/srv/irclogs.ubuntu.com/2020/11/12/#snappy.txt

mupPR snapcraft#3371 opened: snap: get legacy branch from local <Created by sergiusens> <https://github.com/snapcore/snapcraft/pull/3371>00:49
mborzeckimorning06:49
mborzeckire06:50
zygamborzecki: hello07:23
* zyga installed kubuntu and now wonders how to do stuff in kde :P07:23
mborzeckihahah07:23
mborzeckizyga:  hey07:23
zygaI'm back on the x240 until the new one arrives, need to do some serial port things and I wanted to avoid doing it from window07:24
zyga*windows07:24
zygahow's uc20?07:24
mborzeckizyga: it was moving, i was off for 2 days, but there's 2.48 branch, so things are looking good?07:40
zygamborzecki: ooh, new house time?07:41
mborzeckizyga: nah, i mean uc20 was moving, albeit slowly ;)07:42
zygaohhh07:42
zygawell, :)07:42
mupPR snapd#9629 opened: spdx: update to SPDX license list version: 3.10 2020-08-03 <Simple 😃> <Created by bboozzoo> <https://github.com/snapcore/snapd/pull/9629>07:56
zyga+108:03
zygathough it remains to be seen if this can be merged08:03
pstolowskimorning08:03
zygahey pstolowski08:03
pstolowskihey zyga08:03
mborzeckipstolowski: hey08:07
mborzeckino mvo today?08:07
zygaI haven't seen him yet08:07
zygahey mvo :)08:09
mborzeckimvo: hey, i see 2.48 is branched, yay!08:10
mvozyga: good morning08:10
mvomborzecki: yes! but one bug is being fixed right now, there is a open PR from ian08:10
mborzeckipedronis: hi, i've updated the list of licenses, but iirc you mentioned that some store tooling may be affected, best if you take a look https://github.com/snapcore/snapd/pull/962908:11
mupPR #9629: spdx: update to SPDX license list version: 3.10 2020-08-03 <Simple 😃> <Created by bboozzoo> <https://github.com/snapcore/snapd/pull/9629>08:11
mborzeckiwonder whether we should keep some of the osi approved identifies that are deprecated08:13
pedronismborzecki: it's timing question, let's chat in the standup about it08:13
mborzeckieg the non deprecated ids have GPL-3.0-only instead of GPL-3.008:13
mborzeckipedronis: sure08:14
pedronismvo: mborzecki: we have nested failures here: https://github.com/snapcore/snapd/pull/962608:14
mupPR #9626: snap-bootstrap,secboot: call BlockPCRProtectionPolicies in all boot modes <Run nested> <UC20> <Created by chrisccoulson> <https://github.com/snapcore/snapd/pull/9626>08:14
pedronismvo: I think the PR your merged from sergio broke nested tested, that's fixed I think but was a bit annoying08:15
mvouh, sorry!08:15
pedronisnested.sh itself uses systemd stuff08:15
mvopedronis: did https://github.com/snapcore/snapd/pull/9626/commits/39c2f79922cae157076784705deca45487144d79 fix it?08:15
pedronisseems so, but we have other failures now08:15
pedronisabout gadget08:15
pedronisstuff08:15
pedronisthat's why somebody should look08:16
mborzecki[change 2 "Setup system for run mode" task] failed: cannot use gadget: gadget does not support encrypted data: volume "pc" has no structure with system-save role08:16
mborzeckihmm08:16
pedronismvo: ah, but the fix is not quite right? I honestly didn't look at it08:17
pedronisit was late08:17
mborzeckii can take a look08:17
mborzeckiseems like it's not using the right helper to build the image08:17
mvo2020-11-12T04:33:57.7272622Z Nov 12 04:19:39 ubuntu snapd[1240]: taskrunner.go:271: [change 2 "Setup system for run mode" task] failed: cannot use gadget: gadget does not support encrypted data: volume "pc" has no structure with system-save role08:18
pedronismborzecki: 9628 has the same failure plus one more08:20
pedronismight be order though08:20
mborzeckipedronis: mvo: the test is setting NESTED_BUILD_SNAPD_FROM_CURRENT: false, which will not repack the gadget snap with ubuntu-save08:22
mborzeckis/with/adding/08:23
mvomborzecki: nice find08:23
pedronismborzecki: but I suppose it's intentional not to use the current snapd08:23
pedronisso the fix is not just to flip it, no?08:23
pedronisit seems we are mixing different stuff together08:24
mborzeckipedronis: i think we can use 20/edge/next for the gaget snap08:24
mborzeckior not, there's no 20/beta/next :/08:25
mvomborzecki: let me check08:29
mvomborzecki: 20/edge/next08:30
mborzeckimvo: so the test wats to switch between 20/beta and 20/edge, but none of those revisions can be used when encryption because it lacks ubuntu-save08:32
pedroniswhy did it start failing only now though?08:35
* pedronis is missing something08:35
pedronisare we resuing the wrong vm?08:36
pedronisthose tests are not about encryption08:36
pedronismborzecki: we had passined nested tests yesterday, they started failing only late08:37
pedronisafter the systemd merge afaik08:37
mvopedronis: fwiw https://github.com/snapcore/snapd/pull/9606 was merged by sergio not me, I did approve it though08:38
mupPR #9606: tests: Use systemd-run on tests part2 <Created by sergiocazzolato> <Merged by sergiocazzolato> <https://github.com/snapcore/snapd/pull/9606>08:38
pedronismvo: it has one review fwiw08:39
mvopedronis: yes, it was a premature merge :(08:39
pedronismvo: anyway I'm still quite confused what is going on08:39
mvopedronis: same here, just wanted to clarify that I did not hit merge on this one :)08:39
mvopedronis: and looking at the diff it seems largely unrelated to nested08:40
mborzeckimvo: pedronis: the test would also be skippd if the revisions in beta & edge are the same, maybe something changed there?08:41
pedronishttps://github.com/snapcore/snapd/pull/9619 this passed with nested08:42
mupPR #9619: cmd/snap-bootstrap,o/devicestate: use a secret to pair data and save <Run nested> <UC20> <Created by pedronis> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/9619>08:42
mvomborzecki: 20/beta 2020-09-02 and 20/edge 2020-10-21 seem to be not that :/08:45
mvomborzecki: I mean, it looks like they have not recently changed08:45
pedronisanyway I thought we run only a few tests with the tpm ?08:46
pedronisand those are not part of it? or are they?08:46
pedronismborzecki: one question is what changed between 9169 and those prs08:47
pedronisheh, 961908:47
mborzeckihm we don't run tests after merging to master, do we?08:55
pedronisnot anymore I think08:57
mborzeckipedronis: the test also runs with TPM expliciltly enabled, i suppose it is to catch the resealing scenarios too09:25
mborzeckimvo: i think we should always run nested tests on 2.48 branch, they are skipped right now09:30
mvomborzecki: +109:32
mvomborzecki: let me know if I can help in any way btw, i.e. if it would help to have a 20/beta/next branch I could push that09:38
mborzeckimvo: i'm running this spread test on release/2.48 now, but yeah we could poke xnox to publish a gadget with ubuntu-save to 20/beta/next maybe and then go a fix the test09:40
mvomborzecki: I can do that to if it unblocks us09:41
mvomborzecki: just say the word :)09:43
mborzeckihmm `Nov 12 09:44:48 ubuntu snapd[1258]: taskrunner.go:271: [change 2 "Setup system for run mode" task] failed: cannot use gadget: gadget does not support encrypted data: volume "pc" has no structure with system-save role` on release/2.48 branch09:45
mvomborzecki: so it's broken everywhere and we don't know what/when :/ let's fix it :)09:48
mborzeckimvo: mhm, poking xnox on mm09:48
mvomborzecki: if he does not reply I can also do a upload to pc into 20/beta/next09:49
mborzeckimvo: mhm, in the meantime i'll look into having nested tests run on all pushes to release/** branches09:51
mvomborzecki: \o/09:51
mvomborzecki: I have a pc gadget based on beta with ubuntu-save that we could use, I'm building it right now but lxd is a bit slow it seems10:05
mborzeckimvo: that would work, is it just repacking the snap from 20/beta?10:07
mvomborzecki: correct, i took 20/beta and applied the diff from edge -> edge/next (which is just adding ubuntu-save)10:08
mborzeckimvo: ok, that should be fine then10:08
mvomborzecki: released into 20/beta/next10:16
mborzeckimvo: thanks, let me fix the test now10:16
mvoxnox: I uploaded a new pc gadget into 20/beta/next that contains ubuntu-save, it's otherwise just a repack of 20/beta. this will unbreak our tests and just fyi, it's a branch so noone outside of our tests is affected10:17
mvoxnox: hope you don't mind :)10:17
mborzeckimvo: ok, trying with updated test now, wish we didn't have so much magic hardcoded in NESTED_* env variables10:33
mvomborzecki: :( yes10:35
xnoxmvo:  that's fine! thanks.10:51
mborzeckimvo: omg, heh11:02
mvomborzecki: hm?11:02
mborzeckimvo: how can i get a revision of a snap from a branch? it's not shown in snap info11:02
mborzeckimvo: and not downloading the snap :)11:05
mvomborzecki: the revision is 11711:06
mborzeckimvo:  i know, the problem is that the tests uses snap info to find the revision of a snap :/ which does not work ofc11:06
mvomborzecki: oh, I see, yes, that is unfortunate :/11:07
mvomborzecki: as a workaround you could download the pc snaps, they are small. or we use the store api directly, I don't think we have something currently for this :/11:08
mvomborzecki: shall I have a look at store api? would that help you?11:08
mborzeckimvo: hmm i'll come up with something11:09
pedronismborzecki: this works curl -s -H "Snap-Device-Architecture: amd64" -H "Snap-Device-Series: 16" -X POST -H "Content-Type: application/json" --data '{"context": [], "actions": [{"action": "install", "name": "pc", "channel": "20/beta/next", "instance-key": "1"}]}' https://api.snapcraft.io/v2/snaps/refresh|jq11:17
pedronismvo: mborzecki: I pushed my tweaks to https://github.com/snapcore/snapd/pull/9628#pullrequestreview-528983238, needs more reviews (but probably after Chris PR), also the state machine diagram is wrong again :/11:19
mupPR #9628: secboot,cmd/snap-bootstrap: fix degraded mode cases with better device handling <Needs Samuele review> <Run nested> <UC20> <Created by anonymouse64> <https://github.com/snapcore/snapd/pull/9628>11:19
pedronismvo: btw should we squash-merge things for 2.48 ?  you added and removed the lable on 9628, same question for #962611:22
mupPR #9626: snap-bootstrap,secboot: call BlockPCRProtectionPolicies in all boot modes <Run nested> <UC20> <Created by chrisccoulson> <https://github.com/snapcore/snapd/pull/9626>11:22
guiverc`snap search libreoffice` (executing for a uf support query) gets error (403)..   just an FYI  https://api.snapcraft.io/v2/snaps/find?architecture=amd64&confinement=strict%2Cclassic&fields=base%2Cconfinement%2Ccontact%2Cdescription%2Cdownload%2Clicense%2Cprices%2Cprivate%2Cpublisher%2Crevision%2Csummary%2Ctitle%2Ctype%2Cversion%2Cwebsite%2Cstore-url%2Cmedia%2Ccommon-ids%2Cchannel&q=libreoffice11:25
guivercactually the error occurs on lots of queries (error on firefox..)11:26
mvoguiverc: looks like the store has some trouble right now :/11:32
guivercyep, thanks mvo, just saw popey tweet on #ubuntu-desktop11:33
mupPR snapd#9630 opened: tests: fix nested tests <Run nested> <Simple 😃> <Created by sergiocazzolato> <https://github.com/snapcore/snapd/pull/9630>11:37
mupPR snapd#9631 opened: cmd/snap: add snap debug connections/connection commands <Created by stolowski> <https://github.com/snapcore/snapd/pull/9631>11:37
mvopedronis, mborzecki I just looked at 9626 again - given that a) it got two reviews already b) we know why the nested test fails - I would like to merge it ? release/2.48 has the same test issue as this PR11:39
zygapstolowski: reviewed11:53
pstolowskizyga: thanks!11:57
pstolowskicachio_: hey, can you take another look at #9617?12:07
mupPR #9617: tests: compare options of mount units created by snapd and snapd-generator <Created by stolowski> <https://github.com/snapcore/snapd/pull/9617>12:07
cachiopstolowski, left a comment there12:12
cachioit is quick to fix12:12
pstolowskicachio: thx, updated12:12
mborzeckimvo: something is not quite right, is it possible to tell which github rev is the snapd in beta? snap info show it's latest/beta: 2.47.1+git1221.ge4f8507 2020-11-11 (10106)12:13
cachiopstolowski, +112:14
pstolowskity12:14
cachioyaw12:14
mborzeckimvo: i suspect it's missing the changes we added for luks/ext4 sizes12:15
mborzeckihmmm12:20
mborzeckiw8, but we moved the keys to a new location right?12:20
mborzeckiand the kernel was not rebuilt with new initramfs, so there's only theold snap-bootstrap which expects keys at the old location, so it's not possible to get a bootable system with stuff from the store atm12:21
mborzeckimvo: ^^12:21
mborzeckiso even if i kinda made a part of the test work (it installs atm), the system does not go past initramfs12:22
mvomborzecki: about the revision, you can "git show e4f8507 " or checkout etc12:22
mvomborzecki: so this is broken until we rebuild the kernel?12:23
mvomborzecki: with 2.48?12:23
mborzeckimvo: heh, i was searching in git log, but didn't find the rev, maybe had a typo there /o\12:23
mvomborzecki: in this case we need to put it to manual and move on and enable it again12:23
mborzeckimvo: yeah, i think so12:23
mvomborzecki: the leading "g" needs to be removed12:23
mvomborzecki: it's a bit confusing12:23
mborzeckimvo: removed the 'g', nvm it's pebkac most likely12:24
mvocould be a out-of-date local tree or something. anyway, given that we cannot fix this easily right now I will merge the branch from chris12:25
mvopedronis: do you want to review 9626 before it lands? ian had some questions. otherwise I land once tests have completed12:27
mborzeckii suppose pc-kernel 20/beta is not built with snapd beta right?12:28
pedronismvo: I worked on it12:30
pedronismvo: anyway I addressed Ian comments12:31
pedronisin fact12:31
pedronisI mean about 962612:31
mborzeckimvo: hmmm we may as well disable tpm/secure boot, so no encryption, but the test should work12:31
mborzeckiguess it's beter than disabling it completely12:31
pedronismborzecki: yes12:32
mupPR snapd#9632 opened: tests/nested/manual/refresh-revert-fundamentals: temporarily disable secure boot <Run nested> <Simple 😃> <Created by bboozzoo> <https://github.com/snapcore/snapd/pull/9632>12:43
mupPR snapd#9633 opened: github: run nested suite when commit is pushed to release branch <Run nested> <Simple 😃> <Created by bboozzoo> <https://github.com/snapcore/snapd/pull/9633>12:53
pstolowskiijohnson: hey, can you take another lokk at #9617? i've added proxy support13:04
mupPR #9617: tests: compare options of mount units created by snapd and snapd-generator <Created by stolowski> <https://github.com/snapcore/snapd/pull/9617>13:04
mborzeckihmm: apparmor="DENIED" operation="exec" profile="snap.test-snapd-after-before-service.before-middle" name="/bin/systemd-notify" pid=342298 comm="start" requested_mask="x" denied_mask="x" fsuid=0 ouid=013:12
mborzeckiehh, silly me13:12
ijohnsonpstolowski: yeah sure13:29
mborzeckiis the "service-control" task being used anywere? pstolowski, ijohnson any chance you remember?13:33
pstolowskimvo: yes, in #896013:35
mupPR #8960: o/snapstate,servicestate: use service-control task for service actions (9/9) <Needs Samuele review> <Services ⚙️> <⛔ Blocked> <Created by stolowski> <https://github.com/snapcore/snapd/pull/8960>13:35
pstolowskiups, mborzecki ^13:35
pstolowskimborzecki: why?13:37
mborzeckipstolowski: i'm looking at https://forum.snapcraft.io/t/use-of-before-and-after-keywords-to-define-the-start-order-of-snap-daemons/21082/5 i thought that snap start was fixed to use the right order, but it's not working13:40
mborzeckipstolowski: and there's actually 2 places doing something similar, but not quite? one is servicestate.Control which gnerates some commands, and the other is servicemgr.doServiceControl13:42
pstolowskimborzecki: are you looking at master?13:43
pstolowskior my branch?13:43
mborzeckipstolowski: master13:43
pstolowskimborzecki: ok. my branch centralizes things around services. would be good to have a spread test with reproducer and then run it against 896013:44
pstolowskimborzecki: i can look at this after standup13:45
pstolowskiseems like there is an example already13:45
pstolowskion the forum13:45
mborzeckipedronis: there, but it shows there's a bug somewhere13:48
mborzeckithis used to work iirc ;)13:49
pedronismborzecki: ?13:49
mborzeckiheh it's not fixed, found an unpushed commit from 2018 which does that13:59
mupPR snapd#9634 opened: boot,dirs,c/snap-bootstrap: avoid InstallHost* at the cost of some messiness <UC20> <Created by pedronis> <https://github.com/snapcore/snapd/pull/9634>14:03
pstolowskimborzecki: is that old fix for services large? does it have a spraed test already? i wonder if it makes sense to land it or if i should take over it and re-work on top of 896014:28
mborzeckipstolowski: it's here https://github.com/bboozzoo/snapd/commit/3b5103daf07141d0fefa02f2d774a3f4869aa684 half done and imo it thousl be fixed in servicestate.Control() instead of this14:29
pstolowskimborzecki: okay. probably makes sense to tackle it after 8960 as otherwise it would again delay landing of 8960 and possibly lead to annoying and confusing conflicts14:32
pstolowskimborzecki: and i can start with a spread test14:32
mborzeckipstolowski: hmm looking at 8960 again, this issue should be fixed there14:36
pstolowskimborzecki: that would be great. i'm going to create a spread test anyway to verify14:37
* cachio lunch14:51
mupPR snapd#9630 closed: tests: fix nested tests <Run nested> <Simple 😃> <Created by sergiocazzolato> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/9630>14:53
mupPR snapd#9626 closed: snap-bootstrap,secboot: call BlockPCRProtectionPolicies in all boot modes <Run nested> <UC20> <Created by chrisccoulson> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/9626>14:59
pedronisijohnson: thanks for answering to https://forum.snapcraft.io/t/configure-grub-with-ubuntu-core-20/2083515:09
ijohnsonpedronis: yah no problem, there have been a few other folks asking questions on uc20 on the forum I have tried to keep up with and answer15:12
pedronis#9628 needs reviews15:17
mupPR #9628: secboot,cmd/snap-bootstrap: fix degraded mode cases with better device handling <Needs Samuele review> <Run nested> <UC20> <Created by anonymouse64> <https://github.com/snapcore/snapd/pull/9628>15:17
ijohnsonhmm pedronis not sure I agree with 898ade549228a6ae93f117f91c57fe5a1325cca3 there15:17
ijohnsonlet me think about it a bit more, I'm concerned that by saving/observing m.isEncryptedDev we are giving too much meaning to that, when it could be false just by default15:17
ijohnsoni.e. we don't have a nice way to tell "we definitely saw an unencrypted disk before" and "we haven't yet seen any disk (encrypted or not) yet"15:18
ijohnsonbut let me look a bit more maybe it's fine15:18
pedronisijohnson: I'm also checking that data is marked found15:19
pedronisit's not that different from how the setUnlockStateWithFallbackKey uses that flag15:21
pedronisin theory we could even push that check down (not sure it woudl be clearer code)15:21
ijohnsonyes I see that, I'm trying to think about if that's good enough yet15:21
ijohnsonsadly it's a bit difficult to reason about finding a counter-example where this logic is wrong15:21
pedronisijohnson: you need to look at all the places we set found for data, all those places make also a definitive decision about whether the device is encrypted15:22
pedronisif we don't find data of course we don't have a decision15:23
mborzeckimvo: looks like the unit test job failed in the spread run you mentioned https://github.com/snapcore/snapd/runs/1224993441 ?15:25
mvomborzecki: oh, maybe this was just coincidence, hold on15:25
mvomborzecki: this one is a better example https://github.com/snapcore/snapd/runs/138620778015:26
mborzeckihmm `2020-11-11 16:40:13 Cannot allocate google:debian-9-64: google: read JWT from JSON credentials: 'type' field is "authorized_user" (expected "service_account")`15:27
mborzeckimvo: aren't we using the same spread binary?15:28
ijohnsonpedronis: ok yeah I think you're right I can't find a counter-example of where the logic is wrong15:30
ijohnsonchecking FindState is the right thing to do15:31
pedronisijohnson: tbh though, I don't want to poke at this more right now, but probably IsEncryptedDev should become a tristate Unknown,Encrypted,Unencrypted  some checks/things would be clearer15:31
ijohnsonpedronis: yes that would be a nice thing to have, but agreed for now is fine to leave as-is15:32
mupPR snapcraft#3372 opened: tests: make each static test available as a make target <Created by cjp256> <https://github.com/snapcore/snapcraft/pull/3372>15:46
ijohnsonpedronis: well regardless I looked over all your changes to 9628 and they all lgtm, so if/when that pr is green I think we should land it15:47
ijohnsonas you say we might need the nested test which disables the tpm/secureboot15:47
zygamvo: FYI: groovy's go has a bug in its internal IO loops16:11
zygaI just spent a better part of the day wondering WTF is going on16:12
zygahttps://go-review.googlesource.com/c/go/+/232862/ is the fixed bug with details16:12
zygaif you see funny errors in groovy, this _may_ be related16:12
zygaalso if you build with 1.1416:12
mvozyga: oh, fun! thanks for letting me know16:14
zygamvo: I poked mwhudson but not sure if there's any priority to backport this16:17
zyga1.13 and 1.15 are okay16:17
mupPR snapcraft#3373 opened: ci: migrate static checks from travis to github actions <Created by cjp256> <https://github.com/snapcore/snapcraft/pull/3373>16:31
NemesisHello everyone, i can see there is still issue with snap packages for latested version of manjaro. Does someone know when the issue will be fixed?16:39
Nemesisor some workaround known?16:39
zygaNemesis: what's the problem?16:42
Nemesiszyga:  since about 7-10 days all packages instelled on Manjaro (lateset version) does not work (when i start the pakache just showing loading and in 1-2 seconds disapears and nothing else happens).16:44
Nemesisi had another issue with 1-2 programs which was able to open (they had squears insted of alphabets).. i read on internet that fonts might be a problem, i changed the font - dint help16:45
ijohnsondoes manjaro use x11 or wayland ?16:46
zygaNemesis: can you open any of those apps from command line please16:48
pedronismvo: ijohnson: I'm going to force merge https://github.com/snapcore/snapd/pull/9632 , it affects only nested tests and those passed (in other tests we have store issues)16:48
mupPR #9632: tests/nested/manual/refresh-revert-fundamentals: temporarily disable secure boot <Run nested> <Simple 😃> <UC20> <Created by bboozzoo> <https://github.com/snapcore/snapd/pull/9632>16:48
ijohnsonpedronis: ack sounnds good to me16:48
Nemesis[martin@nemesis ~]$ loginctl show-session 2 -p Type16:48
NemesisType=x1116:48
NemesisI have most of the packages installed using flatpak/pacman or not installed at all. Give me 1 seconds to go install 2-3 new snap packages16:52
mupPR snapd#9632 closed: tests/nested/manual/refresh-revert-fundamentals: temporarily disable secure boot <Run nested> <Simple 😃> <UC20> <Created by bboozzoo> <Merged by pedronis> <https://github.com/snapcore/snapd/pull/9632>16:54
ijohnsoncachio: I want to add a uc20 specific nested helper, should I add a function to nested.sh and expose it via the new nested-state binary?16:59
cachioijohnson, depends on the funtion17:00
cachioif it is to manage the service/vm yes17:00
cachiootherwise it should so directo to nested.sh17:00
zygaijohnson: if you can consume it exclusively from nested-state, it'd probably be okay to add to nested-state without adding to nested.sh17:01
ijohnsonthe function is this17:01
ijohnsonhttps://www.irccloud.com/pastebin/H0orv42g/17:01
Nemesiszyga:  http://ix.io/2DVd -  there is one17:01
ijohnsonit's fairly simple but I need to do it many times in one specific uc20 nested test17:02
ijohnsonit's kinda managing the VM insofar as it is rebooting the VM and changing the state of it, etc.17:02
cachioijohnson, I'd add that to nested.sh17:02
cachioI'll include that in the following pr to move that to the nested-state tool17:03
Nemesiszyga:  there is another: http://ix.io/2DVe17:03
ijohnsoncachio: ok, I will just add it to nested.sh in my PR and use it directly17:03
Nemesisthere was much more, just i already have them installed using another packages17:04
cachioijohnson, nice17:04
cachioI'll take a look once it is ready17:04
ijohnsonthanks cachio17:09
ijohnsonI hope to have it open today17:09
mupPR snapd#9634 closed: boot,dirs,c/snap-bootstrap: avoid InstallHost* at the cost of some messiness <UC20> <Created by pedronis> <Merged by pedronis> <https://github.com/snapcore/snapd/pull/9634>17:34
mvopedronis: thanks for mergning! I will get dinner and then review 9628 again17:35
mvo(unless someone else beats me to it)17:35
mvoand then we should be done, yes?17:35
pedronismvo: yes, I'm merging master into it, and adding a couple not urgent TODOs17:37
mupPR snapcraft#3374 opened: [wip] ci: migrate spread tests github actions <Created by cjp256> <https://github.com/snapcore/snapcraft/pull/3374>17:41
ijohnsongah17:48
ijohnsonpedronis: mvo: we need one more fix I just found writing a spread test17:49
ijohnsoncopySafeDefaultData is wrong, it puts the complete file on /run/mnt/host/.../console-conf when it should be putting it on /run/mnt/data/.../console-conf/17:49
ijohnsonshall I push the fix to 9628 ? or open a new PR?17:50
pedronisijohnson: push it to 962817:51
ijohnsonk, one moment17:51
pedronisijohnson: I just pushed there though, so you need to pull17:51
ijohnsonright17:51
pedronisI merged master and tweaked a couple of things17:51
pedronisijohnson: ah, I see, it needs to match the dest part of the if stanze17:53
pedronisstanza17:53
ijohnsonyes17:53
pedronisboot.InitramfsDataDir17:53
ijohnsonyep precisely17:53
pedronisso the test is also wrong?17:53
ijohnsonyeah17:53
pedronis:/17:53
ijohnsonthis is why spread tests are good though17:53
pedronisyes17:54
pedronisbut also why constant for dirs are a mixed bag17:54
pedronisI'm starting to believe that unit test should try to actively spell directories more explictly/differnelty from code17:54
pedronisanyway17:55
ijohnsonI was wondering if instead of using what you proposed in the SU which would be more work, if we instead had functions from boot that took as an argument the time in which they are being called (or otherwise figured out what time/mode they are being called from directly)17:55
ijohnsonthen you would have for example DataDir(initramfs) or SeedFDEDir(initramfs) and BootFDEDir(install)17:55
pedronisI don't think time is the only relevant variable here17:56
pedronisthere's also host vs not17:56
pedronisfor recover17:56
pedronisas in your case here17:56
ijohnsonright but in this case it would be HostDataDir(intitramfs) vs DataDir(initramfs)17:57
ijohnsonI think the issue here is just that it is confusing that we have both a tpmfs "data" mount and the "host" data mount17:57
ijohnsonwell one of many issues17:57
pedronisijohnson: it's still an unclear/growing family of functions17:59
pedronisit might be better but is work, if we are going to do work maybe we should do the full work18:00
ijohnsonpedronis: ok, so side-stepping all that for a second to talk about one other thing I just found with your marker file impl18:00
ijohnsonI just noticed that if we fail to mount save at all, we treat data as not trusted, is that intentional18:00
pedronisyes18:01
ijohnsonthis means for example that if I just totally wipe ubuntu-save from the face of the earth and leave data normal, the marker file for ubuntu-save doesn't exist, and so data is treated as not trusted since we can't compare the marker files18:01
ijohnsonand as such we don't copy any data from ubuntu-data for i.e. logging in18:01
mupPR snapcraft#3375 opened: [wip] ci: migrate spread tests github actions <Created by cjp256> <https://github.com/snapcore/snapcraft/pull/3375>18:01
pedroniswe could try to be more specific, but in general unless we are sure that there is no way to get to save after the fact18:02
pedroniswe can't trust data18:02
ijohnsonI guess you will still have your recover mode snaps that run which could try and do something18:02
ijohnsonI guess this is fine then, I guess I had it in my head that we only check the marker files if we have both partitions18:03
ijohnsonok, nvm me then this is intentional, but unfortunate18:03
pedroniswe can do better, but it needs careful thinking18:04
pedronisthe worst scenario is save open but not mounted for some reason18:04
=== the-mentor0 is now known as the-mentor
ijohnsonyeah I guess we could copy data if we know for sure that save is not unlocked or maybe if we know that data was unlocked not with the recovery key18:05
ijohnsonbut I suppose those are improvements we could make later18:06
pedronisijohnson: if we would need to be sure that save is open and that we managed to lock the keys18:06
pedronissorry *save is not open*18:06
pedronisright now the code isn't quite there18:06
pedronisit would need more states18:06
pedronisijohnson: you can leave a todo somewhere if you want18:07
ijohnsonsure18:07
* pedronis goes to have dinner18:10
ijohnsonpedronis: pushed18:11
=== ijohnson is now known as ijohnson|lunch
=== the-mentor4 is now known as the-mentor
=== ijohnson|lunch is now known as ijohnson
* ijohnson goes to grocery store for ~ 2 hours19:09
=== the-mentor5 is now known as the-mentor
mupPR snapd#9628 closed: secboot,cmd/snap-bootstrap: fix degraded mode cases with better device handling <Needs Samuele review> <Run nested> <UC20> <Created by anonymouse64> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/9628>20:15
=== the-mentor1 is now known as the-mentor
mvomerging master back into 2.48 caused a merge conflict, how did that happen :(20:33
mvoanyway, had to open 9635 because of this, no ff possible20:33
mupPR snapd#9635 opened: many: merge current master into 2.48 <Run nested> <Created by mvo5> <https://github.com/snapcore/snapd/pull/9635>20:35
* mvo lets the test run for a bit20:39
mupPR snapcraft#3376 opened: tests: add missing mock for rust unit tests <Created by cjp256> <https://github.com/snapcore/snapcraft/pull/3376>20:52
mupPR snapcraft#3377 opened: launchpad tests: mock git source handler <Created by cjp256> <https://github.com/snapcore/snapcraft/pull/3377>23:03

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!