Re: RFC: baseline requirements for Ubuntu rootfs: xattrs and fscaps

2018-08-15 Thread John Lenton
On Mon, 6 Aug 2018 at 21:16, Steve Langasek  wrote:
>
> I think it's exceedingly unlikely that anyone is going to unpack, and
> subsequently boot, an Ubuntu root tarball on a filesystem that doesn't
> support xattrs.  All the filesystems that Ubuntu supports out of the box as
> rootfs (in terms of installers, and filesystem tools preinstalled) support
> xattrs.

while this is strictly true, 'snap pack' and 'snapcraft pack'
currently disable xattrs, and the store will not approve snaps that
are built with xattrs.

-- 
ubuntu-devel mailing list
ubuntu-devel@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel


Re: RFC: baseline requirements for Ubuntu rootfs: xattrs and fscaps

2018-08-15 Thread Tom H
On Thu, Aug 2, 2018 at 4:10 PM Steve Langasek  wrote:
>
> # tar -c --xattrs /usr/bin/mtr-packet | tar -x --xattrs-include=*

FYI, the Gentoo handbook recommends '--xattrs-include="*.*"' for
unpacking its tarball.

-- 
ubuntu-devel mailing list
ubuntu-devel@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel


Re: Reliability test for hard drives and SSD

2018-08-15 Thread Andrey Ponomarenko
03.03.2018, 10:14, "Andrey Ponomarenko":
> Hi there!
>
> Good news for all interested in hardware compatibility and reliability.
>
> I've started a new project to estimate reliability of hard drives and SSD in 
> real-life conditions based on the SMART data reports collected by Linux users 
> in the Linux-Hardware.org database since 2014. The initial data (SMART 
> reports), analysis methods and results are publicly shared in a new github 
> repository: https://github.com/linuxhw/SMART. Everyone can contribute to the 
> report by uploading probes of their computers by the hw-probe tool!
>
> The primary aim of the project is to find drives with longest "power on 
> hours" and minimal number of errors. The following formula is used to measure 
> reliability: Power_On_Hours / (1 + Number_Of_Errors), i.e. time to the first 
> error/between errors.
>
> Please be careful when reading the results table. Pay attention not only to 
> the rating, but also to the number of checked model samples. If rating is 
> low, then look at the number of power-on days and number of errors occurred. 
> New drive models will appear at the end of the rating table and will move to 
> the top in the case of long error-free operation.

Hi,

I've just created a Deb package for hw-probe. See 
https://github.com/linuxhw/hw-probe/blob/master/INSTALL.md#install-on-debian.

The command to replenish the database:

sudo hw-probe -all -upload

One can also use a lightweight all-in-one AppImage (Debian 8 and later, Ubuntu 
12.04 and later) or Snap package (Debian 9 and later, Ubuntu 14.04 and later) 
to make a probe of the computer w/o the need to install any Deb packages to the 
system:

https://github.com/linuxhw/hw-probe#appimage
https://github.com/linuxhw/hw-probe#snap

Deb package sources are available in the OBS project: 
https://build.opensuse.org/package/show/home:linuxbuild/hw-probe

Thank you.

-- 
ubuntu-devel mailing list
ubuntu-devel@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel


Re: New Ubuntu Core Developer - Simon Quigley

2018-08-15 Thread Valorie Zimmerman
Congratulations!

On Mon, Aug 13, 2018 at 1:26 PM, Simon Quigley  wrote:
> Today, I was voted to be an Ubuntu Core Developer by the Ubuntu
> Developer Membership Board (a board which I already sit on, so I'm
> taking care of myself here). I now have upload rights to the entire
> Ubuntu archive.
>
> Thanks everyone!
>
> --
> Simon Quigley
> tsimo...@ubuntu.com
> tsimonq2 on freenode and OFTC
> 5C7A BEA2 0F86 3045 9CC8
> C8B5 E27F 2CF8 458C 2FA4
>
>
> --
> ubuntu-devel mailing list
> ubuntu-devel@lists.ubuntu.com
> Modify settings or unsubscribe at: 
> https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel
>



-- 
http://about.me/valoriez

-- 
ubuntu-devel mailing list
ubuntu-devel@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel


Re: RFC: baseline requirements for Ubuntu rootfs: xattrs and fscaps

2018-08-15 Thread John Lenton
On Mon, 6 Aug 2018 at 22:53, Steve Langasek  wrote:
>
> Thanks, that's a useful data point.  Do you think it is a practical concern
> for snaps if an Ubuntu rootfs uses fscaps?  Is this an argument against
> allowing fscaps in Ubuntu, or should it just be a matter for snapcraft to
> warn/error about on creation, guiding users to using setuid instead?
>
> As a worked example: the core snap does ship /bin/ping, which is currently
> setuid-root in Ubuntu but would move to fscaps in this proposal.  (The core
> snap does not include mtr-tiny.)  What do you believe is the correct outcome
> here for /bin/ping in a future ubuntu core 20 snap?

Given that fine-grained fscaps are better than blanket setuids, I
expect core 20 to embrace them wholeheartedly.
However, getting there will involve the whole
snapcraft/snapd/review-tools/snapstore stacks for at least a little
bit of work.

We need to sit down and decide what shape that support is going to
take (basically: can everybody have xattrs & fscaps, or is it just
base snaps? any base snap, or only core? policy decisions, involving
security). I don't expect it to be controversial, unless we want to
enable a snapped application to use fscaps.

We need to do a bit of research _today_, because already 16.04 has
tools that rely on fscaps: this conversation has had me notice that
systemd-detect-virt, that we ship in core and use from snapd in a
couple of places (and in particular to check whether we need to use
squashfuse) is using caps instead of setuid, meaning that in core for
a regular user it probably won't work properly. So we'll need to look
into exactly how it's being used; I _think_ we're testing them as
root, and only expect to be using them as root, but we'll have to
chase it down.

We need to make sure the races that plagued us around execing setuids
aren't revived by fscaps.  They shouldn't.

I think that's all.

-- 
ubuntu-devel mailing list
ubuntu-devel@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel


Re: New Ubuntu Core Developer - Simon Quigley

2018-08-15 Thread Ian Bruntlett
Hi Simon,

On 13 August 2018 at 21:26, Simon Quigley  wrote:

> Today, I was voted to be an Ubuntu Core Developer by the Ubuntu
> Developer Membership Board (a board which I already sit on, so I'm
> taking care of myself here). I now have upload rights to the entire
> Ubuntu archive.
>
> Thanks everyone!
>

Congratulations!

BW,


Ian

-- 
-- ACCU - Professionalism in programming - http://www.accu.org
-- My writing - https://sites.google.com/site/ianbruntlett/
-- Free Software page -
https://sites.google.com/site/ianbruntlett/home/free-software
-- 
ubuntu-devel mailing list
ubuntu-devel@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel