Restrict list of apps offered to run in a container
In EasyOS, the inbuilt browser is Chromium; however, there are
two menu entries in the "Internet" category, "Download latest Firefox"
and "Download latest Vivaldi".
Alfons sent me an email that Firefox does not work in a container.
When Firefox is downloaded and installed via the menu entry, it will
run in the main filesystem, as user "firefox". Firefox has its own
sandbox and in combination with running as user "firefox", this is
already a pretty secure situation. Maybe not quite as good as running in
a container, but pretty good.
Apart from that, there is some difficulty with getting Firefox and
Vivaldi installed in this way, to run in a container. I would have to
jump through many hoops to get it to work, so have just taken the easy
way out and excluded them.
The menu "Filesystem -> Easy Containers" has a drop-down list of apps that may be run in a container:
...Firefox and Vivaldi are no longer in that list. Github commit:
https://github.com/bkauler/woofq/commit/9cad47834ac9afcc6193b2fd98656c76efd579fd
If you really want to run Firefox in a container, it is available as
an SFS, in "easyos/debian/buster", but a very old version.
Tags: easy