commit - 2ffd4266ce7e53f4d79e2b3b609857953bbcca34
commit + fe053a4a5dbc03189eb9999e2a0103b6f4451895
blob - 447ac6e454f227774c149ccb9aa0dca972d69567
blob + 6b78ef3855ca9f60917edfc27f944953007e4ef2
--- art/20.dockerising_gui_applications.txt
+++ art/20.dockerising_gui_applications.txt
@@ -107,7 +107,11 @@ live there. Finally, on NixOS and similar you'll have 
 where the default pipewire configs live instead of /usr/share/pipewire
 (probably $(dirname $(realpath `which pipewire`))/../share/pipewire).
 
+Also, note, that this is actually a pretty bad way of running firfox and
+chromium since both need to use namespaces for sandboxing. I don't think
+you can even run chromium like this without --no-sandbox.
 
+
 DEBUGGING
 
 First, make sure firefox/chromium/whatever works properly on the host