December 2025 - Spectrum Development

Test for portals passes even when file portal is broken
by Demi Marie Obenour 06 Dec '25

06 Dec '25

While trying to sandbox the file chooser portal, I broke it. This caused files not to be saved, resulting in silent data loss. Unfortunately, the integration test still passed. Is this a bug in the test? Is there a better alternative to manual testing? -- Sincerely, Demi Marie Obenour (she/her/hers)

3 10

[PATCH] host/rootfs: create groups assumed by udev
by Alyssa Ross 05 Dec '25

05 Dec '25

We don't really care about these groups, but if they don't exist, udev will also not apply the "other" modes from rules, leaving e.g. /dev/kvm root-only when it should be globally read/write. tty is set to 5, conforming with the systemd convention. Link: https://systemd.io/UIDS-GIDS/ Signed-off-by: Alyssa Ross <hi(a)alyssa.is> --- Demi, this should avoid the need to add a udev rule for /dev/kvm. host/rootfs/image/etc/group | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/host/rootfs/image/etc/group b/host/rootfs/image/etc/group index 18acc30..e3ade46 100644 --- a/host/rootfs/image/etc/group +++ b/host/rootfs/image/etc/group @@ -1 +1,15 @@ root:x:0:root +clock:x:1: +dialout:x:2: +kmem:x:3: +input:x:4: +tty:x:5: +video:x:6: +render:x:7: +sgx:x:8: +audio:x:9: +lp:x:10: +disk:x:11: +cdrom:x:12: +tape:x:13: +kvm:x:14: base-commit: a13d3403c1ddbb8dbbbdb05416350b2846162ed1 -- 2.51.0

3 4

[PATCH] host/rootfs: Add scripts to access a VM by name
by Demi Marie Obenour 05 Dec '25

05 Dec '25

This is much more convenient than having to find a VM's ID. In the future, the programs that take a VM ID should be the suffixed ones, but this change avoids having to change any tests and so is simpler. Signed-off-by: Demi Marie Obenour <demiobenour(a)gmail.com> --- host/rootfs/file-list.mk | 3 +++ host/rootfs/image/usr/bin/vm-console-by-name | 9 +++++++++ host/rootfs/image/usr/bin/vm-start-by-name | 9 +++++++++ host/rootfs/image/usr/bin/vm-stop-by-name | 9 +++++++++ 4 files changed, 30 insertions(+) diff --git a/host/rootfs/file-list.mk b/host/rootfs/file-list.mk index df22bce87f4685eda26382b4e0b0b6fd21025c7a..fd21034320a3de6f96a8eb229214b041612709e8 100644 --- a/host/rootfs/file-list.mk +++ b/host/rootfs/file-list.mk @@ -59,9 +59,12 @@ FILES = \ image/usr/bin/run-vmm \ image/usr/bin/spectrum-update \ image/usr/bin/vm-console \ + image/usr/bin/vm-console-by-name \ image/usr/bin/vm-import \ image/usr/bin/vm-start \ + image/usr/bin/vm-start-by-name \ image/usr/bin/vm-stop \ + image/usr/bin/vm-stop-by-name \ image/usr/bin/xdg-open \ image/usr/libexec/net-add \ image/usr/share/dbus-1/services/org.freedesktop.portal.Documents.service diff --git a/host/rootfs/image/usr/bin/vm-console-by-name b/host/rootfs/image/usr/bin/vm-console-by-name new file mode 100755 index 0000000000000000000000000000000000000000..a302b463ef1bd2c9ae180b6b2b9eae45a26856d6 --- /dev/null +++ b/host/rootfs/image/usr/bin/vm-console-by-name @@ -0,0 +1,9 @@ +#!/bin/execlineb -WS1 +# SPDX-License-Identifier: EUPL-1.2+ +# SPDX-FileCopyrightText: 2025 Demi Marie Obenour <demiobenour(a)gmail.com> +# SPDX-FileCopyrightText: 2022-2023, 2025 Alyssa Ross <hi(a)alyssa.is> +backtick -E vm_id { + backtick -E id_path { readlink /run/vm/by-name/${1} } + basename -- $id_path +} +vm-console $vm_id diff --git a/host/rootfs/image/usr/bin/vm-start-by-name b/host/rootfs/image/usr/bin/vm-start-by-name new file mode 100755 index 0000000000000000000000000000000000000000..438a4a4610ddc9dea3394503e8d5e635468fbddd --- /dev/null +++ b/host/rootfs/image/usr/bin/vm-start-by-name @@ -0,0 +1,9 @@ +#!/bin/execlineb -WS1 +# SPDX-License-Identifier: EUPL-1.2+ +# SPDX-FileCopyrightText: 2025 Demi Marie Obenour <demiobenour(a)gmail.com> +# SPDX-FileCopyrightText: 2022-2023, 2025 Alyssa Ross <hi(a)alyssa.is> +backtick -E vm_id { + backtick -E id_path { readlink /run/vm/by-name/${1} } + basename -- $id_path +} +vm-start $vm_id diff --git a/host/rootfs/image/usr/bin/vm-stop-by-name b/host/rootfs/image/usr/bin/vm-stop-by-name new file mode 100755 index 0000000000000000000000000000000000000000..07ca686b5ace86aceb0fdc0f9ace8ff3859f2b37 --- /dev/null +++ b/host/rootfs/image/usr/bin/vm-stop-by-name @@ -0,0 +1,9 @@ +#!/bin/execlineb -WS1 +# SPDX-License-Identifier: EUPL-1.2+ +# SPDX-FileCopyrightText: 2025 Demi Marie Obenour <demiobenour(a)gmail.com> +# SPDX-FileCopyrightText: 2022-2023, 2025 Alyssa Ross <hi(a)alyssa.is> +backtick -E vm_id { + backtick -E id_path { readlink /run/vm/by-name/${1} } + basename -- $id_path +} +vm-stop $vm_id --- base-commit: a13d3403c1ddbb8dbbbdb05416350b2846162ed1 change-id: 20251201-vm-ops-by-name-6a5cb600f726 -- Sincerely, Demi Marie Obenour (she/her/hers)

1 0

[PATCH 01/13] pkgs: gtk3: backport fix for unset XDG_RUNTIME_DIR
by Alyssa Ross 02 Dec '25

02 Dec '25

As part of running services as different users we'll be giving services dedicated places to put their sockets, rather than a single shared directory they all need to be able to write to. Signed-off-by: Alyssa Ross <hi(a)alyssa.is> --- pkgs/gtk3/default.nix | 13 +++++++++++++ pkgs/overlay.nix | 2 ++ 2 files changed, 15 insertions(+) create mode 100644 pkgs/gtk3/default.nix diff --git a/pkgs/gtk3/default.nix b/pkgs/gtk3/default.nix new file mode 100644 index 0000000..72445c9 --- /dev/null +++ b/pkgs/gtk3/default.nix @@ -0,0 +1,13 @@ +# SPDX-FileCopyrightText: 2025 Alyssa Ross <hi(a)alyssa.is> +# SPDX-License-Identifier: MIT + +import ../../lib/overlay-package.nix [ "gtk3" ] ({ final, super }: + +super.gtk3.overrideAttrs ({ patches ? [], ... }: { + patches = patches ++ [ + (final.fetchpatch { + url = "https://gitlab.gnome.org/GNOME/gtk/-/commit/8569e206badbee1b27ff0e27316391b…"; + hash = "sha256-OdBhCGtz+3HS8LRhp+GCj3dL4pntybiI9b3A3kc5+OY="; + }) + ]; +})) diff --git a/pkgs/overlay.nix b/pkgs/overlay.nix index 0ca196c..0910bf3 100644 --- a/pkgs/overlay.nix +++ b/pkgs/overlay.nix @@ -4,5 +4,7 @@ (final: super: { cloud-hypervisor = import ./cloud-hypervisor { inherit final super; }; + gtk3 = import ./gtk3 { inherit final super; }; + skawarePackages = import ./skaware-packages { inherit final super; }; }) base-commit: c43e5c63a028994d5f66a15db19f415bf3cb7736 -- 2.51.0

3 30

[PATCH] host/rootfs: Add scripts to access a VM by name
by Demi Marie Obenour 01 Dec '25

01 Dec '25

This is much more convenient than having to find a VM's ID. In the future, the programs that take a VM ID should be the suffixed ones, but this change avoids having to change any tests and so is simpler. Signed-off-by: Demi Marie Obenour <demiobenour(a)gmail.com> --- host/rootfs/file-list.mk | 3 +++ host/rootfs/image/usr/bin/vm-console-by-name | 9 +++++++++ host/rootfs/image/usr/bin/vm-start-by-name | 9 +++++++++ host/rootfs/image/usr/bin/vm-stop-by-name | 9 +++++++++ 4 files changed, 30 insertions(+) diff --git a/host/rootfs/file-list.mk b/host/rootfs/file-list.mk index df22bce87f4685eda26382b4e0b0b6fd21025c7a..fd21034320a3de6f96a8eb229214b041612709e8 100644 --- a/host/rootfs/file-list.mk +++ b/host/rootfs/file-list.mk @@ -59,9 +59,12 @@ FILES = \ image/usr/bin/run-vmm \ image/usr/bin/spectrum-update \ image/usr/bin/vm-console \ + image/usr/bin/vm-console-by-name \ image/usr/bin/vm-import \ image/usr/bin/vm-start \ + image/usr/bin/vm-start-by-name \ image/usr/bin/vm-stop \ + image/usr/bin/vm-stop-by-name \ image/usr/bin/xdg-open \ image/usr/libexec/net-add \ image/usr/share/dbus-1/services/org.freedesktop.portal.Documents.service diff --git a/host/rootfs/image/usr/bin/vm-console-by-name b/host/rootfs/image/usr/bin/vm-console-by-name new file mode 100755 index 0000000000000000000000000000000000000000..a302b463ef1bd2c9ae180b6b2b9eae45a26856d6 --- /dev/null +++ b/host/rootfs/image/usr/bin/vm-console-by-name @@ -0,0 +1,9 @@ +#!/bin/execlineb -WS1 +# SPDX-License-Identifier: EUPL-1.2+ +# SPDX-FileCopyrightText: 2025 Demi Marie Obenour <demiobenour(a)gmail.com> +# SPDX-FileCopyrightText: 2022-2023, 2025 Alyssa Ross <hi(a)alyssa.is> +backtick -E vm_id { + backtick -E id_path { readlink /run/vm/by-name/${1} } + basename -- $id_path +} +vm-console $vm_id diff --git a/host/rootfs/image/usr/bin/vm-start-by-name b/host/rootfs/image/usr/bin/vm-start-by-name new file mode 100755 index 0000000000000000000000000000000000000000..438a4a4610ddc9dea3394503e8d5e635468fbddd --- /dev/null +++ b/host/rootfs/image/usr/bin/vm-start-by-name @@ -0,0 +1,9 @@ +#!/bin/execlineb -WS1 +# SPDX-License-Identifier: EUPL-1.2+ +# SPDX-FileCopyrightText: 2025 Demi Marie Obenour <demiobenour(a)gmail.com> +# SPDX-FileCopyrightText: 2022-2023, 2025 Alyssa Ross <hi(a)alyssa.is> +backtick -E vm_id { + backtick -E id_path { readlink /run/vm/by-name/${1} } + basename -- $id_path +} +vm-start $vm_id diff --git a/host/rootfs/image/usr/bin/vm-stop-by-name b/host/rootfs/image/usr/bin/vm-stop-by-name new file mode 100755 index 0000000000000000000000000000000000000000..07ca686b5ace86aceb0fdc0f9ace8ff3859f2b37 --- /dev/null +++ b/host/rootfs/image/usr/bin/vm-stop-by-name @@ -0,0 +1,9 @@ +#!/bin/execlineb -WS1 +# SPDX-License-Identifier: EUPL-1.2+ +# SPDX-FileCopyrightText: 2025 Demi Marie Obenour <demiobenour(a)gmail.com> +# SPDX-FileCopyrightText: 2022-2023, 2025 Alyssa Ross <hi(a)alyssa.is> +backtick -E vm_id { + backtick -E id_path { readlink /run/vm/by-name/${1} } + basename -- $id_path +} +vm-stop $vm_id --- base-commit: 44f32b7a4b3cfbb4046447318e6753dd0eb71add change-id: 20251201-vm-ops-by-name-6a5cb600f726 -- Sincerely, Demi Marie Obenour (she/her/hers)

1 0

[PATCH v2 1/6] img/app: install fuse3 globally
by Alyssa Ross 01 Dec '25

01 Dec '25

AppImage (and in-development Flatpak) VMs complain about this being absent and portals don't work without it, even though Nix VMs work fine. I suppose it's a packaging difference. Signed-off-by: Alyssa Ross <hi(a)alyssa.is> --- v2: no change v1: https://spectrum-os.org/lists/archives/spectrum-devel/20251201044534.977524… img/app/default.nix | 1 + 1 file changed, 1 insertion(+) diff --git a/img/app/default.nix b/img/app/default.nix index 6490ac2..1eb3c9b 100644 --- a/img/app/default.nix +++ b/img/app/default.nix @@ -65,6 +65,7 @@ let pkgs.cacert pkgs.dejavu_fonts pkgs.execline + pkgs.fuse3 pkgs.kmod pkgs.mdevd pkgs.pipewire base-commit: a6d872aea26311a590e90dc08d59105a2165d80b -- 2.51.0

3 13

[PATCH 1/5] img/app: install fuse3 globally
by Alyssa Ross 01 Dec '25

01 Dec '25

AppImage (and in-development Flatpak) VMs complain about this being absent and portals don't work without it, even though Nix VMs work fine. I suppose it's a packaging difference. Signed-off-by: Alyssa Ross <hi(a)alyssa.is> --- img/app/default.nix | 1 + 1 file changed, 1 insertion(+) diff --git a/img/app/default.nix b/img/app/default.nix index 6490ac2..1eb3c9b 100644 --- a/img/app/default.nix +++ b/img/app/default.nix @@ -65,6 +65,7 @@ let pkgs.cacert pkgs.dejavu_fonts pkgs.execline + pkgs.fuse3 pkgs.kmod pkgs.mdevd pkgs.pipewire base-commit: cf131bd816a34095af34345f0e5f148c47268a04 -- 2.51.0

2 10

[REGRESSION] "Save link as…" in Firefox no longer works
by Alyssa Ross 01 Dec '25

01 Dec '25

I've been testing on the Krita downloads page (it's my normal way of testing running AppImages). No more portal save dialog, just nothing. 636a47c9243a8cf0387b6e2e4fbb7d8972e501f4 is the first bad commit commit 636a47c9243a8cf0387b6e2e4fbb7d8972e501f4 Author: Alyssa Ross <hi(a)alyssa.is> Date: Wed Sep 10 22:06:34 2025 +0200 lib/nixpkgs.default.nix: update to nixos-unstable-small Signed-off-by: Alyssa Ross <hi(a)alyssa.is> host/initramfs/default.nix | 3 ++- host/rootfs/default.nix | 2 +- img/app/default.nix | 2 +- lib/nixpkgs.default.nix | 4 ++-- vm/sys/net/default.nix | 2 +- 5 files changed, 7 insertions(+), 6 deletions(-) So needs a Nixpkgs bisection.

1 0