Firefox KeePassXC-Browser extension issue: "Cannot connect to KeePassXC"

[nix-tux]

Using KeePassXC and KeePassXC-Browser since many years on different distros and never had such a issue. After a fresh install of KDE Neon 5.26 the plugin doesn't work anymore. The settings and configuration are correct so far.

This workaround did not help: https://github.com/keepassxreboot/keepassxc-browser/wiki/Troubleshooting-guide

SOFTWARE/OS VERSIONS
KeePassXC 2.7.4 (ppa: phoerius-ubuntu-keepassxc-jammyI
KeePassXC-Browser 1.8.3.1
Firefox 106.0.5 (ppa: org.kde.neon.net.launchpad.ppa.mozillateam / no snap; no flatpack)
Linux/KDE Plasma 5.26
KDE Plasma Version: 5.26.2
KDE Frameworks Version: 5.99.0
Qt Version: 5.15.7

Btw: Thanks a lot for your great work! - And for your help ...

Greatings from switzerland
Daniel

[varjolintu]

Probably you checked these already from the troubleshooting guide, but just to make sure:

• Have you checked the socket path in $XDG_RUNTIME_DIR that it has a symbolic link under the real socket under $XDG_RUNTIME_DIR/app/org.keepassxc.KeePassXC/org.keepassxc.KeePassXC.BrowserServer/?
• Is there Firejail or something else that could interfere?

[Zszywek]

I have the same problem and I have checked the troubleshooting. I use Firejail but it worked with it before as I have whitelisted the directory for the socket

[droidmonkey]

Whitelist the new sun directory under xdg run, ./app/org.keepassxc.KeePassXC/

[Zszywek]

I tried that already, my firefox.local under ~/.config/firejail reads:
whitelist /run/user/1000/app/org.keepassxc.KeePassXC
Although I just caught an information while trying to run firefox throught hte console, that is:
Warning: not remounting /run/user/1000/app/org.keepassxc.KeePassXC.
May this be the culprit here?

[droidmonkey]

You forgot the trailing slash (and so did i)

[Zszywek]

I tried with the slash at the end but it didn't work. It turns out the problem is known for the Firejail team and they are working on making it work automatically. To make the thing work I'll leave the link for other people with a similar problem.
Thank you for trying to help anyway, keep up with a your work and have a nice day :)

[domker]

I have exactly the same problem, but under Arch Linux.
I also use Firejail and additionally PSD (profile-sync-daemon).
The problem occurred with KeepassXC versions above 2.7.1.

Operating System: Arch Linux
KDE Plasma Version: 5.26.3
KDE Frameworks Version: 5.99.0
Qt Version: 5.15.7
Kernel Version: 6.0.8-arch1-1 (64-bit)
Graphics Platform: X11
KeepassXC: 2.7.4-1
KeePassXC-Browser: 1.8.3.1

Adding "whitelist /run/user/1000/app/org.keepassxc.KeePassXC/" or "whitelist /run/user/1000/org.keepassxc.KeePassXC" to the local file does nothing either.

The last working version of KeepassXC is 2.7.1-1
The difference I noticed between KeepassXC 2.7.1-1 and 2.7.2-1 and above is:

KeepassXC 2.7.1-1:
/run/user/1000/org.keepassxc.KeePassXC.BrowserServer
(socket not symbolic link)
additionally:
/run/user/1000/app/org.keepassxc.KeePassXC/org.keepassxc.KeePassXC.BrowserServer
(also socket)

KeepassXC 2.7-2-1 and above:
/run/user/1000/org.keepassxc.KeePassXC.BrowserServer
(symbolic link to the socket below)
/run/user/1000/app/org.keepassxc.KeePassXC/org.keepassxc.KeePassXC.BrowserServer
(socket)

From the level of the browser, the file is visible, but it cannot be accessed.

[droidmonkey]

You need to "noblacklist ${RUNDIR}/app"

netblue30/firejail#5444 (comment)

[varjolintu]

Firejail section added to the troubleshooting guide.