Need guidance regarding launching sandboxed electron based apps (slack, microsoft-edge, etc...)

[lestephane]

How does one run such apps that are based on electron? I tried with and without --no-sandbox. Both fail but in different ways.

Here is an example with Slack, which I installed using nix-env -i slack in a nix-user-chroot shell:

$ nix-user-chroot ~/.nix sh -lc 'slack'
[54861:0413/112114.239424:FATAL:setuid_sandbox_host.cc(157)] The SUID sandbox helper binary was found, but is not configured correctly. Rather than run without sandboxing I'm aborting now. You need to make sure that /nix/store/agrqzqhdrvpbgsr3gkpb5893rhhi1isz-slack-4.29.149/lib/slack/chrome-sandbox is owned by root and has mode 4755.
Trace/breakpoint trap (core dumped)

$ nix-user-chroot ~/.nix sh -lc 'slack --no-sandbox'
Initializing local storage instance
(electron) Sending uncompressed crash reports is deprecated and will be removed in a future version of Electron. Set { compress: true } to opt-in to the new behavior. Crash reports will be uploaded gzipped, which most crash reporting servers support.
Gtk-Message: 11:23:09.297: Failed to load module "canberra-gtk-module"
Gtk-Message: 11:23:09.300: Failed to load module "canberra-gtk-module"
[54965:0413/112309.358184:ERROR:angle_platform_impl.cc(43)] Display.cpp:997 (initialize): ANGLE Display::initialize error 12289: glXQueryExtensionsString returned NULL
ERR: Display.cpp:997 (initialize): ANGLE Display::initialize error 12289: glXQueryExtensionsString returned NULL
[54965:0413/112309.358450:ERROR:gl_display.cc(508)] EGL Driver message (Critical) eglInitialize: glXQueryExtensionsString returned NULL
[54965:0413/112309.358502:ERROR:gl_display.cc(920)] eglInitialize OpenGL failed with error EGL_NOT_INITIALIZED, trying next display type
[54965:0413/112309.358919:ERROR:angle_platform_impl.cc(43)] Display.cpp:997 (initialize): ANGLE Display::initialize error 12289: glXQueryExtensionsString returned NULL
ERR: Display.cpp:997 (initialize): ANGLE Display::initialize error 12289: glXQueryExtensionsString returned NULL
[54965:0413/112309.358966:ERROR:gl_display.cc(508)] EGL Driver message (Critical) eglInitialize: glXQueryExtensionsString returned NULL
[54965:0413/112309.358998:ERROR:gl_display.cc(920)] eglInitialize OpenGLES failed with error EGL_NOT_INITIALIZED
[54965:0413/112309.359026:ERROR:gl_ozone_egl.cc(23)] GLDisplayEGL::Initialize failed.
[54965:0413/112309.361382:ERROR:viz_main_impl.cc(186)] Exiting GPU process due to errors during initialization
[04/13/23, 11:23:09:539] info: 
╔══════════════════════════════════════════════════════════╗
║      Slack 4.29.149, linux 5.19.0-38-generic on x64      ║
╚══════════════════════════════════════════════════════════╝ 
[04/13/23, 11:23:09:540] info: Configured logger via 
{
  "enableConsoleTransport": true,
  "identifierOverride": "webapp-service-worker-console",
  "shouldUseNewBackend": false,
  "loggerInstanceCount": 2
}
[54990:0413/112309.540695:ERROR:angle_platform_impl.cc(43)] Display.cpp:997 (initialize): ANGLE Display::initialize error 12289: glXQueryExtensionsString returned NULL
ERR: Display.cpp:997 (initialize): ANGLE Display::initialize error 12289: glXQueryExtensionsString returned NULL
[54990:0413/112309.540776:ERROR:gl_display.cc(508)] EGL Driver message (Critical) eglInitialize: glXQueryExtensionsString returned NULL
[54990:0413/112309.540813:ERROR:gl_display.cc(920)] eglInitialize OpenGL failed with error EGL_NOT_INITIALIZED, trying next display type
[54990:0413/112309.541118:ERROR:angle_platform_impl.cc(43)] Display.cpp:997 (initialize): ANGLE Display::initialize error 12289: glXQueryExtensionsString returned NULL
ERR: Display.cpp:997 (initialize): ANGLE Display::initialize error 12289: glXQueryExtensionsString returned NULL
[54990:0413/112309.541158:ERROR:gl_display.cc(508)] EGL Driver message (Critical) eglInitialize: glXQueryExtensionsString returned NULL
[54990:0413/112309.541184:ERROR:gl_display.cc(920)] eglInitialize OpenGLES failed with error EGL_NOT_INITIALIZED
[54990:0413/112309.541211:ERROR:gl_ozone_egl.cc(23)] GLDisplayEGL::Initialize failed.
[04/13/23, 11:23:09:541] info: Predefined values for process 
{
  "NODE_ENV": "production",
  "platform": "linux",
  "type": "browser",
  "timeZone": "Europe/Athens",
  "PACKAGE_MANIFEST.productName": "Slack",
  "PACKAGE_MANIFEST.version": "4.29.149",
  "PACKAGE_MANIFEST.commit": "e0f61ad",
  "PACKAGE_MANIFEST.branch": "HEAD"
}
[54990:0413/112309.542849:ERROR:viz_main_impl.cc(186)] Exiting GPU process due to errors during initialization
[54933:0413/112309.582901:ERROR:browser_main_loop.cc(269)] Gtk: gtk_widget_add_accelerator: assertion 'GTK_IS_ACCEL_GROUP (accel_group)' failed
[54997:0413/112309.591245:ERROR:angle_platform_impl.cc(43)] Display.cpp:997 (initialize): ANGLE Display::initialize error 12289: glXQueryExtensionsString returned NULL
ERR: Display.cpp:997 (initialize): ANGLE Display::initialize error 12289: glXQueryExtensionsString returned NULL
[54997:0413/112309.591324:ERROR:gl_display.cc(508)] EGL Driver message (Critical) eglInitialize: glXQueryExtensionsString returned NULL
[54997:0413/112309.591354:ERROR:gl_display.cc(920)] eglInitialize OpenGL failed with error EGL_NOT_INITIALIZED, trying next display type
[54997:0413/112309.591626:ERROR:angle_platform_impl.cc(43)] Display.cpp:997 (initialize): ANGLE Display::initialize error 12289: glXQueryExtensionsString returned NULL
ERR: Display.cpp:997 (initialize): ANGLE Display::initialize error 12289: glXQueryExtensionsString returned NULL
[54997:0413/112309.591664:ERROR:gl_display.cc(508)] EGL Driver message (Critical) eglInitialize: glXQueryExtensionsString returned NULL
[54997:0413/112309.591691:ERROR:gl_display.cc(920)] eglInitialize OpenGLES failed with error EGL_NOT_INITIALIZED
[54997:0413/112309.591716:ERROR:gl_ozone_egl.cc(23)] GLDisplayEGL::Initialize failed.
[54997:0413/112309.592685:ERROR:viz_main_impl.cc(186)] Exiting GPU process due to errors during initialization
[55018:0413/112309.671014:ERROR:angle_platform_impl.cc(43)] Display.cpp:997 (initialize): ANGLE Display::initialize error 12289: glXQueryExtensionsString returned NULL
ERR: Display.cpp:997 (initialize): ANGLE Display::initialize error 12289: glXQueryExtensionsString returned NULL
[55018:0413/112309.671100:ERROR:gl_display.cc(508)] EGL Driver message (Critical) eglInitialize: glXQueryExtensionsString returned NULL
[55018:0413/112309.671141:ERROR:gl_display.cc(920)] eglInitialize OpenGL failed with error EGL_NOT_INITIALIZED, trying next display type
[55018:0413/112309.671454:ERROR:angle_platform_impl.cc(43)] Display.cpp:997 (initialize): ANGLE Display::initialize error 12289: glXQueryExtensionsString returned NULL
ERR: Display.cpp:997 (initialize): ANGLE Display::initialize error 12289: glXQueryExtensionsString returned NULL
[55018:0413/112309.671502:ERROR:gl_display.cc(508)] EGL Driver message (Critical) eglInitialize: glXQueryExtensionsString returned NULL
[55018:0413/112309.671529:ERROR:gl_display.cc(920)] eglInitialize OpenGLES failed with error EGL_NOT_INITIALIZED
[55018:0413/112309.671556:ERROR:gl_ozone_egl.cc(23)] GLDisplayEGL::Initialize failed.
[55018:0413/112309.672665:ERROR:viz_main_impl.cc(186)] Exiting GPU process due to errors during initialization
MESA-LOADER: failed to open iris: /run/opengl-driver/lib/dri/iris_dri.so: cannot open shared object file: No such file or directory (search paths /run/opengl-driver/lib/dri, suffix _dri)
failed to load driver: iris
MESA-LOADER: failed to open zink: /run/opengl-driver/lib/dri/zink_dri.so: cannot open shared object file: No such file or directory (search paths /run/opengl-driver/lib/dri, suffix _dri)
failed to load driver: zink
MESA-LOADER: failed to open kms_swrast: /run/opengl-driver/lib/dri/kms_swrast_dri.so: cannot open shared object file: No such file or directory (search paths /run/opengl-driver/lib/dri, suffix _dri)
failed to load driver: kms_swrast
MESA-LOADER: failed to open swrast: /run/opengl-driver/lib/dri/swrast_dri.so: cannot open shared object file: No such file or directory (search paths /run/opengl-driver/lib/dri, suffix _dri)
failed to load swrast driver
[54933:0413/112309.748795:ERROR:nss_util.cc(55)] Failed to create /home/scrubbed/.pki/nssdb directory.
[55008:0413/112310.149068:ERROR:platform_shared_memory_region_posix.cc(217)] Creating shared memory in /dev/shm/.org.chromium.Chromium.49CsbI failed: Operation not permitted (1)
[55008:0413/112310.149134:ERROR:platform_shared_memory_region_posix.cc(220)] Unable to access(W_OK|X_OK) /dev/shm: Operation not permitted (1)
[55008:0413/112310.149169:FATAL:platform_shared_memory_region_posix.cc(222)] This is frequently caused by incorrect permissions on /dev/shm.  Try 'sudo chmod 1777 /dev/shm' to fix.
Renderer process crashed - see https://www.electronjs.org/docs/tutorial/application-debugging for potential debugging information.
Error sending from webFrameMain:  Error: Render frame was disposed before WebFrameMain could be accessed
    at s.send (node:electron/js2c/browser_init:169:631)
    at g.send (node:electron/js2c/browser_init:165:2156)
    at /nix/store/agrqzqhdrvpbgsr3gkpb5893rhhi1isz-slack-4.29.149/lib/slack/resources/app.asar/dist/main.bundle.js:262:6544
    at Array.forEach (<anonymous>)
    at /nix/store/agrqzqhdrvpbgsr3gkpb5893rhhi1isz-slack-4.29.149/lib/slack/resources/app.asar/dist/main.bundle.js:262:6522
    at /nix/store/agrqzqhdrvpbgsr3gkpb5893rhhi1isz-slack-4.29.149/lib/slack/resources/app.asar/dist/main.bundle.js:143:7146
    at /nix/store/agrqzqhdrvpbgsr3gkpb5893rhhi1isz-slack-4.29.149/lib/slack/resources/app.asar/dist/main.bundle.js:130:22082
    at /nix/store/agrqzqhdrvpbgsr3gkpb5893rhhi1isz-slack-4.29.149/lib/slack/resources/app.asar/dist/main.bundle.js:263:922
    at dispatch (/nix/store/agrqzqhdrvpbgsr3gkpb5893rhhi1isz-slack-4.29.149/lib/slack/resources/app.asar/dist/main.bundle.js:130:18986)
    at Object.next (/nix/store/agrqzqhdrvpbgsr3gkpb5893rhhi1isz-slack-4.29.149/lib/slack/resources/app.asar/dist/main.bundle.js:318:87665)
Error sending from webFrameMain:  Error: Render frame was disposed before WebFrameMain could be accessed
    at s.send (node:electron/js2c/browser_init:169:631)
    at g.send (node:electron/js2c/browser_init:165:2156)
    at /nix/store/agrqzqhdrvpbgsr3gkpb5893rhhi1isz-slack-4.29.149/lib/slack/resources/app.asar/dist/main.bundle.js:262:6544
    at Array.forEach (<anonymous>)
    at /nix/store/agrqzqhdrvpbgsr3gkpb5893rhhi1isz-slack-4.29.149/lib/slack/resources/app.asar/dist/main.bundle.js:262:6522
    at /nix/store/agrqzqhdrvpbgsr3gkpb5893rhhi1isz-slack-4.29.149/lib/slack/resources/app.asar/dist/main.bundle.js:143:7146
    at /nix/store/agrqzqhdrvpbgsr3gkpb5893rhhi1isz-slack-4.29.149/lib/slack/resources/app.asar/dist/main.bundle.js:130:22082
    at /nix/store/agrqzqhdrvpbgsr3gkpb5893rhhi1isz-slack-4.29.149/lib/slack/resources/app.asar/dist/main.bundle.js:263:922
    at dispatch (/nix/store/agrqzqhdrvpbgsr3gkpb5893rhhi1isz-slack-4.29.149/lib/slack/resources/app.asar/dist/main.bundle.js:130:18986)
    at Object.next (/nix/store/agrqzqhdrvpbgsr3gkpb5893rhhi1isz-slack-4.29.149/lib/slack/resources/app.asar/dist/main.bundle.js:318:87665)
Error sending from webFrameMain:  Error: Render frame was disposed before WebFrameMain could be accessed
    at s.send (node:electron/js2c/browser_init:169:631)
    at g.send (node:electron/js2c/browser_init:165:2156)
    at /nix/store/agrqzqhdrvpbgsr3gkpb5893rhhi1isz-slack-4.29.149/lib/slack/resources/app.asar/dist/main.bundle.js:262:6544
    at Array.forEach (<anonymous>)
    at /nix/store/agrqzqhdrvpbgsr3gkpb5893rhhi1isz-slack-4.29.149/lib/slack/resources/app.asar/dist/main.bundle.js:262:6522
    at /nix/store/agrqzqhdrvpbgsr3gkpb5893rhhi1isz-slack-4.29.149/lib/slack/resources/app.asar/dist/main.bundle.js:143:7146
    at /nix/store/agrqzqhdrvpbgsr3gkpb5893rhhi1isz-slack-4.29.149/lib/slack/resources/app.asar/dist/main.bundle.js:130:22082
    at /nix/store/agrqzqhdrvpbgsr3gkpb5893rhhi1isz-slack-4.29.149/lib/slack/resources/app.asar/dist/main.bundle.js:263:922
    at dispatch (/nix/store/agrqzqhdrvpbgsr3gkpb5893rhhi1isz-slack-4.29.149/lib/slack/resources/app.asar/dist/main.bundle.js:130:18986)
    at Object.next (/nix/store/agrqzqhdrvpbgsr3gkpb5893rhhi1isz-slack-4.29.149/lib/slack/resources/app.asar/dist/main.bundle.js:318:87665)
Error sending from webFrameMain:  Error: Render frame was disposed before WebFrameMain could be accessed
    at s.send (node:electron/js2c/browser_init:169:631)
    at g.send (node:electron/js2c/browser_init:165:2156)
    at /nix/store/agrqzqhdrvpbgsr3gkpb5893rhhi1isz-slack-4.29.149/lib/slack/resources/app.asar/dist/main.bundle.js:262:6544
    at Array.forEach (<anonymous>)
    at /nix/store/agrqzqhdrvpbgsr3gkpb5893rhhi1isz-slack-4.29.149/lib/slack/resources/app.asar/dist/main.bundle.js:262:6522
    at /nix/store/agrqzqhdrvpbgsr3gkpb5893rhhi1isz-slack-4.29.149/lib/slack/resources/app.asar/dist/main.bundle.js:143:7146
    at /nix/store/agrqzqhdrvpbgsr3gkpb5893rhhi1isz-slack-4.29.149/lib/slack/resources/app.asar/dist/main.bundle.js:130:22082
    at /nix/store/agrqzqhdrvpbgsr3gkpb5893rhhi1isz-slack-4.29.149/lib/slack/resources/app.asar/dist/main.bundle.js:263:922
    at dispatch (/nix/store/agrqzqhdrvpbgsr3gkpb5893rhhi1isz-slack-4.29.149/lib/slack/resources/app.asar/dist/main.bundle.js:130:18986)
    at Object.next (/nix/store/agrqzqhdrvpbgsr3gkpb5893rhhi1isz-slack-4.29.149/lib/slack/resources/app.asar/dist/main.bundle.js:318:87665)