I'm trying to build Tor Browser (tbb-6.0a4-build1) on Debian stretch,
and running into problems. I tried some workarounds but it seems like I
must be trying to do something unsupported. I'm not trying to reproduce
a package; just test a patch. Can anyone shed some light?
One of the problems seems actionable so I made a ticket:
https://bugs.torproject.org/18786.
I had to install the vmbuilder script manually, so I did what
check-prerequisites.sh told me to do:
torsocks wget -U "" https://bugs.launchpad.net/ubuntu/+archive/primary/+files/vm-builder_0.12.4…
echo "76cbf8c52c391160b2641e7120dbade5afded713afaa6032f733a261f13e6a8e vm-builder_0.12.4+bzr494.orig.tar.gz" | sha256sum -c
tar -zxvf vm-builder_0.12.4+bzr494.orig.tar.gz
cd vm-builder-0.12.4+bzr494
sudo python setup.py install
I ran into two problems that I tried to fix by patching vmbuilder. The
first is that the call to "update-grub -y" would fail. I traced the
problem to a lack of /dev inside the chroot; update-grub runs
grub-probe --device-map=/boot/grub/device.map -t device /
which fails with
grub-probe: error: cannot find a device for / (is /dev mounted?).
For this, I copy-pasted some code to bind-mount /dev before the call and
unmount it after.
Then I had a problem during the dist-upgrade for the ubuntu precise VMs.
The "initscripts" package was failing to upgrade from 2.88dsf-13.10ubuntu11
to 2.88dsf-13.10ubuntu11.1:
Setting up initscripts (2.88dsf-13.10ubuntu11.1) ...
Processing triggers for libc-bin ...
ldconfig deferred processing now taking place
Extracting templates from packages: 100%
Current default time zone: 'Etc/UTC'
Local time is now: Mon Apr 11 01:35:59 UTC 2016.
Universal Time is now: Mon Apr 11 01:35:59 UTC 2016.
Run 'dpkg-reconfigure tzdata' if you wish to change it.
invoke-rc.d: policy-rc.d denied execution of stop.
mkdir: cannot create directory `/run/shm': File exists
The specific error is that mkdir is trying to create a directory over an
existing symlink. It's related to some confusion between /dev/shm and
/run/shm: https://bugs.launchpad.net/bugs/974584. Here I spliced in a
hack to remove the symlink and create the directory before upgrading
initscripts.
Finally I hit a compiler error during the build of i386 linux
tor-browser. It's complaining about -Wformat-security:
c++ -o MetaData.o -c -I../../dist/stl_wrappers -I../../dist/system_wrappers -include /home/debian/build/tor-browser/config/gcc_hidden.h -DANDROID_SMP=0 -DLOG_NDEBUG=1 -D_GLIBCXX_OS_DEFINES -DHAVE_SYS_UIO_H -DFAKE_LOG_DEVICE -DSTATIC_EXPORTABLE_JS_API -DMOZILLA_INTERNAL_API -DIMPL_LIBXUL -DMOZ_GLUE_IN_PROGRAM -DAB_CD=en-US -DNO_NSPR_10_SUPPORT -I/home/debian/build/tor-browser/media/libstagefright -I. -I/home/debian/build/tor-browser/media/libstagefright/binding/include -I/home/debian/build/tor-browser/media/libstagefright/frameworks/av/include -I/home/debian/build/tor-browser/media/libstagefright/frameworks/av/include/media/stagefright/foundation -I/home/debian/build/tor-browser/media/libstagefright/frameworks/av/media/libstagefright/ -I/home/debian/build/tor-browser/media/libstagefright/stubs/empty -I/home/debian/build/tor-browser/media/libstagefright/stubs/include -I/home/debian/build/tor-browser/media/libstagefright/stubs/include/media/stagefright/foundation -I/home/debian/build/tor-browser/media/libstagefright/system/core/include -I../../dist/include -I/home/debian/build/tor-browser/obj-i686-pc-linux-gnu/dist/include/nspr -I/home/debian/build/tor-browser/obj-i686-pc-linux-gnu/dist/include/nss -fPIC -DMOZILLA_CLIENT -include ../../mozilla-config.h -MD -MP -MF .deps/MetaData.o.pp -Wall -Wempty-body -Woverloaded-virtual -Wsign-compare -Wwrite-strings -Wno-invalid-offsetof -Wcast-align -frandom-seed=tor -fno-exceptions -fno-strict-aliasing -fno-rtti -fno-exceptions -fno-math-errno -std=gnu++0x -pthread -pipe -DNDEBUG -DTRIMMED -g -freorder-blocks -Os -fomit-frame-pointer -Wno-format -Wno-multichar -Wno-sign-compare -Wno-unused /home/debian/build/tor-browser/media/libstagefright/frameworks/av/media/libstagefright/MetaData.cpp
cc1plus: error: -Wformat-security ignored without -Wformat [-Werror=format-security]
I didn't find a way to deal with this one. I noticed that a recent
commit refers to -Wformat-security in a comment, but it seems to be
about GCC, not Firefox:
https://gitweb.torproject.org/builders/tor-browser-bundle.git/tree/gitian/d…
Hi,
https://people.torproject.org/~linus/builds/ now contains hardened
builds as well. They're built when the ordinary nigthlies are built,
namely every morning (CET/CEST) when there's been commits to the
tor-browser-bundle repository or at least every third day regardless of
new commits.
I'd like to take the opportunity to hear what the opinion of the list is
regarding moving the start of the build from todays 06:10 to 04:30. The
idea is that both builds would be done when an ordinary working day
starts in CET/CEST. This would increase the risk that late commits from
US people won't make it, 04:30 CEST being 02:30 UTC.
Hi Nicolas,
I saw you added Marionette tests to TBB test suite.
I wonder how did you get Marionette to work with ESR38.
I get "Missing marionetteProtocol field in handshake" error when I
initialize webdriver with marionette capability using either TB 5.5.4 or
stock ESR38 as firefox_binary [1]. The same code works with Firefox 45.
I see this firefox-ui-tests submodule checked out to a commit in Oct.
2015. Is this the secret sauce? And I can't see "wires" mentioned in the
test suite. Is it installed on the test machines already, or is there a
way to do without wires?
Thanks a lot!
Gunes
[1]:
https://gist.github.com/gunesacar/81ce3d54d3ea0e797102f8c302c6ab82#file-mar…
I usually run Gitian directly on whatever host OS I use, so I don't have
experience with running it in a chroot.
When I was trying to reproduce the issues using a Stretch chroot and
trying to create a Precise VM in it, I actually couldn't get far
enough to reach the issues you were experiencing. What command are you
using to enter the Stretch chroot (like chroot or systemd-nspawn)?
I would bring the patches up to upstream[0] and see what they think about
them.
[0] - https://launchpad.net/vmbuilder
Cheers,
Joseph
I suspect anyone here noticed this previously, but searching for
tbb-dev + [related] yielded nothing, so maybe it's worth mentioning
here.
https://noncombatant.org/2014/03/11/privacy-and-security-settings-in-chrome/
At minimum, if you've anyone bound and determined to use Chrome
over Tor, then you can point them towards this.
Best,
Jeff
Hi,
As you can see on
https://wiki.mozilla.org/RapidRelease/Calendar
the release date for Firefox 38.8 (and friends) has been delayed one
week, from the 19th to the 26th. I suppose this also means that the next
Tor Browser (5.0.8, I guess) will be delayed until then too, right?
Cheers!