“Error fbuilder: invalid program” when using --build

Description

Running an app installer but there is no profile for the installer (nor for the app itself). Ran:

$ LC_ALL=C firejail --build=kalium.profile --net=vnet0 --dns=$mydns --env=XDG_CONFIG_HOME="${myconfig_dir}" /usr/local/src/kalium/gradlew jvmTest

Output:

Error fbuilder: invalid program
Firejail profile builder
Usage: firejail [--debug] --build[=profile-file] program-and-arguments

Omitting “--build=kalium.profile” is syntactically accepted, but it craps out with lots of other errors.

Steps to Reproduce

See https://github.com/wireapp/kalium/issues/1230

Expected behavior

FJ is expected to execute permissively in order to build a custom profile.

Actual behavior

“invalid program” error.

Behavior without a profile

Including --noprofile changes nothing.

Environment

Debian stable. firejail version 0.9.64.4

Checklist

• The issues is caused by firejail (i.e. running the program by path (e.g. /usr/bin/vlc) "fixes" it). UNTESTED (unsafe to run outside of firejail)
• I can reproduce the issue without custom modifications (e.g. globals.local).
• The program has a profile. (If not, request one in https://github.com/netblue30/firejail/issues/1139)
• The profile (and redirect profile if exists) hasn't already been fixed upstream.
• I have performed a short search for similar issues (to avoid opening a duplicate).
  • I'm aware of browser-allow-drm yes/browser-disable-u2f no in firejail.config to allow DRM/U2F in browsers.
• I used --profile=PROFILENAME to set the right profile. (Only relevant for AppImages)

Log

Error fbuilder: invalid program
Firejail profile builder
Usage: firejail [--debug] --build[=profile-file] program-and-arguments

Error fbuilder: invalid program
Firejail profile builder
Usage: firejail [--debug] --build[=profile-file] program-and-arguments