[BUG] dbus in priv mode and bug fixing compositing

[thelamer]

Is there an existing issue for this?

• I have searched the existing issues

Current Behavior

It has been pointed out by a user that when running in priv mode many things do not work. It passes a smoke test but there are specific core features missing.

############  
# Software #
############
docker run --rm \
  --name=webtop \
  --security-opt seccomp=unconfined \
  -p 3001:3001 \
  --shm-size="1gb" \
  #lscr.io/linuxserver/webtop:debian-kde-7f0bc55e-ls124 # working :-)
  #lscr.io/linuxserver/webtop:debian-xfce-1bec91cf-ls137 # working :-)
  #lscr.io/linuxserver/webtop:debian-mate-f30e2b76-ls130 # working :-)

# add --privileged
# Note: the problems are mostly caused by the /tmp and can be fixes with --tmpfs /tmp 
#       see this bugreport https://github.com/linuxserver/docker-baseimage-kasmvnc/issues/78
docker run --rm \
  --privileged \
  --name=webtop \
  --security-opt seccomp=unconfined \
  -p 3001:3001 \
  --shm-size="1gb" \
  #lscr.io/linuxserver/webtop:debian-kde-7f0bc55e-ls124 # settings not working
  #lscr.io/linuxserver/webtop:debian-xfce-1bec91cf-ls137 # settings not working 
  #lscr.io/linuxserver/webtop:debian-mate-f30e2b76-ls130 # cannot activate composite, cannot open mate-terminal

# add --tmpfs /tmp
docker run --rm \
  --privileged \
  --name=webtop \
  --security-opt seccomp=unconfined \
  -p 3001:3001 \
  --shm-size="1gb" \
  --tmpfs /tmp \
  #lscr.io/linuxserver/webtop:debian-kde-7f0bc55e-ls124 # black screen and ksm server error
  #lscr.io/linuxserver/webtop:debian-xfce-1bec91cf-ls137 # working :-)
  #lscr.io/linuxserver/webtop:debian-mate-f30e2b76-ls130 # working :-)

########  
# DRI3 #
########
# the problems are mostly caused by the /tmp and can be fixes with --tmpfs /tmp 
# see this bugreport https://github.com/linuxserver/docker-baseimage-kasmvnc/issues/78
docker run --rm \
  --privileged \
  --device /dev/dri:/dev/dri \
  --name=webtop \
  --security-opt seccomp=unconfined \
  -p 3001:3001 \
  --shm-size="1gb" \
  #lscr.io/linuxserver/webtop:debian-kde-7f0bc55e-ls124 # settings not working
  #lscr.io/linuxserver/webtop:debian-xfce-1bec91cf-ls137 # settings not working
  #lscr.io/linuxserver/webtop:debian-mate-f30e2b76-ls130 # cannot activate composite, cannot open mate terminal

docker run --rm \
  --privileged \
  --device /dev/dri:/dev/dri \
  --name=webtop \
  --security-opt seccomp=unconfined \
  -p 3001:3001 \
  --shm-size="1gb" \
  --tmpfs /tmp \
  #lscr.io/linuxserver/webtop:debian-kde-7f0bc55e-ls124 # black screen and ksm server error
  #lscr.io/linuxserver/webtop:debian-xfce-1bec91cf-ls137 # working :-)
  #lscr.io/linuxserver/webtop:debian-mate-f30e2b76-ls130 # working :-)

##########
# Nvidia #
########## 
docker run --rm \
  --runtime nvidia \
  --gpus all \
  --name=webtop \
  --security-opt seccomp=unconfined \
  -p 3001:3001 \
  --shm-size="1gb" \
  #lscr.io/linuxserver/webtop:debian-kde-7f0bc55e-ls124 # kde terminal not responding, composite not working
  #lscr.io/linuxserver/webtop:debian-xfce-1bec91cf-ls137 # working but no composite
  #lscr.io/linuxserver/webtop:debian-mate-f30e2b76-ls130 # working with composite :-)

# add --privileged
docker run --rm \
  --runtime nvidia \
  --gpus all \
  --privileged \
  --name=webtop \
  --security-opt seccomp=unconfined \
  -p 3001:3001 \
  --shm-size="1gb" \
  #lscr.io/linuxserver/webtop:debian-kde-7f0bc55e-ls124 # settings not working
  #lscr.io/linuxserver/webtop:debian-xfce-1bec91cf-ls137 # settings not working
  #lscr.io/linuxserver/webtop:debian-mate-f30e2b76-ls130 # cannot activate composite, cannot open mate-terminal

# add --tmpfs /tmp
docker run --rm \
  --runtime nvidia \
  --gpus all \
  --privileged \
  --name=webtop \
  --security-opt seccomp=unconfined \
  -p 3001:3001 \
  --shm-size="1gb" \
  --tmpfs /tmp \
  #lscr.io/linuxserver/webtop:debian-kde-7f0bc55e-ls124 # black screen, see only the kde logo and loading gear
  #lscr.io/linuxserver/webtop:debian-xfce-1bec91cf-ls137 # composite not working
  #lscr.io/linuxserver/webtop:debian-mate-f30e2b76-ls130 # working with composite :-)

I need to revisit running the system dbus service now, but it caused problems previously.

Ok settings daemon in KDE is a dbus thing, you can launch with

dbus-launch systemsettings5

Same with XFCE

dbus-launch xfce4-settings-manager

and same with mate terminal (use xterm or st)

dbus-launch mate-terminal

For compositing it seems the explicit disable here https://github.com/linuxserver/docker-webtop/blob/debian-mate/root/defaults/startwm.sh#L13 cannot be overridden in the session when running in priv, but if removed it will work.
Same with XFCE and KDE is a crapshoot.

I will try to be more priv/DRI/nvidia aware and apply the correct logic properly for the user.

[thelamer]

I have to still do some tweaks but they will need to wait until tomorrow, outside of nvidia conflicts with compositing these are all fixed now.