diff --git a/README.md b/README.md index 2108735..909420f 100644 --- a/README.md +++ b/README.md @@ -35,7 +35,7 @@ Hardening applied: - Replacing bubblewrap with bubblewrap-suid so flatpak can be used without unprivileged user namespaces - Sets numerous hardening kernel parameters (Inspired by [Madaidan's Hardening Guide](https://madaidans-insecurities.github.io/guides/linux-hardening.html)) - Installs and enables [hardened_malloc](https://github.com/GrapheneOS/hardened_malloc) globally -- Installing Chromium from the koji updates-testing repo to always have the latest version of chromium, the stable chromium package lags behind on security patches ([Why chromium?](https://grapheneos.org/usage#web-browsing)) +- Installing Chromium into the base image ([Why chromium?](https://grapheneos.org/usage#web-browsing)) ## Why diff --git a/config/common-packages.yml b/config/common-packages.yml index b0c1760..a2f9d08 100644 --- a/config/common-packages.yml +++ b/config/common-packages.yml @@ -20,6 +20,7 @@ install: - koji - bubblewrap-suid - bubblejail + - chromium remove: - firefox diff --git a/config/common-scripts.yml b/config/common-scripts.yml index cec819e..95f9d61 100644 --- a/config/common-scripts.yml +++ b/config/common-scripts.yml @@ -2,5 +2,4 @@ type: script scripts: # this sets up the proper policy & signing files for signed images to work - signing.sh - - cron.sh - - chromium.sh \ No newline at end of file + - cron.sh \ No newline at end of file diff --git a/config/scripts/chromium.sh b/config/scripts/chromium.sh deleted file mode 100644 index 52bf65f..0000000 --- a/config/scripts/chromium.sh +++ /dev/null @@ -1,12 +0,0 @@ -#!/usr/bin/env bash - -# Tell this script to exit if there are any errors. -# You should have this in every custom script, to ensure that your completed -# builds actually ran successfully without any errors! -set -oue pipefail - -echo "Installing chromium from koji updates" -koji download-build --arch=x86_64 $(koji latest-build f39-updates chromium | awk 'NR==3 {print $1}') -rm chromedriver-*.rpm -rm chromium-headless-*.rpm -rpm-ostree install *.rpm \ No newline at end of file