Commit graph

598 commits

Author SHA1 Message Date
Mikhail Novosyolov
cde3da9b0b upd: 91.0.4472.101 -> 91.0.4472.114 2021-06-26 23:46:28 +03:00
Mikhail Novosyolov
a49a5dc56c upd: 91.0.4472.77 > 91.0.4472.101 (fixed critical CVEs) 2021-06-11 17:25:11 +03:00
Mikhail Novosyolov
a76b281eb8 Fix building with glibc from rosa2016.1
Removed patch fixed it in one place, but now the same fix is required in another place,
make a more generic solution (borrow it from systemd)
(XXX is mixing LGPL with Apache 2.0 OK here..?)

The error was the following:

```
[16040/48909] CXX obj/mojo/core/impl_for_embedder/channel_linux.o
FAILED: obj/mojo/core/impl_for_embedder/channel_linux.o
/opt/llvm12/bin/clang++ -MMD -MF obj/mojo/core/impl_for_embedder/channel_linux.o.d -DMOJO_SYSTEM_IMPL_IMPLEMENTATION -DUSE_UDEV -DUSE_AURA=1 -DUSE_GLIB=1 -DUSE_NSS_CERTS=1 -DUSE_OZONE=1 -DUSE_X11=1 -DOFFICIAL_BUILD -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -DNO_UNWIND_TABLES -D_GNU_SOURCE -DCR_CLANG_REVISION=\"llvmorg-13-init-6429-g0e92cbd6-2\" -D__STDC_CONSTANT_MACROS -D__STDC_FORMAT_MACROS -D_FORTIFY_SOURCE=2 -D_LIBCPP_ABI_UNSTABLE -D_LIBCPP_DISABLE_VISIBILITY_ANNOTATIONS -D_LIBCXXABI_DISABLE_VISIBILITY_ANNOTATIONS -D_LIBCPP_ENABLE_NODISCARD -D_LIBCPP_HAS_NO_VENDOR_AVAILABILITY_ANNOTATIONS -DCR_LIBCXX_REVISION=8fa87946779682841e21e2da977eccfb6cb3bded -DNDEBUG -DNVALGRIND -DDYNAMIC_ANNOTATIONS_ENABLED=0 -DGLIB_VERSION_MAX_ALLOWED=GLIB_VERSION_2_40 -DGLIB_VERSION_MIN_REQUIRED=GLIB_VERSION_2_40 -I../.. -Igen -I../../third_party/perfetto/include -Igen/third_party/perfetto/build_config -Igen/third_party/perfetto -I../../third_party/abseil-cpp -I../../third_party/boringssl/src/include -I../../third_party/protobuf/src -Igen/protoc_out -fno-delete-null-pointer-checks -fno-ident -fno-strict-aliasing --param=ssp-buffer-size=4 -fstack-protector -fno-unwind-tables -fno-asynchronous-unwind-tables -fPIC -pthread -fcolor-diagnostics -fmerge-all-constants -fcrash-diagnostics-dir=../../tools/clang/crashreports -mllvm -instcombine-lower-dbg-declare=0 -flto=thin -fsplit-lto-unit -fwhole-program-vtables -fcomplete-member-pointers -m64 -march=x86-64 -msse3 -no-canonical-prefixes -Wall -Wextra -Wimplicit-fallthrough -Wunreachable-code -Wthread-safety -Wextra-semi -Wno-missing-field-initializers -Wno-unused-parameter -Wno-c++11-narrowing -Wno-unneeded-internal-declaration -Wno-undefined-var-template -Wno-psabi -Wno-ignored-pragma-optimize -Wno-implicit-int-float-conversion -Wno-final-dtor-non-final-class -Wno-builtin-assume-aligned-alignment -Wno-deprecated-copy -Wno-non-c-typedef-for-linkage -Wno-max-tokens -fno-omit-frame-pointer -g0 -ftrivial-auto-var-init=pattern -fsanitize=cfi-vcall -fsanitize-blacklist=../../tools/cfi/ignores.txt -fsanitize=cfi-icall -fvisibility=hidden -Wheader-hygiene -Wstring-conversion -Wtautological-overlap-compare -Wshadow -O2 -fdata-sections -ffunction-sections -I/usr/include/glib-2.0 -I/usr/lib64/glib-2.0/include -DPROTOBUF_ALLOW_DEPRECATED=1 -std=c++14 -fno-trigraphs -Wno-trigraphs -fno-exceptions -fno-rtti -nostdinc++ -isystem../../buildtools/third_party/libc++/trunk/include -isystem../../buildtools/third_party/libc++abi/trunk/include -fvisibility-inlines-hidden -c ../../mojo/core/channel_linux.cc -o obj/mojo/core/impl_for_embedder/channel_linux.o
../../mojo/core/channel_linux.cc:109:29: error: use of undeclared identifier 'F_SEAL_SEAL'
constexpr int kMemFDSeals = F_SEAL_SEAL | F_SEAL_SHRINK | F_SEAL_GROW;
                            ^
../../mojo/core/channel_linux.cc:109:43: error: use of undeclared identifier 'F_SEAL_SHRINK'
constexpr int kMemFDSeals = F_SEAL_SEAL | F_SEAL_SHRINK | F_SEAL_GROW;
                                          ^
../../mojo/core/channel_linux.cc:109:59: error: use of undeclared identifier 'F_SEAL_GROW'
constexpr int kMemFDSeals = F_SEAL_SEAL | F_SEAL_SHRINK | F_SEAL_GROW;
                                                          ^
../../mojo/core/channel_linux.cc:153:23: error: use of undeclared identifier 'F_ADD_SEALS'
  if (fcntl(fd.get(), F_ADD_SEALS, kMemFDSeals) < 0) {
                      ^
../../mojo/core/channel_linux.cc:165:32: error: use of undeclared identifier 'F_GET_SEALS'
  if ((seals = fcntl(fd.get(), F_GET_SEALS)) < 0) {
                               ^
5 errors generated.
```
2021-06-05 13:53:00 +03:00
Mikhail Novosyolov
df7efee6e6 Disable thin LTO on 32 bit trying to reduce memory usage when linking 2021-06-04 13:19:19 +03:00
Mikhail Novosyolov
1b73bbc6e2 BR libcurl
```
DEBUG: FAILED: obj/third_party/crashpad/crashpad/util/util/http_transport_libcurl.o
DEBUG: /opt/llvm12/bin/clang++ -MMD -MF obj/third_party/crashpad/crashpad/util/util/http_transport_libcurl.o.d -DZLIB_CONST -DUSE_UDEV -DUSE_AURA=1 -DUSE_GLIB=1 -DUSE_NSS_CERTS=1 -DUSE_OZONE=1 -DUSE_X11=1 -DOFFICIAL_BUILD -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -DNO_UNWIND_TABLES -D_GNU_SOURCE -DCR_CLANG_REVISION=\"llvmorg-13-init-6429-g0e92cbd6-2\" -D__STDC_CONSTANT_MACROS -D__STDC_FORMAT_MACROS -D_FORTIFY_SOURCE=2 -D_LIBCPP_ABI_UNSTABLE -D_LIBCPP_DISABLE_VISIBILITY_ANNOTATIONS -D_LIBCXXABI_DISABLE_VISIBILITY_ANNOTATIONS -D_LIBCPP_ENABLE_NODISCARD -D_LIBCPP_HAS_NO_VENDOR_AVAILABILITY_ANNOTATIONS -DCR_LIBCXX_REVISION=8fa87946779682841e21e2da977eccfb6cb3bded -DNDEBUG -DNVALGRIND -DDYNAMIC_ANNOTATIONS_ENABLED=0 -DGLIB_VERSION_MAX_ALLOWED=GLIB_VERSION_2_40 -DGLIB_VERSION_MIN_REQUIRED=GLIB_VERSION_2_40 -DCRASHPAD_ZLIB_SOURCE_EXTERNAL -DCRASHPAD_LSS_SOURCE_EXTERNAL -Igen/third_party/crashpad/crashpad -I../.. -Igen -I../../third_party/crashpad/crashpad -I../../third_party/perfetto/include -Igen/third_party/perfetto/build_config -Igen/third_party/perfetto -I../../third_party/crashpad/crashpad/compat/linux -I../../third_party/crashpad/crashpad/compat/non_win -I../../third_party/abseil-cpp -I../../third_party/boringssl/src/include -I../../third_party/protobuf/src -Igen/protoc_out -I../../third_party/zlib -fno-delete-null-pointer-checks -fno-ident -fno-strict-aliasing --param=ssp-buffer-size=4 -fstack-protector -fno-unwind-tables -fno-asynchronous-unwind-tables -fPIC -pthread -fcolor-diagnostics -fmerge-all-constants -fcrash-diagnostics-dir=../../tools/clang/crashreports -mllvm -instcombine-lower-dbg-declare=0 -flto=thin -fsplit-lto-unit -fwhole-program-vtables -fcomplete-member-pointers -m64 -march=x86-64 -msse3 -no-canonical-prefixes -Wall -Wextra -Wimplicit-fallthrough -Wunreachable-code -Wthread-safety -Wextra-semi -Wno-missing-field-initializers -Wno-unused-parameter -Wno-c++11-narrowing -Wno-unneeded-internal-declaration -Wno-undefined-var-template -Wno-psabi -Wno-ignored-pragma-optimize -Wno-implicit-int-float-conversion -Wno-final-dtor-non-final-class -Wno-builtin-assume-aligned-alignment -Wno-deprecated-copy -Wno-non-c-typedef-for-linkage -Wno-max-tokens -O2 -fdata-sections -ffunction-sections -fno-omit-frame-pointer -g0 -ftrivial-auto-var-init=pattern -fsanitize=cfi-vcall -fsanitize-blacklist=../../tools/cfi/ignores.txt -fsanitize=cfi-icall -fvisibility=hidden -Wheader-hygiene -Wstring-conversion -Wtautological-overlap-compare -I/usr/include/glib-2.0 -I/usr/lib64/glib-2.0/include -DPROTOBUF_ALLOW_DEPRECATED=1 -std=c++14 -fno-trigraphs -Wno-trigraphs -fno-exceptions -fno-rtti -nostdinc++ -isystem../../buildtools/third_party/libc++/trunk/include -isystem../../buildtools/third_party/libc++abi/trunk/include -fvisibility-inlines-hidden -c ../../third_party/crashpad/crashpad/util/net/http_transport_libcurl.cc -o obj/third_party/crashpad/crashpad/util/util/http_transport_libcurl.o
DEBUG: ../../third_party/crashpad/crashpad/util/net/http_transport_libcurl.cc:17:10: fatal error: 'curl/curl.h' file not found
DEBUG: #include <curl/curl.h>
DEBUG:          ^~~~~~~~~~~~~
DEBUG: 1 error generated.
```
2021-06-04 13:19:12 +03:00
Mikhail Novosyolov
3209854ccf workround misdetection of java 2021-05-27 22:08:16 +03:00
Mikhail Novosyolov
a33bb95ff0 update VA-API patch from saiarcot895's repo
2f24a35a0f
2021-05-27 21:01:28 +03:00
Mikhail Novosyolov
53d82337e9 upd: 90 -> 91, restore building GOST from commit hashes instead of tags 2021-05-27 20:34:03 +03:00
Mikhail Novosyolov
ffef8ed5e9 Switch to llvm12
```
DEBUG: In file included from ../../base/files/file_path_watcher_linux.cc:5:
DEBUG: In file included from ../../base/files/file_path_watcher.h:14:
DEBUG: In file included from ../../base/callback.h:14:
DEBUG: In file included from ../../base/bind.h:13:
DEBUG: In file included from ../../base/bind_internal.h:17:
DEBUG: In file included from ../../base/callback_internal.h:13:
DEBUG: In file included from ../../base/memory/ref_counted.h:14:
DEBUG: In file included from ../../base/check_op.h:11:
DEBUG: ../../base/check.h:88:3: error: 'nomerge' attribute cannot be applied to a declaration
DEBUG:   NOMERGE ~CheckError();
DEBUG:   ^       ~
DEBUG: ../../base/compiler_specific.h:337:19: note: expanded from macro 'NOMERGE'
DEBUG: #define NOMERGE [[clang::nomerge]]
DEBUG:                   ^
DEBUG: 1 error generated.
```
2021-05-06 01:10:46 +03:00
Mikhail Novosyolov
290c391690 avoid odd rediffings of patches in the future 2021-05-06 00:55:58 +03:00
Mikhail Novosyolov
f47f95e40d Remove patches of codecs
I am fed up in updating those patches to newer releases of Chromium,
they seem to be not really useful and, if I remember correctly, they made some regressions.
Dropping them.
2021-05-06 00:49:26 +03:00
Mikhail Novosyolov
2d2c618019 upd: 89 -> 90.0.4430.93 2021-05-06 00:40:38 +03:00
Mikhail Novosyolov
33224dbe62 upd: 89.0.4389.114 -> 89.0.4389.128 2021-04-14 16:56:49 +03:00
Mikhail Novosyolov
8ec4f3cdb5 Add info about GOST TLS to %%description
Thanks to djam@ for the idea.
https://t.me/rosalinux/86725
2021-04-08 11:08:26 +03:00
Mikhail Novosyolov
b1be1ae9f5 upd: 89.0.4389.90 -> 89.0.4389.114, remove odd scriptlet on rpm4 2021-04-06 15:35:03 +03:00
Mikhail Novosyolov
4e04e2b88d Indicate GOST enablement in chrome://settings/help
[user@rosa2019 chromium-browser-stable]$ rpmspec -P *.spec | grep RPM
sed -i.orig -e 's/getenv("CHROME_VERSION_EXTRA")/"ROSA 2019.1, RPM chromium-browser-stable 89.0.4389.90-3 + GOST TLS via CryptoPro"/' $FILE
[user@rosa2019 chromium-browser-stable]$ rpmspec --without=gost -P *.spec | grep RPM
sed -i.orig -e 's/getenv("CHROME_VERSION_EXTRA")/"ROSA 2019.1, RPM chromium-browser-stable 89.0.4389.90-3"/' $FILE
[user@rosa2019 chromium-browser-stable]$
2021-03-30 13:04:55 +03:00
Mikhail Novosyolov
dc298fd8ce Tune version info
It was:
Версия 89.0.4389.90 (Официальная сборка), rosa 2019.1 (64 бит)

It wil be:
Версия 89.0.4389.90 (Официальная сборка), ROSA 2019.1, RPM %%EVRD (64 бит)

converted lowercase rosa to uppercase ROSA, added RPM package version
2021-03-30 00:57:51 +03:00
Mikhail Novosyolov
ee81ef8a57 Fix memory usage when linking with is_official_build=true, initial support of building with debuginfo, but debugsource subpackage is still empty 2021-03-30 00:47:34 +03:00
Mikhail Novosyolov
703a7ad6bf Follow the same audio sandboxing policy as Google Chrome, off experimantal feature that causes problems 2021-03-14 19:32:06 +03:00
Mikhail Novosyolov
023d679d21 Drop explicit thereaded compositing, let Chromium decide himself 2021-03-14 19:32:03 +03:00
Mikhail Novosyolov
eb884efb94 Drop flashplayer from launcher, flash is not supported anymore by Chromium 2021-03-14 19:31:59 +03:00
Mikhail Novosyolov
264aef5908 Update GOST
Commit 81854066c6 ("Remove odd crap from new tab page") fixed what most of removed diff adjustment tried to fix.
2021-03-13 18:55:52 +03:00
Mikhail Novosyolov
c20c59aaf8 rm not used patch
Commit 6aceefa0d9 switched it off, I forgot to delete it.
2021-03-13 18:46:44 +03:00
Mikhail Novosyolov
69ea46bbc8 Fix building on rosa2016.1
Commit 6aceefa0d9 removed this patch but it is needed for rosa2016.1
2021-03-13 18:33:45 +03:00
Mikhail Novosyolov
81854066c6 Remove odd crap from new tab page
See screnshot: https://file-store.rosalinux.ru/download/57e6e8e31836d28825d635c9c75841107202686f

From chrome/browser/resources/new_tab_page/modules/BUILD.gn:

```
  if (!is_official_build) {
    deps += [ "dummy:module" ]
  }
```

Note that some other changes may appera, for example:

```
third_party/skia/third_party/freetype2/BUILD.gn:9:      (is_official_build || !(is_android || sanitize == "MSAN")) && !is_fuchsia
third_party/skia/third_party/harfbuzz/BUILD.gn:10:  skia_use_system_harfbuzz = is_official_build
third_party/skia/third_party/libjpeg-turbo/BUILD.gn:7:  skia_use_system_libjpeg_turbo = is_official_build
```
2021-03-13 17:30:54 +03:00
Mikhail Novosyolov
0b1a5058fa upd: 89.0.4389.82 -> 89.0.4389.90 (fixed CVE-2021-21193)
https://www.opennet.ru/opennews/art.shtml?num=54750
2021-03-13 16:34:45 +03:00
Mikhail Novosyolov
ba619fbf46 Restore buildability on rosa2016.1
Commit 6aceefa0 lost using CXXFLAGS / LDFLAGS when building gn.
Fix incorrect position of unset() (noted by alzim@, thanks to him)
2021-03-13 15:49:46 +03:00
Mikhail Novosyolov
7a5cc46d93 Fix GOST on v89, avoid different SRPMs on different architectures 2021-03-07 22:02:44 +03:00
Mikhail Novosyolov
6aceefa0d9 upd: 88.0.4324.182 -> 89.0.4389.82
- first build of v89
- replaced custom BUILD.gn with a patch of source code; we may just miss that custom BUILD.gn has stopped working, but we will explicitly detect the moment when applying patch fails (custom BUILD.gn may be restored later if it makes sense to reduce maintenance burden)
- dropped build-with-pipewire-0.3.patch, upstream now supports both pipewire 0.2 and 0.3
- took updated chromium-40-sorenson-spark.patch and chromium-55-extra-media.patch from Mageia (I want to remove these patches actually)
- dropped some patches with not needed compiler-related changes
- spec clean up:
  + removed not used for a long time support of building with GCC (Chromium upstream has tight integration with clang, I don't think that we will ever need buildability with GCC, for now it may be broken and just makes the spec more complex)
  + removed switches of libpng and vaapi without changing their values to redcue complexity of the spec
- removed not used VA-API patch, replaced with VA-API enhacements from ppa:saiarcot895/chromium-beta, including support of VA-API VDPAU backend on Nvidia proprietary drivers
2021-03-07 20:40:51 +03:00
Mikhail Novosyolov
fc32d598ad Fix building with current glib2.0
Patch was found by Alzim@
2021-02-27 15:23:02 +03:00
Mikhail Novosyolov
a5221a1ba2 glibc in rosa2019.1 is not so new, that patch is not needed
SIGSTKSZ is defined as a constant:

[user@rosa2019 ~]$ grep -nHr SIGSTKSZ /usr/include
/usr/include/asm/signal.h:89:#define MINSIGSTKSZ	2048
/usr/include/asm/signal.h:90:#define SIGSTKSZ	8192
/usr/include/asm-generic/signal.h:84:#if !defined MINSIGSTKSZ || !defined SIGSTKSZ
/usr/include/asm-generic/signal.h:85:#define MINSIGSTKSZ	2048
/usr/include/asm-generic/signal.h:86:#define SIGSTKSZ	8192
/usr/include/bits/sigstack.h:27:#define MINSIGSTKSZ	2048
/usr/include/bits/sigstack.h:30:#define SIGSTKSZ	8192
/usr/include/elf.h:1229:#define AT_MINSIGSTKSZ		51 /* Stack needed for signal delivery
[user@rosa2019 ~]$
2021-02-27 15:03:05 +03:00
Mikhail Novosyolov
0b7011afbc Enable PipeWire in rosa2019.1+
Thanks to Alzim@ for noting the patch from openSUSE.
2021-02-27 14:51:50 +03:00
Mikhail Novosyolov
9f66c84101 Explicirlt link libpulse instead of dlopen()'ning it to autoreq it and be sure of ABI compatibility 2021-02-27 14:42:40 +03:00
Mikhail Novosyolov
6ab1f551f5 Fix building with glibc 2.33 in rosa2019.1 2021-02-23 02:48:46 +03:00
Mikhail Novosyolov
b4c80feae0 update GOST 2021-02-22 12:50:42 +03:00
Mikhail Novosyolov
73898b8028 upd: 88.0.4324.150 -> 88.0.4324.182 2021-02-22 12:36:21 +03:00
Mikhail Novosyolov
0084fb7464 Fix initializing GPU sandbox in rosa2019.1 2021-02-10 23:15:45 +03:00
Mikhail Novosyolov
e968597999 upd: 88.0.4324.96 -> 88.0.4324.150
Fixed vulnarabilities in sandbox.
2021-02-06 17:20:43 +03:00
Mikhail Novosyolov
a06f6b0d20 Fix building gn on rosa2016.1
Commit d9f0d84840 ("Build with llvm11") removed "-stdlib=libc++".
Building of the gn utility which is used to build Chromium (and is not packaged) requires a newer libstdc++ than the one in rosa2016.1.
Fix building it by using libstdc++-gcc10. This is a better solution than the one removed by that commit because compiler flags will not influence the build of Chromium itlsef.
2021-02-06 17:17:58 +03:00
Mikhail Novosyolov
d9f0d84840 Build with llvm11
llvm11 (https://abf.io/import/llvm11) is a separately packaged LLVM 11 + Clang 11.
It is easier to use it than update system clang+llvm in stable platforms which causes lots of problems and regressions.
Reduced amount of compiler-related patches.
TODO: drop chromium-compiler-r4.patch ?

Renamed "netive_clang" to "bundled_llvm" for clearity, it is not clear to me that "native" means "bundled binary blob/source".
2021-01-21 16:50:18 +03:00
Alzim
93cf45c5ad Updated to 88.0.4324.96 2021-01-20 18:26:24 +03:00
Mikhail Novosyolov
75c4bf51fa Flash player is not developed any more, remove it from deps
ok alzim@
2021-01-10 00:37:56 +03:00
Mikhail Novosyolov
72a3efa2a7 w/a problems with building third_party/wayland on rosa2016.1 2021-01-09 14:33:10 +03:00
Mikhail Novosyolov
5e4743a078 Use native page size on aarch64 to fix bytecode_builtins_list_generator 2021-01-09 00:11:53 +03:00
Mikhail Novosyolov
c83f3de6d5 adapt BR for rosa2016.1 2021-01-08 22:27:15 +03:00
Mikhail Novosyolov
66d61226f7 Clean up and more preparation for aarch64
(still not buildable on aarch64)
+ some clean up of odd conditions
+ python-beautifulsoup4 dropped python2 in rosa2019.1,
  but build scripts of Chromium work only with python 2,
  bundled python 2 modules must be used
2021-01-08 22:00:26 +03:00
Mikhail Novosyolov
213760b35a Reenable rpmlint for binary packages
Commit 8ebbd86525 ("disable rpmlint") did not explain why it was done 6 years ago.
2021-01-08 18:18:23 +03:00
Mikhail Novosyolov
7f2b4888d9 upd: 87.0.4280.88 -> 87.0.4280.141
https://www.opennet.ru/opennews/art.shtml?num=54367
2021-01-08 15:02:55 +03:00
Алексей-З
ef2f47cae3 Updated x86_64 → %{x86_64} 2020-12-13 16:34:28 +00:00
Alzim
b2168e703f Updated to 87.0.4280.88 2020-12-13 15:01:23 +03:00