docs(trmnl): note the expected Google drops from the renderer's Chromium #1599

Merged
k.renner merged 1 commits from docs/trmnl-renderer-google-drops into main 2026-11-07 20:02:17 +00:00
Member

Comment on trmnl-baseline-egress: trmnl-renderer's Chromium calls Google update/account hosts, which the policy denies. Upstream fixes the launch flags in screenshot.ts (PUPPETEER_ARGS) with no override and without --disable-background-networking, so the drops are expected.

S28-4

🤖 Generated with Claude Code

Comment on trmnl-baseline-egress: trmnl-renderer's Chromium calls Google update/account hosts, which the policy denies. Upstream fixes the launch flags in screenshot.ts (PUPPETEER_ARGS) with no override and without --disable-background-networking, so the drops are expected. S28-4 🤖 Generated with [Claude Code](https://claude.com/claude-code)
claude-bot added 1 commit 2026-11-07 20:00:46 +00:00
docs(trmnl): note the expected Google drops from the renderer's Chromium
ci/woodpecker/pr/ci-manifests-test Pipeline was successful
ci/woodpecker/pr/ci-scripts-test Pipeline was successful
17839eeeab
About 43k POLICY_DENIED a day from trmnl-renderer to Google update and
account hosts. Source (OCI label): usetrmnl/trmnl-home-assistant dd556e6;
the Chromium flags are a fixed list in screenshot.ts:78 with no env or
option override, and --disable-background-networking is not among them.
Nothing on our side can switch it off; the denies are correct.

S28-4

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
k.renner merged commit a4e5f99ca1 into main 2026-11-07 20:02:17 +00:00
Sign in to join this conversation.