plasma-workspace, plasma-desktop, and kdeplasma-addons all error out with a similar sandbox error so appear to need a similar fix. The below discusses plasma-workspace, since that's the one I took a closer look at. According to the upstream changelogs, plasma-workspace is now using an install_bundled macro (from plasma framework) that ultimately generates a bundled-and-compressed plasmoid instead of separate files. It does this with a call to rcc. Unfortunately, due to some cmake-configuration logic I don't understand, rcc is called with --binary -o /usr/share/plasma/... instead of the image dir, so it wants to write the output direct to the live filesystem and of course sandbox steps in and says no-you-don't! The error is in the src_install phase and looks like this: ... -- Installing: /tmp/portage/kde-plasma/plasma-workspace-9999/image/usr/share/plasma/plasmoids/org.kde.plasma.activitybar/metadata.json -- Installing: /tmp/portage/kde-plasma/plasma-workspace-9999/image/usr/share/metainfo/org.kde.plasma.activitybar.appdata.xml -- Generating: /usr/share/plasma/plasmoids/org.kde.plasma.activitybar/contents.rcc * ACCESS DENIED: open_wr: /usr/share/plasma/plasmoids/org.kde.plasma.activitybar/contents.rcc CMake Error at applets/cmake_install.cmake:61 (message): failed to generating rcc 1: Unable to open /usr/share/plasma/plasmoids/org.kde.plasma.activitybar/contents.rcc for writing: Permission denied Call Stack (most recent call first): cmake_install.cmake:122 (include) make: *** [Makefile:86: install] Error 1 * ERROR: kde-plasma/plasma-workspace-9999::kde failed (install phase): * emake failed ... * --------------------------- ACCESS VIOLATION SUMMARY --------------------------- * LOG FILE: "/var/log/sandbox/sandbox-638.log" * VERSION 1.0 FORMAT: F - Function called FORMAT: S - Access Status FORMAT: P - Path as passed to function FORMAT: A - Absolute Path (not canonical) FORMAT: R - Canonical Path FORMAT: C - Command Line F: open_wr S: deny P: /usr/share/plasma/plasmoids/org.kde.plasma.activitybar/contents.rcc A: /usr/share/plasma/plasmoids/org.kde.plasma.activitybar/contents.rcc R: /share/plasma/plasmoids/org.kde.plasma.activitybar/contents.rcc C: /usr/lib64/qt5/bin/rcc /tmp/portage/kde-plasma/plasma-workspace-9999/work/plasma-workspace-9999_build/applets/org.kde.plasma.activitybar.qrc --binary -o /usr/share/plasma/plasmoids/org.kde.plasma.activitybar/contents.rcc * -------------------------------------------------------------------------------- The if/endif at the mentioned applets/cmake_install.cmake:61 looks like this: if("x${CMAKE_INSTALL_COMPONENT}x" STREQUAL "xplasma-workspacex" OR NOT CMAKE_INSTALL_COMPONENT) set(metadatajson /tmp/portage/kde-plasma/plasma-workspace-9999/work/plasma-workspace-9999_build/applets/org.kde.plasma.activitybar-plasmoids-metadata.json) set(root plasmoids) set(install_dir plasma) set(BINARYDIR /tmp/portage/kde-plasma/plasma-workspace-9999/work/plasma-workspace-9999_build/applets) set(DIRECTORY "/tmp/portage/kde-plasma/plasma-workspace-9999/work/plasma-workspace-9999/applets/activitybar") set(OUTPUTFILE "/tmp/portage/kde-plasma/plasma-workspace-9999/work/plasma-workspace-9999_build/applets/org.kde.plasma.activitybar.qrc") set(component org.kde.plasma.activitybar) include(/usr/lib64/cmake/KF5Package/qrc.cmake) message(STATUS "Generating: /usr/share/plasma/plasmoids/org.kde.plasma.activitybar/contents.rcc") execute_process(COMMAND /usr/sbin/rcc /tmp/portage/kde-plasma/plasma-workspace-9999/work/plasma-workspace-9999_build/applets/org.kde.plasma.activitybar.qrc --binary -o /usr/share/plasma/plasmoids/org.kde.plasma.activitybar/contents.rcc ERROR_VARIABLE errors RESULT_VARIABLE code) if (code) message(FATAL_ERROR "failed to generating rcc ${code}: ${errors}") endif() .... endif() Obviously that call to rcc with --binary -o /usr/share/plasma/... should be pointing to the temporary-install-image dir for its output instead, but at that point it becomes deep cmake wizardry to me and I haven't a clue. FWIW I did try with sandbox disabled but failed on some other error, so there may be more too it than that, but for all I know properly fixing the first problem will fix the further errors as well. However, based on the unowned *.rcc listing I have after that sandboxless attempt, plasma-workspace now bundle-installs several plasmoids as *.rcc files (and from their sandbox errors plasma-desktop and kdeplasma-addons bundle-install more): activitybar analogclock mediacontroller panelspacer lock_logout clipboard
Commits: https://cgit.kde.org/plasma-workspace.git/commit/?id=e37156b404bffd4dc6fd0d1b2dbb5dc1ae0ddfa4 https://cgit.kde.org/plasma-desktop.git/commit/?id=fe3db8eec01420b84f76ff8db5ab1c7685df4a2b https://cgit.kde.org/kdeplasma-addons.git/commit/?id=c505a726b3f1fff95c382e46377b495016d04786 Have been reverted: https://cgit.kde.org/plasma-workspace.git/commit/?id=450ef5884d9e93e6f0a2df48aae82f9ed239b394 https://cgit.kde.org/plasma-desktop.git/commit/?id=3fe4db6ace1a673a7f8a5b99ac25474bf5a7fe54 https://cgit.kde.org/kdeplasma-addons.git/commit/?id=db0bc0e3116986850f9d6b304b739698caef39d6 """Concept is fine, but currently we have severe CMake issues as well as a major containment loading bug. When re-reverting we need to be sure to test with clean install prefixes.""" So probably these errors would not occur now...
plasma_install_package() macro uses kpackage_install_package() macro. plasma_install_bundled_package() macro uses kpackage_install_bundled_package() macro. kpackage_install_bundled_package() macro was (partially?) fixed in commit: https://cgit.kde.org/kpackage.git/commit/?id=b69866996e7ea706bd32fbe5c9ca7007622f0b15 """ Fix the rcc binary package generation Summary: kpackage_install_bundled_package used install(CODE ..) for the generation and installation of the rcc file. This had multiple flows, - It didn't respect the DESTDIR variable of install target which made most of distribution packaging fail as it tried to write to installation prefix directly. - It used the execute_process which resulted in the rcc file generation at time of install instead of the build-time, so it would fail with permission errors if make install is run as normal user """ According to https://phabricator.kde.org/D11642 some problem remains in that currently unused code...
(In reply to Arfrever Frehtes Taifersar Arahesis from comment #1) > Commits [h]ave been reverted[...] > > So probably these errors would not occur now... Indeed. I have my desktop back again! If/when they revert the revert this can be reopened/refiled if necessary. Thanks and (literally) RESOLVED/UPSTREAM. =:^) Duncan
Not reverted commits: https://cgit.kde.org/plasma-nm.git/commit/?id=2583b4232e87acf5efd842e1ba9abd192421df46 https://cgit.kde.org/plasma-pa.git/commit/?id=28c54b9851f6542aeaa8e827aec3887e5d8d0adc Additonal fixes in kpackage_install_bundled_package() macro: https://cgit.kde.org/kpackage.git/commit/?id=0a26d53a0f861426c6f44a95f764ab01b25217ac https://cgit.kde.org/kpackage.git/commit/?id=f3619363ed63a683cc58ea6b9309dc2f8d37eb96
And: https://cgit.kde.org/kpackage.git/commit/?id=9175214c04d31f91d3e0ee850b5103d0ba6ee084
