[Pkg-privacy-maintainers] Bug#926042: Bug#926042: torbrowser-launcher should not be included in Buster

[intrigeri]

Hi,

Antoine Beaupré:
> On 2019-05-03 17:15:59, intrigeri wrote:
>>>  1. maintain through backports (seems to have been the option taken for
>>>     stretch)
>>
>> That might be viable if the AppArmor profiles are disabled by default.

> Why would we disable apparmor profiles?

See the "2." part of my original bug report.

>>>  2. drop TBL and rewrite it as a one-shot installer, like we had for
>>>     Flash, mstt-corefonts and still have (I suspect?) for other packages
>>
>> I'm curious: how would that installer differ from TBL in practice?
>>
>> It seems to me that current TBL is essentially a one-shot installer +
>> a .desktop file + some AppArmor profiles.

> I think TBL checks for updates at every start. Such a one-shot installer
> would deploy TBB and get out of the way after.

I see. I thought this check was removed at the same time as the code
that performs upgrades but I can very well be mistaken :)

>>>  4. drop TBL and shipp TBB directly in Debian
>>
>>> Option 4, therefore, would require more ambitious packaging work. Maybe
>>> we could talk with upstream to see if that would be possible? There are
>>> Debian packages for Firefox, after all - how hard could it possibly be
>>> to do the same for TBB? ;)
>>
>> This has been discussed numerous times in the past. I don't recall the
>> details but what I remember is: it requires lots of hard work.
>> Personally, I don't think it's worth the effort. There's a ticket on
>> Tor's Trac about it, that might even have the relevant info.

> "There's a ticket on Tor's Trac about it" is one of those statements
> that sounds like "I have heard there is a green mouse crawling the
> sewers of a small town in rural Kazhakstan with the encryption key to
> the Russian nuclear arsenal".

Oh dear, how cute was this mouse? (</litteral mode>)

> In other words, do you have a ticket number because I have, like many
> others, lost all hope of finding anything in Trac that I don't already
> know where it is. ;)

It took me some time to find it but here it is:
https://trac.torproject.org/projects/tor/ticket/3994

> Is there a ticket for "package TBB for flatpak or snap" on Trac as well?
> ;)

For Flatpak there is https://trac.torproject.org/projects/tor/ticket/25578.

For Snap, there's been some discussion on tor-talk@ or tor-dev@
recently, after a Canonical employee served their marketing speech to
a Tor person.

Cheers,
-- 
intrigeri