Wednesday, 25 September 2024

Running AppImages is not by default sandboxed on Linux. So here's ... oops.

Trying to just once in this life run some AppImage in a safe and "normal" way, namely using firejail, has brought me back to trying out the same features in the square 0 way, under my app-exploring Ubuntu VM.

Sometimes it's just the way it is [sigh].

Mounting appimage type 2
Reading profile /etc/firejail/default.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-passwdmgr.inc
Reading profile /etc/firejail/disable-programs.inc
Warning: networking feature is disabled in Firejail configuration file

** Note: you can use --noprofile to disable default.profile **

Parent pid 71491, child pid 71493

**     Warning: dropping all Linux capabilities     **

Child process initialized in 109.11 ms
/bin/bash: /run/firejail/appimage/.appimage-71491/AppRun: Permission denied

Parent is shutting down, bye...
AppImage unmounted

One disturbing question may arise ... it's not much of a first version - hasn't anyone before me tried doing this? With other apps I did find it achievable.

I'll give kdenlive a go before firing up the VM, just to see if I have a fallback.

UPDATE

The kind procedure of firejailing the almighty kdenlive has been terminated at the point I had been looking for GLIBCXX_3.4.29 for over 30 seconds to no avail. I am indeed uncertain this needs to be part of the ritual to just safely run an app.

Among the other equally prompting messages I was gifted this. Thank you.

/run/firejail/appimage/.appimage-74408/AppRun.wrapped: /usr/lib/x86_64-linux-gnu/libstdc++.so.6: version `GLIBCXX_3.4.29' not found (required by /run/firejail/appimage/.appimage-74408/usr/bin/../lib/libQt6QuickTemplates2.so.6)

Sticking with the VM version for this one (although the snapped might exist and not be too outdated and work for the particular purpose, too - I do not know that).

No comments:

Post a Comment