title: How to properly use sandbox with puppeteer on linux and stop getting insecure?
body: <p>I read docs :</p>
  
  <p><a href="https://github.com/GoogleChrome/puppeteer/blob/master/docs/troubleshooting.md" rel="nofollow noreferrer">https://github.com/GoogleChrome/puppeteer/blob/master/docs/troubleshooting.md</a></p>
  
  <p><a href="https://chromium.googlesource.com/chromium/src/+/master/docs/linux_suid_sandbox_development.md" rel="nofollow noreferrer">https://chromium.googlesource.com/chromium/src/+/master/docs/linux_suid_sandbox_development.md</a></p>
  
  <p><a href="https://chromium.googlesource.com/chromium/src/+/master/docs/linux_suid_sandbox.md" rel="nofollow noreferrer">https://chromium.googlesource.com/chromium/src/+/master/docs/linux_suid_sandbox.md</a></p>
  
  <p><a href="https://chromium.googlesource.com/chromium/src/+/master/docs/linux_sandboxing.md" rel="nofollow noreferrer">https://chromium.googlesource.com/chromium/src/+/master/docs/linux_sandboxing.md</a></p>
  
  <p><a href="https://chromium.googlesource.com/chromium/src/+/master/docs/linux_sandbox_ipc.md" rel="nofollow noreferrer">https://chromium.googlesource.com/chromium/src/+/master/docs/linux_sandbox_ipc.md</a></p>
  
  <p>But can't figure out the way to have a properly configured  sandbox, and no way to find the script <code>update-linux-sandbox.sh</code> on my system.</p>
  
  <p>I've found it <a href="https://raw.githubusercontent.com/thlorenz/chromium-build/master/update-linux-sandbox.sh" rel="nofollow noreferrer">here</a></p>
  
  <p>but I get :</p>
  
  <pre><code>$ ./update-linux-sandbox.sh
  /tmp/../out/Debug does not exist. Use "BUILDTYPE=Release ./update-linux-sandbox.sh" If you are building in Release mode
  $ BUILDTYPE=Release ./update-linux-sandbox.sh
  /tmp/../out/Release does not exist. Use "BUILDTYPE=Release ./update-linux-sandbox.sh" If you are building in Release mode
  </code></pre>
  
  <p>The only insecure workaround I have is to use :</p>
  
  <pre><code>const browser = await puppeteer.launch(
      {headless: true, args: ['--no-sandbox', '--disable-setuid-sandbox']}
  );
  </code></pre>
  
  <p>Any idea to do the things properly ?</p>