dustymabe changed the topic of #fedora-coreos to: Fedora CoreOS :: Find out more at https://getfedora.org/coreos/ :: Logs at https://libera.irclog.whitequark.org/fedora-coreos
mheon has quit [Ping timeout: 276 seconds]
daMaestro has joined #fedora-coreos
gursewak has joined #fedora-coreos
gursewak has quit [Ping timeout: 250 seconds]
daMaestro has quit [Quit: Leaving]
Betal has quit [Quit: WeeChat 3.8]
mock has quit [Ping timeout: 252 seconds]
mockgeek has joined #fedora-coreos
saschagrunert has joined #fedora-coreos
mockgeek has quit [Ping timeout: 248 seconds]
mockgeek has joined #fedora-coreos
jcajka has joined #fedora-coreos
apiaseck has joined #fedora-coreos
jpn has joined #fedora-coreos
bgilbert has quit [Ping timeout: 248 seconds]
apiaseck has quit [Ping timeout: 240 seconds]
paragan has joined #fedora-coreos
<guesswhat[m]> Hello, question, how can I allow user to set nice ulimit for rootless containers? podman run --rm -it --ulimit nice=20:20 alpine fails to Error: crun: setrlimit RLIMIT_NICE: Operation not permitted: OCI permission denied Do I need to setcap cap_sys_nice to crun binary? Thanks
jpn has quit [Quit: Lost terminal]
jpn has joined #fedora-coreos
saschagrunert has quit [Remote host closed the connection]
saschagrunert has joined #fedora-coreos
apiaseck has joined #fedora-coreos
fifofonix has joined #fedora-coreos
vgoyal has joined #fedora-coreos
<dustymabe> guesswhat[m]: I would ask in #podman
hjst_ has quit [Remote host closed the connection]
hjst has joined #fedora-coreos
mockgeek has quit [Ping timeout: 240 seconds]
mockgeek has joined #fedora-coreos
jlebon has joined #fedora-coreos
apiaseck has quit [Ping timeout: 255 seconds]
<guesswhat[m]> dustymabe: its probably OS related, cuz ulimits -e shows 1 and I can not set more than 0 via podman --ulimits. Ive tried set foo hard nice 50 in /etc/security/limits.d/foo.conf, but no luck
apiaseck has joined #fedora-coreos
paragan has quit [Ping timeout: 240 seconds]
paragan has joined #fedora-coreos
<walters> watching https://containerplumbing.org/sessions/2023/management_of_lo now which definitely intersects/overlaps with stuff going on with us
<guesswhat[m]> weird, but /etc/security/limits.conf nor limits.d/foo.conf path is not reflected
<guesswhat[m]> setting `<user> hard nice 50`
<guesswhat[m]> Its probably ignored by systemd
saschagrunert has quit [Remote host closed the connection]
gursewak has joined #fedora-coreos
gotmax has quit [Remote host closed the connection]
gotmax has joined #fedora-coreos
plarsen has joined #fedora-coreos
Betal has joined #fedora-coreos
jpn has quit [Ping timeout: 240 seconds]
jpn has joined #fedora-coreos
jcajka has quit [Quit: Leaving]
gotmax has quit [Write error: Broken pipe]
gotmax has joined #fedora-coreos
paragan has quit [Quit: Leaving]
<dustymabe> spresti[m]: jlebon: can I get a review on https://github.com/coreos/fedora-coreos-config/pull/2316
<dustymabe> bgilbert: jlebon: FYI this is probably going to not be fixed before the 6.2 kernel gets shipped to our stable streams: https://github.com/coreos/fedora-coreos-tracker/issues/1430
<dustymabe> currently I'm not considering it to be a blocker
<jlebon> dustymabe: agreed
<dustymabe> jlebon: I guess we need to drop the bootloader update service now (so it doesn't ship in two `next` releases)
<dustymabe> we already did the promotion for `testing` so it should be good to drop it from `testing-devel` now
<jlebon> dustymabe: makes sense to me. want me to do that?
<dustymabe> i'm already typing
<jlebon> +1
<jlebon> stamped
<dustymabe> aaradhak anthr76 apiaseck davdunc dustymabe gursewak jaimelm jbrooks jcajka jdoss jlebon jmarrero lorbus miabbott nasirhm ravanelli saqali skunkerk walters
<dustymabe> FCOS community meeting in #fedora-meeting-1
<dustymabe> If you don't want to be pinged remove your name from this file: https://github.com/coreos/fedora-coreos-tracker/blob/main/meeting-people.txt
aaradhak has joined #fedora-coreos
<dustymabe> spresti[m]: the bump-lockfile job is running now - then we should be able to do the `next-devel` promotion
Betal has quit [Quit: WeeChat 3.8]
<dustymabe> actually - @jlebon - I'm thinking maybe we should get https://github.com/coreos/fedora-coreos-config/pull/2318 in before we promote to `next`
jpn has quit [Ping timeout: 260 seconds]
jpn has joined #fedora-coreos
jpn has quit [Ping timeout: 240 seconds]
mheon has joined #fedora-coreos
gursewak has quit [Ping timeout: 240 seconds]
jpn has joined #fedora-coreos
gursewak has joined #fedora-coreos
bgilbert has joined #fedora-coreos
aaradhak has quit [Quit: Connection closed for inactivity]
<pwhalen> good afternoon coreos team, is there anyway to verify/check if a compose was created with 'unified-core'?
<dustymabe> pwhalen: like after the fact?
<dustymabe> if you can see the build logs you can see what options were passed to rpm-ostree
<pwhalen> right, something when booting, or anything
<pwhalen> harder looking at logs in osbuild, trying to test adding the option
jpn has quit [Ping timeout: 268 seconds]
<dustymabe> pwhalen: yeah I don't know the answer to that - cc walters or jlebon
<pwhalen> thanks dustymabe,
<jlebon> i don't think there's an explicit file or anything, but there's probably a proxy for it. let me check
<jlebon> here's one: test -f /usr/lib/kernel/install.d/00-rpmostree-skip.install
<jlebon> returns 0 if non-unified core
<pwhalen> awesome, thank you very much jlebon and dustymabe
<walters> Hmmm but I think osbuild bypasses most of the relevant things here because it does package installs, not rpm-ostree
<guesswhat[m]> How can I edit "/sys/fs/cgroup/user.slice/user-$(id -u).slice/user@$(id -u).service/cgroup.controllers" ? Or at least somehow set additional controllers? Its on RO FS. Thanks
jpn has joined #fedora-coreos
<bgilbert> spresti[m]: `next` promotion in https://github.com/coreos/fedora-coreos-config/pull/2319. per discussion with dustymabe, I'm going to add the F38 switch as a commit on top of that PR
jpn has quit [Ping timeout: 240 seconds]
gursewak has quit [Remote host closed the connection]
gursewak has joined #fedora-coreos
gursewak has quit [Remote host closed the connection]
<guesswhat[m]> Colin Walters: thanks, https://github.com/containers/podman/blob/main/troubleshooting.md#solution-24 recommends to edit file which is not writable in FCOS
gursewak has joined #fedora-coreos
<walters> guesswhat: That doc already says below to write a file `/etc/systemd/system/user@.service.d/delegate.conf` which is in a writable, persistent location on FCOS
<guesswhat[m]> `/etc/systemd/system/<myuser>@.service.d/delegate.conf` ?
<guesswhat[m]> I dont want to apply it for all users
gursewak has quit [Remote host closed the connection]
gursewak has joined #fedora-coreos
<walters> guesswhat: it should work to add it to `user@someusername.service.d` instead
gursewak has quit [Remote host closed the connection]
gursewak has joined #fedora-coreos
Betal has joined #fedora-coreos
ravanelli has quit [Remote host closed the connection]
<bgilbert> spresti[m]: pushed
<jlebon> walters: ouff, forgot osbuild did that. pwhalen ^^^
<jlebon> bgilbert: love revert reverts :)
<bgilbert> :-P
<pwhalen> thanks walters, I'll give that a read. (and jlebon :))
gursewak has quit [Remote host closed the connection]
gursewak has joined #fedora-coreos
ravanelli has joined #fedora-coreos
ravanelli has quit [Remote host closed the connection]
ravanelli has joined #fedora-coreos
jpn has joined #fedora-coreos
<ravanelli> dustymabe: can you confirm the date/hours please? https://hackmd.io/GZsibrbzRIqqfcCETMYFGQ
<dustymabe> ravanelli: we probably want to create a new HACKMD for test day (i.e. the HackMD we already have was for pre-test-day stuff)
<dustymabe> other than that - LGTM\
<ravanelli> dustymabe: ok, creating a new one. Thanks =)
<jlebon> dustymabe: thanks; taken out of draft
<guesswhat[m]> Colin Walters: thanks, working
gursewak has quit [Remote host closed the connection]
jpn has quit [Ping timeout: 248 seconds]
djinni` has quit [Quit: Leaving]
jpn has joined #fedora-coreos
djinni` has joined #fedora-coreos
apiaseck has quit [Ping timeout: 250 seconds]
<spresti[m]> Sweet, thank you dustymabe !
<spresti[m]> Everything else can proceed like normal now ?
jpn has quit [Ping timeout: 276 seconds]
<dustymabe> spresti[m]: should be able to, yes
<dustymabe> the goal is to try to rollout the releases in the morning
<dustymabe> any maybe on a aggressive rollout window since we're bumping up into the weekend.. cc bgilbert, jlebon
mnguyen has quit [Ping timeout: 246 seconds]
<bgilbert> dustymabe: what about 48/48/24? stable is the main one and AFAIK it doesn't have anything exciting in it
<bgilbert> testing has the bootloader update; next has the F38 rebase
plarsen has quit [Quit: NullPointerException!]
daMaestro has joined #fedora-coreos
jpn has joined #fedora-coreos
jpn has quit [Ping timeout: 276 seconds]
bgilbert has quit [Ping timeout: 240 seconds]