| mup | PR snapcraft#4046 opened: tools: move to the starbase tox configuration <Created by lengau> <https://github.com/snapcore/snapcraft/pull/4046> | 04:05 |
|---|---|---|
| mup | PR snapcraft#4047 opened: ci: update deprecated node12-based actions <Created by lengau> <https://github.com/snapcore/snapcraft/pull/4047> | 04:40 |
| mup | PR snapcraft#4048 opened: ci: remove deleted set-output GH Action command <Created by lengau> <https://github.com/snapcore/snapcraft/pull/4048> | 04:45 |
| mup | PR snapd#12596 closed: i/apparmor,s/apparmor: move snap-confine snippet generation to sandbox <Created by Meulengracht> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/12596> | 09:17 |
| mup | PR snapd#12597 closed: cmd/libsnap-confine-private: add sc_cleanup_deep_strv <Simple 😃> <Created by Meulengracht> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/12597> | 09:17 |
| mup | PR snapd#12608 opened: cmd/snap-confine: read and mount homedirs in snap-confine <Created by Meulengracht> <https://github.com/snapcore/snapd/pull/12608> | 10:53 |
| ogra | micchickenburger, you should take it to the forum (see channel topic) ... | 11:05 |
| mup | PR pc-gadget#83 opened: Re-add an empty bios boot partition to allow updates <Created by valentindavid> <https://github.com/snapcore/pc-gadget/pull/83> | 11:13 |
| === tjaalton_ is now known as tjaalton | ||
| mup | PR snapcraft#4047 closed: ci: update deprecated node12-based actions <Created by lengau> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/4047> | 13:30 |
| mup | PR snapcraft#4048 closed: ci: remove deleted set-output GH Action command <Created by lengau> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/4048> | 13:30 |
| mup | PR snapcraft#4049 opened: build(deps): bump golang.org/x/text from 0.0.0-20170915032832-14c0d48ead0c to 0.3.8 in /tests/spread/general/hooks/generated-and-project-hooks/src <dependencies> <go> <Created by dependabot[bot]> <https://github.com/snapcore/snapcraft/pull/4049> | 13:30 |
| mup | PR snapcraft#4050 opened: build(deps): bump golang.org/x/text from 0.0.0-20170915032832-14c0d48ead0c to 0.3.8 in /tests/spread/general/hooks/generated-then-project-hooks/src <dependencies> <go> <Created by dependabot[bot]> <https://github.com/snapcore/snapcraft/pull/4050> | 13:30 |
| mup | PR snapcraft#4051 opened: build(deps): bump golang.org/x/text from 0.0.0-20170915032832-14c0d48ead0c to 0.3.8 in /tests/spread/general/hooks/generated-hooks/src <dependencies> <go> <Created by dependabot[bot]> <https://github.com/snapcore/snapcraft/pull/4051> | 13:30 |
| mup | PR pc-gadget#83 closed: Re-add an empty bios boot partition to allow updates <Created by valentindavid> <Merged by alfonsosanchezbeato> <https://github.com/snapcore/pc-gadget/pull/83> | 14:13 |
| mup | PR snapd#12609 opened: tests: spread test pre-download and delayed auto-refresh <Created by MiguelPires> <https://github.com/snapcore/snapd/pull/12609> | 14:14 |
| smoser | o/ . I'm having a problem using skopeo, that I think is related to snap. Errors can be seen https://github.com/project-machine/mos/actions/runs/4304524199/jobs/7505674646 | 14:41 |
| smoser | the summary: skopeo installed via 'snap --devmode', tries to execute newuidmap and newgidmap which are setuid root. | 14:42 |
| smoser | and fails with : Error: error running newgidmap: exec: "newgidmap": executable file not found in $PATH: | 14:42 |
| ogra | you shoudl talk to the publisher ... | 14:44 |
| ogra | (TBH this looks like a test snap that has never been finished ... last upload in 2019, only available in the edge channel) | 14:45 |
| smoser | yeah, i saw taht too. | 14:45 |
| smoser | but is there a general issue with snap calling setuid ? | 14:46 |
| smoser | i'd look to build one myself, but not if its going to result in the same problem. | 14:46 |
| ogra | wll, this is usually blockd on upload already ... typically a snap can not ship setuid binaries without having it expicitly granted by the security team | 14:47 |
| smoser | i assumed it was getting them from the host. | 14:47 |
| smoser | i'd have to do --classic to get that i guess, right? | 14:47 |
| ogra | yes, but hat means your packaging gets really hard (you need to make sure everything runs from the snap and the host stuff does not leak into your env in any way, while you actually *have* full access to the host) | 14:48 |
| ogra | classic is also only granted for a limited set of use-cases ... | 14:48 |
| ogra | https://forum.snapcraft.io/t/process-for-reviewing-classic-confinement-snaps/1460 | 14:49 |
| mup | PR snapcraft#4052 opened: tests: remove unused go dependencies in generated hook spread tests <Created by mr-cal> <https://github.com/snapcore/snapcraft/pull/4052> | 14:51 |
| smoser | ok. well maybe its just not the right path then. it builds to a static executable so interaction with environment is not really a problem. | 14:51 |
| ogra | ah, yeah ... and cloud management or analysis is usually in the realm of getting classic permissions | 14:52 |
| ogra | the thing to keep in mind wit classic is ... will my snap run on kali linux, arch, fedora etc etc ... so you can not easily depend on something you do not ship ... | 14:53 |
| PaulW2U | x | 15:00 |
| smoser | thank you, ogra | 15:40 |
| mup | PR # closed: snapcraft#4026, snapcraft#4049, snapcraft#4050, snapcraft#4051 | 15:46 |
| mup | PR snapcraft#4052 closed: tests: remove unused go dependencies in generated hook spread tests <Created by mr-cal> <Merged by mr-cal> <https://github.com/snapcore/snapcraft/pull/4052> | 18:11 |
| mup | PR snapcraft#4046 closed: tools: move to the starbase tox configuration <Created by lengau> <Merged by mr-cal> <https://github.com/snapcore/snapcraft/pull/4046> | 22:16 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!