Summary: | [gnome-overlay] gnome-base/gnome-desktop-3.26.2 won't generate thumbnails without bubblewrap installed | ||
---|---|---|---|
Product: | Gentoo Linux | Reporter: | Mike Auty (RETIRED) <ikelos> |
Component: | Overlays | Assignee: | Gentoo Linux Gnome Desktop Team <gnome> |
Status: | RESOLVED FIXED | ||
Severity: | normal | CC: | gentoo, ikelos |
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | https://bugzilla.gnome.org/show_bug.cgi?id=785963#c19 | ||
Whiteboard: | |||
Package list: | Runtime testing required: | --- | |
Bug Depends on: | |||
Bug Blocks: | 631406 | ||
Attachments: | bubblewrap-0.2.1 ebuild |
Description
Mike Auty (RETIRED)
![]() Created attachment 528228 [details]
bubblewrap-0.2.1 ebuild
Ebuild for bubblewrap, as required by gnome-desktop in order to generate thumbnails.
Sorry, [1] is the address in the URL field: https://bugzilla.gnome.org/show_bug.cgi?id=785963#c19 yeah, bubblewrap is something on top of libseccomp iirc; there was some upstream churn about it being hard requiring in some package for all linux, which was wrong as libseccomp isn't available for all linux supported architectures, and I believe that patch got accepted. So it's a bit confusing - I understood that without bwrap thumbnailing is just not sandboxed (but the build system would enforce sandboxing by default for linux on architectures that support seccomp) - but here you are seeing silent failures to thumbnail :( Maybe this was in newer gnome-desktop versions than 3.26, or gdk-pixbuf bits of it. The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=ccace77bf2e557b738f017d1139806cb2ed2a5d6 commit ccace77bf2e557b738f017d1139806cb2ed2a5d6 Author: Mart Raudsepp <leio@gentoo.org> AuthorDate: 2018-12-14 18:22:42 +0000 Commit: Mart Raudsepp <leio@gentoo.org> CommitDate: 2018-12-14 19:01:44 +0000 gnome-base/gnome-desktop: bump to 3.26.2 Also force seccomp when available, or configure fails. This is not patched to be optional on purpose - this kind of security is NOT optional as far as I'm concerned. Compared to gnome overlay version, this one: * adds a big patchset for more sandboxed thumbnailing fixes, memory leak fixes and other misc changes that don't break ABI * patch to hopefully fix thumbnailing on non-seccomp architectures (bwrap was still enabled, leading to broken runtime as bwrap requires seccomp) * RDEPENDs on sys-apps/bubblewrap with seccomp as required * removes USE=dbus dep on glib * revbumps over overlay revision to ensure upgrades Closes: https://bugs.gentoo.org/653786 Signed-off-by: Mart Raudsepp <leio@gentoo.org> Package-Manager: Portage-2.3.52, Repoman-2.3.11 gnome-base/gnome-desktop/Manifest | 2 + .../gnome-desktop/gnome-desktop-3.26.2-r2.ebuild | 67 ++++++++++++++++++++++ profiles/base/package.use.force | 4 ++ 3 files changed, 73 insertions(+) |