github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #2036] Can't combine --overlay-named with --private= #1372

New issue

Open

opened 2026-05-05 07:57:57 -06:00 by gitea-mirror · 4 comments

gitea-mirror commented

2026-05-05 07:57:57 -06:00

Owner

Originally created by @laenion on GitHub (Jul 11, 2018).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2036

My intention is to install an application into an overlay (to keep it separate from the regular system). Both the system and home directories should be persistent, however the application should not see my personal data and start with an empty home.

The idea was to do this with the following command line:
firejail --private-home="/path/to/application/home" --overlay-named="Application name"

While the overlay is created as expected the original contents of my user's home are still visible.

Probably related to #1743.

Firejail version: 0.9.52 & today's master
Distribution: openSUSE Leap 15

Originally created by @laenion on GitHub (Jul 11, 2018). Original GitHub issue: https://github.com/netblue30/firejail/issues/2036 My intention is to install an application into an overlay (to keep it separate from the regular system). Both the system and home directories should be persistent, however the application should not see my personal data and start with an empty home. The idea was to do this with the following command line: `firejail --private-home="/path/to/application/home" --overlay-named="Application name"` While the overlay is created as expected the original contents of my user's home are still visible. Probably related to #1743. --- Firejail version: 0.9.52 & today's master Distribution: openSUSE Leap 15

gitea-mirror added the

enhancement

label 2026-05-05 07:57:57 -06:00

gitea-mirror commented

2026-05-05 07:58:02 -06:00

Author

Owner

@chiraag-nataraj commented on GitHub (Jul 11, 2018):

I get this warning when I use them together:

Warning: private-home= feature is disabled in overlay

(using master)
So it seems that this is a known issue. I'll add an enhancement tag to it.

@chiraag-nataraj commented on GitHub (Jul 11, 2018): I get this warning when I use them together: ``` Warning: private-home= feature is disabled in overlay ``` (using master) So it seems that this is a known issue. I'll add an enhancement tag to it.

gitea-mirror commented

2026-05-05 07:58:05 -06:00

Author

Owner

@chiraag-nataraj commented on GitHub (Jul 11, 2018):

On a side note, --overlay and --private seem to work well enough. So you might be able to do firejail --private="/path/to/application/home" --overlay-named="Application name" and it might work?

@chiraag-nataraj commented on GitHub (Jul 11, 2018): On a side note, `--overlay` and `--private` seem to work well enough. So you might be able to do `firejail --private="/path/to/application/home" --overlay-named="Application name"` and it might work?

gitea-mirror commented

2026-05-05 07:58:06 -06:00

Author

Owner

@laenion commented on GitHub (Jul 11, 2018):

Oh, sorry, I was originally using --private= (otherwise the home directory contents wouldn't be persistent) and was testing some more combinations. But as the warning already says combining the options with --overlay is not working in either case - only pure --private does.

@laenion commented on GitHub (Jul 11, 2018): Oh, sorry, I was originally using `--private=` (otherwise the home directory contents wouldn't be persistent) and was testing some more combinations. But as the warning already says combining the options with `--overlay` is not working in either case - only pure `--private` does.

gitea-mirror commented

2026-05-05 07:58:09 -06:00

Author

Owner

@chiraag-nataraj commented on GitHub (Jul 11, 2018):

Huh, this is weird. firejail --overlay --private="." works for me, but e.g. firejail --overlay --private="~/tmp" doesn't.

@chiraag-nataraj commented on GitHub (Jul 11, 2018): Huh, this is weird. `firejail --overlay --private="."` works for me, but e.g. `firejail --overlay --private="~/tmp"` doesn't.

gitea-mirror referenced this issue

2026-05-05 10:10:34 -06:00

[PR #1372] [MERGED] Fix permission denied for chromium-flags.conf in Arch #3931

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1372

No description provided.

Rows
Columns