xkb #3404

New issue

Closed

opened 2026-05-05 09:58:07 -06:00 by gitea-mirror · 1 comment

gitea-mirror commented

2026-05-05 09:58:07 -06:00

Owner

Originally created by @tools200ms on GitHub (Aug 25, 2025).
Original GitHub issue: https://github.com/netblue30/firejail/issues/6880

Description

Firefox fails to launch in Firejail, the error message is:

xkbcommon: ERROR: failed to add default include path /usr/share/X11/xkb

Steps to Reproduce

Always fails, Firejail version: 0.9.74
I run it in Wayland environment.

Expected behavior

Firefox to be launched.

Actual behavior

Firefox fails.

Behavior without a profile

Works fine

Additional context

I fixed it by adding to firefox-common.profile the following line:

whitelist /usr/share/X11/xkb

Environment

$ uname -srm
Linux 6.12.34-gentoo-dist x86_64

Firefox version:

Mozilla Firefox 128.14.0esr

Checklist

[X ] The issues is caused by firejail (i.e. running the program by path (e.g. /usr/bin/vlc) "fixes" it).
[ X] I can reproduce the issue without custom modifications (e.g. globals.local).
[X ] The program has a profile. (If not, request one in https://github.com/netblue30/firejail/issues/1139)
The profile (and redirect profile if exists) hasn't already been fixed upstream.
[X ] I have performed a short search for similar issues (to avoid opening a duplicate).
- I'm aware of browser-allow-drm yes/browser-disable-u2f no in firejail.config to allow DRM/U2F in browsers.
I used --profile=PROFILENAME to set the right profile. (Only relevant for AppImages)

Log

Output for firejail firefox:

Reading profile /etc/firejail/firefox.profile
Reading profile /etc/firejail/firefox-common.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-exec.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-proc.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-run-common.inc
Reading profile /etc/firejail/whitelist-runuser-common.inc
Reading profile /etc/firejail/whitelist-usr-share-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
firejail version 0.9.74

Seccomp list in: !chroot, check list: @default-keep, prelist: unknown,
Parent pid 8427, child pid 8431
Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set.
Private /etc installed in 35.46 ms
Warning: /sbin directory link was not blacklisted
Warning: /usr/sbin directory link was not blacklisted
Base filesystem installed in 116.66 ms
Seccomp list in: !chroot, check list: @default-keep, prelist: unknown,
Child process initialized in 207.64 ms
xkbcommon: ERROR: failed to add default include path /usr/share/X11/xkb
xkbcommon: ERROR: failed to add default include path /usr/share/X11/xkb

Parent is shutting down, bye...

Originally created by @tools200ms on GitHub (Aug 25, 2025). Original GitHub issue: https://github.com/netblue30/firejail/issues/6880 ### Description Firefox fails to launch in Firejail, the error message is: > xkbcommon: ERROR: failed to add default include path /usr/share/X11/xkb ### Steps to Reproduce Always fails, Firejail version: 0.9.74 I run it in Wayland environment. ### Expected behavior Firefox to be launched. ### Actual behavior Firefox fails. ### Behavior without a profile Works fine ### Additional context I fixed it by adding to firefox-common.profile the following line: > whitelist /usr/share/X11/xkb ### Environment ``` $ uname -srm Linux 6.12.34-gentoo-dist x86_64 ``` Firefox version: Mozilla Firefox 128.14.0esr ### Checklist - [X ] The issues is caused by firejail (i.e. running the program by path (e.g. `/usr/bin/vlc`) "fixes" it). - [ X] I can reproduce the issue without custom modifications (e.g. globals.local). - [X ] The program has a profile. (If not, request one in `https://github.com/netblue30/firejail/issues/1139`) - [ ] The profile (and redirect profile if exists) hasn't already been fixed [upstream](https://github.com/netblue30/firejail/tree/master/etc). - [X ] I have performed a short search for similar issues (to avoid opening a duplicate). - [ ] I'm aware of `browser-allow-drm yes`/`browser-disable-u2f no` in `firejail.config` to allow DRM/U2F in browsers. - [ ] I used `--profile=PROFILENAME` to set the right profile. (Only relevant for AppImages) ### Log Output for `firejail firefox`: ``` Reading profile /etc/firejail/firefox.profile Reading profile /etc/firejail/firefox-common.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-devel.inc Reading profile /etc/firejail/disable-exec.inc Reading profile /etc/firejail/disable-interpreters.inc Reading profile /etc/firejail/disable-proc.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/whitelist-common.inc Reading profile /etc/firejail/whitelist-run-common.inc Reading profile /etc/firejail/whitelist-runuser-common.inc Reading profile /etc/firejail/whitelist-usr-share-common.inc Reading profile /etc/firejail/whitelist-var-common.inc firejail version 0.9.74 Seccomp list in: !chroot, check list: @default-keep, prelist: unknown, Parent pid 8427, child pid 8431 Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set. Private /etc installed in 35.46 ms Warning: /sbin directory link was not blacklisted Warning: /usr/sbin directory link was not blacklisted Base filesystem installed in 116.66 ms Seccomp list in: !chroot, check list: @default-keep, prelist: unknown, Child process initialized in 207.64 ms xkbcommon: ERROR: failed to add default include path /usr/share/X11/xkb xkbcommon: ERROR: failed to add default include path /usr/share/X11/xkb Parent is shutting down, bye... ```