Commit Graph

1417 Commits

Author SHA1 Message Date
Michael Weiss
3a2c2fbc24
chromiumDev: 108.0.5359.10 -> 108.0.5359.19 2022-10-27 19:55:47 +02:00
Michael Weiss
c9dad8d543
chromium: 106.0.5249.119 -> 107.0.5304.68
https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_25.html

This update includes 14 security fixes.

CVEs:
CVE-2022-3652 CVE-2022-3653 CVE-2022-3654 CVE-2022-3655 CVE-2022-3656
CVE-2022-3657 CVE-2022-3658 CVE-2022-3659 CVE-2022-3660 CVE-2022-3661
2022-10-26 00:10:39 +02:00
Michael Weiss
f9d9864cb6
chromiumBeta: Fix the build
The build argument `use_system_libwayland_server` was set to `false`
since M107 [0]. This will cause `libwayland` to be built which does in
turn pull in `libffi` ("//build/config/linux/libffi") [1].

Alternatively, we should be able to fix the libffi dependency by setting
`use_system_libffi = true` (recently added, see [2]) and adding `libffi`
to the build inputs.

[0]: b9cd6d6767
[1]: https://source.chromium.org/chromium/chromium/src/+/refs/tags/107.0.5304.62:third_party/wayland/BUILD.gn
[2]: cf3ee09f08
2022-10-25 23:58:11 +02:00
Michael Weiss
f709a74fa3
chromium{Beta,Dev}: Fix the configuration phase
Setting `clang_base_path` [0] does skip [1] a clang version check [2]
that would fail in our case:
```
configuring
ERROR at //build/config/compiler/BUILD.gn:1314:22: Script returned non-zero exit code.
    clang_revision = exec_script("//tools/clang/scripts/update.py",
                     ^----------
Current dir: /tmp/nix-build-chromium-unwrapped-107.0.5304.29.drv-0/chromium-107.0.5304.29/out/Release/
Command: python3 /tmp/nix-build-chromium-unwrapped-107.0.5304.29.drv-0/chromium-107.0.5304.29/tools/clang/scripts/update.py --print-revision --verify-version=16.0.0
Returned 1 and printed out:

The expected clang version is llvmorg-16-init-4609-g025a5b22-2 but the actual version is
Did you run "gclient sync"?

See //build/config/BUILDCONFIG.gn:329:3: which caused the file to be included.
  "//build/config/compiler:afdo",
  ^-----------------------------
error: builder for '/nix/store/02riyhzvrgn2vaab29d3gipxzkx6nb44-chromium-unwrapped-107.0.5304.29.drv' failed with exit code 1
```

I also chose to disable the Qt support for now. The Qt support is
enabled by default on Linux [3] but we need to add the required
dependencies first to fix the build (and my current priority is to get a
basic build working for the security critical stable channel update):
```
configuring
ERROR at //build/config/linux/pkg_config.gni:104:17: Script returned non-zero exit code.
    pkgresult = exec_script(pkg_config_script, args, "value")
                ^----------
Current dir: /tmp/nix-build-chromium-unwrapped-107.0.5304.62.drv-0/chromium-107.0.5304.62/out/Release/
Command: python3 /tmp/nix-build-chromium-unwrapped-107.0.5304.62.drv-0/chromium-107.0.5304.62/build/config/linux/pkg-config.py Qt5Core Qt5Widgets
Returned 1.
stderr:

Package Qt5Core was not found in the pkg-config search path.
Perhaps you should add the directory containing `Qt5Core.pc'
to the PKG_CONFIG_PATH environment variable
No package 'Qt5Core' found
Package Qt5Widgets was not found in the pkg-config search path.
Perhaps you should add the directory containing `Qt5Widgets.pc'
to the PKG_CONFIG_PATH environment variable
No package 'Qt5Widgets' found
Could not run pkg-config.

See //ui/qt/BUILD.gn:13:1: whence it was called.
pkg_config("qt5_config") {
^-------------------------
See //ui/linux/BUILD.gn:54:15: which caused the file to be included.
    deps += [ "//ui/qt" ]
              ^--------
error: builder for '/nix/store/3zzddkh74cnhvq6nql32y9pnbvzf2jv9-chromium-unwrapped-107.0.5304.62.drv' failed with exit code 1
```

[0]: https://source.chromium.org/chromium/chromium/src/+/refs/tags/107.0.5304.62:docs/clang.md
[1]: https://source.chromium.org/chromium/chromium/src/+/refs/tags/107.0.5304.62:build/config/compiler/BUILD.gn;l=1306
[2]: https://source.chromium.org/chromium/chromium/src/+/refs/tags/107.0.5304.62:tools/clang/scripts/update.py;l=358
[3]: https://source.chromium.org/chromium/chromium/src/+/refs/tags/107.0.5304.62:ui/qt/qt.gni;l=8
2022-10-25 21:10:01 +02:00
Michael Weiss
873b0db6d5
Merge pull request #197348 from primeos/chromiumDev
chromiumDev: 108.0.5355.0 -> 108.0.5359.10
2022-10-23 13:44:58 +02:00
Michael Weiss
7910d3db26
chromiumDev: 108.0.5355.0 -> 108.0.5359.10 2022-10-23 11:28:53 +02:00
Michael Weiss
0db31aa5aa
chromiumBeta: 107.0.5304.36 -> 107.0.5304.62 2022-10-23 11:28:37 +02:00
Michael Weiss
a885b62d41
Merge pull request #196015 from primeos/chromiumBeta
chromiumBeta: 107.0.5304.29 -> 107.0.5304.36
2022-10-15 13:58:27 +02:00
Michael Weiss
53f7c7150e
chromiumDev: 108.0.5343.2 -> 108.0.5355.0 2022-10-14 18:59:20 +02:00
Michael Weiss
282eb843e0
chromiumBeta: 107.0.5304.29 -> 107.0.5304.36 2022-10-14 18:58:56 +02:00
Michael Weiss
e6896c17ca
Merge pull request #195697 from primeos/ungoogled-chromium
ungoogled-chromium: 106.0.5249.103 -> 106.0.5249.119
2022-10-12 21:32:33 +02:00
Michael Weiss
10e5fa68de
ungoogled-chromium: 106.0.5249.103 -> 106.0.5249.119 2022-10-12 20:08:35 +02:00
Michael Weiss
c8d4492a8d
chromium: 106.0.5249.103 -> 106.0.5249.119
https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_11.html

This update includes 6 security fixes.

CVEs:
CVE-2022-3445 CVE-2022-3446 CVE-2022-3447 CVE-2022-3448 CVE-2022-3449
CVE-2022-3450
2022-10-12 20:08:11 +02:00
Michael Weiss
950f286392
Merge pull request #195407 from primeos/chromiumDev
chromiumDev: 108.0.5327.0 -> 108.0.5343.2
2022-10-11 20:51:31 +02:00
Michael Weiss
8925eb6e90
Merge pull request #195406 from primeos/chromiumBeta
chromiumBeta: 107.0.5304.18 -> 107.0.5304.29
2022-10-11 20:51:08 +02:00
Michael Weiss
9cf7da7f42
Merge pull request #195405 from primeos/chromium
chromium: 106.0.5249.91 -> 106.0.5249.103
2022-10-11 20:50:37 +02:00
Martin Weinelt
85713b7e37 Merge remote-tracking branch 'origin/master' into staging-next 2022-10-11 00:18:04 +02:00
Michael Weiss
6ea106f4d8
chromiumDev: 108.0.5327.0 -> 108.0.5343.2 2022-10-10 21:56:45 +02:00
Michael Weiss
979047f732
chromiumBeta: 107.0.5304.18 -> 107.0.5304.29 2022-10-10 21:56:29 +02:00
Michael Weiss
420363e3ce
chromium: 106.0.5249.91 -> 106.0.5249.103
https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop.html
2022-10-10 21:56:09 +02:00
Michael Adler
00a62633db ungoogled-chromium: 106.0.5249.91 -> 106.0.5249.103 2022-10-10 08:06:41 +02:00
github-actions[bot]
d2cd24fe6a
Merge master into staging-next 2022-10-08 18:01:07 +00:00
Konstantin Alekseev
c02b06d612 chromedriver: fix darwin aarch64 2022-10-08 16:15:57 +03:00
github-actions[bot]
4c298a6859
Merge master into staging-next 2022-10-06 00:04:40 +00:00
Michael Weiss
a989aa4619
Merge pull request #194632 from primeos/chromium
chromium: 106.0.5249.61 -> 106.0.5249.91
2022-10-05 23:00:17 +02:00
Michael Weiss
796e6bb38b
Merge pull request #194629 from primeos/chromiumBeta
chromiumBeta: 106.0.5249.61 -> 107.0.5304.18
2022-10-05 22:54:40 +02:00
Michael Weiss
39cb46803e
Merge pull request #194630 from primeos/chromiumDev
chromiumDev: 107.0.5304.10 -> 108.0.5327.0
2022-10-05 22:54:28 +02:00
Michael Weiss
ff92f35b83
chromium: 106.0.5249.61 -> 106.0.5249.91
https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_30.html

This update includes 3 security fixes.

CVEs:
CVE-2022-3370 CVE-2022-3373
2022-10-05 20:26:34 +02:00
Michael Weiss
3d50284bb2
chromedriver: Disable on aarch64-darwin
chromedriver_mac64_m1.zip is currently not available anymore and I do not have time to look into it:
path is '/nix/store/zhz7hrk94dc0dn7a42czhd1nz9142826-chromedriver_mac64.zip'
nix-prefetch-url https://chromedriver.storage.googleapis.com/106.0.5249.61/chromedriver_mac64_m1.zip
error: unable to download 'https://chromedriver.storage.googleapis.com/106.0.5249.61/chromedriver_mac64_m1.zip': HTTP error 404

       response body:

       <?xml version='1.0' encoding='UTF-8'?><Error><Code>NoSuchKey</Code><Message>The specified key does not exist.</Message><Details>No such object: chromedriver/106.0.5249.61/chromedriver_mac64_m1.zip</Details></Error>
2022-10-05 20:26:09 +02:00
Michael Weiss
ec50f7a5c3
chromiumDev: 107.0.5304.10 -> 108.0.5327.0 2022-10-05 20:19:02 +02:00
Michael Weiss
d88384313a
chromiumBeta: 106.0.5249.61 -> 107.0.5304.18 2022-10-05 20:18:47 +02:00
Michael Adler
d1c2066afb ungoogled-chromium: 106.0.5249.62 -> 106.0.5249.91 2022-10-03 17:28:02 +02:00
github-actions[bot]
e879e7d54e
Merge master into staging-next 2022-10-02 00:04:43 +00:00
maxine
c44d41af6a
Merge pull request #192659 from PaulGrandperrin/vscode-fix-wayland
electron apps: fix wayland window decorations
2022-10-02 01:32:08 +02:00
github-actions[bot]
9c14978f84
Merge master into staging-next 2022-09-29 12:01:25 +00:00
Michael Weiss
851375d6e9
ungoogled-chromium: 105.0.5195.127 -> 106.0.5249.62 2022-09-28 22:11:22 +02:00
github-actions[bot]
f18d801779
Merge staging-next into staging 2022-09-28 18:05:53 +00:00
Paul Grandperrin
aeaeca819d NIXOS_OZONE_WL: fix wayland window decorations 2022-09-28 15:56:55 +02:00
Michael Weiss
22efe771f8
chromium: 105.0.5195.125 -> 106.0.5249.61
https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop_27.html

This update includes 20 security fixes.

CVEs:
CVE-2022-3304 CVE-2022-3201 CVE-2022-3305 CVE-2022-3306 CVE-2022-3307
CVE-2022-3308 CVE-2022-3309 CVE-2022-3310 CVE-2022-3311 CVE-2022-3312
CVE-2022-3313 CVE-2022-3314 CVE-2022-3315 CVE-2022-3316 CVE-2022-3317
CVE-2022-3318
2022-09-27 20:29:10 +02:00
github-actions[bot]
d645d61d7a
Merge staging-next into staging 2022-09-27 00:07:09 +00:00
Michael Weiss
b5c192b290
Merge pull request #193097 from primeos/chromiumBeta
chromiumBeta: 106.0.5249.40 -> 106.0.5249.61
2022-09-27 00:39:01 +02:00
Michael Weiss
f0b04d6fed
chromiumDev: 107.0.5300.0 -> 107.0.5304.10 2022-09-26 23:27:30 +02:00
Michael Weiss
8af33e21dd
chromiumBeta: 106.0.5249.51 -> 106.0.5249.61 2022-09-26 23:27:08 +02:00
Michael Weiss
b9c0438331
chromiumBeta: 106.0.5249.40 -> 106.0.5249.51 2022-09-26 23:27:05 +02:00
Graham Christensen
c2b898da76 treewide: drop -l$NIX_BUILD_CORES
Passing `-l$NIX_BUILD_CORES` improperly limits the overall system load.

For a build machine which is configured to run `$B` builds where each
build gets `total cores / B` cores (`$C`), passing `-l $C` to make will
improperly limit the load to `$C` instead of `$B * $C`.

This effect becomes quite pronounced on machines with 80 cores, with
40 simultaneous builds and a cores limit of 2. On a machine with this
configuration, Nix will run 40 builds and make will limit the overall
system load to approximately 2. A build machine with this many cores
can happily run with a load approaching 80.

A non-solution is to oversubscribe the machine, by picking a larger
`$C`. However, there is no way to divide the number of cores in a way
which fairly subdivides the available cores when `$B` is greater than
1.

There has been exploration of passing a jobserver in to the sandbox,
or sharing a jobserver between all the builds. This is one option, but
relatively complicated and only supports make. Lots of other software
uses its own implementation of `-j` and doesn't support either `-l` or
the Make jobserver.

For the case of an interactive user machine, the user should limit
overall system load using `$B`, `$C`, and optionally systemd's
cpu/network/io limiting features.

Making this change should significantly improve the utilization of our
build farm, and improve the throughput of Hydra.
2022-09-22 16:01:23 -04:00
Michael Weiss
5498855d03
Merge pull request #191162 from primeos/ungoogled-chromium
ungoogled-chromium: 105.0.5195.102 -> 105.0.5195.127
2022-09-16 23:48:13 +02:00
Michael Weiss
c152da3947
Merge pull request #191161 from primeos/chromium
chromium: 105.0.5195.102 -> 105.0.5195.125
2022-09-16 23:47:39 +02:00
Michael Weiss
a182b61de3
Merge pull request #191555 from primeos/chromiumBeta
chromiumBeta: 106.0.5249.30 -> 106.0.5249.40
2022-09-16 23:46:44 +02:00
Michael Weiss
b7e5d303be
chromiumDev: 107.0.5286.2 -> 107.0.5300.0 2022-09-16 22:48:29 +02:00
Michael Weiss
bf2d2a7fbb
chromiumBeta: 106.0.5249.30 -> 106.0.5249.40 2022-09-16 22:48:15 +02:00