Firefox 95 Ready With RLBox Sandboxing Across All Platforms

[Charlie68]

Unfortunately I have already had two crashes since it arrived and it seems that the new sandbox is to blame, which I saw squirting 90% in the system monitor.
Personally I use both Firefox and Chrome, I'd rather use FF only, but Chrome is one of the few browsers that really works well in Linux ..

[CTTY]

Unfortunately I have already had two crashes since it arrived and it seems that the new sandbox is to blame

The RLBox was supported on linux before. The only part missing (which is now announced) is windows support. So have you had these RLBox issues also with 94?

[kvuj]

Finally got some time to build Firefox 95 and as predicted, WASM compilation is still broken:

0:07.06 checking nasm version... 2.16rc0
0:07.06 ERROR: Cannot find a wasi sysroot. Please give its location with --with-wasi-sysroot. Or build with --without-wasm-sandboxed-libraries.

Error running mach: ['build'] The error occurred in code that was called by the mach command. This is either a bug in the called code itself or in the way that mach is calling it. You can invoke |./mach busted| to check if this issue is already on file. If it isn't, please use |./mach busted file build| to report it. If |./mach busted| is misbehaving, you can also inspect the dependencies of bug 1543241.

Ehh, who cares. FF is garbage anyway at this point of time.

Not that I would have expected someone who is drunk on FOSS delusions to have the slightest bit of intelligence or knowledge about the complexities of compiling a web browser.

https://github.com/archlinux/svntogi...971875ca422R68

Also requires

wasi-compiler-rt wasi-libc wasi-libc++ wasi-libc++abi

as makedepends. (wasi-libc is by the WebAssembly team, while the others seems to come from the LLVM project)

[Sonadow]

https://github.com/archlinux/svntogi...971875ca422R68

Also requires as makedepends. (wasi-libc is by the WebAssembly team, while the others seems to come from the LLVM project)

Already have them:

clang -print-targets
 Registered Targets:
   amdgcn - AMD GCN GPUs
   bpf    - BPF (host endian)
   bpfeb  - BPF (big endian)
   bpfel  - BPF (little endian)
   r600   - AMD GPUs HD2XXX-HD6XXX
   wasm32 - WebAssembly 32-bit   <-----
   wasm64 - WebAssembly 64-bit   <-----
   x86    - 32-bit X86: Pentium-Pro and above
   x86-64 - 64-bit X86: EM64T and AMD64

wasi sysroot:

ls ./WASMsysroot-Build06Nov2021/
include  lib  share

ls ./WASMsysroot-Build06Nov2021/lib/wasm32-wasi/
crt1-command.o  libc.imports                        libdl.a       librt.a                    libwasi-emulated-process-clocks.a
crt1.o          libc-printscan-long-double.a        libm.a        libutil.a                  libwasi-emulated-signal.a
crt1-reactor.o  libc-printscan-no-floating-point.a  libpthread.a  libwasi-emulated-getpid.a  libxnet.a
libc.a          libcrypt.a                          libresolv.a   libwasi-emulated-mman.a


ls ./WASMsysroot-Build06Nov2021/include/
alloca.h          ftw.h                    langinfo.h            signal.h                     __struct_sockaddr_un.h  __typedef_in_port_t.h
ar.h              __function___isatty.h    libgen.h              stdalign.h                   __struct_stat.h         __typedef_mode_t.h
arpa              __functions_malloc.h     limits.h              stdbool.h                    __struct_timespec.h     __typedef_nfds_t.h
assert.h          __functions_memcpy.h     locale.h              stdc-predef.h                __struct_timeval.h      __typedef_nlink_t.h
bits              getopt.h                 __macro_FD_SETSIZE.h  stdint.h                     __struct_tm.h           __typedef_off_t.h
byteswap.h        glob.h                   __macro_PAGESIZE.h    stdio_ext.h                  __struct_tms.h          __typedef_sa_family_t.h
complex.h         __header_dirent.h        malloc.h              stdio.h                      sys                     __typedef_sigset_t.h
cpio.h            __header_fcntl.h         math.h                stdlib.h                     syscall.h               __typedef_socklen_t.h
crypt.h           __header_inttypes.h      memory.h              stdnoreturn.h                sysexits.h              __typedef_ssize_t.h
ctype.h           __header_netinet_in.h    __mode_t.h            string.h                     tar.h                   __typedef_suseconds_t.h
dirent.h          __header_poll.h          monetary.h            strings.h                    tgmath.h                __typedef_time_t.h
endian.h          __header_stdlib.h        mqueue.h              stropts.h                    threads.h               __typedef_uid_t.h
err.h             __header_string.h        net                   __struct_dirent.h            time.h                  uchar.h
__errno.h         __header_sys_ioctl.h     netinet               __struct_in6_addr.h          __typedef_blkcnt_t.h    unistd.h
errno.h           __header_sys_resource.h  netpacket             __struct_in_addr.h           __typedef_blksize_t.h   utime.h
__errno_values.h  __header_sys_socket.h    nl_types.h            __struct_iovec.h             __typedef_clockid_t.h   values.h
fcntl.h           __header_sys_stat.h      poll.h                __struct_msghdr.h            __typedef_clock_t.h     wasi
__fd_set.h        __header_time.h          regex.h               __struct_pollfd.h            __typedef_dev_t.h       wchar.h
features.h        __header_unistd.h        sched.h               __struct_rusage.h            __typedef_DIR.h         wctype.h
fenv.h            iconv.h                  scsi                  __struct_sockaddr.h          __typedef_fd_set.h
float.h           ifaddrs.h                search.h              __struct_sockaddr_in6.h      __typedef_gid_t.h
fmtmsg.h          inttypes.h               __seek.h              __struct_sockaddr_in.h       __typedef_in_addr_t.h
fnmatch.h         iso646.h                 semaphore.h           __struct_sockaddr_storage.h  __typedef_ino_t.h

Mozconfig:

ac_add_options --with-wasi-sysroot=/path/to/WASMsysroot-Build06Nov2021

[Charlie68]

The RLBox was supported on linux before. The only part missing (which is now announced) is windows support. So have you had these RLBox issues also with 94?

No, and honestly I had never seen that process before.

[kvuj]

Already have them:

clang -print-targets
Registered Targets:
amdgcn - AMD GCN GPUs
bpf - BPF (host endian)
bpfeb - BPF (big endian)
bpfel - BPF (little endian)
r600 - AMD GPUs HD2XXX-HD6XXX
wasm32 - WebAssembly 32-bit <-----
wasm64 - WebAssembly 64-bit <-----
x86 - 32-bit X86: Pentium-Pro and above
x86-64 - 64-bit X86: EM64T and AMD64

wasi sysroot:

ls ./WASMsysroot-Build06Nov2021/
include lib share

ls ./WASMsysroot-Build06Nov2021/lib/wasm32-wasi/
crt1-command.o libc.imports libdl.a librt.a libwasi-emulated-process-clocks.a
crt1.o libc-printscan-long-double.a libm.a libutil.a libwasi-emulated-signal.a
crt1-reactor.o libc-printscan-no-floating-point.a libpthread.a libwasi-emulated-getpid.a libxnet.a
libc.a libcrypt.a libresolv.a libwasi-emulated-mman.a


ls ./WASMsysroot-Build06Nov2021/include/
alloca.h ftw.h langinfo.h signal.h __struct_sockaddr_un.h __typedef_in_port_t.h
ar.h __function___isatty.h libgen.h stdalign.h __struct_stat.h __typedef_mode_t.h
arpa __functions_malloc.h limits.h stdbool.h __struct_timespec.h __typedef_nfds_t.h
assert.h __functions_memcpy.h locale.h stdc-predef.h __struct_timeval.h __typedef_nlink_t.h
bits getopt.h __macro_FD_SETSIZE.h stdint.h __struct_tm.h __typedef_off_t.h
byteswap.h glob.h __macro_PAGESIZE.h stdio_ext.h __struct_tms.h __typedef_sa_family_t.h
complex.h __header_dirent.h malloc.h stdio.h sys __typedef_sigset_t.h
cpio.h __header_fcntl.h math.h stdlib.h syscall.h __typedef_socklen_t.h
crypt.h __header_inttypes.h memory.h stdnoreturn.h sysexits.h __typedef_ssize_t.h
ctype.h __header_netinet_in.h __mode_t.h string.h tar.h __typedef_suseconds_t.h
dirent.h __header_poll.h monetary.h strings.h tgmath.h __typedef_time_t.h
endian.h __header_stdlib.h mqueue.h stropts.h threads.h __typedef_uid_t.h
err.h __header_string.h net __struct_dirent.h time.h uchar.h
__errno.h __header_sys_ioctl.h netinet __struct_in6_addr.h __typedef_blkcnt_t.h unistd.h
errno.h __header_sys_resource.h netpacket __struct_in_addr.h __typedef_blksize_t.h utime.h
__errno_values.h __header_sys_socket.h nl_types.h __struct_iovec.h __typedef_clockid_t.h values.h
fcntl.h __header_sys_stat.h poll.h __struct_msghdr.h __typedef_clock_t.h wasi
__fd_set.h __header_time.h regex.h __struct_pollfd.h __typedef_dev_t.h wchar.h
features.h __header_unistd.h sched.h __struct_rusage.h __typedef_DIR.h wctype.h
fenv.h iconv.h scsi __struct_sockaddr.h __typedef_fd_set.h
float.h ifaddrs.h search.h __struct_sockaddr_in6.h __typedef_gid_t.h
fmtmsg.h inttypes.h __seek.h __struct_sockaddr_in.h __typedef_in_addr_t.h
fnmatch.h iso646.h semaphore.h __struct_sockaddr_storage.h __typedef_ino_t.h

Mozconfig:

ac_add_options --with-wasi-sysroot=/path/to/WASMsysroot-Build06Nov2021

Interesting. It's quite odd since Arch and Freebsd both have successfully built FF with these options.

[CTTY]

No, and honestly I had never seen that process before.

What process exactly?

[Charlie68]

What process exactly?

I don't remember the exact name, but "isolated web" or something similar, however I have had an update and for the moment the problem has not occurred anymore.