Can't Sandbox Icecat with Firejail: [Solved]

Everything about X, Gnome, KDE, ... and everything running on it

Can't Sandbox Icecat with Firejail: [Solved]

Postby bentHnau » 2018-10-08 03:35

I have the lastest stable Icecat x64 binary (version 52.6.0). When I try to run it in Firejail (firejail icecat), I get an error

Code: Select all
Reading profile /etc/firejail/icecat.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/whitelist-common.inc
Parent pid 29622, child pid 29623
Blacklist violations are logged to syslog
Child process initialized
Could not find the GNU runtime.

Parent is shutting down, bye...


How to fix this?
Last edited by bentHnau on 2018-10-10 16:13, edited 1 time in total.
Debian Stretch x64 on a Dell XPS 17 laptop
bentHnau
 
Posts: 120
Joined: 2014-01-07 01:43
Location: California

Re: Can't Sandbox Icecat with Firejail

Postby stevepusser » 2018-10-08 17:04

No doubt how you installed it is at the root of your issue, since that version is not in the Stretch repositories, or even upstream Debian, nor any other distro, unless you really meant 0.9.56. https://repology.org/metapackage/firejail/versions
The MX Linux repositories: Backports galore! If we don't have something, just ask and we'll try--we like challenges. New packages: Kdenlive 18.08.1, Pale Moon 28.1.0, wine-staging 3.17, qBittorrent 4.1.3, Liquorix kernel 4.18-13, Audacity 2.3.0
User avatar
stevepusser
 
Posts: 10013
Joined: 2009-10-06 05:53

Re: Can't Sandbox Icecat with Firejail

Postby bentHnau » 2018-10-08 18:04

stevepusser wrote:No doubt how you installed it is at the root of your issue

The number is the Icecat version, not the firejail version.
Debian Stretch x64 on a Dell XPS 17 laptop
bentHnau
 
Posts: 120
Joined: 2014-01-07 01:43
Location: California

Re: Can't Sandbox Icecat with Firejail

Postby bw123 » 2018-10-08 18:19

Have you looked at the permissions or used ldd command on the icecat binary? I'm going to assume you tried running it without firejail and it works? Is it a secret where it came from? Who said it was a stable version? Since you don't mention following any directions for installing it, or running it, I'm guessing there aren't any?

https://packages.debian.org/search?keywords=icecat
User avatar
bw123
 
Posts: 3414
Joined: 2011-05-09 06:02
Location: TN_USA

Re: Can't Sandbox Icecat with Firejail

Postby bentHnau » 2018-10-08 18:32

bw123 wrote:Have you looked at the permissions or used ldd command on the icecat binary? I'm going to assume you tried running it without firejail and it works? Is it a secret where it came from? Who said it was a stable version? Since you don't mention following any directions for installing it, or running it, I'm guessing there aren't any?

https://packages.debian.org/search?keywords=icecat

I got it from the mirror http://ftpmirror.gnu.org/gnuzilla/. Yes, it runs without firejail. I don't know what I'm supposed to do with the permissions or ldd information. I called it "stable" to distinguish it from the alpha version. It's 8 months old and in other apt-based distros' stable repos, so I assume it's fairly stable. It's not installed; I'm just trying to run the executable.
Debian Stretch x64 on a Dell XPS 17 laptop
bentHnau
 
Posts: 120
Joined: 2014-01-07 01:43
Location: California

Re: Can't Sandbox Icecat with Firejail

Postby stevepusser » 2018-10-08 19:07

Whoops, my bad about versions!

I just did some backports of Firejail 0.9.56 if you want to see if that newer version fixes the issue. https://build.opensuse.org/package/show ... r/firejail

Though it looks like the build ssytem is draggin on getting the 64-bit versions published to the repo for some reason.

Edit: 64-bit versions are up.
The MX Linux repositories: Backports galore! If we don't have something, just ask and we'll try--we like challenges. New packages: Kdenlive 18.08.1, Pale Moon 28.1.0, wine-staging 3.17, qBittorrent 4.1.3, Liquorix kernel 4.18-13, Audacity 2.3.0
User avatar
stevepusser
 
Posts: 10013
Joined: 2009-10-06 05:53

Re: Can't Sandbox Icecat with Firejail

Postby bentHnau » 2018-10-10 16:00

I figured out that the "can't find GNU runtime" error is not caused by firejail, it was caused by trying to start firejail with a symlink to icecat.

So the actual problem is the error that results from running firejail directly with the binary (using
Code: Select all
firejail ./icecat
):

Code: Select all
/bin/bash: ./icecat: No such file or directory


The icecat binary is definitely in the current folder. I can run it with ./icecat
Debian Stretch x64 on a Dell XPS 17 laptop
bentHnau
 
Posts: 120
Joined: 2014-01-07 01:43
Location: California

Re: Can't Sandbox Icecat with Firejail

Postby bentHnau » 2018-10-10 16:12

I solved this by moving the entire icecat folder into my home directory and running firejail with the option --private-home=x, where x is the path to the icecat folder. --private-home only works with subdirectories of the home folder.
Debian Stretch x64 on a Dell XPS 17 laptop
bentHnau
 
Posts: 120
Joined: 2014-01-07 01:43
Location: California


Return to Desktop & Multimedia

Who is online

Users browsing this forum: No registered users and 6 guests

fashionable