ungoogled-chromium icon indicating copy to clipboard operation
ungoogled-chromium copied to clipboard

automatic updates (or just checking for updates) for the browser and extensions

Open magicgoose opened this issue 7 years ago • 38 comments

This would a good thing, because outdated browsers and extensions are a security risk. And checking manually every time is meh, I'm sure most users will just forget about it.

magicgoose avatar Jan 23 '17 05:01 magicgoose

We could probably create some sort of extension that users can install to have this functionality. Or we could have some external utility to check for updates.

I am open to suggestions.

Eloston avatar Jan 23 '17 20:01 Eloston

An extension that checks for new Chromium versions would be cool. Not sure whats the best way for extensions, though.

9Morello avatar Jan 25 '17 11:01 9Morello

https://blog.chromium.org/2009/07/smaller-is-faster-and-safer-too.html https://dev.chromium.org/developers/design-documents/software-updates-courgette tl;dr original chromium uses updates in form of binary diffs and they are very size-efficient

Probably if these diffs are generated and uploaded to "Github releases" too, they might work too.

sp-1234 avatar Jan 26 '17 10:01 sp-1234

Henry updated its tool (chrlauncher) to install, update and launch ungoogled-chromium ;) https://github.com/henrypp/chrlauncher/issues/33#issuecomment-279736691

...but nothing about extensions. Sorry.

woolyss avatar Feb 14 '17 15:02 woolyss

@woolyss it's only for windows™.

magicgoose avatar Feb 14 '17 17:02 magicgoose

@magicgoose, Yes. It is only for Windows.

I know it is possible to write a shell script to update ungoogled-chromium on Mac and Linux. An example about Chromium: https://github.com/mloporchio/chromium-downloader-script More on my site: https://chromium.woolyss.com/#updater (this is about Chromium but can be improved for ungoogled-chromium)

woolyss avatar Feb 14 '17 17:02 woolyss

It's a bit unnecessary to provide an external updater system for Linux, as most Linux systems come with a package system. For Mac, I think there are several packaging systems out there already.

Eloston avatar Feb 14 '17 19:02 Eloston

Yes @Eloston, I completely agree with you.

woolyss avatar Feb 14 '17 21:02 woolyss

Any news on this? Is there a way to at least have notifications about new updates?

koichirose avatar Jun 06 '17 08:06 koichirose

i wrote a super-kludgy shell script with a node package dependency, a dependency on jq, and a dependency on curl that looks at the extensions you have installed and then downloads the latest version from the play store into a directory of your choosing. You then have to drag them into the extensions page to install the updates.

It only works with play store extensions and it's a long way from a proper updater, but it beats doing it all manually, and I think if anyone wanted to it could be improved/extended.

Here's a gist.

EDIT: this is only tested on OS X.

pjv avatar Jun 07 '17 12:06 pjv

I've written a small script to update and install extensions easily. It's windows only tho, but if there is demand I can upload and release it on github. See my other reply at #226

Unkn0wn-MDCLXIV avatar Jun 16 '17 07:06 Unkn0wn-MDCLXIV

I've found the easiest way to keep ungoogled-chromium updated is with brew cask, which will automatically install the latest version for me as long as I run "brew update".

ajkblue avatar Jun 16 '17 07:06 ajkblue

Eloston - Give please the link to download your browser. DEBIAN

XXLCXX avatar Jul 25 '18 10:07 XXLCXX

@sem5959 https://ungoogled-software.github.io/ungoogled-chromium-binaries/

antonin-lebrard avatar Jul 25 '18 11:07 antonin-lebrard

Спасибо.

XXLCXX avatar Jul 26 '18 04:07 XXLCXX

I favor the idea of an extension to perform these various checks. It would be great if that extension would accept SOCKS5 proxy (with auth) for googley chittering.

unicorntaco avatar Sep 08 '18 09:09 unicorntaco

This is the only downside of using Ungoogled Chromium for me. I don't want to have the browser and extensions outdated, and updating manually is a little bit painful.

ownchoice avatar Oct 06 '18 06:10 ownchoice

FYI my proposed solution for automatic extension updates is in #285.

Eloston avatar Oct 31 '18 23:10 Eloston

Update checker for UC : Here are some extensions solution that can be used to check for update for UC other than a distro repo

  • Website Monitoring For Change Extensions like visualping or page-monitor (you just need add uc-site to the monitored sites...)

  • Github notification like notifier-for-github (does not require to be logged in... of course you will need to subscribe to UC repo)

  • Rss-Feed Reader like feedbro

intika avatar Nov 14 '18 06:11 intika

In addition to the Atom feed for contributor binaries (link above), there's also the Atom feed for new tags from GitHub.

Eloston avatar Nov 14 '18 17:11 Eloston

a function chat check that link could be added easily mainstream but in one hand

  • update are important for security and the other
  • users may dislike a connection to github

I think as it would just check one link for updates i think it would be fair to enable it by default (this eventual feature) and add a flag to make it disableable

@Eloston what do you think ?

intika avatar Nov 15 '18 01:11 intika

@intika This is something an extension can do perfectly well. I see no need for anything to be added to ungoogld-chromium for this. Once a solution comes around, we could suggest it in the Wiki.

Eloston avatar Nov 15 '18 05:11 Eloston

I agree in leaving this functionality as an extension. The modular framework is there for a reason, and should be used whenever possible.

It sounds like this is really 2 issues: Checking/Notifying that a new version is available and Performing the update.

BSD/Linux and MacOS can use their package managers for #2, but a notification of a new version would be nice.

Windows users would need both types of functionality.

As Intika said above, extensions to check for page changes (i.e. new published binaries) already exist, but they must be setup and configured. If we're trying to stay true to the published purpose for this project, then we try to maintain functional parity with Chrome/Chromium. That would include at least notifying of updates.

Would it be possible to have a bundle of default extensions (including and update checker) to provide the functionality? This does not have to be included with UC, so that we still maintain the 'you must opt-in for new features' requirement. Although, it should not be enabled by default, branding and hosting that bundle along with the binary downloads would allow for standard Open-Source protections (code review).

IANatCAMBIO avatar Jul 01 '19 18:07 IANatCAMBIO

I threw together a barebones extension that adds this functionality to Ungoogled Chromium: https://github.com/NeverDecaf/chromium-web-store

Unfortunately I could not find a way with my limited javascript knowledge to dynamically detect the buttons on the chrome web store, therefore if the site layout changes at all this part of the extension will surely break. The code for update checking, however, uses the chrome api and should work fine until google deprecates it.

Please note I have barely tested this, and on Windows only. If something is broken I'll be happy to fix it if I can, just open an issue. A PR to add a robust button detection or to make the popup actually look nice is more than welcome.

NeverDecaf avatar Aug 19 '19 22:08 NeverDecaf

Thank you very much NeverDecaf. It works like a charm. Bravo!

I made a video to show it. Free to use and share it anywhere!

  • Stored on my server: https://chromium.woolyss.com/f/video-extension-chromium-web-store.mp4
  • Stored at Streamable (without any user account): https://streamable.com/655nn

My config:

  • ungoogled-chromium 76.0.3809.100 (64-bit)
  • chrlaucher (https://github.com/henrypp/chrlauncher) to test ungoogled-chromium in its portable version.
  • Windows 10 1903 with the enabled dark theme.

woolyss avatar Aug 31 '19 04:08 woolyss

@woolyss Thanks for the video! I've added it to the readme as it makes the install process very clear.

NeverDecaf avatar Sep 01 '19 00:09 NeverDecaf

It is ok @NeverDecaf. Thank you. I put a link of your github project on my site. Contact me if you want a better video! ;)

woolyss avatar Sep 08 '19 20:09 woolyss

Appimage support update, any issue with it? This resolves almost all GNU/Linux upgrades issue (using appimage version).

https://docs.appimage.org/packaging-guide/optional/updates.html

https://github.com/AppImage/AppImageUpdate

TNTBOMBOM avatar Aug 09 '20 17:08 TNTBOMBOM

outdated […] extensions are a security risk.

In the light of a recent news about an extension being sold to people, whose intentions were not very decent, auto-updating mechanism of Chrome backfired badly on users. So that auto-updated extension also poses a security risk!

PF4Public avatar Oct 20 '20 08:10 PF4Public