Re: AppImages and Sandboxes

[Sven Hartge <sven@svenhartge.de>]

Richmond <richmond@criptext.com> wrote:
> I get this error.

> ./Franz-5.7.0.AppImage
> [3509:0807/163715.039384:FATAL:setuid_sandbox_host.cc(158)] The SUID
> sandbox helper binary was found, but is not configured correctly. Rather
> than run without sandboxing I'm aborting now. You need to make sure that
> /tmp/.mount_Franz-jpX9Z2/chrome-sandbox is owned by root and has mode
> 4755.  Trace/breakpoint trap

> How can I fix this error as the file is temporary?

This problem is specific to any Electron-based app running from an
Appimage. You can do two things:

1) Add "--no-sandbox" as a parameter when starting it.
2) Do "sudo sysctl -w kernel.unprivileged_userns_clone=1" to allow the
   necessary sandboxing to work.
2a) Create /etc/sysctl.d/00-local-userns.conf with
     kernel.unprivileged_userns_clone=1
    in it to make this permanent.

All other Distributions apart from Debian set this option by default and
Debian 11 will follow suit.

S°

-- 
Sigmentation fault. Core dumped.