site  contact  subhomenews

Restrict list of apps offered to run in a container

April 27, 2023 — BarryK

In EasyOS, the inbuilt browser is Chromium; however, there are two menu entries in the "Internet" category, "Download latest Firefox" and "Download latest Vivaldi".

Alfons sent me an email that Firefox does not work in a container.

When Firefox is downloaded and installed via the menu entry, it will run in the main filesystem, as user "firefox". Firefox has its own sandbox and in combination with running as user "firefox", this is already a pretty secure situation. Maybe not quite as good as running in a container, but pretty good.

Apart from that, there is some difficulty with getting Firefox and Vivaldi installed in this way, to run in a container. I would have to jump through many hoops to get it to work, so have just taken the easy way out and excluded them.

The menu "Filesystem -> Easy Containers" has a drop-down list of apps that may be run in a container:

img1

...Firefox and Vivaldi are no longer in that list. Github commit:

https://github.com/bkauler/woofq/commit/9cad47834ac9afcc6193b2fd98656c76efd579fd

If you really want to run Firefox in a container, it is available as an SFS, in "easyos/debian/buster", but a very old version.     

Tags: easy