* gnu/packages/librewolf.scm (librewolf): Update to 125.0.2-1. Build with LLVM/Clang 18; LLVM 13 (the default) segfaults on build. Minor style tweaks. Change-Id: Ib515f1596b3ce2dd192baebf1a877b3c2dc8d7e2 Signed-off-by: Maxim Cournoyer <maxim.cournoyer@gmail.com>
		
			
				
	
	
		
			622 lines
		
	
	
	
		
			31 KiB
		
	
	
	
		
			Scheme
		
	
	
	
	
	
			
		
		
	
	
			622 lines
		
	
	
	
		
			31 KiB
		
	
	
	
		
			Scheme
		
	
	
	
	
	
| ;;; GNU Guix --- Functional package management for GNU
 | |
| ;;; Copyright © 2013, 2015, 2024 Andreas Enge <andreas@enge.fr>
 | |
| ;;; Copyright © 2013, 2014, 2015, 2016, 2017, 2018, 2019 Ludovic Courtès <ludo@gnu.org>
 | |
| ;;; Copyright © 2014, 2015, 2016, 2017, 2018, 2019, 2020, 2021 Mark H Weaver <mhw@netris.org>
 | |
| ;;; Copyright © 2015 Sou Bunnbu <iyzsong@gmail.com>
 | |
| ;;; Copyright © 2016, 2017, 2018, 2019 Efraim Flashner <efraim@flashner.co.il>
 | |
| ;;; Copyright © 2016 Alex Griffin <a@ajgrf.com>
 | |
| ;;; Copyright © 2017 Clément Lassieur <clement@lassieur.org>
 | |
| ;;; Copyright © 2017, 2018 Nikita <nikita@n0.is>
 | |
| ;;; Copyright © 2017, 2018 ng0 <gillmann@infotropique.org>
 | |
| ;;; Copyright © 2017, 2018, 2020 Tobias Geerinckx-Rice <me@tobias.gr>
 | |
| ;;; Copyright © 2018, 2020, 2022 Ricardo Wurmus <rekado@elephly.net>
 | |
| ;;; Copyright © 2019 Ivan Petkov <ivanppetkov@gmail.com>
 | |
| ;;; Copyright © 2020 Oleg Pykhalov <go.wigust@gmail.com>
 | |
| ;;; Copyright © 2020 Jakub Kądziołka <kuba@kadziolka.net>
 | |
| ;;; Copyright © 2019, 2020 Adrian Malacoda <malacoda@monarch-pass.net>
 | |
| ;;; Copyright © 2020-2023 Jonathan Brielmaier <jonathan.brielmaier@web.de>
 | |
| ;;; Copyright © 2020 Zhu Zihao <all_but_last@163.com>
 | |
| ;;; Copyright © 2021 pineapples <guixuser6392@protonmail.com>
 | |
| ;;; Copyright © 2021 Brice Waegeneire <brice@waegenei.re>
 | |
| ;;; Copyright © 2021, 2022, 2023 John Kehayias <john.kehayias@protonmail.com>
 | |
| ;;; Copyright © 2022 Pierre Langlois <pierre.langlois@gmx.com>
 | |
| ;;; Copyright © 2023 Tomas Volf <wolf@wolfsden.cz>
 | |
| ;;; Copyright © 2023 Ian Eure <ian@retrospec.tv>
 | |
| ;;;
 | |
| ;;; This file is part of GNU Guix.
 | |
| ;;;
 | |
| ;;; GNU Guix is free software; you can redistribute it and/or modify it
 | |
| ;;; under the terms of the GNU General Public License as published by
 | |
| ;;; the Free Software Foundation; either version 3 of the License, or (at
 | |
| ;;; your option) any later version.
 | |
| ;;;
 | |
| ;;; GNU Guix is distributed in the hope that it will be useful, but
 | |
| ;;; WITHOUT ANY WARRANTY; without even the implied warranty of
 | |
| ;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 | |
| ;;; GNU General Public License for more details.
 | |
| ;;;
 | |
| ;;; You should have received a copy of the GNU General Public License
 | |
| ;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.
 | |
| 
 | |
| 
 | |
| (define-module (gnu packages librewolf)
 | |
|   #:use-module (guix build-system gnu)
 | |
|   #:use-module (guix build-system cargo)
 | |
|   #:use-module (guix build-system trivial)
 | |
|   #:use-module (guix download)
 | |
|   #:use-module ((guix licenses) #:prefix license:)
 | |
|   #:use-module (guix gexp)
 | |
|   #:use-module (guix packages)
 | |
|   #:use-module (guix utils)
 | |
|   #:use-module ((guix build utils) #:select (alist-replace))
 | |
| 
 | |
|   #:use-module (gnu packages)
 | |
|   #:use-module (gnu packages assembly)
 | |
|   #:use-module (gnu packages autotools)
 | |
|   #:use-module (gnu packages base)
 | |
|   #:use-module (gnu packages bash)
 | |
|   #:use-module (gnu packages compression)
 | |
|   #:use-module (gnu packages crates-io)
 | |
|   #:use-module (gnu packages cups)
 | |
|   #:use-module (gnu packages fontutils)
 | |
|   #:use-module (gnu packages gl)
 | |
|   #:use-module (gnu packages glib)
 | |
|   #:use-module (gnu packages gnome)
 | |
|   #:use-module (gnu packages gtk)
 | |
|   #:use-module (gnu packages hunspell)
 | |
|   #:use-module (gnu packages icu4c)
 | |
|   #:use-module (gnu packages image)
 | |
|   #:use-module (gnu packages jemalloc)
 | |
|   #:use-module (gnu packages kerberos)
 | |
|   #:use-module (gnu packages libcanberra)
 | |
|   #:use-module (gnu packages libevent)
 | |
|   #:use-module (gnu packages libffi)
 | |
|   #:use-module (gnu packages linux)
 | |
|   #:use-module (gnu packages llvm)
 | |
|   #:use-module (gnu packages m4)
 | |
|   #:use-module (gnu packages node)
 | |
|   #:use-module (gnu packages nss)
 | |
|   #:use-module (gnu packages pciutils)
 | |
|   #:use-module (gnu packages perl)
 | |
|   #:use-module (gnu packages pkg-config)
 | |
|   #:use-module (gnu packages pulseaudio)
 | |
|   #:use-module (gnu packages python)
 | |
|   #:use-module (gnu packages rust)
 | |
|   #:use-module (gnu packages rust-apps)
 | |
|   #:use-module (gnu packages speech)
 | |
|   #:use-module (gnu packages sqlite)
 | |
|   #:use-module (gnu packages video)
 | |
|   #:use-module (gnu packages xdisorg)
 | |
|   #:use-module (gnu packages xorg))
 | |
| 
 | |
| ;; Define the versions of rust needed to build librewolf, trying to match
 | |
| ;; upstream.  See the file taskcluster/ci/toolchain/rust.yml at
 | |
| ;; https://searchfox.org under the particular firefox release, like
 | |
| ;; mozilla-esr102.
 | |
| (define rust-librewolf rust) ; 1.75 is the default in Guix, 1.65 is the minimum.
 | |
| 
 | |
| ;; Update this id with every update to its release date.
 | |
| ;; It's used for cache validation and therefore can lead to strange bugs.
 | |
| ;; ex: date '+%Y%m%d%H%M%S'
 | |
| (define %librewolf-build-id "20240427150329")
 | |
| 
 | |
| (define-public librewolf
 | |
|   (package
 | |
|     (name "librewolf")
 | |
|     (version "125.0.2-1")
 | |
|     (source
 | |
|      (origin
 | |
|        (method url-fetch)
 | |
| 
 | |
|        (uri (string-append "https://gitlab.com/api/v4/projects/32320088/"
 | |
|                            "packages/generic/librewolf-source/"
 | |
|                            version
 | |
|                            "/librewolf-"
 | |
|                            version
 | |
|                            ".source.tar.gz"))
 | |
|        (sha256
 | |
|         (base32 "09qzdaq9l01in9h4q14vyinjvvffycha2iyjqj5p4dd5jh6q5zma"))))
 | |
|     (build-system gnu-build-system)
 | |
|     (arguments
 | |
|      (list
 | |
|       #:configure-flags #~(let ((clang #$(this-package-native-input "clang")))
 | |
|                             `("--enable-application=browser"
 | |
| 
 | |
|                               ;; Configuration
 | |
|                               "--without-wasm-sandboxed-libraries"
 | |
|                               "--with-system-jpeg"
 | |
|                               "--with-system-zlib"
 | |
|                               "--with-system-png"
 | |
|                               "--with-system-webp"
 | |
|                               "--with-system-icu"
 | |
|                               "--with-system-libvpx"
 | |
|                               "--with-system-libevent"
 | |
|                               "--with-system-ffi"
 | |
|                               "--enable-system-pixman"
 | |
|                               "--enable-jemalloc"
 | |
| 
 | |
|                               ;; see https://bugs.gnu.org/32833
 | |
|                               "--with-system-nspr"
 | |
|                               "--with-system-nss"
 | |
| 
 | |
|                               ,(string-append "--with-clang-path=" clang
 | |
|                                               "/bin/clang")
 | |
|                               ,(string-append "--with-libclang-path=" clang
 | |
|                                               "/lib")
 | |
| 
 | |
|                               ;; Distribution
 | |
|                               "--with-distribution-id=org.guix"
 | |
|                               "--with-app-name=librewolf"
 | |
|                               "--with-app-basename=LibreWolf"
 | |
|                               "--with-branding=browser/branding/librewolf"
 | |
| 
 | |
|                               ;; Features
 | |
|                               "--disable-tests"
 | |
|                               "--disable-updater"
 | |
|                               "--enable-pulseaudio"
 | |
|                               "--disable-crashreporter"
 | |
|                               "--allow-addon-sideload"
 | |
|                               "--with-unsigned-addon-scopes=app,system"
 | |
|                               "--disable-eme"
 | |
| 
 | |
|                               ;; Build details
 | |
|                               "--disable-debug"
 | |
|                               "--enable-rust-simd"
 | |
|                               "--enable-release"
 | |
|                               "--enable-optimize"
 | |
|                               "--enable-strip"
 | |
|                               "--enable-hardening"
 | |
|                               "--disable-elf-hack"))
 | |
|       #:imported-modules %cargo-utils-modules
 | |
|       #:modules `((ice-9 regex)
 | |
|                   (ice-9 string-fun)
 | |
|                   (ice-9 ftw)
 | |
|                   (srfi srfi-1)
 | |
|                   (srfi srfi-26)
 | |
|                   (rnrs bytevectors)
 | |
|                   (rnrs io ports)
 | |
|                   (guix elf)
 | |
|                   (guix build gremlin)
 | |
|                   ,@%gnu-build-system-modules)
 | |
|       #:phases #~(modify-phases %standard-phases
 | |
|                    (add-after 'unpack 'fix-preferences
 | |
|                      (lambda* (#:key inputs #:allow-other-keys)
 | |
|                        (let ((port (open-file "browser/app/profile/firefox.js"
 | |
|                                     "a")))
 | |
|                          (define (write-setting key value)
 | |
|                            (format port "~%pref(\"~a\", ~a);~%" key value)
 | |
|                            (format #t
 | |
|                             "fix-preferences: setting value of ~a to ~a~%" key
 | |
|                             value))
 | |
| 
 | |
|                          ;; We should allow the sandbox to read the store directory,
 | |
|                          ;; because the sandbox has access to /usr on FHS distros.
 | |
|                          (write-setting
 | |
|                           "security.sandbox.content.read_path_whitelist"
 | |
|                           (string-append "\""
 | |
|                                          (%store-directory) "/\""))
 | |
| 
 | |
|                          ;; XDG settings should be managed by Guix.
 | |
|                          (write-setting "browser.shell.checkDefaultBrowser"
 | |
|                                         "false")
 | |
|                          (close-port port))))
 | |
|                    (add-after 'fix-preferences 'fix-ffmpeg-runtime-linker
 | |
|                      (lambda* (#:key inputs #:allow-other-keys)
 | |
|                        (let* ((ffmpeg (assoc-ref inputs "ffmpeg"))
 | |
|                               (libavcodec (string-append ffmpeg
 | |
|                                                          "/lib/libavcodec.so")))
 | |
|                          ;; Arrange to load libavcodec.so by its absolute file name.
 | |
|                          (substitute* "dom/media/platforms/ffmpeg/FFmpegRuntimeLinker.cpp"
 | |
|                            (("libavcodec\\.so")
 | |
|                             libavcodec)))))
 | |
|                    (add-after 'patch-source-shebangs 'patch-cargo-checksums
 | |
|                      (lambda _
 | |
|                        (use-modules (guix build cargo-utils))
 | |
|                        (let ((null-hash
 | |
|                               ;; This is the SHA256 output of an empty string.
 | |
|                               (string-append
 | |
|                                "e3b0c44298fc1c149afbf4c8996fb924"
 | |
|                                "27ae41e4649b934ca495991b7852b855")))
 | |
|                          (for-each (lambda (file)
 | |
|                                      (format #t
 | |
|                                       "patch-cargo-checksums: patching checksums in ~a~%"
 | |
|                                       file)
 | |
|                                      (substitute* file
 | |
|                                        (("(checksum = )\".*\"" all name)
 | |
|                                         (string-append name "\"" null-hash
 | |
|                                                        "\""))))
 | |
|                                    (find-files "." "Cargo\\.lock$"))
 | |
|                          (for-each generate-all-checksums
 | |
|                                    '("build"
 | |
|                                      "dom/media"
 | |
|                                      "dom/webauthn"
 | |
|                                      "gfx"
 | |
|                                      "intl"
 | |
|                                      "js"
 | |
|                                      "media"
 | |
|                                      "modules"
 | |
|                                      "mozglue/static/rust"
 | |
|                                      "netwerk"
 | |
|                                      "remote"
 | |
|                                      "security/manager/ssl"
 | |
|                                      "servo"
 | |
|                                      "storage"
 | |
|                                      "third_party/rust"
 | |
|                                      "toolkit"
 | |
|                                      "xpcom/rust"
 | |
|                                      "services")))))
 | |
|                    (add-after 'patch-cargo-checksums 'remove-cargo-frozen-flag
 | |
|                      (lambda _
 | |
|                        ;; Remove --frozen flag from cargo invokation, otherwise it'll
 | |
|                        ;; complain that it's not able to change Cargo.lock.
 | |
|                        ;; https://bugzilla.mozilla.org/show_bug.cgi?id=1726373
 | |
|                        (substitute* "build/RunCbindgen.py"
 | |
|                          (("args.append\\(\"--frozen\"\\)") "pass"))))
 | |
|                    (delete 'bootstrap)
 | |
|                    (add-before 'configure 'patch-SpeechDispatcherService.cpp
 | |
|                      (lambda _
 | |
|                        (let* ((lib "libspeechd.so.2")
 | |
|                               (file (string-append
 | |
|                                      "dom/media/webspeech/synth/"
 | |
|                                      "speechd/SpeechDispatcherService.cpp"))
 | |
|                               (old-content (call-with-input-file file
 | |
|                                              get-string-all)))
 | |
|                          (substitute
 | |
|                           file
 | |
|                           `((,(format #f "~s" lib) unquote
 | |
|                              (lambda (line _)
 | |
|                                (string-replace-substring
 | |
|                                 line lib
 | |
|                                 (string-append #$speech-dispatcher
 | |
|                                                "/lib/" lib))))))
 | |
|                          (if (string=? old-content
 | |
|                                        (call-with-input-file file
 | |
|                                          get-string-all))
 | |
|                              (error
 | |
|                               "substitute did nothing, phase requires an update")))))
 | |
|                    (add-before 'configure 'set-build-id
 | |
|                      ;; Build will write the timestamp to output, which is harmful
 | |
|                      ;; for reproducibility, so change it to a fixed date.  Use a
 | |
|                      ;; separate phase for easier modification with inherit.
 | |
|                      (lambda _
 | |
|                        (setenv "MOZ_BUILD_DATE"
 | |
|                                #$%librewolf-build-id)))
 | |
|                    (replace 'configure
 | |
|                      (lambda* (#:key inputs outputs configure-flags
 | |
|                                #:allow-other-keys)
 | |
|                        (setenv "AUTOCONF"
 | |
|                                (string-append (assoc-ref inputs "autoconf")
 | |
|                                               "/bin/autoconf"))
 | |
|                        (setenv "SHELL"
 | |
|                                (which "bash"))
 | |
|                        (setenv "CONFIG_SHELL"
 | |
|                                (which "bash"))
 | |
|                        (setenv "MACH_BUILD_PYTHON_NATIVE_PACKAGE_SOURCE"
 | |
|                                "system")
 | |
|                        ;; This should use the host info probably (does it
 | |
|                        ;; build on non-x86_64 though?)
 | |
|                        (setenv "GUIX_PYTHONPATH"
 | |
|                                (string-append (getcwd)
 | |
|                                 "/obj-x86_64-pc-linux-gnu/_virtualenvs/build"))
 | |
| 
 | |
|                        ;; Use Clang, Clang is 2x faster than GCC
 | |
|                        (setenv "AR" "llvm-ar")
 | |
|                        (setenv "NM" "llvm-nm")
 | |
|                        (setenv "CC" "clang")
 | |
|                        (setenv "CXX" "clang++")
 | |
|                        (setenv "MOZ_NOSPAM" "1")
 | |
|                        (setenv "MOZ_APP_NAME" "librewolf")
 | |
| 
 | |
|                        (setenv "MOZBUILD_STATE_PATH"
 | |
|                                (getcwd))
 | |
| 
 | |
|                        (let* ((mozconfig (string-append (getcwd) "/mozconfig"))
 | |
|                               (out (assoc-ref outputs "out"))
 | |
|                               (flags (cons (string-append "--prefix=" out)
 | |
|                                            configure-flags)))
 | |
|                          (format #t "build directory: ~s~%"
 | |
|                                  (getcwd))
 | |
|                          (format #t "configure flags: ~s~%" flags)
 | |
| 
 | |
|                          (define write-flags
 | |
|                            (lambda flags
 | |
|                              (display (string-join (map (cut string-append
 | |
|                                                          "ac_add_options " <>)
 | |
|                                                         flags) "\n"))
 | |
|                              (display "\n")))
 | |
|                          (with-output-to-file mozconfig
 | |
|                            (lambda ()
 | |
|                              (apply write-flags flags)
 | |
|                              ;; The following option unsets Telemetry
 | |
|                              ;; Reporting. With the Addons Fiasco,
 | |
|                              ;; Mozilla was found to be collecting
 | |
|                              ;; user's data, including saved passwords
 | |
|                              ;; and web form data, without users
 | |
|                              ;; consent. Mozilla was also found
 | |
|                              ;; shipping updates to systems without
 | |
|                              ;; the user's knowledge or permission.
 | |
|                              ;; As a result of this, use the following
 | |
|                              ;; command to permanently disable
 | |
|                              ;; telemetry reporting.
 | |
|                              (display "unset MOZ_TELEMETRY_REPORTING\n")
 | |
|                              (display "mk_add_options MOZ_CRASHREPORTER=0\n")
 | |
|                              (display "mk_add_options MOZ_DATA_REPORTING=0\n")
 | |
|                              (display
 | |
|                               "mk_add_options MOZ_SERVICES_HEALTHREPORT=0")
 | |
|                              (display
 | |
|                               "mk_add_options MOZ_TELEMETRY_REPORTING=0")))
 | |
|                          (setenv "MOZCONFIG" mozconfig))
 | |
|                        (invoke "./mach" "configure")))
 | |
|                    (add-before 'build 'fix-addons-placeholder
 | |
|                      (lambda _
 | |
|                        (substitute* "toolkit/locales/en-US/toolkit/about/aboutAddons.ftl"
 | |
|                          (("addons.mozilla.org")
 | |
|                           "gnuzilla.gnu.org"))))
 | |
|                    (replace 'build
 | |
|                      (lambda* (#:key (make-flags '())
 | |
|                                (parallel-build? #t) #:allow-other-keys)
 | |
|                        (apply invoke "./mach" "build"
 | |
|                               ;; mach will use parallel build if possible by default
 | |
|                               `(,@(if parallel-build?
 | |
|                                       '()
 | |
|                                       '("-j1")) ,@make-flags))))
 | |
|                    (add-after 'build 'neutralise-store-references
 | |
|                      (lambda _
 | |
|                        ;; Mangle the store references to compilers &
 | |
|                        ;; other build tools in about:buildconfig,
 | |
|                        ;; reducing the package's closure by 1 GiB on
 | |
|                        ;; x86-64.
 | |
|                        (let* ((build-dir (car (scandir "."
 | |
|                                                        (cut string-prefix?
 | |
|                                                             "obj-" <>))))
 | |
|                               (file (string-append build-dir
 | |
|                                      "/dist/bin/chrome/toolkit/"
 | |
|                                      "content/global/buildconfig.html")))
 | |
|                          (substitute* file
 | |
|                            (((format #f "(~a/)([0-9a-df-np-sv-z]{32})"
 | |
|                                      (regexp-quote (%store-directory)))
 | |
|                              _ store hash)
 | |
|                             (string-append store
 | |
|                              (string-take hash 8)
 | |
|                              "<!-- Guix: not a runtime dependency -->"
 | |
|                              (string-drop hash 8)))))))
 | |
|                    (replace 'install
 | |
|                      (lambda _
 | |
|                        (invoke "./mach" "install")))
 | |
|                    (add-after 'install 'remove-duplicate-bin
 | |
|                      (lambda* (#:key outputs #:allow-other-keys)
 | |
|                        (delete-file (string-append #$output
 | |
|                                      "/lib/librewolf/librewolf-bin"))))
 | |
|                    (add-after 'install 'wrap-glxtest
 | |
|                      ;; glxtest uses dlopen() to load mesa and pci
 | |
|                      ;; libs, wrap it to set LD_LIBRARY_PATH.
 | |
|                      (lambda* (#:key inputs outputs #:allow-other-keys)
 | |
|                        (let* ((out (assoc-ref outputs "out"))
 | |
|                               (lib (string-append out "/lib"))
 | |
|                               (libs (map
 | |
|                                      (lambda (lib-name)
 | |
|                                        (string-append (assoc-ref inputs
 | |
|                                                                  lib-name)
 | |
|                                                       "/lib"))
 | |
|                                      '("mesa" "pciutils"))))
 | |
|                          (wrap-program (car (find-files lib "^glxtest$"))
 | |
|                            `("LD_LIBRARY_PATH" prefix ,libs)))))
 | |
|                    (add-after 'install 'patch-config
 | |
|                      (lambda* (#:key inputs #:allow-other-keys)
 | |
|                        (let ((lib (string-append #$output "/lib/librewolf"))
 | |
|                              (config-file "librewolf.cfg"))
 | |
| 
 | |
|                          ;; Required for Guix packaged extensions
 | |
|                          ;; SCOPE_PROFILE=1, SCOPE_APPLICATION=4, SCOPE_SYSTEM=8
 | |
|                          ;; Default is 5.
 | |
|                          (substitute* (in-vicinity lib config-file)
 | |
|                            (("defaultPref\\(\"extensions.enabledScopes\", 5\\)")
 | |
|                             "defaultPref(\"extensions.enabledScopes\", 13)"))
 | |
|                          ;; Use Mozzarella addons repo.
 | |
|                          (call-with-port
 | |
|                              (open-file
 | |
|                               (in-vicinity lib config-file)
 | |
|                               "a")
 | |
|                            (lambda (port)
 | |
|                              ;; Add-ons panel (see settings.js in Icecat source).
 | |
|                              (for-each
 | |
|                               (lambda (pref)
 | |
|                                 (format port
 | |
|                                         "defaultPref(~s, ~s);~%"
 | |
|                                         (car pref)
 | |
|                                         (cdr pref)))
 | |
|                               `(("extensions.getAddons.search.browseURL"
 | |
|                                  ,(string-append
 | |
|                                    "https://gnuzilla.gnu.org/mozzarella/"
 | |
|                                    "search.php?q=%TERMS%"))
 | |
|                                 ("extensions.getAddons.get.url" .
 | |
|                                  "https://gnuzilla.gnu.org/mozzarella")
 | |
|                                 ("extensions.getAddons.link.url" .
 | |
|                                  "https://gnuzilla.gnu.org/mozzarella")
 | |
|                                 ("extensions.getAddons.discovery.api_url" .
 | |
|                                  "https://gnuzilla.gnu.org/mozzarella")
 | |
|                                 ("extensions.getAddons.langpacks.url" .
 | |
|                                  "https://gnuzilla.gnu.org/mozzarella")
 | |
|                                 ("lightweightThemes.getMoreURL" .
 | |
|                                  "https://gnuzilla.gnu.org/mozzarella"))))))))
 | |
|                    (add-after 'install 'wrap-program
 | |
|                      (lambda* (#:key inputs outputs #:allow-other-keys)
 | |
|                        ;; The following two functions are from Guix's icecat package in
 | |
|                        ;; (gnu packages gnuzilla).  See commit
 | |
|                        ;; b7a0935420ee630a29b7e5ac73a32ba1eb24f00b.
 | |
|                        (define (runpath-of lib)
 | |
|                          (call-with-input-file lib
 | |
|                            (compose elf-dynamic-info-runpath elf-dynamic-info
 | |
|                                     parse-elf get-bytevector-all)))
 | |
|                        (define (runpaths-of-input label)
 | |
|                          (let* ((dir (string-append (assoc-ref inputs label)
 | |
|                                                     "/lib"))
 | |
|                                 (libs (find-files dir "\\.so$")))
 | |
|                            (append-map runpath-of libs)))
 | |
|                        (let* ((out (assoc-ref outputs "out"))
 | |
|                               (lib (string-append out "/lib"))
 | |
|                               (libs (map
 | |
|                                      (lambda (lib-name)
 | |
|                                        (string-append (assoc-ref inputs
 | |
|                                                                  lib-name)
 | |
|                                                       "/lib"))
 | |
|                                      '("mesa" "libpng-apng" "libnotify" "libva"
 | |
|                                        "pulseaudio" "gtk+" "pipewire"
 | |
|                                        ;; For U2F and WebAuthn
 | |
|                                        "eudev")))
 | |
| 
 | |
|                               ;; VA-API is run in the RDD (Remote Data Decoder) sandbox
 | |
|                               ;; and must be explicitly given access to files it needs.
 | |
|                               ;; Rather than adding the whole store (as Nix had
 | |
|                               ;; upstream do, see
 | |
|                               ;; <https://github.com/NixOS/nixpkgs/pull/165964> and
 | |
|                               ;; linked upstream patches), we can just follow the
 | |
|                               ;; runpaths of the needed libraries to add everything to
 | |
|                               ;; LD_LIBRARY_PATH.  These will then be accessible in the
 | |
|                               ;; RDD sandbox.
 | |
|                               (rdd-whitelist (map (cut string-append <> "/")
 | |
|                                                   (delete-duplicates (append-map
 | |
|                                                                       runpaths-of-input
 | |
|                                                                       '("mesa"
 | |
|                                                                         "ffmpeg")))))
 | |
|                               (gtk-share (string-append (assoc-ref inputs
 | |
|                                                                    "gtk+")
 | |
|                                                         "/share")))
 | |
|                          (wrap-program (car (find-files lib "^librewolf$"))
 | |
|                            `("LD_LIBRARY_PATH" prefix
 | |
|                              (,@libs ,@rdd-whitelist))
 | |
|                            `("XDG_DATA_DIRS" prefix
 | |
|                              (,gtk-share))
 | |
|                            `("MOZ_LEGACY_PROFILES" =
 | |
|                              ("1"))
 | |
|                            `("MOZ_ALLOW_DOWNGRADE" =
 | |
|                              ("1"))))))
 | |
|                    (add-after 'wrap-program 'install-desktop-entry
 | |
|                      (lambda* (#:key outputs #:allow-other-keys)
 | |
|                        (let* ((desktop-file
 | |
|                                "taskcluster/docker/firefox-snap/firefox.desktop")
 | |
|                               (applications (string-append #$output
 | |
|                                              "/share/applications")))
 | |
|                          (substitute* desktop-file
 | |
|                            (("^Exec=firefox")
 | |
|                             (string-append "Exec="
 | |
|                                            #$output "/bin/librewolf"))
 | |
|                            ;; "Firefox" -> "LibreWolf" everywhere
 | |
|                            (("Firefox")
 | |
|                             "LibreWolf")
 | |
|                            ;; Remove non-Latin translations.
 | |
|                            (("^Name\\[(ar|bn)\\].*$")
 | |
|                             "")
 | |
|                            (("^Icon=.*")
 | |
|                             (string-append "Icon="
 | |
|                              #$output
 | |
|                              "/share/icons/hicolor/128x128/apps/librewolf.png
 | |
| "))
 | |
|                            ;; These commands were changed.
 | |
|                            (("-NewWindow")
 | |
|                             "-new-window")
 | |
|                            (("-NewPrivateWindow")
 | |
|                             "-new-private-window")
 | |
|                            (("StartupNotify=true")
 | |
|                             "StartupNotify=true
 | |
| StartupWMClass=Navigator"))
 | |
|                          (copy-file desktop-file "librewolf.desktop")
 | |
|                          (install-file "librewolf.desktop" applications))))
 | |
|                    (add-after 'install-desktop-entry 'install-icons
 | |
|                      (lambda* (#:key outputs #:allow-other-keys)
 | |
|                        (let ((icon-source-dir (string-append #$output
 | |
|                                                "/lib/librewolf/browser/"
 | |
|                                                "chrome/icons/default")))
 | |
|                          (for-each (lambda (size)
 | |
|                                      (let ((dest (string-append #$output
 | |
|                                                   "/share/icons/hicolor/"
 | |
|                                                   size
 | |
|                                                   "x"
 | |
|                                                   size
 | |
|                                                   "/apps")))
 | |
|                                        (mkdir-p dest)
 | |
|                                        (symlink (string-append icon-source-dir
 | |
|                                                  "/default" size ".png")
 | |
|                                                 (string-append dest
 | |
|                                                  "/librewolf.png"))))
 | |
|                                    '("16" "32" "48" "64" "128"))))))
 | |
| 
 | |
|       ;; Test will significantly increase build time but with little rewards.
 | |
|       #:tests? #f
 | |
| 
 | |
|       ;; WARNING: Parallel build will consume lots of memory!
 | |
|       ;; If you have encountered OOM issue in build phase, try disable it.
 | |
|       #:parallel-build? #t
 | |
| 
 | |
|       ;; Some dynamic lib was determined at runtime, so rpath check may fail.
 | |
|       #:validate-runpath? #f))
 | |
|     (inputs (list bash-minimal
 | |
|                   bzip2
 | |
|                   cairo
 | |
|                   cups
 | |
|                   dbus-glib
 | |
|                   freetype
 | |
|                   ffmpeg
 | |
|                   gdk-pixbuf
 | |
|                   glib
 | |
|                   gtk+
 | |
|                   gtk+-2
 | |
|                   hunspell
 | |
|                   icu4c-73
 | |
|                   jemalloc
 | |
|                   libcanberra
 | |
|                   libevent
 | |
|                   libffi
 | |
|                   libgnome
 | |
|                   libjpeg-turbo
 | |
|                   libnotify
 | |
|                   libpng-apng
 | |
|                   libva
 | |
|                   libvpx
 | |
|                   libwebp
 | |
|                   libxcomposite
 | |
|                   libxft
 | |
|                   libxinerama
 | |
|                   libxscrnsaver
 | |
|                   libxt
 | |
|                   mesa
 | |
|                   mit-krb5
 | |
|                   nspr
 | |
|                   nss/fixed
 | |
|                   pango
 | |
|                   pciutils
 | |
|                   pipewire
 | |
|                   pixman
 | |
|                   pulseaudio
 | |
|                   speech-dispatcher
 | |
|                   sqlite
 | |
|                   startup-notification
 | |
|                   eudev
 | |
|                   unzip
 | |
|                   zip
 | |
|                   zlib))
 | |
|     (native-inputs (list alsa-lib
 | |
|                          autoconf-2.13
 | |
|                          `(,rust-librewolf "cargo")
 | |
|                          clang-18
 | |
|                          llvm-18
 | |
|                          m4
 | |
|                          nasm
 | |
|                          node-lts
 | |
|                          perl
 | |
|                          pkg-config
 | |
|                          python
 | |
|                          rust-librewolf
 | |
|                          rust-cbindgen-0.26
 | |
|                          which
 | |
|                          yasm))
 | |
|     (home-page "https://librewolf.net/")
 | |
|     (synopsis
 | |
|      "Custom version of Firefox, focused on privacy, security and freedom")
 | |
|     (description
 | |
|      "LibreWolf is designed to increase protection against tracking and
 | |
| fingerprinting techniques, while also including a few security improvements.
 | |
| This is achieved through our privacy and security oriented settings and
 | |
| patches.  LibreWolf also aims to remove all the telemetry, data collection and
 | |
| annoyances, as well as disabling anti-freedom features like DRM.")
 | |
|     (license license:mpl2.0)))
 |