[tor-dev] TBB check sums

Mike Perry mikeperry at torproject.org
Sat Jun 15 00:42:49 UTC 2013 

We've just had 4 people reproduce the Gitian TBB builds, and I've noted
the following differences (pasting from the TODO file at
https://gitweb.torproject.org/builders/tor-browser-bundle.git/blob/HEAD:/gitian/TODO):

   - including the res.yml files introduce more issues than they solve
     (Random Ubuntu package versions change too frequently)
     - Only include our own source code versions + hashes
   - One of the builds (ln5's) ended up using old Gitian descriptors somehow..
     - Refuse to build if `git diff --raw` is non-zero?
   - omni.ja (which is a zip file) still doesn't always match
     - toolkit.manifest is sometimes reordered, which gets bundled into nonlocalized.manifest.
       - Only two lines are ever reordered:
         override chrome://global/content/nsTransferable.js chrome://global/content/nsDragAndDrop.js
         skin mozapps classic/1.0 toolkit/skin/classic/mozapps/ os=WINNT osversion<6
   - webapprt/omni.ja (also a zip file) sometimes doesn't match
     - Permissions differences inside the zip file


Linus's builds below seem to have been hit by the first three issues. I
will be posting all 4 builds shortly (I will post to tor-qa and tor-talk
today, and to the blog on Sunday/Monday), and I will be declaring the
Pearl Crescent versions as 'official' this time. You can get a sneak
peak here:
https://people.torproject.org/~mikeperry/tbb-3.0alpha1-builds/

Since there will be a new Firefox 17.x ESR security fix in a little over
a week from now, I figure it is more important to get some feedback on
how the builds actually run early, and then aim to fix the remaining
determinism issues and any other issues by the time that next ESR point
release is out.

Linus Nordberg:

> Hi,
> 
> I've built TBB's using the new and shiny gitian thing.
> Thank you Mike Perry for putting lots of effort into this!
> I'm at commit f4869b0b (tor-browser-bundle.git).
> Check sums below.
> 
> --8<---------------cut here---------------start------------->8---
> user at host:~/usr/src/tor-browser-bundle/gitian$ sha256sum TorBrowserBundle-3.0-alpha-1-osx32_* tor-browser-linux* torbrowser-install-3.0-alpha-1_*
> 1f3265462f267c30bf9bf8a8ac41904f03166f49ce78ed1c88e16915bf644313  TorBrowserBundle-3.0-alpha-1-osx32_de.zip
> f588f5ffebea4fce1ecac7d4c694b94afd202e0d82fbf6a19e153c8e9c8e8f12  TorBrowserBundle-3.0-alpha-1-osx32_en-US.zip
> d7067a2eae9b1899e854aa1083653b452ed33137139ed94807651c208b17da33  TorBrowserBundle-3.0-alpha-1-osx32_es-ES.zip
> 372d9790ca6be27f617afb97ad7923d46f8b823935375ce3262abd09af6038ab  TorBrowserBundle-3.0-alpha-1-osx32_fa.zip
> dfd614b35d00a2ac9f5d5196bd4f0064fc53a43e909e32cbc847b42121463c85  TorBrowserBundle-3.0-alpha-1-osx32_fr.zip
> 735bd35612a756e28d011d61c5d682be4305d33db8f48b6e8721ff40c0784e7b  TorBrowserBundle-3.0-alpha-1-osx32_it.zip
> cf38210e03a64bec93e94a8c28bb9b3e3462f4588d816515a10a22ef39126392  TorBrowserBundle-3.0-alpha-1-osx32_ko.zip
> fe3f355972b5712d9084ddb3f6926bf86910a4e0613d701523d35ae1a8591d00  TorBrowserBundle-3.0-alpha-1-osx32_nl.zip
> 81bd77b6e446aa2eb0cf1969dbad80923ebc26fcf55f3153fb1f2fcf4a554cae  TorBrowserBundle-3.0-alpha-1-osx32_pl.zip
> 008e1eeb8ecd6f7f0e8543943eba1d40764a7b33edff06ccf4cf87de5ac74424  TorBrowserBundle-3.0-alpha-1-osx32_pt-PT.zip
> df47cd6c8167e7a610df586d69c0e6e7368c904e0e42ff0186c2831932338db1  TorBrowserBundle-3.0-alpha-1-osx32_ru.zip
> c9af80e798824ce1154cbf32ef1ba30f1a6e7b7e682e285dc69a2aaeada7bfa2  TorBrowserBundle-3.0-alpha-1-osx32_vi.zip
> ae47dd903c7683db89d769b8fb26cc0df8ebede424af09aa1108d773a808bf11  TorBrowserBundle-3.0-alpha-1-osx32_zh-CN.zip
> c6de2a39100be02f806a820196d87c565225cfbd637754f23206463eab1b96d5  tor-browser-linux32-3.0-alpha-1_de.tar.xz
> d28f7e708f01fb522e4a13d987859ace98cbe0f18ec3de71391c0fd3a82a527a  tor-browser-linux32-3.0-alpha-1_en-US.tar.xz
> 74ac8e1b3d86148d3f94fdc5c21636859b07339bec00da68bf5a15a12b4b3b45  tor-browser-linux32-3.0-alpha-1_es-ES.tar.xz
> e4d575f89de04c955981923e467e879cdf5f6c2ac36a0d984058d0f16bdc3cd7  tor-browser-linux32-3.0-alpha-1_fa.tar.xz
> 5a39818f665906b2542568329c0f859264057b9c8df21d78b0f2b34d8bdfd35e  tor-browser-linux32-3.0-alpha-1_fr.tar.xz
> 7f59ac51056e0d933027c57b032dc4896bca61d0f464bb28f3eff1dc46c1d58c  tor-browser-linux32-3.0-alpha-1_it.tar.xz
> f9fc3d164f79e44fd1d43d15f59ccd56175d7d18a413b18ac1abe15adbc34662  tor-browser-linux32-3.0-alpha-1_ko.tar.xz
> 52d9401edc032d833500bafed3e7ae277365429c6e1d9293dfa6a88132a4b0b2  tor-browser-linux32-3.0-alpha-1_nl.tar.xz
> 52218f2d8f0d7192ed832087ef2fa1a6cb013117e887467965875c04752d7b6f  tor-browser-linux32-3.0-alpha-1_pl.tar.xz
> dc201b5e9c9cac0883924b8558d3f317c10136107bded636722762030316acbe  tor-browser-linux32-3.0-alpha-1_pt-PT.tar.xz
> 4be1e6b43d55bc3ef1d4d5db360ec6b9981d6ea7e5be7c19b9d8ed81e4f72b77  tor-browser-linux32-3.0-alpha-1_ru.tar.xz
> 057aebd3ad07d6edd661c314102459fb97377074a06b7e68035b00be4ab948ed  tor-browser-linux32-3.0-alpha-1_vi.tar.xz
> f79c46aa4f52000faffe32ed1a8e10b82c481861fcd131bed2eeccb5078c1df2  tor-browser-linux32-3.0-alpha-1_zh-CN.tar.xz
> 763a96564571c364f73c1046465c6745b2bb150f914ab2740639d779da2529cb  tor-browser-linux64-3.0-alpha-1_de.tar.xz
> 5e5dd31612df58f2cfb870e4169c48b2578b4eb0beaee6c391189ba82e4584d5  tor-browser-linux64-3.0-alpha-1_en-US.tar.xz
> abc771efa43b62d3f7055528913622e1c657acb20dbdfcfebabcf25b16f20a4b  tor-browser-linux64-3.0-alpha-1_es-ES.tar.xz
> fe9a7905073089870d7f19857d9bc1e1d7e508ea283519ddb9abd24d6b6a0d6f  tor-browser-linux64-3.0-alpha-1_fa.tar.xz
> bc2849260e716c5e4cab7e7e157f6cf2bbea93533c5692f466bce964bff25677  tor-browser-linux64-3.0-alpha-1_fr.tar.xz
> 6564a05774a602557af3eb3ffbedbb542c0d966a69ee8997be56eb1ab0a02c0c  tor-browser-linux64-3.0-alpha-1_it.tar.xz
> d92f5d527e7aa48cbe500b84e8d1c69da0a716329f2b3203fdd2d5aacb8e5856  tor-browser-linux64-3.0-alpha-1_ko.tar.xz
> 81dddc65e0534902d7c1a7f39f4235e9d11e449d75647555c1ca4c04625eea63  tor-browser-linux64-3.0-alpha-1_nl.tar.xz
> 5b678842584503a6ddd6e40c7759ff14b0d87ca9f1a6721b2c6a10355ef97e35  tor-browser-linux64-3.0-alpha-1_pl.tar.xz
> 3df16ccf393169d8057d11ec4d85cb2940ddfb7f65c37c2607870f9c16b28efa  tor-browser-linux64-3.0-alpha-1_pt-PT.tar.xz
> 371777984b02897f25b6515b61db22b9fbfa0c78d253d19fc5aade754a26c74b  tor-browser-linux64-3.0-alpha-1_ru.tar.xz
> cfc4118a8345a8226c4638ad4719a7b12e5d3efd7faf5d8575fd2b341d510956  tor-browser-linux64-3.0-alpha-1_vi.tar.xz
> a49a8906e0f3013e2e02c41b68bde961d25100c1a27a8a497f5cd2bcb8764c27  tor-browser-linux64-3.0-alpha-1_zh-CN.tar.xz
> 951ae9027cb398e7721f9fff2af357c032316b64738bf7867035dc4697da8f3a  torbrowser-install-3.0-alpha-1_de.exe
> c0d17168b2e2c8d9d8762da62f207d3660494cb0fe4879217db0c2902a553abb  torbrowser-install-3.0-alpha-1_en-US.exe
> ab219b4f862aa86fedeadfde723158c5c2d4d84514d91b9fa6012d3b90c95646  torbrowser-install-3.0-alpha-1_es-ES.exe
> f8047706446d1dc112768edd01f1af246b1b57408b307d19996b39ffeaaba452  torbrowser-install-3.0-alpha-1_fa.exe
> 22e2b4d76df62185f3d011bf061cb75b173a0171c8198f21baff66ccde2905e2  torbrowser-install-3.0-alpha-1_fr.exe
> 370aea69718e443d3ede77d772ebb1ec2a0517e3d8b9f68573fa70dd9871a208  torbrowser-install-3.0-alpha-1_it.exe
> ad2032d82862177fd9e07a0aa9b65720a6f4817322760de44db9fcd84d016f50  torbrowser-install-3.0-alpha-1_ko.exe
> 29c72de44e65a6f5f0ee83ba79e5db13d430e2d7dda244528d16f540ad1db21f  torbrowser-install-3.0-alpha-1_nl.exe
> bd524c8dce296db2c1f9c09b024886faffc28bf4407526b2f310fdf66459faed  torbrowser-install-3.0-alpha-1_pl.exe
> 178f87dad198a565b13a419e5d10eabd760e09feb9e892d5d0baf6259fed3f58  torbrowser-install-3.0-alpha-1_pt-PT.exe
> d803200c16e17f8165463e416d5d043d1edcd9a564b9734f7c83feed8c2d55d1  torbrowser-install-3.0-alpha-1_ru.exe
> f623e459eb4579a6de1e2014cfdfcd2059b78d16fafb6d8e3873ab26d0e8bda0  torbrowser-install-3.0-alpha-1_vi.exe
> c888e325784048067698b59c9db0798fba23a83b53cc645ad6d83f7b1abf3f57  torbrowser-install-3.0-alpha-1_zh-CN.exe
> --8<---------------cut here---------------end--------------->8---
> _______________________________________________
> tor-dev mailing list
> tor-dev at lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

-- 
Mike Perry
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <http://lists.torproject.org/pipermail/tor-dev/attachments/20130614/06276df3/attachment.pgp>

More information about the tor-dev mailing list