[GH-ISSUE #191] Using two different and separate sandboxes #133

Closed
opened 2026-05-05 05:08:30 -06:00 by gitea-mirror · 8 comments
Owner

Originally created by @ghost on GitHub (Dec 13, 2015).
Original GitHub issue: https://github.com/netblue30/firejail/issues/191

Hello,

I need to separate two instances of the same browser. The first instance is a regular "firejail iceweasel" that I allow to keep all changes and settings to it's profile folder, while the other firejailed Iceweasel must not reatin any changes (cookies, settings, etc) but must use the same profile as the first Iceweasel (this same profile, used by the 2nd Iceweasel, is copied to another folder).

I'm not able to do so, and I couldn't find info on how to get this working.
I already copied my current /home/amarildo/.mozilla folder into "/home/amarildo/Others/Iceweasel" and tried opening Iceweasel with the following command (while the first sandbox is already running):

firejail --private=/home/amarildo/Documents/Others/Iceweasel/ --debug iceweasel

However, it's like I've opened Iceweasel on the same sandbox as the first one is running on, and thus the changes on this 2nd sandbox "pass over" the first one to the first Iceweasel.

I also tried like this:

firejail --private-home=/home/amarildo/Documents/Others/Iceweasel/ --debug iceweasel

And this:

firejail --private-home=/home/amarildo/Documents/Others/Iceweasel/.mozilla --debug iceweasel

With no success.

How should I proceed?

Thanks!

Originally created by @ghost on GitHub (Dec 13, 2015). Original GitHub issue: https://github.com/netblue30/firejail/issues/191 Hello, I need to separate two instances of the same browser. The first instance is a regular "firejail iceweasel" that I allow to keep all changes and settings to it's profile folder, while the other firejailed Iceweasel must not reatin any changes (cookies, settings, etc) but must use the same profile as the first Iceweasel (this same profile, used by the 2nd Iceweasel, is copied to another folder). I'm not able to do so, and I couldn't find info on how to get this working. I already copied my current /home/amarildo/.mozilla folder into "/home/amarildo/Others/Iceweasel" and tried opening Iceweasel with the following command (while the first sandbox is already running): > firejail --private=/home/amarildo/Documents/Others/Iceweasel/ --debug iceweasel However, it's like I've opened Iceweasel on the same sandbox as the first one is running on, and thus the changes on this 2nd sandbox "pass over" the first one to the first Iceweasel. I also tried like this: > firejail --private-home=/home/amarildo/Documents/Others/Iceweasel/ --debug iceweasel And this: > firejail --private-home=/home/amarildo/Documents/Others/Iceweasel/.mozilla --debug iceweasel With no success. How should I proceed? Thanks!
gitea-mirror 2026-05-05 05:08:30 -06:00
Author
Owner

@netblue30 commented on GitHub (Dec 14, 2015):

The second sandbox should run "iceweasel -no-remote":

$ man iceweasel
[...]
       -no-remote
              Don't  connect  to a running Iceweasel instance. This option can
              be necessary in conjunction to several  of  the  options  above,
              that won't have any effect when an Iceweasel instance is running
              unless -no-remote is used at the same time.
[...]

Without -no-remote, Firefox will keep a single instance of the browser running.

<!-- gh-comment-id:164565241 --> @netblue30 commented on GitHub (Dec 14, 2015): The second sandbox should run "iceweasel -no-remote": ``` $ man iceweasel [...] -no-remote Don't connect to a running Iceweasel instance. This option can be necessary in conjunction to several of the options above, that won't have any effect when an Iceweasel instance is running unless -no-remote is used at the same time. [...] ``` Without -no-remote, Firefox will keep a single instance of the browser running.
Author
Owner

@ghost commented on GitHub (Dec 25, 2015):

There is no "-no-remote" on my manual, BTW.

<!-- gh-comment-id:167253198 --> @ghost commented on GitHub (Dec 25, 2015): There is no "-no-remote" on my manual, BTW.
Author
Owner

@netblue30 commented on GitHub (Dec 27, 2015):

I think Mozilla changed the name several times. I have it in 38.5.0.

<!-- gh-comment-id:167418199 --> @netblue30 commented on GitHub (Dec 27, 2015): I think Mozilla changed the name several times. I have it in 38.5.0.
Author
Owner

@ghost commented on GitHub (Dec 27, 2015):

My Iceweasel don't even have a manual, hehhehe.

[amarildo@amarildo ~]$ man iceweasel
No manual entry for iceweasel

Have a nice Sunday, netblue.

<!-- gh-comment-id:167418454 --> @ghost commented on GitHub (Dec 27, 2015): My Iceweasel don't even have a manual, hehhehe. > [amarildo@amarildo ~]$ man iceweasel > No manual entry for iceweasel Have a nice Sunday, netblue.
Author
Owner

@ypid commented on GitHub (Jan 24, 2016):

@amarildojr seems you are running Debian. From where did you install iceweasel? The iceweasel from Jessie includes the man page (dpkg -L iceweasel | grep man) …

Edit: Looking at your profile I guess you are using Iceweasel on Arch. Maybe file a bug against the Arch package 😉

@netblue30 shouldn’t all that name spacing going on make it very difficult for two instances running in different sandboxes to reach each other (via IPC or whatever) so that -no-remote should not be needed in the first place? I tried it with:

firejail --private="$HOME/.firejail/homes/iceweasel-55" --private-dev --shell=none --ipc-namespace --nosound --blacklist=/tmp/.X11-unix --debug -- iceweasel
## Second instance
firejail --private --private-dev --shell=none --ipc-namespace --nosound --blacklist=/tmp/.X11-unix --debug -- iceweasel
<!-- gh-comment-id:174281213 --> @ypid commented on GitHub (Jan 24, 2016): @amarildojr seems you are running Debian. From where did you install iceweasel? The [iceweasel from Jessie](https://packages.debian.org/jessie/iceweasel) includes the man page (`dpkg -L iceweasel | grep man`) … Edit: Looking at your profile I guess you are using [Iceweasel on Arch](https://aur.archlinux.org/packages/iceweasel/). Maybe file a bug against the Arch package :wink: @netblue30 shouldn’t all that name spacing going on make it very difficult for two instances running in different sandboxes to reach each other (via IPC or whatever) so that `-no-remote` should not be needed in the first place? I tried it with: ``` Shell firejail --private="$HOME/.firejail/homes/iceweasel-55" --private-dev --shell=none --ipc-namespace --nosound --blacklist=/tmp/.X11-unix --debug -- iceweasel ## Second instance firejail --private --private-dev --shell=none --ipc-namespace --nosound --blacklist=/tmp/.X11-unix --debug -- iceweasel ```
Author
Owner

@ghost commented on GitHub (Jan 26, 2016):

@ypid Yes. I used the Iceweasel from Parabola on Arch.

<!-- gh-comment-id:175266276 --> @ghost commented on GitHub (Jan 26, 2016): @ypid Yes. I used the Iceweasel from Parabola on Arch.
Author
Owner

@vn971 commented on GitHub (Feb 19, 2016):

In case of not having firefox man page, use firefox --help.

<!-- gh-comment-id:186311017 --> @vn971 commented on GitHub (Feb 19, 2016): In case of not having firefox `man` page, use `firefox --help`.
Author
Owner

@ghost commented on GitHub (Feb 21, 2016):

In case of not having firefox man page, use firefox --help.

Thanks. But I'm on Debian Jessie now, I'll probably stick with it. It does have a manpage of Iceweasel :D
Cheers

<!-- gh-comment-id:186934832 --> @ghost commented on GitHub (Feb 21, 2016): > In case of not having firefox man page, use firefox --help. Thanks. But I'm on Debian Jessie now, I'll probably stick with it. It does have a manpage of Iceweasel :D Cheers
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#133
No description provided.