[GH-ISSUE #2590] interaction between --dns option and overlayfs #1647

New issue

Closed

opened 2026-05-05 08:17:49 -06:00 by gitea-mirror · 1 comment

gitea-mirror commented

2026-05-05 08:17:49 -06:00

Owner

Originally created by @smitsohu on GitHub (Mar 13, 2019).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2590

When --dns is used together with an overlay option, it results in /etc no being covered by the overlay. The reason is that a fresh new /etc is created in /run, which is then mounted on top of /etc. /run, however, is never covered by the overlay.

This is not mentioned in the manual, and arguably it defeats the purpose of an overlay to some extent. I'm unsure how to properly fix this, especially since /etc/resolv.conf is a symlink in many distributions. Should --dns be disabled in overlays?

Originally created by @smitsohu on GitHub (Mar 13, 2019). Original GitHub issue: https://github.com/netblue30/firejail/issues/2590 When `--dns` is used together with an overlay option, it results in `/etc` no being covered by the overlay. The reason is that a fresh new `/etc` is created in `/run`, which is then mounted on top of `/etc`. `/run`, however, is never covered by the overlay. This is not mentioned in the manual, and arguably it defeats the purpose of an overlay to some extent. I'm unsure how to properly fix this, especially since `/etc/resolv.conf` is a symlink in many distributions. Should `--dns` be disabled in overlays?

gitea-mirror closed this issue

2026-05-05 08:17:50 -06:00

gitea-mirror commented

2026-05-05 08:17:52 -06:00

Author

Owner

@smitsohu commented on GitHub (Mar 13, 2019):

This is irrelevant, because /run/firejail/mnt is a tmpfs.
Closing the issue! Sorry for the noise.

@smitsohu commented on GitHub (Mar 13, 2019): This is irrelevant, because /run/firejail/mnt is a tmpfs. Closing the issue! Sorry for the noise.

gitea-mirror referenced this issue

2026-05-05 10:12:32 -06:00

[PR #1647] [MERGED] Blacklist the Electron Cash Wallet #4034

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1647

No description provided.

Rows
Columns