Local is requesting administrative privileges to modify your etc/hosts in debian linux

[IoTooy]

Issue Summary

First time I managed to get a website added but no connection because that didn’t work, adding kernel.unprivileged_userns_clone = 1 to /etc/sysctl.conf did helped to add the but no connection can be made.

Also received an errror which starts with:
Error: spawnSyn getcap ENOENT
at Object.spawnSync (inter/child_process.js:1067:20
And end with (The error is longer but can’t screenshot)
opt/local/resources/app.asar/main/router/Routerservice.js:1:742

I’ already had the below packages installed.

sudo apt-get install libcap2-bin
sudo apt install libnss3-tools

Also followed this solution http://community.localwp.com/t/local-doesnt-open-on-debian/14742/9

During installation
Error: spawnSync getcap ENOENT

One or two sentence summary of the issue.
Local is requesting administrative privileges to modify your etc/hosts in debian linux

Troubleshooting Questions

Is there a working solution?
Is it easier to install in on Fedora?
It seems it maybe a port issue because RouterService is also mentioned.
Is flywheel made with NodeJs and modules, I’m new to js but I seem to recognize it, just curious.

• Are you able to create a new, plain WordPress site in Local and access it in a Browser?

Replication

Describe the steps that others can take to replicate this issue. If you have screenshots that can help clarify what is happening, please include them!

System Details

• Which version of Local is being used?

• What Operating System (OS) and OS version is being used?
  Linux Debian
  I’m working with Qubes-os and it is a standalone VM

• Attach the Local Log. See this Help Doc for instructions on how to do so:

  • Retrieving Local’s Log

I’ve followed the instruction Spawnsync getcap enoent. Linux Debian 11 - #7 by tomeu
But the solution is not available anymore.

Security Reminder

Flywheel seems like a good product I would really like to work it.

Best regards,
local-lightning.log (25.2 KB)

ps: This forum layout is exactly the same as Qubes-os forum.

[IoTooy]

Does it matter where i place kernel.unprivileged_userns_clone = 1

/etc/sysctl.conf - Configuration file for setting system variables

See /etc/sysctl.d/ for additional system variables.

See sysctl.conf (5) for information.

#kernel.domainname = example.com

Uncomment the following to stop low-level messages on console

#kernel.printk = 3 4 1 3

kernel.unprivileged_userns_clone = 1

###################################################################

Functions previously found in netbase

Uncomment the next two lines to enable Spoof protection (reverse-path filter)

Turn on Source Address Verification in all interfaces to

prevent some spoofing attacks

#net.ipv4.conf.default.rp_filter=1
#net.ipv4.conf.all.rp_filter=1

Uncomment the next line to enable TCP/IP SYN cookies

See Improving syncookies [LWN.net]

Note: This may impact IPv6 TCP sessions too

#net.ipv4.tcp_syncookies=1

Uncomment the next line to enable packet forwarding for IPv4

#net.ipv4.ip_forward=1

Uncomment the next line to enable packet forwarding for IPv6

Enabling this option disables Stateless Address Autoconfiguration

based on Router Advertisements for this host

#net.ipv6.conf.all.forwarding=1

###################################################################

Additional settings - these settings can improve the network

security of the host and prevent against some network attacks

including spoofing attacks and man in the middle attacks through

redirection. Some network environments, however, require that these

settings are disabled so review and enable them as needed.

Do not accept ICMP redirects (prevent MITM attacks)

#net.ipv4.conf.all.accept_redirects = 0
#net.ipv6.conf.all.accept_redirects = 0

or

Accept ICMP redirects only for gateways listed in our default

gateway list (enabled by default)

net.ipv4.conf.all.secure_redirects = 1

Do not send ICMP redirects (we are not a router)

#net.ipv4.conf.all.send_redirects = 0

Do not accept IP source route packets (we are not a router)

#net.ipv4.conf.all.accept_source_route = 0
#net.ipv6.conf.all.accept_source_route = 0

Log Martian Packets

#net.ipv4.conf.all.log_martians = 1

###################################################################

Magic system request Key

0=disable, 1=enable all, >1 bitmask of sysrq functions

See Linux Magic System Request Key Hacks — The Linux Kernel documentation

for what other values do

#kernel.sysrq=438