Solved Some "minor" errors that I would like to fix after having recovered my 13.2-RELEASE and before to upgrade it to 14.0-RELEASE

ziomario

ziomario

From the boot messages :

1)
Code: 
add host 127.0.0.1: gateway lo0 fib 0: route already in table
add host ::1: gateway lo0 fib 0: route already in table
add net fe80::: gateway ::1
add net ff02::: gateway ::1
add net ::ffff:0.0.0.0: gateway ::1
add net ::0.0.0.0: gateway ::1
Starting local_unbound.
Waiting for nameserver to start... good
2)

Changing splash image.
Code: 
expr: division by zero
/etc/rc: ERROR: choice failed
3)

Starting tor.
Code: 
Dec 08 15:10:04.572 [notice] Tor 0.4.8.9 running on FreeBSD with Libevent 2.1.12-stable, OpenSSL 1.1.1t-freebsd, Zlib 1.2.13, Liblzma 5.4.1, Libzstd 1.5.5 and BSD 1302001 as libc.
Dec 08 15:10:04.572 [notice] Tor can't help you if you use it wrong! Learn how to be safe at [URL]https://support.torproject.org/faq/staying-anonymous/[/URL]
Dec 08 15:10:04.572 [notice] Read configuration file "/usr/local/etc/tor/torrc".
Dec 08 15:10:04.575 [notice] You configured a non-loopback address '192.168.1.2:9100' for SocksPort.
This allows everybody on your local network to use your machine as a proxy. Make sure this is what you wanted.
Dec 08 15:10:04.578 [notice] Opening Socks listener on 127.0.0.1:9050
Dec 08 15:10:04.578 [notice] Opened Socks listener connection (ready) on 127.0.0.1:9050
Dec 08 15:10:04.578 [notice] Opening Socks listener on 192.168.1.2:9100
Dec 08 15:10:04.578 [notice] Opened Socks listener connection (ready) on 192.168.1.2:9100
Dec 08 15:10:04.579 [warn] /var/db/tor is not owned by this user (_tor, 256) but by root (0). Perhaps you are running Tor as the wrong user?
Dec 08 15:10:04.579 [notice] Closing partially-constructed Socks listener connection (ready) on 127.0.0.1:9050
Dec 08 15:10:04.579 [notice] Closing partially-constructed Socks listener connection (ready) on 192.168.1.2:9100
Dec 08 15:10:04.579 [warn] Failed to parse/validate config: Couldn't create private data directory "/var/db/tor"
Dec 08 15:10:04.579 [err] Reading config failed--see warnings above.
/etc/rc: WARNING: failed to start tor
4)
Code: 
Starting ntpd.
Dec  8 15:10:04 marietto ntpd[3920]: pid file /var/db/ntp/ntpd.pid: Permission denied
5)
Code: 
_secure_path: /home/marietto/.login_conf is world writable
6)
Code: 
[marietto@marietto /]$ pkexec thunar

==== AUTHENTICATING FOR org.xfce.thunar ====
Authentication is required to run Thunar as root.
Multiple identities can be used for authentication:

 1.  Charlie & (root)
 2.  marietto

Choose identity to authenticate as (1-2): 2
Password:

polkit-agent-helper-1: error response to PolicyKit daemon: GDBus.Error:eek:rg.freedesktop.PolicyKit1.Error.Failed: No session for cookie
==== AUTHENTICATION FAILED ====
Error executing command as another user: Not authorized
This incident has been reported.

# ps ax | grep dbus

3857  -  Is      0:00.10 /usr/local/bin/dbus-daemon --system
7497  -  Ss      0:03.01 /usr/local/bin/dbus-daemon --syslog --fork --print-pid 5 --print-address 7
8120  -  Is      0:00.05 /usr/local/bin/dbus-daemon --syslog-only --fork --print-pid 5 --print-addr
8126  -  S       0:00.41 /usr/local/bin/dbus-daemon --config-file=/usr/local/share/defaults/at-spi2
7482 v0  I       0:00.00 ck-launch-session dbus-launch --exit-with-session startxfce4
7496 v0  I       0:00.00 dbus-launch --exit-with-session startxfce4
8119  1- I       0:00.00 dbus-launch --autolaunch=133c826168597e33ba6fa82363ab0503 --binary-syntax  
9350  4  S+      0:00.00 grep dbus
 
Please post your loader.conf, rc.conf, and perhaps fstab too.
 
Code: 
/boot/loader.conf :

opensolaris_load="YES"
loader_logo="daemon"
vmm_load="YES"
nmdm_load="YES"
if_tap_load="YES"
if_bridge_load="YES"
bridgestp_load="YES"
fusefs_load="YES"
tmpfs_load="YES"
verbose_loading="YES"
pptdevs="2/0/0 2/0/1 2/0/2 2/0/3"
kern.geom.label.ufsid.enable="1"
cryptodev_load="YES"
zfs_load="YES"
kern.racct.enable="1"
aio_load="YES"
kern.cam.scsi_delay="10000"
fdescfs_load="YES"
linprocfs_load="YES"
linsysfs_load="YES"

/etc/rc.conf :

hostname="marietto"
splash_changer_enable="YES"
keymap="it.kbd"
ifconfig_em0="DHCP"
local_unbound_enable="YES"
ntpdate_enable="YES"
ntpd_enable="YES"
ntpd_sync_on_start="YES"
powerd_enable="YES"
libvirtd_enable="YES"
linux_mounts_enable="YES"
dumpdev="AUTO"
kld_list="fusefs"
lightdm_enable="NO"
sendmail_enable="NO"
sendmail_submit_enable="NO"
sendmail_outbound_enable="NO"
sendmail_msp_queue_enable="NO"
cpupdate_enable="YES"
fsck_y_enable="YES"
nfs_server_enable="NO"
nfs_client_enable="YES"
lpd_enable="NO"
winbindd_enable="NO"
vm_enable="YES"
cloned_interfaces="bridge0 tap0 tap1 tap2 tap3 tap4 tap5 tap6 tap7 tap8 tap9 tap10 tap11 tap12 tap13 tap14 tap15 tap16 tap17 tap18 tap19 tap20 em0"
ifconfig_bridge0="addm em0 addm tap0 addm tap1 addm tap2 addm tap3 addm tap4 addm tap5 addm tap6 addm tap7 addm tap8 addm tap9 addm tap10 addm tap11 addm tap12 addm tap13 addm tap14 addm tap15 addm tap16 addm tap17 addm tap18 addm tap19 addm tap20"
kdm5_enable="YES"
dbus_enable="YES"
tor_enable="YES"
apache24_enable="yes"
mysql_enable="yes"
php_fpm_enable="YES"
devfs_system_ruleset="system"
openvpn_enable="YES"
openvpn_if="tun"
bvcp_enable="YES"
cbsd_workdir="/usr/jails"
cbsdrsyncd_enable="YES"
cbsdrsyncd_flags="--config=/usr/jails/etc/rsyncd.conf"
cbsdd_enable="YES"
rcshutdown_timeout="900"
kld_list="cuse4bsd"
webcamd_enable="YES"
nginx_enable="YES"
webcamd_0_flags="-N Generic-USB2-0-PC-CAMERA -S 20100331010203 -M 0"
zfs_enable="YES"
bastille_enable="NO"
#hald_enable="YES"
sshd_enable="NO"
#moused_enable="YES"
emby_server_enable="YES"
kld_list="nvidia nvidia-modeset"
seatd_enable="YES"
savecore_enable="NO"
ubuntu2210_enable="YES"
tor_setuid="YES"

/etc/fstab :

# Device        Mountpoint            FStype    Options                Dump    Pass#

#/dev/ada0p1        /boot/efi            msdosfs    rw                2    2
/dev/ada0p3        none                swap    sw                0    0
 
is this correct ?

Code: 
# cd /usr/local/etc/polkit-1/rules.d
# nano 50-default.rules

/* -*- mode: js; js-indent-level: 4; indent-tabs-mode: nil -*- */

// DO NOT EDIT THIS FILE, it will be overwritten on update
//
// Default rules for polkit
//
// See the polkit(8) man page for more information
// about configuring polkit.

polkit.addAdminRule(function(action, subject) {
    return ["unix-group:wheel"];
});
 
ziomario said:
is this correct ?

Code: 
# cd /usr/local/etc/polkit-1/rules.d
# nano 50-default.rules

/* -*- mode: js; js-indent-level: 4; indent-tabs-mode: nil -*- */

// DO NOT EDIT THIS FILE, it will be overwritten on update
//
// Default rules for polkit
//
// See the polkit(8) man page for more information
// about configuring polkit.

polkit.addAdminRule(function(action, subject) {
    return ["unix-group:wheel"];
});
Click to expand...
You are asking if you correctly edited the file that says "DO NOT EDIT THIS FILE"?
 
Nope. I didn't edit that file,but I'm looking here and there for the mistakes that could be behind the errors that I see.
 
# cd /usr/local/share/polkit-1/actions/
# ls
com.mesonbuild.install.policy
local.kcron.crontab.policy
org.freedesktop.accounts.policy
org.freedesktop.color.policy
org.freedesktop.consolekit.policy
org.freedesktop.policykit.policy
org.gnome.gconf.defaults.policy
org.kde.filesharing.samba.policy
org.kde.fontinst.policy
org.kde.kcontrol.kcmkwallet5.policy
org.kde.kcontrol.kcmsddm.policy
org.kde.kded.smart.policy
org.kde.ksysguard.processlisthelper.policy
org.kde.ktexteditor.katetextbuffer.policy
org.mate.mate-system-monitor.policy
org.mate.power.policy
org.mate.randr.policy
org.mate.settingsdaemon.datetimemechanism.policy
org.nemo.root.policy
org.xfce.mousepad.policy
org.xfce.power.policy
org.xfce.session.policy
org.xfce.thunar.policy
 
According with this post :


The policykit dameon (polkitd) should run at the system level and the policykit authentication agent at the user level,like this :

$ ps -ef | grep polkit

root 2418 1 0 02:35 ? 00:00:00 /usr/lib/policykit-1/polkitd --no-debug
toz 4725 4681 0 02:53 ? 00:00:00 /usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1

but this is what I have on my system :

# ps -ef | grep polkit
nothing.

but :

# ps ax | grep polkit

7488 - I 0:00.14 /usr/local/lib/polkit-1/polkitd --no-debug
9956 4 S+ 0:00.00 grep polkit

# ps ax | grep agent

7557 - Is 0:00.00 /usr/bin/ssh-agent -s
7564 - Ss 0:00.26 /usr/local/bin/gpg-agent --sh --daemon
10012 4 S+ 0:00.00 grep agent

now,what it's missing is the "polkit-gnome-authentication-agent-1". I'm not running it,but it is not even between the packages and I can't install it :

# apt search polkit

mate-polkit-1.26.0_1 MATE frontend to the PolicyKit framework
plasma5-polkit-kde-agent-1-5.27.9 Plasma5 daemon providing a polkit authentication UI
polkit-123_1 Framework for controlling access to system-wide components
polkit-gnome-0.105_3 GNOME frontend to the PolicyKit framework
polkit-qt-1-0.114.0 Qt5 wrapper around Polkit libraries

the only agent that I can install is this :

# pkg install plasma5-polkit-kde-agent-1-5.27.9

Updating FreeBSD repository catalogue...
FreeBSD repository is up to date.
All repositories are up to date.
Checking integrity... done (0 conflicting)
The most recent versions of packages are already installed

but I don't know if it's good and how to start it.
 
ziomario said:
The policykit dameon (polkitd) should run at the system level and the policykit authentication agent at the user level,like this :
Click to expand...
You would need polkitd_enable="YES" in your /etc/rc.conf to be sure polkitd is running on system level.
I have it in my /etc/rc.conf, but possibly a remnant of a old version, as currently neither /etc/rc.d/polkitd nor /usr/local/etc/rc.d/polkitd exists now.
 
T-Aoki said:
You would need polkitd_enable="YES" in your /etc/rc.conf to be sure polkitd is running on system level.
I have it in my /etc/rc.conf, but possibly a remnant of a old version, as currently neither /etc/rc.d/polkitd nor /usr/local/etc/rc.d/polkitd exists now.
Click to expand...

I never added that parameter on my rc.conf and it always worked great on every fresh and not broken installation.
 
ziomario said:
now,what it's missing is the "polkit-gnome-authentication-agent-1". I'm not running it,but it is not even between the packages and I can't install it :
Click to expand...
Ah, I've missed here writing my previous post.

It is included in sysutils/polkit-gnome. Visit there and expand/see pkg-plist entry.

Topmost 3 items are as below.

[B]pkg-plist:[/B] as obtained via: make generate-plist[URL='https://www.freshports.org/sysutils/polkit-gnome/#']Collapse this list.[/URL] [LIST=1] [*]@ldconfig [*]libexec/polkit-gnome-authentication-agent-1 [*]share/locale/ar/LC_MESSAGES/polkit-gnome-1.mo [/LIST]
 
mario@marietto:/usr/ports/sysutils/polkit-gnome # make

/!\ ERROR: /!\

Ports Collection support for your FreeBSD version has ended, and no ports are guaranteed to build on this system. Please upgrade to a supported release. No support will be provided if you silence this message by defining ALLOW_UNSUPPORTED_SYSTEM.

*** Error code 1
 
# nano /etc/make.conf

DEFAULT_VERSIONS+=ssl=openssl
ALLOW_UNSUPPORTED_SYSTEM=yes

# make
# make install

===> Installing for polkit-gnome-0.105_3
===> Checking if polkit-gnome is already installed
===> polkit-gnome-0.105_3 is already installed
You may wish to ``make deinstall'' and install this port again
by ``make reinstall'' to upgrade it properly.
If you really wish to overwrite the old port of polkit-gnome
without deleting it first, set the variable "FORCE_PKG_REGISTER"
in your environment or the "make install" command line.
 
# find / -name polkit-gnome-authentication-agent-1
/usr/local/libexec/polkit-gnome-authentication-agent-1

# ./polkit-gnome-authentication-agent-1
ok

and now when I do :

# pkexec thunar
it works.

summary :

problem 5 fixed by itself

problem 6 fixed by adding the command : "/usr/local/libexec/polkit-gnome-authentication-agent-1" on the xfce "session and startup / application autostart" section.
 
Forgot to ask.
Do you have non-empty /usr/local/lib/compat/pkg?
If so, it could have caused this issue.
This is the default place where ports-mgmt/portupgrade and something alike preserves old libraries.

Unfortunately, this library path seems to be in the middle of library search paths, say, between base ones and ports ones, and often causes qt5 related ports to mis-behave. Possibly something others, too.
If there is a functionality to slways keep this at the very last path for libraries, it would help. But it is not currently.
 
ziomario said:
/!\ ERROR: /!\

Ports Collection support for your FreeBSD version has ended, and no ports are guaranteed to build on this system. Please upgrade to a supported release. No support will be provided if you silence this message by defining ALLOW_UNSUPPORTED_SYSTEM.

*** Error code 1
Click to expand...
This shouldn't happen on 13.* and later.
Possibly something would be wrong and ports framework thinks "Ah, this is a too old branch".
Support for 11.* and before should be already pruned, and 12.* would be pruned early 2024.
 
Code: 
# freebsd-version -kru ; uname -aKU

13.2-RELEASE-p4
13.2-RELEASE-p4
13.2-RELEASE-p7
FreeBSD marietto 13.2-RELEASE-p4 FreeBSD 13.2-RELEASE-p4 GENERIC amd64 1302001 1302001

# pkg -vv | grep -e url -e enabled -e priority

url             : "pkg+http://pkg.FreeBSD.org/FreeBSD:13:amd64/latest",
enabled         : yes,
priority        : 0,
 
You must log in or register to reply here.
Back
Top