On Sat, 22 Feb 2020, at 11:13, Christian Rebischke via arch-general wrote: > > you need to disable a few flags: > > --disable-software-rasterizer, --disable-dev-shm-usage and > --disable-web-security If you have to go so far as to --disable-web-security, then this must be a point where replacing nspawn with firejail looks like the better alternative.