[tor-bugs] #25623 [Applications/Tor Browser]: Disable network during build

[Tor Bug Tracker & Wiki]

#25623: Disable network during build
-------------------------------------------+--------------------------
 Reporter:  boklm                          |          Owner:  tbb-team
     Type:  task                           |         Status:  new
 Priority:  High                           |      Milestone:
Component:  Applications/Tor Browser       |        Version:
 Severity:  Normal                         |     Resolution:
 Keywords:  tbb-rbm, TorBrowserTeam201901  |  Actual Points:
Parent ID:                                 |         Points:
 Reviewer:                                 |        Sponsor:
-------------------------------------------+--------------------------
Changes (by boklm):

 * keywords:  tbb-rbm => tbb-rbm, TorBrowserTeam201901
 * cc: dcf (added)
 * priority:  Medium => High


Comment:

 Yesterday dcf said on IRC:
 {{{
 < dcf1> boklm: I wonder if the obfs4 build is downloading dependencies
 dynamically at build time.
 < dcf1> Because the goxnet project uses a commit from 2015, which is too
 old to have the x/net/http2 package that obfs4proxy uses.
 < dcf1> I noticed this because I just tried building a version of meek
 that has the same dependency, and it failed.
 < dcf1> So I'm not sure where obfs4 is getting its golang.org/x/net/http2
 from.
 }}}

 I am increasing the priority of this ticket as it looks like not a lot of
 work, and should allow to detect such issues.

 To do that I think we can add an empty network namespace to
 `projects/common/runc-config.json`:
 https://github.com/opencontainers/runtime-spec/blob/master/config-
 linux.md#namespaces

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25623#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online