Arch Linux

Fred7109

Member

Registered: 2015-05-17

Posts: 134

[Solved] Proxychains and firejail at the same time

Hello

I have a question regarding proxychains and firejail: I would like to have the security of running thunderbird through firejail with seccomp, and at the same time the privacy by running it through a socks proxy in proxychains. I cannot get i to function properly, does anyone have an idea regarding how I can get this to work, or another way I can accomplish the same?

This is how I would run thunderbird with firejail:

firejail --seccomp thunderbird

And with proxychains:

proxychains thunderbird

Regards,
Frederik

Last edited by Fred7109 (2016-06-23 20:39:14)

paulstelian97

Member

Registered: 2016-01-13

Posts: 28

Re: [Solved] Proxychains and firejail at the same time

Does proxychains not work inside firejail?

Fred7109

Member

Registered: 2015-05-17

Posts: 134

Re: [Solved] Proxychains and firejail at the same time

Unfortunately not. When I for example try to run:

firejail proxychains thunderbird

It says following:

[xxx@xxx-arch-linux Startup]$ firejail proxychains thunderbird
Reading profile /etc/firejail/default.profile
Reading profile /etc/firejail/disable-common.inc
Reading profile /etc/firejail/disable-programs.inc
Reading profile /etc/firejail/disable-passwdmgr.inc
Warning: user namespaces not available in the current kernel.

** Note: you can use --noprofile to disable default.profile **

Parent pid 19433, child pid 19434
Warning: /sbin directory link was not blacklisted
Warning: /usr/sbin directory link was not blacklisted

Child process initialized
[proxychains] config file found: /etc/proxychains.conf
[proxychains] preloading /usr/lib/libproxychains4.so
[proxychains] DLL init: proxychains-ng 4.11
Sandbox: unexpected multithreading found; this prevents using namespace sandboxing.  (If you're LD_PRELOAD'ing nVidia GL: that's not necessary for Gecko.)

It asks for a new profile in Thunderbird, because it cannot find the correct one?

smudge

Member

Registered: 2011-03-20

Posts: 158

Re: [Solved] Proxychains and firejail at the same time

I think that's firejail pointing out that you could disable the default.profile if you wanted to. You could try:

firejail --profile=/etc/firejail/thunderbird.profile

followed by:

proxychains thunderbird

in the new firejail shell but I've no idea if that will work.

Fred7109

Member

Registered: 2015-05-17

Posts: 134

Re: [Solved] Proxychains and firejail at the same time

Thank you smudge, it works! However, it comes with an error message:

Exception... "Component returned failure code: 0x8000ffff (NS_ERROR_UNEXPECTED) [nsIPrefBranch.getCharPref]"  nsresult: "0x8000ffff (NS_ERROR_UNEXPECTED)"  location: "JS frame :: chrome://sogo-connector/content/general/preference.service.addressbook.groupdav.js :: GdPSvc__getPref :: line 126"  data: no] (126)
exception getting pref 'extensions.ca.inverse.addressbook.groupdav.ldap_2.servers.history.url':

maltfield

Member

Registered: 2026-02-03

Posts: 1

Re: [Solved] Proxychains and firejail at the same time

I was able to get this working with the following command

firejail --profile=firefox --whitelist="/home/user/.mozilla/firefox/google" proxychains firefox -no-remote -new-instance -profile "/home/user/.mozilla/firefox/google" "www.google.com"

I still have issues getting DNS to go through the proxychains, but otherwise it's working. I wrote a guide with more info here:

* https://tech.michaelaltfield.net/2026/0 … oxychains/

schard

Forum Moderator

From: Hannover

Registered: 2016-05-06

Posts: 2,550

Website

Re: [Solved] Proxychains and firejail at the same time

Mod note: Thanks for sharing, but please refrain from necro-bumping in the future. Closing this old thread.

---

Inofficial first vice president of the Rust Evangelism Strike Force