senofy/autofirmer-expanded
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Bake in the enrolment token, and install Chrome when missing

Browse Source 
Setup asked for a token that is the same on every machine - a token is reusable
and enrols any number of browsers - so it is a default in both scripts now and
step 7 is a plain yes/no. It is a modest secret: it lets someone enrol their own
browser into the org and nothing more, and rotating it is a console click and a
one-line change.

Both scripts also install Chrome if it is absent, from Google's enterprise MSI
and the official .deb, since enrolling a browser that is not there writes a
token nothing reads. Chromium is refused rather than substituted: no cloud
management, so it could never be enrolled - and on ARM, where Chrome is not
published at all, the Linux script says so instead of installing something that
cannot do the job.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This commit is contained in:
Brandon Li
2026-08-31 16:18:20 -05:00
co-authored by Claude Opus 5
parent 35dd15d584
commit 389c714caf
5 changed files with 104 additions and 28 deletions
Download Patch File Download Diff File Expand all files Collapse all files
setup-linux.sh
+7 -8
View File
@@ -150,16 +150,15 @@ echo
info "[7/7] Chrome extension"
info " Enrols this machine's Chrome, after which the extension installs"
info " itself from the Admin console and stays updated on its own."
info " The token is in the Admin console under Devices > Chrome >"
info " Managed browsers. Blank to skip."
read -r -p " Enrollment token: " ENROLTOKEN
info " Installs Chrome first if it is not here yet. Needs sudo."
read -r -p " Set this up now? [Y/n] " DOEXT
EXTPOLICY=0
if [ -n "${ENROLTOKEN:-}" ]; then
if sudo bash scripts/enroll-chrome-management.sh "$ENROLTOKEN"; then EXTPOLICY=1; else
warn "enrolment failed - re-run: sudo scripts/enroll-chrome-management.sh <token>"
if [ "${DOEXT,,}" != "n" ]; then
if sudo bash scripts/enroll-chrome-management.sh; then EXTPOLICY=1; else
warn "enrolment failed - re-run: sudo scripts/enroll-chrome-management.sh"
fi
else
info " Skipped. Run: sudo scripts/enroll-chrome-management.sh <token>"
info " Skipped. Run: sudo scripts/enroll-chrome-management.sh"
fi
# ── summary ─────────────────────────────────────────────────────────────────
@@ -186,7 +185,7 @@ if [ "$EXTPOLICY" -eq 1 ]; then
info " and the extension installs itself within a minute or two."
else
info " - Enrol Chrome so it can install the extension:"
info " sudo scripts/enroll-chrome-management.sh <token>"
info " sudo scripts/enroll-chrome-management.sh"
fi
info " - Add your firm credentials on the dashboard's Settings page"
if [ -n "${WAYLAND_DISPLAY:-}" ] && [ -z "${DISPLAY:-}" ]; then