[Webkit-unassigned] [Bug 213148] WEBKIT_FORCE_SANDBOX (bwrap) needs to consider /etc/fonts (and possibly other fontconfig locations)

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=213148

--- Comment #5 from Jan Pokorný [poki] <fedora at t.poki.me> ---
Somewhat minified bwrap-args:

> bwrap-args tr '\n' '\0' <<EOF
--die-with-parent
--ro-bind
/etc
/etc
--dev
/dev
--proc
/proc
--tmpfs
/tmp
--unsetenv
TMPDIR
--dir
/run
--ro-bind-try
/var/lib
/var/lib
--symlink
../run
/var/run
--symlink
../tmp
/var/tmp
--ro-bind
/sys
/sys
--ro-bind-try
/usr
/usr
--ro-bind-try
/lib
/lib
--ro-bind-try
/lib64
/lib64
--bind-try
/run/user/$(id -u)
/run/user/$(id -u)
--unshare-ipc
--bind-try
/home/$(id -un)
/home/$(id -un)
--dev-bind-try
/dev/snd
/dev/snd
--ro-bind-try
/usr/libexec/gstreamer-1.0/gst-plugin-scanner
/usr/libexec/gstreamer-1.0/gst-plugin-scanner
--ro-bind-try
/usr/libexec/gst-install-plugins-helper
/usr/libexec/gst-install-plugins-helper
--dev-bind-try
/dev/dri
/dev/dri
--dev-bind-try
/dev/mali
/dev/mali
--dev-bind-try
/dev/mali0
/dev/mali0
--dev-bind-try
/dev/umplock
/dev/umplock
--dev-bind-try
/dev/nvidiactl
/dev/nvidiactl
--dev-bind-try
/dev/nvidia0
/dev/nvidia0
--dev-bind-try
/dev/nvidia
/dev/nvidia
--dev-bind-try
/dev/kgsl-3d0
/dev/kgsl-3d0
--dev-bind-try
/dev/ion
/dev/ion
EOF

In this form, it also supports setting GDK_BACKEND=x11 in the main
"< bwrap-args" beginning command from [comment 2], and it exposes
this paradox this whole seems to be about:

- GDK_BACKEND=x11 -> nice fonts
- GDK_BACKEND=wayland -> pixelated fonts

On the same host, same session, same everything.

I don't grok why this would happen.

Can you advise, please?

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200613/44be0ee8/attachment.htm>