{"action":"opened","issue":{"url":"https://api.github.com/repos/netblue30/firejail/issues/886","repository_url":"https://api.github.com/repos/netblue30/firejail","labels_url":"https://api.github.com/repos/netblue30/firejail/issues/886/labels{/name}","comments_url":"https://api.github.com/repos/netblue30/firejail/issues/886/comments","events_url":"https://api.github.com/repos/netblue30/firejail/issues/886/events","html_url":"https://github.com/netblue30/firejail/issues/886","id":186430077,"number":886,"title":"/run/firejail/mnt doesn't get created, hence all firejails fail","user":{"login":"glitsj16","id":959378,"avatar_url":"https://avatars.githubusercontent.com/u/959378?v=3","gravatar_id":"","url":"https://api.github.com/users/glitsj16","html_url":"https://github.com/glitsj16","followers_url":"https://api.github.com/users/glitsj16/followers","following_url":"https://api.github.com/users/glitsj16/following{/other_user}","gists_url":"https://api.github.com/users/glitsj16/gists{/gist_id}","starred_url":"https://api.github.com/users/glitsj16/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/glitsj16/subscriptions","organizations_url":"https://api.github.com/users/glitsj16/orgs","repos_url":"https://api.github.com/users/glitsj16/repos","events_url":"https://api.github.com/users/glitsj16/events{/privacy}","received_events_url":"https://api.github.com/users/glitsj16/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-10-31T23:44:00Z","updated_at":"2016-10-31T23:44:00Z","closed_at":null,"body":"Hi, using latest firejail from git I'm seeing..\r\n\r\n(1) .. ALL sandboxed programs fail to start, looks like the needed /run/firejail/mnt dir doesn't get created (this is the main target of this post);\r\n(2) .. some errors/warnings about .Xauthority and .asoundrc, which don't seem to be critical in any way AFAICT..\r\n\r\n$ lsb_release -d\r\nDescription:\tArch Linux\r\n\r\n$ pacman -Qi systemd | grep Version\r\nVersion         : 231-4\r\n\r\n$ firejail --version\r\nfirejail version 0.9.45\r\n\r\nCompile time support:\r\n\t- AppArmor support is disabled\r\n\t- AppImage support is enabled\r\n\t- bind support is enabled\r\n\t- chroot support is enabled\r\n\t- file and directory whitelisting support is enabled\r\n\t- file transfer support is enabled\r\n\t- networking support is enabled\r\n\t- overlayfs support is enabled\r\n\t- private-home support is enabled\r\n\t- seccomp-bpf support is enabled\r\n\t- user namespace support is enabled\r\n\t- X11 sandboxing support is enabled\r\n\r\n\r\n(1) failure:\r\n\r\n$ firejail --dns=127.0.0.1 --private=$HOME --name=claws-mail claws-mail\r\nReading profile /home/dirkos/.config/firejail/claws-mail.profile\r\nReading profile /etc/firejail/claws-mail.profile\r\nReading profile /etc/firejail/disable-common.inc\r\nReading profile /etc/firejail/disable-programs.inc\r\nReading profile /etc/firejail/disable-devel.inc\r\nReading profile /etc/firejail/disable-passwdmgr.inc\r\nParent pid 16058, child pid 16059\r\nError mounting /run/firejail/mnt: preproc.c:72 preproc_mount_mnt_dir: No such file or directory\r\nError: cannot establish communication with the parent, exiting...\r\n\r\nThis happens with all firejailed programs. Both on Arch Linux & Ubuntu (16.04 LTS).\r\nAlthough I didn't need to do that before, this can be easily fixed by creating\r\n/etc/tmpfiles.d/firejail-run-mnt.conf with the below content:\r\n\r\n$ cat /etc/tmpfiles.d/firejail-run-mnt.conf\r\n#Type Path                              Mode UID      GID    Age Argument\r\nd            /run/firejail/mnt   0755   root    root   -        -\r\n\r\n\r\n(2) succes:\r\n\r\n$ firejail --dns=127.0.0.1 --private=$HOME --name=claws-mail claws-mail\r\nReading profile /home/dirkos/.config/firejail/claws-mail.profile\r\nReading profile /etc/firejail/claws-mail.profile\r\nReading profile /etc/firejail/disable-common.inc\r\nReading profile /etc/firejail/disable-programs.inc\r\nReading profile /etc/firejail/disable-devel.inc\r\nReading profile /etc/firejail/disable-passwdmgr.inc\r\nParent pid 16731, child pid 16732\r\n\r\nDNS server 127.0.0.1\r\n\r\nError: file /home/dirkos/.Xauthority already exists\r\nWarning: cannot transfer .Xauthority in private home directory\r\nError: file /home/dirkos/.asoundrc already exists\r\nWarning: cannot transfer .asoundrc in private home directory\r\nChild process initialized\r\n\r\nNote: the above errors and warnings about .Xauthority and .asoundrc seem\r\nto be non-critical as stated above. If you want me to report a separate issue\r\nfor these, just ask.\r\n\r\nDo you think this is a systemd error or a firejail issue?\r\n\r\nRegards.\r\n"}}
{"actor":{"display_login":"glitsj16"}}