setup-blank-vm.sh

#!/bin/bash

# This script sets up a blank Ubuntu 22.04 VM for Chromium debugging.
wget "https://raw.githubusercontent.com/chromium/chromium/main/tools/valgrind/asan/third_party/asan_symbolize.py"

wget "https://github.com/google/fetchchromium/releases/download/v0.4.5/fetchchromium_0.4.5-1_amd64.deb"
sudo dpkg -i fetchchromium_0.4.5-1_amd64.deb
rm fetchchromium_0.4.5-1_amd64.deb

wget "https://github.com/google/ripunzip/releases/download/v2.0.0/ripunzip_2.0.0-1_amd64.deb"
sudo dpkg -i ripunzip_2.0.0-1_amd64.deb
rm ripunzip_2.0.0-1_amd64.deb

# Hard coded because of a bug in some versions
wget "https://deb.rug.nl/ppa/mirror/dl.google.com/linux/chrome-remote-desktop/deb/pool/main/c/chrome-remote-desktop/chrome-remote-desktop_125.0.6422.20_amd64.deb"
sudo dpkg -i chrome-remote-desktop_125.0.6422.20_amd64.deb
rm chrome-remote-desktop_125.0.6422.20_amd64.deb

sudo DEBIAN_FRONTEND=noninteractive apt-get update
sudo DEBIAN_FRONTEND=noninteractive apt --fix-broken --assume-yes install
sudo DEBIAN_FRONTEND=noninteractive apt-get install --assume-yes xfce4 llvm desktop-base dbus-x11 xscreensaver unzip unrar-free binutils
sudo bash -c 'echo "exec /etc/X11/Xsession /usr/bin/xfce4-session" > /etc/chrome-remote-desktop-session'

echo "Enabling unprivileged user namespaces so Chrome can sandbox itself. Note that this slightly weakens the security of this VM's kernel against local attackers."
echo 0 | sudo tee /proc/sys/kernel/apparmor_restrict_unprivileged_userns
echo kernel.apparmor_restrict_unprivileged_userns=0 | sudo tee /etc/sysctl.d/60-apparmor-namespace.conf

echo "Restarting the VM - please SSH in again, then run fetchchromium with whatever options you like (possibly none)"
echo "and run the command given at https://remotedesktop.google.com/headless to set up CRD"
sudo shutdown -r now