Chrome sandbox issues on Linux
See original GitHub issueOn Linux at least, it seems the sandbox is mis-named. It is provided as chrome_sandbox however, this causes a core dump at launch unless you launch with --no-sandbox. Renaming that file to chrome-sandbox fixes the problem.
Can we work-around this in our process until the problem can be investigated more within the builds itself? I’m thinking in our update-chromium.sh script we simply unzip and then move the file in there. Easy enough.
Issue Analytics
- State:
- Created 7 years ago
- Comments:8 (5 by maintainers)
Top Results From Across the Web
Chromium Docs - Linux Sandboxing
Linux Sandboxing. Chromium uses a multiprocess model, which allows to give different privileges and restrictions to different parts of the browser.
Read more >CVE-2017-5123: Chrome Sandbox escape through linux ...
A linux kernel vulnerability introduced in 4.13 can be used to escape the chrome sandbox. 4.13 is a stable release and is included...
Read more >Disable Linux/Chrome OS seccomp filter GPU sandbox. (issue ...
The seccomp filter sandbox for the GPU process is causing crashes on Linux and Chrome OS. Disable it until we develop a more...
Read more >Troubleshooting - Puppeteer
Make sure all the necessary dependencies are installed. You can run ldd chrome | grep not on a Linux machine to check which...
Read more >Set up Linux on your Chromebook - Google Support
Fix problems with Linux · Restart your Chromebook. · Check that your virtual machine is up-to-date. In your browser, go to chrome://components ....
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found

I just talked this roadblock over with Torne on IRC a bit…
The sandbox file itself is not required on newer systems. The check for it hasn’t been removed which is causing the problems. However, older systems may still require it. The thing is, renaming alone is only enough to apparently make any errors silent (or will cause it to fail once something is hit.)
The recommended way to solve this is, move the sandbox into a static place,
sudo chown root chrome-sandbox; sudo chmod 4755 chrome-sandbox, then setCHROME_DEVEL_SANDBOXas an environment variable to the sandbox.If that env var is set, then regardless of what is in the folder itself it will be used and therefore cause no problems. So we have some options here:
O right On May 27, 2016 7:16 AM, “Jonathan Garbee” notifications@github.com wrote: