В Xorg работает все отменно, в Wayland лиса ведет себя очень странно, а именно – немного анимация притормаживает когда между вкладками мышку перемещаю. В ютубе все видосы дико тормозят до момента пока я не разверну видео на весь экран. Долго не мог понять в чем дело, пока не запустил Firefox без Firejail. Сразу стал летать! Вывод – дело в правилах firejail. Напомню, что в Xorg с Firefox через firejail таких проблем не наблюдается, значит дело в каких-то специфических правилах для Wayland.
Конфиги профилей скидывать не вижу смысла, т.к. они стандартые и я их не менял.
Высер примерно такой:
$ firejail firefox
Reading profile /home/user/.config/firejail/firefox.profile
Reading profile /etc/firejail/whitelist-usr-share-common.inc
Reading profile /etc/firejail/firefox-common.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-exec.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-proc.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-run-common.inc
Reading profile /etc/firejail/whitelist-runuser-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Seccomp list in: !chroot, check list: @default-keep, prelist: unknown,
Parent pid 12657, child pid 12661
Warning: An abstract unix socket for session D-BUS might still be available. Use –net or remove unix from –protocol set.
Warning: NVIDIA card detected, nogroups command ignored
Warning: /sbin directory link was not blacklisted
Warning: /usr/sbin directory link was not blacklisted
Warning: NVIDIA card detected, nogroups command ignored
Seccomp list in: !chroot, check list: @default-keep, prelist: unknown,
Warning: NVIDIA card detected, nogroups command ignored
Warning: NVIDIA card detected, nogroups command ignored
Warning: Replacing profile instead of stacking it. It is a legacy behavior that can result in relaxation of the protection. It is here as a temporary measure to unbreak the software that has been broken by switching to the stacking behavior.
Child process initialized in 141.56 ms
libEGL warning: egl: failed to create dri2 screen
libEGL warning: egl: failed to create dri2 screen
Crash Annotation GraphicsCriticalError: |[0][GFX1-]: Calling WaitFlushedEvent::Run: is delayed: 2115 (t=2.81373) [GFX1-]: Calling WaitFlushedEvent::Run: is delayed: 2115
console.error: ({})
JavaScript error: resource:///modules/SearchSERPTelemetry.sys.mjs, line 1799: TypeError: item is undefined
JavaScript warning: https://www.google.com/js/th/zy9rNhS9wlhNVTKoH2dvsgD5_XMSUSRS4-UwaGEJmsU.js, line 2580: unreachable code after return statement
JavaScript warning: https://www.google.com/js/th/zy9rNhS9wlhNVTKoH2dvsgD5_XMSUSRS4-UwaGEJmsU.js, line 2580: unreachable code after return statement
JavaScript warning: https://www.google.com/js/th/zy9rNhS9wlhNVTKoH2dvsgD5_XMSUSRS4-UwaGEJmsU.js, line 2580: unreachable code after return statement
JavaScript warning: https://www.google.com/js/th/zy9rNhS9wlhNVTKoH2dvsgD5_XMSUSRS4-UwaGEJmsU.js, line 2580:
…
Reading profile /home/user/.config/firejail/firefox.profile
Reading profile /etc/firejail/whitelist-usr-share-common.inc
Reading profile /etc/firejail/firefox-common.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-devel.inc
Reading profile /etc/firejail/disable-exec.inc
Reading profile /etc/firejail/disable-interpreters.inc
Reading profile /etc/firejail/disable-proc.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/whitelist-common.inc
Reading profile /etc/firejail/whitelist-run-common.inc
Reading profile /etc/firejail/whitelist-runuser-common.inc
Reading profile /etc/firejail/whitelist-var-common.inc
Seccomp list in: !chroot, check list: @default-keep, prelist: unknown,
Parent pid 12657, child pid 12661
Warning: An abstract unix socket for session D-BUS might still be available. Use –net or remove unix from –protocol set.
Warning: NVIDIA card detected, nogroups command ignored
Warning: /sbin directory link was not blacklisted
Warning: /usr/sbin directory link was not blacklisted
Warning: NVIDIA card detected, nogroups command ignored
Seccomp list in: !chroot, check list: @default-keep, prelist: unknown,
Warning: NVIDIA card detected, nogroups command ignored
Warning: NVIDIA card detected, nogroups command ignored
Warning: Replacing profile instead of stacking it. It is a legacy behavior that can result in relaxation of the protection. It is here as a temporary measure to unbreak the software that has been broken by switching to the stacking behavior.
Child process initialized in 141.56 ms
libEGL warning: egl: failed to create dri2 screen
libEGL warning: egl: failed to create dri2 screen
Crash Annotation GraphicsCriticalError: |[0][GFX1-]: Calling WaitFlushedEvent::Run: is delayed: 2115 (t=2.81373) [GFX1-]: Calling WaitFlushedEvent::Run: is delayed: 2115
console.error: ({})
JavaScript error: resource:///modules/SearchSERPTelemetry.sys.mjs, line 1799: TypeError: item is undefined
JavaScript warning: https://www.google.com/js/th/zy9rNhS9wlhNVTKoH2dvsgD5_XMSUSRS4-UwaGEJmsU.js, line 2580: unreachable code after return statement
JavaScript warning: https://www.google.com/js/th/zy9rNhS9wlhNVTKoH2dvsgD5_XMSUSRS4-UwaGEJmsU.js, line 2580: unreachable code after return statement
JavaScript warning: https://www.google.com/js/th/zy9rNhS9wlhNVTKoH2dvsgD5_XMSUSRS4-UwaGEJmsU.js, line 2580: unreachable code after return statement
JavaScript warning: https://www.google.com/js/th/zy9rNhS9wlhNVTKoH2dvsgD5_XMSUSRS4-UwaGEJmsU.js, line 2580:
…
Пробовал менять профиль добавляя в вайтлист всякие /dev/dri, /dev/nvidia0 – один хрен 🙁
Linux.org.ru: Форум – Security
Ваша реакция?
+1
+1
+1
+1
+1
+1
+1