Created attachment 898972 [details] TigerVNC Xvnc session log When a plasmax11 session is launched by starting the /etc/init.d/tigervnc.* symlink initscript as root from a VT, some components do not function correctly, for example: 1. Network connections cannot be controlled from plasma-nm applet (an alert is shown: "Not authorised to change network settings" or words to that effect) 2. Pipewire is non-functional: no sound; plasma-pa applet shows "No audio devices detected" Both of these components function correctly when I login as the user on a VT and run "/usr/bin/vncserver :1" (but I understand this launch method is deprecated by upstream). In the Xvnc session log attached, there seem to be a number of other components throwing errors, but the above are the only functional symptoms I've identified so far. My assumption is that something in how the initscript interacts with elogind and sets up dbus session-bus is the underlying cause. Since that is Gentoo-specific work (TigerVNC upstream no longer supports non-systemd operation) I am reporting here, because this configuration is at least *nominally* supported here. I use SDDM as display manager so that is whose XSession script is in use in these tests; I have not yet tested alternate display-manager's Xsessions, but I'm doubtful they would improve the situation. emerge --info tigervnc Portage 3.0.65 (python 3.12.4-final-0, default/linux/amd64/23.0/split-usr/desktop/plasma, gcc-13, glibc-2.39-r9, 6.9.1-gentoo x86_64) ================================================================= System Settings ================================================================= System uname: Linux-6.9.1-gentoo-x86_64-Intel-R-_Core-TM-_i7-7600U_CPU_@_2.80GHz-with-glibc2.39 KiB Mem: 16117216 total, 12959676 free KiB Swap: 18753532 total, 18753532 free Timestamp of repository gentoo: Tue, 30 Jul 2024 20:00:00 +0000 Head commit of repository gentoo: f1bad49b20c2eca95793c711f72a093a686adfdd sh bash 5.2_p26-r6 ld GNU ld (Gentoo 2.42 p6) 2.42.0 ccache version 4.10.1 [disabled] app-misc/pax-utils: 1.3.7::gentoo app-shells/bash: 5.2_p26-r6::gentoo dev-build/autoconf: 2.72-r1::gentoo dev-build/automake: 1.16.5-r2::gentoo dev-build/cmake: 3.29.3::gentoo dev-build/libtool: 2.4.7-r4::gentoo dev-build/make: 4.4.1-r1::gentoo dev-build/meson: 1.4.1::gentoo dev-java/java-config: 2.3.4::gentoo dev-lang/perl: 5.40.0::gentoo dev-lang/python: 3.12.4_p1::gentoo, 3.13.0_beta3::gentoo dev-lang/rust-bin: 1.79.0::gentoo dev-util/ccache: 4.10.1::gentoo sys-apps/baselayout: 2.15::gentoo sys-apps/openrc: 0.54.2::gentoo sys-apps/sandbox: 2.39::gentoo sys-devel/binutils: 2.42-r2::gentoo sys-devel/binutils-config: 5.5::gentoo sys-devel/clang: 17.0.6::gentoo, 18.1.7::gentoo sys-devel/gcc: 13.2.1_p20240503::gentoo sys-devel/gcc-config: 2.11::gentoo sys-devel/llvm: 17.0.6::gentoo, 18.1.7::gentoo sys-kernel/linux-headers: 6.9::gentoo (virtual/os-headers) sys-libs/glibc: 2.39-r9::gentoo Repositories: gentoo location: /usr/portage sync-type: rsync sync-uri: rsync://hazel/gentoo-portage priority: -1000 volatile: True sync-rsync-extra-opts: sync-rsync-verify-max-age: 3 sync-rsync-verify-jobs: 1 sync-rsync-verify-metamanifest: no x-portage location: /usr/local/portage masters: gentoo priority: 0 volatile: True ACCEPT_KEYWORDS="amd64 ~amd64" ACCEPT_LICENSE="*" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-march=native -O2 -pipe -fomit-frame-pointer" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/share/config /usr/share/gnupg/qualified.txt /usr/share/themes/oxygen-gtk/gtk-2.0" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php8.1/ext-active/ /etc/php/apache2-php8.2/ext-active/ /etc/php/apache2-php8.3/ext-active/ /etc/php/cgi-php8.1/ext-active/ /etc/php/cgi-php8.2/ext-active/ /etc/php/cgi-php8.3/ext-active/ /etc/php/cli-php8.1/ext-active/ /etc/php/cli-php8.2/ext-active/ /etc/php/cli-php8.3/ext-active/ /etc/php/fpm-php8.1/ext-active/ /etc/php/fpm-php8.2/ext-active/ /etc/php/fpm-php8.3/ext-active/ /etc/php/phpdbg-php8.1/ext-active/ /etc/php/phpdbg-php8.2/ext-active/ /etc/php/phpdbg-php8.3/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo" CXXFLAGS="-march=native -O2 -pipe -fomit-frame-pointer" DISTDIR="/var/cache/distfiles" EMERGE_DEFAULT_OPTS="--nospinner --verbose-conflicts --quiet-build=n" ENV_UNSET="CARGO_HOME DBUS_SESSION_BUS_ADDRESS DISPLAY GDK_PIXBUF_MODULE_FILE GOBIN GOPATH PERL5LIB PERL5OPT PERLPREFIX PERL_CORE PERL_MB_OPT PERL_MM_OPT XAUTHORITY XDG_CACHE_HOME XDG_CONFIG_HOME XDG_DATA_HOME XDG_RUNTIME_DIR XDG_STATE_HOME" FCFLAGS="-march=native -O2 -pipe -fomit-frame-pointer" FEATURES="assume-digests binpkg-docompress binpkg-dostrip binpkg-logs buildpkg-live distlocks ebuild-locks fail-clean fixlafiles ipc-sandbox merge-sync merge-wait multilib-strict network-sandbox news pid-sandbox pkgdir-index-trusted preserve-libs protect-owned qa-unresolved-soname-deps sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync" FFLAGS="-march=native -O2 -pipe -fomit-frame-pointer" GENTOO_MIRRORS="http://www.mirrorservice.org/sites/distfiles.gentoo.org/ http://mirrors.gethosted.online/gentoo http://mirrors.soeasyto.com/distfiles.gentoo.org/" LANG="en_GB.utf8" LDFLAGS="-Wl,-O1 -Wl,--as-needed -Wl,-z,pack-relative-relocs" LEX="flex" LINGUAS="en_GB" MAKEOPTS="-j5" PKGDIR="/var/cache/binpkgs" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git" PORTAGE_TMPDIR="/tmp" SHELL="/bin/bash" USE="X a52 aac acl acpi activities alsa amd64 bash-completion bluetooth branding bzip2 cairo cdda cddb cdr cet crypt css cups dbus declarative dga djvu dri dri3 dts dvd dvdr egl elogind encode exif fam fbcon ffmpeg flac ftp gd gdbm geoip gif gimp gles gles2 gmp gnutls gphoto2 gpm graphviz gtk gui hddtemp iconv icu imagemagick imap inotify ipv6 java javascript jit jpeg kde kf6compat kwallet lame latex lcms libglvnd libkms libnotify libtirpc lm-sensors lto lzma lzo mad maildir matroska mbox mmap mng mp3 mp4 mpeg mplayer mtp multilib musicbrainz mysql ncurses networkmanager nls nptl nsplugin ocamlopt offensive ofx ogg opengl openmp pam pango pcre pda pdf perl php pipewire plasma png policykit posix postscript ppds pulseaudio qml qt5 quicktime radius raw readline rss rtc samba scanner screencast sdl seccomp session sharedmem smp snmp sockets socks5 sound spell split-usr sqlite sqlite3 ssl startup-notification subversion svg syslog tcpd test-rust theora threads tidy tiff tk tokenizer touchpad truetype udev udisks ukit unicode upnp upnp-av upower usb v4l vaapi vcd vhosts vnc vorbis vulkan wayland webp widgets wifi wmf wps wxwidgets x264 xattr xcb xcomposite xft xine xml xpm xscreensaver xv xvid xvmc zlib" ABI_X86="64" ADA_TARGET="gcc_12" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_anon authn_dbm authn_file authz_dbm authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir env expires ext_filter file_cache filter headers include info log_config logio mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="karbon sheets words" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="aes avx avx2 f16c fma3 mmx mmxext pclmul popcnt rdrand sse sse2 sse3 sse4_1 sse4_2 ssse3" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock greis isync itrax mtk3301 ntrip navcom oceanserver oncore rtcm104v2 rtcm104v3 sirf skytraq superstar2 tsip tripmate tnt ublox" GRUB_PLATFORMS="efi-64 multiboot" INPUT_DEVICES="libinput" KERNEL="linux" L10N="en-GB" LCD_DEVICES="bayrad cfontz glk hd44780 lb216 lcdm001 mtxorb text" LLVM_TARGETS="X86 BPF" LUA_SINGLE_TARGET="lua5-1" LUA_TARGETS="lua5-1" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php8-2" POSTGRES_TARGETS="postgres15" PYTHON_SINGLE_TARGET="python3_12" PYTHON_TARGETS="python3_12" RUBY_TARGETS="ruby31 ruby32" SANE_BACKENDS="hp net" VIDEO_CARDS="intel i965 iris" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipp2p iface geoip fuzzy condition tarpit sysrq proto logmark ipmark dhcpmac delude chaos account" Unset: ADDR2LINE, AR, ARFLAGS, AS, ASFLAGS, CC, CCLD, CONFIG_SHELL, CPP, CPPFLAGS, CTARGET, CXX, CXXFILT, ELFEDIT, EXTRA_ECONF, F77FLAGS, FC, GCOV, GPROF, INSTALL_MASK, LC_ALL, LD, LFLAGS, LIBTOOL, MAKE, MAKEFLAGS, NM, OBJCOPY, OBJDUMP, PORTAGE_BINHOST, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, PYTHONPATH, RANLIB, READELF, RUSTFLAGS, SIZE, STRINGS, STRIP, YACC, YFLAGS ================================================================= Package Settings ================================================================= net-misc/tigervnc-1.14.0::gentoo was built with the following: USE="dri3 drm gnutls java nls opengl server viewer -xinerama" ABI_X86="(64)"
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=d3a74ebe692c9e0e90fcc95e95e2b8e82f93f6aa commit d3a74ebe692c9e0e90fcc95e95e2b8e82f93f6aa Author: Viorel Munteanu <ceamac@gentoo.org> AuthorDate: 2024-10-27 16:37:41 +0000 Commit: Viorel Munteanu <ceamac@gentoo.org> CommitDate: 2024-10-27 16:43:31 +0000 net-misc/tigervnc: add session for elogind Upstream supports only systemd; add a session for elogind too. Bug: https://bugs.gentoo.org/937283 Signed-off-by: Viorel Munteanu <ceamac@gentoo.org> net-misc/tigervnc/files/tigervnc-1.14.1-pam.patch | 28 +++ net-misc/tigervnc/tigervnc-1.14.1-r1.ebuild | 236 ++++++++++++++++++++++ 2 files changed, 264 insertions(+)
Please check if it's fixed in tigervnc/tigervnc-1.14.1-r1. Thanks!
The situation seems improved: 1. plasma-pa is populated (did not have time to check audio functionality) 2. plasma-nm puts up a root password dialog at session start, and does so again when using it to make a connection change (in this instance, starting a VPN connection). Still an improvement. Method: Logged-in as root on TTY and started /etc/init.d/tigervnc.1 manually.
Followup: Yes, sound via pipewire is working correctly in all respects I know to test. Re NetworkManager, add that besides plasma-nm, nmcli connection commands in konsole/yakuake also trigger the root-password prompt. With the initial prompt on session start just to get the plasmoid running, this is quite sub-optimal. New item: kwallet-pam also fails to auto-open my wallet on login. I only spotted this today when launching signal-desktop-bin (I think its kwallet integration is quite recent).
(In reply to Robin Bankhead from comment #4) > New item: kwallet-pam also fails to auto-open my wallet on login. I only > spotted this today when launching signal-desktop-bin (I think its kwallet > integration is quite recent). That is quite normal. kwallet still needs your password, and since the session starts unattended, it does not have access to it. I don't think there is more I can do about this. Thank you for testing it and coming back with the results.
OK, I see that - although pam_mount prompts for my password on starting the service so you would think that kwallet_pam should do the same. What about the NM issue - that surely can't be the same cause as it is requiring root password.
It has the same cause. I don't use plasma or NetworkManager, so I cannot easily test it right now, but you can try to click the applet after unlocking kwallet (or maybe also restart plasma-nm if that is not enough).
Understood. Appreciate the work you did and it does improve the situation, but unfortunately this still leaves too much friction to be viable as my daily-use Xvnc setup, so I'll return to using vncserver (until they finally take that away, as seems to be the plan). Becoming clear across a number of pertaining issues that I've been raising that openrc + Xvnc + KDE is not a use case that I can expect the overlap of devs concerned to be interested in keeping alive (for reasons I appreciate).
