Linux for Chromebooks: Secure Development (Google I/O ’19)

[@jvwdigital]

I am not in the habit of giving companies like Google accolades. However, this group of presenters exceeded my expectations. I am a brand new user who was very impressed by the style and the quality of information in this presentation. I am very excited about my new Linux journey. This presentation added to that excitement.

[@porgsansimportances3613]

It is true that their presentation was going into much more details than usual coming from google, still I believe they are taking a lot of precaution to not raise the question of why Linux on ChromeOS and not just Linux as Linux can be more secure and simpler by default. I dont know if I like hearing this kind of presentation where they, through these ways, seem to be trying to EEE but in a more obvious and clumsy way.

[@FarooqAhmad-ij4yn]

😊😊😊,😊😊,,,,,,,😊,,,,,,,,😊😊😊😊😊😊😊😊😊😊

[@TrangNguyen-cs6wv]

Applications to everyday development workflow starts at 11:39.

[@mateuszciupa8141]

ure golden

[@jaymesc4436]

Wish I could like this twice

[@RahulBhagat-qc5uu]

Ko

[@JacobP81]

THIS IS SO COOL! ChromeOS has come so far. I remember when it couldn't even run android apps. Now look at it. Congratulations on all this work you have done on this Operating System. Kudos! I am thoroughly impressed.

[@zomaarwat9]

Several layers of security to prevent one process snooping on another one. Now who or what prevents Google from snooping on all of my private data and share it with any random advertiser?

[@robchr]

Shhh, they can hear you.

[@PaulSebastianM]

You.

[@phatrickmoore]

incredible to see where this technology is going - I might switch from apple soon

[@peachestv621]

did you end up switching?

[@phatrickmoore]

@@peachestv621 no, I didn’t haha. Apple life is pretty good I guess lol.

[@phatmeow7764]

Hi Chrome Dev! Since at this point in time we have chromebooks and boxes why not take Chrome OS and linux integration to the next level with "Chrome Pro" desktops that have linux apps for serious heavy workloads for the home and medium enterprise market? I think a combo of Android and Linux apps on more powerful hardware could be a huge unexplored avenue Google could get into! Imagine a desktop that can play Stadia games locally (like XBOX/PS5) *and* video/image edit/encode like a champ!

[@WorstDeveloper]

Most chromebooks appear to have a super slow CPU, low amount of RAM and only about 32-64GB SLOW eMMC as storage. How on earth do you expect any developer to be productive with that?

[@vonEitzen]

Most, but not all. PixelBooks can have up to an i7 with 512GB of NVMe storage, for example. It's the exception rather than the rule, of course, but if it's a dev's only machine, they may invest in that spec (and they've gone down a fair bit second hand, too).

[@cameroncunliffe9663]

Most Chromebooks are targeted at students and the average person at a cheap price which most people don't even need high specs. If you want to get more performance on a Chromebook then invest more money into one rather than spending $200.

[@drkarmakid]

CloudReady can be used to install Chromium OS on regular PCs. Crostini/Linux is supported (but not Android apps).

[@Placebo6]

@@vonEitzen Uhhhm, But then why does a i7-y on chromebook costs more than i5-u of the same gen with windows??? I will buy the windows every time (and I have been) and put linux mint on it... I can run inside that 10 different VM's and pay less for more options/performance... They also forget to mention how google will decide what type of files you put in the drive or on chrome OS. And export never works as expected... SO NO THANK YOU... On top add the fact when they say insecure, they mean can be taken away and not SOLD away by them. lol

[@luandesonfelix4834]

Roman Ash If you don’t want it, don’t buy it. It’s simples as that. Chrome OS and chromebooks hold their value to those whom use google services, it’s never been intended to be a workstation.

[@PaulSebastianM]

Maybe Google can do what Canonical couldn't? Bring Linux to everyone's desktops.

[@julz19]

They are just virtualizing linux tho.. not a full blown linux.

[@WilcoVerhoef]

WSL1 did that

[@MagicbalrajMagicbalraj]

​@julz19 😅😊😊😊😊😊😊

[@MagicbalrajMagicbalraj]

​😅😅😅😊

[@MagicbalrajMagicbalraj]

​😊😊😊

[@paulperkins1615]

Security, simplicity, flexibility. Choose one. The usual form is a, b, c, choose two, you can only have 2 out of 3 at once. But with these three, you can only have 1 at a time.

[@cryptonative]

Paul Perkins It’s choose two again

[@JacobP81]

When you get GPU support in the Linux container, I will seriously consider buying a Chromebook.

[@tomsk]

Chrome OS with Linux desktop apps? So you can use Chrome OS for even work (because you can use real desktop apps)? That is the best thing ever happened to Chrome OS!!!

[@elvincitore1512]

I think they're better off making chrome os a full linux distro , based on debian with a chrome os desktop environment , linux is even more secure then chrome os

[@tomsk]

@@elvincitore1512 Chrome OS is based on Gentoo Linux

[@elvincitore1512]

@@tomsk yeah but most of it is restricted , they mostly took the base and rebuilt the rest .

[@DavidAlsh]

Someone needs to make "DeveloperOS" which is a linux distro which uses a desktop environment heavily based on MacOS. None of this VM insanity we see Windows and ChromeOS using

[@rajshetty4820]

@Jack Courtney ubuntu

[@rav3ndust]

elementaryOS, popOS - both Ubuntu-based GNU/Linux operating systems with aesthetics inspired heavily from macOS (especially Elementary) - dock, top panel, the usual stuff.

[@skepticalmind2260]

Really impressive work in a very short time. Way to go 👏

[@mr.raycunninghamsr5211]

Chromebook development with chromo S app and other analytical dev tools I believe will be a must have for the Chromebook.

[@arifulislamleeton]

Hi I'm Ariful Islam leeton im software developer and Co Founder open A. I

[@techzone2009]

Google need to work on GUN/Linux ...I mean a distro that can run real Linux software... I love to use it

[@tux.solbakk]

Got one of these to do web development on. Got everything working with ease, except to mount the nfs server where the files are stored. Not sure if I missed something or if this is not available (yet?)

[@UCm0i6w5lBlRthCtZEoj99tg]

crostini is really a game changer - thanks to everyone involved!

[@ignoram9us]

That was confusing 19:48 "On the screen here, on the left, you have your webapp in Chrome; and on the right, if you're noticing it, its in Chrome. Yes! You can test your webapp on a Chromebook in Firefox, too".

[@0ni0ng0ld-g6i]

She was trying to say you can access the webapp with Firefox (from within the vm) as Well as with Chrome (from outside the vm)

[@OlleHellman]

Thank you for the nice talk! Can anyone recommend a good Chromebook for running docker + VS Code?

[@TrangNguyen-cs6wv]

Eventhough it's hard to give any particular recommendation, as it's solely based on your need, I have some advice. 1, Not all Chromebooks work with this Linux distro, so be sure to check before buying. 2, Take a good look at the screen, as a lot of Chomebooks cut conner in that part, which would be horrible if you plan to code for long period of time. 3, Some credible review sources that I trust are MobileTechReview and LonTV, feel free to check them out if you want to.

[@rajshetty4820]

buy lenovo s340 install ubuntu 20.04 and you can do all . see this easy :D

[@0ni0ng0ld-g6i]

Incredible work from chromeOS team

[@JacobP81]

What about graphic intensive Linux GUI programs like a video game or a Second Life / Open Sim viewer. How well do those run in Crustini?

[@joshuamethven]

@googlechromedevelopers can you implement video / webcam support to crostini??

[@robchr]

Rust is awesome! I'm glad to see it being used at Google.

[@yraiajemimabalba8730]

Hello, does your Chromebook power wash if you turn on Linux?

[@menkiguo7805]

I want to try install a firefox in the Linux VM and buy some Firefox sticker and make my ChromeBook as a Firefox Book

[@georgec2871]

I'm definitely not a Windows fan by any means (I avoid as much of their stack as possible) and like Google products but - how is this benefit of "this kernel is separate to your host kernel" different to windows and the WSL2 linux kernel?

[@Ivoshevo]

Why not just make it Linux system... And save us all this stress. I think windows and Mac are still the best for web dev. I was thinking to move from windows to chrome but as I can see you guys are still trying to use us the developers for experimentations

[@dsedchenko]

How this tremendous amount of layers of abstraction may affect Chromebook's battery life?

[@carrefamily01]

now the question is... are you going to provide backdoor access to the fbi/fusion centers like apple does with the iphone? if so it kinda makes the all this 'security' moot.

[@aminhjz]

Does any body knows if you can build and run docker images on this or even maybe run minikube?

[@marc8658]

I haven’t activated Linux on my chromebook yet. Is it a specific distro managed by Google or can you literally pick any distro to install?

[@drkarmakid]

It's Debian by default, but as they explain in the video, you can install any other distro in a second container.

[@johnaweiss]

How can Linux apps see ChromeOS apps? I'm running a file browser on Linux, works great. But i can't see a way to associate file-formats with a ChromeOS app. When i double-click a file in the Linux file manager, i want the associated ChromeOS app to open it.

[@andrewosei328]

You'd think for a company that has been working with the linux kernel for this long would do this earlier. Even MS has a much deeper knee in linux

[@MilanMaricE]

1. Get Chromebook 2. Install Linux VM 3. follow instructions to install chrome on Ubuntu You have chrome in chrome! BUUUM

[@jaymiller73y]

it is literally THAT easy. I find that VSCode is a bit laggy.

[@MarceloLopezJr]

@@jaymiller73y You can install VS Code inside of the VM? How big is the base VM? And what bugs me is that the container is COMPLETELY sandboxed. I mean, yeah, security, but there should be a way to extend the container into a secured space on external storage (i.e. a uSD card).

[@ameyshukla8857]

@@jaymiller73y They add GPU acceleration soon, so should be good pretty soon :)

[@ryahpalma]

@@ameyshukla8857 Still slow.

[@rajshetty4820]

or remove chrome os install ubuntu

[@JacobP81]

More specifically those IP addresses at 28:36 are CGNAT IP addresses. There public IP addresses reserved for ISP level NAT (More info here en.wikipedia.org/wiki/Carrier-grade_NAT). I would have thought the IP addresses would be private IP's instead. Maybe these are not the real IP addresses, but instead put here as an example.

[@TheNeonbuffalo]

I wish I could do, Embedded Software with a ChromeBook, I do a lot of work with Arduino and MPLAB X not sure if ChromeBooks can support this. Does anyone know???

[@dersanz]

my chromebook asus c302 flip doesn't have the linux option in settings, what could I do???

[@Blebona]

Wow. Definitely gonna check this out

[@IT-Entrepreneur]

I would need a Windows VM running for .Net WPF und UWP development. Any Solution here? I guess right now its only possible to use an VDI right?

[@dsedchenko]

Parallels recently released Parallels for Chrome OS, so now you can run Windows 10 on a chromebook

[@arpanmukherjee4625]

So much under the hood. Is it really fast an optimized for all developer tools?

[@drkarmakid]

I'm using CloudReady on a laptop with 8GB RAM. You really need 16+GB for this workflow to be comfortable.

[@terrybradfordstaff7717]

I have alot of chromebooks and crostini would fill the gaps the i have with chrome os such as video editing without online subscription - gimp for photo editing without cloud subscriptions but its all fairy tails if my students have shell access!

[@baokaizheng9451]

anybody who knows when will linux beta support the chrome input method?

[@nateschultz8973]

Debbie N. Linux : Widely acclaimed author of Ubuntu.

[@chifan7]

This is all very interesting and I Appreciate the talk.I am a True beginner to this info. At this point I am simply looking the attach an external DVD drive , so that I can play CD's and DVD's through my Chromebook. I am Pretty sure this will be possible in this new configuration. Could someone Please confirm that I can In fact do this? Thank you. Harold..

[@treydelbonis4028]

DEVELOPERS DEVELOPERS DEVELOPERS.

[@luisgonzalez1637]

YES!!!!

[@aashutoshtaikar5087]

This is really awesome and impressive especially the security aspect! Also it gives us more options other than Dell xps developer edition(Ubuntu) and the Mac-book.

[@OEFarredondo]

HiddenWasp, anybody else find this in your machine? Theirs also a tandem program that does something. I am still trying to figure it out

[@vacoder]

New update ruins chromebook linux my arrow doesn't show it applications such as vs code fix this ASAP...!!!!

Connecting phone to my Pixelbook crashes linux container, reboot helps... Version 75.0.3770.42 (Official Build) beta (64-bit)

[@qorbani-tech]

Interesting why not using Golang! Don't take me wrong, I love Rust but really interesting to see Google is not using their own language and rely on Rust instead!!!

[@julz19]

Because rust is better for this specific scenario, memory safety, when you talk about memory safety, you think of rust, simple as that. You want the best right?

[@aminhjz]

Because of garbage collection in go, each scenario has it's own requirements

[@CCHouse-d5d]

Fix Chrome OS Flex. Please. Otherwise, great video.

[@datasBigdatascreationsGTTB]

the kernelorg??? or Google Linux

[@blesslavendercopeland4118]

what i would like to see is itunes work on chromebooks you have the app can we singon with that app i would like to see that what do you think about it if nt can we make our own app like itunes when ppl are locked out of itunes and what every we grab at that time that is what we going to use if you knw anyway we can get around irunes on chrome let me knw i would like to knw

[@menkiguo7805]

BTW, is anyone know how to use F keys in ChromeOS?

[@JacobP81]

28:36 That's a public IP address. Why?

[@janwanderer7660]

kudos for using rust

[@treydelbonis4028]

even google is realizing they don't want to use go

[@japrogramer]

Will this work for old Chromebooks?

[@LetterSignedBy51SpiesWasA-Coup]

no. the latest and greatest Linux on Chromebook only works on select higher-end machines with sufficient hardware specs. When you look at the prices of those Chromebooks, it doesn't make a ton of sense to pay $500+ for a Chromebook with very poor hardware specs compared to laptops or ultrabooks.

[@johnlimbaring4781]

@@LetterSignedBy51SpiesWasA-Coup will it work on Samsung Chromebook Plus v2?

[@FedJimSmith]

is pacman native to Crostini ?

[@peachestv621]

no, crostini is debain based. it natively uses apt

[@dhruvie]

0:53 If I want more peace of mind I in the world would I use chromebook

[@billp37abq]

Software you suggest damages hardware performance .. and security. Others want to get rid of all software not invoked by their app. National Security Agency software software directive. Multitaskers musts go? Distributed hardware better solution? c/c++ software industry in trouble?

[@LetterSignedBy51SpiesWasA-Coup]

would rather by a Windows machine, use WLS 2, and get way better hardware specs for the money

[@mikewilson0]

And way worse security

[@rajshetty4820]

u can install ubuntu

[@RobertoRaymon]

How about Photoshop and premiere pro???

[@leandrosantiagobatista189]

Can I install chrome os like another Linux distro on my laptop?

[@luandesonfelix4834]

Leandro Santiago Batista No, but You can use the Neverware Chromium OS that is a open source version of Chrome Os, but you’ll lose some features like android apps.

[@ABcd-qc2jv]

Yes Check out kedar nimbalkar youtube channel for more information.He has almost 80k subscribers so make sure you visit the right channel

[@carrefamily01]

sounds alot like qubeOs

[@arvinmistry9744]

thank you for new technology

[@zungaloca]

buying a chrome laptop it seems

[@fp3xi3yf7l]

🤧🤧🤧🤧😘

[@yetanotherchannelyac1434]

Thanks!

[@tamizh2024]

I think it would be better if one person presents the full lecture. It's distracting. I hope we are not on a talent show.

[@phukhue289]

This is not actual Linux, anymore than a Chrome OS app is actually an app. This "Linux" is a sandboxed application and so limited as to be virtually useless. If you want actual Linux replace Chrome OS with any distro you want. If all you need is something with a bigger screen to update your facebook, shop on amazon, or send gmail ,Chromebooks are fine. If you eed it for anything else buy a windows laptop or replace Chrome OS with actual Linux

[@MostafaMokhtari-pc2yq]

🧜🏼‍♀️🧜🏼‍♀️🧜🏼‍♀️❣️❣️❣️❣️🎄🎄🎄❄️☃️🌈🇺🇲👍

[@ecurules]

All of this complexity to simply run Linux... you could also just install Ubuntu to a standard laptop. And if you're really worried about security and you like to install random untrusted software (why would you do this?), you could run a VM on top of Windows, Mac or Linux. Honestly seems like a waste of some really intelligent people's time.

[@konradw360]

I think the whole point of this is to be able to use a few of these isolated "VM's" from each other and be able to switch between them easily. Rather than using one VM as a pot for all your untrusted code

[@jakebaldwib5034]

So allow me as a simpleton a bit of insight... it is rather UNSAFE.... at least as I see it. Remember, simpleton.

[@ManAdam712]

how to wach skibidi toylet and play fortnite on cromebook NOW!!! 😠

[@adampinuelas6139]

ADMA

[@ktbaduk]

Just give us java support

[@mistaxyz2869]

Arch Linux

[@evilnick2885]

wow Linux on my chromebook..... google, bringing platforms with nothing worthwhile to a platform with even less worth while! Call me when I can install VMware and windows 10 on my chromebooks to make it useful for something.....

[@robpearson8526]

Hi Evil, you can install Parallels and Windows 10 onto Chromebooks, it is costly to do so though. Being able to easily run Linux GUI applications on the ChromeOS desktop is great.