Sketchup & Sandboxie

[Rob]

Hi, I found this program and I think it’s really interesting. I’d like to understand if it’s possible to create a working Sandbox for programs like IronCAD, SketchUp, etc. My PC has an RTX 5070, so maybe it could work well.

Can someone explain how to do it? I tried, but the installation stops and doesn’t proceed.
Thanks

 

[bastik-1001]

Hello,

(this assumes that you are using Sandboxie-Plus with its main application SandMan.exe)

if you have not yet created a new sandbox, beside "DefaultBox", you should create a new sandbox. In the main window, click on the menu entry "Sandbox > Create New Box", optionally name it, like "CAD", select "Standard Sandbox".

Then you can use the troubleshooting wizard to help with the installation of software that fails to install. Click on "Help" in the main window and select "Troubleshooting Wizard". Then click on the button "Fix issues with sandboxing". Then there should be a list of things, including "Failed to install application into a sandbox." (Second from the top). Then you give the wizard the path to the installer and select the sandbox you want to install the software in.

If that still fails, you can try to change settings to reduce the restrictions that are applied by Sandboxie.

The application compartment box type reduces some restrictions and aims to be more compatible, but that can only be tested for 5 minutes, which can be too short for some installations that take longer. While most features are freely available, the compartment box type (among other things) is something the developer seeks some contribution for. However, in the Global Settings you can get a free certificate to test if some paid feature, does what one is looking for.

Some software can't be installed into a sandbox, like software that requires a driver, as drivers can't be installed into a sandbox, provided by Sandboxie. Some software tries to detect virtual machines (VM) or virtualization and dislikes to work under those conditions for different reasons, like DRM. Sometimes Sandboxie is just erroneously detected as VM, but sometimes it is actively looked for and then the program may exit with an error message. While the first case can often be worked around, the latter is something that is more difficult and could be an arms race, between evading detection and detecting Sandboxie.

 

[Rob]

Hi, thank you so much for your help. I followed your guide, but it still doesn’t seem to work. Here are some of the errors that appear.
I don’t know how to fix it. But I have a doubt: Is it possible to install complex programs like SketchUp, AutoCAD, or IronCAD in a sandbox? Because if it’s not possible, I’ll have to use VMware, even though it doesn’t support GPU passthrough.

 

[bastik-1001]

There might be compatibility issues if the software is complex.

From the messages I can see that it is an MSI installer, which poses some issues with Sandboxie, the developer has still to sort out. You can try adding 'MsiInstallerExemptions=y' to your sandbox. Right-click on the sandbox, open the sandbox option. At the bottom left you can edit the INI of that sandbox.

VirtualBox also does not support GPU passthrough, as far as I know. QEMU may provide that, but I know far too less about it.

A VM is a good solution, for things that don't work well with Sandboxie.

 

[Rob]

Thank you... You are the Number ONE!

I followed your suggestion and modified the INI file... and I managed to install the program. Unfortunately, the program won’t run and an error message appears.

 

[bastik-1001]

You are welcome. Maybe it helps if you close all sandboxed processes, if any, and Sandboxie to start it again. Maybe even rebooting is required if Sandboxie-Plus (SandMan.exe) itself is failing.

The first error says that it could not load the registry it created and hints at possible reasons:

the registry hive file may be corrupt, or the drive containing the registry hive file (and its associated sandbox) may be full.

Can you confirm that the path the sandbox is located, usually, C:\ has empty disk space?

 

[Rob]

Yes i have 700 gb free

 

[Rob]

new error

 

[bastik-1001]

Yes i have 700 gb free

That's plenty. A few dozen MB should be enough for Sandboxie to function.

new error

This looks like the program does not like to start under the control of Sandboxie. There is an incompatibility.

You could optionally duplicate the sandbox with its content. Right-click on it in the main window, select "Sandbox Tools > Duplicate Box with content"

For testing, you can change the box type from the yellow standard to the green application compartment box. Right-click on the sandbox (the source or the copy) and open the Sandbox Options. In the options, you should be at the "General Options" with the "Box Options" tap open. There you see "Box type preset" with a drop-down menu, where you can change the type.

If you can start the application in such a box, we know that it works in principle.

 

[Rob]

I tried as you suggested, but I couldn’t get anything to work. So, I tried with another program: IronCAD. I installed the program by modifying the INI file as you taught me. Everything went smoothly. I tried to change the "Box Type Preset" from yellow to green, but it’s not clickable. Why is that?
Additionally, how can I modify network access? I want the programs inside the sandbox to not only persist after shutdown but also be completely isolated from the internet.

 

[bastik-1001]

I tried to change the "Box Type Preset" from yellow to green, but it’s not clickable. Why is that?

I was not aware that those are not available to be set. I may remember falsely that it was possible to test these box types.

You can add NoSecurityIsolation=y to the INI of the sandbox, to test it. If Sandboxie refuses to start the application in the sandbox due to that being a restricted feature, you can go to Global Settings > Support & Updates. There you should see a text box where you could enter a certificate, which you don't have, but you can request one from that page. (I can't look where, since if there is a certificate it won't be shown.)

how can I modify network access?

Sandbox Options > Network Options > [Process Restrictions]

You can select "Allow access" which is the default, or to block it.

I want the programs inside the sandbox to not only persist after shutdown

The default is that data inside the sandbox are kept. That could be changed at Sandbox Options > File Options > "Box delete options". It can be impractical to clear out a sandbox one installed something to, since one would need to install it again. One can make use of the snapshot feature.

One may create an initial state, take a snapshot with the snapshot manager, play around with the contents of the sandbox and then restore to snapshot 1. Right-click on a sandbox and then "Sandbox Manager". It applies while nothing is running in that sandbox. It is not possible to use it to run something, save that state and return to the running state.

 

[Rob]

Awesome!!! Following your advice, I managed to install a complex program like IronCAD... now I can test it and learn how to use it. Thank you so much for your help. I hope this thread will be useful to other users as well!