Hello!
I am happy to inform you that I just landed changes[1] that make our Tor Browser builds not require sudo privileges anymore. Thanks for the hard work done by boklm to make that happen.
For everyone building Tor Browser with our reproducible builds system that means they'll not only need to create new containers (that should happen automatically) but will likely need to enable user namespaces support as well on their build machine. This should already be properly documented in our updated README file[2]. If there are things missing or broken don't hesitate to ask and/or file a bug.
Thanks, Georg
[1] https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/23... [2] https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/blob/mast...
wowee; awesome work!
On Thu, 25 Feb 2021 at 15:51, Georg Koppen gk@torproject.org wrote:
Hello!
I am happy to inform you that I just landed changes[1] that make our Tor Browser builds not require sudo privileges anymore. Thanks for the hard work done by boklm to make that happen.
For everyone building Tor Browser with our reproducible builds system that means they'll not only need to create new containers (that should happen automatically) but will likely need to enable user namespaces support as well on their build machine. This should already be properly documented in our updated README file[2]. If there are things missing or broken don't hesitate to ask and/or file a bug.
Thanks, Georg
[1] https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/23... [2] https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/blob/mast...
tbb-dev mailing list tbb-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tbb-dev
On Thu, 25 Feb 2021, Georg Koppen wrote:
Hello!
I am happy to inform you that I just landed changes[1] that make our Tor Browser builds not require sudo privileges anymore. Thanks for the hard work done by boklm to make that happen.
For everyone building Tor Browser with our reproducible builds system that means they'll not only need to create new containers (that should happen automatically) but will likely need to enable user namespaces support as well on their build machine. This should already be properly documented in our updated README file[2]. If there are things missing or broken don't hesitate to ask and/or file a bug.
A summary of the changes you need to do to be able to continue to do builds on the master branch:
- install the uidmap package - if using the Debian kernel, enable user_namespaces with: sysctl -w kernel.unprivileged_userns_clone=1
And if you don't need that for other things (for example for building the stable branch), you can also:
- remove the runc package - remove your user from sudoers
Nicolas
-
Georg Koppen -
Nicolas Vigier -
Tom Ritter