# Contributor: lauren n. liberda # Contributor: Antoine Martin (ayakael) # Maintainer: Antoine Martin (ayakael) pkgname=signal-desktop pkgver=7.28.0 pkgrel=0 pkgdesc="A messaging app for simple private communication with friends" url="https://github.com/signalapp/Signal-Desktop/" # same as electron arch="aarch64 x86_64" license="AGPL-3.0-only" _llvmver=18 depends=" electron font-barlow font-eb-garamond font-inter font-parisienne " makedepends=" alsa-lib-dev aom-dev brotli-dev bsd-compat-headers cargo cargo-auditable cbindgen clang$_llvmver-dev cmake crc32c-dev dav1d-dev double-conversion-dev electron-dev electron-tasje ffmpeg-dev git-lfs glib-dev gn jsoncpp-dev libavif-dev libjpeg-turbo-dev libepoxy-dev libevent-dev libsecret-dev libvpx-dev libwebp-dev libxml2-dev lld$_llvmver llvm$_llvmver-dev mesa-dev nodejs npm openh264-dev openssl-dev opus-dev pipewire-dev protoc pulseaudio-dev py3-setuptools python3 samurai sqlcipher-dev vips-dev yarn " options="net !check" # use _check_depends to validate this _libsignalver=0.58.0 _ringrtcver=2.48.1 _webrtcver=6613c _stokenizerver=0.2.1 source=" https://github.com/signalapp/Signal-Desktop/archive/refs/tags/v$pkgver/Signal-Desktop-$pkgver.tar.gz https://github.com/signalapp/libsignal/archive/refs/tags/v$_libsignalver/libsignal-$_libsignalver.tar.gz https://github.com/signalapp/ringrtc/archive/refs/tags/v$_ringrtcver/ringrtc-$_ringrtcver.tar.gz https://ayakael.net/api/packages/mirrors/generic/webrtc/$_webrtcver/webrtc-$_webrtcver.tar.zst https://github.com/signalapp/Signal-FTS5-Extension/archive/refs/tags/v$_stokenizerver/stokenizer-$_stokenizerver.tar.gz bettersqlite-use-system-sqlcipher.patch libsignal-auditable.patch signal-disable-updates.patch signal-update-links.patch signal-show-window-please.patch ringrtc-webrtc-renamed.patch webrtc-shared-libs.patch webrtc-compiler.patch webrtc-gcc13.patch signal-desktop " builddir="$srcdir/Signal-Desktop-$pkgver" # webrtc broken on clang https://gcc.gnu.org/bugzilla/show_bug.cgi?id=101227 export CC=gcc export CXX=g++ # required to find the tools export AR=ar export NM=nm export LD=g++ # less log spam, reproducible, allow lto with rust export CFLAGS="${CFLAGS/-g/} -O2 -Wno-error -Wno-deprecated-builtins -Wno-unknown-warning-option -Wno-builtin-macro-redefined -Wno-deprecated-declarations" export CXXFLAGS="${CXXFLAGS/-g/} -O2 -Wno-error -Wno-deprecated-builtins -Wno-unknown-warning-option -Wno-builtin-macro-redefined -Wno-deprecated-declarations" export CPPFLAGS="$CPPFLAGS -D__DATE__= -D__TIME__= -D__TIMESTAMP__=" export CARGO_PROFILE_RELEASE_OPT_LEVEL=2 export CARGO_PROFILE_RELEASE_STRIP="symbols" #export RUSTFLAGS="$RUSTFLAGS -C linker=clang" export YARN_CACHE_FOLDER="$srcdir/.yarn" _check_depends() { # _libsignalver: follow signal-desktop package.json -> @signalapp/libsignal-client # _ringrtcver: follow signal-desktop package.json -> @signalapp/ringrtc # _webrtcver: follow ringrtc (on version above) -> config/version.properties -> webrtc.version # downloading tarball generated with abuild snapshot (with gclient dependencies fetched) # _stokenizerver: follow @signalapp/better-sqlite3 (on version in package.json) -> deps/download.js -> TOKENIZER_VERSION local _libsignalver=$(curl --silent https://raw.githubusercontent.com/signalapp/Signal-Desktop/v$pkgver/package-lock.json | grep "@signalapp/libsignal-client\": \"" | awk '{print $2}' | tr -d ',' | tr -d '"' | head -n 1) local _ringrtcver=$(curl --silent https://raw.githubusercontent.com/signalapp/Signal-Desktop/v$pkgver/package-lock.json | grep "@signalapp/ringrtc\": \"" | awk '{print $2}' | tr -d ',' | tr -d '"' | head -n 1) local _bsqlitever=$(curl --silent https://raw.githubusercontent.com/signalapp/Signal-Desktop/v$pkgver/package-lock.json | grep "@signalapp/better-sqlite3\": \"" | awk '{print $2}' | tr -d ',' | tr -d '"' | head -n 1) local _webrtcver=$(curl --silent https://raw.githubusercontent.com/signalapp/ringrtc/v$_ringrtcver/config/version.properties | awk -F '=' '{if($1 == "webrtc.version"){print $2}}' | head -n 1) local _stokenizerver=$(curl --silent https://raw.githubusercontent.com/signalapp/better-sqlite3/v$_bsqlitever/deps/download.js | grep "const TOKENIZER_VERSION" | awk '{print $4}' | tr -d "'" | tr -d ';' | head -n 1) echo _libsignalver=$_libsignalver echo _ringrtcver=$_ringrtcver echo _webrtcver=$_webrtcver echo _stokenizerver=$_stokenizerver } # webrtc only, the other dependencies are fine with tarballs _distbucket="sakamoto/lnl-aports-snapshots/" snapshot() { mkdir -p "$srcdir" cd "$srcdir" # cleanup if retrying rm -rf src rm -rf webrtc-$_webrtcver rm -f webrtc-$_webrtcver.tar rm -f webrtc-$_webrtcver.tar.zst echo " solutions = [{ 'name': 'src', 'url': 'https://github.com/signalapp/webrtc.git@$_webrtcver', }] target_cpu = ['x64', 'arm64'] target_cpu_only = True " > .gclient gclient sync --no-history --nohooks --tpot-cipd-ignore-platformed # needed DEPS hooks python3 'src/build/landmines.py' --landmine-scripts 'src/tools_webrtc/get_landmines.py' --src-dir 'src' python3 'src/build/util/lastchange.py' -o 'src/build/util/LASTCHANGE' for elf in $(scanelf -RA -F "%F" src); do rm -f "$elf" done mv src webrtc-$_webrtcver msg "generating tarball.." tar -cf webrtc-$_webrtcver.tar \ --exclude="ChangeLog*" \ --exclude="testdata/" \ --exclude="test_data/" \ --exclude="android_rust_toolchain/toolchain/" \ --exclude="base/" \ --exclude-backups \ --exclude-caches-all \ --exclude-vcs \ webrtc-$_webrtcver zstd --auto-threads=logical --ultra --long -22 -T"${ZSTD_LIMIT:-0}" -vv webrtc-$_webrtcver.tar -o "$SRCDEST"/webrtc-$_webrtcver.tar.zst mcli cp "$SRCDEST"/webrtc-$_webrtcver.tar.zst "$_distbucket" } # manual patches default_prepare() { :; } prepare() { default_prepare msg "Applying patches" for x in $source; do case "$x" in signal-*.patch) msg "$x" patch -p1 -i "$srcdir"/$x -d "$srcdir"/Signal-Desktop-$pkgver ;; libsignal-*.patch) msg "$x" patch -p1 -i "$srcdir"/$x -d "$srcdir"/libsignal-$_libsignalver ;; ringrtc-*.patch) msg "$x" patch -p1 -i "$srcdir"/$x -d "$srcdir"/ringrtc-$_ringrtcver ;; webrtc-*.patch) msg "$x" patch -p1 -i "$srcdir"/$x -d "$srcdir"/webrtc-$_webrtcver ;; esac done msg "Installing signal-desktop JS dependencies" npm ci --ignore-scripts ( cd "$srcdir"/webrtc-$_webrtcver local use_system=" brotli crc32c dav1d double-conversion ffmpeg flatbuffers fontconfig freetype harfbuzz-ng highway icu jsoncpp libaom libavif libdrm libevent libjpeg libpng libsecret libvpx libwebp libxml libxslt openh264 opus re2 snappy woff2 zlib " for _lib in $use_system double_conversion libjpeg_turbo; do msg "Removing buildscripts for system provided $_lib" find . -type f -path "*{third_party,ringrtc}/$_lib/*" \ \! -path "*third_party/$_lib/chromium/*" \ \! -path "*third_party/$_lib/google/*" \ \! -path './base/third_party/icu/*' \ \! -path './third_party/libxml/*' \ \! -path './third_party/re2/*' \ \! -path './third_party/pdfium/third_party/freetype/include/pstables.h' \ \! -path './third_party/harfbuzz-ng/utils/hb_scoped.h' \ \! -path './third_party/crashpad/crashpad/third_party/zlib/zlib_crashpad.h' \ \! -regex '.*\.\(gn\|gni\|isolate\|py\)' \ -delete done msg "Replacing gn files" python3 build/linux/unbundle/replace_gn_files.py --system-libraries \ $use_system # allow system dependencies in "official builds" sed -i 's/OFFICIAL_BUILD/GOOGLE_CHROME_BUILD/' \ tools/generate_shim_headers/generate_shim_headers.py mkdir path ln -s /usr/bin/python3 path/vpython3 ) ( cd "$srcdir"/ringrtc-$_ringrtcver/src/rust msg "Installing ringrtc rust dependencies" cargo fetch --target="$CTARGET" --locked ) ( cd "$srcdir"/libsignal-$_libsignalver msg "Installing libsignal rust dependencies" cargo fetch --target="$CTARGET" --locked ) ( cd "$srcdir"/Signal-FTS5-Extension-$_stokenizerver msg "Installing signal tokenizer rust dependencies" cargo fetch --target="$CTARGET" --locked ) ( cd "$srcdir"/ringrtc-$_ringrtcver/src/node msg "Installing ringrtc js dependencies" npm ci --ignore-scripts ) ( cd "$srcdir"/libsignal-$_libsignalver/node # fix target sed -i 's/unknown-linux-gnu/alpine-linux-musl/g' binding.gyp msg "Installing libsignal js dependencies" yarn --ignore-scripts --frozen-lockfile ) # remove shipped fonts for system-provided (part 1) rm -rf fonts/ } build() { chromium_arch="$(node -e 'console.log(process.arch)')" # required dependency of ringrtc ( cd "$srcdir"/webrtc-$_webrtcver export PATH="$PWD/path:$PATH" # shellcheck disable=2089 local webrtc_args=" rtc_build_examples=false rtc_build_tools=false rtc_enable_protobuf=false rtc_enable_sctp=false rtc_include_tests=false rtc_include_ilbc=false rtc_libvpx_build_vp9=true rtc_use_x11=false build_with_mozilla=false chrome_pgo_phase=0 clang_use_chrome_plugins=false clang_base_path=\"/usr\" custom_toolchain=\"//build/toolchain/linux/unbundle:default\" is_cfi=false is_clang=false is_debug=false is_official_build=true host_toolchain=\"//build/toolchain/linux/unbundle:default\" proprietary_codecs=true rtc_link_pipewire=true rtc_use_pipewire=true symbol_level=0 use_custom_libcxx=false use_lld=true use_sysroot=false " mkdir -p "$srcdir"/ringrtc-$_ringrtcver/out/release msg "Building signal's webrtc" # shellcheck disable=2090,2116 gn gen "$srcdir"/ringrtc-$_ringrtcver/out/release --args="$(echo $webrtc_args)" ninja -C "$srcdir"/ringrtc-$_ringrtcver/out/release signaldeswebrtc ) ( cd "$srcdir"/ringrtc-$_ringrtcver msg "Building libringrtc" OUTPUT_DIR="$srcdir"/ringrtc-$_ringrtcver/out \ cargo auditable build --features electron --release -p ringrtc mkdir -p src/node/build/linux cp -fv out/release/libsignaldeswebrtc.so src/node/build/linux/libsignaldeswebrtc.so cp -fv target/release/libringrtc.so src/node/build/linux/libringrtc-$chromium_arch.node ) ( cd "$srcdir"/ringrtc-$_ringrtcver/src/node msg "Building ringrtc JS glue code" npm run build msg "Cleaning dev dependencies for ringrtc" npm prune --ignore-scripts --omit=dev ) # module on npm intentionally unbuildable: https://github.com/signalapp/libsignal/issues/464#issuecomment-1160665052 ( cd "$srcdir"/libsignal-$_libsignalver/node msg "Building libsignal" node-gyp configure --nodedir=/usr/include/electron/node_headers --build-from-source node-gyp build --nodedir=/usr/include/electron/node_headers --build-from-source mkdir -p prebuilds/linux-$chromium_arch mv build/Release/libsignal_client_linux_$chromium_arch.node prebuilds/linux-$chromium_arch/node.napi.node msg "Building libsignal glue code" npm run tsc msg "Cleaning dev dependencies for libsignal" npm prune -ignore-scripts --omit=dev ) ( cd "$srcdir"/Signal-FTS5-Extension-$_stokenizerver msg "Building signal tokenizer" cargo auditable build --features extension --release --frozen cbindgen --profile release . -o target/release/signal-tokenizer.h ) # from package.json postinstall npm run build:acknowledgments npm exec patch-package rm -rf node_modules/dtrace-provider # get esbuild installed (needed for next step) npm rebuild esbuild # build front NODE_ENV=production \ SIGNAL_ENV=production \ NODE_OPTIONS=--openssl-legacy-provider \ npm run build:dev # purge non-production deps npm prune --ignore-scripts --omit=dev # use our libsignal rm -rf node_modules/@signalapp/libsignal-client/ mv "$srcdir"/libsignal-$_libsignalver/node/ node_modules/@signalapp/libsignal-client # use our libringrtc rm -rf node_modules/@signalapp/ringrtc/ mv "$srcdir"/ringrtc-$_ringrtcver/src/node/ node_modules/@signalapp/ringrtc # patch the sqlcipher module for x in $source; do case "$x" in bettersqlite-*.patch) msg "$x" patch -Np1 -i "$srcdir"/$x -d "$srcdir"/Signal-Desktop-$pkgver/node_modules/@signalapp/better-sqlite3/ ;; esac done mkdir node_modules/@signalapp/better-sqlite3/tokenizer mv "$srcdir"/Signal-FTS5-Extension-$_stokenizerver/target/release/libsignal_tokenizer.a node_modules/@signalapp/better-sqlite3/tokenizer/ mv "$srcdir"/Signal-FTS5-Extension-$_stokenizerver/target/release/signal-tokenizer.h node_modules/@signalapp/better-sqlite3/tokenizer/ npm rebuild \ sharp @signalapp/better-sqlite3 spellchecker websocket \ utf-8-validate bufferutil fs-xattr \ --nodedir=/usr/include/electron/node_headers --build-from-source SIGNAL_ENV=production \ tasje pack } check() { # tests run against downloaded build of electron for glibc, probably can be patched npm run test } package() { cd "$builddir"/tasje_out install -Dm644 resources/app.asar "$pkgdir"/usr/lib/$pkgname/app.asar cp -r resources/app.asar.unpacked "$pkgdir"/usr/lib/$pkgname/app.asar.unpacked install -Dm644 signal.desktop "$pkgdir"/usr/share/applications/$pkgname.desktop # this should be in /usr/lib/signal-desktop. however, it does not simply work and I stopped to care install -Dm755 "$srcdir"/ringrtc-$_ringrtcver/out/release/libsignaldeswebrtc.so "$pkgdir"/usr/lib/libsignaldeswebrtc.so install -Dm755 "$srcdir"/$pkgname "$pkgdir"/usr/bin/$pkgname while read -r size; do install -Dm644 icons/$size.png "$pkgdir"/usr/share/icons/hicolor/$size/apps/$pkgname.png done < icons/size-list } sha512sums=" fa557adb65bce33d7c5823c39603ceda8c4f5743d078153f967f94eb423ff0f30eac3a7252fcfdee56b45b5f27f73a86614732171bd9bb474f9f48615daca6f0 Signal-Desktop-7.28.0.tar.gz 6fb62213d8177ac5abe83ea71a18ea4b1c7b323983c41087166658fe9c47c1fd39e5323ca6acefe3db2a9a9376b6f385b5f2c006154da3ab705741d848b28943 libsignal-0.58.0.tar.gz 0190f5a08a9107c818a4770fe37c8b56bd11a99b5514da27cf0941e03b5681fb710b31d9474d05bcf2ac4035ef8703b6767c1780e25edff02ed982d73d8a8e42 ringrtc-2.48.1.tar.gz fe04fcf13f55b124f03ce9d516b1c53fc4f20c6a016819c62eeaa0500eda92c5a0c0d7dc5d1e360a27691dfd404c254e91bed9fb25d0fc40a27795c1b674a82e webrtc-6613c.tar.zst 84a1f2fc29262a12842e94698d124a85b823128e72a493b0be8ea92fbb72c5c268499f4a6827cdedaae06ec73cce4039a39fe5c5d536cbef330e59ba0183da28 stokenizer-0.2.1.tar.gz be5b4e823543b79175a12314f10c6326d9f0d59f470136962daed4665887006acc05b48b40dc1b67747396d8f6f7d23be298c1e110ccdd35ff9b09d5e6b80bab bettersqlite-use-system-sqlcipher.patch 2e5fadff725f1d62e7134c8929c672ec88cae602b065480f1b799d34160daa0cb1ad0f5511e60676f81464ae8752c3bec7b3d7bc5a432533be004b4d20ac32c2 libsignal-auditable.patch 152435231cdcf52a17a9e24aadf95d77511258e818172941ba074a73a90a541f0136feb58868674f2bcb19191a6d12933fe6cd5baf3ee99e508915c72523163b signal-disable-updates.patch d50eb5724502df9ea4d795db8cfc27af767c25168d7db2af512e615be7cc2ca290210a9ae78e1abb153c0198677e858ad3d74926c958099d0319295e7d9e7f1d signal-update-links.patch bfc8acdd13aa48d29c7657311733cc9d33c4899782efbd1ef6d25ad1698be4de7cc67e829324bc0309715d69ae37ea9f782cf54887317e817213e110d73d68e7 signal-show-window-please.patch b11fdd930943ca327650e4738ed85cd6b5eea779455a5895bccebba98e449bafc6b0f09bcf4545f2b2e16644355664e9768dd6d4d62f87619207c430367f72c5 ringrtc-webrtc-renamed.patch 0888673ba687747beda61cd50efbc25095f4a3d26f1dd58bf003e3a0bf1d302c3f2ebd1deecf630fbf04aedb7b8cd409e9efda4d1e6fda63234c9a9b9755bff4 webrtc-shared-libs.patch e07ae8544988d402aaf0fbd95ea36a64c94c59566c561132578aa6dcf8ff11a34058530e64dc204e5cadc2482f1401e74b32384a144e5e08017c663d0cf7c2fc webrtc-compiler.patch 88515d8b8cc82355c9f9b0f44fac83b7ff149b13e9fb102fd46036ec5234cfb2385fa5ad58a0520ee604b93dc4ddd6ae18a7005978ef207841645724ef7a9749 webrtc-gcc13.patch 87534e7b5ad7365509eab75629e6bd1a9ed61ee92f7e358405a0abaf0df57de14623fb3894eb082f8785422e5c087e1c50f9e2e5cafbb2529591fd7bf447f7f5 signal-desktop "