mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #2085] Virtual environements #1408
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#1408
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @Raj2032 on GitHub (Aug 17, 2018).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2085
Is it possile to configure Firejail to have access to files in a virtual environment so any changes it does, it doesn't affect the actual files but the changed files are stored in a virtual environment?
@ghost commented on GitHub (Aug 17, 2018):
How would you handle the changes in the original environment?
@chiraag-nataraj commented on GitHub (Aug 17, 2018):
One way you can do this is use
--private-home(or--privateor whatever) and manually copy over files if you want to keep changes. If you don't want the files to be changed,--privateand associated options should be enough.@Raj2032 commented on GitHub (Aug 19, 2018):
Hi @chiraag-nataraj, if I do this
--private-home, would the changed files be retained in the virtual environment or would they be deleted after program termination?@chiraag-nataraj commented on GitHub (Aug 19, 2018):
From the man-page:
The modified files are deleted upon termination.
@Raj2032 commented on GitHub (Aug 19, 2018):
Is it possile to some how keep the files in the virtual environment
retained without firejail having to delete these files automatically?
On Sun, Aug 19, 2018 at 10:10 PM ಚಿರಾಗ್ ನಟರಾಜ್ notifications@github.com
wrote:
@chiraag-nataraj commented on GitHub (Aug 19, 2018):
Not presently, no. But what exactly are you trying to do? Maybe we can help with the actual usecase.
@Vincent43 commented on GitHub (Aug 19, 2018):
I think you are looking for
--overlay-namedoption. It will store your changes persistently in$HOME/.firejail/<NAME>, seeman firejailfor details:firejail --overlay-named=<NAME> firefox@chiraag-nataraj commented on GitHub (Aug 19, 2018):
@Vincent43 Oops. Completely forgot about
overlayoptions 😂@Raj2032 commented on GitHub (Aug 20, 2018):
Oh I see thanks guys, I will give this a shot =D
On Mon, Aug 20, 2018 at 1:54 AM ಚಿರಾಗ್ ನಟರಾಜ್ notifications@github.com
wrote:
@Raj2032 commented on GitHub (Aug 20, 2018):
One last question guys, is it possible to install applications on a virtual
environment as well?
On Mon, Aug 20, 2018 at 11:20 AM Joe Smith justman111111@gmail.com wrote:
@Vincent43 commented on GitHub (Aug 20, 2018):
No, but there is AppImage integration. You may also look at flatpak/snap.
@chiraag-nataraj commented on GitHub (Aug 20, 2018):
I guess I'm somewhat confused as to what level of integration you want with the rest of the system.
If you want an isolated environment, what you're really looking for is a "container" solution (e.g. Docker, LXC, etc) or a "virtual machine" (e.g. QEMU, VirtualBox, etc). If you want to restrict what programs can do within your already existing system, that's where "sandboxes" come in (e.g. firejail, AppArmor, SELinux).
Your initial question made sense within the context of sandboxing, since it's basically ensuring that you always have a known "good" base (that is, if something happens, you can wipe the overlay and start over). But your second question seems to imply that you almost want this virtual environment to function like a full system, in which case you're probably better off with a container solution.
@Raj2032 commented on GitHub (Aug 21, 2018):
Oh I see,
So what is the best Linux container and which one you recommend me?
And also is it possible to encrypt a Linux container using something like
Veracrypt?
On Mon, Aug 20, 2018 at 11:26 PM ಚಿರಾಗ್ ನಟರಾಜ್ notifications@github.com
wrote:
@chiraag-nataraj commented on GitHub (Aug 21, 2018):
@Raj2032 Sorry, this is the wrong forum for that. I haven't really done much with containers and you're better off doing your own research. As with all other software, "best" really depends on what you want to accomplish.
As for encryption, I don't know, but I don't see why it would be out of the question. Worst case, just use encfs to create an encrypted mount and setup the container within that (the docs for encfs are pretty good).
I'm going to go ahead and close this issue now, since we're way off the original topic.
@Raj2032 commented on GitHub (Aug 21, 2018):
Thanks for your help.
On Tue, Aug 21, 2018 at 6:04 PM ಚಿರಾಗ್ ನಟರಾಜ್ notifications@github.com
wrote:
@Raj2032 commented on GitHub (Aug 21, 2018):
Sorry again to distrube you I just really want to get a really good setup,
something that will work for me. On EncFS, it is not clear, is it a linux
container or not?
On Tue, Aug 21, 2018 at 6:31 PM Joe Smith justman111111@gmail.com wrote:
@Raj2032 commented on GitHub (Aug 21, 2018):
Oh sorry yeah it is a Linux container thanks then.
On Tue, Aug 21, 2018 at 6:32 PM Joe Smith justman111111@gmail.com wrote: