Snap Chromium's AppArmor profile only allows /run/user/*/wayland-[0-9]*;
waypipe's default random name starts with a letter and was refused.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Waypipe only carries the window, so audio played on the remote's
speakers. Load a PulseAudio tunnel sink on the remote pointing back
over the tailnet and target only this Chromium at it via PULSE_SINK;
the snap sandbox rules out forwarding the audio socket over ssh.
Modules are unloaded on exit and leftovers cleared on the next run.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Runs Chromium on the home machine with its window drawn on the travel
laptop, so logged-in browser accounts stay on the home machine. Closes
any running instance first, since Chromium's one-process-per-profile
lock would otherwise open the window on the home machine's own screen.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
