[00:14] <blast_hardcheese> Does OpenStack have a mode that doesn't involve starting up a secondary network?
[01:31] <chovynz1> today i logged into my server via ssh, and found this : *** System restart required ***
[01:31] <chovynz1> When I typed restart --no-wait it spits out an error, missing job. What do I need to type to restart the system?
[01:33] <patdk-lap> just type restart
[01:33] <blast_hardcheese> "reboot" is what you're looking for
[01:33] <blast_hardcheese> not restart.
[01:33] <blast_hardcheese> restart is to restart processes
[01:33] <chovynz1> thank you blast_hardcheese
[01:33] <blast_hardcheese> no problem
[01:34] <blast_hardcheese> Anyone have any idea regarding my OpenStack question?
[01:34] <blast_hardcheese> The documentation is really hard to follow unless you're doing it exactly like they have it written.
[01:34] <blast_hardcheese> man pages are scattered to the four corners of the planet as well.
[01:34] <chovynz1> man the shotgun huh?
[01:35] <patdk-lap> heh
[01:35] <patdk-lap> now I'm all messed up :)
[01:35] <blast_hardcheese> some processes have decent help, others just give useless "This is a stub"
[01:35] <patdk-lap> restart is the cisco command :)
[01:35] <blast_hardcheese> patdk-lap: It's easy to get confused, I've found when you live with this stuff for a long enough time your fingers automatically type the right thing in the right context
[01:36] <blast_hardcheese> If someone says something else that sounds right, your brain autocompletes the context
[01:36] <chovynz1> "you know, normal people just have aquariums"
[01:36] <blast_hardcheese> screw normal
[01:36] <chovynz1> :D
[01:36] <blast_hardcheese> I have a friend that collects aquarium software ;)
[01:37] <blast_hardcheese> (obligatory xkcd: http://xkcd.com/1095/ )
[01:39] <chovynz1> (01:36:54) blast_hardcheese: I have a friend that collects aquarium software ;) ... you mean like this? www.youtube.com/watch?v=7DXMXBnTOH0
[01:39] <osX64> Link [YouTube] :: chovynz1 :: High Res - Aquarium Mineral Oil Submersion HDD Media Server PC
[01:39] <blast_hardcheese> mm, no
[01:40] <chovynz1> :D
[01:43] <blast_hardcheese> can't wait until the next stable kernel rev
[01:43] <blast_hardcheese> 3.5.4 broke my touchscreen, had to revert to 3.4.5
[01:43] <chovynz1> I've just rebooted my server, what would cause the server to stop responding at the Award Software System Configurations screen?
[01:43] <blast_hardcheese> chovynz1: Any messages?
[01:44] <chovynz1> blast_hardcheese: no messages. the cursor is blinking at DDR SDRAM at Bank : 0 1_
[01:44] <blast_hardcheese> A couple things jump to mind. Easiest would be the BIOS getting stuck.
[01:45] <chovynz1> how do i unstuck it?
[01:45] <blast_hardcheese> Completely remove power from the machine, hold the power button down to flush the capacitors, then plug it back in
[01:45] <chovynz1> bleugh. i dont want to do that every time i reboot.
[01:45] <blast_hardcheese> shouldn't have to, but definitely something to test.
[01:45] <chovynz1> i can do it now, but it's not a long term solution
[01:46] <blast_hardcheese> (Not 100% sure the capacitor thing actually works, might have to wait for 15 seconds or something. Pushing the button is easier though.)
[01:48] <chovynz1> waited for 40
[01:48] <blast_hardcheese> no dice?
[01:48] <chovynz1> no dice
[01:49] <blast_hardcheese> Can you get into BIOS setup?
[01:49] <blast_hardcheese> (or your EFI utility, if you're EFI)
[01:49] <chovynz1> yes. there now
[01:49] <blast_hardcheese> Turn off "quick boot"
[01:49] <blast_hardcheese> that'll run extended diagnostics
[01:51] <chovynz1> how i flash my cmos and bios? they 2003.
[01:51] <chovynz1> bring it to the 21st century baby
[01:52] <blast_hardcheese> The general rule is leave it like it is unless you have to upgrade it
[01:52] <blast_hardcheese> What did the diagnostics say?
[01:52] <chovynz1> ok. leaving it like it is
[01:52] <chovynz1> im not sure where to find the quick boot. having another look
[01:54] <blast_hardcheese> Might not be "Quick boot" exactly
[01:55] <chovynz1> or anything that resembles it
[01:55] <blast_hardcheese> What kind of BIOS
[01:55] <blast_hardcheese> what motherboard
[01:56] <chovynz1> how would i find out without the software diagnostic tools?
[01:56] <blast_hardcheese> Did you build this server?
[01:56] <chovynz1> sort of. off someone else's computer. they used win xp well. I wiped their HD and installed ubuntu and let it do it's thing
[01:57] <blast_hardcheese> so you didn't build it, but it's not stock?
[01:57] <chovynz1> correct
[01:57] <chovynz1> open the case and read the mb?
[01:57] <blast_hardcheese> Motherboards typically have the model number written on the board itself.
[01:57] <blast_hardcheese> yeah, probly.
[01:57] <chovynz1> sec.
[01:57] <blast_hardcheese> How long have you had this machine?
[01:58] <chovynz1> about a month
[01:58] <blast_hardcheese> How many times have you rebooted it?
[01:58] <chovynz1> three times. first and second time i reinstalled ubuntu.
[01:58] <blast_hardcheese> oh, a good question; What was the reason you needed to restart?
[01:58] <chovynz1> i've since put data on it so id prefer not to reinstall
[01:59] <blast_hardcheese> Did you get any kind of "Your something or other has changed, please reboot"?
[01:59] <chovynz1> same thing. after the second i thought i had it stabilised as i rebooted and it went thought successfully.
[01:59] <chovynz1> *through
[01:59] <blast_hardcheese> I'm from Debian, Ubuntu still feels kinda weird, all the stuff it comes with out of the box
[02:00] <chovynz1> after updating then rebooting it did this again
[02:00] <blast_hardcheese> "do this, do that, here's how you do this" kinda stuff
[02:00] <chovynz1> lol
[02:00] <blast_hardcheese> With debian, you install what you want
[02:00] <blast_hardcheese> If you want that stuff, install it. If you don't, don't.
[02:02] <blast_hardcheese> What about my last question?
[02:02] <chovynz1> other than that message no
[02:02] <blast_hardcheese> hmm.
[02:03] <blast_hardcheese> Can you boot into the Ubuntu Installation media?
[02:03] <blast_hardcheese> There should be a "Rescue Mode"
[02:03] <chovynz1> *** System restart required *** was the only message i got
[02:03] <blast_hardcheese> Hmm.
[02:03] <chovynz1> I could be able to boot using a usb / cd / dvd
[02:04] <chovynz1> rather not unless necessary.
[02:04] <chovynz1> I'd like the system to work by itself instead of me rescuing it all the time :)
[02:04] <chovynz1> sec, getting a torch for the mb
[02:04] <blast_hardcheese> That's the only other thing I can think of. If you can't get your BIOS to tell you anything useful
[02:06]  * chovynz1 mutters under the desk, that's often the case
[02:07] <chovynz1> could the RAM be stuffed?
[02:07] <blast_hardcheese> Anything could be the issue, but I try not to go around saying things are broken without proof
[02:08] <chovynz1> ga-7vaxp sound like the mb?
[02:08] <blast_hardcheese> If you suspect the RAM, run memtest86+, it should be on the Ubuntu install CD
[02:08] <blast_hardcheese> http://ee.gigabyte.com/products/page/mb/ga-7vaxp-a/
[02:08] <blast_hardcheese> Probably
[02:09] <chovynz1> holy moly, nvidia gforce 6 on a ubuntu server
[02:09] <chovynz1> completly unecessary
[02:09] <chovynz1> with dual boot. :(
[02:09]  * blast_hardcheese jokes about Ubuntu Servers being more likely to have X
[02:10] <chovynz1> I think I may look at building my own in the near future, instead of relying on gifts.
[02:10] <blast_hardcheese> Usually a good policy.
[02:10] <chovynz1> "gift" that I worked for in exchange for some web work
[02:11] <chovynz1> I dont even really know what hardware i need for a good server, i usually just bang it on
[02:11] <chovynz1> see what works
[02:11] <chovynz1> I know i dont need a graphics card
[02:11] <chovynz1> why would this have dual bios?
[02:11] <blast_hardcheese> "dual bios"?
[02:12] <patdk-lap> most servers do
[02:12] <blast_hardcheese> huh.
[02:13] <blast_hardcheese> Never heard of it
[02:13] <patdk-lap> the primary and a backup
[02:13] <patdk-lap> unless he is talking about the bmc and normal bios
[02:13] <blast_hardcheese> Apparently Gigabyte has a "Patented DualBIOS technology"
[02:13] <chovynz1> phht
[02:14] <blast_hardcheese> (tm)(r)(bs) etc
[02:14] <chovynz1> I dont even
[02:15] <chovynz1> ..really know what i would use this mb for. it's too underpowered for graphics, but too much and unecessary stuff for a sever
[02:15] <blast_hardcheese> You could try flashing the BIOS, if you can get into the flash utility
[02:15] <chovynz1> *server
[02:15] <blast_hardcheese> I downloaded the BIOS update EXE, it's self-extracting
[02:16] <blast_hardcheese> and opens with wine, I should say
[02:16] <chovynz1> mm. Gentlemen. I shall need to depart. I thank you for your time. see you around.
[02:16] <blast_hardcheese> good luck.
[02:17] <CyclicFlux_> good evening fellow ubuntu-server enthusiasts
[02:18] <blast_hardcheese> (and others, hopefully)
[02:19] <CyclicFlux_> Upon doing a re-installation of Ubuntu system, while preserving my home directory.  I am having some prob's with reference to getting grub installed on my lvm.  I had it installed, and have a root/swawp lvm.  I was re-installing ubuntu 12.04.1, while preserving home.  However, upon the system re-installing when prompted I then had grub re-installed.  It definitely didn't work(and I am using the alternate .iso 12.04.1 amd_64, which I read can handl
[02:19] <CyclicFlux_> e doing re-installation while preserving lvm, though it is not yet official for ubuntu), and I am told with grub2 you don't need a dedicated /boot partition
[02:19] <CyclicFlux_> blast_hardcheese, lol!!! Thank you for finishing!
[02:21] <CyclicFlux_> My question is my Ubuntu installation had no dedicated boot partition before, and I am not able to find any good resources on installing the grub2 to the root LVM drive(upon checking it appears that this is where it was before)
[02:21] <blast_hardcheese> CyclicFlux_: https://wiki.archlinux.org/index.php/GRUB2#LVM
[02:21] <CyclicFlux_> Everything else went very well, and everything is preserved.  My question is what is the best way to fix everything?
[02:22] <blast_hardcheese> Check to see if the "insmod lvm" is in your grub config, for one
[02:22] <blast_hardcheese> Oh, even better
[02:22] <blast_hardcheese> http://ubuntuforums.org/showthread.php?t=1304407
[02:22] <CyclicFlux_> blast_hardcheese, thanks I will
[02:22] <blast_hardcheese> Someone's already asked this question on the Ubuntu forums
[02:23] <blast_hardcheese> Whoops, that's not the right URL at all.
[02:25] <blast_hardcheese> This looks more helpful: http://ubuntuforums.org/showthread.php?t=1778935
[02:25] <blast_hardcheese> How are you booting currently, if you didn't install GRUB?
[02:32] <CyclicFlux_> blast_hardcheese, I am using a live disk, because unfortunately I have only the ubuntu live alternate, and I am only able to get busybox shell, which is very limited.  When I try to boot the normal system it just stands still.
[02:32] <CyclicFlux_> So I am using a bt5 live disk
[02:32] <CyclicFlux_> BT5 R2 gnome 64-bit
[02:33] <blast_hardcheese> AH.
[02:33] <blast_hardcheese> Err, Ah.
[02:34] <CyclicFlux_> blast_hardcheese, sorry for the delay my client is not configured at all.
[02:35] <CyclicFlux_> blast_hardcheese, I will say though when I try to restore grub on the dvd, I get put into the grub-shell, not grub 2(grub> is what I see).  That tells me that the grub2 is not even found, so it is dropping back to grub.
[02:36] <CyclicFlux_> blast_hardcheese, will I be able to mount it and fix it with this BT5 R2 Live DVD?
[02:36] <blast_hardcheese> CyclicFlux_: I'm not familiar with either technologies to know if you can
[02:36] <blast_hardcheese> familiar enough, rather.
[02:38] <CyclicFlux_> blast_hardcheese, this is my fdisk -l output: http://pastebin.com/UaSU3rpF
[02:39] <blast_hardcheese> What's sda1?
[02:41] <patdk-lap> his /boot
[02:41] <CyclicFlux_> blast_hardcheese, the sda1 I believe is the logical volume for my swap
[02:41] <patdk-lap> only 200megs
[02:41] <CyclicFlux_> I think
[02:41] <CyclicFlux_> Here is the lvm output from lvdisplay: http://pastebin.com/8WAmNLMS
[02:42] <blast_hardcheese> patdk-lap: Right, but he thinks he's got grub configured in LVM
[02:42] <patdk-lap> heh?
[02:42] <blast_hardcheese> CyclicFlux_: What makes you think /boot/ was in LVM before?
[02:42] <patdk-lap> if your using grub2 also, that won't work
[02:43] <CyclicFlux_> I saw it on the root partition I believe(however, I am not going to lie, I am not sure)
[02:43] <CyclicFlux_> lol!!!
[02:43] <patdk-lap> you need 1mb of space, not 32k space
[02:43] <blast_hardcheese> CyclicFlux_: Good luck to you, going to go back to trying to configure OpenStack :)
[02:43] <blast_hardcheese> Sorry I couldn't help
[02:44] <CyclicFlux_> Should I make a new partition??(The ubuntu installer took care of everything, and this was done originally like 1 year ago, and I unfortunately didn't have notes when I did it, so its basically what the ubuntu installer did by default)
[02:44] <CyclicFlux_> blast_hardcheese, thanks for your help anyway!!
[02:44] <CyclicFlux_> patdk-lap, I am going to check it out.
[02:46] <CyclicFlux_> patdk-lap, the /dev/sda1 is definitely my boot, and the dev/matterhorn-root lvm partition had a boot in it because I told the ubuntu installer to use it to install the system, and then when it said to install grub2 I believe ti defaulted to there, so the /boot on the /dev/mapper/matterhorn-root is there because of the installer using it for the default grub2 location(I am guessing)
[02:47] <patdk-lap> heh?
[02:47] <patdk-lap> you either have it *mounted* or not
[02:47] <patdk-lap> nothing cares if what is pointed where
[02:47] <patdk-lap> if it's mounted it is used, if not, it won't be
[02:47] <patdk-lap> if it's mounted it will hide the lvm stuff
[02:48] <patdk-lap> are you using grub1 or grub2?
[02:48] <CyclicFlux_> patdk-lap, werrrrrd.  So I am going to unmount them(I am sorry I am not terribly familiar with lvm/lvm2), I just set it up for the first time on this system. And I am using grub2
[02:52] <CyclicFlux_> I am thinkking by looking at everything now(via the file-explorer), the /dev/sda1 is the grub2 bootloader, and it is the 200mb partition.  So I am guessing the LVM partition does not even need to have a grub, one can just use that and then point it to the lvm, and then insert an lvm module for grub to use?
[02:52] <patdk-lap> hmm?
[02:53] <patdk-lap> lvm should never have *a grub*
[02:53] <patdk-lap> it should have a /boot with stuff, if you want to boot via it
[02:53] <patdk-lap> but if you have a partition for /boot that is pointless
[02:57] <CyclicFlux_> patdk-lap, thanks for telling me this I have been scouring the web for stuff, and it is telling me lvm can have grub2, and grub 2 doesn't need its own /boot partition/etc... I think I am now getting the pieces to come together.
[02:58] <patdk-lap> well, yes
[02:58] <patdk-lap> but as you already have a /boot, you can do either
[02:58] <patdk-lap> but it makes sense to keep what you have :)
[02:58] <CyclicFlux_> patdk-lap, according to this link: https://help.ubuntu.com/community/Grub2/Troubleshooting on point 1, referencing the grub-shell
[02:59] <CyclicFlux_> I am getting dropped to the grub> shell, and according to the link, its possibly due to me not have a grub.cfg
[02:59] <patdk-lap> did you boot into your system?
[02:59] <patdk-lap> once you do
[03:00] <patdk-lap> make sure /boot is mounted
[03:00] <patdk-lap> do a update-grub
[03:00] <CyclicFlux_> Now that I am looking at that its a really good resource to all grub2 issues.
[03:00] <patdk-lap> and a install-grub, or whatever it is, grub-setup?
[03:00] <patdk-lap> but likely the issue is your boot partition
[03:00] <patdk-lap> it starts at sector 63
[03:00] <CyclicFlux_> I am in a live system now.  I will give it a whirl again. I tried it before I think, do I update the initramfs after?
[03:00] <patdk-lap> and that isn't enough space for grub2
[03:01] <patdk-lap> why initramfs?
[03:01] <patdk-lap> I would use gparted to move your boot partition to start at the 1MB mark
[03:02] <CyclicFlux_> because I thought that initramfs had to have the modules/etc... updated for grub2
[03:02] <patdk-lap> initramfs is for linux
[03:02] <CyclicFlux_> patdk-lap, I will start by doing that then
[03:02] <patdk-lap> if your in grub, you haven't got anywhere near initramfs
[03:03] <patdk-lap> bios -> disk -> grub -> linux -> initramfs -> init scripts
[03:04] <CyclicFlux_> patdk-lap, if you could kinda walk me through this I'd be very much obliged because once I boot, if it doesn't work I will have to get back into my live disk mode.  My default ubuntu rescue doesn't work(when booting and holding shift key), the only thing that'll work is the 'previous linux versions'
[03:04] <patdk-lap> hmm if previous works
[03:05] <patdk-lap> then it sounds like a kernel thing
[03:05] <patdk-lap> either /boot wasn't mounted when you upgraded the kernel, would be odd
[03:05] <patdk-lap> so it's missing
[03:06] <CyclicFlux_> patdk-lap, I just checked my output of fdisk -l, and my /dev/sda1 is currrently starts on 1
[03:07] <CyclicFlux_> patdk-lap, http://pastebin.com/UaSU3rpF
[03:07] <patdk-lap> yes, but you didn't check via sectors
[03:07] <patdk-lap> it starts at cylinder 1 (where cylinder size = 63)
[03:07] <AtomicSpark> Is it better to manually install or stick with repo version and trust it works better for little things like python packages (django, fiencms, etc)? I understand that the maintainers can't keep up with every project out there, but missing a security release of something I want to use bothers me.
[03:08] <CyclicFlux_> patdk-lap, I am totally feeling like an amateur right now, lol!!! Thanks though I appreciate it!!
[03:08] <patdk-lap> AtomicSpark, heh, I try to use the repo versions, but normally end up not doing it, cause it's too hard to make it work in my usecase
[03:08] <AtomicSpark> And the other thing that bothers me, a lot of these "minor" packages should be install in a director and not system wide.
[03:08] <patdk-lap> don't move it using fdisk, use gparted
[03:09] <CyclicFlux_> AtomicSpark, I use both repos(git), and pip(pip I think is better for python/django-related stuff), for all other stuff I definitely use git
[03:09] <CyclicFlux_> patdk-lap, no doubt!!
[03:09] <patdk-lap> AtomicSpark, if it wasn't system wide, how would it update it?
[03:09] <AtomicSpark> Does pip uninstall too? or do you just delete the folder?
[03:10] <CyclicFlux_> AtomicSpark, yessir!! Its really much more up-to-date, and all-in-all fresh
[03:10] <CyclicFlux_> AtomicSpark, recommended to me by several python devs
[03:10] <AtomicSpark> patdk-lap: updates can break things. and not everything can be imported/modified.
[03:11] <CyclicFlux_> AtomicSpark, see pip --help(but make sure its installed)
[03:11] <AtomicSpark> I think django would be fine installing site wide. For you create sites/apps with it.
[03:12] <CyclicFlux_> AtomicSpark, I have played/dabbled with django very little, I use php for that and then scrapy for crawling/etc... But it is something I'd like to get into messing around with because it definitely seems like it could be helpful
[03:12] <AtomicSpark> It's nice, but i get to a point where it gets over my head.
[03:12] <blast_hardcheese> I'm seeing stuff about site-wide python, if it hasn't been mentioned already, use virtualenv
[03:13] <AtomicSpark> blast_hardcheese: I saw that before, was trying to find it again.
[03:13] <blast_hardcheese> virtualenv is effectively chrooted Python environments
[03:13] <blast_hardcheese> a must for system stability and general sanity.
[03:13] <AtomicSpark> I've never done it before, but it makes sense.
[03:14] <AtomicSpark> When projects start asking to instal prereqs, I get nervious.
[03:14] <blast_hardcheese> yep.
[03:14] <patdk-lap> AtomicSpark, this is why I normally drop the ubuntu packages for website stuff, and update it myself
[03:16] <CyclicFlux_> patdk-lap, hey bud, I forgot for resizing in gparted is backing up necessary?
[03:16] <qman__> backing up is always necessary
[03:17] <CyclicFlux_> qman__, I figured it,  I am just gonna do a dd'
[03:17] <AtomicSpark> patdk-lap:  Like phppgsql, which is just downloads and hides it somewhere, assuming you'll symlink it to /var/www? lol.
[03:17] <CyclicFlux_> *'dd'
[03:17] <qman__> resizing with gparted is ~99% safe
[03:17] <qman__> that said, you should always have a backup, regardless of what you're doing
[03:17] <patdk-lap> AtomicSpark, if only it hid it somewhere, it splits it up into like 6 different locations
[03:18] <CyclicFlux_> qman__, I just remember there are some things/tasks that gparted should not be trusted for.
[03:18]  * patdk-lap hasn't used gparted for anything other than carving up new disks
[03:18] <patdk-lap> so I haven't put any trust into it at all yet
[03:19] <AtomicSpark> Do you use apache or lighttpd?
[03:20] <AtomicSpark> lol, I already had virtualenv bookmarked. As you can see, I've attempted this a few times.
[03:20] <CyclicFlux_> AtomicSpark, I use both Apache and NGINX!!! Love'em, but haven't tried lighttpd
[03:31] <blast_hardcheese> AtomicSpark: There's nothing to it, really.
[03:32] <blast_hardcheese> AtomicSpark: virtualenv ~/test-virtualenv && source ~/test-virtualenv/bin/activate && pip install django
[03:32] <blast_hardcheese> bam, django running inside a virtualenv.
[03:32] <blast_hardcheese> The tricky bit is getting virtualenv playing nicely inside Apache, I've not tried other webservers.
[03:42] <AtomicSpark> Would you keep your fastcgi stuffs (in this case python files) outside of /var/www? Keep that for static only?
[03:46] <AtomicSpark> Oh, they seem to put it in /var/virtualenv/yourdirectoryhere. That works, and makes sense.
[04:31] <AtomicSpark> Should I install distribute and pip from the repos?
[08:08] <lordievader> Good morning.
[08:10] <AtomicSpark> Morning.
[08:13] <lordievader> Hey AtomicSpark, how are you?
[08:14] <AtomicSpark> lordievader: Good. Trying to figure out what webserver I wish to use. I think I'm going to give up and just use Apache + WSGI.
[08:15] <lordievader> AtomicSpark: I just use Apache, does the job so why change it?
[08:16] <AtomicSpark> Lighttpd has a lot of FUD around it but develepment and bug fixing seems iffy, nginx is the new hotness, but I'd use apache as a backend anyways. Really just focusing on trying to get django set up.
[08:16] <AtomicSpark> lordievader: Apache is pretty heavy for static files and I'm a good developer and on a VPS.
[08:17] <lordievader> AtomicSpark: I see, well good luck with the decision.
[08:17] <ElixirVitae> Hello!
[08:17] <ElixirVitae> I just set-up my home server, but did not configure network during installation
[08:18] <ElixirVitae> would it be easier to do it during installation, or right now?
[08:36] <AtomicSpark> ElixirVitae: How far have you gotten? If you cannot dpkg-reconfiure it, might be a bit of a hassle.
[08:39] <ElixirVitae> I installed it all, with ssh-server only
[08:39] <ElixirVitae> now I want to control it using ssh, though, as I have not configured it during installation
[08:39] <ElixirVitae> I am having a bit trouble configuring it now
[10:25] <maddin> hello
[10:25] <maddin> i have a problem ....
[10:28] <fdge> let me read you mind to find out your problem
[10:29] <lordievader> !ask
[10:57] <_ruben> bugger .. 4 nics with 8 queues each and 8 cpu thread (4cores+ht) .. yet most packets seem to be processed by cpu0, as it has ~15% SI, with other have <1%
[11:25] <Auckla> I have this problem that stems from my father not holding me enough when I was a kid.
[11:28] <RoyK> _ruben: irqbalance running?
[11:31] <_ruben> RoyK: yes
[11:32] <RoyK> wierd
[11:34] <_ruben> each cpu does get a fair ammount of ethernet interrupts, just that cpu0 seems to be getting far more than the rest
[11:35] <RoyK> _ruben: stats from /proc/interrupts ?
[11:36] <_ruben> RoyK: that's what i'm looking at, yeah, and top
[11:37] <RoyK> ic
[11:38] <_ruben> wonder if there's some realtime top like tool for interrupts
[11:39] <RoyK> itop
[11:42] <_ruben> shame it doesn't show per cpu stats :/
[11:43] <RoyK> mhm
[11:43] <RoyK> but it's open source, so SMOP :D
[11:43] <_ruben> does show fairly evenly distributed rates for each int tho
[11:43] <RoyK> and each int is serviced by a core/cpu?
[11:47] <_ruben> i'll probably play with setting manual affinities, so that each queue goes to only 1 cpu thread
[15:59] <tech936> just re installed my ubuntu server what was the command again for connecting to the wifi?
[16:02] <RoyK>  iwconfig?
[16:13] <ElixirVitae> !patience
[16:16] <RoyK> ElixirVitae: ?
[16:19] <ElixirVitae> oh, I just wandered what that trigger returned, that's all
[16:19] <RoyK> :)
[16:19] <ElixirVitae> What other triggers are there for ubottu?
[16:19] <RoyK> try asking it
[16:19] <RoyK> !ask
[16:19] <RoyK> ;)
[16:20] <ElixirVitae> I know that one~
[16:22] <tech936> ok looking for ubuntu-Server Staff to Join a team of Networkers/Programmers/ETC message me if interested
[19:06] <guntbert_> !brain | ElixirVitae
[19:06] <ElixirVitae> Nice, grazie guntbert_!
[19:07] <guntbert_> ElixirVitae: niente :-)
[19:33] <gabrieluk> hello, i have a 10.04 lts box. i'm installing php-fpm to work with apache2. what is the correct way to install fast cgi? sudo apt-get install  libapache2-mod-fastcgi ?
[19:34] <gabrieluk> or libapache2-mod-fcgid
[19:47] <nsudo> Hi
[19:48] <nsudo> Please help me installing a webserver
[19:52] <RoyK> nsudo: | !ask
[19:52] <RoyK> erm
[19:52] <RoyK> !ask | nsudo
[19:52] <guntbert_> !lamp | nsudo
[21:59] <qja_jfdg> hi
[22:00] <qja_jfdg> ghgfhfg


[11:11] <sdsdf> Hi could anyone help me with this ? askubuntu.com/questions/459654/ubuntu-14-04-drivers-for-broadcom-bcm43142 ? I am desparately stuck with this for the past 1 week. This looks like a bug in ubuntu 14 ...
[15:02] <apw> sdsdf (N,FTL), likely there is an accompanying kernel error emmited with that modprobe error, you can see if that is true with the dmesg command
[16:13] <jhenke> hi, when I try to boot Ubuntu Studio in a Hyper-V UEFi VM I get this error: https://www.taujhe.de/images/UbuntuStudio_error.png
[16:14] <jhenke> it seems the Hyper-V kernel modules are not laoded, as I do not have any keyboard input, does anybody here has an idea?
[16:14] <jhenke> could it be a side effect of the lowlatency kernel of studio?
[16:59] <apw> jhenke, seems unlikely the differences between the normal kernel and -lowlatency would be to blame here
[17:00] <apw> jhenke, the image you are booting is a live image, so i would expect the hyper-v modules to be included in the initrd
[17:01] <apw> jhenke, that said, you mention you are using an efi VM, is that a V2 VM ?
[17:01] <apw> jhenke, finally, does a normal desktop image boot in teh same place
[17:02] <apw> (and file a bug for this issue, and let us know the bug number)
[17:16] <jhenke> apw thanks for the response, yes I use xubuntu with the same settings and it works nicely
[17:16] <jhenke> against which package shoould I file the bug?
[17:17] <jhenke> and yes it is a gen2 vm
[17:21] <apw> start with linux
[18:24] <jhenke> sorry for the delay, bug #1315921
[18:24] <jhenke> bug 1315921
[18:25] <jhenke> no ubotto here? :(


[04:51] <mup> PR snapd#7607 closed: tests: launch the lxd images folowing the pattern ubuntu:${VERSION_ID} <Created by sergiocazzolato> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/7607>
[05:05] <mborzecki> morning
[05:05] <mvo> hey mborzecki
[05:06] <mborzecki> mvo: how are the tests today? i'm seeing quite a lot of red
[05:07] <mborzecki> uhh lxd-nofuse/lxd-snapfuse
[05:07] <mvo> mborzecki: yeah, cachio debugged/fixed this one
[05:07] <mvo> mborzecki: mergering master should help :)
[05:07] <mborzecki> ah, great
[05:11] <zyga> o/
[05:13] <zyga> good morning
[05:13] <zyga> I'll grab some breakfast
[05:14] <mvo> zyga: good morning
[05:25] <mborzecki> zyga:  hey
[05:25] <zyga> o/
[05:26] <mborzecki> mvo:  can tou take a look at https://github.com/snapcore/snapd/pull/7605 ? i think i'm missing something, /etc/systemd as a whole is listed in writable, shouldn't mkdir /etc/systemd/journal.conf.d succeed then?
[05:26] <mup> PR #7605: tests: configure the journald service for core systems <Created by sergiocazzolato> <https://github.com/snapcore/snapd/pull/7605>
[05:30] <zyga> mborzecki: are you sure /etc/systemd is writable? can you provide a reference?
[05:31] <mborzecki> zyga: ahh damn, looking at the wrong tab
[05:31] <mborzecki> zyga: it's writable on core18, on core there's individual directories under /etc/systemd
[05:31] <zyga> that's how I remember it
[05:31] <zyga> yeah, it's complex :/
[05:32] <mvo> mborzecki: sure, looking
[05:32] <mborzecki> mvo: nvm, mystery solved :P
[05:32] <mvo> mborzecki: but iirc on core16 not all of it is writable just selected parts
[05:33] <mborzecki> mvo: right, i have writable-paths from both open and was looking at the other tab :P
[05:34] <zyga> mborzecki: I wonder if xnox experiment to use systemd in initrd works out
[05:38]  * mvo nods
[05:38] <zyga> I'll get to https://github.com/snapcore/snapd/pull/7547 now
[05:38] <mup> PR #7547: many: use a dedicated named cgroup hierarchy for tracking <Created by zyga> <https://github.com/snapcore/snapd/pull/7547>
[05:41] <mborzecki> zyga: can you take a look at https://github.com/snapcore/snapd/pull/7602 ?
[05:41] <mup> PR #7602: overlord/many: extend check snap callback to take snap container <Remodel :train:> <Simple 😃> <Created by bboozzoo> <https://github.com/snapcore/snapd/pull/7602>
[05:46] <mvo> zyga: 1825298 is interessting
[05:53] <mvo> dear launchpad, please stop timing out on me when I try to do bugtriage, love michael
[05:57]  * mvo stops bug triage
[06:05] <zyga> mvo: looking now
[06:07] <zyga> mvo: oh boy
[06:07] <zyga> mvo: how do we leave this misery
[06:08] <mvo> zyga: thats a tricky one :(
[06:08] <mvo> zyga: also super annoying :(
[06:09] <zyga> mvo: one way out would be to stop using /etc for apparmor profiles we use
[06:09] <zyga> this would involve shipping empty replacements that do NOP
[06:09] <zyga> and shipping files in /var forever
[06:13] <mvo> zyga: does apparmor support /var ?
[06:13] <zyga> mvo: ubuntu's apparmor does, that's how our profiles work
[06:13] <zyga> mvo: other distributions don't until apparmor 3.0 eventually ships
[06:13] <zyga> mvo: we wrote snapd.apparmor.service to support that and use it on some systems
[06:14] <zyga> mvo: solus has a custom solution for loading profiles but it supports /var/lib/snapd/apparmor already
[06:14] <zyga> mvo: we can do it
[06:16] <mvo> zyga: interessting, might be a good option, I feel I lack some details though, need to look closer after I did this bug triage
[06:17] <zyga> mvo: sure, we can talk about it later today
[06:17] <zyga> mvo: I mainly worry about how to fit this into our framework of rollbacks
[06:18] <amurray> mvo zyga: you could change the profile in /etc to '#include if exists </var/...>' so that it can hang around and still work even if the one in /var goes away
[06:19] <zyga> amurray: hey :)
[06:19] <amurray> mvo zyga: ah sorry - this was added in AppArmor 2.13 iirc so won't work for older releases
[06:19] <zyga> amurray: last time we looked it was not supported
[06:19] <zyga> :D
[06:19] <zyga> exactly
[06:19] <amurray> hey zyga
[06:19] <zyga> so it's great, but we cannot have it
[06:19] <amurray> bah ignore me then... oh well
[06:21] <zyga> amurray: shipping software on linux is easy they said ;)
[06:21] <zyga> amurray: while we have you
[06:21] <zyga> amurray: do you have a moment to look at an idea we had
[06:22] <zyga> amurray: it's described here https://github.com/snapcore/snapd/pull/7547
[06:22] <mup> PR #7547: many: use a dedicated named cgroup hierarchy for tracking <Created by zyga> <https://github.com/snapcore/snapd/pull/7547>
[06:22] <amurray> zyga: sure it's easy shipping software when you have snapd - shipping snapd however... that is harder :)
[06:22] <amurray> zyga: give me a sec
[06:22] <zyga> amurray: but the basic idea is that we mount a cgroup v1 hierarchy at /run/snapd/cgroup
[06:22] <zyga> amurray: no controllers just name=snapd
[06:22] <zyga> amurray: and we use it in v1 and v2 worlds so that we can always track processes
[06:22] <zyga> amurray: we want holes to be poked in the idea
[06:24] <amurray> zyga: my cgroups knowledge is a bit rusty but I will try and brush up and then review it in the next day or so if that's ok?
[06:26] <zyga> amurray: perfect
[06:26] <zyga> thank you so much
[06:26]  * zyga takes bit out for a walk
[06:27] <amurray> zyga: no worries
[06:30] <mvo> amurray: hey, do you happen to know if there is a "if file.exists()" primitive in apparmor profiles? or an include_if_availalbe? context is bug 1825298
[06:30] <mup> Bug #1825298: apparmor.service fails to start when apt install/remove snapd due to snapd profile error <snapd:Confirmed> <snapd (Ubuntu):Triaged> <snapd (Ubuntu Cosmic):Won't Fix> <https://launchpad.net/bugs/1825298>
[07:03] <pstolowski> morning
[07:06] <pstolowski> mborzecki: hey, have you looked at https://paste.ubuntu.com/p/S48Gyv5mpp/ recently? snapd deb failing to install inside container
[07:06] <mborzecki> pstolowski: he, it's fixed in master by cachio
[07:07] <pstolowski> mborzecki: ah, great
[07:11] <mvo> hey pstolowski !
[07:11] <pstolowski> o/
[07:13] <pstolowski> mvo: do you think https://bugs.launchpad.net/snapd/+bug/1824162 is medium prio? i was contemplating setting it critical for a while :/
[07:13] <mup> Bug #1824162: /usr/lib/snapd/snapd:11:runtime:runtime:runtime:runtime:runtime <artful> <bionic> <cosmic> <xenial> <zesty> <snapd:Triaged by stolowski> <snapd (Ubuntu):In Progress> <https://launchpad.net/bugs/1824162>
[07:15] <pstolowski> mvo: it may occur regardless of experimental hotplug flag, and may prevent clean shutdown of snapd; of course only if there is udev netlink activity
[07:27] <mvo> pstolowski: I saw the report
[07:27] <mvo> pstolowski: it should probably be high or criticial, yes
[07:27] <mvo> pstolowski: do we have a fix yet or is it complicated?
[07:28] <pstolowski> mvo: no fix but should be simple, i needed to think a bit about it. should have a PR today
[07:43] <mup> PR snapd#7593 closed: recovery-tool: add sfdisk wrapper <Created by cmatsuoka> <Merged by mvo5> <https://github.com/snapcore/snapd/pull/7593>
[07:55] <mup> PR snapd#7609 opened: snap-recovery: remove "usedPartitions" from sfdisk.Create() <Created by mvo5> <https://github.com/snapcore/snapd/pull/7609>
[08:06] <stealthybox> davdunc, could we update the aws-cli snap?   It's getting a bit too old to use with EKS.  Anything Weaveworks can do to help get this bumped regularly?  Cheers
[08:21] <zyga> mborzecki: updated https://github.com/snapcore/snapd/pull/7547
[08:22] <mup> PR #7547: many: use a dedicated named cgroup hierarchy for tracking <Created by zyga> <https://github.com/snapcore/snapd/pull/7547>
[08:22] <zyga> mborzecki: I think I applied everything that we agreed upon
[08:23] <zyga> mborzecki: I didn't apply the changes that would impact people with the feature disabled for now
[08:25] <zyga> mborzecki: I'll do a small patch on top that enables this unconditionally to see if things fall apart
[08:25] <zyga> mborzecki: and then move this to happen for all snap confinement types
[08:28] <oSoMoN> pedronis, hello! would you mind voting on https://forum.snapcraft.io/t/auto-connecting-the-personal-files-interface-for-the-chromium-snap-part-ii/13705 ?
[08:34] <mup> PR snapd#7602 closed: overlord/many: extend check snap callback to take snap container <Remodel :train:> <Simple 😃> <Created by bboozzoo> <Merged by bboozzoo> <https://github.com/snapcore/snapd/pull/7602>
[08:35] <pedronis> mborzecki: please do a follow up to #7602 where you swap *snap.Info and snap.Container
[08:35] <mup> PR #7602: overlord/many: extend check snap callback to take snap container <Remodel :train:> <Simple 😃> <Created by bboozzoo> <Merged by bboozzoo> <https://github.com/snapcore/snapd/pull/7602>
[08:36] <mborzecki> pedronis: sure
[08:36] <pedronis> thanks
[08:38] <pedronis> mborzecki: to be clear, it means that now args are  snap, snapf, curSnap
[08:38] <mborzecki> pedronis: yup, got it :P
[08:38] <pedronis> mborzecki: I suppose snap, curSnap, snapf   if it's a bit simpler
[08:38] <pedronis> but snapf first is strange because of most of these will not use it
[08:39] <pedronis> it's ancillary to the infos
[08:48] <zyga> mborzecki: trivial https://github.com/snapcore/snapd/pull/7610
[08:48] <mup> PR #7610: cmd/snap-confine: remove leftover condition from capability world <Created by zyga> <https://github.com/snapcore/snapd/pull/7610>
[08:49] <mup> PR snapd#7610 opened: cmd/snap-confine: remove leftover condition from capability world <Created by zyga> <https://github.com/snapcore/snapd/pull/7610>
[08:56] <pstolowski> mvo: hmm i take my words back, a simple fix doesn't cut it for go-udev, it may get more complicated to fix
[09:06] <zyga> mborzecki: we need to talk
[09:06] <zyga> mborzecki: about classic mount ns
[09:06] <zyga> mborzecki: I have an idea that will resolve a problem that was raised during one of the review cycles
[09:06] <zyga> mborzecki: essentially, we can keep using the mount namespace we inherit when starting
[09:06] <zyga> mborzecki: and not re-associate back to pid-1 ns
[09:06] <zyga> mborzecki: I need to go for a haircut now, let's chat later, ok?
[09:07] <mborzecki> zyga: sgtm, deep in some bits of gadget/devicestate now
[09:07] <zyga> mborzecki: but the main idea is: since there is no persistence we don't need to re-associate with pid-1 ns
[09:07] <zyga> mborzecki: and anything we need to do (like tracking) can be forked to a helper that re-associates and quits
[09:07] <zyga> mborzecki: so that main process is where it was originally
[09:07] <zyga> mborzecki: this means that there is perfect compatibility and no impact to any odd setups that work today
[09:08]  * zyga runs for an errand, ttyl
[09:12] <mvo> pstolowski: uh, thats slightly sad
[09:32] <mup> PR snapd#7577 closed: overlord: set fake serial in TestRemodelSwitchToDifferentKernel <Created by mvo5> <Merged by pedronis> <https://github.com/snapcore/snapd/pull/7577>
[09:34] <kjackal> hi jdstrand. I am settign up microk8s with strict confinement. Partially works. I have a problem with a pod getting a denial.
[09:34] <kjackal> apparmor="DENIED" operation="ptrace" profile="snap.microk8s.daemon-kubelet//systemd_run" pid=3034 comm="mount" requested_mask="trace" denied_mask="trace" peer="snap.microk8s.daemon-kubelet"
[09:34] <kjackal> Have you seen this before?
[09:40] <Chipaca> kjackal: it's a bit early
[09:40] <kjackal> yeap I know, no worries. I will ping him later as well
[09:44] <pedronis> Chipaca: hi, I did a pass on #7608
[09:44] <mup> PR #7608: o/snapstate, etc: SnapState.Channel -> TrackingChannel, and a setter <Created by chipaca> <https://github.com/snapcore/snapd/pull/7608>
[09:44] <Chipaca> just reading it
[09:44] <Chipaca> pedronis: the "Invalid channel" was because that way it looked just like the error we would get from the store :-)
[09:45] <Chipaca> perhaps too cute a reason tho
[09:59] <Chipaca> pedronis: pushed fixes for those and the spread tests
[09:59] <Chipaca> now going for a walk, bbiab
[10:06] <pedronis> Chipaca: made a naming remark
[10:08] <mup> PR snapd#7611 opened: overlord/many: switch order of check snap parameters <Remodel :train:> <Simple 😃> <Created by bboozzoo> <https://github.com/snapcore/snapd/pull/7611>
[10:08] <mborzecki> pedronis: ^^
[10:10] <pedronis> mborzecki: thanks, the fact that nil now are packed together seems to mean it's the right thing
[10:10] <mborzecki> pedronis: wodnering about moving it further to the right, after flags though
[10:11] <pedronis> we tend to put flags as right as we can
[10:12] <pedronis> you would have:   nil, snapstate.Flags{}, nil
[10:12] <pedronis> doesn't look better to me,  any particular reason?
[10:12] <pedronis> if we want to shuffle again
[10:13] <pedronis> having after the first snap would still be best (except it needs more signature churn)
[10:16] <mborzecki> pedronis: otoh, it's probably good as it is in the PR, infos come first, then the container, then the rest
[10:17] <pedronis> mborzecki: as I said I'm fine with the PR state
[10:17] <mborzecki> ack
[10:20] <pstolowski> mborzecki: do you have a moment for https://github.com/snapcore/snapd/pull/7518 ?
[10:20] <mup> PR #7518: cmd/snap: sort tasks in snap debug timings output <Created by stolowski> <https://github.com/snapcore/snapd/pull/7518>
[10:21] <mborzecki> pstolowski: sure
[10:21] <pstolowski> thanks!
[10:22] <mup> PR snapd#7612 opened: gadget: add a public helper for parsing gadget metadata <Remodel :train:> <Simple 😃> <Created by bboozzoo> <https://github.com/snapcore/snapd/pull/7612>
[10:22] <mborzecki> another simple one ^^
[10:23] <mup> PR snapd#7355 closed: interfaces/apparmor: load multiple profiles in a single batch <Complex> <Created by stolowski> <Merged by stolowski> <https://github.com/snapcore/snapd/pull/7355>
[10:24] <pstolowski> pedronis: what's the problem with the transition in the store wrt #7092?
[10:24] <mup> PR #7092: packaging: use snapd type and snapcraft 3.x <⛔ Blocked> <Created by stolowski> <https://github.com/snapcore/snapd/pull/7092>
[10:24] <mup> PR snapd#7613 opened: snap-recovery: add minimal binary so that we can use spread on it <Created by mvo5> <https://github.com/snapcore/snapd/pull/7613>
[10:25] <amurray> mvo: there is 'include if exists' - see say https://gitlab.com/apparmor/apparmor/blob/master/profiles/apparmor.d/abstractions/dri-enumerate#L11 for an example - but this is only supported by apparmor 2.13
[10:25] <amurray> and as zyga mentioned, this 2.13 is not available everywhere so include if exists is probably not a realistic option
[10:26] <pedronis> pstolowski: the store checks that the type of snap upload is like the one of the last approved one
[10:26] <pedronis> so for snapd is app
[10:26] <pedronis> atm
[10:27] <pedronis> we are discussing with the store to have an override
[10:27] <pedronis> it's a good check in general, but a couple of cases show we need an override
[10:27] <pstolowski> pedronis: i see, thanks
[10:28] <mvo> amurray: thank you!
[10:33] <mup> PR snapcraft#2751 closed: tests: move cli store push/upload tests to FakeStoreCommands <Created by sergiusens> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/2751>
[10:51] <mup> PR snapcraft#2745 closed: tests: update spread tests to account for content snaps <Created by cjp256> <Merged by sergiusens> <https://github.com/snapcore/snapcraft/pull/2745>
[11:12]  * pstolowski lunch
[11:52] <Chipaca> zyga: question about #7610, about something i only noticed thanks to pstolowski
[11:52] <mup> PR #7610: cmd/snap-confine: remove leftover condition from capability world <Created by zyga> <https://github.com/snapcore/snapd/pull/7610>
[11:52] <zyga> sure
[11:52] <zyga> looking at the PR
[11:52] <Chipaca> zyga: why do you call geteuid etc when you've already loaded their answers via getresuid?
[11:53] <zyga> Chipaca: there's no good reason, it's just a bunch of old code few people touch
[11:53] <zyga> Chipaca: some reasons as that it is easier to ... reason about the code in front of you
[11:53] <zyga> vs some state
[11:53] <zyga> Chipaca: but I think that it can be simplified
[11:53] <zyga> pstolowski, Chipaca: would you mind if I open the simplification as another PR if this goes green?
[11:54] <zyga> I have some more in this area anyway
[11:54] <pstolowski> zyga: absolutely
[11:54] <Chipaca> zyga: what's currently 'if geteuid() != 0 { bail } ' could go right after the call to getresuid and make it easier to follow without needing the extra syscall
[11:54] <zyga> yeah
[11:54] <Chipaca> etc etc
[11:54] <zyga> I missed that, I looked at other parts and got confused
[11:54] <Chipaca> zyga: also these are all nits :-)
[11:55] <zyga> sure, but it's good to ask such questions
[11:55] <zyga> thank you for that!
[11:55] <zyga> :)
[11:56] <Chipaca> :)
[11:57] <Chipaca> speaking of questions, lunchp?
[11:57]  * Chipaca goes
[11:58] <zyga> Chipaca: lunchp? is redundant, no?
[11:58] <zyga> it's either lunch? or lunchp
[11:58] <zyga> ;-)
[11:59] <Chipaca> I was questioning the very question, probably
[11:59] <zyga> Chipaca: (lunch?)? ;-)
[12:00] <mup> PR snapd#7610 closed: cmd/snap-confine: remove leftover condition from capability world <Created by zyga> <Merged by zyga> <https://github.com/snapcore/snapd/pull/7610>
[12:00] <zyga> it's in :)
[12:05] <mup> PR snapd#7611 closed: overlord/many: switch order of check snap parameters <Remodel :train:> <Simple 😃> <Created by bboozzoo> <Merged by bboozzoo> <https://github.com/snapcore/snapd/pull/7611>
[12:38] <zyga> mborzecki: I opened a draft of device cgroup changes I had stashed, there's more piled on top to support v2 but I think this is a good thing to discuss before
[12:38] <zyga> mborzecki: if you have some time now we can discuss before the standup
[12:38] <mup> PR snapd#7614 opened: cmd/snap-confine: implement snap-device-helper internally <Created by zyga> <https://github.com/snapcore/snapd/pull/7614>
[12:38] <zyga> mborzecki: it's not complex, I think it's actually more readable than before
[12:39] <mborzecki> zyga: ok, let me grab a coffee
[12:41] <jdstrand> pstolowski: re 7355> woohoo, merged! :)
[12:41] <zyga> jdstrand: hey :)
[12:42] <zyga> jdstrand: there's something that you could look at to help us move forward with a feature
[12:42] <zyga> jdstrand: we also asked alex and he said he would look tomorrow
[12:42] <zyga> jdstrand: but it would be good for you be aware of it in general
[12:42] <zyga> jdstrand: https://github.com/snapcore/snapd/pull/7547
[12:42] <mup> PR #7547: many: use a dedicated named cgroup hierarchy for tracking <Created by zyga> <https://github.com/snapcore/snapd/pull/7547>
[12:43] <zyga> jdstrand: the main idea is that we mount a new cgroup at /run/snapd/cgroup, just for tracking processes
[12:43] <zyga> jdstrand: no controllers are involved
[12:43] <jdstrand> kjackal: yes, I have seen that and it should be addressed in snapd 2.42. what does 'snap version' give you?
[12:43] <zyga> jdstrand: and we use this method in v1 and v2 worlds where it surprisingly works for as long as v1 is in the kernel
[12:44] <zyga> jdstrand: we have some more plans for this, there's a follow up branch that adds and configures a release agent for the cgroup
[12:44] <zyga> jdstrand: and this lets us solve some long-standing bugs with resouce leaks as well as get the new desired features for app termination notification in snapd
[12:50] <kjackal> jdstrand: 2.42+git1515.143caf4~ubuntu16.04.1
[12:50] <jdstrand> zyga: thanks for making me aware. the idea seems ok otoh
[12:52] <kjackal> jdstrand: I am now in the middle of another addon that is failing. This time with:
[12:52] <kjackal> apparmor="DENIED" operation="exec" info="no new privs" error=-1 profile="snap.microk8s.daemon-containerd" name="/usr/local/bin/proxy-init" pid=16941 comm="runc:[2:INIT]" requested_mask="x" denied_mask="x" fsuid=0 ouid=0 target="cri-containerd.apparmor.d"
[12:53] <jdstrand> kjackal: can you paste /var/lib/snapd/apparmor/profiles/snap.microk8s.daemon-kubelet ?
[12:54] <kjackal> jdstrand: Here it is http://paste.ubuntu.com/p/fqpxsZscF9/
[12:55] <jdstrand> kjackal: re the paste> you don't have the rule in there. can you paste /snap/microk8s/current/meta/snap.yaml ?
[12:56] <kjackal> jdstrand: http://paste.ubuntu.com/p/4qMqPQjmKn/
[12:57] <jdstrand> hmm, I thought that was in 2.42
[12:57]  * jdstrand double checks
[13:02] <jdstrand> kjackal: ok, I misread the trace denial. I saw it the other way around (kubelet tracing itself) but not kubelet's systemd-run needing to trace kubelet
[13:03] <jdstrand> kjackal: do you know what operation is causing that?
[13:04] <kjackal> jdstrand: I shared this via email https://docs.google.com/document/d/1mGHEfgiTDB6Nd11vgkPgCY2OrzrDGk7vmEgjrJGTKmA/edit?usp=sharing
[13:04] <jdstrand> kjackal: also, what kernel is this on?
[13:04] <kjackal> jdstrand: its on Linux ip-172-31-20-243 4.15.0-1051-aws #53-Ubuntu SMP Wed Sep 18 13:35:53 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
[13:04] <mup> PR #53: Negate the integration build tag <Created by elopio> <Merged by elopio> <https://github.com/snapcore/snapd/pull/53>
[13:05] <jdstrand> kjackal: ok, I understand the denial and will create a PR
[13:05] <jdstrand> kjackal: do you have more information on the proxy-init denial?
[13:06] <kjackal> I am looking into this now
[13:06] <kjackal> What other info would you like me to gather?
[13:07] <jdstrand> kjackal: like with the subpath, the context of the denial. also, this looks to be in aws, can you give me ssh access?
[13:08] <kjackal> of course, looking for you in LP
[13:10] <kjackal> jdstrand: try<EMAIL_ADDRESS>[13:13] <jdstrand> kjackal: ok, I'm in
[13:13] <kjackal> there is a tmux session I am using, in case you want to show me anything
[13:14] <jdstrand> kjackal: what are you doing to trigger the proxy-init denial?
[13:14] <kjackal> jdstrand: it is part of the "microk8s.enable linkerd"
[13:15] <kjackal> all containers are failing. I suspect the reason is "securityContext:
[13:15] <kjackal>           runAsUser: 2103"
[13:16] <kjackal> jdstrand: see "sudo microk8s.kubectl edit -n linkerd       deployment.apps/linkerd-controller"
[13:16] <jdstrand> that is entirely possible
[13:18] <jdstrand> kjackal: that user doesn't exist on the main system, but more importantly, I think nnp (no new privs) may get in the way if you try to use a different user than what it is running as. try making that root
[13:18] <kjackal> jdstrand: the problem is that the manifests I apply are not mine
[13:19] <kjackal> jdstrand: I am deploying the linkerd manifests. If they fail out of the box they will fail from anyone
[13:20] <jdstrand> joedborg: are you using linkerd? have you seen/fixed kjackal's denial in kubernetes-worker?
[13:20] <roadmr> linkerd sounds like a startup's name (linkerd.io! we link all your links!)
[13:21] <joedborg> jdstrand: i'm not using linkered.  kjackal sent me some last week which one in particular?
[13:21] <jdstrand> joedborg: the one from 30 minutes ago
[13:21] <jdstrand> (in this channel)
[13:21]  * joedborg found it
[13:22] <jdstrand> kjackal: nnp presents a number of challenges
[13:22] <kjackal> joedborg: these are the instructions for deploying linkerd https://linkerd.io/2/getting-started/
[13:22] <roadmr> I was just joking about linkerd.io :(
[13:23] <jdstrand> roadmr: clearly not ;)
[13:23] <roadmr> well it's like "I was just joking about Donald Trump being president" :(
[13:23] <joedborg> jdstrand: kjackal: Ah, no i haven't, but this may be where k8s-worker and microk0s diverge; microk8s runs a lot of infra outside of k8s, where as k8s-worker runs it inside, so there will be differences like this (where the paths are different, for example)
[13:24] <joedborg> thanks kjackal, I'll test it on my local cluster
[13:24] <jdstrand> joedborg: that's fine, thanks
[13:25] <kjackal> joedborg: jdstrand, do you think we could say that "certain workloads will not run on strictly confined setup" ?
[13:25] <jdstrand> kjackal: have you tried to use a layout for /usr/local/bin?
[13:25] <jdstrand> kjackal: it isn't in the current snap.yaml
[13:26] <jdstrand> kjackal: ala https://github.com/charmed-kubernetes/snap-kubernetes-worker/blob/master/snap/snapcraft.yaml
[13:26] <kjackal> jdstrand:  I can add it now
[13:26] <jdstrand> kjackal: I would like to better understand what is happening before saying that (re certain workloads)
[13:27] <joedborg> jdstrand kjackal I think it's possible to run all workloads under strict confinement, but that it hignes on getting runc to use chroot, rather than pivot (as we discussed yesterday)
[13:32] <jdstrand> kjackal: can you not install/refresh microk8s on the aws node I'm on for a bit (I'll let you know)?
[13:32] <jdstrand> kjackal: also, what is a command I can run to trigger the subpath denial?
[13:32] <joedborg> jdstrand: kjackal: ah, so I do get that same issue when running linkerd `[86131.195871] audit: type=1400 audit(1571232667.748:226767): apparmor="DENIED" operation="exec" info="no new privs" error=-1 profile="snap.kubernetes-worker.containerd" name="/usr/local/bin/proxy-init" pid=10902 comm="runc:[2:INIT]" requested_mask="x" denied_mask="x" fsuid=0 ouid=0 target="cri-containerd.apparmor.d"`
[13:33] <kjackal> jdstrand: try this: sudo microk8s.kubectl apply -f  /var/snap/microk8s/current/testcfgmount.yaml
[13:34] <jdstrand> joedborg: is it possible to intercept that 'runAsUser: 2103' bit and remove it/make it '0'?
[13:35] <joedborg> jdstrand: it might be possible, but would probably mean no cross compatibility with running clusters
[13:36] <Chipaca> zyga: I had my hand on "close window" before mvo finished saying "weird users of qemu"
[13:36]  * Chipaca stays well away
[13:37] <joedborg> jdstrand: just FYI, that's user 2103 from within containerd
[13:37] <pedronis> Chipaca: any reason not to change .Full already ? just more spread tests breaking? or something else
[13:37] <joedborg> jdstrand: like with the pivot root stuff
[13:38] <Chipaca> pedronis: no reason
[13:38] <Chipaca> pedronis: oh wait, you mean the implementation?
[13:38] <pedronis> Chipaca: yes
[13:38] <jdstrand> kjackal, joedborg: I need to study the linkerd issue. nnp is, shall we say, problematic atm for all the LSMs (including apparmor)
[13:38] <pedronis> it's used only in errors afaict
[13:39] <Chipaca> pedronis: I think it'll break some things without the patch
[13:39] <Chipaca> let me check though
[13:39] <joedborg> jdstrand: i imagine there's something been done to the docker snap to allow that
[13:40] <pedronis> Chipaca: afai see all usages are in cmd/snap/error.go
[13:40] <pedronis> Chipaca: this is Full, not Clean
[13:40] <Chipaca> pedronis: that's usage of .Full, usage of canon(ical)ize are in snapstate
[13:41] <pedronis> I don't see Full in snapstate
[13:41] <pedronis> (I might have removed it myself at some point, don't know, I don't see it anymore)
[13:41] <Chipaca> pedronis: my question is what happens if you do --channel=//foo//, shut down snapd ,restart with the new one that calls Canonize
[13:42] <pedronis> Chipaca: what it has to do with Full() tough?
[13:42] <pedronis> that's a different issue
[13:42] <Chipaca> ?
[13:42] <pedronis> Chipaca: yes, we want the patch very soon
[13:42] <Chipaca> pedronis: then we're talking cross-porpoises
[13:42] <Chipaca> pedronis: what're you talking about :-)
[13:43] <pedronis> Chipaca: change Channel.Full to be Canonize
[13:43] <pedronis> what code would explode ?
[13:43] <roadmr> 🐬
[13:43] <Chipaca> pedronis: i thought we were talking about making channel.Canonize call Channel.Full
[13:44] <Chipaca> pedronis: you were talking about renaming Channel.Full to be Channel.Canonize?
[13:44] <pedronis> no?
[13:44] <pedronis> no
[13:44] <pedronis> no
[13:44] <pedronis> no
[13:44]  * Chipaca giggles
[13:44] <pedronis> Chipaca: use the code in Canonize as implementation for Full
[13:45] <Chipaca> ahhhhhhh
[13:45] <pedronis> then make channel.Full use Channel.Full
[13:45] <pedronis> still a bit unclear what this would make explode
[13:45] <pedronis> more than the current state of the PR
[13:45] <Chipaca> nothing, probably -- it's more lenient
[13:45] <Chipaca> might break some tests that could be checking the lack of leniency
[13:45] <pedronis> ok
[13:46] <Chipaca> other than that it should be about the same
[13:46] <pedronis> as I said, Channel.Full afaict is only used in cmd/snap/error.go
[13:46] <pedronis> Chipaca: I know we need to fix Clean at some point
[13:46] <pedronis> because in the new world is weird
[13:46] <pedronis> but that came come later
[13:46] <Chipaca> ok
[13:46] <pedronis> when we do the actual default track work
[13:46] <Chipaca> I'll write the code but not push it unless there's another reason to iterate this PR
[13:47] <Chipaca> I'll push it as separate otherwise
[13:47] <pedronis> as you prefer
[13:47] <pedronis> but let's try to use Full in full (as name)
[13:48] <jdstrand> ijohnson: hey did you do anything to docker to avoid denials like this:
[13:48] <jdstrand> [86131.195871] audit: type=1400 audit(1571232667.748:226767): apparmor="DENIED" operation="exec" info="no new privs" error=-1 profile="snap.kubernetes-worker.containerd" name="/usr/local/bin/proxy-init" pid=10902 comm="runc:[2:INIT]" requested_mask="x" denied_mask="x" fsuid=0 ouid=0 target="cri-containerd.apparmor.d"
[13:49] <jdstrand> ijohnson: the theory is it has to do with runAsUser
[13:52] <jdstrand> kjackal, joedborg (cc joeubuntu, amurray): so that denial ^ is going to require not insignificant investigation, possibly from other members of the security team. nnp is quite problematic with LSMs with current kernels
[13:52] <joedborg> jdstrand: nnp?
[13:53] <jdstrand> kjackal, joedborg (cc joeubuntu, amurray): this is unplanned work and beyond the strict mode k8s minimum viable product
[13:53] <jdstrand> joedborg: 'no new privs'
[13:54]  * joedborg reads kernel.org
[13:54] <joedborg> jdstrand: ah okay, cool
[13:54] <kjackal> jdstrand: This denial came up with the DNS addon and had to patch it https://github.com/ubuntu/microk8s/blob/feature/strict-v3/microk8s-resources/actions/coredns.yaml#L105
[13:55] <jdstrand> kjackal (cc joedborg, joeubuntu, amurray): without investigating, my concern is this may require kernel changes for things to run unpatched
[13:55] <kjackal> meaning, it is rather common
[13:55] <jdstrand> kjackal: indeed. this isn't 'just a snapd' thing
[13:57] <jdstrand> kjackal (cc joeubuntu, amurray and joedborg): I suggest trying to work around it for now. if you need me/the security team to investigate it, we likely need to discuss prioritizing/resourcing with Tim and Joe
[13:58] <kjackal> yeap
[13:58] <ijohnson> jdstrand: hmm I don't think I've seen that one before
[13:58] <jdstrand> it's possible kernel changes are not invloved. eg, there are code changes in snap-confine that I did to work around it. something similar might be possible in linkerd or containerd (beyond the oci change, etc)
[13:58] <jdstrand> ijohnson: ack, thanks
[13:59] <jdstrand> but it depends on what the investigation reveals
[13:59] <ijohnson> did y'all find anything more about pivot_root last night? I didn't see anything more on IRC after I left
[13:59] <jdstrand> kjackal: unless you escalate to Tim and joeubuntu, I'm not planning to look into it atm
[14:02] <jdstrand> kjackal: ok, swinging back to the trace denial
[14:02] <jdstrand> kjackal: I'm tinkering with the instance now
[14:02] <kjackal> thanks
[14:03] <mup> PR snapd#7606 closed: tests: run apt update in lxd containers <Created by mvo5> <Closed by mvo5> <https://github.com/snapcore/snapd/pull/7606>
[14:03] <kjackal> I will report back to Tim and we will see what we have to do about it. Thank you jdstrand
[14:14] <zyga> jdstrand: anything I can help with?
[14:14]  * zyga has highlight on snap-confine
[14:17] <jdstrand> zyga: no, snap-confine is fine. I was just talking about some hoops I had to jump through wrt nnp for context on the linkerd denial
[14:17] <zyga> ack
[14:17] <jdstrand> kjackal: ok, I'm done. with this: https://paste.ubuntu.com/p/HFpmhxVph5/ I'm able to run that test command
[14:18] <jdstrand> kjackal: those may not be the rules I use in the PR, but if you want to manually add them for testing, etc, there they are
[14:18] <jdstrand> kjackal: logging out of the instance. I'll ping you with the PR
[14:18] <kjackal> thank you jdstrand
[14:29] <kjackal> jdstrand: I tried to setup a branch on the latest channel for build of the strict microk8s. It seems things are blocked into maual review. Is there a way to automate the pushes?
[14:32] <jdstrand> kjackal: yes. I have to step away but will do that when I get back
[14:35] <kjackal> cool
[14:41] <oSoMoN> jdstrand, could you please vote/comment on https://forum.snapcraft.io/t/auto-connecting-the-personal-files-interface-for-the-chromium-snap-part-ii/13705 ?
[14:41] <oSoMoN> (thanks in advance!)
[15:06]  * zyga goes for a nap
[15:06] <zyga> ttyl
[15:21] <mup> PR snapcraft#2752 opened: errors: migrate handful of errors to SnapcraftException <Created by cjp256> <https://github.com/snapcore/snapcraft/pull/2752>
[15:22] <kjackal_v2> jdstrand: joedborg: the prometheus operator is also failing with the same error:
[15:22] <kjackal_v2> apparmor="DENIED" operation="exec" info="no new privs" error=-1 profile="snap.microk8s.daemon-containerd" name="/bin/operator"
[15:22]  * cachio lunch
[15:23] <joedborg> kjackal_v2: +1
[16:06] <mup> PR snapd#7615 opened: policy: implement CanRemove policy for the snapd type <Created by mvo5> <https://github.com/snapcore/snapd/pull/7615>
[16:57] <zyga> mvo: I'm fixing the bug with snapd removal
[17:08] <Chipaca> ttfn!
[17:20] <ogra> zyga, by makiing it unremovable ? :)
[17:20] <zyga> ogra: not today :)
[17:20] <ogra> hehe
[17:30]  * ijohnson goes to lunch before mborzecki's schedule PR makes my brain hurt more
[17:37] <zyga> ijohnson|lunch: just schedule lunch, it will solve itself
[17:38] <ogra> snap feed --time=
[17:38] <ogra> ??
[17:43]  * zyga needs to finish this tomorrow
[17:43] <zyga> time to rest
[18:05] <mup> PR snapd#7616 opened: interfaces/many: allow systemd-run to mount volume subPaths plus cleanups <Created by jdstrand> <https://github.com/snapcore/snapd/pull/7616>
[18:07] <jdstrand> kjackal: fyi: https://github.com/snapcore/snapd/pull/7616
[18:07] <mup> PR #7616: interfaces/many: allow k8s/systemd-run to mount volume subPaths plus cleanups <Created by jdstrand> <https://github.com/snapcore/snapd/pull/7616>
[18:07] <kjackal> awesome, thank you jdstrand
[18:07] <jdstrand> kjackal: is that instance still up for me to verify ^ for the subPath fix?
[18:08] <kjackal> yes it is up
[18:08] <jdstrand> kjackal: do you mind if I check now real quick?
[18:08] <kjackal> jdstrand: no go ahead
[18:09] <kjackal> jdstrand: any suggestion for this:
[18:09] <kjackal> [ 4041.214192] audit: type=1400 audit(1571247745.450:4392): apparmor="DENIED" operation="open" profile="snap.microk8s.daemon-kubelet" name="/var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/libnvidia-ml.so.390.116" pid=4464 comm="kubelet" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
[18:09] <kjackal> [ 4041.214196] audit: type=1400 audit(1571247745.450:4393): apparmor="DENIED" operation="open" profile="snap.microk8s.daemon-kubelet" name="/var/lib/snapd/hostfs/usr/lib/i386-linux-gnu/libnvidia-ml.so.390.116" pid=4464 comm="kubelet" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
[18:09] <kjackal> [ 4041.361220] audit: type=1400 audit(1571247745.598:4394): apparmor="DENIED" operation="open" profile="snap.microk8s.daemon-containerd" name="/etc/nvidia-container-runtime/config.toml" pid=15115 comm="nvidia-containe" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
[18:09] <kjackal> trying to see if gpu support is broken or not
[18:11] <jdstrand> kjackal: I'm going to defer to zyga for that. it is curious you are seeing this in hostfs. I would expect the libs to be in /var/lib/snapd/lib/gl
[18:11] <jdstrand> kjackal: perhaps you could use a layout for /etc/nvidia-container-runtime and have it look in the right place?
[18:12] <jdstrand> kjackal: but usr/lib/i386-linux-gnu/libnvidia-ml.so.390.116 is not what I expected
[18:12] <jdstrand> kjackal: that said, zyga has looked at gpu support a lot. he may be eod atm
[18:12] <kjackal> ok, I will see what I can do
[18:12] <kjackal> thanks
[18:13] <zyga> jdstrand: there are cases where we take it from hostfs
[18:13] <jdstrand> kjackal: I'll ping you in a minute when I'm done with the test
[18:13] <jdstrand> (subPath)
[18:13] <zyga> kjackal: I'm EOD, please drop me a note with the details
[18:14] <kjackal> cool zyga, let me try some things first
[18:22] <jdstrand> kjackal: ok, this would be the result of when that PR is applied: https://paste.ubuntu.com/p/fFXYP5kNvk/, and with that 'sudo microk8s.kubectl apply -f /var/snap/microk8s/current/testcfgmount.yaml' doesn't have the ptrace trace denial
[18:22] <jdstrand> kjackal: so, cool :)
[18:22] <jdstrand> kjackal: logging out now
[18:23] <kjackal> many thanks jdstrand
[18:23] <jdstrand> kjackal: np. when you see that merged, the next day's core from edge will have it
[18:24] <kjackal> great
[18:24] <jdstrand> kjackal: this should be in 2.43
[18:25] <jdstrand> kjackal: are you using the same snap name for strict mode microk8s? I ask cause I don't see any failed reviews for microk8s
[18:26] <kjackal> let me fire the lp builder
[18:27] <jdstrand> kjackal: I'll look at the snap.yaml in the instance and create a snap decl
[18:28] <kjackal> just queued a build
[18:28] <kjackal> ETA in 13 minutes (estimated)
[18:37] <jdstrand> kjackal: it will fail due to the review-tools needing an update for your use of personal-files. I've made that change but it will need to be manually approved for now
[18:38] <jdstrand> kjackal: but you can ping my to manually approve in the meantime
[18:39] <kjackal> is this a one off approval or do I need to ping you on every new revision I want to push to the channel branch?
[18:39] <kjackal> jdstrand: ^
[18:40] <jdstrand> kjackal: until the review-tools are in prod, every one. after that, it will remember
[18:41] <kjackal> jdstrand: cool, for now I can wait. We may want to push one in a couple of weeks
[18:41] <jdstrand> roadmr: can you pull 20191016-1840UTC? just doc changes and 2 override additions
[18:41] <jdstrand> kjackal: ^ that has the change I mentioned
[18:42] <jdstrand> kjackal: ok, it should all be in place then
[18:42] <jdstrand> roadmr: and hi! :)
[18:42] <kjackal> awesome
[19:05] <roadmr> jdstrand: hey! sure thing
[19:06] <roadmr> jdstrand: when can we chat re: stateful review-tools?
[19:06]  * cachio afk
[19:07] <jdstrand> roadmr: tomorrow?
[19:08] <jdstrand> roadmr: and thanks! :)
[19:08] <roadmr> jdstrand: sure, can I go by your google calendar?
[19:09] <roadmr> jdstrand: looks like there's no such tag in the repo :/
[19:10] <jdstrand> roadmr: yes, please look at the calendar
[19:10]  * jdstrand looks at tag
[19:11] <roadmr> thanks!
[19:12] <jdstrand> roadmr: 20191016-1840UTC ? I see it in https://git.launchpad.net/review-tools?h=master
[19:13] <jdstrand> https://git.launchpad.net/review-tools/tag/?id=20191016-1840UTC
[19:13] <roadmr> jdstrand: ah! it's there now
[19:13] <jdstrand> roadmr: oh hah, I pushed the tag, not the commit :)
[19:13] <roadmr> jdstrand: some refreshing shenanigans, it seems
[19:13] <roadmr> 😆
[19:14] <ijohnson> jdstrand: re #7616 am I correct in thinking that mount rules for `/var/snap/@{SNAP_INSTANCE_NAME}/*/**` would allow a snap revision to mount stuff over another revision?
[19:14] <mup> PR #7616: interfaces/many: allow k8s/systemd-run to mount volume subPaths plus cleanups <Created by jdstrand> <https://github.com/snapcore/snapd/pull/7616>
[19:14] <jdstrand> ijohnson: yep
[19:14] <jdstrand> ijohnson: hence my comment about refresh
[19:14] <ijohnson> is that intentional ?
[19:15] <jdstrand> ijohnson: did you see the commit message? I avoided SNAP_REVISION after all thinking that refresh would be potentially problematic
[19:15] <ijohnson> jdstrand: I did I just don't quite understand the reasoning
[19:16] <ijohnson> if they needs mounts to persist across refreshes then they should definitely use common
[19:16] <ijohnson> my original point was just that maybe someday they don't need to care about mounts persisting across  revisions and instead have incompatible data between revisions that they explicitly don't want to be shared across revisions
[19:17] <ijohnson> if that was the case they could then transition to mounting things on top of $SNAP_DATA, which would be per revision
[19:17] <jdstrand> ijohnson: I suspect that, like lxd, k8s will use the mechanism to not restart itself so pods aren't blown away
[19:17] <ijohnson> yes that is probably true
[19:17] <ijohnson> does lxd have rules to do mounts across revisions in $SNAP_DATA though?
[19:18] <jdstrand> ijohnson: lxd's profile allows transitioning to unconfined so there are no rules
[19:18] <jdstrand> ijohnson: (beyond allowing it to get to that point)
[19:18] <ijohnson> ah right yeah
[19:18] <ijohnson> lxd is special
[19:18] <jdstrand> ijohnson: iirc, this was why common/ was enforced in kubernetes-support
[19:19] <jdstrand> (ie, the refresh point, not lxd :)
[19:19] <jdstrand> it's been a while since I wrote those rules, but iirc I was enforcing best practice
[19:19] <ijohnson> jdstrand: perhaps given this we should just stick with common
[19:20] <jdstrand> ijohnson: ok. easy enough. we can rediscuss if there is a use case for SNAP_DATA
[19:20] <ijohnson> sure sounds good
[19:20] <ijohnson> feel free to force push if you want to remove that most recent commit
[19:39] <jdstrand> ijohnson: I am tempted to do that since I noticed typos in some commit messages ;) however, I did a revert commit so the discussion is captured for posterity
[19:47] <ijohnson> jdstrand: ack
[19:56] <mup> PR snapd#7617 opened: snap-confine.apparmor.in: harden pivot_root until we have full mediation <Created by jdstrand> <https://github.com/snapcore/snapd/pull/7617>
[20:03] <jdstrand> roadmr: fyi, https://dashboard.snapcraft.io/snaps/microk8s/feedback/ has been giving a 504 for... 30 minutes?
[20:03] <jdstrand> roadmr: ish
[20:03] <roadmr> thanks jdstrand, fighting some minor fires store-side
[20:04] <jdstrand> roadmr: ok, just fyi. I'm not blocked
[20:04] <roadmr> right - seems to be widespread, get the same for e.g. core
[20:07] <jdstrand> roadmr: fyi, it is not *all* snaps. eg https://dashboard.snapcraft.io/snaps/telegraf/feedback/ is fine
[20:18] <roadmr> ah, interesting
[20:41] <roadmr> jdstrand: nessita found it's an n+1 queries problem which will hit snaps with many uploads
[20:41] <jdstrand> interesting
[20:42] <jdstrand> roadmr: I did see this with https://dashboard.snapcraft.io/snaps/app-outlet/ (notice no feedback/ in url) and it sometimes displayed
[20:42] <nessita> jdstrand, if you browse by revision, it should work
[20:43] <nessita> jdstrand, like https://dashboard.snapcraft.io/snaps/core/revisions/<revision>/
[20:44] <jdstrand> roadmr, nessita: well, I would need to know the revision. I guess I could snap info it.... also, I don't know if this makes a difference, but as a data point, I added scores of snap decls for snaps for pulseaudio, each with a feedback comment
[20:44] <jdstrand> (yesterday)
[20:45] <jdstrand> continuing that today
[20:47] <jdstrand> nessita: fyi, 504 with https://dashboard.snapcraft.io/snaps/app-outlet/revisions/1/
[20:50] <nessita> jdstrand, odd, it opened quite fast for me. Reloading...
[20:50] <nessita> hum 504 now
[20:50] <nessita> roadmr, maybe we have some sca fe with troubles?
[20:50] <jdstrand> nessita: that one didn't have many revisions iirc
[20:51] <roadmr> nessita: could be, or maybe the app units, one could have landed on an evil host
[20:51] <jdstrand> nessita: I just saw one with 73 revisions that was fine
[20:51] <nessita> jdstrand, yeah, we may have more than one issue. I mean, the linear queries is a problem and I've writen a test for it (that fails right now)
[20:51] <nessita> jdstrand, if you reload a few times https://dashboard.snapcraft.io/snaps/app-outlet/revisions/1/, do you get the right page from time to time?
[20:52] <jdstrand> nessita: I see it now
[20:52] <jdstrand> (30 revisions)
[20:53] <nessita> jdstrand, we may issues with one of the fe units or app units, let us look
[20:54] <roadmr> nessita: I would think app/backend units, the fe is just haproxy, shouldn't have any problems plus hasn't changed in a while
[20:56] <nessita> roadmr, jdstrand moving this to our private channel
[20:56] <roadmr> +1
[20:56] <nessita> roadmr, jdstrand #snastore please
[20:56] <nessita> roadmr, jdstrand #snapstore please
[21:34] <mup> PR snapcraft#2753 opened: cli: use click utilities for registering on push <Created by sergiusens> <https://github.com/snapcore/snapcraft/pull/2753>
[22:00] <mup> PR snapd#7604 closed: many: address issues related to explicit/implicit channels for image building <Created by pedronis> <Merged by pedronis> <https://github.com/snapcore/snapd/pull/7604>


[11:40] <cub> smartboyhw, wasn't it you who posted https://bugs.launchpad.net/ubuntu-manual-tests/+bugs?field.tag=ubuntu-studio here a couple of days ago? I'm not sure on how to go about to test things there. Any hints?
[12:30] <smartboyhw> cub, no not me.
[12:30] <smartboyhw> And it's testcases NOT written.
[12:32] <smartboyhw> cub, of course you can help write these:P
[12:35] <cub> I wouldn't know where to begin so I focus on things I actually know so far. :P
[12:36] <smartboyhw> zequence, how do you think we can write testcases?
[13:34] <smartboyhw> Hey ttoine
[13:35] <ttoine> hello
[13:35] <smartboyhw> May I ask why are the items in the webshop that expensive?:P
[13:35] <ttoine> smartboyhw, ah you had a look
[13:35] <smartboyhw> ttoine, yeah madeinkobaia gave me the lin
[13:35] <ttoine> smartboyhw, it is the cheapest possible
[13:35] <smartboyhw> *link
[13:35] <smartboyhw> ttoine, :O
[13:36] <ttoine> for tshirt, madeinkobaia and zequence asked me to use a quality cotton
[13:36] <ttoine> but for the mug, it is the simplest product (there is only one mug on spreadshirt)
[13:37] <ttoine> and of course, I don"t had any comminsion
[13:37] <ttoine> commission
[13:37] <smartboyhw> ttoine, OK fine.
[13:37] <smartboyhw> When will it be ready for public?
[13:37] <ttoine> I don't know. zequence ordered some stuff to check the quality, I think we are waiting for his feedback
[13:38] <smartboyhw> ttoine, I heard he received his T-shirt already
[13:38] <smartboyhw> And here's madeinkobaia !
[13:38] <madeinkobaia> Yeah !
[13:39] <ttoine> smartboyhw, and what does he think about it ?
[13:39] <smartboyhw> ttoine, I forgotten, check this channel's backlog in irclogs.ubuntu.com plz (it should be yesterday or the day before yesterday)
[13:39] <cub> but the shop is live, right? Because I was about to place an order as well.
[13:40] <smartboyhw> cub, yeah, the shop's live
[13:40] <smartboyhw> So called private-preview:P
[13:40] <cub> sadly it's kind of those prices for quality shirts with print in Europe. At least when I had a look around for other purpose some time ago
[13:41] <smartboyhw> ttoine, question: Are the T-shirts made in China!?
[13:41] <smartboyhw> That should be cheaper:P
[13:41] <cub> ttoine, but how does it work with the site? I suppose they make some money of it, but it says on their homepage that each shop makes money too
[13:42] <ttoine> smartboyhw, I don't know. I think that spreadshirt is a UK company
[13:42] <ttoine> smartboyhw, I don't know how to use the channel backlog. I am not even sure that I have the right
[13:43] <smartboyhw> ttoine, everybody can use it
[13:43] <cub> http://irclogs.ubuntu.com/2013/08/04/%23ubuntustudio-devel.html
[13:43] <cub> it's just a web page
[13:43] <ttoine> cub, this is a soft opening so we can test the merchandise
[13:43] <smartboyhw> Good job cub :)
[13:44] <cub> ttoine, could we easily add other sizes? There *could* be females wanting to buy US shirts. ;)
[13:44] <ttoine> but he doesn't speak about the product...
[13:44] <smartboyhw> cub, +1
[13:45] <cub> oh it was probably not the same date as I pasted a link to, it was just the one I had open
[13:45] <ttoine> cub, you can select the size and color you want. at the moment, we don't have female shirt, but I can create them. first, I would like that madeinkobaia validate that it is possible
[13:45] <cub> No you can only select Medium as the smallest size
[13:46] <ttoine> I didn't see that...
[13:46] <ttoine> maybe it is because the drawings are too big for s
[13:47] <ttoine> or maybe, the size S is not available with the t-shirt used
[13:47] <cub> My thinking was that they for some reason consider Small as not-a-men's-shirt
[13:47] <cub> zequence	I got the Ubuntu Studio t-shirt today, and the mug is probably here already as well	13:50
[13:47] <cub> zequence	I'll take a picture once I get the chance	13:50
[13:47] <cub> zequence	the quality of the T-shirt is good, but I think we should offer a cheaper alternative too
[13:47] <cub> from http://irclogs.ubuntu.com/2013/08/02/%23ubuntustudio-devel.html
[13:49] <ttoine> cub, available size depend on the type of shirt
[13:49] <cub> ok
[13:49] <ttoine> on spreadshirt, there are many brand of basic shirts, from different qualities
[13:50] <smartboyhw> Hmm, we can even find ttoine's address:O
[13:51] <smartboyhw> ttoine, Spreadshirt is actually German
[13:51] <smartboyhw> http://ubuntustudio.spreadshirt.fr/shop/imprint
[13:51] <ttoine> cub, thanks for the link. so the quality is good for the price, i guess
[13:52] <ttoine> smartboyhw, why do you speak about my address ?
[13:52] <cub> I rather pay a bit more for a shirt that survives the first wash than to have a sloppy tent after a couple of weeks
[13:52] <smartboyhw> ttoine, because you should use one that isn't your actual home address (or office address, but not meaning fake)
[13:52] <cub> ttoine, you are listed on the Legal Information page at spreadshirt
[13:53] <ttoine> ah, of course, yes
[13:53] <smartboyhw> This is particularly true for all designs found in the shop, as well as all elements used in designing the shop.
[13:53] <smartboyhw> ....
[13:54] <madeinkobaia> ttoine cub smartboyhw: I ask myself how ubuntu manage to sale their t-shirts around 13€. Someone could contact them and see if there is a possibility to use their sales platform.
[13:54] <smartboyhw> madeinkobaia, that would be ttoine or zequence
[13:54] <smartboyhw> :P
[13:54] <smartboyhw> I don't think we will be allowed to use their platform...
[13:55] <madeinkobaia> smartboyhw: For sure, or I can do it to.
[13:55] <smartboyhw> madeinkobaia, maybe
[13:55] <cub> Ubuntu probably got a good deal due to expected to sell large quantities
[13:55] <smartboyhw> Since Kubuntu has it
[13:55] <smartboyhw> But the Kubuntu items are discontinues
[13:55] <smartboyhw> And only available for sale
[13:55] <cub> If so, I want a http://shop.canonical.com/product_info.php?products_id=1006 with US logo. :P
[13:57] <ttoine> madeinkobaia, I already had a chat about that with them
[13:57] <ttoine> the difference is that they don't sell on shirt per month, as you can guess
[13:57] <ttoine> once you have volume, you can decrease the price by buying stock
[13:57] <ttoine> at the moment, it is done one by one
[13:58] <ttoine> and as smartboyhw it is not allowed to use their platform
[13:58] <madeinkobaia> ttoine: Ok, I understand now
[13:58] <madeinkobaia> ttoine: I didn't knew you already contacted them.
[13:59] <cub> I would rather not buy from the canonical.com either because of the hassle with customs and taxes
[13:59] <ttoine> madeinkobaia, how do you think I have the legal right to create US merchandise ?
[13:59] <ttoine> I have a signed agreement. It tooks monthes to get him...
[14:00] <ttoine> otherwise I wouldn't have spent (and you too, by the way) to create shirts and mugs
[14:01] <madeinkobaia> ttoine: US is don't supposed to be an "official" Ubuntu derivative. Its what I heard, maybe I am wrong in that case.
[14:01] <smartboyhw> madeinkobaia, it is an official Ubuntu derivative
[14:01] <cub> but not covered by the trademark
[14:02] <ttoine> by the way, if there are sales on the canonical shop it means that they are buying stock. We can't do that at the moment
[14:03] <ttoine> madeinkobaia, as we use the word "Ubuntu" it is mandaroty to have an agreement. It is not related to be an official distro. for example, Ubuntu-fr needs the same agreement to make french merchandise
[14:03] <ttoine> cub, Ubuntu Studio is a brand registered by Canonical.
[14:04] <cub> Are you sure? http://www.canonical.com/intellectual-property-policy
[14:04] <cub> Canonical’s Trademarks (registered in word and logo form) include:
[14:04] <cub> UBUNTU	KUBUNTU	EDUBUNTU
[14:04] <cub> XUBUNTU	JUJU	LANDSCAPE
[14:04] <cub> UBUNTU EDGE
[14:04] <ttoine> actually, it is stated that any linux related stuff including the word Ubuntu is owned by  Canonical
[14:04] <ttoine> Our brand is Ubuntu Studio. Ubuntu is registered, they don't need at all to register it
[14:05] <cub> Ubuntu is registered if used with the font and associated logo
[14:05] <smartboyhw> cub, there are Trademarks and Registered trademarks:P
[14:05] <cub> "ubuntu" is a word that existed long before Ubuntu
[14:05] <ttoine> cub, you are speaking about the drawings. I am speaking about the word itself
[14:05] <cub> I speaking about both
[14:06] <ttoine> cub, I think you don't know well trade rules and industrial properties ;-)
[14:06] <madeinkobaia> ttoine : http://fr.wikipedia.org/wiki/Ubuntu#Variantes_et_d.C3.A9riv.C3.A9es (its in french sorry) it is wrote "Les variantes reconnues par Canonical, mais non officielles sont :" in the list there is an error, as I see Ubuntu Studio in it. Its not the first time I read this ambiguous between "Official" and "Recognized".
[14:06] <smartboyhw> cub, but Ubuntu IS a trademark:P
[14:06] <smartboyhw> madeinkobaia, now wait a moment
[14:07] <ttoine> cub,  I will not provide you with all the long emails chat I had with the legal and marketing teams of Canonical
[14:07] <ttoine> but I confirm that we need an agreement.
[14:07] <smartboyhw> madeinkobaia, there isn't "official" derivatives if you call Ubuntu Studio "recognized" derivatives
[14:07] <ttoine> even spreadshirt asked me to provide the agreement
[14:08] <cub> I believe you. I'm not convinced you can trademark an special word.
[14:08] <cub> "Ubuntu is an age-old African term for humaneness"
[14:08] <cub> anyways
[14:08] <ttoine> cub, you can register a word for an activity
[14:09] <madeinkobaia> ttoine : I trust your judgment about that, no worries. I think globally, that there is something not really clear about Ubuntu derivatives, official or not.
[14:09] <ttoine> ubuntu, when used around IT, Linux, PC, server and more around, is a registered trademark, and so, we cannot use it like we want.
[14:09] <ttoine> madeinkobaia, I agree, this is not clear enough
[14:09] <ttoine> cub, for example, ttoine is a registered trademark
[14:12] <smartboyhw> madeinkobaia, normally, official is recognized
[14:12] <smartboyhw> Ofc, some are more equal than others;P
[14:12] <ttoine> cub, an example like yours: Oracle is a place, or someone, to speak about the future. the fact is that when it is related to databases, you cannot use it for free.
[14:13] <cub> yes, when used in those areas. But it's not the word itself they "own".
[14:16] <cub> but as for the shop, will US get anything from the €20 per shirt?
[14:16] <smartboyhw> cub, I don't think so
[14:16] <smartboyhw> We don't even have a bank account lol
[14:18] <cub> As Spreadshirt slogan is "Create a design -> Upload your design -> Make money"
[14:20] <madeinkobaia> cub: I believe that ttoine knows what he done. They will be certainly benefits for Spreadshirt (its normal) but not for us, as there is no profit margin differential.
[14:22] <madeinkobaia> cub: So the price is for the production and the expedition. Now I also think its expensive but I don't know other systems who allow to not command products before sales.
[14:22] <cub> Yeah the Ubuntu Developer Summit is online nowadays so we don't need to sell loads of shirt to send zequence to the next meeting. ;)
[14:23] <cub> I think the price is standard for your own print on a quality shirt. If you buy a rock band shirt it's about the same cost and often they are crap after 2-3 washes.
[14:24] <madeinkobaia> For sure :(
[14:26] <smartboyhw> cub, LOL
[14:36] <ttoine> cub, sorry for the delay, I am at work
[14:37] <ttoine> We don't have any money on merchandising. the licence we have doesn"t allow it
[14:37] <cub> no worries, so am I. :D you read up when you can…or the next day from the logs during coffee breaks
[14:38] <ttoine> actually, we might provide a very poor quality shirt around 5€ I think
[14:38] <ttoine> but the cotton will be very cheap quality
[14:38] <cub> Do they have lots of other merc stuff? Like hoodies and beanie hats?
[14:38] <ttoine> we can do a lot of stuff
[14:39] <ttoine> but only one by one printing at the moment
[14:39] <cub> cool
[14:41] <ttoine> When we will have some turnaround on the shop, I will ask spreadshirt if they can add some drawings to the embroidery base
[14:42] <ttoine> so we can create baseball caps or other embroided stuff
[15:04] <cub> I wonder how many US users there are


[16:18] <Eickmeyer[m]> OvenWerks: Feature Freeze is Thursday. How is studio-controls looking?
[21:26] <OvenWerks> Eickmeyer[m]: not ready.
[21:26]  * OvenWerks is recovering from cracked ribs
[21:26] <Eickmeyer> OMG!
[21:26] <Eickmeyer> Ok, we should probably be thinking preemptively about a FFe then.
[21:27] <Eickmeyer> Either way, ARE YOU OK????
[21:27] <OvenWerks> I am ok, just doped up a bit. Thpught process is odd.
[21:28] <Eickmeyer> Understandable. I'll draft up the FFe since it's clear that we're not going to hit FF for studio-controls.


[20:50] <tsimonq2> Hey there, could someone accept Martin's nomination for Artful and Zesty on bug 1641912?
[22:50] <bdmurray> tsimonq2: Are those tasks being worked on / committed to by someone?
[22:57] <tsimonq2> bdmurray: Yes, me.
[22:58] <tsimonq2> bdmurray: I'll be uploading debdiffs for those releases shortly.
[23:07] <bdmurray> tsimonq2: If you are uploading the debdiffs to the SRU queue then when they are reviewed the SRU team tools add the tasks so approving them now is kind of just busy work
[23:09] <tsimonq2> bdmurray: Ok, fair enough, I was not aware.
[23:10] <bdmurray> tsimonq2: I forget when I modified the tools but I did it because people kept forgetting to add tasks.
[23:14] <tsimonq2> bdmurray: Ah, ok.
[23:14] <tsimonq2> bdmurray: What kind of permissions does someone need to do that? Just Bug Control?
[23:16] <bdmurray> tsimonq2: to nominate for release or accept a nomination?
[23:22] <bdmurray> to accept a nomination you must be able to upload the package e.g. a core-dev
[23:23] <bdmurray> to nominate being a member of bug control is fine
[23:23] <hggdh> bdmurray: wasn'tthe release team also able to accept?
[23:23] <tsimonq2> bdmurray: Ohhh ok so if I was a MOTU and I just wanted to set it on a package in Universe, I could do that.
[23:24] <tsimonq2> bdmurray: Cool. Thanks!
[23:44] <bdmurray> hggdh: something like that yes
[23:44] <bdmurray> hggdh: but that's abnormal so I didn't mention it


[02:08] <LinDol> hi all
[18:05] <solartech> I’m curious, did anyone else experience issues with booting Ubuntu 16.04 right after shutting down recently?  I did not update software myself, but two machines of different types stopped booting for me yesterday with the same OS (Ubuntu GNOME 16.04).
[18:06] <solartech> Booting to a previous kernel gives the same result.  It’s as if GDM is failing to start but the logs don’t appear to be there (dmesg shows nothing)
[18:07] <solartech> Two completely different machines as well (macbook pro retina & desktop pc), no software installed on either one unless an update was installed while I restarted