youtube-dl and ffprobe requires libblas.so #3506
Comments
See here
Can you add Output
|
|
This can be set in /etc/firejail/firejail.config: Can you post output of |
|
|
|
@hyiltiz has you made any modifications to the ffprobe, ffmpeg, youtube-dl profiles?
@kortewegdevries that happens if you do |
|
@rusty-snake I don't recall any modifications. My profiles: |
|
Looks then like you need to try which line is the issue. Copy the ffmpeg profile to your home and comment all line. Then uncomment line for line. Use |
|
Tested with Changing nothing: Commenting out Also commenting out Any idea why |
|
|
|
Can I just put the master |
|
Yes you can add ytdl needs ffprobe added to its private-bin (also on master). |
|
Got the to Still getting (other) errors about |
|
I just saw that the |
|
Added, but still same error |
Lets go trough it. |
|
Same error; even tried appending the diff'ed lines: to |
|
Can you see if |
|
Here you go (these still keep all the changes we've already done earlier): |
|
Just a guess, can you try with a shorter video (10-20 MB) or a different file format like mp4,mkv,m4a; also with specifying the format |
|
Here, a 1.14MiB video, |
|
@hyiltiz Trying this one more time. Can you verify if you have the following files?
|
|
|
Hm, I was under the impression that the symlink under |
|
I have |
I'm not to sure about it. I guess it's worth a try at this point. You might also have |
|
Hmm, I'd be willing to try the above suggestion, but I think it is a workaround rather than a fix if I understand Firejail's "no fuss" design principle correctly. It is better implemented as a rule against various system states rather than fine tuning system packages.
Even with the private-etc modifications, still getting the same error about libblas. |
|
|
Reinstalled |
|
Commenting
|
|
Hmm, I re-downloaded the Uncommenting |
|
Not sure about your |
That error happens when you already have a symlink. |
|
Not sure the last command was what you'd like me to test, but here is what I did:
So far, it is the only setup that works reliably. |
|
So the problematic line is either `private-etc` or `private-bin`? `dbus-user` `dbus-system` aren't available to 0.9.62. Can you try narrowing down it a bit to whose `private-etc` or `private-bin` is causing the problem?. Like for example, test with only `ffmpeg somefile.mp4` with your profile to see:
1. if the master works without any change
2. commenting `private-bin` or `private-etc` helps, then move on to the youtube-dl profile...
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐On Sunday, August 16, 2020 4:44 AM, Hörmet Yiltiz <[email protected]> wrote:
… Not sure the last command was what you'd like me to test, but here is what I did:
1. Downloaded the `ffmpeg.profile` and `youtube-dl.profile` from master
2. Commented out `private-bin`, `private-etc`, `include disable-shell.inc`, `dbus-user`, `dbus-system` lines
3. Ran `firejail --profile=~/.config/firejail/youtube-dl.profile /usr/bin/youtube-dl 'https://www.youtube.com/watch?v=7RMz7tePA98'`
So far, it is the only setup that works reliably.
—
You are receiving this because you were mentioned.
|
For detailed procedures, here is what I did ( |
This is for ffmpeg or youtube-dl or both? Sorry, I can't open your link... |
|
Both. As you asked, I tested for ffmpeg/ffprobe only first, then with a successful ffmpeg setup, tested youtube-dl. |
|
Try adding this to the If this still fails, try a combination of |
Did that.
Removed quiet.
Failed, so trying strace.
This failed since strace wasn't found in the youtube-dl profile. Didn't want to further fuss with the profile we are trying to debug in the first place. But I'll do so if that is necessary.
This does seem to show interesting results but I am not sure what's specific to my system. It mentioned seccomp in the end, so provided a few filters for the mentioned logs. I'd also paste the strace dump but it is 20k LOC, and even pastebin is refusing to handle that. |
|
What the state here? |
|
I've been getting help trying to pinpoint a profile that works and why it wasn't working. Still awaiting help. |
Sorry if there was a confusion but you should've added it to the original
So only one private-etc like this: Anyways looking at the strace and build I don't think even above will work and in that case I'm out of ideas; sorry. |
|
Huh? There was no extra newlines in my tests in Shall we keep this open to see if someone else may have some ideas? @kortewegdevries couldn't replicate it, so maybe waiting until someone else could replicate would be meaningful too. |
You commented the original Hence the error in your post: (because with only that you are missing hosts,resolv.conf, etc.) I said to combine both like this: |
|
Aha, gotcha! Thanks for patiently explaining. Did with only changing |
|
I'm closing here due to inactivity, please fell free to request to reopen if you still have this issue. |
|
I am willing to offer any help in debugging as I've been doing, but cannot resolve the issue alone by myself and the issue still persists. |
|
I can't follow this thread. Can you give a short summary. |
|
Ok, I'll try to summarize.
In all cases, directly calling the program with something like I have apparmor running, although none of the mentioned programs above are listed in |
So if you add |
Yes. I'd rather not ignore them, so I think we've been bisecting a list of things to ignore above.
Added |
That right, but no narrow it down I asked if it works if they are ignored. Assuming that adding only one of the ignores still breaks (i.e. both are necessary):
|
|
Regarding libblas.so, this is because "private-etc alternatives" provides now an incomplete alternatives directory (this was not the case in the past): Native system: Inside Firejail: Same issue with wine executables: Native system: Inside Firejail: For some reason /etc/alternatives is incomplete with "private-etc alternatives". Some links are still available, others are missing. I can see no good reason why symlinks to installed software are "randomly" removed. This affects Debian Bookworm, firejail 0.9.72. |
This may potentially be fixed by: |
Write clear, concise and in textual form.
Bug and expected behavior
youtube-dl -x SOMELINKfails.youtube-dl -x SOMELINKsucceeds.No profile or disabling firejail
firejail --noprofile ffprobe SOMEFILEsucceeds./usr/bin/ffprobe SOMEFILEsucceeds.Reproduce
Steps to reproduce the behavior:
firejail youtube-dl -x SOMELINKorfirejail ffprobe SOMEFILEEnvironment
lsb_release -a)firejail --version) exclusive or used git commit (git rev-parse HEAD)youtube-dldepends onffprobe.Huh?
Checklist
find / -name 'firejail' 2>/dev/null/fd firejailto locate profiles ie in/usr/local/etc/firejail/PROGRAM.profile)BTW, I just noticed that the above
firejail --debugprovided way too much information about my filesystem and setup. Was that necessary? If so, please consider creating a key pair and uploading your public key so these kinds of probably sensitive private information can be shared directly with the project without putting it up in the Internet indefinitely in plain text.The text was updated successfully, but these errors were encountered: