Firejail: Can RPMs or DEBs be installed and tested in --private Firejails?

Created on 21 Jan 2019 · 4Comments · Source: netblue30/firejail

In other words install then run an app in a Firejail. When you close it, it is uninstalled? Sandboxie on Windows was great for this.

information

Source

Futureknows

Most helpful comment

If you really want to:

Start a firejail with an overlay: sudo firejail --name=tmpinst --overlay-tmpfs
Copy files into the sandbox: sudo firejail --put=tmpinst /path/to/file/to/copy /root/file
Install whatever you want inside the sandbox
When you exit the sandbox, everything is undone.

As @SkewedZeppelin said, though, it's much better to use a VM.

chiraag-nataraj on 21 Jan 2019

👍3

All 4 comments

I think you technically can, but it is strongly advised against as using virtual machines are a far safer/secure method. There is an issue here somewhere that has more detail.

SkewedZeppelin on 21 Jan 2019

👍2

If you really want to:

Start a firejail with an overlay: sudo firejail --name=tmpinst --overlay-tmpfs
Copy files into the sandbox: sudo firejail --put=tmpinst /path/to/file/to/copy /root/file
Install whatever you want inside the sandbox
When you exit the sandbox, everything is undone.

As @SkewedZeppelin said, though, it's much better to use a VM.

chiraag-nataraj on 21 Jan 2019

👍3

@Futureknows I'm going to go ahead and close this, but please feel free to reopen if you would like more info!

chiraag-nataraj on 24 Jan 2019

firejail --overlay-named=jail1 firefox

So does this create a new directory where firefox will be stored inside?