Google Chrome configuration
Running as root in Flatpak
Start Google Chrome with --no-sandbox in Ironforge's root desktop session:
flatpak run com.google.Chrome --no-sandbox
Hide the command-line flag warning
Chrome displays a banner about the unsupported --no-sandbox flag. To hide
it, create this policy file on the host:
/etc/opt/chrome/policies/managed/local-command-line-warnings.json
Create the directory if needed:
mkdir -p /etc/opt/chrome/policies/managed
The file should contain:
{
"CommandLineFlagSecurityWarningsEnabled": false
}
The Chrome Flatpak launcher imports policies from this host directory. The setting therefore applies whether Chrome is started from the terminal or a desktop shortcut.
Fully quit Chrome and start it again to load the policy. Open chrome://policy
to check that CommandLineFlagSecurityWarningsEnabled is set to false.
This hides security warnings for command-line flags; it does not restore Chrome's internal sandbox. Flatpak's outer isolation is separate.
Verified on Ironforge with Google Chrome 152.0.7977.82 in Flatpak on
2026-09-20. Adding --test-type to the launcher and Flatpak flags file did
not suppress the banner in this setup; the policy above did.