/srv/irclogs.ubuntu.com/2023/03/22/#ubuntu-discuss.txt

lotuspsychjegood morning03:09
ilvipero<lotuspsychje> "good morning" <- ๐Ÿ‘‹ hi there, good morning 03:29
lotuspsychjeheya ilvipero o/03:29
wezyay lotuspsychje!11:18
ni-uxI've been using ubuntu for work for about 10+ years in large environments (thousands of VMs) and have historically been an advocate of it over more traditional subscription-based enterprise distributions11:57
ni-uxhave a couple of pieces of feedback:11:57
ni-uxthe installer for 22 is so bad that for our 22 VMs we've had to upgrade a 20 machine and use that as a template - there is no way to create a single partition install without swap or boot11:57
ni-uxthe increasing reliance on snap is something that might cause us to abandon the distribution completely - at a bare minimum it should never be on the server version and as a desktop user it would be nice not to have to deal with it there or to have configurable options that avoid it11:57
ograni-ux, funny you say that, when we started 9y ago with snap development it was mainly for server, cloud, industrial, robotics etc ... 13:07
ogra(and this is in fact where they are used in millions nowadays)13:07
ograbut if you dont like snap, just purge snpd (it will tear out all traces of snaps as well) and be done13:08
ogra*snapd13:08
ni-uxogra: I can see that being the purpose, but involving people with real world experience would have helped with design decisions and made the technology more usable 14:28
ni-uxthe big no-go for enterprise use-cases is no control of updates, but the resource utilization is also not ideal14:29
ni-uxin a world where we have containers there just isn't a reason to use snap in its current form14:29
ni-uxI guess I should be asking how I could get involved with the work that goes into the installer on the iso - in the open source ecosystem if we want things changed we should be helping14:30
ograni-ux, nearly all snap development is driven by paying customers ... so i'd guess there are plenty of real-world people involved14:31
ogranot sure what you mean by "control of updates" ... you can schedule them, hold them, set them to never happen at all etc 14:32
JanCbut their use cases are not everyone's use cases...14:32
ograespecially for enterprises you can also do test installs from beta/candidate channels before moving to the actual thing etc etc ...14:33
ni-uxyes by virtue of being a worse version of containerization there are some benefits you would get like that, I do understand that14:33
ograi know a lot of enterprises use snaps by utilizing all their features (see snap help for a very minimal subset of what snaps can do)14:33
ogra"being a worse version of containerization" ? i'd say wuite the opposite and big companies i work with would say that too (given they picked snaps over something like lxd or docker)14:34
ogra*quite the ...14:36
ni-uxI can see why someone developing something to be consumed by the public would be tempted to use snap but their interests are in direction opposition to the consumers of it14:36
ograi dont know a single containerization implementation offering the same bits snaps offer really14:36
ni-uxwhat you're really saying is "we have people that pay us and they use this so we're stuck with it" and that probably means for the average user or enterprise consumer we may need to switch distros if it becomes difficult to make sure snap isn't used for core app management14:37
ni-uxwhich is good to know14:37
ni-uxpaying customers certainly should drive development14:37
ograstarting from being cppletel read-only gpg signed (i.e. 100% tinker proof) over always compressed and never unpacked on disk .. to automated self-tests on upgrades and roll back (manual or automatic) to built-in fleet management ... to just name a few14:38
ograoh, and indeed unlimited parallel installs (for failover and HA cases etc)14:38
ni-uxnone of those things require the inability to control updates manually...14:39
ograLOL ... we're not "stuck with it" ... it isnt like several 100 people inside canonical work on it because we are "stuck with it" ... we developed it for certain use-cases and it is a big hit in these areas 14:39
leftyfbni-ux: you can control the updates. Unlike apt you can schedule them but you can also disable them just like apt. What more control do you want?14:39
ni-uxcontrol of the version that gets installed for one, not just "refreshing" to get the latest version14:40
ograni-ux, can you please elaborate ? you have full control over upgrades ...14:40
leftyfbthe only difference is, unlike apt, automatic update is enabled by default. But you can disable them completely14:40
leftyfbto be fair, this is fairly new14:40
leftyfbni-ux: https://ubuntuhandbook.org/index.php/2022/11/turn-off-automatic-updates-snap-apps/14:41
ograuh, but you cant do that with other packaging systems either ... if a version is in the archive you have to take it or not ...14:41
leftyfbni-ux: maybe you just weren't aware that you could disable the automatic updates?14:41
oerheks... and one can roll back14:41
ni-uxI can mark, hold, pick specific versions of apt packages14:41
ograleftyfb, you could always use the snap-store-proxy and turn it to airgapped mode ... enterprises have done that for years 14:41
ni-uxit's cool that you can at least disable the updates now but that's still less granular 14:41
leftyfbni-ux: "less granular"? How so?14:42
ograni-ux, what kind of granularity are you talking about ... 14:42
leftyfbni-ux: you can do it per snap package if you like14:42
ograni-ux, what can you do with a deb from the archive you can not do with a snap in that area ?14:42
ni-uxis it now possible to pick a particular version of a snap to update to? or if you enabled the auto update scheduling you'll just get latest14:42
ograni-ux, can you show me how to do that with a deb ?14:43
JanCeh, that's trivial14:43
ograis it ? 14:43
ograthere is usually only one supported deb in the archive 14:43
ograand that is the latest one uploaded14:43
ogranot different in any way how snaps behave14:44
ni-uxapt install package=version14:44
leftyfbni-ux: you know that only works for the versions available right? As in 2 for a short period of time14:44
ograyeah14:44
JanCyou can have multiple repositories with each their own version...14:45
ni-uxmaybe, but I've used it before to pick specific versions where needed successfully, and if you wanted to you can setup a PPA to help14:45
ograsame as "snap revert <package>" ... just that it will always work for a snap 14:45
ogra(since the one you revert to is local)14:45
ni-uxare these customers publishing apps as snaps? or just consuming them internally14:46
leftyfbboth14:46
ni-uxif they're publishing them...yes of course, it's much easier14:46
ni-uxbut consuming them vs deb there is no advantage only disadvantages 14:46
leftyfbfor instance, Mozilla publishes the Firefox snap14:46
ni-uxany of the virtues you're extolling are better used with containers 14:46
ni-uxon the consuming side14:46
ni-uxyes - I saw that this morning when updating my desktop personal system - it's what led me here14:47
ni-uxthis cancer has made its way to firefox now too?14:47
ni-uxvery frustrating14:47
leftyfbni-ux: ok, you don't like snaps and no amount of disproving your misconceptions and perceptions is going to change your opinion. Good luck.14:47
ni-uxthere are already work-around articles for it like this one:14:47
ni-uxhttps://www.omgubuntu.co.uk/2022/04/how-to-install-firefox-deb-apt-ubuntu-22-0414:47
ogramozially asked for it 14:47
ogra*mozilla14:47
leftyfbunlike debs, Mozilla can publish their snap and have the package updated to the latest across all OS's that support snaps, including non-deb-based distro's14:48
ni-uxleftyfb: not at all - if we fixed it so a snap isn't an isolated wasteful duplication of libraries and fixed it so updates work the same way as apt without just grabbing "latest", I'd be on board14:48
leftyfbpackage versions in snaps are distro-agnostic 14:48
ni-uxsure - because they wastefully just include libraries in the package14:49
ni-uxit's sheer laziness14:49
ogrageez14:49
leftyfbni-ux: hence containerized/secure14:49
ogracan you stop spreading FUD you read in forum comments14:49
leftyfbjust like flatpak14:49
leftyfband ... what's the one other one ... imagesomething?14:50
ograsnaps have had shared library snaps since close to the start in 201414:50
ni-uxI dont' really participate in forums much these complaints are the result of using this OS as my personal desktop for decades, and making leadership decisions in large companies that use the software14:50
ni-uxyou can dismiss them as "oh this guy just doesn't understand snap" and that's ok - but many have these complaints 14:50
ograwell, if you used them and looked close enoug you will see that libs are mostly shared ... particulary for desktop apps 14:50
ograthat "many have these complaints" does not make them true ๐Ÿ™‚14:51
ograsnaps or anti-snap are not religions ... just look at the code, or how it functions on your system ... it is all opensource 14:51
oerheksI wonder why people hate snaps, but trust apt packages over snaps..14:51
ni-uxits been some good years - we'll continue to route around snap as damage and if that becomes impossible or effort-prohibitive at some point I guess we'll jump ship14:52
oerheksor flatpak, with disadvantages also..14:52
leftyfbni-ux: good luck14:52
ni-uxif there is a way to help the team that does the installer I would appreciate it - that it still assumes you will have separate partitions for /boot, swap, etc... is silly14:52
ni-uxthe 20 installer allowed a single LVM partition for everything, which is what you want for public or private cloud14:52
* ogra has admittedly not tried the upcoming 23.04 installer yet ... but what yu complain about has nothing to do with snap packaging 14:53
ni-uxsome native support for a swapfile would be good too but it's not hard to throw one in after the fact14:53
leftyfbni-ux: feel free to file bugs14:53
ni-uxyeah it's a separate issue - we're not likely to agree on snap and you've already let us know paid customers like it and app developers are pushing for it14:54
leftyfb!bug | ni-ux 14:54
ubottuni-ux: If you find a bug in Ubuntu or any of its official !flavors, please report it using the command ยซ ubuntu-bug <package> ยป - See https://help.ubuntu.com/community/ReportingBugs for other ways to report bugs.14:54
ograwe do default to swapfiles since 22.04 IIRC ?14:54
ni-uxit's not really a bug in the installer it's just lacking some features of the old installer14:54
ni-uxthis is for server mind you14:54
leftyfbpretty sure no debian-based installer, desktop nor server ever allowed you to specify a swap file as opposed to a swap partition 14:55
ni-uxyeah a lot of the installers for all distros are stuck in 1995 it's not an ubuntu issue14:55
ograwell, ubuntu isnt anymore with the upcoming release ๐Ÿ™‚14:56
leftyfbogra: ?14:56
ograserver switched in 22.04 ... desktop does in 23.04 14:56
ograleftyfb, stuck in 199514:56
leftyfbah, subiquity 14:56
ograwell, curtin ... 14:57
ni-uxI'll file a bug and describe what I'm trying to do vs what actually happens and see from there14:57
ogra๐Ÿ‘14:57
ogragood move14:57
leftyfbthat 22.04.1 bug on installing over a BMC(iDrac) was nasty. Good thing 22.04.2 fixed it. Made my life of documenting the installation for a team much easier without having to write up a workaround14:58
ograyeah, bugs are awesome ... when they get fixed ๐Ÿ˜‰14:58
JanCwell, the Firefox snap is *still* broken... (although I see someone recently marked one of the biggest bugs as "in progress" recently, after years of doing nothing, so let's see...)14:59
leftyfbJanC: broken how?15:00
JanCI explained that here in the past15:00
leftyfbAgain, fresh install of Ubuntu 22.04 desktop last night, Firefox worked perfectly fine for me to download and install Chrome :)15:00
JanCthere are bug reports (in Launchpad & Mozilla's bugtracker)15:00
JanC(and AFAIK the Chromium snap has had the same bug, since 2019 or so)15:01
oerheksif one needs an OTA device with firefox snap, yes, it is broken15:01
ograJanC, "the bug" is really a bit broad ... my firefox has not had any bugs for me in ages ... nor does my chromium ... 15:04
ograoerheks, whats an OTA device ? (i only know OTA devices from the embedded world as over the air updating devices)15:06
oerheksin Belgium, one needs a special device to contact Taxservices.15:07
JanCbecause you don't (have to) use some features of Firefox does not mean other people don't...15:07
ograwasnt that fixed with the native-messaging support being added ? 15:07
JanCit's not just for tax services, it's pretty much all government services, healthcare, social security, etc.15:07
ogra(which was now ... what 2y ago ?)15:07
lotuspsychjenot yet ogra 15:07
oerheksNot AFAIK15:08
ograoh !15:08
lotuspsychjethat bug still not fixed15:08
ograi thought it was using that tech 15:08
lotuspsychjeim using chrome to bypass that15:08
JanCand also in some other countries (I think Estonia, ...)15:08
ograyeah, i heard that but was under the impression native messaging support had solved it 15:08
JanCit's also not a special device, it's astandard smartcard device15:09
lotuspsychjebug #174107415:09
-ubottu:#ubuntu-discuss- Bug 1741074 in firefox (Ubuntu) "[snap] chrome-gnome-shell extension fails to detect native host connector" [High, In Progress] https://launchpad.net/bugs/174107415:09
ravageogra: there are countries in Europe that use "the internet" to contact the government. i know for us that is hard to believe :P15:09
oerheksin nl we have DigiID, that is just a 2 factor auth, a simple sms on your phone15:09
JanCSMS... how secure  :P15:09
ograravage, you mean to send around scanned FAX documents to print tem out at the receiver ? 15:09
ogra๐Ÿ˜›15:09
lotuspsychjelol15:09
ravageogra: yep :D15:10
JanCogra: but this is about all-digital stuff, which they got working a couple decades ago...15:10
ograJanC, yeah, not in germany where the biggest digital innovation is still sending docs as beeps over phone lines ๐Ÿ˜›15:13
JanCI'm sure that happens too sometimes (not just at governments, I know for a fact the 2nd biggest telco here worked like that internally until at least 10 years ago), but these online things actually work now15:14
JanCtelco/IT services company really, setting the example...15:15
oerheksMy bank still works with this, for over 10y years now https://cdn.nos.nl/image/2015/04/10/147991/xxl.jpg15:16
lotuspsychjesame here oerheks 15:16
JanCthere is lots to be said about these online government projects (always delivered late, always delivered at huge budget overruns, etc.), but after a while they actually start to work well  :)15:16
JanCthat's not bad tech oerheks15:17
oerheksMy complaint; i can only set a 4 digit pincode, not 3, not 5-9 digits15:17
JanCbetter than SMS or a PIN code...15:17
ograyeah, somtimes i suspect there are still sitting wimen in 50s dresses somewhere in the basements of german telcos ... plugging headphone plugs into matrixes of headphn jacks 15:17
JanCoerheks: but you login is blocked after 3 failed attempts15:17
oerheksjups, and i disabled contact-payments. 15:18
oerheksno pulling money from my account, by payments of max 25 euro15:18
JanCeh, I bet half the people did that after a consumer TV show showed how easy it is to steal money with contact-free payments  :P15:18
JanChere15:19
oerheksand no payment by smartphone15:19
oerheksno e-sim too15:20
JanCBTW, I think (some of) those 2FA devices banks use can do 6-number PINs too15:27
JanCbut banks probably can't enable that until all devices in use (these 2FA devices, ATMs, web/phone apps, ...) support that15:28
JanCmight even be that it is held back to make sure your card still works in US ATMs or something like that  :)15:29
JanCI mean, they used magnetic strips for more than a decade after almost everyone else switched to smartcards too...15:30

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!