Brave Browser Users

Chat about just about anything else
Forum rules
Do not post support questions here. Before you post read the forum rules. Topics in this forum are automatically closed 30 days after creation.
User avatar
Fred Barclay
Level 12
Level 12
Posts: 4185
Joined: Sat Sep 13, 2014 11:12 am
Location: USA primarily

Re: Brave Browser Users

Post by Fred Barclay »

Hi everyone, Merry Christmas!
Vegemite must not hurt too much. :) I can type without pain!
So, using firejail with brave on Peppermint:
Firejail version 0.9.56
Brave 0.58


1. Install firejail from the PPA so you'll get updates as they're released:

Code: Select all

sudo add-apt-repository ppa:deki/firejail
sudo apt update
sudo apt install firejail
2. Copy the two "brave" files from our backported fixes to /etc/firejail/. You'll need to do this as root. You may get a warning that the file /etc/firejail/brave.profile already exists -- that's ok, you want to overwrite it.

Now you should be able to firejail brave with a simple firejail brave-browser.

I haven't tested on Mint 19 but this should work there too.

Cheers!
Fred
Image
"Once you can accept the universe as matter expanding into nothing that is something, wearing stripes with plaid comes easy."
- Albert Einstein
User avatar
trytip
Level 14
Level 14
Posts: 5371
Joined: Tue Jul 05, 2016 1:20 pm

Re: Brave Browser Users

Post by trytip »

EDIT
Last edited by trytip on Tue Jan 21, 2020 10:28 am, edited 1 time in total.
Image
User avatar
donblanco
Level 1
Level 1
Posts: 26
Joined: Thu Feb 28, 2019 8:02 pm
Location: Ajijic, Mexico
Contact:

Re: Brave Browser Users

Post by donblanco »

DAMIEN1307 wrote: Sun Dec 09, 2018 4:51 pm The new way now looks like this. (you can look at both and see the differences). i found that the way listed below is necessary in order to have Brave browser work correctly as well as having the updater work correctly again.

Code: Select all

curl -s https://brave-browser-apt-release.s3.brave.com/brave-core.asc | sudo apt-key add -

Code: Select all

UBUNTU_CODENAME=$( (grep DISTRIB_CODENAME /etc/upstream-release/lsb-release || grep DISTRIB_CODENAME /etc/lsb-release) 2>/dev/null | cut -d'=' -f2 )

Code: Select all

echo "deb [arch=amd64] https://brave-browser-apt-release.s3.brave.com/ $UBUNTU_CODENAME main" | sudo tee /etc/apt/sources.list.d/brave-browser-release-$UBUNTU_CODENAME.list

Code: Select all

sudo apt update

Code: Select all

sudo apt install brave-browser brave-keyring
<snip>
I hope this will be of use and value to others out here...DAMIEN
Just tried installing using the current code snippets on the Brave.com web site, and it did NOT work. Using your instruction here, from four months ago, worked just perfectly! Thanks so much.
DAMIEN1307

Re: Brave Browser Users

Post by DAMIEN1307 »

happy to be of help for you donblanco...DAMIEN

The following codes listed below are for the most recent "BIONIC" setups for both LM 19.1 as well as Peppermint 9 respin.if for any reason the 4 month old entry does not work for anyone else reading this posting...the change is found in the third code line below.

Code: Select all

curl -s https://brave-browser-apt-release.s3.brave.com/brave-core.asc | sudo apt-key add -

Code: Select all

UBUNTU_CODENAME=$( (grep DISTRIB_CODENAME /etc/upstream-release/lsb-release || grep DISTRIB_CODENAME /etc/lsb-release) 2>/dev/null | cut -d'=' -f2 )

Code: Select all

echo "deb [arch=amd64] https://brave-browser-apt-release.s3.brave.com/ bionic main" | sudo tee /etc/apt/sources.list.d/brave-browser-release-bionic.list

Code: Select all

sudo apt update

Code: Select all

sudo apt install brave-browser brave-keyring
user73

Re: Brave Browser Users

Post by user73 »

For anyone still having issues using Firejail with Brave, Fred Barclays last post still works. I just tested it with Tricia. While some stuff isn't running properly it does appear the sanbox is. Here's the output when you run it from the Terminal:

Code: Select all

USERNAME@DEVICE:~$ firejail brave-browser
Reading profile /etc/firejail/brave-browser.profile
Reading profile /etc/firejail/brave.profile
Reading profile /etc/firejail/chromium-common.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-exec.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Warning: networking feature is disabled in Firejail configuration file
Parent pid 19730, child pid 19731
Child process initialized in 77.15 ms
/usr/bin/brave-browser: line 45: /dev/fd/62: No such file or directory
/usr/bin/brave-browser: line 46: /dev/fd/62: No such file or directory
[15:38:0109/152644.949518:ERROR:zygote_host_impl_linux.cc(255)] Failed to adjust OOM score of renderer with pid 53: Permission denied (13)
[41:41:0109/152644.953737:ERROR:vaapi_wrapper.cc(417)] vaInitialize failed: unknown libva error
[15:38:0109/152644.959060:ERROR:zygote_host_impl_linux.cc(255)] Failed to adjust OOM score of renderer with pid 69: Permission denied (13)
[15:38:0109/152644.961531:ERROR:zygote_host_impl_linux.cc(255)] Failed to adjust OOM score of renderer with pid 71: Permission denied (13)
[15:38:0109/152645.002174:ERROR:zygote_host_impl_linux.cc(255)] Failed to adjust OOM score of renderer with pid 99: Permission denied (13)
[15:52:0109/152645.030719:ERROR:rewards_service_impl.cc(203)] Failed to read file: /home/USERNAME/.config/BraveSoftware/Brave-Browser/Default/ledger_state
[49:49:0109/152645.039878:ERROR:ledger_impl.cc(103)] Failed to initialize wallet
The command never completes, so I can only check if Firejail is running by launching Brave from a modified launcher (with the "firejail" added to the command) and running

Code: Select all

firejail --tree
. Here's the output from that.

Code: Select all

USERNAME@DEVICE:~$ firejail --tree
20933:USERNAME::firejail /usr/bin/brave-browser-stable 
  20936:USERNAME::firejail /usr/bin/brave-browser-stable 
    20942:USERNAME::/bin/bash /usr/bin/brave-browser-stable 
      20951:USERNAME::/opt/brave.com/brave/brave 
        20954:USERNAME::/opt/brave.com/brave/brave --type=zygote 
          20956:USERNAME::/opt/brave.com/brave/brave --type=zygote 
            20995:USERNAME::/opt/brave.com/brave/brave --type=utility --field-trial-handle=1325453042392538596,4771252825625367386,131072 --enable-features=PasswordImport,SimplifyHttpsIndicator,WebUIDarkMode --disable-features=AllowPopupsDuringPageUnload,AudioServiceOutOfProcess,AutofillServerCommunication,LookalikeUrlNavigationSuggestionsUI,NotificationTriggers,SmsReceiver,SyncUSSBookmarks,UnifiedConsent,WebXR,WebXrGamepadModule --lang=en-US --service-sandbox-type=utility --disable-webrtc-apm-in-audio-service --service-request-channel-token=38220284081188554 --shared-files=v8_context_snapshot_data:100,v8_natives_data:101 
            21001:USERNAME::/opt/brave.com/brave/brave --type=renderer --enable-oop-rasterization=Enabled --disable-webrtc-apm-in-audio-service --field-trial-handle=1325453042392538596,4771252825625367386,131072 --enable-features=PasswordImport,SimplifyHttpsIndicator,WebUIDarkMode --disable-features=AllowPopupsDuringPageUnload,AudioServiceOutOfProcess,AutofillServerCommunication,LookalikeUrlNavigationSuggestionsUI,NotificationTriggers,SmsReceiver,SyncUSSBookmarks,UnifiedConsent,WebXR,WebXrGamepadModule --lang=en-US --disable-oor-cors --enable-auto-reload --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=5706207587352155895 --renderer-client-id=7 --no-v8-untrusted-code-mitigations --shared-files=v8_context_snapshot_data:100,v8_natives_data:101 
            21003:USERNAME::/opt/brave.com/brave/brave --type=renderer --enable-oop-rasterization=Enabled --disable-webrtc-apm-in-audio-service --field-trial-handle=1325453042392538596,4771252825625367386,131072 --enable-features=PasswordImport,SimplifyHttpsIndicator,WebUIDarkMode --disable-features=AllowPopupsDuringPageUnload,AudioServiceOutOfProcess,AutofillServerCommunication,LookalikeUrlNavigationSuggestionsUI,NotificationTriggers,SmsReceiver,SyncUSSBookmarks,UnifiedConsent,WebXR,WebXrGamepadModule --lang=en-US --extension-process --disable-oor-cors --enable-auto-reload --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=7382558747020160746 --renderer-client-id=4 --no-v8-untrusted-code-mitigations --shared-files=v8_context_snapshot_data:100,v8_natives_data:101 
            21031:USERNAME::/opt/brave.com/brave/brave --type=renderer --enable-oop-rasterization=Enabled --disable-webrtc-apm-in-audio-service --field-trial-handle=1325453042392538596,4771252825625367386,131072 --enable-features=PasswordImport,SimplifyHttpsIndicator,WebUIDarkMode --disable-features=AllowPopupsDuringPageUnload,AudioServiceOutOfProcess,AutofillServerCommunication,LookalikeUrlNavigationSuggestionsUI,NotificationTriggers,SmsReceiver,SyncUSSBookmarks,UnifiedConsent,WebXR,WebXrGamepadModule --lang=en-US --disable-oor-cors --enable-auto-reload --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=8490797275356715049 --renderer-client-id=8 --no-v8-untrusted-code-mitigations --shared-files=v8_context_snapshot_data:100,v8_natives_data:101 
        20977:USERNAME::/opt/brave.com/brave/brave --type=gpu-process --field-trial-handle=1325453042392538596,4771252825625367386,131072 --enable-features=PasswordImport,SimplifyHttpsIndicator,WebUIDarkMode --disable-features=AllowPopupsDuringPageUnload,AudioServiceOutOfProcess,AutofillServerCommunication,LookalikeUrlNavigationSuggestionsUI,NotificationTriggers,SmsReceiver,SyncUSSBookmarks,UnifiedConsent,WebXR,WebXrGamepadModule --gpu-preferences=KAAAAAAAAAAgAAAgAAAAAAAAYAABAAAAEAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAA --service-request-channel-token=7197981548738108251 
          21063:USERNAME::/opt/brave.com/brave/brave --type=broker                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             
        20982:USERNAME::/opt/brave.com/brave/brave --type=utility --field-trial-handle=1325453042392538596,4771252825625367386,131072 --enable-features=PasswordImport,SimplifyHttpsIndicator,WebUIDarkMode --disable-features=AllowPopupsDuringPageUnload,AudioServiceOutOfProcess,AutofillServerCommunication,LookalikeUrlNavigationSuggestionsUI,NotificationTriggers,SmsReceiver,SyncUSSBookmarks,UnifiedConsent,WebXR,WebXrGamepadModule --lang=en-US --service-sandbox-type=network --disable-webrtc-apm-in-audio-service --service-request-channel-token=9100530241550529405 --shared-files=v8_context_snapshot_data:100,v8_natives_data:101 
        20986:USERNAME::/opt/brave.com/brave/brave --type=utility --field-trial-handle=1325453042392538596,4771252825625367386,131072 --enable-features=PasswordImport,SimplifyHttpsIndicator,WebUIDarkMode --disable-features=AllowPopupsDuringPageUnload,AudioServiceOutOfProcess,AutofillServerCommunication,LookalikeUrlNavigationSuggestionsUI,NotificationTriggers,SmsReceiver,SyncUSSBookmarks,UnifiedConsent,WebXR,WebXrGamepadModule --lang=en-US --no-sandbox --disable-webrtc-apm-in-audio-service --service-request-channel-token=10562242017910192229 --shared-files=v8_context_snapshot_data:100,v8_natives_data:101 

USERNAME@DEVICE:~$ 
user73

Re: Brave Browser Users

Post by user73 »

For anyone still having issues using Firejail with Brave, Fred Barclay's last post still works. I just tested it with Tricia. While some aspects of the browser don't appear to be operating properly, at least the sandbox is. Here's the output when you run it from the Terminal.

Code: Select all

USERNAME@DEVICE:~$ firejail brave-browser
Reading profile /etc/firejail/brave-browser.profile
Reading profile /etc/firejail/brave.profile
Reading profile /etc/firejail/chromium-common.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-exec.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Warning: networking feature is disabled in Firejail configuration file
Parent pid 19730, child pid 19731
Child process initialized in 77.15 ms
/usr/bin/brave-browser: line 45: /dev/fd/62: No such file or directory
/usr/bin/brave-browser: line 46: /dev/fd/62: No such file or directory
[15:38:0109/152644.949518:ERROR:zygote_host_impl_linux.cc(255)] Failed to adjust OOM score of renderer with pid 53: Permission denied (13)
[41:41:0109/152644.953737:ERROR:vaapi_wrapper.cc(417)] vaInitialize failed: unknown libva error
[15:38:0109/152644.959060:ERROR:zygote_host_impl_linux.cc(255)] Failed to adjust OOM score of renderer with pid 69: Permission denied (13)
[15:38:0109/152644.961531:ERROR:zygote_host_impl_linux.cc(255)] Failed to adjust OOM score of renderer with pid 71: Permission denied (13)
[15:38:0109/152645.002174:ERROR:zygote_host_impl_linux.cc(255)] Failed to adjust OOM score of renderer with pid 99: Permission denied (13)
[15:52:0109/152645.030719:ERROR:rewards_service_impl.cc(203)] Failed to read file: /home/USERNAME/.config/BraveSoftware/Brave-Browser/Default/ledger_state
[49:49:0109/152645.039878:ERROR:ledger_impl.cc(103)] Failed to initialize wallet
The command never completes, so I can only check if Firejail is running by launching Brave from a modified launcher (with "firejail" added to the command) and running

Code: Select all

firejail --tree
Here's the output from that.

Code: Select all

USERNAME@DEVICE:~$ firejail --tree
20933:USERNAME::firejail /usr/bin/brave-browser-stable 
  20936:USERNAME::firejail /usr/bin/brave-browser-stable 
    20942:USERNAME::/bin/bash /usr/bin/brave-browser-stable 
      20951:USERNAME::/opt/brave.com/brave/brave 
        20954:USERNAME::/opt/brave.com/brave/brave --type=zygote 
          20956:USERNAME::/opt/brave.com/brave/brave --type=zygote 
            20995:USERNAME::/opt/brave.com/brave/brave --type=utility --field-trial-handle=1325453042392538596,4771252825625367386,131072 --enable-features=PasswordImport,SimplifyHttpsIndicator,WebUIDarkMode --disable-features=AllowPopupsDuringPageUnload,AudioServiceOutOfProcess,AutofillServerCommunication,LookalikeUrlNavigationSuggestionsUI,NotificationTriggers,SmsReceiver,SyncUSSBookmarks,UnifiedConsent,WebXR,WebXrGamepadModule --lang=en-US --service-sandbox-type=utility --disable-webrtc-apm-in-audio-service --service-request-channel-token=38220284081188554 --shared-files=v8_context_snapshot_data:100,v8_natives_data:101 
            21001:USERNAME::/opt/brave.com/brave/brave --type=renderer --enable-oop-rasterization=Enabled --disable-webrtc-apm-in-audio-service --field-trial-handle=1325453042392538596,4771252825625367386,131072 --enable-features=PasswordImport,SimplifyHttpsIndicator,WebUIDarkMode --disable-features=AllowPopupsDuringPageUnload,AudioServiceOutOfProcess,AutofillServerCommunication,LookalikeUrlNavigationSuggestionsUI,NotificationTriggers,SmsReceiver,SyncUSSBookmarks,UnifiedConsent,WebXR,WebXrGamepadModule --lang=en-US --disable-oor-cors --enable-auto-reload --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=5706207587352155895 --renderer-client-id=7 --no-v8-untrusted-code-mitigations --shared-files=v8_context_snapshot_data:100,v8_natives_data:101 
            21003:USERNAME::/opt/brave.com/brave/brave --type=renderer --enable-oop-rasterization=Enabled --disable-webrtc-apm-in-audio-service --field-trial-handle=1325453042392538596,4771252825625367386,131072 --enable-features=PasswordImport,SimplifyHttpsIndicator,WebUIDarkMode --disable-features=AllowPopupsDuringPageUnload,AudioServiceOutOfProcess,AutofillServerCommunication,LookalikeUrlNavigationSuggestionsUI,NotificationTriggers,SmsReceiver,SyncUSSBookmarks,UnifiedConsent,WebXR,WebXrGamepadModule --lang=en-US --extension-process --disable-oor-cors --enable-auto-reload --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=7382558747020160746 --renderer-client-id=4 --no-v8-untrusted-code-mitigations --shared-files=v8_context_snapshot_data:100,v8_natives_data:101 
            21031:USERNAME::/opt/brave.com/brave/brave --type=renderer --enable-oop-rasterization=Enabled --disable-webrtc-apm-in-audio-service --field-trial-handle=1325453042392538596,4771252825625367386,131072 --enable-features=PasswordImport,SimplifyHttpsIndicator,WebUIDarkMode --disable-features=AllowPopupsDuringPageUnload,AudioServiceOutOfProcess,AutofillServerCommunication,LookalikeUrlNavigationSuggestionsUI,NotificationTriggers,SmsReceiver,SyncUSSBookmarks,UnifiedConsent,WebXR,WebXrGamepadModule --lang=en-US --disable-oor-cors --enable-auto-reload --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=8490797275356715049 --renderer-client-id=8 --no-v8-untrusted-code-mitigations --shared-files=v8_context_snapshot_data:100,v8_natives_data:101 
        20977:USERNAME::/opt/brave.com/brave/brave --type=gpu-process --field-trial-handle=1325453042392538596,4771252825625367386,131072 --enable-features=PasswordImport,SimplifyHttpsIndicator,WebUIDarkMode --disable-features=AllowPopupsDuringPageUnload,AudioServiceOutOfProcess,AutofillServerCommunication,LookalikeUrlNavigationSuggestionsUI,NotificationTriggers,SmsReceiver,SyncUSSBookmarks,UnifiedConsent,WebXR,WebXrGamepadModule --gpu-preferences=KAAAAAAAAAAgAAAgAAAAAAAAYAABAAAAEAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAA --service-request-channel-token=7197981548738108251 
          21063:USERNAME::/opt/brave.com/brave/brave --type=broker                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             
        20982:USERNAME::/opt/brave.com/brave/brave --type=utility --field-trial-handle=1325453042392538596,4771252825625367386,131072 --enable-features=PasswordImport,SimplifyHttpsIndicator,WebUIDarkMode --disable-features=AllowPopupsDuringPageUnload,AudioServiceOutOfProcess,AutofillServerCommunication,LookalikeUrlNavigationSuggestionsUI,NotificationTriggers,SmsReceiver,SyncUSSBookmarks,UnifiedConsent,WebXR,WebXrGamepadModule --lang=en-US --service-sandbox-type=network --disable-webrtc-apm-in-audio-service --service-request-channel-token=9100530241550529405 --shared-files=v8_context_snapshot_data:100,v8_natives_data:101 
        20986:USERNAME::/opt/brave.com/brave/brave --type=utility --field-trial-handle=1325453042392538596,4771252825625367386,131072 --enable-features=PasswordImport,SimplifyHttpsIndicator,WebUIDarkMode --disable-features=AllowPopupsDuringPageUnload,AudioServiceOutOfProcess,AutofillServerCommunication,LookalikeUrlNavigationSuggestionsUI,NotificationTriggers,SmsReceiver,SyncUSSBookmarks,UnifiedConsent,WebXR,WebXrGamepadModule --lang=en-US --no-sandbox --disable-webrtc-apm-in-audio-service --service-request-channel-token=10562242017910192229 --shared-files=v8_context_snapshot_data:100,v8_natives_data:101 

USERNAME@DEVICE:~$ 
The default launcher appears to use "brave-browser-stable" as opposed to "brave-browser," but I get the same results if I launch from the Terminal using either.
waive15

Re: Brave Browser Users

Post by waive15 »

Hi there,

I am using Brave browser as a second browser after Firefox. I am testing it/giving it a chance. I think it is getting better.
Locked

Return to “Open Chat”