[HELP (Not Launching/ Crashing)] OCI Permission error on Bazzite-deck

[frazse]

Checklist

• I have given details of my install including Distribution, Wayland/ XOrg, Parameters Used, echo $XAUTHORITY, etc.
• I have provided logs showing any errors, if available (use DEBUG=1 zwift)
• I have filled out the issue template to the best of my ability.
• This issue only contains 1 issue (if you have multiple issues, open one issue for each issue).
• This issue is not a duplicate issue of previous issue.

Describe the issue

After installing Zwift it ran just fine until I rebooted, now it just errors out with the message:

Error: crun: mount `sysfs` to `sys`: Operation not permitted: OCI permission denied
Error - Error can't run zwift, check variables!

Distribution Details

Bazzite-deck:stable
Bazzite 40 (FROM Fedora Kinoite)
Linux 6.9.12-205.fsync.fc40.x86_64
podman
Kwin(Wayland)

echo $XAUTHORITY
/run/user/1000/xauth_KjONWA

Reproduction steps

1. Run the install script (Bazzite ships with Podman)
2. Run "zwift"

azu@azuMV3:~$ DEBUG=1 zwift
+ [[ -f /home/azu/.config/zwift/config ]]
+ ZWIFT_CONFIG_FLAG='--env-file /home/azu/.config/zwift/config'
+ source /home/azu/.config/zwift/config
++ ZWIFT_USERNAME=hidden
++ ZWIFT_PASSWORD=hidden
++ ZWIFT_WORKOUT_DIR=/home/azu/.config/zwift/workouts
+ [[ -f /home/azu/.config/zwift/azu-config ]]
+ [[ ! -z /home/azu/.config/zwift/workouts ]]
+ ZWIFT_WORKOUT_VOL='-v /home/azu/.config/zwift/workouts:/home/user/.wine/drive_c/users/user/Documents/Zwift/Workouts'
+ WINDOW_MANAGER=Other
+ IMAGE=docker.io/netbrain/zwift
+ VERSION=latest
+ NETWORKING=bridge
++ id -u
+ ZWIFT_UID=1000
++ id -g
+ ZWIFT_GID=1000
+ '[' '!' ']'
++ command -v podman
+ '[' -x /usr/bin/podman ']'
+ CONTAINER_TOOL=podman
+ '[' podman == podman ']'
+ LOCAL_UID=1000
+ LOCAL_GID=1000
+ CONTAINER_UID=1000
+ CONTAINER_GID=1000
+ case "$XDG_SESSION_TYPE" in
+ WINDOW_MANAGER=Wayland
+ '[' Wayland = Wayland ']'
+ '[' -z ']'
+ WINDOW_MANAGER=XWayland
++ id -u
+ '[' 1000 -ne 1000 ']'
+ [[ ! -n '' ]]
++ curl -s https://raw.githubusercontent.com/netbrain/zwift/master/zwift.sh
++ sha256sum
++ awk '{print $1}'
+ REMOTE_SUM=732988328e5b86a1174a828a9915f225b024b235d625867a8d2fc092dc09b76f
++ sha256sum /usr/local/bin/zwift
++ awk '{print $1}'
+ THIS_SUM=732988328e5b86a1174a828a9915f225b024b235d625867a8d2fc092dc09b76f
+ '[' 732988328e5b86a1174a828a9915f225b024b235d625867a8d2fc092dc09b76f = 732988328e5b86a1174a828a9915f225b024b235d625867a8d2fc092dc09b76f ']'
+ echo 'You are running latest zwift.sh 👏'
You are running latest zwift.sh 👏
+ [[ ! -n '' ]]
+ podman pull docker.io/netbrain/zwift:latest
Trying to pull docker.io/netbrain/zwift:latest...
Getting image source signatures
Copying blob 5333253cc1a1 skipped: already exists
Copying blob fc9196af0df0 skipped: already exists
Copying config 648abbe5fd done   |
Writing manifest to image destination
648abbe5fd1acf456c329ad2edc39428473c490a434f31cd25de68d336cfb4c9
+ GENERAL_FLAGS=(-d --rm --privileged --network $NETWORKING --name zwift-$USER --security-opt label=disable --hostname $HOSTNAME -e DISPLAY=$DISPLAY -e ZWIFT_UID=$CONTAINER_UID -e ZWIFT_GID=$CONTAINER_GID -e PULSE_SERVER=/run/user/$CONTAINER_UID/pulse/native -v zwift-$USER:/home/user/.wine/drive_c/users/user/Documents/Zwift -v /run/user/$LOCAL_UID/pulse:/run/user/$CONTAINER_UID/pulse)
+ [[ -f /proc/driver/nvidia/version ]]
+ VGA_DEVICE_FLAG=--device=/dev/dri:/dev/dri
+ [[ -n unix:path=/run/user/1000/bus ]]
+ [[ unix:path=/run/user/1000/bus =~ ^unix:path=([^,]+) ]]
+ DBUS_UNIX_SOCKET=/run/user/1000/bus
+ [[ -n /run/user/1000/bus ]]
+ DBUS_CONFIG_FLAGS=(-e DBUS_SESSION_BUS_ADDRESS=$(echo $DBUS_SESSION_BUS_ADDRESS | sed 's/'$LOCAL_UID'/'$CONTAINER_UID'/') -v $DBUS_UNIX_SOCKET:$(echo $DBUS_UNIX_SOCKET | sed 's/'$LOCAL_UID'/'$CONTAINER_UID'/'))
++ echo unix:path=/run/user/1000/bus
++ sed s/1000/1000/
++ echo /run/user/1000/bus
++ sed s/1000/1000/
+ '[' XWayland == Wayland ']'
+ '[' XWayland == XWayland ']'
+ '[' -z /run/user/1000/xauth_KjONWA ']'
+ WM_FLAGS=(-e XAUTHORITY=$(echo $XAUTHORITY | sed 's/'$LOCAL_UID'/'$CONTAINER_UID'/') -v /tmp/.X11-unix:/tmp/.X11-unix -v $XAUTHORITY:$(echo $XAUTHORITY | sed 's/'$LOCAL_UID'/'$CONTAINER_UID'/'))
++ echo /run/user/1000/xauth_KjONWA
++ sed s/1000/1000/
++ echo /run/user/1000/xauth_KjONWA
++ sed s/1000/1000/
+ '[' XWayland == XOrg ']'
+ '[' podman == podman ']'
++ podman volume ls
++ grep zwift-azu
+ [[ -z local       zwift-azu ]]
+ PODMAN_FLAGS=(--userns keep-id:uid=$CONTAINER_UID,gid=$CONTAINER_GID)
++ podman run -d --rm --privileged --network bridge --name zwift-azu --security-opt label=disable --hostname azuMV3 -e DISPLAY=:0 -e ZWIFT_UID=1000 -e ZWIFT_GID=1000 -e PULSE_SERVER=/run/user/1000/pulse/native -v zwift-azu:/home/user/.wine/drive_c/users/user/Documents/Zwift -v /run/user/1000/pulse:/run/user/1000/pulse --env-file /home/azu/.config/zwift/config -v /home/azu/.config/zwift/workouts:/home/user/.wine/drive_c/users/user/Documents/Zwift/Workouts --device=/dev/dri:/dev/dri -e DBUS_SESSION_BUS_ADDRESS=unix:path=/run/user/1000/bus -v /run/user/1000/bus:/run/user/1000/bus -e XAUTHORITY=/run/user/1000/xauth_KjONWA -v /tmp/.X11-unix:/tmp/.X11-unix -v /run/user/1000/xauth_KjONWA:/run/user/1000/xauth_KjONWA --userns keep-id:uid=1000,gid=1000 docker.io/netbrain/zwift:latest
Error: crun: mount `sysfs` to `sys`: Operation not permitted: OCI permission denied
+ CONTAINER=
+ '[' 126 -ne 0 ']'
+ msgbox error 'Error can'\''t run zwift, check variables!' 10
+ TYPE=error
+ MSG='Error can'\''t run zwift, check variables!'
+ TIMEOUT=10
+ RED='\033[0;31m'
+ NC='\033[0m'
+ BOLD='\033[1m'
+ UNDERLINE='\033[4m'
+ case $1 in
+ echo -e '\033[0;31m\033[1m\033[4mError - Error can'\''t run zwift, check variables!\033[0m'
Error - Error can't run zwift, check variables!
+ '[' 10 -eq 0 ']'
+ sleep 10
+ exit 0

...

[netbrain]

Never seen this, have no clue what this could be. Sorry, your on your own on this one.

[netbrain]

Unlikely, but might have been related to. #166 (comment)

[msmurphy]

This is most likely a permission issue accessing files or locations in the users home. I bet if you run as root it will fix this (I don't recommend running as root though). There are some mount flags you can use when creating the image to work around podman permission issues. See more info here: containers/podman#14488 (comment)