[GH-ISSUE #1680] Opengl error with wine.profile #1135

Closed
opened 2026-05-05 07:31:06 -06:00 by gitea-mirror · 5 comments
Owner

Originally created by @ghost on GitHub (Dec 16, 2017).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1680

Hello,
after some updates (mesa-17.3 and llvm-4, I think), wine through firejail or anything GL related doesn't work anymore. Here's a simple example with and without firejail

> LIBGL_DEBUG=verbose firejail --profile=/etc/firejail/wine.profile glxgears
Reading profile /etc/firejail/wine.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-programs.inc
Parent pid 32211, child pid 32212
Child process initialized in 38.49 ms
libGL: Can't open configuration file /home/user/.drirc: No such file or directory.
libGL: pci id for fd 4: 1002:67df, driver radeonsi
libGL: OpenDriver: trying /usr/lib64/dri/tls/radeonsi_dri.so
libGL: OpenDriver: trying /usr/lib64/dri/radeonsi_dri.so
libGL: dlopen /usr/lib64/dri/radeonsi_dri.so failed (libLLVMX86Disassembler.so.4: cannot open shared object file: No such file or directory)
libGL error: unable to load driver: radeonsi_dri.so
libGL error: driver pointer missing
libGL error: failed to load driver: radeonsi
libGL: pci id for fd 4: 1002:67df, driver radeonsi
libGL: OpenDriver: trying /usr/lib64/dri/tls/radeonsi_dri.so
libGL: OpenDriver: trying /usr/lib64/dri/radeonsi_dri.so
libGL: dlopen /usr/lib64/dri/radeonsi_dri.so failed (libLLVMX86Disassembler.so.4: cannot open shared object file: No such file or directory)
libGL error: unable to load driver: radeonsi_dri.so
libGL error: driver pointer missing
libGL error: failed to load driver: radeonsi
libGL: OpenDriver: trying /usr/lib64/dri/tls/swrast_dri.so
libGL: OpenDriver: trying /usr/lib64/dri/swrast_dri.so
libGL: dlopen /usr/lib64/dri/swrast_dri.so failed (libLLVMX86Disassembler.so.4: cannot open shared object file: No such file or directory)
libGL error: unable to load driver: swrast_dri.so
libGL error: failed to load driver: swrast
X Error of failed request:  BadValue (integer parameter out of range for operation)
  Major opcode of failed request:  154 (GLX)
  Minor opcode of failed request:  3 (X_GLXCreateContext)
  Value in failed request:  0x0
  Serial number of failed request:  42
  Current serial number in output stream:  44

Parent is shutting down, bye...
> LIBGL_DEBUG=verbose glxgears
libGL: Can't open configuration file /home/user/.drirc: No such file or directory.
libGL: pci id for fd 4: 1002:67df, driver radeonsi
libGL: OpenDriver: trying /usr/lib64/dri/tls/radeonsi_dri.so
libGL: OpenDriver: trying /usr/lib64/dri/radeonsi_dri.so
libGL: Can't open configuration file /home/user/.drirc: No such file or directory.
/usr/share/libdrm/amdgpu.ids version: 1.0.0
libGL: Can't open configuration file /home/user/.drirc: No such file or directory.
libGL: Using DRI3 for screen 0
XIO:  fatal IO error 11 (Resource temporarily unavailable) on X server ":0"
      after 128 requests (123 known processed) with 0 events remaining.

What could be causing it in the wine profile? I already had to remove seccomp to launch steam through wine, but I don't see anything preventing the access to /usr/lib64/dri.

Using firejail-0.9.50 on Gentoo.

Originally created by @ghost on GitHub (Dec 16, 2017). Original GitHub issue: https://github.com/netblue30/firejail/issues/1680 Hello, after some updates (mesa-17.3 and llvm-4, I think), wine through firejail or anything GL related doesn't work anymore. Here's a simple example with and without firejail ``` > LIBGL_DEBUG=verbose firejail --profile=/etc/firejail/wine.profile glxgears Reading profile /etc/firejail/wine.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-programs.inc Parent pid 32211, child pid 32212 Child process initialized in 38.49 ms libGL: Can't open configuration file /home/user/.drirc: No such file or directory. libGL: pci id for fd 4: 1002:67df, driver radeonsi libGL: OpenDriver: trying /usr/lib64/dri/tls/radeonsi_dri.so libGL: OpenDriver: trying /usr/lib64/dri/radeonsi_dri.so libGL: dlopen /usr/lib64/dri/radeonsi_dri.so failed (libLLVMX86Disassembler.so.4: cannot open shared object file: No such file or directory) libGL error: unable to load driver: radeonsi_dri.so libGL error: driver pointer missing libGL error: failed to load driver: radeonsi libGL: pci id for fd 4: 1002:67df, driver radeonsi libGL: OpenDriver: trying /usr/lib64/dri/tls/radeonsi_dri.so libGL: OpenDriver: trying /usr/lib64/dri/radeonsi_dri.so libGL: dlopen /usr/lib64/dri/radeonsi_dri.so failed (libLLVMX86Disassembler.so.4: cannot open shared object file: No such file or directory) libGL error: unable to load driver: radeonsi_dri.so libGL error: driver pointer missing libGL error: failed to load driver: radeonsi libGL: OpenDriver: trying /usr/lib64/dri/tls/swrast_dri.so libGL: OpenDriver: trying /usr/lib64/dri/swrast_dri.so libGL: dlopen /usr/lib64/dri/swrast_dri.so failed (libLLVMX86Disassembler.so.4: cannot open shared object file: No such file or directory) libGL error: unable to load driver: swrast_dri.so libGL error: failed to load driver: swrast X Error of failed request: BadValue (integer parameter out of range for operation) Major opcode of failed request: 154 (GLX) Minor opcode of failed request: 3 (X_GLXCreateContext) Value in failed request: 0x0 Serial number of failed request: 42 Current serial number in output stream: 44 Parent is shutting down, bye... ``` ``` > LIBGL_DEBUG=verbose glxgears libGL: Can't open configuration file /home/user/.drirc: No such file or directory. libGL: pci id for fd 4: 1002:67df, driver radeonsi libGL: OpenDriver: trying /usr/lib64/dri/tls/radeonsi_dri.so libGL: OpenDriver: trying /usr/lib64/dri/radeonsi_dri.so libGL: Can't open configuration file /home/user/.drirc: No such file or directory. /usr/share/libdrm/amdgpu.ids version: 1.0.0 libGL: Can't open configuration file /home/user/.drirc: No such file or directory. libGL: Using DRI3 for screen 0 XIO: fatal IO error 11 (Resource temporarily unavailable) on X server ":0" after 128 requests (123 known processed) with 0 events remaining. ``` What could be causing it in the wine profile? I already had to remove seccomp to launch steam through wine, but I don't see anything preventing the access to `/usr/lib64/dri`. Using firejail-0.9.50 on Gentoo.
Author
Owner

@SkewedZeppelin commented on GitHub (Dec 16, 2017):

Does adding "noblacklist /usr/lib/llvm*" fix it? See #1437

<!-- gh-comment-id:352183280 --> @SkewedZeppelin commented on GitHub (Dec 16, 2017): Does adding "noblacklist /usr/lib/llvm*" fix it? See #1437
Author
Owner

@ghost commented on GitHub (Dec 16, 2017):

Yes, it fixes it. Thanks.

<!-- gh-comment-id:352188938 --> @ghost commented on GitHub (Dec 16, 2017): Yes, it fixes it. Thanks.
Author
Owner

@SkewedZeppelin commented on GitHub (Dec 16, 2017):

@Q3CPMA thanks for testing, that is now included by default.

@Fred-Barclay @netblue30 we will need to consider adding this to more profiles or by default

<!-- gh-comment-id:352190522 --> @SkewedZeppelin commented on GitHub (Dec 16, 2017): @Q3CPMA thanks for testing, that is now included by default. @Fred-Barclay @netblue30 we will need to consider adding this to more profiles or by default
Author
Owner

@Fred-Barclay commented on GitHub (Dec 16, 2017):

Hmm... is it just wine and steam we're seeing this on?

<!-- gh-comment-id:352204437 --> @Fred-Barclay commented on GitHub (Dec 16, 2017): Hmm... is it just wine and steam we're seeing this on?
Author
Owner

@ghost commented on GitHub (Dec 20, 2017):

Well, like I said, just using glxgears (with the wine profile, yeah) gave this. I guess that anything requiring acceleration will need it.

<!-- gh-comment-id:353129246 --> @ghost commented on GitHub (Dec 20, 2017): Well, like I said, just using glxgears (with the wine profile, yeah) gave this. I guess that anything requiring acceleration will need it.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1135
No description provided.