Firejail: Difference between revisions
→Configuration: Update signal-desktop example |
m use console syntaxhighlight for shell commands |
||
| (One intermediate revision by one other user not shown) | |||
| Line 13: | Line 13: | ||
To start an application in a sandboxed enviroment use Firejail like this | To start an application in a sandboxed enviroment use Firejail like this | ||
<syntaxhighlight lang=" | <syntaxhighlight lang="console"> | ||
firejail bash | $ firejail bash | ||
</syntaxhighlight> | </syntaxhighlight> | ||
For a graphical application like [[Firefox]] web browser, it is recommended to also use a profile | For a graphical application like [[Firefox]] web browser, it is recommended to also use a profile | ||
<syntaxhighlight lang=" | <syntaxhighlight lang="console"> | ||
firejail --profile=$(nix --extra-experimental-features nix-command --extra-experimental-features flakes eval -f '<nixpkgs>' --raw 'firejail')/etc/firejail/firefox.profile firefox | $ firejail --profile=$(nix --extra-experimental-features nix-command --extra-experimental-features flakes eval -f '<nixpkgs>' --raw 'firejail')/etc/firejail/firefox.profile firefox | ||
</syntaxhighlight> | </syntaxhighlight> | ||
| Line 131: | Line 131: | ||
Run your preferred application inside the isolated Tor network | Run your preferred application inside the isolated Tor network | ||
<syntaxhighlight lang=" | <syntaxhighlight lang="console"> | ||
firejail --net=tornet --dns=46.182.19.48 --profile=$(nix --extra-experimental-features nix-command --extra-experimental-features flakes eval -f '<nixpkgs>' --raw 'firejail')/etc/firejail/firefox.profile firefox | $ firejail --net=tornet --dns=46.182.19.48 --profile=$(nix --extra-experimental-features nix-command --extra-experimental-features flakes eval -f '<nixpkgs>' --raw 'firejail')/etc/firejail/firefox.profile firefox | ||
</syntaxhighlight> | </syntaxhighlight> | ||
You can use a custom DNS server if you don't want to use the one of your system. In this example, it's a server by the German privacy NGO [https://digitalcourage.de/support/zensurfreier-dns-server Digitalcourage]. | You can use a custom DNS server if you don't want to use the one of your system. In this example, it's a server by the German privacy NGO [https://digitalcourage.de/support/zensurfreier-dns-server Digitalcourage]. | ||
Using [[networkd | Using [[Systemd/networkd/dispatcher]] it is possible to restart the Tor daemon every time network reconnect is performaed. This avoids having to wait for Tor network timeouts and reastablishes a new connection faster. | ||
For a detailed explanation on this setup refer the [https://www.void.gr/kargig/blog/2016/12/12/firejail-with-tor-howto original guide]. Please note that this is a experimental setup which doesn't guarantee anonymity or security in any circumstances. | For a detailed explanation on this setup refer the [https://www.void.gr/kargig/blog/2016/12/12/firejail-with-tor-howto original guide]. Please note that this is a experimental setup which doesn't guarantee anonymity or security in any circumstances. | ||
=== Add Desktop Icons to Firejailed Apps === | === Add Desktop Icons to Firejailed Apps === | ||