[tor-bugs] #25876 [Applications/Tor Browser]: Source release tarballs for Tor Browser

[Tor Bug Tracker & Wiki]

#25876: Source release tarballs for Tor Browser
--------------------------------------+-----------------------------------
 Reporter:  attila                    |          Owner:  tbb-team
     Type:  task                      |         Status:  needs_information
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:                            |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+-----------------------------------

Comment (by w3ICKRsTMaxPeO):

 Hi tor devs, I greatly appreciate your work.

 The bug so far seems to concern bsd. My use-case is different (porting to
 Gentoo GNU/Linux), but for that I also need source tarball.

 For Gentoo, the browser part, torbutton, and tor-launcher would also
 suffice.

 There are already at least 3 efforts to port torbrowser to Gentoo:
 https://cgit.gentoo.org/proj/mozilla.git/tree/www-client/torbrowser
 https://github.com/MeisterP/torbrowser-overlay
 https://github.com/4nykey/4nykey/tree/master/www-client/torbrowser

 All of them would benefit from official source tarballs with stable hash,
 because Gentoo is a source-based distro. That means torbrowser sources
 need to be fetched and compiled by each user when installing. Hash
 verification is needed for reasons of security and quality assurance.

 dist.torproject.org sounds like a stable, official place to fetch source
 tarballs from, so please put them there.

 Keeping the last 2 releases suffices for Gentoo, which has a mirroring
 system, which will keep copies for as long as needed. The only requirement
 is that a given source URL has a constant hash over time.

 I believe the 'needs_information' tag is no longer valid. Please remove it
 so that tor devs don't think the bug waits for user input.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25876#comment:9>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online