[GH-ISSUE #2678] Firefox Nightly could not load profile

gitea-mirror commented

2026-05-05 08:20:10 -06:00

Owner

Originally created by @mustaqimM on GitHub (May 5, 2019).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2678

Hey there, my Nightly is installed at ~/.local/bin/firefox
If I run

$> firejail --profile=/etc/firejail/firefox-nightly.profile /home/mustaqim/.local/bin/firefox/firefox-bin
Reading profile /etc/firejail/firefox-nightly.profile
Reading profile /etc/firejail/firefox.profile
Reading profile /etc/firejail/firefox-common.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Parent pid 7442, child pid 7443
Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set.
Warning: /sbin directory link was not blacklisted
Warning: /usr/sbin directory link was not blacklisted
Post-exec seccomp protector enabled
Seccomp list in: @clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice, check list: @default-keep, prelist: adjtimex,clock_adjtime,clock_settime,settimeofday,modify_ldt,lookup_dcookie,perf_event_open,process_vm_writev,delete_module,finit_module,init_module,_sysctl,afs_syscall,create_module,get_kernel_syms,getpmsg,putpmsg,query_module,security,sysfs,tuxcall,uselib,ustat,vserver,ioperm,iopl,kexec_load,kexec_file_load,reboot,set_mempolicy,migrate_pages,move_pages,mbind,swapon,swapoff,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount2,userfaultfd,vhangup,vmsplice,
Warning: Cannot confine the application using AppArmor.
Maybe firejail-default AppArmor profile is not loaded into the kernel.
As root, run "aa-enforce firejail-default" to load it.
Child process initialized in 117.10 ms
Error: no suitable /home/mustaqim/.local/bin/firefox/firefox-bin executable found

Parent is shutting down, bye...

It doesn't run.

And if I run

$>  firejail /home/mustaqim/.local/bin/firefox/firefox-bin
Reading profile /etc/firejail/default.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-passwdmgr.inc
Reading profile /etc/firejail/disable-programs.inc

** Note: you can use --noprofile to disable default.profile **

Parent pid 7515, child pid 7516
Warning: /sbin directory link was not blacklisted
Warning: /usr/sbin directory link was not blacklisted
Child process initialized in 41.93 ms
Error: Access was denied while trying to open files in your profile directory.
GLib-GIO-Message: 08:22:21.938: Using the 'memory' GSettings backend.  Your settings will not be saved or shared with other applications.

Parent is shutting down, bye...

I get: Your Firefox profile cannot be loaded. It may be missing or inaccessible.

Originally created by @mustaqimM on GitHub (May 5, 2019). Original GitHub issue: https://github.com/netblue30/firejail/issues/2678 Hey there, my Nightly is installed at `~/.local/bin/firefox` If I run ```zsh $> firejail --profile=/etc/firejail/firefox-nightly.profile /home/mustaqim/.local/bin/firefox/firefox-bin Reading profile /etc/firejail/firefox-nightly.profile Reading profile /etc/firejail/firefox.profile Reading profile /etc/firejail/firefox-common.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-interpreters.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/whitelist-common.inc Reading profile /etc/firejail/whitelist-var-common.inc Parent pid 7442, child pid 7443 Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set. Warning: /sbin directory link was not blacklisted Warning: /usr/sbin directory link was not blacklisted Post-exec seccomp protector enabled Seccomp list in: @clock,@cpu-emulation,@debug,@module,@obsolete,@raw-io,@reboot,@resources,@swap,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,ni_syscall,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount,umount2,userfaultfd,vhangup,vmsplice, check list: @default-keep, prelist: adjtimex,clock_adjtime,clock_settime,settimeofday,modify_ldt,lookup_dcookie,perf_event_open,process_vm_writev,delete_module,finit_module,init_module,_sysctl,afs_syscall,create_module,get_kernel_syms,getpmsg,putpmsg,query_module,security,sysfs,tuxcall,uselib,ustat,vserver,ioperm,iopl,kexec_load,kexec_file_load,reboot,set_mempolicy,migrate_pages,move_pages,mbind,swapon,swapoff,acct,add_key,bpf,fanotify_init,io_cancel,io_destroy,io_getevents,io_setup,io_submit,ioprio_set,kcmp,keyctl,mount,name_to_handle_at,nfsservctl,open_by_handle_at,personality,pivot_root,process_vm_readv,ptrace,remap_file_pages,request_key,setdomainname,sethostname,syslog,umount2,userfaultfd,vhangup,vmsplice, Warning: Cannot confine the application using AppArmor. Maybe firejail-default AppArmor profile is not loaded into the kernel. As root, run "aa-enforce firejail-default" to load it. Child process initialized in 117.10 ms Error: no suitable /home/mustaqim/.local/bin/firefox/firefox-bin executable found Parent is shutting down, bye... ``` It doesn't run. And if I run ```zsh $> firejail /home/mustaqim/.local/bin/firefox/firefox-bin Reading profile /etc/firejail/default.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-passwdmgr.inc Reading profile /etc/firejail/disable-programs.inc ** Note: you can use --noprofile to disable default.profile ** Parent pid 7515, child pid 7516 Warning: /sbin directory link was not blacklisted Warning: /usr/sbin directory link was not blacklisted Child process initialized in 41.93 ms Error: Access was denied while trying to open files in your profile directory. GLib-GIO-Message: 08:22:21.938: Using the 'memory' GSettings backend. Your settings will not be saved or shared with other applications. Parent is shutting down, bye... ``` I get: `Your Firefox profile cannot be loaded. It may be missing or inaccessible.`

gitea-mirror closed this issue

2026-05-05 08:20:11 -06:00

gitea-mirror commented

2026-05-05 08:20:12 -06:00

Author

Owner

@rusty-snake commented on GitHub (May 5, 2019):

Add the following to $HOME/.config/firejail/firefox-nightly.local

ignore noexec ${HOME}
noblacklist ${HOME}/.local/bin
whitelist ${HOME}/.local/bin

And try again with $ firejail --profile=firefox-nightly $HOME/.local/bin/firefox/firefox-bin

@rusty-snake commented on GitHub (May 5, 2019): Add the following to `$HOME/.config/firejail/firefox-nightly.local` ``` ignore noexec ${HOME} noblacklist ${HOME}/.local/bin whitelist ${HOME}/.local/bin ``` And try again with `$ firejail --profile=firefox-nightly $HOME/.local/bin/firefox/firefox-bin`

gitea-mirror commented

2026-05-05 08:20:13 -06:00

Author

Owner

@rusty-snake commented on GitHub (May 5, 2019):

If it doesn't work, let us know your distro and firejail version.

@rusty-snake commented on GitHub (May 5, 2019): If it doesn't work, let us know your distro and firejail version.

gitea-mirror commented

2026-05-05 08:20:15 -06:00

Author

Owner

@mustaqimM commented on GitHub (May 5, 2019):

@rusty-snake That works, thanks!
It should be

noblacklist ${HOME}/.local/bin/firefox
whitelist ${HOME}/.local/bin/firefox

right? So it doesn't have access to the rest of the applications under ~/.local/bin

@mustaqimM commented on GitHub (May 5, 2019): @rusty-snake That works, thanks! It should be ```zsh noblacklist ${HOME}/.local/bin/firefox whitelist ${HOME}/.local/bin/firefox ``` right? So it doesn't have access to the rest of the applications under `~/.local/bin`

gitea-mirror commented

2026-05-05 08:20:16 -06:00

Author

Owner

@mustaqimM commented on GitHub (May 7, 2019):

@rusty-snake Nightly is unable to automatically download updates with the current settings. Also I can't connect to my KeePassXC database

@mustaqimM commented on GitHub (May 7, 2019): @rusty-snake Nightly is unable to automatically download updates with the current settings. Also I can't connect to my KeePassXC database

gitea-mirror commented

2026-05-05 08:20:16 -06:00

Author

Owner

@rusty-snake commented on GitHub (May 7, 2019):

@mustaqimM Firefox + KeePassXC Browser intergation + firejail both is not working I know. I will try to find a way that this work as soon as I have the time.

Nightly is unable to automatically download updates

What? I have a similar config for my firefox-esr. Could you describe it a llitle bit more, and make sure that this isn't a nighly bug (run without firejail).

@rusty-snake commented on GitHub (May 7, 2019): @mustaqimM Firefox + KeePassXC Browser intergation + firejail both is not working I know. I will try to find a way that this work as soon as I have the time. > Nightly is unable to automatically download updates What? I have a similar config for my firefox-esr. Could you describe it a llitle bit more, and make sure that this isn't a nighly bug (run without firejail).

gitea-mirror commented

2026-05-05 08:20:17 -06:00

Author

Owner

@mustaqimM commented on GitHub (May 7, 2019):

@rusty-snake Ya that's what I did (downloaded the update without firejail). Thanks so much for your help

EDIT. ignore private-tmp seems to be enough for KeePassXC to work

@mustaqimM commented on GitHub (May 7, 2019): @rusty-snake Ya that's what I did (downloaded the update without firejail). Thanks so much for your help EDIT. `ignore private-tmp` seems to be enough for KeePassXC to work

gitea-mirror referenced this issue

2026-05-05 10:12:39 -06:00

[PR #1687] [MERGED] Added environment variable QML_DISABLE_DISK_CACHE=1 to okular.profile. #4041

Rows
Columns

[GH-ISSUE #2678] Firefox Nightly could not load profile #1687