Running firejail in Docker

[mwz]

Hi, I'm trying to run firejail in a Docker container, however I'm not having any luck.

I'm using the following:

• base docker image openjdk:8 (Debian Stretch)
• firejail 0.9.44.8-2 (the latest version available)

Running firejail in the following way

firejail --force --noprofile echo hello

results in this error message:

Error clone: main.c:2519 main: Operation not permitted

I've seen in the release notes that the --force flag was removed in 0.9.54 - is it possible to run firejail in Docker? If so, what is the recommended way of doing that?

[Fred-Barclay]

Hi @mwz
As far as I know it's no longer possible to run firejail inside Docker because they both need/use similar features. Sorry -- I know it's not the news you wanted to hear -- maybe someone can correct me if this is actually possible??
#1956 (comment)

[KOLANICH]

I have run FJ in docker in CI environment, IMHO works fine.

[matu3ba]

@KOLANICH Please refer your firejail version, if you claim otherwise.
This should be closed due to technical reasons otherwise as explained in #1956.

[Fred-Barclay]

Let's close now and reopen later if needed. Thanks everyone! 😄