github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #541] Allow firejail to use an anonymous bridge #378

New issue

Closed

opened 2026-05-05 05:43:35 -06:00 by gitea-mirror · 2 comments

gitea-mirror commented

2026-05-05 05:43:35 -06:00

Owner

Originally created by @c-MM on GitHub (May 26, 2016).
Original GitHub issue: https://github.com/netblue30/firejail/issues/541

I have an anonymous bridge on mys system which is in an different vlan used for testing deployments. This bridge has no IP address on my host.

root@ovid:~# firejail --noprofile --net=br1 --ip=10.0.1.233/23 --defaultgw=10.0.1.254 bash Error: interface br1 is not configured

root@ovid:~# ip a s dev br1 5: br1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default link/ether ac:22:0b:4e:59:c4 brd ff:ff:ff:ff:ff:ff inet6 fe80::ae22:bff:fe4e:59c4/64 scope link valid_lft forever preferred_lft forever

I don't want my host to have connectivity to the subnet, that's why I don't assign an IP address to the bridge. As soon as I assign an address to the bridge, it works.

Is there a reason why firejail requires an address on a bridge?

Thanks in advance and thanks for firejail!

Originally created by @c-MM on GitHub (May 26, 2016). Original GitHub issue: https://github.com/netblue30/firejail/issues/541 I have an anonymous bridge on mys system which is in an different vlan used for testing deployments. This bridge has no IP address on my host. ` root@ovid:~# firejail --noprofile --net=br1 --ip=10.0.1.233/23 --defaultgw=10.0.1.254 bash Error: interface br1 is not configured` `root@ovid:~# ip a s dev br1 5: br1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default link/ether ac:22:0b:4e:59:c4 brd ff:ff:ff:ff:ff:ff inet6 fe80::ae22:bff:fe4e:59c4/64 scope link valid_lft forever preferred_lft forever` I don't want my host to have connectivity to the subnet, that's why I don't assign an IP address to the bridge. As soon as I assign an address to the bridge, it works. Is there a reason why firejail requires an address on a bridge? Thanks in advance and thanks for firejail!

gitea-mirror

2026-05-05 05:43:36 -06:00

closed this issue
added the
enhancement
label

gitea-mirror commented

2026-05-05 05:43:44 -06:00

Author

Owner

@netblue30 commented on GitHub (Jun 4, 2016):

All done, you can try the version in git.

@netblue30 commented on GitHub (Jun 4, 2016): All done, you can try the version in git.

gitea-mirror commented

2026-05-05 05:43:45 -06:00

Author

Owner

@c-MM commented on GitHub (Jun 4, 2016):

Great, thanks a lot. I'll test it.

@c-MM commented on GitHub (Jun 4, 2016): Great, thanks a lot. I'll test it.

gitea-mirror referenced this issue

2026-05-05 10:04:36 -06:00

[PR #378] [MERGED] Add qTox profile #3607

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#378

No description provided.

Rows
Columns