github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #2477] Can you install applications within a firejail, kinda like chroot? #1626

New issue

Closed

opened 2026-05-05 08:16:44 -06:00 by gitea-mirror · 5 comments

gitea-mirror commented

2026-05-05 08:16:44 -06:00

Owner

Originally created by @Raj2032 on GitHub (Feb 25, 2019).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2477

Can you install applications within a firejail, kinda like chroot? If so how do I do this?

Originally created by @Raj2032 on GitHub (Feb 25, 2019). Original GitHub issue: https://github.com/netblue30/firejail/issues/2477 Can you install applications within a firejail, kinda like chroot? If so how do I do this?

gitea-mirror closed this issue

2026-05-05 08:16:44 -06:00

gitea-mirror commented

2026-05-05 08:16:46 -06:00

Author

Owner

@smitsohu commented on GitHub (Feb 26, 2019):

Duplicate of #2360 ? Also note that there is indeed a --chroot option.

@smitsohu commented on GitHub (Feb 26, 2019): Duplicate of #2360 ? Also note that there is indeed a `--chroot` option.

gitea-mirror commented

2026-05-05 08:16:47 -06:00

Author

Owner

@Raj2032 commented on GitHub (Feb 26, 2019):

I see.

@Raj2032 commented on GitHub (Feb 26, 2019): I see.

gitea-mirror commented

2026-05-05 08:16:48 -06:00

Author

Owner

@Raj2032 commented on GitHub (Feb 26, 2019):

@smitsohu I need a bit of help trying to understand some of the commands.

sudo debootstrap --arch=amd64 sid /chroot/sid I understand debootstrap is trying to create a debian file system inside the folder but what does this mean --arch=amd64 sid /chroot/sid?

sudo firejail --noprofile --chroot=/chroot/sid

So I understand that you are trying to start a firejail chroot service and I understand that you are using a --noprofile as a profile as the default profile is too restrictive, but what does this mean --chroot=/chroot/sid?

@Raj2032 commented on GitHub (Feb 26, 2019): @smitsohu I need a bit of help trying to understand some of the commands. `sudo debootstrap --arch=amd64 sid /chroot/sid` I understand `debootstrap` is trying to create a debian file system inside the folder but what does this mean `--arch=amd64 sid /chroot/sid`? `sudo firejail --noprofile --chroot=/chroot/sid` So I understand that you are trying to start a firejail chroot service and I understand that you are using a `--noprofile` as a profile as the default profile is too restrictive, but what does this mean `--chroot=/chroot/sid`?

gitea-mirror commented

2026-05-05 08:16:49 -06:00

Author

Owner

@smitsohu commented on GitHub (Feb 27, 2019):

@Raj2032 for easy and quick results I would just try the overlay approach, as described in #2360. You can also have something persistent with the --overlay-named option.

sudo debootstrap --arch=amd64 sid /chroot/sid
What you are trying there is installing a new Debian inside /chroot/sid. sid is the name of the Debian release, amd64 is the instruction set of your cpu. I think what is still missing is a server from which the Debian image is downloaded.

what does this mean --chroot=/chroot/sid

It means that Firejail chroots into this folder before running the application.

@smitsohu commented on GitHub (Feb 27, 2019): @Raj2032 for easy and quick results I would just try the overlay approach, as described in #2360. You can also have something persistent with the `--overlay-named` option. `sudo debootstrap --arch=amd64 sid /chroot/sid` What you are trying there is installing a new Debian inside /chroot/sid. sid is the name of the Debian release, amd64 is the instruction set of your cpu. I think what is still missing is a server from which the Debian image is downloaded. > what does this mean `--chroot=/chroot/sid` It means that Firejail chroots into this folder before running the application.

gitea-mirror commented

2026-05-05 08:16:49 -06:00

Author

Owner

@Raj2032 commented on GitHub (Feb 28, 2019):

--overlay-named Doesn't this mean that everything inside the sandbox deletes eventually?

Say if I downloaded lets just say Opera browser as a deb package, then how do I install that inside the firejail chroot?

Additionally how do I create multiple firejail chroot jails?

@Raj2032 commented on GitHub (Feb 28, 2019): `--overlay-named` Doesn't this mean that everything inside the sandbox deletes eventually? Say if I downloaded lets just say Opera browser as a deb package, then how do I install that inside the firejail chroot? Additionally how do I create multiple firejail chroot jails?

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1626

No description provided.

Rows
Columns