see other reply:

check the firefox port. i do changes pretty conservatively, only adapting firefox port changes, plus adaptations for librewolf-specific changes e.g. policy changes, mozconfig (referencing upstream).

the firefox port does that CPU thread check and caps the limits based on the architecture it's being built on. openbsd doesn't cross compile, it always compiles on each host, and some of those architectures require limiting the number of threads due to memory usage, because the firefox port uses a lot of memory when compiling it.

i'd just err on the side of caution and defer to whatever ff does in openbsd. as i said though, i'll be back in ~october.


Am 22.07.26 um 21:17 schrieb [email protected]:
Built/tested on current/amd64 with privsep.

Adapt www/mozilla-firefox changes to librewolf:

- depend on latest cbindgen
- drop now useless USE_LLD=ports
- drop ugly NCPU !!= construct and use 4 threads for lld

- Also bump SO_VERSION for major release update.
- Added freebl3 to WANTLIB as it is picked up from nss.


// Checked against manually downloaded.sig and .sha512sum
$ cd /usr/ports/distfiles/librewolf/ && sq verify 
--signature-file=librewolf-153.0-1.source.tar.gz.sig librewolf-153.0-1.source.tar.gz ; 
sha512 -c librewolf-153.0-1.source.tar.gz.sha512sum
Authenticating 662E3CDD6FE329002D0CA5BB40339DD82B12EF16 (LibreWolf Maintainers 
<[email protected]>) using the web of trust:
   Fully authenticated (120 of 120) 662E3CDD6FE329002D0CA5BB40339DD82B12EF16, 
LibreWolf Maintainers <[email protected]>
     ◯─┬ A629B716FBCB64C87477BC775525083E97A93CAA
     │ └ (Local Trust Root)
     │
     │  certified the following binding on 2026‑05‑13
     │
     └─┬ 662E3CDD6FE329002D0CA5BB40339DD82B12EF16
       └ LibreWolf Maintainers <[email protected]>

   Authenticated signature made by 662E3CDD6FE329002D0CA5BB40339DD82B12EF16 
(LibreWolf Maintainers <[email protected]>)

1 authenticated signature.
(SHA512) librewolf-153.0-1.source.tar.gz: OK
--
$ cat librewolf-153.0-1.source.tar.gz.sha512sum
ded52396842f567da5449772f3a05bb2f1c8ed2325ba094dd9aa93ba76329ce23d1a17da2e45874b07275b6726d2f06496285b002bb9d3a971dbb3b4d509a953
  librewolf-153.0-1.source.tar.gz
--


// Build and package; do checks
$ cd /usr/ports/www/librewolf/ && make clean=all clean && make makesum patch 
update-patches build update-plist package test ; make port-lib-depends-check check-shlib-syms

librewolf-153.0pl1(www/librewolf):
Missing: freebl3.58 from nss-3.126 (/usr/local/lib/librewolf/libxul.so.2.0)
Extra:  Xtst.11
WANTLIB += freebl3


// this was kinda long so attached it as a log

/usr/local/lib/librewolf/libmozwayland.so.1.0 --> 
/usr/ports/pobj/librewolf-153.0pl1/fake-amd64/usr/local/lib/librewolf/libmozwayland.so.2.0
No dynamic export changes
/usr/local/lib/librewolf/libxul.so.1.0 --> 
/usr/ports/pobj/librewolf-153.0pl1/fake-amd64/usr/local/lib/librewolf/libxul.so.2.0
Dynamic export changes:
added:
        XRE_GetBootstrap@@libxul.so.2.0
        __start_pb_defaults
        __stop_pb_defaults
        uprofiler_get@@libxul.so.2.0

removed:
        XRE_GetBootstrap@@libxul.so.1.0
        uprofiler_get@@libxul.so.1.0
--
// patches updated; added freebl3 to WANTLIB, bumped SO


// Updated
# TRUSTED_PKG_PATH=/usr/ports/packages/amd64/all/ pkg_add -Dsnap -u librewolf
librewolf-152.0.6pl1->153.0pl1: ok
--

Used it for a few hours.

While fixing the patch, removed duplicates in
patches/patch-lw_policies_json.

Like:
"DontCheckDefaultBrowser"
"FirefoxHome": {
…
}

Left files/mozconfig-openbsd alone for now.

Did anyone get something similar?


I am still building 153.0-3, but I figured with the security
vulnerabilities,
https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/

a wip patch for personal compiling and feedback might be good. I have
heard that with a modern ssd and cpu browsers compile in one or two
hours. I take longer than double that just to untar. It is not a couple
weeks of compiling like on some older architectures, but this
compile on a old hdd will finish tomorrow, hopefully.

Here is what I have so far for 153.0-3:

// Makesum
===>  Checking files for librewolf-153.0pl3
`/usr/ports/distfiles/librewolf/librewolf-153.0-3.source.tar.gz' is up to date.
--- old
+++ new
@@ -1,2 +1,2 @@
-SHA256 (librewolf/librewolf-153.0-1.source.tar.gz) = 
ydzbwbGAV+VbmCLXMbjiwC9+6wGrd+gr2C/1A4h1xok=
-SIZE (librewolf/librewolf-153.0-1.source.tar.gz) = 1161838999
+SHA256 (librewolf/librewolf-153.0-3.source.tar.gz) = 
SKziSh1q9sZeOmY0AuewrxVP9yBqt2++XAgxGnReOeM=
+SIZE (librewolf/librewolf-153.0-3.source.tar.gz) = 1161719988
--

// Manually download .sig and .sha512sum to do verification
$ cd /usr/ports/distfiles/librewolf/ && sq verify 
--signature-file=librewolf-153.0-3.source.tar.gz.sig librewolf-153.0-3.source.tar.gz ; 
sha512 -c librewolf-153.0-3.source.tar.gz.sha512sum
Authenticating 662E3CDD6FE329002D0CA5BB40339DD82B12EF16 (LibreWolf Maintainers 
<[email protected]>) using the web of trust:
   Fully authenticated (120 of 120) 662E3CDD6FE329002D0CA5BB40339DD82B12EF16, 
LibreWolf Maintainers <[email protected]>
     ◯─┬ A629B716FBCB64C87477BC775525083E97A93CAA
     │ └ (Local Trust Root)
     │
     │  certified the following binding on 2026‑05‑13
     │
     └─┬ 662E3CDD6FE329002D0CA5BB40339DD82B12EF16
       └ LibreWolf Maintainers <[email protected]>

   Authenticated signature made by 662E3CDD6FE329002D0CA5BB40339DD82B12EF16 
(LibreWolf Maintainers <[email protected]>)

1 authenticated signature.
(SHA512) librewolf-153.0-3.source.tar.gz: OK
--
$ cat librewolf-153.0-3.source.tar.gz.sha512sum
d24cb5e81a30743bbe4d1118c8b5d2d85bada310f002536b9c5f3f759128368bac5208462f0906f6bf0fe602e678fe6386abe1c19ff3ee70d2a60535aa4b4bfb
  librewolf-153.0-3.source.tar.gz
--


Sorry for any noise.

Let me know if there is anything wrong or missing please. Comments,
concerns, input welcome.

The librewolf-153.0-1 can be skipped for cvs; librewolf-153.0-3 will
have an initial patch probably tomorrow. Assuming no tar rerolls. Which
I have learned are a semi-common thing. Thankfully these tar are signed.

Hope this helps. Good night everyone. May you all have success hacking.
--
yaydn


Index: Makefile
===================================================================
RCS file: /cvs/ports/www/librewolf/Makefile,v
diff -u -p -u -p -r1.5 Makefile
--- Makefile    16 Jul 2026 15:19:32 -0000      1.5
+++ Makefile    22 Jul 2026 19:05:10 -0000
@@ -13,7 +13,7 @@ ONLY_FOR_ARCHS =      amd64 aarch64 riscv64
  # If upstream adds revision number -x, it will become plx in OpenBSD, e.g.
  # librewolf-149.0.2-2 (upstream) becomes librewolf-149.0.2pl2 (patch level 2)
-MOZILLA_DIST_VERSION = 152.0.6-1
+MOZILLA_DIST_VERSION = 153.0-1
  MOZILLA_VERSION =     ${MOZILLA_DIST_VERSION:C/-([0-9]+)$/pl\1/}
  MOZILLA_PROJECT =     librewolf
@@ -21,7 +21,7 @@ MOZILLA_CODENAME =    browser
  MAINTAINER =          Leah Rowe <[email protected]>
  HOMEPAGE =    https://librewolf.net/
-SO_VERSION =   1.0
+SO_VERSION =   2.0
  # Bump minor ver if shlibs deleted in components dir to avoid pkg_add -r 
issues
  MOZILLA_LIBS =        mozavcodec mozavutil mozgtk mozinference mozwayland xul 
\
                clearkey gkcodecs lgpllibs mozsqlite3
@@ -43,12 +43,11 @@ MODPY_RUNDEP =      No
  COMPILER =    ports-clang
  MODCLANG_VERSION =    22
-USE_LLD =      ports
  # 63 requires node because why not #1483595
  BUILD_DEPENDS +=      lang/node
  # 63 requires cbindgen #1478813
-BUILD_DEPENDS +=       devel/cbindgen>=0.23.0
+BUILD_DEPENDS +=       devel/cbindgen>=0.29.4
  # wasi
  BUILD_DEPENDS +=      lang/wasi-sdk/compiler-rt>=22.1.5p1 \
                        lang/wasi-sdk/libcxx>=21.1.5p1 \
@@ -60,7 +59,7 @@ BUILD_DEPENDS +=      devel/py-setuptools
  RUN_DEPENDS =         graphics/ffmpeg
  # uses pledge()
-WANTLIB += Xrandr Xtst
+WANTLIB += Xrandr Xtst freebl3
  CONFIGURE_STYLE =     simple
  CONFIGURE_SCRIPT =    ${MODPY_BIN} ${WRKSRC}/configure.py
@@ -71,13 +70,7 @@ CONFIGURE_ENV +=     CPPFLAGS="-fno-ret-prot
  .else
  CONFIGURE_ENV +=      CPPFLAGS=-Wno-backend-plugin
  .endif
-NCPU !!=               sysctl -n hw.ncpuonline
-.if ${NCPU} > 4
-CONFIGURE_ENV +=       LDFLAGS="-Wl,--threads=5 --ld-path=${WRKDIR}/bin/ld"
-.else
-CONFIGURE_ENV +=       LDFLAGS="-Wl,--threads=${MAKE_JOBS} \
-                       --ld-path=${WRKDIR}/bin/ld"
-.endif
+CONFIGURE_ENV +=       LDFLAGS="-Wl,--threads=4 --ld-path=${WRKDIR}/bin/ld"
  # 2026497
  CONFIGURE_ENV +=       MACH_BUILD_PYTHON_NATIVE_PACKAGE_SOURCE=none
Index: distinfo
===================================================================
RCS file: /cvs/ports/www/librewolf/distinfo,v
diff -u -p -u -p -r1.5 distinfo
--- distinfo    16 Jul 2026 15:19:32 -0000      1.5
+++ distinfo    22 Jul 2026 19:05:10 -0000
@@ -1,2 +1,2 @@
-SHA256 (librewolf/librewolf-152.0.6-1.source.tar.gz) = 
BBkwy3HutWW3Nv+ObQRDgTFGM7LDwrGatnS/Phn3+HA=
-SIZE (librewolf/librewolf-152.0.6-1.source.tar.gz) = 1156714022
+SHA256 (librewolf/librewolf-153.0-1.source.tar.gz) = 
ydzbwbGAV+VbmCLXMbjiwC9+6wGrd+gr2C/1A4h1xok=
+SIZE (librewolf/librewolf-153.0-1.source.tar.gz) = 1161838999
Index: patches/patch-lw_policies_json
===================================================================
RCS file: /cvs/ports/www/librewolf/patches/patch-lw_policies_json,v
diff -u -p -u -p -r1.3 patch-lw_policies_json
--- patches/patch-lw_policies_json      20 Jun 2026 14:30:20 -0000      1.3
+++ patches/patch-lw_policies_json      22 Jul 2026 19:05:10 -0000
@@ -3,20 +3,14 @@ perhaps send these to librewolf upstream
  Index: lw/policies.json
  --- lw/policies.json.orig
  +++ lw/policies.json
-@@ -13,6 +13,16 @@
+@@ -35,6 +35,10 @@
           "DisableSetDesktopBackground": false,
-         "DisableDeveloperTools": false,
-         "NoDefaultBookmarks": true,
-+        "DontCheckDefaultBrowser": true,
+         "DisableTelemetry": true,
+         "DontCheckDefaultBrowser": true,
  +        "GoToIntranetSiteForSingleWordEntryInAddressBar": true,
-+        "FirefoxHome": {
-+        "SponsoredStories": false,
-+            "SponsoredTopSites": false,
-+            "Stories": false
-+        },
  +        "GenerativeAI": {
  +            "Enabled": false
  +        },
-         "DefaultSerialGuardSetting": 3,
-         "WebsiteFilter": {
-             "Block": [
+         "EncryptedMediaExtensions": {
+             "Enabled": false
+         },
Index: patches/patch-toolkit_components_downloads_DownloadIntegration_sys_mjs
===================================================================
RCS file: 
/cvs/ports/www/librewolf/patches/patch-toolkit_components_downloads_DownloadIntegration_sys_mjs,v
diff -u -p -u -p -r1.1.1.1 
patch-toolkit_components_downloads_DownloadIntegration_sys_mjs
--- patches/patch-toolkit_components_downloads_DownloadIntegration_sys_mjs      
8 Jun 2026 16:14:42 -0000       1.1.1.1
+++ patches/patch-toolkit_components_downloads_DownloadIntegration_sys_mjs      
22 Jul 2026 19:05:10 -0000
@@ -4,7 +4,7 @@ was previously in patch-toolkit_componen
  Index: toolkit/components/downloads/DownloadIntegration.sys.mjs
  --- toolkit/components/downloads/DownloadIntegration.sys.mjs.orig
  +++ toolkit/components/downloads/DownloadIntegration.sys.mjs
-@@ -1110,7 +1110,7 @@ export var DownloadIntegration = {
+@@ -1117,7 +1117,7 @@ export var DownloadIntegration = {
       // displayed in the user interface.
       let directoryPath = PathUtils.join(
         this._getDirectory(aName),

--
Company director, Minifree Ltd
Registered in England, No. 9361826 | VAT No. GB202190462
Registered Office: 19 Hilton Road, Canvey Island, Essex SS8 9QA, UK

Attachment: OpenPGP_0x5C654067D383B1FF.asc
Description: OpenPGP public key

Attachment: OpenPGP_signature.asc
Description: OpenPGP digital signature

Reply via email to