For sandboxing webapps you will need to install the additional ports: wasi-libc wasi-compiler-rt wasi-libc++ If you compile firefox frequently, consider installing ccache and sccache, so that later updates can use the artifacts left over from previous builds.