From unknown Sat Jun 21 10:39:40 2025
X-Loop: help-debbugs@gnu.org
Subject: bug#44891: Chromium does not start
Resent-From: Andrea Rossi
Original-Sender: "Debbugs-submit"
Resent-CC: bug-guix@gnu.org
Resent-Date: Thu, 26 Nov 2020 17:55:01 +0000
Resent-Message-ID:
Resent-Sender: help-debbugs@gnu.org
X-GNU-PR-Message: report 44891
X-GNU-PR-Package: guix
X-GNU-PR-Keywords:
To: 44891@debbugs.gnu.org
X-Debbugs-Original-To: bug-guix@gnu.org
Received: via spool by submit@debbugs.gnu.org id=B.16064132765622
(code B ref -1); Thu, 26 Nov 2020 17:55:01 +0000
Received: (at submit) by debbugs.gnu.org; 26 Nov 2020 17:54:36 +0000
Received: from localhost ([127.0.0.1]:42801 helo=debbugs.gnu.org)
by debbugs.gnu.org with esmtp (Exim 4.84_2)
(envelope-from )
id 1kiLTX-0001Sb-DI
for submit@debbugs.gnu.org; Thu, 26 Nov 2020 12:54:36 -0500
Received: from lists.gnu.org ([209.51.188.17]:40810)
by debbugs.gnu.org with esmtp (Exim 4.84_2)
(envelope-from ) id 1kiJaU-0004iw-8K
for submit@debbugs.gnu.org; Thu, 26 Nov 2020 10:53:41 -0500
Received: from eggs.gnu.org ([2001:470:142:3::10]:59450)
by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
(Exim 4.90_1) (envelope-from
) id 1kiJaT-0005d1-S9
for bug-guix@gnu.org; Thu, 26 Nov 2020 10:53:37 -0500
Received: from mx1.meup.it ([188.165.234.93]:39404)
by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
(Exim 4.90_1) (envelope-from
) id 1kiJaQ-00034Z-81
for bug-guix@gnu.org; Thu, 26 Nov 2020 10:53:37 -0500
Received: from [192.168.1.4] (net-2-42-89-238.cust.vodafonedsl.it
[2.42.89.238])
(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
(No client certificate requested)
by mx1.meup.it (Postfix) with ESMTPSA id 83D1429EC72
for ; Thu, 26 Nov 2020 16:53:30 +0100 (CET)
From: Andrea Rossi
Message-ID: <5cf157d8-7da4-c0b7-090a-c233775fffc1@a9i.it>
Date: Thu, 26 Nov 2020 16:53:29 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101
Thunderbird/78.5.0
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
protocol="application/pgp-signature";
boundary="jAEdQnJQ0JEs3bvP93sdZiTEnMd2f5Szx"
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=a9i.it; s=dkim;
t=1606406010; bh=91JkXNNyFRpP0LL1QE98CGFEsqniv6pWd+9bXAOcDPY=;
h=From:To:Subject:Message-ID:Date:MIME-Version:Content-Type;
b=T82EBuJ2ClYp75rLpxD4C5AUPfraCgIWEaZU6S2woMPm3H4WPjZ2f2BlcS7s15FRQWt0TZyae/vciZ+/1oK56FlCh2avEGHV1Diao2mAwJLfLQR07AauRUuSvXEYx09BL5GIVCE5Za8ggPuPpBeQQ+8Yux6lwEkKGOQ4zCWjJNnmeHdmkShK4E42Zt/9AB3CIwIkROQJzJKcGAZilJGwmGKKayDdIZLnP9gTJMh0lf+ykf98i9pIsUsC48B9QVa3LP9Q8qv6QYQEu4b2VAoK+v5Sbw9jYpu762k+hFznyLoknYEoJLgcYxd1pfZJ7o1B1LlOZ02HanwLDMPG+x2ZVA==
Received-SPF: pass client-ip=188.165.234.93; envelope-from=p@a9i.it;
helo=mx1.meup.it
X-Spam_score_int: -20
X-Spam_score: -2.1
X-Spam_bar: --
X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001,
SPF_PASS=-0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: -1.4 (-)
X-Mailman-Approved-At: Thu, 26 Nov 2020 12:54:34 -0500
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id:
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit"
X-Spam-Score: -2.4 (--)
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--jAEdQnJQ0JEs3bvP93sdZiTEnMd2f5Szx
Content-Type: multipart/mixed; boundary="3Yu6Y9iUTn9AaX2Xw5xKZ9uP2PVCMBHpv";
protected-headers="v1"
From: Andrea Rossi
To: bug-guix@gnu.org
Message-ID: <5cf157d8-7da4-c0b7-090a-c233775fffc1@a9i.it>
Subject: Chromium does not start
--3Yu6Y9iUTn9AaX2Xw5xKZ9uP2PVCMBHpv
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: quoted-printable
Hi,
after the installation of ungoogled-chromium I tried to run it,
receiving this message:
[20998:20998:1126/122306.639343:FATAL:zygote_host_impl_linux.cc(117)] No
usable sandbox! Update your kernel or see
https://chromium.9oo91esource.qjz9zk/chromium/src/+/master/docs/linux/sui=
d_sandbox_development.md
for more information on developing with the SUID sandbox. If you want to
live dangerously and need an immediate workaround, you can try using
--no-sandbox.
Maybe I'm missing something, or is the case of a proper bug?
Regards,
--=20
Andrea
--3Yu6Y9iUTn9AaX2Xw5xKZ9uP2PVCMBHpv--
--jAEdQnJQ0JEs3bvP93sdZiTEnMd2f5Szx
Content-Type: application/pgp-signature; name="OpenPGP_signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="OpenPGP_signature"
-----BEGIN PGP SIGNATURE-----
wnsEABYIACMWIQSdE4uoJlqsi1X9EAb84u3ni9myywUCX7/PeQUDAAAAAAAKCRD84u3ni9myy6Nw
AP46YhtpP/pCp88akn06en4G9KwrCQK8r88b4iIUkHwbRgEA6z6GQZ2Tj/nzYXCXBs1WSxCLMP68
IyqQ6rtiiiD4ZQ0=
=7vis
-----END PGP SIGNATURE-----
--jAEdQnJQ0JEs3bvP93sdZiTEnMd2f5Szx--
From unknown Sat Jun 21 10:39:40 2025
X-Loop: help-debbugs@gnu.org
Subject: bug#44891: Chromium does not start
Resent-From: raingloom
Original-Sender: "Debbugs-submit"
Resent-CC: bug-guix@gnu.org
Resent-Date: Fri, 27 Nov 2020 03:48:01 +0000
Resent-Message-ID:
Resent-Sender: help-debbugs@gnu.org
X-GNU-PR-Message: followup 44891
X-GNU-PR-Package: guix
X-GNU-PR-Keywords:
To: 44891@debbugs.gnu.org
Cc: p@a9i.it
X-Debbugs-Original-To: Andrea Rossi via Bug reports for GNU Guix
X-Debbugs-Original-Cc: Andrea Rossi , 44891@debbugs.gnu.org
Received: via spool by submit@debbugs.gnu.org id=B.16064488324526
(code B ref -1); Fri, 27 Nov 2020 03:48:01 +0000
Received: (at submit) by debbugs.gnu.org; 27 Nov 2020 03:47:12 +0000
Received: from localhost ([127.0.0.1]:43417 helo=debbugs.gnu.org)
by debbugs.gnu.org with esmtp (Exim 4.84_2)
(envelope-from )
id 1kiUj1-0001Aw-MJ
for submit@debbugs.gnu.org; Thu, 26 Nov 2020 22:47:11 -0500
Received: from lists.gnu.org ([209.51.188.17]:33994)
by debbugs.gnu.org with esmtp (Exim 4.84_2)
(envelope-from ) id 1kiUiy-0001Ad-J5
for submit@debbugs.gnu.org; Thu, 26 Nov 2020 22:47:10 -0500
Received: from eggs.gnu.org ([2001:470:142:3::10]:37990)
by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
(Exim 4.90_1) (envelope-from )
id 1kiUiy-0003LR-A8
for bug-guix@gnu.org; Thu, 26 Nov 2020 22:47:08 -0500
Received: from mx1.riseup.net ([198.252.153.129]:57846)
by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
(Exim 4.90_1) (envelope-from )
id 1kiUiw-0005FI-CL
for bug-guix@gnu.org; Thu, 26 Nov 2020 22:47:07 -0500
Received: from bell.riseup.net (bell-pn.riseup.net [10.0.1.178])
(using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits))
(Client CN "*.riseup.net",
Issuer "Sectigo RSA Domain Validation Secure Server CA" (not verified))
by mx1.riseup.net (Postfix) with ESMTPS id 4Cj0tb1KcmzFpND;
Thu, 26 Nov 2020 19:47:03 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=riseup.net; s=squak;
t=1606448823; bh=4X3AGYKsA/SvZMEtusPBuCCnZUCP80VLAL4Hk8IjlHc=;
h=Date:From:To:Cc:Subject:In-Reply-To:References:From;
b=k5VDEa2fY4fgu+NbCECzh9bfLOTT5xWCY1G7CDxeRMTeRHnkip2mljkjWAjJuO4zd
EJa0iT1quiaQfbUQY2zXLIdSyNp7bG450aKbfsn2p+zHF6byHFXqWIN2FnSqSGAmyf
mtJU+d2YXnpN/0vZ6eqOyhfnu1rqkjJxo7aLQbr0=
X-Riseup-User-ID: A66EF8422455087E4FEE6E3D369C34D9B0FFF0FE21D69C217B6914EB302C77CF
Received: from [127.0.0.1] (localhost [127.0.0.1])
by bell.riseup.net (Postfix) with ESMTPSA id 4Cj0tQ5RxVzJqNZ;
Thu, 26 Nov 2020 19:46:52 -0800 (PST)
Date: Fri, 27 Nov 2020 04:41:11 +0100
From: raingloom
Message-ID: <20201127044111.21669b76@riseup.net>
In-Reply-To: <5cf157d8-7da4-c0b7-090a-c233775fffc1@a9i.it>
References: <5cf157d8-7da4-c0b7-090a-c233775fffc1@a9i.it>
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Received-SPF: pass client-ip=198.252.153.129;
envelope-from=raingloom@riseup.net; helo=mx1.riseup.net
X-Spam_score_int: -27
X-Spam_score: -2.8
X-Spam_bar: --
X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001,
SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: -1.4 (-)
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id:
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit"
X-Spam-Score: -2.4 (--)
On Thu, 26 Nov 2020 16:53:29 +0100
Andrea Rossi via Bug reports for GNU Guix wrote:
> Hi,
> after the installation of ungoogled-chromium I tried to run it,
> receiving this message:
>
> [20998:20998:1126/122306.639343:FATAL:zygote_host_impl_linux.cc(117)]
> No usable sandbox! Update your kernel or see
> https://chromium.9oo91esource.qjz9zk/chromium/src/+/master/docs/linux/suid_sandbox_development.md
> for more information on developing with the SUID sandbox. If you want
> to live dangerously and need an immediate workaround, you can try
> using --no-sandbox.
>
> Maybe I'm missing something, or is the case of a proper bug?
>
> Regards,
Saw a similar issue on Arch recently, my guess is that the sandbox
binary (I don't remember its name or path) is missing the execute
permission bit.
Not sure how to fix that on Guix, since modifying a store item is
generally a big no-no. You could maybe write a quick and dirty package
that takes ungoogled-chromium as its only input, copies it (or just
creates symlinks?), and runs chmod +x on the sandbox binary.
That way you don't have to recompile the whole package.
From unknown Sat Jun 21 10:39:40 2025
X-Loop: help-debbugs@gnu.org
Subject: bug#44891: Chromium does not start
Resent-From: Giovanni Biscuolo
Original-Sender: "Debbugs-submit"
Resent-CC: bug-guix@gnu.org
Resent-Date: Fri, 27 Nov 2020 08:33:02 +0000
Resent-Message-ID:
Resent-Sender: help-debbugs@gnu.org
X-GNU-PR-Message: followup 44891
X-GNU-PR-Package: guix
X-GNU-PR-Keywords:
To: Andrea Rossi , 44891@debbugs.gnu.org
Received: via spool by 44891-submit@debbugs.gnu.org id=B44891.160646597016183
(code B ref 44891); Fri, 27 Nov 2020 08:33:02 +0000
Received: (at 44891) by debbugs.gnu.org; 27 Nov 2020 08:32:50 +0000
Received: from localhost ([127.0.0.1]:43855 helo=debbugs.gnu.org)
by debbugs.gnu.org with esmtp (Exim 4.84_2)
(envelope-from )
id 1kiZBS-0004Co-An
for submit@debbugs.gnu.org; Fri, 27 Nov 2020 03:32:50 -0500
Received: from ns13.heimat.it ([46.4.214.66]:56088)
by debbugs.gnu.org with esmtp (Exim 4.84_2)
(envelope-from ) id 1kiZBO-00048E-PV
for 44891@debbugs.gnu.org; Fri, 27 Nov 2020 03:32:49 -0500
Received: from localhost (ip6-localhost [127.0.0.1])
by ns13.heimat.it (Postfix) with ESMTP id 3AEF53021BE;
Fri, 27 Nov 2020 08:32:40 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at ns13.heimat.it
Received: from ns13.heimat.it ([127.0.0.1])
by localhost (ns13.heimat.it [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id Kv9v9jRy0Sgn; Fri, 27 Nov 2020 08:32:38 +0000 (UTC)
Received: from bourrache.mug.xelera.it (unknown [93.56.169.211])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(Client did not present a certificate)
by ns13.heimat.it (Postfix) with ESMTPSA id 72D6F3021B8;
Fri, 27 Nov 2020 08:32:38 +0000 (UTC)
Received: from roquette.mug.biscuolo.net (roquette [10.38.2.14])
by bourrache.mug.xelera.it (Postfix) with SMTP id 87DAC956EEE;
Fri, 27 Nov 2020 09:32:37 +0100 (CET)
Received: (nullmailer pid 10751 invoked by uid 1000);
Fri, 27 Nov 2020 08:32:36 -0000
From: Giovanni Biscuolo
In-Reply-To: <5cf157d8-7da4-c0b7-090a-c233775fffc1@a9i.it>
Organization: Xelera.eu
References: <5cf157d8-7da4-c0b7-090a-c233775fffc1@a9i.it>
Date: Fri, 27 Nov 2020 09:32:34 +0100
Message-ID: <87r1of9p3x.fsf@roquette.i-did-not-set--mail-host-address--so-tickle-me>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
micalg=pgp-sha512; protocol="application/pgp-signature"
X-Spam-Score: 0.0 (/)
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id:
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit"
X-Spam-Score: -1.0 (-)
--=-=-=
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable
Ciao Andrea,
To the list: Andrea is a friend and a collegue, I'm helping him starting
using Guix as a package manager.
Andrea: next time when reporting bugs on Guix please mention you are
using it on a foreign distro (not as Guix System), in your case Debian.
Andrea Rossi via Bug reports for GNU Guix writes:
> after the installation of ungoogled-chromium I tried to run it,
> receiving this message:
>
> [20998:20998:1126/122306.639343:FATAL:zygote_host_impl_linux.cc(117)] No
> usable sandbox! Update your kernel or see
> https://chromium.9oo91esource.qjz9zk/chromium/src/+/master/docs/linux/sui=
d_sandbox_development.md
> for more information on developing with the SUID sandbox. If you want to
> live dangerously and need an immediate workaround, you can try using
> --no-sandbox.
>
> Maybe I'm missing something, or is the case of a proper bug?
In Jan this year I had the same issue, reported in help-guix, on Debian
as foreign distro and Marius Bakke [1] helped me solve it:
1. sudo sysctl -w kernel.unprivileged_userns_clone=3D1
2. sudo su -c "echo 'kernel.unprivileged_userns_clone=3D1' > /etc/sysctl.d/=
00-local-userns.conf"
This is because (ungoogled-)chromium sandbox relies on user namespaces
support in the kernel but Debian [2] disables user namespaces by
default, the above commands enables them for your current boot session
and permanently for next reboots.
Andrea please try the above fixes and tell us if they solve your issue.
Ciao, Gio'
[1] https://lists.gnu.org/archive/html/help-guix/2020-01/msg00059.html
[2] Chromium on Debian uses an alternative sandboxing method that relies
on a setuid binary, Guix do not use this :-)
=2D-=20
Giovanni Biscuolo
Xelera IT Infrastructures
--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"
-----BEGIN PGP SIGNATURE-----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=yEgP
-----END PGP SIGNATURE-----
--=-=-=--
From unknown Sat Jun 21 10:39:40 2025
X-Loop: help-debbugs@gnu.org
Subject: bug#44891: Chromium does not start
Resent-From: Giovanni Biscuolo
Original-Sender: "Debbugs-submit"
Resent-CC: bug-guix@gnu.org
Resent-Date: Fri, 27 Nov 2020 08:41:01 +0000
Resent-Message-ID:
Resent-Sender: help-debbugs@gnu.org
X-GNU-PR-Message: followup 44891
X-GNU-PR-Package: guix
X-GNU-PR-Keywords:
To: raingloom , 44891@debbugs.gnu.org
Cc: p@a9i.it
Received: via spool by 44891-submit@debbugs.gnu.org id=B44891.160646645817573
(code B ref 44891); Fri, 27 Nov 2020 08:41:01 +0000
Received: (at 44891) by debbugs.gnu.org; 27 Nov 2020 08:40:58 +0000
Received: from localhost ([127.0.0.1]:43900 helo=debbugs.gnu.org)
by debbugs.gnu.org with esmtp (Exim 4.84_2)
(envelope-from )
id 1kiZJK-0004ZN-4N
for submit@debbugs.gnu.org; Fri, 27 Nov 2020 03:40:58 -0500
Received: from ns13.heimat.it ([46.4.214.66]:56172)
by debbugs.gnu.org with esmtp (Exim 4.84_2)
(envelope-from ) id 1kiZJI-0004Z7-4B
for 44891@debbugs.gnu.org; Fri, 27 Nov 2020 03:40:56 -0500
Received: from localhost (ip6-localhost [127.0.0.1])
by ns13.heimat.it (Postfix) with ESMTP id 9B2773021BE;
Fri, 27 Nov 2020 08:40:49 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at ns13.heimat.it
Received: from ns13.heimat.it ([127.0.0.1])
by localhost (ns13.heimat.it [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id k6b1mK6Z8vTj; Fri, 27 Nov 2020 08:40:47 +0000 (UTC)
Received: from bourrache.mug.xelera.it (unknown [93.56.169.211])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(Client did not present a certificate)
by ns13.heimat.it (Postfix) with ESMTPSA id B4D0A3021B8;
Fri, 27 Nov 2020 08:40:46 +0000 (UTC)
Received: from roquette.mug.biscuolo.net (roquette [10.38.2.14])
by bourrache.mug.xelera.it (Postfix) with SMTP id C886A956FD2;
Fri, 27 Nov 2020 09:40:44 +0100 (CET)
Received: (nullmailer pid 10950 invoked by uid 1000);
Fri, 27 Nov 2020 08:40:41 -0000
From: Giovanni Biscuolo
In-Reply-To: <20201127044111.21669b76@riseup.net>
Organization: Xelera.eu
References: <5cf157d8-7da4-c0b7-090a-c233775fffc1@a9i.it>
<20201127044111.21669b76@riseup.net>
Date: Fri, 27 Nov 2020 09:40:40 +0100
Message-ID: <87o8jj9oqf.fsf@roquette.i-did-not-set--mail-host-address--so-tickle-me>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
micalg=pgp-sha512; protocol="application/pgp-signature"
X-Spam-Score: 0.0 (/)
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id:
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit"
X-Spam-Score: -1.0 (-)
--=-=-=
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable
Hi raingloom,
raingloom writes:
> On Thu, 26 Nov 2020 16:53:29 +0100
> Andrea Rossi via Bug reports for GNU Guix wrote:
[...]
>> [20998:20998:1126/122306.639343:FATAL:zygote_host_impl_linux.cc(117)]
>> No usable sandbox! Update your kernel or see
>> https://chromium.9oo91esource.qjz9zk/chromium/src/+/master/docs/linux/su=
id_sandbox_development.md
>> for more information on developing with the SUID sandbox. If you want
>> to live dangerously and need an immediate workaround, you can try
>> using --no-sandbox.
[...]
> Saw a similar issue on Arch recently, my guess is that the sandbox
> binary (I don't remember its name or path) is missing the execute
> permission bit.
As reported in my previous reply to Andrea, AFAIU (thanks Marius Bakke)
Chromium can use two methods to start the sandbox:
1. use the SUID binary
2. use user namespaces
AFAIU the second is better and anyway it's the method used by Guix
ungoogled-chromium
> Not sure how to fix that on Guix, since modifying a store item is
> generally a big no-no. You could maybe write a quick and dirty package
> that takes ungoogled-chromium as its only input, copies it (or just
> creates symlinks?), and runs chmod +x on the sandbox binary.
> That way you don't have to recompile the whole package.
Non need for all this :-D
Thanks, Gio'
=2D-=20
Giovanni Biscuolo
Xelera IT Infrastructures
--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"
-----BEGIN PGP SIGNATURE-----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=C1rw
-----END PGP SIGNATURE-----
--=-=-=--
From unknown Sat Jun 21 10:39:40 2025
X-Loop: help-debbugs@gnu.org
Subject: bug#44891: Chromium does not start
Resent-From: Andrea Rossi
Original-Sender: "Debbugs-submit"
Resent-CC: bug-guix@gnu.org
Resent-Date: Fri, 27 Nov 2020 14:03:01 +0000
Resent-Message-ID:
Resent-Sender: help-debbugs@gnu.org
X-GNU-PR-Message: followup 44891
X-GNU-PR-Package: guix
X-GNU-PR-Keywords:
To: 44891@debbugs.gnu.org
Received: via spool by 44891-submit@debbugs.gnu.org id=B44891.16064857418209
(code B ref 44891); Fri, 27 Nov 2020 14:03:01 +0000
Received: (at 44891) by debbugs.gnu.org; 27 Nov 2020 14:02:21 +0000
Received: from localhost ([127.0.0.1]:44285 helo=debbugs.gnu.org)
by debbugs.gnu.org with esmtp (Exim 4.84_2)
(envelope-from )
id 1kieKI-00028H-TE
for submit@debbugs.gnu.org; Fri, 27 Nov 2020 09:02:21 -0500
Received: from mx1.meup.it ([188.165.234.93]:40931)
by debbugs.gnu.org with esmtp (Exim 4.84_2)
(envelope-from ) id 1kibPR-0001cR-3q
for 44891@debbugs.gnu.org; Fri, 27 Nov 2020 05:55:27 -0500
Received: from [192.168.1.4] (net-2-42-89-238.cust.vodafonedsl.it
[2.42.89.238])
(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
(No client certificate requested)
by mx1.meup.it (Postfix) with ESMTPSA id 6B8FF29EDE9
for <44891@debbugs.gnu.org>; Fri, 27 Nov 2020 11:55:18 +0100 (CET)
References: <5cf157d8-7da4-c0b7-090a-c233775fffc1@a9i.it>
<87r1of9p3x.fsf@roquette.i-did-not-set--mail-host-address--so-tickle-me>
From: Andrea Rossi
Message-ID:
Date: Fri, 27 Nov 2020 11:55:17 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101
Thunderbird/78.5.0
MIME-Version: 1.0
In-Reply-To: <87r1of9p3x.fsf@roquette.i-did-not-set--mail-host-address--so-tickle-me>
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: 8bit
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=a9i.it; s=dkim;
t=1606474518; bh=KCqVFeNhXPlokw/Wbsm/v6D7IhPl+J4ykFHw+5QHxgs=;
h=To:References:From:Subject:Message-ID:Date:MIME-Version:In-Reply-To:Content-Type:Content-Transfer-Encoding;
b=hLEqawum3JLdgbmZsbEnO06X+h3KhUUo+vydTKthw773PGIDPv2ybcPb4gDsU+nma9wYCfFO6+PGDF5UcNplMHL5Ry0k9FYxZWdBQC1HYgvuK9CkP68xWLE/9S2OhPMBJAMtMSfU9Vta+n0v2eSPW63x0a/pJ+5W2BmWM7ycc7+nmQDBHjtSQf05dRPUd8pPnLz1oO+q3MScEg4siYYG1ALMXesCxWhhZH7Ihzfqoq+WLbCltYTy3TW5qF1Xg3IAQJ4EBEoFqCl0ABxoJHlAV25fZB0bzOPdnuZ9XYfFopFZf2SKqbwM1VgA/uHmf9SjJGUZqrJuzYVFFRyZVonSGg==
X-Spam-Score: -0.0 (/)
X-Mailman-Approved-At: Fri, 27 Nov 2020 09:02:18 -0500
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id:
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit"
X-Spam-Score: -1.0 (-)
On 27/11/20 09:32, Giovanni Biscuolo wrote:
> [...]
> 1. sudo sysctl -w kernel.unprivileged_userns_clone=1
> 2. sudo su -c "echo 'kernel.unprivileged_userns_clone=1' > /etc/sysctl.d/00-local-userns.conf"
>
It works!
Thanks,
Andrea
From unknown Sat Jun 21 10:39:40 2025
MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
X-Loop: help-debbugs@gnu.org
From: help-debbugs@gnu.org (GNU bug Tracking System)
To: Andrea Rossi
Subject: bug#44891: closed (Re: bug#44891: Chromium does not start)
Message-ID:
References: <878sam95tj.fsf@biscuolo.net>
<5cf157d8-7da4-c0b7-090a-c233775fffc1@a9i.it>
X-Gnu-PR-Message: they-closed 44891
X-Gnu-PR-Package: guix
Reply-To: 44891@debbugs.gnu.org
Date: Fri, 27 Nov 2020 15:30:02 +0000
Content-Type: multipart/mixed; boundary="----------=_1606491002-17906-1"
This is a multi-part message in MIME format...
------------=_1606491002-17906-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="utf-8"
Your bug report
#44891: Chromium does not start
which was filed against the guix package, has been closed.
The explanation is attached below, along with your original report.
If you require more details, please reply to 44891@debbugs.gnu.org.
--=20
44891: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D44891
GNU Bug Tracking System
Contact help-debbugs@gnu.org with problems
------------=_1606491002-17906-1
Content-Type: message/rfc822
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Received: (at 44891-done) by debbugs.gnu.org; 27 Nov 2020 15:29:51 +0000
Received: from localhost ([127.0.0.1]:45989 helo=debbugs.gnu.org)
by debbugs.gnu.org with esmtp (Exim 4.84_2)
(envelope-from )
id 1kifh0-0004e8-SV
for submit@debbugs.gnu.org; Fri, 27 Nov 2020 10:29:51 -0500
Received: from ns13.heimat.it ([46.4.214.66]:58892)
by debbugs.gnu.org with esmtp (Exim 4.84_2)
(envelope-from ) id 1kifgy-0004du-Iz
for 44891-done@debbugs.gnu.org; Fri, 27 Nov 2020 10:29:49 -0500
Received: from localhost (ip6-localhost [127.0.0.1])
by ns13.heimat.it (Postfix) with ESMTP id 991E93021BC;
Fri, 27 Nov 2020 15:29:41 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at ns13.heimat.it
Received: from ns13.heimat.it ([127.0.0.1])
by localhost (ns13.heimat.it [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id JoZ8A0Rx3GJe; Fri, 27 Nov 2020 15:29:21 +0000 (UTC)
Received: from bourrache.mug.xelera.it (unknown [93.56.169.211])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(Client did not present a certificate)
by ns13.heimat.it (Postfix) with ESMTPSA id 74D453021BA;
Fri, 27 Nov 2020 15:29:21 +0000 (UTC)
Received: from roquette.mug.biscuolo.net (roquette [10.38.2.14])
by bourrache.mug.xelera.it (Postfix) with SMTP id 2481D9594CA;
Fri, 27 Nov 2020 16:29:16 +0100 (CET)
Received: (nullmailer pid 21621 invoked by uid 1000);
Fri, 27 Nov 2020 15:29:13 -0000
From: Giovanni Biscuolo
To: Andrea Rossi , 44891-done@debbugs.gnu.org
Subject: Re: bug#44891: Chromium does not start
In-Reply-To:
Organization: Xelera.eu
References: <5cf157d8-7da4-c0b7-090a-c233775fffc1@a9i.it>
<87r1of9p3x.fsf@roquette.i-did-not-set--mail-host-address--so-tickle-me>
Date: Fri, 27 Nov 2020 16:29:12 +0100
Message-ID: <878sam95tj.fsf@biscuolo.net>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
micalg=pgp-sha512; protocol="application/pgp-signature"
X-Spam-Score: 0.0 (/)
X-Debbugs-Envelope-To: 44891-done
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id:
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit"
X-Spam-Score: -1.0 (-)
--=-=-=
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable
Andrea Rossi via Bug reports for GNU Guix writes:
> On 27/11/20 09:32, Giovanni Biscuolo wrote:
>> [...]
>> 1. sudo sysctl -w kernel.unprivileged_userns_clone=3D1
>> 2. sudo su -c "echo 'kernel.unprivileged_userns_clone=3D1' > /etc/sysctl=
.d/00-local-userns.conf"=20
>
> It works!
Fine! Closing this bug.
Ciao, Gio'
=2D-=20
Giovanni Biscuolo
Xelera IT Infrastructures
--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"
-----BEGIN PGP SIGNATURE-----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=YI2L
-----END PGP SIGNATURE-----
--=-=-=--
------------=_1606491002-17906-1
Content-Type: message/rfc822
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Received: (at submit) by debbugs.gnu.org; 26 Nov 2020 17:54:36 +0000
Received: from localhost ([127.0.0.1]:42801 helo=debbugs.gnu.org)
by debbugs.gnu.org with esmtp (Exim 4.84_2)
(envelope-from )
id 1kiLTX-0001Sb-DI
for submit@debbugs.gnu.org; Thu, 26 Nov 2020 12:54:36 -0500
Received: from lists.gnu.org ([209.51.188.17]:40810)
by debbugs.gnu.org with esmtp (Exim 4.84_2)
(envelope-from ) id 1kiJaU-0004iw-8K
for submit@debbugs.gnu.org; Thu, 26 Nov 2020 10:53:41 -0500
Received: from eggs.gnu.org ([2001:470:142:3::10]:59450)
by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
(Exim 4.90_1) (envelope-from
) id 1kiJaT-0005d1-S9
for bug-guix@gnu.org; Thu, 26 Nov 2020 10:53:37 -0500
Received: from mx1.meup.it ([188.165.234.93]:39404)
by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
(Exim 4.90_1) (envelope-from
) id 1kiJaQ-00034Z-81
for bug-guix@gnu.org; Thu, 26 Nov 2020 10:53:37 -0500
Received: from [192.168.1.4] (net-2-42-89-238.cust.vodafonedsl.it
[2.42.89.238])
(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
(No client certificate requested)
by mx1.meup.it (Postfix) with ESMTPSA id 83D1429EC72
for ; Thu, 26 Nov 2020 16:53:30 +0100 (CET)
From: Andrea Rossi
To: bug-guix@gnu.org
Subject: Chromium does not start
Message-ID: <5cf157d8-7da4-c0b7-090a-c233775fffc1@a9i.it>
Date: Thu, 26 Nov 2020 16:53:29 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101
Thunderbird/78.5.0
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
protocol="application/pgp-signature";
boundary="jAEdQnJQ0JEs3bvP93sdZiTEnMd2f5Szx"
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=a9i.it; s=dkim;
t=1606406010; bh=91JkXNNyFRpP0LL1QE98CGFEsqniv6pWd+9bXAOcDPY=;
h=From:To:Subject:Message-ID:Date:MIME-Version:Content-Type;
b=T82EBuJ2ClYp75rLpxD4C5AUPfraCgIWEaZU6S2woMPm3H4WPjZ2f2BlcS7s15FRQWt0TZyae/vciZ+/1oK56FlCh2avEGHV1Diao2mAwJLfLQR07AauRUuSvXEYx09BL5GIVCE5Za8ggPuPpBeQQ+8Yux6lwEkKGOQ4zCWjJNnmeHdmkShK4E42Zt/9AB3CIwIkROQJzJKcGAZilJGwmGKKayDdIZLnP9gTJMh0lf+ykf98i9pIsUsC48B9QVa3LP9Q8qv6QYQEu4b2VAoK+v5Sbw9jYpu762k+hFznyLoknYEoJLgcYxd1pfZJ7o1B1LlOZ02HanwLDMPG+x2ZVA==
Received-SPF: pass client-ip=188.165.234.93; envelope-from=p@a9i.it;
helo=mx1.meup.it
X-Spam_score_int: -20
X-Spam_score: -2.1
X-Spam_bar: --
X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001,
SPF_PASS=-0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: -1.4 (-)
X-Debbugs-Envelope-To: submit
X-Mailman-Approved-At: Thu, 26 Nov 2020 12:54:34 -0500
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id:
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit"
X-Spam-Score: -2.4 (--)
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--jAEdQnJQ0JEs3bvP93sdZiTEnMd2f5Szx
Content-Type: multipart/mixed; boundary="3Yu6Y9iUTn9AaX2Xw5xKZ9uP2PVCMBHpv";
protected-headers="v1"
From: Andrea Rossi
To: bug-guix@gnu.org
Message-ID: <5cf157d8-7da4-c0b7-090a-c233775fffc1@a9i.it>
Subject: Chromium does not start
--3Yu6Y9iUTn9AaX2Xw5xKZ9uP2PVCMBHpv
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: quoted-printable
Hi,
after the installation of ungoogled-chromium I tried to run it,
receiving this message:
[20998:20998:1126/122306.639343:FATAL:zygote_host_impl_linux.cc(117)] No
usable sandbox! Update your kernel or see
https://chromium.9oo91esource.qjz9zk/chromium/src/+/master/docs/linux/sui=
d_sandbox_development.md
for more information on developing with the SUID sandbox. If you want to
live dangerously and need an immediate workaround, you can try using
--no-sandbox.
Maybe I'm missing something, or is the case of a proper bug?
Regards,
--=20
Andrea
--3Yu6Y9iUTn9AaX2Xw5xKZ9uP2PVCMBHpv--
--jAEdQnJQ0JEs3bvP93sdZiTEnMd2f5Szx
Content-Type: application/pgp-signature; name="OpenPGP_signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="OpenPGP_signature"
-----BEGIN PGP SIGNATURE-----
wnsEABYIACMWIQSdE4uoJlqsi1X9EAb84u3ni9myywUCX7/PeQUDAAAAAAAKCRD84u3ni9myy6Nw
AP46YhtpP/pCp88akn06en4G9KwrCQK8r88b4iIUkHwbRgEA6z6GQZ2Tj/nzYXCXBs1WSxCLMP68
IyqQ6rtiiiD4ZQ0=
=7vis
-----END PGP SIGNATURE-----
--jAEdQnJQ0JEs3bvP93sdZiTEnMd2f5Szx--
------------=_1606491002-17906-1--