[GH-ISSUE #65] Copying Data out of Private Jails #34

New issue

Closed

opened 2026-05-05 04:49:29 -06:00 by gitea-mirror · 1 comment

gitea-mirror commented

2026-05-05 04:49:29 -06:00

Owner

Originally created by @pigmonkey on GitHub (Sep 22, 2015).
Original GitHub issue: https://github.com/netblue30/firejail/issues/65

I frequently use firejail --private chromium to launch a disposable Chromium session. Very rarely I find that I need to download a file and recover it from the private jail. Up till now this has only happened with text files, so I've been able to --join the jail, cat the file, and paste it into a file outside of the jail.

Is there any sort of canonical way to copy files from within a private jail (before the jail has closed)? It would be nice if I could to something like:

$ firejail --copy-from [pid of jail] --destination /home/user/ /path/to/file/within/jail

Originally created by @pigmonkey on GitHub (Sep 22, 2015). Original GitHub issue: https://github.com/netblue30/firejail/issues/65 I frequently use `firejail --private chromium` to launch a disposable Chromium session. Very rarely I find that I need to download a file and recover it from the private jail. Up till now this has only happened with text files, so I've been able to `--join` the jail, `cat` the file, and paste it into a file outside of the jail. Is there any sort of canonical way to copy files from within a private jail (before the jail has closed)? It would be nice if I could to something like: ``` $ firejail --copy-from [pid of jail] --destination /home/user/ /path/to/file/within/jail ```

gitea-mirror closed this issue

2026-05-05 04:49:32 -06:00

gitea-mirror commented

2026-05-05 04:49:36 -06:00

Author

Owner

@netblue30 commented on GitHub (Sep 23, 2015):

Unfortunately I cannot reliably detect when the sandbox is closed. The kernel can kill it at any time, or the admin will just do a "kill -9". In these cases I do a --join and copy the file under /tmp. I give the sandbox a name so I can join it easily. Example:

$ firejail --name=browser --private firefox
[...]

In another terminal:

$ firejail --join=browser
$ cp ~/Downloads/file /tmp/.

@netblue30 commented on GitHub (Sep 23, 2015): Unfortunately I cannot reliably detect when the sandbox is closed. The kernel can kill it at any time, or the admin will just do a "kill -9". In these cases I do a --join and copy the file under /tmp. I give the sandbox a name so I can join it easily. Example: ``` $ firejail --name=browser --private firefox [...] ``` In another terminal: ``` $ firejail --join=browser $ cp ~/Downloads/file /tmp/. ```

gitea-mirror referenced this issue

2026-05-05 10:02:56 -06:00

[PR #34] [MERGED] Fix the 'make install' command for new bash completion location #3518

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#34

No description provided.

Rows
Columns