mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #6782] foliate: cannot launch ebooks & GTK style is not followed #3370
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#3370
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @rsramkis on GitHub (Jun 17, 2025).
Original GitHub issue: https://github.com/netblue30/firejail/issues/6782
Description
I am unable to open ebooks in foliate with the default firejail profile on Arch Linux with Gnome 48 desktop.
Expected behavior
When Foliate opens I expect:
Actual behavior
Steps to Reproduce
After I launch the Foliate ebook reader (local Arch GTK application) with
firejail --noprofile foliate, the application looks like it has the correct styling. But I cannot open a book:Output from the terminal when I try to open book:
When I launch foliate from terminal you will see all the GTK styling disappear:
This is what the terminal shows:
From reviewing #6644, it appears there is mention of adding permissions for bubblewrap to allow for opening of ebooks. But it is not clear what I need to do to fix the issue.
Thank you.
Source:
Checklist
/usr/bin/vlc) "fixes" it).https://github.com/netblue30/firejail/issues/1139)browser-allow-drm yes/browser-disable-u2f noinfirejail.configto allow DRM/U2F in browsers.--profile=PROFILENAMEto set the right profile. (Only relevant for AppImages)@kmk3 commented on GitHub (Jun 17, 2025):
What happens without local modifications?
Is this a normal program or a flatpak?
What is the output of the following?
@amano-kenji
Considering #6582, can you reproduce these issues?
@rsramkis commented on GitHub (Jun 17, 2025):
https://archlinux.org/packages/extra/any/foliate/
The build of firejail from April 1, 2025 I am running already has the refactored changes mentioned for the files:
These are the changes:
Move everything into foliate.profile
Leave just private-bin com.github.johnfactotum.Foliate in
com.github.johnfactotum.Foliate.profile and make it be a redirect to
foliate.profile
Add private-bin foliate to foliate.profile
Add foliate to firecfg.config
@kmk3 commented on GitHub (Jun 18, 2025):
Make sure to run either just the program directly (
foliate) or use the fullprogram path (
firejail /usr/bin/foliate) to avoid firejail-in-firejail issues(see #2877).
Does it work with
--profile=noprofile?Example:
If not, then it might be the same problem as in #3647 and we should probably
drop it from firecfg.
Though maybe at least the theme issue can be fixed.
You can try commenting the lines in the profile until you find which ones are
causing this issue.
Looks good.
To be clear, I was asking @amano-kenji (as presumably another user of this
program, due to #6582) to see if the program works at least works on Gentoo
(see #6580).
@rsramkis commented on GitHub (Jun 18, 2025):
@rsramkis commented on GitHub (Jun 18, 2025):
Solution was to disable Foliate from being sandboxed by Firejail.
@amano-kenji commented on GitHub (Jun 18, 2025):
I still need
env WEBKIT_DISABLE_SANDBOX_THIS_IS_DANGEROUS=1in foliate.local to read ebooks in foliate.~/.local/bin/foliate launches foliate inside firejail.