i think i just emerged victorious from my 1 hour wrestling cage match with bwrap(1)
Timeline
Post
Remote status
Context
8me when my cli args have meaningful positions
more like chudwrap
@fiore bwrap and gnome, the worst combo: https://github.com/netblue30/firejail/issues/6906
@phnt why would running bwrap inside a firejail ever be expected to work , thats hyper fuarrrky edgecase scenario
@fiore Nothing about this is edge case. If you run any Gtk app sandboxed in firejail and open the file picker, the app will crash because gdk-pixbuf (more precisely glycin) can't handle being sandboxed like that. Gnome released a "fix" that was supposed to check whether the app was already sandboxed to disable bwrap, but that never worked. Gnome learned about the issue, released a fix that didn't work and didn't care beyond that.
Here's Audacity crashing, because I run it sandboxed after the whole network telemetry enabled by default thing: https://github.com/netblue30/firejail/issues/6940
Here's Audacity crashing, because I run it sandboxed after the whole network telemetry enabled by default thing: https://github.com/netblue30/firejail/issues/6940
@phnt dont use firejail as a jail and use bwrap instead ? there , solved it fpr you .
@fiore Break my setup, use something I don't want to, don't have installed and configured and frankly don't even know how to use properly. FOSS in $current_year.
@fiore Sometimes I wish Linus's "don't break userspace" was taken more seriously.