[GH-ISSUE #1856] Error clone: main.c:2488 main: Operation not permitted #1256

New issue

Closed

opened 2026-05-05 07:44:18 -06:00 by gitea-mirror · 1 comment

gitea-mirror commented

2026-05-05 07:44:18 -06:00

Owner

Originally created by @ndbroadbent on GitHub (Apr 3, 2018).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1856

Hello,

I'm trying to run firejail inside a Docker container, running on the Amazon ECS-Optimized AMI.

I compiled and installed firejail by following the instructions in the README.

When I run firejail --force bash as the root user, I'm getting the error: Error clone: main.c:2488 main: Operation not permitted.

(When I just ran firejail bash, I saw this warning: Warning: an existing sandbox was detected. /bin/bash will run without any additional sandboxing features.)

Output from uname -a:

Linux 4c0de5d9f8b3 4.9.81-35.56.amzn1.x86_64 #1 SMP Fri Feb 16 00:18:48 UTC 2018 x86_64 GNU/Linux

Might be related to:

Thanks very much!

Originally created by @ndbroadbent on GitHub (Apr 3, 2018). Original GitHub issue: https://github.com/netblue30/firejail/issues/1856 Hello, I'm trying to run firejail inside a Docker container, running on the [Amazon ECS-Optimized AMI](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-optimized_AMI.html). I compiled and installed firejail by following the [instructions in the README](https://github.com/netblue30/firejail#compile-and-install). When I run `firejail --force bash` as the root user, I'm getting the error: `Error clone: main.c:2488 main: Operation not permitted`. (When I just ran `firejail bash`, I saw this warning: `Warning: an existing sandbox was detected. /bin/bash will run without any additional sandboxing features`.) Output from `uname -a`: ``` Linux 4c0de5d9f8b3 4.9.81-35.56.amzn1.x86_64 #1 SMP Fri Feb 16 00:18:48 UTC 2018 x86_64 GNU/Linux ``` Might be related to: * https://l3net.wordpress.com/projects/firejail/comment-page-1/#comment-5494 * #1066 * https://stackoverflow.com/questions/22687035/clone-operation-not-permitted Thanks very much!

gitea-mirror closed this issue

2026-05-05 07:44:21 -06:00

gitea-mirror commented

2026-05-05 07:44:23 -06:00

Author

Owner

@ndbroadbent commented on GitHub (Apr 3, 2018):

I solved this by running the docker container with --privileged

@ndbroadbent commented on GitHub (Apr 3, 2018): I solved this by running the docker container with `--privileged`

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1256

No description provided.

Rows
Columns