From 73a403700d0dcf459ed26a23bd454ef0524f0c13 Mon Sep 17 00:00:00 2001 From: Null-Phnix Date: Thu, 14 May 2026 21:17:44 -0400 Subject: [PATCH] fix(browser): rename AGENT_BROWSER_CHROME_FLAGS to AGENT_BROWSER_ARGS The sandbox-bypass injection in _run_browser_command wrote AGENT_BROWSER_CHROME_FLAGS, but agent-browser (the Rust binary) reads AGENT_BROWSER_ARGS. This made the --no-sandbox workaround for root/AppArmor-restricted systems a silent no-op. Fixes #23496 --- tools/browser_tool.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/tools/browser_tool.py b/tools/browser_tool.py index 79a6c7e617212..15189528f869f 100644 --- a/tools/browser_tool.py +++ b/tools/browser_tool.py @@ -1873,7 +1873,7 @@ def _run_browser_command( # - Ubuntu 23.10+ / AppArmor systems: unprivileged user namespaces # are restricted, causing Chromium to exit with "No usable sandbox" # even for non-root users running under systemd or containers. - if "AGENT_BROWSER_CHROME_FLAGS" not in browser_env: + if "AGENT_BROWSER_ARGS" not in browser_env: _needs_sandbox_bypass = False if hasattr(os, "geteuid") and os.geteuid() == 0: _needs_sandbox_bypass = True @@ -1892,7 +1892,7 @@ def _run_browser_command( except OSError: pass if _needs_sandbox_bypass: - browser_env["AGENT_BROWSER_CHROME_FLAGS"] = ( + browser_env["AGENT_BROWSER_ARGS"] = ( "--no-sandbox --disable-dev-shm-usage" )