio: let me push up a change for that then to mvo's pr
[19:01] <cachio> ijohnson,  then there are some other cosmetic stuff that can wait
[19:02] <ijohnson> ok
[19:04] <ijohnson> cachio: pushed up a change to not install/remove genisoimage
[19:05] <cachio> ijohnson, thanks
[19:05] <cachio> let me check a bit more and I'll approve it
[19:09] <ijohnson> cachio: I'd like to close and re-open 9026 actually, so that we can have the nested spread runs run too, do you know if it works to add the label to the pr after it is opened ? I seem to recall it doesn't work to add the label afterwards
[19:09] <ijohnson> but I also don't know if I can re-open the PR if I close it since mvo is the one who opened it
[19:09] <ijohnson> I suppose I could re-open it with a new PR number myself
[19:10] <cachio> ijohnson, I can also run the tests here and paste hte result
[19:10] <ijohnson> okay that works too
[19:50] <cachio> ijohnson, +1
[19:50] <cachio> attached all the logs
[19:54] <ijohnson> Thanks cachio
[19:54] <cachio> ijohnson, yaw
[20:30] <mup> PR snapd#8903 closed: tests: new core config helper <Created by sergiocazzolato> <Merged by sergiocazzolato> <https://github.com/snapcore/snapd/pull/8903>
[20:40]  * sdhd-sascha damn, just going backing back to SuSE... But the Kubic Distro didn't work with Rancher.... Hmm... (Then i look for an channel to talk... couldn't find some...
[20:41] <sdhd-sascha> I wonder, what is really "open"source...
[20:51] <sdhd-sascha> ohOh, i talk .... But ... ;-)
[22:19] <sdhd-sascha> ijohnson: you, can't slowly me?
[22:22] <sdhd-sascha> oh, i hope you know, that i just mean it with "words"
[22:26] <sdhd-sascha> ijohnson: i'm already repeatly read my text... and nothind is true!!!
[22:29] <sdhd-sascha> ijohnson: i'm sorry ;-)
[22:31] <sdhd-sascha> ijohnson: i'm damn fucking angry, about our wourld!!! ...
[22:37] <sdhd-sascha> if i had a problem, whit to much beer.. i know where "ubuntu" is... but i didn't know where i can distorquer them .... ?  hmmm.... (me ...)
[22:38] <sdhd-sascha> i want to say, that other ompanys are not here...
[22:42] <sdhd-sascha> ijohnson: how are you ? i'm not angry?
[22:47] <sdhd-sascha> (dont now) I can learn.