6 Commits

Author SHA1 Message Date
SamAcctX 8100f0f46b firefox, waterfox: let the neko user own the profile root (#718)
`mkdir -p /home/neko/.mozilla/firefox/profile.default/extensions` (and
the same for `.waterfox`) runs as root and only `profile.default` was
handed to the neko user, so the directories above it stayed root-owned.
The crash reporter of current Firefox (158 in the 3.2 images) keeps its
reports and Glean store in `.mozilla/firefox/Crash Reports`; after a
browser crash it cannot create that directory and exits with

  failed to acquire Glean store: Os { code: 13, kind: PermissionDenied, ... }
  (toolkit/crashreporter/client/app/src/send_ping.rs:51)

or, in auto-submit mode,

  Failed to create directory (/home/neko/.mozilla/firefox/Crash Reports/pending): Permission denied

so no report survives. Verified on firefox:3.2.0 by running the reporter
against a main-process minidump: it fails as shipped and creates
`Crash Reports/{glean,pending,events}` once `.mozilla` belongs to neko.
Waterfox builds its profile root the same way and gets the same fix.

The other apps are fine: the base image chowns all of /home/neko, the
Chromium-based ones and remmina only COPY --chown files into it,
tor-browser chowns its whole /opt install.

Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
2026-10-16 22:02:06 +02:00
Miroslav Šedivý eba9821614 rename base image. 2025-03-30 21:52:34 +02:00
Miroslav Šedivý cda281b78f update workflows. 2025-03-30 17:29:44 +02:00
Miroslav Šedivý 4ab3dccc7f fix amd64 & build. 2025-03-30 16:16:58 +02:00
Miroslav Šedivý a377f0f9f2 firefox combine arm with amd64. 2025-03-30 13:11:22 +02:00
Miroslav Šedivý f9868aa92e refactor build script. 2025-03-28 15:36:11 +01:00