Re: [update] www/librewolf 153.0-{1,3} (153.0-3 wip)

Leah Rowe <[email protected]> Thu, 23 Jul 2026 12:17:00 +0100
Newsgroups	gmane.os.openbsd.ports
Message-ID	<[email protected]>
see other reply:

check the firefox port. i do changes pretty conservatively, only 
adapting firefox port changes, plus adaptations for librewolf-specific 
changes e.g. policy changes, mozconfig (referencing upstream).

the firefox port does that CPU thread check and caps the limits based on 
the architecture it's being built on. openbsd doesn't cross compile, it 
always compiles on each host, and some of those architectures require 
limiting the number of threads due to memory usage, because the firefox 
port uses a lot of memory when compiling it.

i'd just err on the side of caution and defer to whatever ff does in 
openbsd. as i said though, i'll be back in ~october.


Am 22.07.26 um 21:17 schrieb [email protected]:
> Built/tested on current/amd64 with privsep.
>
> Adapt www/mozilla-firefox changes to librewolf:
>
> - depend on latest cbindgen
> - drop now useless USE_LLD=ports
> - drop ugly NCPU !!= construct and use 4 threads for lld
>
> - Also bump SO_VERSION for major release update.
> - Added freebl3 to WANTLIB as it is picked up from nss.
>
>
> // Checked against manually downloaded.sig and .sha512sum
> $ cd /usr/ports/distfiles/librewolf/ && sq verify --signature-file=librewolf-153.0-1.source.tar.gz.sig librewolf-153.0-1.source.tar.gz ; sha512 -c librewolf-153.0-1.source.tar.gz.sha512sum
> Authenticating 662E3CDD6FE329002D0CA5BB40339DD82B12EF16 (LibreWolf Maintainers <[email protected]>) using the web of trust:
>    Fully authenticated (120 of 120) 662E3CDD6FE329002D0CA5BB40339DD82B12EF16, LibreWolf Maintainers <[email protected]>
>      ◯─┬ A629B716FBCB64C87477BC775525083E97A93CAA
>      │ └ (Local Trust Root)
>      │
>      │  certified the following binding on 2026‑05‑13
>      │
>      └─┬ 662E3CDD6FE329002D0CA5BB40339DD82B12EF16
>        └ LibreWolf Maintainers <[email protected]>
>
>    Authenticated signature made by 662E3CDD6FE329002D0CA5BB40339DD82B12EF16 (LibreWolf Maintainers <[email protected]>)
>
> 1 authenticated signature.
> (SHA512) librewolf-153.0-1.source.tar.gz: OK
> --
> $ cat librewolf-153.0-1.source.tar.gz.sha512sum
> ded52396842f567da5449772f3a05bb2f1c8ed2325ba094dd9aa93ba76329ce23d1a17da2e45874b07275b6726d2f06496285b002bb9d3a971dbb3b4d509a953  librewolf-153.0-1.source.tar.gz
> --
>
>
> // Build and package; do checks
> $ cd /usr/ports/www/librewolf/ && make clean=all clean && make makesum patch update-patches build update-plist package test ; make port-lib-depends-check check-shlib-syms
>
> librewolf-153.0pl1(www/librewolf):
> Missing: freebl3.58 from nss-3.126 (/usr/local/lib/librewolf/libxul.so.2.0)
> Extra:  Xtst.11
> WANTLIB += freebl3
>
>
> // this was kinda long so attached it as a log
>
> /usr/local/lib/librewolf/libmozwayland.so.1.0 --> /usr/ports/pobj/librewolf-153.0pl1/fake-amd64/usr/local/lib/librewolf/libmozwayland.so.2.0
> No dynamic export changes
> /usr/local/lib/librewolf/libxul.so.1.0 --> /usr/ports/pobj/librewolf-153.0pl1/fake-amd64/usr/local/lib/librewolf/libxul.so.2.0
> Dynamic export changes:
> added:
> 	XRE_GetBootstrap@@libxul.so.2.0
> 	__start_pb_defaults
> 	__stop_pb_defaults
> 	uprofiler_get@@libxul.so.2.0
>
> removed:
> 	XRE_GetBootstrap@@libxul.so.1.0
> 	uprofiler_get@@libxul.so.1.0
> --
> // patches updated; added freebl3 to WANTLIB, bumped SO
>
>
> // Updated
> # TRUSTED_PKG_PATH=/usr/ports/packages/amd64/all/ pkg_add -Dsnap -u librewolf
> librewolf-152.0.6pl1->153.0pl1: ok
> --
>
> Used it for a few hours.
>
> While fixing the patch, removed duplicates in
> patches/patch-lw_policies_json.
>
> Like:
> "DontCheckDefaultBrowser"
> "FirefoxHome": {
> …
> }
>
> Left files/mozconfig-openbsd alone for now.
>
> Did anyone get something similar?
>
>
> I am still building 153.0-3, but I figured with the security
> vulnerabilities,
> https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/
>
> a wip patch for personal compiling and feedback might be good. I have
> heard that with a modern ssd and cpu browsers compile in one or two
> hours. I take longer than double that just to untar. It is not a couple
> weeks of compiling like on some older architectures, but this
> compile on a old hdd will finish tomorrow, hopefully.
>
> Here is what I have so far for 153.0-3:
>
> // Makesum
> ===>  Checking files for librewolf-153.0pl3
> `/usr/ports/distfiles/librewolf/librewolf-153.0-3.source.tar.gz' is up to date.
> --- old
> +++ new
> @@ -1,2 +1,2 @@
> -SHA256 (librewolf/librewolf-153.0-1.source.tar.gz) = ydzbwbGAV+VbmCLXMbjiwC9+6wGrd+gr2C/1A4h1xok=
> -SIZE (librewolf/librewolf-153.0-1.source.tar.gz) = 1161838999
> +SHA256 (librewolf/librewolf-153.0-3.source.tar.gz) = SKziSh1q9sZeOmY0AuewrxVP9yBqt2++XAgxGnReOeM=
> +SIZE (librewolf/librewolf-153.0-3.source.tar.gz) = 1161719988
> --
>
> // Manually download .sig and .sha512sum to do verification
> $ cd /usr/ports/distfiles/librewolf/ && sq verify --signature-file=librewolf-153.0-3.source.tar.gz.sig librewolf-153.0-3.source.tar.gz ; sha512 -c librewolf-153.0-3.source.tar.gz.sha512sum
> Authenticating 662E3CDD6FE329002D0CA5BB40339DD82B12EF16 (LibreWolf Maintainers <[email protected]>) using the web of trust:
>    Fully authenticated (120 of 120) 662E3CDD6FE329002D0CA5BB40339DD82B12EF16, LibreWolf Maintainers <[email protected]>
>      ◯─┬ A629B716FBCB64C87477BC775525083E97A93CAA
>      │ └ (Local Trust Root)
>      │
>      │  certified the following binding on 2026‑05‑13
>      │
>      └─┬ 662E3CDD6FE329002D0CA5BB40339DD82B12EF16
>        └ LibreWolf Maintainers <[email protected]>
>
>    Authenticated signature made by 662E3CDD6FE329002D0CA5BB40339DD82B12EF16 (LibreWolf Maintainers <[email protected]>)
>
> 1 authenticated signature.
> (SHA512) librewolf-153.0-3.source.tar.gz: OK
> --
> $ cat librewolf-153.0-3.source.tar.gz.sha512sum
> d24cb5e81a30743bbe4d1118c8b5d2d85bada310f002536b9c5f3f759128368bac5208462f0906f6bf0fe602e678fe6386abe1c19ff3ee70d2a60535aa4b4bfb  librewolf-153.0-3.source.tar.gz
> --
>
>
> Sorry for any noise.
>
> Let me know if there is anything wrong or missing please. Comments,
> concerns, input welcome.
>
> The librewolf-153.0-1 can be skipped for cvs; librewolf-153.0-3 will
> have an initial patch probably tomorrow. Assuming no tar rerolls. Which
> I have learned are a semi-common thing. Thankfully these tar are signed.
>
> Hope this helps. Good night everyone. May you all have success hacking.
> --
> yaydn
>
>
> Index: Makefile
> ===================================================================
> RCS file: /cvs/ports/www/librewolf/Makefile,v
> diff -u -p -u -p -r1.5 Makefile
> --- Makefile	16 Jul 2026 15:19:32 -0000	1.5
> +++ Makefile	22 Jul 2026 19:05:10 -0000
> @@ -13,7 +13,7 @@ ONLY_FOR_ARCHS =	amd64 aarch64 riscv64
>   
>
>   # If upstream adds revision number -x, it will become plx in OpenBSD, e.g.
>   # librewolf-149.0.2-2 (upstream) becomes librewolf-149.0.2pl2 (patch level 2)
> -MOZILLA_DIST_VERSION =	152.0.6-1
> +MOZILLA_DIST_VERSION =	153.0-1
>   MOZILLA_VERSION =	${MOZILLA_DIST_VERSION:C/-([0-9]+)$/pl\1/}
>   
>
>   MOZILLA_PROJECT =	librewolf
> @@ -21,7 +21,7 @@ MOZILLA_CODENAME =	browser
>   MAINTAINER =		Leah Rowe <[email protected]>
>   
>
>   HOMEPAGE =	https://librewolf.net/
> -SO_VERSION =	1.0
> +SO_VERSION =	2.0
>   # Bump minor ver if shlibs deleted in components dir to avoid pkg_add -r issues
>   MOZILLA_LIBS =	mozavcodec mozavutil mozgtk mozinference mozwayland xul \
>   		clearkey gkcodecs lgpllibs mozsqlite3
> @@ -43,12 +43,11 @@ MODPY_RUNDEP =	No
>   
>
>   COMPILER =	ports-clang
>   MODCLANG_VERSION =	22
> -USE_LLD =	ports
>   
>
>   # 63 requires node because why not #1483595
>   BUILD_DEPENDS +=	lang/node
>   # 63 requires cbindgen #1478813
> -BUILD_DEPENDS +=	devel/cbindgen>=0.23.0
> +BUILD_DEPENDS +=	devel/cbindgen>=0.29.4
>   # wasi
>   BUILD_DEPENDS +=	lang/wasi-sdk/compiler-rt>=22.1.5p1 \
>   			lang/wasi-sdk/libcxx>=21.1.5p1 \
> @@ -60,7 +59,7 @@ BUILD_DEPENDS +=	devel/py-setuptools
>   RUN_DEPENDS =		graphics/ffmpeg
>   
>
>   # uses pledge()
> -WANTLIB += Xrandr Xtst
> +WANTLIB += Xrandr Xtst freebl3
>   
>
>   CONFIGURE_STYLE =	simple
>   CONFIGURE_SCRIPT =	${MODPY_BIN} ${WRKSRC}/configure.py
> @@ -71,13 +70,7 @@ CONFIGURE_ENV +=	CPPFLAGS="-fno-ret-prot
>   .else
>   CONFIGURE_ENV +=	CPPFLAGS=-Wno-backend-plugin
>   .endif
> -NCPU !!=		sysctl -n hw.ncpuonline
> -.if ${NCPU} > 4
> -CONFIGURE_ENV +=	LDFLAGS="-Wl,--threads=5 --ld-path=${WRKDIR}/bin/ld"
> -.else
> -CONFIGURE_ENV +=	LDFLAGS="-Wl,--threads=${MAKE_JOBS} \
> -			--ld-path=${WRKDIR}/bin/ld"
> -.endif
> +CONFIGURE_ENV +=	LDFLAGS="-Wl,--threads=4 --ld-path=${WRKDIR}/bin/ld"
>   # 2026497
>   CONFIGURE_ENV +=       MACH_BUILD_PYTHON_NATIVE_PACKAGE_SOURCE=none
>   
>
> Index: distinfo
> ===================================================================
> RCS file: /cvs/ports/www/librewolf/distinfo,v
> diff -u -p -u -p -r1.5 distinfo
> --- distinfo	16 Jul 2026 15:19:32 -0000	1.5
> +++ distinfo	22 Jul 2026 19:05:10 -0000
> @@ -1,2 +1,2 @@
> -SHA256 (librewolf/librewolf-152.0.6-1.source.tar.gz) = BBkwy3HutWW3Nv+ObQRDgTFGM7LDwrGatnS/Phn3+HA=
> -SIZE (librewolf/librewolf-152.0.6-1.source.tar.gz) = 1156714022
> +SHA256 (librewolf/librewolf-153.0-1.source.tar.gz) = ydzbwbGAV+VbmCLXMbjiwC9+6wGrd+gr2C/1A4h1xok=
> +SIZE (librewolf/librewolf-153.0-1.source.tar.gz) = 1161838999
> Index: patches/patch-lw_policies_json
> ===================================================================
> RCS file: /cvs/ports/www/librewolf/patches/patch-lw_policies_json,v
> diff -u -p -u -p -r1.3 patch-lw_policies_json
> --- patches/patch-lw_policies_json	20 Jun 2026 14:30:20 -0000	1.3
> +++ patches/patch-lw_policies_json	22 Jul 2026 19:05:10 -0000
> @@ -3,20 +3,14 @@ perhaps send these to librewolf upstream
>   Index: lw/policies.json
>   --- lw/policies.json.orig
>   +++ lw/policies.json
> -@@ -13,6 +13,16 @@
> +@@ -35,6 +35,10 @@
>            "DisableSetDesktopBackground": false,
> -         "DisableDeveloperTools": false,
> -         "NoDefaultBookmarks": true,
> -+        "DontCheckDefaultBrowser": true,
> +         "DisableTelemetry": true,
> +         "DontCheckDefaultBrowser": true,
>   +        "GoToIntranetSiteForSingleWordEntryInAddressBar": true,
> -+        "FirefoxHome": {
> -+        "SponsoredStories": false,
> -+            "SponsoredTopSites": false,
> -+            "Stories": false
> -+        },
>   +        "GenerativeAI": {
>   +            "Enabled": false
>   +        },
> -         "DefaultSerialGuardSetting": 3,
> -         "WebsiteFilter": {
> -             "Block": [
> +         "EncryptedMediaExtensions": {
> +             "Enabled": false
> +         },
> Index: patches/patch-toolkit_components_downloads_DownloadIntegration_sys_mjs
> ===================================================================
> RCS file: /cvs/ports/www/librewolf/patches/patch-toolkit_components_downloads_DownloadIntegration_sys_mjs,v
> diff -u -p -u -p -r1.1.1.1 patch-toolkit_components_downloads_DownloadIntegration_sys_mjs
> --- patches/patch-toolkit_components_downloads_DownloadIntegration_sys_mjs	8 Jun 2026 16:14:42 -0000	1.1.1.1
> +++ patches/patch-toolkit_components_downloads_DownloadIntegration_sys_mjs	22 Jul 2026 19:05:10 -0000
> @@ -4,7 +4,7 @@ was previously in patch-toolkit_componen
>   Index: toolkit/components/downloads/DownloadIntegration.sys.mjs
>   --- toolkit/components/downloads/DownloadIntegration.sys.mjs.orig
>   +++ toolkit/components/downloads/DownloadIntegration.sys.mjs
> -@@ -1110,7 +1110,7 @@ export var DownloadIntegration = {
> +@@ -1117,7 +1117,7 @@ export var DownloadIntegration = {
>        // displayed in the user interface.
>        let directoryPath = PathUtils.join(
>          this._getDirectory(aName),

-- 
Company director, Minifree Ltd
Registered in England, No. 9361826 | VAT No. GB202190462
Registered Office: 19 Hilton Road, Canvey Island, Essex SS8 9QA, UK
OpenPGP_0x5C654067D383B1FF.asc (application/pgp-keys, 3.1 KB)
OpenPGP_signature.asc (application/pgp-signature, 840 B)