Firejail: --trace does not work with --appimage

[probonopd]

--trace does not seem to work with --appimage:

me@host:~$ firejail --trace --appimage /isodevice/Applications/Inkscape-0.91+devel.r14861.glibc2.14-x86_64.AppImage 
Reading profile /usr/local/etc/firejail/default.profile
Reading profile /usr/local/etc/firejail/disable-common.inc
Reading profile /usr/local/etc/firejail/disable-programs.inc
Reading profile /usr/local/etc/firejail/disable-passwdmgr.inc

** Note: you can use --noprofile to disable default.profile **

Parent pid 5670, child pid 5673

Child process initialized
2:bash:open /dev/tty:3
2:AppRun:fopen64 inkscape.desktop:0x210c020
2:inkscape.wrappe:open /dev/tty:3
2:inkscape.wrappe:open ./bin//inkscape.wrapper:3
/tmp/firejail-mnt-UQO1O5/usr/bin/inkscape.wrapper
6:sed:fopen64 /proc/filesystems:0x15df010
6:sed:open //lib/charset.alias:-1
/tmp/firejail-mnt-UQO1O5/usr/bin/inkscape not found

Parent is shutting down, bye...

Without trace it runs fine.

[netblue30]

Very ugly! I have something similar when running Chromium-based browsers with --trace.

[chiraag-nataraj]

This is still an issue! I don't understand much about appimages, but I can try to help debug.

[kadogo]

I have the same issue with discord.

$ firejail --debug --trace discord
...
Running 'discord'  command through /bin/bash
execvp argument 0: /bin/bash
execvp argument 1: -c
execvp argument 2: 'discord' 
Child process initialized in 95.84 ms
Installing /run/firejail/mnt/seccomp seccomp filter
Installing /run/firejail/mnt/seccomp.32 seccomp filter
Installing /run/firejail/mnt/seccomp.protocol seccomp filter
6:bash:exec /bin/bash:0
6:bash:open /dev/tty:3
monitoring pid 6

Maybe it can help somewhere. I tried also with --tracelog but it have an issue that look the same
Cheers.

[SkewedZeppelin]

@kadogo there have been a number of Discord fixes in recent versions
please consider making a separate issue and detail your version and distro

[kadogo]

@SkewedZeppelin
I did a new issue I didn't saw that --trace didn't stay hang here (in my case it stay hang).

[chiraag-nataraj]

@probonopd, is this still an issue?

[crass]

I'm not sure about Inkscape, but this is still an issue with discord 0.0.9.

$ sudo strace -f -x -v -s4096 -y -yy -uuser -o discord-stable-0.0.9-x86_64.AppImage.fj.trace.strace firejail --trace --appimage ./discord-stable-0.0.9-x86_64.AppImage --help
Mounting appimage type 2
Reading profile /etc/firejail/default.profile
Reading profile /home/user/.config/firejail/globals.local
Reading profile /etc/firejail/disable-common.inc   
Reading profile /etc/firejail/disable-passwdmgr.inc
Reading profile /etc/firejail/disable-programs.inc 

** Note: you can use --noprofile to disable default.profile **

Parent pid 23149, child pid 23152

**     Warning: dropping all Linux capabilities     **
Child process initialized in 600.36 ms
3:bash:exec /bin/bash:0
3:bash:open /dev/tty:3
3:AppRun:exec /bin/bash:0
3:AppRun:open /dev/tty:3
3:AppRun:open /run/firejail/appimage/.appimage-23149/AppRun:3
dir: cannot access '5:dirname:exec /usr/bin/dirname:0'$'\n''4:readlink:exec /bin/readlink:0'$'\n''/run/firejail/appimage/.appimage-23149/': No such file or directory
grep: 5:dirname:exec /usr/bin/dirname:0
4:readlink:exec /bin/readlink:0
/run/firejail/appimage/.appimage-23149/8:grep:exec /bin/grep:0: No such file or directory
/run/firejail/appimage/.appimage-23149/AppRun: line 50: /tmp/12:cut:exec /usr/bin/cut:0
11:cut:exec
10:grep:exec
10:grep:openat
4:readlink:exec
/run/firejail/appimage/.appimage-23149/8:grep:exec: No such file or directory

Parent is shutting down, bye...
AppImage unmounted