abundant-magician-17307
09/24/2025, 8:36 AMtall-airline-16756
09/24/2025, 8:36 AMtall-airline-16756
09/24/2025, 8:36 AM--cap-add=SYS_ADMIN flag is missing from your Docker run command. Since egress version v1.7.6, Chrome sandboxing is turned on by default to keep things more secure, and this flag is necessary for that.
To fix this, just make sure your Docker run command includes the --cap-add SYS_ADMIN flag like this:
docker run --rm \
--cap-add SYS_ADMIN \
-e EGRESS_CONFIG_FILE=/out/config.yaml \
-v ~/livekit-egress:/out \
livekit/egress
If you’re working with a custom seccomp profile to enable Chrome sandboxing, don’t forget to add the --security-opt seccomp=chrome-sandboxing-seccomp-profile.json option. This profile helps Chrome’s sandbox environment by allowing the necessary system calls.
If you have any questions or need a hand with this, just let me know—I’m here to help!
Sources: magefile.go | Self-hosting the Egress Service | LiveKit Docsabundant-magician-17307
09/24/2025, 8:45 AMtall-airline-16756
09/24/2025, 8:46 AM--cap-add SYS_ADMIN, don’t worry—let’s explore a few more things together:
1. Seccomp Profile: Make sure to include the --security-opt seccomp=chrome-sandboxing-seccomp-profile.json option in your Docker run command. This profile is essential for Chrome sandboxing to work smoothly.
2. System Resources: It’s a good idea to check that your system has at least 4 CPUs and 4 GB of memory. Sometimes, not having enough resources can cause Chrome to struggle during startup.
3. Configuration: Take a look at whether enable_chrome_sandbox is set to true in your configuration. If it is, the necessary Docker security setup (including the seccomp profile) needs to be fully in place.
Keeping an eye on your system’s CPU and memory usage while starting egress can really help spot any resource issues. Please feel free to reach out if you’d like me to walk you through any of these steps or if you have more questions—I’m here to help!
Sources: test/edge.go | Self-hosting the Egress Service | LiveKit Docsabundant-magician-17307
09/24/2025, 8:53 AMabundant-magician-17307
09/24/2025, 9:34 AM