* [ISSUE] Chromium - google will limit access to private API (no sync...)
@ 2021-01-26 8:54 jirib
2021-01-26 15:22 ` pbui
` (16 more replies)
0 siblings, 17 replies; 18+ messages in thread
From: jirib @ 2021-01-26 8:54 UTC (permalink / raw)
To: ml
[-- Attachment #1: Type: text/plain, Size: 497 bytes --]
New issue by jirib on void-packages repository
https://github.com/void-linux/void-packages/issues/28233
Description:
Google will limit[1] access to private API used by Chrome but used also by other Chromium-based browsers. This will impact sync etc. Maybe this should be visible in chromium packaging - eg. `*.msg` file ?
Unfortunatelly Google chrome uses `restricted` in void-packages for licensing reasons.
[1] https://blog.chromium.org/2021/01/limiting-private-api-availability-in.html
^ permalink raw reply [flat|nested] 18+ messages in thread
* Re: Chromium - google will limit access to private API (no sync...)
2021-01-26 8:54 [ISSUE] Chromium - google will limit access to private API (no sync...) jirib
@ 2021-01-26 15:22 ` pbui
2021-01-26 15:31 ` ericonr
` (15 subsequent siblings)
16 siblings, 0 replies; 18+ messages in thread
From: pbui @ 2021-01-26 15:22 UTC (permalink / raw)
To: ml
[-- Attachment #1: Type: text/plain, Size: 691 bytes --]
New comment by pbui on void-packages repository
https://github.com/void-linux/void-packages/issues/28233#issuecomment-767615980
Comment:
How about the following?
```
On March 15, 2021, Google will be limiting access to their private Chrome APIs:
https://blog.chromium.org/2021/01/limiting-private-api-availability-in.html
This means that after this date, chromium users will no longer be able to take
advantage of features such as Google account sync (including bookmarks), spell
checking, translation, and safe browsing.
If you wish to utilize a chromium-based browser with those features, you will
need to build and install the restricted google-chrome package.
```
^ permalink raw reply [flat|nested] 18+ messages in thread
* Re: Chromium - google will limit access to private API (no sync...)
2021-01-26 8:54 [ISSUE] Chromium - google will limit access to private API (no sync...) jirib
2021-01-26 15:22 ` pbui
@ 2021-01-26 15:31 ` ericonr
2021-01-26 16:24 ` pullmoll
` (14 subsequent siblings)
16 siblings, 0 replies; 18+ messages in thread
From: ericonr @ 2021-01-26 15:31 UTC (permalink / raw)
To: ml
[-- Attachment #1: Type: text/plain, Size: 428 bytes --]
New comment by ericonr on void-packages repository
https://github.com/void-linux/void-packages/issues/28233#issuecomment-767622288
Comment:
> This means that after this date, chromium users will no longer be able to take
advantage of features such as Google account sync (including bookmarks), spell
checking, translation, and safe browsing. These features will only be available with the restricted
google-chrome package.
^ permalink raw reply [flat|nested] 18+ messages in thread
* Re: Chromium - google will limit access to private API (no sync...)
2021-01-26 8:54 [ISSUE] Chromium - google will limit access to private API (no sync...) jirib
2021-01-26 15:22 ` pbui
2021-01-26 15:31 ` ericonr
@ 2021-01-26 16:24 ` pullmoll
2021-01-26 16:24 ` pullmoll
` (13 subsequent siblings)
16 siblings, 0 replies; 18+ messages in thread
From: pullmoll @ 2021-01-26 16:24 UTC (permalink / raw)
To: ml
[-- Attachment #1: Type: text/plain, Size: 337 bytes --]
New comment by pullmoll on void-packages repository
https://github.com/void-linux/void-packages/issues/28233#issuecomment-767659419
Comment:
We should probably remove the google-api keys from our browsers then. This is not only chromium, but also firefox, firefox-esr, and thunderbird. Or even more? Icecat does not have use api keys.
^ permalink raw reply [flat|nested] 18+ messages in thread
* Re: Chromium - google will limit access to private API (no sync...)
2021-01-26 8:54 [ISSUE] Chromium - google will limit access to private API (no sync...) jirib
` (2 preceding siblings ...)
2021-01-26 16:24 ` pullmoll
@ 2021-01-26 16:24 ` pullmoll
2021-01-26 16:48 ` tarkov2213
` (12 subsequent siblings)
16 siblings, 0 replies; 18+ messages in thread
From: pullmoll @ 2021-01-26 16:24 UTC (permalink / raw)
To: ml
[-- Attachment #1: Type: text/plain, Size: 340 bytes --]
New comment by pullmoll on void-packages repository
https://github.com/void-linux/void-packages/issues/28233#issuecomment-767659419
Comment:
We should probably remove the google-api keys from our browsers then. This is not only chromium, but also firefox, firefox-esr, and thunderbird. Or even more? Icecat does not have or use api keys.
^ permalink raw reply [flat|nested] 18+ messages in thread
* Re: Chromium - google will limit access to private API (no sync...)
2021-01-26 8:54 [ISSUE] Chromium - google will limit access to private API (no sync...) jirib
` (3 preceding siblings ...)
2021-01-26 16:24 ` pullmoll
@ 2021-01-26 16:48 ` tarkov2213
2021-01-26 17:12 ` tarkov2213
` (11 subsequent siblings)
16 siblings, 0 replies; 18+ messages in thread
From: tarkov2213 @ 2021-01-26 16:48 UTC (permalink / raw)
To: ml
[-- Attachment #1: Type: text/plain, Size: 331 bytes --]
New comment by tarkov2213 on void-packages repository
https://github.com/void-linux/void-packages/issues/28233#issuecomment-767675644
Comment:
Maybe it's worth considering adding ungoogled-chromium at this point? Having chromium with broken/dangling features is less than ideal.
https://github.com/Eloston/ungoogled-chromium/
^ permalink raw reply [flat|nested] 18+ messages in thread
* Re: Chromium - google will limit access to private API (no sync...)
2021-01-26 8:54 [ISSUE] Chromium - google will limit access to private API (no sync...) jirib
` (4 preceding siblings ...)
2021-01-26 16:48 ` tarkov2213
@ 2021-01-26 17:12 ` tarkov2213
2021-01-26 20:10 ` tarkov2213
` (10 subsequent siblings)
16 siblings, 0 replies; 18+ messages in thread
From: tarkov2213 @ 2021-01-26 17:12 UTC (permalink / raw)
To: ml
[-- Attachment #1: Type: text/plain, Size: 374 bytes --]
New comment by tarkov2213 on void-packages repository
https://github.com/void-linux/void-packages/issues/28233#issuecomment-767675644
Comment:
Maybe it's worth considering adding ungoogled-chromium at this point? Having chromium with broken/dangling features is less than ideal.
https://github.com/Eloston/ungoogled-chromium/
Perhaps even drop the chromium package.
^ permalink raw reply [flat|nested] 18+ messages in thread
* Re: Chromium - google will limit access to private API (no sync...)
2021-01-26 8:54 [ISSUE] Chromium - google will limit access to private API (no sync...) jirib
` (5 preceding siblings ...)
2021-01-26 17:12 ` tarkov2213
@ 2021-01-26 20:10 ` tarkov2213
2021-01-29 19:20 ` aeadio
` (9 subsequent siblings)
16 siblings, 0 replies; 18+ messages in thread
From: tarkov2213 @ 2021-01-26 20:10 UTC (permalink / raw)
To: ml
[-- Attachment #1: Type: text/plain, Size: 469 bytes --]
New comment by tarkov2213 on void-packages repository
https://github.com/void-linux/void-packages/issues/28233#issuecomment-767675644
Comment:
Maybe it's worth considering adding ungoogled-chromium at this point? Having chromium with broken/dangling features is less than ideal.
https://github.com/Eloston/ungoogled-chromium/
Perhaps even drop the chromium package.
Efforts to create a void template: https://github.com/Eloston/ungoogled-chromium/issues/375
^ permalink raw reply [flat|nested] 18+ messages in thread
* Re: Chromium - google will limit access to private API (no sync...)
2021-01-26 8:54 [ISSUE] Chromium - google will limit access to private API (no sync...) jirib
` (6 preceding siblings ...)
2021-01-26 20:10 ` tarkov2213
@ 2021-01-29 19:20 ` aeadio
2021-01-29 19:22 ` aeadio
` (8 subsequent siblings)
16 siblings, 0 replies; 18+ messages in thread
From: aeadio @ 2021-01-29 19:20 UTC (permalink / raw)
To: ml
[-- Attachment #1: Type: text/plain, Size: 1043 bytes --]
New comment by aeadio on void-packages repository
https://github.com/void-linux/void-packages/issues/28233#issuecomment-769999064
Comment:
> Perhaps even drop the chromium package.
The Chromium core browser is still fully functional. This just forbids access to premium Google features like built-in full-page translate, and profile sync across devices / platforms.
I think it's absurdly reactionary to consider removing the browser or pushing forks on Void's users that (1) may have less competent maintainers behind them, (2) may lag behind in security updates and (3) are going to lack those same features anyway.
Some other distros have taken the opportunity to make a political statement against Google's actions here, and that's admirable and all -- Google absolutely is pulling the rug out from legitimate users here -- but the scope of impact is a lot smaller than is being suggested in some heated Internet conversations, and a distro's package repository is no place to take a political stance at the expense of users.
^ permalink raw reply [flat|nested] 18+ messages in thread
* Re: Chromium - google will limit access to private API (no sync...)
2021-01-26 8:54 [ISSUE] Chromium - google will limit access to private API (no sync...) jirib
` (7 preceding siblings ...)
2021-01-29 19:20 ` aeadio
@ 2021-01-29 19:22 ` aeadio
2021-01-29 19:48 ` pbui
` (7 subsequent siblings)
16 siblings, 0 replies; 18+ messages in thread
From: aeadio @ 2021-01-29 19:22 UTC (permalink / raw)
To: ml
[-- Attachment #1: Type: text/plain, Size: 1396 bytes --]
New comment by aeadio on void-packages repository
https://github.com/void-linux/void-packages/issues/28233#issuecomment-769999064
Comment:
> Perhaps even drop the chromium package.
The Chromium core browser is still fully functional. This just forbids access to premium Google features like built-in full-page translate, and profile sync across devices / platforms.
I think it's absurdly reactionary to consider removing the browser or pushing forks on Void's users that (1) may have less competent maintainers behind them, (2) may lag behind in security updates and (3) are going to lack those same features anyway.
Some other distros have taken the opportunity to make a political statement against Google's actions here, and that's admirable and all -- Google absolutely is pulling the rug out from legitimate users here -- but the scope of impact is a lot smaller than is being suggested in some heated Internet conversations, and a distro's package repository is no place to take a political stance at the expense of users.
Besides, we have at least three other browsers that still have fully functional sync -- Firefox, Vivaldi (restricted) and Google Chrome (restricted). The userbase can make an informed decision about which browser they want to select based on which features they offer in their Linux version. Chromium is now just a slightly less featureful browser.
^ permalink raw reply [flat|nested] 18+ messages in thread
* Re: Chromium - google will limit access to private API (no sync...)
2021-01-26 8:54 [ISSUE] Chromium - google will limit access to private API (no sync...) jirib
` (8 preceding siblings ...)
2021-01-29 19:22 ` aeadio
@ 2021-01-29 19:48 ` pbui
2021-01-30 10:11 ` jirib
` (6 subsequent siblings)
16 siblings, 0 replies; 18+ messages in thread
From: pbui @ 2021-01-29 19:48 UTC (permalink / raw)
To: ml
[-- Attachment #1: Type: text/plain, Size: 1672 bytes --]
New comment by pbui on void-packages repository
https://github.com/void-linux/void-packages/issues/28233#issuecomment-770012595
Comment:
After some discussion on IRC, I think the current position is to continue shipping the normal Chromium browser (but probably without the API keys in a future release), rather than any other fork.
That said, if other Linux distributions abandon Chromium, it may become very difficult to maintain the package. While I have been updating Chromium for sometime (mainly because noone else wanted to... at one point we went three months without any updates), most of the patch work is taken from either Arch Linux [1], Gentoo [2], or Fedora [3] (the package requires a lot patches to even build properly, let alone support musl and architectures such as PPC). That is, I often look to those distributions to figure out which patches are needed and then adjust them to our package. This is non-trivial and often times tedious work which I am not prepared to do on my own. I have neither the time or expertise to follow upstream Chromium development to figure out what actually needs to be patched or modified for each release and thus rely on the work of other Chromium packagers (from other distributions).
Because I plan on continuing to use Chromium despite the loss of these features, however, I will do my best to update the normal Chromium package (unless Void decides on another direction or someone else steps up to maintain it).
[1] https://github.com/archlinux/svntogit-packages/tree/packages/chromium/trunk
[2] https://github.com/stha09/chromium-patches
[3] https://src.fedoraproject.org/rpms/chromium/tree/master
^ permalink raw reply [flat|nested] 18+ messages in thread
* Re: Chromium - google will limit access to private API (no sync...)
2021-01-26 8:54 [ISSUE] Chromium - google will limit access to private API (no sync...) jirib
` (9 preceding siblings ...)
2021-01-29 19:48 ` pbui
@ 2021-01-30 10:11 ` jirib
2021-02-01 9:42 ` Gottox
` (5 subsequent siblings)
16 siblings, 0 replies; 18+ messages in thread
From: jirib @ 2021-01-30 10:11 UTC (permalink / raw)
To: ml
[-- Attachment #1: Type: text/plain, Size: 574 bytes --]
New comment by jirib on void-packages repository
https://github.com/void-linux/void-packages/issues/28233#issuecomment-770188098
Comment:
BTW, has anybody written how to build automatically a package (eg. google-chrome) in cloned void-packages repo when a package in origin changes? I'm not fully educated but IMO this should be way to go:
* automatically sync fork (scheduled time ?)
* check if pulled commits there's a package of our interest
* modify void-packages CI scripts to build only our package of interest
But more detailed howto would be helpful. Thx.
^ permalink raw reply [flat|nested] 18+ messages in thread
* Re: Chromium - google will limit access to private API (no sync...)
2021-01-26 8:54 [ISSUE] Chromium - google will limit access to private API (no sync...) jirib
` (10 preceding siblings ...)
2021-01-30 10:11 ` jirib
@ 2021-02-01 9:42 ` Gottox
2021-02-02 1:41 ` tarkov2213
` (4 subsequent siblings)
16 siblings, 0 replies; 18+ messages in thread
From: Gottox @ 2021-02-01 9:42 UTC (permalink / raw)
To: ml
[-- Attachment #1: Type: text/plain, Size: 206 bytes --]
New comment by Gottox on void-packages repository
https://github.com/void-linux/void-packages/issues/28233#issuecomment-770721414
Comment:
I may be alone with this opinion, but I consider this a feature.
^ permalink raw reply [flat|nested] 18+ messages in thread
* Re: Chromium - google will limit access to private API (no sync...)
2021-01-26 8:54 [ISSUE] Chromium - google will limit access to private API (no sync...) jirib
` (11 preceding siblings ...)
2021-02-01 9:42 ` Gottox
@ 2021-02-02 1:41 ` tarkov2213
2021-02-07 23:20 ` ericonr
` (3 subsequent siblings)
16 siblings, 0 replies; 18+ messages in thread
From: tarkov2213 @ 2021-02-02 1:41 UTC (permalink / raw)
To: ml
[-- Attachment #1: Type: text/plain, Size: 469 bytes --]
New comment by tarkov2213 on void-packages repository
https://github.com/void-linux/void-packages/issues/28233#issuecomment-767675644
Comment:
Maybe it's worth considering adding ungoogled-chromium at this point? Having chromium with broken/dangling features is less than ideal.
https://github.com/Eloston/ungoogled-chromium/
Perhaps even drop the chromium package.
Efforts to create a void template: https://github.com/Eloston/ungoogled-chromium/issues/375
^ permalink raw reply [flat|nested] 18+ messages in thread
* Re: Chromium - google will limit access to private API (no sync...)
2021-01-26 8:54 [ISSUE] Chromium - google will limit access to private API (no sync...) jirib
` (12 preceding siblings ...)
2021-02-02 1:41 ` tarkov2213
@ 2021-02-07 23:20 ` ericonr
2021-02-08 14:07 ` jirib
` (2 subsequent siblings)
16 siblings, 0 replies; 18+ messages in thread
From: ericonr @ 2021-02-07 23:20 UTC (permalink / raw)
To: ml
[-- Attachment #1: Type: text/plain, Size: 200 bytes --]
New comment by ericonr on void-packages repository
https://github.com/void-linux/void-packages/issues/28233#issuecomment-774787008
Comment:
@jirib https://github.com/the-maldridge/xbps-mini-builder
^ permalink raw reply [flat|nested] 18+ messages in thread
* Re: Chromium - google will limit access to private API (no sync...)
2021-01-26 8:54 [ISSUE] Chromium - google will limit access to private API (no sync...) jirib
` (13 preceding siblings ...)
2021-02-07 23:20 ` ericonr
@ 2021-02-08 14:07 ` jirib
2021-02-09 2:02 ` [ISSUE] [CLOSED] " ericonr
2021-02-09 2:02 ` ericonr
16 siblings, 0 replies; 18+ messages in thread
From: jirib @ 2021-02-08 14:07 UTC (permalink / raw)
To: ml
[-- Attachment #1: Type: text/plain, Size: 1140 bytes --]
New comment by jirib on void-packages repository
https://github.com/void-linux/void-packages/issues/28233#issuecomment-775174755
Comment:
> @jirib https://github.com/the-maldridge/xbps-mini-builder
I made something similar for myself, but my question was more about exploiting github.com and CI to build it for me automatically, ie. not to build it on my workstation.
```
#!/bin/bash
set -x
set -o pipefail
set -eu
SRCDIR=$HOME/src/github.com/void-linux/void-packages
PKGS="google-chrome msttcorefonts"
cd ${SRCDIR}
commit=$(git log --pretty=format:"%H%n" -1)
git pull >/dev/null 2>&1
changes=$(git log --name-only --pretty= ${commit}..HEAD)
# main
if ! grep -q '^XBPS_ALLOW_RESTRICTED=yes$' etc/conf; then
echo 'XBPS_ALLOW_RESTRICTED=yes' >> etc/conf
fi
for pkg in ${PKGS}; do
if ! xbps-query ${pkg} >/dev/null; then
./xbps-src pkg ${pkg}
xi -y ${pkg} # uses sudo
fi
done
if [[ -n ${changes} ]]; then
for pkg in ${PKGS}; do
egrep -q "srcpkgs/${pkg}" <<< "${changes}" && \
./xbps-src pkg ${pkg} || true
done
else
exit 0
fi
```
^ permalink raw reply [flat|nested] 18+ messages in thread
* Re: [ISSUE] [CLOSED] Chromium - google will limit access to private API (no sync...)
2021-01-26 8:54 [ISSUE] Chromium - google will limit access to private API (no sync...) jirib
` (14 preceding siblings ...)
2021-02-08 14:07 ` jirib
@ 2021-02-09 2:02 ` ericonr
2021-02-09 2:02 ` ericonr
16 siblings, 0 replies; 18+ messages in thread
From: ericonr @ 2021-02-09 2:02 UTC (permalink / raw)
To: ml
[-- Attachment #1: Type: text/plain, Size: 500 bytes --]
Closed issue by jirib on void-packages repository
https://github.com/void-linux/void-packages/issues/28233
Description:
Google will limit[1] access to private API used by Chrome but used also by other Chromium-based browsers. This will impact sync etc. Maybe this should be visible in chromium packaging - eg. `*.msg` file ?
Unfortunatelly Google chrome uses `restricted` in void-packages for licensing reasons.
[1] https://blog.chromium.org/2021/01/limiting-private-api-availability-in.html
^ permalink raw reply [flat|nested] 18+ messages in thread
* Re: Chromium - google will limit access to private API (no sync...)
2021-01-26 8:54 [ISSUE] Chromium - google will limit access to private API (no sync...) jirib
` (15 preceding siblings ...)
2021-02-09 2:02 ` [ISSUE] [CLOSED] " ericonr
@ 2021-02-09 2:02 ` ericonr
16 siblings, 0 replies; 18+ messages in thread
From: ericonr @ 2021-02-09 2:02 UTC (permalink / raw)
To: ml
[-- Attachment #1: Type: text/plain, Size: 733 bytes --]
New comment by ericonr on void-packages repository
https://github.com/void-linux/void-packages/issues/28233#issuecomment-775598780
Comment:
> I made something similar for myself, but my question was more about exploiting github.com and CI to build it for me automatically, ie. not to build it on my workstation.
You'd have to figure out how to export artifacts. I'd assume it's possible, but I have no idea how to implement it.
Regarding this issue, the course of action has been decided. The keys will be removed in one of the chromium updates during this month or when the deadline is reached. We have already added an `INSTALL.msg` as well.
Thanks for reaching out about this and leading to a concrete measure, @jirib
^ permalink raw reply [flat|nested] 18+ messages in thread
end of thread, other threads:[~2021-02-09 2:02 UTC | newest]
Thread overview: 18+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-01-26 8:54 [ISSUE] Chromium - google will limit access to private API (no sync...) jirib
2021-01-26 15:22 ` pbui
2021-01-26 15:31 ` ericonr
2021-01-26 16:24 ` pullmoll
2021-01-26 16:24 ` pullmoll
2021-01-26 16:48 ` tarkov2213
2021-01-26 17:12 ` tarkov2213
2021-01-26 20:10 ` tarkov2213
2021-01-29 19:20 ` aeadio
2021-01-29 19:22 ` aeadio
2021-01-29 19:48 ` pbui
2021-01-30 10:11 ` jirib
2021-02-01 9:42 ` Gottox
2021-02-02 1:41 ` tarkov2213
2021-02-07 23:20 ` ericonr
2021-02-08 14:07 ` jirib
2021-02-09 2:02 ` [ISSUE] [CLOSED] " ericonr
2021-02-09 2:02 ` ericonr
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).