After Apparmor cherry picked and re-indexed everything is working very well again. Thank you for your speedy and efficient support.

  • [deleted]

Qlayton Most likely you managed to reinstall it just after the fix got available in Shannon.

No issues with Plasma after updating.

Excited to see Distrobox included so installed it without issues and tried creating one and following error ensued, i did also --image for Fedora 40 and debian from quay and same error. And i don´t know how to proceed or solve this. Let me know if i should create a gh issue with this.

pjol@mini-solus ~ $ distrobox create
Image registry.fedoraproject.org/fedora-toolbox:39 not found.
Do you want to pull the image now? [Y/n]: y
Trying to pull registry.fedoraproject.org/fedora-toolbox:39...
Getting image source signatures
Copying blob 6b90564301bf done |
Error: copying system image from manifest list: writing blob: adding layer with blob "sha256:6b90564301bfa1966564eeab4ad3c3031f6408d75c4a8de4126efcaf7e35ca60": processing tar file(potentially insufficient UIDs or GIDs available in user namespace (requested 0:114 for /usr/share/polkit-1/rules.d): Check /etc/subuid and /etc/subgid if configured locally and run "podman system migrate": lchown /usr/share/polkit-1/rules.d: invalid argument): exit status 1
pjol@mini-solus ~ $

Doing as suggested, podman system migrate does not resolve the issue or give me any error or further message as to what might be going wrong. Also afaict neither /etc/subuid or /etc/subgid exist.

    Pjol Read this forum thread . It is not as straightforward to use it because Solus doesn't create subgid and subuid file automatically. There is a pending PR for it.

    • Pjol replied to this.

      alfisya I have a recollection of reading that thread previously when i looked into Distrobox but i never proceeded with installing it at that time. But now that it is included in the repo i imagined it would be a matter of eopkg it distrobox and off i go.

      Well this might serve as a good reminder if anyone else stumbles into the same issue.

      Thanks!

      Hello. Thank you for this huge update and fixing AppArmor issue few hours ago but still have problem with sound. When I check on Setting > Sound, the Output Device is "Dummy Output". Reinstall sof-firmware still not working for me.

      systemctl status apparmor
      [sudo] password for brent:
      ● apparmor.service - Load AppArmor profiles
           Loaded: loaded (/usr/lib/systemd/system/apparmor.service; disabled; preset: enabled)
          Drop-In: /usr/lib64/systemd/system/service.d
                   └─10-timeout-abort.conf
           Active: active (exited) since Sat 2024-06-29 06:55:49 MST; 2min 6s ago
          Process: 414 ExecStart=/usr/lib64/apparmor/apparmor.systemd reload (code=exited, status=0/SUCCE>
         Main PID: 414 (code=exited, status=0/SUCCESS)
              CPU: 259ms
      
      Jun 29 06:55:57 workstation apparmor.systemd[414]: Restarting AppArmor
      Jun 29 06:55:57 workstation apparmor.systemd[414]: Reloading AppArmor profiles
      Jun 29 06:55:49 workstation systemd[1]: Finished apparmor.service - Load AppArmor profiles.

      Got the new update. It's loaded/active. All better now. Thank you. 👍

      Apparmor update a day latter addressed fail to start problem.

      just updated, rebooted, and my wifi and bluetooth are gone. no option to connect to any wireless networks.

      also mailspring is gone? a shame, i used and liked that one.

        linux-firmware, sof-firmware, and iptables cherry-picked to fix an issue caused by moving files from /lib64/ to /usr/lib64 (in preparation for the upcoming usr-merge) where not all compat symlinks were created. This would cause issues where certain hardware would fail to load the proper firmware files, breaking graphics, wifi/bluetooth, sound, and other devices.

        topolojack just updated, rebooted, and my wifi and bluetooth are gone. no option to connect to any wireless networks.

        Your issue is most likely resolved by the cherry-picks. Hopefully you can use an ethernet port to update, but if not you can download this file from another device and then put it on a USB or something and install it with sudo eopkg it /path/to/file

        topolojack also mailspring is gone? a shame, i used and liked that one.

        Mailspring developers are frankly incompetent from a security standpoint. They statically build various libraries into the sync binary that they distribute themselves and there is no way for packagers to override it to use system libraries. If you are using mailspring, you are using a version of OpenSSL that is more than 7 years old (!!!) at this point which I have brought to their attention and they simply do not care about it or your security. We cannot in good conscious allow software with such bad security practices to exist in our package repo. If you personally do not care about using insecure software you can use the flatpak though I would note that I am shortly going to open an issue with Flathub admins to investigate whether or not it should be removed there as well.

          ReillyBrogan Appreciate your reply. Re the wireless issue, turned out to an an EFI partition too small problem. Re mailspring, ah, sucks. I didn't know that about it, it just happened to be the email client I found that was compatible with all the email addresses I use.

          No problems with my Plasma or Xfce laptops, but when it came to updating my Budgie VM, I got a $PATH error about AppArmor.

          Same error for my Plasma VM:

          Same error for Xfce VM. Now I'm just wondering if the same error happened when I updated my laptops, and I just wasn't paying attention.

            WetGeek there was yesterday's update that caused some apparmor issues but then there was last night's middle-of-the-night-followup-update-that-fixes-the-apparmor-issues. did you do both updates?
            If you did one today, then you have both I suppose.
            If you are fully up to date then this is the only post I've seen where the apparmor update did not work, but it's been slow here.
            If systemctl status apparmor shows apparmor disabled, and you are fully updated, then it's significant asfaik.
            all I got

              Updated a intel laptop with Plasma and lost integrated audio (speaker icon crossed out), opening the audio volume menu integrated speaker was missing completely, eopkg install sof-firmware --reinstall brought it back.

              Otherwise no issues, thanks all!

              brent all I got

              Thanks for your reply. It's a rare day when I'm not the first (or one of the first) to apply updates, but because of personal issues that generated a lot of stress, I didn't even get to update anything until late Saturday afternoon. And I still had little time to spend on it, so for a change I didn't read any of the other posts before I started updating.

              When I couldn't get to sleep tonight, I fired up my laptop, discovered that another update was available, and installed it. I can confirm that the apparmor issue is gone, and as @Harvey noted, the reboot command now works by itself in the terminal.

              I'm going to start updating all the rest of the machines here, until I'm too sleepy to continue, then I'll try going to bed again.

                • [deleted]

                ReillyBrogan

                linux-firmware, sof-firmware, and iptables cherry-picked to fix an issue caused by moving files from /lib64/ to /usr/lib64 (in preparation for the upcoming usr-merge) where not all compat symlinks were created.

                Did this affect the operation of iptables?

                WetGeek

                Whatever is going on in your life (I know only a little of your circumstances, but enough to understand that life might be stressful re. caring for loved ones and such), best wishes that it all works out for the best sooner rather than later. 🤝

                  ermo

                  Thanks for the kind words. Mixed in with the stress, there's been some joy. I found out yesterday that, based on her LSATs, my granddaughter was given a full ride at a law school in Boston. Needless to say, Granddad is really proud of her.

                  The other good news was the cherry-picking that fixed almost everything I could have asked for yesterday. Everything reallly important, anyway.