Firejail: Error clone: main.c:2517 main: Invalid argument

Created on 25 Feb 2018 · 4Comments · Source: netblue30/firejail

Hardware Rock64 (arm64), 4GB ram.
OS: Ubuntu bionic.
Firejail version 0.9.52 and firejail-profiles.

Get the following error when I try to use Firejail Firefox and Firejail Chromium browser.
Reading profile /etc/firejail/chromium.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Error clone: main.c:2517 main: Invalid argument

Anyone know what is wrong and how to fix it ?

bug

Source

fl-chris

Most helpful comment

I think you are the first to try it on arm64. Do you have namespaces compiled in the kernel? Look under /boot in the config file, you should see:
CONFIG_NAMESPACES=y CONFIG_UTS_NS=y CONFIG_IPC_NS=y CONFIG_USER_NS=y CONFIG_PID_NS=y CONFIG_NET_NS=y
Also look for seccomp:
CONFIG_HAVE_ARCH_SECCOMP_FILTER=y CONFIG_SECCOMP_FILTER=y

netblue30 on 5 Mar 2018

👍2

All 4 comments

netblue30 on 5 Mar 2018

👍2

Hi, and Thanks for your reply.

Yes, all 8 lines is in the config file with "*=y".

Do you have other suggestions?

fl-chris on 5 Mar 2018

I compiled the source code of Firejail version 0.9.54 and did the standard installation without error. I can confirm that this exact issue also manifests on the Pinebook64 which is an arm64 machine running Ubuntu 16.04 LTS MATE. Examining the /proc/config.gz file reveals just one kernel parameter from the above list not present. We do not see this line:

CONFIG_SECCOMP_FILTER=y

The effect is that we cannot use firejail on the Pinebook64.

johnblommers on 31 Jul 2018

Using a NanoPC T4 with current Armbian 4.4.178-rk3399. The kernel has all the above options and still get:
Error clone: main.c:2517 main: Invalid argument