feat: add 4 browser-tail Selkies images (brave, opera, vivaldi, librewolf)#25
Merged
Merged
Conversation
…wolf) Closes out the browser category. All four use the vendor-hosted apt repo pattern (Mozilla / Slack / Signal / Element shape): brave-selkies (Brave Software apt): https://brave-browser-apt-release.s3.brave.com (S3-hosted), package brave-browser. Chromium fork — needs --no-sandbox / --disable-dev-shm-usage / --disable-gpu-sandbox + --start-maximized (same as chrome-selkies). opera-selkies (Opera apt): https://deb.opera.com/opera-stable, suite "stable", component "non-free" (Opera is proprietary). Chromium fork with the standard Electron flags. vivaldi-selkies (Vivaldi apt): https://repo.vivaldi.com/archive/deb/, suite "stable", component "main". Chromium fork — same flags. librewolf-selkies (LibreWolf apt): https://repo.librewolf.net (note: deb.librewolf.net is a different host that 404s — repo.librewolf.net is canonical), suite "librewolf", component "main". Firefox fork — no --no-sandbox needed (Firefox's sandbox tolerates the unprivileged container with a warning, unlike Electron's hard requirement). Suite name not Ubuntu-codename-specific; same packages work across noble/jammy/ bookworm. Removed legacy KasmVNC templates: - browsers/librewolf.yaml - browsers/opera.yaml - browsers/vivaldi.yaml (Brave is a NEW addition — no legacy entry existed.) Local rebuild + verify skipped — Docker disk constraint. All 4 vendor apt repos and GPG key URLs verified live before writing: brave-browser: Package: brave-browser (Packages file) opera-stable: Package: opera-stable (Packages file) vivaldi-stable: Package: vivaldi-stable (Packages file) librewolf: /dists/librewolf/Release returns 200 All 4 GPG key URLs return HTTP 200.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Closes out the browser category. All four use the proven vendor-hosted apt repo pattern (Mozilla / Slack / Signal / Element shape).
The 3 Chromium-based browsers all use the same `--no-sandbox / --disable-dev-shm-usage / --disable-gpu-sandbox / --start-maximized` flag set we established for chrome-selkies. LibreWolf (Firefox-based) doesn't need any of those — Firefox's sandbox tolerates the unprivileged container with a warning, unlike Electron's hard requirement.
LibreWolf URL gotcha
`deb.librewolf.net` (the documented hostname in some Stack Overflow answers) returns 404. The canonical apt host is `repo.librewolf.net`. Their official install instructions actually use `extrepo` to abstract over this — we hardcode the resolved URL so we don't need to apt-install extrepo just for one repo.
The suite name is also unusual: `librewolf` (not an Ubuntu codename). Same packages work across noble/jammy/bookworm.
Removed legacy KasmVNC templates
`browsers/librewolf.yaml`, `browsers/opera.yaml`, `browsers/vivaldi.yaml`. Brave is a NEW addition (no legacy entry existed).
Local verification skipped (Docker disk)
All 4 vendor apt repos verified live via curl before writing:
CI is the authoritative test for the build itself.
Test plan
Catalog progress
After this lands: 42 published Selkies-native images. Browser category: chrome, firefox, brave, opera, vivaldi, librewolf (6 total — comprehensive). ~29 templates remain pending-migration.