[06:38] <mborzecki> morning
[06:51] <mvo> good morning mborzecki
[06:56] <mborzecki> mvo: hey
[06:57] <mborzecki> mvo: heh: https://forum.snapcraft.io/t/firefox-83-0-snap-was-broken-fixed-square-fonts/21248
[07:12] <jamesh> hi mvo, mborzecki
[07:12] <mborzecki> jamesh: hey
[07:16] <jamesh> I did a little experiment on the weekend to see how much of go-check I could delete while still retaining the features I use: https://github.com/go-check/check/pull/122 -- it's functional (apart from its own tests), and opens the door to parallel testing
[07:16] <mup> PR go-check/check#122: check: replace test runner logic with Go's stdlib subtest support <Created by jhenstridge> <https://github.com/go-check/check/pull/122>
[07:16] <jamesh> it turns each go-check test into a stdlib testing sub-test
[07:25] <zyga> good morning
[07:28] <zyga> mborzecki, heh more selinux denials I see
[07:28] <zyga> type=PROCTITLE msg=audit(11/23/20 00:49:39.509:26526) : proctitle=/usr/libexec/snapd/snap-update-ns snap-store
[07:28] <zyga> type=SYSCALL msg=audit(11/23/20 00:49:39.509:26526) : arch=x86_64 syscall=unlinkat success=yes exit=0 a0=0xffffffffffffff9c a1=0xc0001a8250 a2=0x200 a3=0xc0001a8250 items=0 ppid=3053 pid=6546 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=snap-update-ns exe=/usr/libexec/snapd/snap-update-ns subj=system_u:system_r:snappy_mount_t:s0 key=(null)
[07:28] <zyga> type=AVC msg=audit(11/23/20 00:49:39.509:26526) : avc:  denied  { rmdir } for  pid=6546 comm=snap-update-ns name=.X11-unix dev="sda2" ino=34699367 scontext=system_u:system_r:snappy_mount_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir permissive=1
[07:28] <zyga> are those from the x11 fixes?
[07:29] <zyga> mvo did merging the internal snap-device-helper regress anything, e.g.: google:ubuntu-core-18-64:tests/main/security-dev-input-event-denied
[07:31] <mborzecki> zyga: rmdir .x11-unix?
[07:32] <mborzecki> jamesh: nice, i like the fact that with the change the pattern where we loop over a list of test cases could use t.Run() again, no more commenting out test cases to run a specific one
[07:33] <zyga> mborzecki, I didn't look deeper, just reviewed logs of failed tests
[07:33] <zyga> hey jamesh :-)
[07:33] <zyga> I read your post about the go testing
[07:33] <mborzecki> zyga: which PR is that?
[07:34] <zyga> https://github.com/snapcore/snapd/pull/9546
[07:34] <mup> PR #9546: overlord: add inert export manager <Created by zyga> <https://github.com/snapcore/snapd/pull/9546>
[07:34] <zyga> I sent some patches there yesterday
[07:35] <mborzecki> hm i see that on centos 7 only
[07:41] <jamesh> hi zyga
[07:58] <mvo> zyga: oh, nice, thanks for updating that PR!
[07:59] <mvo> mborzecki: noooo, fonts again :(
[07:59] <zyga> hey mvo :-)
[08:03] <mborzecki> pstolowski: hey
[08:04] <pstolowski> morning
[08:04] <zyga> hey pawel
[08:04] <zyga> updated fusion over weekend
[08:22] <mvo> good morning pstolowski
[08:30] <pstolowski> o/
[08:33] <zyga> good morning pedronis
[08:33] <zyga> pedronis, I pushed a few patches to the inert export manager PR
[08:39] <pstolowski> mvo: https://forum.snapcraft.io/t/important-internal-change-to-snap-downloads-in-edge-future-snapd-2-49/21255
[08:40] <mvo> pstolowski: yay, nice!
[08:51] <mvo> jamesh: hey, not sure if you have seen it, I added some comments on 8943 and approved it, let me know if you want to address anything (just nitpicks) and if you want to do it in the PR or rather as a followup, either way is fine. if followup I can merge the PR now
[08:52] <jamesh> mvo: yeah.  I'm addressing those now.
[08:52] <jamesh> mvo: thanks
[08:53] <mvo> jamesh: \o/ thank you!
=== tinwood_ is now known as tinwood
[09:12] <mborzecki> i've landed #9640, let me know of tests/nested/manual/core20-save fails in any of the PRs
[09:12] <mup> PR #9640: tests/nested/manual/core20-save: verify handling of ubuntu-save with different system variants  <Run nested> <Squash-merge> <UC20> <Created by bboozzoo> <Merged by bboozzoo> <https://github.com/snapcore/snapd/pull/9640>
[09:15] <mborzecki> hmm cannot perform operation: mount --bind /var/lib/snapd/snap/core18/current/etc/apparmor /tmp/snap.rootfs_08zCTp/etc/apparmor: Permission denied
[09:15] <mborzecki> that's when trying the updated 2.48 package on arch
[09:16] <mborzecki> [lis23 10:16] audit: type=1400 audit(1606122967.226:703): apparmor="DENIED" operation="open" profile="/usr/lib/snapd/snap-confine" name="/proc/77278/attr/apparmor/current" pid=77278 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
[09:16] <mborzecki> [  +0.058639] audit: type=1400 audit(1606122967.283:704): apparmor="DENIED" operation="mount" info="failed mntpnt match" error=-13 profile="/usr/lib/snapd/snap-confine" name="/tmp/snap.rootfs_vKrjPA/etc/apparmor/" pid=77278 comm="snap-confine" srcname="/var/lib/snapd/snap/core18/1932/etc/apparmor/" flags="rw, bind"
[09:17] <mup> PR snapd#9640 closed: tests/nested/manual/core20-save: verify handling of ubuntu-save with different system variants  <Run nested> <Squash-merge> <UC20> <Created by bboozzoo> <Merged by bboozzoo> <https://github.com/snapcore/snapd/pull/9640>
[09:20] <mborzecki> hmmm so restarted apparmor.service once more and it works now, why wasn't that picked up the first time?
[09:34] <mborzecki> https://github.com/snapcore/snapd/pull/9204 didn't manke it to 2.48?
[09:35] <mup> PR #9204: sandbox: track applications unconditionally <Created by zyga> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/9204>
[09:38] <pedronis> mvo: hi, thanks for reviewing #9679
[09:38] <mup> PR #9679: daemon: start cleaning up api tests <Created by pedronis> <https://github.com/snapcore/snapd/pull/9679>
[09:38] <pedronis> mborzecki: it's marked intentionally 2.49
[09:38] <mvo> pedronis: my pleasure
[09:41] <pedronis> pstolowski: hi, maybe you could give a 2nd review to #9679, sadly it's a bit large and some bits a bit tedious
[09:41] <mup> PR #9679: daemon: start cleaning up api tests <Created by pedronis> <https://github.com/snapcore/snapd/pull/9679>
[09:42] <pstolowski> pedronis: sure
[09:43] <mborzecki> pedronis: yeah, noticed
[09:43] <pedronis> pstolowski: thx
[09:54] <pstolowski> #9590 needs 2nd review
[09:54] <mup> PR #9590: tests: download timeout spread test <Created by stolowski> <https://github.com/snapcore/snapd/pull/9590>
[10:02] <mup> PR snapd#9681 closed: tests: Fix snap-debug-bootvars test to make it work on arm devices and core18 <Simple 😃> <Created by sergiocazzolato> <Merged by bboozzoo> <https://github.com/snapcore/snapd/pull/9681>
[10:07] <mup> PR snapd#9683 opened: packaging/arch: sync with AUR packaging <Simple 😃> <Created by bboozzoo> <https://github.com/snapcore/snapd/pull/9683>
[10:52] <mvo> pedronis: I updated 9670, hopefully clearer now
[10:53] <mvo> pedronis: (but no rush of course)
[10:53] <pedronis> I'll look after lunch
[11:16] <mborzecki> google:ubuntu-core-18-64:tests/main/security-dev-input-event-denied sometimes fails on gh, but works when running from local?
[11:17] <mup> PR snapd#9684 opened: devicestate: support "storage-safety" defaults during install (2.48) <Created by mvo5> <https://github.com/snapcore/snapd/pull/9684>
[11:17] <zyga> racy?
[11:17] <zyga> or fallout from the internal snap-device-helper merge?
[11:20] <mvo> pedronis: looks like 9679 is good to get merged too, nice !
[11:23] <mborzecki> mvo: can you land https://github.com/snapcore/snapd/pull/9676 ? the failure on 18.04 is unrelated
[11:23] <mup> PR #9676: bootloader: indicate when boot config was updated <Simple 😃> <UC20> <Created by bboozzoo> <https://github.com/snapcore/snapd/pull/9676>
[11:29] <mvo> mborzecki: sure
[11:30] <mborzecki> mvo: thanks
[11:32] <mvo> yw
[11:32] <mup> PR snapd#9676 closed: bootloader: indicate when boot config was updated <Simple 😃> <UC20> <Created by bboozzoo> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/9676>
[12:07] <mup> PR snapd#9683 closed: packaging/arch: sync with AUR packaging <Simple 😃> <Created by bboozzoo> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/9683>
[12:26] <pedronis> mvo: I'm still confused by the logic in 9670
[12:26] <mvo> pedronis: hm, that's not good
[12:27] <mvo> pedronis: thanks for your comment, I will update the code and the tests to follow your advise
[12:28] <pedronis> mvo: is the same advice I gave the last time fwiw, maybe there's a reason to do it differently?
[12:29] <mvo> pedronis: not really, I think I just forgot over the weekend
[12:29] <pedronis> ok
[13:02] <pedronis> mvo: I stared more at #9526 and something doesn't look right
[13:02] <mup> PR #9526: snapshotstate: add cleanup of abandonded snapshot imports <Created by mvo5> <https://github.com/snapcore/snapd/pull/9526>
[14:38] <mup> PR snapd#9679 closed: daemon: start cleaning up api tests <Created by pedronis> <Merged by pedronis> <https://github.com/snapcore/snapd/pull/9679>
[14:51] <ijohnson> mvo: I updated the comment on 9680, could you please take a look? thanks
[14:52] <mvo> ijohnson: sure
[15:35] <zyga> hey ijohnson
=== msalvatore_ is now known as msalvatore
[16:16] <ackk> hi, is it possible to passthrough settings for limits (specifically LimitNOFILE and LimitNOFILESoft) to a service unit in a snap?
[16:22] <sil2100> mvo: hey! I'm looking at the snapd SRU right now
[16:22] <sil2100> mvo: the SRU bug mentions looking for 2.48 test logs in https://travis-ci.org/github/snapcore/snapd/branches , but that seems to have really old runs like from 3 months ago?
[16:23] <sil2100> mvo: I don't see the 2.48 branch there or any activity since 3 months - did this move somewhere else? If yes, where can I find the test logs?
[16:25] <mvo> sil2100: indeed, I need to update this, we moved to GH actions since
[16:26] <pedronis> mvo: the unit tests are failing in #9526 now
[16:26] <mup> PR #9526: snapshotstate: add cleanup of abandonded snapshot imports <Created by mvo5> <https://github.com/snapcore/snapd/pull/9526>
[16:28] <mvo> pedronis: looking
[16:30] <zyga> pstolowski, thanks
[16:30] <zyga> pstolowski, I replied to some points
[16:30] <pstolowski> zyga: thanks
[16:33] <zyga> pstolowski, I want to rest a little but I'll go through the easy stuff for tomorrow
[16:34] <pstolowski> zyga: no worries, also I can push some trivials if that's ok
[16:34] <zyga> pstolowski, nah, you'll take all the glory and credit then
[16:34] <zyga> and I won't have anything easy to contribute anymore :)
[16:35] <pstolowski> :D
[16:50] <mvo> a second review for 9670 would be great
[17:04] <sil2100> https://github.com/snapcore/snapd/runs/1425950639?check_suite_focus=true <- is this the set of test results for 2.48? I think I'm still a bit new to this whole GH actions work ;)
[17:06] <mvo> sil2100: yes, that is correct, but the spread runner for this is not wired up :/
[17:07] <mvo> sil2100: I can create an artifical run for you, I was looking around and we don't have a run that tests exactly the release (each commit is tested so I can give you the run of the commit before that release)
[17:09] <sil2100> mvo: one for the previous commit sounds fine! I just want to document it on the SRU bug so that we have it handy before proceeding :)
[17:09] <sil2100> I trust you that it's all green anyway
[17:09] <sil2100> (well, green enough for release)
[17:09] <mvo> sil2100: yeah, let me create something artifcial for you while I sort this out
[17:13] <mvo> sil2100: I created https://github.com/snapcore/snapd/pull/9685 for you, I will keep an eye on it and once it's done I can link to it from the sru bug
[17:13] <mup> PR #9685: tests: run tests against 2.48 for the SRU <⛔ Blocked> <Created by mvo5> <https://github.com/snapcore/snapd/pull/9685>
[17:14] <mup> PR snapd#9685 opened: tests: run tests against 2.48 for the SRU <⛔ Blocked> <Created by mvo5> <https://github.com/snapcore/snapd/pull/9685>
=== msalvatore_ is now known as msalvatore
[17:24] <sil2100> mvo: thank you!
[17:44] <ijohnson> hey zyga (sorry I missed your ping earlier)
=== ijohnson is now known as ijohnson|lunch
=== ijohnson|lunch is now known as ijohnson
[22:50] <mup> PR snapd#9680 closed: osutil/disks: allow mocking DiskFromDeviceName <Simple 😃> <UC20> <Created by anonymouse64> <Merged by anonymouse64> <https://github.com/snapcore/snapd/pull/9680>