[tor-bugs] #31130 [Applications/Tor Browser]: Use Debian 10 for our Android container images

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Oct 22 22:05:52 UTC 2019


#31130: Use Debian 10 for our Android container images
--------------------------------------+--------------------------------
 Reporter:  gk                        |          Owner:  tbb-team
     Type:  defect                    |         Status:  needs_revision
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  tbb-rbm                   |  Actual Points:
Parent ID:  #31127                    |         Points:  0.5
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------------

Comment (by boklm):

 Replying to [comment:7 sisbell]:
 > Replying to [comment:5 boklm]:
 > > Replying to [comment:4 sisbell]:
 > > > I kept in stretch for desktop builds, while adding in buster for
 android.
 > > >
 > > > https://github.com/sisbell/tor-browser-
 build/commit/8a39f6de0ea833f63ae00e5d3a6f2e2503a6572a
 > >
 > > I don't think we need to have two different Ubuntu versions to
 generate the images. We could just use Ubuntu 19.10 to generate all
 images.
 > >
 > > >
 > > > The above commit works fine for openjdk-8. When I attempted to add
 pinning I would get some dependency errors and I didn't see any advantage
 to making this more complicated.
 > >
 > > No pinning means that we are not using Debian buster, but Debian
 testing, which is not what we want (and not a good idea for reproducible
 builds as this distribution is changing a lot all the time). From the
 error it looks like `openjdk-8-jre` and `openjdk-8-jdk-headless` need to
 be added to the pinning configuration too.
 > >
 > I do see that without pinning we still use debian stable buster for a
 bunch of libraries (the first 54). I haven't been able to find a
 specification of how it does its resolving in this case (so I guess
 pinning is designed to force certain rules).
 >
 >
 > {{{
 > Get:50 http://deb.debian.org/debian buster/main amd64 libxdmcp-dev amd64
 1:1.1.2-3 [42.2 kB]
 > Get:51 http://deb.debian.org/debian buster/main amd64 xtrans-dev all
 1.3.5-1 [100 kB]
 > Get:52 http://deb.debian.org/debian buster/main amd64 libxcb1-dev amd64
 1.13.1-2 [174 kB]
 > Get:53 http://deb.debian.org/debian buster/main amd64 libxt-dev amd64
 1:1.1.5-1+b3 [426 kB]
 > Get:54 http://deb.debian.org/debian buster/main amd64 xdg-user-dirs
 amd64 0.17-2 [53.8 kB]
 > Get:55 http://ftp.us.debian.org/debian unstable/main amd64 libglib2.0-0
 amd64 2.62.1-1 [1317 kB]
 > Get:56 http://ftp.us.debian.org/debian unstable/main amd64 libwebp6
 amd64 0.6.1-2+b1 [261 kB]
 > ....
 > Get:114 http://ftp.us.debian.org/debian unstable/main amd64 libx11-dev
 amd64 2:1.6.8-1 [822 kB]
 > Get:115 http://ftp.us.debian.org/debian unstable/main amd64 openjdk-8
 -jre-headless amd64 8u232-b09-1 [27.2 MB]
 > Get:116 http://ftp.us.debian.org/debian unstable/main amd64
 openjdk-8-jre amd64 8u232-b09-1 [69.7 kB]
 > Get:117 http://ftp.us.debian.org/debian unstable/main amd64 openjdk-8
 -jdk-headless amd64 8u232-b09-1 [8183 kB]
 > Get:118 http://ftp.us.debian.org/debian unstable/main amd64
 openjdk-8-jdk amd64 8u232-b09-1 [1603 kB]
 >
 > }}}

 Those packages are exactly the same version in buster and in unstable.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31130#comment:9>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list