sbctl requires root to run: open /usr/share: permission denied

[edwloef]

Output when migrating the config:

❱ sudo sbctl setup --migrate
old configuration detected. Please use `sbctl setup --migrate`
Moving files...✓ 
sbctl requires root to run: open /usr/share: permission denied

this also occurs when running in a root shell instead of with sudo.

[Foxboron]

Hrm, weird. I don't know why it would try to open /usr/share? Is /usr/share/secureboot removed?

[edwloef]

No, that folder still exists.

[oliverhaagh]

I am also getting the same error with /usr/share/secureboot still existing.

[Kaspian24]

Sorry if that's not related but I'm getting similar error with create-keys:

sbctl create-keys
sbctl requires root to run: mkdir /var/lib/sbctl: permission denied

Both with sudo or when running in a root shell.

[ptr1337]

0.15.2 still has the issue:

❯ pacman -Qs sbctl
local/sbctl 0.15.2-1
    Secure Boot key manager

❯ sudo sbctl setup --migrate --disable-landlock
old configuration detected. Please use `sbctl setup --migrate`
/var/lib/sbctl already exists!

Same with 0.15.1

/var/lib/sbctl is empty too.
Removing the empty directory does fix the issue.

[Foxboron]

Man, I'm bad at this software thing.

[Foxboron]

Okay, so if you see "sbctl requires root to run: open /usr/share: permission denied" during sbctl setup --migrate you have migrated all the files to /var/lib/sbctl, however sbctl could not remove /usr/share/secureboot because of landlock.

So rm -rf /usr/share/secureboot should be fine.

[Kaspian24]

As for sbctl create-keys, it run fine with --disable-landlock.

[Foxboron]

This fixes the create-keys issue 61f9180

I'll hold off on a little bit with a new release to see if there are more issues that come up.

[Foxboron]

I've broken my personal setup 3 times to try and test this properly. So 0.15.3 should have fixed all of the issues, I hope.

https://github.com/Foxboron/sbctl/releases/tag/0.15.3