Appimage not working? asks for Sandboxing? Any advice?

Software PureOS
1

I am trying to install an AppImage (Gingko )
Here’s the terminal output

:~$ Gingko-2.4.8.AppImage 
[17366:0204/093839.672199:FATAL:setuid_sandbox_host.cc(157)] The SUID sandbox helper binary was found, but is not configured correctly. Rather than run without sandboxing I'm aborting now. You need to make sure that /tmp/.mount_GingkofpQ1us/chrome-sandbox is owned by root and has mode 4755.
Trace/breakpoint trap

Here’s the output for tmp showing no /.mount_GingkoofpQ1us

:/tmp# ls -a
.
..
.font-unix
.ICE-unix
MozillaMailnews
pulse-PKdhtXMmr18n
qtsingleapp-clemen-d211-3e8-lockfile
systemd-private-12c2b6743c8a4e209f2a6f65e9073f0c-bolt.service-Ytc8YR
systemd-private-12c2b6743c8a4e209f2a6f65e9073f0c-colord.service-edvUWx
systemd-private-12c2b6743c8a4e209f2a6f65e9073f0c-fwupd.service-EvBzPi
systemd-private-12c2b6743c8a4e209f2a6f65e9073f0c-haveged.service-KIbUmV
systemd-private-12c2b6743c8a4e209f2a6f65e9073f0c-ModemManager.service-q8DiM8
systemd-private-12c2b6743c8a4e209f2a6f65e9073f0c-ntp.service-KYgMgB
systemd-private-12c2b6743c8a4e209f2a6f65e9073f0c-rtkit-daemon.service-AsYcEY
systemd-private-12c2b6743c8a4e209f2a6f65e9073f0c-upower.service-eUDo4b
Temp-7724fef7-3e04-42e6-b362-7663399d9681
Temp-e2e76a74-fc30-4afc-9967-047d58ba30b3
.Test-unix
timeshift
tmp-15a.xpi
tracker-extract-files.1000
.X0-lock
.X1024-lock
.X11-unix
.XIM-unix

And running it as su:

sherab-librem:~$ sudo su Gingko-2.4.8.AppImage 
[sudo] password for sherab: 
su: user Gingko-2.4.8.AppImage does not exist

any suggestions?

2

Solution:

  1. run in terminal from a command line but append “–no-sandbox” to the command (leave space between)

  2. run in terminal: “sudo sysctl kernel.unprivileged_userns_clone=1” and try starting the usual way (clicking icon in launcher)

1 Like
3

perfect
worked immediately with no hassle!
Thank you @mladen

4

Wouldn’t this open the kernel up to some pretty serious security vulnerabilities though?