[blfs-support] Chromium

willie at tuta.io willie at tuta.io
Wed Nov 25 11:21:51 PST 2015


25. Nov 2015 19:34 by richard.melville69 at googlemail.com:


> On 25 November 2015 at 17:55, Ken Moffat <> zarniwhoop at ntlworld.com> > 
> wrote:
>> On Wed, Nov 25, 2015 at 11:50:43AM +0000, Richard Melville wrote:
>>> On 25 November 2015 at 10:07,  <>>> willie at tuta.io>>> > wrote:
>>> > Hello everyone,
>>> >
>>> > For the past year I've been using Chromium and Firefox on BLFS. The 
>>> chromium
>>> > browser is the open source version of Chrome and works really fast. I'm
>>> > wondering if there is enough interest in adding and maintaining this in 
>>> the
>>> > book?
>>> >
>>> > It has plenty of dependencies, which are all in the BLFS book, except 
>>> the
>>> > build tool "ninja" which you can compile in around 0.1 SBU, don't 
>>> install
>>> > and then use for compiling chromium. Afterwards you can remove it so 
>>> it's
>>> > not really a dependency.
>>> >
>>> > Compilation time is comparable to LibreOffice, around 200 SBU.
>>> >
>>> > I build chromium mainly based on the scripts from Arch linux and 
>>> Gentoo.
>>>
>>>
>>> I like the idea -- I haven't built it myself, but I have used it.
>>> Recently I've been looking at the Iridium >>> https://iridiumbrowser.de
>>> alternative, a secure browser built on Chromium but with all the
>>> Google "call home" stuff removed.  The source code, as well as the
>>> binaries, is available on the website; maybe it's a better
>>> alternative.
>>>
>>
>> When chromium was mentioned in the past, I think that the size was
>> as much of a problem as the build times (lots of local, modified,
>> libraries in the source).  Add in the "call home" stuff and I cannot
>> see the point of trying to build it (I used to have small
>> partitions).
>>
>> Also, in the past few months my impression is that there were many
>> vulnerabilities being found in chromium.  I don't keep a count, but I
>> have seen several mentions in the security reports of lwn - looking
>> there, and ignoring what appear to be multiple reports for the same
>> family of distros, in the last month (from October 26th) I think that
>> Mageia has updated twice, OpenSuse 3 times, and Arch once (it is
>> possible that Arch were ahead of the game, they had a batch of fixes
>> 12 days earlier).  That sounds like a lot of work to keep the book
>> current, particularly for a package which is so slow to build.
>>
>> Iridium sounds nicer, but I have no idea how the maintenance burden
>> would compare.  Also, looking at their tarballs, the size is growing
>> as badly as firefox, but from a higher base (347M for 46, 378M for
>> 47 -test1).
>
> I hadn't noticed the size of the tarball -- that is huge.
>
> Richard
> --
>

Thanks for the feedback, yes the tarball is huge.

Regarding the vulnerabilities, these are all pretty small compared to 
Firefox, because Chromium runs in a solid sandbox there are no remotely 
exploitable bugs AFAIK. Sometimes a new version is released because of a new 
Adobe Flash version (which is only included in Chrome, not in Chromium).

Regarding the privacy settings, I use the Inox patchset to reduce the Google 
dependencies, it's similar to Iridium but it keeps the Chromium source as a 
base instead of forking: https://github.com/gcarq/inox-patchset

There are a lot of dependencies built in, but with system libvpx-1.5.0, a 
Gentoo ffmpeg patch, the Arch Linux system ICU commands, I can use most (all) 
system libraries instead of the bundled ones.

Anyway, if anyone is interested, I can provide a build script. So far, I get 
the feeling there is a lack of interest in Chromium on LFS, at least to 
include and maintain it in the book. This is ldd for chromium.

    linux-vdso.so.1 (0x00007ffd46f79000)
    librt.so.1 => /lib/librt.so.1 (0x00007ff439097000)
    libdl.so.2 => /lib/libdl.so.2 (0x00007ff438e93000)
    libgobject-2.0.so.0 => /usr/lib/libgobject-2.0.so.0 (0x00007ff438c42000)
    libglib-2.0.so.0 => /usr/lib/libglib-2.0.so.0 (0x00007ff438936000)
    libevent-2.0.so.5 => /usr/lib/libevent-2.0.so.5 (0x00007ff4386ef000)
    libicui18n.so.56 => /usr/lib64/libicui18n.so.56 (0x00007ff43827c000)
    libicuuc.so.56 => /usr/lib64/libicuuc.so.56 (0x00007ff437eea000)
    libnss3.so => /usr/lib/libnss3.so (0x00007ff437bcb000)
    libnssutil3.so => /usr/lib/libnssutil3.so (0x00007ff43799f000)
    libsmime3.so => /usr/lib/libsmime3.so (0x00007ff437778000)
    libnspr4.so => /usr/lib/libnspr4.so (0x00007ff437531000)
    libz.so.1 => /lib/libz.so.1 (0x00007ff43731c000)
    libgio-2.0.so.0 => /usr/lib/libgio-2.0.so.0 (0x00007ff436fa2000)
    libxml2.so.2 => /usr/lib/libxml2.so.2 (0x00007ff436c40000)
    libfontconfig.so.1 => /usr/lib/libfontconfig.so.1 (0x00007ff436a03000)
    libfreetype.so.6 => /usr/lib/libfreetype.so.6 (0x00007ff43674d000)
    libpangocairo-1.0.so.0 => /usr/lib/libpangocairo-1.0.so.0 
(0x00007ff436540000)
    libcairo.so.2 => /usr/lib/libcairo.so.2 (0x00007ff436235000)
    libpango-1.0.so.0 => /usr/lib/libpango-1.0.so.0 (0x00007ff435fea000)
    libharfbuzz.so.0 => /usr/lib/libharfbuzz.so.0 (0x00007ff435d8c000)
    libpng16.so.16 => /usr/lib/libpng16.so.16 (0x00007ff435b59000)
    libjpeg.so.8 => /usr/lib/libjpeg.so.8 (0x00007ff435902000)
    libX11.so.6 => /usr/lib/libX11.so.6 (0x00007ff4355c8000)
    libXi.so.6 => /usr/lib/libXi.so.6 (0x00007ff4353b9000)
    libXcursor.so.1 => /usr/lib/libXcursor.so.1 (0x00007ff4351af000)
    libXext.so.6 => /usr/lib/libXext.so.6 (0x00007ff434f9e000)
    libXfixes.so.3 => /usr/lib/libXfixes.so.3 (0x00007ff434d99000)
    libXrender.so.1 => /usr/lib/libXrender.so.1 (0x00007ff434b90000)
    libXss.so.1 => /usr/lib/libXss.so.1 (0x00007ff43498d000)
    libminizip.so.1 => /usr/lib/libminizip.so.1 (0x00007ff434782000)
    libatk-1.0.so.0 => /usr/lib/libatk-1.0.so.0 (0x00007ff43455d000)
    libpci.so.3 => /usr/lib/libpci.so.3 (0x00007ff434351000)
    libXcomposite.so.1 => /usr/lib/libXcomposite.so.1 (0x00007ff43414f000)
    libasound.so.2 => /usr/lib/libasound.so.2 (0x00007ff433e59000)
    libXdamage.so.1 => /usr/lib/libXdamage.so.1 (0x00007ff433c57000)
    libXtst.so.6 => /usr/lib/libXtst.so.6 (0x00007ff433a52000)
    libXrandr.so.2 => /usr/lib/libXrandr.so.2 (0x00007ff433849000)
    libxslt.so.1 => /usr/lib/libxslt.so.1 (0x00007ff43360b000)
    libcups.so.2 => /usr/lib/libcups.so.2 (0x00007ff43338d000)
    libpthread.so.0 => /lib/libpthread.so.0 (0x00007ff433170000)
    libdbus-1.so.3 => /usr/lib/libdbus-1.so.3 (0x00007ff432f22000)
    libFLAC.so.8 => /usr/lib/libFLAC.so.8 (0x00007ff432cb1000)
    libexpat.so.1 => /usr/lib/libexpat.so.1 (0x00007ff432a88000)
    libgtk-x11-2.0.so.0 => /usr/lib/libgtk-x11-2.0.so.0 (0x00007ff43244d000)
    libgdk-x11-2.0.so.0 => /usr/lib/libgdk-x11-2.0.so.0 (0x00007ff43219c000)
    libgdk_pixbuf-2.0.so.0 => /usr/lib/libgdk_pixbuf-2.0.so.0 
(0x00007ff431f7a000)
    libstdc++.so.6 => /usr/lib/libstdc++.so.6 (0x00007ff431bff000)
    libm.so.6 => /lib/libm.so.6 (0x00007ff431908000)
    libgcc_s.so.1 => /usr/lib/libgcc_s.so.1 (0x00007ff4316f2000)
    libc.so.6 => /lib/libc.so.6 (0x00007ff43134e000)
    /lib64/ld-linux-x86-64.so.2 (0x00007ff43929f000)
    libpcre.so.1 => /lib/libpcre.so.1 (0x00007ff43110c000)
    libffi.so.6 => /usr/lib/../lib64/libffi.so.6 (0x00007ff430f04000)
    libicudata.so.56 => /usr/lib64/libicudata.so.56 (0x00007ff42f521000)
    libplc4.so => /usr/lib/libplc4.so (0x00007ff42f31d000)
    libplds4.so => /usr/lib/libplds4.so (0x00007ff42f11a000)
    libgmodule-2.0.so.0 => /usr/lib/../lib64/libgmodule-2.0.so.0 
(0x00007ff42ef17000)
    libresolv.so.2 => /lib/libresolv.so.2 (0x00007ff42ed00000)
    liblzma.so.5 => /lib/liblzma.so.5 (0x00007ff42eadb000)
    libbz2.so.1.0 => /lib/libbz2.so.1.0 (0x00007ff42e8cb000)
    libpixman-1.so.0 => /usr/lib/../lib64/libpixman-1.so.0 
(0x00007ff42e629000)
    libxcb-shm.so.0 => /usr/lib/../lib64/libxcb-shm.so.0 (0x00007ff42e427000)
    libxcb-render.so.0 => /usr/lib/../lib64/libxcb-render.so.0 
(0x00007ff42e21f000)
    libxcb.so.1 => /usr/lib/../lib64/libxcb.so.1 (0x00007ff42e001000)
    libXau.so.6 => /usr/lib/../lib64/libXau.so.6 (0x00007ff42ddfe000)
    libXdmcp.so.6 => /usr/lib/../lib64/libXdmcp.so.6 (0x00007ff42dbf9000)
    libpangoft2-1.0.so.0 => /usr/lib/../lib64/libpangoft2-1.0.so.0 
(0x00007ff42d9e5000)
    libgthread-2.0.so.0 => /usr/lib/../lib64/libgthread-2.0.so.0 
(0x00007ff42d7e4000)
    libudev.so.1 => /lib/libudev.so.1 (0x00007ff42d5bf000)
    libgnutls.so.30 => /usr/lib/libgnutls.so.30 (0x00007ff42d2a7000)
    libcrypt.so.1 => /lib/libcrypt.so.1 (0x00007ff42d070000)
    libogg.so.0 => /usr/lib/libogg.so.0 (0x00007ff42ce6a000)
    libXinerama.so.1 => /usr/lib/../lib64/libXinerama.so.1 
(0x00007ff42cc68000)
    libtasn1.so.6 => /usr/lib/libtasn1.so.6 (0x00007ff42ca56000)
    libnettle.so.6 => /usr/lib/libnettle.so.6 (0x00007ff42c821000)
    libhogweed.so.4 => /usr/lib/libhogweed.so.4 (0x00007ff42c5ee000)
    libgmp.so.10 => /usr/lib/libgmp.so.10 (0x00007ff42c379000)


---
Willie
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.linuxfromscratch.org/pipermail/blfs-support/attachments/20151125/2d5ae6eb/attachment.html>


More information about the blfs-support mailing list