[Bug]: bwrap: Can't mkdir parents for /usr/lib/x86_64-linux-gnu/GL: Read-only file system

[hferreiro]

Checklist

• [X] I agree to follow the Code of Conduct that this project adheres to.
• [X] I have searched the issue tracker for a bug that matches the one I want to file, without success.
• [X] If this is an issue with a particular app, I have tried filing it in the appropriate issue tracker for the app (e.g. under https://github.com/flathub/) and determined that it is an issue with Flatpak itself.
• [X] This issue is not a report of a security vulnerability (see here if you need to report a security issue).

Flatpak version

1.12.7

What Linux distribution are you using?

Fedora Silverblue

Linux distribution version

36

What architecture are you using?

x86_64

How to reproduce

I had problems with locales in a flatpak app and run the suggested command at https://github.com/flatpak/flatpak/issues/3712:

$ flatpak update --subpath=en,gl

Expected Behavior

Flatpak apps keep working.

Actual Behavior

Now, every app fails to run like this:

$ flatpak run org.gnome.Calculator 
bwrap: Can't mkdir parents for /usr/lib/x86_64-linux-gnu/GL: Read-only file system

Additional Information

No response

[hferreiro]

It seems this has been happening from some time: https://github.com/flatpak/flatpak/issues/1504#issuecomment-374851138.

[imhemish]

same happened with me, I ran flatpak update --subpath=en,hi <app-id> on some specific apps, and those specific apps are failing out with same error.

[smcv]

$ flatpak update --subpath=en,gl

This is not a safe thing to do. If I understand its meaning correctly, it will remove all files from your apps and runtimes, unless they are in a directory named en or gl.

flatpak update --subpath=en,hi <app-id>

Similarly this is not right.

If I understand the intended use of --subpath correctly, the only safe way to use it is for a Locale extension specifically, for example:

flatpak update --subpath=en,hi org.gnome.Recipes.Locale

(But I might be wrong, I didn't design this feature.)

[hferreiro]

OK, my bad then. I wonder though if something can be done to prevent breaking installations by passing the wrong parameters to a seemingly innocuous command.

[WhyNotHugo]

I'm seeing very similar symptoms:

> flatpak run --user org.signal.Signal
bwrap: Can't mkdir /usr/lib/x86_64-linux-gnu/GL: Read-only file system
error: ldconfig failed, exit status 256

But I've never executed flatpak update --subpath. Could this be an entirely unrelated issue?

[WhyNotHugo]

Actually, my error is slightly different, so it might be something else:

@@ -1 +1 @@
-bwrap: Can't mkdir parents for /usr/lib/x86_64-linux-gnu/GL: Read-only file system
+bwrap: Can't mkdir /usr/lib/x86_64-linux-gnu/GL: Read-only file system

[christian-taillon]

I also ran the flatpak update --subpath... command and am unable to launch any of my Flatpak applications. I have not yet been able to recover the ability to run mu Flatpak applications as an uninstallation and reinstallation of flatpak has done nothing.

$ flatpak run --command=sh org.gnome.Calculator     
F: Not sharing "/etc/ssl/certs/ca-certificates.crt" with sandbox: Path "/etc" is reserved by Flatpak
F: Not sharing "/etc/ssl/certs" with sandbox: Path "/etc" is reserved by Flatpak
bwrap: Can't mkdir parents for /usr/lib/x86_64-linux-gnu/GL: Read-only file system

FlatPak Version: Flatpak 1.14.8 Distribution: Debian Bookworm

[naortega]

I've been getting a similar error, but rather than from running a Flatpak, I get it from trying to build a Flatpak:

========================================================================
Building module desktop-file in /home/nicolasortega/dev/flatpak_xxxxxxxxxx/.flatpak-builder/build/desktop-file-3
========================================================================
Running: install -Dm644 xxx.xxxxxx.xxxxxxxxxx.desktop /app/share/applications/xxx.xxxxxx.xxxxxxxxxx.desktop
bwrap: Can't mkdir parents for /usr/lib/debug/usr/lib/i386-linux-gnu: Read-only file system

As you can see (even without the parts I purposely mask) all I'm doing is installing a .desktop file in /app/share/applications. This shouldn't be an issue.

Flatpak version: 1.16.0 Flatpak-builder version: 1.4.4 Distribution: Manjaro Linux (stable)

[naortega]

I've been getting a similar error, but rather than from running a Flatpak, I get it from trying to build a Flatpak:

========================================================================
Building module desktop-file in /home/nicolasortega/dev/flatpak_xxxxxxxxxx/.flatpak-builder/build/desktop-file-3
========================================================================
Running: install -Dm644 xxx.xxxxxx.xxxxxxxxxx.desktop /app/share/applications/xxx.xxxxxx.xxxxxxxxxx.desktop
bwrap: Can't mkdir parents for /usr/lib/debug/usr/lib/i386-linux-gnu: Read-only file system

As you can see (even without the parts I purposely mask) all I'm doing is installing a .desktop file in /app/share/applications. This shouldn't be an issue.

Flatpak version: 1.16.0 Flatpak-builder version: 1.4.4 Distribution: Manjaro Linux (stable)

It would seem this is actually because of org.kde.Sdk branch 6.8. I've tried with 6.7 and it seems to work fine. I'll report it to KDE.

[hfiguiere]

I've been getting a similar error, but rather than from running a Flatpak, I get it from trying to build a Flatpak:

This is completely different.