Chromium wont boot again - gave up until its fixed and went flatpak route and works fine.
Hi,
We have the config enabled by default in r36.5:
Jetson orin nano - Browser issue - #74 by DaneLLL
Probably some other configs are still missing. We will set up developer kit and check again. Thanks for reporting it.
Hi
We try the solution on r36.5 Orin Nano developer kit and chromium browser can be launched successfully:
Why Chromium Suddenly Broke on Jetson Orin (and How to Bring It Back) - JetsonHacks
Permanent kernel-rebuild fix
CONFIG_SQUASHFS_XATTR=y is enabled on r36.5 and need to enable:
CONFIG_SECURITY_APPARMOR=y
And follow the steps to rebuild kernel:
Kernel Customization — NVIDIA Jetson Linux Developer Guide
In first bootup, please add the configs to extlinux.conf:
apparmor=1 security=apparmor
And then install, launch chromium browser.
If you see the error:
$ DISPLAY=:0 chromium-browser
snap-confine is packaged without necessary permissions and cannot continue
required permitted capability cap_dac_override not found in current capabilities:
=
Please re-install snapd and try again:
$ sudo apt install --reinstall snapd
Hi,
We also validate the patch to rebuild/replace kernel on r36.5 Orin Nano developer kit, and it works fine:
diff --git a/arch/arm64/configs/defconfig b/arch/arm64/configs/defconfig
index c6ebba8..922559b 100644
--- a/arch/arm64/configs/defconfig
+++ b/arch/arm64/configs/defconfig
@@ -1696,13 +1696,13 @@
CONFIG_SECURITY_NETWORK=y
CONFIG_HARDENED_USERCOPY=y
CONFIG_FORTIFY_SOURCE=y
-CONFIG_SECURITY_SELINUX=y
+CONFIG_SECURITY_APPARMOR=y
CONFIG_SECURITY_YAMA=y
CONFIG_INTEGRITY_SIGNATURE=y
CONFIG_INTEGRITY_ASYMMETRIC_KEYS=y
CONFIG_INTEGRITY_PLATFORM_KEYRING=y
CONFIG_DEFAULT_SECURITY_DAC=y
-CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,integrity,selinux,bpf"
+CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,integrity,apparmor,bpf"
CONFIG_CRYPTO_USER=y
CONFIG_CRYPTO_TEST=m
CONFIG_CRYPTO_ECHAINIV=y
diff --git a/arch/arm64/configs/tegra_prod_defconfig b/arch/arm64/configs/tegra_prod_defconfig
index d8eff3e..a70a227 100644
--- a/arch/arm64/configs/tegra_prod_defconfig
+++ b/arch/arm64/configs/tegra_prod_defconfig
@@ -542,8 +542,8 @@
CONFIG_SECURITY_NETWORK=y
CONFIG_HARDENED_USERCOPY=y
CONFIG_FORTIFY_SOURCE=y
-CONFIG_SECURITY_SELINUX=y
-CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,integrity,selinux,bpf"
+CONFIG_SECURITY_APPARMOR=y
+CONFIG_LSM="landlock,lockdown,yama,loadpin,safesetid,integrity,apparmor,bpf"
CONFIG_CRYPTO_DES=m
CONFIG_CRYPTO_SM4_GENERIC=m
CONFIG_CRYPTO_XTS=m
If the error is present:
$ DISPLAY=:0 chromium-browser
snap-confine is packaged without necessary permissions and cannot continue
required permitted capability cap_dac_override not found in current capabilities:
=
Please re-install snapd and try again:
$ sudo apt install --reinstall snapd
1 Like
Hi, thanks for sharing. Does this require users to rebuild the kernel? Will there be new versions like JetPack 6.2.3 with r36.6 to fix this issue, so that we can directly load from SDK? I tried to downgrade snapd to 2.68.5 following the link ( Why Chromium Suddenly Broke on Jetson Orin (and How to Bring It Back) - JetsonHacks ), but it didn’t work.
Hi,
As of now please use Jetpack 6.2.2 r36.5 and rebuild kernel with the configs removed/enabled.
I bought this device back in december and it hasn’t worked for the last few updates - and it is not my responsibility as a consumer to manually rebuild the kernel for you on a proprietary kernel, on a proprietary operating system. It’s obviuous these devices are defective and Nvidia can’t figure it out. What is the process to get a refund via the warranty process - this would be a manufacturer’s defect.
This is not a HW defect, but a SW issue triggered by Chrome updated. Please try the SW solution that we provide to get issue resolved.
Thanks