github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #7138] Support wireguard adapters for --net option #3500

New issue

Open

opened 2026-05-05 10:02:08 -06:00 by gitea-mirror · 2 comments

gitea-mirror commented

2026-05-05 10:02:08 -06:00

Owner

Originally created by @sofoxe1 on GitHub (Apr 15, 2026).
Original GitHub issue: https://github.com/netblue30/firejail/issues/7138

Describe the solution you'd like

i would like to be able to run firejail --net=wg0 bash and have a shell with only access to vpn network

Describe alternatives you've considered

this can be already achieved with netfilter, --net=eth and creating the vpn connection inside the sandbox

Additional context

currently it fails with

firejail --noprofile --net=wg0
firejail version 0.9.80

Parent pid 304516, child pid 304517
RTNETLINK answers: Invalid argument
Error: failed to run /usr/lib64/firejail/fnet: exit status 2, exiting...
Error: ../../src/fnet/interface.c:100: net_if_up: ioctl: No such device
Error: failed to run /run/firejail/lib/fnet: exit status 1, exiting...
Error: proc 304516 cannot sync with peer: unexpected EOF
Peer 304517 unexpectedly exited with status 1

Environment

Name/version/arch of the Linux kernel (uname -srm): Linux 6.19.11-1-default x86_64
Name/version of the Linux distribution (e.g. "Ubuntu 20.04" or "Arch Linux"): Opensuse Tumbleweed
Version of Firejail (firejail --version): 0.9.80
If you use a development version of firejail, also the commit from which it:
was compiled (git rev-parse HEAD):

Originally created by @sofoxe1 on GitHub (Apr 15, 2026). Original GitHub issue: https://github.com/netblue30/firejail/issues/7138 ### Is your feature request related to a problem? Please describe. - ### Describe the solution you'd like i would like to be able to run `firejail --net=wg0 bash` and have a shell with only access to vpn network ### Describe alternatives you've considered this can be already achieved with netfilter, --net=eth and creating the vpn connection inside the sandbox ### Additional context currently it fails with ``` firejail --noprofile --net=wg0 firejail version 0.9.80 Parent pid 304516, child pid 304517 RTNETLINK answers: Invalid argument Error: failed to run /usr/lib64/firejail/fnet: exit status 2, exiting... Error: ../../src/fnet/interface.c:100: net_if_up: ioctl: No such device Error: failed to run /run/firejail/lib/fnet: exit status 1, exiting... Error: proc 304516 cannot sync with peer: unexpected EOF Peer 304517 unexpectedly exited with status 1 ``` ### Environment - Name/version/arch of the Linux kernel (`uname -srm`): Linux 6.19.11-1-default x86_64 - Name/version of the Linux distribution (e.g. "Ubuntu 20.04" or "Arch Linux"): Opensuse Tumbleweed - Version of Firejail (`firejail --version`): 0.9.80 - If you use a development version of firejail, also the commit from which it: was compiled (`git rev-parse HEAD`):

gitea-mirror added the

enhancement

networking

labels 2026-05-05 10:02:08 -06:00

gitea-mirror commented

2026-05-05 10:02:10 -06:00

Author

Owner

@kmk3 commented on GitHub (Apr 15, 2026):

Seems related to:

#7101

@kmk3 commented on GitHub (Apr 15, 2026): Seems related to: * #7101

gitea-mirror commented

2026-05-05 10:02:10 -06:00

Author

Owner

@osevan commented on GitHub (Apr 23, 2026):

even me waiting for this feature since 2 years :-)

I created here already discussion thread :

https://github.com/netblue30/firejail/discussions/6488

https://github.com/netblue30/firejail/issues/1844
https://github.com/netblue30/firejail/issues/2416

https://github.com/netblue30/firejail/issues/2046

https://github.com/netblue30/firejail/issues/3781

@osevan commented on GitHub (Apr 23, 2026): even me waiting for this feature since 2 years :-) I created here already discussion thread : https://github.com/netblue30/firejail/discussions/6488 related https://github.com/netblue30/firejail/issues/1844 https://github.com/netblue30/firejail/issues/2416 https://github.com/netblue30/firejail/issues/2046 https://github.com/netblue30/firejail/issues/3781

gitea-mirror referenced this issue

2026-05-05 10:26:31 -06:00

[PR #3502] [MERGED] Ignore SIGTTOU during flush_stdin() #4783

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#3500

No description provided.

Rows
Columns