Installing in CentOS / Rocky Linux / Alma Linux

[Tus1688]

Hi there,

Love what happen here, I want to install firejail in rocky linux (which considered same like centos), but I haven't found any suitable package for rpm except for fedora, any suggestions are welcomed. Thanks in advance! 👍

[rusty-snake]

You can build an rpm by yourself (see https://github.com/netblue30/firejail/wiki/Using-firejail-from-git#Fedora and https://github.com/netblue30/firejail/blob/master/Makefile.in#L230 to get started) or you can install it the ./configure && make && make install way (see https://github.com/netblue30/firejail/wiki/Using-firejail-from-git#makefile).

[Tus1688]

HI @rusty-snake
thank you for quick response, after reading wiki and rpm (edit: create rpm packages) documentation, I am a bit lost there, is there any simpler way instead of using make file method?

[rusty-snake]

The simpler way is to just use make:

git clone --depth 1 --branch 0.9.66 https://github.com/netblue30/firejail.git firejail \
&& cd firejail && ./configure --prefix=/usr --enable-selinux && make && sudo make install

The "better" way is to build a rpm package (untested):

TOPDIR=$(mktemp -dt firejail-build.XXXXXX)
BUILDDIR=$(rpm --define "_topdir $TOPDIR" --eval %_builddir)
RPMDIR=$(rpm --define "_topdir $TOPDIR" --eval %_rpmdir)
SOURCEDIR=$(rpm --define "_topdir $TOPDIR" --eval %_sourcedir)
SPECDIR=$(rpm --define "_topdir $TOPDIR" --eval %_specdir)
SRPMDIR=$(rpm --define "_topdir $TOPDIR" --eval %_srcrpmdir)

mkdir -p "$BUILDDIR" "$RPMDIR" "$SOURCEDIR" "$SPECDIR" "$SRPMDIR"

cp firejail.spec "$SPECDIR"/firejail.spec

spectool -C "$SOURCEDIR" --gf "$SPECDIR"/firejail.spec

rpmbuild --nodebuginfo --quiet --define "_topdir $TOPDIR" -bb "$SPECDIR"/firejail.spec

Name:           firejail
Version:        0.9.66
Release:        1%{?dist}
Summary:        Linux namespaces sandbox program

License:        GPLv2+
URL:            https://firejail.wordpress.com/
Source0:        https://github.com/netblue30/firejail/archive/refs/tags/%{version}.tar.gz

Recommends:     xdg-dbus-proxy
BuildRequires:  libselinux-devel

%description
Firejail is a SUID sandbox program that reduces the risk of security
breaches by restricting the running environment of untrusted applications
using Linux namespaces. It includes a sandbox profile for Mozilla Firefox.


%prep
%autosetup -c


%build
%configure --enable-selinux
%make_build


%install
make install-strip DESTDIR=%{buildroot}


%files
%config(noreplace) %{_sysconfdir}/firejail/firejail.config
%config(noreplace) %{_sysconfdir}/firejail/ids.config
%config(noreplace) %{_sysconfdir}/firejail/login.users
%config %{_sysconfdir}/firejail/*.inc
%config %{_sysconfdir}/firejail/*.net
%config %{_sysconfdir}/firejail/*.profile
%{_bindir}/firecfg
%{_bindir}/firejail
%{_bindir}/firemon
%{_bindir}/jailcheck
%{_libdir}/firejail
%{_datadir}/bash-completion/completions/firejail
%{_datadir}/bash-completion/completions/firecfg
%{_datadir}/bash-completion/completions/firemon
%{_datadir}/zsh/site-functions/_firejail
%{_docdir}/firejail/COPYING
%{_docdir}/firejail/README
%{_docdir}/firejail/RELNOTES
%{_docdir}/firejail/profile.template
%{_docdir}/firejail/redirect_alias-profile.template
%{_docdir}/firejail/syscalls.txt
%{_mandir}/man1/firecfg.1.gz
%{_mandir}/man1/firejail.1.gz
%{_mandir}/man1/firemon.1.gz
%{_mandir}/man1/jailcheck.1.gz
%{_mandir}/man5/firejail-login.5.gz
%{_mandir}/man5/firejail-profile.5.gz
%{_mandir}/man5/firejail-users.5.gz
%{vimfiles_root}/ftdetect/firejail.vim
%{vimfiles_root}/syntax/firejail.vim
%license COPYING

[Tus1688]

Thank you for your kindly response, will try that out soon 👍