How to configure firefox to handle ENOSPC on fork gracefully?
In case user network namespace are disabled on linux, fork return ENOSPC, as the user network namespaces are exhausted (as the limit is set to 0 [1,2]).
It would be great if there would be a work around for such a situation that user network namespaces are disabled. It would be even better if firefox could handle that situation gracefully and run without `CLONE_NEWNET` automatically.
The output is:
``` [Parent 5699, IPC Launch] WARNING: fork() failed: No space left on device: file /builddir/build/BUILD/firefox-112.0.2/ipc/chromium/src/base/process_util_linux.cc:273 [Parent 5699, IPC I/O Parent] WARNING: Failed to launch tab subprocess: file /builddir/build/BUILD/firefox-112.0.2/ipc/glue/GeckoChildProcessHost.cpp:800 ``` Note that " No space left on device" is wrong, it is about the limit in terms of user network namespaces.
Best, David
[1] https://apptainer.org/docs/admin/main/user_namespace.html#disabling-network-namespaces [2] https://docs.mpcdf.mpg.de/faq/hpc_software.html#why-do-certain-gui-applications-not-work-any-more-on-the-login-nodes-of-hpc-clusters-what-are-the-alternatives