[GH-ISSUE #4641] Firefox doesn't work with Discord #2734

Closed
opened 2026-05-05 09:24:03 -06:00 by gitea-mirror · 1 comment
Owner

Originally created by @CocoR55 on GitHub (Oct 25, 2021).
Original GitHub issue: https://github.com/netblue30/firejail/issues/4641

Description

Firefox doesn't work with Discord

$ firejail --version
firejail version 0.9.66
$ cat /usr/lib/firejail/firecfg.config | grep -i discord
Discord
DiscordCanary
discord
discord-canary

BUT

$ firejail --list is empty...!!!

Something is wrong but what?

Steps to Reproduce

each time

$ LC_ALL=C firejail discord
Reading profile /etc/firejail/discord.profile
Reading profile /etc/firejail/discord-common.profile
Reading profile /etc/firejail/electron.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-exec.inc
Reading profile /etc/firejail/disable-passwdmgr.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Parent pid 3439, child pid 3440
Warning: skipping discord for private /opt
Private /opt installed in 0.31 ms
12 programs installed in 183.66 ms
Warning fcopy: skipping /etc/alternatives/editor, cannot find inode
....
Warning fcopy: skipping /etc/alternatives/netcat, cannot find inode
Warning: skipping crypto-policies for private /etc
Warning: skipping password for private /etc
Warning fcopy: skipping /etc/pulse/client.conf.d/01-enable-autospawn.conf, cannot find inode
Private /etc installed in 169.78 ms
Private /usr/etc installed in 0.00 ms
Warning: not remounting /run/user/1000/gvfs
Child process initialized in 617.61 ms
Error: no suitable discord executable found

Parent is shutting down, bye...

Expected behavior

firejail --list

I expected some thing like: 2358:leloup::/usr/bin/firejail /usr/bin/discord

Actual behavior

Firejail doesn't work with discord

Behavior without a profile

What changed calling LC_ALL=C firejail --noprofile /path/to/program in a terminal?

$ LC_ALL=C firejail --noprofile /usr/bin/flatpak run --branch=stable --arch=x86_64 --command=discord com.discordapp.Discord
Parent pid 3767, child pid 3768
Child process initialized in 13.48 ms
bwrap: Can't mount proc on /newroot/proc: Operation not permitted

Parent is shutting down, bye...

Additional context

Any other detail that may help to understand/debug the problem

Environment

  • Linux Mint 20.2
$ firejail --version
firejail version 0.9.66

Checklist

  • The issues is caused by firejail (i.e. running the program by path (e.g. /usr/bin/vlc) "fixes" it).
  • I can reproduce the issue without custom modifications (e.g. globals.local).
  • The program has a profile. (If not, request one in https://github.com/netblue30/firejail/issues/1139)
  • The profile (and redirect profile if exists) hasn't already been fixed upstream.
  • I have performed a short search for similar issues (to avoid opening a duplicate).
    • I'm aware of browser-allow-drm yes/browser-disable-u2f no in firejail.config to allow DRM/U2F in browsers.
  • I used --profile=PROFILENAME to set the right profile. (Only relevant for AppImages)

Log

Output of LC_ALL=C firejail /path/to/program

output goes here

Output of LC_ALL=C firejail --debug /path/to/program

output goes here


edit by @rusty-snake: code-blocks
edit by @kmk3: move information out of html comments; fix formatting

Originally created by @CocoR55 on GitHub (Oct 25, 2021). Original GitHub issue: https://github.com/netblue30/firejail/issues/4641 <!-- See the following links for help with formatting: https://guides.github.com/features/mastering-markdown/ https://docs.github.com/en/github/writing-on-github/getting-started-with-writing-and-formatting-on-github/basic-writing-and-formatting-syntax --> ### Description Firefox doesn't work with Discord ```console $ firejail --version firejail version 0.9.66 ``` ```console $ cat /usr/lib/firejail/firecfg.config | grep -i discord Discord DiscordCanary discord discord-canary ``` BUT `$ firejail --list` is empty...!!! Something is wrong but what? ### Steps to Reproduce each time ```console $ LC_ALL=C firejail discord Reading profile /etc/firejail/discord.profile Reading profile /etc/firejail/discord-common.profile Reading profile /etc/firejail/electron.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-exec.inc Reading profile /etc/firejail/disable-passwdmgr.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/whitelist-common.inc Reading profile /etc/firejail/whitelist-var-common.inc Parent pid 3439, child pid 3440 Warning: skipping discord for private /opt Private /opt installed in 0.31 ms 12 programs installed in 183.66 ms Warning fcopy: skipping /etc/alternatives/editor, cannot find inode .... Warning fcopy: skipping /etc/alternatives/netcat, cannot find inode Warning: skipping crypto-policies for private /etc Warning: skipping password for private /etc Warning fcopy: skipping /etc/pulse/client.conf.d/01-enable-autospawn.conf, cannot find inode Private /etc installed in 169.78 ms Private /usr/etc installed in 0.00 ms Warning: not remounting /run/user/1000/gvfs Child process initialized in 617.61 ms Error: no suitable discord executable found Parent is shutting down, bye... ``` ### Expected behavior `firejail --list` I expected some thing like: `2358:leloup::/usr/bin/firejail /usr/bin/discord` ### Actual behavior Firejail doesn't work with discord ### Behavior without a profile _What changed calling `LC_ALL=C firejail --noprofile /path/to/program` in a terminal?_ ```console $ LC_ALL=C firejail --noprofile /usr/bin/flatpak run --branch=stable --arch=x86_64 --command=discord com.discordapp.Discord Parent pid 3767, child pid 3768 Child process initialized in 13.48 ms bwrap: Can't mount proc on /newroot/proc: Operation not permitted Parent is shutting down, bye... ``` ### Additional context _Any other detail that may help to understand/debug the problem_ ### Environment - Linux Mint 20.2 ```console $ firejail --version firejail version 0.9.66 ``` ### Checklist <!-- Note: Items are checked with an "x", like so: - [x] This is a checked item. --> - [ ] The issues is caused by firejail (i.e. running the program by path (e.g. `/usr/bin/vlc`) "fixes" it). - [ ] I can reproduce the issue without custom modifications (e.g. globals.local). - [ ] The program has a profile. (If not, request one in `https://github.com/netblue30/firejail/issues/1139`) - [ ] The profile (and redirect profile if exists) hasn't already been fixed [upstream](https://github.com/netblue30/firejail/tree/master/etc). - [ ] I have performed a short search for similar issues (to avoid opening a duplicate). - [ ] I'm aware of `browser-allow-drm yes`/`browser-disable-u2f no` in `firejail.config` to allow DRM/U2F in browsers. - [ ] I used `--profile=PROFILENAME` to set the right profile. (Only relevant for AppImages) ### Log <details> <summary>Output of <code>LC_ALL=C firejail /path/to/program</code></summary> <p> ``` output goes here ``` </p> </details> <details> <summary>Output of <code>LC_ALL=C firejail --debug /path/to/program</code></summary> <p> ``` output goes here ``` </p> </details> ---- edit by @rusty-snake: code-blocks edit by @kmk3: move information out of html comments; fix formatting
Author
Owner

@kmk3 commented on GitHub (Oct 27, 2021):

@CocoR55 commented on Oct 25:

Description

Firefox doesn't work with Discord

Where is Firefox in all of this?

[...]

Behavior without a profile

What changed calling LC_ALL=C firejail --noprofile /path/to/program in a terminal?

$ LC_ALL=C firejail --noprofile /usr/bin/flatpak run --branch=stable --arch=x86_64 --command=discord com.discordapp.Discord
Parent pid 3767, child pid 3768
Child process initialized in 13.48 ms
bwrap: Can't mount proc on /newroot/proc: Operation not permitted

Parent is shutting down, bye...

From the man page:

Alternative sandbox technologies like snap (https://snapcraft.io/) and
flatpak (https://flatpak.org/) are not supported. Snap and flatpak packages
have their own native management tools and will not work when sandboxed with
Firejail.

<!-- gh-comment-id:952525707 --> @kmk3 commented on GitHub (Oct 27, 2021): @CocoR55 commented [on Oct 25](https://github.com/netblue30/firejail/issues/4641#issue-1034952748): > ### Description > > Firefox doesn't work with Discord Where is Firefox in all of this? [...] > ### Behavior without a profile > > _What changed calling `LC_ALL=C firejail --noprofile /path/to/program` in a terminal?_ > > ``` > $ LC_ALL=C firejail --noprofile /usr/bin/flatpak run --branch=stable --arch=x86_64 --command=discord com.discordapp.Discord > Parent pid 3767, child pid 3768 > Child process initialized in 13.48 ms > bwrap: Can't mount proc on /newroot/proc: Operation not permitted > > Parent is shutting down, bye... > ``` From the man page: > Alternative sandbox technologies like snap (https://snapcraft.io/) and > flatpak (https://flatpak.org/) are not supported. Snap and flatpak packages > have their own native management tools and will not work when sandboxed with > Firejail.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2734
No description provided.