did you rebase from kinoite? - Universal Blue

© 2026 Hedgehog Software, LLC

More

Communities Docs About Terms Privacy

antheas

Aantheas did you rebase from kinoite?

Zeglius

Z

Zeglius•6/29/24, 3:27 PM

yep

antheas

A

antheasOP•6/29/24, 3:27 PM

yea one of the bugs i found during rechunking bazzite is that

antheas

A

antheasOP•6/29/24, 3:27 PM

if you rebase you lose the setroubleshoot user

antheas

A

antheasOP•6/29/24, 3:27 PM

Appending the following passwd users to /usr/lib/passwd
clevis:x:992:964:Clevis Decryption Framework unprivileged user:/var/cache/clevis:/usr/sbin/nologin
setroubleshoot:x:976:963:SELinux troubleshoot server:/var/lib/setroubleshoot:/usr/sbin/nologin
wsdd:x:975:962:Web Services Dynamic Discovery host daemon:/:/sbin/nologin

Appending the following group entries to /usr/lib/group
adbusers:x:966:
plugdev:x:965:
clevis:x:964:
setroubleshoot:x:963:
wsdd:x:962:

Appending the following passwd users to /usr/lib/passwd
clevis:x:992:964:Clevis Decryption Framework unprivileged user:/var/cache/clevis:/usr/sbin/nologin
setroubleshoot:x:976:963:SELinux troubleshoot server:/var/lib/setroubleshoot:/usr/sbin/nologin
wsdd:x:975:962:Web Services Dynamic Discovery host daemon:/:/sbin/nologin

Appending the following group entries to /usr/lib/group
adbusers:x:966:
plugdev:x:965:
clevis:x:964:
setroubleshoot:x:963:
wsdd:x:962:

antheas

A

antheasOP•6/29/24, 3:27 PM

this is what should happen and didnt

Zeglius

Z

Zeglius•6/29/24, 3:28 PM

can be done manually i guess?

antheas

A

antheasOP•6/29/24, 3:28 PM

if you install bazzite with the ISO, these are added to the initial passwd and group files

antheas

A

antheasOP•6/29/24, 3:28 PM

if you rebase from kinoite no

VAtrick

V

VAtrick•6/29/24, 3:28 PM

Hello I got a little question here, are there any security concerns about bazzite os or is it as secure as fedora silverblue?

Kasher_CS

KKasher_CS Check with your adapter is what I say, the partition manager should list your pa...

byeproduct

B

byeproduct•6/29/24, 3:28 PM

Awesome. Shot. I'll try another adaptor. Thanks

antheas

A

antheasOP•6/29/24, 3:28 PM

add them to /etc/passwd /etc/group

antheas

A

antheasOP•6/29/24, 3:28 PM

since you cant write to the lib files

Kasher_CS

K

Kasher_CS•6/29/24, 3:29 PM

Why is my clevis IDs different

antheas

A

antheasOP•6/29/24, 3:29 PM

probably clevis recreated the user

antheas

A

antheasOP•6/29/24, 3:29 PM

with a different id

Kasher_CS

K

Kasher_CS•6/29/24, 3:30 PM

And setrobleshoot

antheas

A

antheasOP•6/29/24, 3:30 PM

add the missing ones

antheas

A

antheasOP•6/29/24, 3:30 PM

if there are any missing

Kasher_CS

K

Kasher_CS•6/29/24, 3:31 PM

Just the groups I think

antheas

Aantheas add them to /etc/passwd /etc/group

Zeglius

Z

Zeglius•6/29/24, 3:32 PM

Now that I checked, it seems i had those beforehand(?)

Kasher_CS

K

Kasher_CS•6/29/24, 3:32 PM

Yeah the groups are there too

Kasher_CS

K

Kasher_CS•6/29/24, 3:32 PM

Very strange

antheas

A

antheasOP•6/29/24, 3:33 PM

if they are they got autoadded

antheas

A

antheasOP•6/29/24, 3:33 PM

but its one of the potential issues i found

Kasher_CS

K

Kasher_CS•6/29/24, 3:36 PM

What's the permissions on /var/lib/setroubleshoot?

Kasher_CS

K

Kasher_CS•6/29/24, 3:37 PM

Actually I have this bluefin vm right here I can check

Kasher_CS

K

Kasher_CS•6/29/24, 3:37 PM

wait its not there

Zeglius

Z

Zeglius•6/29/24, 3:37 PM

Yeah

Zeglius

Z

Zeglius•6/29/24, 3:37 PM

literally, selinux doesnt even let create the directory

Zeglius

Z

Zeglius•6/29/24, 3:38 PM

I mean using sudo I can

Zeglius

Z

Zeglius•6/29/24, 3:38 PM

but not setroubleshootd

Kasher_CS

K

Kasher_CS•6/29/24, 3:38 PM

Doesn't run on the bluefin vm either?

Kasher_CS

K

Kasher_CS•6/29/24, 3:44 PM

It runs after a chownchown

Anfíbio 🐸

A

Anfíbio 🐸•6/29/24, 3:50 PM

Hi all! Since I've rebase to bazzite (ostree-image-signed:docker://ghcr.io/ublue-os/bazzite:stable) I am not getting updates with rpm-ostree upgraderpm-ostree upgrade. It's been more than a month. Is that normal or there is some issue on my system?

Kasher_CS

K

Kasher_CS•6/29/24, 3:51 PM

rpm-ostree status -arpm-ostree status -a

M

M2•6/29/24, 3:57 PM

So, we should probably add a tmpfiles conf file for setroubleshoot

M

M2•6/29/24, 3:57 PM

And maybe a sysusers as well

Kasher_CS

K

Kasher_CS•6/29/24, 3:58 PM

Is creating a setroubleshoot directory with setrobleshoot ownership fine

M

M2•6/29/24, 4:00 PM

Yeah that's the issue

M

M2•6/29/24, 4:00 PM

It's not created

M

M2•6/29/24, 4:00 PM

Well it's made during build time but gets nuked since it's in /var

Zeglius

Z

Zeglius•6/29/24, 4:08 PM

can confirm, chowning it worked

Valerie

V

Valerie•6/29/24, 4:09 PM

Yes

Saki

S

Saki•6/29/24, 4:14 PM

How do I check which version/hash of Bazzite I'm currently running?

Kasher_CS

K

Kasher_CS•6/29/24, 4:14 PM

rpm-ostree status -arpm-ostree status -a

Valerie

V

Valerie•6/29/24, 4:15 PM

rpm-ostree status

rpm-ostree status

will give you the build date

Valerie

V

Valerie•6/29/24, 4:17 PM

ffs

Valerie

V

Valerie•6/29/24, 4:17 PM

again

matt_schwartz

M

matt_schwartz•6/29/24, 4:17 PM

M

M2•6/29/24, 4:17 PM

yay spammers

Appending the following passwd users to /usr/lib/passwd
clevis:x:992:964:Clevis Decryption Framework unprivileged user:/var/cache/clevis:/usr/sbin/nologin
setroubleshoot:x:976:963:SELinux troubleshoot server:/var/lib/setroubleshoot:/usr/sbin/nologin
wsdd:x:975:962:Web Services Dynamic Discovery host daemon:/:/sbin/nologin

Appending the following group entries to /usr/lib/group
adbusers:x:966:
plugdev:x:965:
clevis:x:964:
setroubleshoot:x:963:
wsdd:x:962:

Appending the following passwd users to /usr/lib/passwd
clevis:x:992:964:Clevis Decryption Framework unprivileged user:/var/cache/clevis:/usr/sbin/nologin
setroubleshoot:x:976:963:SELinux troubleshoot server:/var/lib/setroubleshoot:/usr/sbin/nologin
wsdd:x:975:962:Web Services Dynamic Discovery host daemon:/:/sbin/nologin

Appending the following group entries to /usr/lib/group
adbusers:x:966:
plugdev:x:965:
clevis:x:964:
setroubleshoot:x:963:
wsdd:x:962: