Universal Blue•17mo ago

probably better to post in #🍪custom-image-support , also oot you got fortinet working in atomic fed

probably better to post in #

custom-image-support , also oot you got fortinet working in atomic fedora?

Aasen23 probably better to post in #🍪custom-image-support , also oot you got fortinet w...

RealDishwash•8/14/24, 8:22 AM

Fortnite? Or is fortinet something else

Pryka•8/14/24, 8:22 AM

I just want to say that yesterday Bluefin pulled update, I'm now on 560 NVIDIA drivers on an old Pascal, seems like all is working fine.

Pryka•8/14/24, 8:23 AM

Thanks for the hard work.

RRealDishwash Fortnite? Or is fortinet something else

asen23OP•8/14/24, 8:23 AM

its a vpn

Aasen23 probably better to post in #🍪custom-image-support , also oot you got fortinet w...

G. Murdzheff•8/14/24, 8:23 AM

I also got a post in #

custom-image-support

RealDishwash•8/14/24, 8:24 AM

oh lol mb

G. Murdzheff•8/14/24, 8:24 AM

I tried adding the repo to /etc/yum.repos.d/ and just doing rpm-ostree install forticlient

G. Murdzheff•8/14/24, 8:24 AM

but got the same error

G. Murdzheff•8/14/24, 8:25 AM

https://github.com/murdzheff/ublue-tessi

Here is my repo if any other details are needed.

GitHub

GitHub - murdzheff/ublue-tessi

Contribute to murdzheff/ublue-tessi development by creating an account on GitHub.

GG. Murdzheff I also got a post in #🍪custom-image-support

asen23OP•8/14/24, 8:25 AM

better continue there, this is for ublue dev

Aasen23 better continue there, this is for ublue dev

G. Murdzheff•8/14/24, 8:26 AM

Are you by any chance from Bulgaria?

Ivo•8/14/24, 9:04 AM

We just found an installation corruption error. Information: We base our images on ublue-os images. We deploy hardened_malloc. One variant (cosmic) has a permanent corruption issue. ostree is unable to do any image layering operations. The ostree filesystem also encounters errors (ostree fsck). We currently believe that the error is at ostree or rechunks. Our hardened_malloc seems to find this error but it is possible that more images are affected by this. I am unable to pinpoint the error. "ostree: fatal allocator error: detected write after free"

Ivo•8/14/24, 9:06 AM

Our issue report is here: https://github.com/secureblue/secureblue/issues/369

GitHub

[BUG] rpm-ostree can't deploy on Cosmic images · Issue #369 · secur...

Describe the bug On the cosmic-main-hardened and cosmic-main-userns-hardened images (and probably nvidia images too), rpm-ostree can't write new deployments. Attempting to install or uninstall ...

Ivo•8/14/24, 9:07 AM

I would like to help find the cause. But I do not know what combination is causing it. It looks related to rechunks + ostree.

IIvo I would like to help find the cause. But I do not know what combination is causi...

antheas•8/14/24, 9:11 AM

Hi, slowly but surely we will fix jt

antheas•8/14/24, 9:11 AM

Can you also find the line in ostree that emits this error

Aantheas Can you also find the line in ostree that emits this error

Ivo•8/14/24, 9:12 AM

If you tell me how, yes. I am unsure what you mean

antheas•8/14/24, 9:12 AM

I guess there is no line

antheas•8/14/24, 9:12 AM

This command is emitted by malloc

antheas•8/14/24, 9:13 AM

Sorry the error

Ivo•8/14/24, 9:13 AM

Yes. Our malloc implementation does not like memory corruption bugs.

antheas•8/14/24, 9:13 AM

What does filesystem corruption mean

Ivo•8/14/24, 9:14 AM

The command: "sudo ostree fsck" finds issues in layers. "sudo ostree --delete" is unable to repair them. It may have nothing to do with the issue. Maybe just circumstance.

antheas•8/14/24, 9:15 AM

Aug 12 15:49:46 localhost rpm-ostree[13779]: g_atomic_ref_count_dec: assertion 'old_value > 0' failed

antheas•8/14/24, 9:16 AM

Seems like the error is this

antheas•8/14/24, 9:16 AM

This is emitted by rpm ostree so we should be able to find the line

IIvo The command: "sudo ostree fsck" finds issues in layers. "sudo ostree --delete" i...

antheas•8/14/24, 9:16 AM

Can you point to the file?

Aantheas Aug 12 15:49:46 localhost rpm-ostree[13779]: g_atomic_ref_count_dec: assertion '...

antheas•8/14/24, 9:17 AM

This causes the core dump

Ivo•8/14/24, 9:19 AM

Please explain. I am unsure what exactly I should do. (Just FYI I need to reinstall to be able to debug this further, tried to repair it and may have caused more issues in ostree. Just to be able to pinpoint it I would need to reinstall to make sure that I do not find other issues that I caused myself.)

Ivo•8/14/24, 9:20 AM

The github issue report is from an other user. I can confirm I had the same issue.

antheas•8/14/24, 9:23 AM

Can you get some extra errors from ostree fsck?

antheas•8/14/24, 9:23 AM

Probably rpm-ostree dying caused this

Ivo•8/14/24, 9:28 AM

Yes, that is what I also believe. My working theory is that ostree + rechunks have one bug. Our malloc finds this issue. Nobody else sees it because everyone else uses the glic malloc instead of hardened_malloc. It is possible that we are affected because our malloc does not like memory corruption. It causes rpm ostree to crash. But that may also mean that ostree or rechunks have an issue that nobody else sees.

Ivo•8/14/24, 9:29 AM

I will try to debug this again in a few hours and report back. I am busy right now.

antheas•8/14/24, 9:29 AM

as part of rechunk i replace some rpm-ostree files to make space

antheas•8/14/24, 9:29 AM

they never seemed to have made an issue with layering

antheas•8/14/24, 9:29 AM

but perhaps they do

antheas•8/14/24, 9:30 AM

https://github.com/hhd-dev/rechunk/blob/e46fb40a61366795e65a1ac7411799515294c98a/1_prune.sh#L157 it is this line over here

Ivo•8/14/24, 9:32 AM

If you want to test this for yourself you may deploy our "cosmic-main-userns-hardened" image from https://github.com/secureblue/secureblue?tab=readme-ov-file#installation - I can give you logs later.

GitHub

GitHub - secureblue/secureblue: Fedora Atomic images for GNOME, KDE...

Fedora Atomic images for GNOME, KDE Plasma, Bluefin, Sway, Cinnamon, Wayfire, River, and Hyprland with some hardening applied - secureblue/secureblue

Ivo•8/14/24, 9:33 AM

The important part seems to be the hardened_malloc + rechunks. This is a bit over my head. I only see the issue but do not know how to fix it.

Ivo•8/14/24, 9:34 AM

Also do we want to move this discussion somewhere else if it is more pinpointed? I would open an issue report but I do not know where yet.

antheas•8/14/24, 9:36 AM

time to brick my vm

Ivo•8/14/24, 9:36 AM

I do not believe that hardened_malloc is the issue. Because our non rechunked images work fine. And hardened_malloc just enforces certain malloc related rules.

IIvo Also do we want to move this discussion somewhere else if it is more pinpointed?...

fiftydinar•8/14/24, 9:38 AM

You can make a Discord thread to make discussion in 1 place

antheas•8/14/24, 9:39 AM

for some reason i apepar to have ran out of ram so i cant start my vm

antheas•8/14/24, 9:39 AM

and im too bothered to reboot it seems

Ffiftydinar You can make a Discord thread to make discussion in 1 place

Ivo•8/14/24, 9:40 AM

IS this only possible for new messages or can I mark and move the already send messages to a thread?

antheas•8/14/24, 9:40 AM

7 day vivaldi memory leak goes brrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr

IIvo IS this only possible for new messages or can I mark and move the already send m...

fiftydinar•8/14/24, 9:40 AM

I'm not sure if messages can be moved

Aantheas time to brick my vm

Ivo•8/14/24, 9:48 AM

You can just post further messages to our issue report here: https://github.com/secureblue/secureblue/issues/369 - It is the simplest solution until we know more. Thank you for taking time to debug this

GitHub

[BUG] rpm-ostree can't deploy on Cosmic images · Issue #369 · secur...

Describe the bug On the cosmic-main-hardened and cosmic-main-userns-hardened images (and probably nvidia images too), rpm-ostree can't write new deployments. Attempting to install or uninstall ...

probably better to post in #🍪custom-image-support , also oot you got fortinet working in atomic fed

Similar Threads

Similar Threads

Similar Threads