Snap security questions

2017-02-01 Thread James Henstridge
Hi, On our team we've been working to snap the thumbnailer project. While there are some problems that are probably specific to this package, there were a few that I suspect might affect other packages too: 1. Intra-snap D-Bus communication The thumbnailer D-Bus service exposes a number of meth

Re: Snap security questions

2017-02-03 Thread James Henstridge
On 1 February 2017 at 22:46, Jamie Strandboge wrote: > On Wed, 2017-02-01 at 20:33 +0800, James Henstridge wrote: >> 2. Use of the libapparmor aa_is_enabled and aa_query_label APIs >> >> When deciding whether to do work on behalf of a client, >> thumbnailer-service us

Re: dlopen cannot load shared library

2017-02-03 Thread James Henstridge
On 3 February 2017 at 20:41, Loïc Minier wrote: > Hi, > > On Fri, Feb 3, 2017 at 11:20 AM, Roberto Mier Escandón  > wrote: >> >> I'm having a problem with a snap which start certain daemon when >> installed. This daemon tries to load certain shared library but it's not >> able to do it even in d

Re: Max retries exceeded?

2017-02-05 Thread James Henstridge
On 6 February 2017 at 11:47, Michael Nelson wrote: > On Mon, Feb 6, 2017 at 1:25 PM Michi Henning > wrote: >> >> I keep getting this error when doing a snapcraft cleanbuild. Any >> suggestions? I checked name resolution, and my DNS resolves >> parts.snapcraft.io just fine. >> > > Hi Michi > > Hav

Re: ubuntu-app-platform updated to Qt 5.6.2

2017-02-08 Thread James Henstridge
On 9 February 2017 at 10:43, XiaoGuo Liu wrote: > I am now trying to snap a html5 webapp. My source code is here at: > > https://github.com/liu-xiao-guo/wuziqi Looking at the snapcraft.yaml file, you don't seem to be using the launcher shell script provided by the part. Without that, LD_LIBRARY_

Re: ubuntu-app-platform updated to Qt 5.6.2

2017-02-08 Thread James Henstridge
On 9 February 2017 at 12:12, XiaoGuo Liu wrote: > Hi James, > > Thanks for your reply. Yeah, it could be reason for it. I used to have a Qt > project, and the app was launched by desktop-launch: > > https://github.com/liu-xiao-guo/rssreader_platform > > For my case, it is a html5 app. I do not kno

Problems using GLib's DBus implementation with dbus interface

2017-02-09 Thread James Henstridge
I was snapping up a D-Bus service I'm responsible for, and had it crash with a "Bad System Call" error, and the following in the dmesg output: [2054724.068967] audit: type=1326 audit(1486700103.228:2687): auid=1000 uid=1000 gid=1000 ses=2 pid=29311 comm="mediascanner-se" exe="/snap/mediascanner2/x

Re: vlc mpris

2017-02-12 Thread James Henstridge
On 13 February 2017 at 15:02, Vasilisc wrote: > How to allow vlc - "org.mpris.MediaPlayer2.vlc.instance*" ??? > > [0xd5f358] dbus interface error: Error requesting service name > org.mpris.MediaPlayer2.vlc.instance3045: Connection ":1.69" is not allowed > to own the service "org.mpris.MediaPlayer2

Re: vlc mpris

2017-02-13 Thread James Henstridge
On 14 February 2017 at 08:01, Jamie Strandboge wrote: > On Mon, 2017-02-13 at 15:30 +0800, James Henstridge wrote: >> On 13 February 2017 at 15:02, Vasilisc wrote: >> > >> > How to allow vlc - "org.mpris.MediaPlayer2.vlc.instance*" ??? >> > >>

Experimental Python interpreter snap

2017-02-19 Thread James Henstridge
To learn a bit more about I put together a snap for Python 3.6.0, which can be installed with: snap install --edge python36-jamesh You can then run "python36-jamesh.python3", which will give you the a Python shell running with strict confinement, with the full standard library available. Now

Re: Experimental Python interpreter snap

2017-02-19 Thread James Henstridge
On 20 February 2017 at 10:41, Spencer wrote: > I thought a main feature of snaps was to include all dependencies so that > they couldn't be changed out from underneath a package. For example, my > script was written for 3.6, but would be incompatible with a future release, > say 4.0. I've inc

Re: Experimental Python interpreter snap

2017-02-19 Thread James Henstridge
On 20 February 2017 at 10:45, XiaoGuo Liu wrote: > Hi James, > > Nice. This is a nice example showing how to reduce a python snap package. A > few days ago, I also made a small example to make use of the python3 coming > with the core at: > > https://github.com/liu-xiao-guo/httpstat > > In the ab

Re: Experimental Python interpreter snap

2017-02-21 Thread James Henstridge
On 21 February 2017 at 16:57, Stuart Bishop wrote: > On 20 February 2017 at 11:41, James Henstridge > wrote: >> On 20 February 2017 at 10:45, XiaoGuo Liu wrote: >>> Hi James, >>> >>> Nice. This is a nice example showing how to reduce a python snap pack

Re: Experimental Python interpreter snap

2017-02-21 Thread James Henstridge
On 21 February 2017 at 20:53, Stuart Bishop wrote: > On 21 February 2017 at 18:35, James Henstridge > wrote: > >>> You could probably also get the pip in your snap to install packages >>> to $SNAP_USER_DATA or $SNAP_DATA if run as root. Although most devs >>&

Re: Experimental Python interpreter snap

2017-02-22 Thread James Henstridge
On 21 February 2017 at 23:37, Barry Warsaw wrote: > On Feb 21, 2017, at 09:30 PM, James Henstridge wrote: > >>So we might be able to do a single package that can both serve as a >>runtime for other snaps and as a useful Python development >>environment. > > It would

Re: Experimental Python interpreter snap

2017-02-22 Thread James Henstridge
On 23 February 2017 at 14:39, Stuart Bishop wrote: > On 22 February 2017 at 21:47, James Henstridge wrote: > >> Yep. So I think it probably makes most sense for the Python runtime >> snap to default to classic confinement so that it behaves as a user >> would expect for

Re: Experimental Python interpreter snap

2017-02-28 Thread James Henstridge
On 23 February 2017 at 19:34, Stuart Bishop wrote: > On 23 February 2017 at 14:45, James Henstridge > wrote: > >> So if I installed a package to $SNAP_USER_DATA for my >> "python36-jamesh.python3" interpreter, the files would end up >> somewhere under ~/sn

Re: HOWTO: How to snap timg (text image viewer)

2017-03-01 Thread James Henstridge
On 1 March 2017 at 07:13, Michi Henning wrote: > >> Upon further thinking, I believe that I did not have to use a fresh >> LXD container, because the "strict" confinement would preclude anyway >> the snap from using any of my desktop's existing system libraries. >> Isn't that indeed the case? > >

Re: classic 32 bit application

2017-03-31 Thread James Henstridge
On 31 March 2017 at 05:38, Seth Arnold wrote: > On Thu, Mar 30, 2017 at 08:10:26AM +0200, Alistair Grant wrote: >> I'm trying to package a 32 bit software development environment: Pharo >> Smalltalk (http://pharo.org). >> >> I've got it working OK as a devmode package, but as soon as I switch it >

Re: classic 32 bit application

2017-04-04 Thread James Henstridge
On 4 April 2017 at 03:25, Alistair Grant wrote: > Hi James, > > Thanks for your reply. > > On Fri, Mar 31, 2017 at 03:08:39PM +0800, James Henstridge wrote: >> On 31 March 2017 at 05:38, Seth Arnold wrote: >> > On Thu, Mar 30, 2017 at 08:10:26AM +0200, Alistair Gr