snappy-debug 16 series status

[Jamie Strandboge]

FYI,

As you probably are aware, snappy-debug has been broken on the 16 series due to
the completely new way of generating sandbox policy on 16.04:

https://launchpad.net/bugs/1543118

While there is still a lot left to do to make the tooling shine, I thought it
important to at least have something working in the short term so I uploaded
snappy-debug 0.15 just now which should be at least as good as the 15.04/stable
version.

Since the log-observe interface doesn't auto-connect, there is an extra step on
series 16:

$ sudo /snap/bin/snappy-debug.security scanlog
Could not open '/var/log/syslog'. Did you run 'sudo snap connect snappy-
debug:log-observe ubuntu-core:log-observe'?

$ sudo snap connect snappy-debug:log-observe ubuntu-core:log-observe
[/] Connect snappy-debug:log-observe to ubuntu-core:log-observe
$


While I as at it, I added per-snap filtering. Eg:

$ sudo /snap/bin/snappy-debug.security scanlog foo-snap
...
(parsed logs for only 'foo-snap')


I'll be working with the Snappy architects (hi Gustavo! :) in the coming weeks
to sync up on the design and refine the UX around all of this so that its all
within spec.

Enjoy!

PS - note that snappy-debug.security tries to use sysctl to adjust kernel rate
limiting, but it will fail with permission denied in the latest OS snap. The fix
is already in trunk and will be in the next snapd SRU to 16.04.

-- 
Jamie Strandboge             | http://www.canonical.com

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part
URL: <https://lists.ubuntu.com/archives/snappy-devel/attachments/20160502/5862cbcf/attachment-0001.pgp>