[GH-ISSUE #3341] build from git master broken with 0f18c1b #2095

Closed
opened 2026-05-05 08:46:39 -06:00 by gitea-mirror · 3 comments
Owner

Originally created by @ghost on GitHub (Apr 10, 2020).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3341

With commit 0f18c1bb2c I'm seeing lots of fseccomp does not exist errors. See output below from trying to run liferea, but it happens with all the profiles AFAICT.

Side-note: I used to include profstats in my PKGBUILD on Arch, but that's not being found in etc/profstats anymore it seems - might be unrelated.

UPDATE: also creates CI breakage, as reported in 0f18c1bb2c (r38412184)

$ firejail liferea
Error: /run/firejail/lib/fseccomp does not exist
Error: failed to run /run/firejail/lib/fseccomp
Error: proc 669457 cannot sync with peer: unexpected EOF
Peer 669458 unexpectedly exited with status 1
Error: /run/firejail/lib/fseccomp does not exist
Error: failed to run /run/firejail/lib/fseccomp
Error: proc 669462 cannot sync with peer: unexpected EOF
Peer 669463 unexpectedly exited with status 1
Error: /run/firejail/lib/fseccomp does not exist
Error: failed to run /run/firejail/lib/fseccomp
Error: proc 669467 cannot sync with peer: unexpected EOF
Peer 669468 unexpectedly exited with status 1
Error: /run/firejail/lib/fseccomp does not exist
Error: failed to run /run/firejail/lib/fseccomp
Error: proc 669472 cannot sync with peer: unexpected EOF
Peer 669473 unexpectedly exited with status 1
Error: /run/firejail/lib/fseccomp does not exist
Error: failed to run /run/firejail/lib/fseccomp
Error: proc 669477 cannot sync with peer: unexpected EOF
Peer 669478 unexpectedly exited with status 1
Error: /run/firejail/lib/fseccomp does not exist
Error: failed to run /run/firejail/lib/fseccomp
Error: proc 669482 cannot sync with peer: unexpected EOF
Peer 669483 unexpectedly exited with status 1
Error: /run/firejail/lib/fseccomp does not exist
Error: failed to run /run/firejail/lib/fseccomp
Error: proc 669487 cannot sync with peer: unexpected EOF
Peer 669488 unexpectedly exited with status 1
Error: /run/firejail/lib/fseccomp does not exist
Error: failed to run /run/firejail/lib/fseccomp
Error: proc 669492 cannot sync with peer: unexpected EOF
Peer 669493 unexpectedly exited with status 1
Error: /run/firejail/lib/fseccomp does not exist
Error: failed to run /run/firejail/lib/fseccomp
Error: proc 669497 cannot sync with peer: unexpected EOF
Peer 669498 unexpectedly exited with status 1
Reading profile /etc/firejail/liferea.profile
Reading profile /etc/firejail/globals.local
Reading profile /etc/firejail/allow-python2.inc
Reading profile /etc/firejail/allow-python2.local
Reading profile /etc/firejail/allow-python3.inc
Reading profile /etc/firejail/allow-python3.local
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-exec.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-interpreters.local
Reading profile /etc/firejail/disable-hardened-malloc.inc
Reading profile /etc/firejail/disable-passwdmgr.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/disable-programs.local
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-usr-share-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Parent pid 669505, child pid 669533
Warning: cannot open source file /usr/lib/firejail/seccomp.block_secondary, file not copied
Warning: cannot open source file /usr/lib/firejail/seccomp, file not copied

DNS server 127.0.0.1

Error: /run/firejail/lib/fseccomp does not exist
Error: failed to run /run/firejail/lib/fseccomp
Error: proc 669505 cannot sync with peer: unexpected EOF
Peer 669533 unexpectedly exited with status 1
Originally created by @ghost on GitHub (Apr 10, 2020). Original GitHub issue: https://github.com/netblue30/firejail/issues/3341 With commit https://github.com/netblue30/firejail/commit/0f18c1bb2cf47a05b9936e3b54ece62360d45daa I'm seeing lots of `fseccomp does not exist` errors. See output below from trying to run liferea, but it happens with all the profiles AFAICT. Side-note: I used to include `profstats` in my PKGBUILD on Arch, but that's not being found in etc/profstats anymore it seems - might be unrelated. UPDATE: also creates CI breakage, as reported in https://github.com/netblue30/firejail/commit/0f18c1bb2cf47a05b9936e3b54ece62360d45daa#r38412184 ``` $ firejail liferea Error: /run/firejail/lib/fseccomp does not exist Error: failed to run /run/firejail/lib/fseccomp Error: proc 669457 cannot sync with peer: unexpected EOF Peer 669458 unexpectedly exited with status 1 Error: /run/firejail/lib/fseccomp does not exist Error: failed to run /run/firejail/lib/fseccomp Error: proc 669462 cannot sync with peer: unexpected EOF Peer 669463 unexpectedly exited with status 1 Error: /run/firejail/lib/fseccomp does not exist Error: failed to run /run/firejail/lib/fseccomp Error: proc 669467 cannot sync with peer: unexpected EOF Peer 669468 unexpectedly exited with status 1 Error: /run/firejail/lib/fseccomp does not exist Error: failed to run /run/firejail/lib/fseccomp Error: proc 669472 cannot sync with peer: unexpected EOF Peer 669473 unexpectedly exited with status 1 Error: /run/firejail/lib/fseccomp does not exist Error: failed to run /run/firejail/lib/fseccomp Error: proc 669477 cannot sync with peer: unexpected EOF Peer 669478 unexpectedly exited with status 1 Error: /run/firejail/lib/fseccomp does not exist Error: failed to run /run/firejail/lib/fseccomp Error: proc 669482 cannot sync with peer: unexpected EOF Peer 669483 unexpectedly exited with status 1 Error: /run/firejail/lib/fseccomp does not exist Error: failed to run /run/firejail/lib/fseccomp Error: proc 669487 cannot sync with peer: unexpected EOF Peer 669488 unexpectedly exited with status 1 Error: /run/firejail/lib/fseccomp does not exist Error: failed to run /run/firejail/lib/fseccomp Error: proc 669492 cannot sync with peer: unexpected EOF Peer 669493 unexpectedly exited with status 1 Error: /run/firejail/lib/fseccomp does not exist Error: failed to run /run/firejail/lib/fseccomp Error: proc 669497 cannot sync with peer: unexpected EOF Peer 669498 unexpectedly exited with status 1 Reading profile /etc/firejail/liferea.profile Reading profile /etc/firejail/globals.local Reading profile /etc/firejail/allow-python2.inc Reading profile /etc/firejail/allow-python2.local Reading profile /etc/firejail/allow-python3.inc Reading profile /etc/firejail/allow-python3.local Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-exec.inc Reading profile /etc/firejail/disable-interpreters.inc Reading profile /etc/firejail/disable-interpreters.local Reading profile /etc/firejail/disable-hardened-malloc.inc Reading profile /etc/firejail/disable-passwdmgr.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/disable-programs.local Reading profile /etc/firejail/whitelist-common.inc Reading profile /etc/firejail/whitelist-usr-share-common.inc Reading profile /etc/firejail/whitelist-var-common.inc Parent pid 669505, child pid 669533 Warning: cannot open source file /usr/lib/firejail/seccomp.block_secondary, file not copied Warning: cannot open source file /usr/lib/firejail/seccomp, file not copied DNS server 127.0.0.1 Error: /run/firejail/lib/fseccomp does not exist Error: failed to run /run/firejail/lib/fseccomp Error: proc 669505 cannot sync with peer: unexpected EOF Peer 669533 unexpectedly exited with status 1 ```
gitea-mirror 2026-05-05 08:46:39 -06:00
  • closed this issue
  • added the
    bug
    label
Author
Owner

@ghost commented on GitHub (Apr 10, 2020):

40ec825b6b didn't change anything. For me the build from git master is still broken with the exact same errors. Reopening.

<!-- gh-comment-id:612218460 --> @ghost commented on GitHub (Apr 10, 2020): https://github.com/netblue30/firejail/commit/40ec825b6b9283265a8d395935c7d9fce199d7a7 didn't change anything. For me the build from git master is still broken with the exact same errors. Reopening.
Author
Owner

@hautecodure commented on GitHub (Apr 11, 2020):

Noticed the same issue, after a bit of digging around, found that the issue is in the Makefile generated in root.

...
ifeq ($(HAVE_SECCOMP),-DHAVE_SECCOMP)
SBOX_APPS += src/fsec-optimize/fsec-optimize src/fsec-print/fsec-print src/fseccomp/fseccomp
SECCOMP_FILTERS = seccomp seccomp.debug seccomp.32 seccomp.block_secondary seccomp.mdwx seccomp.mdwx.32
endif
ALL_ITEMS = $(APPS) $(SBOX_APPS) $(MYLIBS)

prefix=/usr/local
exec_prefix=${prefix}
bindir=${exec_prefix}/bin
libdir=${exec_prefix}/lib
datarootdir=${prefix}/share
mandir=${datarootdir}/man
sysconfdir=${prefix}/etc

VERSION=0.9.63
NAME=firejail
PACKAGE_TARNAME=firejail
DOCDIR=${datarootdir}/doc/${PACKAGE_TARNAME}
HAVE_SECCOMP=-DHAVE_SECCOMP
HAVE_APPARMOR=
HAVE_CONTRIB_INSTALL=yes
BUSYBOX_WORKAROUND=no
HAVE_SUID=yes
...

As you can see the variable (specifically HAVE_SECCOMP) is being used prior to being assigned, thus it would always fail. I moved the entire block at the top of the Makefile and everything build as expected.

<!-- gh-comment-id:612352120 --> @hautecodure commented on GitHub (Apr 11, 2020): Noticed the same issue, after a bit of digging around, found that the issue is in the `Makefile` generated in root. ```make ... ifeq ($(HAVE_SECCOMP),-DHAVE_SECCOMP) SBOX_APPS += src/fsec-optimize/fsec-optimize src/fsec-print/fsec-print src/fseccomp/fseccomp SECCOMP_FILTERS = seccomp seccomp.debug seccomp.32 seccomp.block_secondary seccomp.mdwx seccomp.mdwx.32 endif ALL_ITEMS = $(APPS) $(SBOX_APPS) $(MYLIBS) prefix=/usr/local exec_prefix=${prefix} bindir=${exec_prefix}/bin libdir=${exec_prefix}/lib datarootdir=${prefix}/share mandir=${datarootdir}/man sysconfdir=${prefix}/etc VERSION=0.9.63 NAME=firejail PACKAGE_TARNAME=firejail DOCDIR=${datarootdir}/doc/${PACKAGE_TARNAME} HAVE_SECCOMP=-DHAVE_SECCOMP HAVE_APPARMOR= HAVE_CONTRIB_INSTALL=yes BUSYBOX_WORKAROUND=no HAVE_SUID=yes ... ``` As you can see the variable (specifically `HAVE_SECCOMP`) is being used prior to being assigned, thus it would always fail. I moved the entire block at the top of the `Makefile` and everything build as expected.
Author
Owner

@topimiettinen commented on GitHub (Apr 11, 2020):

OK, I'll make a fix.

<!-- gh-comment-id:612359479 --> @topimiettinen commented on GitHub (Apr 11, 2020): OK, I'll make a fix.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2095
No description provided.