diff --git a/docs/community-installation-guide.md b/docs/community-installation-guide.md index e95bc4e..2b7d632 100644 --- a/docs/community-installation-guide.md +++ b/docs/community-installation-guide.md @@ -1,9 +1,20 @@ # Community Installation Guide +??? warning "Before following the community installation guide" + All the platforms listed in the community installation guide are not supported officially by the Invidious developers. + This means: + + - The Invidious developers can't help you to solve issues with your platform. Ask the community on [Matrix](https://matrix.to/#/#invidious:matrix.org) or [IRC](https://web.libera.chat/?channel=#invidious) before creating GitHub issues. But if you do fix an issue please create a PR for updating the community installation guide. + - The guide for your platform may be outdated because things have changed since the creation of the guide. + +If your platform is not listed but you would like to contribute to this guide for adding it, please do [here](https://github.com/iv-org/documentation/edit/master/docs/community-installation-guide.md). We rely on the community to help us. + After installation take a look at the [Post-install steps](installation.md#post-install-configuration). ## Podman (rootless container) +Guide contributor(s): [@sigulete](https://github.com/sigulete) + Podman is usually pre-installed in Fedora, CentOS, RHEL and derivatives. But if this is not the case, the instruction below will install all necessary packages. RHEL based and RHEL-like systems @@ -102,6 +113,8 @@ podman image prune -f ## Podman via systemd +Guide contributor(s): [@lzap](https://github.com/lzap) + This method is suitable for systems which come with Podman version 5.x or higher and systemd (e.g. Fedora, CentOS Stream 9 or clones). Instructions are written for root-less mode, do not run the commands as root since paths are different. Ensure that SELinux is in enforcing mode for maximum security. Create a new volume for database: @@ -209,3 +222,79 @@ And the whole application can be now started: Keep in mind that generated units cannot be enabled using `systemctl enable`, the main pod will be enabled automatically. If you do not like this behavior, remove the `WantedBy` line from `invidious.pod`. +## MacOS + +Guide contributor(s): Previously Invidious developers + +### Generate po_token and visitor_data identities + +[Follow these instructions here on the official tool `youtube-trusted-session-generator`](https://github.com/iv-org/youtube-trusted-session-generator?tab=readme-ov-file#tutorial-without-docker) + +These two parameters will be required for passing all verification checks on YouTube side and you will have to configure them in Invidious. + +You have to run this command on the same public IP address as the one blocked by YouTube. Not necessarily the same machine, just the same public IP address. +You will need to copy these two parameters in the `config.yaml` file. +Subsequent usage of this same token will work on the same IP range or even the same ASN. The point is to generate this token on a blocked IP as "unblocked" IP addresses seems to not generate a token valid for passing the checks on a blocked IP. + +??? warning "About po_token and visitor_data identities" + + po_token known as Proof of Origin Token. This is an attestation token generated by a complex anti robot verification system created by Google named BotGuard/DroidGuard. It is used to confirm that the request is coming from a genuine device. + + These identity tokens (po_token and visitor_data) generated in this tutorial will make your entire Invidious session more easily traceable by YouTube because it is tied to a unique identifier. + + There is currently no official automatic tool to periodically change these tokens. This is working in progress but, for the time being, this is the solution the Invidious team is offering. + + If you want to be less traceable, you can always script the process by changing the identities every X hour. + +### Run inv_sig_helper in background + +[Follow these instructions here on the official tool `inv_sig_helper`](https://github.com/iv-org/inv_sig_helper?tab=readme-ov-file#building-and-running-without-docker) + +inv_sig_helper handle the "deciphering" of the video stream fetched from YouTube servers. As it is running untrusted code from Google themselves, make sure to isolate it by for example running it inside Docker or a VM. + +Call for action: An example here is welcome, [if you want to contribute to one](https://github.com/iv-org/documentation/edit/master/docs/installation.md#macos). + +### Install the dependencies + +```bash +brew update +brew install crystal postgresql imagemagick librsvg +``` + +### Clone the Invidious repository + +```bash +git clone https://github.com/iv-org/invidious +cd invidious +``` + +### Set up PostgreSQL + +```bash +brew services start postgresql +createdb +psql -c "CREATE ROLE kemal WITH LOGIN PASSWORD 'kemal';" # Change 'kemal' here to a stronger password, and update `password` in config/config.yml +createdb -O kemal invidious +psql invidious kemal < config/sql/channels.sql +psql invidious kemal < config/sql/videos.sql +psql invidious kemal < config/sql/channel_videos.sql +psql invidious kemal < config/sql/users.sql +psql invidious kemal < config/sql/session_ids.sql +psql invidious kemal < config/sql/nonces.sql +psql invidious kemal < config/sql/annotations.sql +psql invidious kemal < config/sql/playlists.sql +psql invidious kemal < config/sql/playlist_videos.sql +``` + +### Set up Invidious + +```bash +make + +# Configure config/config.yml as you like +cp config/config.example.yml config/config.yml + +# edit config.yaml to include po_token and visitor_data previously generated + +edit config/config.yaml +``` \ No newline at end of file diff --git a/docs/installation.md b/docs/installation.md index 125d41c..4843f31 100644 --- a/docs/installation.md +++ b/docs/installation.md @@ -254,86 +254,22 @@ systemctl enable --now invidious.service ### MacOS -#### Generate po_token and visitor_data identities +We recommend installing [Docker desktop](https://docs.docker.com/desktop/setup/install/mac-install/) and then following [our guide about Docker](#docker) which will make the installation easier. -[Follow these instructions here on the official tool `youtube-trusted-session-generator`](https://github.com/iv-org/youtube-trusted-session-generator?tab=readme-ov-file#tutorial-without-docker) - -These two parameters will be required for passing all verification checks on YouTube side and you will have to configure them in Invidious. - -You have to run this command on the same public IP address as the one blocked by YouTube. Not necessarily the same machine, just the same public IP address. -You will need to copy these two parameters in the `config.yaml` file. -Subsequent usage of this same token will work on the same IP range or even the same ASN. The point is to generate this token on a blocked IP as "unblocked" IP addresses seems to not generate a token valid for passing the checks on a blocked IP. - -??? warning "About po_token and visitor_data identities" - - po_token known as Proof of Origin Token. This is an attestation token generated by a complex anti robot verification system created by Google named BotGuard/DroidGuard. It is used to confirm that the request is coming from a genuine device. - - These identity tokens (po_token and visitor_data) generated in this tutorial will make your entire Invidious session more easily traceable by YouTube because it is tied to a unique identifier. - - There is currently no official automatic tool to periodically change these tokens. This is working in progress but, for the time being, this is the solution the Invidious team is offering. - - If you want to be less traceable, you can always script the process by changing the identities every X hour. - -#### Run inv_sig_helper in background - -[Follow these instructions here on the official tool `inv_sig_helper`](https://github.com/iv-org/inv_sig_helper?tab=readme-ov-file#building-and-running-without-docker) - -inv_sig_helper handle the "deciphering" of the video stream fetched from YouTube servers. As it is running untrusted code from Google themselves, make sure to isolate it by for example running it inside Docker or a VM. - -Call for action: An example here is welcome, [if you want to contribute to one](https://github.com/iv-org/documentation/edit/master/docs/installation.md#macos). - -#### Install the dependencies - -```bash -brew update -brew install crystal postgresql imagemagick librsvg -``` - -#### Clone the Invidious repository - -```bash -git clone https://github.com/iv-org/invidious -cd invidious -``` - -#### Set up PostgreSQL - -```bash -brew services start postgresql -createdb -psql -c "CREATE ROLE kemal WITH LOGIN PASSWORD 'kemal';" # Change 'kemal' here to a stronger password, and update `password` in config/config.yml -createdb -O kemal invidious -psql invidious kemal < config/sql/channels.sql -psql invidious kemal < config/sql/videos.sql -psql invidious kemal < config/sql/channel_videos.sql -psql invidious kemal < config/sql/users.sql -psql invidious kemal < config/sql/session_ids.sql -psql invidious kemal < config/sql/nonces.sql -psql invidious kemal < config/sql/annotations.sql -psql invidious kemal < config/sql/playlists.sql -psql invidious kemal < config/sql/playlist_videos.sql -``` - -#### Set up Invidious - -```bash -make - -# Configure config/config.yml as you like -cp config/config.example.yml config/config.yml - -# edit config.yaml to include po_token and visitor_data previously generated - -edit config/config.yaml -``` +But if you are more experienced, you may follow the community installation guide about [MacOS](./community-installation-guide.md#macos) ### Windows Crystal, the programming language used by Invidious, [doesn't officially support Windows yet](https://github.com/crystal-lang/crystal/issues/5430) but you can still install Invidious: -- By installing [Docker desktop](https://docs.docker.com/desktop/install/windows-install/) and then following [our guide about Docker](#docker). +- By installing [Docker desktop](https://docs.docker.com/desktop/setup/install/windows-install/) and then following [our guide about Docker](#docker). - By installing [Windows Subsystem for Linux](https://msdn.microsoft.com/en-us/commandline/wsl/about) and then following [our guide about Linux](#linux). -- By installing [Windows-specific builds](https://github.com/crystal-lang/crystal/releases/) of Crystal. Be wary, as we don't currently have records of Invidious being tested on those "unsupported" builds yet. +- By installing [Windows-specific builds](https://github.com/crystal-lang/crystal/releases/) of Crystal. Be wary, as we don't currently have records of Invidious being tested on those "unsupported" builds yet. + Not official supported by Invidious developers! + +### Is your platform not listed (Podman, BSD, LXC and more)? + +Take a look at the community installation guide: [here](./community-installation-guide.md) ## Post-install configuration: