chromium-web-store VS bubblewrap

Ungoogled Chromium (Mac & Linux), much more performant than Firefox; use Chromium Web Store to maintain extensions (ungoogled means ungoogled, no normal Chrome Web Store), and xBrowserSync for bookmarks. I really wish I could just use Safari on Mac though, all I want is bookmark sync (and more/better extensions, but bookmark sync).

And if you want to use extensions from the Web Store: https://github.com/NeverDecaf/chromium-web-store

ungoogled-chromium with chromium-web-store

Are there any chromium browsers on Android with addons? I'm not aware of any, so I primarily use Iceraven. On desktop I do have chromium with some addons, but the safest source is the Google web store. If you're using fully ungoogled chromium then you'll first need a custom extension to get access to the web store. You can get that here: https://github.com/NeverDecaf/chromium-web-store

Install some of these extensions using by manually going through the Chromium web store (from github): uBlock Origin Privacy Badger by EFF Trace - Online Tracking Protection Fast Forward Disconnect Decentraleyes Smart referer (link, and I believe it is firefox only?)

If you have to use it anyway, atleast use some popular open source tools like this. https://github.com/NeverDecaf/chromium-web-store or use this guide https://avoidthehack.com/manually-install-extensions-ungoogled-chromium.

there's an extension for Ungoogled which is used to auto update extensions called "Chromium webstore" on github here.

as an alternative to the already mentioned options there is also ungoogled-chromium on flathub. Flatpak should already be preinstalled on Fedora (was there for me on 36 fresh install). Note that you will need to sideload chromium-web-store to get access to the Chrome extensions store. There is also a workaround for dark mode in the readme on the github repo for the flatpak.

Nothing nix specific but you may be interested in https://github.com/containers/bubblewrap

Recently, I came across Chainguard and wrote the article How to build Docker Images with Melange and Apko. As a fervent supporter of Kubernetes and GitLab CI, I was eager to experiment with building images using Melange in this particular setup. GitLab's shared Runners work seamlessly with Bubblewrap, eliminating the need for additional configurations. This post is intended for enthusiasts like myself, interested in hosting their own Kubernetes Runners and leveraging the Kubernetes Runner Type of Melange.

```

This is basically manually invoking what Flatpak does:

https://github.com/containers/bubblewrap

This is also useful for more than just security. E.G., you can test how your app would behave on a fresh install by masking your user configuration files. I personally also have a tool that uses it to basically bundle all dependencies from an entire Linux distribution in order to make highly portable AppImages— Been meaning to post that, will get around to it eventually maybe.

The flags above should hide your user data (`--tmpfs`), disable network access (`--unshare-all`), hide/virtualize devices and OS state (`--dev` and `--proc`), and make the rest of the root filesystem read-only (`--ro-bind`­— Including the insecure X11 socket in `/tmp`, which you might want to expose for GUI apps).

Check them against `bwrap --help`; I might have omitted one or two more things you'd need.

While trying to find out more comparison information, found this light on details issue:

https://github.com/containers/bubblewrap/issues/81

It mentions nsjail and minijail.