Chromium
From Whonix
Warning:
In Whonix ™, for better anonymity it is recommended to use only Tor Browser for browsing the internet. Use of any browsers such as Chromium, Firefox, Opera or others is discouraged. Reasons for that are elaborated on the Tor Browser wiki page.
Installation[edit]
Despite usually being commended on the wiki page Install Additional Software Safely, installation of Chromium using APT is currently discouraged. This is because the Debian (This was resolved. [archive])
buster version of Chromium is outdated and comes with security vulnerabilities which where reported being exploited in the wild. [1]
One option might be to install using flatpak from flathub. Special instructions are also required in this case.
Installation of flatpak from Debian backports. [2]
flatpak can be installed from Debian backports. This is non-ideal, see footnote. [3]
1. Boot Whonix-Workstation ™ (whonix-ws-15) TemplateVM.
2. Add the current Debian stable backports codename buster-backports to Debian apt sources.
Note: this applies to Whonix 15.0.1.5.4. Later Whonix versions may use a codename different to buster.
In Whonix-Workstation ™ (whonix-ws-15) TemplateVM, run.
sudo su -c "echo -e 'deb tor+https://deb.debian.org/debian buster-backports main contrib non-free' > /etc/apt/sources.list.d/backports.list"
Alternatively, users who like Onionizing Repositories can set the .onion mirror.
sudo su -c "echo -e 'deb tor+http://vwakviie2ienjx6t.onion/debian buster-backports main contrib non-free' > /etc/apt/sources.list.d/backports.list"
3. Update the package lists.
sudo apt-get update
4. Install the select software.
sudo apt-get -t buster-backports install flatpak
The procedure is now complete.
5. Undo.
On occasion it is necessary to undo this configuration, for example when upgrading from Debian buster to bullseye. [4] To proceed, run.
sudo rm /etc/apt/sources.list.d/backports.list
Add flathub repository. [5]
flatpak remote-add --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo
Install Chromium from flathub repository. [6] [7]
flatpak install flathub org.chromium.Chromium
Usage[edit]
sudo chmod -s $(which bwrap)
sudo sysctl kernel.unprivileged_userns_clone=1
flatpak run org.chromium.Chromium
Related[edit]
Footnotes[edit]
- ↑
- https://forums.whonix.org/t/chromium-browser-for-kicksecure-discussions-not-whonix/10388/54 [archive]
- https://www.theregister.com/2020/11/04/google_chrome_critical_updates/ [archive]
- https://www.zdnet.com/article/google-patches-two-more-chrome-zero-days/ [archive]
- https://web.archive.org/web/20201109070427/https://security-tracker.debian.org/tracker/CVE-2020-16009 [archive]
- https://www.mail-archive.com/search?l=debian-security@lists.debian.org&q=subject:%22Is+chromium+updated%5C%3F%22&o=newest [archive]
- https://security-tracker.debian.org/tracker/CVE-2020-16013 [archive]
- https://security-tracker.debian.org/tracker/CVE-2020-16017 [archive]
- ↑
Using Debian
busterversion offlatpak:error: Failed to install org.chromium.Chromium: app/org.chromium.Chromium/x86_64/stable needs a later flatpak version (1.8.2)
https://forums.whonix.org/t/flathub-as-a-source-of-software/10706/6 [archive]
- ↑ Users should Prefer Packages from Debian Stable Repository, but using backports is better than manual software installation or using third party package managers since this prefers APT. To contain the risk, Non-Qubes-Whonix ™ users might want to consider using Multiple Whonix-Workstation ™ and Qubes-Whonix ™ users might want to consider using Multiple Qubes-Whonix ™ TemplateVMs or Software Installation in a TemplateBasedVM.
- ↑ Most often this step applies before attempting major Whonix upgrades; upgrade instructions are also made available at that time (see Stay Tuned).
- ↑ https://flatpak.org/setup/Debian/ [archive]
- ↑ https://flathub.org/apps/details/org.chromium.Chromium [archive]
- ↑
TODO: research. Perhaps useful for Qubes?
flatpak --user install org.chromium.Chromium
- ↑
flatpak run org.chromium.Chromium
Your Flatpak version does not support the expose-pids flag,
which means that Chromium is unable to run. This generally happens if your distro's bubblewrap installation is setuid
instead of using user namespaces.
- flathub org.chromium.Chromium bug report: Can't start in Debian Buster [archive]
- Debian bug report: org.chromium.Chromium broken in Debian buster [archive]
Whonix ™ is Supported by Evolution Host DDoS Protected VPS. Stay private and get your VPS with Bitcoin or Monero.
Search engines: YaCy | Qwant | ecosia | MetaGer | peekier | Whonix ™ Wiki
Please consider a recurring donation! 
This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to Conditions for Contributions to Whonix ™, then Edit! Edits are held for moderation. Policy of Whonix Website and Whonix Chat and Policy On Nonfreedom Software applies.
Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP. Whonix ™ is a trademark. Whonix ™ is a licensee [archive] of the Open Invention Network [archive]. Unless otherwise noted, the content of this page is copyrighted and licensed under the same Freedom Software license as Whonix ™ itself. (Why?)
Whonix ™ is a derivative of and not affiliated with Debian [archive]. Debian is a registered trademark [archive] owned by Software in the Public Interest, Inc [archive].
Whonix ™ is produced independently from the Tor® [archive] anonymity software and carries no guarantee from The Tor Project [archive] about quality, suitability or anything else.
By using our website, you acknowledge that you have read, understood and agreed to our Privacy Policy, Cookie Policy, Terms of Service, and E-Sign Consent. Whonix ™ is provided by ENCRYPTED SUPPORT LP. See Imprint, Contact.