Porting Tor Browser to the BSDs
Has anyone looked into this? I talked to the maintainer of the OpenBSD Firefox port, but he wasn't very interested and pointed out the difficulty caused by the deterministic build system. I can verify that it doesn't work out of the box, but haven't had time to play with it much more than that. I think that the Tor Browser is an increasingly important tool, and that it's a problem that it isn't available on the BSDs. Thoughts? Suggestions?
On Tue, Feb 17, 2015 at 11:30 AM, Libertas <libertas@mykolab.com> wrote:
Has anyone looked into this? I talked to the maintainer of the OpenBSD Firefox port, but he wasn't very interested and pointed out the difficulty caused by the deterministic build system.
I can verify that it doesn't work out of the box, but haven't had time to play with it much more than that. I think that the Tor Browser is an increasingly important tool, and that it's a problem that it isn't available on the BSDs.
pcbsd bug search yielded no such tickets, but tpo and freebsd do have tickets, there may be other tickets out there you can find and add their links in to this thread. Try working up some new content to reopen 178281 and inquiry to freebsd lists/forum for help. - Torbrowser 3.x doesn't work in freebsd 9+ https://trac.torproject.org/projects/tor/ticket/10763 - Request for a Native Torbrowser Port https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=178281 Long term, looking at the porting issues may be better than relying on linux libs, however FF and deterministic are some more initial work. http://svnweb.freebsd.org/ports/head/www/firefox http://svnweb.freebsd.org/ports/head/www/firefox-esr But as a hack you may be able to build/find the needed glibc on linux and copy them in for use by the freebsd 10.1 linux module. Note going forward that f10 has been deprecated in favor of c6. http://svnweb.freebsd.org/ports/head/www/linux-firefox http://svnweb.freebsd.org/ports/head/emulators/linux_base-c6/ FreeBSD linux kernel module does not yet support 64bit. For reference, 32bit: https://svnweb.freebsd.org/base/head/sys/compat/linux/ https://svnweb.freebsd.org/base/head/sys/i386/linux/ https://svnweb.freebsd.org/base/head/sys/amd64/linux32/
On 02/17/2015 04:13 PM, grarpamp wrote:
FreeBSD linux kernel module does not yet support 64bit. For reference, 32bit: https://svnweb.freebsd.org/base/head/sys/compat/linux/ https://svnweb.freebsd.org/base/head/sys/i386/linux/ https://svnweb.freebsd.org/base/head/sys/amd64/linux32/
OpenBSD's Linux compatibility mode also only works on i386. I considered trying TB on one of my i386 machines running OpenBSD, but figured that wasn't a reasonable long-term solution for me or anyone else.
Libertas:
Has anyone looked into this? I talked to the maintainer of the OpenBSD Firefox port, but he wasn't very interested and pointed out the difficulty caused by the deterministic build system.
I can verify that it doesn't work out of the box, but haven't had time to play with it much more than that. I think that the Tor Browser is an increasingly important tool, and that it's a problem that it isn't available on the BSDs.
Thoughts? Suggestions?
I agree and would like to see a Tor Browser for BSDs, too. I've created #14942 for that. Whoever wants to work on this feel free to do so. We won't have the means to do that ourselves in the foreseeable future. I am happy to help, though, if there pop up cross-compiling issues unexpectedly as we have some experience with those I guess... Georg
FYI tor-talk, there is some gathering happening around this subject. Relavent starting threads, tickets and such linked below for those interested. Someone else can suggest what list to move the work to. http://lists.nycbug.org/pipermail/tor-bsd/2015-February/000225.html https://lists.torproject.org/pipermail/tor-dev/2015-February/008307.html
On Tue, Feb 17, 2015 at 11:30:26AM -0500, Libertas wrote:
Has anyone looked into this? I talked to the maintainer of the OpenBSD Firefox port, but he wasn't very interested and pointed out the difficulty caused by the deterministic build system.
Deterministic build is mandatory for sucessful build TB?
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 I'm a Bitrig [0] user and have been slowly patching up gitian-builder so that it knows how to create build VM's other than ubuntu [1]. I haven't pushed all of my patches yet, but I have a version of gitian-builder where make-base-vm understands "--os bitrig --iso cd10.iso" and it auto-installs Bitrig into a VM. My goal is to build Bitrig deterministically using gitian and I'm getting pretty close to at least doing builds. I'm not sure about the other roadblocks yet (e.g. timestamps, etc). I think my effort to add gitian support other OS's for build VM's would enable building the TBB using the target OS rather than cross-compiling from ubuntu. The only downside I can see is the increase in work trying to keep TBB building on all of these other platforms. I envision that the *BSD port maintainers would maintain the deterministic port and would multi-sig the output. - --dave [0] https://bitrig.org [1] https://github.com/dhuseby/gitian-builder/tree/bitrig-support On 02/17/2015 08:30 AM, Libertas wrote:
Has anyone looked into this? I talked to the maintainer of the OpenBSD Firefox port, but he wasn't very interested and pointed out the difficulty caused by the deterministic build system.
I can verify that it doesn't work out of the box, but haven't had time to play with it much more than that. I think that the Tor Browser is an increasingly important tool, and that it's a problem that it isn't available on the BSDs.
Thoughts? Suggestions?
_______________________________________________ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev
-----BEGIN PGP SIGNATURE----- iF4EAREIAAYFAlT002YACgkQvt/JvmUQuOkVOgD/Thj2dtCx4SfGpBEgIu2TRrGd MWwxDIGchhbAVdwh5uwA/2kRFR/u4nVZNw9eSC+w017cY0aFoEB1okZ2xw34KaLK =++e8 -----END PGP SIGNATURE-----
Dave Huseby:
I'm a Bitrig [0] user and have been slowly patching up gitian-builder so that it knows how to create build VM's other than ubuntu [1]. I haven't pushed all of my patches yet, but I have a version of gitian-builder where make-base-vm understands "--os bitrig --iso cd10.iso" and it auto-installs Bitrig into a VM. My goal is to build Bitrig deterministically using gitian and I'm getting pretty close to at least doing builds. I'm not sure about the other roadblocks yet (e.g. timestamps, etc).
thanks for working on this. It is an interesting idea to enhance Gitian in this way and it might help us to look at the differences that building with a Debian build VM would bring us (and to eliminate them). (although for this use case it might be easier to just patch python-vm-builder accordingly). I'd be interested in hearing about the progress you are making and the issues you are running into.
I think my effort to add gitian support other OS's for build VM's would enable building the TBB using the target OS rather than cross-compiling from ubuntu. The only downside I can see is the increase in work trying to keep TBB building on all of these other platforms.
Yes + it makes Gitian more complex due to necessary patches for each OS you start to support. Setting the different environments up should be a one-time task and new descriptors need to be written anyway. Thus, that should not matter so much then. Georg
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 03/03/2015 12:34 PM, Georg Koppen wrote:
Dave Huseby:
I'm a Bitrig [0] user and have been slowly patching up gitian-builder so that it knows how to create build VM's other than ubuntu [1]. I haven't pushed all of my patches yet, but I have a version of gitian-builder where make-base-vm understands "--os bitrig --iso cd10.iso" and it auto-installs Bitrig into a VM. My goal is to build Bitrig deterministically using gitian and I'm getting pretty close to at least doing builds. I'm not sure about the other roadblocks yet (e.g. timestamps, etc).
thanks for working on this. It is an interesting idea to enhance Gitian in this way and it might help us to look at the differences that building with a Debian build VM would bring us (and to eliminate them). (although for this use case it might be easier to just patch python-vm-builder accordingly). I'd be interested in hearing about the progress you are making and the issues you are running into.
In theory, modifying python-vm-builder to "install" *BSD without actually booting the install media is possible. The *BSD installer just sets up device files and site-local configurations (e.g. hostname, timezone, password, etc) and then unpacks a bunch of tarballs. It should be possible to make that happen. It may actually be easier than what I'm doing now. The main roadblock I think will be setting up the BSD disklabel and formatting on the disk. Linux doesn't have UFS read/write by default.
I think my effort to add gitian support other OS's for build VM's would enable building the TBB using the target OS rather than cross-compiling from ubuntu. The only downside I can see is the increase in work trying to keep TBB building on all of these other platforms.
Yes + it makes Gitian more complex due to necessary patches for each OS you start to support. Setting the different environments up should be a one-time task and new descriptors need to be written anyway. Thus, that should not matter so much then.
I'm doing it this way because I'm not sure it is possible to cross-compile Bitrig--or any other BSD--from Linux. - --dave -----BEGIN PGP SIGNATURE----- iF0EAREIAAYFAlT2SUgACgkQvt/JvmUQuOml3AD+P3KlNGf3AqJkjl/qp34EcPJO ZHBo2neBfI4ynsezsIUA9jbj/X7ASNJrUsbKHX0Pmy9y4A/SMLqBTOl0Gm3MCS4= =YCkD -----END PGP SIGNATURE-----
participants (5)
-
Dave Huseby -
Georg Koppen -
grarpamp -
Libertas -
Артур Истомин