Nvidia driver 550.90.07 needs access to /sys/module/nvidia* #6372
Comments
kmk3
changed the title
The error is rather vague, so it's hard to tell. I'd try commenting lines in steam.profile until it works to narrow it down. Also, I see that there are quite a few results when searching for this error on The following issue has the same exact error in the title: Maybe the workarounds posted there could help. |
|
I had also encountered this error after upgrading the NVIDIA driver from This error is used to be fixed by installing the 32-bits NVIDIA driver, but I had installed |
Does anything change with Does anything change with Xorg?
To clarify, do you mean that in the past the error could be fixed by installing
Is that the "32-bits NVIDIA driver" or something else? Does installing that fix the error? |
Nothing changes. Output is here:
I will test it later.
People said they fixed this error by installing the 32-bit NVIDIA driver in ValveSoftware/steam-for-linux#4909.
|
|
https://bbs.archlinux.org/viewtopic.php?id=296675 is probably related. Even a simple I'm also using openSUSE Tumbleweed with NVidia driver 550.90.07 |
Adding Adding the line to steam.profile also allows running it with firejail Edit For anyone finding this bug report, you can also be a bit more restrictive and only un-blacklist what the NVidia driver wants to access:
to |
|
I can confirm adding |
I'm having another kind of error now (popup window) after using A popup window that says "Error: Couldn't setup Steam data. Please contact technical support" when in console: I have the following in Running steam directly has no problem. |
|
The current steam.profile in git changed the seccomp option compared to 0.9.72. You might want to give that a try. firejail/etc/profile-m-z/steam.profile Line 170 in 0fb4753 |
Tried 'ignore seccomp' and I got the same error of not able to setup steam data. |
|
Note: I edited my previous comment: both I ran more tests with other applications and added |
This might be an unrelated problem to this thread, since adding 'noblacklist /sys/module' to globals.profile fix 'firejail glxgear'. |
|
Update On the arch linux forum thread someone confirmed they've got a working steam when using the below (cfr. what we do in the blender profile): noblacklist /sys/module
whitelist /sys/module/nvidia*
read-only /sys/module/nvidia* |
Good catch! I found a way to allow the amd/nvidia modules by default in the code (as in the Though I'm not sure what exactly the files in /sys/module provide, so it might For nvidia it seems that the presence of the proprietary driver can be detected Any idea about AMDGPU Pro? If not, I think I'll just do it for nvidia for now. Cc: @RDProjekt (from #1932) |
Alas, no. We can add that later like you suggested when we find out. I'll ask around on our IRC channel. |
kmk3
changed the title
kmk3
changed the title
|
(Quoting the following comment for reference as its OpenGL error output is more
|
It has been reported in netblue30#6372 that after upgrading the nvidia proprietary driver from version 550.78 to 550.90.07, programs using hardware acceleration fail unless paths in `/sys/module/nvidia*` are accessible. Example: $ firejail --noprofile prime-run /bin/glxdemo [...] X Error of failed request: BadValue (integer parameter out of range for operation) Major opcode of failed request: 150 (GLX) Minor opcode of failed request: 3 (X_GLXCreateContext) Value in failed request: 0x0 Serial number of failed request: 22 Current serial number in output stream: 23 [...] Meanwhile, the AMD proprietary driver (AMDGPU Pro) seems to depend on `/sys/module/amdgpu` for OpenCL (though it is unclear how to detect that driver). See commit 95c8e28 ("Allow accessing /sys/module directory", 2018-05-08) and commit 9dd581d ("Allow AMD GPU usage by Blender", 2018-05-08) from PR netblue30#1932. So whitelist `/sys/module/nvidia*` by default if the nvidia proprietary driver is detected and `no3d` is not used. Note: The driver check is copied from src/firejail/util.c (see netblue30#841). To keep the current behavior (that is, block all modules), add `blacklist /sys/module` to globals.local. Fixes netblue30#6372. Reported-by: @GreatBigWhiteWorld Reported-by: @orzogc Reported-by: @krop Reported-by: @michelesr Suggested-by: @glitsj16
It has been reported in netblue30#6372 that after upgrading the nvidia proprietary driver from version 550.78 to 550.90.07, programs using hardware acceleration fail unless paths in `/sys/module/nvidia*` are accessible. Example: $ firejail --noprofile prime-run /bin/glxdemo [...] X Error of failed request: BadValue (integer parameter out of range for operation) Major opcode of failed request: 150 (GLX) Minor opcode of failed request: 3 (X_GLXCreateContext) Value in failed request: 0x0 Serial number of failed request: 22 Current serial number in output stream: 23 [...] Meanwhile, the AMD proprietary driver (AMDGPU Pro) seems to depend on `/sys/module/amdgpu` for OpenCL (though it is unclear how to detect that driver). See commit 95c8e28 ("Allow accessing /sys/module directory", 2018-05-08) and commit 9dd581d ("Allow AMD GPU usage by Blender", 2018-05-08) from PR netblue30#1932. So whitelist `/sys/module/nvidia*` by default if the nvidia proprietary driver is detected and `no3d` is not used. Note: The driver check is copied from src/firejail/util.c (see netblue30#841). To keep the current behavior (that is, block all modules), add `blacklist /sys/module` to globals.local. Fixes netblue30#6372. Reported-by: @GreatBigWhiteWorld Reported-by: @orzogc Reported-by: @krop Reported-by: @michelesr Suggested-by: @glitsj16 Tested-by: @flyxyz123
|
Fixed in #6387; thanks for all the reports and tests! |
kmk3
added
the
graphics
and others
Description
Steam fail to launch (it has been ok for a long time in the past).
Steps to Reproduce
Steps to reproduce the behavior
With 'ignore noroot' and 'ignore private-dev' in firejail.local already, I got X error:
Expected behavior
Launch normally as before.
Actual behavior
steam showing in running process without any window or system tray.
Behavior without a profile
What changed calling
LC_ALL=C firejail --noprofile /path/to/programin aterminal?
Nothing changes. I get the same error with '--noprofile' option.
Additional context
This issue is new. It has been running fine with firejail. It started to appear after an OS update and reboot.
Environment
Checklist
/usr/bin/vlc) "fixes" it).https://github.com/netblue30/firejail/issues/1139)browser-allow-drm yes/browser-disable-u2f noinfirejail.configto allow DRM/U2F in browsers.--profile=PROFILENAMEto set the right profile. (Only relevant for AppImages)The text was updated successfully, but these errors were encountered: