Open SilverTux opened 2 years ago
In the meantime I've tried the official deb file in a docker container using these: (maybe this helps someone who has the same problem)
Dockerfile:
FROM ubuntu:21.10
RUN apt-get update && \
apt-get install -y \
curl \
&& apt-get clean
RUN curl -LO https://downloads.raspberrypi.org/imager/imager_latest_amd64.deb
RUN apt-get install -y ./imager_latest_amd64.deb
ENTRYPOINT ["rpi-imager"]
rpi-imager.sh:
#!/usr/bin/env bash
set -euo pipefail
xhost +local:root
docker run -it --rm \
--privileged \
--env="DISPLAY" \
--env="QT_X11_NO_MITSHM=1" \
--volume="/tmp/.X11-unix:/tmp/.X11-unix:rw" \
rpi-imager
# Disallow X server connection
xhost -local:root
with the following commands:
docker build -t rpi-imager .
./rpi-imager.sh
and it worked, it could write the raspbian os lite to the microsd card.
My versions: Ubuntu: 22.10 (64 bit) uname: 5.13.0-39-generic #44-Ubuntu SMP Thu Mar 24 15:35:05 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux
Are you sure you don't mean "Ubuntu: 21.10"? 22.10 is kinetic, the current unreleased development version of Ubuntu -- which would have kernel version 5.15. I'm guessing the above is a typo, and that you're actually on impish (21.10) which would have kernel version 5.13 (given that the snap section below reports ubuntu 21.10).
I'll see if I can replicate the issue in an impish VM, but I'm afraid I don't have any PCs running impish at the moment.
Incidentally, you can just sudo apt install rpi-imager
from jammy (22.04 LTS) onwards, although that's not going to help you on impish.
Incidentally, most of the console warnings can be ignored:
propsReply "An AppArmor policy prevents this sender from sending this message to this recipient; type=\"method_call\", sender=\":1.214\" (uid=1000 pid=45929 comm=\"/snap/rpi-imager/271/usr/local/bin/rpi-imager \" label=\"snap.rpi-imager.rpi-imager (enforce)\") interface=\"org.freedesktop.DBus.Properties\" member=\"GetAll\" error name=\"(unset)\" requested_reply=\"0\" destination=\"org.freedesktop.NetworkManager\" (uid=0 pid=1285 comm=\"/usr/sbin/NetworkManager --no-daemon \" label=\"unconfined\")"
nmReply "An AppArmor policy prevents this sender from sending this message to this recipient; type=\"method_call\", sender=\":1.214\" (uid=1000 pid=45929 comm=\"/snap```
/rpi-imager/271/usr/local/bin/rpi-imager \" label=\"snap.rpi-imager.rpi-imager (enforce)\") interface=\"org.freedesktop.NetworkManager\" member=\"GetDevices\" error name=\"(unset)\" requested_reply=\"0\" destination=\"org.freedesktop.NetworkManager\" (uid=0 pid=1285 comm=\"/usr/sbin/NetworkManager --no-daemon \" label=\"unconfined\")"
"Object path cannot be empty"
These are due to missing auto-connections to network manager; however, I'm not convinced they're required (rpi-imager doesn't need control over network interfaces, which is what those interfaces entail, it can just use them in their current state).
QObject::setParent: Cannot set parent, new parent is in a different thread
Available disk space for caching: 17 GB
Telemetry done. cURL status code = 0 info sent = "url=https%3A%2F%2Fdownloads.raspberrypi.org%2Fraspios_lite_arm64%2Fimages%2Fraspios_lite_arm64-2022-04-07%2F2022-04-04-raspios-bullseye-arm64-lite.img.xz&os=Raspberry%20Pi%20OS%20%28other%29&image=Raspberry%20Pi%20OS%20Lite%20%2864-bit%29&imagerVersion=1.7.2&imagerOsType=ubuntu-core&imagerOsVersion=20&imagerOsArch=x86_64&imagerLocale=en_US"
The above is just status output as rpi-imager downloads the requested image (which also demonstrates that even without the network manager connections, it can still happily download OS images).
If I try it with sudo:
sudo should make no major differences given that snaps run as root within their sandbox anyway (so the only difference is the wrapper-script will be running as root as well in this case, but that doesn't affect the confined application).
My versions: Ubuntu: 22.10 (64 bit) uname: 5.13.0-39-generic #44-Ubuntu SMP Thu Mar 24 15:35:05 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux
Are you sure you don't mean "Ubuntu: 21.10"? 22.10 is kinetic, the current unreleased development version of Ubuntu -- which would have kernel version 5.15. I'm guessing the above is a typo, and that you're actually on impish (21.10) which would have kernel version 5.13 (given that the snap section below reports ubuntu 21.10).
I'll see if I can replicate the issue in an impish VM, but I'm afraid I don't have any PCs running impish at the moment.
Incidentally, you can just
sudo apt install rpi-imager
from jammy (22.04 LTS) onwards, although that's not going to help you on impish.
You are right, I've written the wrong version number it is 21.10 (impish)
After a little fiddling around with getting USB devices to appear under a LXD VM, I managed to get this working. However, I did have to add some groups to my user and I'm not sure whether this is because the desktop images used with LXD are "minimal" (they're not the "standard" Ubuntu desktop images, but cut down ones specifically for VM use), or whether those groups are genuinely missing.
Can you check something on your Ubuntu impish system? Start up a terminal and run "groups". You should see something like:
$ groups
dave adm dialout cdrom sudo dip plugdev lpadmin lxd sambashare sbuild
But probably with a few less groups. On my VM instance, I only had "ubuntu adm video users", and I got the same "Cannot open storage device '/dev/...'" error as you were seeing. However, I'm not yet sure whether the lack of groups is a mistake in the VM, or whether there's some lacking permissions in polkit under impish, etc.
I have these groups:
istvan adm cdrom sudo dip plugdev netdev lpadmin sambashare docker
Hmmm, I found with the "sudo" group added to the group list on the VM, everything worked happily (it prompted to authenticate as the regular user after clicking "WRITE" but then, once authenticated, proceeded to write the card normally). Without the "sudo" group (which I'm guessing is just missing because it's a minimal VM image -- certainly that user is in the group list on all my "regular" desktop installs), it prompts for authentication as the administrator, but that can't work as the administrator has no password on Ubuntu so after the prompt is cancelled the "Cannot open storage device..." error appears.
When you click "WRITE" in rpi-imager, what exactly happens?
After clicking on "WRITE" a window appears which warns me:
All existing data on 'Internal SD card reader' will be erased.
Are you sure you want to continue?
No Yes
Clicking on Yes gives me the error window which prints the error in $subject So I don't have any authentication step in the process.
Is it possible that my user needs to be in the sudoers (/etc/sudoers)?
My user is already in the sudo group as you saw in the output of the groups
command, this is reflected in /etc/group file too, but my user is not in the sudoers file or sudoers.d directory.
Your user shouldn't need adding to /etc/sudoers
; by default the following rule should be in there (amongst other stuff):
# Allow members of group sudo to execute any command
%sudo ALL=(ALL:ALL) ALL
So, as a member of group "sudo" you should have that privilege anyway. The fact you get no authentication step when clicking "WRITE" is definitely strange, and suggests something quite unusual in your setup. I take it this is when running "rpi-imager" normally (no sudo, just running "rpi-imager" from the terminal)?
Yes this is the behaviour without using sudo before rpi-imager command. Are there any logs which I can check or some kind of debug flag which enables verbose logging maybe? I think at this point that maybe my snap handles something wrongly, or the rpi-imager doesn't see something crucial for writing the sd card, but I'm clueless how to debug it :(
After a bit of experimentation, the only way I can think that this is happening is that your polkit setup is missing some policies somewhere. As far as I can tell the chain of events should go something like this:
<action id="org.freedesktop.udisks2.open-device">
<description>Open a device</description>
<message>Authentication is required to open a device</message>
<defaults>
<allow_any>auth_admin</allow_any>
<allow_inactive>auth_admin</allow_inactive>
<allow_active>auth_admin_keep</allow_active>
</defaults>
</action>
root@ubuntu# grep -R AdminIdentities /etc/polkit-1/localauthority.conf.d/*
/etc/polkit-1/localauthority.conf.d/50-localauthority.conf:AdminIdentities=unix-user:0
/etc/polkit-1/localauthority.conf.d/51-ubuntu-admin.conf:AdminIdentities=unix-group:sudo;unix-group:admin
I'm guessing (hoping!) that your udisks polkit configuration is default, but the following command ought to confirm that (the reason for the odd grep-to-grep-v is to filter out a load of translations we don't care about):
root@ubuntu# grep -A 90 open-device /usr/share/polkit-1/actions/org.freedesktop.UDisks2.policy | grep -v lang=
<action id="org.freedesktop.udisks2.open-device">
<description>Open a device</description>
<message>Authentication is required to open a device</message>
<defaults>
<allow_any>auth_admin</allow_any>
<allow_inactive>auth_admin</allow_inactive>
<allow_active>auth_admin_keep</allow_active>
</defaults>
</action>
<action id="org.freedesktop.udisks2.open-device-system">
<description>Open a system device</description>
<message>Authentication is required to open a device</message>
<defaults>
<allow_any>auth_admin</allow_any>
<allow_inactive>auth_admin</allow_inactive>
<allow_active>auth_admin_keep</allow_active>
</defaults>
</action>
<!-- ###################################################################### -->
<!-- Manage system-wide configuration files such as /etc/fstab or
/etc/crypttab ... including files referenced by these files.
IMPORTANT: It is not secure to automatically grant authority
for this action to groups of users. Neither is it secure to
to allow a process to retain the authorization (e.g. don't
use the _keep variants).
-->
Assuming the above is indeed fine, my best guess at the moment is that some bit of the polkit localauthority configuration is missing. In other words, that the following will return something different, perhaps something that doesn't include unix-group:sudo
(or is missing the second file entirely, or maybe has another file that overrides it?):
root@ubuntu# grep -R AdminIdentities /etc/polkit-1/localauthority.conf.d/*
/etc/polkit-1/localauthority.conf.d/50-localauthority.conf:AdminIdentities=unix-user:0
/etc/polkit-1/localauthority.conf.d/51-ubuntu-admin.conf:AdminIdentities=unix-group:sudo;unix-group:admin
If you could check the output of those commands on your system, I'd be most interested if they turn up something different to the above!
I've run the commands and I'm getting back the same result as you (line-by-line), so I'm assuming that the problem is not with rpi-imager in this case, maybe my snap ecosystem somehow is faulty. I've tried to run the imager using strace and I've gotten the below output (copying only second half of the log):
...
newfstatat(AT_FDCWD, "/sys/kernel/security/apparmor/features/query", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
newfstatat(AT_FDCWD, "/sys/kernel/security/apparmor/features/dbus", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
newfstatat(AT_FDCWD, "/sys/kernel/security/apparmor/features/signal", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
newfstatat(AT_FDCWD, "/sys/kernel/security/apparmor/features/ptrace", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
newfstatat(AT_FDCWD, "/sys/kernel/security/apparmor/features/caps", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
newfstatat(AT_FDCWD, "/sys/kernel/security/apparmor/features/rlimit", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
newfstatat(AT_FDCWD, "/sys/kernel/security/apparmor/features/capability", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
newfstatat(AT_FDCWD, "/sys/kernel/security/apparmor/features/namespaces", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
newfstatat(AT_FDCWD, "/sys/kernel/security/apparmor/features/mount", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
newfstatat(AT_FDCWD, "/sys/kernel/security/apparmor/features/network", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
newfstatat(AT_FDCWD, "/sys/kernel/security/apparmor/features/network_v8", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
newfstatat(AT_FDCWD, "/sys/kernel/security/apparmor/features/file", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
newfstatat(AT_FDCWD, "/sys/kernel/security/apparmor/features/domain", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
newfstatat(AT_FDCWD, "/sys/kernel/security/apparmor/features/policy", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
close(5) = 0
newfstatat(AT_FDCWD, "/usr/local/sbin/apparmor_parser", 0xc0003ba038, 0) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/usr/local/bin/apparmor_parser", 0xc0003ba108, 0) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/usr/sbin/apparmor_parser", {st_mode=S_IFREG|0755, st_size=1535360, ...}, 0) = 0
newfstatat(AT_FDCWD, "/usr/sbin/apparmor_parser", {st_mode=S_IFREG|0755, st_size=1535360, ...}, 0) = 0
openat(AT_FDCWD, "/proc/self/mountinfo", O_RDONLY|O_CLOEXEC) = 5
epoll_ctl(4, EPOLL_CTL_ADD, 5, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=1879862952, u64=140601929264808}}) = 0
fcntl(5, F_GETFL) = 0x8000 (flags O_RDONLY|O_LARGEFILE)
fcntl(5, F_SETFL, O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 0
read(5, "23 28 0:21 / /sys rw,nosuid,node"..., 4096) = 4049
read(5, "329 28 7:25 / /snap/rpi-imager/2"..., 4096) = 4031
read(5, "", 4096) = 0
epoll_ctl(4, EPOLL_CTL_DEL, 5, 0xc0003ad78c) = 0
close(5) = 0
openat(AT_FDCWD, "/etc/fstab", O_RDONLY|O_CLOEXEC) = 5
epoll_ctl(4, EPOLL_CTL_ADD, 5, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=1879862952, u64=140601929264808}}) = -1 EPERM (Operation not permitted)
epoll_ctl(4, EPOLL_CTL_DEL, 5, 0xc0003ad734) = -1 EPERM (Operation not permitted)
read(5, "# /etc/fstab: static file system"..., 4096) = 595
read(5, "", 3501) = 0
close(5) = 0
openat(AT_FDCWD, "/proc/self/mountinfo", O_RDONLY|O_CLOEXEC) = 5
epoll_ctl(4, EPOLL_CTL_ADD, 5, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=1879862952, u64=140601929264808}}) = 0
fcntl(5, F_GETFL) = 0x8000 (flags O_RDONLY|O_LARGEFILE)
fcntl(5, F_SETFL, O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 0
read(5, "23 28 0:21 / /sys rw,nosuid,node"..., 4096) = 4049
read(5, "329 28 7:25 / /snap/rpi-imager/2"..., 4096) = 4031
read(5, "", 4096) = 0
epoll_ctl(4, EPOLL_CTL_DEL, 5, 0xc0003ad854) = 0
close(5) = 0
openat(AT_FDCWD, "/proc/sys/kernel/seccomp/actions_avail", O_RDONLY|O_CLOEXEC) = 5
epoll_ctl(4, EPOLL_CTL_ADD, 5, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=1879862952, u64=140601929264808}}) = 0
fcntl(5, F_GETFL) = 0x8000 (flags O_RDONLY|O_LARGEFILE)
fcntl(5, F_SETFL, O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 0
fstat(5, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
read(5, "kill_process kill_thread trap er"..., 512) = 63
read(5, "", 1473) = 0
epoll_ctl(4, EPOLL_CTL_DEL, 5, 0xc0003ad784) = 0
close(5) = 0
openat(AT_FDCWD, "/dev/null", O_RDONLY|O_CLOEXEC) = 5
epoll_ctl(4, EPOLL_CTL_ADD, 5, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=1879862952, u64=140601929264808}}) = -1 EPERM (Operation not permitted)
epoll_ctl(4, EPOLL_CTL_DEL, 5, 0xc0003ad5cc) = -1 EPERM (Operation not permitted)
pipe2([6, 7], O_CLOEXEC) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 6, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=1879862952, u64=140601929264808}}) = 0
fcntl(6, F_GETFL) = 0 (flags O_RDONLY)
fcntl(6, F_SETFL, O_RDONLY|O_NONBLOCK) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 7, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=1879862744, u64=140601929264600}}) = 0
fcntl(7, F_GETFL) = 0x1 (flags O_WRONLY)
fcntl(7, F_SETFL, O_WRONLY|O_NONBLOCK) = 0
pipe2([8, 9], O_CLOEXEC) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 8, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=1879862536, u64=140601929264392}}) = 0
fcntl(8, F_GETFL) = 0 (flags O_RDONLY)
fcntl(8, F_SETFL, O_RDONLY|O_NONBLOCK) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 9, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=1879862328, u64=140601929264184}}) = 0
fcntl(9, F_GETFL) = 0x1 (flags O_WRONLY)
fcntl(9, F_SETFL, O_WRONLY|O_NONBLOCK) = 0
fcntl(7, F_GETFL) = 0x801 (flags O_WRONLY|O_NONBLOCK)
fcntl(7, F_SETFL, O_WRONLY) = 0
fcntl(9, F_GETFL) = 0x801 (flags O_WRONLY|O_NONBLOCK)
fcntl(9, F_SETFL, O_WRONLY) = 0
pipe2([10, 11], O_CLOEXEC) = 0
getpid() = 10266
rt_sigprocmask(SIG_SETMASK, NULL, [], 8) = 0
rt_sigprocmask(SIG_SETMASK, ~[], NULL, 8) = 0
clone(child_stack=NULL, flags=CLONE_VM|CLONE_VFORK|SIGCHLD) = 10278
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
close(11) = 0
read(10, "", 8) = 0
close(10) = 0
close(5) = 0
epoll_ctl(4, EPOLL_CTL_DEL, 7, 0xc0003ad664) = 0
close(7) = 0
epoll_ctl(4, EPOLL_CTL_DEL, 9, 0xc0003ad664) = 0
close(9) = 0
futex(0xc00009a148, FUTEX_WAKE_PRIVATE, 1) = 1
waitid(P_PID, 10278, {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10278, si_uid=1000, si_status=0, si_utime=0, si_stime=0}, WEXITED|WNOWAIT, NULL) = 0
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10278, si_uid=1000, si_status=0, si_utime=0, si_stime=0} ---
rt_sigreturn({mask=[]}) = 0
futex(0x55c3769a0cd0, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0x55c3769a0bd0, FUTEX_WAKE_PRIVATE, 1) = 1
wait4(10278, [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0, {ru_utime={tv_sec=0, tv_usec=0}, ru_stime={tv_sec=0, tv_usec=3480}, ...}) = 10278
openat(AT_FDCWD, "/var/lib/snapd/system-key", O_RDONLY|O_CLOEXEC) = 5
epoll_ctl(4, EPOLL_CTL_ADD, 5, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=1879862536, u64=140601929264392}}) = -1 EPERM (Operation not permitted)
epoll_ctl(4, EPOLL_CTL_DEL, 5, 0xc0003ad8d4) = -1 EPERM (Operation not permitted)
fstat(5, {st_mode=S_IFREG|0644, st_size=633, ...}) = 0
read(5, "{\"version\":10,\"build-id\":\"7182b0"..., 1145) = 633
read(5, "", 512) = 0
close(5) = 0
readlinkat(AT_FDCWD, "/proc/self/exe", "/snap/core/13308/usr/bin/snap", 128) = 29
readlinkat(AT_FDCWD, "/snap/rpi-imager/current", "271", 128) = 3
openat(AT_FDCWD, "/snap/rpi-imager/271/meta/snap.yaml", O_RDONLY|O_CLOEXEC) = 5
epoll_ctl(4, EPOLL_CTL_ADD, 5, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=1879862536, u64=140601929264392}}) = -1 EPERM (Operation not permitted)
epoll_ctl(4, EPOLL_CTL_DEL, 5, 0xc0003ad63c) = -1 EPERM (Operation not permitted)
fstat(5, {st_mode=S_IFREG|0644, st_size=1335, ...}) = 0
read(5, "name: rpi-imager\nversion: 1.7.2\n"..., 1847) = 1335
read(5, "", 512) = 0
close(5) = 0
newfstatat(AT_FDCWD, "/snap/rpi-imager/271/meta/hooks", 0xc000414038, 0) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/var/lib/snapd/snaps/rpi-imager_271.snap", {st_mode=S_IFREG|0600, st_size=215412736, ...}, AT_SYMLINK_NOFOLLOW) = 0
newfstatat(AT_FDCWD, "/var/lib/snapd/features/refresh-app-awareness", {st_mode=S_IFREG|0644, st_size=0, ...}, 0) = 0
openat(AT_FDCWD, "/var/lib/snapd/inhibit/rpi-imager.lock", O_RDONLY|O_NOFOLLOW|O_CLOEXEC) = 5
epoll_ctl(4, EPOLL_CTL_ADD, 5, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=1879862536, u64=140601929264392}}) = -1 EPERM (Operation not permitted)
epoll_ctl(4, EPOLL_CTL_DEL, 5, 0xc0003ad84c) = -1 EPERM (Operation not permitted)
flock(5, LOCK_SH) = 0
read(5, "", 512) = 0
close(5) = 0
readlinkat(AT_FDCWD, "/proc/self/exe", "/snap/core/13308/usr/bin/snap", 128) = 29
newfstatat(AT_FDCWD, "/snap/core/13308/usr/lib/snapd/snap-confine", {st_mode=S_IFREG|S_ISUID|0755, st_size=123560, ...}, 0) = 0
openat(AT_FDCWD, "/var/lib/snapd/sequence/rpi-imager.json", O_RDONLY|O_CLOEXEC) = 5
epoll_ctl(4, EPOLL_CTL_ADD, 5, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=1879862536, u64=140601929264392}}) = -1 EPERM (Operation not permitted)
epoll_ctl(4, EPOLL_CTL_DEL, 5, 0xc0003ad6ec) = -1 EPERM (Operation not permitted)
fstat(5, {st_mode=S_IFREG|0644, st_size=456, ...}) = 0
read(5, "{\"sequence\":[{\"name\":\"rpi-imager"..., 968) = 456
read(5, "", 512) = 0
close(5) = 0
umask(000) = 002
getuid() = 1000
socket(AF_UNIX, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 5
connect(5, {sa_family=AF_UNIX, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
close(5) = 0
socket(AF_UNIX, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 5
connect(5, {sa_family=AF_UNIX, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
close(5) = 0
newfstatat(AT_FDCWD, "/etc/nsswitch.conf", {st_mode=S_IFREG|0644, st_size=569, ...}, 0) = 0
newfstatat(AT_FDCWD, "/", {st_mode=S_IFDIR|0755, st_size=4096, ...}, 0) = 0
openat(AT_FDCWD, "/etc/nsswitch.conf", O_RDONLY|O_CLOEXEC) = 5
newfstatat(5, "", {st_mode=S_IFREG|0644, st_size=569, ...}, AT_EMPTY_PATH) = 0
read(5, "# /etc/nsswitch.conf\n#\n# Example"..., 4096) = 569
read(5, "", 4096) = 0
newfstatat(5, "", {st_mode=S_IFREG|0644, st_size=569, ...}, AT_EMPTY_PATH) = 0
close(5) = 0
openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 5
newfstatat(5, "", {st_mode=S_IFREG|0644, st_size=90731, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 90731, PROT_READ, MAP_PRIVATE, 5, 0) = 0x7fe07002b000
close(5) = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = 5
read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0 $\0\0\0\0\0\0"..., 832) = 832
newfstatat(5, "", {st_mode=S_IFREG|0644, st_size=44024, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 47104, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7fe07001f000
mmap(0x7fe070021000, 28672, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x2000) = 0x7fe070021000
mmap(0x7fe070028000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x9000) = 0x7fe070028000
mmap(0x7fe070029000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x9000) = 0x7fe070029000
close(5) = 0
mprotect(0x7fe070029000, 4096, PROT_READ) = 0
munmap(0x7fe07002b000, 90731) = 0
newfstatat(AT_FDCWD, "/etc/nsswitch.conf", {st_mode=S_IFREG|0644, st_size=569, ...}, 0) = 0
openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 5
newfstatat(5, "", {st_mode=S_IFREG|0644, st_size=90731, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 90731, PROT_READ, MAP_PRIVATE, 5, 0) = 0x7fe07002b000
close(5) = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libnss_nis.so.2", O_RDONLY|O_CLOEXEC) = 5
read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0@%\0\0\0\0\0\0"..., 832) = 832
newfstatat(5, "", {st_mode=S_IFREG|0644, st_size=55808, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 58600, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7fe070010000
mmap(0x7fe070012000, 36864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x2000) = 0x7fe070012000
mmap(0x7fe07001b000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0xb000) = 0x7fe07001b000
mmap(0x7fe07001d000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0xc000) = 0x7fe07001d000
close(5) = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libnsl.so.2", O_RDONLY|O_CLOEXEC) = 5
read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\360L\0\0\0\0\0\0"..., 832) = 832
newfstatat(5, "", {st_mode=S_IFREG|0644, st_size=93280, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 105032, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7fe05b7e5000
mmap(0x7fe05b7e9000, 57344, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x4000) = 0x7fe05b7e9000
mmap(0x7fe05b7f7000, 16384, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x12000) = 0x7fe05b7f7000
mmap(0x7fe05b7fb000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x15000) = 0x7fe05b7fb000
mmap(0x7fe05b7fd000, 6728, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fe05b7fd000
close(5) = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libtirpc.so.3", O_RDONLY|O_CLOEXEC) = 5
read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\220\201\0\0\0\0\0\0"..., 832) = 832
newfstatat(5, "", {st_mode=S_IFREG|0644, st_size=178816, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 183160, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7fe05b7b8000
mmap(0x7fe05b7bf000, 110592, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x7000) = 0x7fe05b7bf000
mmap(0x7fe05b7da000, 36864, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x22000) = 0x7fe05b7da000
mmap(0x7fe05b7e3000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x2a000) = 0x7fe05b7e3000
close(5) = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libgssapi_krb5.so.2", O_RDONLY|O_CLOEXEC) = 5
read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\260\323\0\0\0\0\0\0"..., 832) = 832
newfstatat(5, "", {st_mode=S_IFREG|0644, st_size=330472, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 332824, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7fe05b766000
mmap(0x7fe05b771000, 225280, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0xb000) = 0x7fe05b771000
mmap(0x7fe05b7a8000, 49152, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x42000) = 0x7fe05b7a8000
mmap(0x7fe05b7b4000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x4d000) = 0x7fe05b7b4000
close(5) = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libkrb5.so.3", O_RDONLY|O_CLOEXEC) = 5
read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0000/\2\0\0\0\0\0"..., 832) = 832
newfstatat(5, "", {st_mode=S_IFREG|0644, st_size=819776, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 822416, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7fe05b69d000
mprotect(0x7fe05b6be000, 626688, PROT_NONE) = 0
mmap(0x7fe05b6be000, 372736, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x21000) = 0x7fe05b6be000
mmap(0x7fe05b719000, 249856, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x7c000) = 0x7fe05b719000
mmap(0x7fe05b757000, 61440, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0xb9000) = 0x7fe05b757000
close(5) = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libk5crypto.so.3", O_RDONLY|O_CLOEXEC) = 5
read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300D\0\0\0\0\0\0"..., 832) = 832
newfstatat(5, "", {st_mode=S_IFREG|0644, st_size=174672, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 180288, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7fe05b670000
mprotect(0x7fe05b674000, 155648, PROT_NONE) = 0
mmap(0x7fe05b674000, 102400, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x4000) = 0x7fe05b674000
mmap(0x7fe05b68d000, 49152, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x1d000) = 0x7fe05b68d000
mmap(0x7fe05b69a000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x29000) = 0x7fe05b69a000
mmap(0x7fe05b69c000, 64, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fe05b69c000
close(5) = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libcom_err.so.2", O_RDONLY|O_CLOEXEC) = 5
read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300#\0\0\0\0\0\0"..., 832) = 832
newfstatat(5, "", {st_mode=S_IFREG|0644, st_size=18504, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 20552, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7fe074d9b000
mmap(0x7fe074d9d000, 4096, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x2000) = 0x7fe074d9d000
mmap(0x7fe074d9e000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x3000) = 0x7fe074d9e000
mmap(0x7fe074d9f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x3000) = 0x7fe074d9f000
close(5) = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libkrb5support.so.0", O_RDONLY|O_CLOEXEC) = 5
read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0206\0\0\0\0\0\0"..., 832) = 832
newfstatat(5, "", {st_mode=S_IFREG|0644, st_size=52016, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 54224, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7fe070002000
mprotect(0x7fe070005000, 36864, PROT_NONE) = 0
mmap(0x7fe070005000, 24576, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x3000) = 0x7fe070005000
mmap(0x7fe07000b000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x9000) = 0x7fe07000b000
mmap(0x7fe07000e000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0xb000) = 0x7fe07000e000
close(5) = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libkeyutils.so.1", O_RDONLY|O_CLOEXEC) = 5
read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0`\"\0\0\0\0\0\0"..., 832) = 832
newfstatat(5, "", {st_mode=S_IFREG|0644, st_size=22600, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 24592, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7fe05b669000
mmap(0x7fe05b66b000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x2000) = 0x7fe05b66b000
mmap(0x7fe05b66d000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x4000) = 0x7fe05b66d000
mmap(0x7fe05b66e000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x4000) = 0x7fe05b66e000
close(5) = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 5
read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\2406\0\0\0\0\0\0"..., 832) = 832
newfstatat(5, "", {st_mode=S_IFREG|0644, st_size=72648, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 84552, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7fe05b654000
mprotect(0x7fe05b657000, 57344, PROT_NONE) = 0
mmap(0x7fe05b657000, 40960, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x3000) = 0x7fe05b657000
mmap(0x7fe05b661000, 12288, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0xd000) = 0x7fe05b661000
mmap(0x7fe05b665000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x10000) = 0x7fe05b665000
mmap(0x7fe05b667000, 6728, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fe05b667000
close(5) = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libdl.so.2", O_RDONLY|O_CLOEXEC) = 5
read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0@\20\0\0\0\0\0\0"..., 832) = 832
newfstatat(5, "", {st_mode=S_IFREG|0644, st_size=14432, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 16424, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7fe05b64f000
mmap(0x7fe05b650000, 4096, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x1000) = 0x7fe05b650000
mmap(0x7fe05b651000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x2000) = 0x7fe05b651000
mmap(0x7fe05b652000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x2000) = 0x7fe05b652000
close(5) = 0
mprotect(0x7fe05b652000, 4096, PROT_READ) = 0
mprotect(0x7fe05b665000, 4096, PROT_READ) = 0
mprotect(0x7fe05b66e000, 4096, PROT_READ) = 0
mprotect(0x7fe07000e000, 4096, PROT_READ) = 0
mprotect(0x7fe074d9f000, 4096, PROT_READ) = 0
mprotect(0x7fe05b69a000, 4096, PROT_READ) = 0
mprotect(0x7fe05b757000, 53248, PROT_READ) = 0
mprotect(0x7fe05b7b4000, 8192, PROT_READ) = 0
mprotect(0x7fe05b7e3000, 4096, PROT_READ) = 0
mprotect(0x7fe05b7fb000, 4096, PROT_READ) = 0
mprotect(0x7fe07001d000, 4096, PROT_READ) = 0
munmap(0x7fe07002b000, 90731) = 0
openat(AT_FDCWD, "/etc/passwd", O_RDONLY|O_CLOEXEC) = 5
newfstatat(5, "", {st_mode=S_IFREG|0644, st_size=2958, ...}, AT_EMPTY_PATH) = 0
lseek(5, 0, SEEK_SET) = 0
read(5, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 2958
close(5) = 0
newfstatat(AT_FDCWD, "/home/istvan/snap", {st_mode=S_IFDIR|0700, st_size=4096, ...}, 0) = 0
newfstatat(AT_FDCWD, "/home/istvan/snap/rpi-imager/271", {st_mode=S_IFDIR|0755, st_size=4096, ...}, 0) = 0
newfstatat(AT_FDCWD, "/home/istvan/snap/rpi-imager/common", {st_mode=S_IFDIR|0755, st_size=4096, ...}, 0) = 0
readlinkat(AT_FDCWD, "/home/istvan/snap/rpi-imager/current", "271", 128) = 3
openat(AT_FDCWD, "/proc/self/mountinfo", O_RDONLY|O_CLOEXEC) = 5
epoll_ctl(4, EPOLL_CTL_ADD, 5, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=1879862536, u64=140601929264392}}) = 0
fcntl(5, F_GETFL) = 0x8000 (flags O_RDONLY|O_LARGEFILE)
fcntl(5, F_SETFL, O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 0
read(5, "23 28 0:21 / /sys rw,nosuid,node"..., 4096) = 4049
read(5, "329 28 7:25 / /snap/rpi-imager/2"..., 4096) = 4031
read(5, "", 4096) = 0
epoll_ctl(4, EPOLL_CTL_DEL, 5, 0xc0003ad52c) = 0
close(5) = 0
umask(002) = 000
newfstatat(AT_FDCWD, "/run/user/1000", {st_mode=S_IFDIR|0700, st_size=400, ...}, 0) = 0
newfstatat(AT_FDCWD, "/run/user/1000/gdm/Xauthority", {st_mode=S_IFREG|0700, st_size=114, ...}, 0) = 0
openat(AT_FDCWD, "/run/user/1000/gdm/Xauthority", O_RDONLY|O_CLOEXEC) = 5
epoll_ctl(4, EPOLL_CTL_ADD, 5, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=1879862536, u64=140601929264392}}) = -1 EPERM (Operation not permitted)
epoll_ctl(4, EPOLL_CTL_DEL, 5, 0xc0003ad60c) = -1 EPERM (Operation not permitted)
newfstatat(AT_FDCWD, "/run", {st_mode=S_IFDIR|0755, st_size=1060, ...}, AT_SYMLINK_NOFOLLOW) = 0
newfstatat(AT_FDCWD, "/run/user", {st_mode=S_IFDIR|0755, st_size=60, ...}, AT_SYMLINK_NOFOLLOW) = 0
newfstatat(AT_FDCWD, "/run/user/1000", {st_mode=S_IFDIR|0700, st_size=400, ...}, AT_SYMLINK_NOFOLLOW) = 0
newfstatat(AT_FDCWD, "/run/user/1000/gdm", {st_mode=S_IFDIR|0711, st_size=60, ...}, AT_SYMLINK_NOFOLLOW) = 0
newfstatat(AT_FDCWD, "/run/user/1000/gdm/Xauthority", {st_mode=S_IFREG|0700, st_size=114, ...}, AT_SYMLINK_NOFOLLOW) = 0
close(5) = 0
openat(AT_FDCWD, "/proc/self/mountinfo", O_RDONLY|O_CLOEXEC) = 5
epoll_ctl(4, EPOLL_CTL_ADD, 5, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=1879862536, u64=140601929264392}}) = 0
fcntl(5, F_GETFL) = 0x8000 (flags O_RDONLY|O_LARGEFILE)
fcntl(5, F_SETFL, O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 0
read(5, "23 28 0:21 / /sys rw,nosuid,node"..., 4096) = 4049
read(5, "329 28 7:25 / /snap/rpi-imager/2"..., 4096) = 4031
read(5, "", 4096) = 0
epoll_ctl(4, EPOLL_CTL_DEL, 5, 0xc0003ad5d4) = 0
close(5) = 0
geteuid() = 1000
getuid() = 1000
socket(AF_UNIX, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 5
setsockopt(5, SOL_SOCKET, SO_BROADCAST, [1], 4) = 0
connect(5, {sa_family=AF_UNIX, sun_path="/run/user/1000/bus"}, 21) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 5, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=1879862536, u64=140601929264392}}) = 0
getsockname(5, {sa_family=AF_UNIX}, [112 => 2]) = 0
getpeername(5, {sa_family=AF_UNIX, sun_path="/run/user/1000/bus"}, [112 => 21]) = 0
getuid() = 1000
getpid() = 10266
getuid() = 1000
getgid() = 1000
sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\0", iov_len=1}], msg_iovlen=1, msg_control=[{cmsg_len=28, cmsg_level=SOL_SOCKET, cmsg_type=SCM_CREDENTIALS, cmsg_data={pid=10266, uid=1000, gid=1000}}], msg_controllen=32, msg_flags=0}, 0) = 1
write(5, "AUTH\r\n", 6) = 6
read(5, "REJECTED EXTERNAL\r\n", 4096) = 19
write(5, "AUTH EXTERNAL 31303030\r\n", 24) = 24
read(5, "OK 3bfa7eb601b723ab1bc6012b62a7b"..., 4096) = 37
write(5, "NEGOTIATE_UNIX_FD\r\n", 19) = 19
futex(0x55c3769a0cd0, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0x55c3769a0bd0, FUTEX_WAKE_PRIVATE, 1) = 1
read(5, "AGREE_UNIX_FD\r\n", 4096) = 15
write(5, "BEGIN\r\n", 7) = 7
futex(0xc00009a148, FUTEX_WAKE_PRIVATE, 1) = 1
recvmsg(5, {msg_namelen=112}, 0) = -1 EAGAIN (Resource temporarily unavailable)
futex(0x55c3769a1788, FUTEX_WAIT_PRIVATE, 0, NULL) = 0
futex(0x55c3769a1788, FUTEX_WAIT_PRIVATE, 0, NULL) = 0
epoll_pwait(4, [{events=EPOLLOUT, data={u32=1879862536, u64=140601929264392}}], 128, 0, NULL, 0) = 1
futex(0xc00009a148, FUTEX_WAKE_PRIVATE, 1) = 1
openat(AT_FDCWD, "/proc/sys/kernel/random/uuid", O_RDONLY|O_CLOEXEC) = 6
epoll_ctl(4, EPOLL_CTL_ADD, 6, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=1879862952, u64=140601929264808}}) = 0
fcntl(6, F_GETFL) = 0x8000 (flags O_RDONLY|O_LARGEFILE)
fcntl(6, F_SETFL, O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 0
fstat(6, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
read(6, "276b7265-343c-4667-9e50-b94ca3e3"..., 512) = 37
read(6, "", 1499) = 0
epoll_ctl(4, EPOLL_CTL_DEL, 6, 0xc0003ad694) = 0
close(6) = 0
getpid() = 10266
write(5, "l\1\0\1S\0\0\0\2\0\0\0\177\0\0\0\1\1o\0\25\0\0\0/org/fre"..., 227) = 227
futex(0xc00009a148, FUTEX_WAKE_PRIVATE, 1) = 1
write(5, "l\1\0\1\200\0\0\0\3\0\0\0\266\0\0\0\1\1o\0\31\0\0\0/org/fre"..., 328) = 328
futex(0xc00009a148, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0x55c3769a1788, FUTEX_WAIT_PRIVATE, 0, NULL) = 0
futex(0x55c3769a1788, FUTEX_WAIT_PRIVATE, 0, NULL) = 0
epoll_pwait(4, [], 128, 0, NULL, 0) = 0
epoll_pwait(4, [{events=EPOLLIN|EPOLLOUT, data={u32=1879862536, u64=140601929264392}}], 128, -1, NULL, 3) = 1
futex(0x55c3769a0cd0, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0x55c3769a0bd0, FUTEX_WAKE_PRIVATE, 1) = 1
recvmsg(5, {msg_name={sa_family=AF_UNIX, sun_path="/run/user/1000/bus"}, msg_namelen=112 => 21, msg_iov=[{iov_base="l\2\1\1\0\0\0\0\4\0\0\0005\0\0\0", iov_len=16}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 16
recvmsg(5, {msg_name={sa_family=AF_UNIX, sun_path="/run/user/1000/bus"}, msg_namelen=112 => 21, msg_iov=[{iov_base="\6\1s\0\6\0\0\0:1.263\0\0\5\1u\0\4\0\0\0\7\1s\0\24\0\0\0"..., iov_len=56}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 56
futex(0xc000086148, FUTEX_WAKE_PRIVATE, 1) = 1
recvmsg(5, {msg_namelen=112}, 0) = -1 EAGAIN (Resource temporarily unavailable)
futex(0x55c3769a1788, FUTEX_WAIT_PRIVATE, 0, NULL) = ?
...
I'll try to figure out what is going on with my system and I'll let you know if something turns out. Thank You for the help! :)
I've checked my journalctl and I'm seeing this:
audit[8023]: AVC apparmor="DENIED" operation="open" profile="snap.rpi-imager.rpi-imager" name="/run/mount/utab" pid=8023 comm="lsblk" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
kernel: audit: type=1400 audit(1655291304.058:102): apparmor="DENIED" operation="open" profile="snap.rpi-imager.rpi-imager" name="/run/mount/utab" pid=8023 comm="lsblk" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
audit[8025]: AVC apparmor="DENIED" operation="open" profile="snap.rpi-imager.rpi-imager" name="/run/mount/utab" pid=8025 comm="lsblk" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
kernel: audit: type=1400 audit(1655291305.106:103): apparmor="DENIED" operation="open" profile="snap.rpi-imager.rpi-imager" name="/run/mount/utab" pid=8025 comm="lsblk" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
I've faced the issue in subject using rpi-imager from snap.
My versions: Ubuntu: 22.10 (64 bit) uname: 5.13.0-39-generic #44-Ubuntu SMP Thu Mar 24 15:35:05 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux rpi-imager:
snap:
When I run it from command line I'm getting these log messages:
If I try it with sudo:
rpi-imager connections:
I've tried to run the
without luck. Do you have any idea why am I getting this error?