[artix-general] [universe][thunderbird-artix] differences with arch extra thunderbird

[artist]

As per https://forum.artixlinux.org/index.php/topic,2511.0.html 
<https://forum.artixlinux.org/index.php/topic,2511.0.html> :

Sequoia Octopus OpenPGP Mail Encryption for Thunderbird is now available 
as package sequoia-octopus-librnp in the Artix Universe repo.

According to 
https://sequoia-pgp.org/blog/2021/04/08/202103-a-new-backend-for-thunderbird/ 
<https://sequoia-pgp.org/blog/2021/04/08/202103-a-new-backend-for-thunderbird/> 
the Sequoia Octopus OpenPGP library is:

/Super powering end-to-end email encryption in Mozilla Thunderbird/

Warning and known limitations from the project itself:

/WARNING WARNING WARNING//
//This is a young project.  Use it with caution with your production 

Thunderbird profile and production keys, and make sure you have a backup 
(of at least pubring.gpg, secring.gpg, and openpgp.sqlite) and know how 
to recover.//
//
//Known limitations//
/

  * /There may be dragons./
  * /When Thunderbird auto-updates, it overwrites the Octopus' version
    of librnp.so with its own version. This issue has been reported to
    Thunderbird./
  * /Thunderbird reads and caches the available certificates on startup.
    Thus if you add a new certificate to gpg, even though the Octopus
    will load it, Thunderbird will not notice it until either you
    manually reimport the keys using Thunderbird's OpenPGP Keyring
    Manager, File, Reload Key Cache, or you restart Thunderbird./

/Note: Thunderbird only caches the list of keys and some meta-data, so 
it will normally take advantage of any updates inserted into the gpg 
keystore or fetched via Parcimonie./

To install and activate:

  * Move file /usr/lib/thunderbird/librnp.so to another location
  * Install package sequoia-octopus-librnp
  * ln -s /usr/lib/sequoia-octopus-librnp/libsequoia_octopus_librnp.so
    /usr/lib/thunderbird/librnp.so

Note: Thunderbird updates replace /usr/lib/thunderbird/librnp.so 
requiring redo of the above steps

To verify if the Sequoia Octopus OpenPGP library is being used, start 
Thunderbird from the command line; the output should show a line like:
console.debug: "Successfully loaded OpenPGP library librnp.so version 
1.0.1+sequoia-openpgp-1.1.0 from /usr/lib/thunderbird/librnp.so"

For information on how to enable the universe repository check 
https://wiki.artixlinux.org/Main/Repositories 
<https://wiki.artixlinux.org/Main/Repositories>

--

On 4/18/21 10:54 PM, Javier wrote:
> On 4/18/21 3:32 AM, artist wrote:
>> Hi Javier,
>>
>> It's named thunderbird-artix as indeed when named thunderbird the order 
> of included repo's in pacman.conf would determine which one would be 
> installed, which might lead to confusion and issues.
>>
>> One of the reasons to provide thunderbird-artix is that it's critical 
>> that any security issues in an email client are fixed asap, but 
>> Arch's updates of Thunderbird are almost always weeks behind. 
>> Thunderbird-artix is available within a day of a new Thunderbird 
>> release. Also, the api integrations for ie. location services for 
>> Google and Mozilla have been disabled, as well as crashreporter and 
>> updater, and jack audio is enabled.
>>
>> Thx for the hint about octopus, which seems interesting.
>>
>> Regards,
>> artist
>
>
> BTW, there have been a couple of interesting additional posts 
> regarding octupus on Arch [7][8], in case that's an option (apparently 
> no need to patch TB, but I can't tell for sure).  I'll be exploring 
> those when having some time, but I wouldn't complain if integrated to 
> Artix before I can take a look :)
>
> Thanks for clarifying about the diffs on thunderbird-artix.  I like 
> the location being disabled by default.
>
> Thanks again !
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.artixlinux.org/archives/artix-general/attachments/20210425/858714c5/attachment.htm>