cerulean lotus
I use a Framework 13, use the sway version of secureblue, have enabled most of the security features via the audit. However when I reload the confic via mod + shift + c. The screen is permanently gliched until I exit sway and login again. I just installed the OS. Not installed anything except for neovim.
The glitching I am describing varies, somethings flashing white, somethimes a mix of some random colors.
To add more information, if I go to YouTube and put a video in full screen, same issue
hexed haven
which image are you using?
cerulean lotus
which image are you using?
Could you please elaborate on how I can find it out, I am quite novice in this field of atomic desktops. But I installed the image with sway and no nvidia graphics
hexed haven
what's the output of rpm-ostree status?
and yeah if you have a Framework 13, I'm assuming you don't have a Nvidia GPU, so there'd be no reason to use a Nvidia image
hexed haven
could you paste the full output of rpm-ostree status?
cerulean lotus
Ohh, okay, just let me login to discord on the laptop
cerulean lotus
could you paste the full output of `rpm-ostree status`?
State: idle
warning: Failed to query journal: couldn't find current boot in journal
AutomaticUpdates: stage; rpm-ostreed-automatic.timer: no runs since boot
Deployments:
● ostree-image-signed:docker://ghcr.io/secureblue/sericea-main-hardened:latest
Digest: sha256:f1d01632a7672fa0c319e0d6abecf21060e5bce62c6731295359a07281cfcc77
Version: 43.20260113.0 (2026-01-13T06:48:31Z)
LayeredPackages: mullvad-vpn
ostree-image-signed:docker://ghcr.io/secureblue/sericea-main-hardened:latest
Digest: sha256:f1d01632a7672fa0c319e0d6abecf21060e5bce62c6731295359a07281cfcc77
Version: 43.20260113.0 (2026-01-13T06:48:31Z)
hexed haven
and what Framework model do you have? like is it Intel or AMD?
cerulean lotus
Except for changin to secureboot, the only changes i have made are:
26 ujust --choose
27 ujust set-kargs-hardening
28 ujust setup-usbguard
29 ujust --choose
30 ujust toggle-bash-environment-lockdown
31 ujust --choose
32 ujust audit-secureblue
33 ujust bios
34 ujust create-admin
35 ujust install-vpn
AMD
hexed haven
okay I also have a Framework 13 AMD. I'm using the Kinoite image, not Sway, though
hexed haven
mine is a 7040 model so a bit older
cerulean lotus
My question is if the ujust set-kargs-hardening config could've caused errors?
hexed haven
anyway I have seen some graphical glitching like that before, though not under quite the same circumstances (I only saw it on the login screen), and what fixed it for me was switching to "gaming mode" in the UEFI settings, which allocates 4 GB of RAM to graphics rather than the default 512 MB
idk if that works the same on the newer AMD models though?
hexed haven
My question is if the ujust set-kargs-hardening config could've caused errors?
possible but my guess is probably not, you could try removing the "unstable" kargs to see if it helps though (if you re-run ujust set-kargs-hardening and make different selections, it will add or remove kargs as necessary to apply those selections)
cerulean lotus
anyway I have seen some graphical glitching like that before, though not under q...
I could not find the setting when looking trough my bios earlier, however I might've just missed it, willing to try
cerulean lotus
possible but my guess is probably not, you could try removing the "unstable" kar...
Tried it now
I have to reboot though
hexed haven
I could not find the setting when looking trough my bios earlier, however I migh...
iirc it's kind of buried in some menus
but again I don't know if it's the same for the newer models
cerulean lotus
Would you happen to remember what it is called?
hexed haven
I think it's "iGPU memory" or something like that
in the "advanced" panel maybe?
and there's two settings, one of which is "gaming mode" and allocates more memory to the iGPU
cerulean lotus
In the BIOS now, under iGPU Memory Size
Alternatives are Minimum 0.5GB
Medium 8GB
And High 16GB
hexed haven
okay yeah try medium
0.5 GB of RAM for the iGPU is pretty low and at least on my system it sometimes causes issues like what you were seeing
cerulean lotus
possible but my guess is probably not, you could try removing the "unstable" kar...
I have also changed this which will go into effect after the boot
cerulean lotus
0.5 GB of RAM for the iGPU is pretty low and at least on my system it sometimes ...
But this could be a reasonable issue
It might've worked actually
It is not always completely consistent, but I will play around for a while and see if it has solved the issue!
The I will try to re-harden the kernel and see if that was the issue or the memory
hexed haven
my guess would be the iGPU memory since I had a similar issue that was solved that way
also the "unstable" kernel arguments tend to be more of an "it breaks the system or it works fine" sort of thing
well except for amd_iommu=force_isolation, that one used to cause weird intermittent issues with input devices, but (1) it's been working fine for a while now, at least on my system, and (2) the issues with that were with inputs (like keyboard, mouse, etc.), not graphics
cerulean lotus
I understand, well other than this issue, I must say I am quite impressed with secureblue from a first impression. Quite well refined, and even had power management in the swaybar, (that might be from the atomic project though).
I am very looking forward to my future experience with this OS.
Just one slight question, when using usbguard, when you have allowed a specific usb device, what more might be required? Because I regularly usb thether though my phone but it does not appear to showup.
hexed haven
you should get a notification from usbguard-notifier when an unknown USB device is plugged in
but if not, you can still use usbguard list-devices --blocked to view a list of all currently blocked devices
and that list will be accompanied by device numbers that you can use with usbguard allow-device to (temporary or permanently) allow the device
the notifications are just a convenient interface for the same thing
cerulean lotus
Okay, so you can even enable permanently
Thank you for the support! Very much appreciated, I think one of the first errors that I have encountered that is not totally due to my mistakes!