I can confirm that the issue is not with labels, at least not that alone.  Perhaps it's a combination of label and apfs, or even just an issue with apfs.

I have just done a test with a file-based loopback device with two ext4 partitions—one with a label, and one without, and you’re right: both will mount and unmount properly.

So, apparently something goes wrong with APFS; unfortunately, I have no access to a labelled APFS partition, hence I cannot test that combination.

I wouldn’t mind doing so, but I don’t have a GitHub account; I’m reluctant to creating one, after I have cleaned up a whole range of accounts on various web sites.

btw Proton have fixed their firefox VPN extension so one can now install that, at least for web browsing

Had to apply this to make it compile. Just a heads up.

diff --git a/hw/xfree86/meson.build b/hw/xfree86/meson.build
index c4db85c..a90064b 100644
--- a/hw/xfree86/meson.build
+++ b/hw/xfree86/meson.build
@@ -93,6 +93,7 @@ xorg_deps = [
     xshmfence_dep,
     config_dep,
     libdrm_dep,
+    libseat_dep,
 ]
 
 if get_option('suid_wrapper')
diff --git a/hw/xfree86/os-support/meson.build b/hw/xfree86/os-support/meson.build
index 236f5de..66d624b 100644
--- a/hw/xfree86/os-support/meson.build
+++ b/hw/xfree86/os-support/meson.build
@@ -14,6 +14,12 @@ hdrs_xorg_os_support = [
 os_dep = []
 os_c_args = []
 
+libseat_dep = []
+if build_seatd_libseat
+    srcs_xorg_os_support += 'linux/seatd-libseat.c'
+    libseat_dep = dependency('libseat')
+endif
+
 if get_option('pciaccess')
     srcs_xorg_os_support += 'bus/Pci.c'
     if host_machine.system() != 'linux'
diff --git a/test/meson.build b/test/meson.build
index 94634c1..17c4181 100644
--- a/test/meson.build
+++ b/test/meson.build
@@ -219,7 +219,7 @@ if build_xorg
     unit = executable('tests',
          unit_sources,
          c_args: unit_c_args,
-         dependencies: [pixman_dep, randrproto_dep, inputproto_dep, libxcvt_dep],
+         dependencies: [pixman_dep, randrproto_dep, inputproto_dep, libxcvt_dep, libseat_dep],
          include_directories: unit_includes,
          link_args: ldwraps,
          link_with: xorg_link,

P.S. I installed guest additions, and audio input still did not work.

I will give it a whirl

Once you’ve run my script, you should already have a fully functional Docker installation. Why are you then doing something that breaks it? Or are you still experiencing the same cgroups issues after running my script?

    -- mr-addams

it took me some time but i tested various setups and the biggest one was escaping years of using gnome!

First Install: Failure

- sysvinit: very simple and fast
- xorg: just works
- fs: standard ext4
- vm: qemu + virtmanager
- tailscale: failed, tho with a wrapper script i could use it.
- xfce: feels like winxp but very customizable (last only 1 week!)
- i3: getting use to tilling + insane amount of newbie ricing! + testing almost any wm on the planet.
- dev: docker + ddev + bloated vscode

==> i messed up thing by upgrading to ceres branch
but learned alot and took tons of hand writings!

Second Install: current

- installation: installed a minimum base + xorg + pipewire (later on installed xlibre)
- openrc: i miss sysv but at least tailscale works perfect
- dm: bspwm + polybar
- fs: ext4 + swap (noatime)
- vm: incus
- dev: neovim + lampp

sadly I didn't know about Nebula (thanks for recommending) tail was only reason i chose openrc. no issue so far. we will see, i will update if i fail again

noautologin
nottyautologin
nox11autologin

See 'man live-config' for more details and more options.

The problem is "AI" scrapers.

Exactly.
Anything, that "isn't on the tree at 3" will be raped on daily bases.