cbeley / beleyenv

A dev-focused, idempotent system bootstrap script for ChromeOS's officially supported Linux container. Designed for me, but flexible enough for you to use too!

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Reports of broken flatpak/docker due to security.nesting

cbeley opened this issue · comments

I have not experienced any issues and I don't remember doing this myself, but I recently saw some reports of people claiming flatpak wasn't working: https://www.reddit.com/r/Crostini/comments/r9gmp0/flatpak_broken_on_chrome_960466477 .

If this is true, it'd also impact docker if it's related to the security.nesting flag.

Can be fixed manually via crosh (Ctrl+Alt+T):

  • vsh termina
  • lxc config set penguin security.nesting true

Supposedly documented as an issue in https://bugs.chromium.org/p/chromium/issues/detail?id=1087937, but it's a rather old ticket and I have not had issues or seen people have issues lately until now.

I'll close this out once I do a clean re-install of everything or see more confirmation about what the default is for security.nesting.

Note for me, but may help someone else too. :)

I did a fresh install today on Debian 11/ChromeOS 100 (Complete powerwash too -- doing a fresh start). Docker and flatpak appear to be working out of the box!

Pretty sure this is no longer an issue.