Re: Configuring LXC containers

[Patrick O'Callaghan]

On Mon, 2024-03-11 at 15:08 -0700, Mike Wright wrote:
> Try this ( works with lxc.apparmor.context ).
> 
> lxc.selinux.context = generated
> 

Same result.

> ...and also ~/.local/lxc/default.conf with these contents:
> 
> lxc.include = /etc/lxc/default.conf

The local default.conf was copied from /etc/lxc and edited.

> lxc.idmap = u 0 10 65536
> lxc.idmap = g 0 10 65536
> 

Those lines are already there. This is the complete file:

$ cat ~/.config/lxc/default.conf
lxc.net.0.type = veth
lxc.net.0.link = lxcbr0
lxc.net.0.flags = up
lxc.net.0.hwaddr = 00:16:3e:xx:xx:xx
lxc.idmap = u 0 10 65536
lxc.idmap = g 0 10 65536
lxc.cgroup.devices.allow=a
lxc.selinux.context = generated

poc
--
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Re: Configuring LXC containers

[Mike Wright]

On 3/11/24 14:41, Patrick O'Callaghan wrote:

On Sun, 2024-03-10 at 16:39 +, Patrick O'Callaghan wrote:

I'd like to play with LXC but I find the docs not very newbie-
friendly.
I'm trying to follow a guide at:

https://brandonrozek.com/blog/lxc-fedora-38/

(basically because it mentions Fedora). I followed the steps closely
and rebooted, but I get the following error:

    $ systemd-run --unit=my-unit --user --scope -p "Delegate=yes" --
lxc-start test
    Running scope as unit: my-unit.scope
    lxc-start: test: lxccontainer.c: wait_on_daemonized_start: 877
Received container state "ABORTING" instead of "RUNNING"
    lxc-start: test: tools/lxc_start.c: main: 306 The container failed
to start
    lxc-start: test: tools/lxc_start.c: main: 309 To get more details,
run the container in foreground mode
    lxc-start: test: tools/lxc_start.c: main: 311 Additional
information can be obtained by setting the --logfile and --
logpriority options

Any insights would be welcome. (Just in case, I tried running with

SElinux turned off, but it made no difference.)


One thing: on running lxc-checkconfig I get:
...
Cgroup v1 systemd controller: missing
Cgroup v1 freezer controller: missing
Cgroup ns_cgroup: required


I get the same results over here.  The first two are irrelevant since 
current systems are using v2.


I don't know if ns_required is a WARN or ERROR or a threat :)
--
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Re: Configuring LXC containers

[Mike Wright]

On 3/11/24 14:38, Patrick O'Callaghan wrote:
> On Mon, 2024-03-11 at 09:16 -0700, Mike Wright wrote:
>> On 3/11/24 08:41, Mike Wright wrote:
>>> On 3/11/24 04:33, Patrick O'Callaghan wrote:
 On Sun, 2024-03-10 at 22:56 -0700, Mike Wright wrote:
> On 3/10/24 15:40, Patrick O'Callaghan wrote:
>> On Sun, 2024-03-10 at 11:13 -0700, Mike Wright wrote:
>>> The last two lines are key.  Add these flags: -F -o
>>> logfile.  The
>>> default loglevel is ERROR.  If you want more detail include
>>> -l
>>> LEVEL.
>>>
>>
 AFAIK 'apparmor' is a Ubuntu-ism. Both my system and the system
 in the
 container are Fedora 39.
>>
>>> That one puzzles me, too.  However, there is no corresponding
>>> lxc.selinux setting.  lxc was a canonical/ubuntu creation so my
>>> first
>>> reaction was the same as yours but from some of the comments I've
>>> read
>>> on https://discuss.linuxcontainers.org ( another forum with *lots*
>>> of
>>> empty space ) that it or something like it may have been integrated
>>> into
>>> lxc.
>>
>> CORRECTION: the above paragraph is wrong.
>>
>> A much easier to read manpage:
>>
>> 
https://manpages.ubuntu.com/manpages/bionic/en/man5/lxc.container.conf.5.html

>>
>
> This appears to the manpage at lxc-container.conf(5).

Yes, sans-serif is easier for me to read.  White BG (although I prefer 
dark theme) is also a lot better for me than white on black manpages.


>
>> § SELINUX CONTEXT
>>
>> lxc.selinux.context
>>
>> Specify the SELinux context under which the container should be run
>> or
>> unconfined_t. For example
>>
>>   lxc.selinux.context = system_u:system_r:lxc_t:s0:c22
>>
>
> I added that to the config file. It made no difference.

Try this ( works with lxc.apparmor.context ).

lxc.selinux.context = generated

...and also ~/.local/lxc/default.conf with these contents:

lxc.include = /etc/lxc/default.conf
lxc.idmap = u 0 10 65536
lxc.idmap = g 0 10 65536

That way the lxc.idmap lines are not required in each config.
--
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Re: Configuring LXC containers

[Patrick O'Callaghan]

On Sun, 2024-03-10 at 16:39 +, Patrick O'Callaghan wrote:
> I'd like to play with LXC but I find the docs not very newbie-
> friendly.
> I'm trying to follow a guide at:
> 
> https://brandonrozek.com/blog/lxc-fedora-38/
> 
> (basically because it mentions Fedora). I followed the steps closely
> and rebooted, but I get the following error:
> 
>    $ systemd-run --unit=my-unit --user --scope -p "Delegate=yes" --
> lxc-start test
>    Running scope as unit: my-unit.scope
>    lxc-start: test: lxccontainer.c: wait_on_daemonized_start: 877
> Received container state "ABORTING" instead of "RUNNING"
>    lxc-start: test: tools/lxc_start.c: main: 306 The container failed
> to start
>    lxc-start: test: tools/lxc_start.c: main: 309 To get more details,
> run the container in foreground mode
>    lxc-start: test: tools/lxc_start.c: main: 311 Additional
> information can be obtained by setting the --logfile and --
> logpriority options
>    
> Any insights would be welcome. (Just in case, I tried running with
> SElinux turned off, but it made no difference.)

One thing: on running lxc-checkconfig I get:
...
Cgroup v1 systemd controller: missing
Cgroup v1 freezer controller: missing
Cgroup ns_cgroup: required

...

(everything else is OK).

poc
--
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Re: Configuring LXC containers

[Patrick O'Callaghan]

On Mon, 2024-03-11 at 09:16 -0700, Mike Wright wrote:
> On 3/11/24 08:41, Mike Wright wrote:
> > On 3/11/24 04:33, Patrick O'Callaghan wrote:
> > > On Sun, 2024-03-10 at 22:56 -0700, Mike Wright wrote:
> > > > On 3/10/24 15:40, Patrick O'Callaghan wrote:
> > > > > On Sun, 2024-03-10 at 11:13 -0700, Mike Wright wrote:
> > > > > > The last two lines are key.  Add these flags: -F -o
> > > > > > logfile.  The
> > > > > > default loglevel is ERROR.  If you want more detail include
> > > > > > -l
> > > > > > LEVEL.
> > > > > > 
> 
> > > AFAIK 'apparmor' is a Ubuntu-ism. Both my system and the system
> > > in the
> > > container are Fedora 39.
> 
> > That one puzzles me, too.  However, there is no corresponding 
> > lxc.selinux setting.  lxc was a canonical/ubuntu creation so my
> > first 
> > reaction was the same as yours but from some of the comments I've
> > read 
> > on https://discuss.linuxcontainers.org ( another forum with *lots*
> > of 
> > empty space ) that it or something like it may have been integrated
> > into 
> > lxc.
> 
> CORRECTION: the above paragraph is wrong.
> 
> A much easier to read manpage:
> 
> https://manpages.ubuntu.com/manpages/bionic/en/man5/lxc.container.conf.5.html
> 

This appears to the manpage at lxc-container.conf(5).

> § SELINUX CONTEXT
> 
> lxc.selinux.context
> 
> Specify the SELinux context under which the container should be run
> or
> unconfined_t. For example
> 
>  lxc.selinux.context = system_u:system_r:lxc_t:s0:c22
> 

I added that to the config file. It made no difference.

poc
--
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Re: port forwarding and RDP or ssh

[Alex]

Hi,

>
>> > $ ssh -X -i ~/.ssh/mykey-key.rsa -l gary remotehost -p 1024
>> > [gary@fedora ~]$ evolution
>> > (evolution:3644): GLib-GIO-WARNING **: 09:41:05.182: Your application
>> > did not unregister from D-Bus before destruction. Consider using
>> > g_application_run().
>>
>> That's not failing unless it comes back to the prompt.  How long did you
>> wait?  Is it already running for that user?
>>
>
I now have his PC with me on my local network, and commands executed
through ssh -X still display on his screen instead of mine.

>From his gnome-terminal on my PC:
[gary@fedora ~]$ echo $DISPLAY
localhost:10.0

How do I set the display for commands executed remotely to appear on my
screen?
--
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Re: ghost town

[Barry Scott]

> On 11 Mar 2024, at 14:32, Ranbir  wrote:
> 
>> The majority of user traffic is
>> on https://discussion.fedoraproject.org/ these days.
> 
> Is there proof of this that we could see?

Yes. Look at this page and you can see the number/week in each category.
For example the user help "Ask Fedora" topic is 88/week and "Project 
discussion" is 27/week.

This has been the level of messages for over a year at this point.

There are comments in this thread on the lines of "forums do X badly",
however the discussion forum software as used by Fedora, Gnome, Python etc
is better designed then the claimed faults I think.

Barry

--
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Re: ghost town

[Patrick O'Callaghan]

On Mon, 2024-03-11 at 10:32 -0400, Ranbir wrote:
> On Sun, 2024-03-10 at 09:50 +, Barry wrote:
> > 
> > The majority of user traffic is
> > on https://discussion.fedoraproject.org/ these days.
> 
> Is there proof of this that we could see?
> 

If you mean have I gathered statistics, then the answer is no. For one
thing, the Discourse forum is for all of Gnome, not just Evolution (in
fact I sometimes get posts on other topics I've no interest in). You
register interest in topics (it doesn't really have an exact equivalent
of threads) and then try to figure out the arcane configuration system
so as to limit traffic to those you're interested in. This is a PITA
and doesn't work well. However I've managed to do it and do see
everything related to Evolution on Discourse, plus of course the new
mailing list, and can confirm that in the last 5 days the Evo list has
received to date 23 messages and the Discourse "list" none.

> The web forum is OK. I find it tough to read. There's too much going
> on. Sometimes I just want to see what people are discussing, but it's
> harder to read the topic titles and I don't know why.

Poor design. That's it. I can't be bothered analysing what exactly is
wrong, but that's my take on it.

poc
--
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Re: Fora vs. mailing lists

[Joe Zeff]

On 03/11/2024 12:49 AM, Tim via users wrote:

Joe Zeff wrote (about web forums):

why don't you simply set as many of them as possible to email you
when there's a reply?

Have you noticed how many of them won't let you reply to an email
notification?  Essentially you get a "someone left you a message"
message, no details on what the message is, and no way to respond
without going to the website.


Yes, many times.  However, it's better than having to check in at every 
one of them over and over hoping for a response.

--
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Re: Configuring LXC containers

[Mike Wright]

On 3/11/24 08:41, Mike Wright wrote:

On 3/11/24 04:33, Patrick O'Callaghan wrote:

On Sun, 2024-03-10 at 22:56 -0700, Mike Wright wrote:

On 3/10/24 15:40, Patrick O'Callaghan wrote:

On Sun, 2024-03-10 at 11:13 -0700, Mike Wright wrote:

The last two lines are key.  Add these flags: -F -o logfile.  The
default loglevel is ERROR.  If you want more detail include -l
LEVEL.




AFAIK 'apparmor' is a Ubuntu-ism. Both my system and the system in the
container are Fedora 39.


That one puzzles me, too.  However, there is no corresponding 
lxc.selinux setting.  lxc was a canonical/ubuntu creation so my first 
reaction was the same as yours but from some of the comments I've read 
on https://discuss.linuxcontainers.org ( another forum with *lots* of 
empty space ) that it or something like it may have been integrated into 
lxc.


CORRECTION: the above paragraph is wrong.

A much easier to read manpage:

https://manpages.ubuntu.com/manpages/bionic/en/man5/lxc.container.conf.5.html

§ SELINUX CONTEXT

lxc.selinux.context

Specify the SELinux context under which the container should be run or
unconfined_t. For example

lxc.selinux.context = system_u:system_r:lxc_t:s0:c22
--
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Re: Configuring LXC containers

[Mike Wright]

On 3/11/24 04:33, Patrick O'Callaghan wrote:

On Sun, 2024-03-10 at 22:56 -0700, Mike Wright wrote:

On 3/10/24 15:40, Patrick O'Callaghan wrote:

On Sun, 2024-03-10 at 11:13 -0700, Mike Wright wrote:

The last two lines are key.  Add these flags: -F -o logfile.  The
default loglevel is ERROR.  If you want more detail include -l
LEVEL.

e.g. lxc-start -n containerName -F -o containerName.log -l WARN



This is what I get:

$ lxc-start -n test -F -o test.log -l WARN



$ cat test.log
lxc-start test 20240310223702.913 ERROR    cgfsng -
cgroups/cgfsng.c:__cgfsng_delegate_controllers:2921 - Device or
resource busy - Could not enable "+cpu +io +memory +pids"
controllers in the unified cgroup 9
lxc-start test 20240310223702.934 ERROR    cgfsng -
cgroups/cgfsng.c:__cgfsng_delegate_controllers:2921 - Device or
resource busy - Could not enable "+cpu +io +memory +pids"
controllers in the unified cgroup 9



I use this:

  lxc.apparmor.profile=unconfined

which runs the container as root.  That setting doesn't stop you from
adding profiles.




AFAIK 'apparmor' is a Ubuntu-ism. Both my system and the system in the
container are Fedora 39.
That one puzzles me, too.  However, there is no corresponding 
lxc.selinux setting.  lxc was a canonical/ubuntu creation so my first 
reaction was the same as yours but from some of the comments I've read 
on https://discuss.linuxcontainers.org ( another forum with *lots* of 
empty space ) that it or something like it may have been integrated into 
lxc.

--
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Re: ghost town

[Ranbir]

On Sun, 2024-03-10 at 09:50 +, Barry wrote:
> 
> The majority of user traffic is
> on https://discussion.fedoraproject.org/ these days.

Is there proof of this that we could see?

The web forum is OK. I find it tough to read. There's too much going
on. Sometimes I just want to see what people are discussing, but it's
harder to read the topic titles and I don't know why.

-- 
Ranbir
--
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Re: Fora vs. mailing lists

[Ranbir]

On Sun, 2024-03-10 at 11:40 -0500, Thomas Cameron wrote:
> 
> Am I the only one who feels this way? Has the day finally come where
> I'm 
> just old and set in my ways? Are there others who prefer mailing
> lists 
> to fora?
> 
> To be clear, I am not bashing fora, per se - I'm just saying that for
> me, they're not NEARLY as easy to deal with as email lists. If you
> like 
> fora, that's awesome. I'm not attacking you. Let's nip that in the
> bud. 
> I'm not looking for a flame war, just trying to see if other feel the
> same way. Let's keep it civil.

I agree with almost everything you've said with the exception of the
word "fora". But, that's neither here nor there.

I find mail lists are far, far easier to follow. I too look at them as
an opportunity to learn new things since I see every message. I miss
98% of the content on web forums.

The one thing web forums do make easier is conveying non-textual
information. But, that's not enough for me to want to use a web forum
over a mail list.

Web forums and mail lists are different and different goals.

-- 
Ranbir
--
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Re: Configuring LXC containers

[Patrick O'Callaghan]

On Sun, 2024-03-10 at 22:56 -0700, Mike Wright wrote:
> On 3/10/24 15:40, Patrick O'Callaghan wrote:
> > On Sun, 2024-03-10 at 11:13 -0700, Mike Wright wrote:
> > > The last two lines are key.  Add these flags: -F -o logfile.  The
> > > default loglevel is ERROR.  If you want more detail include -l
> > > LEVEL.
> > > 
> > > e.g. lxc-start -n containerName -F -o containerName.log -l WARN
> > > 
> > 
> > This is what I get:
> > 
> > $ lxc-start -n test -F -o test.log -l WARN
> 
> > $ cat test.log
> > lxc-start test 20240310223702.913 ERROR    cgfsng -
> > cgroups/cgfsng.c:__cgfsng_delegate_controllers:2921 - Device or
> > resource busy - Could not enable "+cpu +io +memory +pids"
> > controllers in the unified cgroup 9
> > lxc-start test 20240310223702.934 ERROR    cgfsng -
> > cgroups/cgfsng.c:__cgfsng_delegate_controllers:2921 - Device or
> > resource busy - Could not enable "+cpu +io +memory +pids"
> > controllers in the unified cgroup 9
> 
> 
> I use this:
> 
>  lxc.apparmor.profile=unconfined
> 
> which runs the container as root.  That setting doesn't stop you from
> adding profiles.
> 
> 

AFAIK 'apparmor' is a Ubuntu-ism. Both my system and the system in the
container are Fedora 39.

> If I disable that line I get a cgfsng WARN and the container won't 
> start. ( My containers are used for local services so I'm pretty lax 
> about running them as root. They are also heavily firewalled behind a
> router (also a container which starts the firewall then puts an IP on
> the WAN and sets the default route.  Until the router container comes
> up 
> my host has no network connectivity at all) )
> 
> Also, you're remapping IDs.  What happens if you comment those out?
> 

I thought that was part of the whole point of using separate
namespaces.

> My thought here is to get it running as root first then begin the 
> process of securing it as you see fit.
> 
> 
> I don't have this in my configs but I found this:
> 
>  lxc.cgroup.devices.allow=a
> 

I'll try that.

poc
--
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Re: Configuring LXC containers

[Patrick O'Callaghan]

On Sun, 2024-03-10 at 19:37 -0700, Mike Wright wrote:
> On 3/10/24 15:40, Patrick O'Callaghan wrote:
> > On Sun, 2024-03-10 at 11:13 -0700, Mike Wright wrote:
> > > The last two lines are key.  Add these flags: -F -o logfile.  The
> > > default loglevel is ERROR.  If you want more detail include -l
> > > LEVEL.
> > > 
> > > e.g. lxc-start -n containerName -F -o containerName.log -l WARN
> > > 
> > 
> > This is what I get:
> > 
> > $ lxc-start -n test -F -o test.log -l WARN
> ...
> > lxc-start test 20240310223702.945 ERROR    start -
> > start.c:print_top_failing_dir:99 - Permission denied - Could not
> > access /home/poc/.local. Please grant it x access, or add an ACL
> > for the container root
> 
> This one looks interesting
> 

$ ls -ld /home/poc/.local
drwx--. 1 poc poc 56 Aug 28  2021 /home/poc/.local

IOW, it already has x access (and lxc-start is not setuid so it's
running as me).

poc
--
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Re: Marble problem: libicui18n.so.69

[ToddAndMargo via users]

On 3/11/24 00:37, Samuel Sieb wrote:

On 3/11/24 00:12, ToddAndMargo via users wrote:

# ldd /bin/marble | sort
/bin/marble: /lib64/libQt5Gui.so.5: version `Qt_5.15.3_PRIVATE_API' 
not found (required by 
/usr/lib64/qt5-qtwebengine-freeworld/libQt5WebEngineCore.so.5)

 libicudata.so.69 => not found
 libicui18n.so.69 => not found
 libicuuc.so.69 => not found
 libvpx.so.7 => not found


This looks like a big clue and it's still pointing to F36 or F37.
Run the following:
rpm -qf /usr/lib64/qt5-qtwebengine-freeworld/libQt5WebEngineCore.so.5
rpm -qi qt5-qtwebengine-freeworld



# rpm -qf /usr/lib64/qt5-qtwebengine-freeworld/libQt5WebEngineCore.so.5
file /usr/lib64/qt5-qtwebengine-freeworld/libQt5WebEngineCore.so.5 is 
not owned by any package


# rpm -qi qt5-qtwebengine-freeworld
package qt5-qtwebengine-freeworld is not installed

# mv /usr/lib64/qt5-qtwebengine-freeworld/libQt5WebEngineCore.so.5 
/usr/lib64/qt5-qtwebengine-freeworld/libQt5WebEngineCore.so.5.000


$ marble
KCrash: Application 'marble' crashing...
Segmentation fault (core dumped)

I put it back


And:
   # dnf install qt5-qtwebengine-freeworld

fixed the issue.  Yippee!  Thank you all for all
the help!

-T
--
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Re: Marble problem: libicui18n.so.69

[Francis . Montagnac]

Hi.

On Mon, 11 Mar 2024 00:12:04 -0700 ToddAndMargo via users wrote:

> # ldd /bin/marble | sort

This sort may be confusing.

> /bin/marble: /lib64/libQt5Gui.so.5: version `Qt_5.15.3_PRIVATE_API' not 
> found (required by 
> /usr/lib64/qt5-qtwebengine-freeworld/libQt5WebEngineCore.so.5)

This lib is probably the culprit.

What RPM provides it ?

  rpm -qf /usr/lib64/qt5-qtwebengine-freeworld/libQt5WebEngineCore.so.

More generally, check that all the libs reported by ldd of marble are fc39
ones. For example with:

  rpm -qf $(ldd /usr/bin/marble \
| awk '/=>/ { print $3 }') \
| sort -u \
| grep -v fc39
  

-- 
francis
--
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Re: Marble problem: libicui18n.so.69

[Samuel Sieb]

On 3/11/24 00:12, ToddAndMargo via users wrote:

# ldd /bin/marble | sort
/bin/marble: /lib64/libQt5Gui.so.5: version `Qt_5.15.3_PRIVATE_API' not 
found (required by 
/usr/lib64/qt5-qtwebengine-freeworld/libQt5WebEngineCore.so.5)

 libicudata.so.69 => not found
 libicui18n.so.69 => not found
 libicuuc.so.69 => not found
 libvpx.so.7 => not found


This looks like a big clue and it's still pointing to F36 or F37.
Run the following:
rpm -qf /usr/lib64/qt5-qtwebengine-freeworld/libQt5WebEngineCore.so.5
rpm -qi qt5-qtwebengine-freeworld
--
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Re: Marble problem: libicui18n.so.69

[Jeffrey Walton]

On Mon, Mar 11, 2024 at 3:12 AM ToddAndMargo via users
 wrote:
>
>  [...]
> # rpm -qa | grep -i fc | grep -iv fc39
> gpg-pubkey-cfc659b9-5b6eac67
> bitstream-vera-sans-fonts-1.10-48.fc38.noarch
> netcdf-4.9.0-5.fc38.x86_64
> kernel-modules-core-6.5.10-200.fc38.x86_64
> kernel-core-6.5.10-200.fc38.x86_64
> kernel-modules-6.5.10-200.fc38.x86_64
> kernel-6.5.10-200.fc38.x86_64
> kernel-modules-extra-6.5.10-200.fc38.x86_64
> kernel-devel-6.5.10-200.fc38.x86_64

You should follow

when performing a release upgrade. The post-upgrade tasks will cleanup
the old packages.

Jeff
--
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Re: Fora vs. mailing lists

[Fernando Cassia]

On Sun, 10 Mar 2024, 13:40 Thomas Cameron, 
wrote:

>
> I hate using fora. I generally have to open a separate tab for each
> forum I'm on, and I'm on a LOT. And I have to go out of my way to even
> remember all the fora I am a member of. For those of us who are members
> of a bunch, it's kind of a beating - especially if you're an ADHD
> person, like me.
>

Yes, yes, yes, to everything you said.
*insert obligatory Jack Nicholson nodding "yes" GIF In slow motion*

>
Back in 2012 Sun Micro decided that web forums were the future and that the
mailing list for Virtualbox users would be shut down, leaving only the
developers mailing list. Their rationally or selling point was pure BS like
"today users don't like email and prefer Web based forums".

We staged a mini revolt on the mailing list until a concesus was reached
and Sun agreed to link from the official page to a community run mailing
list, which we created at sourceforge and which I admin to this day.

Sadly the volumen of messages has decreased over time but we still get a
few messages a week. And when a newbie appears with a question, the "old
gang" is there to reply - including a few ORCL devs-.

Sadly they seldom stay or post again after their support question is
answered. Maybe they unsubscribe after their problem is fixed. I haven't
checked.

Mailing lists were and are "communities", like a Citizens Band shared
channel or HAM radio.

Forums are more public support ticket systems. People come demanding
solutions to their problems and then leave. There isn't - for most people a
commitment to stay and participate in discussions to begin with. And the
nature of the posting and reading method encourages that. Email lands in
your inbox whether you like it or not.

More nodding in agreement follows below.


> I also love that I see interesting problems on mailing lists that I'd
> never thought of or dealt with, and it's right there, in the list's mail
> folder. I learn a LOT perusing those messages.



Yes. Same.

It's there, I can easily
> read through the threads when I get a minute. And I don't have to
> remember to fire up a new browser tab to parse them
>

Exactly.

*waves fist at cloud*

Cheers,
FC
--
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Re: Marble problem: libicui18n.so.69

[ToddAndMargo via users]

On 3/10/24 22:54, Samuel Sieb wrote:

On 3/10/24 22:28, ToddAndMargo via users wrote:

On 3/10/24 21:48, Samuel Sieb wrote:
I doubt the bug report will come up with anything since this is 
something very specific to your system.  



Do you have any packages 
from fc37?  


# rpm -qa | grep -i fc37



Do you have any locked packages?

I do not kow how to do that, so I'd have to say "no".


Have you installed any self-built packages?


No.  Amd it really annoys the Wine fplks that I insist obn
only using the wine builds from our repo.


You didn't answer these questions.


# rpm -qa | grep -i fc37


# rpm -qa | grep -i fc | grep -iv fc39
gpg-pubkey-cfc659b9-5b6eac67
bitstream-vera-sans-fonts-1.10-48.fc38.noarch
netcdf-4.9.0-5.fc38.x86_64
kernel-modules-core-6.5.10-200.fc38.x86_64
kernel-core-6.5.10-200.fc38.x86_64
kernel-modules-6.5.10-200.fc38.x86_64
kernel-6.5.10-200.fc38.x86_64
kernel-modules-extra-6.5.10-200.fc38.x86_64
kernel-devel-6.5.10-200.fc38.x86_64




Does "rpm -qf /lib64/*\.so* | grep owned" give you anything?
Mine only shows "p11-kit-trust.so".


  rpm -qf /lib64/*\.so* | grep owned
file /lib64/ld-lsb-x86-64.so is not owned by any package
file /lib64/libavahi-gobject.so.0 is not owned by any package
file /lib64/libavahi-gobject.so.0.0.5 is not owned by any package
file /lib64/libFAudio.so.0.22.10 is not owned by any package
file /lib64/libfreeaptx.so.0 is not owned by any package
file /lib64/libfreeaptx.so.0.1.1 is not owned by any package
file /lib64/libfzclient-commonui-private-3.66.0.so is not owned by any 
package

file /lib64/libfzclient-private-3.66.0.so is not owned by any package
file /lib64/libgdal.so.33.3.7.2 is not owned by any package
file /lib64/libgovirt.so.2 is not owned by any package
file /lib64/libgovirt.so.2.3.1 is not owned by any package
file /lib64/libhpdiscovery.so.0 is not owned by any package
file /lib64/libhpdiscovery.so.0.0.1 is not owned by any package
file /lib64/libhpipp.so.0 is not owned by any package
file /lib64/libhpipp.so.0.0.1 is not owned by any package
file /lib64/libhpip.so.0 is not owned by any package
file /lib64/libhpip.so.0.0.1 is not owned by any package
file /lib64/libhpmud.so.0 is not owned by any package
file /lib64/libhpmud.so.0.0.6 is not owned by any package
file /lib64/libnetsnmp.so.40.1.0 is not owned by any package
file /lib64/libopenfec.so.1 is not owned by any package
file /lib64/libopenfec.so.1.4.2 is not owned by any package
file /lib64/libopensc.so.8 is not owned by any package
file /lib64/libopensc.so.8.0.0 is not owned by any package
file /lib64/libpipewire-0.3.so.0.361.0 is not owned by any package
file /lib64/libpipewire-0.3.so.0.372.0 is not owned by any package
file /lib64/libroc.so.0 is not owned by any package
file /lib64/libroc.so.0.2 is not owned by any package
file /lib64/libSDL2_image-2.0.so.0.600.1 is not owned by any package
file /lib64/libsmm-local.so.8 is not owned by any package
file /lib64/libsmm-local.so.8.0.0 is not owned by any package
file /lib64/onepin-opensc-pkcs11.so is not owned by any package
file /lib64/opensc-pkcs11.so is not owned by any package
file /lib64/p11-kit-trust.so is not owned by any package
file /lib64/pkcs11-spy.so is not owned by any package


You probably need to get rid of these.  Check the dates on the files with:
ls -l $(rpm -qf /lib64/*\.so* | grep owned | cut -d' ' -f2)


I am thinking of moving them to a tempt directory and seeing
if anything complains


What does "ldd /bin/marble | grep libicu" show?


# ldd /bin/marble | grep libic
 libicui18n.so.73 => /lib64/libicui18n.so.73 (0x7fdf3960)
 libicuuc.so.73 => /lib64/libicuuc.so.73 (0x7fdf3920)
 libicudata.so.73 => /lib64/libicudata.so.73 (0x7fdf2e00)
 libicui18n.so.69 => not found
 libicuuc.so.69 => not found
 libicudata.so.69 => not found


Ok, then show the whole output of "ldd /bin/marble".


# find / -iname libicui18n.so.69\*


# ldd /bin/marble | grep -i libicui
libicui18n.so.73 => /lib64/libicui18n.so.73 (0x7f93f700)
libicui18n.so.69 => not found

# ldd /bin/marble | sort
/bin/marble: /lib64/libQt5Gui.so.5: version `Qt_5.15.3_PRIVATE_API' not 
found (required by 
/usr/lib64/qt5-qtwebengine-freeworld/libQt5WebEngineCore.so.5)

/lib64/ld-linux-x86-64.so.2 (0x7f1d3b6bf000)
libacl.so.1 => /lib64/libacl.so.1 (0x7f1d37d4e000)
libasound.so.2 => /lib64/libasound.so.2 (0x7f1d2bf46000)
libastro.so.1 => /lib64/libastro.so.1 (0x7f1d3a7bd000)
libasyncns.so.0 => /lib64/libasyncns.so.0 (0x7f1d2b845000)
libattr.so.1 => /lib64/libattr.so.1 (0x7f1d2bdcd000)
libblkid.so.1 => /lib64/libblkid.so.1 (0x7f1d2bd91000)
libbrotlicommon.so.1 => /lib64/libbrotlicommon.so.1 (0x7f1d2b6b5000)
libbrotlidec.so.1 => /lib64/libbrotlidec.so.1 (0x7f1d2ba5c000)
libbz2.so.1 => /lib64/libbz2.so.1 (0x7f1d2bdd5000)
libcap.so.2 => /lib64/libcap.so.2 (0x7f1d2eebf000)
   

Re: Fora vs. mailing lists

[Tim via users]

On Sun, 2024-03-10 at 22:29 +, Patrick O'Callaghan wrote:
> It shortly became clear that the user experience of interacting with
> Discourse via email was significantly worse than a traditional mailing
> list, so a bunch of us set up a new list
> (evolution-us...@lists.osuosl.org) where we continue on our merry way.
> The Discourse instance still exists (the two mechanisms are entirely
> separate with no cross-posting between them), but traffic on the
> mailing list is noticeably greater than on the forum, which I think
> says something.

Actually, I always preferred usenet/newsgroups to any of these.  It was
a vastly superior way of handling lots of messages, threads, and
different groups.  But one problem was that so many people access them
through a very badly designed email client that didn't do news properly
(Outlook).

Two large problems with the quick-to-use schemes (typically web forums)
was that you (a) still don't avoid 100 people asking the same question
(they don't read FAQs, and many FAQ collections are hideous to use),
and (b) they don't stick around and contribute as their skill levels
improve.  It's hit and run, 100 times over.


-- 
 
uname -rsvp
Linux 3.10.0-1160.108.1.el7.x86_64 #1 SMP Thu Jan 25 16:17:31 UTC 2024 x86_64
 
Boilerplate:  All unexpected mail to my mailbox is automatically deleted.
I will only get to see the messages that are posted to the mailing list.
 
--
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Re: Fora vs. mailing lists

[Tim via users]

Joe Zeff wrote (about web forums):
> why don't you simply set as many of them as possible to email you 
> when there's a reply?

Have you noticed how many of them won't let you reply to an email
notification?  Essentially you get a "someone left you a message"
message, no details on what the message is, and no way to respond
without going to the website.
 
-- 
 
uname -rsvp
Linux 3.10.0-1160.108.1.el7.x86_64 #1 SMP Thu Jan 25 16:17:31 UTC 2024 x86_64
 
Boilerplate:  All unexpected mail to my mailbox is automatically deleted.
I will only get to see the messages that are posted to the mailing list.
 
--
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Re: Fora vs. mailing lists

[Tim via users]

On Sun, 2024-03-10 at 11:32 -0700, Kevin Fenzi wrote:
> However, realize that you spend a long time setting all that up.
> The subscriptions, filtering, how things look in your email client, etc. 
> For someone new or just wanting to ask a question or two, lists are
> horrible.

I say forums aren't that much better.  Have you seen reddit?

If you google a "how do I?" question, invariably reddit is the
response, with some awfully crap information, and dozens of unrelated
things.
 
-- 
 
uname -rsvp
Linux 3.10.0-1160.108.1.el7.x86_64 #1 SMP Thu Jan 25 16:17:31 UTC 2024 x86_64
 
Boilerplate:  All unexpected mail to my mailbox is automatically deleted.
I will only get to see the messages that are posted to the mailing list.
 
--
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Re: Fora vs. mailing lists

[Tim via users]

Thomas Cameron:
>> I hate using fora. I generally have to open a separate tab for each 
>> forum I'm on, and I'm on a LOT.

Joe Zeff:
> Why keep a separate tab for each forum open at all times?  How many of 
> them do you actually need to look at each day?

Firstly, I thoroughly agree with all of Thomas's points from his
opening message.

At one stage, I was on about 11 different (technical) mailing lists. 

It's less now, but even having to go to a few different sites to see
what's going on, and tediously reply back in their nearly always badly
designed form, is something I refuse to do.  Not to mention they rarely
allow you to save a draft, to work on a message that takes time to
compile.  Forcing to use an external editor for such things.  And then
you find you can't post something because you typed some < or > symbols
in and their HTML message handler is crap.

Facebook is the only web forum I participate in, and only because it
can't be done in another way, and only because friends kept on dragging
me into the damn thing. It's such a massive time-waster.
 
-- 
 
uname -rsvp
Linux 3.10.0-1160.108.1.el7.x86_64 #1 SMP Thu Jan 25 16:17:31 UTC 2024 x86_64
 
Boilerplate:  All unexpected mail to my mailbox is automatically deleted.
I will only get to see the messages that are posted to the mailing list.
 
--
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Re: Fora vs. mailing lists

[M. Fioretti]

On Sun, Mar 10, 2024 11:40:05 AM -0500, Thomas Cameron wrote:
> 
> 
> Quick definition: fora is the plural of forum, as in a web based forum to
> discuss a topic or technology, like https://discussion.fedoraproject.org/.
> 
> Having said that...
> 
> I love mailing lists. I have filters set up they silently go to the correct
> mail folder, I can read through them at my leisure, and I only have to deal
> with one client - my mail client. My mail client defaults to sane viewing
> rules, threaded, in the order I prefer. It's the same experience across
> every mailing list I'm a member of. I love that. It's very
> accessibility-friendly.
> 
> I hate using fora.

Same here, I agree with everything you said.
Thanks for posting it. It's a shame that email is pushed so hard on
the sidelines, in general.

Marco
-- 
https://mfioretti.substack.com
--
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Re: ghost town

[Tim via users]

On Sun, 2024-03-10 at 09:50 +, Barry wrote:
> The majority of user traffic is on https://discussion.fedoraproject.org/ 
> these days.

I flatly refuse to use webforums.  They're extremely inconvenient.

Email comes to me, I can go through it in my spare time as I see fit.

Websites waste my time in a massive way.
 
-- 
 
uname -rsvp
Linux 3.10.0-1160.108.1.el7.x86_64 #1 SMP Thu Jan 25 16:17:31 UTC 2024 x86_64
 
Boilerplate:  All unexpected mail to my mailbox is automatically deleted.
I will only get to see the messages that are posted to the mailing list.
 
--
___
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue