Bug 2240823

Summary: Fedora 43 i3 Spin installation can't be started
Product: [Fedora] Fedora Reporter: Odilon Sousa <osousa>
Component: livesys-scriptsAssignee: Neal Gompa <ngompa13>
Status: CLOSED ERRATA QA Contact:
Severity: high Docs Contact:
Priority: unspecified    
Version: 43CC: amurdaca, awilliam, dan.cermak, gchamoul, kparal, kupo, ngompa13, peter.georg, Pysis868
Target Milestone: ---Keywords: CommonBugs, Desktop, Regression, Reopened
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard: https://discussion.fedoraproject.org/t/90360 AcceptedFreezeException
Fixed In Version: livesys-scripts-0.8.0-3.fc43 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2025-10-17 22:35:19 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 2324226    

Description Odilon Sousa 2023-09-26 19:09:19 UTC
It's not possible ot use Fedora-i3-Live-x86_64-39_Beta-1.1.iso to install the I3Spin right now.



Reproducible: Always

Steps to Reproduce:
1. Download the ISO Fedora-i3-Live-x86_64-39_Beta-1.1.iso
2. Start with qmemu using
   qemu-kvm -m 2048 -vga qxl -cdrom Fedora-i3-Live-x86_64-39_Beta-1.1.iso
3. Try to launch liveinst in the terminal or using dmenu
4. Nothing will start
Actual Results:  

liveuser@localhost-live:~$ liveinst
localuser:root being added to access control list
==== AUTHENTICATING FOR org.fedoraproject.pkexec.liveinst ====
Authentication is required to run the installer
Authenticating as: Live System User (liveuser)
polkit-agent-helper-1: error response to PolicyKit daemon: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: No session for cookie
==== AUTHENTICATION FAILED ====
Error executing command as another user: Not authorized
 
This incident has been reported.
/usr/sbin/setenforce:  security_setenforce() failed:  Permission denied
vda: Failed to write 'change' to '/sys/devices/pci0000:00/0000:00:02.3/0000:04:00.0/virtio2/block/vda/uevent': Permission denied
sr0: Failed to write 'change' to '/sys/devices/pci0000:00/0000:00:1f.2/ata1/host0/target0:0:0/0:0:0:0/block/sr0/uevent': Permission denied
loop0: Failed to write 'change' to '/sys/devices/virtual/block/loop0/uevent': Permission denied
loop1: Failed to write 'change' to '/sys/devices/virtual/block/loop1/uevent': Permission denied
loop2: Failed to write 'change' to '/sys/devices/virtual/block/loop2/uevent': Permission denied
zram0: Failed to write 'change' to '/sys/devices/virtual/block/zram0/uevent': Permission denied
dm-0: Failed to write 'change' to '/sys/devices/virtual/block/dm-0/uevent': Permission denied
dm-1: Failed to write 'change' to '/sys/devices/virtual/block/dm-1/uevent': Permission denied
Traceback (most recent call last):
  File "/usr/lib64/python3.12/site-packages/gi/overrides/BlockDev.py", line 1226, in wrapped
    ret = orig_obj(*args, **kwargs)
          ^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib64/python3.12/site-packages/gi/overrides/BlockDev.py", line 866, in lvm_lvs
    return _lvm_lvs(vg_name)
           ^^^^^^^^^^^^^^^^^
gi.repository.GLib.GError: g-dbus-error-quark: GDBus.Error:org.freedesktop.DBus.Error.AccessDenied: Sender is not authorized to send message (9)
 
During handling of the above exception, another exception occurred:
 
Traceback (most recent call last):
  File "/usr/bin/anaconda-cleanup", line 82, in <module>
    devicetree.populate(cleanup_only=True)
  File "/usr/lib/python3.12/site-packages/blivet/threads.py", line 53, in run_with_lock
    return m(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.12/site-packages/blivet/populator/populator.py", line 446, in populate
    self._populate()
  File "/usr/lib/python3.12/site-packages/blivet/threads.py", line 53, in run_with_lock
    return m(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.12/site-packages/blivet/populator/populator.py", line 490, in _populate
    self.handle_device(dev)
  File "/usr/lib/python3.12/site-packages/blivet/threads.py", line 53, in run_with_lock
    return m(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.12/site-packages/blivet/populator/populator.py", line 284, in handle_device
    self._add_name(name)
  File "/usr/lib/python3.12/site-packages/blivet/threads.py", line 53, in run_with_lock
    return m(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.12/site-packages/blivet/populator/populator.py", line 146, in _add_name
    if name not in self.names:
                   ^^^^^^^^^^
  File "/usr/lib/python3.12/site-packages/blivet/threads.py", line 53, in run_with_lock
    return m(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.12/site-packages/blivet/devicetree.py", line 148, in names
    lv_info = list(lvs_info.cache.keys())
                   ^^^^^^^^^^^^^^
  File "/usr/lib/python3.12/site-packages/blivet/static_data/lvm_info.py", line 44, in cache
    lvs = blockdev.lvm.lvs()
          ^^^^^^^^^^^^^^^^^^
  File "/usr/lib64/python3.12/site-packages/gi/overrides/BlockDev.py", line 1248, in wrapped
    raise transform[1](msg)
gi.overrides.BlockDev.LVMError: GDBus.Error:org.freedesktop.DBus.Error.AccessDenied: Sender is not authorized to send message
anaconda must be run as root.
/usr/sbin/setenforce:  security_setenforce() failed:  Permission denied



Expected Results:  
Liveinst to start

Looks like the error started after anaconda changing from consolehelper to pkexec.

I managed to find one solution by adding xfce-polkit to our common Kickstart, and by adding this to our %post section at fedora-live-i3.ks:

cat > /etc/xdg/autostart/xfce-polkit.desktop <<EOF
[Desktop Entry]
Type=Application
Name=xfce-polkit
Exec=/usr/libexec/xfce-polkit
EOF

https://pagure.io/i3-sig/Fedora-i3-Spin/issue/68 was created as a tracker for members of the Sig to review the fix.

Comment 1 Aoife Moloney 2024-11-27 21:32:06 UTC
Fedora Linux 39 entered end-of-life (EOL) status on 2024-11-26.

Fedora Linux 39 is no longer maintained, which means that it
will not receive any further security or bug fix updates. As a result we
are closing this bug.

If you can reproduce this bug against a currently maintained version of Fedora Linux
please feel free to reopen this bug against that version. Note that the version
field may be hidden. Click the "Show advanced fields" button if you do not see
the version field.

If you are unable to reopen this bug, please file a new report against an
active release.

Thank you for reporting this bug and we are sorry it could not be fixed.

Comment 2 Adam Williamson 2025-10-15 01:37:07 UTC
Re-opening for F43 as this came back with the Kiwi conversion, and Neal says the fix needs to be in livesys-scripts (not the kiwi templates which are outside the packaging system).

Comment 3 Adam Williamson 2025-10-15 01:37:42 UTC
Proposing as a Final FE - complete breakage of the installer on a non-blocking spin.

Comment 4 Fedora Update System 2025-10-15 01:57:52 UTC
FEDORA-2025-8588895ba8 (livesys-scripts-0.8.0-3.fc43) has been submitted as an update to Fedora 43.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-8588895ba8

Comment 5 Adam Williamson 2025-10-15 03:24:18 UTC
+3 in https://pagure.io/fedora-qa/blocker-review/issue/1987 , marking accepted FE.

Comment 6 Fedora Update System 2025-10-16 03:45:19 UTC
FEDORA-2025-8588895ba8 has been pushed to the Fedora 43 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-8588895ba8`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-8588895ba8

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 7 Fedora Update System 2025-10-17 22:35:19 UTC
FEDORA-2025-8588895ba8 (livesys-scripts-0.8.0-3.fc43) has been pushed to the Fedora 43 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 8 Neal Gompa 2025-10-18 20:20:43 UTC
You still need to add "xfce-polkit" to the i3 group in comps.

Comment 9 Adam Williamson 2025-10-19 06:25:42 UTC
it's already in kiwi-descriptions:

https://pagure.io/fedora-kiwi-descriptions/blob/rawhide/f/components/desktops/i3.xml#_17

that has a FIXME, but I actually think f-k-d is the right place for it, at least so long as the only thing we *know* we need it for is making the installer work. if someone can prove it would be generally useful to have it on an i3 desktop however you deploy it, to make...something else polkit-y? what?...work, then adding it to comps instead might make sense.