8378fcc076
Switching to an Arch based build process for easier maintenance and using specific runners for tasks where that might be necessary. Right now, parent/child pipelines for somewhat parallel builds for different architectures / semi-independent pak-builds don't seem to properly work yet due to `trigger:` not being recognized when it should, so that's not yet implemented.
276 lines
8.5 KiB
Bash
276 lines
8.5 KiB
Bash
# Maintainer: lsf
|
|
# Contributor: Jan Alexander Steffens (heftig) <jan.steffens@gmail.com>
|
|
# Contributor: Ionut Biru <ibiru@archlinux.org>
|
|
# Contributor: Jakub Schmidtke <sjakub@gmail.com>
|
|
|
|
pkgname=librewolf
|
|
_pkgname=LibreWolf
|
|
pkgver=73.0.1
|
|
pkgrel=1
|
|
pkgdesc="Community-maintained fork of Librefox: a privacy and security-focused browser"
|
|
arch=(x86_64 aarch64)
|
|
license=(MPL GPL LGPL)
|
|
url="https://LibreWolf.gitlab.io"
|
|
depends=(gtk3 libxt startup-notification mime-types dbus-glib ffmpeg nss
|
|
ttf-font libpulse)
|
|
makedepends=(unzip zip diffutils python2-setuptools yasm mesa imake inetutils
|
|
xorg-server-xvfb autoconf2.13 rust clang llvm jack gtk2
|
|
python nodejs python2-psutil cbindgen nasm git binutils)
|
|
optdepends=('networkmanager: Location detection via available WiFi networks'
|
|
'libnotify: Notification integration'
|
|
'pulseaudio: Audio support'
|
|
'speech-dispatcher: Text-to-Speech'
|
|
'hunspell-en_US: Spell checking, American English')
|
|
options=(!emptydirs !makeflags !strip)
|
|
install='librewolf.install'
|
|
source=(https://archive.mozilla.org/pub/firefox/releases/$pkgver/source/firefox-$pkgver.source.tar.xz
|
|
$pkgname.desktop
|
|
$pkgname.cfg.patch
|
|
"git+https://gitlab.com/${pkgname}-community/browser/common.git"
|
|
"git+https://gitlab.com/${pkgname}-community/settings.git")
|
|
sha256sums=('53415180e74da60fc91700ce1ff33bf5b6f51e65353017a98270899a08e0c3d2'
|
|
'0471d32366c6f415f7608b438ddeb10e2f998498c389217cdd6cc52e8249996b'
|
|
'e03332f0e865949df5af9c231a364e9e1068fca0439621b98c2d4160d93e674f'
|
|
'SKIP'
|
|
'SKIP')
|
|
|
|
if [[ $CARCH == 'aarch64' ]]; then
|
|
source+=(arm.patch
|
|
https://raw.githubusercontent.com/archlinuxarm/PKGBUILDs/master/extra/firefox/build-arm-libopus.patch)
|
|
sha256sums+=('6ca87d2ac7dc48e6f595ca49ac8151936afced30d268a831c6a064b52037f6b7'
|
|
'2d4d91f7e35d0860225084e37ec320ca6cae669f6c9c8fe7735cdbd542e3a7c9')
|
|
fi
|
|
|
|
prepare() {
|
|
_POCKET_SED_STRING="s/'pocket'/#'pocket'/g"
|
|
# this one only to remove an annoying error message:
|
|
_POCKET_SED_STRING_2='s#SaveToPocket.init();#// SaveToPocket.init();#g'
|
|
_POCKET_FILE=./browser/components/moz.build
|
|
_POCKET_FILE_2=./browser/components/BrowserGlue.jsm
|
|
|
|
mkdir mozbuild
|
|
cd firefox-$pkgver
|
|
|
|
# NOTE:
|
|
# unlock some prefs I deem worthy of keeping unlocked or slightly less restricted
|
|
# (with librewolf installed systemwide, you'd otherwise always have to sudo around in /usr/lib)
|
|
# it mainly keeps addon update / install settings / urls unlocked
|
|
# as well as form fill settings
|
|
# uncomment it if you are OK with a slight potential decrease in privacy,
|
|
# or even better: check what I'm doing there.
|
|
|
|
cd ${srcdir}/settings
|
|
patch -Np1 -i ${srcdir}/${pkgname}.cfg.patch
|
|
rm -f librewolf.cfg.orig
|
|
cd ${srcdir}/firefox-$pkgver
|
|
|
|
cat >../mozconfig <<END
|
|
ac_add_options --enable-application=browser
|
|
|
|
# This supposedly speeds up compilation (We test through dogfooding anyway)
|
|
ac_add_options --disable-tests
|
|
ac_add_options --disable-debug
|
|
|
|
ac_add_options --prefix=/usr
|
|
ac_add_options --enable-release
|
|
ac_add_options --enable-hardening
|
|
ac_add_options --enable-rust-simd
|
|
export CC='clang'
|
|
export CXX='clang++'
|
|
export AR=llvm-ar
|
|
export NM=llvm-nm
|
|
export RANLIB=llvm-ranlib
|
|
|
|
# Branding
|
|
ac_add_options --enable-update-channel=release
|
|
ac_add_options --with-app-name=${pkgname}
|
|
ac_add_options --with-app-basename=${_pkgname}
|
|
ac_add_options --with-branding=browser/branding/${pkgname}
|
|
ac_add_options --with-distribution-id=io.gitlab.${pkgname}
|
|
ac_add_options --with-unsigned-addon-scopes=app,system
|
|
export MOZ_REQUIRE_SIGNING=0
|
|
|
|
# System libraries
|
|
ac_add_options --with-system-nspr
|
|
ac_add_options --with-system-nss
|
|
|
|
# Features
|
|
ac_add_options --enable-alsa
|
|
ac_add_options --enable-jack
|
|
ac_add_options --enable-startup-notification
|
|
ac_add_options --disable-crashreporter
|
|
ac_add_options --disable-gconf
|
|
ac_add_options --disable-updater
|
|
ac_add_options --disable-tests
|
|
|
|
# Disables crash reporting, telemetry and other data gathering tools
|
|
mk_add_options MOZ_CRASHREPORTER=0
|
|
mk_add_options MOZ_DATA_REPORTING=0
|
|
mk_add_options MOZ_SERVICES_HEALTHREPORT=0
|
|
mk_add_options MOZ_TELEMETRY_REPORTING=0
|
|
|
|
# options for ci / weaker build systems
|
|
# mk_add_options MOZ_MAKE_FLAGS="-j4"
|
|
# ac_add_options --enable-linker=gold
|
|
END
|
|
|
|
if [[ $CARCH == 'aarch64' ]]; then
|
|
cat >>../mozconfig <<END
|
|
# taken from manjaro build:
|
|
ac_add_options --enable-lto
|
|
ac_add_options --enable-optimize="-g0 -O2"
|
|
export MOZ_DEBUG_FLAGS=" "
|
|
export CFLAGS+=" -g0"
|
|
export CXXFLAGS+=" -g0"
|
|
export RUSTFLAGS="-Cdebuginfo=0"
|
|
|
|
# from ALARM
|
|
ac_add_options --disable-webrtc
|
|
|
|
END
|
|
|
|
# ac_add_options --enable-optimize <- ?
|
|
|
|
LDFLAGS+=" -Wl,--no-keep-memory -Wl,--reduce-memory-overheads"
|
|
patch -p1 -i ../arm.patch
|
|
patch -p1 -i ../build-arm-libopus.patch
|
|
|
|
fi
|
|
|
|
rm -f ${srcdir}/common/source_files/mozconfig
|
|
cp -r ${srcdir}/common/source_files/* ./
|
|
|
|
# Disabling Pocket
|
|
sed -i ${_POCKET_SED_STRING} $_POCKET_FILE
|
|
# sed -i ${_POCKET_SED_STRING_2} $_POCKET_FILE_2
|
|
}
|
|
|
|
|
|
build() {
|
|
cd firefox-$pkgver
|
|
|
|
export MOZ_SOURCE_REPO="$_repo"
|
|
export MOZ_NOSPAM=1
|
|
export MOZBUILD_STATE_PATH="$srcdir/mozbuild"
|
|
|
|
# LTO needs more open files
|
|
ulimit -n 4096
|
|
|
|
if [[ $CARCH != 'aarch64' ]]; then
|
|
# -fno-plt with cross-LTO causes obscure LLVM errors
|
|
# LLVM ERROR: Function Import: link error
|
|
CFLAGS="${CFLAGS/-fno-plt/}"
|
|
CXXFLAGS="${CXXFLAGS/-fno-plt/}"
|
|
|
|
# Do 3-tier PGO
|
|
echo "Building instrumented browser..."
|
|
cat >.mozconfig ../mozconfig - <<END
|
|
ac_add_options --enable-profile-generate=cross
|
|
END
|
|
./mach build
|
|
|
|
echo "Profiling instrumented browser..."
|
|
./mach package
|
|
LLVM_PROFDATA=llvm-profdata \
|
|
JARLOG_FILE="$PWD/jarlog" \
|
|
xvfb-run -s "-screen 0 1920x1080x24 -nolisten local" \
|
|
./mach python build/pgo/profileserver.py
|
|
|
|
if [[ ! -s merged.profdata ]]; then
|
|
echo "No profile data produced."
|
|
return 1
|
|
fi
|
|
|
|
if [[ ! -s jarlog ]]; then
|
|
echo "No jar log produced."
|
|
return 1
|
|
fi
|
|
|
|
echo "Removing instrumented browser..."
|
|
./mach clobber
|
|
|
|
echo "Building optimized browser..."
|
|
cat >.mozconfig ../mozconfig - <<END
|
|
ac_add_options --enable-lto=cross
|
|
ac_add_options --enable-profile-use=cross
|
|
ac_add_options --with-pgo-profile-path=${PWD@Q}/merged.profdata
|
|
ac_add_options --with-pgo-jarlog=${PWD@Q}/jarlog
|
|
# seems to break on arm
|
|
ac_add_options --enable-linker=gold
|
|
END
|
|
else
|
|
cat >.mozconfig ../mozconfig
|
|
fi
|
|
|
|
./mach build
|
|
|
|
echo "Building symbol archive..."
|
|
./mach buildsymbols
|
|
}
|
|
|
|
package() {
|
|
cd firefox-$pkgver
|
|
DESTDIR="$pkgdir" ./mach install
|
|
|
|
# also create regular tarball for non-distro-specific packaging
|
|
./mach package
|
|
|
|
local vendorjs="$pkgdir/usr/lib/$pkgname/browser/defaults/preferences/vendor.js"
|
|
install -Dvm644 /dev/stdin "$vendorjs" <<END
|
|
// Use LANG environment variable to choose locale
|
|
pref("intl.locale.requested", "");
|
|
|
|
// Use system-provided dictionaries
|
|
pref("spellchecker.dictionary_path", "/usr/share/hunspell");
|
|
|
|
// Disable default browser checking.
|
|
pref("browser.shell.checkDefaultBrowser", false);
|
|
|
|
// Don't disable extensions in the application directory
|
|
pref("extensions.autoDisableScopes", 11);
|
|
END
|
|
|
|
cp -r ${srcdir}/settings/* ${pkgdir}/usr/lib/${pkgname}/
|
|
|
|
local distini="$pkgdir/usr/lib/$pkgname/distribution/distribution.ini"
|
|
install -Dvm644 /dev/stdin "$distini" <<END
|
|
[Global]
|
|
id=io.gitlab.${pkgname}
|
|
version=1.0
|
|
about=LibreWolf Arch Linux
|
|
|
|
[Preferences]
|
|
app.distributor=archlinux
|
|
app.distributor.channel=$pkgname
|
|
app.partner.archlinux=archlinux
|
|
END
|
|
|
|
for i in 16 32 48 64 128; do
|
|
install -Dvm644 browser/branding/${pkgname}/default$i.png \
|
|
"$pkgdir/usr/share/icons/hicolor/${i}x${i}/apps/$pkgname.png"
|
|
done
|
|
install -Dvm644 browser/branding/librewolf/content/about-logo.png \
|
|
"$pkgdir/usr/share/icons/hicolor/192x192/apps/$pkgname.png"
|
|
|
|
# arch upstream provides a separate svg for this. we don't have that, so let's re-use 16.png
|
|
install -Dvm644 browser/branding/${pkgname}/default16.png \
|
|
"$pkgdir/usr/share/icons/hicolor/symbolic/apps/$pkgname-symbolic.png"
|
|
|
|
install -Dvm644 ../$pkgname.desktop \
|
|
"$pkgdir/usr/share/applications/$pkgname.desktop"
|
|
|
|
# Install a wrapper to avoid confusion about binary path
|
|
install -Dvm755 /dev/stdin "$pkgdir/usr/bin/$pkgname" <<END
|
|
#!/bin/sh
|
|
exec /usr/lib/$pkgname/librewolf "\$@"
|
|
END
|
|
|
|
# Replace duplicate binary with wrapper
|
|
# https://bugzilla.mozilla.org/show_bug.cgi?id=658850
|
|
ln -srfv "$pkgdir/usr/bin/$pkgname" "$pkgdir/usr/lib/$pkgname/librewolf-bin"
|
|
# Use system certificates
|
|
local nssckbi="$pkgdir/usr/lib/$pkgname/libnssckbi.so"
|
|
if [[ -e $nssckbi ]]; then
|
|
ln -srfv "$pkgdir/usr/lib/libnssckbi.so" "$nssckbi"
|
|
fi
|
|
}
|