Bug 2240823 - Fedora 43 i3 Spin installation can't be started
Summary: Fedora 43 i3 Spin installation can't be started
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: livesys-scripts
Version: 43
Hardware: All
OS: Linux
unspecified
high
Target Milestone: ---
Assignee: Neal Gompa
QA Contact:
URL:
Whiteboard: https://discussion.fedoraproject.org/...
Depends On:
Blocks: F43FinalFreezeException, FinalFreezeException
TreeView+ depends on / blocked
 
Reported: 2023-09-26 19:09 UTC by Odilon Sousa
Modified: 2025-10-19 06:25 UTC (History)
9 users (show)

Fixed In Version: livesys-scripts-0.8.0-3.fc43
Clone Of:
Environment:
Last Closed: 2025-10-17 22:35:19 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Fedora Pagure i3-sig/Fedora-i3-Spin issue 68 0 None None None 2023-09-26 19:10:25 UTC
Fedora Pagure livesys-scripts pull-request 28 0 None None None 2025-10-15 01:40:38 UTC

Internal Links: 2239137

Description Odilon Sousa 2023-09-26 19:09:19 UTC
It's not possible ot use Fedora-i3-Live-x86_64-39_Beta-1.1.iso to install the I3Spin right now.



Reproducible: Always

Steps to Reproduce:
1. Download the ISO Fedora-i3-Live-x86_64-39_Beta-1.1.iso
2. Start with qmemu using
   qemu-kvm -m 2048 -vga qxl -cdrom Fedora-i3-Live-x86_64-39_Beta-1.1.iso
3. Try to launch liveinst in the terminal or using dmenu
4. Nothing will start
Actual Results:  

liveuser@localhost-live:~$ liveinst
localuser:root being added to access control list
==== AUTHENTICATING FOR org.fedoraproject.pkexec.liveinst ====
Authentication is required to run the installer
Authenticating as: Live System User (liveuser)
polkit-agent-helper-1: error response to PolicyKit daemon: GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: No session for cookie
==== AUTHENTICATION FAILED ====
Error executing command as another user: Not authorized
 
This incident has been reported.
/usr/sbin/setenforce:  security_setenforce() failed:  Permission denied
vda: Failed to write 'change' to '/sys/devices/pci0000:00/0000:00:02.3/0000:04:00.0/virtio2/block/vda/uevent': Permission denied
sr0: Failed to write 'change' to '/sys/devices/pci0000:00/0000:00:1f.2/ata1/host0/target0:0:0/0:0:0:0/block/sr0/uevent': Permission denied
loop0: Failed to write 'change' to '/sys/devices/virtual/block/loop0/uevent': Permission denied
loop1: Failed to write 'change' to '/sys/devices/virtual/block/loop1/uevent': Permission denied
loop2: Failed to write 'change' to '/sys/devices/virtual/block/loop2/uevent': Permission denied
zram0: Failed to write 'change' to '/sys/devices/virtual/block/zram0/uevent': Permission denied
dm-0: Failed to write 'change' to '/sys/devices/virtual/block/dm-0/uevent': Permission denied
dm-1: Failed to write 'change' to '/sys/devices/virtual/block/dm-1/uevent': Permission denied
Traceback (most recent call last):
  File "/usr/lib64/python3.12/site-packages/gi/overrides/BlockDev.py", line 1226, in wrapped
    ret = orig_obj(*args, **kwargs)
          ^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib64/python3.12/site-packages/gi/overrides/BlockDev.py", line 866, in lvm_lvs
    return _lvm_lvs(vg_name)
           ^^^^^^^^^^^^^^^^^
gi.repository.GLib.GError: g-dbus-error-quark: GDBus.Error:org.freedesktop.DBus.Error.AccessDenied: Sender is not authorized to send message (9)
 
During handling of the above exception, another exception occurred:
 
Traceback (most recent call last):
  File "/usr/bin/anaconda-cleanup", line 82, in <module>
    devicetree.populate(cleanup_only=True)
  File "/usr/lib/python3.12/site-packages/blivet/threads.py", line 53, in run_with_lock
    return m(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.12/site-packages/blivet/populator/populator.py", line 446, in populate
    self._populate()
  File "/usr/lib/python3.12/site-packages/blivet/threads.py", line 53, in run_with_lock
    return m(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.12/site-packages/blivet/populator/populator.py", line 490, in _populate
    self.handle_device(dev)
  File "/usr/lib/python3.12/site-packages/blivet/threads.py", line 53, in run_with_lock
    return m(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.12/site-packages/blivet/populator/populator.py", line 284, in handle_device
    self._add_name(name)
  File "/usr/lib/python3.12/site-packages/blivet/threads.py", line 53, in run_with_lock
    return m(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.12/site-packages/blivet/populator/populator.py", line 146, in _add_name
    if name not in self.names:
                   ^^^^^^^^^^
  File "/usr/lib/python3.12/site-packages/blivet/threads.py", line 53, in run_with_lock
    return m(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.12/site-packages/blivet/devicetree.py", line 148, in names
    lv_info = list(lvs_info.cache.keys())
                   ^^^^^^^^^^^^^^
  File "/usr/lib/python3.12/site-packages/blivet/static_data/lvm_info.py", line 44, in cache
    lvs = blockdev.lvm.lvs()
          ^^^^^^^^^^^^^^^^^^
  File "/usr/lib64/python3.12/site-packages/gi/overrides/BlockDev.py", line 1248, in wrapped
    raise transform[1](msg)
gi.overrides.BlockDev.LVMError: GDBus.Error:org.freedesktop.DBus.Error.AccessDenied: Sender is not authorized to send message
anaconda must be run as root.
/usr/sbin/setenforce:  security_setenforce() failed:  Permission denied



Expected Results:  
Liveinst to start

Looks like the error started after anaconda changing from consolehelper to pkexec.

I managed to find one solution by adding xfce-polkit to our common Kickstart, and by adding this to our %post section at fedora-live-i3.ks:

cat > /etc/xdg/autostart/xfce-polkit.desktop <<EOF
[Desktop Entry]
Type=Application
Name=xfce-polkit
Exec=/usr/libexec/xfce-polkit
EOF

https://pagure.io/i3-sig/Fedora-i3-Spin/issue/68 was created as a tracker for members of the Sig to review the fix.

Comment 1 Aoife Moloney 2024-11-27 21:32:06 UTC
Fedora Linux 39 entered end-of-life (EOL) status on 2024-11-26.

Fedora Linux 39 is no longer maintained, which means that it
will not receive any further security or bug fix updates. As a result we
are closing this bug.

If you can reproduce this bug against a currently maintained version of Fedora Linux
please feel free to reopen this bug against that version. Note that the version
field may be hidden. Click the "Show advanced fields" button if you do not see
the version field.

If you are unable to reopen this bug, please file a new report against an
active release.

Thank you for reporting this bug and we are sorry it could not be fixed.

Comment 2 Adam Williamson 2025-10-15 01:37:07 UTC
Re-opening for F43 as this came back with the Kiwi conversion, and Neal says the fix needs to be in livesys-scripts (not the kiwi templates which are outside the packaging system).

Comment 3 Adam Williamson 2025-10-15 01:37:42 UTC
Proposing as a Final FE - complete breakage of the installer on a non-blocking spin.

Comment 4 Fedora Update System 2025-10-15 01:57:52 UTC
FEDORA-2025-8588895ba8 (livesys-scripts-0.8.0-3.fc43) has been submitted as an update to Fedora 43.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-8588895ba8

Comment 5 Adam Williamson 2025-10-15 03:24:18 UTC
+3 in https://pagure.io/fedora-qa/blocker-review/issue/1987 , marking accepted FE.

Comment 6 Fedora Update System 2025-10-16 03:45:19 UTC
FEDORA-2025-8588895ba8 has been pushed to the Fedora 43 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-8588895ba8`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-8588895ba8

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 7 Fedora Update System 2025-10-17 22:35:19 UTC
FEDORA-2025-8588895ba8 (livesys-scripts-0.8.0-3.fc43) has been pushed to the Fedora 43 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 8 Neal Gompa 2025-10-18 20:20:43 UTC
You still need to add "xfce-polkit" to the i3 group in comps.

Comment 9 Adam Williamson 2025-10-19 06:25:42 UTC
it's already in kiwi-descriptions:

https://pagure.io/fedora-kiwi-descriptions/blob/rawhide/f/components/desktops/i3.xml#_17

that has a FIXME, but I actually think f-k-d is the right place for it, at least so long as the only thing we *know* we need it for is making the installer work. if someone can prove it would be generally useful to have it on an i3 desktop however you deploy it, to make...something else polkit-y? what?...work, then adding it to comps instead might make sense.


Note You need to log in before you can comment on or make changes to this bug.