{"id":21887007,"url":"https://github.com/boredsquirrel/browserscript-fedora-atomic","last_synced_at":"2025-04-15T09:51:23.045Z","repository":{"id":209322240,"uuid":"723745389","full_name":"boredsquirrel/browserscript-fedora-atomic","owner":"boredsquirrel","description":"A simple interactive script to install Brave (stable, beta, nightly) or Vivaldi on Fedora Atomic","archived":false,"fork":false,"pushed_at":"2025-01-29T14:13:37.000Z","size":53,"stargazers_count":4,"open_issues_count":1,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-03-28T18:55:18.109Z","etag":null,"topics":["atomic","brave","browsers","fedora","install","kinoite","rpm-ostree","silverblue","vivaldi"],"latest_commit_sha":null,"homepage":"","language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/boredsquirrel.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2023-11-26T16:32:19.000Z","updated_at":"2025-01-29T14:13:40.000Z","dependencies_parsed_at":"2024-02-16T00:34:08.288Z","dependency_job_id":"8c82e0cb-3166-4ffe-af41-b4b9d740f7e2","html_url":"https://github.com/boredsquirrel/browserscript-fedora-atomic","commit_stats":null,"previous_names":["trytomakeyouprivate/braveinstall-fedora-atomic","boredsquirrel/braveinstall-fedora-atomic","boredsquirrel/browserscript-fedora-atomic"],"tags_count":2,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/boredsquirrel%2Fbrowserscript-fedora-atomic","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/boredsquirrel%2Fbrowserscript-fedora-atomic/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/boredsquirrel%2Fbrowserscript-fedora-atomic/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/boredsquirrel%2Fbrowserscript-fedora-atomic/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/boredsquirrel","download_url":"https://codeload.github.com/boredsquirrel/browserscript-fedora-atomic/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":249048712,"owners_count":21204305,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["atomic","brave","browsers","fedora","install","kinoite","rpm-ostree","silverblue","vivaldi"],"created_at":"2024-11-28T11:08:08.049Z","updated_at":"2025-04-15T09:51:23.021Z","avatar_url":"https://github.com/boredsquirrel.png","language":"Shell","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Install Brave or Vivaldi on Fedora Atomic (Kinoite, Silverblue, ...) easily\n\u003cimg src=\"https://fedoraproject.org/assets/images/logos/fedora-blue.png\" alt=\"Fedora Logo\" width=\"300\"/\u003e ![Brave-icon](https://brave.com/static-assets/images/brave-logo-sans-text.svg) \u003cimg src=\"https://upload.wikimedia.org/wikipedia/commons/thumb/e/e4/Vivaldi_web_browser_logo.svg/200px-Vivaldi_web_browser_logo.svg.png\" alt=\"Vivaldi Logo\" width=\"60\"/\u003e\n\nA simple interactive script to download the Brave (stable/beta/nightly) or Vivaldi (stable/snapshot) repository and PGP signature, and install it using `rpm-ostree`.\n\nUsage:\n\n```bash\ncd ~/.local/bin\ncurl -sSLO https://github.com/boredsquirrel/browserscript-fedora-atomic/raw/main/browserscript\nchmod +x browserscript\n./browserscript\n```\n\nexample output:\n\n```\n======== Browser Install Script ========\n\nAvailable Browsers:\n1: Brave stable (recommended)\n2: Brave beta\n3: Brave nightly\n4: Vivaldi stable (x86_64) (if unsure, use this)\n5: Vivaldi stable (arm64) (Snapdragon, Apple Silicon, many SOCs)\n6: Vivaldi snapshot (x86_64)\n7: Vivaldi snapshot (arm64)\n\nWhich Browser do you want to install? (1-7): 1\n\nDownloading Repo and Key, you need to enter a password.\nBrave Repo and Key downloaded.\n\nSecuring the repo files against manipulation. Please enter your password one last time.\n\nInstalling...\n\u003c rpm-ostree install process \u003e\n```\n\n## Background\n***Brave*** has [three different repositories for Stable, Beta and Nightly.](https://brave.com/linux/#release-channel-installation), but only two different PGP verification key files! (one has two keys inside)\n\nThe repositories are downloaded to a temporary directory and then moved to `/etc/yum.repos.d/` and the keys to `/etc/pki/rpm-gpg/`. That way you will always download official versions of Brave. The process avoids connecting to the internet as root, which can be really dangerous.\n\n***Vivaldi*** has 2 repositories, this time divided by architecture (`x86_64/amd64` and `arm64/aarch64`). It uses a strange method of downloading .RPM files, which place those repo files. I extracted the repo files for you, and they are simply written manually.\n\nIn the end an `rpm-ostree install` command layers Brave or Vivaldi to your system, but the script also works on traditional Fedora and you can just install it manually:\n\n### Usage on DNF Fedora\n\n```bash\nsudo dnf install brave-browser\n#or brave-browser-beta or brave-browser-nightly\n\nsudo dnf install vivaldi-stable\n# or vivaldi-snapshot\n```\n\n### Security \u0026 Flatpak\nUsing Chromium Browsers as native packages on Linux is recommended for security reasons.\n\nThe native versions utilize filesystem and syscall Sandboxes to isolate every Website and process from one another and your from your OS.\n\nFlatpak browsers are sandboxed from the system, which blocks their ability to create isolated processes. This means\n- Firefox Flatpak simply doesn't use namespace sandboxes (but runs anyways!) and relies purely on seccomp filters. Dont use this! This is a weaker sandbox!\n- Chromium Browsers (Chrome, Chromium, Brave, Vivaldi, Edge, Opera) wouldnt normally run at all, so packages use [zypak](https://github.com/refi64/zypak) to make the sandboxing fork server use `flatpak-spawn` instead of their regular sandbox. This is unconventional, and could be an advantage against exploits targeting only the Chromium sandbox. But it is also way less tested and used, and could have weaker seccomp filters and isolation.\n\nSo using Flatpak Chromium browsers is controversial but may be fine or even more secure!\n\nUsing Flatpak Firefox is simply less secure, as one layer of Sandboxing is entirely removed. Especially if you use your browser more as a ***platform*** than a ***program***, where the protection between browser and OS may be less important than between processes within the browser.\n\nExample: You store passwords and credit cards in your browser, or use Element Web etc. Weaker process-isolation within the browser may make this information \n\nEspecially on Android, Chromium Browsers are way more secure, because Firefox for Android doesn't have a working filesystem sandbox at all. When relying on builtin sync features, Brave can be the best choice at the moment.\n\n### Bubblejail\nI recomend to use [Bubblejail](https://github.com/igo95862/bubblejail/) when possible. It allows to sandbox natively installed programs with bubblewrap, just like Flatpak.\n\nThe difference is, that it allows custom filters and sandbox configurations, enabling the regular Sandbox for Firefox or Chromium Browsers, while also sandboxing the parent process.\n\nBubblejail is available for Fedora [via COPR](https://copr.fedorainfracloud.org/coprs/secureblue/bubblejail), you can use [my COPR script](https://github.com/boredsquirrel/COPR-command) to add the repo on Fedora Atomic.\n\n### Privacy\nBrave is the only Chromium Browser on the Desktop that is degoogled (like ungoogled Chromium) **and** privacy friendly out of the box.\n\n[I dont recommend to use Braves Crypto Stuff](https://www.spacebar.news/stop-using-brave-browser/), so make sure to disable BAT, Wallet and more via a policy or `brave:flags`\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fboredsquirrel%2Fbrowserscript-fedora-atomic","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fboredsquirrel%2Fbrowserscript-fedora-atomic","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fboredsquirrel%2Fbrowserscript-fedora-atomic/lists"}