[Bug 1385410] Re: hook into system-image updates to precompile policy prior to reboot
** No longer affects: ubuntu-ux -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1385410 Title: hook into system-image updates to precompile policy prior to reboot To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/click-apparmor/+bug/1385410/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1385410] Re: hook into system-image updates to precompile policy prior to reboot
It’s good to have a more precise estimate of (i) recompilation time. If/when we also get measurements for (ii) how long a restart usually takes, and (iii) how long flashing usually takes, I’ll update the specified progress bar allocation. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1385410 Title: hook into system-image updates to precompile policy prior to reboot To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-ux/+bug/1385410/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1385410] Re: hook into system-image updates to precompile policy prior to reboot
FYI, more discussion of this topic is in https://bugs.launchpad.net/ubuntu/+source/click-apparmor/+bug/1350598. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1385410 Title: hook into system-image updates to precompile policy prior to reboot To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-ux/+bug/1385410/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1385410] Re: hook into system-image updates to precompile policy prior to reboot
Note that the "15 minutes or more" is no longer the case and has not been for a long time. AppArmor policy compilation for 150 profiles or so should be in the 2-3 minute range (obviously, we still need feedback for the user). -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1385410 Title: hook into system-image updates to precompile policy prior to reboot To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-ux/+bug/1385410/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1385410] Re: hook into system-image updates to precompile policy prior to reboot
Specification updated. https://wiki.ubuntu.com/SoftwareUpdates?action=diffrev2=202rev1=200 ** Changed in: ubuntu-ux Status: In Progress = Fix Committed ** Description changed: Occasionally users will receive and OTA update that requires apparmor policy to be recompiled. Recompiling apparmor policy can take quite a bit of time (minutes) depending on how many applications the user has installed. While this is only expected to happen on major OTA OS upgrades (eg, 14.10 to 15.04), it is possible it could happen at other times. This would improve the user experience for developers considerably since policy recompiles can be relatively frequent when running the development release. https://lists.launchpad.net/ubuntu-phone/msg13291.html: On start apparmor profiles need to be regenerated which means the first boot after the upgrade might take long depending on the number of installed applications (even up to 30 minutes). Currently there will be no visual indication of the profile regeneration, so please be patient and wait until you see the UI appearing. To improve the user experience, we should detect and recompile apparmor profiles prior to reboot but after system-image updates has downloaded the new update. This always for the possibility of using a progress - meter when compiling policy (which we currently cannot). Needs design - input for when to do it and how the progress meter should look. + meter when compiling policy (which we currently cannot). + + https://wiki.ubuntu.com/SoftwareUpdates#restart-and-install: + Therefore, every step of the system update should show a progress bar, + that fills once across all the steps ... Subtask Recompiling apparmor + profiles; Allocation 45%; Resulting range 0~45% See also bug 1350598, about caching compiled policies more often. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1385410 Title: hook into system-image updates to precompile policy prior to reboot To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-ux/+bug/1385410/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1385410] Re: hook into system-image updates to precompile policy prior to reboot
In the absence of any data, other than the fifteen minutes or more and even up to 30 minutes statements, I've specified that recompiling AppArmor profiles should take up the first 45% of the progress bar. If we can be smarter about that, then great: - An improvement would be to match the average time taken up by profile recompilation in real-world measurements. - Even better would be to vary the proportion based on whether the new image is based on a different Ubuntu release (more allocation) or not (less allocation). - Even better still would be to vary the proportion based on the precise number of profiles that need upgrading. All of that, though, is dependent on engineers/QA doing the timing to measure those proportions. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1385410 Title: hook into system-image updates to precompile policy prior to reboot To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-ux/+bug/1385410/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1385410] Re: hook into system-image updates to precompile policy prior to reboot
** Changed in: ubuntu-ux Status: Triaged = In Progress -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1385410 Title: hook into system-image updates to precompile policy prior to reboot To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-ux/+bug/1385410/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1385410] Re: hook into system-image updates to precompile policy prior to reboot
** Description changed: Occasionally users will receive and OTA update that requires apparmor policy to be recompiled. Recompiling apparmor policy can take quite a bit of time (minutes) depending on how many applications the user has installed. While this is only expected to happen on major OTA OS upgrades (eg, 14.10 to 15.04), it is possible it could happen at other times. This would improve the user experience for developers considerably since policy recompiles can be relatively frequent when running the development release. + https://lists.launchpad.net/ubuntu-phone/msg13291.html: On start + apparmor profiles need to be regenerated which means the first boot + after the upgrade might take long depending on the number of installed + applications (even up to 30 minutes). Currently there will be no visual + indication of the profile regeneration, so please be patient and wait + until you see the UI appearing. + To improve the user experience, we should detect and recompile apparmor profiles prior to reboot but after system-image updates has downloaded the new update. This always for the possibility of using a progress meter when compiling policy (which we currently cannot). Needs design input for when to do it and how the progress meter should look. + + See also bug 1350598, about caching compiled policies more often. ** Changed in: ubuntu-ux Importance: Medium = High -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1385410 Title: hook into system-image updates to precompile policy prior to reboot To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-ux/+bug/1385410/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1385410] Re: hook into system-image updates to precompile policy prior to reboot
** Changed in: ubuntu-ux Status: Incomplete = Triaged -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1385410 Title: hook into system-image updates to precompile policy prior to reboot To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-ux/+bug/1385410/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1385410] Re: hook into system-image updates to precompile policy prior to reboot
I'm sorry this was overlooked for so long. A. Is it practical to use the device while precompilation is happening in the background? It Depends. We have some options in how aggressively we use system resources, but probably even compiling one-at-a-time with a nice value will definitely feel like the system is being used. Probably using PIM functions will be fine, office productivity might show some lags, games are probably not going to work. B. What drawbacks, if any, are there from using the device after precompilation finishes, but before the device restarts? I believe no drawbacks at all. C. When recompilation is required, what proportion of overall update installation time, on average, is taken up by (i) the precompilation (ii) the restart (iii) the flashing (iv) anything else? (Bonus points if you manage to relate (i) to the number or size of the policies.) I'm sorry to not have numbers to give you, but my recollection of anecdotal evidence suggests it can be fifteen minutes or more. My recollection of reboot times is roughly one minute, and no idea about flashing. On my core i7 laptop, apparmor_parser takes 2.2 seconds and 20 megabytes of memory to compile the evince profile, typically one of the more expensive desktop and server profiles. I believe it is a fair approximation of a touch/snappy profile. I hope this helps. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1385410 Title: hook into system-image updates to precompile policy prior to reboot To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-ux/+bug/1385410/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1385410] Re: hook into system-image updates to precompile policy prior to reboot
** Changed in: ubuntu-ux Assignee: (unassigned) = Matthew Paul Thomas (mpt) ** Changed in: ubuntu-ux Status: New = Triaged ** Summary changed: - hook into system-image updates to precompile policy prior to reboot + [system updates] hook into system-image updates to precompile policy prior to reboot ** Changed in: ubuntu-ux Importance: Undecided = Medium -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1385410 Title: [system updates] hook into system-image updates to precompile policy prior to reboot To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-ux/+bug/1385410/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1385410] Re: hook into system-image updates to precompile policy prior to reboot
We figured out a way to be able to do it before reboot, and this is something that is needed for systemd and helps usability of traditional apt systems in addition to system-image systems. The idea is there are no extra steps for the user to go through, but yes the idea is there would be a progress meter after the user presses 'Install and reboot' (though even that isn't strictly required but since it could take awhile, it seems to make sense). -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1385410 Title: hook into system-image updates to precompile policy prior to reboot To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-ux/+bug/1385410/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1385410] Re: hook into system-image updates to precompile policy prior to reboot
I'm feeling the best we could do is actually doing it on first boot after OTA, but make sure that we show a different splash screen while this is happening. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1385410 Title: hook into system-image updates to precompile policy prior to reboot To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-ux/+bug/1385410/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1385410] Re: hook into system-image updates to precompile policy prior to reboot
This happens during the 'Google' logo on boot after flash and I'm told there is no way to provide progress during this point. For traditional apt based systems we will be employing a similar technique as outlined in this bug-- during postinst we compile policy as needed so the user is free to use the system while this is happening. For system-image based systems, why is it not acceptable to compile the policy prior to reboot? It provides a lot of flexibility (we can choose to do this in the background if the image is already downloaded), it can provide progress feedback easily and it allow the user to use another app while the compile is happening. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1385410 Title: hook into system-image updates to precompile policy prior to reboot To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-ux/+bug/1385410/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1385410] Re: hook into system-image updates to precompile policy prior to reboot
I'm not actually sure how you can compile them before reboot (so before the update was applied), but if you say that's possible, I'm sure we can think of something. We should probably stop the session straight away and display a progress spinner akin to the one in recovery. I just want to try and limit the number of user-visible steps an update is taking, is all. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1385410 Title: hook into system-image updates to precompile policy prior to reboot To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-ux/+bug/1385410/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1385410] Re: hook into system-image updates to precompile policy prior to reboot
Not really-- it was determined at the sprint that the recovery doesn't have enough available to do this properly. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1385410 Title: hook into system-image updates to precompile policy prior to reboot To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-ux/+bug/1385410/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1385410] Re: hook into system-image updates to precompile policy prior to reboot
Would it be at all possible to do this in recovery? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1385410 Title: hook into system-image updates to precompile policy prior to reboot To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu-ux/+bug/1385410/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs