[GH-ISSUE #1384] Not working in LXC (Proxmox VE); Error: "cannot establish communication with the parent" #946

New issue

Closed

opened 2026-05-05 07:12:18 -06:00 by gitea-mirror · 3 comments

gitea-mirror commented

2026-05-05 07:12:18 -06:00

Owner

Originally created by @Harvie on GitHub (Jul 15, 2017).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1384

harvie@harvie-playground:~$ firejail bash
Reading profile /etc/firejail/default.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/disable-passwdmgr.inc

** Note: you can use --noprofile to disable default.profile **

Parent pid 2321, child pid 2322
Error mount read-only: fs.c:574 fs_rdonly: Permission denied
Error: cannot establish communication with the parent, exiting...

Originally created by @Harvie on GitHub (Jul 15, 2017). Original GitHub issue: https://github.com/netblue30/firejail/issues/1384 ``` harvie@harvie-playground:~$ firejail bash Reading profile /etc/firejail/default.profile Reading profile /etc/firejail/disable-common.inc Reading profile /etc/firejail/disable-programs.inc Reading profile /etc/firejail/disable-passwdmgr.inc ** Note: you can use --noprofile to disable default.profile ** Parent pid 2321, child pid 2322 Error mount read-only: fs.c:574 fs_rdonly: Permission denied Error: cannot establish communication with the parent, exiting... ```

gitea-mirror

2026-05-05 07:12:18 -06:00

closed this issue
added the
information_old
label

gitea-mirror commented

2026-05-05 07:12:22 -06:00

Author

Owner

@netblue30 commented on GitHub (Jul 16, 2017):

What version of firejail are you using?

@netblue30 commented on GitHub (Jul 16, 2017): What version of firejail are you using?

gitea-mirror commented

2026-05-05 07:12:23 -06:00

Author

Owner

@Harvie commented on GitHub (Jul 16, 2017):

It's latest debian stable:

root@harvie-playground:~# firejail --version
firejail version 0.9.44.8

Compile time support:
	- AppArmor support is enabled
	- AppImage support is enabled
	- bind support is enabled
	- chroot support is enabled
	- file and directory whitelisting support is enabled
	- file transfer support is enabled
	- networking support is enabled
	- overlayfs support is enabled
	- private-home support is enabled
	- seccomp-bpf support is enabled
	- user namespace support is enabled
	- X11 sandboxing support is enabled

is it supposed to work inside LXC container?

@Harvie commented on GitHub (Jul 16, 2017): It's latest debian stable: ``` root@harvie-playground:~# firejail --version firejail version 0.9.44.8 Compile time support: - AppArmor support is enabled - AppImage support is enabled - bind support is enabled - chroot support is enabled - file and directory whitelisting support is enabled - file transfer support is enabled - networking support is enabled - overlayfs support is enabled - private-home support is enabled - seccomp-bpf support is enabled - user namespace support is enabled - X11 sandboxing support is enabled ``` is it supposed to work inside LXC container?

gitea-mirror commented

2026-05-05 07:12:25 -06:00

Author

Owner

@rusty-snake commented on GitHub (Aug 22, 2019):

@Harvie https://github.com/netblue30/firejail/wiki/Frequently-Asked-Questions#how-does-it-compare-with-docker-lxc-nspawn

@rusty-snake commented on GitHub (Aug 22, 2019): @Harvie https://github.com/netblue30/firejail/wiki/Frequently-Asked-Questions#how-does-it-compare-with-docker-lxc-nspawn

gitea-mirror referenced this issue

2026-05-05 10:08:12 -06:00

[PR #946] [MERGED] Added 10 new profiles #3802

gitea-mirror referenced this issue

2026-05-05 10:09:43 -06:00

[PR #1220] [MERGED] Harden some profiles #3885