[tbb-bugs] #20352 [Applications/Tor Browser]: Integrate sandboxed Tor Browser into our gitian build system

[Tor Bug Tracker & Wiki]

#20352: Integrate sandboxed Tor Browser into our gitian build system
-------------------------------------------------+-------------------------
 Reporter:  gk                                   |          Owner:  tbb-
                                                 |  team
     Type:  task                                 |         Status:  new
 Priority:  High                                 |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tbb-gitian, tbb-sandboxing,          |  Actual Points:
  GeorgKoppen201611, TorBrowserTeam201611        |
Parent ID:  #19750                               |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by gk):

 Replying to [comment:6 gk]:
 > Replying to [comment:3 yawning]:
 > > These are the relevant versions of the runtime dependencies I need
 that ship with Debian stable, which is probably the oldest set of packages
 that are "reasonable" to assume installed.
 > >
 > >  * libx11-dev (The calls I use have always been there, and always
 will).
 > >  * Gtk+ 3.14 - Build assumes this, see the Makefile.
 >
 > Hm. That's a bummer as we don't have this in Debian Wheezy which we use
 for our Linux builds. I wonder what to do about that as I guess compiling
 Gtk 3.14 for use on Wheezy is non-trivial...

 Maybe we could try building the sandboxed thing on Debian Jessie instead?
 It is pretty much self-contained and using a Go built on Wheezy should be
 not a problem. Plus I somehow doubt there is a pre-Jessie system that has
 bubblewrap etc.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20352#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online