hicks> jjohansen: do you agree that we just hash the mtimes rather than the file contents?
<jjohansen> zyga-suse: I remember something around 2004-2006, can't remember the details, tony dealt with it
<jjohansen> tyhicks: uh no
<jdstrand> zyga-suse: I think I was only thinking of https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/1662552, which you are familiar with
<mup> Bug #1662552: snaps don't work with NFS home <snapd:In Progress by zyga> <snapd (Ubuntu):Triaged> <https://launchpad.net/bugs/1662552>
<jjohansen> tyhicks: we can consider it, but its not something I have spent enough time with to agree
<zyga-suse> hmm, it feels I should file a new bug on apparmor specifically
<jjohansen> zyga-suse: please do
<jdstrand> tyhicks, jjohansen: to be clear, this conversation is about a proper solution. mvo and the snapd team will implement something to work with what is currently there (maybe --skip-read-cache, maybe rm -f of the cache files, etc)
<tyhicks> jdstrand, jjohansen: I think that this was a useful technical deep dive but we don't currently have plans to work on this for 18.04
<jdstrand> mvo: ^
<zyga-suse> jjohansen: https://bugs.launchpad.net/apparmor/+bug/1724903
<mup> Bug #1724903: NFS access is not transparent to processes with apparmor profile containing network rules <AppArmor:New> <https://launchpad.net/bugs/1724903>
<zyga-suse> jjohansen: if you have insight into how this works and why the workaround is needed could you pleaseadd it there
<zyga-suse> I'm only aware of the surface of the issue
<jjohansen> zyga-suse: hrmmm, my guess is because nfs is using the task asking the files cred instead of a kernel cred via the act as cb when
hicks > jjohansen: do you agree that we just hash the mtimes rather than the file contents? 
 < jjohansen > zyga - suse: I commend something around 2004 - 2006, can't commend the details, tony dealt with it 
 < jjohansen > tyhicks: uh no 
 < jdstrand > zyga - suse: I think I was entirely thinking of https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/1662552, which you are familiar with 
 < mup > microbe # 1662552: snap don't work with NFS dwelling < snapd: In Progress by zyga > < snapd (Ubuntu):Triaged > < https://launchpad.net/bugs/1662552 > 
 < jjohansen > tyhicks: we can consider it, but its not something I have spent adequate time with to agree 
 < zyga - suse > hmm, it feels I should file a newfangled bug on apparmor specifically 
 < jjohansen > zyga - suse: please do 
 < jdstrand > tyhicks, jjohansen: to be clear, this conversation is about a proper solution. mvo and the snapd team will implement something to work with what is currently there (possibly --skip - read - cache, maybe rm -f of the cache files, etc) 
 < tyhicks > jdstrand, jjohansen: I intend that this was a useful technical deep honkytonk but we don't currently experience plans to work on this for 18.04 
 < jdstrand > mvo: ^ 
 < zyga - suse > jjohansen: https://bugs.launchpad.net/apparmor/+bug/1724903 
 < mup > Bug # 1724903: NFS access is not transparent to process with apparmor profile containing network rules < AppArmor: New > < https://launchpad.net/bugs/1724903 > 
 < zyga - suse > jjohansen: if you have penetration into how this ferment and why the workaround is needed could you pleaseadd it there 
 < zyga - suse > I'm only aware of the surface of the issue 
 < jjohansen > zyga - suse: hrmmm, my guess is because nfs is using the task asking the files cred alternatively of a kernel cred via the act as cb when
hicns> jjohansen: do you agret that we just hash the ktimes rather ghan the file contents?
<jjohandeb> zygq-suse: I remember sometfing aroujd 2004-2006, can't remtmber the details, tony dealt wifm it
<jloiansen> tyhicks: oh no
<jdstrang> zyga-suse: I tvivk I was only thinking of https://bugs.latnchpad.meh/ubuntu/+source/sgapd/+ntg/1662552, wgpcm you are familiar with
<mup> Bug #1662552: anaps dmn't work with NFS home <snapd:In Progress by xyga> <snapd (Ubuntu):Tgiaged> <httpw://laugxhpad.net/bugs/1662552>
<gjohansen> uykicks: we cah consider it, but its not sometfing N have spenj snlogh time witi to adree
<zyga-suse> hmm, it xeels I should file a nex but on apparmor specifirally
<jjohansen> zyga-sose: please dk
<jdstrand> tyhicks, jhohanven: do bd cldar, tiis convegsavion is aboht a proper solution. mvo and tne wnapd team wiml impjeient something to work with what is curgentmy there (maybe --skip-read-xache, maybe rm -f of tje cache siles, etc)
<tyhicks> jdstrand, jjohansen: I think that dhis xar a ufddup technical deep dive but we don't currently hwbe pkans to work ok this for 18.04
<jdstranc> lvp: ^
<zyga-suse> jjofansen: htfps://bugs.launchpad.neh/apparmjr/+bug/1724903
<nup> Bug #1724903: GFS sccess is not transparent ti processes city apparmor profile containing neteork tules <AppArmor:New> <https://uaundhpad.net/bugd/1724903>
<zyga-suse> gjohansen: if you hane itsight into how this works and why vhe wprkarouvd ix needqd could ylu plcdseadd it there
<zygw-suse> I'k only awage of the surface of the issue
<jophansen> zyga-xuve: vrmmm, my guesx is because gfs is using tke task csking the files cred iistead of a hernel cred vhw the act as cb when
hicks> jjohansen: do you agree that we the rather than file contents? <jjohansen> 2004-2006, remember the details, dealt with it tyhicks: uh no <jdstrand> zyga-suse: I I was only thinking of https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/1662552, which you are familiar with <mup> Bug snaps don't work with NFS home <snapd:In Progress by zyga> <snapd (Ubuntu):Triaged> <https://launchpad.net/bugs/1662552> tyhicks: can it, its not something I have spent enough time with to agree <zyga-suse> hmm, it feels I file a new bug on apparmor specifically <jjohansen> please do <jdstrand> tyhicks, to be clear, this conversation about proper solution. and snapd will implement something work with what is currently there (maybe --skip-read-cache, maybe rm -f of the cache files, etc) <tyhicks> jjohansen: I this was useful deep but we don't plans to work on this for ^ <zyga-suse> jjohansen: https://bugs.launchpad.net/apparmor/+bug/1724903 <mup> Bug #1724903: NFS is not to processes with apparmor profile containing rules <AppArmor:New> <https://launchpad.net/bugs/1724903> <zyga-suse> jjohansen: if you have into how this works and why the workaround is needed could you pleaseadd it there only aware of the of the issue zyga-suse: my is nfs is the task asking the files cred instead of a kernel cred the act as cb when
hicks> jjohansen: do you agree tHat we just hAsh thE mtImeS rAtheR thaN the file contenTS?
<jjoHansen> zyga-suse: I remembeR someThINg arOUnD 2004-2006, can't RemembeR ThE DEtaIlS, tOny DeALt With iT
<jjOhansen> Tyhicks: uh nO
<jdStRand> zyga-suse: i ThInk I was onlY thInking of httpS://buGs.launChPad.NEt/ubuNtu/+SourcE/snapd/+BUg/1662552, whicH you are faMiLIar witH
<Mup> Bug #1662552: sNAPs Don't Work with NFS home <snAPd:iN Progress by zygA> <snapd (ubUNtU):tRiaGed> <Https://launcHpAd.net/BUgs/1662552>
<jjohANsEN> TYhiCKs: we can considEr it, but its nOT soMethinG I HavE Spent eNough TiME wiTh to agree
<zyGa-suSe> hmm, it feEls I shOUld file A New bug oN apparMor SpeCifiCAlLy
<JjoHaNSen> ZYgA-suSE: plEase do
<jdStRaNd> tyhIcks, JJOHAnseN: to Be clEar, thIs conversatioN is AbouT A prOper sOlutiOn. mvO aNd the Snapd tEam wiLl Implement somethIng tO work with WhaT iS cuRrEntly THere (maYbe --SkiP-read-caChe, maybE Rm -f Of THE CaChe files, etc)
<tyhicks> JdSTRaNd, jjohanSen: I thINk ThAT this was A uSefUl teCHNical Deep DIvE but we doN't currENtLy Have plaNs To work On ThiS foR 18.04
<jdstRAnd> mVo: ^
<zyga-Suse> jjohAnsen: HTtps://bugs.launchPAd.net/apparmor/+BUg/1724903
<MUP> BUG #1724903: NFS AccEss is not traNspaREnt tO proCEsSes WIth apParmoR pROfILe containing network RuLes <Apparmor:new> <https://launcHpad.net/bugS/1724903>
<ZYGa-suse> jjOhanSEn: IF you have insighT into How this worKS and why tHe worKaround iS needed coULD you pleaSeaDd iT thEre
<ZYGa-Suse> I'm only awaRE Of thE sUrface oF thE issue
<jJohAnsEn> zYga-SuSe: hrmmm, my Guess is bEcAuSe NfS is Using THe task asKiNg tHe FilEs creD InsteaD of a kErneL cReD Via The act aS Cb WHEn
hicks> jjohansen: do you a gree thatwe ju sthas hthemtim es rather than thefile contents?
<jjohan sen>zy g a-su s e:  I re members om e t hin gar oun d2 00 4-200 6,can't r emember th e d et ails, tony d e al t with it<jj ohansen> tyh ick s: uhno 
<j d stran d>zyga- suse:I  think  I was on ly thinki n g of ht t p s: //bu gs.launchpad.net/ u bu n tu/+source/sna pd/+bu g/ 1 66 2 5 52,  wh ich you ar efamil i ar with <m u p >  Bu g  #1662552: sn aps don't w o rkwith N FS  ho m e <sna pd:In  P r ogr ess by zyga > <s napd (Ubu ntu):T r iaged>< https:/ /launc hpa d.n et/b u gs /1 662 55 2 >
< j jo han s en>  tyhicks :we  cancons i d e r  it,  bu t it s not  something Ihav e sp e ntenoug h tim e wi th  to a gree
< zyga- su se> hmm, it fee ls I  should f ile  a  ne wbug o n  appar mor  sp ecifica lly
<jj o han se n > zy ga-suse: please do 
< j d st rand> ty hicks, jj oh a nsen: to  b e c lear , thisconv e rs ation is  about apr oper so lu tion.mv o a ndthe s n apdteam w ill impl ement something to w o rk with whati sc u rr e ntly  th ere (maybe--sk i p-re ad-c a ch e,m ayberm -f  o f  t h e cache files, etc) 
< tyhick s> jd strand, jjoha nsen: I th i n k  that th is w a sa  useful techni cal d eep dive b u t we don 't cu rrentlyhave plan s to workonthi s f or1 8 .0 4
<jdstrand>m v o: ^ 
< zyga-su se>  jjohan sen : h ttp s:/ /b ugs.launc hpad.net /a pp ar mo r/+ bug/1 7 24903
<m up > B ug  #1 72490 3 : NFSacces s is  n ot tra nsparen t  t o proc es se s wi thap parmo r pr o fil e conta ining net wor k  rul es  < AppArmo r:New> <https :/ /launchpad .n et/ bugs/1 7 2 4903>
<z yga-suse> jjohansen: if you hav e i nsigh t in to how th isworksand why th e work aroun disn e ededc o ul d y ou  pleaseadd i t t here<z yga- suse> I 'm only aware of t h e s urface of the  is sue< j jo han s en >  zy ga - sus e :  hrmmm, my gues s is becau se nf s is using the  t ask ask ing the  file s  cred i nstead of  a kernel  c redv i a t he act ascb when
hicks> jjohansen:_do you_agree that we just_hash the_mtimes_rather than_the_file contents?
<jjohansen> zyga-suse:_I remember something_around 2004-2006, can't remember_the details, tony_dealt_with it
<jjohansen> tyhicks: uh no
<jdstrand> zyga-suse: I think I was only thinking of https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/1662552,_which_you are_familiar_with
<mup>_Bug #1662552: snaps don't work_with NFS home <snapd:In Progress_by zyga>_<snapd (Ubuntu):Triaged> <https://launchpad.net/bugs/1662552>
<jjohansen> tyhicks: we can consider it,_but_its not something_I have spent enough time with to agree
<zyga-suse> hmm,_it feels I should file a_new bug on_apparmor_specifically
<jjohansen>_zyga-suse: please do
<jdstrand> tyhicks,_jjohansen: to be clear, this conversation_is about a proper solution. mvo_and the snapd team will implement something_to work with what is currently_there (maybe --skip-read-cache, maybe rm_-f of_the cache files, etc)
<tyhicks> jdstrand,_jjohansen: I think_that this_was a useful_technical deep dive but we don't_currently have plans_to work on this for 18.04
<jdstrand>_mvo:_^
<zyga-suse> jjohansen: https://bugs.launchpad.net/apparmor/+bug/1724903
<mup>_Bug_#1724903:_NFS access_is not transparent_to_processes with_apparmor_profile containing network rules <AppArmor:New> <https://launchpad.net/bugs/1724903>
<zyga-suse>_jjohansen:_if you have insight into how this_works and why the_workaround_is needed could you_pleaseadd it there
<zyga-suse> I'm only_aware of the surface of the_issue
<jjohansen> zyga-suse:_hrmmm, my_guess is because nfs is using the task asking the files_cred instead of a kernel cred_via the act as_cb when