28 ms·
I have an ephemeral container (systemd-nspawn with -x switch) with almost-default configuration of firefox (only uBlock Origin added) for such websites. After I
by pferde 7y ago
I have an ephemeral container (systemd-nspawn with -x switch) with almost-default configuration of firefox (only uBlock Origin added) for such websites. After I'm done, I close the browser and everything gets deleted.
- llarsson 7y agoThat sounds very cool! Do you have that setup documented somewhere, or perhaps even pushed it to some public repo?
- pferde 7y agoI do not, sorry. I have to set up a blog some day, but I have been putting it off because most of the time I can't think of anything interesting to say. :) Anyway, I was mostly inspired by an article on how to set up Steam in a container - it has all the details, including how to pipe Pulseaudio inside (so in my case, Youtube videos in Firefox can have sound). Except mine is debian-based (so debootstrap instead of pacstrap to populate the container). http://ludiclinux.com/Nspawn-Steam-Container/ http://ludiclinux.com/Nspawn-Steam-Container/
- DavideNL 7y agoI do approximately the same in macOS: /Applications/Firefox.app/Contents/MacOS/firefox" --no-remote --profile "$(mktemp -d)
- s_gourichon 7y agoIsn't it what the "private browsing" option of Firefox does?
- DavideNL 7y agoMostly, yes. The bonus is you don't use your normal settings + extensions. Which also means ALL websites work, regardless of privacy related settings that might break some websites. So it's a handy alternative.
- pferde 7y agoMine has the advantage of the browser processes not having access to anything important, in case of a RCE vulnerability. An attacker would just see a vanilla debian install with no juicy user data, and only the ~/Downloads directory linked from my "real" system.