Brave browser won't run in sandbox mode on Debian 9 Stretch

[markbradley1982]

Description

If I try running Brave without the sandbox mode, I get the following error:

No usable sandbox! Update your kernel or see https://chromium.googlesource.com/chromium/src/+/master/docs/linux_suid_sandbox_development.md for more information on developing with the SUID sandbox. If you want to live dangerously and need an immediate workaround, you can try using --no-sandbox.

Brave does indeed work with --no-sandbox mode albeit with a much less safe security mode. Also updating the kernel doesn't solve the problem.

Steps to Reproduce

1. Open up Konsole
2. Type "Brave"
3. That's it

Actual result:

No usable sandbox! Update your kernel or see https://chromium.googlesource.com/chromium/src/+/master/docs/linux_suid_sandbox_development.md for more information on developing with the SUID sandbox. If you want to live dangerously and need an immediate workaround, you can try using --no-sandbox.

Expected result:

Actually being about to use this web browser

Reproduces how often:

100%

Brave Version

about:brave info:

Brave: 0.24.0
V8: 6.9.427.23
rev: f657f15
Muon: 8.1.6
OS Release: 4.9.0-6-amd64
Update Channel: Release
OS Architecture: x64
OS Platform: Linux
Node.js: 7.9.0
Brave Sync: v1.4.2
libchromiumcontent: 69.0.3497.100

Reproducible on current live release:

I'm not using the live build. I following the github installation instructions for Debian using the apt update and apt install commands.

Additional Information

No.

[Mikaela]

You might be interested in #15245 and linked issues.

However in my opinion the easiest workaround for now is sudo sysctl kernel.unprivileged_userns_clone=1 and to make it permanent echo kernel.unprivileged_userns_clone = 1 | sudo tee /etc/sysctl.d/00-local-userns.conf

[bsclifton]

Thanks for the report folks - I'd like to ask if you can try grabbing the new version of Brave?
https://brave.com/download

Install instructions should be shown in the above link. If you run into problems, you can create an issue in the new repository:
https://github.com/brave/brave-browser

[Smooey]

You might be interested in #15245 and linked issues.

However in my opinion the easiest workaround for now is sudo sysctl kernel.unprivileged_userns_clone=1 and to make it permanent echo kernel.unprivileged_userns_clone = 1 | sudo tee /etc/sysctl.d/00-local-userns.conf

Have same issue, but doesn't work in Artix OS.. I have the namespace thing handled so far, but still get the "Trace/breakpoint trap" in terminal after typing "brave" and hitting enter. And Brave doesn't do nothing. So labeling this as "won't fix" doesn't help anyone get Brave running / working in various linux distros.

Again, namespace thing alright, but now brave still doesn't load and I get "Trace/breakpoint trap" in terminal after typing "brave" to try and run brave from terminal. Clicking on Brave icon in menu doesn't do nothing either. I thought I read some where in Red Hat bug site about someone having "headless chromium" running hence getting that "Trace/breakpoint trap" message.

https://bugs.chromium.org/p/chromium/issues/detail?id=782161

Leaving an update error log here, I know you're not supposed to do this but I did it anyway. I'm posting from Virtual Box with Artix Linux OS... I ran brave from terminal with sudo privs... then got these errors from terminal. Not sure if it answers any of the questions to above errors though..

[2550:2550:1222/004537.506003:ERROR:gl_implementation.cc(281)] Failed to load /usr/lib/brave-bin/swiftshader/libGLESv2.so: /usr/lib/brave-bin/swiftshader/libGLESv2.so: cannot open shared object file: No such file or directory [2550:2550:1222/004537.542359:ERROR:viz_main_impl.cc(184)] Exiting GPU process due to errors during initialization [2575:2575:1222/004538.154049:ERROR:gl_implementation.cc(281)] Failed to load /usr/lib/brave-bin/swiftshader/libGLESv2.so: /usr/lib/brave-bin/swiftshader/libGLESv2.so: cannot open shared object file: No such file or directory [2575:2575:1222/004538.200410:ERROR:viz_main_impl.cc(184)] Exiting GPU process due to errors during initialization [2520:2527:1222/004538.341180:ERROR:browser_gpu_channel_host_factory.cc(139)] Failed to launch GPU process. [2520:2613:1222/004538.510565:ERROR:bus.cc(396)] Failed to connect to the bus: Could not parse server address: Unknown address type (examples of valid types are "tcp" and on UNIX "unix") [2520:2537:1222/004538.940167:ERROR:rewards_service_impl.cc(139)] Failed to read file: /root/.config/BraveSoftware/Brave-Browser/Default/ledger_state [2520:2527:1222/004540.105293:ERROR:browser_gpu_channel_host_factory.cc(139)] Failed to launch GPU process. [2520:2520:1222/004540.324615:ERROR:x11_input_method_context_impl_gtk.cc(144)] Not implemented reached in virtual void libgtkui::X11InputMethodContextImplGtk::SetSurroundingText(const base::string16 &, const gfx::Range &) [2520:2520:1222/004540.573682:ERROR:gpu_process_transport_factory.cc(967)] Lost UI shared context. [2520:2520:1222/004543.379631:ERROR:brave_stats_updater.cc(141)] Failed to send usage stats to update server, error: -2, response code: 400, url: https://laptop-updates.brave.com/1/usage/brave-core?platform=linux-bc&channel=unknown&version=0.57.18&daily=true&weekly=true&monthly=true&first=true&woi=2018-12-17&ref=none