ungoogled-software / ungoogled-chromium Goto Github PK

The user switcher, which lets you switch between Chromium users to silo cookies and other data between users, is missing from the right side of the titlebar. I see no other way to switch users.

Provide plattform specific instructions on how to build for Mac OS X.

For the record, congos on the great effort. Want to jump straight to using this!

It seems that you disabled Google Safe Browsing, and I understand why people might want to do that. However, it's already designed with privacy protection in mind: it uses a local bloom filter to determine whether a URL might be dangerous, and only asks the servers if the bloom filter says "maybe". Even then, only hashes of the URL are transmitted whenever possible. This way, it leaks very little information, but provides good security benefits. Most users should probably have it enabled.

There's a good explanation at amq/firefox-debloat#3

I read somewhere that Chromium frequently connects to Google to check if the extensions are up to date. Does this version do that?

If possible, it would be great to add this as an option to chrlauncher (https://github.com/henrypp/chrlauncher)

dpkg-source: fallo: no se puede construir con el formato de fuente «3.0 (quilt)»: no se ha encontrado ningún archivo tar de la fuente original en ../chromium-browser_51.0.2704.81.orig.tar{bz2,gz,lzma,xz}

i suggest you manage the download with wget using -O option for generate this chromium-browser_51.0.2704.81.orig.tar

Well, since this is a project with privacy in mind, I think its worth posting here. Theres a pretty good add-on to manage canvas reading for Firefox called CanvasBlocker.I asked the author and he is interested in porting it to Chromium. He just needs someone familiar with how Chromium works to help him. Heres the link: kkapsner/CanvasBlocker#65

Maybe you guys could get in touch with him, it would be cool!
Thanks for this awesome project.

Spinoff of this comment

@9Morello: Looks like your situation is similar to this. Have you seen something similar to the following in your build output?:

Warning: You are using OS X 10.12.
We do not provide support for this pre-release version.
You may encounter build failures or other breakages.
Please create pull-requests instead of filing issues.

Warning: Your Xcode (7.3.1) is outdated
Please update to Xcode 8.0.
Xcode can be updated from
  https://developer.apple.com/xcode/downloads/

Warning: Your Homebrew is outdated.
You haven't updated for at least 24 hours. This is a long time in brewland!
To update Homebrew, run `brew update`.

Chromium requires a powerful cpu and a huge amount of ram for its compilation

and some users doesn't have it, for it i suggest upload ubuntu "at least xenial" binaries, thanks

I tried the latest release for xenial and it works, yay! I had tried building for xenial a day ago, but it used to crash with a SIGFP, so whatever you did today was spot on. 👍

However, I didn't want to install this system wide, yet. I did the following to get a local version:

• Extract all the debs with for i in *.deb; do dpkg-deb -X $i out; done
• Started chromium by invoking out/usr/lib/chromium/chromium

Everything seems to work. I then modified the wrapper script as follows:

--- usr/bin/chromium    2016-09-16 10:21:24.000000000 +0530
+++ usr/bin/chromium-mod    2016-09-17 10:42:38.930899778 +0530
@@ -9,7 +9,8 @@
 APPNAME=chromium

 GDB=/usr/bin/gdb
-LIBDIR=/usr/lib/$APPNAME
+BASEDIR=`dirname $0`/../../
+LIBDIR=$BASEDIR/usr/lib/$APPNAME

 usage () {
   echo "$APPNAME [-h|--help] [-g|--debug] [--temp-profile] [options] [URL]"
@@ -41,8 +42,8 @@
 fi

 # Source additional settings
-for file in /etc/chromium.d/*; do
-  test $file = /etc/chromium.d/README || expr $file : .*\.dpkg > /dev/null || . $file
+for file in ${BASEDIR}/etc/chromium.d/*; do
+  test $file = ${BASEDIR}/etc/chromium.d/README || expr $file : .*\.dpkg > /dev/null || . $file
 done

 # Use the /usr/bin helper script for generated launchers

Is it possible to automatically create a standalone version similar to the above, which users can simply unzip into a local folder and use? I suppose dependencies will need to be installed separately by the user. In my case, I already had chromium installed, so the dependencies were present anyway.

Disable Google Cloud Messaging (GCM).

GCM is normally not started (the status can be seen in chrome://gcm-internals). However, going to chrome://copresence will activate GCM. When activated, GCM will periodically try and fail to connect to tracing URL 110 (trk:110) for the rest of the browser session.

As it is now, GCM seems harmless; no connections are established, and no data seems to be stored or sent anywhere. However, every attempt to connect to a tracing URL creates an infobar; a minor annoyance.

Somepeople has ancient computers and can't compile ungoogled with his computer

because chromium EVEN with a good pc need some hours

for let more people enjoy your software

i suggest you try to make compatible ungoogled with a popular build service´such as opensuse build service

thanks for read my suggestion

-r stores the terminal prints at a logfile, called log(n).txt, (n) is a number, example, log1.txt, log2.txt .....

a strategy would use the | tee option, that would be useful for debug purposes

-n builds a simple source package instead of compile the sofwtare, generating only the .dsc, .orig.tar.xz and .debian.tar.xz

May be outside issue...
Is it possible to change the "identifier" in source code for OS detecting (http://browserspy.dk/os.php), but not affecting JS functionality and building?
The meaning of the not to be the white crow and easy prey for tracking, if I use a rare OS/distro.

I know this feature is a work in progress, and you may have thought of this already, but the domain substitution scripts currently do not make any exception for the HSTS preload list, which contains entries for basically all of the URLs the script wants to replace. Some form of exception could be added to avoid compromising user security by stripping the sites of their HSTS preload status in the final build.

And thanks for your work on this great project!

Is there a way to use the omnibar with a different search engine like duckduckgo, yacy or searx or is this impossible because of the dependencies to google? In the inox-patchset there is a patch called add-duckduckgo-seaarch-engine.patch.

Could you add a flatpak o appimage format
http://flatpak.org/
http://appimage.org/

could you upload binaries of ungoogled 51?

Windows 10

Using the latest Windows build:

Privacy / Content Settings / Cookies / Block sites from setting any data = enabled

Privacy / Content Settings / Cookies / Block third-party cookies and site data = enabled

Cookie and site data exceptions are not retained on each restart of the browser.

you could publish the dsc file of ungoogled

for make it useful at online compile services

So, I'm trying to build this on OS X by following the official Chromium guide to build it, and by applying the patches one by one with git apply. I'm testing all the patches set by set, and after setting the Chromium build to the correct version (51.0.2704.106), only one of the iridium-browser patches is not working.

I'm getting the following error:

git apply --check third_party/WebKit/Source/iridium-browser/all-add-trk-prefixes-to-possibly-evil-connections.patch
error: patch failed: components/google/core/browser/google_url_tracker.cc:34
error: components/google/core/browser/google_url_tracker.cc: patch does not apply

I've yet to test the Inox patchset and Ungoogled-Chromium own patches. Every other patch from Iridium gives no error at all when running git apply --check. #

Add a simple patch refresher to fix fuzz and line offsets in patches automatically.

Can probably do it by manually invoking patch and reading/writing standard I/O. Probably want to get some Python module to parse the patch and then feed in parts of the patch into patch to preserve comments and such.

title

Move to the GN build system since it seems to be the preferred over GYP: http://www.chromium.org/developers/how-tos/get-the-code

Hi, interesting project.

Is it possible for you to setup a Ubuntu PPA so Ubuntu/Mint/[insert derivative here] users could easily be up to date?

I still don't know what triggers this, but after some action by the user, Chromium starts to try connecting to Google every time I visit the "Extensions" page.

Platform: OS X El Capitan
Link that ungoogled-chromium attempts to connect to: https://support.9oo91e.qjz9zk/chrome?p=help&ctx=settings
What makes ungoogled-chromium start this: I don't know. It stops by restarting it.

Not sure if this just affects the OS X version.

Hi!

I'm happy I found your project! The only thing holding me back from using it myself is that there aren't packages available for other Debian releases.

Is there any chance you might be interested in getting your changes integrated into the debian chromium package? These sorts of privacy enhancements are things that I think would be very useful for the broader debian audience. If you don't think that will work, an alternative would be to get ungoogled-chromium into debian as its own package. You are already making packages, it seems like maybe just a little bit more effort to try and get them into debian itself.

I think that if this were made available to Debian, it would reach a lot more people!

at debian8 compilation is impossible

its a fresh install "opensuse build service instance"

32bit log https://mega.nz/#!INZx2Yqa!YRzIPlrrmxnHCZZam4zeyDjL6jIDC2od8c34hr0MsTo

64bit log https://mega.nz/#!9Qhmib4Q!RWF5ufPfqaFZiSCG7KK_BHCpnpyG5QIRJljbfZwHNC0

First off, really appreciate your efforts to offer ungoogled-chromium to the public. I've been using the 48.0.2564.82 release offered here on Debian/Ubuntu for about a month now and am very happy with it, both performance-wise and especially on the security / privacy front. Noticing that there aren't any release binaries for 48.0.2564.116 (yet), I was just wondering if you plan on offering these in the future in the repo?

Add an ability to customize features implemented by ungoogled-chromium.

Some features that will become toggleable:

• The search functionality of the Omnibox. EDIT: No longer necessary with 8d8fc4b
• Blocking onbeforeunload events Feature has been removed since 21651e3
• Forcing pop-ups into tabs

More may become toggleable or customizable in the future.

Options for a GUI and a storage method for these options will need to be investigated.

As the title suggests, is there a way to search in ungoogled chromium without visiting the search engine website?

domain_patcher.sh can break building for certain platforms. Currently, the patches require domain_patcher.sh to be run over the source tree first; this dependency should be removed.

I'm getting the following error when I try to compile it in Debian Stretch.
./build_debian.sh: line 32: RUN_SOURCE_CLEANER: unbound variable

Its a clean install.

i am making some test and i found some bugs

1 clear-http-auth-cache-menu-item.patch
http://gpaste.us/f82eedc5

2 disable-google-host-detection.patch

http://gpaste.us/352fe25d

3 disable-profile-avatar-downloading.patch

issue: edits a file modified by another patch, for them quilt cancels the compilation, i suggest merge its content at all-add-trk-prefixes-to-possibly-evil-connections.patch

4 i found a very nice set of modifications "attempts to make compatible these patches for chromium 51" is "crappy" but renames patch_order to series

https://up1.ca/#3GVxlmnNWEjzfLCsPNNYWQ

you could use this attempt and test it

It would be nice to have configuration option that disables javascript clipboard API( https://www.w3.org/TR/clipboard-apis/ ). A feature like this is configurable in firefox using parameter dom.event.clipboardevents.enabled. Here are some rationale for the feature: http://superuser.com/questions/703744/how-do-i-prevent-read-more-www-site-com-from-being-injected-with-non-tynt-jav

make[1]: se sale del directorio '/home/meh/uchrome/build-sandbox'
debian/rules override_dh_auto_build-arch
make[1]: se entra en el directorio '/home/meh/uchrome/build-sandbox'
ninja -C out/Release chrome chrome_sandbox chromedriver
ninja: Entering directory `out/Release'
ninja: error: '../../components/domain_reliability/baked_in_configs/c_android_clients_google_com.json', needed by 'obj/components/domain_reliability.gen/domain_reliability/baked_in_configs.cc', missing and no known rule to make it
debian/rules:141: fallo en las instrucciones para el objetivo 'override_dh_auto_build-arch'
make[1]: *** [override_dh_auto_build-arch] Error 1
make[1]: se sale del directorio '/home/meh/uchrome/build-sandbox'
debian/rules:134: fallo en las instrucciones para el objetivo 'binary'
make: *** [binary] Error 2
dpkg-buildpackage: fallo: fakeroot debian/rules binary devolvió un estado de salida de error 2

xenial 64

The Pale Moon for Linux installer (also referred to as pminstaller) is a program that is meant to ease installation of the Pale Moon binaries on Linux, made available on http://linux.palemoon.org.

https://github.com/MoonchildProductions/PM4Linux-installer

Maybe adapt the installer for ungoogled-chromium? This way updating would be easier.

Spinoff from #30

Improve the Mac OS dmg GUI so it looks prettier by adding a .DS_Store, a volume icon, and a background image.

@9Morello has taken up the task in #30.

Refactor the build system to make support for other distributions and systems easier. Also the current scripts are too messy.

Reported by @9Morello:

1. On the OS X Chromium's top menu, there is still an "Sign in" option. Clicking it does nothing, so I supposed it could be harmlessly removed.
2. Remove the connection it tries to make when adding another profile to ungoogled-chromium. Not sure if this was present on Linux, but if I click on "Add person..." in the Settings page, then on "Sign in", there is a connection attempt to a changed domain (which is blocked by ungoogled-chromium).
3. On the OS X Chromium's top menu, If I click on "Help", and then on "Chromium Help", it attempts to connect to a remote support page (and then its blocked by ungoogled-chromium).

For the third problem, should the link be fixed or removed altogether?

There are ways to use chromium with Flash. For example via PepperFlash. Is Ungoogled Chromium compatible with PepperFlash?

fix-bundled-devtools.patch cannot be applied in gentoo for clean chromium sources. Is that okay ?

Need to try building on Windows after running source_cleaner.sh and domain_patcher.sh on the source code.

Is it possible run android apps with the App Runtime for Chrome? There is ARC-Welder as well as the ARChon Runtime for Chrome.

I tried to install ARC-Welder but it fails with the error-message CRX_HEADER_INVALID.

I installed ARChon and loaded the sample app but it freezes while loading.

In the debug messages I can see that ARChon is complaining about:

'minimum_chrome_version' is only allowed for extensions, hosted apps, legacy packaged apps, and packaged apps, but this is a shared module.
Unrecognized manifest key 'arc_build_tag'

And the sample app is complaining about:

Unrecognized manifest key 'arc_metadata'.

Use chrome/tools/build/<platform>/FILES.cfg to make .tar.xz or zip files of the build artifacts.

Probably should be implemented in OS-specific buildlib Platform classes. GenericPlatform can implement a generic FILES.cfg parser that can filter by certain parameters (probably if the files are for "dev" and "official"). The correct path to a FILES.cfg can be a class constant that is defined in child classes.

Will be considered done when Windows support is implemented. Other platforms will come in later.

[7588/18256] CXX obj/media/base/media.bitstream_buffer.o
warning: unknown warning option '-Wno-inconsistent-missing-override' [-Wunknown-warning-option]
warning: unknown warning option '-Wno-shift-negative-value'; did you mean '-Wno-shift-sign-overflow'? [-Wunknown-warning-option]
warning: unknown warning option '-Wno-bitfield-width' [-Wunknown-warning-option]
3 warnings generated.

[7589/18256] CXX obj/media/base/media.audio_video_metadata_extractor.o
FAILED: /usr/bin/clang++ -MMD -MF obj/media/base/media.audio_video_metadata_extractor.o.d -DV8_DEPRECATION_WARNINGS -DCLD_VERSION=2 -D_FILE_OFFSET_BITS=64 -DNO_TCMALLOC -DDISABLE_NACL -DCHROMIUM_BUILD -DCR_CLANG_REVISION=247874-1 -DUI_COMPOSITOR_IMAGE_TRANSPORT -DUSE_AURA=1 -DUSE_ASH=1 -DUSE_PANGO=1 -DUSE_CAIRO=1 -DUSE_DEFAULT_RENDER_THEME=1 -DUSE_LIBJPEG_TURBO=1 -DUSE_X11=1 -DUSE_CLIPBOARD_AURAX11=1 -DENABLE_ONE_CLICK_SIGNIN -DENABLE_MEDIA_ROUTER=1 -DUSE_PROPRIETARY_CODECS -DENABLE_MPEG2TS_STREAM_PARSER -DENABLE_PEPPER_CDMS -DENABLE_CONFIGURATION_POLICY -DENABLE_NOTIFICATIONS -DENABLE_HIDPI=1 -DENABLE_TOPCHROME_MD=1 -DUSE_UDEV -DDONT_EMBED_BUILD_METADATA -DTRACING_IS_OFFICIAL_BUILD=1 -DENABLE_TASK_MANAGER=1 -DENABLE_EXTENSIONS=1 -DENABLE_PDF=1 -DENABLE_PLUGINS=1 -DENABLE_SESSION_SERVICE=1 -DENABLE_THEMES=1 -DENABLE_AUTOFILL_DIALOG=1 -DENABLE_BACKGROUND=1 -DENABLE_PRINTING=1 -DENABLE_BASIC_PRINTING=1 -DENABLE_PRINT_PREVIEW=1 -DENABLE_SPELLCHECK=1 -DENABLE_CAPTIVE_PORTAL_DETECTION=1 -DENABLE_APP_LIST=1 -DENABLE_SETTINGS_APP=1 -DENABLE_SUPERVISED_USERS=1 -DENABLE_MDNS=1 -DENABLE_SERVICE_DISCOVERY=1 -DV8_USE_EXTERNAL_STARTUP_DATA -DMEDIA_IMPLEMENTATION -DUSE_NEON -DUSE_ALSA -DUSE_PULSEAUDIO -DDLOPEN_PULSEAUDIO -DENABLE_HEVC_DEMUXING -DU_USING_ICU_NAMESPACE=0 -DU_ENABLE_DYLOAD=0 -DU_STATIC_IMPLEMENTATION -DSK_SUPPORT_GPU=1 -DSK_IGNORE_LINEONLY_AA_CONVEX_PATH_OPTS -DSK_IGNORE_GL_TEXTURE_TARGET -D__STDC_CONSTANT_MACROS -DUSE_SYSTEM_FFMPEG -DUSE_LIBPCI=1 -DUSE_OPENSSL=1 -DUSE_GLIB=1 -DUSE_NSS_CERTS=1 -D__STDC_FORMAT_MACROS -DNDEBUG -DNVALGRIND -DDYNAMIC_ANNOTATIONS_ENABLED=0 -Igen -I../.. -Igen/pulse -I../../third_party/khronos -I../../gpu -I../../skia/config -I../../third_party/icu/source/common -I../../third_party/icu/source/i18n -I../../third_party/skia/include/core -I../../third_party/skia/include/effects -I../../third_party/skia/include/pdf -I../../third_party/skia/include/gpu -I../../third_party/skia/include/lazy -I../../third_party/skia/include/pathops -I../../third_party/skia/include/pipe -I../../third_party/skia/include/ports -I../../third_party/skia/include/utils -I../../skia/ext -I../../third_party/libyuv/include -I../../third_party/libyuv -I../../third_party/opus/src/include -I../../third_party/libvpx_new/source/libvpx -fstack-protector --param=ssp-buffer-size=4 -pthread -fno-strict-aliasing -Wall -Wno-unused-parameter -Wno-missing-field-initializers -fvisibility=hidden -pipe -fPIC -Wno-reserved-user-defined-literal -fcolor-diagnostics -Wheader-hygiene -Wno-char-subscripts -Wno-unneeded-internal-declaration -Wno-covered-switch-default -Wstring-conversion -Wno-c++11-narrowing -Wno-deprecated-register -Wno-inconsistent-missing-override -Wno-shift-negative-value -Wno-bitfield-width -D_REENTRANT -pthread -I/usr/include/glib-2.0 -I/usr/lib/x86_64-linux-gnu/glib-2.0/include -I/usr/include/nss -I/usr/include/nspr -Wno-header-guard -DCHROMIUM_OMIT_AV_PKT_DATA_MATROSKA_BLOCKADDITIONAL=1 -DCHROMIUM_NO_AVFRAME_CHANNELS=1 -m64 -march=x86-64 -O2 -fno-ident -fdata-sections -ffunction-sections -funwind-tables -D_FORTIFY_SOURCE=2 -g -O2 -fPIE -fstack-protector-strong -Wformat -Werror=format-security -fno-exceptions -fno-rtti -fno-threadsafe-statics -fvisibility-inlines-hidden -Wsign-compare -std=gnu++11 -c ../../media/base/audio_video_metadata_extractor.cc -o obj/media/base/media.audio_video_metadata_extractor.o

warning: unknown warning option '-Wno-inconsistent-missing-override' [-Wunknown-warning-option]

warning: unknown warning option '-Wno-shift-negative-value'; did you mean '-Wno-shift-sign-overflow'? [-Wunknown-warning-option]

warning: unknown warning option '-Wno-bitfield-width' [-Wunknown-warning-option]
../../media/base/audio_video_metadata_extractor.cc:116:17: error: use of undeclared identifier 'avcodec_get_name'; did you mean 'avcodec_get_type'?
info.type = avcodec_get_name(stream->codec->codec_id);
^~~~~~~~~~~~~~~~
avcodec_get_type
/usr/include/libavcodec/avcodec.h:4408:18: note: 'avcodec_get_type' declared here
enum AVMediaType avcodec_get_type(enum AVCodecID codec_id);
^
../../media/base/audio_video_metadata_extractor.cc:93:32: warning: comparison of integers of different signs: 'int64_t' (aka 'long') and 'unsigned long' [-Wsign-compare]
if (format_context->duration != AV_NOPTS_VALUE)
~~~~~~~~~~~~~~~~~~~~~~~~ ^ ~~~~~~~~~~~~~~
4 warnings and 1 error generated.

.....

[7589/18256] CXX obj/media/base/media.container_names.o
warning: unknown warning option '-Wno-inconsistent-missing-override' [-Wunknown-warning-option]
warning: unknown warning option '-Wno-shift-negative-value'; did you mean '-Wno-shift-sign-overflow'? [-Wunknown-warning-option]
warning: unknown warning option '-Wno-bitfield-width' [-Wunknown-warning-option]
3 warnings generated.
ninja: build stopped: subcommand failed.
debian/rules:134: recipe for target 'override_dh_auto_build-arch' failed
make[1]: *** [override_dh_auto_build-arch] Error 1
make[1]: Leaving directory '/home/eq/Programs/ungoogled-chromium/build-sandbox'
debian/rules:127: recipe for target 'binary' failed
make: *** [binary] Error 2
dpkg-buildpackage: error: fakeroot debian/rules binary gave error exit status 2

Here is my log. Do you have any ideas on how to fix it?
Thank you.