# Maintainer: Evangelos Foutras # Contributor: Pierre Schmitz # Contributor: Jan "heftig" Steffens # Contributor: Daniel J Griffiths # ALARM: Kevin Mihelich # - makeflags to -j4 on v7, RAM constraints # - let build set march on AArch64 # - is_cfi=false, use_gold=false # - clang_use_default_sample_profile=false, AFDO breaks distcc # - use_allocator="none", tcmalloc breaks ARM # - patch and rebuild bundled eu-strip # - disable LTO on v7 highmem=1 pkgname=chromium pkgver=121.0.6167.139 pkgrel=2 _launcher_ver=8 _manual_clone=0 _system_clang=1 pkgdesc="A web browser built for speed, simplicity, and security" arch=('x86_64') url="https://www.chromium.org/Home" license=('BSD-3-Clause') depends=('gtk3' 'nss' 'alsa-lib' 'xdg-utils' 'libxss' 'libcups' 'libgcrypt' 'ttf-liberation' 'systemd' 'dbus' 'libpulse' 'pciutils' 'libva' 'libffi' 'desktop-file-utils' 'hicolor-icon-theme') makedepends=('python' 'gn' 'ninja' 'clang' 'lld' 'gperf' 'nodejs' 'pipewire' 'rust' 'qt5-base' 'java-runtime-headless' 'git') optdepends=('pipewire: WebRTC desktop sharing under Wayland' 'kdialog: support for native dialogs in Plasma' 'qt5-base: enable Qt5 with --enable-features=AllowQt' 'gtk4: for --gtk-version=4 (GTK4 IME might work better on Wayland)' 'org.freedesktop.secrets: password storage backend on GNOME / Xfce' 'kwallet: support for storing passwords in KWallet on Plasma') options=('!lto') # Chromium adds its own flags for ThinLTO source=(https://commondatastorage.googleapis.com/chromium-browser-official/chromium-$pkgver.tar.xz https://github.com/foutrelis/chromium-launcher/archive/v$_launcher_ver/chromium-launcher-$_launcher_ver.tar.gz https://gitlab.com/Matt.Jolly/chromium-patches/-/archive/${pkgver%%.*}/chromium-patches-${pkgver%%.*}.tar.bz2 REVERT-simplify-blink-NativeValueTraitsBase.patch::https://github.com/chromium/chromium/commit/940af9f2c87b.patch icu-74.patch chromium-121-constexpr.patch drop-flags-unsupported-by-clang16.patch compiler-rt-16.patch use-oauth2-client-switches-as-default.patch 0001-widevine-support-for-arm.patch 0002-Run-blink-bindings-generation-single-threaded.patch 0003-Fix-eu-strip-build-for-newer-GCC.patch) sha256sums=('e12cc967bef7a79630828792f02d95297a06eb905c98e4c6e065fd5e74d6f9ff' '213e50f48b67feb4441078d50b0fd431df34323be15be97c55302d3fdac4483a' 'e9113c1ed2900b84b488e608774ce25212d3c60094abdae005d8a943df9b505e' '318df8f8662071cebcdf953698408058e17f59f184500b7e12e01a04a4206b50' 'ff9ebd86b0010e1c604d47303ab209b1d76c3e888c423166779cefbc22de297f' '09677c39ff9b910c732a049252969bfa03587e70502765d68b0345bac396c0b2' '8d1cdf3ddd8ff98f302c90c13953f39cd804b3479b13b69b8ef138ac57c83556' '8a2649dcc6ff8d8f24ddbe40dc2a171824f681c6f33c39c4792b645b87c9dcab' 'e393174d7695d0bafed69e868c5fbfecf07aa6969f3b64596d0bae8b067e1711' 'b5bb3d0e2cd06aa92bb0ea62d6915dac1635cee79e9e1405cf17fe471baa393e' '01c8742f987e158245959561db7f7529254a81491954174be2ef8a4f226cbf42' '4b543a4f12b8f00765d3a2812c5452a60c5c07babc00fe2036edd6467462ecfe') if (( _manual_clone )); then source[0]=fetch-chromium-release makedepends+=('python-httplib2' 'python-pyparsing' 'python-six') fi # Possible replacements are listed in build/linux/unbundle/replace_gn_files.py # Keys are the names in the above script; values are the dependencies in Arch declare -gA _system_libs=( #[brotli]=brotli [dav1d]=dav1d #[ffmpeg]=ffmpeg # YouTube playback stopped working in Chromium 120 [flac]=flac [fontconfig]=fontconfig [freetype]=freetype2 [harfbuzz-ng]=harfbuzz [icu]=icu #[jsoncpp]=jsoncpp # needs libstdc++ #[libaom]=aom #[libavif]=libavif # needs https://github.com/AOMediaCodec/libavif/commit/5410b23f76 [libdrm]= [libjpeg]=libjpeg [libpng]=libpng #[libvpx]=libvpx [libwebp]=libwebp [libxml]=libxml2 [libxslt]=libxslt [opus]=opus #[re2]=re2 # needs libstdc++ #[snappy]=snappy # needs libstdc++ #[woff2]=woff2 # needs libstdc++ [zlib]=minizip ) _unwanted_bundled_libs=( $(printf "%s\n" ${!_system_libs[@]} | sed 's/^libjpeg$/&_turbo/') ) depends+=(${_system_libs[@]}) # Google API keys (see https://www.chromium.org/developers/how-tos/api-keys) # Note: These are for Arch Linux use ONLY. For your own distribution, please # get your own set of keys. # # Starting with Chromium 89 (2021-03-02) the OAuth2 credentials have been left # out: https://archlinux.org/news/chromium-losing-sync-support-in-early-march/ # - Arch Linux ARM has obtained permission to use the Arch Linux keys. _google_api_key=AIzaSyDwr302FpOSkGRpLlUpPThNTDPbXcIn_FM prepare() { if (( _manual_clone )); then ./fetch-chromium-release $pkgver fi cd chromium-$pkgver # Allow building against system libraries in official builds sed -i 's/OFFICIAL_BUILD/GOOGLE_CHROME_BUILD/' \ tools/generate_shim_headers/generate_shim_headers.py # Arch Linux ARM fixes patch -p1 -i ../0001-widevine-support-for-arm.patch patch -p1 -i ../0002-Run-blink-bindings-generation-single-threaded.patch patch -p1 -i ../0003-Fix-eu-strip-build-for-newer-GCC.patch if [[ $CARCH == "armv7h" ]]; then export ALARM_NINJA_JOBS="4" export MAKEFLAGS="-j4" fi # Allow build to set march and options on AArch64 (crc, crypto) [[ $CARCH == "aarch64" ]] && CFLAGS=`echo $CFLAGS | sed -e 's/-march=armv8-a//'` && CXXFLAGS="$CFLAGS" # https://crbug.com/893950 sed -i -e 's/\/malloc/' -e 's/\/free/' \ third_party/blink/renderer/core/xml/*.cc \ third_party/blink/renderer/core/xml/parser/xml_document_parser.cc \ third_party/libxml/chromium/*.cc \ third_party/maldoca/src/maldoca/ole/oss_utils.h # Use the --oauth2-client-id= and --oauth2-client-secret= switches for # setting GOOGLE_DEFAULT_CLIENT_ID and GOOGLE_DEFAULT_CLIENT_SECRET at # runtime -- this allows signing into Chromium without baked-in values patch -Np1 -i ../use-oauth2-client-switches-as-default.patch # Upstream fixes # Fix build with ICU 74 patch -Np1 -i ../icu-74.patch # Fix "error: defaulted definition of equality comparison operator cannot # be declared constexpr because it invokes a non-constexpr comparison # function" (patch from Fedora) patch -Np1 -i ../chromium-121-constexpr.patch # Revert usage of C++20 features which likely need newer clang patch -Rp1 -i ../REVERT-simplify-blink-NativeValueTraitsBase.patch # Drop compiler flags that need newer clang patch -Np1 -i ../drop-flags-unsupported-by-clang16.patch # Allow libclang_rt.builtins from compiler-rt 16 to be used patch -Np1 -i ../compiler-rt-16.patch # Fixes for building with libstdc++ instead of libc++ patch -Np1 -i ../chromium-patches-*/chromium-114-ruy-include.patch patch -Np1 -i ../chromium-patches-*/chromium-117-material-color-include.patch patch -Np1 -i ../chromium-patches-*/chromium-119-clang16.patch # Link to system tools required by the build mkdir -p third_party/node/linux/node-linux-x64/bin ln -s /usr/bin/node third_party/node/linux/node-linux-x64/bin/ ln -s /usr/bin/java third_party/jdk/current/bin/ if (( !_system_clang )); then # Use prebuilt rust as system rust cannot be used due to the error: # error: the option `Z` is only accepted on the nightly compiler ./tools/rust/update_rust.py # To link to rust libraries we need to compile with prebuilt clang ./tools/clang/scripts/update.py fi # Remove bundled libraries for which we will use the system copies; this # *should* do what the remove_bundled_libraries.py script does, with the # added benefit of not having to list all the remaining libraries local _lib for _lib in ${_unwanted_bundled_libs[@]}; do find "third_party/$_lib" -type f \ \! -path "third_party/$_lib/chromium/*" \ \! -path "third_party/$_lib/google/*" \ \! -path "third_party/harfbuzz-ng/utils/hb_scoped.h" \ \! -regex '.*\.\(gn\|gni\|isolate\)' \ -delete done ./build/linux/unbundle/replace_gn_files.py \ --system-libraries "${!_system_libs[@]}" } build() { make -C chromium-launcher-$_launcher_ver cd chromium-$pkgver # Rebuild eu-strip pushd buildtools/third_party/eu-strip ./build.sh popd if (( _system_clang )); then export CC=clang export CXX=clang++ export AR=ar export NM=nm else local _clang_path="$PWD/third_party/llvm-build/Release+Asserts/bin" export CC=$_clang_path/clang export CXX=$_clang_path/clang++ export AR=$_clang_path/llvm-ar export NM=$_clang_path/llvm-nm fi local _flags=( 'custom_toolchain="//build/toolchain/linux/unbundle:default"' 'host_toolchain="//build/toolchain/linux/unbundle:default"' 'clang_use_default_sample_profile=false' 'use_allocator="none"' 'is_official_build=true' # implies is_cfi=true on x86_64 'symbol_level=0' # sufficient for backtraces on x86(_64) 'is_cfi=false' 'treat_warnings_as_errors=false' 'disable_fieldtrial_testing_config=true' 'blink_enable_generated_code_formatting=false' 'ffmpeg_branding="Chrome"' 'proprietary_codecs=true' 'rtc_use_pipewire=true' 'link_pulseaudio=true' 'use_custom_libcxx=true' # https://github.com/llvm/llvm-project/issues/61705 'use_gold=false' 'use_sysroot=false' 'use_system_libffi=true' 'enable_hangout_services_extension=true' 'enable_widevine=true' 'enable_nacl=false' 'enable_rust=false' "google_api_key=\"$_google_api_key\"" ) if [[ -n ${_system_libs[icu]+set} ]]; then _flags+=('icu_use_data_file=false') fi if (( _system_clang )); then local _clang_version=$( clang --version | grep -m1 version | sed 's/.* \([0-9]\+\).*/\1/') _flags+=( 'clang_base_path="/usr"' 'clang_use_chrome_plugins=false' "clang_version=\"$_clang_version\"" 'chrome_pgo_phase=0' # needs newer clang to read the bundled PGO profile ) # Allow the use of nightly features with stable Rust compiler # https://github.com/ungoogled-software/ungoogled-chromium/pull/2696#issuecomment-1918173198 export RUSTC_BOOTSTRAP=1 _flags+=( 'rust_sysroot_absolute="/usr"' "rustc_version=\"$(rustc --version)\"" ) fi if [[ $CARCH == "armv7h" ]]; then _flags+=('use_thin_lto=false') fi # Facilitate deterministic builds (taken from build/config/compiler/BUILD.gn) CFLAGS+=' -Wno-builtin-macro-redefined' CXXFLAGS+=' -Wno-builtin-macro-redefined' CPPFLAGS+=' -D__DATE__= -D__TIME__= -D__TIMESTAMP__=' # Do not warn about unknown warning options CFLAGS+=' -Wno-unknown-warning-option' CXXFLAGS+=' -Wno-unknown-warning-option' # Let Chromium set its own symbol level CFLAGS=${CFLAGS/-g } CXXFLAGS=${CXXFLAGS/-g } # https://github.com/ungoogled-software/ungoogled-chromium-archlinux/issues/123 CFLAGS=${CFLAGS/-fexceptions} CFLAGS=${CFLAGS/-fcf-protection} CXXFLAGS=${CXXFLAGS/-fexceptions} CXXFLAGS=${CXXFLAGS/-fcf-protection} # This appears to cause random segfaults when combined with ThinLTO # https://bugs.archlinux.org/task/73518 CFLAGS=${CFLAGS/-fstack-clash-protection} CXXFLAGS=${CXXFLAGS/-fstack-clash-protection} # https://crbug.com/957519#c122 CXXFLAGS=${CXXFLAGS/-Wp,-D_GLIBCXX_ASSERTIONS} gn gen out/Release --args="${_flags[*]}" ninja -C out/Release chrome chrome_sandbox chromedriver.unstripped } package() { cd chromium-launcher-$_launcher_ver make PREFIX=/usr DESTDIR="$pkgdir" install install -Dm644 LICENSE \ "$pkgdir/usr/share/licenses/chromium/LICENSE.launcher" cd ../chromium-$pkgver install -D out/Release/chrome "$pkgdir/usr/lib/chromium/chromium" install -Dm4755 out/Release/chrome_sandbox "$pkgdir/usr/lib/chromium/chrome-sandbox" install -Dm644 chrome/installer/linux/common/desktop.template \ "$pkgdir/usr/share/applications/chromium.desktop" install -Dm644 chrome/app/resources/manpage.1.in \ "$pkgdir/usr/share/man/man1/chromium.1" sed -i \ -e 's/@@MENUNAME@@/Chromium/g' \ -e 's/@@PACKAGE@@/chromium/g' \ -e 's/@@USR_BIN_SYMLINK_NAME@@/chromium/g' \ "$pkgdir/usr/share/applications/chromium.desktop" \ "$pkgdir/usr/share/man/man1/chromium.1" install -Dm644 chrome/installer/linux/common/chromium-browser/chromium-browser.appdata.xml \ "$pkgdir/usr/share/metainfo/chromium.appdata.xml" sed -ni \ -e 's/chromium-browser\.desktop/chromium.desktop/' \ -e '//d' \ -e '/

/N;/

\n.*\(We invite\|Chromium supports Vorbis\)/,/<\/p>/d' \ -e '/^