3 ms·
I use firejail and have the standard redirects in /usr/local/bin for most firejail supported applications, but the performance hit is definitely noticeable. I'm
by rjzzleep 6y ago
I use firejail and have the standard redirects in /usr/local/bin for most firejail supported applications, but the performance hit is definitely noticeable. I'm on an i7-8650U on my laptop with 16G ram.
Sandboxing _can_ be without overhead, but in the case of firejail it's definitely not the case.
- rfoo 6y ago> performance hit is definitely noticeable Could you please name which application, and how do you notice it?
- rjzzleep 6y agoI notice it by how long it takes to start applications when I run them through firejail vs. when I run them directly. I don't know if it also makes a difference during execution. EDIT: it's kinda amusing to get downvoted on this. a) There's no performance issue. Just use linux sandboxes b) There are these possible performance hits c) I use those sandboxes and I have observe X performance issues. a) Your performance issues are not valid performance issues, because I say so. Ok, gotcha
- swiley 6y agoThat's really a caching issue. Normally dynamically linked bins share a lot of code pages (many are already loaded) due to SOs. In jailed apps these are duplicated and have to be loaded again for each app.
- sokoloff 6y agoIt’s a caching issue that manifests itself as a performance difference, which is all GP claimed.
- hjek 6y agoI'm using a low-spec laptop, so I usually notice these things before others. With Firejail I don't notice any performance hit at all on any of the apps I've used: Telegram, various windows games under Wine, Chromium.