[ISSUE] Flatpak: bwrap: setting up uid map: Permission denied

[ISSUE] Flatpak: bwrap: setting up uid map: Permission denied

[ljnsn]

[-- Attachment #1: Type: text/plain, Size: 922 bytes --]

New issue by ljnsn on void-packages repository

https://github.com/void-linux/void-packages/issues/52655

Description:
### Is this a new report?

Yes

### System Info

Void 6.6.56_2 x86_64 AuthenticAMD uptodate rrrrmmnFFFFFFF

### Package(s) Affected

flatpak-1.15.10_2

### Does a report exist for this bug with the project's home (upstream) and/or another distro?

_No response_

### Expected behaviour

It should be possible to run a flatpak application with `flatpak run <pkg>`.

### Actual behaviour

```
$ flatpak run md.obsidian.Obsidian 
bwrap: setting up uid map: Permission denied
error: ldconfig failed, exit status 256
```

The same happens for any other flatpak application.

### Steps to reproduce

I ran `xbps-install -Su` which installed a new kernel 6.6.56_2. I then rebooted and since get this error when trying to run any flatpak application. Before the update, there were no issues with flatpak.

Re: Flatpak: bwrap: setting up uid map: Permission denied

[classabbyamp]

[-- Attachment #1: Type: text/plain, Size: 172 bytes --]

New comment by classabbyamp on void-packages repository

https://github.com/void-linux/void-packages/issues/52655#issuecomment-2417435928

Comment:
are you using apparmor?

Re: Flatpak: bwrap: setting up uid map: Permission denied

[ljnsn]

[-- Attachment #1: Type: text/plain, Size: 341 bytes --]

New comment by ljnsn on void-packages repository

https://github.com/void-linux/void-packages/issues/52655#issuecomment-2417444090

Comment:
Yes, nothing changed there though afaik.

I also just found [this](https://github.com/flatpak/flatpak/wiki/User-namespace-requirements) which seems related? Maybe some kernel settings have changed?

Re: Flatpak: bwrap: setting up uid map: Permission denied

[ljnsn]

[-- Attachment #1: Type: text/plain, Size: 273 bytes --]

New comment by ljnsn on void-packages repository

https://github.com/void-linux/void-packages/issues/52655#issuecomment-2417463028

Comment:
I just booted with two older kernels (6.6.54_1, 6.6.52_1) and it's the same there, so it might not be related to the kernel update.

Re: Flatpak: bwrap: setting up uid map: Permission denied

[classabbyamp]

[-- Attachment #1: Type: text/plain, Size: 196 bytes --]

New comment by classabbyamp on void-packages repository

https://github.com/void-linux/void-packages/issues/52655#issuecomment-2417505899

Comment:
apparmor was updated recently, try disabling it

Re: Flatpak: bwrap: setting up uid map: Permission denied

[ljnsn]

[-- Attachment #1: Type: text/plain, Size: 309 bytes --]

New comment by ljnsn on void-packages repository

https://github.com/void-linux/void-packages/issues/52655#issuecomment-2417543833

Comment:
Yep, that was it, thanks a lot! Any steps I can/should take on my side to get flatpak to work with apparmor enabled? Or is this going to be solved by a package update?

Re: Flatpak: bwrap: setting up uid map: Permission denied

[classabbyamp]

[-- Attachment #1: Type: text/plain, Size: 199 bytes --]

New comment by classabbyamp on void-packages repository

https://github.com/void-linux/void-packages/issues/52655#issuecomment-2417585838

Comment:
it probably needs an apparmor profile or something

Re: Flatpak: bwrap: setting up uid map: Permission denied

[ljnsn]

[-- Attachment #1: Type: text/plain, Size: 760 bytes --]

New comment by ljnsn on void-packages repository

https://github.com/void-linux/void-packages/issues/52655#issuecomment-2417594998

Comment:
I'm happy to help provide one, but not sure where to start. Why did it work before the update?

FWIW, I do have this flatpak profile:

```
$ bat -p /etc/apparmor.d/flatpak
# This profile allows everything and only exists to give the
# application a name instead of having the label "unconfined"

abi <abi/4.0>,
include <tunables/global>

profile flatpak /usr/bin/flatpak flags=(unconfined) {
  userns,

  # Site-specific additions and overrides. See local/README for details.
  include if exists <local/flatpak>
}
```

Which actually seems to allow everything, so not sure why it's complaining now.

Re: [ISSUE] [CLOSED] Flatpak: bwrap: setting up uid map: Permission denied

[classabbyamp]

[-- Attachment #1: Type: text/plain, Size: 925 bytes --]

Closed issue by ljnsn on void-packages repository

https://github.com/void-linux/void-packages/issues/52655

Description:
### Is this a new report?

Yes

### System Info

Void 6.6.56_2 x86_64 AuthenticAMD uptodate rrrrmmnFFFFFFF

### Package(s) Affected

flatpak-1.15.10_2

### Does a report exist for this bug with the project's home (upstream) and/or another distro?

_No response_

### Expected behaviour

It should be possible to run a flatpak application with `flatpak run <pkg>`.

### Actual behaviour

```
$ flatpak run md.obsidian.Obsidian 
bwrap: setting up uid map: Permission denied
error: ldconfig failed, exit status 256
```

The same happens for any other flatpak application.

### Steps to reproduce

I ran `xbps-install -Su` which installed a new kernel 6.6.56_2. I then rebooted and since get this error when trying to run any flatpak application. Before the update, there were no issues with flatpak.

Re: Flatpak: bwrap: setting up uid map: Permission denied

[classabbyamp]

[-- Attachment #1: Type: text/plain, Size: 209 bytes --]

New comment by classabbyamp on void-packages repository

https://github.com/void-linux/void-packages/issues/52655#issuecomment-2417607470

Comment:
reverting the apparmor update as it was not a stable release