Succumb to setting chromium as the default browser

Other changes:
- Add a policy file to disable chromium's history
- shells/fish: add env var for Puppeteer to make mermaid-cli work
- scripts: add task to download git-filter-repo script
- Fix dependencies in Dockerfile

Dockerfile

@@ -1,23 +1,14 @@
 FROM alpine:edge
 
-# Change repositories
-RUN printf 'https://download.nus.edu.sg/mirror/alpine/edge/main\n\
-https://download.nus.edu.sg/mirror/alpine/edge/community\n\
-https://download.nus.edu.sg/mirror/alpine/edge/testing\n' > /etc/apk/repositories
-
 # Install dependencies
-RUN apk --no-cache add \
-    doas ansible git fish build-base rsync \
+RUN apk --no-cache update \
+    && apk --no-cache add \
+    ansible git fish build-base rsync \
     cargo py3-virtualenv py3-setuptools \
-    python3-dev libffi-dev
-
-# Assure correct permission on /tmp
-RUN chmod 1777 /tmp
+    python3-dev libffi-dev emacs-nox
 
 # Create a test user
-RUN echo 'permit nopass :wheel' > /etc/doas.d/doas.conf \
-    && chmod 600 /etc/doas.d/doas.conf \
-    && printf 'cuteuser\ncuteuser\n' | adduser -h /home/kawaii -s /bin/ash -G wheel kawaii
+RUN printf 'cuteuser\ncuteuser\n' | adduser -h /home/kawaii -s /bin/ash kawaii
 
 # Enter testing environment
 USER kawaii

README.md

@@ -35,9 +35,10 @@ ansible-playbook -v -i hosts dotfiles.yml --tags 'never,all'
   - [ ] vim.api.nvim{_buf}_set_keymap -> vim.keymap.set
   - [ ] lua autocmd
   - [ ] global statusline
+  - [ ] lua filetype autocmd
   - [ ] OneDark theme
 - [x] Bootstrap Vagrant with 'bundler' module
-- [ ] Use [bubblewrap](https://github.com/containers/bubblewrap) for some applications
+- [ ] Use [bubblewrap](https://github.com/containers/bubblewrap) / rootless [podman](https://podman.io/) for some applications
 - [x] Replace [libsixel](https://github.com/libsixel/libsixel) with [chafa](https://github.com/hpjansson/chafa/)
 - [ ] Separated Waybar config files for Sway and River
 - [x] Rewrite River's init file in lua

group_vars/all.yml

@@ -7,7 +7,7 @@ gpg_signature: 813CF484F4993419
 
 # Choices ─────────────────────────────────────────────────────────────────────
 launcher: rofi
-default_browser: qutebrowser
+default_browser: chromium-browser
 clipboard: clipman
 notification: dunst
 multiplexer: zellij

playbooks/files/policy.json

@@ -0,0 +1,3 @@
+{
+    "SavingBrowserHistoryDisabled": true
+}

playbooks/system.yml

@@ -43,3 +43,20 @@
           weechat-lua, weechat-python, py3-websocket-client, weechat-spell,
           aspell-en, aspell
         state: present
+
+    # https://superuser.com/questions/1333563/disable-history-in-chromium
+    - block:
+        - name: Create Chromium policy directory
+          file:
+            path: /etc/chromium/policies/managed
+            state: directory
+            mode: 0755
+
+        - name: Add custom Chromium policies
+          copy:
+            src: files/policy.json
+            dest: /etc/chromium/policies/managed/custom_policy.json
+            owner: root
+            group: root
+            mode: 0444
+      tags: chromium

roles/multiplexer/tasks/main.yml

@@ -45,5 +45,4 @@
         cmd: zellij setup --generate-completion fish > ~/.config/fish/completions/zellij.fish
         creates: ~/.config/fish/completions/zellij.fish
       when: zellij_check.rc == 0
-      register: zellij_completion_generated
   when: multiplexer == 'zellij'

roles/scripts/tasks/main.yml

@@ -99,6 +99,14 @@
     mode: 0755
     force: yes
 
+- name: Install git-filter-repo
+  tags: [ curl, git-filter-repo ]
+  get_url:
+    url: https://github.com/newren/git-filter-repo/raw/main/git-filter-repo
+    dest: ~/.local/bin/git-filter-repo
+    mode: 0755
+    force: yes
+
 - name: Check whether the Lua binary is installed
   file:
     path: '{{ lua_binary }}'

roles/shells/templates/aliases.j2

@@ -1,4 +1,5 @@
 # remap
+abbr k kubectl
 abbr x extract
 alias cp='cp -vir'
 alias mv='mv -vi'

roles/shells/templates/env.j2

@@ -35,7 +35,6 @@ set -gx GNUPGHOME $XDG_DATA_HOME/gnupg
 set -gx IPYTHONDIR $XDG_CONFIG_HOME/ipython
 set -gx JUPYTER_CONFIG_DIR $XDG_CONFIG_HOME/jupyter
 set -gx WGETRC $XDG_CONFIG_HOME/wget/wgetrc
-set -gx WEECHAT_HOME $XDG_CONFIG_HOME/weechat
 set -gx RIPGREP_CONFIG_PATH $XDG_CONFIG_HOME/ripgrep/config
 set -gx GHCUP_USE_XDG_DIRS true
 set -gx STACK_ROOT $XDG_DATA_HOME/stack
@@ -64,6 +63,10 @@ set -gx DOTNET_CLI_TELEMETRY_OPTOUT 1
 # we build Vagrant ourselves
 set -gx VAGRANT_I_KNOW_WHAT_IM_DOING_PLEASE_BE_QUIET true
 
+# puppeteer (for mermaid-cli)
+set -gx PUPPETEER_EXECUTABLE_PATH '/usr/bin/chromium-browser'
+set -gx PUPPETEER_SKIP_CHROMIUM_DOWNLOAD 'true'
+
 # qt5ct
 set -gx QT_QPA_PLATFORMTHEME qt5ct
 set -gx QT_PLATFORM_PLUGIN qt5ct

roles/vifm/files/vifm/vifmrc

@@ -220,6 +220,7 @@ filextype *.html,*.htm,*.xhtml
         \ firefox %f &,
         \ qutebrowser %f &,
         \ librewolf %f &,
+        \ chromium-browser %f &,
 
 " Object
 filetype *.o nm %f | less