Universal Blue•2w ago

Bazzite - Windows VMs and Podman

I'm experiencing this issue: https://universal-blue.discourse.group/t/podman-and-freerdp-problem/2000 Where I am unable to connect via RDP to a vm created inside of a Podman container. The recommended solution of:

podman unshare --rootless-netns

podman unshare --rootless-netns

Gives me this bizarre report back:

podman unshare --rootless-netns
Error: Running Homebrew as root is extremely dangerous and no longer supported.
As Homebrew does not drop privileges on installation you would be giving all
build scripts full access to your system.
root@bazzite ~#

podman unshare --rootless-netns
Error: Running Homebrew as root is extremely dangerous and no longer supported.
As Homebrew does not drop privileges on installation you would be giving all
build scripts full access to your system.
root@bazzite ~#

Any idea what is going on here? why is a Podman unshare command erroring out because of Homebrew??? Can I fix this somehow?

Universal Blue

Podman and freerdp problem

I’m trying to connect to Windows11 in a container using freerdp. The container is running and noVNC can connect to it via http://127.0.0.1:8006 but freerdp shows error Connection reset by peer. This is related to winapps. As far as I understand a request should come up to accept some certificates but that never comes up. Perhaps because the er...

11 Replies

wolfyreload•2w ago

What do you get if you type which podman? I'm getting "/usr/bin/podman". Podman is available via brew, did you accidentally install podman in brew?

CyberGlitterhoofOP•2w ago

which podman
/usr/bin/podman

which podman
/usr/bin/podman

also, which brew gives:

which brew
/home/linuxbrew/.linuxbrew/bin/brew

which brew
/home/linuxbrew/.linuxbrew/bin/brew

I'm also unsure how it's dropping me into root@bazzite after running that unshare command. It did not prompt me to elevate to root or anything and I was not not in another role/user when I ran the command either

Brian@bazzite ~> whoami
Brian
Brian@bazzite ~> podman unshare --rootless-netns
Error: Running Homebrew as root is extremely dangerous and no longer supported.
As Homebrew does not drop privileges on installation you would be giving all
build scripts full access to your system.
root@bazzite ~# whoami
root
root@bazzite ~#

Brian@bazzite ~> whoami
Brian
Brian@bazzite ~> podman unshare --rootless-netns
Error: Running Homebrew as root is extremely dangerous and no longer supported.
As Homebrew does not drop privileges on installation you would be giving all
build scripts full access to your system.
root@bazzite ~# whoami
root
root@bazzite ~#

wolfyreload•2w ago

This is what I get , also get an error but a different one 😅

vana@rog-bazzite:~$ whoami
vana
vana@rog-bazzite:~$ podman unshare --rootless-netns
error: This system was not booted via libostree.
Currently, most rpm-ostree commands only work on ostree-based host systems.
root@rog-bazzite:~# whoami
root

vana@rog-bazzite:~$ whoami
vana
vana@rog-bazzite:~$ podman unshare --rootless-netns
error: This system was not booted via libostree.
Currently, most rpm-ostree commands only work on ostree-based host systems.
root@rog-bazzite:~# whoami
root

CyberGlitterhoofOP•2w ago

It seems like it's real root too, not some chroot fake root inside of a podman container, because it does see dir's I'd expect to see in /

root@bazzite ~# ls
 AppImages/   Applications/  'Calibre Library'/   Desktop/   Documents/   Downloads/   FMD2/   Games/   Music/   Pictures/   Public/   retrodeck/   Sync/   Templates/   Videos/
root@bazzite ~# cd /
root@bazzite /# ls
bin@  boot/  dev/  etc/  home@  lib@  lib64@  media@  mnt@  opt@  ostree@  proc/  root@  run/  sbin@  srv@  sys/  sysroot/  tmp/  usr/  var/
root@bazzite /# cd etc

root@bazzite ~# ls
 AppImages/   Applications/  'Calibre Library'/   Desktop/   Documents/   Downloads/   FMD2/   Games/   Music/   Pictures/   Public/   retrodeck/   Sync/   Templates/   Videos/
root@bazzite ~# cd /
root@bazzite /# ls
bin@  boot/  dev/  etc/  home@  lib@  lib64@  media@  mnt@  opt@  ostree@  proc/  root@  run/  sbin@  srv@  sys/  sysroot/  tmp/  usr/  var/
root@bazzite /# cd etc

If this is some bizarre way to elevate to root without auth this seems like a huge bug

wolfyreload•2w ago

it says root but it doesn't have the same permissions as root (fortunately)

root@rog-bazzite:/opt# mkdir /opt/test
mkdir: cannot create directory ‘/opt/test’: Permission denied

root@rog-bazzite:/opt# mkdir /opt/test
mkdir: cannot create directory ‘/opt/test’: Permission denied

CyberGlitterhoofOP•2w ago

well that's good, and I'm glad (I guess) that you were also able to replicate the root thing, even if not the homebrew thing since it's not just me then I'm not sure who I should open this up as an issue though. Podman? Ostree? Bazzite?

wolfyreload•2w ago

Might be worth taking a step back. What exactly are you trying to achieve? There might be another way

CyberGlitterhoofOP•2w ago

I'm trying to rdp into a windows VM created in virtual machine manager VMM is installed in a distrobox container so that I don't need to layer a ton of stuff Distrobox is using the podman container engine to create its distro container

CyberGlitterhoofOP•2w ago

https://github.com/89luca89/distrobox/blob/main/docs/posts/run_libvirt_in_distrobox.md

GitHub

distrobox/docs/posts/run_libvirt_in_distrobox.md at main · 89luca89...

Use any linux distribution inside your terminal. Enable both backward and forward compatibility with software and freedom to use whatever distribution you’re more comfortable with. Mirror available...

CyberGlitterhoofOP•2w ago

the "dockur" project, which similarly creates a windows vm in an automated way (and it's fundimentally doing basically the same thing as I was doing via VMM here, just automatically instead of manually, since it needs to emulate a new kernel for windows, which podman doesn't do) also has people experiencing the same issue logging in via RDP https://github.com/dockur/windows/issues/679

GitHub

Unable to connect through RDP: Connection reset by peer · Issue #67...

Operating system Fedora Linux 40 (Workstation Edition) Description When connecting to docker container (through localhost:3389, localhost:8006) with RDP protocol using Remmina, Gnome Connections, a...

CyberGlitterhoofOP•2w ago

they seem to be able to sucessfully run podman unshare --rootless-netns however judging from the comments

Gaming

Programming

Bazzite - Windows VMs and Podman