[GH-ISSUE #7097] fractal: cannot view multimedia due to glycin/bwrap #3485

New issue

Closed

opened 2026-05-05 10:01:40 -06:00 by gitea-mirror · 2 comments

gitea-mirror commented

2026-05-05 10:01:40 -06:00

Owner

Originally created by @reagentoo on GitHub (Mar 9, 2026).
Original GitHub issue: https://github.com/netblue30/firejail/issues/7097

The current state fractal.profile does not allow to view multimedia content:

$ firejail fractal
Reading profile /home/user/.config/firejail/fractal.profile
Reading profile /etc/firejail/allow-python2.inc
Reading profile /etc/firejail/allow-python3.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-runuser-common.inc
Reading profile /etc/firejail/whitelist-usr-share-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
firejail version 0.9.76

Parent pid 105762, child pid 105766
Warning: cannot open source file /usr/lib64/firejail/seccomp.debug32, file not copied
1 program installed in 146.41 ms
Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set.
Warning fcopy: cannot create symbolic link /etc/X11/startDM.sh
Private /etc installed in 34.62 ms
Base filesystem installed in 1.09 ms
Child process initialized in 221.17 ms
2026-03-09T19:00:51.229399Z  INFO fractal::application: Fractal (org.gnome.Fractal)
2026-03-09T19:00:51.229432Z  INFO fractal::application: Version: 13 (stable)
2026-03-09T19:00:51.229438Z  INFO fractal::application: Datadir: /usr/share/fractal
WARNING: radv is not a conformant Vulkan implementation, testing use only.
2026-03-09T19:00:51.670622Z  INFO fractal::session_list::imp: Restoring previous session diTFgga9 for user @reagent00:matrix.wl2.ru
2026-03-09T19:00:51.866872Z  INFO fractal::session::imp: Homeserver is reachable session="diTFgga9"
2026-03-09T19:00:54.997394Z  WARN matrix_sdk_crypto::machine: Failed to decrypt a room event: The message was encrypted using an unknown message index, first known index 1, index of the message 0
2026-03-09T19:00:55.038845Z  WARN matrix_sdk_crypto::machine: Failed to decrypt a room event: The message was encrypted using an unknown message index, first known index 1, index of the message 0
2026-03-09T19:00:55.044644Z  WARN matrix_sdk_ui::timeline::event_handler: discarding aggregations: trying to apply an aggregation of one type to an invalid target: expected a poll, actual an encrypted message we couldn't decrypt
2026-03-09T19:00:55.187844Z  WARN fractal::utils::media::image: Could not decode image: Could not spawn the following command. Is the used binary available? `"bwrap" "--unshare-all" "--die-with-parent" "--chdir" "/" "--ro-bind" "/usr" "/usr" "--dev" "/dev" "--ro-bind-try" "/etc/ld.so.cache" "/etc/ld.so.cache" "--ro-bind-try" "/nix/store" "/nix/store" "--tmpfs" "/tmp-home" "--tmpfs" "/tmp-run" "--clearenv" "--setenv" "HOME" "/tmp-home" "--setenv" "XDG_RUNTIME_DIR" "/tmp-run" "--setenv" "XDG_RUNTIME_DIR" "/run/user/1000" "--ro-bind" "/lib64" "/lib64" "--ro-bind" "/lib" "/lib" "--seccomp" "97" "/usr/libexec/glycin-loaders/2+/glycin-image-rs" "--dbus-fd" "96"`: Нет такого файла или каталога (os error 2)
2026-03-09T19:00:55.199107Z  WARN fractal::utils::media::image: Could not decode image: Could not spawn the following command. Is the used binary available? `"bwrap" "--unshare-all" "--die-with-parent" "--chdir" "/" "--ro-bind" "/usr" "/usr" "--dev" "/dev" "--ro-bind-try" "/etc/ld.so.cache" "/etc/ld.so.cache" "--ro-bind-try" "/nix/store" "/nix/store" "--tmpfs" "/tmp-home" "--tmpfs" "/tmp-run" "--clearenv" "--setenv" "HOME" "/tmp-home" "--setenv" "XDG_RUNTIME_DIR" "/tmp-run" "--setenv" "XDG_RUNTIME_DIR" "/run/user/1000" "--ro-bind" "/lib64" "/lib64" "--ro-bind" "/lib" "/lib" "--seccomp" "97" "/usr/libexec/glycin-loaders/2+/glycin-image-rs" "--dbus-fd" "96"`: Нет такого файла или каталога (os error 2)
2026-03-09T19:00:55.209994Z  WARN fractal::utils::media::image: Could not decode image: Could not spawn the following command. Is the used binary available? `"bwrap" "--unshare-all" "--die-with-parent" "--chdir" "/" "--ro-bind" "/usr" "/usr" "--dev" "/dev" "--ro-bind-try" "/etc/ld.so.cache" "/etc/ld.so.cache" "--ro-bind-try" "/nix/store" "/nix/store" "--tmpfs" "/tmp-home" "--tmpfs" "/tmp-run" "--clearenv" "--setenv" "HOME" "/tmp-home" "--setenv" "XDG_RUNTIME_DIR" "/tmp-run" "--setenv" "XDG_RUNTIME_DIR" "/run/user/1000" "--ro-bind" "/lib64" "/lib64" "--ro-bind" "/lib" "/lib" "--seccomp" "98" "/usr/libexec/glycin-loaders/2+/glycin-image-rs" "--dbus-fd" "97"`: Нет такого файла или каталога (os error 2)

Originally created by @reagentoo on GitHub (Mar 9, 2026). Original GitHub issue: https://github.com/netblue30/firejail/issues/7097 The current state fractal.profile does not allow to view multimedia content: ``` $ firejail fractal Reading profile /home/user/.config/firejail/fractal.profile Reading profile /etc/firejail/allow-python2.inc Reading profile /etc/firejail/allow-python3.inc Reading profile /etc/firejail/whitelist-common.inc Reading profile /etc/firejail/whitelist-runuser-common.inc Reading profile /etc/firejail/whitelist-usr-share-common.inc Reading profile /etc/firejail/whitelist-var-common.inc firejail version 0.9.76 Parent pid 105762, child pid 105766 Warning: cannot open source file /usr/lib64/firejail/seccomp.debug32, file not copied 1 program installed in 146.41 ms Warning: An abstract unix socket for session D-BUS might still be available. Use --net or remove unix from --protocol set. Warning fcopy: cannot create symbolic link /etc/X11/startDM.sh Private /etc installed in 34.62 ms Base filesystem installed in 1.09 ms Child process initialized in 221.17 ms 2026-03-09T19:00:51.229399Z INFO fractal::application: Fractal (org.gnome.Fractal) 2026-03-09T19:00:51.229432Z INFO fractal::application: Version: 13 (stable) 2026-03-09T19:00:51.229438Z INFO fractal::application: Datadir: /usr/share/fractal WARNING: radv is not a conformant Vulkan implementation, testing use only. 2026-03-09T19:00:51.670622Z INFO fractal::session_list::imp: Restoring previous session diTFgga9 for user @reagent00:matrix.wl2.ru 2026-03-09T19:00:51.866872Z INFO fractal::session::imp: Homeserver is reachable session="diTFgga9" 2026-03-09T19:00:54.997394Z WARN matrix_sdk_crypto::machine: Failed to decrypt a room event: The message was encrypted using an unknown message index, first known index 1, index of the message 0 2026-03-09T19:00:55.038845Z WARN matrix_sdk_crypto::machine: Failed to decrypt a room event: The message was encrypted using an unknown message index, first known index 1, index of the message 0 2026-03-09T19:00:55.044644Z WARN matrix_sdk_ui::timeline::event_handler: discarding aggregations: trying to apply an aggregation of one type to an invalid target: expected a poll, actual an encrypted message we couldn't decrypt 2026-03-09T19:00:55.187844Z WARN fractal::utils::media::image: Could not decode image: Could not spawn the following command. Is the used binary available? `"bwrap" "--unshare-all" "--die-with-parent" "--chdir" "/" "--ro-bind" "/usr" "/usr" "--dev" "/dev" "--ro-bind-try" "/etc/ld.so.cache" "/etc/ld.so.cache" "--ro-bind-try" "/nix/store" "/nix/store" "--tmpfs" "/tmp-home" "--tmpfs" "/tmp-run" "--clearenv" "--setenv" "HOME" "/tmp-home" "--setenv" "XDG_RUNTIME_DIR" "/tmp-run" "--setenv" "XDG_RUNTIME_DIR" "/run/user/1000" "--ro-bind" "/lib64" "/lib64" "--ro-bind" "/lib" "/lib" "--seccomp" "97" "/usr/libexec/glycin-loaders/2+/glycin-image-rs" "--dbus-fd" "96"`: Нет такого файла или каталога (os error 2) 2026-03-09T19:00:55.199107Z WARN fractal::utils::media::image: Could not decode image: Could not spawn the following command. Is the used binary available? `"bwrap" "--unshare-all" "--die-with-parent" "--chdir" "/" "--ro-bind" "/usr" "/usr" "--dev" "/dev" "--ro-bind-try" "/etc/ld.so.cache" "/etc/ld.so.cache" "--ro-bind-try" "/nix/store" "/nix/store" "--tmpfs" "/tmp-home" "--tmpfs" "/tmp-run" "--clearenv" "--setenv" "HOME" "/tmp-home" "--setenv" "XDG_RUNTIME_DIR" "/tmp-run" "--setenv" "XDG_RUNTIME_DIR" "/run/user/1000" "--ro-bind" "/lib64" "/lib64" "--ro-bind" "/lib" "/lib" "--seccomp" "97" "/usr/libexec/glycin-loaders/2+/glycin-image-rs" "--dbus-fd" "96"`: Нет такого файла или каталога (os error 2) 2026-03-09T19:00:55.209994Z WARN fractal::utils::media::image: Could not decode image: Could not spawn the following command. Is the used binary available? `"bwrap" "--unshare-all" "--die-with-parent" "--chdir" "/" "--ro-bind" "/usr" "/usr" "--dev" "/dev" "--ro-bind-try" "/etc/ld.so.cache" "/etc/ld.so.cache" "--ro-bind-try" "/nix/store" "/nix/store" "--tmpfs" "/tmp-home" "--tmpfs" "/tmp-run" "--clearenv" "--setenv" "HOME" "/tmp-home" "--setenv" "XDG_RUNTIME_DIR" "/tmp-run" "--setenv" "XDG_RUNTIME_DIR" "/run/user/1000" "--ro-bind" "/lib64" "/lib64" "--ro-bind" "/lib" "/lib" "--seccomp" "98" "/usr/libexec/glycin-loaders/2+/glycin-image-rs" "--dbus-fd" "97"`: Нет такого файла или каталога (os error 2) ```

gitea-mirror

2026-05-05 10:01:40 -06:00

closed this issue
added the
duplicate

needinfo

old-version
labels

gitea-mirror commented

2026-05-05 10:01:43 -06:00

Author

Owner

@kmk3 commented on GitHub (Mar 10, 2026):

Basic debugging information is missing; please follow the bug report template:

https://github.com/netblue30/firejail/issues/new?template=bug_report.md

@kmk3 commented on GitHub (Mar 10, 2026): Basic debugging information is missing; please follow the bug report template: * <https://github.com/netblue30/firejail/issues/new?template=bug_report.md>

gitea-mirror commented

2026-05-05 10:01:44 -06:00

Author

Owner

@kmk3 commented on GitHub (Mar 10, 2026):

firejail version 0.9.76

Note that we do not maintain that version of firejail:

https://github.com/netblue30/firejail/blob/master/SECURITY.md

Versions other than the latest usually have outdated profiles and may contain
bugs and security vulnerabilities that were fixed in later versions.

Rows
Columns