[tor-bugs] #28325 [Applications/Tor Browser]: Use go 1.11 module versioning support

[Tor Bug Tracker & Wiki]

#28325: Use go 1.11 module versioning support
--------------------------------------+--------------------------
 Reporter:  boklm                     |          Owner:  tbb-team
     Type:  task                      |         Status:  new
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  tbb-rbm                   |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------

Comment (by cohosh):

 Replying to [comment:2 gk]:
 > Replying to [comment:1 cohosh]:
 > > We could really use this for the snowflake reproducible build. Our
 solution to the Windows build issue is to use a different webrtc library
 (which will probably be less painful for us down the road anyway).
 However, that library has 30+ dependencies and is a pain to build right
 now (see
 https://trac.torproject.org/projects/tor/ticket/28942#comment:39).
 > >
 > > Is this item roadmapped or is there some information on how difficult
 this task would be?
 >
 > It's not roadmapped as we did not have any prio to do this so far. Not
 sure how difficult it would be but my guess it not too difficult. Is that
 ticket blocking you? Or, asked differently: by when would you need this
 solved?

 I'm still unfamiliar with what exactly we need for reproducible builds. If
 all we need is a commit hash for every go library that snowflake depends
 on, I could probably spend a day or two writing a messy build script for
 the pion go version of snowflake. It's annoying but doable.

 I think the pion version is becoming more and more necessary given #31446
 and us wanting to roll out support for windows users. So my answer is: if
 a hacky build script as described above would work, it's not necessary. If
 not, then we are blocked on this for moving away from the messy chromium
 webrtc sources.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/28325#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online