[GH-ISSUE #407] Created firejail ansible playbook #294

Closed
opened 2026-05-05 05:32:29 -06:00 by gitea-mirror · 1 comment
Owner

Originally created by @ghost on GitHub (Apr 3, 2016).
Original GitHub issue: https://github.com/netblue30/firejail/issues/407

This playbook https://bitbucket.org/aaaaaaaaaaaaaaaaaaaaa1/ansible-firejail/overview will install firejail automatically on an ansible managed system. It could be improved by being yum/apt neutral.

It would be interesting to extend it such that it uses ansible's fact gathering mode to store a record of binaries syscall functions and use the stored facts to generate firejail profiles but that is more involved than what I have time for, hopefully someone else can take this up as a fun project!

Another advanced usage would be to use this for the basis of performing QA on firejail profiles on lists of programs that it is desired to jail. This can be achieved by using the result and register variables in ansible.

Originally created by @ghost on GitHub (Apr 3, 2016). Original GitHub issue: https://github.com/netblue30/firejail/issues/407 This playbook https://bitbucket.org/aaaaaaaaaaaaaaaaaaaaa1/ansible-firejail/overview will install firejail automatically on an ansible managed system. It could be improved by being yum/apt neutral. It would be interesting to extend it such that it uses ansible's fact gathering mode to store a record of binaries syscall functions and use the stored facts to generate firejail profiles but that is more involved than what I have time for, hopefully someone else can take this up as a fun project! Another advanced usage would be to use this for the basis of performing QA on firejail profiles on lists of programs that it is desired to jail. This can be achieved by using the result and register variables in ansible.
gitea-mirror 2026-05-05 05:32:29 -06:00
Author
Owner

@netblue30 commented on GitHub (Apr 3, 2016):

Thanks, I put a link to it on the main project site: https://firejail.wordpress.com/

<!-- gh-comment-id:205060638 --> @netblue30 commented on GitHub (Apr 3, 2016): Thanks, I put a link to it on the main project site: https://firejail.wordpress.com/
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#294
No description provided.