Crashes on Ubuntu 24.04 due to permissions on /opt/Hyper/chrome-sandbox

[laidbackware]

• Ubuntu 24.04
• 3.4.1 and 4.0.0 canary 5 from deb
• https://gist.github.com/laidbackware/b4cefe9b20a1ef4cccea5a0cc1b82d71
• N/A
• **Open **

Issue

After upgrading from from Ubuntu 23.10 to 24.04 Hyper 3.4.1 started crashing on open with SIGTRAP in dlsym_doit(). I upgraded to 4.0.0 canary 5 and still the same problem.

Running in verbose mode from another terminal results a file permissions error, but .

➜ hyper -v
[28388:0428/111718.055728:FATAL:setuid_sandbox_host.cc(157)] The SUID sandbox helper binary was found, but is not configured correctly. Rather than run without sandboxing I'm aborting now. You need to make sure that /opt/Hyper/chrome-sandbox is owned by root and has mode 4755.

~/Downloads 
➜ ll /opt/Hyper/chrome-sandbox
-rwxr-xr-x 1 root root 52808 Jul 13  2023 /opt/Hyper/chrome-sandbox

This can be fixed by running the following chmod command to enable the setuid bit, which changes the user executable mode to s.

➜ sudo chmod 4755 /opt/Hyper/chrome-sandbox

➜ ll /opt/Hyper/chrome-sandbox
-rwsr-xr-x 1 root root 52536 Jan  7  2023 /opt/Hyper/chrome-sandbox

Removing and re-installing or upgrading the deb sets the permissions back to default which results in crashing again.

I'm not sure whether it's related, but sudo apt install ./<file>.deb generates the following error.

N: Download is performed unsandboxed as root, as file '/home/matt/Downloads/hyper_3.4.1_amd64.deb' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied)

Issue also impacts the appimage.

➜ ./Hyper-4.0.0-canary.5-x86_64.AppImage 
[32189:0428/115238.921357:FATAL:setuid_sandbox_host.cc(157)] The SUID sandbox helper binary was found, but is not configured correctly. Rather than run without sandboxing I'm aborting now. You need to make sure that /tmp/.mount_Hyper-D928zV/chrome-sandbox is owned by root and has mode 4755.
Trace/breakpoint trap (core dumped)

[laidbackware]

It looks like this issue in electron-builder. In the resolution it says to run the build on Debian 11+. I find it strange that you would need to run the build at a newer OS version just to set file permissions. Actions ubuntu-latest is still 22.04 at the time of writing.

[vzhilong]

same question here. The ubuntu LTS 24.04 is release now, and the hyper cannot work.

[ayanamists]

I have the same problem.

[abixadamj]

Quick workaround is:

sudo chmod 4755 /opt/Hyper/chrome-sandbox

but it works until new update or something is made.

[laidbackware]

Quick workaround is:

sudo chmod 4755 /opt/Hyper/chrome-sandbox

but it works until new update or something is made.

@abixadamj this workaround is in the original description and it only works for installations, not for the appimage.

[abixadamj]

Yes, but I prefer deb files rather than AppImages, so didnt notice...

[ayanamists]

Quick workaround is:

sudo chmod 4755 /opt/Hyper/chrome-sandbox

but it works until new update or something is made.

@abixadamj this workaround is in the original description and it only works for installations, not for the appimage.

This problem may relates to a bug in electron, and they give a temporary solution. I also use Ubuntu 24.04, and this solution works in my machine.

sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0