From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id 2LFaNKi7wF/KTQAA0tVLHw (envelope-from ) for ; Fri, 27 Nov 2020 08:41:12 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0 with LMTPS id cPUyMKi7wF8UHwAA1q6Kng (envelope-from ) for ; Fri, 27 Nov 2020 08:41:12 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 4404D940363 for ; Fri, 27 Nov 2020 08:41:12 +0000 (UTC) Received: from localhost ([::1]:57086 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1kiZJV-0000ng-RC for larch@yhetil.org; Fri, 27 Nov 2020 03:41:09 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:54330) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1kiZJN-0000nO-S1 for bug-guix@gnu.org; Fri, 27 Nov 2020 03:41:01 -0500 Received: from debbugs.gnu.org ([209.51.188.43]:60587) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1kiZJN-0005Ht-LF for bug-guix@gnu.org; Fri, 27 Nov 2020 03:41:01 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1kiZJN-0004Zn-Jc for bug-guix@gnu.org; Fri, 27 Nov 2020 03:41:01 -0500 X-Loop: help-debbugs@gnu.org Subject: bug#44891: Chromium does not start Resent-From: Giovanni Biscuolo Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Fri, 27 Nov 2020 08:41:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 44891 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: raingloom , 44891@debbugs.gnu.org Received: via spool by 44891-submit@debbugs.gnu.org id=B44891.160646645817573 (code B ref 44891); Fri, 27 Nov 2020 08:41:01 +0000 Received: (at 44891) by debbugs.gnu.org; 27 Nov 2020 08:40:58 +0000 Received: from localhost ([127.0.0.1]:43900 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kiZJK-0004ZN-4N for submit@debbugs.gnu.org; Fri, 27 Nov 2020 03:40:58 -0500 Received: from ns13.heimat.it ([46.4.214.66]:56172) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kiZJI-0004Z7-4B for 44891@debbugs.gnu.org; Fri, 27 Nov 2020 03:40:56 -0500 Received: from localhost (ip6-localhost [127.0.0.1]) by ns13.heimat.it (Postfix) with ESMTP id 9B2773021BE; Fri, 27 Nov 2020 08:40:49 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at ns13.heimat.it Received: from ns13.heimat.it ([127.0.0.1]) by localhost (ns13.heimat.it [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id k6b1mK6Z8vTj; Fri, 27 Nov 2020 08:40:47 +0000 (UTC) Received: from bourrache.mug.xelera.it (unknown [93.56.169.211]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by ns13.heimat.it (Postfix) with ESMTPSA id B4D0A3021B8; Fri, 27 Nov 2020 08:40:46 +0000 (UTC) Received: from roquette.mug.biscuolo.net (roquette [10.38.2.14]) by bourrache.mug.xelera.it (Postfix) with SMTP id C886A956FD2; Fri, 27 Nov 2020 09:40:44 +0100 (CET) Received: (nullmailer pid 10950 invoked by uid 1000); Fri, 27 Nov 2020 08:40:41 -0000 From: Giovanni Biscuolo In-Reply-To: <20201127044111.21669b76@riseup.net> Organization: Xelera.eu References: <5cf157d8-7da4-c0b7-090a-c233775fffc1@a9i.it> <20201127044111.21669b76@riseup.net> Date: Fri, 27 Nov 2020 09:40:40 +0100 Message-ID: <87o8jj9oqf.fsf@roquette.i-did-not-set--mail-host-address--so-tickle-me> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-Spam-Score: -1.0 (-) X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: p@a9i.it Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: "bug-Guix" X-Migadu-Flow: FLOW_IN X-Migadu-Spam-Score: -1.86 X-Scanner: ns3122888.ip-94-23-21.eu Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of bug-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=bug-guix-bounces@gnu.org X-TUID: 9hISFcpEfNsT --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Hi raingloom, raingloom writes: > On Thu, 26 Nov 2020 16:53:29 +0100 > Andrea Rossi via Bug reports for GNU Guix wrote: [...] >> [20998:20998:1126/122306.639343:FATAL:zygote_host_impl_linux.cc(117)] >> No usable sandbox! Update your kernel or see >> https://chromium.9oo91esource.qjz9zk/chromium/src/+/master/docs/linux/su= id_sandbox_development.md >> for more information on developing with the SUID sandbox. If you want >> to live dangerously and need an immediate workaround, you can try >> using --no-sandbox. [...] > Saw a similar issue on Arch recently, my guess is that the sandbox > binary (I don't remember its name or path) is missing the execute > permission bit. As reported in my previous reply to Andrea, AFAIU (thanks Marius Bakke) Chromium can use two methods to start the sandbox: 1. use the SUID binary 2. use user namespaces AFAIU the second is better and anyway it's the method used by Guix ungoogled-chromium > Not sure how to fix that on Guix, since modifying a store item is > generally a big no-no. You could maybe write a quick and dirty package > that takes ungoogled-chromium as its only input, copies it (or just > creates symlinks?), and runs chmod +x on the sandbox binary. > That way you don't have to recompile the whole package. Non need for all this :-D Thanks, Gio' =2D-=20 Giovanni Biscuolo Xelera IT Infrastructures --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQJABAEBCgAqFiEERcxjuFJYydVfNLI5030Op87MORIFAl/Au4kMHGdAeGVsZXJh LmV1AAoJENN9DqfOzDkSuoIQAMePQbBpUWKGR3dYrtcajWAnbewc1vffGxaiejyx tI7bFrNBw1Dh6PWkrtJtosF5Bzhi9O4xyPMJmJJgZC3ll2jfT56hNURuK18uhYMX 3LdR+AxPEfvYd4SJtOdpC907/hZR06211oCJmc0Xl9LVxbKJ2WRqGOTXRpf0gw3w OheWy3zPPhpopcs7SCtMdq1T/T1SbV4yl54B0JgMhfQ3RQ6Hs5u69MVIlEAry7yr 7eH40oq3fxs/cJua+LuK5PkWqdn7z8nm7yUjKOey1MNccMhqWEt6Rtx2cbADRSDC ZadmwdSoHKs66bEXjYs411ViHwnRbN0qfkNW0IbhLNfrngyEc1tZvK4g7N3tunlq mldLs5T0AB4uR4MQhhcwvG5sQ9znlJLdw/B5Wo/BOEVYfwDPPkj6kaTAR1FYHfht BGBUZVjE085O2grhfJMWzcEbK6K2Yz32MkPAMPaP19//yDYh17Mg1++D9KgtrH1M kUI5rRNSfkiinSKd9RTknVylg3WJ+PnGYx4Dy5nw5oOJwRo1Z5FbW/krF0uEVX4O 5DwbSYCxvrz+xPMCtsE+iq33ysoGwJeIokgcIdVC2upjdk6D2U7a1YB4xfrOAjrI eYXAryLknkv/XPAapS1PDn7PwPq+kbdPVKCe4fF5D+ZtC1s5CMV7XYKjT5bfp+p6 y1RP =C1rw -----END PGP SIGNATURE----- --=-=-=--