Trivalent is a security-focused, Chromium-based browser for desktop Linux inspired by Vanadium. It applies privacy and security patches to Chromium to enhance user security and privacy.
- Enhanced Security: Built with security-hardened patches
- Privacy-Focused: Disables many privacy-invading features by default
- Open Source: Built from source with transparency
- Regular Updates: Automatically builds when new Chromium versions are released
Before installing Trivalent, you may need to remove existing Chromium installations:
# Remove existing Chromium (optional)
sudo apt remove chromium chromium-browser google-chrome-stable # Debian/Ubuntu
sudo dnf remove chromium # Fedora/RHELRun the following commands:
# Replace YOUR_ORG and YOUR_REPO with your GitHub organization and repository names
REPO_URL="https://YOUR_ORG.github.io/YOUR_REPO/deb/"
echo "deb [trusted=yes] $REPO_URL ./" | sudo tee /etc/apt/sources.list.d/trivalent.list
sudo apt-get update
sudo apt-get install chromium- Create the repository file:
sudo nano /etc/apt/sources.list.d/trivalent.list- Add the following line (replace the URL with your repository URL):
deb [trusted=yes] https://your-org.github.io/your-repo/deb/ ./
- Update and install:
sudo apt-get update
sudo apt-get install chromiumRun the following commands:
# Replace YOUR_ORG and YOUR_REPO with your GitHub organization and repository names
REPO_URL="https://YOUR_ORG.github.io/YOUR_REPO/rpm/"
sudo tee /etc/yum.repos.d/trivalent.repo << EOF
[trivalent]
name=Trivalent
baseurl=$REPO_URL
enabled=1
gpgcheck=0
EOF
sudo dnf check-update
sudo dnf install chromium- Create the repository file:
sudo nano /etc/yum.repos.d/trivalent.repo- Add the following content (replace the URL with your repository URL):
[trivalent]
name=Trivalent
baseurl=https://your-org.github.io/your-repo/rpm
enabled=1
gpgcheck=0- Install:
sudo dnf check-update
sudo dnf install chromiumFor older RHEL/CentOS systems using yum:
sudo yum check-update
sudo yum install chromiumYou can also download packages directly from the GitHub Releases page:
- Windows: Download
chromium-windows.zipand extract - Linux DEB: Download
chromium-{version}-amd64.deband install withsudo dpkg -i chromium-{version}-amd64.deb - Linux RPM: Download
chromium-{version}.rpmand install withsudo rpm -ivh chromium-{version}.rpm - macOS: Download
chromium-{version}-x64.dmgand install
For Windows users who want automatic updates, you can use chrlauncher, a lightweight Chromium updater.
The Windows build includes an updateurl.txt file that chrlauncher can use for automatic updates.
- Download chrlauncher and extract it
- Create a
chrlauncher.inifile with the following content:
[chrlauncher]
# Custom Chromium update URL
ChromiumUpdateUrl=https://github.com/YOUR_ORG/YOUR_REPO/releases/latest/download/updateurl.txt
# Command line for Chromium
ChromiumCommandLine=--user-data-dir="%LOCALAPPDATA%\Trivalent\User Data" --no-default-browser-check
# Chromium executable file name
ChromiumBinary=chrome.exe
# Chromium binaries directory
ChromiumDirectory=.- Run
chrlauncher.exe- it will automatically download and update Chromium
[chrlauncher]
# Custom Chromium update URL (string):
ChromiumUpdateUrl=https://github.com/YOUR_ORG/YOUR_REPO/releases/latest/download/updateurl.txt
# Command line for Chromium (string):
# note --user-data-dir= works better if path is absolute
# See here: http://peter.sh/experiments/chromium-command-line-switches/
ChromiumCommandLine=--user-data-dir="%LOCALAPPDATA%\Trivalent\User Data" --no-default-browser-check
# to enable full logging in c:\temp\log.txt (daily rotate, no automatic deletion)
# ChromiumCommandLine=--enable-logging --v=0 --log-file=C:\temp\log.txt --user-data-dir=".\User Data" --no-default-browser-check
# Chromium executable file name (string):
ChromiumBinary=chrome.exe
# Chromium binaries directory (string):
# Relative (to chrlauncher directory) or full path (env. variables supported).
ChromiumDirectory=.- ChromiumUpdateUrl: Points to the
updateurl.txtfile in your releases (auto-generated by the build) - ChromiumCommandLine: Command-line arguments for Chrome (user data directory, etc.)
- ChromiumBinary: The executable name to run
- ChromiumDirectory: Where the Chrome files are stored (relative to chrlauncher)
Chrlauncher will check the URL for new versions and automatically download and extract updates.
This repository contains GitHub Actions workflows that automatically build Trivalent when new Chromium versions are released.
- Windows:
chromium-windows.zip - Linux DEB:
chromium-{version}-amd64.deb - Linux RPM:
chromium-{version}.rpm - macOS:
chromium-{version}-x64.dmg
- Go to the Actions tab
- Select "Build Chromium from Source"
- Click "Run workflow"
- Optionally specify a Chromium version
After enabling GitHub Pages, your repositories will be available at:
- DEB:
https://{org}.github.io/{repo}/deb/ - RPM:
https://{org}.github.io/{repo}/rpm/
Trivalent applies the following security and privacy patches:
- Disable seed-based field trials
- Disable network prediction
- Disable third-party cookies by default
- Disable background sync
- Enable strict origin isolation
- Enable partitioned cache
- Require HTTPS for component updates
- Restrict dynamic code execution
- And more...
- Force-disable Safe Browsing
- Disable sync, metrics, and variations
- Disable AI/ML features
- Enable audio service sandbox
- Set secure DNS to automatic mode
- Block external extensions
- And more...
By default, Trivalent stores user data in ~/.config/Trivalent/. You can change this by setting the --user-data-dir flag.
Trivalent supports all Chromium flags. Access chrome://flags in the browser for experimental features.
Trivalent is based on Chromium and includes modifications from the Vanadium project. See the LICENSE file for details.
Contributions are welcome! Please read our contributing guidelines before submitting PRs.
- Chromium Project
- GrapheneOS - For the Vanadium patches
- secureblue - For the Trivalent patches
If you encounter issues, please file a bug report on the GitHub issue tracker.