Log In
Ask Solus is a community edited knowledge base and support forum for Solus. We are not endorsed or supported by Solus Project.
0 votes

I'm trying to run ungoogled chromium and this is in the readme.

Before you run, you must setup your system so the browser's sandboxing will work. There are two options:
* Use the user namespace sandbox. This is the preferred option.
* Use the SUID sandbox. This should be used on systems that do not have support for user namespaces.

How to setup the SUID sandbox:
1. Rename "chrome_sandbox" to "chrome-sandbox"
2. Set the file mode to 4755
3. Set the group to root

How to setup the user namespace sandbox:
The kernel needs to be configured to allow user namespaces. The method to enable it varies per system. Sometimes it's enabled by default. If it's not, sometimes sysctl can be used to set kernel.unprivileged_userns_clone to 1. There may also be a way to set it via the /sys partition. Specific instructions should be found online.

How do I correctly setup namespace sandbox for chromium in Solus? there's no kernel.unprivileged_userns_clone.

Thank you.

140 points 1 4

1 Answer

0 votes

To enable user namespaces on Solus, the following commands should be sufficient.

echo 'kernel.unprivileged_userns_clone=1' | sudo tee -a /etc/sysctl.d/00-local-userns.conf > /dev/null
cat /etc/sysctl.d/*.conf | sudo sysctl -e -p -
790 points 1 2 9
edited by