Fix linux build

New files under control 123.0.6312.106

.editorconfig

@@ -0,0 +1,5 @@
+[*.{yaml,sh,gn_args}]
+tab_width = 2
+indent_size = 2
+end_of_line = crlf
+indent_style = space

.gitattributes

@@ -0,0 +1,4 @@
+*.zip binary
+*.ttf binary
+*.otf binary
+*.ttc binary

.github/FUNDING.yml

@@ -1,4 +0,0 @@
-# These are supported funding model platforms
-
-liberapay: csagan5
-custom: https://www.bromite.org/#donate

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -46,6 +46,21 @@ body:
     validations:
       required: true
 
+  - type: dropdown
+    id: is_chromium2
+    attributes:
+      label: Are you sure?
+      description: |
+          Please check your answer above again, it is important information
+
+          If the bug is related to functionality that does not exist in Chromium then answer "No".
+      multiple: false
+      options:
+        - "Yes"
+        - "No"
+    validations:
+      required: true
+      
   - type: input
     id: cromite_version
     attributes:
@@ -66,47 +81,59 @@ body:
         - armeabi-v7a
         - x86
         - x64
+        - windows
+        - all
     validations:
       required: true
 
   - type: dropdown
-    id: android_version
+    id: platform_version
     attributes:
-      label: Android version
+      label: Platform version
       multiple: false
       description: What version of Android are you running?
       options:
-        - 14
-        - 13
-        - 12.1
-        - 12.0
-        - 11
-        - 10
-        - 9
-        - 8.1
-        - 8.0
-        - 7.1
-        - 7.0
-        - 6
-        - 5.1
-        - 5.0
-        - 4.4
-        - 4.3
-        - 4.2
-        - 4.1
-        - 4.0
+        - Android 14
+        - Android 13
+        - Android 12.1
+        - Android 12.0
+        - Android 11
+        - Android 10
+        - Android 9
+        - Android 8.1
+        - Android 8.0
+        - Android 7.1
+        - Android 7.0
+        - Android Emulator
+        - Windows 10
+        - Windows 11
+        - I prefer not to write it/No matter
     validations:
       required: true
 
   - type: input
     id: device_model
     attributes:
-      label: Device model
+      label: Android Device model
       description: What is your device model? This can usually be found in your device's settings in the "About" section.
       placeholder: (e.g. `OnePlus 8 (IN2010)`, or `SM-G960UZKABST`, etc.)
     validations:
       required: true
 
+  - type: dropdown
+    id: is_android_rooted
+    attributes:
+      label: Is the device rooted?
+      description: |
+          The information is important but not essential; it allows additional checks to be made.
+      multiple: false
+      options:
+        - "Yes"
+        - "No"
+        - "I prefer not to write it"
+    validations:
+      required: true
+      
   - type: textarea
     id: changed_flags
     attributes:
@@ -128,6 +155,7 @@ body:
       options:
         - "Yes"
         - "No"
+        - "Always Incognito Mode"
     validations:
       required: true
 

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -28,6 +28,8 @@ body:
           required: true
         - label: "I have searched [existing issues](https://github.com/uazo/cromite/issues) for my feature request. This is a new issue (NOT a duplicate) and is not related to another issue."
           required: true
+        - label: "I have searched [wont fix issues](https://github.com/uazo/cromite/issues?q=label%3Awontfix) and this request is not among them"
+          required: true
         - label: "This is a feature request for the Cromite browser; not the website nor F-Droid nor anything else."
           required: true
 
@@ -38,6 +40,7 @@ body:
       description: Features that are not related to privacy are not considered.
       multiple: false
       options:
+        - "<please select>"
         - "Yes"
         - "No"
     validations:

.github/workflows/build-images.yaml

@@ -9,7 +9,7 @@ permissions:
   repository-projects: none
   security-events: none
   statuses: none
- 
+
 on:
   workflow_dispatch:
     inputs:
@@ -17,29 +17,46 @@ on:
         description: 'chromium version'
         required: false
         default: ''
-  schedule: 
+      type:
+        description: 'runner?'
+        required: false
+        default: 'ubuntu-latest'
+  schedule:
    - cron: '0 1 * * *'
-        
+
 env:
-  VERSION: ${{ github.event.inputs.version }}
+  CHR_VERSION: ${{ github.event.inputs.version }}
   NEW_VERSION: ${{ null }}
-  
+
 name: Builds and pushes tagged image to DockerHub
 jobs:
   generate_build_deps:
     name: Generate Build Deps
-    runs-on: ubuntu-latest
+    runs-on: ${{ fromJSON( format('["ubuntu-latest", "{0}"]', github.event.inputs.type) )[github.event.inputs.type != ''] }}
     steps:
       - name: Reclaiming disk space on / by removing dotnet/android/ghc
+        #if: ${{ github.event.inputs.type == '' }}
         run: |
-          sudo rm -rf /usr/share/dotnet
-          sudo rm -rf /usr/local/lib/android
-          sudo rm -rf /opt/ghc
-          sudo apt-get remove google-cloud-sdk azure-cli google-chrome-stable \
+          test -d /usr/share/dotnet && sudo rm -rf /usr/share/dotnet
+          test -d /usr/local/lib/android && sudo rm -rf /usr/local/lib/android
+          test -d /opt/ghc && sudo rm -rf /opt/ghc
+          test -d /opt/hostedtoolcache/CodeQL && sudo rm -rf /opt/hostedtoolcache/CodeQL
+          sudo apt-get remove google-cloud-cli azure-cli google-chrome-stable \
                        firefox mysql-server-core-8.0 mono-devel podman \
-                       powershell
+                       powershell || true
           sudo apt-get autoremove
-          
+
+      - name: Enable proxy on container
+        shell: bash
+        if: ${{ github.event.inputs.type != 'ubuntu-latest' }}
+        run: |
+          if ! [[ -z "${HTTP_PROXY}" ]]; then
+            PROXY_ADDR=http://$(hostname -I | cut -d' ' -f1 | xargs):8118
+            echo "PROXY_ADDR=$PROXY_ADDR" >> $GITHUB_ENV
+            sudo iptables -D INPUT -p tcp -s localhost --dport 8118 -j ACCEPT
+            sudo iptables -D INPUT -p tcp --dport 8118 -j DROP
+          fi
+
       - name: Checkout repo
         uses: actions/checkout@v2
         with:
@@ -51,52 +68,107 @@ jobs:
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
-      
+
       - name: Check versions
         shell: bash
         run: |
-          if [ -z $VERSION ]; then
-            VERSION=$(curl -s https://omahaproxy.appspot.com/all.json | jq '.[] | select(.os | contains("win64")) | .versions[] | select(.channel | contains("stable")) | .current_version' | xargs)
-            echo "VERSION=$VERSION" >> $GITHUB_ENV
+          if [ -z $CHR_VERSION ]; then
+            LATEST_WIN=$(curl -s 'https://versionhistory.googleapis.com/v1/chrome/platforms/win64/channels/stable/versions/all/releases'  | jq -rc '.releases[].version' | sort -t. -k 1,1n -k 2,2n -k 3,3n -k 4,4n | tail -n 1)
+            LATEST_ANDROID=$(curl -s 'https://versionhistory.googleapis.com/v1/chrome/platforms/android/channels/stable/versions/all/releases'  | jq -rc '.releases[].version' | sort -t. -k 1,1n -k 2,2n -k 3,3n -k 4,4n | tail -n 1)
+            CHR_VERSION=$(echo -e "$LATEST_ANDROID\n$LATEST_WIN" | sort -t. -k 1,1n -k 2,2n -k 3,3n -k 4,4n | tail -n 1)
+
+            echo "LATEST_WIN=$LATEST_WIN" >> $GITHUB_ENV
+            echo "LATEST_ANDROID=$LATEST_ANDROID" >> $GITHUB_ENV
+            echo "CHR_VERSION=$CHR_VERSION" >> $GITHUB_ENV
           fi
-          
+
       - name: Building build-deps container ${{ env.VERSION }}
         shell: bash
         run: |
-          IS_PRESENT=$(docker inspect --type=image uazo/build-deps:$VERSION > /dev/null ; echo $?)
+          IS_PRESENT=$(docker inspect --type=image uazo/build-deps:$CHR_VERSION > /dev/null ; echo $?)
           if [ $IS_PRESENT -ne "0" ]; then
-            IS_PRESENT=$(docker manifest inspect uazo/build-deps:$VERSION > /dev/null ; echo $?)
+            IS_PRESENT=$(docker manifest inspect uazo/build-deps:$CHR_VERSION > /dev/null ; echo $?)
             if [ $IS_PRESENT -ne "0" ]; then
-              DOCKER_BUILDKIT=1 docker build -t uazo/build-deps:$VERSION \
+              DOCKER_BUILDKIT=1 docker build -t uazo/build-deps:$CHR_VERSION \
                 --progress plain \
-                --build-arg VERSION=$VERSION \
+                --build-arg VERSION=$CHR_VERSION \
                 --build-arg HTTP_PROXY="$PROXY_ADDR" \
                 --no-cache \
                 cromite/tools/images/build-deps/.
-              
-              docker push uazo/build-deps:$VERSION
-              echo "NEW_VERSION=$VERSION" >> $GITHUB_ENV
+
+              docker push uazo/build-deps:$CHR_VERSION
+              echo "NEW_VERSION=$CHR_VERSION" >> $GITHUB_ENV
             fi
-          fi          
+          fi
 
       - name: Building chromium container ${{ env.VERSION }}
         shell: bash
         run: |
-          IS_PRESENT=$(docker inspect --type=image uazo/chromium:$VERSION > /dev/null ; echo $?)
+          IS_PRESENT=$(docker inspect --type=image uazo/chromium:$CHR_VERSION > /dev/null ; echo $?)
           if [ $IS_PRESENT -ne "0" ]; then
-            IS_PRESENT=$(docker manifest inspect uazo/chromium:$VERSION > /dev/null ; echo $?)
+            IS_PRESENT=$(docker manifest inspect uazo/chromium:$CHR_VERSION > /dev/null ; echo $?)
             if [ $IS_PRESENT -ne "0" ]; then
-              DOCKER_BUILDKIT=1 docker build -t uazo/chromium:$VERSION \
+              DOCKER_BUILDKIT=1 docker build -t uazo/chromium:$CHR_VERSION \
                 --progress plain \
-                --build-arg VERSION=$VERSION \
+                --build-arg VERSION=$CHR_VERSION \
                 --build-arg HTTP_PROXY="$PROXY_ADDR" \
                 cromite/tools/images/chr-source/.
-                
-              docker push uazo/chromium:$VERSION
-              echo "NEW_VERSION=$VERSION" >> $GITHUB_ENV
+
+              docker push uazo/chromium:$CHR_VERSION
+              echo "NEW_VERSION=$CHR_VERSION" >> $GITHUB_ENV
             fi
           fi
 
+      - name: Update files under control 
+        shell: bash
+        run: |
+          cd cromite
+          RELEASE=$(cat build/RELEASE | xargs)
+
+          cd tools/under-control
+
+          DO_UPDATE=0
+          if [ -n "$NEW_VERSION" ]; then
+            if [ "$RELEASE" != "$NEW_VERSION" ]; then
+              DO_UPDATE=1
+            fi
+
+          elif [ "$RELEASE" != "$(cat src/RELEASE | xargs)" ]; then
+            DO_UPDATE=1
+            NEW_VERSION=$RELEASE
+          fi
+
+          if [[ DO_UPDATE -eq 1 ]]; then
+            echo "Found new version $NEW_VERSION"
+            echo "Under control: $(cat src/RELEASE | xargs)"
+            echo "Current: $RELEASE"
+
+            test -d src && rm -rf src
+            docker build --progress=plain --build-arg "TAG=$NEW_VERSION" -o . .
+            echo $NEW_VERSION >src/RELEASE
+          fi
+
+          CHANGES=0 && git diff --quiet || CHANGES=1
+          echo "CHANGES=$CHANGES" >> $GITHUB_ENV
+          if [[ CHANGES -eq 1 ]]; then
+              git add src
+              git diff --name-only --staged
+          fi
+
+      - name: Create Pull Request
+        uses: peter-evans/create-pull-request@dcd5fd746d53dd8de555c0f10bca6c35628be47a #v3.12.0
+        if: env.CHANGES == '1'
+        with:
+          token: ${{ secrets.CROMITE_PULLS }}
+          path: cromite
+          add-paths: |
+            tools/under-control/*
+          commit-message: 'AUTOMATED - new files under control ${{ env.NEW_VERSION }}'
+          title: New files under control ${{ env.NEW_VERSION }}
+          body: ${{ env.MESSAGE }}
+          delete-branch: true
+          branch-suffix: short-commit-hash
+
       - name: Create issue ${{ env.VERSION }}
         if: "${{ env.NEW_VERSION != '' }}"
         shell: bash
@@ -104,10 +176,23 @@ jobs:
           GH=../../gh_2.18.1_linux_amd64/bin/gh
           wget https://github.com/cli/cli/releases/download/v2.18.1/gh_2.18.1_linux_amd64.tar.gz
           tar xfz gh_2.18.1_linux_amd64.tar.gz
-          
+
           cd cromite/tools
           echo ${{ secrets.GITHUB_TOKEN }} | $GH auth login --with-token
-          $GH issue create -t "$VERSION: new chromium version" -b ""
-          
-          
-          
+
+          if [[ "$LATEST_WIN" == "$CHR_VERSION" ]]; then
+             echo Using Windows Release >>body.txt
+             echo "\`\`\`" >>body.txt
+             curl -s 'https://chromiumdash.appspot.com/fetch_releases?channel=Stable&platform=Windows&num=10&offset=0' | \
+                 jq --arg LATEST "$LATEST_WIN" '.[] | select( .version == $LATEST )' >>body.txt
+             echo "\`\`\`" >>body.txt
+          fi
+
+          if [[ "$LATEST_ANDROID" == "$CHR_VERSION" ]]; then
+             echo Using Android Release >>body.txt
+             echo "\`\`\`" >>body.txt
+             curl -s 'https://chromiumdash.appspot.com/fetch_releases?channel=Stable&platform=Android&num=10&offset=0' | \
+                 jq --arg LATEST "$LATEST_ANDROID" '.[] | select( .version == $LATEST )' >>body.txt
+             echo "\`\`\`" >>body.txt
+          fi
+          $GH issue create -t "$CHR_VERSION: new chromium version" -F body.txt

.github/workflows/build-sysbox.yaml

@@ -0,0 +1,46 @@
+name: Build Sysbox
+permissions:
+  contents: write
+      
+on:
+  workflow_dispatch:
+    inputs:
+      sha:
+        description: 'Sysbox SHA'
+        required: true
+        default: ''
+        
+env:
+  SYSBOX_SHA: ${{ github.event.inputs.sha }}
+  
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@v2
+        with:
+          path: cromite
+          fetch-depth: 1
+
+      - name: Build patched sysbox
+        run: |
+          git clone --recursive https://github.com/nestybox/sysbox.git
+          cd sysbox
+          git checkout $SYSBOX_SHA
+          git submodule update --recursive
+
+          cd sysbox-runc/
+          git apply --ignore-whitespace ../../cromite/tools/images/sysbox/add-x86-x32-arch.patch
+          git status
+          cd ..
+
+          make sysbox-static TARGET_ARCH=x64
+
+          zip -r build.zip build
+
+      - name: Publish
+        uses: actions/upload-artifact@v2
+        with:
+          name: build.zip
+          path: sysbox/build.zip

.github/workflows/build_cromite.yaml

@@ -10,7 +10,7 @@ permissions:
   repository-projects: none
   security-events: none
   statuses: none
-      
+
 on:
   workflow_dispatch:
     inputs:
@@ -19,11 +19,11 @@ on:
         required: true
         default: ''
       target_os:
-        description: 'targetos [android/win/all]'
+        description: 'targetos [android/win/linux/all]'
         required: true
         default: 'all'
       build:
-        description: 'android arch [arm64/x64/all]'
+        description: 'android arch [arm/arm64/x64/all]'
         required: true
         default: 'all'
       type:
@@ -38,9 +38,9 @@ on:
         description: 'clangd? [true/false]'
         required: true
         default: 'false'
-        
+
 env:
-  BROMITE_SHA: ${{ github.event.inputs.sha }}
+  CROMITE_SHA: ${{ github.event.inputs.sha }}
   REMOVEDOCKERSUPPORT: true
   USELOCALIMAGE: true
 
@@ -67,15 +67,14 @@ jobs:
 
       - name: Get current chromium version
         shell: bash
-        run: |        
+        run: |
           export VERSION=$( cat ./cromite/build/RELEASE )
-          rm -rf bromite
-          
+
           echo Current version is $VERSION
           echo "VERSION=$VERSION" >> $GITHUB_ENV
-          
+
           cd cromite/tools
-          
+
       - name: Building build-deps container ${{ env.VERSION }}
         shell: bash
         run: |
@@ -91,7 +90,7 @@ jobs:
                 cromite/tools/images/build-deps/.
             fi
           fi
-        
+
       - name: Building chromium container ${{ env.VERSION }}
         shell: bash
         run: |
@@ -107,37 +106,45 @@ jobs:
             fi
           fi
 
-      - name: Building cromite container ${{ env.VERSION }}-${{ env.BROMITE_SHA }}
+      - name: Building cromite container ${{ env.VERSION }}-${{ env.CROMITE_SHA }}
         shell: bash
         run: |
-          IS_PRESENT=$(docker inspect --type=image uazo/cromite:$VERSION-$BROMITE_SHA > /dev/null ; echo $?)
+          IS_PRESENT=$(docker inspect --type=image uazo/cromite:$VERSION-$CROMITE_SHA > /dev/null ; echo $?)
           if [ $IS_PRESENT -ne "0" ]; then
-            IS_PRESENT=$(docker manifest inspect uazo/cromite:$VERSION-$BROMITE_SHA > /dev/null ; echo $?)
+            IS_PRESENT=$(docker manifest inspect uazo/cromite:$VERSION-$CROMITE_SHA > /dev/null ; echo $?)
             if [ $IS_PRESENT -ne "0" ]; then
-              DOCKER_BUILDKIT=1 docker build -t uazo/cromite:$VERSION-$BROMITE_SHA --progress plain \
-                --build-arg BROMITE_SHA=$BROMITE_SHA \
+              DOCKER_BUILDKIT=1 docker build -t uazo/cromite:$VERSION-$CROMITE_SHA --progress plain \
+                --build-arg CROMITE_SHA=$CROMITE_SHA \
                 --build-arg VERSION=$VERSION \
                 --build-arg HTTP_PROXY="$PROXY_ADDR" \
-                cromite/tools/images/bromite-source/.
+                cromite/tools/images/cromite-source/.
             fi
           fi
-          
-      - name: Building cromite-build container ${{ env.VERSION }}-${{ env.BROMITE_SHA }}
+
+      - name: Building cromite-build container ${{ env.VERSION }}-${{ env.CROMITE_SHA }}
         shell: bash
         run: |
-          IS_PRESENT=$(docker inspect --type=image uazo/cromite-build:$VERSION-$BROMITE_SHA > /dev/null ; echo $?)
+          IS_PRESENT=$(docker inspect --type=image uazo/cromite-build:$VERSION-$CROMITE_SHA > /dev/null ; echo $?)
           if [ $IS_PRESENT -ne "0" ]; then
-            IS_PRESENT=$(docker manifest inspect uazo/cromite-build:$VERSION-$BROMITE_SHA > /dev/null ; echo $?)
+            IS_PRESENT=$(docker manifest inspect uazo/cromite-build:$VERSION-$CROMITE_SHA > /dev/null ; echo $?)
             if [ $IS_PRESENT -ne "0" ]; then
-              DOCKER_BUILDKIT=1 docker build -t uazo/cromite-build:$VERSION-$BROMITE_SHA --progress plain \
-                --build-arg BROMITE_SHA=$BROMITE_SHA \
+              DOCKER_BUILDKIT=1 docker build -t uazo/cromite-build:$VERSION-$CROMITE_SHA --progress plain \
+                --build-arg CROMITE_SHA=$CROMITE_SHA \
                 --build-arg VERSION=$VERSION \
                 --build-arg HTTP_PROXY="$PROXY_ADDR" \
                 --no-cache \
-                cromite/tools/images/bromite-build/.
+                cromite/tools/images/cromite-build/.
             fi
           fi
-        
+
+      - name: Get uazo/cromite-build from docker hub if present
+        shell: bash
+        run: |
+          IS_PRESENT=$(docker manifest inspect uazo/cromite-build:$VERSION-$CROMITE_SHA > /dev/null ; echo $?)
+          if [ $IS_PRESENT -eq "0" ]; then
+            docker pull uazo/cromite-build:$VERSION-$CROMITE_SHA
+          fi
+
       - name: Mark image to build
         shell: bash
         run: |
@@ -145,14 +152,14 @@ jobs:
           if [ $IS_PRESENT -eq "0" ]; then
             docker rmi uazo/cromite-build:build
           fi
-          docker tag uazo/cromite-build:$VERSION-$BROMITE_SHA uazo/cromite-build:build
-          
+          docker tag uazo/cromite-build:$VERSION-$CROMITE_SHA uazo/cromite-build:build
+
   build:
     runs-on: ${{ github.event.inputs.type }}
     needs: check_images
     if: success()
-    timeout-minutes: 1200
-  
+    timeout-minutes: 1440
+
     container:
       image: uazo/cromite-build:build
       env:
@@ -163,25 +170,27 @@ jobs:
         # kythe
         KYTHE_CORPUS: chromium.googlesource.com/chromium/src
         KYTHE_ROOT_DIRECTORY: /home/lg/working_dir/chromium/src
-        KYTHE_OUTPUT_DIRECTORY: /home/lg/working_dir/chromium/src/out/bromite/kythe
+        KYTHE_OUTPUT_DIRECTORY: /home/lg/working_dir/chromium/src/out/arm64/kythe
         # cross build
         DEPOT_TOOLS_WIN_TOOLCHAIN_BASE_URL: /win_sdk/10.0.22621.0/
         WINDOWSSDKDIR: "/win_sdk/10.0.22621.0/Windows Kits/10/"
         GYP_MSVS_OVERRIDE_PATH: /win_sdk/10.0.22621.0/
         # compile in debug mode
-        TARGET_ISDEBUG: ${{ github.event.inputs.debug }} 
+        TARGET_ISDEBUG: ${{ github.event.inputs.debug }}
         TARGET_OS: ${{ github.event.inputs.target_os }}
         USE_KEYSTORE: true
         KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
         CROMITE_PREF_HASH_SEED_BIN: ${{ secrets.CROMITE_PREF_HASH_SEED_BIN }}
       volumes:
-        - /storage/images/${{ github.event.inputs.sha }}/android/${{ github.event.inputs.debug }}/arm64:/home/lg/working_dir/chromium/src/out/bromite
-        - /storage/images/${{ github.event.inputs.sha }}/android/${{ github.event.inputs.debug }}/x64:/home/lg/working_dir/chromium/src/out/bromite_x64
-        - /storage/images/${{ github.event.inputs.sha }}/win/x64:/home/lg/working_dir/chromium/src/out/bromite_win
+        - /storage/images/${{ github.event.inputs.sha }}/android/${{ github.event.inputs.debug }}/arm:/home/lg/working_dir/chromium/src/out/arm
+        - /storage/images/${{ github.event.inputs.sha }}/android/${{ github.event.inputs.debug }}/arm64:/home/lg/working_dir/chromium/src/out/arm64
+        - /storage/images/${{ github.event.inputs.sha }}/android/${{ github.event.inputs.debug }}/x64:/home/lg/working_dir/chromium/src/out/x64
+        - /storage/images/${{ github.event.inputs.sha }}/linux/${{ github.event.inputs.debug }}/lin64:/home/lg/working_dir/chromium/src/out/lin64
+        - /storage/images/${{ github.event.inputs.sha }}/win/x64:/home/lg/working_dir/chromium/src/out/win64
         - /tmp/proxy:/tmp/proxy
         - /win_sdk:/win_sdk
-        
-    steps:    
+
+    steps:
       - name: Prepare Build Container
         shell: bash
         run: |
@@ -194,19 +203,27 @@ jobs:
           HTTPS_PROXY=
           http_proxy=
           https_proxy=
-          
+
           # set out folder permissions
-          test -d chromium/src/out/bromite || sudo mkdir -p chromium/src/out/bromite && \
+          test -d chromium/src/out/arm || sudo mkdir -p chromium/src/out/arm && \
             sudo chown lg chromium/src/out &&
-            sudo chown lg chromium/src/out/bromite
+            sudo chown lg chromium/src/out/arm
 
-          test -d chromium/src/out/bromite_win || sudo mkdir -p chromium/src/out/bromite_win && \
+          test -d chromium/src/out/arm64 || sudo mkdir -p chromium/src/out/arm64 && \
             sudo chown lg chromium/src/out &&
-            sudo chown lg chromium/src/out/bromite_win
+            sudo chown lg chromium/src/out/arm64
 
-          test -d chromium/src/out/bromite_x64 || sudo mkdir -p chromium/src/out/bromite_x64 && \
+          test -d chromium/src/out/win64 || sudo mkdir -p chromium/src/out/win64 && \
             sudo chown lg chromium/src/out &&
-            sudo chown lg chromium/src/out/bromite_x64
+            sudo chown lg chromium/src/out/win64
+
+          test -d chromium/src/out/x64 || sudo mkdir -p chromium/src/out/x64 && \
+            sudo chown lg chromium/src/out &&
+            sudo chown lg chromium/src/out/x64
+
+          test -d chromium/src/out/lin64 || sudo mkdir -p chromium/src/out/lin64 && \
+            sudo chown lg chromium/src/out &&
+            sudo chown lg chromium/src/out/lin64
             
           # make kythe output directory
           test -d $KYTHE_OUTPUT_DIRECTORY || mkdir -p $KYTHE_OUTPUT_DIRECTORY
@@ -222,64 +239,8 @@ jobs:
           echo "${{ secrets.KEYSTORE }}" > cromite.keystore.asc
           gpg --homedir ./ -d --passphrase "${{ secrets.KEYSTORE_PASSPHRASE }}" --batch cromite.keystore.asc > cromite.keystore
           echo "::endgroup::"
-          
-      - name: Build Bromite Android arm64
-        if: ${{ (github.event.inputs.target_os == 'android' || github.event.inputs.target_os == 'all') && (github.event.inputs.build == 'arm64' || github.event.inputs.build == 'all') }}
-        shell: bash
-        run: |
-          PATH=$WORKSPACE/chromium/src/third_party/llvm-build/Release+Asserts/bin:$WORKSPACE/depot_tools/:/usr/local/go/bin:$WORKSPACE/mtool/bin:$PATH
-          cd $WORKSPACE/chromium/src
 
-          echo "::group::-------- gn gen"
-          gn gen --args="import(\"/home/lg/working_dir/bromite/build/bromite.gn_args\") $(cat ../../build_args.gni) target_cpu = \"arm64\" " out/bromite    
-          echo "::endgroup::"
-
-          echo "::group::-------- gn args"
-          gn args out/bromite/ --list --short
-          gn args out/bromite/ --list >out/bromite/gn_list
-          echo "::endgroup::"
-
-          autoninja -C out/bromite chrome_public_apk
-
-          cp ../../bromite/build/RELEASE out/bromite
-
-      - name: Get ninja logs Android arm64
-        if: ${{ (github.event.inputs.target_os == 'android' || github.event.inputs.target_os == 'all') && (github.event.inputs.build == 'arm64' || github.event.inputs.build == 'all') }}
-        shell: bash
-        run: |
-          cd $WORKSPACE
-          $WORKSPACE/ninjatracing/ninjatracing $WORKSPACE/chromium/src/out/bromite/.ninja_log >$WORKSPACE/chromium/src/out/bromite/ninja_log_trace.json
-          python3 $WORKSPACE/chromium/src/third_party/catapult/tracing/bin/trace2html $WORKSPACE/chromium/src/out/bromite/ninja_log_trace.json
-
-      - name: Build Bromite Windows
-        if: ${{ github.event.inputs.target_os == 'win' || github.event.inputs.target_os == 'all' }}
-        shell: bash
-        run: |
-          PATH=$WORKSPACE/chromium/src/third_party/llvm-build/Release+Asserts/bin:$WORKSPACE/depot_tools/:/usr/local/go/bin:$WORKSPACE/mtool/bin:$PATH
-          cd $WORKSPACE/chromium/src
-
-          echo "::group::-------- gn gen"
-          gn gen --args="import(\"/home/lg/working_dir/bromite/build/bromite.gn_args\") target_os = \"win\" $(cat ../../build_args.gni) target_cpu = \"x64\" " out/bromite_win
-          echo "::endgroup::"
-
-          echo "::group::-------- gn args"
-          gn args out/bromite_win/ --list --short
-          gn args out/bromite_win/ --list >out/bromite_win/gn_list
-          echo "::endgroup::"
-
-          autoninja -C out/bromite_win chrome
-
-          cp ../../bromite/build/RELEASE out/bromite_win
-
-      - name: Get ninja logs Windows
-        if: ${{ github.event.inputs.target_os == 'win' || github.event.inputs.target_os == 'all' }}
-        shell: bash
-        run: |
-          cd $WORKSPACE
-          $WORKSPACE/ninjatracing/ninjatracing $WORKSPACE/chromium/src/out/bromite_win/.ninja_log >$WORKSPACE/chromium/src/out/bromite_win/ninja_log_trace.json
-          python3 $WORKSPACE/chromium/src/third_party/catapult/tracing/bin/trace2html $WORKSPACE/chromium/src/out/bromite_win/ninja_log_trace.json
-
-      - name: Build Bromite Android x64
+      - name: Build Cromite Android x64
         if: ${{ (github.event.inputs.target_os == 'android' || github.event.inputs.target_os == 'all') && (github.event.inputs.build == 'x64' || github.event.inputs.build == 'all') }}
         shell: bash
         run: |
@@ -287,64 +248,178 @@ jobs:
           cd $WORKSPACE/chromium/src
 
           echo "::group::-------- gn gen"
-          gn gen --args="import(\"/home/lg/working_dir/bromite/build/bromite.gn_args\") $(cat ../../build_args.gni) target_cpu = \"x64\" " out/bromite_x64
+          gn gen --args="target_os = \"android\" $(cat /home/lg/working_dir/cromite/build/cromite.gn_args) target_cpu = \"x64\" " out/x64
           echo "::endgroup::"
 
           echo "::group::-------- gn args"
-          gn args out/bromite_x64/ --list --short
-          gn args out/bromite_x64/ --list >out/bromite_x64/gn_list
+          gn args out/x64/ --list --short
+          gn args out/x64/ --list >out/x64/gn_list
           echo "::endgroup::"
 
-          autoninja -C out/bromite_x64 chrome_public_apk
+          ninja -C out/x64 chrome_public_bundle
+          ninja -C out/x64 chrome_public_apk
 
-          cp ../../bromite/build/RELEASE out/bromite_x64
+          cp ../../cromite/build/RELEASE out/x64
 
       - name: Get ninja logs Android x64
         if: ${{ (github.event.inputs.target_os == 'android' || github.event.inputs.target_os == 'all') && (github.event.inputs.build == 'x64' || github.event.inputs.build == 'all') }}
         shell: bash
         run: |
           cd $WORKSPACE
-          $WORKSPACE/ninjatracing/ninjatracing $WORKSPACE/chromium/src/out/bromite_x64/.ninja_log >$WORKSPACE/chromium/src/out/bromite_x64/ninja_log_trace.json
-          python3 $WORKSPACE/chromium/src/third_party/catapult/tracing/bin/trace2html $WORKSPACE/chromium/src/out/bromite_x64/ninja_log_trace.json
+          $WORKSPACE/ninjatracing/ninjatracing -a $WORKSPACE/chromium/src/out/x64/.ninja_log >$WORKSPACE/chromium/src/out/x64/ninja_log_trace.json
+          python3 $WORKSPACE/chromium/src/third_party/catapult/tracing/bin/trace2html $WORKSPACE/chromium/src/out/x64/ninja_log_trace.json
 
-          
-      - name: Generate breakpad symbols arm64
+      - name: Build Cromite Windows x64
+        if: ${{ github.event.inputs.target_os == 'win' || github.event.inputs.target_os == 'all' }}
+        shell: bash
+        run: |
+          PATH=$WORKSPACE/chromium/src/third_party/llvm-build/Release+Asserts/bin:$WORKSPACE/depot_tools/:/usr/local/go/bin:$WORKSPACE/mtool/bin:$PATH
+          cd $WORKSPACE/chromium/src
+
+          echo "::group::-------- gn gen"
+          gn gen --args="target_os = \"win\" $(cat /home/lg/working_dir/cromite/build/cromite.gn_args) target_cpu = \"x64\" " out/win64
+          echo "::endgroup::"
+
+          echo "::group::-------- gn args"
+          gn args out/win64/ --list --short
+          gn args out/win64/ --list >out/win64/gn_list
+          echo "::endgroup::"
+
+          ninja -C out/win64 chrome
+
+          cp ../../cromite/build/RELEASE out/win64
+
+      - name: Get ninja logs Windows x64
+        if: ${{ github.event.inputs.target_os == 'win' || github.event.inputs.target_os == 'all' }}
+        shell: bash
+        run: |
+          cd $WORKSPACE
+          $WORKSPACE/ninjatracing/ninjatracing -a $WORKSPACE/chromium/src/out/win64/.ninja_log >$WORKSPACE/chromium/src/out/win64/ninja_log_trace.json
+          python3 $WORKSPACE/chromium/src/third_party/catapult/tracing/bin/trace2html $WORKSPACE/chromium/src/out/win64/ninja_log_trace.json
+
+      - name: Build Cromite Android arm64
         if: ${{ (github.event.inputs.target_os == 'android' || github.event.inputs.target_os == 'all') && (github.event.inputs.build == 'arm64' || github.event.inputs.build == 'all') }}
         shell: bash
         run: |
           PATH=$WORKSPACE/chromium/src/third_party/llvm-build/Release+Asserts/bin:$WORKSPACE/depot_tools/:/usr/local/go/bin:$WORKSPACE/mtool/bin:$PATH
           cd $WORKSPACE/chromium/src
-          
-          echo "::group::-------- generating breakpad symbols"
-          autoninja -C out/bromite minidump_stackwalk dump_syms
-          components/crash/content/tools/generate_breakpad_symbols.py --build-dir=out/bromite \
-             --symbols-dir=out/bromite/symbols/ --binary=out/bromite/lib.unstripped/libchrome.so \
-             --platform=android --clear --verbose
-          cp out/bromite/lib.unstripped/libchrome.so out/bromite/symbols/libchrome.lib.so
-          cp out/bromite/minidump_stackwalk out/bromite/symbols
-          cp out/bromite/dump_syms out/bromite/symbols
+
+          echo "::group::-------- gn gen"
+          gn gen --args="target_os = \"android\" $(cat /home/lg/working_dir/cromite/build/cromite.gn_args) target_cpu = \"arm64\" " out/arm64
           echo "::endgroup::"
 
-      - name: Generate Supersize data
+          echo "::group::-------- gn args"
+          gn args out/arm64/ --list --short
+          gn args out/arm64/ --list >out/arm64/gn_list
+          echo "::endgroup::"
+
+          ninja -C out/arm64 chrome_public_bundle
+          ninja -C out/arm64 chrome_public_apk
+
+          cp ../../cromite/build/RELEASE out/arm64
+
+      - name: Get ninja logs Android arm64
+        if: ${{ (github.event.inputs.target_os == 'android' || github.event.inputs.target_os == 'all') && (github.event.inputs.build == 'arm64' || github.event.inputs.build == 'all') }}
+        shell: bash
+        run: |
+          cd $WORKSPACE
+          $WORKSPACE/ninjatracing/ninjatracing -a $WORKSPACE/chromium/src/out/arm64/.ninja_log >$WORKSPACE/chromium/src/out/arm64/ninja_log_trace.json
+          python3 $WORKSPACE/chromium/src/third_party/catapult/tracing/bin/trace2html $WORKSPACE/chromium/src/out/arm64/ninja_log_trace.json
+
+      - name: Generate breakpad symbols for Android arm64
+        if: ${{ (github.event.inputs.target_os == 'android' || github.event.inputs.target_os == 'all') && (github.event.inputs.build == 'arm64' || github.event.inputs.build == 'all') }}
+        shell: bash
+        run: |
+          PATH=$WORKSPACE/chromium/src/third_party/llvm-build/Release+Asserts/bin:$WORKSPACE/depot_tools/:/usr/local/go/bin:$WORKSPACE/mtool/bin:$PATH
+          cd $WORKSPACE/chromium/src
+
+          echo "::group::-------- generating breakpad symbols"
+          ninja -C out/arm64 minidump_stackwalk dump_syms
+          components/crash/content/tools/generate_breakpad_symbols.py --build-dir=out/arm64 \
+             --symbols-dir=out/arm64/symbols/ --binary=out/arm64/lib.unstripped/libchrome.so \
+             --platform=android --clear --verbose
+          cp out/arm64/lib.unstripped/libchrome.so out/arm64/symbols/libchrome.lib.so
+          cp out/arm64/minidump_stackwalk out/arm64/symbols
+          cp out/arm64/dump_syms out/arm64/symbols
+          echo "::endgroup::"
+
+      - name: Generate Supersize data for Android arm64
         if: ${{ github.event.inputs.debug == 'false' && (github.event.inputs.target_os == 'android' || github.event.inputs.target_os == 'all') && (github.event.inputs.build == 'arm64' || github.event.inputs.build == 'all') }}
         shell: bash
         run: |
           PATH=$WORKSPACE/chromium/src/third_party/llvm-build/Release+Asserts/bin:$WORKSPACE/depot_tools/:/usr/local/go/bin:$WORKSPACE/mtool/bin:$PATH
           cd $WORKSPACE/chromium/src
-          
-          tools/binary_size/supersize archive out/bromite/chrome.size --apk-file out/bromite/apks/ChromePublic.apk -v
-      
-      - name: Generate clangd index
+
+          tools/binary_size/supersize archive out/arm64/chrome.size --apk-file out/arm64/apks/ChromePublic.apk -v
+
+      - name: Build Cromite Android arm
+        if: ${{ (github.event.inputs.target_os == 'android' || github.event.inputs.target_os == 'all') && (github.event.inputs.build == 'arm' || github.event.inputs.build == 'all') }}
+        shell: bash
+        run: |
+          PATH=$WORKSPACE/chromium/src/third_party/llvm-build/Release+Asserts/bin:$WORKSPACE/depot_tools/:/usr/local/go/bin:$WORKSPACE/mtool/bin:$PATH
+          cd $WORKSPACE/chromium/src
+
+          echo "::group::-------- gn gen"
+          gn gen --args="target_os = \"android\" $(cat /home/lg/working_dir/cromite/build/cromite.gn_args) target_cpu = \"arm\" " out/arm
+          echo "::endgroup::"
+
+          echo "::group::-------- gn args"
+          gn args out/arm/ --list --short
+          gn args out/arm/ --list >out/arm/gn_list
+          echo "::endgroup::"
+
+          ninja -C out/arm chrome_public_bundle
+          ninja -C out/arm chrome_public_apk
+
+          cp ../../cromite/build/RELEASE out/arm
+
+      - name: Get ninja logs Android arm
+        if: ${{ (github.event.inputs.target_os == 'android' || github.event.inputs.target_os == 'all') && (github.event.inputs.build == 'arm' || github.event.inputs.build == 'all') }}
+        shell: bash
+        run: |
+          cd $WORKSPACE
+          $WORKSPACE/ninjatracing/ninjatracing -a $WORKSPACE/chromium/src/out/arm/.ninja_log >$WORKSPACE/chromium/src/out/arm/ninja_log_trace.json
+          python3 $WORKSPACE/chromium/src/third_party/catapult/tracing/bin/trace2html $WORKSPACE/chromium/src/out/arm/ninja_log_trace.json
+
+      - name: Build Cromite Linux 64
+        if: ${{ (github.event.inputs.target_os == 'linux' || github.event.inputs.target_os == 'all') }}
+        shell: bash
+        run: |
+          PATH=$WORKSPACE/chromium/src/third_party/llvm-build/Release+Asserts/bin:$WORKSPACE/depot_tools/:/usr/local/go/bin:$WORKSPACE/mtool/bin:$PATH
+          cd $WORKSPACE/chromium/src
+
+          echo "::group::-------- gn gen"
+          gn gen --args="target_os = \"linux\" $(cat /home/lg/working_dir/cromite/build/cromite.gn_args) target_cpu = \"x64\" " out/lin64
+          echo "::endgroup::"
+
+          echo "::group::-------- gn args"
+          gn args out/lin64/ --list --short
+          gn args out/lin64/ --list >out/lin64/gn_list
+          echo "::endgroup::"
+
+          ninja -C out/lin64 chrome
+
+          cp ../../cromite/build/RELEASE out/lin64
+
+      - name: Get ninja logs Linux 64
+        if: ${{ (github.event.inputs.target_os == 'linux' || github.event.inputs.target_os == 'all') }}
+        shell: bash
+        run: |
+          cd $WORKSPACE
+          $WORKSPACE/ninjatracing/ninjatracing -a $WORKSPACE/chromium/src/out/lin64/.ninja_log >$WORKSPACE/chromium/src/out/lin64/ninja_log_trace.json
+          python3 $WORKSPACE/chromium/src/third_party/catapult/tracing/bin/trace2html $WORKSPACE/chromium/src/out/lin64/ninja_log_trace.json
+
+      - name: Generate clangd index for Android arm64
         if: ${{ github.event.inputs.clangd == 'true' }}
         shell: bash
         run: |
           PATH=$WORKSPACE/chromium/src/third_party/llvm-build/Release+Asserts/bin:$WORKSPACE/depot_tools/:/usr/local/go/bin:$WORKSPACE/mtool/bin:$PATH
           cd $WORKSPACE/chromium/src
 
-          test -f out/bromite/bromite.idx || \
-            cp -r out/bromite out/clangd && \
-            gn gen --args="import(\"/home/lg/working_dir/bromite/build/bromite.gn_args\") $(cat ../../build_args.gni) skip_clangd_unsupported_options = true" out/clangd && \
+          test -f out/arm64/cromite.idx || \
+            cp -r out/arm64 out/clangd && \
+            gn gen --args="import(\"/home/lg/working_dir/cromite/build/cromite.gn_args\") $(cat ../../build_args.gni) skip_clangd_unsupported_options = true" out/clangd && \
             $WORKSPACE/ninja/ninja -C $WORKSPACE/chromium/src/out/clangd -a chrome_public_apk \
               -t compdb cc cxx objc objcxx >$WORKSPACE/chromium/src/out/clangd/compile_commands.json && \
-            /home/lg/working_dir/clangd_snapshot_20211205/bin/clangd-indexer --executor=all-TUs out/clangd/compile_commands.json >out/bromite/bromite.idx && \
+            /home/lg/working_dir/clangd_snapshot_20211205/bin/clangd-indexer --executor=all-TUs out/clangd/compile_commands.json >out/arm64/cromite.idx && \
             rm -rf out/clangd

.github/workflows/check-git-apply.yaml

@@ -10,14 +10,14 @@ permissions:
 #  repository-projects: none
 #  security-events: none
 #  statuses: none
-  
+
 on:
   push:
     branches-ignore:
       - 'ci'
     paths:
       - 'build/**'
-      
+
   workflow_dispatch:
     inputs:
       rtag:
@@ -26,29 +26,29 @@ on:
         default: ''
 
 env:
-  RTAG: ${{ github.event.inputs.rtag }}  
+  RTAG: ${{ github.event.inputs.rtag }}
 
 jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-    
+
       - name: "Get value from dispatch"
         run: |
           if [ -z "${RTAG}" ]; then
             echo "RTAG=$GITHUB_SHA" >> $GITHUB_ENV
             echo "RTAG=$RTAG"
           fi
-          
+
       - name: Prepare container
-        run: |        
+        run: |
           sudo apt update
           sudo apt install -y wget unzip tar sed dos2unix patchutils wiggle curl
-          
+
           wget https://github.com/uazo/superpatch/releases/latest/download/SuperPatchUtils.tar.gz
           tar xfz SuperPatchUtils.tar.gz
           rm SuperPatchUtils.tar.gz
-                    
+
           wget https://github.com/ericchiang/pup/releases/download/v0.4.0/pup_v0.4.0_linux_amd64.zip
           unzip pup_v0.4.0_linux_amd64.zip
           rm pup_v0.4.0_linux_amd64.zip
@@ -96,48 +96,47 @@ jobs:
           git commit -m $VERSION
           git tag -a $VERSION -m $VERSION
 
-          git add -f v8
-          git commit -m ":NOEXPORT: v8"
+          git add -f v8 && git commit -m ":NOEXPORT: v8" || true
 
       - name: Apply patches ${{ github.event.inputs.rtag }}
         run: |
           export HOME=$GITHUB_WORKSPACE
           cd ~/chromium/src
-          
+
           export SILENT=true
           export SKIPAUTOGENERATED=true
           bash ~/cromite/tools/apply-all-patch.sh || exit 1
-          
+
           rm -rf ~/cromite/build/patches-new/
-          rm ~/cromite/build/bromite_patches_list_new.txt
-          
+          rm ~/cromite/build/cromite_patches_list_new.txt
+
       - name: Export patches
         run: |
-          export HOME=$GITHUB_WORKSPACE          
+          export HOME=$GITHUB_WORKSPACE
           cd ~/chromium/src
-          
+
           bash ~/cromite/tools/export-all-patch.sh
-          
+
           cd ~/cromite
           rm -rf build/patches/*
           mv build/patches-new/* build/patches
           rm -rf build/patches-new/
-          
+
       - name: Check differences CHANGES=${{ env.CHANGES }}
         run: |
           export HOME=$GITHUB_WORKSPACE
-          
+
           cd ~/cromite
           CHANGES=0 && git diff --quiet || CHANGES=1
           echo "CHANGES=$CHANGES" >> $GITHUB_ENV
-          
+
           if [[ CHANGES -eq 1 ]]; then
               git add build/patches/*.patch
               git diff --name-only --staged
               # MESSAGE=$(git diff --name-only --staged)
               # echo "MESSAGE='$MESSAGE'" >> $GITHUB_ENV
           fi
-          
+
       - name: Create Pull Request
         uses: peter-evans/create-pull-request@dcd5fd746d53dd8de555c0f10bca6c35628be47a #v3.12.0
         if: env.CHANGES == '1'

.github/workflows/check_nist.yaml

@@ -0,0 +1,71 @@
+name: 'Check NIST database'
+
+on:
+  schedule:
+    - cron: '30 1 * * *'
+
+  workflow_dispatch:
+
+permissions:
+    issues: write
+    pull-requests: write
+
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout 'uazo/cromite' ${{ env.BRANCH }}
+        uses: actions/checkout@v2
+        with:
+            repository: 'uazo/cromite'
+            ref: ${{ github.event.inputs.rtag }}
+            path: 'cromite'
+            fetch-depth: 1
+
+      - name: Get data
+        run: |
+          sudo apt update
+          DEBIAN_FRONTEND=noninteractive sudo apt install -y sed
+
+          export HOME=$GITHUB_WORKSPACE
+          cd ~/cromite/tools
+          test -d cves || mkdir -p cves
+          cd cves
+
+          CY=$(date +%Y)
+          for i in $(seq 2020 $CY)
+          do
+            echo Asking for $i year
+            docker run --rm --name tapir stratosphereips/tapir:latest \
+               bash -c "python3 tapir.py -y $i libjxl -s" >>libjxl.ansi
+          done
+
+          sed -e 's/\x1b\[[0-9;]*m//g' <libjxl.ansi >libjxl.txt
+          rm libjxl.ansi
+
+      - name: Check differences
+        run: |
+          export HOME=$GITHUB_WORKSPACE
+          cd ~/cromite
+          CHANGES=0 && git diff --quiet || CHANGES=1
+          echo "CHANGES=$CHANGES" >> $GITHUB_ENV
+
+          if [[ CHANGES -eq 1 ]]; then
+              git add tools/cves/*.txt
+              git diff --name-only --staged
+          fi
+
+      - name: Create Pull Request
+        uses: peter-evans/create-pull-request@dcd5fd746d53dd8de555c0f10bca6c35628be47a #v3.12.0
+        if: env.CHANGES == '1'
+        with:
+          token: ${{ secrets.CROMITE_PULLS }}
+          path: cromite
+          base: ${{ env.BRANCH }}
+          #push-to-fork: uazo/cromite
+          add-paths: |
+            tools/cves/*.txt
+          commit-message: 'AUTOMATED - CVE results'
+          title: New CVE results
+          delete-branch: true
+          branch-suffix: short-commit-hash

.github/workflows/execute-tests.yaml

@@ -10,7 +10,7 @@ permissions:
   repository-projects: none
   security-events: none
   statuses: none
-      
+
 on:
   workflow_dispatch:
     inputs:
@@ -18,7 +18,7 @@ on:
         description: 'uazo/bromite SHA'
         required: true
         default: 'ce2f07034a3d3b257e9bada65d8293a6786bb95f'
-        
+
 env:
   BROMITE_SHA: ${{ github.event.inputs.sha }}
   REMOVEDOCKERSUPPORT: true
@@ -32,12 +32,12 @@ jobs:
         shell: bash
         run: |
           docker tag uazo/bromite-build:$BROMITE_SHA uazo/bromite-build:test
-          
+
   exec-test:
     runs-on: self-hosted
     needs: get_image
     if: success()
-    
+
     container:
       image: uazo/bromite-build:test
       env:
@@ -50,23 +50,23 @@ jobs:
         - /storage/images/${{ github.event.inputs.sha }}/out:/home/lg/working_dir/chromium/src/out/bromite:r
         - /storage/images/${{ github.event.inputs.sha }}/out/tests:/home/lg/working_dir/chromium/src/out/tests
       options: --device=/dev/kvm
-        
-    steps:    
+
+    steps:
       - name: Prepare Test Container
         shell: bash
         run: |
           # set workspace paths
           PATH=$WORKSPACE/chromium/src/third_party/llvm-build/Release+Asserts/bin:$WORKSPACE/depot_tools/:/usr/local/go/bin:$WORKSPACE/mtool/bin:$PATH
           cd $WORKSPACE
-                    
+
           # copy artifacts
           #cd chromium/src
           #mkdir -p out/bromite
           #cp -arp $ARTIFACS_DIR/out/* out/bromite
-          
+
           rm -rf out/tests/*
           #mkdir -p out/tests
-          
+
           # reset proxy env
           #HTTP_PROXY=
           #HTTPS_PROXY=
@@ -77,7 +77,7 @@ jobs:
 #        shell: bash
 #        run: |
 #          sleep infinity
-      
+
       - name: Execute chrome junit test
         shell: bash
         run: |
@@ -95,7 +95,7 @@ jobs:
           sudo chmod 666 /github/home/.android/
           tools/android/avd/avd.py install --avd-config ../../generic_android31.textpb -v
           tools/android/avd/avd.py start --avd-config ../../generic_android31.textpb -v
-          
+
       - name: Execute unit tests
         shell: bash
         run: |
@@ -110,7 +110,7 @@ jobs:
           cd $WORKSPACE/chromium/src
           pkill -f qemu-system-x86
           tools/android/avd/avd.py start --avd-config ../../generic_android31.textpb -v
-       
+
       - name: Execute instrumentation tests
         shell: bash
         run: |

.github/workflows/release.yaml

@@ -1,7 +1,7 @@
 name: Release Cromite CI
 permissions:
   contents: write
-      
+
 on:
   workflow_dispatch:
     inputs:
@@ -13,25 +13,39 @@ on:
         description: 'runner? [dev/ci]'
         required: true
         default: 'ci'
+      draft:
+        description: 'draft? [true/false]'
+        required: true
+        default: 'false'
         
 env:
-  BROMITE_SHA: ${{ github.event.inputs.sha }}
+  CROMITE_SHA: ${{ github.event.inputs.sha }}
   REMOVEDOCKERSUPPORT: true
   USELOCALIMAGE: true
-  
+
 jobs:
   release:
     runs-on: ${{ github.event.inputs.type }}
     env:
+      IS_DRAFT: ${{ github.event.inputs.draft }}
+      OUTPUTFILE_ARM: /storage/images/${{ github.event.inputs.sha }}/android/false/arm/
       OUTPUTFILE_ARM64: /storage/images/${{ github.event.inputs.sha }}/android/false/arm64/
       OUTPUTFILE_X64: /storage/images/${{ github.event.inputs.sha }}/android/false/x64/
-        
+      OUTPUTFILE_WIN: /storage/images/${{ github.event.inputs.sha }}/win/x64/
+      OUTPUTFILE_LIN: /storage/images/${{ github.event.inputs.sha }}/linux/false/lin64/
+
     steps:
+      - name: Login to Docker Hub
+        uses: docker/login-action@v2
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
       - name: Prepare container
         run: |
           wget https://github.com/ericchiang/pup/releases/download/v0.4.0/pup_v0.4.0_linux_amd64.zip
           unzip pup_v0.4.0_linux_amd64.zip && rm pup_v0.4.0_linux_amd64.zip
-          BRANCH=$(curl https://github.com/uazo/cromite/branch_commits/$BROMITE_SHA | ./pup -p li.branch:last-child a text{} | xargs)
+          BRANCH=$(curl https://github.com/uazo/cromite/branch_commits/$CROMITE_SHA | ./pup -p li.branch:last-child a text{} | xargs)
           echo "BRANCH=$BRANCH" >> $GITHUB_ENV
 
           wget https://github.com/cli/cli/releases/download/v2.18.1/gh_2.18.1_linux_amd64.tar.gz
@@ -43,11 +57,10 @@ jobs:
             repository: 'uazo/cromite'
             path: 'cromite'
             fetch-depth: 1
-            
+
       - name: Create release
         shell: bash
-        run: |
-          WINOUT=/storage/images/$BROMITE_SHA/win/x64/
+        run: |          
           VERSION=v$(cat ${{ env.OUTPUTFILE_ARM64 }}/RELEASE)
 
           cd cromite/tools
@@ -55,7 +68,7 @@ jobs:
           GH=gh_2.21.1_linux_amd64/bin/gh
           wget https://github.com/cli/cli/releases/download/v2.21.1/gh_2.21.1_linux_amd64.tar.gz
           tar xfz gh_2.21.1_linux_amd64.tar.gz
-          
+
           echo ${{ secrets.GITHUB_TOKEN }} | $GH auth login --with-token
 
           echo "\`\`\`" >note
@@ -63,14 +76,22 @@ jobs:
           # echo "you can try it at your own risk." >>note
           echo "\`\`\`" >>note
 
-          $GH release create $VERSION-$BROMITE_SHA --notes-file note -d
+          $GH release create $VERSION-$CROMITE_SHA --notes-file note -d
+
+          # android arm
+          echo "::group::-------- android arm"
+          sudo cp ${{ env.OUTPUTFILE_ARM }}/apks/ChromePublic.apk arm_ChromePublic.apk
+          sudo chown runner arm_ChromePublic.apk
+          echo Uploading arm_ChromePublic
+          $GH release upload $VERSION-$CROMITE_SHA arm_ChromePublic.apk
+          echo "::endgroup::"
 
           # android arm64
           echo "::group::-------- android arm64"
           sudo cp ${{ env.OUTPUTFILE_ARM64 }}/apks/ChromePublic.apk arm64_ChromePublic.apk
           sudo chown runner arm64_ChromePublic.apk
           echo Uploading arm64_ChromePublic
-          $GH release upload $VERSION-$BROMITE_SHA arm64_ChromePublic.apk
+          $GH release upload $VERSION-$CROMITE_SHA arm64_ChromePublic.apk
           echo "::endgroup::"
 
           # android x64
@@ -78,71 +99,114 @@ jobs:
           sudo cp ${{ env.OUTPUTFILE_X64 }}/apks/ChromePublic.apk x64_ChromePublic.apk
           sudo chown runner x64_ChromePublic.apk
           echo Uploading x64_ChromePublic
-          $GH release upload $VERSION-$BROMITE_SHA x64_ChromePublic.apk
+          $GH release upload $VERSION-$CROMITE_SHA x64_ChromePublic.apk
           echo "::endgroup::"
 
           echo "::group::-------- chrome.size"
-          test $VERSION-$BROMITE_SHA $OUTPUTFILE_ARM64/chrome.size && \
-            $GH release upload $VERSION-$BROMITE_SHA $OUTPUTFILE_ARM64/chrome.size
+          test $VERSION-$CROMITE_SHA $OUTPUTFILE_ARM64/chrome.size && \
+            $GH release upload $VERSION-$CROMITE_SHA $OUTPUTFILE_ARM64/chrome.size
+          echo "::endgroup::"
+
+          echo "::group::-------- ChromePublic.apk.mapping"
+          sudo cp ${{ env.OUTPUTFILE_ARM64 }}/apks/ChromePublic.apk.mapping arm64_ChromePublic.apk.mapping
+          $GH release upload $VERSION-$CROMITE_SHA arm64_ChromePublic.apk.mapping
+          sudo cp ${{ env.OUTPUTFILE_X64 }}/apks/ChromePublic.apk.mapping x64_ChromePublic.apk.mapping
+          $GH release upload $VERSION-$CROMITE_SHA x64_ChromePublic.apk.mapping
           echo "::endgroup::"
 
           echo "::group::-------- Uploading arm64_ninja_log_trace.html"
           test $OUTPUTFILE_ARM64/ninja_log_trace.html && \
             cp $OUTPUTFILE_ARM64/ninja_log_trace.html arm64_ninja_log_trace.html && \
-            $GH release upload $VERSION-$BROMITE_SHA arm64_ninja_log_trace.html
+            $GH release upload $VERSION-$CROMITE_SHA arm64_ninja_log_trace.html
           echo "::endgroup::"
 
-          echo "::group::-------- windows"
+          # windows x64
+          echo "::group::-------- windows x64"
           mkdir chrome-win/
-          cp $WINOUT/*.manifest chrome-win/
-          cp $WINOUT/chrome.dll chrome-win/
-          cp $WINOUT/chrome.exe chrome-win/
-          cp $WINOUT/chrome_100_percent.pak chrome-win/
-          cp $WINOUT/chrome_200_percent.pak chrome-win/
-          cp $WINOUT/chrome_elf.dll chrome-win/
-          cp $WINOUT/chrome_proxy.exe chrome-win/
-          cp $WINOUT/chrome_pwa_launcher.exe chrome-win/
-          cp $WINOUT/chrome_wer.dll chrome-win/
+          cp $OUTPUTFILE_WIN/*.manifest chrome-win/
+          cp $OUTPUTFILE_WIN/chrome.dll chrome-win/
+          cp $OUTPUTFILE_WIN/chrome.exe chrome-win/
+          cp $OUTPUTFILE_WIN/chrome_100_percent.pak chrome-win/
+          cp $OUTPUTFILE_WIN/chrome_200_percent.pak chrome-win/
+          cp $OUTPUTFILE_WIN/chrome_elf.dll chrome-win/
+          cp $OUTPUTFILE_WIN/chrome_proxy.exe chrome-win/
+          cp $OUTPUTFILE_WIN/chrome_pwa_launcher.exe chrome-win/
+          cp $OUTPUTFILE_WIN/chrome_wer.dll chrome-win/
           cp "/win_sdk/10.0.22621.0/Windows Kits/10/Redist/D3D/x64/d3dcompiler_47.dll" chrome-win/
-          cp $WINOUT/elevation_service.exe chrome-win/
-          cp "$WINOUT/First Run" chrome-win/
-          cp $WINOUT/headless_lib_data.pak chrome-win/
-          cp $WINOUT/icudtl.dat chrome-win/
-          cp $WINOUT/libEGL.dll chrome-win/
-          cp $WINOUT/libGLESv2.dll chrome-win/
-          cp $WINOUT/Logo.png chrome-win/
-          cp $WINOUT/mojo_core.dll chrome-win/
-          cp $WINOUT/notification_helper.exe chrome-win/
-          cp $WINOUT/resources.pak chrome-win/
-          cp $WINOUT/SmallLogo.png chrome-win/
-          cp $WINOUT/snapshot_blob.bin chrome-win/
-          cp $WINOUT/VkICD_mock_icd.dll chrome-win/
-          cp $WINOUT/VkLayer_khronos_validation.dll chrome-win/
-          cp $WINOUT/vk_swiftshader.dll chrome-win/
-          cp $WINOUT/vulkan-1.dll chrome-win/
-          cp -r $WINOUT/locales chrome-win/locales
+          cp $OUTPUTFILE_WIN/elevation_service.exe chrome-win/
+          cp "$OUTPUTFILE_WIN/First Run" chrome-win/
+          cp $OUTPUTFILE_WIN/headless_lib_data.pak chrome-win/
+          cp $OUTPUTFILE_WIN/icudtl.dat chrome-win/
+          cp $OUTPUTFILE_WIN/libEGL.dll chrome-win/
+          cp $OUTPUTFILE_WIN/libGLESv2.dll chrome-win/
+          cp $OUTPUTFILE_WIN/Logo.png chrome-win/
+          cp $OUTPUTFILE_WIN/mojo_core.dll chrome-win/
+          cp $OUTPUTFILE_WIN/notification_helper.exe chrome-win/
+          cp $OUTPUTFILE_WIN/resources.pak chrome-win/
+          cp $OUTPUTFILE_WIN/SmallLogo.png chrome-win/
+          cp $OUTPUTFILE_WIN/snapshot_blob.bin chrome-win/
+          cp $OUTPUTFILE_WIN/VkICD_mock_icd.dll chrome-win/
+          cp $OUTPUTFILE_WIN/VkLayer_khronos_validation.dll chrome-win/
+          cp $OUTPUTFILE_WIN/vk_swiftshader.dll chrome-win/
+          cp $OUTPUTFILE_WIN/vulkan-1.dll chrome-win/
+          cp -r $OUTPUTFILE_WIN/locales chrome-win/locales
 
           #test chrome-win.zip && rm chrome-win.zip
           zip -r chrome-win.zip chrome-win/
-          
+
           echo Uploading chrome-win.zip
-          $GH release upload $VERSION-$BROMITE_SHA chrome-win.zip
+          $GH release upload $VERSION-$CROMITE_SHA chrome-win.zip
           echo "::endgroup::"
-          
+
+          ## linux
+          echo "::group::-------- linux x64"
+          mkdir chrome-lin/
+          cp $OUTPUTFILE_LIN/chrome chrome-lin/
+          cp $OUTPUTFILE_LIN/chrome_100_percent.pak chrome-lin/
+          cp $OUTPUTFILE_LIN/chrome_200_percent.pak chrome-lin/
+          cp $OUTPUTFILE_LIN/chrome_crashpad_handler chrome-lin/
+          cp $OUTPUTFILE_LIN/chrome-wrapper chrome-lin/
+          cp $OUTPUTFILE_LIN/icudtl.dat chrome-lin/
+          cp $OUTPUTFILE_LIN/libEGL.so chrome-lin/
+          cp $OUTPUTFILE_LIN/libGLESv2.so chrome-lin/
+          cp $OUTPUTFILE_LIN/libvulkan.so.1 chrome-lin/
+          cp $OUTPUTFILE_LIN/libqt5_shim.so chrome-lin/
+          cp $OUTPUTFILE_LIN/libqt6_shim.so chrome-lin/
+          cp $OUTPUTFILE_LIN/libvk_swiftshader.so chrome-lin/
+          cp -r $OUTPUTFILE_LIN/locales/ chrome-lin/locales
+          cp $OUTPUTFILE_LIN/product_logo_48.png chrome-lin/
+          cp $OUTPUTFILE_LIN/resources.pak chrome-lin/
+          cp $OUTPUTFILE_LIN/snapshot_blob.bin chrome-lin/
+          cp $OUTPUTFILE_LIN/xdg-mime chrome-lin/
+          cp $OUTPUTFILE_LIN/xdg-settings chrome-lin/
+
+          tar -czvf chrome-lin64.tar.gz chrome-lin/
+
+          echo Uploading chrome-lin64.tar.gz
+          $GH release upload $VERSION-$CROMITE_SHA chrome-lin64.tar.gz
+          echo "::endgroup::"
+
           echo "::group::-------- arm64 symbols"
           zip arm64_symbols.zip ${{ env.OUTPUTFILE_ARM64 }}/dump_syms \
                                 ${{ env.OUTPUTFILE_ARM64 }}/minidump_stackwalk \
                                 ${{ env.OUTPUTFILE_ARM64 }}/libchrome.so
-          $GH release upload $VERSION-$BROMITE_SHA arm64_symbols.zip
+          $GH release upload $VERSION-$CROMITE_SHA arm64_symbols.zip
           echo "::endgroup::"
-          
+
           # workaround for https://github.com/cli/cli/issues/6599
           sleep 30s
 
           TIMESTAMP=$(date +%s -r chrome-win.zip)
-          echo >updateurl.txt "browser=chromium;os=windows;architecture=64-bit;timestamp=$TIMESTAMP;editor=uazo;channel=stable;repository=https://github.com/uazo/cromite/releases;download=https://github.com/uazo/cromite/releases/latest/download/chrome-win.zip;version=$(cat $WINOUT/RELEASE);revision=1;commit=$BROMITE_SHA"
-          $GH release upload $VERSION-$BROMITE_SHA updateurl.txt
+          echo >updateurl.txt "browser=chromium;os=windows;architecture=64-bit;timestamp=$TIMESTAMP;editor=uazo;channel=stable;repository=https://github.com/uazo/cromite/releases;download=https://github.com/uazo/cromite/releases/latest/download/chrome-win.zip;version=$(cat $OUTPUTFILE_WIN/RELEASE);revision=1;commit=$CROMITE_SHA"
+          $GH release upload $VERSION-$CROMITE_SHA updateurl.txt
+
+          $GH release edit $VERSION-$CROMITE_SHA -t $VERSION-$CROMITE_SHA
+
+          if [ $IS_DRAFT == "false" ]; then
+            $GH release edit $VERSION-$CROMITE_SHA --draft=false
+          fi
+
+          VERSION=$(cat ${{ env.OUTPUTFILE_ARM64 }}/RELEASE)
+          docker push uazo/cromite:$VERSION-$CROMITE_SHA
+          docker push uazo/cromite-build:$VERSION-$CROMITE_SHA
 
-          $GH release edit $VERSION-$BROMITE_SHA -t $VERSION-$BROMITE_SHA
-          $GH release edit $VERSION-$BROMITE_SHA --draft=false
-        

.github/workflows/stale.yml

@@ -5,7 +5,7 @@ on:
     - cron: '30 1 * * *'
 
   workflow_dispatch:
-        
+
 permissions:
     issues: write
     pull-requests: write
@@ -17,7 +17,7 @@ jobs:
           - uses: actions/stale@v6
             with:
                 exempt-all-milestones: true
-                any-of-labels: 'awaiting info'
+                any-of-labels: 'awaiting info,wontfix'
                 days-before-stale: 5
                 days-before-close: 7
                 stale-issue-message: "This issue has been automatically marked as stale as there has been no recent activity in response to our request for more information. Please respond so that we can proceed with this issue."

.github/workflows/update-patches-doc.yaml

@@ -0,0 +1,82 @@
+name: Update patches doc
+permissions:
+#  actions: none
+#  checks: none
+#  contents: write
+#  deployments: none
+#  issues: none
+#  packages: none
+   pull-requests: write
+#  repository-projects: none
+#  security-events: none
+#  statuses: none
+
+on:
+  push:
+    branches-ignore:
+      - 'ci'
+    paths:
+      - 'build/**'
+
+  workflow_dispatch:
+    inputs:
+      rtag:
+        description: 'uazo/cromite TAG or COMMIT'
+        required: true
+        default: ''
+
+env:
+  RTAG: ${{ github.event.inputs.rtag }}
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+
+      - name: "Get value from dispatch"
+        run: |
+          if [ -z "${RTAG}" ]; then
+            echo "RTAG=$GITHUB_SHA" >> $GITHUB_ENV
+            echo "RTAG=$RTAG"
+          fi
+
+      - name: Checkout 'uazo/cromite' ${{ env.BRANCH }}
+        uses: actions/checkout@v2
+        with:
+            repository: 'uazo/cromite'
+            ref: ${{ github.event.inputs.rtag }}
+            path: 'cromite'
+            fetch-depth: 1
+
+      - name: Generate patches doc
+        run: |
+          export HOME=$GITHUB_WORKSPACE
+
+          bash ~/cromite/tools/extract-all-patch-data.sh ~/cromite/build/patches
+
+      - name: Check differences CHANGES=${{ env.CHANGES }}
+        run: |
+          export HOME=$GITHUB_WORKSPACE
+
+          cd ~/cromite
+          CHANGES=0 && git diff --quiet || CHANGES=1
+          echo "CHANGES=$CHANGES" >> $GITHUB_ENV
+
+          if [[ CHANGES -eq 1 ]]; then
+              git add docs/*.md
+          fi
+
+      - name: Create Pull Request
+        uses: peter-evans/create-pull-request@dcd5fd746d53dd8de555c0f10bca6c35628be47a #v3.12.0
+        if: env.CHANGES == '1'
+        with:
+          token: ${{ secrets.CROMITE_PULLS }}
+          path: cromite
+          base: ${{ env.BRANCH }}
+          add-paths: |
+            build/patches/*.patch
+          commit-message: 'AUTOMATED - update patch docs'
+          title: Generate patches doc for ${{ env.BRANCH }} branch
+          body: ${{ env.MESSAGE }}
+          delete-branch: true
+          branch-suffix: short-commit-hash

.github/workflows/update_fdroid_repo.yaml

@@ -0,0 +1,66 @@
+name: Update fdroid repo
+
+on:
+  workflow_dispatch:
+
+env:
+  REMOVEDOCKERSUPPORT: true
+  USELOCALIMAGE: true
+  USEINTERNALNETWORK: true
+
+jobs:
+  update-fdroid:
+    runs-on: ci2
+
+    container:
+      image: uazo/fdroidserver:latest
+      volumes:
+        - /tmp/forward-proxy:/tmp/forward-proxy
+
+    steps:
+       - name: Update fdroid repo
+         shell: bash
+         run: |
+            export https_proxy=http://127.0.0.1:8118
+            socat TCP-LISTEN:8118,reuseaddr,fork UNIX-CLIENT:/tmp/forward-proxy/proxy.sock &
+            socat TCP-LISTEN:1080,reuseaddr,fork UNIX-CLIENT:/tmp/forward-proxy/ftp.sock &
+            touch /etc/apt/apt.conf.d/proxy.conf
+            echo "Acquire::http::Proxy \"$https_proxy\";" >/etc/apt/apt.conf.d/proxy.conf
+
+            apt update
+
+            DEBIAN_FRONTEND=noninteractive apt update && apt install -y wget
+            wget https://github.com/rclone/rclone/releases/download/v1.64.0/rclone-v1.64.0-linux-amd64.zip
+            unzip rclone-v1.64.0-linux-amd64.zip
+            export rclone=rclone-v1.64.0-linux-amd64/rclone
+
+            mkdir -p  ~/.config/rclone
+            echo "${{ secrets.RCLONE_CONF }}" > ~/.config/rclone/rclone.conf
+
+            $rclone sync ftp:www.cromite.org/fdroid fdroid --log-level INFO --ftp-socks-proxy 127.0.0.1:1080
+
+            test -d /usr/share/man/man1 || mkdir -p /usr/share/man/man1
+            DEBIAN_FRONTEND=noninteractive apt install -y fdroidserver
+
+            cd fdroid/repo/
+            wget https://github.com/uazo/cromite/releases/latest/download/arm_ChromePublic.apk
+            wget https://github.com/uazo/cromite/releases/latest/download/arm64_ChromePublic.apk
+            wget https://github.com/uazo/cromite/releases/latest/download/x64_ChromePublic.apk
+
+            test arm_ChromePublic.apk.1 && rm arm_ChromePublic.apk && mv arm_ChromePublic.apk.1 arm_ChromePublic.apk
+            test arm64_ChromePublic.apk.1 && rm arm64_ChromePublic.apk && mv arm64_ChromePublic.apk.1 arm64_ChromePublic.apk
+            test x64_ChromePublic.apk.1 && rm x64_ChromePublic.apk && mv x64_ChromePublic.apk.1 x64_ChromePublic.apk
+            cd ..
+
+            gpg -d --passphrase "${{ secrets.FDROID_PASSPHRASE }}" --batch config.yml.asc >config.yml
+            gpg -d --passphrase "${{ secrets.FDROID_PASSPHRASE }}" --batch keystore.p12.asc >keystore.p12
+
+            fdroid update -c; fdroid update
+            rm config.yml keystore.p12
+            cd ..
+
+            test -f fdroid/config.yml && exit 1
+            test -f fdroid/keystore.p12 && exit 1
+
+            $rclone sync fdroid ftp:www.cromite.org/fdroid --log-level INFO --ftp-socks-proxy 127.0.0.1:1080
+            $rclone sync fdroid ftp:www.cromite.org/fdroid --log-level INFO --ftp-socks-proxy 127.0.0.1:1080

FAQ.md

@@ -1,91 +0,0 @@
-# Frequently Asked Questions
-
-## Does Google Sync/Translate/Data saver work?
-No.
-This is not a limitation of Bromite but of all Chromium-based projects in general, as general public is not allowed to use Google's APIs for free unless when using Chrome.
-
-Additionally, these features would not be privacy-friendly.
-
-## Does Bromite require root?
-No.
-
-## Is Bromite de-googled?
-
-Yes, although this has not been verified (and hardly can be) under all situations; if you were to find connections to cloud-based services please report them via the issue tracker.
-Bromite uses [ungoogled-chromium's python script](https://github.com/Eloston/ungoogled-chromium/blob/master/utils/domain_substitution.py) to disable URLs in the codebase since version `78.0.3904.93`.
-
-Projects which follow a strict approach on this are [Iridium](https://iridiumbrowser.de/) and [Inox patchset](https://github.com/gcarq/inox-patchset).
-
-## Does Bromite support DRM media?
-
-Yes, in order to play protected/encrypted media content the browser will use Android's DRM media framework to automatically negotiate access (same as Chromium).
-This means for example that requests to Android license servers will be performed (`www.googleapis.com`), see https://w3c.github.io/encrypted-media/#direct-individualization
-To disable this functionality you should disable protected content playback from Site settings -> Protected Content.
-
-## What is the SystemWebView?
-It is the core component of Android for all web page visualizations. For example when you access a new wifi network and need to activate it, that is using the SystemWebView. If you do not know what it is then you do not need to install it.
-
-See also [the wiki page](https://github.com/bromite/bromite/wiki/Installing-SystemWebView) for community-contributed installation instructions.
-
-Ad-blocking was present and always enabled in the SystemWebView from version `72.0.3626.120` till version `77.0.3865.104`, when it stopped working due to [upstream NetworkService changes](https://docs.google.com/document/d/1TZEuPvr2KAbP4_TZpuuwtEEArQsyAkc2HDu68l66YwU/edit?ts=598244df#heading=h.ougoi5i6508y).
-
-## How to enable DNS-over-HTTPS?
-
-See [this page](https://www.bromite.org/doh).
-
-## Can you add HTTPS everywhere?
-No.
-We cannot add add-ons to Bromite (merely some features).
-
-## Is Bromite on Play Store?
-No, and this is not going to change. Many limitations apply for submissions there, including which ads are allowed to be blocked.
-
-Bromite favors user freedom in software choice: the device is yours so you get to choose which software to run on it, end of the story.
-
-## Is Bromite on F-Droid?
-It is not on the official F-Droid repository and there are no (more) plans to submit it.
-
-You can use F-Droid client to install and receive updates via [the official Bromite F-Droid repository](https://www.bromite.org/fdroid).
-
-## Does Bromite support WebRTC?
-Partially, see https://github.com/bromite/bromite/wiki/WebRTC
-
-## Using Bromite will favour the monopoly of the Chromium/Blink engine, why do you develop and maintain Bromite?
-In short, to show what a Chromium-based engine could do **for the user** if the user experience and needs were the main focus of modern browser design.
-
-For an Android browser using an alternative engine see [Fennec F-Droid](https://f-droid.org/en/packages/org.mozilla.fennec_fdroid/).
-
-## Does Bromite support extensions?
-No; Bromite will support extensions only if upstream (Chromium) does, or similarly another project maintains the patch and functionality.
-
-## Why do push notifications not work on this website?
-
-The [Chromium Blink engine](https://www.chromium.org/blink) uses [GCM](https://en.wikipedia.org/wiki/Google_Cloud_Messaging) to deliver messages
-when websites use the [Push API](https://w3c.github.io/push-api/); this will not work in Bromite because cloud integrations are disabled (GCM in this case).
-
-[ServiceWorker notifications](https://developer.mozilla.org/en-US/docs/Web/API/ServiceWorkerRegistration/showNotification) do work instead since they use
-[android.app.Notification](https://developer.android.com/guide/topics/ui/notifiers/notifications).
-
-## Can PWAs be installed?
-
-PWAs are only supported as home shortcuts; WebAPKs will not work because they are generated server-side on googleapis.com (which is not allowed in Bromite).
-
-## Does Bromite support the Android autofill framework?
-
-Yes, since version 94.0.4606.109 the native Android autofill can be used; this does not require accessibility services as a workaround.
-
-## Does Bromite support casting media content?
-
-No, this would require Play Store binary blobs.
-
-## Can you add this search engine as default?
-No.
-Bromite does not make any choice related to default search engines, the Chromium default is used.
-Various Android browsers get some fee to ship their apps with a specific default search engine, Bromite does not get any fee from anyone.
-Changing the default search engine would lead to an endless series of requests to change it based on personal preferences, thus no change is made to the default.
-See also: https://github.com/bromite/bromite/wiki/SearchEngines
-
-## Some sites show ads, how can I fix this?
-You can compare the blocked URLs with a desktop browser and Bromite (using [remote debugging](https://developer.chrome.com/docs/devtools/remote-debugging/)) and figure out some new filter rules to be added.
-If the ads are blocked via cosmetic filtering then blocking them is not possible with Bromite's engine and you might need something like an [user script](https://github.com/bromite/bromite/wiki/UserScripts) instead.
-See also: https://github.com/bromite/bromite/wiki/AdBlocking

README.md

@@ -12,15 +12,9 @@
 </a>
 <br>
 
-### **** the documentation is a Work in progress (not the browser :) ****
-
 Cromite is a [Chromium](https://www.chromium.org/Home) fork based on [Bromite](https://github.com/bromite/bromite) with built-in support for ad blocking and an eye for privacy.
 
-Cromite is available for Android Marshmallow and above (v6.0, API level 23) and Windows.
-
-For the Frequently Asked Questions see [F.A.Q.](./FAQ.md).
-
-For documentation see the [wiki](https://github.com/bromite/bromite/wiki).
+Cromite is available for Android arm64-v8a, arm32-v7a and x86_64, Nougat and above (Minimum v7.0, API level 24), Windows and Linux 64bit.
 
 # Goals
 
@@ -31,222 +25,29 @@ Cromite's goal is to
 
 In addition, Cromite would like to promote greater integration with other non-profit, open source browsers, encouraging closer collaboration with others, and attempt to integrate them directly into Chromium once they have reached an appropriate level of maturity.
 
-# Features
-
-#### Derived from Bromite
-* customizable adblock filters via user-provided URL (see https://www.bromite.org/custom-filters) (deprecated, replaced by adblock plus)
-* automatically updated adblock filters
-* remove click-tracking and AMP from search results
-* DNS-over-HTTPS support with any valid IETF DoH endpoint
-* always-incognito mode
-* disable all field trials permanently
-* disable smart search by default, allow web search from incognito mode
-* always-visible cookies, javascript and ads site settings from address bar popup
-* remove Play integration binary blobs
-* use [CFI](https://en.wikipedia.org/wiki/Control-flow_integrity) on all architectures except x86 and Windows
-* enable trivial auto var init
-* disable media router and remoting by default
-* disable dynamic module loading
-* show warnings for TLSv1.0/TLSv1.1 pages
-* enable site-per-process isolation for all devices with memory > 1GB
-* [proxy configuration page](https://github.com/bromite/bromite/wiki/ProxyConfiguration) with PAC and custom proxy lists support
-* settings to disable custom intents and clear session on exit
-* flags to toggle anti-fingerprinting mitigations for canvas, audio, client rects, webGL and sensor APIs (see full list below for all the new flags)
-* use frozen User-Agent to conceal real model and browser version
-* privacy enhancement patches from [Iridium](https://iridiumbrowser.de/), [Inox patchset](https://github.com/gcarq/inox-patchset), [Brave](https://brave.com/) and [ungoogled-chromium](https://github.com/Eloston/ungoogled-chromium) projects
-* security enhancement patches from [GrapheneOS](https://github.com/GrapheneOS) project
-* reduced referer granularity
-* block gateway attacks via websockets (partial fix, see [this upstream issue](https://bugs.chromium.org/p/chromium/issues/detail?id=590714))
-* use 64-bit ABI for webview processes
-* make all favicon requests on-demand ([supercookie](https://supercookie.me/) mitigation)
-* enable all network isolation features (`PartitionConnectionsByNetworkIsolationKey`, `PartitionHttpServerPropertiesByNetworkIsolationKey`, `SplitHostCacheByNetworkIsolationKey`, `AppendFrameOriginToNetworkIsolationKey`, `SplitCacheByNetworkIsolationKey`, `UseRegistrableDomainInNetworkIsolationKey`, `PartitionSSLSessionsByNetworkIsolationKey`, `PartitionExpectCTStateByNetworkIsolationKey`, `PartitionDomainReliabilityByNetworkIsolationKey`)
-* ignore enterprise policies that disallow secure DNS
-* ask permission to play protected media
-* disable the DIAL repeating discovery
-* disable RTCGetCurrentBrowsingContextMedia by default
-* disable FLoC and privacy sandbox by default
-* disable feeds
-* disable reporting of certificate errors
-* use pre-defined phone model for client hints and Javascript
-* allow forcing external links to open in incognito
-* disable AGSA by default
-* flag to enable Certificate Transparency
-* allow adding search engines from incognito mode
-* disable predictors
-* disable supervised users
-* disable safety check
-* disable capability to block `view-source:` URLs
-* disable `SegmentationPlatformFeature`, `OptimizationHints`, client hint headers
-* disable `AsyncDNS` by default
-* customize history expiration threshold
-* disable idle detection
-* HTTPS-only mode enabled by default
-* disable TLS resumption by default
-* strict site isolation and strict origin isolation
-* partition blobs by top frame URL
-
-#### Cromite-specific features
-
-* Built-in Adblock Plus [patch](https://github.com/uazo/bromite/blob/master/build/patches/00Eyeo-Adblock-Remove-Privacy-Issues.patch) (issue [84](https://github.com/uazo/bromite-buildtools/issues/84))
-* policy browser patch for the use of enterprise policy [patch](https://github.com/uazo/bromite/blob/master/build/patches/00add-browser-policy.patch) (issue [191](https://github.com/uazo/bromite-buildtools/issues/191))
-  - deactivate safe browsing and extended reporting
-  - disabled scroll-to-text-fragment
-  - disabled contextual search
-  - disabled media router
-  - disabled url keyed anonymized data collection
-  - disabled translate
-  - disabled network prediction
-  - disabled sign-in
-  - disabled google search side panel
-  - disabled automatic https upgrades
-* internal firewall to block all unauthorised calls made from the browser [patch](https://github.com/uazo/bromite/blob/master/build/patches/00Internal-firewall.patch) (issue [147](https://github.com/uazo/bromite-buildtools/issues/147))
-* show warnings on downloads over HTTP [patch](https://github.com/uazo/bromite/blob/master/build/patches/00Show-warnings-on-downloads-over-HTTP.patch)
-* lock profile cookie database [patch](https://github.com/uazo/bromite/blob/master/build/patches/00Lock-Profile-Cookie-Database.patch)
-* remove support for device memory and cpu recovery [patch](https://github.com/uazo/bromite/blob/master/build/patches/00Remove-support-for-device-memory-and-cpu-recovery.patch)
-* disable speechSynthesis getVoices API [patch](https://github.com/uazo/bromite/blob/master/build/patches/00Disable-speechSynthesis-getVoices-API.patch)
-* viewport Protection patch [patch](https://github.com/uazo/bromite/blob/master/build/patches/Viewport-Protection-flag.patch)
-* deprecate Data URL in SVGUseElement [patch](https://github.com/uazo/bromite/blob/master/build/patches/00Deprecate-Data-URL-in-SVGUseElement.patch)
-* disallow Android App Scheme as referrer [patch](https://github.com/uazo/bromite/blob/master/build/patches/00Disallow-Android-App-Scheme-as-referrer.patch)
-* disable Compression Dictionary Transport [patch](https://github.com/uazo/bromite/blob/master/build/patches/00Disable-Compression-Dictionary-Transport.patch)
-* disable PrivateStateTokens API [patch](https://github.com/uazo/bromite/blob/master/build/patches/00Disable-PrivateStateTokens-API.patch)
-* disable GSA by default [patch](https://github.com/uazo/bromite/blob/master/build/patches/00Disable-GSA-by-default.patch)
-* disable GetInstalledRelatedApps API [patch](https://github.com/uazo/bromite/blob/master/build/patches/00Disable-GetInstalledRelatedApps-API.patch)
-* disable FirstPartySets and StorageAccessAPI [patch](https://github.com/uazo/bromite/blob/master/build/patches/00Disable-FirstPartySets-and-StorageAccessAPI.patch)
-* disable WebGPU [patch](https://github.com/uazo/bromite/blob/master/build/patches/00Disable-WebGPU.patch)
-* disable GamePad API [patch](https://github.com/uazo/bromite/blob/master/build/patches/00Add-a-flag-to-disable-GamePad-API.patch)
-* remove external https connection from chrome://discards [patch](https://github.com/uazo/bromite/blob/master/build/patches/00Remove-https-connection-from-chrome-discards.patch)
-* links the use of screen.isExtended to WINDOW_MANAGEMENT permission granted by user [patch](https://github.com/uazo/bromite/blob/master/build/patches/00Multi-Screen-Window-Placement-API-fix.patch)
-* clear CORS Preflight Cache on clearing data [patch](https://github.com/uazo/bromite/blob/master/build/patches/00Clear-CORS-Preflight-Cache-on-clearing-data.patch)
-* remove auth header upon cross origin redirect [patch](https://github.com/uazo/bromite/blob/master/build/patches/00Remove-auth-header-upon-cross-origin-redirect.patch)
-* disable SHA1 Server Signature [patch](https://github.com/uazo/bromite/blob/master/build/patches/00Disable-SHA1-Server-Signature.patch)
-* remove detection of captive portals [patch](https://github.com/uazo/bromite/blob/master/build/patches/00Remove-detection-of-captive-portals.patch)
-* disable devtools remote and custom protocols [patch](https://github.com/uazo/bromite/blob/master/build/patches/00Disable-devtools-remote-and-custom-protocols.patch)
-* enable Document Open Inheritance Removal [patch](https://github.com/uazo/bromite/blob/master/build/patches/00Enable-Document-Open-Inheritance-Removal.patch)
-* warning message for unsupported hardware aes [patch](https://github.com/uazo/bromite/blob/master/build/patches/00Warning-message-for-unsupported-hardware-aes.patch)
-* partition HSTS cache by NAK [patch](https://github.com/uazo/bromite/blob/master/build/patches/00Partition-HSTS-cache-by-NAK.patch)
-* disable password leak detector [patch](https://github.com/uazo/bromite/blob/master/build/patches/00Disable-privacy-issues-in-password-manager.patch)
-* keyboard protection flag [patch](https://github.com/uazo/bromite/blob/master/build/patches/00Keyboard-protection-flag.patch)
-* disable csp reports [patch](https://github.com/uazo/bromite/blob/master/build/patches/00Disable-csp-reports.patch)
-* add setting to clear data on exit [patch](https://github.com/uazo/bromite/blob/master/build/patches/00Add-setting-to-clear-data-on-exit.patch)
-* disable visited pseudo class [patch](https://github.com/uazo/bromite/blob/master/build/patches/00Disable-visited-pseudo-class.patch)
-* disable BackForwardCache [patch](https://github.com/uazo/bromite/blob/master/build/patches/00Disable-BackForwardCache.patch)
-* disable FedCm [patch](https://github.com/uazo/bromite/blob/master/build/patches/00Disable-FedCm.patch)
-* partitioning all cookies by top frame domain [patch](https://github.com/uazo/bromite/blob/master/build/patches/00Partitioning-all-cookies-by-top-frame-domain.patch)
-* fingerprint mitigation for AudioBuffer and AnalyserNode [patch](https://github.com/uazo/bromite/blob/master/build/patches/AudioBuffer-AnalyserNode-fp-mitigations.patch)
-
-##### from [116.0.5845.111](https://github.com/uazo/cromite/issues/205#issuecomment-1690216310)
-* Disable PartnerCustomizations [patch](https://github.com/uazo/cromite/blob/master/build/patches/00Disable-PartnerCustomizations.patch) [#202](https://github.com/uazo/cromite/issues/202)
-* Add option to disable snapshots [patch](https://github.com/uazo/cromite/blob/master/build/patches/00Add-option-to-disable-snapshots.patch) [#201](https://github.com/uazo/cromite/issues/201)
-* Enable Android Dynamic Performance Framework on renderer [patch](https://github.com/uazo/cromite/blob/master/build/patches/00Enable-Android-Dynamic-Performance-Framework.patch) 
-
-#### Windows Cromite-specific features
-
-* enable Network Service Sandbox by default
-* disable sharing hub
-* disable search for image
-* simpler logging to file
-* disable TabHoverCard images
-* enable File System Access blocklist
-* enable HighEfficiencyMode by default
-* disable annotates on downloads
-* enabled pdf plugin by default
-
-## Features not related to privacy
-
-#### Derived da Bromite
-* browser automatic updates, enabled by default
-* native Android autofill support
-* import/export bookmarks
-* bookmark all tabs from tabs regroup menu
-* allow playing videos in background tabs and disable pause on switching tabs
-* all codecs included (proprietary, open H.264 etc.)
-* [AV1 codec support](https://github.com/bromite/bromite/wiki/AV1-support)
-* [dav1d](https://code.videolan.org/videolan/dav1d) decoder enabled by default
-* built with official speed optimizations
-* increase number of autocomplete matches from 5 to 10
-* allow changing default download storage location
-* do not ignore save prompt for users without SD cards
-* disable articles and increase number of icons on new tab page
-* adding an URL as bookmark will clear its blocked status for the NTP tiles
-* history support in incognito mode
-* view source of pages
-* sticky desktop mode setting
-* mobile/desktop user agent customization
-* accessibility preference to force tablet UI
-* use Alt+D to focus address bar
-* allow sharing to Bromite
-* UI for crash information collection
-* allow OpenSearch search engine detection in incognito
-* allow OpenSearch search engine detection with paths
-* keyboard dictionary hints in address bar
-* always allow `view-source:` URLs
-* allow moving navigation bar to bottom
-* add option to use home page as NTP
-
-#### Cromite-specific features
-
-* add setting in android to invert tap and long tap [patch](https://github.com/uazo/bromite/blob/master/build/patches/00Add-setting-to-invert-tap-and-long-tap.patch)
-
-(TODO) You can inspect all functionality/privacy changes by reading the [patches](https://github.com/bromite/bromite/tree/master/build/patches) and/or the [CHANGELOG](./CHANGELOG.md).
-
-### Flags
-
-Flags which have been retired from upstream Chromium but are still available in Bromite.
-
-* `#pull-to-refresh`
-* `#enable-search-ready-omnibox`
-* `#darken-websites-checkbox-in-themes-setting`
-* `#simplified-ntp`, enabled by default
-* `#enable-text-fragment-anchor`, disabled by default
-* `#num-raster-threads`
-* `#enable-image-reader`, enabled by default
-* `#enable-tab-groups` and `#enable-tab-groups-ui-improvements`
-* `#offline-indicator-v2`
-
-New flags:
-
-* `#fingerprinting-canvas-image-data-noise`, `#fingerprinting-client-rects-noise` and `#fingerprinting-canvas-measuretext-noise`, enabled by default
-* `#incognito-screenshot`, disabled by default
-* `#max-connections-per-host`
-* `#resume-background-video`
-* `#ipv6-probing`
-* `#enable-device-motion` and `#enable-device-orientation`
-* `#show-legacy-tls-warnings`
-* `#save-data-header`, disabled by default
-* `#export-bookmarks-use-saf`, disabled by default
-* `#allow-user-certificates`, disabled by default
-* `#cleartext-permitted`, enabled by default, can be used to disable all cleartext-HTTP traffic
-* `#omnibox-autocomplete-filtering`, can be used to restrict omnibox autocomplete results
-* `#disable-external-intent-requests`, can be used to disable opening any external app for any URL
-* `#enable-userscripts-log`, see https://github.com/bromite/bromite/wiki/UserScripts#flags
-* `#certificate-transparency-enabled`, enabled by default; see https://chromium.googlesource.com/chromium/src/+/master/net/docs/certificate-transparency.md
-* `#move-top-toolbar-to-bottom`, disabled by default
-* `#site-engagement`, enabled by default, can be used to disable the automatically-generated icons for most visited sites on the NTP
-
-### Site settings
-
-* webGL, disabled by default
-* images, enabled by default
-* Javascript JIT, disabled by default
-* timezone customization override
-* autoplay, disabled by default
-* webRTC, disabled by default
-* viewport protection, enabled by default
-
 # Privacy limitations
 
 Cromite's privacy features, including anti-fingerprinting mitigations (which are not comprehensive), **are not to be considered useful for journalists and people living in countries with freedom limitations**, please look at [Tor Browser](https://www.torproject.org/download/) in such cases.
 Please note that this project is not free of bugs and that changing the behaviour of a browser can be risky and not without problems.
 
+# Docs
+- [Privacy Policy](https://github.com/uazo/cromite/blob/master/docs/PRIVACY_POLICY.md)
+- [Features](https://github.com/uazo/cromite/blob/master/docs/FEATURES.md)
+- [How to build](https://github.com/uazo/cromite/blob/master/docs/HOW_TO_BUILD.md)
+- [Patch list](https://github.com/uazo/cromite/blob/master/docs/PATCHES.md)
+
 # Releases
 
 All built versions are available as [releases](https://github.com/uazo/cromite/releases).
 
-Cromite is currently built for ARM64, ~x86~ (Android SDK version 23+) and Windows x64.
+Cromite is currently built for ARM64, x86 (Android SDK version 23+) and Windows x64.
 
 You will automatically receive notifications about new updates (and be able to install them) via the auto updater functionality (enabled by default), see [related wiki page](https://github.com/bromite/bromite/wiki/AutomaticUpdates).
 
-For F-droid: work in progress https://github.com/uazo/cromite/issues/64
+### F-droid
+
+Official F-droid repo url:
+https://www.cromite.org/fdroid/repo/?fingerprint=49F37E74DEE483DCA2B991334FB5A0200787430D0B5F9A783DD5F13695E9517B
 
 ### Auto-update setup for windows
 
@@ -262,7 +63,7 @@ ChromiumUpdateUrl=https://github.com/uazo/cromite/releases/latest/download/updat
 # Command line for Chromium (string):
 # note --user-data-dir= works better if path is absolute
 # See here: http://peter.sh/experiments/chromium-command-line-switches/
-ChromiumCommandLine=--user-data-dir=".\User Data" --no-default-browser-check
+ChromiumCommandLine=--user-data-dir="C:\Users\<my user>\AppData\Local\Chromium\User Data" --no-default-browser-check
 
 # to enable full logging in c:\temp\log.txt (daily rotate, no automatic deletion)
 # ChromiumCommandLine=--enable-logging --v=0 --log-file=C:\temp\log.txt --user-data-dir=".\User Data" --no-default-browser-check
@@ -274,6 +75,7 @@ ChromiumBinary=chrome.exe
 # Relative (to chrlauncher directory) or full path (env. variables supported).
 ChromiumDirectory=.\bin
 ```
+To prevent deletion by Microsoft Defender each time the browser is updated, check the `user-data-dir` folder by modifying it accordingly.
 
 ### Enable network process sandbox in windows
 I don't include any setups because I don't like the experience of not knowing what they do, so you must manually run this command on first installation:
@@ -283,43 +85,21 @@ icacls . /grant "*S-1-15-2-2:(OI)(CI)(RX)"
 ```
 see https://github.com/uazo/bromite-buildtools/issues/51
 
-## (TODO) Integrity and authenticity
-
-You can verify the integrity of a downloaded APK file from this project with any `sha256sum`-compatible tool by downloading the corresponding `brm_X.Y.Z.sha256.txt` or `chr_X.Y.Z.sha256.txt` file, where X.Y.Z is the release version number. Example:
+### Enable AppContainer for renderer process in windows
+you can activate the 'RendererAppContainer' flag from the command line with
 ```
-$ sha256sum --check brm_68.0.3440.54.sha256.txt
-arm64_SystemWebView.apk: OK
-arm64_ChromePublic.apk: OK
-arm64_ChromeModernPublic.apk: OK
+  --enable-features=RendererAppContainer
 ```
 
-You can verify authenticity, e.g. that the author ([csagan5](https://github.com/csagan5)) released the file, by using gpg2:
-```
-$ gpg2 --quiet --verify brm_68.0.3440.54.sha256.txt.asc
-gpg: assuming signed data in 'brm_68.0.3440.54.sha256.txt'
-gpg: Signature made Sun 08 Jul 2018 04:22:52 PM CEST using RSA key ID D85DC0C5
-gpg: Good signature from "csagan5 <32685696+csagan5@users.noreply.github.com>"
-```
-
-You can download csagan5's public GnuPG key from here: [csagan5.asc](./csagan5.asc).
-
-# (TODO) How to build
-
-The [Bromite main repository](https://github.com/bromite/bromite) contains tags for each corresponding Chromium release (see https://chromium.googlesource.com/chromium/src.git).
-
-Please refer to [official Chromium build documentation](https://www.chromium.org/developers/how-tos/get-the-code) to get started on how to build Chromium; if you can build Chromium for Android, you can build Bromite.
-
-The Chromium version tag used as base for the patches is available here: [RELEASE](./build/RELEASE); this is always corresponding to the git tag for every release.
-The GN args used to build Bromite are available here: [bromite.gn_args](./build/bromite.gn_args).
-The patches are to be applied second the order specified in the `bromite_patches_list.txt` file (you can use `git am`).
-
-# (TODO) Contributing
+# Contributing
 
 Please submit issues following the issue template; beware that GitHub does not display the templates from mobile.
 
 Patches are welcome and accepted if they match the project goals.
 
-For any usage or development discussion please use GitHub Discussions: https://github.com/bromite/bromite/discussions
+If you want to help me, [here](https://github.com/uazo/cromite/blob/master/docs/HELP_ME_PLEASE.md) is the list of things I would need.
+
+For any usage or development discussion please use GitHub Discussions: https://github.com/uazo/cromite/discussions
 
 # Credits
 
@@ -332,11 +112,9 @@ For any usage or development discussion please use GitHub Discussions: https://g
   * [Inox patchset](https://github.com/gcarq/inox-patchset) for some patches (via ungoogled-chromium)
   * [Brave Browser](https://github.com/brave/brave-core) for some patches
 
-# (TODO) License
+# License
 
-The patches published as part of the Bromite project are released under [GNU GPL v3](./LICENSE).
-
-[version-image]: https://img.shields.io/github/release/bromite/bromite.svg?style=flat-square
-[version-url]: https://github.com/bromite/bromite/releases/latest
-[license-image]: https://img.shields.io/github/license/bromite/bromite.svg
-[license-url]: https://github.com/bromite/bromite/blob/master/LICENSE
+Cromite is published under [GNU GPL v3](./LICENSE).
+The patches published as part of the Bromite project are released under GNU GPL v3 only.
+Cromite specific patches are under the GNU GPL-2+ licence.
+Each individual patch contains specific information on the licence used.

build/LASTCHANGE

@@ -1 +0,0 @@
-e3a3a1fe718bf559be801d14660fb6f9dc9bf603-

build/RELEASE

@@ -1 +1 @@
-116.0.5845.111
+123.0.6312.106

build/RELEASE_COMMIT

@@ -1 +0,0 @@
-5923fa90d4e3587c130983442b9cf90f4c76e851

build/bromite.gn_args

@@ -1,51 +0,0 @@
-android_channel="stable"
-blink_symbol_level=1
-build_contextual_search=false
-build_with_tflite_lib=false
-chrome_pgo_phase=0
-dcheck_always_on=false
-debuggable_apks=false
-dfmify_dev_ui=false
-disable_android_lint=true
-disable_autofill_assistant_dfm=true
-disable_fieldtrial_testing_config=true
-disable_tab_ui_dfm=true
-enable_av1_decoder=true
-enable_dav1d_decoder=true
-enable_gvr_services=false
-enable_hangout_services_extension=false
-enable_iterator_debugging=false
-enable_mdns=false
-enable_mse_mpeg2ts_stream_parser=true
-enable_nacl=false
-enable_platform_dolby_vision=true
-enable_platform_hevc=true
-enable_remoting=false
-enable_reporting=false
-enable_vr=false
-exclude_unwind_tables=false
-ffmpeg_branding="Chrome"
-icu_use_data_file=true
-is_cfi=true
-is_component_build=false
-is_debug=false
-is_official_build=true
-proprietary_codecs=true
-rtc_build_examples=false
-symbol_level=1
-system_webview_package_name="org.bromite.webview"
-target_os="android"
-treat_warnings_as_errors=true
-use_cfi_cast=true
-use_debug_fission=true
-use_errorprone_java_compiler=false
-use_gnome_keyring=false
-use_official_google_api_keys=false
-use_rtti=false
-use_sysroot=false
-webview_includes_weblayer=false
-enable_arcore=false
-enable_openxr=false
-enable_gvr_services=false
-enable_feed_v2=false
-is_high_end_android=true

build/chromium.gn_args

@@ -1,48 +0,0 @@
-android_channel="stable"
-blink_symbol_level=1
-build_contextual_search=false
-build_with_tflite_lib=false
-chrome_pgo_phase=0
-dcheck_always_on=false
-debuggable_apks=false
-dfmify_dev_ui=false
-disable_android_lint=true
-disable_autofill_assistant_dfm=true
-disable_fieldtrial_testing_config=true
-disable_tab_ui_dfm=true
-enable_av1_decoder=true
-enable_dav1d_decoder=true
-enable_gvr_services=false
-enable_hangout_services_extension=false
-enable_iterator_debugging=false
-enable_mdns=false
-enable_mse_mpeg2ts_stream_parser=true
-enable_nacl=false
-enable_platform_dolby_vision=true
-enable_platform_hevc=true
-enable_remoting=false
-enable_reporting=true
-enable_supervised_users=false
-enable_vr=false
-exclude_unwind_tables=false
-ffmpeg_branding="Chrome"
-icu_use_data_file=true
-is_cfi=true
-is_component_build=false
-is_debug=false
-is_official_build=true
-proprietary_codecs=true
-rtc_build_examples=false
-safe_browsing_mode=2
-symbol_level=1
-system_webview_package_name="com.android.webview"
-target_os="android"
-treat_warnings_as_errors=true
-use_cfi_cast=true
-use_debug_fission=true
-use_errorprone_java_compiler=false
-use_gnome_keyring=false
-use_official_google_api_keys=false
-use_rtti=false
-use_sysroot=false
-webview_includes_weblayer=false

build/chromium_patches_list.txt

@@ -1,11 +0,0 @@
-AV1-codec-support.patch
-exit-on-failure-of-inclusion.patch
-Reintroduce-override_build_timestamp.patch
-do-not-hide-.orig-files.patch
-Do-not-link-with-libatomic.patch
-do-not-add-suffix-to-package-name.patch
-Switch-to-fstack-protector-strong.patch
-Enable-fwrapv-in-Clang-for-non-UBSan-builds.patch
-enable-ftrivial-auto-var-init-zero.patch
-Disable-feeds-support-by-default.patch
-Chromium-package-name.patch

build/components/README.md

@@ -0,0 +1,55 @@
+## Components on Cromite
+
+Cromite needs to download certain static files for certain features.
+Specifically, the need arises from making the fonts used by the browser standard, in order to minimise the use of fingerprint scripts based on the fonts present on the device.
+
+To do this, the automatic update of components was reactivated with some differences compared to Chromium:
+
+- Since there is no backend, the response to the request for updates is static (see `query.json`). It currently resides on the cromite.org site because, deliberately, no request log is active.
+- The update file (a zip file) is downloaded only once and, if already done, nothing more is requested externally, unless the user goes to `chrome://components` and requests the update check.
+
+It is possible to generate a zip for the components in this way:
+
+### prerequisites
+
+- generate a der file, used to 'sign' the zip:
+
+```
+openssl genrsa 4096 | openssl pkcs8 \
+   -inform PEM -nocrypt -topk8 -outform DER \
+   -out cromite.pkcs8.der
+```
+
+currently the certificate used for cromite is in the pkcs8.der.asc, encrypted with gpg, so not public, for security reasons.
+
+- build `crx3_build_action`, necessary for 'signing' the zip:
+
+```
+ninja -C out/lin64 crx3_build_action
+```
+
+### how to generate the zip
+
+simply:
+
+```
+zip -j fonts.zip fonts/*
+out/lin64/crx3_build_action fonts_component.zip fonts.zip pkcs8.der
+```
+
+the resulting zip cannot currently be unzipped with system tools.
+
+The zip must contain the file `manifest.json`.
+
+### important sections in the query.json
+
+- `appid`:
+is the value used to identify the component. currently I do not know how to create a new one, there is no documentation or code to generate it.
+- `codebase`:
+is the base url from which to download the file
+- `name`:
+is the name of the file to download, the url is "codebase + name"
+- `hash_sha256`:
+is the hash of the resulting zip, used for comparison. compatible with sha256sum
+- `fp`:
+currently not used, is an additional protection mechanism for which I have found no documentation.