You are not logged in.
Hi,
Since recently I've had this problem, but I have no idea of the cause.
The directory /run/user/1000 should be owned by me (as 1000 is my desktop users UID). Sometimes, seemingly randomly but quite frequently, and out of the blue, it will change it's ownership to UID 0. Anyone seen this kind of behavior?
This of course breaks my desktop in various ways, as dbus user session breaks down. I can not even log out of KDE Plasma - only remedy is reboot (which I need to initiate as root / from a console CTRL+ALT+DEL etc.). I can change the ownership of the directory back to my user, but things are broken beyond repair (until reboot).
AFAIK my setup should not be anything special, and I am not running any X.Org software as root!
I'm running KDE Plasma, my display manager is sddm and the system is configure to use pipewire.
Cheers!
Last edited by Wild Penguin (2024-03-01 18:49:53)
Offline
Are you running docker/favorite container implementation, with "totally rad containerized dev environment" runtimes? If yes, that's your problem. Some dockers mount the docker socket which will then fuck over your actual environment.
Last edited by V1del (2024-03-01 14:37:11)
Offline
I don't run docker (at all).
I do use podman, but no containers are running.
EDIT: I've put some binary-blob gameservers which are seldomly running, in podman containers, being a bit paranoid - but them being binary blobs I don't trust 100%, I've found this a bit more secure and also in the end nice way to manage them overall. They are only started manually when needed, and are not running when this problem occurs. The pods are setup in rootless manner on separate user accounts dedicated to a single game server. This is the only thing I use podman for. Docker is not even installed.
Last edited by Wild Penguin (2024-03-01 18:18:30)
Offline
A bit information about the system (fan-control is a custom program for managing my water loop and fans I've made myself, simply monitors and writes to /sys/class/hwmon):
systemctl status (not the leanest setup):
$ systemctl status
● ArkkiVille
State: running
Units: 538 loaded (incl. loaded aliases)
Jobs: 0 queued
Failed: 0 units
Since: Fri 2024-03-01 20:06:18 EET; 14min ago
systemd: 255.4-1-arch
CGroup: /
├─init.scope
│ └─1 /sbin/init splash
├─system.slice
│ ├─NetworkManager.service
│ │ └─1851 /usr/bin/NetworkManager --no-daemon
│ ├─atd.service
│ │ └─1875 /usr/bin/atd -f
│ ├─avahi-daemon.service
│ │ ├─1856 "avahi-daemon: running [ArkkiVille.local]"
│ │ └─1881 "avahi-daemon: chroot helper"
│ ├─ckb-next-daemon.service
│ │ └─1857 /usr/bin/ckb-next-daemon
│ ├─clamav-freshclam.service
│ │ └─3183 /usr/bin/freshclam -d --foreground=true
│ ├─colord.service
│ │ └─2005 /usr/lib/colord
│ ├─cronie.service
│ │ └─1984 /usr/sbin/crond -n
│ ├─cups.service
│ │ ├─1969 /usr/bin/cupsd -l
│ │ └─2071 /usr/lib/cups/notifier/dbus dbus://
│ ├─dbus-broker.service
│ │ ├─1817 /usr/bin/dbus-broker-launch --scope system --audit
│ │ └─1848 dbus-broker --log 4 --controller 9 --machine-id c6dad35a9b1e4962972d0e178e26a64e --max-bytes 536870912 --max-fds 4096 --max-matches 131072 --audit
│ ├─fan-control.service
│ │ ├─1818 bash /home/ville/usr/src/fan-ctrl/testing/fan-ctrl-separate.sh
│ │ └─1847 /home/ville/usr/src/fan-ctrl/fan-ctrl-comb/fan-ctrl -D -n 10 -f /sys/class/hwmon/hwmon3/fan1_target -i 2 -h 0 -s 0:1200,500:1200,2000:2000,8000:2500,9950:4800,10000:4800 -l -C 10001 -I 120…
│ ├─gpm.service
│ │ └─1866 /usr/bin/gpm -m /dev/input/mice -t imps2
│ ├─gssproxy.service
│ │ └─1983 /usr/bin/gssproxy -D
│ ├─monitorix.service
│ │ ├─3205 "/usr/bin/monitorix -c /etc/monitorix/monitorix.conf -p /run/monitorix.pid"
│ │ └─3237 "monitorix-httpd listening on 65532"
│ ├─nfs-idmapd.service
│ │ └─3190 /usr/sbin/rpc.idmapd
│ ├─nfs-mountd.service
│ │ └─3198 /usr/sbin/rpc.mountd
│ ├─nfsdcld.service
│ │ └─1821 /usr/sbin/nfsdcld
│ ├─nfsv4-exportd.service
│ │ └─3191 /usr/sbin/nfsv4.exportd
│ ├─ntpd.service
│ │ └─1981 /usr/bin/ntpd -g -u ntp:ntp
│ ├─polkit.service
│ │ └─2342 /usr/lib/polkit-1/polkitd --no-debug
│ ├─postfix.service
│ │ ├─2103 /usr/lib/postfix/bin/master -w
│ │ ├─2104 pickup -l -t unix -u
│ │ └─2105 qmgr -l -t unix -u
│ ├─rasdaemon.service
│ │ └─1862 /usr/bin/rasdaemon -f -r
│ ├─rpc-statd.service
│ │ └─3196 /usr/sbin/rpc.statd
│ ├─rpcbind.service
│ │ └─3195 /usr/bin/rpcbind -w -f
│ ├─rtkit-daemon.service
│ │ └─2243 /usr/lib/rtkit-daemon
│ ├─sddm.service
│ │ ├─2050 /usr/bin/sddm
│ │ └─2065 /usr/lib/Xorg -nolisten tcp -background none -seat seat0 vt2 -auth /run/sddm/xauth_qrzjIr -noreset -displayfd 16
│ ├─sensord.service
│ │ └─1929 /usr/sbin/sensord -i 60s -l 30m -f daemon
│ ├─smartd.service
│ │ └─1864 /usr/bin/smartd -n -i 3600
│ ├─sshd.service
│ │ └─1973 "sshd: /usr/bin/sshd -D [listener] 0 of 10-100 startups"
│ ├─systemd-journald.service
│ │ └─947 /usr/lib/systemd/systemd-journald
│ ├─systemd-logind.service
│ │ └─1868 /usr/lib/systemd/systemd-logind
│ ├─systemd-udevd.service
│ │ └─udev
│ │ └─1011 /usr/lib/systemd/systemd-udevd
│ ├─udisks2.service
│ │ └─2443 /usr/lib/udisks2/udisksd
│ └─upower.service
│ └─2433 /usr/lib/upowerd
└─user.slice
├─user-1000.slice
│ ├─session-5.scope
│ │ ├─2128 /usr/lib/sddm/sddm-helper --socket /tmp/sddm-auth-8029de2b-ddd7-4e0d-aa31-a98f458d69a6 --id 1 --start /usr/bin/startplasma-x11 --user ville --autologin
│ │ └─2149 /usr/bin/startplasma-x11
│ └─user@1000.service
│ ├─app.slice
│ │ ├─app-ckb\x2dnext.autostart@autostart.service
│ │ │ ├─2659 /usr/bin/ckb-next --background
│ │ │ ├─3141 /usr/lib/ckb-next-animations/ripple --ckb-run
│ │ │ └─3142 /usr/lib/ckb-next-animations/gradient --ckb-run
│ │ ├─app-dbus\x2d:1.2\x2dorg.kde.kdeconnect.slice
│ │ │ └─dbus-:1.2-org.kde.kdeconnect@0.service
│ │ │ └─2606 /usr/lib/kdeconnectd
│ │ ├─app-dbus\x2d:1.2\x2dorg.telegram.desktop.slice
│ │ │ └─dbus-:1.2-org.telegram.desktop@0.service
│ │ │ └─4924 /usr/bin/telegram-desktop
│ │ ├─app-firefox-5745c4dfd22b4850887696343eabd1ed.scope
│ │ │ ├─3563 /usr/lib/firefox/firefox --sm-client-id 1011612dd4d7000170911809600000022850021
│ │ │ ├─4405 /usr/lib/firefox/firefox -contentproc -parentBuildID 20240219145322 -prefsLen 40750 -prefMapSize 240062 -appDir /usr/lib/firefox/browser {ade162f7-8abd-47c0-a655-bd2d6d374878} 3563 t…
│ │ │ ├─4426 /usr/lib/firefox/firefox -contentproc -childID 1 -isForBrowser -prefsLen 40943 -prefMapSize 240062 -jsInitLen 235124 -parentBuildID 20240219145322 -greomni /usr/lib/firefox/omni.ja -…
│ │ │ ├─4530 /usr/lib/firefox/firefox -contentproc -childID 2 -isForBrowser -prefsLen 46111 -prefMapSize 240062 -jsInitLen 235124 -parentBuildID 20240219145322 -greomni /usr/lib/firefox/omni.ja -…
│ │ │ ├─4611 /usr/bin/plasma-browser-integration-host /usr/lib/mozilla/native-messaging-hosts/org.kde.plasma.browser_integration.json plasma-browser-integration@kde.org
│ │ │ ├─4612 /usr/lib/firefox/firefox -contentproc -parentBuildID 20240219145322 -sandboxingKind 0 -prefsLen 46142 -prefMapSize 240062 -appDir /usr/lib/firefox/browser {ff29b3d6-3cea-4385-82fe-7d…
│ │ │ ├─4635 /usr/lib/firefox/firefox -contentproc -childID 4 -isForBrowser -prefsLen 34350 -prefMapSize 240062 -jsInitLen 235124 -parentBuildID 20240219145322 -greomni /usr/lib/firefox/omni.ja -…
│ │ │ ├─4654 /usr/lib/firefox/firefox -contentproc -childID 5 -isForBrowser -prefsLen 34350 -prefMapSize 240062 -jsInitLen 235124 -parentBuildID 20240219145322 -greomni /usr/lib/firefox/omni.ja -…
│ │ │ ├─4900 /usr/lib/firefox/firefox -contentproc -childID 7 -isForBrowser -prefsLen 34407 -prefMapSize 240062 -jsInitLen 235124 -parentBuildID 20240219145322 -greomni /usr/lib/firefox/omni.ja -…
│ │ │ ├─4904 /usr/lib/firefox/firefox -contentproc -childID 8 -isForBrowser -prefsLen 34407 -prefMapSize 240062 -jsInitLen 235124 -parentBuildID 20240219145322 -greomni /usr/lib/firefox/omni.ja -…
│ │ │ ├─5067 /usr/lib/firefox/firefox -contentproc -childID 9 -isForBrowser -prefsLen 34407 -prefMapSize 240062 -jsInitLen 235124 -parentBuildID 20240219145322 -greomni /usr/lib/firefox/omni.ja -…
│ │ │ └─5109 /usr/lib/firefox/firefox -contentproc -childID 10 -isForBrowser -prefsLen 34407 -prefMapSize 240062 -jsInitLen 235124 -parentBuildID 20240219145322 -greomni /usr/lib/firefox/omni.ja …
│ │ ├─app-geoclue\x2ddemo\x2dagent@autostart.service
│ │ │ └─2695 /usr/lib/geoclue-2.0/demos/agent
│ │ ├─app-joystickwake@autostart.service
│ │ │ └─2662 /usr/bin/python /usr/bin/joystickwake
│ │ ├─app-kaccess@autostart.service
│ │ │ └─2699 /usr/bin/kaccess
│ │ ├─app-kmix_autostart@autostart.service
│ │ │ └─2725 /usr/bin/kmix --keepvisibility
│ │ ├─app-mathworks\x2dservice\x2dhost@autostart.service
│ │ │ ├─2669 /home/ville/.MathWorks/ServiceHost/ArkkiVille/v2024.2.0.3/bin/glnxa64/MathWorksServiceHost service --realm-id companion@prod@production
│ │ │ └─3251 /home/ville/.MathWorks/ServiceHost/ArkkiVille/v2024.2.0.3/bin/glnxa64/MSHHealthMonitor --client-id 2669 --realm-id companion@prod@production --lifetime-token "34 -1"
│ │ ├─app-org.kde.discover.notifier@autostart.service
│ │ │ └─2706 /usr/lib/DiscoverNotifier
│ │ ├─app-org.kde.dolphin-71f6b4990669415d9b58b08c76c6a5c6.scope
│ │ │ └─3301 /usr/bin/dolphin -session 1011612dd4d7000170807596000000022530026_1709255597_525747
│ │ ├─app-org.kde.kalendarac@autostart.service
│ │ │ └─2707 /usr/bin/kalendarac
│ │ ├─app-org.kde.kclockd\x2dautostart@autostart.service
│ │ │ └─2675 /usr/bin/kclockd
│ │ ├─app-org.kde.konsole-08895f6006444a718a1b31cffd76fd74.scope
│ │ │ ├─3273 /usr/bin/konsole -session 1011612dd4d7000170264896700000489870018_1709255597_525786
│ │ │ ├─3317 /bin/bash
│ │ │ ├─3320 /bin/bash
│ │ │ ├─3326 /bin/bash
│ │ │ ├─3329 /bin/bash
│ │ │ ├─3334 /bin/bash
│ │ │ ├─3338 ssh-agent
│ │ │ ├─3340 /bin/bash
│ │ │ ├─3344 ssh-agent
│ │ │ ├─3348 /bin/bash
│ │ │ ├─3352 ssh-agent
│ │ │ ├─3363 /bin/bash
│ │ │ ├─3371 /bin/bash
│ │ │ ├─3379 /bin/bash
│ │ │ ├─3385 /bin/bash
│ │ │ ├─3400 /bin/bash
│ │ │ ├─3412 /bin/bash
│ │ │ ├─3422 /bin/bash
│ │ │ ├─3432 /bin/bash
│ │ │ ├─3439 /bin/bash
│ │ │ ├─4061 sudo bash
│ │ │ ├─4063 sudo bash
│ │ │ ├─4064 bash
│ │ │ ├─4137 /bin/bash
│ │ │ ├─5323 journalctl -f
│ │ │ ├─5327 /bin/bash
│ │ │ ├─5969 sudo -u sdtd bash
│ │ │ ├─5971 sudo -u sdtd bash
│ │ │ ├─5972 bash
│ │ │ ├─6033 /bin/bash
│ │ │ ├─6047 watch ls -l /run/user
│ │ │ ├─6220 sleep 10
│ │ │ ├─6231 /bin/bash
│ │ │ └─6254 systemctl status
│ │ ├─app-org.kde.okular-2e8b4baaae754652842351e7cd6090c6.scope
│ │ │ └─3285 /usr/bin/okular -session 1011612dd4d7000170793993400000022650023_1709255597_525745
│ │ ├─app-org.kde.okular-c9bb836857864f3e9cfae2b92b835e51.scope
│ │ │ └─3535 /usr/bin/okular -session 1011612dd4d7000170854343100000022330063_1709255597_525757
│ │ ├─app-org.mozilla.Thunderbird-c97d1dce6fd746078761e333d961f7e7.scope
│ │ │ ├─3548 /usr/lib/thunderbird/thunderbird --sm-client-id 1011612dd4d7000170858938900000023530021
│ │ │ └─3901 /usr/lib/thunderbird/thunderbird -contentproc -childID 1 -isForBrowser -prefsLen 10009 -prefMapSize 254900 -jsInitLen 241176 -parentBuildID 20240221124637 -appDir /usr/lib/thunderbir…
│ │ ├─app-org.strawberrymusicplayer.strawberry-fe01f91411cc483692365a35c3ecb3c0.scope
│ │ │ ├─3313 /usr/bin/strawberry -session 1011612dd4d7000170920237800000021670019_1709255597_525740
│ │ │ └─3368 /usr/bin/strawberry-tagreader /tmp/strawberry_50028345
│ │ ├─app-transmission\x2dqt-0c50002a9b0c436eb71773efff688b7f.scope
│ │ │ └─3618 /usr/bin/transmission-qt -session 1011612dd4d7000170925470800000021670026_1709255597_525832
│ │ └─dconf.service
│ │ └─2374 /usr/lib/dconf-service
│ ├─background.slice
│ │ ├─plasma-baloorunner.service
│ │ │ └─4838 /usr/lib/baloorunner
│ │ ├─plasma-gmenudbusmenuproxy.service
│ │ │ └─2399 /usr/bin/gmenudbusmenuproxy
│ │ ├─plasma-kactivitymanagerd.service
│ │ │ └─2308 /usr/lib/kactivitymanagerd
│ │ ├─plasma-kglobalaccel.service
│ │ │ └─2296 /usr/bin/kglobalaccel5
│ │ ├─plasma-krunner.service
│ │ │ └─4686 /usr/bin/krunner
│ │ ├─plasma-kscreen.service
│ │ │ └─2532 /usr/lib/kf5/kscreen_backend_launcher
│ │ ├─plasma-ksystemstats.service
│ │ │ └─2423 /usr/bin/ksystemstats
│ │ ├─plasma-polkit-agent.service
│ │ │ └─2400 /usr/lib/polkit-kde-authentication-agent-1
│ │ ├─plasma-powerdevil.service
│ │ │ └─2401 /usr/lib/org_kde_powerdevil
│ │ └─plasma-xembedsniproxy.service
│ │ └─2403 /usr/bin/xembedsniproxy
│ ├─init.scope
│ │ ├─2132 /usr/lib/systemd/systemd --user
│ │ └─2134 "(sd-pam)"
│ └─session.slice
│ ├─at-spi-dbus-bus.service
│ │ └─3651 /usr/lib/at-spi-bus-launcher
│ ├─dbus-broker.service
│ │ ├─2176 /usr/bin/dbus-broker-launch --scope user
│ │ └─2177 dbus-broker --log 4 --controller 10 --machine-id c6dad35a9b1e4962972d0e178e26a64e --max-bytes 100000000000000 --max-fds 25000000000000 --max-matches 5000000000
│ ├─gvfs-daemon.service
│ │ ├─2846 /usr/lib/gvfsd
│ │ └─2875 /usr/lib/gvfsd-fuse /run/user/1000/gvfs -f
│ ├─gvfs-udisks2-volume-monitor.service
│ │ └─3528 /usr/lib/gvfs-udisks2-volume-monitor
│ ├─pipewire-pulse.service
│ │ └─2599 /usr/bin/pipewire-pulse
│ ├─pipewire.service
│ │ └─2466 /usr/bin/pipewire
│ ├─plasma-kded.service
│ │ └─2259 /usr/bin/kded5
│ ├─plasma-ksmserver.service
│ │ └─2256 /usr/bin/ksmserver
│ ├─plasma-kwin_x11.service
│ │ └─2260 /usr/bin/kwin_x11 --replace
│ ├─plasma-plasmashell.service
│ │ └─2341 /usr/bin/plasmashell --no-respawn
│ ├─plasma-xdg-desktop-portal-kde.service
│ │ └─2402 /usr/lib/xdg-desktop-portal-kde
│ ├─wireplumber.service
│ │ └─2468 /usr/bin/wireplumber
│ ├─xdg-desktop-portal.service
│ │ └─2217 /usr/lib/xdg-desktop-portal
│ ├─xdg-document-portal.service
│ │ ├─2222 /usr/lib/xdg-document-portal
│ │ └─2233 fusermount3 -o rw,nosuid,nodev,fsname=portal,auto_unmount,subtype=portal -- /run/user/1000/doc
│ └─xdg-permission-store.service
│ └─2226 /usr/lib/xdg-permission-store
└─user-1346.slice
└─user@1346.service
├─init.scope
│ ├─1987 /usr/lib/systemd/systemd --user
│ └─2010 "(sd-pam)"
└─session.slice
└─dbus-broker.service
├─6064 /usr/bin/dbus-broker-launch --scope user
└─6065 dbus-broker --log 4 --controller 10 --machine-id c6dad35a9b1e4962972d0e178e26a64e --max-bytes 100000000000000 --max-fds 25000000000000 --max-matches 5000000000User 1346 is a dedicated server for ruinning a seven days to die server (actually, the only server in this computer currently). It has a quadlet for running the server. Actually starting the server looks like this:
└─user-1346.slice
└─user@1346.service
├─app.slice
│ └─pande-sdtd.service
│ ├─libpod-payload-ce3f4a947f96b8474cf498aa8d1d733654693bcb392cc7bea4b78148ea8bb9af
│ │ ├─ 6559 /bin/bash ./entrypoint.sh
│ │ ├─ 6572 cron
│ │ ├─ 6610 /bin/bash /app/entrypoint-user.sh
│ │ ├─ 9372 tmux -L sdtdserver-e57dcd74 new-session -d -x 80 -y 23 -s sdtdserver " ./7DaysToDieServer.x86_64 -quit -batchmode -nographics -dedicated -configfile=/data/serverfiles/sdtdserver.x…
│ │ ├─ 9373 sh -c " ./7DaysToDieServer.x86_64 -quit -batchmode -nographics -dedicated -configfile=/data/serverfiles/sdtdserver.xml"
│ │ ├─ 9375 ./7DaysToDieServer.x86_64 -quit -batchmode -nographics -dedicated -configfile=/data/serverfiles/sdtdserver.xml
│ │ ├─ 9378 cat
│ │ └─10216 tail -F /data/log/console/sdtdserver-console.log "/data/log/console/*script.log" "/data/log/script/*console.log" /data/log/script/sdtdserver-script.log
│ └─runtime
│ ├─6534 /usr/bin/slirp4netns --disable-host-loopback --mtu=65520 --enable-sandbox --enable-seccomp --enable-ipv6 -c -r 3 -e 4 --netns-type=path /run/user/1346/netns/netns-3290b9f8-3eeb-7bf…
│ ├─6539 rootlessport
│ ├─6546 rootlessport-child
│ └─6556 /usr/bin/conmon --api-version 1 -c ce3f4a947f96b8474cf498aa8d1d733654693bcb392cc7bea4b78148ea8bb9af -u ce3f4a947f96b8474cf498aa8d1d733654693bcb392cc7bea4b78148ea8bb9af -r /usr/bin/…
├─init.scope
│ ├─1987 /usr/lib/systemd/systemd --user
│ └─2010 "(sd-pam)"
├─session.slice
│ └─dbus-broker.service
│ ├─6064 /usr/bin/dbus-broker-launch --scope user
│ └─6065 dbus-broker --log 4 --controller 10 --machine-id c6dad35a9b1e4962972d0e178e26a64e --max-bytes 100000000000000 --max-fds 25000000000000 --max-matches 5000000000
└─user.slice
└─podman-pause-f02d9747.scope
└─6472 catatonit -PAnd does nothing to /run/user (I've actually had this for somewhat longer time than I've had this weird problem). This is the only server on the computer currently - I've had others and run other servers on another computer in similar manner.
The actual quadlet in .config/containers/systemd/pande-sdtd.container :
[Unit]
Description=PandESportS Seven Days to Die Server
[Container]
ContainerName=PandESDtD
Image=docker.io/gameservermanagers/gameserver:sdtd
Volume=linuxgsm-sdtd:/data
LogDriver=k8s-file
PublishPort=26900:26900/tcp
PublishPort=26900:26900/udp
PublishPort=26902:26902/udp
PodmanArgs=--log-opt=path=/home/sdtd/pande-sdtdlog.k8s
Timezone=local
[Service]
Restart=no
# [Install]
# WantedBy=multi-user.target default.targetI actually started and stopped the server as writing this, and at least that didn't trigger any changes in /run/user (systemctl --user start pande-sdtd and subsequent stop).
FWIW I also noticed that the user 1346 also has a dir in /run/user. When my dir get's owned by root, the same thing happens to UID 1346.
V1del, thanks for the suggestion, though!
Any other ideas / comments? Other useful info I could post / I should check?
Last edited by Wild Penguin (2024-03-01 18:34:30)
Offline
Ok, I've found the cause. It was a really stupid one - PEBCAK!
I have a Gentoo chroot environment (don't ask why, or actually, if you do, it's a weird hobby, I compile binary packages for and old computer too slow to compile or run any other somewhat modern Linux distribution).
Somehow (don't ask why!) I've removed a crucial 'r' from a script. More specifically, I'm using the option --rbind ... except that I'm not, since the r had gone missing at some point editing another part of this file! I know this for a fact since this script has been in use for ages and I've not had this problem before. --bind is very different than --rbind in this case.
Marking as [SOLVED].
Last edited by Wild Penguin (2024-03-02 12:57:10)
Offline
Edit: F5…
Either way, might help someone in the future ![]()
https://wiki.archlinux.org/title/Audit_ … ies_access
https://man.archlinux.org/man/auditctl.8#S
https://man.archlinux.org/man/chown.2.en
Last edited by seth (2024-03-01 18:58:19)
Offline