{{Title|title=Chrome}}
{{Header}}
{{#seo:
|description=Using Chrome in {{project_name_long}}.
|image=GoogleChromeicon.png
}}
[[image:GoogleChromeicon.png|thumb|<code>Chrome</code> logo]]
{{intro|
Using Chrome in {{project_name_short}}.
}}
= Warnings =
{{Other_Browsers}}

{{mbox
| image   = [[File:Ambox_warning_pn.svg.png|40px]]
| text    = Chrome is non-freedom software!

See [[Avoid_nonfreedom_software|Avoid non-freedom software]].
}}

{{stub}}

= Installation =
These instructions are cumbersome due to [[Google Chrome Repository Insecurity|Google Chrome Repository Insecurity]].

(Based on [https://www.google.com/linuxrepositories/ Linux Software Repositories] instructions.)

== Signing Key Installation ==
{{always_verify_signatures_reminder}}

Download the signing key.

{{CodeSelect|code=
scurl-download https://dl.google.com/linux/linux_signing_key.pub
}}

View OpenPGP key information.

{{CodeSelect|code=
gpg --keyid-format long --import --import-options show-only --with-fingerprint linux_signing_key.pub
}}

<pre>
pub   dsa1024/A040830F7FAC5991 2007-03-08 [SC]
      Key fingerprint = 4CCA 1EAF 950C EE4A B839  76DC A040 830F 7FAC 5991
uid                            Google, Inc. Linux Package Signing Key <linux-packages-keymaster@google.com>
sub   elg2048/4F30B6B4C07CB649 2007-03-08 [E]

gpg: key 7721F63BD38B4796: 2 signatures not checked due to missing keys
pub   rsa4096/7721F63BD38B4796 2016-04-12 [SC]
      Key fingerprint = EB4C 1BFD 4F04 2F6D DDCC  EC91 7721 F63B D38B 4796
uid                            Google Inc. (Linux Packages Signing Authority) <linux-packages-keymaster@google.com>
sub   rsa4096/78BD65473CB3BD13 2019-07-22 [S] [expires: 2022-07-21]
</pre>

Convert assci armored <code>linux_signing_key.pub</code> to gpg keyring format <code>linux_signing_key.pub.gpg</code>. <ref>
Because in next step, gpg can only work with keyrings. Not with assci armored public key files. This is to import only the newer signing key. Avoiding to import the insecure legacy DSA 1024 signing key.
</ref>

{{CodeSelect|code=
gpg --no-default-keyring --keyring linux_signing_key.pub.gpg --import linux_signing_key.pub
}}

<ref>
{{CodeSelect|code=
gpg --no-default-keyring --keyring linux_signing_key.pub.gpg --armor --export "EB4C 1BFD 4F04 2F6D DDCC  EC91 7721 F63B D38B 4796" {{!}} gpg --import
}}

<pre>
gpg: key 7721F63BD38B4796: 2 signatures not checked due to missing keys
gpg: key 7721F63BD38B4796: public key "Google Inc. (Linux Packages Signing Authority) <linux-packages-keymaster@google.com>" imported
gpg: Total number processed: 1
gpg:               imported: 1
gpg: no ultimately trusted keys found
</pre>
</ref>

Create keyring with the RSA 4096 signing key only.

{{CodeSelect|code=
gpg --no-default-keyring --keyring linux_signing_key.pub.gpg --armor --export "EB4C 1BFD 4F04 2F6D DDCC  EC91 7721 F63B D38B 4796" {{!}} gpg --dearmor --no-options --no-default-keyring > google.gpg
}}

Install the Google RSA 4096 APT signing key.

{{CodeSelect|code=
sudo cp google.gpg /usr/share/keyrings/google.gpg
}}

== Avoid Google Chrome Automatic Repository Configuration ==
Due to [[Google Chrome Repository Insecurity|Google Chrome Repository Insecurity]].

Create file <code>/etc/default/google-chrome</code> to avoid Google Chrome Automatic Repository Configuration. <ref>
<blockquote>Note: Installing Google Chrome will add the Google repository so your system will automatically keep Google Chrome up to date. If you don’t want Google's repository, do “sudo touch /etc/default/google-chrome” before installing the package.</blockquote>
</ref>

Note: this will only work if Google Chrome Repository hasn't been previously added.

{{CodeSelect|code=
sudo touch /etc/default/google-chrome
}}

== Repository Installation ==
{{Open with root rights|filename=
/etc/apt/sources.list.d/google-chrome.list
}}

Paste.

{{CodeSelect|code=
deb [arch=amd64] [signed-by=/usr/share/keyrings/google.gpg] https://dl.google.com/linux/chrome/deb/ stable main
}}

Save.

== Package Installation ==
Pick a package version.

* <code>google-chrome-stable</code>
* <code>google-chrome-beta</code>
* <code>google-chrome-unstable</code>

Example below installs <code>google-chrome-stable</code>.

{{Install Package|package=
google-chrome-stable
}}

= Usage =
Start.

{{CodeSelect|code=
/opt/google/chrome/chrome
}}

= Related =
* [[Chromium]]
* [[Dev/Chromium]]
* [[Dev/Default Browser]]
* [https://forums.whonix.org/t/chromium-browser-for-kicksecure-discussions-not-whonix/10388 Chromium Browser for {{project_name_short}} Discussions (not Whonix)]
* [[Google_Chrome_Repository_Insecurity|Google Chrome Repository Insecurity]]

= Footnotes =
{{reflist|close=1}}

{{Footer}}

[[Category:Documentation]]