You need to change the 3 files here to reenable it: https://github.com/search?q=repo%3Asecureblue%2F

You need to change the 3 files here to reenable it: https://github.com/search?q=repo%3Asecureblue%2Fsecureblue%20coredump&type=code

GitHub

Build software better, together

GitHub is where people build software. More than 100 million people use GitHub to discover, fork, and contribute to over 420 million projects.

IIvo You need to change the 3 files here to reenable it: https://github.com/search?q=...

antheas•8/14/24, 10:44 AM

cant get a core dump still

antheas•8/14/24, 10:44 AM

in dmesg

IvoOP•8/14/24, 10:45 AM

Just edit this file https://github.com/secureblue/secureblue/blob/live/files/system/etc/sysctl.d/hardening.conf

GitHub

secureblue/files/system/etc/sysctl.d/hardening.conf at live · secur...

Fedora Atomic images for GNOME, KDE Plasma, Bluefin, Sway, Cinnamon, Wayfire, River, and Hyprland with some hardening applied - secureblue/secureblue

IvoOP•8/14/24, 10:45 AM

Disable core dump

kernel.core_pattern = |/bin/false

fiftydinar•8/14/24, 10:58 AM

Those 2 need to be modified also

https://github.com/secureblue/secureblue/blob/live/files/system/etc/systemd/system.conf.d/disable-coredump.conf
https://github.com/secureblue/secureblue/blob/live/files/system/etc/systemd/user.conf.d/disable-coredump.conf

fiftydinar•8/14/24, 10:58 AM

I think that deleting the file won't do anything, since file in /usr/etc//usr/etc/ will take the advantage

IvoOP•8/14/24, 11:00 AM

ok then edit /etc/sysctl.d/hardening.conf and change the kernel.core_pattern line to

 kernel.core_pattern = |/usr/lib/systemd/systemd-coredump %P %u %g %s %t %c %h

 kernel.core_pattern = |/usr/lib/systemd/systemd-coredump %P %u %g %s %t %c %h

fiftydinar•8/14/24, 11:01 AM

This one is the default for me:

gidro@gidro-fedora:~$ sysctl kernel.core_pattern
kernel.core_pattern = |/usr/lib/systemd/systemd-coredump %P %u %g %s %t %c %h

gidro@gidro-fedora:~$ sysctl kernel.core_pattern
kernel.core_pattern = |/usr/lib/systemd/systemd-coredump %P %u %g %s %t %c %h

IvoOP•8/14/24, 11:03 AM

I see, I will add a command to reenable debugging on our images in a few days. Just to simplify this process in the future.

Ffiftydinar Those 2 need to be modified also https://github.com/secureblue/secureblue/blob/...

antheas•8/14/24, 11:28 AM

i echo '' | sudo teeecho '' | sudo teed

antheas•8/14/24, 12:25 PM

antheas•8/14/24, 12:25 PM

https://tenor.com/view/chuckles-im-in-danger-ralph-wiggum-the-simpsons-gif-14149962

Tenor

antheas•8/14/24, 12:26 PM

if there is a file left afterwards it will be a miracle

antheas•8/14/24, 12:30 PM

its still going at 36%

antheas•8/14/24, 1:02 PM

it appears that 1/3 of the files in my VM were corrupted

antheas•8/14/24, 1:02 PM

i did do cursed stuff with it such as mounting the drive tho

j0rge•8/14/24, 1:02 PM

ya'll need to thread stuff like this, otherwise we'll lose it in the ether

j0rge•8/14/24, 1:03 PM

and/or start a rechunk channel

antheas•8/14/24, 1:03 PM

theres are parallel github issue on secureblue

antheas•8/14/24, 1:03 PM

thats cleaner

IvoOP•8/14/24, 1:34 PM

Sorry for the spam. I will start a thread next time. I was not aware that this is possible

fiftydinar•8/14/24, 1:54 PM

@antheas I think that guy in Rechunk issue uses dnf5 to install packages, as he symlinks it to

dnf

dnf

fiftydinar•8/14/24, 1:54 PM

I don't know how much is that clean

Ffiftydinar @antheas I think that guy in Rechunk issue uses dnf5 to install packages, as he ...

Kyle Gospo•8/14/24, 2:01 PM

What the fuck

antheas•8/14/24, 2:08 PM

It's a Chad move

Aantheas It's a Chad move

fiftydinar•8/14/24, 2:22 PM

It builds successfully in my image using this method, but I wonder how much is it broken

he disables selinux after all

Ffiftydinar It builds successfully in my image using this method, but I wonder how much is i...

Kyle Gospo•8/14/24, 2:24 PM

I'm thinking closed won't fix

KKyle Gospo I'm thinking closed won't fix

fiftydinar•8/14/24, 2:49 PM

well, the system booted without errors in VM

Don't have sealert or setroubleshooter to analyze if there are some SELinux errors

fiftydinar•8/14/24, 2:49 PM

But I rebased from the existing install, didn't use the ISO method

Ffiftydinar It builds successfully in my image using this method, but I wonder how much is i...

antheas•8/14/24, 2:51 PM

He's fixing it

antheas•8/14/24, 2:51 PM

After all he was using cosmic the OCI way

fiftydinar•8/14/24, 4:20 PM

Just testing install of Steam RPM:

rpm-ostree

rpm-ostree

& dnf5dnf5 handle it the same way, 183 packages to install & they both install it successfully

fiftydinar•8/14/24, 4:20 PM

at least how it looks like in logs

j0rge•8/14/24, 7:06 PM

https://dl.fedoraproject.org/pub/fedora/linux/development/41/

j0rge•8/14/24, 7:06 PM

IT HAS BEGUN

Jj0rge IT HAS BEGUN

Noel•8/14/24, 7:09 PM

I thought we were done Jorge...

j0rge•8/14/24, 7:09 PM

we are done

j0rge•8/14/24, 7:09 PM

only maintenance remains

Jj0rge we are done

Noel•8/14/24, 7:10 PM

true true true

tryhardsoccermomswag•8/14/24, 8:12 PM

Jj0rge only maintenance remains

fiftydinar•8/14/24, 8:23 PM

maintenance is 80% of the work according to some researches

Ttryhardsoccermomswag Empty message

Noel•8/14/24, 8:24 PM

someone probably has archived an even earlier version of this.

Robert•8/14/24, 11:20 PM

GitHub's pulled the plug again

Robert•8/14/24, 11:24 PM

100% of their services offline

Robert•8/14/24, 11:29 PM

You gotta respect the tactic. Their GHA SLA for enterprise customers is based on number of workflows that fail.
Workflows can't fail if you can't invoke them through commits or the API to begin with

And you can't even see their SLA right now

https://github.com/customer-terms

Robert•8/14/24, 11:37 PM

That latest Cosmic issue...

Users who do not want to use the base Flatpaks can do so by simply basing a custom image off Cosmic. They do not inherit the ISO from us.
Also could have explained what the real issue was.

j0rge•8/14/24, 11:38 PM

sorry just wasn't in the mood for the lip

Jj0rge sorry just wasn't in the mood for the lip

Robert•8/14/24, 11:39 PM

All good. Just another instance of you can't please everyone.

j0rge•8/14/24, 11:40 PM

it's always the most opinionated experts talking down to everyone else that get their ass kicked by a dockerfile lol

j0rge•8/14/24, 11:40 PM

https://www.heliumos.org/

HeliumOS

HeliumOS is an atomic desktop operating system for your devices.

You need to change the 3 files here to reenable it: https://github.com/search?q=repo%3Asecureblue%2F

Disable core dump

Similar Threads

Similar Threads

Disable core dump

Similar Threads