Pamac & landlock access problem

Hi,since some time I get an error message when I try update my AUR packages.

pamac update -a --force-refresh

Fehler: restricting filesystem access failed because landlock is not supported by the kernel!

The updates seem to work, but how do I get rid of this error? Do I need to disable the sandbox ( -disable-sandbox )?

FYI: I am on Kernel 6.13.7-1 but this happened before this kernel as well.

I wonder if this thread with a similar issue is of any help?

Which other kernels have you tried?

Cheers! :slightly_smiling_face:

A good question. Of course, I read the thread beforehand, but I didn’t find anything in it that I could relate to.

image

6.13 is the header I have installed. So I do not see any reason to install the linux66 version like mentioned in the linked thread

This is from an older thread, however it is worth trying linux66 as it’s still currently maintained, being LTS.

Sorry I don’t know about possible issues with sandboxing as I have never used that. I wouldn’t rule it out as a possibility. :man_shrugging:

What I would say, though, is do the system updates using sudo pacman -Syu first and, when complete, do the AUR package rebuilds/updates.

you can enable landlock as kernel-parameter in the grub-config. it’s up to you to do this.

This is a configuration issue.

You have a system where the DownloadUser = alpm tries to access a restricted folder.

You can add lsm=landlock,lockdown,yama,integrity,apparmor,bpf to your cmdline as defined in /etc/default/grub or you can uncomment the line #DisableSandbox in /etc/pacman.conf.

If you choose to add it to your kernel cmdline - you need to rebuild your init and grub config.

1 Like

[SOLVED] pacman 7 - landlock is not supported by the kernel! / Pacman & Package Upgrade Issues / Arch Linux Forums

Pacman 7 added a sandbox for the downloaduser, read the current news item, or pass --disable-sandbox or configure the DisableSandbox option if you really need to use a kernel without landlock.

Update NEWS for 7.0.0 release

1 Like

@linux-aarhus

Thanks a lot :+1:
I added lsm=landlock,lockdown,yama,integrity,apparmor,bpf to /etc/default/grub and I worked! :smiley:

1 Like

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.