15:06:02 #startmeeting Tor Browser Weekly Meeting 2022-04-19 15:06:02 Meeting started Tue Apr 19 15:06:02 2022 UTC. The chair is PieroV. Information about MeetBot at http://wiki.debian.org/MeetBot. 15:06:02 Useful Commands: #action #agreed #help #info #idea #link #topic. 15:06:09 Here we are! 15:06:37 I think we've all updated our pad and we can start with the discussions 15:07:02 I see only my points 15:07:22 The first one is about Yawning Angel's goutls fork 15:07:36 It's been deleted for some reason (somebody should contact them to ask why) 15:08:16 Now builds fail because fetch is stuck at git authentication 15:08:29 Does Yawning still work at Tor? It's been a long time since I saw him around here but I'm not sure I've been watching the right places 15:08:35 I can send Yawning an email to ask about that (unless one of you wants to do it) 15:08:51 We still have the code (in git_clones), and we could push to our GitLab 15:08:58 Jeremy_Rand_Talos__: no 15:09:03 Jeremy_Rand_Talos__: it's a core contributor, but not a TPI employee 15:09:19 I see, thanks 15:09:38 i believe this is a question for the anti-censorship team, as well 15:09:40 boklm: if you already have their contact/have already contacted them in the past it would be great, thanks 15:09:52 sysrqb: yeah, I agree 15:09:53 this is a dependency of one of their projects (kinda) 15:10:15 and IIRC they wanted to mirror obfs4 as well 15:10:38 So I think that we could ask them whether they want to mirror goutls in tpo/anticensorship as well 15:10:57 yes, that seems like a good plan 15:11:05 If needed, I can push with the history, since I already had the copy cached in git_clones 15:12:08 If nobody wants to add anything to this topic, I'd go ahead with Android 15:12:53 I think we can have a mirror in someone's personal repo to unblock nightly builds, then later create it in tpo/anticensorship depending on what Yawning answers 15:13:46 sounds good to me 15:14:32 (we can/have to publish the code anyway, as it's GPLv3, but asking is more polite :)) 15:15:14 I mean, if it were me, I'd be grateful for someone telling me my server was busted 15:16:31 Jeremy_Rand_Talos__: it's the only Yawning's repo that isn't available anymore, and it's hosted on gitlab.com 15:17:14 Weird. :/ 15:18:16 Anyway, I'd go with Android problems and updates 15:18:56 +1 15:19:03 I was finally able to (incrementally) build outside tor-browser-build 15:19:19 woo! 15:19:29 Mozilla devs use a special update channel that they call default 15:19:51 By switching to it we can use Mozilla's "pipeline" successfully \o/ 15:20:14 awesome 15:20:17 (sorta, I've managed to do so for a pair of days and now I have some problems with colors) 15:20:38 heh 15:20:39 I literally mean colors: AAPT: error: resource color/photonDarkGrey90A60 (aka org.torproject.torbrowser_debug:color/photonDarkGrey90A60) not found. 15:21:35 is the "update channel" used on android builds too? 15:22:15 I've also found the problem with extensions: it was a JS minifier that misbehaved with comments (it's a known bug, and the JS minifier has been enabled by default only recently, that's why we've never had this problem before) 15:22:39 boklm: we use the beta channel, but I think it's used for build dependencies, rather than for real updates 15:23:09 ah, ok 15:23:58 it may still control some features in Gecko (for geckoview) within nightly/early_beta/late_beta preprocessor conditionals, as well 15:24:19 sysrqb: that's an interesting point 15:24:32 a bad news is that we have one or two more crashes 15:25:14 I could find one in my local builds, but it happens on debug code 15:25:39 It doesn't happen always, and it's related to some remote-profile stuff that we should disable 15:26:12 The second crash, however, happens only in the build created with tor-browser-build 15:26:31 And I haven't figured out where it happens 15:26:45 are both at startup? 15:27:08 No! The profile is at startup 15:27:27 But the other crash happens after one minute, or some seconds after the bootstrap 15:27:51 But like the crash we had with v96, you need to clear the storage to reproduce it 15:27:56 this second crash comes from libxul, too? 15:28:19 Yes, and it has glean in logcat's rough stack trace 15:28:27 mmmm 15:28:37 But I have a good news as well, hopefully 15:29:12 I've found the --disable-install-strip option, that keeps all the debug symbols also in the apk (or so it should) 15:29:30 oh, nice 15:29:40 I'm doing a nightly build with it, and see if we get a better stack trace 15:30:21 In the meantime, I think I've also resolved the signing problem, by using apksign from the SDK, instead of the Debian's one 15:31:20 nice 15:31:47 (Should a bug maybe be filed with Debian about that...?) 15:31:57 So, we're proceeding, but until we solve the crash we won't be able to release 15:32:30 Jeremy_Rand_Talos__: not really, it's just an old version. I don't think they'd fix it (unstable already has the tool from SDK 31) 15:33:04 PieroV, ok, makes sense. Maybe they'd put it in backports, but probably not enough users for them to bother 15:33:23 yep... 15:34:12 I think that most people use the official one compiled by Google anyway along with Android Studio 15:34:23 PieroV: if you could take notes in your debugging process and add them somewhere that would be awesome 15:34:42 --disable-install-strip was a known option and it's sad you needed to re-find it 15:34:59 maybe we can take the opportunity to avoid that yet another time... 15:35:01 GeKo: yep, I'm thinking on how structuring a series of pages on building and debugging for the wiki 15:35:24 nice 15:35:40 I've added some comments on the issue that have a lot of information, and I'd like to transform them to pages, to avoid having their content lost 15:36:29 I have a last point on the Android updates (at least while I keep investigating on the crashes) 15:36:38 Right now, I'm working on geckoview v99, but Mozilla released also v100 and v101 15:37:06 indeed 15:37:13 what should we do? 15:37:58 (considering that the current stable has startup crashes as well) 15:38:17 my recommendation is finding a balance between debugging 99 and moving forward onto 100 15:38:30 (and soon 101) 15:39:21 we know falling behind on patch rebasing, toolchain updates, and other dependencies only makes the transition more difficult in the future 15:39:43 but, you have a "working" build that you can debug now 15:40:14 hi richard! 15:40:20 * Jeremy_Rand_Talos__ waves hello to richard 15:41:09 o/ 15:41:12 we're discussing on how to proceed with Android and we've quickly discussed about nightly builds failing because of a goutls fork possibly turned into private now 15:41:31 yeah sorry moved the meeting and then didn't update my calendar 15:41:36 so gj me 15:42:43 sysrqb was suggesting me to find a balance between debugging v99 (it has yet another crash, on the apk produced with tor-browser-build but not on my "local" build) and start with the v100 rebase 15:42:58 and I think it makes sense 15:43:10 yeah that makes sense 15:43:53 and good catch on noticing yawning's repo disappearing, I was going to bring that up too :3 15:43:54 the crash like the v96, so it happens at the first launch (after a while), but then it works okay, so we could even try to run some QA steps on it 15:44:41 yeah, I've noticed a pair of days ago, but I saw that we also have an issue on GitLab 15:44:56 what do you mean? regrading qa steps? 15:45:11 No, sorry, it was re the Yawning's repo 15:45:35 no no, I mean what qa steps did you have in mind 15:46:11 the usual stuff, trying the bootstrap, bridges, and some other steps from this document: 15:46:24 https://gitlab.torproject.org/tpo/applications/tor-browser/-/wikis/Quality-Assurance 15:46:36 but any suggestion is welcome :) 15:46:48 ooooh got you 15:47:23 the rationale is that we know that we have the crash, but at least we could catch any additional problem in this way 15:47:43 yes good plan 15:49:03 boklm: if you're around on irc later, i'd love to chat about the signing process :D 15:49:19 richard: yes, we can chat after the meeting 15:49:31 at the very least, I can share the scripts we use for signing ricochet-refresh with you 15:49:36 a bit of a simpler problem, but still 15:49:45 but yeah build signing 15:49:46 wow 15:50:18 ok I don't have anything else for this meeting 15:50:24 richard: by the way I opened tor-browser-build!437 with some improvements to the signing scripts 15:50:25 seems like y'all have things taken care of 15:50:40 love it, I will take a look asap 15:51:07 okay, do anyone else have something to bring up? 15:51:39 nope 15:51:52 nope 15:52:29 'kay, before ending the meeting let me remind you of the release meeting in 2 hours :) 15:52:40 also not on my calendar 15:52:42 thx PieroV 15:52:49 :) 15:53:01 Thank you all! 15:53:03 #endmeeting