April 2016 - tbb-dev - lists.torproject.org

Trouble building Tor Browser on Debian stretch
by David Fifield 27 Apr '16

27 Apr '16

I'm trying to build Tor Browser (tbb-6.0a4-build1) on Debian stretch, and running into problems. I tried some workarounds but it seems like I must be trying to do something unsupported. I'm not trying to reproduce a package; just test a patch. Can anyone shed some light? One of the problems seems actionable so I made a ticket: https://bugs.torproject.org/18786. I had to install the vmbuilder script manually, so I did what check-prerequisites.sh told me to do: torsocks wget -U "" https://bugs.launchpad.net/ubuntu/+archive/primary/+files/vm-builder_0.12.4… echo "76cbf8c52c391160b2641e7120dbade5afded713afaa6032f733a261f13e6a8e vm-builder_0.12.4+bzr494.orig.tar.gz" | sha256sum -c tar -zxvf vm-builder_0.12.4+bzr494.orig.tar.gz cd vm-builder-0.12.4+bzr494 sudo python setup.py install I ran into two problems that I tried to fix by patching vmbuilder. The first is that the call to "update-grub -y" would fail. I traced the problem to a lack of /dev inside the chroot; update-grub runs grub-probe --device-map=/boot/grub/device.map -t device / which fails with grub-probe: error: cannot find a device for / (is /dev mounted?). For this, I copy-pasted some code to bind-mount /dev before the call and unmount it after. Then I had a problem during the dist-upgrade for the ubuntu precise VMs. The "initscripts" package was failing to upgrade from 2.88dsf-13.10ubuntu11 to 2.88dsf-13.10ubuntu11.1: Setting up initscripts (2.88dsf-13.10ubuntu11.1) ... Processing triggers for libc-bin ... ldconfig deferred processing now taking place Extracting templates from packages: 100% Current default time zone: 'Etc/UTC' Local time is now: Mon Apr 11 01:35:59 UTC 2016. Universal Time is now: Mon Apr 11 01:35:59 UTC 2016. Run 'dpkg-reconfigure tzdata' if you wish to change it. invoke-rc.d: policy-rc.d denied execution of stop. mkdir: cannot create directory `/run/shm': File exists The specific error is that mkdir is trying to create a directory over an existing symlink. It's related to some confusion between /dev/shm and /run/shm: https://bugs.launchpad.net/bugs/974584. Here I spliced in a hack to remove the symlink and create the directory before upgrading initscripts. Finally I hit a compiler error during the build of i386 linux tor-browser. It's complaining about -Wformat-security: c++ -o MetaData.o -c -I../../dist/stl_wrappers -I../../dist/system_wrappers -include /home/debian/build/tor-browser/config/gcc_hidden.h -DANDROID_SMP=0 -DLOG_NDEBUG=1 -D_GLIBCXX_OS_DEFINES -DHAVE_SYS_UIO_H -DFAKE_LOG_DEVICE -DSTATIC_EXPORTABLE_JS_API -DMOZILLA_INTERNAL_API -DIMPL_LIBXUL -DMOZ_GLUE_IN_PROGRAM -DAB_CD=en-US -DNO_NSPR_10_SUPPORT -I/home/debian/build/tor-browser/media/libstagefright -I. -I/home/debian/build/tor-browser/media/libstagefright/binding/include -I/home/debian/build/tor-browser/media/libstagefright/frameworks/av/include -I/home/debian/build/tor-browser/media/libstagefright/frameworks/av/include/media/stagefright/foundation -I/home/debian/build/tor-browser/media/libstagefright/frameworks/av/media/libstagefright/ -I/home/debian/build/tor-browser/media/libstagefright/stubs/empty -I/home/debian/build/tor-browser/media/libstagefright/stubs/include -I/home/debian/build/tor-browser/media/libstagefright/stubs/include/media/stagefright/foundation -I/home/debian/build/tor-browser/media/libstagefright/system/core/include -I../../dist/include -I/home/debian/build/tor-browser/obj-i686-pc-linux-gnu/dist/include/nspr -I/home/debian/build/tor-browser/obj-i686-pc-linux-gnu/dist/include/nss -fPIC -DMOZILLA_CLIENT -include ../../mozilla-config.h -MD -MP -MF .deps/MetaData.o.pp -Wall -Wempty-body -Woverloaded-virtual -Wsign-compare -Wwrite-strings -Wno-invalid-offsetof -Wcast-align -frandom-seed=tor -fno-exceptions -fno-strict-aliasing -fno-rtti -fno-exceptions -fno-math-errno -std=gnu++0x -pthread -pipe -DNDEBUG -DTRIMMED -g -freorder-blocks -Os -fomit-frame-pointer -Wno-format -Wno-multichar -Wno-sign-compare -Wno-unused /home/debian/build/tor-browser/media/libstagefright/frameworks/av/media/libstagefright/MetaData.cpp cc1plus: error: -Wformat-security ignored without -Wformat [-Werror=format-security] I didn't find a way to deal with this one. I noticed that a recent commit refers to -Wformat-security in a comment, but it seems to be about GCC, not Firefox: https://gitweb.torproject.org/builders/tor-browser-bundle.git/tree/gitian/d…

2 2

Nightly hardened
by Linus Nordberg 25 Apr '16

25 Apr '16

Hi, https://people.torproject.org/~linus/builds/ now contains hardened builds as well. They're built when the ordinary nigthlies are built, namely every morning (CET/CEST) when there's been commits to the tor-browser-bundle repository or at least every third day regardless of new commits. I'd like to take the opportunity to hear what the opinion of the list is regarding moving the start of the build from todays 06:10 to 04:30. The idea is that both builds would be done when an ordinary working day starts in CET/CEST. This would increase the risk that late commits from US people won't make it, 04:30 CEST being 02:30 UTC.

2 2

marionette tests - how?
by gunes acar 22 Apr '16

22 Apr '16

Hi Nicolas, I saw you added Marionette tests to TBB test suite. I wonder how did you get Marionette to work with ESR38. I get "Missing marionetteProtocol field in handshake" error when I initialize webdriver with marionette capability using either TB 5.5.4 or stock ESR38 as firefox_binary [1]. The same code works with Firefox 45. I see this firefox-ui-tests submodule checked out to a commit in Oct. 2015. Is this the secret sauce? And I can't see "wires" mentioned in the test suite. Is it installed on the test machines already, or is there a way to do without wires? Thanks a lot! Gunes [1]: https://gist.github.com/gunesacar/81ce3d54d3ea0e797102f8c302c6ab82#file-mar…

1 1

Re: [tbb-dev] Trouble building Tor Browser on Debian stretch
by Joseph Bisch 22 Apr '16

22 Apr '16

I usually run Gitian directly on whatever host OS I use, so I don't have experience with running it in a chroot. When I was trying to reproduce the issues using a Stretch chroot and trying to create a Precise VM in it, I actually couldn't get far enough to reach the issues you were experiencing. What command are you using to enter the Stretch chroot (like chroot or systemd-nspawn)? I would bring the patches up to upstream[0] and see what they think about them. [0] - https://launchpad.net/vmbuilder Cheers, Joseph

2 1

Chris Palmer's Chrome Settings
by Jeff Burdges 16 Apr '16

16 Apr '16

I suspect anyone here noticed this previously, but searching for tbb-dev + [related] yielded nothing, so maybe it's worth mentioning here. https://noncombatant.org/2014/03/11/privacy-and-security-settings-in-chrome/ At minimum, if you've anyone bound and determined to use Chrome over Tor, then you can point them towards this. Best, Jeff

1 0

Tor Browser 5.0.8 delayed until 2016-04-26?
by anonym 12 Apr '16

12 Apr '16

Hi, As you can see on https://wiki.mozilla.org/RapidRelease/Calendar the release date for Firefox 38.8 (and friends) has been delayed one week, from the 19th to the 26th. I suppose this also means that the next Tor Browser (5.0.8, I guess) will be delayed until then too, right? Cheers!

2 2

Missing meeting
by Arthur D. Edelstein 04 Apr '16

04 Apr '16

Hi everyone, Due to travel it looks like I will probably miss the meeting today. If so, I will send my status report this evening. Arthur

1 0

Restarting nightly build
by Linus Nordberg 03 Apr '16

03 Apr '16

Hi Georg, FYI, I cleaned up some disk space on NORDUnet's build machine and restarted tonights continuous build which failed due to out of disk space.

1 0