"SUID sandbox helper binary" warning on debian 10

Describe the bug

Unable to run the program GitHubDesktop.

[6028:0303/110012.970291:FATAL:setuid_sandbox_host.cc(157)] 
The SUID sandbox helper binary was found, but is not configured correctly. 
Rather than run without sandboxing I'm aborting now. 
You need to make sure that /home/ma/GitHubDesktop-linux-2.3.1-linux1.deb/data/opt/GitHub Desktop/chrome-sandbox is owned by root and has mode 4755.
追踪与中断点陷阱
Trace and breakpoint traps

Version & OS

GitHubDesktop-linux-2.3.1-linux1.deb

Linux ma-pc 4.19.0-8-amd64 #1 SMP Debian 4.19.98-1 (2020-01-26) x86_64 GNU/Linux

Debian GNU/Linux 10 (buster)

Steps to reproduce the behavior

github-desktop

Expected behavior

A clear and concise description of what you expected to happen.

Actual behavior

A clear and concise description of what actually happened.

Screenshots

Add screenshots to help explain your problem, if applicable.

Logs

Attach your logs by opening the Help menu and selecting Show Logs..., if applicable.

Additional context

Add any other context about the problem here.

[jfgordon2]

Just downloaded Debian 10 (GNOME) and tested @q-codes:

sudo chown root /the/path/to/chrome-sanbox sudo chmod 4755 /the/path/to/chrome-sanbox

I unfortunately got a Trace/breakpoint trap error

Adding the following command afterwards worked for me:

sudo sysctl kernel.unprivileged_userns_clone=1

[shiftkey]

1. Update the app/package.json file to use a name without a space, then
2. Update the script/electron-builder-linux.yml to include a desktop key so that GitHub Desktop is still presented to the end-user

Step 1 was how it was originally configured (you can override productName in electron-builder config), but I think we had issues with the generate .desktop file using this new value and the app appearing as GitHubDesktop when you search for it. Step 2 would improve this, but I think the last time I tried this I wasn’t happy with the duplication of things that were in app/package.json.

I’ve been planning to move away from electron-builder for a while for many reasons (which I’ll elaborate on in the next PR), so I’m gonna use #262 as an opportunity to see if electron-installer-debian is easier to use, and extract that from the electron-builder config.

I’ve tested electron-installer-debian and it appears to be installing into /usr/lib/github-desktop/ by default without any config changes, which is precisely what we want.