github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #5524] “Error fbuilder: invalid program” when using --build #3022

New issue

Open

opened 2026-05-05 09:40:30 -06:00 by gitea-mirror · 3 comments

gitea-mirror commented

2026-05-05 09:40:30 -06:00

Owner

Originally created by @bruceleerabbit on GitHub (Dec 14, 2022).
Original GitHub issue: https://github.com/netblue30/firejail/issues/5524

Description

Running an app installer but there is no profile for the installer (nor for the app itself). Ran:

$ LC_ALL=C firejail --build=kalium.profile --net=vnet0 --dns=$mydns --env=XDG_CONFIG_HOME="${myconfig_dir}" /usr/local/src/kalium/gradlew jvmTest

Output:

Error fbuilder: invalid program
Firejail profile builder
Usage: firejail [--debug] --build[=profile-file] program-and-arguments

Omitting “--build=kalium.profile” is syntactically accepted, but it craps out with lots of other errors.

Steps to Reproduce

See https://github.com/wireapp/kalium/issues/1230

Expected behavior

FJ is expected to execute permissively in order to build a custom profile.

Actual behavior

“invalid program” error.

Behavior without a profile

Including --noprofile changes nothing.

Environment

Debian stable.
firejail version 0.9.64.4

Checklist

The issues is caused by firejail (i.e. running the program by path (e.g. /usr/bin/vlc) "fixes" it). UNTESTED (unsafe to run outside of firejail)
I can reproduce the issue without custom modifications (e.g. globals.local).
The program has a profile. (If not, request one in https://github.com/netblue30/firejail/issues/1139)
The profile (and redirect profile if exists) hasn't already been fixed upstream.
I have performed a short search for similar issues (to avoid opening a duplicate).
- I'm aware of browser-allow-drm yes/browser-disable-u2f no in firejail.config to allow DRM/U2F in browsers.
I used --profile=PROFILENAME to set the right profile. (Only relevant for AppImages)

Log

Output of LC_ALL=C firejail /path/to/program

Error fbuilder: invalid program
Firejail profile builder
Usage: firejail [--debug] --build[=profile-file] program-and-arguments

Output of LC_ALL=C firejail --debug /path/to/program

Error fbuilder: invalid program
Firejail profile builder
Usage: firejail [--debug] --build[=profile-file] program-and-arguments

Originally created by @bruceleerabbit on GitHub (Dec 14, 2022). Original GitHub issue: https://github.com/netblue30/firejail/issues/5524 ### Description Running an app installer but there is no profile for the installer (nor for the app itself). Ran: ``` $ LC_ALL=C firejail --build=kalium.profile --net=vnet0 --dns=$mydns --env=XDG_CONFIG_HOME="${myconfig_dir}" /usr/local/src/kalium/gradlew jvmTest ``` Output: ``` Error fbuilder: invalid program Firejail profile builder Usage: firejail [--debug] --build[=profile-file] program-and-arguments ``` Omitting “--build=kalium.profile” is syntactically accepted, but it craps out with lots of other errors. ### Steps to Reproduce See https://github.com/wireapp/kalium/issues/1230 ### Expected behavior FJ is expected to execute permissively in order to build a custom profile. ### Actual behavior “invalid program” error. ### Behavior without a profile Including `--noprofile` changes nothing. ### Environment Debian stable. firejail version 0.9.64.4 ### Checklist  - [ ] The issues is caused by firejail (i.e. running the program by path (e.g. `/usr/bin/vlc`) "fixes" it). UNTESTED (unsafe to run outside of firejail) - [x] I can reproduce the issue without custom modifications (e.g. globals.local). - [ ] The program has a profile. (If not, request one in `https://github.com/netblue30/firejail/issues/1139`) - [ ] The profile (and redirect profile if exists) hasn't already been fixed [upstream](https://github.com/netblue30/firejail/tree/master/etc). - [x] I have performed a short search for similar issues (to avoid opening a duplicate). - [ ] I'm aware of `browser-allow-drm yes`/`browser-disable-u2f no` in `firejail.config` to allow DRM/U2F in browsers. - [ ] I used `--profile=PROFILENAME` to set the right profile. (Only relevant for AppImages) ### Log <details> <summary>Output of <code>LC_ALL=C firejail /path/to/program</code></summary> <p> ``` Error fbuilder: invalid program Firejail profile builder Usage: firejail [--debug] --build[=profile-file] program-and-arguments ``` </p> </details> <details> <summary>Output of <code>LC_ALL=C firejail --debug /path/to/program</code></summary> <p>  ``` Error fbuilder: invalid program Firejail profile builder Usage: firejail [--debug] --build[=profile-file] program-and-arguments ``` </p> </details>

gitea-mirror added the

bug

label 2026-05-05 09:40:30 -06:00

gitea-mirror commented

2026-05-05 09:40:32 -06:00

Author

Owner

@kmk3 commented on GitHub (Dec 14, 2022):

@bruceleerabbit on Dec 14:

Debian stable.

firejail version 0.9.64.4

Note that we do not maintain that version:

https://github.com/netblue30/firejail/blob/master/SECURITY.md

See also:

https://github.com/netblue30/firejail#installing

What happens with the latest released firejail version (0.9.70)?

@kmk3 commented on GitHub (Dec 14, 2022): @bruceleerabbit [on Dec 14](https://github.com/netblue30/firejail/issues/5524#issue-1495570020): > Debian stable. > > firejail version 0.9.64.4 Note that we do not maintain that version: * <https://github.com/netblue30/firejail/blob/master/SECURITY.md> See also: * <https://github.com/netblue30/firejail#installing> What happens with the latest released firejail version (0.9.70)?

gitea-mirror commented

2026-05-05 09:40:33 -06:00

Author

Owner

@rusty-snake commented on GitHub (Dec 14, 2022):

I guess fbuilder fails to start --net=vnet0.

@rusty-snake commented on GitHub (Dec 14, 2022): I guess fbuilder fails to start `--net=vnet0`.

gitea-mirror commented

2026-05-05 09:40:34 -06:00

Author

Owner

@reinerh commented on GitHub (Jan 7, 2023):

The reason is that when --build is specified, all other args are getting passed to fbuilder, which thinks that --foo is a program to run.

@reinerh commented on GitHub (Jan 7, 2023): The reason is that when `--build` is specified, all other args are getting passed to `fbuilder`, which thinks that `--foo` is a program to run.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#3022

No description provided.

Rows
Columns