<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Le 06/11/2016 à 11:50, Jacques Supcik a
écrit :<br>
</div>
<blockquote
cite="mid:CAMkq311E_8s9zWsjrXcSMsuOeioroLCyN4YxFuwU9M6S6bD94Q@mail.gmail.com"
type="cite">
<div dir="ltr">
<div style="font-size:12.8px">Dear community.</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">I have a <a moz-do-not-send="true"
href="https://gitlab.com/telecom-tower/tower"
target="_blank">program</a>, written in go, and running on a
raspberry Pi 2, which displays messages on a LED panel. The <a
moz-do-not-send="true"
href="https://www.adafruit.com/product/2294" target="_blank">panel</a> is
made of "neo pixels" and is connected to the GPIO of the
raspberry Pi. Internally, it uses the DMA and PWM to generate
and accurate signals.</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">The program currently runs well on
a Raspbian system and I would like to move to ubuntu-core. I
was able to build the snap and to deploy it on a raspberry Pi
2 running Core version 16. I installed the snap with
"--dangerous", but as soon as the system configure the
DMA/PWM/GPIO, it just freezes.</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">I installed snappy-debug to check
the logs and this is what I get:</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">
<div><font face="monospace, monospace">= AppArmor =</font></div>
<div><font face="monospace, monospace">Time: Nov 6 09:28:45</font></div>
<div><font face="monospace, monospace">Log: apparmor="DENIED"
operation="open" profile="snap.telecom-tower.<wbr>daemon"
name="/dev/vcio" pid=4441 comm="tower" requested_mask="r"
denied_mask="r" fsuid=0 ouid=0</font></div>
<div><font face="monospace, monospace">File: /dev/vcio (read)</font></div>
<div><font face="monospace, monospace"><br>
</font></div>
<div><font face="monospace, monospace">= Seccomp =</font></div>
<div><font face="monospace, monospace">Time: Nov 6 09:28:45</font></div>
<div><font face="monospace, monospace">Log: auid=4294967295
uid=0 gid=0 ses=4294967295 pid=4441 comm="tower"
exe="/snap/telecom-tower/x1/<wbr>bin/tower" sig=31
arch=40000028 14(mknod) compat=0 ip=0x76e3aaf6 code=0x0</font></div>
<div><font face="monospace, monospace">Syscall: mknod</font></div>
<div><br>
</div>
</div>
<div style="font-size:12.8px">Note that if I scp the binary file
and run on ubuntu core as root, then the program runs fine. (I
don't install the snap, I just run the binary from the home
directory.) </div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">Does someone have an idea about
what I can do to make my snap run?</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">Thank you very much in advance for
your support.</div>
</div>
</blockquote>
<br>
Hey Jacques,<br>
<br>
I think we did discuss about GPIO support in confined mode, but
there is no interface for this today AFAIK (CCing Jamie who can
confirm and maybe give a path/ETA forward).<br>
<br>
Meanwhile, you can still install your snap in devmode to bypass
security, and that should do it in your case, mind confirming?<br>
Cheers,<br>
Didier<br>
</body>
</html>