Re: AppImages and Sandboxes

[Richmond <richmond@criptext.com>]

Sven Hartge <sven@svenhartge.de> writes:

> Richmond <richmond@criptext.com> wrote:
>> I get this error.
>
>> ./Franz-5.7.0.AppImage
>> [3509:0807/163715.039384:FATAL:setuid_sandbox_host.cc(158)] The SUID
>> sandbox helper binary was found, but is not configured correctly. Rather
>> than run without sandboxing I'm aborting now. You need to make sure that
>> /tmp/.mount_Franz-jpX9Z2/chrome-sandbox is owned by root and has mode
>> 4755.  Trace/breakpoint trap
>
>> How can I fix this error as the file is temporary?
>
> This problem is specific to any Electron-based app running from an
> Appimage. You can do two things:
>
> 1) Add "--no-sandbox" as a parameter when starting it.
> 2) Do "sudo sysctl -w kernel.unprivileged_userns_clone=1" to allow the
>    necessary sandboxing to work.
> 2a) Create /etc/sysctl.d/00-local-userns.conf with
>      kernel.unprivileged_userns_clone=1
>     in it to make this permanent.
>
> All other Distributions apart from Debian set this option by default and
> Debian 11 will follow suit.
>
> S°

Thanks!