sarah/Openclaw-Proxmox
1
0
Fork 0
Code Issues Packages Projects Releases 1 Wiki Activity

Add --no-sandbox flag for Google Chrome running as root

Browse Source 
Chrome refuses to run as root without --no-sandbox regardless of container
privilege level. Patch the .desktop file, add a CLI wrapper, and flag the
dashboard shortcut.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
adadrag
2026-03-15 13:15:41 +00:00
parent bb2face70d
commit 1e08b7d57d
1 changed files with 15 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
setup-openclaw-lxc.sh
View File

@@ -279,19 +279,30 @@ NOAUTO
" "
ok "LXC-incompatible components disabled." ok "LXC-incompatible components disabled."
# ─── Configure Google Chrome as default browser ───────────────────────────── # ─── Configure Google Chrome for root user ───────────────────────────────────
info "Configuring Google Chrome as default browser..." info "Configuring Google Chrome..."
ct_exec " ct_exec "
# Chrome requires --no-sandbox when running as root
sed -i 's|Exec=/usr/bin/google-chrome-stable|Exec=/usr/bin/google-chrome-stable --no-sandbox|g' /usr/share/applications/google-chrome.desktop
mkdir -p /root/Desktop mkdir -p /root/Desktop
cp /usr/share/applications/google-chrome.desktop /root/Desktop/ cp /usr/share/applications/google-chrome.desktop /root/Desktop/
chmod +x /root/Desktop/google-chrome.desktop chmod +x /root/Desktop/google-chrome.desktop
# Wrapper so CLI calls also get --no-sandbox
cat > /usr/local/bin/google-chrome << 'WRAPPER'
#!/bin/bash
exec /usr/bin/google-chrome-stable --no-sandbox \"\$@\"
WRAPPER
chmod +x /usr/local/bin/google-chrome
update-alternatives --set x-www-browser /usr/bin/google-chrome-stable 2>/dev/null || true update-alternatives --set x-www-browser /usr/bin/google-chrome-stable 2>/dev/null || true
update-alternatives --set gnome-www-browser /usr/bin/google-chrome-stable 2>/dev/null || true update-alternatives --set gnome-www-browser /usr/bin/google-chrome-stable 2>/dev/null || true
xdg-mime default google-chrome.desktop x-scheme-handler/http 2>/dev/null || true xdg-mime default google-chrome.desktop x-scheme-handler/http 2>/dev/null || true
xdg-mime default google-chrome.desktop x-scheme-handler/https 2>/dev/null || true xdg-mime default google-chrome.desktop x-scheme-handler/https 2>/dev/null || true
xdg-mime default google-chrome.desktop text/html 2>/dev/null || true xdg-mime default google-chrome.desktop text/html 2>/dev/null || true
" "
ok "Google Chrome configured as default browser." ok "Google Chrome configured."
# ─── Create desktop shortcuts ──────────────────────────────────────────────── # ─── Create desktop shortcuts ────────────────────────────────────────────────
info "Creating desktop shortcuts..." info "Creating desktop shortcuts..."
@@ -318,7 +329,7 @@ Version=1.0
Type=Application Type=Application
Name=OpenClaw Dashboard Name=OpenClaw Dashboard
Comment=Open the OpenClaw Control UI in Google Chrome Comment=Open the OpenClaw Control UI in Google Chrome
Exec=google-chrome-stable http://127.0.0.1:18789/#token=${AUTH_TOKEN} Exec=google-chrome-stable --no-sandbox http://127.0.0.1:18789/#token=${AUTH_TOKEN}
Icon=web-browser Icon=web-browser
Terminal=false Terminal=false
Categories=Network;WebBrowser; Categories=Network;WebBrowser;