<?xml version="1.0" encoding="UTF-8" ?>

<bugzilla version="5.2"
          urlbase="https://bugzilla.altlinux.org/"
          
          maintainer="jenya@basealt.ru"
>

    <bug>
          <bug_id>60235</bug_id>
          
          <creation_ts>2026-08-21 13:13:11 +0300</creation_ts>
          <short_desc>Failed to connect to user scope bus via local transport при инициализации кластера с помощью /usr/libexec/podsec/u7s/bin/kubeadm</short_desc>
          <delta_ts>2026-08-21 13:13:11 +0300</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>4</classification_id>
          <classification>Development</classification>
          <product>Sisyphus</product>
          <component>podsec</component>
          <version>unstable</version>
          <rep_platform>x86_64</rep_platform>
          <op_sys>Linux</op_sys>
          <bug_status>NEW</bug_status>
          <resolution></resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P5</priority>
          <bug_severity>normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Vladislav Glinkin">glinkinvd</reporter>
          <assigned_to name="kaf@altlinux.org">kaf</assigned_to>
          <cc>kaf</cc>
          
          <qa_contact>qa-sisyphus</qa_contact>

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>293019</commentid>
    <comment_count>0</comment_count>
      <attachid>22065</attachid>
    <who name="Vladislav Glinkin">glinkinvd</who>
    <bug_when>2026-08-21 13:13:11 +0300</bug_when>
    <thetext>Created attachment 22065
Патч

Версия пакета: podsec-1.3.0-alt2

При инициализации кластера начинается спам сообщениями:
```
...
Failed to connect to user scope bus via local transport: Нет такого файла или каталога  
Failed to connect to user scope bus via local transport: Нет такого файла или каталога  
Failed to connect to user scope bus via local transport: Нет такого файла или каталога  
Failed to connect to user scope bus via local transport: Нет такого файла или каталога
...
```

По нажатию Ctrl+C:
```
^C  
Connected to the local host. Press ^] three times within 1s to exit session.  
[INFO] Entering RootlessKit namespaces: ..........  
[ERROR] nsenter failed after 10 attempts, RootlessKit not running?  
Connection to the local host terminated.  
Connected to the local host. Press ^] three times within 1s to exit session.  
[INFO] Entering RootlessKit namespaces: ..........  
[ERROR] nsenter failed after 10 attempts, RootlessKit not running?  
Connection to the local host terminated.  
Created symlink &apos;/etc/systemd/system/multi-user.target.wants/u7s.service&apos; → &apos;/usr/lib/systemd/system/u7s.service&apos;.  
Конфигурационный файл администратора кластера не сформирован!
```

Основной причиной неработоспособности является отсутствие инициализации пользовательской сессии D-Bus для системного пользователя `u7s-admin`. Без явного создания сокета `/run/user/&lt;UID&gt;/bus` и запуска `dbus-daemon` вызовы `machinectl` завершались ошибкой `Failed to connect to user scope bus`.

Шаги воспроизведения:
1) # sed -i &apos;/swap/d&apos; /etc/fstab
2) # hostnamectl set-hostname podsec-master
3) # apt-get install -y podsec nagios-plugins-common podsec-inotify podsec-k8s podsec-k8s-rbac podsec-dev tree
4) # reboot
5) # export U7S_KUBEVERSION=&quot;v1.29.15&quot; &amp;&amp; export U7S_PLATFORM=&quot;k8s-sisyphus&quot; &amp;&amp; export U7S_FLANNEL_TAG=&quot;v0.26.7&quot; &amp;&amp; yes | podsec-k8s-save-oci out amd64
6) # podsec-create-policy $(ip route get 1.2.3.4 | awk &apos;{print $7}&apos; | xargs)
7) # podsec-create-services
8) # podsec-create-imagemakeruser imagemaker
9) # ssh -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -o IdentitiesOnly=yes imagemaker@localhost
10) $ export U7S_KUBEVERSION=&quot;v1.29.15&quot; &amp;&amp; export U7S_PLATFORM=&quot;k8s-sisyphus&quot; &amp;&amp; export U7S_FLANNEL_TAG=&quot;v0.26.7&quot; &amp;&amp; podsec-load-sign-oci amd64.tar.xz amd64 [imagemaker@test.ru](mailto:imagemaker@test.ru)
11) # export U7S_KUBEVERSION=&quot;v1.29.15&quot; &amp;&amp; export U7S_PLATFORM=&quot;k8s-sisyphus&quot; &amp;&amp; export U7S_FLANNEL_TAG=&quot;v0.26.7&quot; &amp;&amp; export PATH=/usr/libexec/podsec/u7s/bin/:$PATH &amp;&amp; command -v kubeadm
12) # kubeadm init --apiserver-advertise-address $(hostname -i | cut -d&apos; &apos; -f2)

Фактический результат:
Спам &quot;Failed to connect to user scope bus via local transport: Нет такого файла или каталога&quot;, кластер не развернут.

Прикладываю патч с инициализацией D-Bus и пользовательской сессии.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>22065</attachid>
            <date>2026-08-21 13:13:11 +0300</date>
            <delta_ts>2026-08-21 13:13:11 +0300</delta_ts>
            <desc>Патч</desc>
            <filename>podsec-u7s-kubeadm.patch</filename>
            <type>text/plain</type>
            <size>954</size>
            <attacher name="Vladislav Glinkin">glinkinvd</attacher>
            
              <data encoding="base64">ZGlmZiAtLWdpdCBhL3BvZHNlYy1rOHMvYmluL3BvZHNlYy11N3Mta3ViZWFkbSBiL3BvZHNlYy1r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</data>

          </attachment>
      

    </bug>

</bugzilla>