Re: classic snap fails to find libraries

[Dan Kegel]

I dunno if there's a bug open for it, but I mentioned another
workaround earlier this month:
https://lists.ubuntu.com/archives/snapcraft/2017-January/002307.html

On Mon, Jan 23, 2017 at 7:49 PM, Leo Arias  wrote:
> After reading the other thread about a similar issue, I moved my
> libraries to stage-packages and that worked.
>
> My problem now is that ssh can't call a binary from a snap, it will
> only work using the full path. Let's say I have the hello snap
> installed in 192.168.122.24. Then:
>
> elopio@ubuntu-xenial:~/mosh$ ssh 192.168.122.24 hello
> elopio@192.168.122.24's password:
> bash: hello: command not found
> elopio@ubuntu-xenial:~/mosh$ ssh 192.168.122.24 /snap/bin/hello
> elopio@192.168.122.24's password:
> Hello, world!
>
> I seem to remember that there was a bug open about this, but I can't
> find it. Anyone remembers what's the problem here?
>
> This is not blocking the mosh snap, but in order to make it work one
> would have to call it like this:
>
> mosh 192.168.122.24 --server=/snap/bin/mosh-server
>
> after enabling the alias.
>
> --
> Snapcraft mailing list
> Snapcraft@lists.snapcraft.io
> Modify settings or unsubscribe at: 
> https://lists.ubuntu.com/mailman/listinfo/snapcraft

-- 
Snapcraft mailing list
Snapcraft@lists.snapcraft.io
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/snapcraft

Re: opengl on ubuntu core 16 on artik 10?

[Dan Kegel]

> Did you run the oxide-eglfs-snap example on Pi? If so, do you still need
> other platform to run opengl on ubuntu core?

Thank you for the links!

The Pi is awesome as a starting point for users, but is underpowered
for some of our applications.
It's attractive to have a faster/fatter alternative that can run the
same snaps (ok, the opengl difference would need some finesse, but it
seems doable and writing a demo showing how to do it sounds like a
fun project).

And having a 2GB pi-compatible arm system would reduce latency for
continuous integration try builds...

-- 
Snapcraft mailing list
Snapcraft@lists.snapcraft.io
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/snapcraft

Re: classic mode slow, taking up one full core with apparmor logging

[Dan Kegel]

Just to illustrate, here's the output of top:

PID USER  PR  NIVIRTRESSHR S  %CPU %MEM TIME+
COMMAND
  489 root  20   0   13320   3876   1940 R  99.7  0.4  17:36.31
systemd-journal
 3779 obdank20   0   75428  62776   9652 R  93.4  6.7   0:05.93
cc1plus
 3734 obdank20   0  138540 132004  12216 R  79.7 14.0   0:39.54
cc1plus
 3707 obdank20   0  202312 197908  12216 R  64.3 21.0   1:15.61
cc1plus
 3785 obdank20   0   61032  46176   9716 R  59.3  4.9   0:03.80
cc1plus

I wantsss all the cores for cc1plu, I does, I does.

On Fri, Jan 6, 2017 at 10:10 AM, Dan Kegel <d...@kegel.com> wrote:
> When building a c++ app on a raspberry pi 3 in classic mode,
> I noticed two things that hurt performance substantially.
>
> 1) the obvious: if you crank config.txt's gpu_mem up above the
> default, life is bad :-)  Don't do that on build machines.
>
> 2) the not so obvious: apparmor is keeping systemctl's journal process
> at 100% on one core logging crud like
>
> Jan 06 18:03:37 rbb-ubu1604pi3-1 audit[3249]: AVC apparmor="ALLOWED"
> operation="open"
> profile="snap.classic.classic//null-/usr/bin/systemd-run//null-/usr/sbin/chroot//null-/var/snap/classic/common/classic/bin/dash//null-/var/snap/classic/common/classic/usr/bin/script//null-/var/snap/classic/common/classic/bin/bash//null-/var/snap/classic/common/classic/usr/bin/sudo//null-/var/snap/classic/common/classic/bin/bash//null-/var/snap/classic/common/classic/home/obdank/src/ob-repobot/bau//null-/var/snap/classic/common/classic/home/obdank/src/ob-repobot/yovo/buildshim//null-/var/snap/classic/common/classic/home/obdank/src/ob-repobot/yovo/cmake.d/buildshim-ubu//null-/var/snap/classic/common/classic/usr/bin/dpkg-buildpackage//null-/var/snap/classic/common/classic/home/obdank/src/yovo/debian/rules//null-/var/snap/classic/common/classic/usr/bin/dh//null-/var/snap/classic/common/classic/home/obdank/src/yovo/debian/rules//null-/var/snap/classic/common/classic/usr/bin/dh_auto_build//null-/var/snap/classic/common/classic/usr/bin/make//null-/var/snap/classic/common/classic/usr/bin/m
 
ake//null-/var/snap/classic/common/classic/usr/bin/make//null-/var/snap/classic/common/classic/bin/dash//null-/var/snap/classic/common/classic/usr/bin/g++-5//null-/var/snap/classic/common/classic/usr/lib/gcc/arm-linux-gnueabihf/5/cc1plus"
> name="/var/snap/classic/common/classic/usr/include/c++/5/cstring"
> pid=3249 comm="cc1plus" requested_mask="r" denied_mask="r" fsuid=1000
> ouid=0
> Jan 06 18:03:37 rbb-ubu1604pi3-1 audit[3254]: AVC apparmor="ALLOWED"
> operation="mknod"
> profile="snap.classic.classic//null-/usr/bin/systemd-run//null-/usr/sbin/chroot//null-/var/snap/classic/common/classic/bin/dash//null-/var/snap/classic/common/classic/usr/bin/script//null-/var/snap/classic/common/classic/bin/bash//null-/var/snap/classic/common/classic/usr/bin/sudo//null-/var/snap/classic/common/classic/bin/bash//null-/var/snap/classic/common/classic/home/obdank/src/ob-repobot/bau//null-/var/snap/classic/common/classic/home/obdank/src/ob-repobot/yovo/buildshim//null-/var/snap/classic/common/classic/home/obdank/src/ob-repobot/yovo/cmake.d/buildshim-ubu//null-/var/snap/classic/common/classic/usr/bin/dpkg-buildpackage//null-/var/snap/classic/common/classic/home/obdank/src/yovo/debian/rules//null-/var/snap/classic/common/classic/usr/bin/dh//null-/var/snap/classic/common/classic/home/obdank/src/yovo/debian/rules//null-/var/snap/classic/common/classic/usr/bin/dh_auto_build//null-/var/snap/classic/common/classic/usr/bin/make//null-/var/snap/classic/common/classic/usr/bin/m
 
ake//null-/var/snap/classic/common/classic/usr/bin/make//null-/var/snap/classic/common/classic/bin/dash//null-/var/snap/classic/common/classic/usr/bin/g++-5"
> name="/var/snap/classic/common/classic/tmp/ccpOmyw6.s" pid=3254
> comm="c++" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
>
> Is there an option for reducing apparmor verbosity on ALLOWED operations?
> (speaking strictly as a foreigner in the land of apparmor and snappy)
>
> Thanks!

-- 
Snapcraft mailing list
Snapcraft@lists.snapcraft.io
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/snapcraft

classic mode slow, taking up one full core with apparmor logging

[Dan Kegel]

When building a c++ app on a raspberry pi 3 in classic mode,
I noticed two things that hurt performance substantially.

1) the obvious: if you crank config.txt's gpu_mem up above the
default, life is bad :-)  Don't do that on build machines.

2) the not so obvious: apparmor is keeping systemctl's journal process
at 100% on one core logging crud like

Jan 06 18:03:37 rbb-ubu1604pi3-1 audit[3249]: AVC apparmor="ALLOWED"
operation="open"
profile="snap.classic.classic//null-/usr/bin/systemd-run//null-/usr/sbin/chroot//null-/var/snap/classic/common/classic/bin/dash//null-/var/snap/classic/common/classic/usr/bin/script//null-/var/snap/classic/common/classic/bin/bash//null-/var/snap/classic/common/classic/usr/bin/sudo//null-/var/snap/classic/common/classic/bin/bash//null-/var/snap/classic/common/classic/home/obdank/src/ob-repobot/bau//null-/var/snap/classic/common/classic/home/obdank/src/ob-repobot/yovo/buildshim//null-/var/snap/classic/common/classic/home/obdank/src/ob-repobot/yovo/cmake.d/buildshim-ubu//null-/var/snap/classic/common/classic/usr/bin/dpkg-buildpackage//null-/var/snap/classic/common/classic/home/obdank/src/yovo/debian/rules//null-/var/snap/classic/common/classic/usr/bin/dh//null-/var/snap/classic/common/classic/home/obdank/src/yovo/debian/rules//null-/var/snap/classic/common/classic/usr/bin/dh_auto_build//null-/var/snap/classic/common/classic/usr/bin/make//null-/var/snap/classic/common/classic/usr/bin/mak
 
e//null-/var/snap/classic/common/classic/usr/bin/make//null-/var/snap/classic/common/classic/bin/dash//null-/var/snap/classic/common/classic/usr/bin/g++-5//null-/var/snap/classic/common/classic/usr/lib/gcc/arm-linux-gnueabihf/5/cc1plus"
name="/var/snap/classic/common/classic/usr/include/c++/5/cstring"
pid=3249 comm="cc1plus" requested_mask="r" denied_mask="r" fsuid=1000
ouid=0
Jan 06 18:03:37 rbb-ubu1604pi3-1 audit[3254]: AVC apparmor="ALLOWED"
operation="mknod"
profile="snap.classic.classic//null-/usr/bin/systemd-run//null-/usr/sbin/chroot//null-/var/snap/classic/common/classic/bin/dash//null-/var/snap/classic/common/classic/usr/bin/script//null-/var/snap/classic/common/classic/bin/bash//null-/var/snap/classic/common/classic/usr/bin/sudo//null-/var/snap/classic/common/classic/bin/bash//null-/var/snap/classic/common/classic/home/obdank/src/ob-repobot/bau//null-/var/snap/classic/common/classic/home/obdank/src/ob-repobot/yovo/buildshim//null-/var/snap/classic/common/classic/home/obdank/src/ob-repobot/yovo/cmake.d/buildshim-ubu//null-/var/snap/classic/common/classic/usr/bin/dpkg-buildpackage//null-/var/snap/classic/common/classic/home/obdank/src/yovo/debian/rules//null-/var/snap/classic/common/classic/usr/bin/dh//null-/var/snap/classic/common/classic/home/obdank/src/yovo/debian/rules//null-/var/snap/classic/common/classic/usr/bin/dh_auto_build//null-/var/snap/classic/common/classic/usr/bin/make//null-/var/snap/classic/common/classic/usr/bin/mak
 
e//null-/var/snap/classic/common/classic/usr/bin/make//null-/var/snap/classic/common/classic/bin/dash//null-/var/snap/classic/common/classic/usr/bin/g++-5"
name="/var/snap/classic/common/classic/tmp/ccpOmyw6.s" pid=3254
comm="c++" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000

Is there an option for reducing apparmor verbosity on ALLOWED operations?
(speaking strictly as a foreigner in the land of apparmor and snappy)

Thanks!

-- 
Snapcraft mailing list
Snapcraft@lists.snapcraft.io
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/snapcraft

Re: snapd 2.20 release available in {xenial,yakkety}-updates

[Dan Kegel]

Can you say a few words about classic confinement?  I didn't see doc...

(Like the fact that you're supporting 14.04.  Some large customers
are stuck on that version still, could be handy.)

On Thu, Jan 5, 2017 at 2:13 PM, Michael Vogt  wrote:
> Hi,
>
>
> the new snapd version 2.20 is now available for everyone on Ubuntu
> 16.04 and 16.10 via xenial-updates and yakkety-updates. It contains
> some nice improvements and fixes, see [1] for the details.
>
> The other distros will be updated shortly. The snapd 14.04 version is
> not quite ready yet, we are working on a seccomp filtering bug [2] on
> amd64 and also on a xserver related problem [3]. We hope to resolve
> those soon.
>
> Please let us know if you notice any issue.
>
>
> Happy snapping,
>  Michael (on behalf of the snappy team)
>
>
> [1] https://lists.ubuntu.com/archives/snapcraft/2016-December/002095.html
> [2] https://bugs.launchpad.net/ubuntu/+source/libseccomp/+bug/1653487
> [3] https://bugs.launchpad.net/snappy/+bug/1650389
>
> --
> Snapcraft mailing list
> Snapcraft@lists.snapcraft.io
> Modify settings or unsubscribe at: 
> https://lists.ubuntu.com/mailman/listinfo/snapcraft

-- 
Snapcraft mailing list
Snapcraft@lists.snapcraft.io
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/snapcraft

Re: opengl on ubuntu core 16 on artik 10?

[Dan Kegel]

I crossposted the question to
https://developer.artik.io/forums/t/opengl-on-ubuntu-core-16-on-artik-10/2234
including a link to the userspace driver library that someone mentioned.

-- 
Snapcraft mailing list
Snapcraft@lists.snapcraft.io
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/snapcraft

Re: opengl on ubuntu core 16 on artik 10?

[Dan Kegel]

On Thu, Jan 5, 2017 at 10:50 AM, Zygmunt Krynicki
 wrote:
>> has anyone tried artik 10 with ubuntu core 16,
>> and what's the story with opengl there?
>
> I don't have access to that hardware so I don't know personally. If the
> kernel and userspace contain the relevant code it should be OK in devmode.
> For confinement it is possible that some of those bits will try to access
> something that is not permitted by the base set of rules.
>
> Do you have any test code you can try?

First off, let me say that I'm an opengl novice, I know very little about it.

https://github.com/ubuntu/snappy-playpen/tree/master/hellogl
runs a trivial opengl app, but probably with the default
opengl, which might not be the platform's high-performance opengl.

https://github.com/penk/oxide-eglfs-snap/tree/rpi2 is a real
app that bundles the raspberry pi's high-performance opengl
userspace driver into the snap;
that's the kind of thing I'm looking for.

I would be impressed if someone did a single snap that
did high performance opengl on both Pi 3 and Artik 10.
Seems unlikely.

I have a Pi but not an Artik myself, just looking around at
the other hardware Ubuntu Core supports.

-- 
Snapcraft mailing list
Snapcraft@lists.snapcraft.io
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/snapcraft

snappy core: "reboot scheduled to update the system"

[Dan Kegel]

Just noticed this message
 "reboot scheduled to update the system"
during a long-running build.  Fortunately I was there and could do shutdown -c.
Presumably this is the gadget snap (raspberry pi 3), and a real
appliance would control this so it doesn't happen during
critical operations.
Where can I read more about how to control this?
15 seconds of googling didn't find much, just one irc log
from three weeks ago.

-- 
Snapcraft mailing list
Snapcraft@lists.snapcraft.io
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/snapcraft

snappy swap redux

[Dan Kegel]

Hi all,
the ol' oom killer is getting me down.
What's the kosher way of setting up swap in ubuntu core 16 (on raspberry pi)?
https://lists.ubuntu.com/archives/snappy-devel/2016-March/001632.html
mentions it should be done in a gadget.  Is there a gadget tutorial?
https://lists.snapcraft.io/archives/devices/2016-September/05.html
mentions it a bit but seems stale.

In the meantime, I guess I can just do swapon manually.

-- 
Snapcraft mailing list
Snapcraft@lists.snapcraft.io
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/snapcraft

/snap/bin not on PATH for noninteractive ssh?

[Dan Kegel]

Does /etc/profile.d/apps-bin-path.sh not fire on noninteractive logins?
Evidently not:
$ ssh pi3 'echo $PATH'
/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games

Workaround #1: make it fire, dammit:

--- .bashrc.orig 2017-01-04 19:55:33.105726685 +
+++ .bashrc 2017-01-04 19:54:11.505653043 +
@@ -5,7 +5,9 @@
 # If not running interactively, don't do anything
 case $- in
 *i*) ;;
-  *) return;;
+  *) # Work around rsync snap PATH problem
+ . /etc/profile.d/apps-bin-path.sh
+ return;;
 esac

 # don't put duplicate lines or lines starting with space in the history.

Workaround #2: invoke rsync with --rsync-path.  Ugly.


Long story:

rsync doesn't seem to be provided in ubuntu core 16.  (It's in
classic, of course, but my world wants to be able to rsync
to a host, and I have not yet tried arranging to start a classic
environment automatically on boot and running an sshd.)

Creating a snap for rsync appears to be a piece of cake (yay!):

name: rsync
version: '3.1.1'
summary: fast, versatile, remote (and local) file-copying tool
description: |
 rsync is a fast and versatile file-copying tool which can copy locally
 and to/from a remote host. It offers many options to control its behavior,
 and its remote-update protocol can minimize network traffic to make
 transferring updates between machines fast and efficient.
 .
 It is widely used for backups and mirroring and as an improved copy
 command for everyday use.

grade: stable
confinement: devmode
parts:
  rsync-deb:
plugin: nil
stage-packages:
- rsync
apps:
  rsync:
command: rsync

Built and installed fine with

sudo classic
 sudo apt install snapcraft
 snapcraft
exit
sudo snap install --dangerous --devmode rsync_3.1.1_armhf.snap

But rsync to the machine still doesn't work,
since it expects rsync to be on PATH on the remote machine,
so you need one of the workarounds mentioned above.

End of story :-)

-- 
Snapcraft mailing list
Snapcraft@lists.snapcraft.io
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/snapcraft

Re: Thinking of installing snap on Debian due to scarcity of snap packages for armhf

[Dan Kegel]

On Tue, Jan 3, 2017 at 9:49 AM, Leo Arias  wrote:
>> - Debian + snaps via snap
>
> This will give you a complete traditional system. Everything you
> learned in debian and ubuntu before will just work. So it could be a
> softer transition while you learn about snaps and your dependencies
> are shipped as snaps. You will not get all the benefits of a full
> snappy system, but you will get some by installing the snaps that are
> ready.

This seems like a really good tradeoff for the moment.  Even if
all our snaps are in devmode initially, it provides a nice way to
package up apps in a way that is more atomic than a pile of debs.

(Now, don't get me wrong, I love .debs.  But atomic update of a whole stack
solves a lot of problems.  We've got the disk and bandwidth, may
as well use it...)

-- 
Snapcraft mailing list
Snapcraft@lists.snapcraft.io
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/snapcraft

lxc not working in classic on pi?

[Dan Kegel]

I have a script from a classic ubuntu environment
that wants to be able to create lxc containers
on the fly.  I tried running it on ubuntu core on the pi3,
in the classic environment, but it failed:

(classic)user@localhost:~$ sudo apt install lxc
...
(classic)user@localhost:~$ sudo lxc-create -n foo -t download
lxc-create: utils.c: get_template_path: 1394 No such file or directory
- bad template: download
(classic)user@localhost:~$ sudo apt install lxc-templates
(classic)user@localhost:~$ sudo lxc-create -n foo -t download
lxc-create: lxccontainer.c: create_run_template: 1290 container
creation template for foo failed

I guess I can live without isolating my jobs in lxc
when running on pi for now, but this seems like a fidelity problem in
the classic environment.

-- 
Snapcraft mailing list
Snapcraft@lists.snapcraft.io
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/snapcraft

Ubuntu core update corresponding to Zesty?

[Dan Kegel]

I need a newer gstreamer than is shipped in Ubuntu Core 16
(gst-omx doesn't build against 1.8, but does against 1.10).
I can build the whole gstreamer stack from source, but going forward
would like to avoid that.

Is there a Ubuntu Core daily somewhere corresponding to Zesty?
Or when Zesty's alpha 1 comes out, will there a corresponding Ubuntu
Core alpha build?

(And come to think of it, I don't see gst-omx for rpi in Zesty, that'd
be nice to have...)

-- 
Snapcraft mailing list
Snapcraft@lists.snapcraft.io
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/snapcraft

Re: opengl on ubuntu core on pi3?

[Dan Kegel]

On Thu, Dec 15, 2016 at 9:44 AM, Dan Kegel <d...@kegel.com> wrote:
> GLES is what I'm after.
>
>> but there are still
>> some kernel issues to be solved to make the driver work properly.
>>
>> probably paolo pisati, kevin gunn or thomas voss can chime in here,
>> these three are currently actively working on it.

I see https://developer.ubuntu.com/en/snappy/guides/mir-snaps/
says "armhf/RPi3 coming soon".   please, please :-)
- Dan

-- 
Snapcraft mailing list
Snapcraft@lists.snapcraft.io
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/snapcraft

Re: opengl on ubuntu core on pi3?

[Dan Kegel]

On Thu, Dec 15, 2016 at 9:49 AM, Oliver Grawert  wrote:
>> way to test what they've got (what's the snap equivalent of a ppa?).
>
> a snap ;)

Or, I suppose, a snap store...

-- 
Snapcraft mailing list
Snapcraft@lists.snapcraft.io
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/snapcraft

opengl on ubuntu core on pi3?

[Dan Kegel]

So, I installed ubuntu core 16 on my pi and verified that with
classic I was able to build my little world.
Next step: run an opengl program.  So I created a local
password, logged into the console, and ... what?
startx isn't there, and even in classic, there's nothing
in apt that looks especially like a rasperry pi x server.

Uh, can I buy a clue?

-- 
Snapcraft mailing list
Snapcraft@lists.snapcraft.io
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/snapcraft

Re: Development environment for debs and snaps for raspberry pi 3?

[Dan Kegel]

On Thu, Dec 15, 2016 at 2:47 AM, Oliver Grawert  wrote:
> http://pad.lv/1650207

Thanks.  I added a comment there asking for /etc/issue to be classic-ized, too.

-- 
Snapcraft mailing list
Snapcraft@lists.snapcraft.io
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/snapcraft

Re: Development environment for debs and snaps for raspberry pi 3?

[Dan Kegel]

Trying the classic snap now.
First hitch: /etc/lsb-release is not very classic, my scripts choke
because it doesn't match normal ubuntu.
I guess I can try special-casing them to pretend they see xenial there.

-- 
Snapcraft mailing list
Snapcraft@lists.snapcraft.io
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/snapcraft

Re: can't log in on ubuntu core console via sso...

[Dan Kegel]

So... the instructions saying to create an account on launchpad etc.
don't get you a console login, by design?  That's highly confusing,
and could stand clarifying.

On Tue, Dec 13, 2016 at 1:00 PM, Gregory Lutostanski
<gregory.lutostan...@canonical.com> wrote:
> https://developer.ubuntu.com/en/snappy/start/raspberry-pi-2/ (at the bottom
> of the page under First login tips) suggests:
> "There is no default ubuntu user on these images, but you can run sudo
> passwd  to set a password in case you need a local console
> login."
>
> A bit hard to find unless you're looking for it I agree. Hit it myself.
>
> --Greg
>
> On Tue, Dec 13, 2016 at 2:46 PM, Dan Kegel <d...@kegel.com> wrote:
>>
>> Trying ubuntu core on the pi3 for the first time.  Install went fine,
>> and I can ssh to the box just fine,
>> and I can do 'sudo snap login myemail' ok,
>> but I can't log in on the console.  It doesn't seem to accept my
>> launchpad userid and password :-(
>>
>> Is that related to
>>
>> http://askubuntu.com/questions/834331/16-04-ubuntu-single-sign-on-wrong-e-mail-or-password
>> /
>>  https://bugs.launchpad.net/ubuntu/+source/gnome-software/+bug/1616943 ?
>>
>> --
>> Snapcraft mailing list
>> Snapcraft@lists.snapcraft.io
>> Modify settings or unsubscribe at:
>> https://lists.ubuntu.com/mailman/listinfo/snapcraft
>
>
>
> --
> Snapcraft mailing list
> Snapcraft@lists.snapcraft.io
> Modify settings or unsubscribe at:
> https://lists.ubuntu.com/mailman/listinfo/snapcraft
>

-- 
Snapcraft mailing list
Snapcraft@lists.snapcraft.io
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/snapcraft

Re: Development environment for debs and snaps for raspberry pi 3?

[Dan Kegel]

On Tue, Dec 13, 2016 at 11:52 AM, David Callé  wrote:
> An easy way to achieve this is to install the "classic" snap

Ah, yeah, I'd forgotten about that, thanks.
- Dan

-- 
Snapcraft mailing list
Snapcraft@lists.snapcraft.io
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/snapcraft

Development environment for debs and snaps for raspberry pi 3?

[Dan Kegel]

Hi,
I'm building debs and snaps for a raspberry pi 3.
Questions:
1) when last I did this, https://ubuntu-pi-flavour-maker.org/ was the
best place to get real ubuntu for the pi 3 (the one listed on the
ubuntu wiki didn't boot reliably).  Is that still true?  What do other
folks use?
2) if one were to want to use the official snappy core ubuntu 16.04
for raspberry pi 3 as a development host, is there a reasonable way to
do that?  e.g. installing lxd on it and running an ubuntu desktop
environment inside lxd?
3) more simply, is there a snap for snapcraft yet (aside from whether
that's useful)?

Thanks,
Dan

-- 
Snapcraft mailing list
Snapcraft@lists.snapcraft.io
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/snapcraft

Re: [NEWS] Ubuntu built with Qt

[Dan Kegel]

Hrmf.  Seems like Qt and snappy should be listed in
http://dfkoz.com/iot-landscape/

I say this because the people at my company looking for IoT frameworks
are looking at that page.

On Thu, Nov 3, 2016 at 9:45 PM, Zoltán Balogh
 wrote:
> Hi,
>
> nice news about the synergy between Qt and Ubuntu:
> https://www.qt.io/case-built-with-qt-ubuntu-open-source-software-platform/
>
> Many considers Qt only as the UI development framework but in fact Qt's IoT
> offering is very strong. Since the 5.7 version their main focus is to offer
> toolkit and adaptation layer for IoT devices
>
> Some reading on the topic:
>
> https://blog.qt.io/blog/2016/09/15/internet-of-things-why-tools-matter/
> https://blog.qt.io/blog/2016/08/29/embedded-systems-are-the-backbone-of-iot-but-its-software-that-brings-it-all-together/
> http://www.ics.com/blog/qt-and-internet-things-part-1
>
> cheers,
>
> bzoltan
>
>
> --
> Snapcraft mailing list
> Snapcraft@lists.snapcraft.io
> Modify settings or unsubscribe at:
> https://lists.ubuntu.com/mailman/listinfo/snapcraft

-- 
Snapcraft mailing list
Snapcraft@lists.snapcraft.io
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/snapcraft

Re: Client authentication for private snap stores?

[Dan Kegel]

I have no problem with the server side; I'm sure I can add client cert
support to the
https://github.com/noise/snapstore demo.

The question is the 'snap install' command.
How do you install a client certificate for it to
use while contacting an app store that uses https client certificate
authentication?
- Dan

On Tue, Nov 1, 2016 at 12:59 PM, Marcos Alano <marcoshal...@gmail.com> wrote:
> A private app store supports authentication?
>
> On 01/11/2016 17:56, Mark Shuttleworth wrote:
>> If you are using snaps as a format, you can build your own app store
>> easily enough.
>>
>> In the Ubuntu store, IIRC we support several approaches you can take
>> advantage of:
>>
>>  - snaps scoped to a specific device
>>  - snaps priced for purchase (like a phone app store)
>>
>> ... and combinations of those, where prices can be set for specific
>> devices by the brand.
>>
>> Mark
>>
>>
>> On 01/11/16 21:29, Dan Kegel wrote:
>>> We might like to have snap stores which require a client to have a
>>> certain certificate to be able to connect and download packages, just
>>> as one can do with apt.
>>>
>>> I think the way go works, the word 'Certificates' would be in the
>>> source tree for snapd if this were already supported but I don't
>>> see i there, which makes me think nobody's gotten around to supporting
>>> the
>>> idea of access-controlled snap stores.
>>>
>>> Or did I miss something?
>>>
>>
>>
>
>
> --
> Snapcraft mailing list
> Snapcraft@lists.snapcraft.io
> Modify settings or unsubscribe at: 
> https://lists.ubuntu.com/mailman/listinfo/snapcraft

-- 
Snapcraft mailing list
Snapcraft@lists.snapcraft.io
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/snapcraft

Client authentication for private snap stores?

[Dan Kegel]

We might like to have snap stores which require a client to have a
certain certificate to be able to connect and download packages, just
as one can do with apt.

I think the way go works, the word 'Certificates' would be in the
source tree for snapd if this were already supported but I don't
see i there, which makes me think nobody's gotten around to supporting
the
idea of access-controlled snap stores.

Or did I miss something?

-- 
Snapcraft mailing list
Snapcraft@lists.snapcraft.io
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/snapcraft

Configuring apparmor / seccomp for a snap to allow sendmsg and mkfifo?

[Dan Kegel]

I'm trying to snap a largish package; works fine in devmode,
but as the app likes to use unix sockets and fifos, it fails in
confined mode with

$ sudo /snap/bin/snappy-debug.security scanlog
= AppArmor =
Time: Oct 24 11:41:09
Log: apparmor="DENIED" operation="sendmsg" profile="snap.foo" pid=8536
comm="foo" family="unix" sock_type="dgram" protocol=0
requested_mask="send" denied_mask="send" addr=none
peer_addr="@6E7669646961356165373434376600"
peer="unconfined"

= Seccomp =
Time: Oct 24 11:41:09
Log: auid=4294967295 uid=1001 gid=1001 ses=4294967295 pid=8536
comm="foo" exe="/snap/foo/x7/bin/foo" sig=31 arch=c03e 133(mknod)
compat=0 ip=0x7f17f6fb542d code=0x0
Syscall: mknod

Any suggestions (other than 'don't do that')?
I imagine there's a way to configure both apparmor and seccomp for
snaps, but haven't found it yet.
https://wiki.ubuntu.com/SecurityTeam/Specifications/SnappyConfinement
has some clues
http://askubuntu.com/questions/796809/add-custom-apparmor-rules-to-snap
seems on topic
Should I be looking at the snapd source?  (I see there's an apparmor
interface, but maybe that's internal only...)

-- 
Snapcraft mailing list
Snapcraft@lists.snapcraft.io
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/snapcraft

Re: Variables in snapcraft.yaml?

[Dan Kegel]

I should think a simple general variable expansion in all string
values would suffice for my use case.

More complex use cases would be better served by generating the .yaml
file as I do now.

So, yes, ${release-version}, but set it via  --variable
release-version=foo rather than --release-version=foo,
and support ${joe-bob} and ${billyjoe}, or whatever variables the
author cares to define.

On Sat, Oct 15, 2016 at 3:29 PM, Leo Arias <leo.ar...@canonical.com> wrote:
> On Sat, Oct 15, 2016 at 12:49 PM, Dan Kegel <d...@kegel.com> wrote:
>>
>> Thoughts?
>
>
> I would like to hear yours instead :)
>
> Take a look at [1] where we started the discussion about setting the version
> in the yaml file. It seems that we should provide at least a way to
> overwrite the version; but should we provide ways to overwrite and inject
> values to all the fields? Maybe, I'm not sure. I think we should avoid to
> make snapcraft a full templating engine. And for what I've seen, the
> projects that need to change more than the version, or some more complex
> replacing, they are already preprocessing some files before the build. In
> that case, it could be reasonable to have a snapcraft.yaml.template in the
> repository, and use sed, or the go text/template, or something like that to
> generate the yaml before calling snapcraft.
>
> We will have a session to design a solution for this during the sprint next
> week. So please let us know your preference to take it into account.
>
> pura vida.
>
> [1] https://lists.ubuntu.com/archives/snapcraft/2016-September/000907.html
>
> --
> ¡paz y baile!
> http://www.ubuntu.com

-- 
Snapcraft mailing list
Snapcraft@lists.snapcraft.io
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/snapcraft

Variables in snapcraft.yaml?

[Dan Kegel]

I'm snapping an app that uses a library.  The library has its
major number in its package name and directories, as is customary.
I'd like to use the same snapcraft.yaml even when the major
number of the library changes (we build several versions all
the time), except perhaps for changing a variable.

Right now, snapcraft doesn't support that, so I have to generate
the snapcraft.yaml file, which is kinda ugly.

Thoughts?

-- 
Snapcraft mailing list
Snapcraft@lists.snapcraft.io
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/snapcraft

add-apt-repository and snapcraft cleanbuild?

[Dan Kegel]

Hey all,
Day 3 of using snapcraft, and I've managed to get
both piglit and a proprietary app snapped and running.
Snapcraft's learning curve is not too steep, kudos.

Problem: I can't do 'snapcraft cleanbuild' on my proprietary
apps because they depend on packages in a ppa and/or a
private apt repo.
Is there a way to specify add-apt-repository foo
to be used during snapcraft cleanbuild?

-- 
Snapcraft mailing list
Snapcraft@lists.snapcraft.io
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/snapcraft