[GH-ISSUE #2399] Flameshot - error while loading shared libraries #1597

Closed
opened 2026-05-05 08:15:14 -06:00 by gitea-mirror · 10 comments
Owner

Originally created by @aberja on GitHub (Feb 11, 2019).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2399

Originally created by @aberja on GitHub (Feb 11, 2019). Original GitHub issue: https://github.com/netblue30/firejail/issues/2399
gitea-mirror 2026-05-05 08:15:14 -06:00
  • closed this issue
  • added the
    bug
    label
Author
Owner

@aberja commented on GitHub (Feb 11, 2019):

When I try to run flameshot with firejail I receive the following error:
flameshot: error while loading shared libraries: libGL.so.1: cannot open shared object file: No such file or directory

I tried adding ld.so.cache to the flameshot.profile, but that does not resolve the issue.

Commenting out the following line does resolve the issue:
#private-etc fonts,ld.so.conf,resolv.conf,ca-certificates,ssl,pki,crypto-policies

g752vs@g752vs:~$ firejail flameshot
Reading profile /usr/local/etc/firejail/flameshot.profile
Reading profile /usr/local/etc/firejail/disable-common.inc
Reading profile /usr/local/etc/firejail/disable-devel.inc
Reading profile /usr/local/etc/firejail/disable-interpreters.inc
Reading profile /usr/local/etc/firejail/disable-passwdmgr.inc
Reading profile /usr/local/etc/firejail/disable-programs.inc
Reading profile /usr/local/etc/firejail/disable-xdg.inc
Parent pid 22354, child pid 22355
Warning: skipping crypto-policies for private /etc
Private /etc installed in 13.34 ms
1 program installed in 2.00 ms
Child process initialized in 81.53 ms
flameshot: error while loading shared libraries: libGL.so.1: cannot open shared object file: No such file or directory
<!-- gh-comment-id:462206053 --> @aberja commented on GitHub (Feb 11, 2019): When I try to run flameshot with firejail I receive the following error: `flameshot: error while loading shared libraries: libGL.so.1: cannot open shared object file: No such file or directory` I tried adding `ld.so.cache` to the flameshot.profile, but that does not resolve the issue. Commenting out the following line does resolve the issue: `#private-etc fonts,ld.so.conf,resolv.conf,ca-certificates,ssl,pki,crypto-policies` ``` g752vs@g752vs:~$ firejail flameshot Reading profile /usr/local/etc/firejail/flameshot.profile Reading profile /usr/local/etc/firejail/disable-common.inc Reading profile /usr/local/etc/firejail/disable-devel.inc Reading profile /usr/local/etc/firejail/disable-interpreters.inc Reading profile /usr/local/etc/firejail/disable-passwdmgr.inc Reading profile /usr/local/etc/firejail/disable-programs.inc Reading profile /usr/local/etc/firejail/disable-xdg.inc Parent pid 22354, child pid 22355 Warning: skipping crypto-policies for private /etc Private /etc installed in 13.34 ms 1 program installed in 2.00 ms Child process initialized in 81.53 ms flameshot: error while loading shared libraries: libGL.so.1: cannot open shared object file: No such file or directory ```
Author
Owner

@SkewedZeppelin commented on GitHub (Feb 11, 2019):

@aberja is the following from #2383 still the same?

Mint LMDE 3
Firejail version: 0.9.59
NVIDIA Driver version: 384.130

<!-- gh-comment-id:462211069 --> @SkewedZeppelin commented on GitHub (Feb 11, 2019): @aberja is the following from #2383 still the same? > Mint LMDE 3 > Firejail version: 0.9.59 > NVIDIA Driver version: 384.130
Author
Owner

@Fred-Barclay commented on GitHub (Feb 11, 2019):

@aberja Also does this actively interfere with using Flameshot? I get a similar message on my system (also LMDE 3) but flameshot itself works well as far as I can tell.

libGL error: failed to open drm device: No such file or directory
libGL error: failed to load driver: r600

If it doesn't actually interfere it's likely this is just cosmetic.

Cheers!
Fred

<!-- gh-comment-id:462213174 --> @Fred-Barclay commented on GitHub (Feb 11, 2019): @aberja Also does this actively interfere with using Flameshot? I get a similar message on my system (also LMDE 3) but flameshot itself works well as far as I can tell. ``` libGL error: failed to open drm device: No such file or directory libGL error: failed to load driver: r600 ``` If it doesn't actually interfere it's likely this is just cosmetic. Cheers! Fred
Author
Owner

@aberja commented on GitHub (Feb 11, 2019):

@aberja is the following from #2383 still the same?

Mint LMDE 3
Firejail version: 0.9.59
NVIDIA Driver version: 384.130

Yes

<!-- gh-comment-id:462383779 --> @aberja commented on GitHub (Feb 11, 2019): > @aberja is the following from #2383 still the same? > > > Mint LMDE 3 > > Firejail version: 0.9.59 > > NVIDIA Driver version: 384.130 Yes
Author
Owner

@aberja commented on GitHub (Feb 11, 2019):

Also does this actively interfere with using Flameshot?

Yes, Unfortunately Flameshot will not start unless I comment out the line.

<!-- gh-comment-id:462384274 --> @aberja commented on GitHub (Feb 11, 2019): > Also does this actively interfere with using Flameshot? Yes, Unfortunately Flameshot will not start unless I comment out the line.
Author
Owner

@chiraag-nataraj commented on GitHub (Feb 17, 2019):

Add alternatives to the private-etc line. This is most likely because you're using a system where there are multiple competing versions of libGL.so, so it ends up being a symlink to /etc/alternatives/libGL.so or something like that (the biggest culprit here is Nvidia, which has their own version of libGL.so).

<!-- gh-comment-id:464462779 --> @chiraag-nataraj commented on GitHub (Feb 17, 2019): Add `alternatives` to the `private-etc` line. This is most likely because you're using a system where there are multiple competing versions of `libGL.so`, so it ends up being a symlink to `/etc/alternatives/libGL.so` or something like that (the biggest culprit here is Nvidia, which has their own version of `libGL.so`).
Author
Owner

@aberja commented on GitHub (Feb 17, 2019):

Add alternatives to the private-etc line.

Appending ,alternatives to the private-etc line resolves the issue

<!-- gh-comment-id:464483576 --> @aberja commented on GitHub (Feb 17, 2019): > Add `alternatives` to the `private-etc` line. Appending `,alternatives` to the `private-etc` line resolves the issue
Author
Owner

@chiraag-nataraj commented on GitHub (Feb 17, 2019):

@Fred-Barclay, should we add it to the official profile? Come to think of it, should we add alternatives to all private-etc lines? It shouldn't make anything less secure since they're all symlinks anyway (so as long as the target isn't whitelisted, it'll just be a dangling symlink).

<!-- gh-comment-id:464485162 --> @chiraag-nataraj commented on GitHub (Feb 17, 2019): @Fred-Barclay, should we add it to the official profile? Come to think of it, should we add `alternatives` to all `private-etc` lines? It _shouldn't_ make anything less secure since they're all symlinks anyway (so as long as the target isn't whitelisted, it'll just be a dangling symlink).
Author
Owner

@Fred-Barclay commented on GitHub (Feb 17, 2019):

@chiraag-nataraj Probably add to all. I'll get on it if you haven't already started 😄

<!-- gh-comment-id:464485535 --> @Fred-Barclay commented on GitHub (Feb 17, 2019): @chiraag-nataraj Probably add to all. I'll get on it if you haven't already started :smile:
Author
Owner

@chiraag-nataraj commented on GitHub (Feb 18, 2019):

I'm going to go ahead and close this since the issue seems to be resolved :)

<!-- gh-comment-id:464539481 --> @chiraag-nataraj commented on GitHub (Feb 18, 2019): I'm going to go ahead and close this since the issue seems to be resolved :)
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1597
No description provided.