mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #3304] firefox: Error while opening directory: fs.c:442 fs_tmpfs: No such file or directory #2074
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#2074
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @houseofsuns on GitHub (Mar 29, 2020).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3304
I use firejail to contain my firefox browser, but this unfortunately stopped working. I'm running Gentoo ~amd64 with a self-compiled kernel. I have the suspicion, that the problem is due to some interaction with another system component, but I was travelling a lot when the issue started and sadly can no longer reproduce any of the relevant configuration.
I tried to diagnose this, but was not very successful. Here come the observations:
firejail firefox -no-remotestarts firefox which shows me a popup "Your Firefox profile cannot be loaded. It may be missing or inaccessible" and exits.firejail --private firefox -no-remotegives up with "Error while opening directory: fs.c:450 fs_tmpfs: No such file or directory"mkdir /tmp/myhome ; firejail --private=/tmp/myhome firefox -no-remotegives up with "Error opening home directory: fs_home.c:265 fs_private_homedir: No such file or directory"firejail emacsseems to work fine, but the--privatevariants show the same behaviour as aboveEverything happens exactly the same with
--noprofile.Finally
firejail --version:@smitsohu commented on GitHub (Mar 29, 2020):
If a user home directory doesn't exist, Firejail fails with these admittedly somewhat cryptic errors. What I don't understand right now is
Is there something special about the home directory (symbolic links, file system)?
@houseofsuns commented on GitHub (Mar 29, 2020):
On /tmp a tmpfs is mounted and
myhomeis a simple directory so that should be a no.However my real home directory /home/houseofsuns actually is behind a symlink /home -> /compat/home due to historic reasons. I hope this does not impact usage.
@smitsohu commented on GitHub (Mar 29, 2020):
It should be possible to rule it out: The home directory path in
/etc/passwd, is it the link or is it the resolved path? If it is the link you could replace it with the resolved path and try again.But actually I don't think that's the primary cause here.
For some reason Firejail cannot see your home directory. We had similar issues with filesystems that impose restrictions on the root user (like FUSE), but then I would expect a
Permission deniederror rather thanNo such file or directory, so probably it is something else.@houseofsuns commented on GitHub (Mar 29, 2020):
I just checked and
/etc/passwdcontains/compat/home/houseofsunsso this should be ruled out. (I dimly remember doing a quick search for this exact issue and finding something about symlinks and hence replacing this.)I'm at a loss here. As it seems like it could be relevant I'll add the output of
mount.@smitsohu commented on GitHub (Mar 30, 2020):
That mount table looks fairly standard. For the moment I'm out of ideas. Somebody else?
Maybe if you could post the output of
just to rule out that Firejail tries to do something stupid?
@houseofsuns commented on GitHub (Mar 30, 2020):
Here you go:
@ghost commented on GitHub (Apr 5, 2020):
@houseofsuns Any progress? If not, and you have the time to git bisect, that would definately help to get to the bottom of this issue. We definately would like to see firejail working as expected on Gentoo.
@houseofsuns commented on GitHub (Apr 5, 2020):
I did a git bisect and for the case
firejail --private firefox -no-remoteit returned74e5911806as the first bad commit.@houseofsuns commented on GitHub (Apr 5, 2020):
However for
mkdir /tmp/myhome ; firejail --private=/tmp/myhome firefox -no-remoteI went back to version 0.9.56 (which was one and a half years ago) and it shows the same error. Which means that it is some interaction problem as my setup definitely worked at that time (it stopped working at most six month ago).@ghost commented on GitHub (Apr 5, 2020):
@houseofsuns Thanks for taking the time to git bisect. Hopefully @smitsohu can have another look at this.
@smitsohu commented on GitHub (Apr 5, 2020):
@glitsj16 Failing hard was maybe always a bit excessive, at least in a number of places. What I can do right now, without understanding the underlying issue, is to fail softly with a warning where it is easy to do.
But of course this is not really going to solve the problems of @houseofsuns
@smitsohu commented on GitHub (Apr 5, 2020):
@houseofsuns
Does Firejail print the following warning message, maybe despite you updating
/etc/passwdwith a resolved path?Or do you see something in the syslog?
@ghost commented on GitHub (Apr 5, 2020):
@smitsohu I have full confidence you know what's the best way to deal with this :) I was doing a bit of issue triaging when I noticed this, so I took the liberty to ping you.
@houseofsuns commented on GitHub (Apr 5, 2020):
@smitsohu I just had another go at it, but no different result.
Here my passwd-settings:
And here a full debug output:
I also did not see any messages in the log files originating from firejail.
@matu3ba commented on GitHub (Apr 9, 2020):
@houseofsuns
In
fs.c:442 fs_tmpfs:// get a file descriptor for dir, fails if there is any symlink
Not sure, if printing dir in line 441 would help.
Did you try that to check the output?
The comment states that symlinks are not implemented yet, but I cant find the issue on that.