Skip to content

Instantly share code, notes, and snippets.

@lexxy23
Last active June 1, 2023 10:09
Show Gist options
  • Save lexxy23/c6dd8c32a9af4a2e14e52d6899e9f571 to your computer and use it in GitHub Desktop.
Save lexxy23/c6dd8c32a9af4a2e14e52d6899e9f571 to your computer and use it in GitHub Desktop.
FireJail OpenLens Profile
# this profile can be used to run OpenLens as an AppImage
include /etc/firejail/disable-common.inc
include /etc/firejail/whitelist-common.inc
caps.drop all # Root-Rechte werden unwiderruflich aufgegeben
seccomp !chroot # Filter für Systemaufrufe, außer chroot
protocol unix,inet,inet6 # Protokollfilter, Internet ist erlaubt
novideo # keine Webcam in der Sandbox
#!/usr/bin/env bash
AppName="openLens"
AppHome="$HOME/firejail-homes/$AppName"
AppImage=${OPENLENS_APPIMAGE:-$HOME/Downloads/OpenLens-6.5.2.286.x86_64.AppImage}
mkdir -p "$AppHome"
chmod 777 "$AppHome"
echo "Will use home directory $AppHome for $AppName, starting jail.."
firejail --env=HOME="$AppHome" --whitelist="$AppHome" --name=$AppName --profile=firejail-openlens.profile --private=$AppHome --appimage $AppImage
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment