boklm pushed to branch main at The Tor Project / Applications / tor-browser-build
Commits:
-
1e4d64eb
by Nicolas Vigier at 2022-12-09T11:12:31+01:00
-
b3972182
by Nicolas Vigier at 2022-12-09T11:12:33+01:00
-
ad51122f
by Nicolas Vigier at 2022-12-09T11:12:34+01:00
-
1c5314b5
by Nicolas Vigier at 2022-12-09T11:12:36+01:00
-
5d387c8f
by Nicolas Vigier at 2022-12-09T11:12:38+01:00
-
228a1188
by Pier Angelo Vendrame at 2022-12-09T11:12:39+01:00
23 changed files:
- projects/android-components/config
- projects/android-toolchain/config
- projects/application-services/config
- projects/bison/config
- projects/browser/config
- projects/clang/build
- projects/clang/config
- + projects/compiler-rt/build
- + projects/compiler-rt/config
- projects/container-image/config
- projects/fenix/config
- projects/geckoview/build
- projects/geckoview/config
- projects/gradle/config
- projects/libevent/config
- + projects/mmdebstrap-image/apt-key-allow-expired-key.patch
- projects/mmdebstrap-image/config
- projects/rust/config
- projects/tor-android-service/config
- projects/tor-onion-proxy-library/config
- projects/tor/config
- projects/wasi-sysroot/config
- rbm.conf
Changes:
| ... | ... | @@ -19,8 +19,6 @@ var: |
| 19 | 19 | gradle_version: 7.0.2
|
| 20 | 20 | glean_parser: 5.0.1
|
| 21 | 21 | git_branch: '[% project %]-[% c("var/android_components_version") %]-[% c("var/torbrowser_branch") %]-1'
|
| 22 | - arch_deps:
|
|
| 23 | - - python3-venv
|
|
| 24 | 22 | |
| 25 | 23 | targets:
|
| 26 | 24 | nightly:
|
| ... | ... | @@ -8,9 +8,6 @@ var: |
| 8 | 8 | version_30: 30.0.2
|
| 9 | 9 | version_29: 29.0.2
|
| 10 | 10 | version_28: 28.0.3
|
| 11 | - deps:
|
|
| 12 | - - unzip
|
|
| 13 | - - python3
|
|
| 14 | 11 | setup: |
|
| 15 | 12 | mkdir -p /var/tmp/dist
|
| 16 | 13 | tar -C /var/tmp/dist -xf $rootdir/[% c("compiler_tarfile") %]
|
| ... | ... | @@ -13,8 +13,6 @@ var: |
| 13 | 13 | gradle_dependencies_version: 9
|
| 14 | 14 | gradle_version: 6.7.1
|
| 15 | 15 | glean_parser: 4.0.0
|
| 16 | - arch_deps:
|
|
| 17 | - - python3-venv
|
|
| 18 | 16 | |
| 19 | 17 | input_files:
|
| 20 | 18 | - project: container-image
|
| ... | ... | @@ -3,9 +3,6 @@ version: 3.8.2 |
| 3 | 3 | filename: '[% project %]-[% c("version") %]-[% c("var/build_id") %].tar.gz'
|
| 4 | 4 | container:
|
| 5 | 5 | use_container: 1
|
| 6 | - deps:
|
|
| 7 | - - build_essential
|
|
| 8 | - - xz-utils
|
|
| 9 | 6 | |
| 10 | 7 | input_files:
|
| 11 | 8 | - URL: https://ftp.gnu.org/gnu/bison/bison-[% c("version") %].tar.xz
|
| ... | ... | @@ -17,12 +17,16 @@ var: |
| 17 | 17 | - patch
|
| 18 | 18 | |
| 19 | 19 | targets:
|
| 20 | - linux-i686:
|
|
| 20 | + linux:
|
|
| 21 | 21 | var:
|
| 22 | - mar_osname: linux32
|
|
| 23 | 22 | arch_deps:
|
| 24 | - # Install libc6-i386 to be able to run 32bit mar tools (bug 29812)
|
|
| 23 | + # Install libc6-i386 to be able to run 32bit mar tools in linux-i686
|
|
| 24 | + # builds (bug 29812). We don't need it in x86_64 builds, but we
|
|
| 25 | + # share the container to reduce space used.
|
|
| 25 | 26 | - libc6-i386
|
| 27 | + linux-i686:
|
|
| 28 | + var:
|
|
| 29 | + mar_osname: linux32
|
|
| 26 | 30 | linux-x86_64:
|
| 27 | 31 | var:
|
| 28 | 32 | mar_osname: linux64
|
| ... | ... | @@ -3,16 +3,12 @@ |
| 3 | 3 | distdir=/var/tmp/dist/[% project %]
|
| 4 | 4 | mkdir -p /var/tmp/dist
|
| 5 | 5 | tar -C /var/tmp/dist -xf [% c('input_files_by_name/cmake') %]
|
| 6 | -export PATH="/var/tmp/dist/cmake/bin:$PATH"
|
|
| 6 | +tar -C /var/tmp/dist -xf [% c('input_files_by_name/ninja') %]
|
|
| 7 | +export PATH="/var/tmp/dist/ninja:/var/tmp/dist/cmake/bin:$PATH"
|
|
| 7 | 8 | [% IF c("var/linux") %]
|
| 8 | 9 | [% pc('gcc', 'var/setup', { compiler_tarfile => c('input_files_by_name/gcc'),
|
| 9 | 10 | hardened_gcc => 0 }) %]
|
| 10 | 11 | [% pc('python', 'var/setup', { python_tarfile => c('input_files_by_name/python') }) %]
|
| 11 | -[% END -%]
|
|
| 12 | -[% IF c("var/android") %]
|
|
| 13 | - [% pc(c('var/compiler'), 'var/setup', { compiler_tarfile => c('input_files_by_name/' _ c('var/compiler')) }) %]
|
|
| 14 | -[% END -%]
|
|
| 15 | -[% IF c("var/linux") || c("var/android") -%]
|
|
| 16 | 12 | tar -C /var/tmp/dist -xf [% c('input_files_by_name/binutils') %]
|
| 17 | 13 | export PATH="/var/tmp/dist/binutils/bin:$PATH"
|
| 18 | 14 | [% END -%]
|
| ... | ... | @@ -25,57 +21,15 @@ mkdir build |
| 25 | 21 | cd build
|
| 26 | 22 | # LLVM_ENABLE_ZLIB solves the "contains a compressed section, but zlib is not available" on lld
|
| 27 | 23 | # LLVM_INSTALL_UTILS allows this LLVM to be used to compile Rust
|
| 28 | -cmake ../llvm -G "Unix Makefiles" \
|
|
| 24 | +cmake ../llvm -GNinja \
|
|
| 29 | 25 | -DCMAKE_INSTALL_PREFIX=$distdir \
|
| 30 | 26 | -DCMAKE_BUILD_TYPE=Release \
|
| 31 | - [% IF c("var/android") || c("var/macos") -%]
|
|
| 32 | - -DLLVM_TARGETS_TO_BUILD="X86;ARM;AArch64" \
|
|
| 33 | - [% END -%]
|
|
| 34 | - [% IF c("var/rlbox") -%]-DLLVM_EXPERIMENTAL_TARGETS_TO_BUILD=WebAssembly[% END %] \
|
|
| 35 | - -DLLVM_ENABLE_PROJECTS="clang;clang-tools-extra;compiler-rt;lld" \
|
|
| 27 | + -DLLVM_TARGETS_TO_BUILD="X86;ARM;AArch64[% IF c("var/rlbox") -%];WebAssembly[% END %]" \
|
|
| 28 | + -DLLVM_ENABLE_PROJECTS="clang;lld" \
|
|
| 36 | 29 | -DLLVM_ENABLE_ZLIB=ON \
|
| 37 | 30 | -DLLVM_INSTALL_UTILS=ON \
|
| 38 | 31 | |
| 39 | -make -j[% c("num_procs") %]
|
|
| 40 | -make install
|
|
| 41 | -cd ..
|
|
| 42 | - |
|
| 43 | -[% IF c("var/android") -%]
|
|
| 44 | - echo "Compiling compiler-rt (Android only)"
|
|
| 45 | - rtdistdir=/var/tmp/build/rtdist
|
|
| 46 | - mkdir $rtdistdir
|
|
| 47 | - |
|
| 48 | - make_compilerrt () {
|
|
| 49 | - mkdir "build-compilerrt-$1"
|
|
| 50 | - cd "build-compilerrt-$1"
|
|
| 51 | - cmake ../compiler-rt/ -G "Unix Makefiles" \
|
|
| 52 | - -DCMAKE_INSTALL_PREFIX=$rtdistdir \
|
|
| 53 | - -DCMAKE_BUILD_TYPE=Release \
|
|
| 54 | - -DCMAKE_SYSTEM_NAME=Android \
|
|
| 55 | - -DCMAKE_ANDROID_ARCH_ABI=$1 \
|
|
| 56 | - -DCMAKE_ANDROID_NDK="$ANDROID_NDK_HOME" \
|
|
| 57 | - -DCMAKE_C_FLAGS="$3 -fuse-ld=lld --rtlib=compiler-rt" \
|
|
| 58 | - -DCMAKE_CXX_FLAGS="$3 -fuse-ld=lld --rtlib=compiler-rt" \
|
|
| 59 | - -DCMAKE_EXE_LINKER_FLAGS="-L$ANDROID_NDK_HOME/toolchains/llvm/prebuilt/linux-x86_64/$2" \
|
|
| 60 | - -DCOMPILER_RT_BUILD_BUILTINS=ON \
|
|
| 61 | - -DCOMPILER_RT_BUILD_LIBFUZZER=OFF \
|
|
| 62 | - -DCOMPILER_RT_BUILD_MEMPROF=OFF \
|
|
| 63 | - -DCOMPILER_RT_BUILD_ORC=OFF \
|
|
| 64 | - -DCOMPILER_RT_BUILD_PROFILE=OFF \
|
|
| 65 | - -DCOMPILER_RT_BUILD_SANITIZERS=OFF \
|
|
| 66 | - -DCOMPILER_RT_BUILD_XRAY=OFF
|
|
| 67 | - make -j[% c("num_procs") %]
|
|
| 68 | - make install
|
|
| 69 | - cd ..
|
|
| 70 | - }
|
|
| 71 | - |
|
| 72 | - make_compilerrt "armeabi-v7a" "arm-linux-androideabi/lib" "-DARMEABI_V7A"
|
|
| 73 | - make_compilerrt "arm64-v8a" "aarch64-linux-android/lib64"
|
|
| 74 | - make_compilerrt "x86" "i686-linux-android/lib"
|
|
| 75 | - make_compilerrt "x86_64" "x86_64-linux-android/lib64"
|
|
| 76 | - |
|
| 77 | - mv $rtdistdir/lib/linux/libclang_rt.builtins-*-android.a $distdir/lib/clang/[% c("var/llvm_version") %]/lib/linux/
|
|
| 78 | -[% END -%]
|
|
| 32 | +ninja -j[% c("num_procs") %] -v install
|
|
| 79 | 33 | |
| 80 | 34 | cd /var/tmp/dist
|
| 81 | 35 | [% c('tar', {
|
| ... | ... | @@ -11,14 +11,16 @@ input_files: |
| 11 | 11 | - project: container-image
|
| 12 | 12 | - name: '[% c("var/compiler") %]'
|
| 13 | 13 | project: '[% c("var/compiler") %]'
|
| 14 | - enable: '[% c("var/linux") || c("var/android") %]'
|
|
| 14 | + enable: '[% c("var/linux") %]'
|
|
| 15 | 15 | - name: binutils
|
| 16 | 16 | project: binutils
|
| 17 | - enable: '[% c("var/linux") || c("var/android") %]'
|
|
| 17 | + enable: '[% c("var/linux") %]'
|
|
| 18 | 18 | - project: cmake
|
| 19 | 19 | name: cmake
|
| 20 | 20 | - project: llvm-project
|
| 21 | 21 | name: clang-source
|
| 22 | + - project: ninja
|
|
| 23 | + name: ninja
|
|
| 22 | 24 | - project: python
|
| 23 | 25 | name: python
|
| 24 | 26 | enable: '[% c("var/linux") %]' |
| 1 | +#!/bin/bash
|
|
| 2 | +[% c("var/set_default_env") -%]
|
|
| 3 | +distdir=/var/tmp/dist/[% project %]
|
|
| 4 | +mkdir -p /var/tmp/dist
|
|
| 5 | +tar -C /var/tmp/dist -xf [% c('input_files_by_name/cmake') %]
|
|
| 6 | +tar -C /var/tmp/dist -xf [% c('input_files_by_name/ninja') %]
|
|
| 7 | +export PATH="/var/tmp/dist/ninja:/var/tmp/dist/cmake/bin:$PATH"
|
|
| 8 | + |
|
| 9 | +[% pc(c('var/compiler'), 'var/setup', { compiler_tarfile => c('input_files_by_name/' _ c('var/compiler')) }) %]
|
|
| 10 | + |
|
| 11 | +tar -C /var/tmp/dist -xf [% c('input_files_by_name/binutils') %]
|
|
| 12 | +export PATH="/var/tmp/dist/binutils/bin:$PATH"
|
|
| 13 | + |
|
| 14 | +mkdir -p /var/tmp/build
|
|
| 15 | +cd /var/tmp/build
|
|
| 16 | +tar -xf $rootdir/[% c('input_files_by_name/clang-source') %]
|
|
| 17 | +cd clang-source
|
|
| 18 | +export LLVM_HOME=$(pwd)
|
|
| 19 | +mkdir build
|
|
| 20 | +cd build
|
|
| 21 | + |
|
| 22 | +installdir=/var/tmp/build/install
|
|
| 23 | +mkdir -p $installdir
|
|
| 24 | + |
|
| 25 | +cmake ../compiler-rt/ -GNinja \
|
|
| 26 | + -DCMAKE_INSTALL_PREFIX=$installdir \
|
|
| 27 | + -DCMAKE_BUILD_TYPE=Release \
|
|
| 28 | + -DCMAKE_SYSTEM_NAME=Android \
|
|
| 29 | + -DCMAKE_ANDROID_ARCH_ABI="[% c('var/abi') %]" \
|
|
| 30 | + -DCMAKE_ANDROID_NDK="$ANDROID_NDK_HOME" \
|
|
| 31 | + -DCMAKE_C_FLAGS="-fuse-ld=lld --rtlib=compiler-rt $defines" \
|
|
| 32 | + -DCMAKE_CXX_FLAGS="-fuse-ld=lld --rtlib=compiler-rt $defines" \
|
|
| 33 | + -DCMAKE_EXE_LINKER_FLAGS="-L$ANDROID_NDK_HOME/toolchains/llvm/prebuilt/linux-x86_64/[% c('var/libdir') %]" \
|
|
| 34 | + -DCOMPILER_RT_BUILD_BUILTINS=ON \
|
|
| 35 | + -DCOMPILER_RT_BUILD_LIBFUZZER=OFF \
|
|
| 36 | + -DCOMPILER_RT_BUILD_MEMPROF=OFF \
|
|
| 37 | + -DCOMPILER_RT_BUILD_ORC=OFF \
|
|
| 38 | + -DCOMPILER_RT_BUILD_PROFILE=OFF \
|
|
| 39 | + -DCOMPILER_RT_BUILD_SANITIZERS=OFF \
|
|
| 40 | + -DCOMPILER_RT_BUILD_XRAY=OFF
|
|
| 41 | + |
|
| 42 | +ninja -j[% c("num_procs") %] -v install
|
|
| 43 | + |
|
| 44 | +mkdir -p $distdir/lib/clang/[% c("var/llvm_version") %]/lib/linux/
|
|
| 45 | +mv $installdir/lib/linux/libclang_rt.builtins-*-android.a $distdir/lib/clang/[% c("var/llvm_version") %]/lib/linux/
|
|
| 46 | + |
|
| 47 | +cd /var/tmp/dist
|
|
| 48 | +[% c('tar', {
|
|
| 49 | + tar_src => [ project ],
|
|
| 50 | + tar_args => '-czf ' _ dest_dir _ '/' _ c('filename'),
|
|
| 51 | + }) %] |
| 1 | +# vim: filetype=yaml sw=2
|
|
| 2 | +version: '[% c("var/llvm_version") %]'
|
|
| 3 | +filename: '[% project %]-[% c("version") %]-[% c("var/build_id") %].tar.gz'
|
|
| 4 | +container:
|
|
| 5 | + use_container: 1
|
|
| 6 | + |
|
| 7 | +var:
|
|
| 8 | + llvm_version: '[% pc("llvm-project", "version") %]'
|
|
| 9 | + |
|
| 10 | +targets:
|
|
| 11 | + android-armv7:
|
|
| 12 | + var:
|
|
| 13 | + libdir: 'arm-linux-androideabi/lib'
|
|
| 14 | + android-aarch64:
|
|
| 15 | + var:
|
|
| 16 | + libdir: 'aarch64-linux-android/lib64'
|
|
| 17 | + android-x86:
|
|
| 18 | + var:
|
|
| 19 | + libdir: 'i686-linux-android/lib'
|
|
| 20 | + android-x86_64:
|
|
| 21 | + var:
|
|
| 22 | + libdir: 'x86_64-linux-android/lib64'
|
|
| 23 | + |
|
| 24 | +input_files:
|
|
| 25 | + - project: container-image
|
|
| 26 | + - name: '[% c("var/compiler") %]'
|
|
| 27 | + project: '[% c("var/compiler") %]'
|
|
| 28 | + - name: binutils
|
|
| 29 | + project: binutils
|
|
| 30 | + - project: cmake
|
|
| 31 | + name: cmake
|
|
| 32 | + - project: llvm-project
|
|
| 33 | + name: clang-source
|
|
| 34 | + - project: ninja
|
|
| 35 | + name: ninja
|
|
| 36 | + - project: python
|
|
| 37 | + name: python
|
|
| 38 | + enable: '[% c("var/linux") %]' |
| ... | ... | @@ -37,9 +37,14 @@ pre: | |
| 37 | 37 | [% IF c("var/linux-cross") -%]
|
| 38 | 38 | dpkg --add-architecture [% c("var/arch_debian") %]
|
| 39 | 39 | [% END -%]
|
| 40 | + [% IF c("var/container/suite") == "jessie" -%]
|
|
| 41 | + # We need to use faketime to run `apt-get update` on jessie, because of
|
|
| 42 | + # expired key. See tor-browser-build#40693
|
|
| 43 | + dpkg -i ./libfaketime_0.9.6-3_amd64.deb ./faketime_0.9.6-3_amd64.deb
|
|
| 44 | + [% END -%]
|
|
| 40 | 45 | # Update the package cache again because `pre_pkginst` may change the
|
| 41 | 46 | # package manager configuration.
|
| 42 | - apt-get update -y -q
|
|
| 47 | + [% IF c("var/container/suite") == "jessie" %]faketime '2018-12-24 08:15:42' [% END %]apt-get update -y -q
|
|
| 43 | 48 | [% END -%]
|
| 44 | 49 | apt-get upgrade -y -q
|
| 45 | 50 | [%
|
| ... | ... | @@ -66,6 +71,7 @@ pre: | |
| 66 | 71 | [% IF pc(c('origin_project'), 'var/post_pkginst', { step => c('origin_step') }) -%]
|
| 67 | 72 | [% pc(c('origin_project'), 'var/post_pkginst', { step => c('origin_step') }) %]
|
| 68 | 73 | [% END -%]
|
| 74 | + apt-get clean
|
|
| 69 | 75 | |
| 70 | 76 | remote_get: |
|
| 71 | 77 | #!/bin/sh
|
| ... | ... | @@ -81,3 +87,9 @@ input_files: |
| 81 | 87 | - project: mmdebstrap-image
|
| 82 | 88 | target:
|
| 83 | 89 | - '[% c("var/container/suite") %]-[% c("var/container/arch") %]'
|
| 90 | + - URL: http://deb.debian.org/debian/pool/main/f/faketime/faketime_0.9.6-3_amd64.deb
|
|
| 91 | + sha256sum: 19b2a01a2fae7e6d5a8b741fc0bc626451cb4c2cc884ee79f1136dd3c2c26213
|
|
| 92 | + enable: '[% c("var/container/suite") == "jessie" %]'
|
|
| 93 | + - URL: http://deb.debian.org/debian/pool/main/f/faketime/libfaketime_0.9.6-3_amd64.deb
|
|
| 94 | + sha256sum: 82747d5815b226cfed7f6f9a751bf8c20d457f3ba786add6017d6904dea4fdb4
|
|
| 95 | + enable: '[% c("var/container/suite") == "jessie" %]' |
| ... | ... | @@ -20,8 +20,6 @@ var: |
| 20 | 20 | gradle_dependencies_version: 37
|
| 21 | 21 | gradle_version: 7.0.2
|
| 22 | 22 | glean_parser: 5.0.1
|
| 23 | - arch_deps:
|
|
| 24 | - - python3-venv
|
|
| 25 | 23 | |
| 26 | 24 | targets:
|
| 27 | 25 | release:
|
| ... | ... | @@ -21,6 +21,8 @@ tar -C /var/tmp/dist -xf [% c('input_files_by_name/nasm') %] |
| 21 | 21 | tar -C /var/tmp/dist -xf [% c('input_files_by_name/node') %]
|
| 22 | 22 | tar -C /var/tmp/dist -xf [% c('input_files_by_name/clang') %]
|
| 23 | 23 | export LLVM_CONFIG="/var/tmp/dist/clang/bin/llvm-config"
|
| 24 | +tar -C /var/tmp/dist -xf [% c('input_files_by_name/compiler-rt') %]
|
|
| 25 | +cp -r /var/tmp/dist/compiler-rt/* /var/tmp/dist/clang/
|
|
| 24 | 26 | tar -C /var/tmp/dist -xf [% c('input_files_by_name/binutils') %]
|
| 25 | 27 | export PATH="/var/tmp/dist/rust/bin:/var/tmp/dist/cbindgen:/var/tmp/dist/nasm/bin:/var/tmp/dist/node/bin:/var/tmp/dist/clang/bin:/var/tmp/dist/binutils/bin:$PATH"
|
| 26 | 28 |
| ... | ... | @@ -171,6 +171,8 @@ input_files: |
| 171 | 171 | name: nasm
|
| 172 | 172 | - project: clang
|
| 173 | 173 | name: clang
|
| 174 | + - project: 'compiler-rt'
|
|
| 175 | + name: 'compiler-rt'
|
|
| 174 | 176 | - filename: 'gradle-dependencies-[% c("var/gradle_dependencies_version") %]'
|
| 175 | 177 | name: gradle-dependencies
|
| 176 | 178 | exec: '[% INCLUDE "fetch-gradle-dependencies" %]' |
| ... | ... | @@ -5,8 +5,6 @@ container: |
| 5 | 5 | use_container: 1
|
| 6 | 6 | |
| 7 | 7 | var:
|
| 8 | - deps:
|
|
| 9 | - - unzip
|
|
| 10 | 8 | gradle_sha256sum:
|
| 11 | 9 | 5.1.1: 4953323605c5d7b89e97d0dc7779e275bccedefcdac090aec123375eae0cc798
|
| 12 | 10 | 5.6.4: 1f3067073041bc44554d0efe5d402a33bc3d3c93cc39ab684f308586d732a80d
|
| ... | ... | @@ -12,10 +12,6 @@ var: |
| 12 | 12 | configure_opt_project: --disable-static
|
| 13 | 13 | |
| 14 | 14 | targets:
|
| 15 | - macos:
|
|
| 16 | - var:
|
|
| 17 | - arch_deps:
|
|
| 18 | - - faketime
|
|
| 19 | 15 | windows:
|
| 20 | 16 | var:
|
| 21 | 17 | configure_opt_project: --disable-shared
|
| 1 | +--- o/apt-key 2022-11-30 14:57:12.742026261 +0000
|
|
| 2 | ++++ n/apt-key 2022-12-01 08:38:08.170140893 +0000
|
|
| 3 | +@@ -815,11 +815,18 @@
|
|
| 4 | + create_gpg_home
|
|
| 5 | + fi
|
|
| 6 | + setup_merged_keyring
|
|
| 7 | ++ tmpfile=$(mktemp)
|
|
| 8 | ++ set +e
|
|
| 9 | + if [ -n "$FORCED_KEYRING" ]; then
|
|
| 10 | +- "$GPGV" --homedir "${GPGHOMEDIR}" --keyring "$(dearmor_filename "${FORCED_KEYRING}")" --ignore-time-conflict "$@"
|
|
| 11 | ++ (eval "exec ${GPGSTATUSFD}>$tmpfile"; "$GPGV" --homedir "${GPGHOMEDIR}" --keyring "$(dearmor_filename "${FORCED_KEYRING}")" --ignore-time-conflict "$@")
|
|
| 12 | + else
|
|
| 13 | +- "$GPGV" --homedir "${GPGHOMEDIR}" --keyring "${GPGHOMEDIR}/pubring.gpg" --ignore-time-conflict "$@"
|
|
| 14 | ++ (eval "exec ${GPGSTATUSFD}>$tmpfile"; "$GPGV" --homedir "${GPGHOMEDIR}" --keyring "${GPGHOMEDIR}/pubring.gpg" --ignore-time-conflict "$@")
|
|
| 15 | + fi
|
|
| 16 | ++ err=$?
|
|
| 17 | ++ set -e
|
|
| 18 | ++ cat "$tmpfile" | sed 's/^\[GNUPG:\] EXPKEYSIG /\[GNUPG:\] GOODSIG /' >&${GPGSTATUSFD}
|
|
| 19 | ++ rm -f "$tmpfile"
|
|
| 20 | ++ exit $err
|
|
| 21 | + ;;
|
|
| 22 | + help)
|
|
| 23 | + usage |
| ... | ... | @@ -6,7 +6,7 @@ container: |
| 6 | 6 | use_container: 1
|
| 7 | 7 | |
| 8 | 8 | var:
|
| 9 | - ubuntu_version: 22.04
|
|
| 9 | + ubuntu_version: 22.04.1
|
|
| 10 | 10 | |
| 11 | 11 | pre: |
|
| 12 | 12 | #!/bin/sh
|
| ... | ... | @@ -16,6 +16,14 @@ pre: | |
| 16 | 16 | apt-get update -y -q
|
| 17 | 17 | apt-get install -y -q debian-archive-keyring ubuntu-keyring mmdebstrap gnupg
|
| 18 | 18 | |
| 19 | + [% IF c("var/container/suite") == "jessie" -%]
|
|
| 20 | + apt-get install -y -q patch
|
|
| 21 | + cd /usr/bin
|
|
| 22 | + # The gpg key for jessie is expired. We patch apt-key to accept expired keys.
|
|
| 23 | + patch -p1 < $rootdir/apt-key-allow-expired-key.patch
|
|
| 24 | + cd $rootdir
|
|
| 25 | + [% END -%]
|
|
| 26 | + |
|
| 19 | 27 | export SOURCE_DATE_EPOCH='[% c("timestamp") %]'
|
| 20 | 28 | tar -xf [% c('input_files_by_name/mmdebstrap') %]
|
| 21 | 29 | ./mmdebstrap/mmdebstrap --mode=unshare [% c("var/container/mmdebstrap_opt") %] [% c("var/container/suite") %] output.tar.gz [% c("var/container/debian_mirror") %]
|
| ... | ... | @@ -55,4 +63,6 @@ input_files: |
| 55 | 63 | name: mmdebstrap
|
| 56 | 64 | - URL: 'https://cdimage.ubuntu.com/ubuntu-base/releases/[% c("var/ubuntu_version") %]/release/ubuntu-base-[% c("var/ubuntu_version") %]-base-amd64.tar.gz'
|
| 57 | 65 | filename: 'container-image_ubuntu-base-[% c("var/ubuntu_version") %]-base-amd64.tar.gz'
|
| 58 | - sha256sum: df6fe77cee11bd216ac532f0ee082bdc4da3c0cc1f1d9cb20f3f743196bc4b07 |
|
| 66 | + sha256sum: e1f9200c99da008a473c9ae7b51e13f5ea05dc4c2e12beb43f0f9cbbbf6216f4
|
|
| 67 | + - filename: apt-key-allow-expired-key.patch
|
|
| 68 | + enable: '[% c("var/container/suite") == "jessie" %]' |
| ... | ... | @@ -7,23 +7,10 @@ container: |
| 7 | 7 | targets:
|
| 8 | 8 | android:
|
| 9 | 9 | var:
|
| 10 | - arch_deps:
|
|
| 11 | - - libssl-dev
|
|
| 12 | - - pkg-config
|
|
| 13 | - - zlib1g-dev
|
|
| 14 | 10 | configure_opt: --enable-local-rust --enable-vendor --enable-extended --release-channel=stable --sysconfdir=etc --llvm-root=/var/tmp/dist/clang --set rust.jemalloc --target=x86_64-unknown-linux-gnu,armv7-linux-androideabi,thumbv7neon-linux-androideabi,aarch64-linux-android,i686-linux-android,x86_64-linux-android --set=target.armv7-linux-androideabi.cc=armv7a-linux-androideabi16-clang --set=target.armv7-linux-androideabi.ar=armv7a-linux-androideabi-ar --set=target.thumbv7neon-linux-androideabi.cc=armv7a-linux-androideabi16-clang --set=target.thumbv7neon-linux-androideabi.ar=armv7a-linux-androideabi-ar --set=target.aarch64-linux-android.cc=aarch64-linux-android21-clang --set=target.aarch64-linux-android.ar=aarch64-linux-android-ar --set=target.i686-linux-android.cc=i686-linux-android16-clang --set=target.i686-linux-android.ar=i686-linux-android-ar --set=target.x86_64-linux-android.cc=x86_64-linux-android21-clang --set=target.x86_64-linux-android.ar=x86_64-linux-android-ar
|
| 15 | 11 | |
| 16 | 12 | linux:
|
| 17 | 13 | var:
|
| 18 | - deps:
|
|
| 19 | - - libc6-dev-i386
|
|
| 20 | - - lib32stdc++6
|
|
| 21 | - - build-essential
|
|
| 22 | - - python
|
|
| 23 | - - automake
|
|
| 24 | - - libssl-dev
|
|
| 25 | - - pkg-config
|
|
| 26 | - - hardening-wrapper
|
|
| 27 | 14 | # We use
|
| 28 | 15 | # `--enable-local-rust` to avoid downloading the required compiler during
|
| 29 | 16 | # build time
|
| ... | ... | @@ -58,21 +45,17 @@ targets: |
| 58 | 45 | |
| 59 | 46 | macos:
|
| 60 | 47 | var:
|
| 48 | + configure_opt: --enable-local-rust --enable-vendor --enable-extended --release-channel=stable --sysconfdir=etc --llvm-root=/var/tmp/dist/macosx-toolchain/clang --set rust.jemalloc --target=x86_64-unknown-linux-gnu,[% c("var/build_target") %] --set=target.[% c("var/build_target") %].cc=[% c("var/build_target") %]-clang --set target.x86_64-unknown-linux-gnu.linker=clang --set target.x86_64-unknown-linux-gnu.ar=llvm-ar --set target.x86_64-unknown-linux-gnu.ranlib=llvm-ranlib
|
|
| 61 | 49 | arch_deps:
|
| 62 | - - libssl-dev
|
|
| 63 | 50 | - pkg-config
|
| 64 | - - zlib1g-dev
|
|
| 65 | - configure_opt: --enable-local-rust --enable-vendor --enable-extended --release-channel=stable --sysconfdir=etc --llvm-root=/var/tmp/dist/macosx-toolchain/clang --set rust.jemalloc --target=x86_64-unknown-linux-gnu,[% c("var/build_target") %] --set=target.[% c("var/build_target") %].cc=[% c("var/build_target") %]-clang --set target.x86_64-unknown-linux-gnu.linker=clang --set target.x86_64-unknown-linux-gnu.ar=llvm-ar --set target.x86_64-unknown-linux-gnu.ranlib=llvm-ranlib
|
|
| 66 | 51 | |
| 67 | 52 | windows:
|
| 68 | 53 | var:
|
| 69 | - arch_deps:
|
|
| 70 | - - libssl-dev
|
|
| 71 | - - pkg-config
|
|
| 72 | - - zlib1g-dev
|
|
| 73 | 54 | # See tor-browser-build#29320
|
| 74 | 55 | compiler: mingw-w64
|
| 75 | 56 | configure_opt: --enable-local-rust --enable-vendor --enable-extended --release-channel=stable --sysconfdir=etc --llvm-root=/var/tmp/dist/clang --target=x86_64-unknown-linux-gnu,[% c("arch") %]-pc-windows-gnu --set target.x86_64-unknown-linux-gnu.linker=clang --set target.x86_64-unknown-linux-gnu.ar=llvm-ar --set target.x86_64-unknown-linux-gnu.ranlib=llvm-ranlib
|
| 57 | + arch_deps:
|
|
| 58 | + - pkg-config
|
|
| 76 | 59 | |
| 77 | 60 | input_files:
|
| 78 | 61 | - project: container-image
|
| ... | ... | @@ -8,9 +8,6 @@ container: |
| 8 | 8 | use_container: 1
|
| 9 | 9 | |
| 10 | 10 | var:
|
| 11 | - deps:
|
|
| 12 | - - build-essential
|
|
| 13 | - - unzip
|
|
| 14 | 11 | # this should be updated when the list of gradle dependencies is changed
|
| 15 | 12 | gradle_dependencies_version: 5
|
| 16 | 13 | gradle_version: 5.6.4
|
| ... | ... | @@ -8,10 +8,6 @@ container: |
| 8 | 8 | use_container: 1
|
| 9 | 9 | |
| 10 | 10 | var:
|
| 11 | - deps:
|
|
| 12 | - - build-essential
|
|
| 13 | - - unzip
|
|
| 14 | - - zip
|
|
| 15 | 11 | # this should be updated when the list of gradle dependencies is changed
|
| 16 | 12 | gradle_dependencies_version: 5
|
| 17 | 13 | gradle_version: 5.6.4
|
| ... | ... | @@ -9,13 +9,6 @@ tag_gpg_id: 1 |
| 9 | 9 | container:
|
| 10 | 10 | use_container: 1
|
| 11 | 11 | |
| 12 | -var:
|
|
| 13 | - deps:
|
|
| 14 | - - build-essential
|
|
| 15 | - - automake
|
|
| 16 | - - zip
|
|
| 17 | - - unzip
|
|
| 18 | - |
|
| 19 | 12 | targets:
|
| 20 | 13 | nightly:
|
| 21 | 14 | version: '[% c("abbrev") %]'
|
| ... | ... | @@ -27,25 +20,15 @@ targets: |
| 27 | 20 | libdir: lib32
|
| 28 | 21 | sort_deps: 0
|
| 29 | 22 | arch_deps:
|
| 30 | - - libtool
|
|
| 31 | 23 | - zlib1g-dev:i386
|
| 32 | - - hardening-wrapper
|
|
| 33 | 24 | linux-x86_64:
|
| 34 | 25 | var:
|
| 35 | 26 | libdir: lib64
|
| 36 | 27 | arch_deps:
|
| 37 | - - libtool
|
|
| 38 | 28 | - zlib1g-dev
|
| 39 | - - hardening-wrapper
|
|
| 40 | - macos:
|
|
| 41 | - var:
|
|
| 42 | - arch_deps:
|
|
| 43 | - - faketime
|
|
| 44 | 29 | android:
|
| 45 | 30 | var:
|
| 46 | 31 | configure_opt_project: '--enable-android --enable-static-openssl --enable-static-libevent --enable-zstd --disable-tool-name-check --disable-system-torrc --disable-system-torrc'
|
| 47 | - arch_deps:
|
|
| 48 | - - libtinfo5
|
|
| 49 | 32 | |
| 50 | 33 | input_files:
|
| 51 | 34 | - project: container-image
|
| ... | ... | @@ -8,12 +8,6 @@ git_submodule: 1 |
| 8 | 8 | container:
|
| 9 | 9 | use_container: 1
|
| 10 | 10 | |
| 11 | -targets:
|
|
| 12 | - linux:
|
|
| 13 | - var:
|
|
| 14 | - arch_deps:
|
|
| 15 | - - patch
|
|
| 16 | - |
|
| 17 | 11 | input_files:
|
| 18 | 12 | - project: container-image
|
| 19 | 13 | - name: binutils
|
| ... | ... | @@ -337,11 +337,15 @@ targets: |
| 337 | 337 | - bison
|
| 338 | 338 | - python3
|
| 339 | 339 | - python3-distutils
|
| 340 | + - python3-venv
|
|
| 340 | 341 | - automake
|
| 341 | 342 | - libtool
|
| 342 | 343 | - zip
|
| 343 | 344 | - unzip
|
| 344 | 345 | - libtinfo5
|
| 346 | + - libssl-dev
|
|
| 347 | + - pkg-config
|
|
| 348 | + - zlib1g-dev
|
|
| 345 | 349 | configure_opt: '--host=[% c("var/cross_prefix") %] CC=[% c("var/CC") %] [% c("var/configure_opt_project") %]'
|
| 346 | 350 | |
| 347 | 351 | pre_pkginst: |
|
| ... | ... | @@ -434,6 +438,8 @@ targets: |
| 434 | 438 | deps:
|
| 435 | 439 | - libc6-dev-i386
|
| 436 | 440 | - lib32stdc++6
|
| 441 | + - pkg-config
|
|
| 442 | + - libssl-dev
|
|
| 437 | 443 | - build-essential
|
| 438 | 444 | - python
|
| 439 | 445 | - bison
|
| ... | ... | @@ -442,6 +448,8 @@ targets: |
| 442 | 448 | - libtool
|
| 443 | 449 | - zip
|
| 444 | 450 | - unzip
|
| 451 | + - xz-utils
|
|
| 452 | + - patch
|
|
| 445 | 453 | linux-asan:
|
| 446 | 454 | var:
|
| 447 | 455 | asan: 1
|
| ... | ... | @@ -500,6 +508,8 @@ targets: |
| 500 | 508 | - libtool
|
| 501 | 509 | - zip
|
| 502 | 510 | - unzip
|
| 511 | + - libssl-dev
|
|
| 512 | + - zlib1g-dev
|
|
| 503 | 513 | |
| 504 | 514 | torbrowser-macos:
|
| 505 | 515 | - macos-universal
|
| ... | ... | @@ -554,6 +564,7 @@ targets: |
| 554 | 564 | rlbox: 0
|
| 555 | 565 | deps:
|
| 556 | 566 | - build-essential
|
| 567 | + - faketime
|
|
| 557 | 568 | - python3
|
| 558 | 569 | - python3-distutils
|
| 559 | 570 | - automake
|
| ... | ... | @@ -561,6 +572,8 @@ targets: |
| 561 | 572 | - libtool
|
| 562 | 573 | - zip
|
| 563 | 574 | - unzip
|
| 575 | + - libssl-dev
|
|
| 576 | + - zlib1g-dev
|
|
| 564 | 577 | faketime_path: /usr/lib/x86_64-linux-gnu/faketime/libfaketime.so.1
|
| 565 | 578 | |
| 566 | 579 | # The no_build_id target can be useful if you want to quickly display
|