From 0ca0ca9d5192f88043d71dfb7d3e3b31c348030b Mon Sep 17 00:00:00 2001
From: thespad <spad@linuxserver.io>
Date: Tue, 26 Aug 2025 11:34:04 +0100
Subject: [PATCH] Suppress no sandbox warning

---
 Dockerfile              | 4 ++++
 Dockerfile.aarch64      | 4 ++++
 README.md               | 1 +
 jenkins-vars.yml        | 1 -
 readme-vars.yml         | 1 +
 root/defaults/autostart | 4 +++-
 6 files changed, 13 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 27b6c1e..6645d7f 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,3 +1,5 @@
+# syntax=docker/dockerfile:1
+
 FROM ghcr.io/linuxserver/baseimage-selkies:ubuntunoble
 
 # set version label
@@ -35,6 +37,8 @@ RUN \
   echo 'pref("datareporting.healthreport.uploadEnabled", false);' >> ${FIREFOX_SETTING} && \
   echo 'pref("trailhead.firstrun.branches", "nofirstrun-empty");' >> ${FIREFOX_SETTING} && \
   echo 'pref("browser.aboutwelcome.enabled", false);' >> ${FIREFOX_SETTING} && \
+  echo 'pref("security.sandbox.warn_unprivileged_namespaces", false);' >> ${FIREFOX_SETTING} && \
+  printf "Linuxserver.io version: ${VERSION}\nBuild-date: ${BUILD_DATE}" > /build_version && \
   echo "**** cleanup ****" && \
   apt-get autoclean && \
   rm -rf \
diff --git a/Dockerfile.aarch64 b/Dockerfile.aarch64
index 720e2a6..c7c8fc3 100644
--- a/Dockerfile.aarch64
+++ b/Dockerfile.aarch64
@@ -1,3 +1,5 @@
+# syntax=docker/dockerfile:1
+
 FROM ghcr.io/linuxserver/baseimage-selkies:arm64v8-ubuntunoble
 
 # set version label
@@ -35,6 +37,8 @@ RUN \
   echo 'pref("datareporting.healthreport.uploadEnabled", false);' >> ${FIREFOX_SETTING} && \
   echo 'pref("trailhead.firstrun.branches", "nofirstrun-empty");' >> ${FIREFOX_SETTING} && \
   echo 'pref("browser.aboutwelcome.enabled", false);' >> ${FIREFOX_SETTING} && \
+  echo 'pref("security.sandbox.warn_unprivileged_namespaces", false);' >> ${FIREFOX_SETTING} && \
+  printf "Linuxserver.io version: ${VERSION}\nBuild-date: ${BUILD_DATE}" > /build_version && \
   echo "**** cleanup ****" && \
   apt-get autoclean && \
   rm -rf \
diff --git a/README.md b/README.md
index 9706156..c4b77c1 100644
--- a/README.md
+++ b/README.md
@@ -441,6 +441,7 @@ Once registered you can define the dockerfile to use with `-f Dockerfile.aarch64
 
 ## Versions
 
+* **26.08.25:** - Suppress sandbox security warning as it's misleading inside a container.
 * **16.08.25:** - Add proper cleanup logic for builds.
 * **01.07.25:** - Add Kasm branch.
 * **23.06.25:** - Rebase to Selkies, HTTPS is now required.
diff --git a/jenkins-vars.yml b/jenkins-vars.yml
index 37c8c97..0d74981 100644
--- a/jenkins-vars.yml
+++ b/jenkins-vars.yml
@@ -7,7 +7,6 @@ custom_version_command: "curl -s -L https://ppa.launchpadcontent.net/xtradeb/app
 release_type: stable
 release_tag: latest
 ls_branch: master
-build_armhf: false
 repo_vars:
   - BUILD_VERSION_ARG = 'FIREFOX_VERSION'
   - LS_USER = 'linuxserver'
diff --git a/readme-vars.yml b/readme-vars.yml
index 511bda0..663daef 100644
--- a/readme-vars.yml
+++ b/readme-vars.yml
@@ -115,6 +115,7 @@ init_diagram: |
   "firefox:latest" <- Base Images
 # changelog
 changelogs:
+  - {date: "26.08.25:", desc: "Suppress sandbox security warning as it's misleading inside a container."}
   - {date: "16.08.25:", desc: "Add proper cleanup logic for builds."}
   - {date: "01.07.25:", desc: "Add Kasm branch."}
   - {date: "23.06.25:", desc: "Rebase to Selkies, HTTPS is now required."}
diff --git a/root/defaults/autostart b/root/defaults/autostart
index 9674ecb..47ada37 100644
--- a/root/defaults/autostart
+++ b/root/defaults/autostart
@@ -1 +1,3 @@
-firefox ${FIREFOX_CLI}
+#!/bin/bash
+
+/usr/bin/firefox ${FIREFOX_CLI}