| mborzecki | morning | 07:09 |
|---|---|---|
| zyga | good morning | 08:02 |
| mborzecki | mvo: zyga: hey | 08:06 |
| zyga | :-) | 08:06 |
| mborzecki | zyga: is https://github.com/snapcore/snapd/pull/9936 related to the debian bug? | 08:06 |
| mup | PR #9936: interfaces: remove apparmor downgrade feature <Needs security review> <Created by zyga> <https://github.com/snapcore/snapd/pull/9936> | 08:06 |
| zyga | yes | 08:06 |
| mborzecki | zyga: this one right? https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=923500 | 08:06 |
| zyga | yes | 08:07 |
| mborzecki | i've left a note in the PR, tbh maybe we should start off by displaying a warning that confinement is partial/incomplete due to build config/runtime support | 08:08 |
| pstolowski | morning | 08:10 |
| mborzecki | pstolowski: hey | 08:10 |
| zyga | mborzecki I don't think that will help TBH | 08:11 |
| zyga | it will break tests on random output | 08:11 |
| mborzecki | tests can be fixed (we did that already once for cgroup v2, although i expect there would be more this time) | 08:12 |
| zyga | yeah but what's the value? | 08:12 |
| zyga | do you want to let eveyone know confinement is partial? | 08:12 |
| zyga | what is the next step? | 08:12 |
| zyga | confinement was _gone_ before and we said nothing | 08:13 |
| zyga | confinement is really partial with that patch, and now we want to say "actually, you may want to be careful" | 08:13 |
| mborzecki | pstolowski: can you take a look https://github.com/snapcore/snapd/pull/9933 ? | 08:15 |
| mup | PR #9933: packaging/opensuse: sync with openSUSE packaging <Simple 😃> <Created by bboozzoo> <https://github.com/snapcore/snapd/pull/9933> | 08:16 |
| mborzecki | zyga: it's still going to be partial with the full template, rules like unix(..) and dbus will not be enforced afaict, or if those are made `deny unix ..` they could be enforced in an incompatible way | 08:18 |
| zyga | yes, I'm fully aware of that | 08:19 |
| zyga | I think it's not my decision | 08:19 |
| zyga | I could only make the patch | 08:19 |
| mborzecki | zyga: sure, thanks for making the effort and opening a PR :) | 08:20 |
| zyga | tumbleweed dies on govendor sync? | 08:20 |
| mborzecki | zyga: haha, yes still, i should file this bug report for the kernel | 08:22 |
| mborzecki | (eventually) | 08:22 |
| mborzecki | zyga: works on my laptop though ;) | 08:23 |
| === ogra_ is now known as Guest26551 | ||
| pedronis | pstolowski: I did a first pass over pool.go in #9930, some bits seems to be missing though, so I didn't go deep on some pieces | 08:53 |
| mup | PR #9930: asserts: pool changes and RefreshValidationSetAssertions method for validation-sets <Needs Samuele review> <validation-sets :white_check_mark:> <Created by stolowski> <https://github.com/snapcore/snapd/pull/9930> | 08:53 |
| pedronis | pstolowski: bunch of questions there | 08:53 |
| pstolowski | pedronis: ok, thanks | 08:54 |
| zyga | good morning pedronis | 09:03 |
| jamesh | cjwatson: fyi, I followed up on that bug report: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=923500#22 | 09:28 |
| mup | PR #22: add travis status to README.md <Created by mvo5> <Merged by niemeyer> <https://github.com/snapcore/snapd/pull/22> | 09:28 |
| cjwatson | Thanks! | 09:28 |
| mup | PR snapd#9933 closed: packaging/opensuse: sync with openSUSE packaging <Simple 😃> <Created by bboozzoo> <Merged by bboozzoo> <https://github.com/snapcore/snapd/pull/9933> | 09:56 |
| mup | PR snapd#9937 closed: tests/lib/prepare.sh: split reflash.sh into two parts <Simple 😃> <Test Robustness> <Created by anonymouse64> <Merged by bboozzoo> <https://github.com/snapcore/snapd/pull/9937> | 10:06 |
| mup | Bug #1915807 opened: No splash screen in uc 20 for RPI <Snappy:New> <https://launchpad.net/bugs/1915807> | 10:58 |
| ogra | ogra@ubuntu:~$ snap install unifi --edge | 12:04 |
| ogra | error: cannot perform the following tasks: | 12:04 |
| ogra | - Start snap "unifi" (7) services ([start snap.unifi.unifi.service] failed with exit status 1: Job for snap.unifi.unifi.service failed because the control process exited with error code. | 12:04 |
| ogra | See "systemctl status snap.unifi.unifi.service" and "journalctl -xe" for details. | 12:04 |
| ogra | ) | 12:04 |
| ogra | ... not helpful ... | 12:04 |
| zyga | ogra is that the controller? | 12:04 |
| ogra | (the hook failed, so it didnt install at all ... pointing me to systemctl status will only return "not found" ) | 12:05 |
| ogra | zyga, well, yeah, someones first attempt at least 😉 and arm64 only | 12:05 |
| ogra | https://github.com/hairychris/unifi-snap | 12:05 |
| ogra | i'm more wondering about the error message ... | 12:06 |
| mborzecki | mvo: can you cherry pick https://github.com/snapcore/snapd/pull/9935 ? | 12:37 |
| mup | PR #9935: data/selinux: allow system dbus to watch /var/lib/snapd/dbus-1 <Simple 😃> <Created by bboozzoo> <Merged by bboozzoo> <https://github.com/snapcore/snapd/pull/9935> | 12:37 |
| mvo | mborzecki: sure, in a meeting | 12:38 |
| mup | PR snapd#9935 closed: data/selinux: allow system dbus to watch /var/lib/snapd/dbus-1 <Simple 😃> <Created by bboozzoo> <Merged by bboozzoo> <https://github.com/snapcore/snapd/pull/9935> | 12:42 |
| pedronis | pstolowski: I tried to answer your wondering about account-keys in tests, but maybe I *am* missing something | 12:54 |
| pstolowski | pedronis: thanks. do you mean we always try to udpdate account & account-key by design? | 13:01 |
| pedronis | pstolowski: yes, we always ask the store if there are new revisions of any of the prereqs | 13:01 |
| pedronis | pstolowski: that's logic in pool | 13:01 |
| pstolowski | pedronis: ah, ok that explains it then | 13:01 |
| pstolowski | i thought some of them never change | 13:02 |
| pedronis | pstolowski: no, there are scenarios for all of them to possibly change, rare but possible | 13:09 |
| pstolowski | pedronis: ack, thanks, that solves my confusion | 13:10 |
| gbisson | Hi, any why I get "Failed to load plugin: properties failed to load for kernel: Additional properties are not allowed ('kernel-initrd-core-base' was unexpected)" when using a similar snapcraft.yaml as rockpi? | 13:43 |
| gbisson | Under the same circumstances too (using lxc as ogra suggests in his README) https://github.com/ogra1/rockpi-n10-kernel | 13:44 |
| gbisson | Here is my snapcraft.yaml: https://github.com/boundarydevices/ubuntu-core/blob/20-armhf/kernel/snapcraft.yaml | 13:44 |
| ogra | gbisson, note the plugin subdir in that tree | 13:44 |
| ogra | i'm using ondra's UC20 kernel plugin in that tree | 13:45 |
| gbisson | ogra: oh I see | 13:45 |
| gbisson | ogra: should I just copy that plugin folder then | 13:45 |
| ogra | which has some UC20 specific adjustments | 13:45 |
| ogra | yeah | 13:45 |
| ogra | or use a git submodule | 13:45 |
| gbisson | ogra: it's still unclear to me how to get the uc20-ready initrd properly generated | 13:46 |
| ogra | https://github.com/kubiko/snapcraft-kernel-plugin | 13:47 |
| gbisson | ogra: thanks! | 13:47 |
| ogra | you dont generate it ... it comes from some pre-built thing that xnox generates regulary ... the kernel plugin *can* re-pack that to add extra firmware or modules though | 13:47 |
| ogra | that then based on the initrd-firmware and nitrd-modules options in snapcraft.yaml (not sure about the correct names of these options from the top of my head) | 13:48 |
| ogra | s/based/bases/ | 13:51 |
| gbisson | ok, can you also explain the --destructive-mode, I couldn't find what this means | 13:54 |
| gbisson | nvm found it, just not in the snapcraft --help | 13:55 |
| ogra | it means it will destructively change the host setup if needed | 13:55 |
| ogra | whcih is why you should use it only in a clean lxd container | 13:56 |
| ogra | never on the host itself ... | 13:56 |
| gbisson | but is it really necessary? | 13:56 |
| gbisson | I mean, when it's not there it seems to kick multipass which creates the VM for you no? | 13:57 |
| ogra | yes, else snapcraft will forcefulyl try to buiuld in a multipass VM | 13:57 |
| ogra | (it will surely work, but it is painful to use VMs during development) | 13:58 |
| ogra | --destructive-mode means you can immediately build in your tree and see results without spinning up VMs | 13:58 |
| gbisson | ok, fair enough, hopefully that was my last missing piece to release a uc20 for all our platforms | 13:59 |
| gbisson | (after the 20 track is created) | 13:59 |
| gbisson | last thing, can you confirm you only override the toolchain because the rockpi kernel is obsolete (and most likely don't build with gcc9 or 10) | 14:00 |
| ogra | yes | 14:00 |
| ogra | you should be able to simply use the cross gcc for newer kernels and non hacked up BSPs 🙂 | 14:01 |
| ogra | note you rae rather on your own with the gadget for now, that rockpi N10 thing is a spare time project and my spare time is rare til end of the month | 14:01 |
| gbisson | perfect, that's what I do, just wanted to make sure there wasn't another reason ;) | 14:02 |
| ogra | nope thats the only reason ... and it is an awful hack too ... 🙂 | 14:02 |
| gbisson | oh i know, I've been on my own on that core20 upgrade, and I have to say it has been much more painful than core16 & core18 ever were | 14:02 |
| ogra | yes, everything changed | 14:03 |
| gbisson | but thanks for all your answers, you definitely helped a lot | 14:03 |
| ogra | (trying to find my way around as well atm) | 14:03 |
| gbisson | sorry I keep on asking questions: has anyone ever got Mir working on any i.MX platform? (Vivante GPU) | 14:05 |
| ogra | gbisson, try #mir-server for that | 14:31 |
| gbisson | ogra: yes but I don't know where to feed the Vivante libraries, because it won't work without them | 14:43 |
| ogra | the guys in #mir-server should know 😉 | 14:43 |
| gbisson | oh you meant the irc channel ha! I thought you meant the mir-server snap ;-) | 14:45 |
| ogra | 🙂 | 14:45 |
| ogra | i would expect it to ship the evnativ driver by default though | 14:46 |
| ogra | (and to kind of work with that) | 14:47 |
| gbisson | yeah unfortunately that won't be the case, etnaviv mesa libraries only work on etnaviv driver, since NXP kernel uses vivante driver instead... | 14:59 |
| ogra | right, then you will likely need yur own fork of mir-kiosk ... and add it to your brand store | 14:59 |
| ogra | (or convince the mir team to ship vivante but i'm not sure they will be willing to do that) | 15:00 |
| gbisson | yes I don't expect vivante to be part of the generic package, but a mir-viv-kiosk would be nice | 15:01 |
| gbisson | I now get this when booting up: "assertion is signed with expired public key "blah"" | 15:15 |
| gbisson | how come my key expired? Seems to be properly there in 'snap keys', plus I can upload to the store ok which I believe checks the key | 15:16 |
| ogra | replace your RTC battery 😛 | 15:17 |
| ogra | (which i'm indeed sure you have plenty on your boards 😛 ) | 15:18 |
| gbisson | urgh | 15:18 |
| gbisson | really? | 15:18 |
| gbisson | can't it get the time from the network? | 15:18 |
| ogra | there is some code in systemd-timesyncd that is supposed to set the clock to a more proper date ba default, but there ere issues ... i think xnox was working on a fix | 15:19 |
| ogra | *by default | 15:19 |
| gbisson | ok thanks, let me try that | 15:19 |
| ogra | you get the time from the network once the entwork is up | 15:19 |
| ogra | but the key check happens earlier in the boot IIRC | 15:20 |
| ogra | that said, try with wired network, perhaps your chances are better there | 15:20 |
| ogra | (we ship a default dhcp setup for eth0 that should come up earlier than wlan, with luck thats enough) | 15:21 |
| gbisson | ogra: thanks I confirm it works! | 15:23 |
| ogra | great | 15:23 |
| gbisson | once I get the 20 track for gadget/kernel I can release an image | 15:23 |
| ogra | not sure what the bug number was, but i knwo there is a bug open for the systemd fix | 15:23 |
| ogra | (and i guess xnox isnt watching the channel here to give it to you from the top of his head ) | 15:24 |
| gbisson | that's ok, I want to use stable channel anyway for the issue, it will be part of the known issues that should disappear later | 15:25 |
| ogra | yeah, thats the spirit with UC20 🙂 | 15:25 |
| mup | PR snapd#9912 closed: snap: provide a useful error message if gdbserver is not installed <Skip spread> <Created by mvo5> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/9912> | 15:32 |
| gbisson | ogra: finally I got my platform fully booted up and installed properly, thanks again for the help! | 15:38 |
| ogra | congrats ! | 15:41 |
| zyga_ | do you guys remember the name of that thing that lets you deploy openstack or k8s quickly | 16:19 |
| zyga_ | it had a catchy name | 16:19 |
| zyga_ | but it flew out of my head | 16:19 |
| cjwatson | conjure-up I think? | 16:20 |
| ijohnson | juju? | 16:20 |
| zyga_ | conjure up! | 16:21 |
| zyga_ | thank you cjwatson :) | 16:21 |
| === ijohnson is now known as ijohnson|lunch | ||
| mup | PR snapcraft#3437 opened: extensions: check that the platform snap is connected in desktop extensions and bail out if not (LP: #1915712) <Created by oSoMoN> <https://github.com/snapcore/snapcraft/pull/3437> | 22:23 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!