github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #6465] flameshot: MESA: error: Failed to query drm device (intel/no3d) #3283

New issue

Open

opened 2026-05-05 09:53:22 -06:00 by gitea-mirror · 3 comments

gitea-mirror commented

2026-05-05 09:53:22 -06:00

Owner

Originally created by @Dieterbe on GitHub (Sep 8, 2024).
Original GitHub issue: https://github.com/netblue30/firejail/issues/6465

Description

flameshot doesn't seem to start under firejail. although i think it may create an invisible task applet icon which doesn't respond to clicks.

Steps to Reproduce

~ ❯❯❯ LC_ALL=C firejail /usr/bin/flameshot
Could not create AF_NETLINK socket (Operation not supported)
Could not create AF_NETLINK socket (Operation not supported)
Could not create AF_NETLINK socket (Operation not supported)
Could not create AF_NETLINK socket (Operation not supported)
Could not create AF_NETLINK socket (Operation not supported)
MESA: error: Failed to query drm device.
glx: failed to create dri3 screen
failed to load driver: iris
failed to open /dev/dri/card1: No such file or directory
failed to load driver: iris
Could not create AF_NETLINK socket (Operation not supported)
Could not create AF_NETLINK socket (Operation not supported)

Behavior without a profile

~ ❯❯❯ LC_ALL=C firejail --noprofile /usr/bin/flameshot
firejail version 0.9.73

Parent pid 22504, child pid 22505
Base filesystem installed in 0.03 ms
Child process initialized in 11.18 ms

now the app works fine. applet icon shows and responds and the app takes screenshots

Environment

I use arch, btw

~ ❯❯❯ uname -a
Linux xps17 6.10.6-arch1-1 #1 SMP PREEMPT_DYNAMIC Mon, 19 Aug 2024 17:02:39 +0000 x86_64 GNU/Linux
~ ❯❯❯ firejail --version
firejail version 0.9.73

Compile time support:
	- always force nonewprivs support is disabled
	- AppArmor support is enabled
	- AppImage support is enabled
	- chroot support is enabled
	- D-BUS proxy support is enabled
	- file transfer support is enabled
	- IDS support is disabled
	- Landlock support is enabled
	- networking support is enabled
	- output logging is enabled
	- overlayfs support is disabled
	- private-home support is enabled
	- private-lib support is disabled
	- private-cache and tmpfs as user enabled
	- SELinux support is disabled
	- user namespace support is enabled
	- X11 sandboxing support is enabled

Linux distribution and version (e.g. "Ubuntu 20.04" or "Arch Linux")
Firejail version (firejail --version).
If you use a development version of firejail, also the commit from which it
was compiled (git rev-parse HEAD).

Checklist

The issues is caused by firejail (i.e. running the program by path (e.g. /usr/bin/vlc) "fixes" it).
I can reproduce the issue without custom modifications (e.g. globals.local).
The program has a profile. (If not, request one in https://github.com/netblue30/firejail/issues/1139)
The profile (and redirect profile if exists) hasn't already been fixed upstream.
I have performed a short search for similar issues (to avoid opening a duplicate).
- I'm aware of browser-allow-drm yes/browser-disable-u2f no in firejail.config to allow DRM/U2F in browsers.
I used --profile=PROFILENAME to set the right profile. (Only relevant for AppImages)

Log

Output of LC_ALL=C firejail --debug /path/to/program

hmm this shows a lot of stuff from my system. is this necessary?

Originally created by @Dieterbe on GitHub (Sep 8, 2024). Original GitHub issue: https://github.com/netblue30/firejail/issues/6465 ### Description flameshot doesn't seem to start under firejail. although i think it may create an invisible task applet icon which doesn't respond to clicks. ### Steps to Reproduce ``` ~ ❯❯❯ LC_ALL=C firejail /usr/bin/flameshot Could not create AF_NETLINK socket (Operation not supported) Could not create AF_NETLINK socket (Operation not supported) Could not create AF_NETLINK socket (Operation not supported) Could not create AF_NETLINK socket (Operation not supported) Could not create AF_NETLINK socket (Operation not supported) MESA: error: Failed to query drm device. glx: failed to create dri3 screen failed to load driver: iris failed to open /dev/dri/card1: No such file or directory failed to load driver: iris Could not create AF_NETLINK socket (Operation not supported) Could not create AF_NETLINK socket (Operation not supported) ``` ### Behavior without a profile ``` ~ ❯❯❯ LC_ALL=C firejail --noprofile /usr/bin/flameshot firejail version 0.9.73 Parent pid 22504, child pid 22505 Base filesystem installed in 0.03 ms Child process initialized in 11.18 ms ``` now the app works fine. applet icon shows and responds and the app takes screenshots ### Environment I use arch, btw ``` ~ ❯❯❯ uname -a Linux xps17 6.10.6-arch1-1 #1 SMP PREEMPT_DYNAMIC Mon, 19 Aug 2024 17:02:39 +0000 x86_64 GNU/Linux ~ ❯❯❯ firejail --version firejail version 0.9.73 Compile time support: - always force nonewprivs support is disabled - AppArmor support is enabled - AppImage support is enabled - chroot support is enabled - D-BUS proxy support is enabled - file transfer support is enabled - IDS support is disabled - Landlock support is enabled - networking support is enabled - output logging is enabled - overlayfs support is disabled - private-home support is enabled - private-lib support is disabled - private-cache and tmpfs as user enabled - SELinux support is disabled - user namespace support is enabled - X11 sandboxing support is enabled ``` - Linux distribution and version (e.g. "Ubuntu 20.04" or "Arch Linux") - Firejail version (`firejail --version`). - If you use a development version of firejail, also the commit from which it was compiled (`git rev-parse HEAD`). ### Checklist  - [x] The issues is caused by firejail (i.e. running the program by path (e.g. `/usr/bin/vlc`) "fixes" it). - [x] I can reproduce the issue without custom modifications (e.g. globals.local). - [x] The program has a profile. (If not, request one in `https://github.com/netblue30/firejail/issues/1139`) - [x] The profile (and redirect profile if exists) hasn't already been fixed [upstream](https://github.com/netblue30/firejail/tree/master/etc). - [x] I have performed a short search for similar issues (to avoid opening a duplicate). - [ ] I'm aware of `browser-allow-drm yes`/`browser-disable-u2f no` in `firejail.config` to allow DRM/U2F in browsers. - [ ] I used `--profile=PROFILENAME` to set the right profile. (Only relevant for AppImages) ### Log <details> <summary>Output of <code>LC_ALL=C firejail --debug /path/to/program</code></summary> <p>  ``` hmm this shows a lot of stuff from my system. is this necessary? ``` </p> </details>

gitea-mirror added the

graphics

notourbug

labels 2026-05-05 09:53:22 -06:00

gitea-mirror commented

2026-05-05 09:53:23 -06:00

Author

Owner

@rusty-snake commented on GitHub (Sep 8, 2024):

Related/Duplicated:

#6464

TL;DR: ignore no3d

I guess there was some recent mesa update breaking software fallback on iris systems.

@rusty-snake commented on GitHub (Sep 8, 2024): Related/Duplicated: * #6464 TL;DR: `ignore no3d` --- I guess there was some recent mesa update breaking software fallback on iris systems.

gitea-mirror commented

2026-05-05 09:53:24 -06:00

Author

Owner

@Dieterbe commented on GitHub (Sep 8, 2024):

bingo, added that in a new .config/firejail/flameshot.local file and that fixes it.

@Dieterbe commented on GitHub (Sep 8, 2024): bingo, added that in a new .config/firejail/flameshot.local file and that fixes it.

gitea-mirror commented

2026-05-05 09:53:26 -06:00

Author

Owner

@kmk3 commented on GitHub (Sep 8, 2024):

@Dieterbe

As mentioned, this issue seems to affect multiple programs.

I'd expect most programs to just fallback to CPU rendering and work normally
when a GPU is not available.

Please consider reporting this to mesa and linking it here.

@kmk3 commented on GitHub (Sep 8, 2024): @Dieterbe As mentioned, this issue seems to affect multiple programs. I'd expect most programs to just fallback to CPU rendering and work normally when a GPU is not available. Please consider reporting this to mesa and linking it here.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#3283

No description provided.

Rows
Columns