/srv/irclogs.ubuntu.com/2022/03/15/#ubuntu-server.txt

=== Kamilion|ZNC is now known as Kamilion
=== gschanuel0 is now known as gschanuel
brycehautopkgtest framework is busted due to linux-firmware issue (LP: #1964814)05:05
ubottuLaunchpad bug 1964814 in linux-firmware (Ubuntu Jammy) "linux-firmware fails to upgrade to 20220314.gitcd01f857-0ubuntu1" [Critical, Confirmed] https://launchpad.net/bugs/196481405:05
brycehI was wondering why my fixed symfony upload resulted in *more* breakage rather than less.  Hopefully linux-firmware fix doesn't take too long...05:06
cpaelzergood morning06:20
mirespacegood morning08:53
gnuoyjamespage, fwiw I've commented on https://bugs.launchpad.net/ubuntu/+source/ceph-iscsi/+bug/1883112 suggesting we go with the minimal fix09:35
ubottuLaunchpad bug 1883112 in ceph-iscsi (Ubuntu Focal) "rbd-target-api crashes with python TypeError" [High, Triaged]09:35
jamespagegnuoy: ok thanks :)09:36
jamespagegnuoy: if you want to throw a patch my way I'll sponsor that today09:36
gnuoykk09:36
athosgood morning!10:09
gnuoyjamespage, I've attached another deb diff to the bug with the minimal fix10:11
jamespagegreat10:11
jamespagegnuoy: I guess the other way to fix this would be to just decode the result of the check_output call10:20
jamespagebut I'm also fine with twiddling the checks to be byte's based10:21
gnuoytip top10:21
jamespagegnuoy: I've done both impish and focal - https://launchpad.net/~ci-train-ppa-service/+archive/ubuntu/4054/+packages10:28
jamespageI'll upload them shortly for the SRU team to review10:29
gnuoyexcellent, ty10:29
athosWould anyone mind retriggering some tests? It's a long list, so I got them all here: https://paste.ubuntu.com/p/TRzxwNbwkt/plain/10:34
athosthis is related to the issue bryceh was pointing out yesterday with linux-firmware (lots of php test failures)10:35
jamespagegnuoy: ok both uploaded again10:37
jamespagerbasak: thanks for the feedback on the ceph-iscsi SRU's - I've uploaded revised more minimal changes for focal and impish as supplied by gnuoy10:38
rbasakjamespage: thanks - accepted10:49
schopinathos: are the clicks still needed ?10:56
athosschopin: yes :)11:00
schopinAllright, will do :)11:01
athosthanks!11:01
schopindone11:04
athos\o/11:04
ahasenackhmm, wanted to update haproxy, but they had to sneak in a new feature... amidst all those bugfixes12:02
ahasenack+    - MINOR: pools: add a new global option "no-memory-trimming"12:02
ahasenack+no-memory-trimming12:03
ahasenack+  Disables memory trimming ("malloc_trim") at a few moments where attempts are12:03
ahasenack+  made to reclaim lots of memory (on memory shortage or on reload).12:03
mirespacehi, I need to do autopkgtest for a package in one of my personal ppa and also versus other packages in other ppa 12:30
athoskanashiro: there are also lots of failures in that ruby3.0 change migration as well due to the linux-firmware issue Bryce pointed out yesterday12:30
mirespaceI did    12:31
mirespaceautopkgtest -U -s --apt-pocket=proposed  --setup-commands="sudo add-apt-repository -y -u -s ppa:mirespace/cpc-docker.io-cve-2021-41190-focal" --setup-commands="sudo add-apt-repository -y -u -s ppa:cloud-images/gke-1.20-proposed"  -B docker.io  -- qemu ~/Working/Images/autopkgtest-focal-amd64.img12:31
ubottuThe OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content. In the OCI Distribution Specification version 1.0.0 and prior, the Content-Type header alone was used to determine the type of document during push and pull operations. Documents that contain both &#8220;manifests&#8221; and &#8220;layers&#8221; fields could be i... <https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41190>12:31
mirespacebut not sure if that will trigger test for the nonexpecified packages, I mean, I'm only specifying docker.io12:32
athosmirespace: it will not trigger the tests for other packages, but it should use the packages from those PPAs as dependencies, if such deps are required12:36
athoskanashiro: waiting for linux-firmware to migrate or appending &trigger=linux-firmware/20220314.gitcd01f857-0ubuntu2 to those retrial urls should do the trick... We do have lots of test failures due to that error now though12:38
mirespaceathos: I thought mor or less the same, but utkarsh give the command for doing locally on that way, so I was wondering if it can be done aso with ppas12:39
mirespaceathos: I can't try locally because the package doesn't build locally but it does in the ppa ( I can research why doesn't build locally)12:39
athosmirespace: maybe you could try bileto (you'd need a core-dev to trigger tests for you though)?12:59
kanashirooh crap, I was not getting notifications of messages here13:56
kanashiroathos, thanks for the heads-up re ruby3.0, I noticed that earlier today, If until this afternoon this is not fixed I'll retry all the failing tests with the triggered you mentioned13:57
=== MJCD is now known as JusSupaSaiyan
ahasenackmirespace: taking a look at your autopkgtest command line14:47
ahasenackmirespace: I usually put all commands in one --setup-commands= bit, separated by ":"14:48
ahasenackand this command-line will trigger just the docker.io tests, that's the source package you specified14:48
ahasenackregarding the local vs ppa build, did you enable proposed in the ppa too?14:49
mirespaceahasenack: good to know about the ":"14:49
mirespaceahasenack: I forgot to do that .. doing now14:49
ahasenackthen it will probably fail to build there too, but ok :)14:50
ahasenackdo you need proposed?14:50
mirespaceThe command line that utkarsh recommend me was:14:50
mirespacerun the autopkgtest of docker.io against runc and containerd which is in the PPA (use the following command: autopkgtest -U -s --apt-pocket=proposed -B ../*.deb ../../containerd/*.deb ../../runc/*.deb -- qemu ~/ubuntu/images/autopkgtest-focal-amd64.img)14:50
mirespacecan I do the same without build it locally, using the debs form the differents ppas?14:50
sergiodjmirespace: you can run autopkgtest without building the package locally, yes.  you have to add the PPA using the --setup-commands (like you were doing before), and you need to specify the exact .changes file that you used when uploading the package14:57
mirespaceook ... lets try :) thanks @sergiodj ahasenack... what confuses me is the container*.deb runc deb part on the above command, because it complaint about only can check the package I'm testing/building (oth, it seems pretty logical to me)14:59
ahasenackif you use -B, then it will not build the package15:00
ahasenackand I saw you using that15:00
ahasenackbut I hadn't seen your *.deb bits, that's wrong15:00
ahasenackyou have to specify a source package (one dsc), or a directory (if it's a git ubuntu checkout, for example), or just a source package name, that it will the do "apt-get source <name>"15:01
sergiodjyou don't need the *.deb bits, indeed.  that's not the right way to do it15:02
mirespaceook... so I can't do the requested with the given command... so the ionly way would be bileto, as athos suggested?15:02
=== JusSupaSaiyan is now known as MJCd
ahasenackmirespace: you can test docker.io incuding packages from other dependencies, but autopkgtest (the tool) will only run the tests of the specified package (docker.io in your first example)15:59
mirespaceahasenack: thanks for confirming, I'l check with Utkarsh the requested16:01
=== pizzaiolo is now known as pizza
ahasenackand bileto isn't working so well lately. It builds the packages, but I couldn't get it to actually run the tests. Last time I tried was a month ago or more, though16:12
ahasenackbut bileto would run the tests on the dependencies, like the real migration16:12
mirespaceook ... thanks a lot! ahasenack athos sergiodj16:22
sergiodjmirespace: np!  let us know if you need more help :)16:23
mirespaceI think I'll review with him tomorrow this16:31
mirespacesergiodj: oth, how much expert about clang are you ? 16:31
sergiodjmirespace: hmm, about clang internals?16:32
mirespaceyes, compiling using clang16:33
sergiodjmirespace: ah, using clang.  what's the problem?  I haven't used it a lot but I can try to help16:33
mirespacesergiodj: oh, sorry ... I was remebering you saying something about clang in a 1:2 meeting ... anyway, my problem is a test on a cmake configure is not passing, but manually it does... and also is starnge, because if you use package clang it tries to do the test, but if you specify clang package, i.e. clang-13, it states it doen't found the compiler at all16:36
mirespace_it seems I'm hungry as I'm eating letters, sorry_16:37
sergiodjheh :)16:37
sergiodjmirespace: I'd need to see some logs showing the error, and also the d/rules snippet (I'm assuming this is happening with a package)16:38
mirespacesergiodj: You're assuming well. Ok, of course  16:40
brycehfor those (coredevs) needing to retrigger tests now that linux-firmware is in -proposed, and want to avoid manually creating URLs, this is how I'm doing it for all the php retriggers:16:40
brycehexcuses-kicker -t linux-firmware php-symfony-mercure16:40
brycehreplace the php package with whatever needs retriggered.  It does pretty good at figuring out what other -proposed packages also need triggers included, and you can add more -t's for anything it forgets16:41
bryceh(https://code.launchpad.net/~bryce/+git/excuses-kicker)16:42
ahasenackkanashiro: sergiodj is debian in hard freeze now?17:35
ahasenack"""17:35
ahasenack2022-03-12      - Milestone 3 - Hard Freeze - for key packages and17:35
ahasenack                                packages without autopkgtests17:35
ahasenackTo be announced - Milestone 4 - Full Freeze17:35
ahasenack"""17:35
sarnoldahasenack: I think that was a typo17:40
ahasenackthe #topic in #debian-devel says 202317:43
* ahasenack checks debian-devel-announce@!17:43
sarnoldthe two irc channels I saw it discussed yesterday had the general conclusion it was an off-by-one, but nothing really copy-and-pasteable, hehe17:43
ahasenackhttps://lists.debian.org/debian-devel-announce/2022/03/msg00006.html17:44
ahasenacklooks like he sent an updated email, but to debian-devel@ only, not -announce17:47
sarnoldah!17:51
ahasenackI checked the archive and didn't see it18:03
ahasenackjust a bunch of replies from people as confused as I18:03
sarnoldahasenack: https://lists.debian.org/debian-devel/2022/03/msg00251.html18:05
ahasenackthx18:17
geniiHas a patch in Ubuntu been supplied yet for https://nvd.nist.gov/vuln/detail/CVE-2022-0778  ? There was an openssl update today on my Focal but new version seems 1.1.1f-1ubuntu2.12  and not 1.1.1n-some-ubuntu-string18:42
ubottuThe BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. It is possible to trigger the infinite lo... <https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0778>18:42
sarnoldgenii: https://ubuntu.com/security/notices/USN-5328-118:43
geniisarnold: So yes, patched... thanks!18:44
sarnoldgenii: yup :)'18:45
ahasenackupdate--initramfs takes *minutes* in my jammy vms... :/18:45
ahasenack20900 root      20   0  325180 223768   2300 S  99.0  22.5   3:38.68 zstd  18:45
sarnoldbrutal18:45
ahasenackzstd -q -19 -T0 -c /var/tmp/mkinitramfs-MAIN_pUEGb1 <-- are those the cmd line parameters we expect?18:45
ahasenackI'm a bit lost in that initramfs compression discussion18:46
ahasenack19 compression level?18:46
sarnoldyeah that seems silly imho18:47
ahasenackinitramfs.conf doesn't specify a level, just "zstd"18:47
sbeattieahasenack: yes, same, even worse when linux-firmware and a new kernel are in your update set, so an initramfs gets rebuilt for all your old kernels plus your new one.18:49
sarnoldgod I hate that so much18:49
ahasenackI just installed linux-image-virtual-extra to get some extra modules (why are the quota modules in the extra package...?)18:49
ahasenackand it's still running18:49
ahasenackand it was running for minutes already before I posted here18:49
sarnoldten minutes then?18:50
ahasenackabout so18:50
sbeattie¯\_(ツ)_/¯18:50
ahasenacki7, nvme disk, virtio, etc18:50
ahasenackbut 1Gb for the vm only18:50
sergiodjahasenack: nope!  too soon for hard freeze :)18:50
ahasenacksergiodj: :)18:50
ahasenacksarnold: finished now18:51
sarnoldsheeesh18:51
ahasenackthat was painful18:51
sarnoldI hope that's the only one that gets built for you18:51
ahasenackoh, there were 218:52
ahasenackso maybe divide that time, 5min each18:52
ahasenackno, it only updated one initramfs18:52
ahasenackbut there are two kernels installed18:52
sbeattiemmm, nice, my jammy vm somehow died in the middle of its update18:59
ahasenacknew initramfs with -1 compression level is in proposed \po/19:00
ahasenack\o/*19:00
ahasenackjammy release notes: "faster kernel updates"19:00
geniisarnold: I set my bot now to announce the USN rss feed in the channel where I test things19:29
sarnoldgenii: woot :)19:30
lotuspsychjegenii: if you like, i got a linux rss feed at #techrss19:30
geniilotuspsychje: I'm already suffering information overload lately but I'll keep it in mind19:31
lotuspsychjeok, just a proposal : )19:31
* genii gets a fresh pot of coffee brewing for the channel regulars19:31
* ahasenack discovers `quota` is an ubuntu server package20:17
masonahasenack: Appears in Bullseye with a Debian maintainer as well, FWIW. Does it originate in Ubuntu or somesuch?20:59
ahasenackmason: sorry, what does?21:00
masonahasenack: quota21:00
masonre: 16:17  * ahasenack discovers `quota` is an ubuntu server package21:00
ahasenackthe ubuntu package is a sync from debian, no changes21:00
masonkk, was just curious21:01
ahasenackI meant that I found out it's the ubuntu server team who is responsible for it21:01
masonAh!21:01
ahasenackand that surprised me, I though it would be foundations, because it's closely tied to filesystems21:01
masonI'm often surprised by the ownership of various packages at work.21:02
ahasenackI'm trying to figure out how rpc.rquotad ties into quotas when nfs is serving a glusterfs volume (!)21:02
ahasenackoh, did I mentioned clustered nfs? :)21:02
masonheh21:02
ahasenackctdb-clustered nfs server with backing glusterfs, I'm going a bit nuts21:02
masonIt looks at first glance like rpc.quotad exists for that kind of thing.21:03
ahasenackI set quotas in the gluster volume with gluster tooling, and that is respected on the client, no issues21:03
ahasenackeven in the nfs client21:03
masonI'm going to guess (sans context) that rpc.quotad won't care or be impacted by the backing store.21:03
ahasenackwithout rpc.rquotad in the way21:03
ahasenackso I'm not yet sure what it adds to the mix21:03
masonhrm21:03
ahasenackI think it's just reporting21:03
ahasenackso that quota tools work on the client perhaps? Not sure yet21:04
masonThat would make sense. Might be "apt source to the rescue"21:04
ahasenackand then I discovered ext4 has "native" quota support, without those quota files in the root of the mount point21:04
ahasenacktune2fs -O quota -Q usrquota:grpquota21:05
masonrpc.quotad also evidently sets quotas, although it might just know what knobs to spin.21:05
masonSo far, xdr_getquota_rslt -> xdr_getquota_rslt -> xdr_rquota21:11
masonum, s/xdr_getquota_rslt/rquota.c/21:12
ahasenackI think it's just a way for local quota tools to extract quota information from the fs that is being exported by the nfs server, provided said nfs server is running rpc.rquotad21:18
ahasenackso the quota tools, instead of checking the local fs, where aquota.group and aquota.user reside, will do this over an rpc call21:19
ahasenackI just wonder if the quota(8) tool will try the rpc call on its own21:19
ahasenackhttps://pastebin.ubuntu.com/p/sFR3qyfh5B/21:20
ahasenacktomorrow I'll export that over nfs21:20
ahasenackand see what quota(1) tells me on the nfs client side21:20
ahasenackwith and without rpc.rquotad running on the server21:20
ahasenackcya, have a nice evening all21:21
sergiodjcya ahasenack21:23
masono/21:25
* kanashiro waves21:31
brycehI think something may still be wrong with some of the autopkgtest hw.  arm64 specifically seems maybe returning failures where there should be none.  Not sure what's wrong with it.21:38

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!