Arch Linux User Repository

I needed to add --ignore=caps.keep to get my camera to show up, as per this issue. Anyone else experiencing this?

If i download something in the firejail, where is it on the host filesystem?

The zoom links contain both room info and password; so you can copy/paste those parts seperately to the zoom join window; is what I'm doing. (For people that don't use firefox.)

Ah, that's nice. I used the unjailed Zoom to log in and then switched to this one, where I appeared as already logged in.

BTW I got it working by visiting https://<SSO Zoom domain>/saml/login?from=desktop in Firefox. (Sometimes you need to do this twice.) This generates a zoommtg link which also works with the firejail version.

@snowball: The problem seems to be the way that the browser is invoked. Zoom stores a file in ~/.cache/kioexec/krun/ and the path is then passed to the browser. The file doesn't actually exist where it has supposedly been stored. This could actually be the result of sandboxing the application.

@mod20: I'm not sure, sorry. I don't have access to a SSO-enabled Zoom account to test with. If you want to submit a bug or patch upstream, this is the Firejail profile for Zoom: https://github.com/netblue30/firejail/blob/master/etc/profile-m-z/zoom.profile

Is this working with SSO login? Couldn't get it to work using neither Firefox or Chrome...

@snowball I use a WM (bspwm); mainly access icons through gtk3 app (rofi). Might be gtk related.

@fordprefect as just a wrapper around a launcher; this package is appropriate to be hosted on AUR. There are very similar approaches (like pacman-cleanup-hook, or reflector-timer on the top of my head) that don't have external sources. For couple lines of text; having an external repository would just be extra layers of abstraction.

@bbaserdem Updated. Out of curiosity, what desktop environment are you using? I don't have that issue on XFCE4.

@fordprefect I'd prefer not to, sorry. If someone else with experience maintaining packages wishes to do so, I don't mind handing over maintainership.

The zoom official pkg links the desktop launcher icon to Zoom.png but XDG specification does not support icon filetypes. If you change the line in ZoomFirejail.desktop from Icon=Zoom.png to Icon=Zoom; it will display the proper icon. Currently; it cannot find the icon and displays an empty icon. The zoom pkgbuild already includes this patch.

Thanks for maintaining this useful package! I could not find a reference but as far as I understand it is not welcome to host package sources directly in the AUR git for several reasons, even for very small code snippets. Could you move your stuff to a public hosting e.g. a Github project? Positive side effect would be easier reuse in other distros.

@iltep64 Thanks for figuring this out! I added your --shell=none workaround in zoom-firejail 0.1.5.

@snowball @hockdudu I've encountered the same issue, while using fish. Another workaround in the script is to set the $SHELL environment variable to /bin/bash, or provide either the --shell=none or --shell=/bin/bash flag to firejail (before the -- arg separator).

It seems like an upstream bug with Firejail, as the documentation does say it defaults to bash, but the code behavior looks different. I filed a bug report.

actually, maybe not. it seems like it has more to do with Firejail and how it interacts with Zoom (the calendar link opens a second firejail version, I think), rather than the legacy zoom client still running. I think this error might just be something I have to deal with.

It works! Thank you so much snowball!

It does seem like there may still be one issue. Even after rebooting, each time I click an an xdg-open link in Chromium or Brave, the zoom-firejail client says that I'm currently signed in on another device. I don't see two copies of Zoom running in the gnome system tray, and I definitely never started the regular zoom client. I think somehow it is still running in the background though after restarting?

@asynec It depends what program you're opening the invite links from. Firefox will prompt you by default. Chromium will use xdg-open. I don't know about other programs. Here's how to check what xdg-open is currently configured to use for all the schemes that Zoom recognizes:

xdg-mime query default x-scheme-handler/zoommtg
xdg-mime query default x-scheme-handler/zoomus
xdg-mime query default x-scheme-handler/tel
xdg-mime query default x-scheme-handler/callto
xdg-mime query default x-scheme-handler/zoomphonecall

If you would like to change them all to open under Firejail, here's how:

xdg-mime default ZoomFirejail.desktop x-scheme-handler/zoommtg
xdg-mime default ZoomFirejail.desktop x-scheme-handler/zoomus
xdg-mime default ZoomFirejail.desktop x-scheme-handler/tel
xdg-mime default ZoomFirejail.desktop x-scheme-handler/callto
xdg-mime default ZoomFirejail.desktop x-scheme-handler/zoomphonecall

Please let me know if that resolves your issue. If it does, I'll add a post-install script to print out additional instructions.

How can I associate Zoom links with Zoom-Firejail instead of the regular Zoom? By default, my cal invites are still opening in the unsafe version of Zoom.

@hockdudu I'm unable to reproduce the issue under fish. What is /bin/sh symlinked to on your system?

I use fish as my shell and I got this error:

fish: Unknown command: --
fish:
--
^

Replacing this line in zoom-firejail solved my problem.

-/usr/bin/firejail -- zoom "$@"
+/usr/bin/firejail zoom "$@"