firejail issues

[tgwilt]

Hi all,

I have used firejail for awhile, but at one point, using firejail for starting firefox didn't work well. Firefox would not load any pages.
This is a known issue, and is usually addressed by starting firefox with firejail like this:

firejail --ignore=seccomp --ignore=protocol firefox %u -no-remote

I read somewhere that this would be fixed in version 09.54 of firejail. Well, I downloaded and installed that version for testing, and it works now. My firefox startup command is "firejail firefox". Nice and simple.

Now, it is NOT recommended at users follow my path and download the program from sourceforge, install and use it. I will probably go back to the old version and hope that at some point, version 0.9.54 becomes available in the software manager. Discussions on Ubuntu are not too hopeful that this will happen soon, if ever.

Just thought I'd mention and share my results.

[tgwilt]

And here's why you shouldn't follow my lead. Chrome will not launch at all using firejail chrome %u.

Noe my syslog file first showed errors with expressvpn.service, even though I thought I had completely rmeoved it with dpkg, then issues with bluez. I used software manager to remove bluez, bur chrome still will not launch. Going back to the old firejail now.

[Sir Charles]

Chrome will not launch at all using firejail chrome %u.

Neither won't Chromium. Discovered it last evening after a fresh install of LM 18.03 Cinnamon, Google Chrome, Chromium and the latest Firejail (9.54_1).

[djh53]

Same issue - Chromium does not load with the firejail prefix.

Starting Chromium with firejail prefix (Firejail version is 0.9.54) generates 5 processes:

1) chromium-browser --enable-pinch
2) chromium-browser --type=-broker
3) chromium-browser --type=gpu-process, followed by 3 parameters:
--field-trial-handle= a long string of digits in 3 comma-separated groups
--gpu-preferences= a long alpha string
--service-request-channel-token= along hex value
4) chromium-browser --type=zygote
5) chromium-browser --type=zygote

Killing these processes and starting Chromium without Firejail produces an error message to the effect that Chromium didn't shut down properly, then offers the option to restore.

Machine is BIOS-based, with AMD Xeon 6-core, 16Gb RAM, Linux Mint 19 Tara, Cinnamon. No other OS is on the machine.

Any assistance will be welcome!

[Pjotr]

It's not: firejail chrome. It's firejail google-chrome-stable.

Also, it's not firejail chromium. It's firejail chromium-browser.

Both launch fine on my Mint 19 with Firejail 0.9.54-1.

[philotux]

Hi all,
I am experiencing the same issue as well with launching chromium-browser with firejail. Without it, the browser starts just fine.
In Mint 18.3 with firejail 0.9.54-1, I get:

Code: Select all

~ $ firejail chromium-browser
Reading profile /etc/firejail/chromium-browser.profile
Reading profile /etc/firejail/chromium.profile
Reading profile /etc/firejail/chromium-common.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Parent pid 6195, child pid 6196
Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set.
Child process initialized in 82.62 ms
/usr/bin/chromium-browser: line 85: /dev/fd/62: No such file or directory
Gkr-Message: couldn't connect to dbus session bus: Could not parse server address: Unknown address type (examples of valid types are "tcp" and on UNIX "unix")

The process just hangs and nothing happens.

[majpooper]

Working just fine on my rig

Code: Select all

majpooper@1150z ~ $ firejail --list
2851:majpooper::/usr/bin/firejail /usr/bin/firefox 
4137:majpooper::/usr/bin/firejail /usr/bin/chromium-browser 
5030:majpooper::firejail --private chromium-browser -no-remote 

majpooper@1150z ~ $ firejail --version
firejail version 0.9.54~rc2

majpooper@1150z ~ $ 1150
System Data
System:    Host: 1150z Kernel: 4.4.0-131-generic x86_64 (64 bit gcc: 5.4.0)
           Desktop: Cinnamon 3.6.7 (Gtk 3.18.9-1ubuntu3.3) Distro: Linux Mint 18.3 Sylvia