[GH-ISSUE #1506] Cannot run qutebrowser with Firejail due to "No module named PyQt5.QtSql" #1006

Closed
opened 2026-05-05 07:17:56 -06:00 by gitea-mirror · 12 comments
Owner

Originally created by @Hund on GitHub (Aug 30, 2017).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1506

This popups when I run firejail qutebrowser:

2017-08-30-154149_5760x1080_scrot

Anything I can do about it?

Originally created by @Hund on GitHub (Aug 30, 2017). Original GitHub issue: https://github.com/netblue30/firejail/issues/1506 This popups when I run `firejail qutebrowser`: ![2017-08-30-154149_5760x1080_scrot](https://user-images.githubusercontent.com/320498/29876143-3bbc6774-8d9c-11e7-98c8-4471f324896c.png) Anything I can do about it?
gitea-mirror 2026-05-05 07:17:56 -06:00
Author
Owner

@Fred-Barclay commented on GitHub (Aug 30, 2017):

G'day @Hund.
What distro and version of firejail are you using?

<!-- gh-comment-id:326027336 --> @Fred-Barclay commented on GitHub (Aug 30, 2017): G'day @Hund. What distro and version of firejail are you using?
Author
Owner

@Hund commented on GitHub (Aug 31, 2017):

Duh.. I was tired yesterday I guess. :) I'm running version 0.9.46 of Firejail and I'm on Gentoo Linux.

<!-- gh-comment-id:326219619 --> @Hund commented on GitHub (Aug 31, 2017): Duh.. I was tired yesterday I guess. :) I'm running version 0.9.46 of Firejail and I'm on Gentoo Linux.
Author
Owner

@ghost commented on GitHub (Aug 31, 2017):

Maybe try updating to 0.9.48? https://packages.gentoo.org/packages/sys-apps/firejail

<!-- gh-comment-id:326424132 --> @ghost commented on GitHub (Aug 31, 2017): Maybe try updating to 0.9.48? https://packages.gentoo.org/packages/sys-apps/firejail
Author
Owner

@Hund commented on GitHub (Aug 31, 2017):

I updated to 0.9.48 and same issue.

<!-- gh-comment-id:326440878 --> @Hund commented on GitHub (Aug 31, 2017): I updated to 0.9.48 and same issue.
Author
Owner

@SkewedZeppelin commented on GitHub (Sep 1, 2017):

Do you happen to have that library installed via pip locally? Or is it installed globally/through portage?

<!-- gh-comment-id:326461883 --> @SkewedZeppelin commented on GitHub (Sep 1, 2017): Do you happen to have that library installed via pip locally? Or is it installed globally/through portage?
Author
Owner

@Hund commented on GitHub (Sep 1, 2017):

qutebrowser is installed via portage. I try to stay away from pip as much as I can to avoid any issues. :)

<!-- gh-comment-id:326506640 --> @Hund commented on GitHub (Sep 1, 2017): qutebrowser is installed via portage. I try to stay away from pip as much as I can to avoid any issues. :)
Author
Owner

@ghost commented on GitHub (Sep 1, 2017):

You can try firejail --noprofile qutebrowser. If this works then edit /etc/firejail/qutebrowser.profile and try commenting out line by line until it works (or comment out everything then uncomment line by line until it breaks). Also take a look if you have any modifications under /etc/firejail/globals.local, /etc/firejail/qutebrowser.local, /etc/firejail/whitelist-common.local or ~/.config/firejail/

<!-- gh-comment-id:326582786 --> @ghost commented on GitHub (Sep 1, 2017): You can try `firejail --noprofile qutebrowser`. If this works then edit `/etc/firejail/qutebrowser.profile` and try commenting out line by line until it works (or comment out everything then uncomment line by line until it breaks). Also take a look if you have any modifications under `/etc/firejail/globals.local`, `/etc/firejail/qutebrowser.local`, `/etc/firejail/whitelist-common.local` or `~/.config/firejail/`
Author
Owner

@Hund commented on GitHub (Sep 1, 2017):

This works.

$ cat /etc/firejail/qutebrowser.profile
# Persistent global definitions go here
include /etc/firejail/globals.local

# This file is overwritten during software install.
# Persistent customizations should go in a .local file.
include /etc/firejail/qutebrowser.local

# Firejail profile for Qutebrowser (Qt5-Webkit+Python) browser
noblacklist ~/.config/qutebrowser
noblacklist ~/.cache/qutebrowser
include /etc/firejail/disable-common.inc
include /etc/firejail/disable-programs.inc
include /etc/firejail/disable-devel.inc

caps.drop all
netfilter
nonewprivs
noroot
protocol unix,inet,inet6,netlink
seccomp
tracelog

#whitelist ${DOWNLOADS}
mkdir ~/.config/qutebrowser
#whitelist ~/.config/qutebrowser
mkdir ~/.cache/qutebrowser
#whitelist ~/.cache/qutebrowser
mkdir ~/.local/share/qutebrowser
#whitelist ~/.local/share/qutebrowser
#include /etc/firejail/whitelist-common.inc
<!-- gh-comment-id:326635446 --> @Hund commented on GitHub (Sep 1, 2017): This works. ``` $ cat /etc/firejail/qutebrowser.profile # Persistent global definitions go here include /etc/firejail/globals.local # This file is overwritten during software install. # Persistent customizations should go in a .local file. include /etc/firejail/qutebrowser.local # Firejail profile for Qutebrowser (Qt5-Webkit+Python) browser noblacklist ~/.config/qutebrowser noblacklist ~/.cache/qutebrowser include /etc/firejail/disable-common.inc include /etc/firejail/disable-programs.inc include /etc/firejail/disable-devel.inc caps.drop all netfilter nonewprivs noroot protocol unix,inet,inet6,netlink seccomp tracelog #whitelist ${DOWNLOADS} mkdir ~/.config/qutebrowser #whitelist ~/.config/qutebrowser mkdir ~/.cache/qutebrowser #whitelist ~/.cache/qutebrowser mkdir ~/.local/share/qutebrowser #whitelist ~/.local/share/qutebrowser #include /etc/firejail/whitelist-common.inc ```
Author
Owner

@SkewedZeppelin commented on GitHub (Sep 1, 2017):

So whitelist was breaking it? Are you sure you don't have that library installed locally via pip?

<!-- gh-comment-id:326636201 --> @SkewedZeppelin commented on GitHub (Sep 1, 2017): So whitelist was breaking it? Are you sure you don't have that library installed locally via pip?
Author
Owner

@Hund commented on GitHub (Sep 1, 2017):

What's the name of the package? I have no package with the word qtor sql in it according to pip, which also list packages installed from emerge?

<!-- gh-comment-id:326637058 --> @Hund commented on GitHub (Sep 1, 2017): What's the name of the package? I have no package with the word `qt`or `sql` in it according to pip, which also list packages installed from emerge?
Author
Owner

@netblue30 commented on GitHub (Sep 2, 2017):

PyQt seems to have a sql use flag. Do you have it enabled?

https://packages.gentoo.org/packages/dev-python/PyQt5

<!-- gh-comment-id:326751966 --> @netblue30 commented on GitHub (Sep 2, 2017): PyQt seems to have a sql use flag. Do you have it enabled? https://packages.gentoo.org/packages/dev-python/PyQt5
Author
Owner

@Hund commented on GitHub (Sep 2, 2017):

That was the issue. Weird that it worked if I didn't use Firejail?

<!-- gh-comment-id:326759411 --> @Hund commented on GitHub (Sep 2, 2017): That was the issue. Weird that it worked if I didn't use Firejail?
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1006
No description provided.