Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 784248 - x11-drivers/nvidia-drivers-{390.143,450.119.03,460.84,470.57.02} can't use Coolbits without suid root Xorg (manual fan speed, reclocking, etc...)
Summary: x11-drivers/nvidia-drivers-{390.143,450.119.03,460.84,470.57.02} can't use Co...
Status: RESOLVED UPSTREAM
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Ionen Wolkens
URL: https://forums.developer.nvidia.com/t...
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2021-04-19 20:46 UTC by Ionen Wolkens
Modified: 2023-06-27 05:10 UTC (History)
5 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Ionen Wolkens gentoo-dev 2021-04-19 20:46:28 UTC
These versions introduce possible regressions such as failing to set
certain custom GPU settings on some hardware, e.g. manual fan control.

Potentially other unconfirmed regressions being looked into.

Bumping will be held back until further notice unless there is a real
need for those (bugfixes are relatively trivial and existing versions
should function normally).

This bug is only to track status.
Comment 1 poncho 2021-04-20 22:18:30 UTC
(In reply to Ionen Wolkens from comment #0)
> Bumping will be held back until further notice unless there is a real
> need for those

Are you aware of:
Security Bulletin: NVIDIA GPU Display Driver - April 2021
https://nvidia.custhelp.com/app/answers/detail/a_id/5172
Comment 2 Ionen Wolkens gentoo-dev 2021-04-20 23:35:47 UTC
(In reply to poncho from comment #1)
> Are you aware of:
> Security Bulletin: NVIDIA GPU Display Driver - April 2021
> https://nvidia.custhelp.com/app/answers/detail/a_id/5172
Thank you, I wasn't yet (no mentions in the changelogs).

While some loss of functionality will be unfortunate until fixed, I'll go on the safe side and do the bumps anyway.

I'll use another bug for this, and keep this bug for tracking functionality issues.
Comment 3 Ionen Wolkens gentoo-dev 2021-04-30 04:32:30 UTC
Recent reports pointed to rootless Xorg being related, and sure enough emerging xorg-server with USE="-elogind -systemd suid" allows this to work again (logind also needs to be disabled so it doesn't use a suid-wrapper).

Unknown at the moment what it's trying to access for which video group is no longer enough.
Comment 4 Manfred Knick 2021-05-21 12:48:29 UTC
5.12.5-gentoo   with
x11-drivers/nvidia-drivers-465.31 :
...........................^^^.^^


setting GPUTargetFanSpeed still fails.
Comment 5 Ionen Wolkens gentoo-dev 2021-05-21 15:34:41 UTC
(In reply to Manfred Knick from comment #4)
> 5.12.5-gentoo   with
> x11-drivers/nvidia-drivers-465.31 :
> ...........................^^^.^^
> 
> 
> setting GPUTargetFanSpeed still fails.
Indeed, thanks for confirming. I've also tested (new) 460.80 and still the same as well.

Current stable drivers (390.141,450.102.04,460.67) are the last working in-tree versions. I don't intend to forever delay stabling new versions but I'm giving it more time in case nvidia push a fix.

I'll send an update here if nvidia does fix this.
Comment 6 Larry the Git Cow gentoo-dev 2021-07-20 01:23:42 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=12d167465dbd09d487c93d4d72c2f517d05932b0

commit 12d167465dbd09d487c93d4d72c2f517d05932b0
Author:     Ionen Wolkens <ionen@gentoo.org>
AuthorDate: 2021-07-20 00:57:06 +0000
Commit:     Ionen Wolkens <ionen@gentoo.org>
CommitDate: 2021-07-20 01:20:46 +0000

    games-simulation/crashtest: remove unused -lasound from patch
    
    There was a dep on alsa-lib but couldn't see it in NEEDED, and
    couldn't see a link line in the sources either. But turns out the
    gentoo.patch is what added a -lasound.
    
    Closes: https://bugs.gentoo.org/784248
    Signed-off-by: Ionen Wolkens <ionen@gentoo.org>

 games-simulation/crashtest/files/crashtest-1.1-gentoo.patch | 12 +++++-------
 1 file changed, 5 insertions(+), 7 deletions(-)

Additionally, it has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=7ffe759b4dce326196b4a561f4c2c4127779284d

commit 7ffe759b4dce326196b4a561f4c2c4127779284d
Author:     Ionen Wolkens <ionen@gentoo.org>
AuthorDate: 2021-07-19 17:55:02 +0000
Commit:     Ionen Wolkens <ionen@gentoo.org>
CommitDate: 2021-07-20 01:12:38 +0000

    x11-drivers/nvidia-drivers: inform about Coolbits changes
    
    As part of a security fix by NVIDIA (unknown if intentional or a bug,
    NVIDIA has not responded), it became impossible to use Coolbits if
    Xorg doesn't have root privileges.
    
    Fortunately, most users do not need this and complains in ~arch have
    been minimal. But for the few users for which fan control / reclocking
    or similar is essential, provide a postinst message only if use of
    Coolbits is detected (do not wish to spread this unnecessarily so
    users do not set USE=suid on xorg-server when they don't need it and,
    even though it been 3 months, it may still be a temporary requirement).
    
    Message is primarily aimed at stable users given ~arch had to deal
    with this for a while already.
    
    Bug: https://bugs.gentoo.org/784248
    Signed-off-by: Ionen Wolkens <ionen@gentoo.org>

 .../nvidia-drivers/nvidia-drivers-390.143-r1.ebuild      | 16 ++++++++++++++++
 .../nvidia-drivers/nvidia-drivers-450.119.03.ebuild      | 16 ++++++++++++++++
 x11-drivers/nvidia-drivers/nvidia-drivers-460.84.ebuild  | 16 ++++++++++++++++
 .../nvidia-drivers/nvidia-drivers-470.42.01.ebuild       | 16 ++++++++++++++++
 .../nvidia-drivers/nvidia-drivers-470.57.02.ebuild       | 16 ++++++++++++++++
 5 files changed, 80 insertions(+)
Comment 7 Ionen Wolkens gentoo-dev 2021-07-20 01:25:34 UTC
Linked a wrong bug here.
Comment 8 Larry the Git Cow gentoo-dev 2021-12-28 11:55:09 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=4b78f04f21cbfcc3ac3a890dc8955c779c227bd2

commit 4b78f04f21cbfcc3ac3a890dc8955c779c227bd2
Author:     Ionen Wolkens <ionen@gentoo.org>
AuthorDate: 2021-12-28 11:24:53 +0000
Commit:     Ionen Wolkens <ionen@gentoo.org>
CommitDate: 2021-12-28 11:53:28 +0000

    x11-drivers/nvidia-drivers: remove coolbits postinst warning
    
    This is not solved and still happening with 495.46 (doesn't seem
    like anything can reasonably do about it from a packaging end,
    and NVIDIA hasn't done anything), but the postinst message itself
    wasn't shown unless updating 6+ months old nvidia-drivers with
    coolbits in xorg.conf and is now mostly unused cruft.
    
    If this is going to be a permanent state of affair, may be better
    documented elsewhere and bug closed as an upstream issue (albeit
    keeping open a bit longer for tracking).
    
    Bug: https://bugs.gentoo.org/784248
    Signed-off-by: Ionen Wolkens <ionen@gentoo.org>

 .../nvidia-drivers/nvidia-drivers-390.144-r1.ebuild      | 16 ----------------
 x11-drivers/nvidia-drivers/nvidia-drivers-390.147.ebuild | 16 ----------------
 .../nvidia-drivers/nvidia-drivers-460.91.03-r1.ebuild    | 16 ----------------
 .../nvidia-drivers/nvidia-drivers-470.62.16.ebuild       | 16 ----------------
 .../nvidia-drivers/nvidia-drivers-470.86-r2.ebuild       | 16 ----------------
 x11-drivers/nvidia-drivers/nvidia-drivers-470.94.ebuild  | 16 ----------------
 .../nvidia-drivers/nvidia-drivers-495.44-r2.ebuild       | 16 ----------------
 .../nvidia-drivers/nvidia-drivers-495.46-r10.ebuild      | 16 ----------------
 .../nvidia-drivers/nvidia-drivers-495.46-r20.ebuild      | 16 ----------------
 x11-drivers/nvidia-drivers/nvidia-drivers-495.46.ebuild  | 16 ----------------
 10 files changed, 160 deletions(-)
Comment 9 Ionen Wolkens gentoo-dev 2023-06-27 05:10:28 UTC
Guess I'll just close this, there's no sign of this getting fixed (haven't really been bothering to check anymore) and I still don't have a workaround for it beside running Xorg as root if you need coolbits.