Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unable to launch game #6

Closed
Nightmayr opened this issue Apr 30, 2022 · 66 comments · Fixed by canonical/snapd#12242 or canonical/snapd#12263
Closed

Unable to launch game #6

Nightmayr opened this issue Apr 30, 2022 · 66 comments · Fixed by canonical/snapd#12242 or canonical/snapd#12263
Assignees
Labels
type/bug Something isn't working

Comments

@Nightmayr
Copy link
Contributor

I'm trying to launch a game (Apex Legends) but Steam shows the game launching for a few seconds and then provides the option to "Play" the game indicating the game failed to launch. Apex Legends makes use of EasyAnti-Cheat for online play (in case it's relevant to the failed launch).

Screencast:

Screencast.from.30-04-22.21.27.05.mp4

Running from the terminal shows:

GameAction [AppID 1172470, ActionID 7] : LaunchApp changed task to SynchronizingCloud with ""
GameAction [AppID 1172470, ActionID 7] : LaunchApp changed task to SiteLicenseSeatCheckout with ""
GameAction [AppID 1172470, ActionID 7] : LaunchApp changed task to CreatingProcess with ""
GameAction [AppID 1172470, ActionID 7] : LaunchApp waiting for user response to CreatingProcess ""
GameAction [AppID 1172470, ActionID 7] : LaunchApp continues with user response "CreatingProcess"
/bin/sh\0-c\0/home/umayr/snap/steam/common/.local/share/Steam/ubuntu12_32/reaper SteamLaunch AppId=1172470 -- '/home/umayr/snap/steam/common/.local/share/Steam/steamapps/common/SteamLinuxRuntime_soldier'/_v2-entry-point --verb=waitforexitandrun -- '/home/umayr/snap/steam/common/.local/share/Steam/steamapps/common/Proton - Experimental'/proton waitforexitandrun  '/home/umayr/snap/steam/common/.local/share/Steam/steamapps/common/Apex Legends/EasyAntiCheat_launcher.exe' -steam\0
Game process added : AppID 1172470 "/home/umayr/snap/steam/common/.local/share/Steam/ubuntu12_32/reaper SteamLaunch AppId=1172470 -- '/home/umayr/snap/steam/common/.local/share/Steam/steamapps/common/SteamLinuxRuntime_soldier'/_v2-entry-point --verb=waitforexitandrun -- '/home/umayr/snap/steam/common/.local/share/Steam/steamapps/common/Proton - Experimental'/proton waitforexitandrun  '/home/umayr/snap/steam/common/.local/share/Steam/steamapps/common/Apex Legends/EasyAntiCheat_launcher.exe' -steam", ProcID 70415, IP 0.0.0.0:0
chdir /home/umayr/snap/steam/common/.local/share/Steam/steamapps/common/Apex Legends
ERROR: ld.so: object '/home/umayr/snap/steam/common/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored.
GameAction [AppID 1172470, ActionID 7] : LaunchApp changed task to WaitingGameWindow with ""
ERROR: ld.so: object '/home/umayr/snap/steam/common/.local/share/Steam/ubuntu12_64/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS64): ignored.
ERROR: ld.so: object '/home/umayr/snap/steam/common/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored.
ERROR: ld.so: object '/home/umayr/snap/steam/common/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored.
ERROR: ld.so: object '/home/umayr/snap/steam/common/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored.
pid 70420 != 70417, skipping destruction (fork without exec?)

(pressure-vessel-wrap:70417): steam-runtime-tools-CRITICAL **: Somehow got a wait_status that was neither exited nor signaled

(pressure-vessel-wrap:70417): steam-runtime-tools-CRITICAL **: Somehow got a wait_status that was neither exited nor signaled

(pressure-vessel-wrap:70417): steam-runtime-tools-CRITICAL **: file ../steam-runtime-tools/utils.c: line 213 (_srt_process_timeout_wait_status): should not be reached

(pressure-vessel-wrap:70417): steam-runtime-tools-CRITICAL **: file ../steam-runtime-tools/utils.c: line 213 (_srt_process_timeout_wait_status): should not be reached

(pressure-vessel-wrap:70417): steam-runtime-tools-CRITICAL **: Somehow got a wait_status that was neither exited nor signaled

(pressure-vessel-wrap:70417): steam-runtime-tools-CRITICAL **: file ../steam-runtime-tools/utils.c: line 213 (_srt_process_timeout_wait_status): should not be reached

(pressure-vessel-wrap:70417): steam-runtime-tools-CRITICAL **: Somehow got a wait_status that was neither exited nor signaled

(pressure-vessel-wrap:70417): steam-runtime-tools-CRITICAL **: file ../steam-runtime-tools/utils.c: line 213 (_srt_process_timeout_wait_status): should not be reached
GameAction [AppID 1172470, ActionID 7] : LaunchApp changed task to Completed with ""
pressure-vessel-wrap[70417]: W: "var/lib/snapd/hostfs/usr/share/nvidia" is unlikely to appear in "/run/host"
pressure-vessel-wrap[70417]: W: "var/lib/snapd/hostfs/usr/share/nvidia" is unlikely to appear in "/run/host"
bwrap: Can't bind mount /oldroot/var/lib/snapd/hostfs/usr/lib/i386-linux-gnu/libEGL_nvidia.so.510.60.02 on /newroot/var/lib/snapd/hostfs/usr/lib/i386-linux-gnu/libEGL_nvidia.so.510.60.02: Unable to mount source on destination: Permission denied
Game process removed: AppID 1172470 "/home/umayr/snap/steam/common/.local/share/Steam/ubuntu12_32/reaper SteamLaunch AppId=1172470 -- '/home/umayr/snap/steam/common/.local/share/Steam/steamapps/common/SteamLinuxRuntime_soldier'/_v2-entry-point --verb=waitforexitandrun -- '/home/umayr/snap/steam/common/.local/share/Steam/steamapps/common/Proton - Experimental'/proton waitforexitandrun  '/home/umayr/snap/steam/common/.local/share/Steam/steamapps/common/Apex Legends/EasyAntiCheat_launcher.exe' -steam", ProcID 70415 
ThreadGetProcessExitCode: no such process 70418
ThreadGetProcessExitCode: no such process 70417
ThreadGetProcessExitCode: no such process 70416

Judging from the log it looks like it could be nvidia GPU related.

Steam snap version:
installed: 1.0.0.74 (6) 196MB

snapd version:
installed: 2.55.4 (15793) 46MB snapd

GPU: NVIDIA GeForce RTX 2080 Ti (Driver 510.60.02)

@SuperMatt
Copy link

The same thing happens to me. I did a little bit of digging and I noticed that it does some weird things to the Prefix. I mentioned this in the discourse thread (https://discourse.ubuntu.com/t/introducing-early-access-to-the-steam-snap/28082/29?u=supermatt), but I will re-add the details here.

Essentially, I think the snap version of steam does something weird to a number of the files within the game's prefix when you try to run it, and I noticed, for example, that some of the files were truncated to 0 length. Below you can see there's only 3 zero length files when I was running Quake under flatpak, but 267 under snap.

$ find 2310.flatpak -type f -size 0 | wc -l
3
$ find 2310.snap -type f -size 0 | wc -l 
267

This is quite a problematic bug because if you're sharing your library between snap and flatpak, the prefix is then broken for the flatpak version too.

@SuperMatt
Copy link

Strange, I've just done some testing on games that aren't just the original quake, and the zero size files thing doesn't hold true.

It seems I can get Quake 2 to run with Proton 7.0-2, but not with Proton Experimental. Quake 1 doesn't work at all, and has the zero size files issue, which means it breaks the Flatpak version. Quake champions just won't start at all in Snap Steam, but then does start in Flatpak.

@SuperMatt
Copy link

Decided to do another test where I completely refreshed snap steam, and the problem with zeroing the filesize of a number of files does persist.

I just tried Quake Champions, which didn't have such an issue 2 days ago, and now it does. The compatdata here is the snap version, and compatdata.bak is the flatpak version.

[matthew@cherry steamapps] $ find compatdata/611500 -size 0 | wc -l
273
[matthew@cherry steamapps] $ find compatdata.bak/611500 -size 0 | wc -l
5

@DenX
Copy link

DenX commented May 4, 2022

Pure snap steam installation here.

I'm seeing denials by Apparmor when I try to run a game with Proton 7.0-2.

[12120.306708] audit: type=1400 audit(1651638755.855:581): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/etc/vulkan/icd.d/" pid=17736 comm="cross-architect" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[12120.307501] audit: type=1400 audit(1651638755.855:582): apparmor="DENIED" operation="exec" profile="snap.steam.steam" name="/usr/bin/timeout" pid=17748 comm="i386-linux-gnu" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
[12120.307560] audit: type=1400 audit(1651638755.855:583): apparmor="DENIED" operation="exec" profile="snap.steam.steam" name="/usr/bin/timeout" pid=17748 comm="i386-linux-gnu" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
[12120.307840] audit: type=1400 audit(1651638755.855:584): apparmor="DENIED" operation="exec" profile="snap.steam.steam" name="/usr/bin/timeout" pid=17749 comm="x86_64-linux-gn" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
[12120.307898] audit: type=1400 audit(1651638755.855:585): apparmor="DENIED" operation="exec" profile="snap.steam.steam" name="/usr/bin/timeout" pid=17749 comm="x86_64-linux-gn" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
[12120.308686] audit: type=1400 audit(1651638755.859:586): apparmor="DENIED" operation="exec" profile="snap.steam.steam" name="/usr/bin/timeout" pid=17750 comm="i386-linux-gnu" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
[12120.308741] audit: type=1400 audit(1651638755.859:587): apparmor="DENIED" operation="exec" profile="snap.steam.steam" name="/usr/bin/timeout" pid=17750 comm="i386-linux-gnu" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
[12120.308885] audit: type=1400 audit(1651638755.859:588): apparmor="DENIED" operation="exec" profile="snap.steam.steam" name="/usr/bin/timeout" pid=17751 comm="x86_64-linux-gn" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
[12120.308961] audit: type=1400 audit(1651638755.859:589): apparmor="DENIED" operation="exec" profile="snap.steam.steam" name="/usr/bin/timeout" pid=17751 comm="x86_64-linux-gn" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
[12120.790956] audit: type=1400 audit(1651638756.339:590): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/etc/vulkan/explicit_layer.d/" pid=17736 comm="pressure-vessel" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0

Almost no files under compatdata/<appid>/ are created. Sub folders like pfx/drive_c/windows don't exist and therefore miss the links to the Proton 7 executables/libraries.

@kenvandine
Copy link
Collaborator

I think this will actually be fixed by canonical/snapd#11760

@SuperMatt
Copy link

@kenvandine when's this likely to land? I did a snap refresh about 5 minutes before your comment and still had issues.

@kenvandine
Copy link
Collaborator

kenvandine commented May 6, 2022 via email

@SuperMatt
Copy link

Thanks @kenvandine. I'll keep an eye on the updates and will report back when if/when I see it fixed.

@SuperMatt
Copy link

@kenvandine I see that the change mentioned has been shipped. No longer are certain games' prefix files zeroed, but the games still do not start. I wish I had more time to troubleshoot right now, but I may be able to find some time tomorrow.

@pallebone
Copy link

pallebone commented May 11, 2022

I am also having this issue. I have updated snapd to latest edge with :

sudo snap refresh snapd --channel=latest/edge

and also latest steam with :

sudo snap refresh steam --channel=latest/edge

When running apex legends I see this error in the console output:

bwrap: Can't bind mount /oldroot/var/lib/snapd/hostfs/usr/lib/i386-linux-gnu/libnvidia-eglcore.so.450.172.01 on /newroot/var/lib/snapd/hostfs/usr/lib/i386-linux-gnu/libnvidia-eglcore.so.450.172.01: Unable to mount source on destination: Permission denied

also later on:

bwrap: Can't bind mount /oldroot/var/lib/snapd/hostfs/usr/lib/i386-linux-gnu/libnvidia-eglcore.so.450.172.01 on /newroot/var/lib/snapd/hostfs/usr/lib/i386-linux-gnu/libnvidia-eglcore.so.450.172.01: Unable to mount source on destination: Permission denied
Game process removed: AppID 1172470 "/home/aragorn/snap/steam/common/.local/share/Steam/ubuntu12_32/reaper SteamLaunch AppId=1172470 -- '/home/aragorn/snap/steam/common/.local/share/Steam/steamapps/common/SteamLinuxRuntime_soldier'/_v2-entry-point --verb=waitforexitandrun -- '/home/aragorn/snap/steam/common/.local/share/Steam/steamapps/common/Proton 7.0'/proton waitforexitandrun '/home/aragorn/snap/steam/common/.local/share/Steam/steamapps/common/Apex Legends/EasyAntiCheat_launcher.exe' -steam", ProcID 404550
ThreadGetProcessExitCode: no such process 404553

Unsure if this info is relevant.

Here is the channels I am tracking when testing:
Screenshot from 2022-05-10 23-32-07

@SuperMatt
Copy link

For what it's worth, I'm using an AMD graphics card and I can't launch some games.

@Dadadah
Copy link

Dadadah commented May 22, 2022

Pure snap steam installation here.

I'm seeing denials by Apparmor when I try to run a game with Proton 7.0-2.

[12120.306708] audit: type=1400 audit(1651638755.855:581): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/etc/vulkan/icd.d/" pid=17736 comm="cross-architect" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[12120.307501] audit: type=1400 audit(1651638755.855:582): apparmor="DENIED" operation="exec" profile="snap.steam.steam" name="/usr/bin/timeout" pid=17748 comm="i386-linux-gnu" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
[12120.307560] audit: type=1400 audit(1651638755.855:583): apparmor="DENIED" operation="exec" profile="snap.steam.steam" name="/usr/bin/timeout" pid=17748 comm="i386-linux-gnu" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
[12120.307840] audit: type=1400 audit(1651638755.855:584): apparmor="DENIED" operation="exec" profile="snap.steam.steam" name="/usr/bin/timeout" pid=17749 comm="x86_64-linux-gn" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
[12120.307898] audit: type=1400 audit(1651638755.855:585): apparmor="DENIED" operation="exec" profile="snap.steam.steam" name="/usr/bin/timeout" pid=17749 comm="x86_64-linux-gn" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
[12120.308686] audit: type=1400 audit(1651638755.859:586): apparmor="DENIED" operation="exec" profile="snap.steam.steam" name="/usr/bin/timeout" pid=17750 comm="i386-linux-gnu" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
[12120.308741] audit: type=1400 audit(1651638755.859:587): apparmor="DENIED" operation="exec" profile="snap.steam.steam" name="/usr/bin/timeout" pid=17750 comm="i386-linux-gnu" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
[12120.308885] audit: type=1400 audit(1651638755.859:588): apparmor="DENIED" operation="exec" profile="snap.steam.steam" name="/usr/bin/timeout" pid=17751 comm="x86_64-linux-gn" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
[12120.308961] audit: type=1400 audit(1651638755.859:589): apparmor="DENIED" operation="exec" profile="snap.steam.steam" name="/usr/bin/timeout" pid=17751 comm="x86_64-linux-gn" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
[12120.790956] audit: type=1400 audit(1651638756.339:590): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/etc/vulkan/explicit_layer.d/" pid=17736 comm="pressure-vessel" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0

Almost no files under compatdata// are created. Sub folders like pfx/drive_c/windows don't exist and therefore miss the links to the Proton 7 executables/libraries.

I'm experiencing this as well. To try to work around it, I created a prefix using the proton binary in command line without steam open. This created the prefix, but I am still unable to launch the game. I'm seeing the same errors as @pallebone.

@Nightmayr
Copy link
Contributor Author

Nightmayr commented May 26, 2022

I'm able to launch games both native and proton on an Intel laptop using integrated graphics. On Nvidia proton games don't launch as described in my original comment, native games do launch but don't detect the GPU. Running Total War: Three Kingdoms the only renderer available is llvmpipe.
Screenshot from 2022-05-26 21-42-54
What the deb version of Steam shows:
image

The only vulkan related warning in the log was:
WARNING: lavapipe is not a conformant vulkan implementation, testing use only.

EDIT: Using this patch #20, Vulkan does work for Nvidia GPUs when running native games. Proton games still don't work however.

@ashuntu ashuntu added the type/bug Something isn't working label May 27, 2022
@thatLeaflet
Copy link

I'm experiencing the same issue on using Snapd edge and Steam edge. I'm running an AMD card, games are on a mounted drive that has also been used with Steam deb and Steam flatpak. But I also installed another game (Elder Scrolls Arena, chosen just because it was a quick download) but that wouldn't launch either.

@ashuntu
Copy link
Collaborator

ashuntu commented May 31, 2022

Also getting a similar error as @pallebone when using an NVIDIA card + Proton, including games that run otherwise natively. Integrated graphics + Proton seems to work, however.

bwrap: Can't bind mount /oldroot/var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/libEGL_nvidia.so.470.129.06 on /newroot/var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/libEGL_nvidia.so.470.129.06: Unable to mount source on destination: Permission denied

@kenvandine
Copy link
Collaborator

@jhenstridge can you please propose some apparmor profile changes to test to see what we need to do to resolve this?

@jhenstridge
Copy link
Contributor

@ashuntu: when you get the bind mount error, could you check if there is a corresponding AppArmor denial error in dmesg? If so, could you include it in a comment here?

Allowing the bind mount should not be too difficult (via a change to snapd's steam-support interface), but I wouldn't be surprised if more work is needed after that.

@ashuntu
Copy link
Collaborator

ashuntu commented Jun 3, 2022

@jhenstridge
This is the dmesg for the bind specifically:

[  925.244111] audit: type=1400 audit(1654267174.990:1490): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 profile="snap.steam.steam" name="/newroot/var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/libEGL_nvidia.so.470.129.06" pid=38972 comm="pv-bwrap" srcname="/oldroot/var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/libEGL_nvidia.so.470.129.06" flags="rw, rbind"

@pallebone
Copy link

pallebone commented Jun 9, 2022

Not moaning (maybe a tiny bit) but is there any chance for some feedback from anyone working on the snap version of steam? Issues were reported over a month ago and there hasnt been much movement after the initial fanfare that the ubuntu team was gearing up to support gamers and assign a dedicated team. As of right now, its totally unusable. Would be great to just understand the timeline and be able to manage expectations thats all. Just any feedback would be great even if its "this is on hold for 6 months" etc.

@kenvandine
Copy link
Collaborator

Sorry, we are actively working on these things. For example, there's a PR open in snapd that will fix the launching on devices with nvidia drivers. The reports have been very useful and we are working hard to get fixes out to help gather even more feedback. As for staffing up the new team, we are still in the process of hiring that team but we are making great progress on that front.

@pallebone
Copy link

Ok many thanks for the update, hopefully it gets merged soon :)

@jhenstridge
Copy link
Contributor

I've put up a PR that should allow the mount to succeed. You can test it as follows:

  1. Download the "snap-files" artifact linked at the bottom of https://github.com/snapcore/snapd/actions/runs/2461270153
  2. Extract the zip file, and install the snap with sudo snap install --dangerous snapd_*.snap
  3. Close and relaunch Steam

When you're done testing, you should switch back to stable snapd with sudo snap refresh --amend --stable snapd.

I suspect that the changes in the PR won't be sufficient to get Nvidia drivers working, so please post any new failures and I'll try to get them in with the existing in-progress PR. As before, corresponding AppArmor denial messages in dmesg from the time of the failure are very useful in updating the policies.

@pallebone
Copy link

pallebone commented Jun 10, 2022

Hi I updated snap and here is the snap info of versions I am using of snapd and steam:

Screenshot from 2022-06-10 09-16-55
Screenshot from 2022-06-10 09-17-07

When running steam the errors from the steam client are:

bwrap: Can't bind mount /oldroot/etc/nvidia on /newroot/etc/nvidia: Unable to mount source on destination: Permission denied
bwrap: Can't bind mount /oldroot/etc/nvidia on /newroot/etc/nvidia: Unable to mount source on destination: Permission denied
Game process removed: AppID 1172470 "/home/aragorn/snap/steam/common/.local/share/Steam/ubuntu12_32/reaper SteamLaunch AppId=1172470 -- '/home/aragorn/snap/steam/common/.local/share/Steam/steamapps/common/SteamLinuxRuntime_soldier'/_v2-entry-point --verb=waitforexitandrun -- '/home/aragorn/snap/steam/common/.local/share/Steam/steamapps/common/Proton 7.0'/proton waitforexitandrun  '/home/aragorn/snap/steam/common/.local/share/Steam/steamapps/common/Apex Legends/EasyAntiCheat_launcher.exe' -steam", ProcID 3402982 

dmesg output is:

[1206368.997367] audit: type=1400 audit(1654866923.761:11087): apparmor="DENIED" operation="capable" profile="/snap/snapd/x1/usr/lib/snapd/snap-confine" pid=3402453 comm="snap-confine" capability=12  capname="net_admin"
[1206369.789976] audit: type=1326 audit(1654866924.553:11088): auid=1000 uid=1000 gid=1000 ses=4 subj==snap.steam.steam (enforce) pid=3402617 comm="steam" exe="/home/aragorn/snap/steam/common/.local/share/Steam/ubuntu12_32/steam" sig=0 arch=40000003 syscall=241 compat=1 ip=0xf7efd559 code=0x50000
[1206369.789982] audit: type=1326 audit(1654866924.553:11089): auid=1000 uid=1000 gid=1000 ses=4 subj==snap.steam.steam (enforce) pid=3402617 comm="steam" exe="/home/aragorn/snap/steam/common/.local/share/Steam/ubuntu12_32/steam" sig=0 arch=40000003 syscall=97 compat=1 ip=0xf7efd559 code=0x50000
[1206369.829708] audit: type=1400 audit(1654866924.593:11090): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/usr/local/" pid=3402617 comm="steam" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[1206369.829713] audit: type=1400 audit(1654866924.593:11091): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/usr/" pid=3402617 comm="steam" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[1206369.993433] audit: type=1400 audit(1654866924.757:11092): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A08:00/device:18/PNP0C09:00/PNP0C0D:00/input/input2/capabilities/ev" pid=3402617 comm="steam" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[1206369.994264] audit: type=1400 audit(1654866924.757:11093): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/sys/devices/pci0000:00/0000:00:14.0/usb1/1-1/1-1.3/1-1.3:1.1/0003:1532:0202.0004/input/input16/capabilities/ev" pid=3402617 comm="steam" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[1206369.994706] audit: type=1400 audit(1654866924.757:11094): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/sys/devices/pci0000:00/0000:00:14.0/usb1/1-1/1-1.4/1-1.4:1.1/0003:1532:0046.0007/input/input14/capabilities/ev" pid=3402617 comm="steam" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[1206369.995048] audit: type=1400 audit(1654866924.757:11095): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/sys/devices/pci0000:00/0000:00:1f.3/sound/card0/input23/capabilities/ev" pid=3402617 comm="steam" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[1206369.995134] audit: type=1400 audit(1654866924.757:11096): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/sys/devices/pci0000:00/0000:00:1f.3/sound/card0/input24/capabilities/ev" pid=3402617 comm="steam" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[1206374.381978] kauditd_printk_skb: 212 callbacks suppressed
[1206374.381982] audit: type=1400 audit(1654866929.145:11309): apparmor="DENIED" operation="file_lock" profile="snap.steam.steam" name="/usr/share/fonts/truetype/freefont/FreeMono.ttf" pid=3402617 comm="steam" requested_mask="k" denied_mask="k" fsuid=1000 ouid=0
[1206378.938776] audit: type=1400 audit(1654866933.701:11310): apparmor="DENIED" operation="file_lock" profile="snap.steam.steam" name="/usr/share/fonts/truetype/freefont/FreeSerifItalic.ttf" pid=3402617 comm="steam" requested_mask="k" denied_mask="k" fsuid=1000 ouid=0
[1206378.942388] audit: type=1400 audit(1654866933.705:11311): apparmor="DENIED" operation="file_lock" profile="snap.steam.steam" name="/usr/share/fonts/truetype/freefont/FreeSansBold.ttf" pid=3402617 comm="steam" requested_mask="k" denied_mask="k" fsuid=1000 ouid=0
[1206378.944827] audit: type=1400 audit(1654866933.709:11312): apparmor="DENIED" operation="file_lock" profile="snap.steam.steam" name="/usr/share/fonts/truetype/freefont/FreeMono.ttf" pid=3402617 comm="steam" requested_mask="k" denied_mask="k" fsuid=1000 ouid=0
[1206378.949955] audit: type=1400 audit(1654866933.713:11313): apparmor="DENIED" operation="file_lock" profile="snap.steam.steam" name="/home/aragorn/.fonts/Skeena/26114485575.ttf" pid=3402617 comm="steam" requested_mask="k" denied_mask="k" fsuid=1000 ouid=1000
[1206378.950551] audit: type=1400 audit(1654866933.713:11314): apparmor="DENIED" operation="file_lock" profile="snap.steam.steam" name="/usr/share/fonts/X11/misc/7x13-ISO8859-1.pcf.gz" pid=3402617 comm="steam" requested_mask="k" denied_mask="k" fsuid=1000 ouid=0
[1206378.953509] audit: type=1400 audit(1654866933.717:11315): apparmor="DENIED" operation="file_lock" profile="snap.steam.steam" name="/usr/share/fonts/truetype/freefont/FreeSansBold.ttf" pid=3402617 comm="steam" requested_mask="k" denied_mask="k" fsuid=1000 ouid=0
[1206379.076178] audit: type=1400 audit(1654866933.841:11316): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/etc/vulkan/icd.d/" pid=3402878 comm="cross-architect" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[1206379.905010] audit: type=1400 audit(1654866934.669:11317): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/etc/vulkan/explicit_layer.d/" pid=3402878 comm="pressure-vessel" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[1206379.905362] audit: type=1400 audit(1654866934.669:11318): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/etc/vulkan/implicit_layer.d/" pid=3402878 comm="pressure-vessel" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[1206380.222606] audit: type=1400 audit(1654866934.985:11319): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/" pid=3402935 comm="x86_64-linux-gn" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[1206380.228358] audit: type=1400 audit(1654866934.993:11320): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/" pid=3402935 comm="x86_64-linux-gn" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[1206380.229010] audit: type=1400 audit(1654866934.993:11321): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/" pid=3402935 comm="x86_64-linux-gn" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[1206380.236611] audit: type=1400 audit(1654866935.001:11322): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/" pid=3402935 comm="x86_64-linux-gn" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[1206380.237199] audit: type=1400 audit(1654866935.001:11323): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/" pid=3402935 comm="x86_64-linux-gn" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[1206380.245436] audit: type=1400 audit(1654866935.009:11324): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/" pid=3402935 comm="x86_64-linux-gn" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[1206380.246274] audit: type=1400 audit(1654866935.009:11325): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/" pid=3402935 comm="x86_64-linux-gn" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[1206380.254585] audit: type=1400 audit(1654866935.017:11326): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/" pid=3402935 comm="x86_64-linux-gn" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[1206390.843426] kauditd_printk_skb: 69 callbacks suppressed
[1206390.843430] audit: type=1326 audit(1654866945.605:11396): auid=1000 uid=1000 gid=1000 ses=4 subj==snap.steam.steam (enforce) pid=3402617 comm="COfflineMessage" exe="/home/aragorn/snap/steam/common/.local/share/Steam/ubuntu12_32/steam" sig=0 arch=40000003 syscall=97 compat=1 ip=0xf7efd559 code=0x50000

image:
Screenshot from 2022-06-10 09-20-41

@pallebone
Copy link

Tnx for looking :)

@ashuntu
Copy link
Collaborator

ashuntu commented Jun 10, 2022

@jhenstridge
Almost thought it was going to work, the game actually opens to a black screen at least this time, but nothing beyond that.

snap run steam

...
pid 701403 != 701400, skipping destruction (fork without exec?)
GameAction [AppID 632360, ActionID 1] : LaunchApp changed task to Completed with ""

(pressure-vessel-adverb:701482): pressure-vessel-WARNING **: Cannot create temporary directory for platform specific libraries: Failed to create file '/run/user/1000/snap.steam/pressure-vessel-libs-YK2ZN1': No such file or directory

(pressure-vessel-adverb:701482): pressure-vessel-WARNING **: Cannot create temporary directory for locales: Failed to create file '/run/user/1000/snap.steam/pressure-vessel-locales-YY9ZN1': No such file or directory
ERROR: ld.so: object '/home/a/snap/steam/common/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored.
ERROR: ld.so: object '/home/a/snap/steam/common/.local/share/Steam/ubuntu12_32/gameoverlayrenderer.so' from LD_PRELOAD cannot be preloaded (wrong ELF class: ELFCLASS32): ignored.
...

I saw no NVIDIA bind mount error this time.

dmesg

[117731.312997] systemd-journald[689]: Got invalid event from epoll for datagram fd: 9
[117732.808199] kauditd_printk_skb: 768696 callbacks suppressed
[117732.808201] audit: type=1400 audit(1654870545.378:3261616): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/proc/700153/autogroup" pid=700153 comm="CIPCServer::Thr" requested_mask="wc" denied_mask="wc" fsuid=1000 ouid=1000
[117732.808251] audit: type=1326 audit(1654870545.378:3261617): auid=1000 uid=1000 gid=1000 ses=2 subj=? pid=700153 comm="CIPCServer::Thr" exe="/home/a/snap/steam/common/.local/share/Steam/ubuntu12_32/steam" sig=0 arch=40000003 syscall=289 compat=1 ip=0xf7f93549 code=0x50000
[117732.844129] audit: type=1400 audit(1654870545.414:3261618): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/etc/vulkan/implicit_layer.d/" pid=700158 comm="fossilize_repla" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[117732.844134] audit: type=1400 audit(1654870545.414:3261619): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/etc/vulkan/implicit_layer.d/" pid=700156 comm="fossilize_repla" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[117732.844137] audit: type=1400 audit(1654870545.414:3261620): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/etc/vulkan/implicit_layer.d/" pid=700159 comm="fossilize_repla" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
...
[117737.842920] kauditd_printk_skb: 75 callbacks suppressed
[117737.842921] audit: type=1400 audit(1654870550.414:3261701): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/etc/vulkan/explicit_layer.d/" pid=700202 comm="pressure-vessel" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[117737.843299] audit: type=1400 audit(1654870550.414:3261702): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/etc/vulkan/implicit_layer.d/" pid=700202 comm="pressure-vessel" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[117738.544589] audit: type=1400 audit(1654870551.114:3261703): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/usr/local/lib/" pid=700284 comm="ldconfig.real" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
[117738.721177] audit: type=1326 audit(1654870551.290:3261704): auid=1000 uid=1000 gid=1000 ses=2 subj=? pid=700291 comm="wineserver" exe=2F686F6D652F612F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E202D204578706572696D656E74616C2F66696C65732F62696E2F77696E65736572766572 sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fc19606673d code=0x50000
[117738.744089] audit: type=1326 audit(1654870551.314:3261705): auid=1000 uid=1000 gid=1000 ses=2 subj=? pid=700289 comm="wine64" exe=2F686F6D652F612F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E202D204578706572696D656E74616C2F66696C65732F62696E2F77696E6536342D7072656C6F61646572 sig=0 arch=c000003e syscall=449 compat=0 ip=0x7eff4da6073d code=0x50000
[117738.759379] audit: type=1326 audit(1654870551.330:3261706): auid=1000 uid=1000 gid=1000 ses=2 subj=? pid=700293 comm="wine64" exe=2F686F6D652F612F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E202D204578706572696D656E74616C2F66696C65732F62696E2F77696E6536342D7072656C6F61646572 sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fafdcfc173d code=0x50000
[117738.762555] audit: type=1326 audit(1654870551.334:3261707): auid=1000 uid=1000 gid=1000 ses=2 subj=? pid=700293 comm="wineboot.exe" exe=2F686F6D652F612F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E202D204578706572696D656E74616C2F66696C65732F62696E2F77696E6536342D7072656C6F61646572 sig=0 arch=c000003e syscall=65535 compat=0 ip=0x600000000005 code=0x50000
[117738.762650] audit: type=1326 audit(1654870551.334:3261708): auid=1000 uid=1000 gid=1000 ses=2 subj=? pid=700289 comm="wine64" exe=2F686F6D652F612F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E202D204578706572696D656E74616C2F66696C65732F62696E2F77696E6536342D7072656C6F61646572 sig=0 arch=c000003e syscall=449 compat=0 ip=0x7eff4da6073d code=0x50000
...
[117742.845364] kauditd_printk_skb: 4234635 callbacks suppressed
[117742.845367] audit: type=1326 audit(1654870555.414:7495947): auid=1000 uid=1000 gid=1000 ses=2 subj=? pid=700367 comm=5269736B206F66205261696E20322E exe=2F686F6D652F612F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E202D204578706572696D656E74616C2F66696C65732F62696E2F77696E6536342D7072656C6F61646572 sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f633924473d code=0x50000
[117742.845372] audit: type=1326 audit(1654870555.414:7495948): auid=1000 uid=1000 gid=1000 ses=2 subj=? pid=700289 comm="steam.exe" exe=2F686F6D652F612F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E202D204578706572696D656E74616C2F66696C65732F62696E2F77696E6536342D7072656C6F61646572 sig=0 arch=c000003e syscall=449 compat=0 ip=0x7eff4da6073d code=0x50000
[117742.845376] audit: type=1326 audit(1654870555.414:7495950): auid=1000 uid=1000 gid=1000 ses=2 subj=? pid=700367 comm=5269736B206F66205261696E20322E exe=2F686F6D652F612F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E202D204578706572696D656E74616C2F66696C65732F62696E2F77696E6536342D7072656C6F61646572 sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f633924473d code=0x50000
[117742.845379] audit: type=1326 audit(1654870555.414:7495949): auid=1000 uid=1000 gid=1000 ses=2 subj=? pid=700295 comm="services.exe" exe=2F686F6D652F612F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E202D204578706572696D656E74616C2F66696C65732F62696E2F77696E6536342D7072656C6F61646572 sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f7989f9973d code=0x50000
...

@pallebone
Copy link

Unfair. I dont even get a black screen and still get the errors so you are somehow further along than me. Very sad.

@ashuntu
Copy link
Collaborator

ashuntu commented Jun 10, 2022

Unfair. I dont even get a black screen and still get the errors so you are somehow further along than me. Very sad.

It might be different just depending on card, what card do you have? Mine is a GTX 1650 Max-Q (laptop).

@pallebone
Copy link

Mine is a gtx 1050 4gb in an msi laptop.

@jhenstridge
Copy link
Contributor

The library is shipped as part of libnvidia-gl-515 on Ubuntu so I'd expect the library to always be present on the host system. The libnvidia-tesla-510-glvkspirv package looks to be for a different driver version, and looks to be from a non-Ubuntu repository too? Given @ashuntu has also reproduced the issue, I don't think the extra packages you've got installed are a problem though.

It looks like snapd already had support for exposing the host system's glvkspirv library to the snap sandbox, added back in 2018:

canonical/snapd@612751e

And Valve's pressure-vessel knows to expose the library to its sandbox:

https://gitlab.steamos.cloud/steamrt/steam-runtime-tools/-/blob/master/pressure-vessel/runtime.c#L4903

So I suspect it isn't a problem of the library itself being missing: rather one of its dependencies is missing. A good starting point would be to see if ldd can find the dependencies from within the snap sandbox. Could someone try running the following commands:

snap run --shell steam
ldd /var/lib/snapd/lib/gl/libnvidia-glvkspirv.so.515.48.07

(note that the "snap run --shell" command will start another copy of bash. You can press ctrl+D or run exit to return afterwards).

If that lists any dependencies as not found, that's likely our culprit.

@pallebone
Copy link

The library is shipped as part of libnvidia-gl-515 on Ubuntu so I'd expect the library to always be present on the host system. The libnvidia-tesla-510-glvkspirv package looks to be for a different driver version, and looks to be from a non-Ubuntu repository too? Given @ashuntu has also reproduced the issue, I don't think the extra packages you've got installed are a problem though.

Sorry I perhaps didnt mention looking back, I actually use Debian, not Ubuntu and that is in the Debian repositories (I dont add 3rd party repositories). I believed snap to be platform independent but perhaps I am wrong on that.

I did have some files in that /var/lib/snapd/lib/gl directory. My driver version correlates to at least one of the files in there:
Screenshot from 2022-07-28 22-43-45

Pete

@jhenstridge
Copy link
Contributor

Okay. The library dependencies look fairly mundane, although it is possible that its using some symbol version not present in the set of libraries Steam provides within the pressure-vessel sandbox. I don't have a quick set of instructions to test that at present though. I'll look further.

@pallebone
Copy link

Thank you for your time, it is appreciated.

@jhenstridge
Copy link
Contributor

It doesn't look like symbol versions would be the problem either. Using objdump on the v515 library:

Version References:
  required from ld-linux-x86-64.so.2:
    0x0d696913 0x00 08 GLIBC_2.3
  required from libm.so.6:
    0x09691a75 0x00 05 GLIBC_2.2.5
  required from libc.so.6:
    0x0d696917 0x00 06 GLIBC_2.7
    0x0d696913 0x00 04 GLIBC_2.3
    0x09691a75 0x00 03 GLIBC_2.2.5
  required from libpthread.so.0:
    0x09691972 0x00 07 GLIBC_2.3.2
    0x09691a75 0x00 02 GLIBC_2.2.5

So no recent symbol versions either (glibc 2.7 was released in 2007).

Ash's AppArmor logs show denied reads to /var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/ and /var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/vdpau/: the directories the symlink farm in /var/lib/snapd/lib/gl is pointing to. So something is trying to list those directories for some reason. This isn't something that would normally be necessary to access the symlink targets, but PV is doing something weird.

@pallebone
Copy link

pallebone commented Jul 29, 2022

Unsure how to get apparmor logs but this is in my syslog:

Jul 28 23:19:23 Aragorn kernel: [49373.864189] audit: type=1400 audit(1659064763.927:3848): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/etc/vulkan/explicit_layer.d/" pid=162315 comm="pressure-vessel" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 28 23:19:23 Aragorn kernel: [49373.864585] audit: type=1400 audit(1659064763.927:3849): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/etc/vulkan/implicit_layer.d/" pid=162315 comm="pressure-vessel" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 28 23:19:24 Aragorn kernel: [49373.958535] audit: type=1400 audit(1659064764.023:3850): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/" pid=162338 comm="x86_64-linux-gn" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 28 23:19:24 Aragorn kernel: [49373.959517] audit: type=1400 audit(1659064764.023:3851): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/" pid=162338 comm="x86_64-linux-gn" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 28 23:19:24 Aragorn kernel: [49373.960039] audit: type=1400 audit(1659064764.023:3852): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/" pid=162338 comm="x86_64-linux-gn" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 28 23:19:24 Aragorn kernel: [49373.961949] audit: type=1400 audit(1659064764.027:3853): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/" pid=162338 comm="x86_64-linux-gn" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 28 23:19:24 Aragorn kernel: [49373.962478] audit: type=1400 audit(1659064764.027:3854): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/" pid=162338 comm="x86_64-linux-gn" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 28 23:19:24 Aragorn kernel: [49373.964118] audit: type=1400 audit(1659064764.027:3855): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/" pid=162338 comm="x86_64-linux-gn" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 28 23:19:24 Aragorn kernel: [49373.964592] audit: type=1400 audit(1659064764.027:3856): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/" pid=162338 comm="x86_64-linux-gn" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 28 23:19:24 Aragorn kernel: [49373.965918] audit: type=1400 audit(1659064764.031:3857): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/" pid=162338 comm="x86_64-linux-gn" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 28 23:19:24 Aragorn kernel: [49374.041782] Lockdown: rpc-libvirtd: debugfs access is restricted; see man kernel_lockdown.7
Jul 28 23:19:27 Aragorn kernel: [49377.046953] Lockdown: rpc-libvirtd: debugfs access is restricted; see man kernel_lockdown.7
Jul 28 23:19:27 Aragorn kernel: [49377.393719] [UFW BLOCK] IN=enp3s0 OUT= MAC=01:00:5e:00:00:01:74:ac:b9:e0:05:7a:08:00 SRC=192.168.2.160 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=37289 PROTO=2 
Jul 28 23:19:30 Aragorn kernel: [49380.045879] Lockdown: rpc-libvirtd: debugfs access is restricted; see man kernel_lockdown.7
Jul 28 23:19:33 Aragorn kernel: [49383.045963] Lockdown: rpc-libvirtd: debugfs access is restricted; see man kernel_lockdown.7

also this is in my kern.log
(very similar?)

Jul 28 23:19:23 Aragorn kernel: [49373.864189] audit: type=1400 audit(1659064763.927:3848): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/etc/vulkan/explicit_layer.d/" pid=162315 comm="pressure-vessel" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 28 23:19:23 Aragorn kernel: [49373.864585] audit: type=1400 audit(1659064763.927:3849): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/etc/vulkan/implicit_layer.d/" pid=162315 comm="pressure-vessel" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 28 23:19:24 Aragorn kernel: [49373.958535] audit: type=1400 audit(1659064764.023:3850): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/" pid=162338 comm="x86_64-linux-gn" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 28 23:19:24 Aragorn kernel: [49373.959517] audit: type=1400 audit(1659064764.023:3851): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/" pid=162338 comm="x86_64-linux-gn" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 28 23:19:24 Aragorn kernel: [49373.960039] audit: type=1400 audit(1659064764.023:3852): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/" pid=162338 comm="x86_64-linux-gn" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 28 23:19:24 Aragorn kernel: [49373.961949] audit: type=1400 audit(1659064764.027:3853): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/" pid=162338 comm="x86_64-linux-gn" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 28 23:19:24 Aragorn kernel: [49373.962478] audit: type=1400 audit(1659064764.027:3854): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/" pid=162338 comm="x86_64-linux-gn" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 28 23:19:24 Aragorn kernel: [49373.964118] audit: type=1400 audit(1659064764.027:3855): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/" pid=162338 comm="x86_64-linux-gn" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 28 23:19:24 Aragorn kernel: [49373.964592] audit: type=1400 audit(1659064764.027:3856): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/" pid=162338 comm="x86_64-linux-gn" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 28 23:19:24 Aragorn kernel: [49373.965918] audit: type=1400 audit(1659064764.031:3857): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/" pid=162338 comm="x86_64-linux-gn" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 28 23:19:24 Aragorn kernel: [49374.041782] Lockdown: rpc-libvirtd: debugfs access is restricted; see man kernel_lockdown.7
Jul 28 23:19:27 Aragorn kernel: [49377.046953] Lockdown: rpc-libvirtd: debugfs access is restricted; see man kernel_lockdown.7
Jul 28 23:19:27 Aragorn kernel: [49377.393719] [UFW BLOCK] IN=enp3s0 OUT= MAC=01:00:5e:00:00:01:74:ac:b9:e0:05:7a:08:00 SRC=192.168.2.160 DST=224.0.0.1 LEN=32 TOS=0x00 PREC=0xC0 TTL=1 ID=37289 PROTO=2 
Jul 28 23:19:30 Aragorn kernel: [49380.045879] Lockdown: rpc-libvirtd: debugfs access is restricted; see man kernel_lockdown.7

@jhenstridge
Copy link
Contributor

Here's a quick way you could test out whether that access is causing the problem:

  1. Take a copy of /var/lib/snapd/apparmor/profiles/snap.steam.steam to somewhere you can write to. This is the text version of the AppArmor profile that snapd has generated for the snap.
  2. Open the copied profile in your favourite text editor, and add the following lines before the closing brace at the end of the file:
    /var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/ r,
    /var/lib/snapd/hostfs/usr/lib/x86_64-linux-gnu/vdpau/ r,
    
  3. Load your modified profile into the kernel by running sudo apparmor_parser -r snap.steam.steam

That should get rid of the denial, and either fix the problem or let us progress to another denial.

@pallebone
Copy link

pallebone commented Jul 29, 2022

I tried to do what you asked and still got some more errors. I then added another directory as I noticed some additional errors there. This was my final file:
Screenshot from 2022-07-28 23-35-36
File end:
Screenshot from 2022-07-28 23-41-52

I added the line: /var/lib/snapd/hostfs/usr/lib/i386-linux-gnu/ r,

Errors now:

Jul 28 23:39:57 Aragorn kernel: [50607.786752] audit: type=1400 audit(1659065997.832:4823): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/etc/vulkan/explicit_layer.d/" pid=167773 comm="pressure-vessel" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 28 23:39:57 Aragorn kernel: [50607.788270] audit: type=1400 audit(1659065997.832:4824): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/etc/vulkan/implicit_layer.d/" pid=167773 comm="pressure-vessel" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 28 23:39:58 Aragorn kernel: [50608.060833] Lockdown: rpc-libvirtd: debugfs access is restricted; see man kernel_lockdown.7
Jul 28 23:39:58 Aragorn kernel: [50608.377258] audit: type=1400 audit(1659065998.424:4825): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 profile="snap.steam.steam" name="/newroot/etc/nvidia/" pid=167807 comm="pv-bwrap" srcname="/oldroot/etc/nvidia/" flags="rw, rbind"
Jul 28 23:39:59 Aragorn kernel: [50609.522199] audit: type=1400 audit(1659065999.568:4826): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/etc/vulkan/explicit_layer.d/" pid=167810 comm="pressure-vessel" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 28 23:39:59 Aragorn kernel: [50609.522653] audit: type=1400 audit(1659065999.568:4827): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/etc/vulkan/implicit_layer.d/" pid=167810 comm="pressure-vessel" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 28 23:40:00 Aragorn kernel: [50610.074052] audit: type=1400 audit(1659066000.120:4828): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 profile="snap.steam.steam" name="/newroot/etc/nvidia/" pid=167843 comm="pv-bwrap" srcname="/oldroot/etc/nvidia/" flags="rw, rbind"

Will try pick this up in the morning with you as I have to go to sleep now, hope thats ok :)

Pete

@jhenstridge
Copy link
Contributor

This one looks new:

audit: type=1400 audit(1659066000.120:4828): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 profile="snap.steam.steam" name="/newroot/etc/nvidia/" pid=167843 comm="pv-bwrap" srcname="/oldroot/etc/nvidia/" flags="rw, rbind"

It looks like it comes from this list of files/directories:

https://gitlab.steamos.cloud/steamrt/steam-runtime-tools/-/blob/master/pressure-vessel/runtime.c#L3006-3013

So that's more mounts we'll have to allow in the steam-support interface. If anyone wants to try modifying the AppArmor profile directly see if it helps, this would be the relevant rule:

mount options=(rw, rbind) /oldroot/etc/nvidia/ -> /newroot/etc/nvidia/,

@pallebone
Copy link

pallebone commented Jul 29, 2022

You are clearly a genius because a lot more happened when I made that change. The game opens and is... functional. However it does not make use of the Nvidia graphics card, and only uses the intel card on the laptop.

(this is my file now):
Screenshot from 2022-07-29 08-33-21

This obviously drops the framerates and makes the game unplayable even though its running now (Im good but not 3fps good). I can confirm the GPU is not used by watching 'nvtop' and noting that r5apex.exe or anything to do with apex is not listed for the card.

Here is a new set of logs from the kern.log file:

Thanks again for your time.

P

Jul 29 08:39:01 Aragorn kernel: [82951.867223] audit: type=1400 audit(1659098341.491:10341): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/etc/vulkan/explicit_layer.d/" pid=262672 comm="pressure-vessel" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 29 08:39:01 Aragorn kernel: [82951.867645] audit: type=1400 audit(1659098341.491:10342): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/etc/vulkan/implicit_layer.d/" pid=262672 comm="pressure-vessel" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 29 08:39:02 Aragorn kernel: [82952.551604] audit: type=1400 audit(1659098342.175:10343): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/usr/local/lib/" pid=262706 comm="ldconfig.real" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Jul 29 08:39:02 Aragorn kernel: [82952.650960] audit: type=1326 audit(1659098342.275:10344): auid=1000 uid=1000 gid=1000 ses=4 subj==snap.steam.steam (enforce) pid=262710 comm="wineserver" exe=2F686F6D652F617261676F726E2F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E20372E302F646973742F62696E2F77696E65736572766572 sig=0 arch=c000003e syscall=141 compat=0 ip=0x7ff258b281eb code=0x50000
Jul 29 08:39:02 Aragorn kernel: [82952.650966] audit: type=1326 audit(1659098342.275:10345): auid=1000 uid=1000 gid=1000 ses=4 subj==snap.steam.steam (enforce) pid=262710 comm="wineserver" exe=2F686F6D652F617261676F726E2F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E20372E302F646973742F62696E2F77696E65736572766572 sig=0 arch=c000003e syscall=141 compat=0 ip=0x7ff258b281eb code=0x50000
Jul 29 08:39:02 Aragorn kernel: [82952.683134] audit: type=1400 audit(1659098342.307:10346): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/sys/devices/system/node/online" pid=262708 comm="wine64" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 29 08:39:02 Aragorn kernel: [82952.686696] audit: type=1326 audit(1659098342.311:10347): auid=1000 uid=1000 gid=1000 ses=4 subj==snap.steam.steam (enforce) pid=262710 comm="wineserver" exe=2F686F6D652F617261676F726E2F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E20372E302F646973742F62696E2F77696E65736572766572 sig=0 arch=c000003e syscall=203 compat=0 ip=0x7ff258b1684b code=0x50000
Jul 29 08:39:02 Aragorn kernel: [82952.688954] audit: type=1400 audit(1659098342.311:10348): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/sys/devices/system/node/online" pid=262712 comm="wine64" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 29 08:39:02 Aragorn kernel: [82952.690281] audit: type=1326 audit(1659098342.315:10349): auid=1000 uid=1000 gid=1000 ses=4 subj==snap.steam.steam (enforce) pid=262712 comm="wineboot.exe" exe=2F686F6D652F617261676F726E2F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E20372E302F646973742F62696E2F77696E6536342D7072656C6F61646572 sig=0 arch=c000003e syscall=65535 compat=0 ip=0x600000000005 code=0x50000
Jul 29 08:39:02 Aragorn kernel: [82952.700295] audit: type=1400 audit(1659098342.323:10350): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/sys/devices/system/clocksource/clocksource0/current_clocksource" pid=262710 comm="wineserver" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 29 08:39:04 Aragorn kernel: [82954.826690] Lockdown: rpc-libvirtd: debugfs access is restricted; see man kernel_lockdown.7
Jul 29 08:39:06 Aragorn kernel: [82956.875998] kauditd_printk_skb: 341 callbacks suppressed
Jul 29 08:39:06 Aragorn kernel: [82956.876000] audit: type=1326 audit(1659098346.499:10692): auid=1000 uid=1000 gid=1000 ses=4 subj==snap.steam.steam (enforce) pid=262822 comm="steam.exe" exe=2F686F6D652F617261676F726E2F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E20372E302F646973742F62696E2F77696E6536342D7072656C6F61646572 sig=0 arch=c000003e syscall=65535 compat=0 ip=0x600000000005 code=0x50000
Jul 29 08:39:06 Aragorn kernel: [82956.901641] audit: type=1326 audit(1659098346.527:10693): auid=1000 uid=1000 gid=1000 ses=4 subj==snap.steam.steam (enforce) pid=262824 comm="wineserver" exe=2F686F6D652F617261676F726E2F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E20372E302F646973742F62696E2F77696E65736572766572 sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f95b9d4184b code=0x50000
Jul 29 08:39:06 Aragorn kernel: [82956.903878] audit: type=1400 audit(1659098346.527:10694): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/sys/devices/system/node/online" pid=262863 comm="wine64" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 29 08:39:06 Aragorn kernel: [82956.904993] audit: type=1326 audit(1659098346.527:10695): auid=1000 uid=1000 gid=1000 ses=4 subj==snap.steam.steam (enforce) pid=262863 comm="conhost.exe" exe=2F686F6D652F617261676F726E2F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E20372E302F646973742F62696E2F77696E6536342D7072656C6F61646572 sig=0 arch=c000003e syscall=65535 compat=0 ip=0x600000000005 code=0x50000
Jul 29 08:39:06 Aragorn kernel: [82956.917961] audit: type=1326 audit(1659098346.543:10696): auid=1000 uid=1000 gid=1000 ses=4 subj==snap.steam.steam (enforce) pid=262824 comm="wineserver" exe=2F686F6D652F617261676F726E2F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E20372E302F646973742F62696E2F77696E65736572766572 sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f95b9d4184b code=0x50000
Jul 29 08:39:06 Aragorn kernel: [82956.923569] audit: type=1326 audit(1659098346.547:10697): auid=1000 uid=1000 gid=1000 ses=4 subj==snap.steam.steam (enforce) pid=262824 comm="wineserver" exe=2F686F6D652F617261676F726E2F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E20372E302F646973742F62696E2F77696E65736572766572 sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f95b9d4184b code=0x50000
Jul 29 08:39:06 Aragorn kernel: [82956.925539] audit: type=1400 audit(1659098346.551:10698): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/sys/devices/system/node/online" pid=262866 comm="wine64" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 29 08:39:06 Aragorn kernel: [82956.926644] audit: type=1326 audit(1659098346.551:10699): auid=1000 uid=1000 gid=1000 ses=4 subj==snap.steam.steam (enforce) pid=262866 comm="explorer.exe" exe=2F686F6D652F617261676F726E2F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E20372E302F646973742F62696E2F77696E6536342D7072656C6F61646572 sig=0 arch=c000003e syscall=65535 compat=0 ip=0x600000000005 code=0x50000
Jul 29 08:39:06 Aragorn kernel: [82956.953572] audit: type=1400 audit(1659098346.579:10700): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/etc/vulkan/implicit_layer.d/" pid=262866 comm="explorer.exe" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Jul 29 08:39:06 Aragorn kernel: [82956.954027] audit: type=1400 audit(1659098346.579:10701): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/etc/vulkan/explicit_layer.d/" pid=262866 comm="explorer.exe" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Jul 29 08:39:07 Aragorn kernel: [82957.830172] Lockdown: rpc-libvirtd: debugfs access is restricted; see man kernel_lockdown.7
Jul 29 08:39:10 Aragorn kernel: [82960.840308] Lockdown: rpc-libvirtd: debugfs access is restricted; see man kernel_lockdown.7
Jul 29 08:39:11 Aragorn kernel: [82961.878180] kauditd_printk_skb: 743 callbacks suppressed
Jul 29 08:39:11 Aragorn kernel: [82961.878184] audit: type=1400 audit(1659098351.503:11445): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/proc/251732/comm" pid=262914 comm="R5Apex.exe" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 29 08:39:11 Aragorn kernel: [82961.878773] audit: type=1400 audit(1659098351.503:11446): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/proc/251732/cmdline" pid=262914 comm="R5Apex.exe" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 29 08:39:11 Aragorn kernel: [82961.880287] audit: type=1400 audit(1659098351.503:11447): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/proc/252510/comm" pid=262914 comm="R5Apex.exe" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 29 08:39:11 Aragorn kernel: [82961.880652] audit: type=1400 audit(1659098351.503:11448): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/proc/252510/cmdline" pid=262914 comm="R5Apex.exe" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 29 08:39:11 Aragorn kernel: [82961.882549] audit: type=1400 audit(1659098351.507:11449): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/proc/254142/comm" pid=262914 comm="R5Apex.exe" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 29 08:39:11 Aragorn kernel: [82961.882966] audit: type=1400 audit(1659098351.507:11450): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/proc/254142/cmdline" pid=262914 comm="R5Apex.exe" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 29 08:39:11 Aragorn kernel: [82961.884423] audit: type=1400 audit(1659098351.507:11451): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/proc/255066/comm" pid=262914 comm="R5Apex.exe" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 29 08:39:11 Aragorn kernel: [82961.884998] audit: type=1400 audit(1659098351.507:11452): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/proc/255066/cmdline" pid=262914 comm="R5Apex.exe" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 29 08:39:11 Aragorn kernel: [82961.886441] audit: type=1400 audit(1659098351.511:11453): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/proc/255155/comm" pid=262914 comm="R5Apex.exe" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 29 08:39:11 Aragorn kernel: [82961.886937] audit: type=1400 audit(1659098351.511:11454): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/proc/255155/cmdline" pid=262914 comm="R5Apex.exe" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 29 08:39:13 Aragorn kernel: [82963.834814] Lockdown: rpc-libvirtd: debugfs access is restricted; see man kernel_lockdown.7
Jul 29 08:39:16 Aragorn kernel: [82966.842658] Lockdown: rpc-libvirtd: debugfs access is restricted; see man kernel_lockdown.7
Jul 29 08:39:17 Aragorn kernel: [82968.166812] kauditd_printk_skb: 44 callbacks suppressed
Jul 29 08:39:17 Aragorn kernel: [82968.166815] audit: type=1326 audit(1659098357.795:11499): auid=1000 uid=1000 gid=1000 ses=4 subj==snap.steam.steam (enforce) pid=262824 comm="wineserver" exe=2F686F6D652F617261676F726E2F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E20372E302F646973742F62696E2F77696E65736572766572 sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f95b9d4184b code=0x50000
Jul 29 08:39:17 Aragorn kernel: [82968.167245] audit: type=1326 audit(1659098357.795:11500): auid=1000 uid=1000 gid=1000 ses=4 subj==snap.steam.steam (enforce) pid=262824 comm="wineserver" exe=2F686F6D652F617261676F726E2F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E20372E302F646973742F62696E2F77696E65736572766572 sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f95b9d4184b code=0x50000
Jul 29 08:39:17 Aragorn kernel: [82968.167313] audit: type=1326 audit(1659098357.795:11501): auid=1000 uid=1000 gid=1000 ses=4 subj==snap.steam.steam (enforce) pid=262824 comm="wineserver" exe=2F686F6D652F617261676F726E2F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E20372E302F646973742F62696E2F77696E65736572766572 sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f95b9d4184b code=0x50000
Jul 29 08:39:17 Aragorn kernel: [82968.167523] audit: type=1326 audit(1659098357.795:11502): auid=1000 uid=1000 gid=1000 ses=4 subj==snap.steam.steam (enforce) pid=262824 comm="wineserver" exe=2F686F6D652F617261676F726E2F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E20372E302F646973742F62696E2F77696E65736572766572 sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f95b9d4184b code=0x50000
Jul 29 08:39:17 Aragorn kernel: [82968.168939] audit: type=1326 audit(1659098357.795:11503): auid=1000 uid=1000 gid=1000 ses=4 subj==snap.steam.steam (enforce) pid=262824 comm="wineserver" exe=2F686F6D652F617261676F726E2F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E20372E302F646973742F62696E2F77696E65736572766572 sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f95b9d4184b code=0x50000
Jul 29 08:39:17 Aragorn kernel: [82968.169095] audit: type=1326 audit(1659098357.795:11504): auid=1000 uid=1000 gid=1000 ses=4 subj==snap.steam.steam (enforce) pid=262824 comm="wineserver" exe=2F686F6D652F617261676F726E2F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E20372E302F646973742F62696E2F77696E65736572766572 sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f95b9d4184b code=0x50000
Jul 29 08:39:19 Aragorn kernel: [82969.846395] Lockdown: rpc-libvirtd: debugfs access is restricted; see man kernel_lockdown.7
Jul 29 08:39:20 Aragorn kernel: [82971.050020] audit: type=1326 audit(1659098360.679:11505): auid=1000 uid=1000 gid=1000 ses=4 subj==snap.steam.steam (enforce) pid=262824 comm="wineserver" exe=2F686F6D652F617261676F726E2F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E20372E302F646973742F62696E2F77696E65736572766572 sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f95b9d4184b code=0x50000
Jul 29 08:39:20 Aragorn kernel: [82971.064467] audit: type=1400 audit(1659098360.691:11506): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/sys/devices/virtual/dmi/id/bios_vendor" pid=262914 comm="R5Apex.exe" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 29 08:39:20 Aragorn kernel: [82971.064472] audit: type=1400 audit(1659098360.691:11507): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/sys/devices/virtual/dmi/id/bios_version" pid=262914 comm="R5Apex.exe" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 29 08:39:20 Aragorn kernel: [82971.064475] audit: type=1400 audit(1659098360.691:11508): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/sys/devices/virtual/dmi/id/bios_date" pid=262914 comm="R5Apex.exe" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 29 08:39:22 Aragorn kernel: [82972.846923] Lockdown: rpc-libvirtd: debugfs access is restricted; see man kernel_lockdown.7
Jul 29 08:39:24 Aragorn kernel: [82975.264524] kauditd_printk_skb: 76 callbacks suppressed
Jul 29 08:39:24 Aragorn kernel: [82975.264528] audit: type=1326 audit(1659098364.891:11585): auid=1000 uid=1000 gid=1000 ses=4 subj==snap.steam.steam (enforce) pid=262824 comm="wineserver" exe=2F686F6D652F617261676F726E2F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E20372E302F646973742F62696E2F77696E65736572766572 sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f95b9d4184b code=0x50000
Jul 29 08:39:24 Aragorn kernel: [82975.270244] audit: type=1326 audit(1659098364.899:11586): auid=1000 uid=1000 gid=1000 ses=4 subj==snap.steam.steam (enforce) pid=262824 comm="wineserver" exe=2F686F6D652F617261676F726E2F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E20372E302F646973742F62696E2F77696E65736572766572 sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f95b9d4184b code=0x50000
Jul 29 08:39:24 Aragorn kernel: [82975.273846] audit: type=1326 audit(1659098364.903:11587): auid=1000 uid=1000 gid=1000 ses=4 subj==snap.steam.steam (enforce) pid=262824 comm="wineserver" exe=2F686F6D652F617261676F726E2F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E20372E302F646973742F62696E2F77696E65736572766572 sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f95b9d4184b code=0x50000
Jul 29 08:39:24 Aragorn kernel: [82975.274295] audit: type=1326 audit(1659098364.903:11588): auid=1000 uid=1000 gid=1000 ses=4 subj==snap.steam.steam (enforce) pid=262824 comm="wineserver" exe=2F686F6D652F617261676F726E2F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E20372E302F646973742F62696E2F77696E65736572766572 sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f95b9d4184b code=0x50000
Jul 29 08:39:24 Aragorn kernel: [82975.274900] audit: type=1326 audit(1659098364.903:11589): auid=1000 uid=1000 gid=1000 ses=4 subj==snap.steam.steam (enforce) pid=262824 comm="wineserver" exe=2F686F6D652F617261676F726E2F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E20372E302F646973742F62696E2F77696E65736572766572 sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f95b9d4184b code=0x50000
Jul 29 08:39:24 Aragorn kernel: [82975.279158] audit: type=1326 audit(1659098364.907:11590): auid=1000 uid=1000 gid=1000 ses=4 subj==snap.steam.steam (enforce) pid=262824 comm="wineserver" exe=2F686F6D652F617261676F726E2F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E20372E302F646973742F62696E2F77696E65736572766572 sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f95b9d4184b code=0x50000
Jul 29 08:39:24 Aragorn kernel: [82975.279409] audit: type=1326 audit(1659098364.907:11591): auid=1000 uid=1000 gid=1000 ses=4 subj==snap.steam.steam (enforce) pid=262824 comm="wineserver" exe=2F686F6D652F617261676F726E2F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E20372E302F646973742F62696E2F77696E65736572766572 sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f95b9d4184b code=0x50000
Jul 29 08:39:24 Aragorn kernel: [82975.283111] audit: type=1326 audit(1659098364.911:11592): auid=1000 uid=1000 gid=1000 ses=4 subj==snap.steam.steam (enforce) pid=262824 comm="wineserver" exe=2F686F6D652F617261676F726E2F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E20372E302F646973742F62696E2F77696E65736572766572 sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f95b9d4184b code=0x50000
Jul 29 08:39:24 Aragorn kernel: [82975.287356] audit: type=1326 audit(1659098364.915:11593): auid=1000 uid=1000 gid=1000 ses=4 subj==snap.steam.steam (enforce) pid=262824 comm="wineserver" exe=2F686F6D652F617261676F726E2F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E20372E302F646973742F62696E2F77696E65736572766572 sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f95b9d4184b code=0x50000
Jul 29 08:39:24 Aragorn kernel: [82975.313858] audit: type=1326 audit(1659098364.943:11594): auid=1000 uid=1000 gid=1000 ses=4 subj==snap.steam.steam (enforce) pid=262824 comm="wineserver" exe=2F686F6D652F617261676F726E2F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E20372E302F646973742F62696E2F77696E65736572766572 sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f95b9d4184b code=0x50000
Jul 29 08:39:25 Aragorn kernel: [82975.851159] Lockdown: rpc-libvirtd: debugfs access is restricted; see man kernel_lockdown.7
Jul 29 08:39:28 Aragorn kernel: [82978.850336] Lockdown: rpc-libvirtd: debugfs access is restricted; see man kernel_lockdown.7
Jul 29 08:39:31 Aragorn kernel: [82981.854664] Lockdown: rpc-libvirtd: debugfs access is restricted; see man kernel_lockdown.7
Jul 29 08:39:33 Aragorn kernel: [82983.590911] kauditd_printk_skb: 1 callbacks suppressed
Jul 29 08:39:33 Aragorn kernel: [82983.590914] audit: type=1326 audit(1659098373.219:11596): auid=1000 uid=1000 gid=1000 ses=4 subj==snap.steam.steam (enforce) pid=262824 comm="wineserver" exe=2F686F6D652F617261676F726E2F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E20372E302F646973742F62696E2F77696E65736572766572 sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f95b9d4184b code=0x50000
Jul 29 08:39:33 Aragorn kernel: [82984.186515] audit: type=1326 audit(1659098373.814:11597): auid=1000 uid=1000 gid=1000 ses=4 subj==snap.steam.steam (enforce) pid=262824 comm="wineserver" exe=2F686F6D652F617261676F726E2F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E20372E302F646973742F62696E2F77696E65736572766572 sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f95b9d4184b code=0x50000
Jul 29 08:39:34 Aragorn kernel: [82984.858700] Lockdown: rpc-libvirtd: debugfs access is restricted; see man kernel_lockdown.7
Jul 29 08:39:37 Aragorn kernel: [82987.862752] Lockdown: rpc-libvirtd: debugfs access is restricted; see man kernel_lockdown.7
Jul 29 08:39:38 Aragorn kernel: [82988.587517] audit: type=1326 audit(1659098378.214:11598): auid=1000 uid=1000 gid=1000 ses=4 subj==snap.steam.steam (enforce) pid=262824 comm="wineserver" exe=2F686F6D652F617261676F726E2F736E61702F737465616D2F636F6D6D6F6E2F2E6C6F63616C2F73686172652F537465616D2F737465616D617070732F636F6D6D6F6E2F50726F746F6E20372E302F646973742F62696E2F77696E65736572766572 sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f95b9d4184b code=0x50000
Jul 29 08:39:39 Aragorn kernel: [82989.927235] audit: type=1400 audit(1659098379.554:11599): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/proc/262914/pagemap" pid=262914 comm="R5Apex.exe" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Jul 29 08:39:39 Aragorn kernel: [82989.927248] audit: type=1400 audit(1659098379.554:11600): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/proc/262914/pagemap" pid=262914 comm="R5Apex.exe" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Jul 29 08:39:39 Aragorn kernel: [82989.927258] audit: type=1400 audit(1659098379.554:11601): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/proc/262914/pagemap" pid=262914 comm="R5Apex.exe" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Jul 29 08:39:39 Aragorn kernel: [82989.927272] audit: type=1400 audit(1659098379.554:11602): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/proc/262914/pagemap" pid=262914 comm="R5Apex.exe" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Jul 29 08:39:39 Aragorn kernel: [82989.927294] audit: type=1400 audit(1659098379.554:11603): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/proc/262914/pagemap" pid=262914 comm="R5Apex.exe" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Jul 29 08:39:39 Aragorn kernel: [82989.927307] audit: type=1400 audit(1659098379.554:11604): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/proc/262914/pagemap" pid=262914 comm="R5Apex.exe" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Jul 29 08:39:39 Aragorn kernel: [82989.927318] audit: type=1400 audit(1659098379.554:11605): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/proc/262914/pagemap" pid=262914 comm="R5Apex.exe" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Jul 29 08:39:39 Aragorn kernel: [82989.927335] audit: type=1400 audit(1659098379.554:11606): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/proc/262914/pagemap" pid=262914 comm="R5Apex.exe" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Jul 29 08:39:39 Aragorn kernel: [82989.927367] audit: type=1400 audit(1659098379.554:11607): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/proc/262914/pagemap" pid=262914 comm="R5Apex.exe" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Jul 29 08:39:39 Aragorn kernel: [82989.927406] audit: type=1400 audit(1659098379.554:11608): apparmor="DENIED" operation="open" profile="snap.steam.steam" name="/proc/262914/pagemap" pid=262914 comm="R5Apex.exe" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Jul 29 08:39:40 Aragorn kernel: [82990.862503] Lockdown: rpc-libvirtd: debugfs access is restricted; see man kernel_lockdown.7
Jul 29 08:39:43 Aragorn kernel: [82993.862537] Lockdown: rpc-libvirtd: debugfs access is restricted; see man kernel_lockdown.7
root@Aragorn:/var/lib/snapd/apparmor/profiles# 

@ashuntu
Copy link
Collaborator

ashuntu commented Jul 29, 2022

I can confirm similar errors to @pallebone with Apex after making those apparmor changes.

@ashuntu
Copy link
Collaborator

ashuntu commented Aug 19, 2022

@jhenstridge is this something that needs to be changed in snapd?

@pallebone
Copy link

Just checking in if there are any updates at all on this. It doesnt seem like there is any change when I try to open the game.

@ashuntu
Copy link
Collaborator

ashuntu commented Sep 26, 2022

@pallebone
Fixes still need to be made in snapd to accommodate some of the issues that are occurring, namely with Wine/Proton and dedicated GPUs. I'll be sure to comment in this issue again when I have more news to share.

@pallebone
Copy link

Hi

Is this fixed?

Kind regards
Peter

@ashuntu
Copy link
Collaborator

ashuntu commented Oct 12, 2022

@pallebone
The issue seems to be resolved from some of our testing and the fixes that were pushed into snapd. You can try it yourself if you refresh snapd from edge (snap refresh snapd --edge). There's also fixes and improvements in Steam's edge channel, but no promise of stability there (snap refresh steam --edge).

If you still have problems feel free to open a new issue.

@pallebone
Copy link

I mean I just tried and it has the exact same issue (bwrap: Can't bind mount /oldroot/etc/nvidia on /newroot/etc/nvidia: Unable to mount source on destination: Permission denied) but if the issue is closed and we are 6 months without a resolution Im thinking that this isnt a super serious project so am just going to move on, no real point opening a new issue from my perspective.

Good luck, laters

Pete

@kenvandine
Copy link
Collaborator

I mean I just tried and it has the exact same issue (bwrap: Can't bind mount /oldroot/etc/nvidia on /newroot/etc/nvidia: Unable to mount source on destination: Permission denied) but if the issue is closed and we are 6 months without a resolution Im thinking that this isnt a super serious project so am just going to move on, no real point opening a new issue from my perspective.

Good luck, laters

Pete

We're not seeing it try to mount etc/nvidia in our testing, but this does seem to be a bit sensitive to the host file system. In my recent updates to the steam-support snapd interface, I didn't include that. We'll get that added ASAP. IIRC you are on debian?

@pallebone
Copy link

We're not seeing it try to mount etc/nvidia in our testing, but this does seem to be a bit sensitive to the host file system. In my recent updates to the steam-support snapd interface, I didn't include that. We'll get that added ASAP. IIRC you are on debian?

Hi Kenvandine,

Yes that is right I am using Debian 12 (bookworm), thank you.

Kind regards,
Peter

@kenvandine
Copy link
Collaborator

We're not seeing it try to mount etc/nvidia in our testing, but this does seem to be a bit sensitive to the host file system. In my recent updates to the steam-support snapd interface, I didn't include that. We'll get that added ASAP. IIRC you are on debian?

Hi Kenvandine,

Yes that is right I am using Debian 12 (bookworm), thank you.

Kind regards, Peter

@pallebone could you please try this again with snapd from edge? The fix for mounting /etc/nvidia has landed, which hopefully has fixed the issue you ran into on debian.

@pallebone
Copy link

Thank you for persisting with the issue, and remaining professional when I was giving up.

The latest edge snap refresh as resolved the issue and the game indeed launches now. So this is a massive improvement. Only issue is the GPU is not sues so the fps is very low but this is a secondary problem and I will open a new case for that. The overall issue of it not launching is indeed fixed.

Thanks to @kenvandine and @ashuntu for your help.

Kind regards
Peter

@pallebone
Copy link

Agree with case closure. Issue is resolved.

@kenvandine
Copy link
Collaborator

Agree with case closure. Issue is resolved.

Thanks! Your testing and feedback is greatly appreciated.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
type/bug Something isn't working
Projects
None yet
9 participants