The Tor Project issueshttps://gitlab.torproject.org/groups/tpo/-/issues2020-10-12T22:16:38Zhttps://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40121appservices/logins/GleanMetrics contains non-reproducible parts in 10.0a82020-10-12T22:16:38ZGeorg Koppenappservices/logins/GleanMetrics contains non-reproducible parts in 10.0a8```
diff -r
gk/tor-browser-10.0a8-android-aarch64-multi-qa/smali/org/mozilla/appservices/logins/GleanMetrics/-$$LambdaGroup$ks$5VujDb9HU5GJMcajuXdveYMKYNk.smali
sysrqb/tor-browser-10.0a8-android-aarch64-multi-qa/smali/org/mozilla/appserv...```
diff -r
gk/tor-browser-10.0a8-android-aarch64-multi-qa/smali/org/mozilla/appservices/logins/GleanMetrics/-$$LambdaGroup$ks$5VujDb9HU5GJMcajuXdveYMKYNk.smali
sysrqb/tor-browser-10.0a8-android-aarch64-multi-qa/smali/org/mozilla/appservices/logins/GleanMetrics/-$$LambdaGroup$ks$5VujDb9HU5GJMcajuXdveYMKYNk.smali
97a98,100
> sget-object v6,
Lmozilla/telemetry/glean/private/Lifetime;->Ping:Lmozilla/telemetry/glean/private/Lifetime;
>
> .line 3
102,104d104
< .line 3
< sget-object v9,
Lmozilla/telemetry/glean/private/TimeUnit;->Nanosecond:Lmozilla/telemetry/glean/private/TimeUnit;
<
106c106
< sget-object v6,
Lmozilla/telemetry/glean/private/Lifetime;->Ping:Lmozilla/telemetry/glean/private/Lifetime;
---
> sget-object v9,
Lmozilla/telemetry/glean/private/TimeUnit;->Nanosecond:Lmozilla/telemetry/glean/private/TimeUnit;
131a132,134
> sget-object v4,
Lmozilla/telemetry/glean/private/Lifetime;->Ping:Lmozilla/telemetry/glean/private/Lifetime;
>
> .line 9
136,138d138
< .line 9
< sget-object v7,
Lmozilla/telemetry/glean/private/TimeUnit;->Nanosecond:Lmozilla/telemetry/glean/private/TimeUnit;
<
140c140
< sget-object v4,
Lmozilla/telemetry/glean/private/Lifetime;->Ping:Lmozilla/telemetry/glean/private/Lifetime;
---
> sget-object v7,
Lmozilla/telemetry/glean/private/TimeUnit;->Nanosecond:Lmozilla/telemetry/glean/private/TimeUnit;
159a160,162
> sget-object v11,
Lmozilla/telemetry/glean/private/Lifetime;->Ping:Lmozilla/telemetry/glean/private/Lifetime;
>
> .line 14
164,166d166
< .line 14
< sget-object v14,
Lmozilla/telemetry/glean/private/TimeUnit;->Nanosecond:Lmozilla/telemetry/glean/private/TimeUnit;
<
168c168
< sget-object v11,
Lmozilla/telemetry/glean/private/Lifetime;->Ping:Lmozilla/telemetry/glean/private/Lifetime;
---
> sget-object v14,
Lmozilla/telemetry/glean/private/TimeUnit;->Nanosecond:Lmozilla/telemetry/glean/private/TimeUnit;
```
(that's just one exmplae of a bunch)
Chances are high that we need `glean_parser` `1.28.6` for
`application-services`, too..Tor Browser: 10.0Georg KoppenGeorg Koppenhttps://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40122Locale ordering in BuildConfig is non-deterministic in 10.0a82020-10-13T01:57:21ZGeorg KoppenLocale ordering in BuildConfig is non-deterministic in 10.0a8This is how the smali-diff looks like (just an excerpt):
```
diff -r
gk/tor-browser-10.0a8-android-aarch64-multi-qa/smali_classes2/org/mozilla/fenix/BuildConfig.smali
sysrqb/tor-browser-10.0a8-android-aarch64-multi-qa/smali_classes2/org/...This is how the smali-diff looks like (just an excerpt):
```
diff -r
gk/tor-browser-10.0a8-android-aarch64-multi-qa/smali_classes2/org/mozilla/fenix/BuildConfig.smali
sysrqb/tor-browser-10.0a8-android-aarch64-multi-qa/smali_classes2/org/mozilla/fenix/BuildConfig.smali
20c20
< const-string v0, "ru"
---
> const-string v0, "eu"
22c22
< const-string v1, "hsb"
---
> const-string v1, "hy-AM"
26c26
< const-string v3, "rm"
---
> const-string v3, "kk"
28c28
< const-string v4, "vec"
---
> const-string v4, "eo"
30c30
< const-string v5, "pt-PT"
---
> const-string v5, "gd"
32c32
< const-string v6, "pt-BR"
---
> const-string v6, "es-CL"
34c34
< const-string v7, "iw"
---
> const-string v7, "hu"
36c36
< const-string v8, "te"
---
> const-string v8, "ja"
38c38
< const-string v9, "br"
---
> const-string v9, "in"
40c40
< const-string v10, "kk"
---
> const-string v10, "en-CA"
42c42
< const-string v11, "hu"
---
> const-string v11, "dsb"
44c44
< const-string v12, "en-US"
---
> const-string v12, "ff"
46c46
< const-string v13, "is"
---
> const-string v13, "bn"
```Tor Browser: 10.0Georg KoppenGeorg Koppenhttps://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40125Remove fenix-* projects2020-10-22T22:21:02ZGeorg KoppenRemove fenix-* projectsI think we can clean up our projects considerably by removing all the
fenix-* ones making use of versioning in `rbm.conf`.I think we can clean up our projects considerably by removing all the
fenix-* ones making use of versioning in `rbm.conf`.Tor Browser: 10.0Georg KoppenGeorg Koppenhttps://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40126Update toolchain for Fenix 832020-11-06T19:02:26ZGeorg KoppenUpdate toolchain for Fenix 83Tor Browser: 10.0Georg KoppenGeorg Koppenhttps://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40127Update components for switch to mozilla83-based Fenix2020-11-26T15:59:33ZGeorg KoppenUpdate components for switch to mozilla83-based FenixTor Browser: 10.0Georg KoppenGeorg Koppenhttps://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40129application-services build is missing rustc in PATH2020-10-13T20:59:12ZMatthew Finkelapplication-services build is missing rustc in PATHIn a nightly and testbuild, I see:
```
> Task :full-megazord:preBuild UP-TO-DATE
> Task :full-megazord:preReleaseBuild UP-TO-DATE
> Task :full-megazord:compileReleaseAidl NO-SOURCE
> Task :generateLinkerWrapper
> Task :full-megazord:car...In a nightly and testbuild, I see:
```
> Task :full-megazord:preBuild UP-TO-DATE
> Task :full-megazord:preReleaseBuild UP-TO-DATE
> Task :full-megazord:compileReleaseAidl NO-SOURCE
> Task :generateLinkerWrapper
> Task :full-megazord:cargoBuildArm FAILED
FAILURE: Build failed with an exception.
* What went wrong:
Execution failed for task ':full-megazord:cargoBuildArm'.
> A problem occurred starting process 'command 'rustc''
```
I believe this is because we export the rust path:
```
export PATH=/var/tmp/dist/fenix-rust/bin:$PATH
```
while on disk we have:
```
debug-application-services$ ls /var/tmp/dist/
android-toolchain application-services fenix-as-rust python
```
That is since #40115.Tor Browser: 10.0Georg KoppenGeorg Koppenhttps://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40130Clean up firefox-locale-bundle and firefox projects2020-10-13T20:59:13ZMatthew FinkelClean up firefox-locale-bundle and firefox projectsWith fennec gone, we don't need `firefox-locale-bundle` anymore. And there is still mobile related code in the `firefox` project. The fix for #40029 missed that.With fennec gone, we don't need `firefox-locale-bundle` anymore. And there is still mobile related code in the `firefox` project. The fix for #40029 missed that.Tor Browser: 10.0Georg KoppenGeorg Koppenhttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/4019378.4.0esr-based build is busted on Linux2021-02-11T20:15:20ZGeorg Koppen78.4.0esr-based build is busted on Linux```
17:59.53
/var/tmp/build/firefox-9633b5c7e832/security/sandbox/linux/SandboxFilter.cpp:247:36:
error: use of undeclared identifier 'AT_EMPTY_PATH'
17:59.53 if (fd != AT_FDCWD && (flags & AT_EMPTY_PATH) != 0 &&
17:59.53 ...```
17:59.53
/var/tmp/build/firefox-9633b5c7e832/security/sandbox/linux/SandboxFilter.cpp:247:36:
error: use of undeclared identifier 'AT_EMPTY_PATH'
17:59.53 if (fd != AT_FDCWD && (flags & AT_EMPTY_PATH) != 0 &&
17:59.53 ^
```
Wheezy comes with glibc 2.13 but `AT_EMPTY_PATH` showed up in 2.14 first.Tor Browser: 10.0Georg KoppenGeorg Koppenhttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40177Clean up obsolete preferences in our 000-tor-browser.js2022-10-19T16:47:08ZGeorg KoppenClean up obsolete preferences in our 000-tor-browser.jsA cypherpunk noticed some preferences settings that could get cleaned
up. Notably:
```
pref("browser.policies.testing.disallowEnterprise", true);
pref("extensions.legacy.exceptions",
"{972ce4c6-7e08-4474-a285-3208198ce6fd},torbutton@tor...A cypherpunk noticed some preferences settings that could get cleaned
up. Notably:
```
pref("browser.policies.testing.disallowEnterprise", true);
pref("extensions.legacy.exceptions",
"{972ce4c6-7e08-4474-a285-3208198ce6fd},torbutton@torproject.org");
```
But there might be more. E.g. we could go over the WebGL settings as we
know that there is no pref way anymore for disabling extensions (see:
#40117) while we still set `pref("webgl.disable-extensions", true);`https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40133Bump Rust to 1.43.0 for ESR 782020-11-08T15:37:32ZGeorg KoppenBump Rust to 1.43.0 for ESR 78While looking at the [minimum required Rust
version](https://searchfox.org/mozilla-esr78/source/python/mozboot/mozboot/base.py#161)
to build ESR 78 (1.41.1) I somehow missed that Mozilla is
[actually](https://bugzilla.mozilla.org/show_bu...While looking at the [minimum required Rust
version](https://searchfox.org/mozilla-esr78/source/python/mozboot/mozboot/base.py#161)
to build ESR 78 (1.41.1) I somehow missed that Mozilla is
[actually](https://bugzilla.mozilla.org/show_bug.cgi?id=1632723)
building ESR 78 with
[1.43.0](https://wiki.mozilla.org/Rust_Update_Policy_for_Firefox). We
should do the same to minimize toolchain differences between official
Firefox and Tor Browser builds.
Thanks to a cypherpunk for the reminder.Tor Browser: 10.5Georg KoppenGeorg Koppenhttps://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40134Support release train in android-components build script2020-10-27T22:27:38ZGeorg KoppenSupport release train in android-components build scriptWe have
```
# We want to make sure only our code is built. Overwrite engine-gecko
code we
# don't need. XXX: Take release into account.
```
we need to fix up and likely we don't want to build `assembleGeckoBeta`
either.We have
```
# We want to make sure only our code is built. Overwrite engine-gecko
code we
# don't need. XXX: Take release into account.
```
we need to fix up and likely we don't want to build `assembleGeckoBeta`
either.Tor Browser: 10.0Georg KoppenGeorg Koppenhttps://gitlab.torproject.org/tpo/applications/android-components/-/issues/40027Rebase android-components patches for Fenix 84 beta 2 builds2020-12-01T19:25:24ZGeorg KoppenRebase android-components patches for Fenix 84 beta 2 buildsTor Browser: 10.0https://gitlab.torproject.org/tpo/applications/android-components/-/issues/40028Rebase onto 63.0.92020-12-02T22:20:50ZMatthew FinkelRebase onto 63.0.9Tor Browser: 10.0https://gitlab.torproject.org/tpo/web/tpo/-/issues/171Please post Junior Services Admin job to website2021-04-12T13:10:47ZErin WyattPlease post Junior Services Admin job to websiteInternet Freedom Nonprofit Seeks a Junior Systems Administrator
JUNIOR SYSTEMS ADMINISTRATOR
April 12, 2021
The Tor Project, Inc., a 501(c)(3) nonprofit organization advancing human rights and freedoms by creating and deploying free a...Internet Freedom Nonprofit Seeks a Junior Systems Administrator
JUNIOR SYSTEMS ADMINISTRATOR
April 12, 2021
The Tor Project, Inc., a 501(c)(3) nonprofit organization advancing human rights and freedoms by creating and deploying free and open source anonymity and privacy technologies, is seeking a Junior System Administrator to work on the sysadmin team and help with internal websites and tools.
This Junior Systems Administrator 2021will work as part of a small team responsible for managing the torproject.org servers, which, in turn, allow the Tor Project to create the software we know and love. Work is both synchronous and asynchronous, coordinated over email, IRC, and some voice meetings (over Mumble or Big Blue Button). A personal commitment to free and open source software, good communication and documentation skills, and passion for contributing to the greater good are all essential.
This is a full-time, remote position.
Main responsibilities:
- Maintain websites templates and static site generators (Lektor, Hugo, etc.)
- Use HTML and CSS knowledge for any change necessary in the organization's websites
- Support onion services configuration for external organizations
- Junior sysadmin work and support
Required skills:
- Ability to work in a self-directed and independent way
- Comfortable with working remotely, across time zones
- Strong interpersonal and communication skills; ability to train users in applications and operating system fundamentals and to write basic documentation
- Strong skills with most Linux commands/utilities and familiarity with most basic system administration processes; for example, ability to boot/shut down a machine, add and remove user accounts, use backup programs, manage shared resources (e.g., file systems snapshots, RAID arrays), update DNS zonefiles, and install a server
- Familiarity with the principles and practice of system configuration management using modern declarative tools
- Familiarity with Git, "forges" (GitLab, GitHub), and "merge-request" based workflows, experience with ticketing systems like RT or GitLab issues
- Ability to manage an OpenPGP private/public keypair, verify OpenPGP public keys, and manage SSH private keys securely
- Familiarity with the Python programming language, or related
Required background:
- One to three years of system administration experience
- A degree in computer science or a related field, or equivalent experience
Desirable skills:
- Experience with Lektor
- Experience with Debian system administration and packaging
- Experience with managing large Apache and/or Nginx deployments, Ganeti clusters, and/or Prometheus monitoring servers
- Experience managing users and hosts in LDAP (with e.g. `ldapvi(1)`)
- Experience restoring backups from Bacula
- Familiarity with IPsec tunnel setup
- Ability to write Puppet manifests
- Experience as postmaster of a Postfix site
- Familiarity with Tor's internal services and the network architecture (for example: check.torproject.org, what "bridges" are, the metrics services, what is an "exit relay", etc.)
To apply, submit a cover letter, your CV/resume (including three professional references), and a link to a code sample or some non-trivial software project you have significantly contributed to. In your cover letter, please include the reason you want to work at the Tor Project.
IMPORTANT: Please email application materials in plain text or PDF format, if possible, to job-sysadmin at torproject dot org with “SYSTEM ADMINISTRATOR” in the subject line.
Tor is for everyone, and we are actively working to build a team that represents people from all over the world — people from diverse ethnic, national, and cultural backgrounds – people from all walks of life. We encourage applications from BIPOC, non-cis people, women, and from people in any group that is underrepresented in tech.
The Tor Project's workforce is smart, committed, and hard working. We currently have a paid and contract staff of around 24 developers and operational support people, plus many thousands of volunteers who contribute to our work. The Tor Project is funded in part by government research and development grants, and in part by individual, foundation, and corporate donations.
Salary for this position depends on experience and there is voluntary opt-in salary transparency for employees and contractors.
The Tor Project has a competitive benefits package, including a generous PTO policy, 16 paid holidays per year (including the week between Christmas and New Year's, when the office is closed), and flexible work schedule. Insurance benefits vary by employment status and country of residence.
The Tor Project, Inc., is an equal opportunity, affirmative action employer.GusGushttps://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40140Create own gradle project2020-12-07T09:38:26ZGeorg KoppenCreate own gradle projectRight now the Gradle compiler is included in the android-toolchain project in different versions. It seems to change more often and differently for our mobile projects (above all `application-services`, `android-components`, and `fenix`)...Right now the Gradle compiler is included in the android-toolchain project in different versions. It seems to change more often and differently for our mobile projects (above all `application-services`, `android-components`, and `fenix`) which is causing a toolchain rebuild and subsequent project rebuilding more often than actually needed (why should the `rust` project get rebuilt for all architectures just because the `fenix` compiler changed?).
I think we can solve this by having an own gradle project and depending at least the three above mentioned projects on it. We can use the `pc(c("origin_project"), "var/$foo")` trick to give the right compiler vesion back to the project as they vary widely at the moment.
That way we keep the flexibility for staying close to the actually used compiler versions by Mozilla's projects while only rebuilding the directly affected projects in case a Gradle version bump happened.Tor Browser: 10.0Georg KoppenGeorg Koppenhttps://gitlab.torproject.org/tpo/web/tpo/-/issues/179Use of Capital letters in sentences2021-04-21T23:19:50ZAnushka JainUse of Capital letters in sentencesOn this page - https://www.torproject.org/thank-you/,
the line " we need your help to keep tor secure and safe for millions across the globe. donate now " could be changed to "We need your help to keep tor secure and safe for millions a...On this page - https://www.torproject.org/thank-you/,
the line " we need your help to keep tor secure and safe for millions across the globe. donate now " could be changed to "We need your help to keep tor secure and safe for millions across the globe. Donate now! " to make it grammatically correct.Anushka JainAnushka Jainhttps://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40148Adapt tor-browser-build/tools/signing/nightly/config.yml for a local directory2020-12-09T13:17:56ZGeorg KoppenAdapt tor-browser-build/tools/signing/nightly/config.yml for a local directoryAccording to #40146 we need to "update `rsync_dest` to make it point to a local directory, and `post_rsync_cmd` to run `static-update-component nightlies.tbb.torproject.org`."According to #40146 we need to "update `rsync_dest` to make it point to a local directory, and `post_rsync_cmd` to run `static-update-component nightlies.tbb.torproject.org`."Tor Browser: 10.5boklmboklmhttps://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40155Update toolchain for Fenix 842020-12-02T20:28:46ZGeorg KoppenUpdate toolchain for Fenix 84Tor Browser: 10.5Georg KoppenGeorg Koppenhttps://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40156Update components for switch to mozilla84-based Fenix2021-04-29T15:34:19ZGeorg KoppenUpdate components for switch to mozilla84-based FenixTor Browser: 10.5Georg KoppenGeorg Koppenhttps://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/40161Pick up Go security releases 1.15.5/1.14.122022-02-23T18:25:43ZGeorg KoppenPick up Go security releases 1.15.5/1.14.12Tor Browser: 10.5Georg KoppenGeorg Koppen