Universal Blue•8mo ago

@tulip🌷 do you know the best way to change the selinux context of uupd? Do we need to add a policy

@tulip

do you know the best way to change the selinux context of uupd? Do we need to add a policy file?

GGerblesh @tulip🌷 do you know the best way to change the selinux context of uupd? Do we n...

tulip•4/29/25, 3:05 AM

i think we can do something on the spec

tulip•4/29/25, 3:05 AM

maybe a selinux policy?

GerbleshOP•4/29/25, 3:05 AM

yeah idk how to do that

tulip•4/29/25, 3:05 AM

same

GerbleshOP•4/29/25, 3:06 AM

https://src.fedoraproject.org/rpms/greetd/blob/rawhide/f/greetd.spec

GerbleshOP•4/29/25, 3:07 AM

good old greetd

GerbleshOP•4/29/25, 3:07 AM

https://src.fedoraproject.org/rpms/greetd/blob/rawhide/f/greetd.fc

GerbleshOP•4/29/25, 3:14 AM

ok this is kinda jank but workable

GerbleshOP•4/29/25, 6:51 AM

https://fedoraproject.org/wiki/SELinux/IndependentPolicy

IndependentPolicy

GGerblesh https://fedoraproject.org/wiki/SELinux/IndependentPolicy

fiftydinar•4/29/25, 7:05 AM

good proposal

RRoyalOughtness what's Rstudio?

Amy•4/29/25, 7:24 AM

Just the name of the distrobox

Amy•4/29/25, 7:25 AM

Distrobox as a whole wasn’t working when there’s no /etc/hostname for some people (including me for some reason)

89luca89•4/29/25, 1:51 PM

/etc/hostname

/etc/hostname

is mounted in

distrobox-create

distrobox-create

here: https://github.com/89luca89/distrobox/blob/3b9f0e8d3d8bd102e1636a22afffafe00777d30b/distrobox-create#L908

it seems strange that we have a distro without

/etc/hostname

/etc/hostname

given that it's going to be used by

glibc

glibc

gethostname()

gethostname()

j0rge•4/29/25, 1:53 PM

I just work here.

[

[[xenofembutch]]•4/29/25, 2:08 PM

I could be completely behind on this, but a preliminary search hasn't turned up anything so I figured I'd ask --- are there any plans for an Asahi universal blue image? idk if the github ARM runners are out

M2•4/29/25, 2:12 PM

I think general arm will be first.

But the asahi kinoite image that timothee made can install but is not user friendly

AAmy Distrobox as a whole wasn’t working when there’s no /etc/hostname for some peopl...

89luca89•4/29/25, 2:23 PM

if you use with a custom hostname

--hostname foo

--hostname foo

then the mount is skipped, which means even if

/etc/hostname

/etc/hostname

is missing, that won't bother the container

MM2 I think general arm will be first. But the asahi kinoite image that timothee ma...

[

[[xenofembutch]]•4/29/25, 2:23 PM

Not user-friendly how?

[

[[xenofembutch]]•4/29/25, 2:23 PM

If all it takes is some extensive amount of setup, then I'm willing to go with it. But if it's unstable or broken in some way, then of course I'll just go with regular asahi

Niklas ⚡•4/29/25, 2:25 PM

Theres currently no defined way that I know of on how to get the OS installed on your system correctly

NNiklas ⚡Theres currently no defined way that I know of on how to get the OS installed on...

[

[[xenofembutch]]•4/29/25, 2:35 PM

Ah, lol

M2•4/29/25, 3:45 PM

https://github.com/ublue-os/main/pull/770

@bsherman @Robert

M2•4/29/25, 3:47 PM

Additionally, while I like the digests right now.... Timothee's builds get garbage collected since he doesn't increment the version on a mid day rebuild.

MM2 Additionally, while I like the digests right now.... Timothee's builds get garba...

Robert•4/29/25, 3:48 PM

Yeah. This has been raised, and there's a plan to resolve it.
Renovate picks up on new digests anyway, so builds won't be broken for long

M2•4/29/25, 3:48 PM

mostly annoying during the PR having to merge main in multiple times

Ffiftydinar Gnome Software started nagging about updates since G48 https://gitlab.gnome.org...

fiftydinar•4/29/25, 3:53 PM

@j0rge This issue of mine was just fixed, next release of Gnome Software will include the fix
thanks to the maintainer for quick response & fix

https://gitlab.gnome.org/GNOME/gnome-software/-/merge_requests/2259

fiftydinar•4/29/25, 3:54 PM

I see the milestone is for 49.alpha version, but I believe they will backport this fix

Ffiftydinar I see the milestone is for 49.alpha version, but I believe they will backport th...

j0rge•4/29/25, 3:57 PM

amazing thanks for tracking this!

RRobert Yeah. This has been raised, and there's a plan to resolve it. Renovate picks ...

M2•4/29/25, 4:12 PM

Yeah. It's not too bad. Just need to know what's happening.

And it's not an actual issue most of the time

j0rge•4/29/25, 4:13 PM

ideally I'm asleep!

GerbleshOP•4/29/25, 4:24 PM

[Unit]
Description=Universal Blue Update Oneshot Service

[Service]
Type=oneshot
ExecStart=/usr/bin/uupd --log-level debug --json --hw-check
SELinuxContext=system_u:unconfined_r:unconfined_t:s0

[Unit]
Description=Universal Blue Update Oneshot Service

[Service]
Type=oneshot
ExecStart=/usr/bin/uupd --log-level debug --json --hw-check
SELinuxContext=system_u:unconfined_r:unconfined_t:s0

GerbleshOP•4/29/25, 4:24 PM

I think this works for uupduupd

GerbleshOP•4/29/25, 4:24 PM

better than setting the selinux context, since everything works from shell just fine

GerbleshOP•4/29/25, 4:33 PM

https://github.com/ublue-os/uupd/pull/74