mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #4604] brave: program takes a long time to open #2716
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#2716
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @PolpOnline on GitHub (Oct 13, 2021).
Original GitHub issue: https://github.com/netblue30/firejail/issues/4604
Description
Brave browser takes a lot of time when opening under Firejail (24 seconds on average to make the main window appear, less than 1 without Firejail sandboxing).
I'm under Wayland.
I tried with vanilla Chromium to do the same thing and it launches very quickly, so this must be a problem with the Firejail brave profile or my Brave-internal one (extensions and such not being nice with Firejail and things like that...).
Steps to Reproduce
Just launch Brave under Firejail
Expected behavior
Browser main window instantly showing
Actual behavior
Browser taking a long time loading and throwing some additional errors in the console
Behavior without a profile
The program launched instantly and it was less prone to errors
Output without a profile
Environment
Checklist
/usr/bin/vlc) "fixes" it).https://github.com/netblue30/firejail/issues/1139)browser-allow-drm yes/browser-disable-u2f noinfirejail.configto allow DRM/U2F in browsers.--profile=PROFILENAMEto set the right profile. (Only relevant for AppImages) (I'm not using the AppImage version, but thebrave-binpackage from the AUR)Log
(Gave it a link to open to not spawn a new window but make another tab in the already-opened browser)
Output of
LC_ALL=C firejail /usr/bin/brave google.comOutput of
LC_ALL=C firejail --debug /usr/bin/brave google.com@rusty-snake commented on GitHub (Oct 13, 2021):
Hmm, for me it works (Fedora) but I've also made many changes to the profile.
Great, to narrow it down, does
firejail --private /usr/bin/bravestart fast?@PolpOnline commented on GitHub (Oct 13, 2021):
Nope, still takes way too long to open
@rusty-snake commented on GitHub (Oct 13, 2021):
Maybe
--ignore=private-cache(requires 2 launches to test).firejail --profile=brave trueis fast right?@PolpOnline commented on GitHub (Oct 13, 2021):
Yeah, just launched
firejail --ignore=private-cache braveone time and it started fast as it should be! Thanks!@rusty-snake commented on GitHub (Oct 13, 2021):
Now the question is why
private-cachemakes it so slow for you? Would you say you have "slow" hardware? Or could there be something else (e.g. it tries to find something and waits for a timeout)?OT: GH has added support to edit comment in monospace, https://github.com/settings/appearance#use_fixed_width, nice.
@kmk3 commented on GitHub (Oct 13, 2021):
@rusty-snake commented on Oct 13:
Nice.
@PolpOnline commented on GitHub (Oct 13, 2021):
Not at all, I have everything on an NVMe drive and I got a nice r7 3rd gen
Maybe it tries getting the cache but it can't because Firejail doesn't allow it in some way (?)
Nice, enabled it
@rusty-snake commented on GitHub (Oct 13, 2021):
Wow, that even above mine. NVMe + i5 10th gen (truncated with
mitigations=auto,nosmt nosmt=force pti=on spectre_v2=on spec_store_bypass_disable=on init_on_alloc=1 …).Yes,
private-cachemeanstmpfs ${HOME}/.cacheand brave uses~/.cache/BraveSoftware. But what I don't understand is why is the slowdown (on a fast machine) that drastic. I have no noticeable slowdown even though I always useprivatemeaning no cache at all (if anyone cares, my brave setup: brave, brave.profile, brave.local and the others like globals.local and chromium-common-hardened.inc.profile)