Skip to content

docs: explain Ubuntu AppImage sandbox launch failures - #1117

Open
mvanhorn wants to merge 1868 commits into
webadderallorg:mainfrom
mvanhorn:fix/888-ubuntu-appimage-sandbox-launch
Open

mvanhorn wants to merge 1868 commits into
webadderallorg:mainfrom
mvanhorn:fix/888-ubuntu-appimage-sandbox-launch

Conversation

@mvanhorn

@mvanhorn mvanhorn commented Oct 9, 2026 •

Copy link
Copy Markdown
Contributor

Pull Request Template

The README adds an Ubuntu AppImage section that identifies this setuid_sandbox_host.cc abort and distinguishes it from a missing FUSE dependency. It documents starting a trusted release build with --no-sandbox, notes that the flag must be passed on every launch and that it disables Chromium's sandbox, and says a system-wide user-namespace change is not required for the workaround.

On Ubuntu 24.04 and later, and on TUXEDO OS, Recordly-linux-x64.AppImage aborts as soon as it starts. Chromium reports that the SUID sandbox helper was found but chrome-sandbox is not configured correctly, then the process hits a trace/breakpoint trap and dumps core. AppArmor can block unprivileged user namespaces, so Chromium cannot set up its user-namespace sandbox and falls back to the chrome-sandbox helper. That helper inside an AppImage is not setuid root, so Chromium exits instead of continuing. Installing FUSE or building Recordly from source does not lift the restriction.

Description

The README adds an Ubuntu AppImage section that identifies this setuid_sandbox_host.cc abort and distinguishes it from a missing FUSE dependency. It documents starting a trusted release build with --no-sandbox, notes that the flag must be passed on every launch and that it disables Chromium's sandbox, and says a system-wide user-namespace change is not required for the workaround.

Motivation

Covered in the summary above.

Type of Change

  • New Feature
  • Bug Fix
  • Refactor / Code Cleanup
  • Documentation Update
  • Other (please specify)

Related Issue(s)

Fixes #888

Screenshots / Video

No user-visible surface changes in this PR, so there is nothing to show.

Testing Guide

This change touches documentation only, so there is no test to run.

Checklist

  • I have performed a self-review of my code.
    Not claimed: no review round ran on this change before submission.
  • I have added any necessary screenshots or videos.
    Not verified: this needs a person on the named hardware or environment.
  • I have linked related issue(s) and updated the changelog if applicable.
    Not claimed: this diff changes no changelog or release-note file.

Thank you for contributing!

Summary by CodeRabbit

  • Documentation
    • Added Ubuntu AppImage troubleshooting guidance for a chrome-sandbox startup failure, including how it differs from a missing FUSE issue.
    • Documented a workaround for trusted release AppImages and noted its security implications and per-launch requirement.

young and others added 30 commits August 25, 2026 19:05
…-recording-resume-fix

Improve app presence and preview/export fidelity
…r-visual-polish

Polish editor preview and motion blur
…ws-hud-passthrough

fix windows passthrough
…ase-cleanup

Clean up codebase formatting, dependencies, extension system removal
Use practical bitrate targets across export backends and add dithering when converting full-range canvas frames to BT.709 video range.
Record captured frames with BT.709 conversion and explicit limited-range metadata. Share the Windows conversion code between capture engines and apply matching colour metadata on macOS and FFmpeg fallbacks.
…ncement-popups

Add announcements and polish recording motion
…imental-update-modal

Fix experimental update channel and toast
webadderall and others added 27 commits October 3, 2026 10:19
…ware-decode-retry

Recover Lightning decoding and add voluntary export error reports
…rt-preferences-separation

Keep export preferences separate from project edits
…arding-email-sign-in

Add first-launch onboarding and email sign-in
…ed-sharing-ownership

Add account-scoped hosted sharing with bounded uploads
…-loading-autosave

Improve Home loading, thumbnails, and automatic project saves
…d-publish-ui

Add Link and Local publishing and a shared cloud library
…back-access-hardening

Tighten feedback table access and add rollback verification
Drag any corner of the floating webcam preview to resize it (120-480px per
side, kept inside the HUD viewport). The chosen size is saved and restored
the next time the HUD opens.

Fixes webadderallorg#1103

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…ting-preview-resizability

Make the floating webcam preview resizable
The README adds an Ubuntu AppImage section that identifies this
setuid_sandbox_host.cc abort and distinguishes it from a missing FUSE
dependency. It documents starting a trusted release build with
--no-sandbox, notes that the flag must be passed on every launch and
that it disables Chromium's sandbox, and says a system-wide
user-namespace change is not required for the workaround.

Refs webadderallorg#888
@coderabbitai

coderabbitai Bot commented Oct 9, 2026 •

Copy link
Copy Markdown
Contributor

Review in Change Stack →

Important

Review skipped

Review was skipped as selected files did not have any reviewable changes.

Run configuration
Commits

Reviewing files that changed from the base of the PR and between 55abd25 and 56e2635.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review

No actionable comments were generated in the recent review.

ℹ️ Recent review info
⚙️ Run configuration
  • Configuration used: Repository: webadderallorg/Recordly/.coderabbit.yaml
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 13f8486b-6736-4294-953e-77f5c13c2977
📥 Commits

Reviewing files that changed from the base of the PR and between 535d1cf and 55abd25.

📒 Files selected for processing (1)
  • README.md

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 9 remain after this review.

Walkthrough

The README adds Ubuntu AppImage troubleshooting guidance for a Chromium sandbox startup error. It documents when to use --no-sandbox, notes that the flag disables Chromium’s sandbox, and states that system-wide user-namespace changes are not required.

Changes: AppImage troubleshooting

Layer / File(s) Summary
Document the sandbox workaround
README.md
The README distinguishes the chrome-sandbox startup error from missing FUSE. It documents using --no-sandbox for trusted release AppImages with this error and notes the flag must be supplied at each launch. It warns that the flag disables Chromium’s sandbox.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other · Severity of issue fixed: Medium

Merge Risk: Minimal · previous review 55abd

The documented workaround matches the project’s AppImage and Electron behavior, and the README clearly warns that it disables Chromium’s sandbox. No actionable merge risk remains.

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Title check Passed The title clearly and concisely describes the main documentation change: explaining Ubuntu AppImage sandbox launch failures.
Description check Passed The description includes all required template sections and provides relevant context, motivation, change type, issue reference, testing guidance, and explanations for omitted screenshots and tests. T…
Linked Issues check Passed Issue #888 allows documentation as an alternative to changing AppImage behavior, adding an AppArmor profile, or adding a wrapper. README.md adds a focused Ubuntu AppImage section. It identifies the `s…
Out of Scope Changes check Passed The diff adds only the README.md troubleshooting section. The content directly supports issue #888 by explaining the reported launch failure and its documented workaround. No unrelated source, build, …
Docstring Coverage Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Finishing Touches
🧪 Generate unit tests (beta)
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

The main branch history no longer shares recent commits with this
branch. Take the tree of main and keep only the README section this PR
adds.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Bug]: AppImage crashes on Ubuntu 24.04+ due to SUID sandbox / unprivileged user namespaces restriction

7 participants