/srv/irclogs.ubuntu.com/2021/08/11/#snappy.txt

zygagood morning!06:25
zygahey mvo 06:30
zygalong time no see06:30
mupPR snapd#10606 opened: o/hookstate/ctlcmd: unify the error message when context is missing <Simple 😃> <Created by mardy> <https://github.com/snapcore/snapd/pull/10606>06:34
mvogood morning zyga - indeed!06:39
mardyhi zyga, mvo!06:56
zygahey mardy 06:56
mvohey mardy - good morning!06:58
mupPR snapd#10604 closed: wrappers: measure time to enable services in StartServices() <Simple 😃> <Skip spread> <Created by mvo5> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/10604>06:59
mupPR snapd#10607 opened: o/snapstate: install snap after prereq snaps are done installing <Created by MiguelPires> <https://github.com/snapcore/snapd/pull/10607>11:35
mardyijohnson[m]: about that /run/mount/utab* file, I'm a bit hesitant to add a `deny` for it, given what's written here: https://gitlab.com/apparmor/apparmor/-/wikis/AppArmor_Core_Policy_Reference#subtracting-permissions13:37
mardyijohnson[m]: there are other interfaces (such as the udisks2 one) which explicitly allow access to this file, so denying it would make it harder to use these two interfaces at the same time13:38
ijohnson[m]mardy: hmm let me take a look now that I'm back at my computer, I seem to remember deny's for it elsewhere but perhaps I'm mistaken13:41
ijohnson[m]mardy: ah so I think I remember, we deny it for the kubernetes-support interface, but I think that's probably something specific to kubernetes-support, as we are in "more control" over the users of kubernetes-support and what other plugs they use alongside kubernetes-support13:43
ijohnson[m]mardy: so given this I think it's fine to just allow /run/mount/utab for the mount-control interface13:43
mardyijohnson[m]: ok13:55
mupPR snapd#9094 closed: corecfg: add "system.hostname" setting to the system settings <:birthday:> <Created by mvo5> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/9094>15:41
ijohnson[m]mvo: I've got a branch for the install-device files thing we discussed today, I'm working on a spread test for it now, shouldn't be too bad but requires even more hackiness to nested.sh15:42
mvoijohnson[m]: \o/15:48
mvoijohnson[m]: I did not manage to work on the KDF parameters for the recovery key from the gadget.yaml :( but I will try again tomorrow15:49
mvoijohnson[m]: it's also not really designed yet so … anyway, gtg15:49
mupPR snapd#10593 closed: c/snap,o/hookstate/ctlcmd: add JSON/string strict processing flags to snap/snapctl <Created by MiguelPires> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/10593>19:56
bandalihey amurray, can i /msg you?23:24
amurraybandali: sure23:26
bandalithanks!23:27

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!