[GH-ISSUE #2752] Run Firefox on remote X11 server without X11 forwarding #1731

Closed
opened 2026-05-05 08:24:06 -06:00 by gitea-mirror · 4 comments
Owner

Originally created by @mikkol554 on GitHub (Jun 6, 2019).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2752

Dears,

I run the Xming X11 server on a Windows computer and have Firefox installed in another Fedora computer in the same network. I normally execute graphical Linux applications by prepending DISPLAY=<xming host address>:0.0 to <command name>. In some cases, I may need to use dbus-launcher to get things working (as with gnome-shell, for example).

I do not use SSH X11 forwarding but the Xming server is configured for plain, direct TCP connections from clients instead of being dependent on the SSH connection being alive (and creating overhead).

I cannot run Firefox with firejail using this setup. I only get

Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set.

with

Error safe_fd: pulseaudio.c:188 pulseaudio_init: Not a directory
Error: proc 32178 cannot sync with peer: unexpected EOF

The connection does not carry audio nor do I need it for anything.

Ideas?

Originally created by @mikkol554 on GitHub (Jun 6, 2019). Original GitHub issue: https://github.com/netblue30/firejail/issues/2752 Dears, I run the Xming X11 server on a Windows computer and have Firefox installed in another Fedora computer in the same network. I normally execute graphical Linux applications by prepending `DISPLAY=<xming host address>:0.0` to `<command name>`. In some cases, I may need to use dbus-launcher to get things working (as with `gnome-shell`, for example). I do not use SSH X11 forwarding but the Xming server is configured for plain, direct TCP connections from clients instead of being dependent on the SSH connection being alive (and creating overhead). I cannot run Firefox with firejail using this setup. I only get >Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set. with >Error safe_fd: pulseaudio.c:188 pulseaudio_init: Not a directory >Error: proc 32178 cannot sync with peer: unexpected EOF The connection does not carry audio nor do I need it for anything. Ideas?
Author
Owner

@rusty-snake commented on GitHub (Jun 6, 2019):

@mikkol554 works it with firejail --noprofile firefox?
PS: what firejail version do you use? firejail --version

<!-- gh-comment-id:499410123 --> @rusty-snake commented on GitHub (Jun 6, 2019): @mikkol554 works it with `firejail --noprofile firefox`? PS: what firejail version do you use? `firejail --version`
Author
Owner

@mikkol554 commented on GitHub (Jun 6, 2019):

DISPLAY=10.168.0.53:0.0 firejail --noprofile firefox

Parent pid 4756, child pid 4757
Error safe_fd: pulseaudio.c:188 pulseaudio_init: Not a directory
Error: proc 4756 cannot sync with peer: unexpected EOF
Peer 4757 unexpectedly exited with status 1

firejail --version

firejail version 0.9.57

Compile time support:
- AppArmor support is disabled
- AppImage support is enabled
- chroot support is enabled
- file and directory whitelisting support is enabled
- file transfer support is enabled
- networking support is enabled
- overlayfs support is enabled
- private-home support is enabled
- seccomp-bpf support is enabled
- user namespace support is enabled
- X11 sandboxing support is enabled

<!-- gh-comment-id:499412423 --> @mikkol554 commented on GitHub (Jun 6, 2019): `DISPLAY=10.168.0.53:0.0 firejail --noprofile firefox` >Parent pid 4756, child pid 4757 >Error safe_fd: pulseaudio.c:188 pulseaudio_init: Not a directory >Error: proc 4756 cannot sync with peer: unexpected EOF >Peer 4757 unexpectedly exited with status 1 `firejail --version` >firejail version 0.9.57 > >Compile time support: > - AppArmor support is disabled > - AppImage support is enabled > - chroot support is enabled > - file and directory whitelisting support is enabled > - file transfer support is enabled > - networking support is enabled > - overlayfs support is enabled > - private-home support is enabled > - seccomp-bpf support is enabled > - user namespace support is enabled > - X11 sandboxing support is enabled
Author
Owner

@smitsohu commented on GitHub (Jun 6, 2019):

If you don't need audio, try to add a nosound option.

If pulseaudio --version returns 10 or higher, you can as an alternative also try the noautopulse option. That should work as well and keep the sound going.

<!-- gh-comment-id:499435265 --> @smitsohu commented on GitHub (Jun 6, 2019): If you don't need audio, try to add a `nosound` option. If `pulseaudio --version` returns 10 or higher, you can as an alternative also try the `noautopulse` option. That should work as well and keep the sound going.
Author
Owner

@mikkol554 commented on GitHub (Jun 6, 2019):

Thank you. Adding --nosound does the trick. It runs smoothly on the remote X server without SSH tunneling.

<!-- gh-comment-id:499435670 --> @mikkol554 commented on GitHub (Jun 6, 2019): Thank you. Adding `--nosound` does the trick. It runs smoothly on the remote X server without SSH tunneling.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1731
No description provided.