mviereck / x11docker

Run GUI applications and desktops in docker and podman containers. Focus on security.
MIT License
5.62k stars 378 forks source link

AppImage and FUSE #365

Closed grigio closed 3 years ago

grigio commented 3 years ago

I tried with serveral arguments but I still can't run an AppImage inside a container, ideas?

dlopen(): error loading libfuse.so.2
mviereck commented 3 years ago

I am not familiar with Appimage, but likely it needs more privileges than a container should have. Compare https://stackoverflow.com/questions/48402218/fuse-inside-docker

Something like this might work:

x11docker --cap-default --share /dev/fuse -- --cap-add SYS_ADMIN -- imagename

Try to reduce these options to find out which are needed indeed.

grigio commented 3 years ago

Thanks for the reply, no same error, I also tried with "privileged"

x11docker --cap-default --share $HOME --share /dev/fuse -- --cap-add SYS_ADMIN --privileged -- imagename
mviereck commented 3 years ago

I discourage --privileged because it drops literally all container security. The container essentially has root access to the host system.

I recommend to follow the guidance at https://github.com/mviereck/x11docker#privilege-checks to find out what is really needed.