[tbb-dev] Changes in Tor Browser's build system

[Nicolas Vigier]

On Thu, 25 Feb 2021, Georg Koppen wrote:

> Hello!
> 
> I am happy to inform you that I just landed changes[1] that make our Tor
> Browser builds not require sudo privileges anymore. Thanks for the hard
> work done by boklm to make that happen.
> 
> For everyone building Tor Browser with our reproducible builds system
> that means they'll not only need to create new containers (that should
> happen automatically) but will likely need to enable user namespaces
> support as well on their build machine. This should already be properly
> documented in our updated README file[2]. If there are things missing or
> broken don't hesitate to ask and/or file a bug.

A summary of the changes you need to do to be able to continue to do
builds on the master branch:

- install the uidmap package
- if using the Debian kernel, enable user_namespaces with:
   sysctl -w kernel.unprivileged_userns_clone=1

And if you don't need that for other things (for example for building
the stable branch), you can also:

- remove the runc package
- remove your user from sudoers

Nicolas

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.torproject.org/pipermail/tbb-dev/attachments/20210225/075a70a1/attachment.sig>