[AUTO][FILECONTROL] - version 127.0.6533.73 (#1299 )

[AUTO][FILECONTROL] - version 127.0.6533.73
[AUTO] Patches auto-rebase for 127.0.6533.73 (#1301 )
2024-07-23 20:37:08 -12:00 · 2024-07-23 18:53:12 -12:00 · 2024-07-24 06:45:42 +00:00 · 2024-07-24 08:38:48 +02:00 · 2024-07-24 02:43:00 +00:00 · 2024-07-23 03:13:44 -12:00
917 changed files with 52593 additions and 23143 deletions
@@ -1,4 +1 @@
-*.zip binary
-*.ttf binary
-*.otf binary
-*.ttc binary
+*.zip binary
@@ -22,8 +22,6 @@ body:
          required: true
        - label: "I have searched the existing issues for my problem. This is a new ticket, NOT a duplicate or related to another open issue."
          required: true
-        - label: "I have read the [FAQs](https://github.com/uazo/cromite/blob/master/FAQ.md)."
-          required: true
        - label: "I have updated Cromite to the latest version. The bug is reproducible on this latest version."
          required: true
        - label: "This is a bug report about the Cromite browser; not the website nor F-Droid nor anything else."
@@ -24,8 +24,6 @@ body:
      options:
        - label: "I have read the [README](https://github.com/uazo/cromite/blob/master/README.md)"
          required: true
-        - label: "I have read the [FAQs](https://github.com/uazo/cromite/blob/master/FAQ.md)."
-          required: true
        - label: "I have searched [existing issues](https://github.com/uazo/cromite/issues) for my feature request. This is a new issue (NOT a duplicate) and is not related to another issue."
          required: true
        - label: "I have searched [wont fix issues](https://github.com/uazo/cromite/issues?q=label%3Awontfix) and this request is not among them"
@@ -48,7 +48,7 @@ jobs:

      - name: Enable proxy on container
        shell: bash
-        if: ${{ github.event.inputs.type != 'ubuntu-latest' }}
+        if: ${{ github.event.inputs.type != '' && github.event.inputs.type != 'ubuntu-latest' }}
        run: |
          if ! [[ -z "${HTTP_PROXY}" ]]; then
            PROXY_ADDR=http://$(hostname -I | cut -d' ' -f1 | xargs):8118
@@ -156,15 +156,15 @@ jobs:
          fi

      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@dcd5fd746d53dd8de555c0f10bca6c35628be47a #v3.12.0
+        uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c #v6.1.0
        if: env.CHANGES == '1'
        with:
          token: ${{ secrets.CROMITE_PULLS }}
          path: cromite
          add-paths: |
            tools/under-control/*
-          commit-message: 'AUTOMATED - new files under control ${{ env.NEW_VERSION }}'
-          title: New files under control ${{ env.NEW_VERSION }}
+          commit-message: '[AUTO][FILECONTROL] - version ${{ env.NEW_VERSION }}'
+          title: '[AUTO][FILECONTROL] - version ${{ env.NEW_VERSION }}'
          body: ${{ env.MESSAGE }}
          delete-branch: true
          branch-suffix: short-commit-hash
@@ -180,8 +180,10 @@ jobs:
          cd cromite/tools
          echo ${{ secrets.GITHUB_TOKEN }} | $GH auth login --with-token

+          echo Custom Release $CHR_VERSION >body.txt
+
          if [[ "$LATEST_WIN" == "$CHR_VERSION" ]]; then
-             echo Using Windows Release >>body.txt
+             echo Using Windows Release >body.txt
             echo "\`\`\`" >>body.txt
             curl -s 'https://chromiumdash.appspot.com/fetch_releases?channel=Stable&platform=Windows&num=10&offset=0' | \
                 jq --arg LATEST "$LATEST_WIN" '.[] | select( .version == $LATEST )' >>body.txt
@@ -189,7 +191,7 @@ jobs:
          fi

          if [[ "$LATEST_ANDROID" == "$CHR_VERSION" ]]; then
-             echo Using Android Release >>body.txt
+             echo Using Android Release >body.txt
             echo "\`\`\`" >>body.txt
             curl -s 'https://chromiumdash.appspot.com/fetch_releases?channel=Stable&platform=Android&num=10&offset=0' | \
                 jq --arg LATEST "$LATEST_ANDROID" '.[] | select( .version == $LATEST )' >>body.txt
@@ -397,7 +397,7 @@ jobs:
          gn args out/lin64/ --list >out/lin64/gn_list
          echo "::endgroup::"

-          ninja -C out/lin64 chrome
+          ninja -C out/lin64 chrome chrome_sandbox

          cp ../../cromite/build/RELEASE out/lin64

@@ -138,7 +138,7 @@ jobs:
          fi

      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@dcd5fd746d53dd8de555c0f10bca6c35628be47a #v3.12.0
+        uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c #v6.1.0
        if: env.CHANGES == '1'
        with:
          token: ${{ secrets.CROMITE_PULLS }}
@@ -147,8 +147,8 @@ jobs:
          #push-to-fork: uazo/cromite
          add-paths: |
            build/patches/*.patch
-          commit-message: 'AUTOMATED - git apply results'
-          title: Git apply result for ${{ env.BRANCH }} branch
+          commit-message: '[AUTO] Patches auto-rebase'
+          title: '[AUTO] Patches auto-rebase for ${{ env.BRANCH }} branch'
          body: ${{ env.MESSAGE }}
          delete-branch: true
          branch-suffix: short-commit-hash
@@ -56,7 +56,7 @@ jobs:
          fi

      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@dcd5fd746d53dd8de555c0f10bca6c35628be47a #v3.12.0
+        uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c #v6.1.0
        if: env.CHANGES == '1'
        with:
          token: ${{ secrets.CROMITE_PULLS }}
@@ -193,9 +193,6 @@ jobs:
          $GH release upload $VERSION-$CROMITE_SHA arm64_symbols.zip
          echo "::endgroup::"

-          # workaround for https://github.com/cli/cli/issues/6599
-          sleep 30s
-
          TIMESTAMP=$(date +%s -r chrome-win.zip)
          echo >updateurl.txt "browser=chromium;os=windows;architecture=64-bit;timestamp=$TIMESTAMP;editor=uazo;channel=stable;repository=https://github.com/uazo/cromite/releases;download=https://github.com/uazo/cromite/releases/latest/download/chrome-win.zip;version=$(cat $OUTPUTFILE_WIN/RELEASE);revision=1;commit=$CROMITE_SHA"
          $GH release upload $VERSION-$CROMITE_SHA updateurl.txt
@@ -13,8 +13,8 @@ permissions:

 on:
  push:
-    branches-ignore:
-      - 'ci'
+    branches:
+      - 'master'
    paths:
      - 'build/**'

@@ -67,7 +67,7 @@ jobs:
          fi

      - name: Create Pull Request
-        uses: peter-evans/create-pull-request@dcd5fd746d53dd8de555c0f10bca6c35628be47a #v3.12.0
+        uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c #v6.1.0
        if: env.CHANGES == '1'
        with:
          token: ${{ secrets.CROMITE_PULLS }}
@@ -75,8 +75,8 @@ jobs:
          base: ${{ env.BRANCH }}
          add-paths: |
            build/patches/*.patch
-          commit-message: 'AUTOMATED - update patch docs'
-          title: Generate patches doc for ${{ env.BRANCH }} branch
+          commit-message: '[AUTO][DOC] Generate patches doc for master branch'
+          title: '[AUTO][DOC] Generate patches doc for master branch'
          body: ${{ env.MESSAGE }}
          delete-branch: true
          branch-suffix: short-commit-hash
@@ -91,6 +91,31 @@ you can activate the 'RendererAppContainer' flag from the command line with
  --enable-features=RendererAppContainer
 ```

+### Making Cromite work in Ubuntu 24.04 and its derivatives (kubuntu, etc)
+This happens because, starting with Ubuntu 24.04, Apparmor
+restricts the use of unprivileged user namespaces. To fix this, you have several options:
+#### 1. Creating an apparmor profile for cromite
+Create `/etc/apparmor.d/chrome`, and write:
+```
+abi <abi/4.0>,
+include <tunables/global>
+
+profile cromite /home/user/cromite/chrome-lin/chrome flags=(unconfined) {
+  userns,
+
+  include if exists <local/chrome>
+}
+```
+replacing the cromite binary path with where you have placed cromite.
+
+Now, run `sudo apparmor_parser -r /etc/apparmor.d/cromite` to apply the changes.
+#### 2. Disabling the restriction until next reboot
+`sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0`
+#### 3. Disabling the restriction permanently
+Add `kernel.apparmor_restrict_unprivileged_userns=0` to the file `/etc/sysctl.d/60-apparmor-namespace.conf`.  Create the file if not exists.
+### Auto-update setup for linux
+working in progress in https://github.com/uazo/cromite/issues/771
+
 # Contributing

 Please submit issues following the issue template; beware that GitHub does not display the templates from mobile.
@@ -112,6 +137,8 @@ For any usage or development discussion please use GitHub Discussions: https://g
  * [Inox patchset](https://github.com/gcarq/inox-patchset) for some patches (via ungoogled-chromium)
  * [Brave Browser](https://github.com/brave/brave-core) for some patches

+thanks to [austinhuang0131](https://github.com/austinhuang0131) for the svg icon
+
 # License

 Cromite is published under [GNU GPL v3](./LICENSE).
@@ -1 +1 @@
-123.0.6312.106
+127.0.6533.73
@@ -1,55 +0,0 @@
-## Components on Cromite
-
-Cromite needs to download certain static files for certain features.
-Specifically, the need arises from making the fonts used by the browser standard, in order to minimise the use of fingerprint scripts based on the fonts present on the device.
-
-To do this, the automatic update of components was reactivated with some differences compared to Chromium:
-
- Since there is no backend, the response to the request for updates is static (see `query.json`). It currently resides on the cromite.org site because, deliberately, no request log is active.
- The update file (a zip file) is downloaded only once and, if already done, nothing more is requested externally, unless the user goes to `chrome://components` and requests the update check.
-
-It is possible to generate a zip for the components in this way:
-
-### prerequisites
-
- generate a der file, used to 'sign' the zip:
-
-```
-openssl genrsa 4096 | openssl pkcs8 \
-   -inform PEM -nocrypt -topk8 -outform DER \
-   -out cromite.pkcs8.der
-```
-
-currently the certificate used for cromite is in the pkcs8.der.asc, encrypted with gpg, so not public, for security reasons.
-
- build `crx3_build_action`, necessary for 'signing' the zip:
-
-```
-ninja -C out/lin64 crx3_build_action
-```
-
-### how to generate the zip
-
-simply:
-
-```
-zip -j fonts.zip fonts/*
-out/lin64/crx3_build_action fonts_component.zip fonts.zip pkcs8.der
-```
-
-the resulting zip cannot currently be unzipped with system tools.
-
-The zip must contain the file `manifest.json`.
-
-### important sections in the query.json
-
- `appid`:
-is the value used to identify the component. currently I do not know how to create a new one, there is no documentation or code to generate it.
- `codebase`:
-is the base url from which to download the file
- `name`:
-is the name of the file to download, the url is "codebase + name"
- `hash_sha256`:
-is the hash of the resulting zip, used for comparison. compatible with sha256sum
- `fp`:
-currently not used, is an additional protection mechanism for which I have found no documentation.
--- a/Show More
+++ b/Show More