!VhzbGHamdfMiGxpXyg:robins.wtf

NixOS LXC

15 Members
lxc, lxd, incus discussions related to NixOS8 Servers

Load older messages


SenderMessageTime
26 Apr 2024
@rungmc:matrix.orgrungmcI don't know if this is already on your radar but you can get some fun PATH errors passing through a physical wireless device (Incus apparently uses iw under the hood for that) or toggling on AppArmor (aa-exec specifically)22:11:29
@adam:robins.wtfadamcstephens 🐝are the errors on the daemon or in an instance?22:19:02
@adam:robins.wtfadamcstephens 🐝i wouldn't expect apparmor to work at all22:19:17
@rungmc:matrix.orgrungmc Yeah, I only enabled AA to see if it would work for shits and giggles. For iw, the instance log shows:ERROR network - ../src/lxc/network.c:lxc_netdev_move_wlan:1649 - Couldn't find the application iw in PATH 22:34:28
@adam:robins.wtfadamcstephens 🐝 Ok I suspect that’s the daemons path which is in the incus module 22:41:12
27 Apr 2024
@adam:robins.wtfadamcstephens 🐝
In reply to @rungmc:matrix.org
Yeah, I only enabled AA to see if it would work for shits and giggles. For iw, the instance log shows:ERROR network - ../src/lxc/network.c:lxc_netdev_move_wlan:1649 - Couldn't find the application iw in PATH
Can you provide the device command or config you’re adding?
02:54:24
@rungmc:matrix.orgrungmc incus config device add testContainer wlan0 nic name=wlan0 nictype=physical parent=wlp11s0... I think. I'm working at like 2% mental capacity with a migraine that I'm blaming on looking into the community drama earlier πŸ™ƒ 03:38:59
@adam:robins.wtfadamcstephens 🐝i wonder if our quantity of tests is starting to make them flaky12:33:44
@adam:robins.wtfadamcstephens 🐝e.g. i see timeouts12:34:01
@adam:robins.wtfadamcstephens 🐝i could merge some of these tests to reduce the overall quantity, but i explicitly split them so they can be more directly targeted by packages as passthru tests.12:35:53
@adam:robins.wtfadamcstephens 🐝https://github.com/NixOS/nixpkgs/pull/30703912:53:15
@adam:robins.wtfadamcstephens 🐝i just can't get those tests to pass on ofborg, even though they work locally. i guess i can roll back the test refactor but i'm a bit doubtful that will fix them12:53:50
@hexa:lossy.networkhexadid you add any systemd hardening things?12:54:14
@hexa:lossy.networkhexabecause for some reason kanidm consistently fails on ofborg due to its hardening, but works locally12:54:48
@adam:robins.wtfadamcstephens 🐝no12:55:37
@adam:robins.wtfadamcstephens 🐝it would be interesting to try and run incus as another user, but i have a feeling it's not able to12:56:10
@hexa:lossy.networkhexaif you can't reproduce test failures on the same platform as where ofborg fails … don't worry12:56:42
@adam:robins.wtfadamcstephens 🐝any thoughts on that PR? :) especially the name of the option I'm adding12:57:52
@hexa:lossy.networkhexasigh12:58:16
@adam:robins.wtfadamcstephens 🐝oh no, it's not that bad is it?12:58:29
@hexa:lossy.networkhexaI'll try to take a look, but it isn't smol12:58:29
@adam:robins.wtfadamcstephens 🐝no worries then12:58:49
@hexa:lossy.networkhexano, it's just about morale, energy levels, too many hats12:58:51
@adam:robins.wtfadamcstephens 🐝yeah, i get it12:58:57
@hexa:lossy.networkhexaand everything coming crashing down right now12:58:59
@hexa:lossy.networkhexaI'll be taking a walk, and then i'll take a look, don't worry12:59:13
@hexa:lossy.networkhexajust need to recharge12:59:17
@adam:robins.wtfadamcstephens 🐝take your time. thanks though :)12:59:37
@adam:robins.wtfadamcstephens 🐝i'm going to go audit the incus repo for more commands we're missing 13:00:04
@hexa:lossy.networkhexaπŸ™‚ 13:05:54

There are no newer messages yet.


Back to Room ListRoom Version: 10