You can just post further messages to our issue report here: https://github.com/secureblue/secureblu

You can just post further messages to our issue report here: https://github.com/secureblue/secureblue/issues/369 - It is the simplest solution until we know more. Thank you for taking time to debug this

GitHub

[BUG] rpm-ostree can't deploy on Cosmic images · Issue #369 · secur...

Describe the bug On the cosmic-main-hardened and cosmic-main-userns-hardened images (and probably nvidia images too), rpm-ostree can't write new deployments. Attempting to install or uninstall ...

IIvo You can just post further messages to our issue report here: https://github.com/...

antheas•8/14/24, 9:48 AM

give me a rebase command

antheas•8/14/24, 9:48 AM

am confused

antheas•8/14/24, 9:49 AM

im rebasing to his image

Aantheas im rebasing to his image

IvoOP•8/14/24, 9:52 AM

you want to follow the instructions here: https://github.com/secureblue/secureblue?tab=readme-ov-file#rebasing-recommended - and append "cosmic-main-userns-hardened" in the command

GitHub

GitHub - secureblue/secureblue: Fedora Atomic images for GNOME, KDE...

Fedora Atomic images for GNOME, KDE Plasma, Bluefin, Sway, Cinnamon, Wayfire, River, and Hyprland with some hardening applied - secureblue/secureblue

antheas•8/14/24, 9:52 AM

i will point out that we might have slight CAP issues with rechunk

antheas•8/14/24, 9:52 AM

so you might need to do some AB testing of the images

antheas•8/14/24, 9:53 AM

i can give you a command that will spit the differences between t2 images

IvoOP•8/14/24, 9:53 AM

Sounds good.

IvoOP•8/14/24, 9:56 AM

You may need to wait until a new image is build to see the issue for yourself. If you rebase now you can not upgrade to a newer version. And the issue is only caused in rpm-ostree operations with hardened_malloc. You may not see any issue before the conditions are met. Conditions: rechunks + hardened_malloc + sys upgrade available

IvoOP•8/14/24, 9:57 AM

I can ask our main dev to force a rebuild after you have deployed the image to speed up this process.

IvoOP•8/14/24, 9:57 AM

Just let me know

IIvo I can ask our main dev to force a rebuild after you have deployed the image to s...

antheas•8/14/24, 9:59 AM

i can rebase to second to oldest

antheas•8/14/24, 9:59 AM

image

antheas•8/14/24, 9:59 AM

well it dont boot

antheas•8/14/24, 9:59 AM

god damn it cosmic

antheas•8/14/24, 10:00 AM

anyway

IvoOP•8/14/24, 10:01 AM

"cosmic-session" in terminal, only the newest build works fine on my end

antheas•8/14/24, 10:02 AM

yeah well cosmic

antheas•8/14/24, 10:02 AM

rust

antheas•8/14/24, 10:02 AM

it is what it is

antheas•8/14/24, 10:02 AM

rebasing to silverblue from cosmic

antheas•8/14/24, 10:11 AM

booting silverblue

Aantheas booting silverblue

IvoOP•8/14/24, 10:13 AM

You may try to rebase to my variant of cosmic instead: https://github.com/idnovic/secureblue-extended - It is based on the other image you just tried.

GitHub

GitHub - idnovic/secureblue-extended: Based on secureblue and exten...

Based on secureblue and extended with opinionated layered packages - idnovic/secureblue-extended

IIvo You may try to rebase to my variant of cosmic instead: https://github.com/idnovi...

antheas•8/14/24, 10:13 AM

https://github.com/secureblue/secureblue/pkgs/container/silverblue-main-userns-hardened/versions?filters%5Bversion_type%5D=tagged

GitHub

Build software better, together

GitHub is where people build software. More than 100 million people use GitHub to discover, fork, and contribute to over 420 million projects.

antheas•8/14/24, 10:14 AM

whats going on in here

antheas•8/14/24, 10:14 AM

where are the tags

IvoOP•8/14/24, 10:18 AM

Sorry I am not that familiar with the build process. We use blue build. I will investigate on the tags.

antheas•8/14/24, 10:20 AM

i cant even rebase to your image because of the dumb container policy

antheas•8/14/24, 10:20 AM

ok wrote the policy by hand

IvoOP•8/14/24, 10:23 AM

Yes I am aware. This is something I want to change. It is on my todo.

antheas•8/14/24, 10:23 AM

its doing stuff

antheas•8/14/24, 10:24 AM

ok its about to stage

antheas•8/14/24, 10:24 AM

and it crashed

IvoOP•8/14/24, 10:25 AM

What base are you rebasing from ? silverblue hardened?

antheas•8/14/24, 10:25 AM

yes

IvoOP•8/14/24, 10:26 AM

OK. You found the github thread. I posted a suggestion on how to change the malloc implementation at the top. Try the "light" variant. This may allow the rebase.

antheas•8/14/24, 10:27 AM

no its good

antheas•8/14/24, 10:27 AM

i found the error

antheas•8/14/24, 10:27 AM

happens during ostree staging the commit

IvoOP•8/14/24, 10:28 AM

OK. Can you pinpoint it? Is our build process responsible or what?

antheas•8/14/24, 10:29 AM

seems like the error about the assertion is the only one

IvoOP•8/14/24, 10:31 AM

You can try the light variant of our malloc, This may cause the issue to disappear. The normal variant enforces more malloc rules.

antheas•8/14/24, 10:32 AM

staging deployment... done

antheas•8/14/24, 10:32 AM

its after that

IvoOP•8/14/24, 10:34 AM

I tried to preppend debug environment variables for rpm-ostree but it did not tell me more useful information. Tell me if you need something. I do not know how to debug this further

antheas•8/14/24, 10:37 AM

would be good to have a coredump

Aantheas would be good to have a coredump