did not reach any roadmap ^
<kyrofa> JamieBennett, please please pretty please
<sergiusens> kyrofa we certainly should have proper guidelines for folks on gitlab though
<kyrofa> sergiusens, yeah, would be handy to see a build.snapcraft.io integration there, but an `enable-ci gitlab` option would be pretty easy as well
<sergiusens> We should work on the latter
<zyga-suse> stgraber: ack, checking
<zyga-suse> stgraber: the change to what @unrestricted means was done a while ago, along with the introduction to snap-seccomp
<zyga-suse> stgraber: before the seccomp profile was parsed each time
<zyga-suse> stgraber: now the profile is parsed and compiled only when the policy is prepared
<zyga-suse> stgraber: because the compiled policy is a BPF program we didn't have a way to say "don't load anything" without introducing some form of header or other special semantics in interpreting the file content
<zyga-suse> stgraber: mvo implemented a permissive policy as a workaround
<zyga-suse> stgraber: if this breaks LXD we can definitely change this
<zyga-suse> stgraber: e.g. by encoding a little header or by interpreting tuncated file as unconifned
<zyga-suse> stgraber: (or perhaps a file containing just the string @unconfined, not to be confused with a truncated file due to another bug)
<zyga-suse> stgraber: I commented as such on the bug report now
<zyga-suse> stgraber: I'll catch up with mvo tomorrow morning about this
<zyga-suse> stgraber: please try to indicate urgency or importance, is this a 2.28.6 material?
 * zyga-suse -> EOD
#snappy 2017-10-19
<sergiusens> kyrofa and?
<kyrofa> sergiusens, seems to work, but my test case is broken anyway (opencv) so I still want to poke at it some more tomorrow. Left some comments on the PR
<stgraber> zyga-suse: not crazy urgent, not warranting a point release on its own, but it is something we need sorted to have LXD actually be at feature parity with the deb package. Custom seccomp policies is a feature we've had quite a bit of interest for lately and it's pretty unfortunate that it