I am using fedora cores, and am unable to layer packages once I have installed openvpn.
There is an open GitHub issue at:
opened 02:47PM - 16 Apr 25 UTC
### Describe the bug
After an update to Fedora Atomic 42, I cannot execute any … operation like update, install or uninstall package when I have layered packages.
### Reproduction steps
1. Update to Fedora 42 with layered packages
2. Try to execute any operation like install/uninstall/update
### Expected behavior
The operation should complete
### Actual behavior
```
jsierzega /var/home/jsierzega 1 rpm-ostree update --uninstall nwg-shell
2 metadata, 0 content objects fetched; 788 B transferred in 4 seconds; 0 bajtów content written
Checking out tree b3b1c7a... done
Enabled rpm-md repositories: fedora-cisco-openh264 updates fedora updates-archive
Importing rpm-md... done
rpm-md repo 'fedora-cisco-openh264' (cached); generated: 2024-08-21T16:04:02Z solvables: 3
rpm-md repo 'updates' (cached); generated: 2025-04-16T03:02:59Z solvables: 4111
rpm-md repo 'fedora' (cached); generated: 2025-04-11T05:17:07Z solvables: 76879
rpm-md repo 'updates-archive' (cached); generated: 2025-04-16T03:49:34Z solvables: 3193
Resolving dependencies... done
Applying 2 overrides and 746 overlays
Processing packages... done
Running systemd-sysusers... done
Running pre scripts... done
Running post scripts... done
error: While applying overrides for pkg systemtap-runtime: Could not find group 'stapusr' in group file
```
The entries related to this package that I found in the logs shown by `jornalctl -u rpm-ostreed`:
```
kwi 16 16:37:18 NBJSIERZEGA rpm-ostree(systemtap-runtime.prein)[46153]: Creating group 'stapusr' with GID 156.
kwi 16 16:37:18 NBJSIERZEGA rpm-ostree(systemtap-runtime.prein)[46153]: Creating group 'stapsys' with GID 157.
kwi 16 16:37:18 NBJSIERZEGA rpm-ostree(systemtap-runtime.prein)[46153]: Creating group 'stapdev' with GID 158.
kwi 16 16:37:18 NBJSIERZEGA rpm-ostree(systemtap-runtime.prein)[46153]: Creating group 'stapunpriv' with GID 159.
kwi 16 16:37:18 NBJSIERZEGA rpm-ostree(systemtap-runtime.prein)[46153]: Creating user 'stapunpriv' (systemtap unprivileged user) with UID 159 and GID 159.
(...)
kwi 16 14:03:02 NBJSIERZEGA rpm-ostree(initscripts.post)[28527]: Created symlink '/etc/systemd/system/sysinit.target.wants/import-state.service' → '/usr/lib/systemd/system/import-state.service'.
kwi 16 14:03:02 NBJSIERZEGA rpm-ostree[26144]: Executed %post for initscripts in 186 ms
kwi 16 14:03:02 NBJSIERZEGA rpm-ostree[26144]: Executed %post for zfs-fuse in 180 ms
kwi 16 14:03:02 NBJSIERZEGA rpm-ostree[26144]: Txn UpdateDeployment on /org/projectatomic/rpmostree1/fedora failed: While applying overrides for pkg systemtap-runtime: Could not find group 'stapusr' in group file
```
### System details
```
root /var/home/jsierzega 1 rpm-ostree --version
rpm-ostree:
Version: '2025.7'
Git: 35baf331666e4257c82bd33dbdcb24bfa00a0a90
Features:
- rust
- compose
- container
- fedora-integration
```
The issue is also present with version 2025.6
```
root /var/home/jsierzega rpm-ostree status -b
State: idle
BootedDeployment:
● fedora:fedora/42/x86_64/sericea
Version: 42.20250416.0 (2025-04-16T02:46:40Z)
BaseCommit: b3b1c7aa72c12f3e069a97425d198dd4583d6354987de2d2ee758c0a06e6517f
GPGSignature: Valid signature by B0F4950458F69E1150C6C5EDC8AC4916105EF944
RemovedBasePackages: noopenh264 2.5.0-2.fc42 toolbox 0.1.1-3.fc42
LayeredPackages: android-file-transfer android-tools ansible bat bats chromium clipman cloud-utils cmake cosmic-session
diffstat distrobox dnf doxygen edk2-ovmf fastfetch gettext git git-credential-libsecret glab gparted hdparm
htop hyprland kcat kubernetes langpacks-pl libffi-devel libnsl libvirt lxterminal maven meson moby-engine
mousepad mozilla-openh264 ncdu ngrep nmap nnn nodejs npm nwg-shell openssl p7zip pamixer patch patchutils pip
podman-compose postgresql python-sphinx python-sphinx_rtd_theme python3-bcc python3-devel python3-pip
python3-wxpython4 qemu ranger rdesktop remmina ruqola strace subversion swtpm swtpm-tools syslinux tcpdump
tcptrack thefuck thunderbird tmux traceroute virt-manager w3m xorriso yq yum-utils
Initramfs: regenerate
Unlocked: development
```
### Additional information
_No response_
But there seems to be no other activity that I can find where this issue is being addressed.
I am completely stuck, and both my silverblue installs and coreos are now completely unusable.
Does anyone have any further information or know what is being done and where to get updates about it?
This is a consequence of moving to systemd-sysusers and I have noticed that the nss-altfiles arrangement still seems to be functioning but reports a whole host of errors, when authselect is run.
Any help or information gratefully accepted
Mtia
vitamin
(D Vitamin)
May 15, 2025, 10:07pm
2
I had a similar problem with ddclient.
ddclient-4.0.0-3.fc42 switched to using sysusers.d but ddclient-4.0.0-1.fc42 worked fine.
So my workaround was to layer a specific version of ddclient (rpm-ostree install ddclient-4.0.0-1.fc42
) so that the rest of the packages can be layered successfully.
Maybe you can try if layering a specific openvpn which does not use sysusers.d works for you.
Thanks for the input. I will give it a try tomorrow, but I am hoping that the issue will be fixed.
Another option to try is to build from source, I guess.