diff --git a/content/en/synthetics/troubleshooting/_index.md b/content/en/synthetics/troubleshooting/_index.md index 7e9359b1407..9183aa59c0a 100644 --- a/content/en/synthetics/troubleshooting/_index.md +++ b/content/en/synthetics/troubleshooting/_index.md @@ -164,6 +164,22 @@ This could uncover a resource exhaustion issue on your private locations workers Confirm you are not seeing [out of memory issues][102] with your private location deployments. If you have tried scaling your workers instances following the [dimensioning guidelines][103] already, reach out to [Datadog Support][104]. +### Requirements for browser tests running on private location + +Browser tests require elevated privileges to spawn (when the test execution starts) and kill (when the test execution ends) the browser process. If your private location is configured with a security context that restricts elevated privileges, then the private location emits error logs when the browser test is executed. The reported logs vary based on the browser that is selected for test execution. Tests executed on Chrome/Edge report the following error: +``` +Critical error in startBrowser: Failed to launch the browser process! +sudo: The "no new privileges" flag is set, which prevents sudo from running as root. +sudo: If sudo is running in a container, you may need to adjust the container configuration to disable the flag. +``` + +Firefox reports the following error: +``` +Impossible to spawn Firefox: binary is not a Firefox executable +sudo: The "no new privileges" flag is set, which prevents sudo from running as root. +sudo: If sudo is running in a container, you may need to adjust the container configuration to disable the flag. +``` + ### Requirements for ICMP tests running on private location ICMP tests use the `ping` command to assess network routes and connectivity to a host. `ping` opens a raw socket to send ICMP packets through, so it requires the `NET_RAW` capability to allow for the creation of raw sockets. If your container is configured with a security context that drops or removes this capability, ICMP tests will not be able to function properly on the private location.