Re: [update] www/librewolf 153.0-{1,3} (153.0-3 wip)

Leah Rowe <[email protected]> Thu, 23 Jul 2026 12:14:32 +0100
Newsgroups	gmane.os.openbsd.ports
Message-ID	<[email protected]>
Thank you for taking charge of this for me.

I'll be back in October again to help again with maintaining this port.

I'll probably be back earlier than October, but I say October for 
safety. I got a few things I'm dealing with that demand my undivided 
attention for the next few months.


Am 22.07.26 um 21:17 schrieb [email protected]:
> Built/tested on current/amd64 with privsep.
>
> Adapt www/mozilla-firefox changes to librewolf:
>
> - depend on latest cbindgen
> - drop now useless USE_LLD=ports
> - drop ugly NCPU !!= construct and use 4 threads for lld
>
> - Also bump SO_VERSION for major release update.
> - Added freebl3 to WANTLIB as it is picked up from nss.
>
>
> // Checked against manually downloaded.sig and .sha512sum
> $ cd /usr/ports/distfiles/librewolf/ && sq verify --signature-file=librewolf-153.0-1.source.tar.gz.sig librewolf-153.0-1.source.tar.gz ; sha512 -c librewolf-153.0-1.source.tar.gz.sha512sum
> Authenticating 662E3CDD6FE329002D0CA5BB40339DD82B12EF16 (LibreWolf Maintainers <[email protected]>) using the web of trust:
>    Fully authenticated (120 of 120) 662E3CDD6FE329002D0CA5BB40339DD82B12EF16, LibreWolf Maintainers <[email protected]>
>      ◯─┬ A629B716FBCB64C87477BC775525083E97A93CAA
>      │ └ (Local Trust Root)
>      │
>      │  certified the following binding on 2026‑05‑13
>      │
>      └─┬ 662E3CDD6FE329002D0CA5BB40339DD82B12EF16
>        └ LibreWolf Maintainers <[email protected]>
>
>    Authenticated signature made by 662E3CDD6FE329002D0CA5BB40339DD82B12EF16 (LibreWolf Maintainers <[email protected]>)
>
> 1 authenticated signature.
> (SHA512) librewolf-153.0-1.source.tar.gz: OK
> --
> $ cat librewolf-153.0-1.source.tar.gz.sha512sum
> ded52396842f567da5449772f3a05bb2f1c8ed2325ba094dd9aa93ba76329ce23d1a17da2e45874b07275b6726d2f06496285b002bb9d3a971dbb3b4d509a953  librewolf-153.0-1.source.tar.gz
> --
>
>
> // Build and package; do checks
> $ cd /usr/ports/www/librewolf/ && make clean=all clean && make makesum patch update-patches build update-plist package test ; make port-lib-depends-check check-shlib-syms
>
> librewolf-153.0pl1(www/librewolf):
> Missing: freebl3.58 from nss-3.126 (/usr/local/lib/librewolf/libxul.so.2.0)
> Extra:  Xtst.11
> WANTLIB += freebl3
>
>
> // this was kinda long so attached it as a log
>
> /usr/local/lib/librewolf/libmozwayland.so.1.0 --> /usr/ports/pobj/librewolf-153.0pl1/fake-amd64/usr/local/lib/librewolf/libmozwayland.so.2.0
> No dynamic export changes
> /usr/local/lib/librewolf/libxul.so.1.0 --> /usr/ports/pobj/librewolf-153.0pl1/fake-amd64/usr/local/lib/librewolf/libxul.so.2.0
> Dynamic export changes:
> added:
> 	XRE_GetBootstrap@@libxul.so.2.0
> 	__start_pb_defaults
> 	__stop_pb_defaults
> 	uprofiler_get@@libxul.so.2.0
>
> removed:
> 	XRE_GetBootstrap@@libxul.so.1.0
> 	uprofiler_get@@libxul.so.1.0
> --
> // patches updated; added freebl3 to WANTLIB, bumped SO
>
>
> // Updated
> # TRUSTED_PKG_PATH=/usr/ports/packages/amd64/all/ pkg_add -Dsnap -u librewolf
> librewolf-152.0.6pl1->153.0pl1: ok
> --
>
> Used it for a few hours.
>
> While fixing the patch, removed duplicates in
> patches/patch-lw_policies_json.
>
> Like:
> "DontCheckDefaultBrowser"
> "FirefoxHome": {
> …
> }
>
> Left files/mozconfig-openbsd alone for now.
>
> Did anyone get something similar?
>
>
> I am still building 153.0-3, but I figured with the security
> vulnerabilities,
> https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/
>
> a wip patch for personal compiling and feedback might be good. I have
> heard that with a modern ssd and cpu browsers compile in one or two
> hours. I take longer than double that just to untar. It is not a couple
> weeks of compiling like on some older architectures, but this
> compile on a old hdd will finish tomorrow, hopefully.
>
> Here is what I have so far for 153.0-3:
>
> // Makesum
> ===>  Checking files for librewolf-153.0pl3
> `/usr/ports/distfiles/librewolf/librewolf-153.0-3.source.tar.gz' is up to date.
> --- old
> +++ new
> @@ -1,2 +1,2 @@
> -SHA256 (librewolf/librewolf-153.0-1.source.tar.gz) = ydzbwbGAV+VbmCLXMbjiwC9+6wGrd+gr2C/1A4h1xok=
> -SIZE (librewolf/librewolf-153.0-1.source.tar.gz) = 1161838999
> +SHA256 (librewolf/librewolf-153.0-3.source.tar.gz) = SKziSh1q9sZeOmY0AuewrxVP9yBqt2++XAgxGnReOeM=
> +SIZE (librewolf/librewolf-153.0-3.source.tar.gz) = 1161719988
> --
>
> // Manually download .sig and .sha512sum to do verification
> $ cd /usr/ports/distfiles/librewolf/ && sq verify --signature-file=librewolf-153.0-3.source.tar.gz.sig librewolf-153.0-3.source.tar.gz ; sha512 -c librewolf-153.0-3.source.tar.gz.sha512sum
> Authenticating 662E3CDD6FE329002D0CA5BB40339DD82B12EF16 (LibreWolf Maintainers <[email protected]>) using the web of trust:
>    Fully authenticated (120 of 120) 662E3CDD6FE329002D0CA5BB40339DD82B12EF16, LibreWolf Maintainers <[email protected]>
>      ◯─┬ A629B716FBCB64C87477BC775525083E97A93CAA
>      │ └ (Local Trust Root)
>      │
>      │  certified the following binding on 2026‑05‑13
>      │
>      └─┬ 662E3CDD6FE329002D0CA5BB40339DD82B12EF16
>        └ LibreWolf Maintainers <[email protected]>
>
>    Authenticated signature made by 662E3CDD6FE329002D0CA5BB40339DD82B12EF16 (LibreWolf Maintainers <[email protected]>)
>
> 1 authenticated signature.
> (SHA512) librewolf-153.0-3.source.tar.gz: OK
> --
> $ cat librewolf-153.0-3.source.tar.gz.sha512sum
> d24cb5e81a30743bbe4d1118c8b5d2d85bada310f002536b9c5f3f759128368bac5208462f0906f6bf0fe602e678fe6386abe1c19ff3ee70d2a60535aa4b4bfb  librewolf-153.0-3.source.tar.gz
> --
>
>
> Sorry for any noise.
>
> Let me know if there is anything wrong or missing please. Comments,
> concerns, input welcome.
>
> The librewolf-153.0-1 can be skipped for cvs; librewolf-153.0-3 will
> have an initial patch probably tomorrow. Assuming no tar rerolls. Which
> I have learned are a semi-common thing. Thankfully these tar are signed.
>
> Hope this helps. Good night everyone. May you all have success hacking.
> --
> yaydn
>
>
> Index: Makefile
> ===================================================================
> RCS file: /cvs/ports/www/librewolf/Makefile,v
> diff -u -p -u -p -r1.5 Makefile
> --- Makefile	16 Jul 2026 15:19:32 -0000	1.5
> +++ Makefile	22 Jul 2026 19:05:10 -0000
> @@ -13,7 +13,7 @@ ONLY_FOR_ARCHS =	amd64 aarch64 riscv64
>   
>
>   # If upstream adds revision number -x, it will become plx in OpenBSD, e.g.
>   # librewolf-149.0.2-2 (upstream) becomes librewolf-149.0.2pl2 (patch level 2)
> -MOZILLA_DIST_VERSION =	152.0.6-1
> +MOZILLA_DIST_VERSION =	153.0-1
>   MOZILLA_VERSION =	${MOZILLA_DIST_VERSION:C/-([0-9]+)$/pl\1/}
>   
>
>   MOZILLA_PROJECT =	librewolf
> @@ -21,7 +21,7 @@ MOZILLA_CODENAME =	browser
>   MAINTAINER =		Leah Rowe <[email protected]>
>   
>
>   HOMEPAGE =	https://librewolf.net/
> -SO_VERSION =	1.0
> +SO_VERSION =	2.0
>   # Bump minor ver if shlibs deleted in components dir to avoid pkg_add -r issues
>   MOZILLA_LIBS =	mozavcodec mozavutil mozgtk mozinference mozwayland xul \
>   		clearkey gkcodecs lgpllibs mozsqlite3
> @@ -43,12 +43,11 @@ MODPY_RUNDEP =	No
>   
>
>   COMPILER =	ports-clang
>   MODCLANG_VERSION =	22
> -USE_LLD =	ports
>   
>
>   # 63 requires node because why not #1483595
>   BUILD_DEPENDS +=	lang/node
>   # 63 requires cbindgen #1478813
> -BUILD_DEPENDS +=	devel/cbindgen>=0.23.0
> +BUILD_DEPENDS +=	devel/cbindgen>=0.29.4
>   # wasi
>   BUILD_DEPENDS +=	lang/wasi-sdk/compiler-rt>=22.1.5p1 \
>   			lang/wasi-sdk/libcxx>=21.1.5p1 \
> @@ -60,7 +59,7 @@ BUILD_DEPENDS +=	devel/py-setuptools
>   RUN_DEPENDS =		graphics/ffmpeg
>   
>
>   # uses pledge()
> -WANTLIB += Xrandr Xtst
> +WANTLIB += Xrandr Xtst freebl3
>   
>
>   CONFIGURE_STYLE =	simple
>   CONFIGURE_SCRIPT =	${MODPY_BIN} ${WRKSRC}/configure.py
> @@ -71,13 +70,7 @@ CONFIGURE_ENV +=	CPPFLAGS="-fno-ret-prot
>   .else
>   CONFIGURE_ENV +=	CPPFLAGS=-Wno-backend-plugin
>   .endif
> -NCPU !!=		sysctl -n hw.ncpuonline
> -.if ${NCPU} > 4
> -CONFIGURE_ENV +=	LDFLAGS="-Wl,--threads=5 --ld-path=${WRKDIR}/bin/ld"
> -.else
> -CONFIGURE_ENV +=	LDFLAGS="-Wl,--threads=${MAKE_JOBS} \
> -			--ld-path=${WRKDIR}/bin/ld"
> -.endif
> +CONFIGURE_ENV +=	LDFLAGS="-Wl,--threads=4 --ld-path=${WRKDIR}/bin/ld"
>   # 2026497
>   CONFIGURE_ENV +=       MACH_BUILD_PYTHON_NATIVE_PACKAGE_SOURCE=none
>   
>
> Index: distinfo
> ===================================================================
> RCS file: /cvs/ports/www/librewolf/distinfo,v
> diff -u -p -u -p -r1.5 distinfo
> --- distinfo	16 Jul 2026 15:19:32 -0000	1.5
> +++ distinfo	22 Jul 2026 19:05:10 -0000
> @@ -1,2 +1,2 @@
> -SHA256 (librewolf/librewolf-152.0.6-1.source.tar.gz) = BBkwy3HutWW3Nv+ObQRDgTFGM7LDwrGatnS/Phn3+HA=
> -SIZE (librewolf/librewolf-152.0.6-1.source.tar.gz) = 1156714022
> +SHA256 (librewolf/librewolf-153.0-1.source.tar.gz) = ydzbwbGAV+VbmCLXMbjiwC9+6wGrd+gr2C/1A4h1xok=
> +SIZE (librewolf/librewolf-153.0-1.source.tar.gz) = 1161838999
> Index: patches/patch-lw_policies_json
> ===================================================================
> RCS file: /cvs/ports/www/librewolf/patches/patch-lw_policies_json,v
> diff -u -p -u -p -r1.3 patch-lw_policies_json
> --- patches/patch-lw_policies_json	20 Jun 2026 14:30:20 -0000	1.3
> +++ patches/patch-lw_policies_json	22 Jul 2026 19:05:10 -0000
> @@ -3,20 +3,14 @@ perhaps send these to librewolf upstream
>   Index: lw/policies.json
>   --- lw/policies.json.orig
>   +++ lw/policies.json
> -@@ -13,6 +13,16 @@
> +@@ -35,6 +35,10 @@
>            "DisableSetDesktopBackground": false,
> -         "DisableDeveloperTools": false,
> -         "NoDefaultBookmarks": true,
> -+        "DontCheckDefaultBrowser": true,
> +         "DisableTelemetry": true,
> +         "DontCheckDefaultBrowser": true,
>   +        "GoToIntranetSiteForSingleWordEntryInAddressBar": true,
> -+        "FirefoxHome": {
> -+        "SponsoredStories": false,
> -+            "SponsoredTopSites": false,
> -+            "Stories": false
> -+        },
>   +        "GenerativeAI": {
>   +            "Enabled": false
>   +        },
> -         "DefaultSerialGuardSetting": 3,
> -         "WebsiteFilter": {
> -             "Block": [
> +         "EncryptedMediaExtensions": {
> +             "Enabled": false
> +         },
> Index: patches/patch-toolkit_components_downloads_DownloadIntegration_sys_mjs
> ===================================================================
> RCS file: /cvs/ports/www/librewolf/patches/patch-toolkit_components_downloads_DownloadIntegration_sys_mjs,v
> diff -u -p -u -p -r1.1.1.1 patch-toolkit_components_downloads_DownloadIntegration_sys_mjs
> --- patches/patch-toolkit_components_downloads_DownloadIntegration_sys_mjs	8 Jun 2026 16:14:42 -0000	1.1.1.1
> +++ patches/patch-toolkit_components_downloads_DownloadIntegration_sys_mjs	22 Jul 2026 19:05:10 -0000
> @@ -4,7 +4,7 @@ was previously in patch-toolkit_componen
>   Index: toolkit/components/downloads/DownloadIntegration.sys.mjs
>   --- toolkit/components/downloads/DownloadIntegration.sys.mjs.orig
>   +++ toolkit/components/downloads/DownloadIntegration.sys.mjs
> -@@ -1110,7 +1110,7 @@ export var DownloadIntegration = {
> +@@ -1117,7 +1117,7 @@ export var DownloadIntegration = {
>        // displayed in the user interface.
>        let directoryPath = PathUtils.join(
>          this._getDirectory(aName),

-- 
Company director, Minifree Ltd
Registered in England, No. 9361826 | VAT No. GB202190462
Registered Office: 19 Hilton Road, Canvey Island, Essex SS8 9QA, UK
OpenPGP_0x5C654067D383B1FF.asc (application/pgp-keys, 3.1 KB)
OpenPGP_signature.asc (application/pgp-signature, 840 B)