github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #5746] php-fpm: no internet access (--noprofile) (resolv.conf) #3080

New issue

Closed

opened 2026-05-05 09:43:17 -06:00 by gitea-mirror · 5 comments

gitea-mirror commented

2026-05-05 09:43:17 -06:00

Owner

Originally created by @osevan on GitHub (Mar 21, 2023).
Original GitHub issue: https://github.com/netblue30/firejail/issues/5746

Im running in my test environment php-fpm inside my favourite fj container. Everything works great, except internet functionality of cms software like wordpress.

Even when i run with --noprofile flag internet connections for searching directory like for plugins didnt work.

Outside container everything works - even internet connection.

So i dunno what is wrong.

Apparmor ofc for this profile disabled, but i havent internet connection for both: with --noprofile flag AND with profile.

Hope someone can check this up.

Other containers have internet.

Thanks and

Best regards

Originally created by @osevan on GitHub (Mar 21, 2023). Original GitHub issue: https://github.com/netblue30/firejail/issues/5746 Im running in my test environment php-fpm inside my favourite fj container. Everything works great, except internet functionality of cms software like wordpress. Even when i run with --noprofile flag internet connections for searching directory like for plugins didnt work. Outside container everything works - even internet connection. So i dunno what is wrong. Apparmor ofc for this profile disabled, but i havent internet connection for both: with --noprofile flag AND with profile. Hope someone can check this up. Other containers have internet. Thanks and Best regards

gitea-mirror

2026-05-05 09:43:17 -06:00

closed this issue
added the
networking

notabug
labels

gitea-mirror commented

2026-05-05 09:43:21 -06:00

Author

Owner

@kmk3 commented on GitHub (Mar 21, 2023):

Basic debugging information is missing; please follow the bug report template:

https://github.com/netblue30/firejail/issues/new?template=bug_report.md

@kmk3 commented on GitHub (Mar 21, 2023): Basic debugging information is missing; please follow the bug report template: * <https://github.com/netblue30/firejail/issues/new?template=bug_report.md>

gitea-mirror commented

2026-05-05 09:43:21 -06:00

Author

Owner

@osevan commented on GitHub (Mar 21, 2023):

Debian bullseye
Firejail master branch from 30 days ago.

Application startpath /opt/php8.2/bin/php-fpm -nodaemonize and config file in as arguments

Both tested: with --noprofile and with profile. ..

Aplication starts well, but, no internet connection to outside - egress and ingres - traffic.

Outside container, with php-fpm apps accessing internet, works well.

Container running inside vps

@osevan commented on GitHub (Mar 21, 2023): Debian bullseye Firejail master branch from 30 days ago. Application startpath /opt/php8.2/bin/php-fpm -nodaemonize and config file in as arguments Both tested: with --noprofile and with profile. .. Aplication starts well, but, no internet connection to outside - egress and ingres - traffic. Outside container, with php-fpm apps accessing internet, works well. Container running inside vps

gitea-mirror commented

2026-05-05 09:43:23 -06:00

Author

Owner

@osevan commented on GitHub (Mar 23, 2023):

I see now, etc/resolv.conf is flagged as default as blacklist.

I did whitelist resolv.conf and added new dns inside config and my Problem gone.

Thanks and

Best regards

@osevan commented on GitHub (Mar 23, 2023): I see now, etc/resolv.conf is flagged as default as blacklist. I did whitelist resolv.conf and added new dns inside config and my Problem gone. Thanks and Best regards

gitea-mirror commented

2026-05-05 09:43:24 -06:00

Author

Owner

@kmk3 commented on GitHub (Mar 23, 2023):

(Re-closing as "not planned" since nothing was changed in firejail)

@kmk3 commented on GitHub (Mar 23, 2023): (Re-closing as "not planned" since nothing was changed in firejail)

gitea-mirror commented

2026-05-05 09:43:24 -06:00

Author

Owner

@osevan commented on GitHub (Mar 23, 2023):

I see now, etc/resolv.conf is flagged as default as blacklist.

I did whitelist resolv.conf and added new dns inside config and my Problem gone.

Thanks and

Best regards

@osevan commented on GitHub (Mar 23, 2023): I see now, etc/resolv.conf is flagged as default as blacklist. I did whitelist resolv.conf and added new dns inside config and my Problem gone. Thanks and Best regards

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#3080

No description provided.

Rows
Columns