mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #3856] Jackbox games broken under firejail #2426
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#2426
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @aidalgol on GitHub (Dec 31, 2020).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3856
All of the Jackbox party packs via Steam run under firejail have major issues.
$ steam: the game runs without issue.$ firejail steam: the game launches but does not get past the splash screen.$ firejail --noprofile steam: the game runs, but the audio is just scratchy noise.$ firejail --noprofile /usr/games/steam: the game runswithout issue, but the audio is just scratchy noise.$ firejail /usr/games/steam: the game launches but does not get past the splash screen.Environment
Checklist
https://github.com/netblue30/firejail/issues/1139)--profile=PROFILENAMEis used to set the right profile.LC_ALL=en_US.UTF-8 LANG=en_US.UTF-8 PROGRAMto get english error-messages.Already using en_NZ.UTF-8.
browser-allow-drm yes/browser-disable-u2f noinfirejail.configto allow DRM/U2F in browsers.debug output
@rusty-snake commented on GitHub (Dec 31, 2020):
What does
which -a steamshow?@aidalgol commented on GitHub (Dec 31, 2020):
@rusty-snake commented on GitHub (Dec 31, 2020):
Is the differences between
firejail --noprofile steamandfirejail --noprofile /usr/games/steamreproducible?@aidalgol commented on GitHub (Dec 31, 2020):
It does not appear to be, as I just tried again and both had broken audio.
@rusty-snake commented on GitHub (Dec 31, 2020):
Ok, then we have two issues. We had already an other issues with noise/artefacts/... with firejail+steam, but I can nit find it. And the one that something in steam.profile breaks this game. If there is no error in the terminal/syslog, you need to comment steam.profile and then uncomment it line for line.
@aidalgol commented on GitHub (Jan 1, 2021):
I have narrowed the breakage of this game down to the
private-etcline. I then ran steam under strace (with the-fflag to trace child processes) to see what under/etc/was being accessed that wasn't already allowed insteam.profile, then added those filenames to the list afterprivate-etcand reran steam under firejail, but the game still failed to get past the splash screen.Is there a mechanism in firejail to see what is being denied? I don't see anything helpful in the firejail debug output.
@rusty-snake commented on GitHub (Jan 1, 2021):
tracelog. however here it doesn't help asprivate-etcdoes not "deny" (blacklisting), is does "not allow" (whitelisting).Easier:
firejail --build steam | grep private-etcWas any of those new files also in one of our private-etc groups? Maybe the splash crashes w/o
X11?a83e36dde3/etc/templates/profile.template (L174-L184)a83e36dde3/etc/profile-m-z/steam.profile (L114)@aidalgol commented on GitHub (Jan 3, 2021):
Thanks, I didn't know about that option. Sadly,
firejail --buildseems to break the Steam's embedded Chromium, since it starts with the main frame all black, even if I run steam with the-no-cef-sandboxoption, so I instead tried launching the game directly without going through the GUI byfirejail --build steam, but I didn't get much in the terminal output.Only
nsswitch.confandgai.conf. The full list of filenames I added to theprivate-etcline areDisabling
private-etchas been my workaround (via the--ignore=private-etcCLI option), but I still thought I should raise this issue in the hopes of improving the firejail steam profile to allow whatever is necessary to get these games working while still being about as restrictive.@rusty-snake commented on GitHub (Jan 3, 2021):
👍.
--builduses--tracebut chromium and firefox hate it.Both not really help-full, you could try to use (a) the private-etc line in steam.profile with (b) your findings and (c) all our templates.
If you want, you can use a
private-etcwith all files in/etc. Useunalias ls && ls /etc | tr '\n' ','to get such a list. You will first get some really nothing saying error messages from firejail on files like sudoers, remove all such files until steam starts. Now the game either still don't work, then this game is complete incompatible withprivate-etc. Or the game works fine, then you can start to remove files fromprivate-etcuntil you find the minimal working one.@aidalgol commented on GitHub (Jan 10, 2021):
I finally got around to running the game with a
private-etcline containing every file under/etcon my system, and I still get the same issue, so this game is just incompatible withprivate-etc.