setzer does not launch

[JKafle]

When I try to launch setzer (62-1) in ubuntu 24.04, it crashes, both GUI and through the terminal. I get the following message when trying to launch from the terminal.

What happened:

In the terminal, we see,

$ setzer

/usr/bin/setzer:133: DeprecationWarning: Gtk.Widget.show is deprecated
  self.main_window.show()
bwrap: setting up uid map: Permission denied

** (setzer:18084): ERROR **: 09:13:50.100: Failed to fully launch dbus-proxy: Child process exited with code 1
Trace/breakpoint trap (core dumped)

The app can not be launched.

Expected:

Setzer to open successfully.

[Hans Joachim Desserud (hjd)]

I get the same error message when attempting to start setzer 62-1 on Ubuntu 24.04.

[Simon Bryntse (gositi)]

I opened an issue on the Setzer Github (https://github.com/cvfosammmm/Setzer/issues/404), from which the creator referred me to the Ubuntu bugtracker. I am copying over what I managed to figure out:

After searching around a bit on similar issues I believe it's an instance of https://bugs.launchpad.net/apparmor/+bug/2046844 and copying the workaround for the similar issue at https://github.com/hugolabe/Wike/issues/181 appears to work. Create the file /etc/apparmor.d/setzer with the following contents:

# This profile allows everything and only exists to give the
# application a name instead of having the label "unconfined"

abi <abi/4.0>,
include <tunables/global>

profile setzer /usr/bin/setzer flags=(unconfined) {
  userns,

  # Site-specific additions and overrides. See local/README for details.
  include if exists <local/setzer>
}

I don't know exactly what this does though, besides that it somehow makes apparmor happy!

[Hans Joachim Desserud (hjd)]

I'm not sure how the profiles work either, but it looks like it is connected to apparmor somehow. I've marked that as also affected to let someone there see if this is a duplicate of bug 2046844 or separate.

[Georgia Garcia (georgiag)]

Hello! Thanks for tagging apparmor. Yes, this is a duplicate of bug 2046844. We are working on an update that introduces a profile for bwrap which would allow setzer (and several other applications) to work properly without having to have an AppArmor profile specifically. Although having an AppArmor profile is always a good idea :)

This is the profile that will be added: https://gitlab.com/apparmor/apparmor/-/blob/master/profiles/apparmor/profiles/extras/bwrap-userns-restrict

While the update doesn't land, you could add it to /etc/apparmor.d/ and load it with
apparmor_parser -r /etc/apparmor.d/bwrap-userns-restrict