search

NiXium-org / NiXium

Open-Source Infrastructure as Code Management Solution for Multiple Systems designed to be reliable in mission-critical tasks on paranoid and high-security environment.
European Union Public License 1.2
17 stars 3 forks source link

Standard web browser management #83

Open Kreyren opened 2 months ago

Kreyren commented 2 months ago

As discussed before we need to standardize a web browser to use within the infrastructure as we are deploying a lot of services that are expected to be used by the users where currently i worked on a firefox hardening configuration in my home-manager module in https://github.com/NiXium-org/NiXium/blob/1ea34b7fb732012a48b71d877e5973abd69e3f99/src/nixos/users/kreyren/home/modules/web-browsers/firefox/firefox.nix

Which works well, but some extensions are impossible to make work in a declarative setup as noted in https://github.com/libredirect/browser_extension/issues/905 and https://github.com/libredirect/browser_extension/issues/872

Additionally there is a problem with management as maintaining our own web browser is a lot of work that is difficult to allocate in a reasonable way that doesn't interfiere with my other projects and maintanance

Thus the proposed management is to certify shizofox as the standard web browser once we integrate features from my setup as it's it's own independent flake.

Same approach should be used for all other web browsers so that the end-user is not limited on the selection.

CC @TanvirOnGH for opinion.

TanvirOnGH commented 2 months ago

While standardizing on Shizofox has potential it comes with many challenges:

TanvirOnGH commented 2 months ago

https://github.com/SpitFire-666/Firefox-Stuff

Kreyren commented 1 month ago

Revisited ladybird which seems to got much more stable, but still far from usable in our environment, though so far it's positive progress.

TanvirOnGH commented 4 weeks ago

@Kreyren https://www.zen-browser.app

Kreyren commented 4 weeks ago

@Kreyren https://www.zen-browser.app -- @TanvirOnGH (https://github.com/NiXium-org/NiXium/issues/83#issuecomment-2276404925)

Seems to be proprietary judging by the lack of source code on their github that they link?

CC @mauro-balades Can you elaborate on what zen browser is?

mauro-balades commented 4 weeks ago

It's a Firefox fork

Kreyren commented 4 weeks ago

It's a Firefox fork -- @mauro-balades (https://github.com/NiXium-org/NiXium/issues/83#issuecomment-2276884864)

Care to elaborate? We have firefox fork that might benefit from some of the features

mauro-balades commented 4 weeks ago

Sorry, I just don't really know what's going on here. What's this issue about?

Kreyren commented 4 weeks ago

Sorry, I just don't really know what's going on here. What's this issue about? -- @mauro-balades (https://github.com/NiXium-org/NiXium/issues/83#issuecomment-2277238356)

NiXium is open-source code as infrastructure solution for mission critical and high security environment designed to provide public services as a libre hoster while managing ~68 systems and multiple users. For management this issue discussed declaring a standardized web browser which is to be provided by default.

Kreyren commented 3 weeks ago

Alternative option https://github.com/versotile-org/verso

Appealing option considering that it's written in rust and uses servo, but currently seems to have issues https://github.com/versotile-org/verso/issues/149

mauro-balades commented 3 weeks ago

@Kreyren https://www.zen-browser.app -- @TanvirOnGH (#83 (comment))

Seems to be proprietary judging by the lack of source code on their github that they link?

CC @mauro-balades Can you elaborate on what zen browser is?

It is open source but due to some accidents, some of the code is not visible on the repo (not closed sourced). But if you want, I can grant you view access

denjell-crabnebula commented 3 weeks ago

Verso is absolutely not ready yet, give us a few months. :)

Kreyren commented 3 weeks ago

It is open source but due to some accidents, some of the code is not visible on the repo (not closed sourced). But if you want, I can grant you view access -- @mauro-balades (https://github.com/NiXium-org/NiXium/issues/83#issuecomment-2288292601)

I am rather trying to figure out what you do on top of stock firefox to better understand the implementation tbh.. What accidents?

Verso is absolutely not ready yet, give us a few months. :) -- @denjell-crabnebula (https://github.com/NiXium-org/NiXium/issues/83#issuecomment-2288335982)

I am aware, but thanks for warning :)

mauro-balades commented 3 weeks ago

I basically add patches to firefox's source code, other browsers started using my code for core components

Kreyren commented 3 weeks ago

I basically add patches to firefox's source code, other browsers started using my code for core components -- @mauro-balades (https://github.com/NiXium-org/NiXium/issues/83#issuecomment-2288974096)

But if you want, I can grant you view access -- @mauro-balades (https://github.com/NiXium-org/NiXium/issues/83#issuecomment-2288292601)

I guess give me view access? if you have something useful i would like to add that to our firefox configuration.

Kreyren commented 3 weeks ago

Verso is absolutely not ready yet, give us a few months. :) -- @denjell-crabnebula (https://github.com/NiXium-org/NiXium/issues/83#issuecomment-2288335982)

Can you elaborate on what's not ready? Custom rust-based browser that integrates servo would be worth the effort for me to stabilize and use a pinned commit and if it fails in production we can always fallback to firefox.

Minimal expected functionality:

Ideal expected functionality;