Upgrade to debian trixie (#581)

* move flavored bookworm dockerfile to a new trixie dockerfile.

* fix opera openbox selector.

* fix remmina dependencies.

* remove chromium explicit bookworm source.

* Update apps to work with trixie (#624)

Co-authored-by: yesBad <me@bad.cash>

* remove SYS_ADMIN capability requirement for Chromium-based Docker images and update documentation accordingly.

* fix chromium package.

* change uBlock Origin to uBlock Origin Lite.

* restore waterfox in build matrix for GHCR workflows.

---------

Co-authored-by: Bad <87938689+yesBad@users.noreply.github.com>
Co-authored-by: yesBad <me@bad.cash>

Author: 3 people

.github/workflows/ghcr.yml

@@ -24,9 +24,8 @@ jobs:
         include:
           - name: firefox
             platforms: linux/amd64,linux/arm64,linux/arm/v7
-          # Temporarily disabled due to Cloudflare blocked download link
-          #- name: waterfox
-          #  platforms: linux/amd64
+          - name: waterfox
+            platforms: linux/amd64
           - name: chromium
             platforms: linux/amd64,linux/arm64,linux/arm/v7
           - name: google-chrome

.github/workflows/ghcr_intel.yml

@@ -25,8 +25,7 @@ jobs:
       matrix:
         include:
           - name: firefox
-          # Temporarily disabled due to Cloudflare blocked download link
-          #- name: waterfox
+          - name: waterfox
           - name: chromium
           - name: google-chrome
           - name: ungoogled-chromium

apps/brave/policies.json

@@ -26,11 +26,11 @@
       "chrome://policy"
   ],
   "ExtensionInstallForcelist": [
-      "cjpalhdlnbpafiamejdnhcphjbkeiagm;https://clients2.google.com/service/update2/crx",
+      "ddkjiahejlhfcafbddmgiahcphecmpfh;https://clients2.google.com/service/update2/crx",
       "mnjggcdmjocbbbhaepdhchncahnbgone;https://clients2.google.com/service/update2/crx"
   ],
   "ExtensionInstallAllowlist": [
-      "cjpalhdlnbpafiamejdnhcphjbkeiagm",
+      "ddkjiahejlhfcafbddmgiahcphecmpfh",
       "mnjggcdmjocbbbhaepdhchncahnbgone"
   ],
   "ExtensionInstallBlocklist": [

apps/brave/supervisord.conf

@@ -1,6 +1,7 @@
 [program:brave]
 environment=HOME="/home/%(ENV_USER)s",USER="%(ENV_USER)s",DISPLAY="%(ENV_DISPLAY)s"
 command=/usr/bin/brave-browser
+  --no-sandbox
   --window-position=0,0
   --display=%(ENV_DISPLAY)s
   --user-data-dir=/home/neko/.config/brave

apps/brave/supervisord.nvidia.conf

@@ -1,6 +1,7 @@
 [program:brave]
 environment=HOME="/home/%(ENV_USER)s",USER="%(ENV_USER)s",DISPLAY="%(ENV_DISPLAY)s"
 command=/bin/entrypoint.sh /usr/bin/brave-browser
+  --no-sandbox
   --window-position=0,0
   --display=%(ENV_DISPLAY)s
   --user-data-dir=/home/neko/.config/brave

apps/chromium/Dockerfile

@@ -6,7 +6,6 @@ COPY ./widevinecdm.sh /widevine.sh
 #
 # install neko chromium
 RUN set -eux; \
-    echo "deb http://ftp.de.debian.org/debian bookworm main" >> /etc/apt/sources.list; \
     apt-get update; \
     apt-get install -y --no-install-recommends chromium chromium-common chromium-sandbox openbox; \
     #

apps/chromium/Dockerfile.nvidia

@@ -10,7 +10,7 @@ RUN set -eux; \
     apt-get install -y --no-install-recommends software-properties-common; \
     # chromium-browser from default repo needs snap to be installed
     # and nvidia base is ubuntu not debian
-    add-apt-repository ppa:system76/pop; \
+    add-apt-repository ppa:xtradeb/apps; \
     apt-get update; \
     apt-get install -y --no-install-recommends xz-utils chromium openbox; \
     #

apps/chromium/policies.json

@@ -27,11 +27,11 @@
       "chrome://policy"
   ],
   "ExtensionInstallForcelist": [
-      "cjpalhdlnbpafiamejdnhcphjbkeiagm;https://clients2.google.com/service/update2/crx",
+      "ddkjiahejlhfcafbddmgiahcphecmpfh;https://clients2.google.com/service/update2/crx",
       "mnjggcdmjocbbbhaepdhchncahnbgone;https://clients2.google.com/service/update2/crx"
   ],
   "ExtensionInstallAllowlist": [
-      "cjpalhdlnbpafiamejdnhcphjbkeiagm",
+      "ddkjiahejlhfcafbddmgiahcphecmpfh",
       "mnjggcdmjocbbbhaepdhchncahnbgone"
   ],
   "ExtensionInstallBlocklist": [

apps/chromium/supervisord.conf

@@ -1,6 +1,7 @@
 [program:chromium]
 environment=HOME="/home/%(ENV_USER)s",USER="%(ENV_USER)s",DISPLAY="%(ENV_DISPLAY)s"
 command=/usr/bin/chromium
+  --no-sandbox
   --window-position=0,0
   --display=%(ENV_DISPLAY)s
   --user-data-dir=/home/neko/.config/chromium

apps/chromium/supervisord.nvidia.conf

@@ -1,6 +1,7 @@
 [program:chromium]
 environment=HOME="/home/%(ENV_USER)s",USER="%(ENV_USER)s",DISPLAY="%(ENV_DISPLAY)s"
 command=/bin/entrypoint.sh /usr/bin/chromium
+  --no-sandbox
   --window-position=0,0
   --display=%(ENV_DISPLAY)s
   --user-data-dir=/home/neko/.config/chromium