[GH-ISSUE #4704] balena etcher profile #2756

Closed
opened 2026-05-05 09:25:09 -06:00 by gitea-mirror · 4 comments
Owner

Originally created by @Lonniebiz on GitHub (Nov 21, 2021).
Original GitHub issue: https://github.com/netblue30/firejail/issues/4704

I was surprised to not find a profile already written for Etcher, which is a popular AppImage that I see a lot of people recommending for the making of bootable USBs.

I read here that this lack of profile may be due to complications with pkexec.

I guess since Etcher actually writes images to USB drives, it is likely hard to contain it without disabling it completely?

Luckily, I came across a better solution after not finding a profile for Etcher: Ventoy. While there's no profile for Ventoy either, the cool thing about Ventoy, is that once you put it on a USB, you don't have to run Ventoy again for that USB; you can simply drag and drop another ISO onto that same USB and that's all that is needed. When you boot from it, it will show a list of all the images you've moved onto the drive and ask you which one you want to boot.

Still, it would be nice if Etcher had a profile. I'm still learning about profiles and am not yet ready to create my own.

Originally created by @Lonniebiz on GitHub (Nov 21, 2021). Original GitHub issue: https://github.com/netblue30/firejail/issues/4704 I was surprised to not find a profile already written for [Etcher](https://www.balena.io/etcher/), which is a popular AppImage that I see a lot of people recommending for the making of bootable USBs. I read [here](https://github.com/netblue30/firejail/issues/1471#issue-250495355) that this lack of profile may be due to complications with pkexec. I guess since Etcher actually writes images to USB drives, it is likely hard to contain it without disabling it completely? Luckily, I came across a better solution after not finding a profile for Etcher: [Ventoy](https://www.ventoy.net/). While there's no profile for Ventoy either, the cool thing about Ventoy, is that once you put it on a USB, you don't have to run Ventoy again for that USB; you can simply drag and drop another ISO onto that same USB and that's all that is needed. When you boot from it, it will show a list of all the images you've moved onto the drive and ask you which one you want to boot. Still, it would be nice if Etcher had a profile. I'm still learning about profiles and am not yet ready to create my own.
gitea-mirror 2026-05-05 09:25:09 -06:00
Author
Owner

@rusty-snake commented on GitHub (Nov 21, 2021):

I read here that this lack of profile may be do to complications with pkexec.

pkexec/sudo/su will never work for AIs.

<!-- gh-comment-id:974874535 --> @rusty-snake commented on GitHub (Nov 21, 2021): > I read here that this lack of profile may be do to complications with pkexec. `pkexec`/`sudo`/`su` will never work for AIs.
Author
Owner

@kmk3 commented on GitHub (Nov 24, 2021):

@Lonniebiz commented on Nov 21:

Still, it would be nice if Etcher had a profile. I'm still learning about
profiles and am not yet ready to create my own.

It might help to look through the profiles of similar programs (if any) and
also the profile templates:

<!-- gh-comment-id:978374588 --> @kmk3 commented on GitHub (Nov 24, 2021): @Lonniebiz commented [on Nov 21](https://github.com/netblue30/firejail/issues/4704#issue-1059456721): > Still, it would be nice if Etcher had a profile. I'm still learning about > profiles and am not yet ready to create my own. It might help to look through the profiles of similar programs (if any) and also the profile templates: * [profile.template](https://github.com/netblue30/firejail/blob/master/etc/templates/profile.template) * [redirect_alias-profile.template](https://github.com/netblue30/firejail/blob/master/etc/templates/redirect_alias-profile.template)
Author
Owner

@svc88 commented on GitHub (Mar 29, 2024):

im a bit confused, is this issue completed? as there is no profile for it. Since its nowhere to be found. Also its not under https://github.com/netblue30/firejail/issues/1139 either, as you mentioned that it it was mentioned there @rusty-snake

Does this work with pkexec or not?

pkexec/sudo/su will never work for AIs.

what do you mean by AI's ?

thanks in advance

<!-- gh-comment-id:2027778705 --> @svc88 commented on GitHub (Mar 29, 2024): im a bit confused, is this issue completed? as there is no profile for it. Since its nowhere to be found. Also its not under https://github.com/netblue30/firejail/issues/1139 either, as you mentioned that it it was mentioned there @rusty-snake Does this work with pkexec or not? > `pkexec`/`sudo`/`su` will never work for AIs. what do you mean by AI's ? thanks in advance
Author
Owner

@rusty-snake commented on GitHub (Mar 29, 2024):

Also its not under https://github.com/netblue30/firejail/issues/1139 either, as you mentioned that it it was mentioned there @rusty-snake

https://github.com/netblue30/firejail/issues/1139#issuecomment-974873801

And in OP:

  • etcher …

what do you mean by AI's ?

AppImage

<!-- gh-comment-id:2027789775 --> @rusty-snake commented on GitHub (Mar 29, 2024): > Also its not under https://github.com/netblue30/firejail/issues/1139 either, as you mentioned that it it was mentioned there @rusty-snake https://github.com/netblue30/firejail/issues/1139#issuecomment-974873801 And in OP: > - [ ] etcher … > what do you mean by AI's ? **A**pp**I**mage
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2756
No description provided.