Arch Linux User Repository

FYI: The latest version of Zoom (6.1.11-1) stopped working again (same issue), but the workaround fixes it.

@flylightning Thanks for the reply. With Zoom 6.1.0-1 it seems to be working again (without any workaround).

@mod20 Related firejail upstream issue: https://github.com/netblue30/firejail/issues/6372. For me, using my integrated intel GPU works. But I can reproduce your issue when I disable my integrated GPU and only enable Nvidia GPU via sudo envycontrol -s nvidia. According to the upstream issue, it is related to new nvidia driver version 550.90.07-3, it seems new nvidia driver needs to access /sys/module directory, unblacklist that directory works. I followed the upstream suggestions and mkdir ~/.config/firejail; echo 'noblacklist /sys/module' > ~/.config/firejail/globals.local and it works. More strict blacklist can be achieved by https://github.com/netblue30/firejail/issues/6372#issuecomment-2168589096 and https://github.com/netblue30/firejail/issues/6372#issuecomment-2169761067, not tested tho. I'll investigate it further.

UPDATE: This merged upstream firejail pull request https://github.com/netblue30/firejail/pull/6387 fixed the issue. So instead of adding new config as I mentioned above, you can use aur firejail-git package, or wait until new firejail version 0.9.74.

It appears this is not working anymore on latest version of Zoom (6.0.12-1) and Firejail (0.9.72-3):

% zoom-firejail              
Reading profile /etc/firejail/zoom.profile
Reading profile /etc/firejail/electron.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-exec.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/disable-xdg.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-runuser-common.inc
Reading profile /etc/firejail/whitelist-usr-share-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Parent pid 50668, child pid 50669
Warning: NVIDIA card detected, nogroups command ignored
Warning: NVIDIA card detected, nogroups command ignored
Warning: NVIDIA card detected, nogroups command ignored
Warning: /sbin directory link was not blacklisted
Warning: /usr/sbin directory link was not blacklisted
Warning: NVIDIA card detected, nogroups command ignored
Warning: NVIDIA card detected, nogroups command ignored
Child process initialized in 197.43 ms

Parent is shutting down, bye...

I just get a glitchy window and then it crashes after about 5 seconds running. Non-firejail Zoom is working just fine.

Just a quick note: If you have fish as your default shell, zoom-firejail fails to launch (syntax error at --), but after a quick chsh and re-login it works.

Edit: This has been fixed upstream, and looks to be released in firejail 0.9.74, see https://github.com/netblue30/firejail/issues/5599 for details.

@snowball Sure, I would love to.

@flylightning Thanks for the patch! I've updated the package with your changes.

Would you be interested in taking ownership of this package? I no longer use it.

From f3014654b419dc6a0120e834d331465e806f7be9 Mon Sep 17 00:00:00 2001
From: Xiao Pan <gky44px1999@gmail.com>
Date: Fri, 27 Jan 2023 13:47:43 -0800
Subject: [PATCH] firejail 0.9.72 removed --shell= and set --shell=none as the
 default

---
 PKGBUILD      | 4 ++--
 zoom-firejail | 3 +--
 2 files changed, 3 insertions(+), 4 deletions(-)

diff --git a/PKGBUILD b/PKGBUILD
index 79de6a9..06e154c 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -1,7 +1,7 @@
 # Maintainer: Excitable Snowball <excitablesnowball@gmail.com>

 pkgname=zoom-firejail
-pkgver=0.1.6
+pkgver=0.1.7
 pkgrel=1
 pkgdesc=".desktop file for running Zoom in Firejail"
 arch=('x86_64')
@@ -12,7 +12,7 @@ install=zoom-firejail.install
 source=('ZoomFirejail.desktop'
         'zoom-firejail')
 sha512sums=('88342fd5847dd58c271ea9cb2ca7c4497fba00b3ea761a8ce630e1d072a7e39c426fffe62cc5fdb6c8516a33e70dd292109c41f7d3966fee7acb78b32c3a0e6a'
-            'dafee2e2586e090c09bb039d5a9d9e6035fff19c67725226a550707ee4602562f7e2adafdab34454b664240c4b025f1e1e3763917dd1e1566309db002ccab48f')
+            'aea3761bd540ebe71b350a1f7fd79683080d73a1c26373ad1f91a552f5c9319665cba4e1d3bc0267bfca3f8d37598ec5077797eec43561f5f7bcd3b583df4b2a')

 package() {
     install -Dm755 zoom-firejail "$pkgdir"/usr/bin/zoom-firejail
diff --git a/zoom-firejail b/zoom-firejail
index 9bae8d1..46c3390 100755
--- a/zoom-firejail
+++ b/zoom-firejail
@@ -1,3 +1,2 @@
 #!/bin/sh
-# `--shell=none` is a workaround for https://github.com/netblue30/firejail/issues/3434
-/usr/bin/firejail --shell=none -- zoom "$@"
+/usr/bin/firejail -- zoom "$@"
-- 
2.39.1

I needed to add --ignore=caps.keep to get my camera to show up, as per this issue. Anyone else experiencing this?

If i download something in the firejail, where is it on the host filesystem?