# Contributor: lauren n. liberda # Maintainer: lauren n. liberda pkgname=signal-desktop pkgver=6.39.1 pkgrel=0 pkgdesc="A messaging app for simple private communication with friends" url="https://github.com/signalapp/Signal-Desktop/" # same as electron # aarch64: polyval-0.5.3 crate subdep uses unstable stdsimd feature arch="x86_64" license="AGPL-3.0-only" depends=" electron font-barlow font-eb-garamond font-inter font-parisienne " makedepends=" alsa-lib-dev aom-dev brotli-dev bsd-compat-headers cargo cargo-auditable cbindgen clang-dev cmake crc32c-dev dav1d-dev electron-dev electron-tasje ffmpeg-dev git-lfs glib-dev gn jsoncpp-dev libavif-dev libjpeg-turbo-dev libepoxy-dev libevent-dev libvpx-dev libwebp-dev lld llvm-dev mesa-dev nodejs npm openh264-dev openssl-dev pipewire-dev protoc pulseaudio-dev py3-setuptools python3 samurai sqlcipher-dev vips-dev yarn " options="net !check" # follow signal-desktop package.json -> @signalapp/libsignal-client _libsignalver=0.32.1 # follow signal-desktop package.json -> @signalapp/ringrtc _ringrtcver=2.34.1 # follow ringrtc (on version above) -> config/version.properties -> webrtc.version # downloading tarball generated with abuild snapshot (with gclient dependencies fetched) _webrtcver=5845i # follow @signalapp/better-sqlite3 (on version in package.json) -> deps/download.js -> TOKENIZER_VERSION # last bsqlite version: 8.5.2 _stokenizerver=0.2.1 source=" https://github.com/signalapp/Signal-Desktop/archive/refs/tags/v$pkgver/Signal-Desktop-$pkgver.tar.gz https://github.com/signalapp/libsignal/archive/refs/tags/v$_libsignalver/libsignal-$_libsignalver.tar.gz https://github.com/signalapp/ringrtc/archive/refs/tags/v$_ringrtcver/ringrtc-$_ringrtcver.tar.gz https://s3.sakamoto.pl/lnl-aports-snapshots/webrtc-$_webrtcver.tar.zst https://github.com/signalapp/Signal-FTS5-Extension/archive/refs/tags/v$_stokenizerver/stokenizer-$_stokenizerver.tar.gz bettersqlite-use-system-sqlcipher.patch libsignal-auditable.patch signal-disable-updates.patch signal-update-links.patch signal-show-window-please.patch ringrtc-webrtc-renamed.patch webrtc-shared-like-my-wife.patch webrtc-use-alpine-target.patch webrtc-clang-debug-info.patch webrtc-gcc13.patch signal-desktop " builddir="$srcdir/Signal-Desktop-$pkgver" export CC=clang export CXX=clang++ # required to find the tools export AR=llvm-ar export NM=llvm-nm export LD=clang++ # less log spam, reproducible, allow lto with rust export CFLAGS="${CFLAGS/-g/} -O2 -Wno-error -Wno-deprecated-builtins -Wno-unknown-warning-option -Wno-builtin-macro-redefined -Wno-deprecated-declarations" export CXXFLAGS="${CXXFLAGS/-g/} -O2 -Wno-error -Wno-deprecated-builtins -Wno-unknown-warning-option -Wno-builtin-macro-redefined -Wno-deprecated-declarations" export CPPFLAGS="$CPPFLAGS -D__DATE__= -D__TIME__= -D__TIMESTAMP__=" export CARGO_PROFILE_RELEASE_OPT_LEVEL=2 export CARGO_PROFILE_RELEASE_STRIP="symbols" export RUSTFLAGS="$RUSTFLAGS -C linker=clang" export YARN_CACHE_FOLDER="$srcdir/.yarn" # webrtc only, the other dependencies are fine with tarballs snapshot() { mkdir -p "$srcdir" cd "$srcdir" # cleanup if retrying rm -rf src rm -rf webrtc-$_webrtcver rm -f webrtc-$_webrtcver.tar rm -f webrtc-$_webrtcver.tar.zst echo " solutions = [{ 'name': 'src', 'url': 'https://github.com/signalapp/webrtc.git@$_webrtcver', }] target_cpu = ['x64', 'arm64'] target_cpu_only = True " > .gclient gclient sync --no-history --nohooks --tpot-cipd-ignore-platformed # needed DEPS hooks python3 'src/build/landmines.py' --landmine-scripts 'src/tools_webrtc/get_landmines.py' --src-dir 'src' python3 'src/build/util/lastchange.py' -o 'src/build/util/LASTCHANGE' for elf in $(scanelf -RA -F "%F" src); do rm -f "$elf" done mv src webrtc-$_webrtcver msg "generating tarball.." tar -cf webrtc-$_webrtcver.tar \ --exclude="ChangeLog*" \ --exclude="testdata/" \ --exclude="test_data/" \ --exclude="android_rust_toolchain/toolchain/" \ --exclude="base/" \ --exclude-backups \ --exclude-caches-all \ --exclude-vcs \ webrtc-$_webrtcver zstd --ultra --long -22 -T4 -vv webrtc-$_webrtcver.tar } # manual patches default_prepare() { :; } prepare() { default_prepare msg "Applying patches" for x in $source; do case "$x" in signal-*.patch) msg "$x" patch -p1 -i "$srcdir"/$x -d "$srcdir"/Signal-Desktop-$pkgver ;; libsignal-*.patch) msg "$x" patch -p1 -i "$srcdir"/$x -d "$srcdir"/libsignal-$_libsignalver ;; ringrtc-*.patch) msg "$x" patch -p1 -i "$srcdir"/$x -d "$srcdir"/ringrtc-$_ringrtcver ;; webrtc-*.patch) msg "$x" patch -p1 -i "$srcdir"/$x -d "$srcdir"/webrtc-$_webrtcver ;; esac done msg "Installing signal-desktop JS dependencies" echo 'ignore-engines true' > .yarnrc yarn --ignore-scripts --frozen-lockfile ( cd "$srcdir"/webrtc-$_webrtcver # opus - https://github.com/signalapp/opus/commit/593419e833acab4d15b4901fe156177fb7315468 local use_system=" brotli crc32c dav1d ffmpeg fontconfig freetype harfbuzz-ng icu jsoncpp libaom libavif libdrm libevent libjpeg libpng libvpx libwebp libxml libxslt openh264 re2 snappy woff2 zlib " for _lib in $use_system libjpeg_turbo; do msg "Removing buildscripts for system provided $_lib" find . -type f -path "*{third_party,ringrtc}/$_lib/*" \ \! -path "*third_party/$_lib/chromium/*" \ \! -path "*third_party/$_lib/google/*" \ \! -path './base/third_party/icu/*' \ \! -path './third_party/libxml/*' \ \! -path './third_party/pdfium/third_party/freetype/include/pstables.h' \ \! -path './third_party/harfbuzz-ng/utils/hb_scoped.h' \ \! -path './third_party/crashpad/crashpad/third_party/zlib/zlib_crashpad.h' \ \! -regex '.*\.\(gn\|gni\|isolate\|py\)' \ -delete done msg "Replacing gn files" python3 build/linux/unbundle/replace_gn_files.py --system-libraries \ $use_system # allow system dependencies in "official builds" sed -i 's/OFFICIAL_BUILD/GOOGLE_CHROME_BUILD/' \ tools/generate_shim_headers/generate_shim_headers.py mkdir path ln -s /usr/bin/python3 path/vpython3 ) ( cd "$srcdir"/ringrtc-$_ringrtcver/src/rust msg "Installing ringrtc rust dependencies" cargo fetch --target="$CTARGET" --locked ) ( cd "$srcdir"/libsignal-$_libsignalver msg "Installing libsignal rust dependencies" cargo fetch --target="$CTARGET" --locked ) ( cd "$srcdir"/Signal-FTS5-Extension-$_stokenizerver msg "Installing signal tokenizer rust dependencies" cargo fetch --target="$CTARGET" --locked ) ( cd "$srcdir"/ringrtc-$_ringrtcver/src/node msg "Installing ringrtc js dependencies" yarn --frozen-lockfile --ignore-scripts ) ( cd "$srcdir"/libsignal-$_libsignalver/node # fix target sed -i 's/unknown-linux-gnu/alpine-linux-musl/g' binding.gyp msg "Installing libsignal js dependencies" yarn --ignore-scripts --frozen-lockfile ) # remove shipped fonts for system-provided (part 1) rm -rf fonts/ } build() { chromium_arch="$(node -e 'console.log(process.arch)')" # required dependency of ringrtc ( cd "$srcdir"/webrtc-$_webrtcver export PATH="$PWD/path:$PATH" # shellcheck disable=2089 local webrtc_args=" rtc_build_examples=false rtc_build_tools=false rtc_enable_protobuf=false rtc_enable_sctp=false rtc_include_tests=false rtc_include_ilbc=false rtc_libvpx_build_vp9=true rtc_use_x11=false build_with_mozilla=false chrome_pgo_phase=0 clang_use_chrome_plugins=false clang_base_path=\"/usr\" custom_toolchain=\"//build/toolchain/linux/unbundle:default\" is_cfi=false is_clang=true is_debug=false is_official_build=true host_toolchain=\"//build/toolchain/linux/unbundle:default\" proprietary_codecs=true rtc_link_pipewire=true rtc_use_pipewire=true symbol_level=0 use_custom_libcxx=false use_sysroot=false " mkdir -p "$srcdir"/ringrtc-$_ringrtcver/out/release msg "Building signal's webrtc" # shellcheck disable=2090,2116 gn gen "$srcdir"/ringrtc-$_ringrtcver/out/release --args="$(echo $webrtc_args)" ninja -C "$srcdir"/ringrtc-$_ringrtcver/out/release signaldeswebrtc ) ( cd "$srcdir"/ringrtc-$_ringrtcver msg "Building libringrtc" OUTPUT_DIR="$srcdir"/ringrtc-$_ringrtcver/out \ cargo auditable build --features electron --release -p ringrtc mkdir -p src/node/build/linux cp -fv out/release/libsignaldeswebrtc.so src/node/build/linux/libsignaldeswebrtc.so cp -fv target/release/libringrtc.so src/node/build/linux/libringrtc-$chromium_arch.node ) ( cd "$srcdir"/ringrtc-$_ringrtcver/src/node msg "Building ringrtc JS glue code" yarn build msg "Cleaning dev dependencies for ringrtc" yarn --ignore-scripts --frozen-lockfile --production ) # module on npm intentionally unbuildable: https://github.com/signalapp/libsignal/issues/464#issuecomment-1160665052 ( cd "$srcdir"/libsignal-$_libsignalver/node msg "Building libsignal" yarn node-gyp configure --nodedir=/usr/include/electron/node_headers --build-from-source yarn node-gyp build --nodedir=/usr/include/electron/node_headers --build-from-source mkdir -p prebuilds/linux-$chromium_arch mv build/Release/libsignal_client_linux_$chromium_arch.node prebuilds/linux-$chromium_arch/node.napi.node msg "Building libsignal glue code" yarn tsc msg "Cleaning dev dependencies for libsignal" yarn --ignore-scripts --frozen-lockfile --production ) ( cd "$srcdir"/Signal-FTS5-Extension-$_stokenizerver msg "Building signal tokenizer" cargo auditable build --features extension --release --frozen cbindgen --profile release . -o target/release/signal-tokenizer.h ) # from package.json postinstall yarn build:acknowledgments yarn patch-package rm -rf node_modules/dtrace-provider # get esbuild installed (needed for next step) npm rebuild esbuild # build front NODE_ENV=production \ SIGNAL_ENV=production \ NODE_OPTIONS=--openssl-legacy-provider \ yarn build:dev # purge non-production deps yarn install --ignore-scripts --frozen-lockfile --production # XXX: the previous step undoes the patches. and removes the patch applier. # please force me to just implement packaging without dev modules in tasje. -lnl for x in patches/*.patch; do # some of these patches are made for devDependencies if [ -d "$(grep -Eo 'node_modules/(@[a-z\d_-]+/)?[a-z\d_-]+/' "$x" | head -n1)" ]; then msg "$x" patch -Np1 -i ./"$x" fi done # use our libsignal rm -rf node_modules/@signalapp/libsignal-client/ mv "$srcdir"/libsignal-$_libsignalver/node/ node_modules/@signalapp/libsignal-client # use our libringrtc rm -rf node_modules/@signalapp/ringrtc/ mv "$srcdir"/ringrtc-$_ringrtcver/src/node/ node_modules/@signalapp/ringrtc # patch the sqlcipher module for x in $source; do case "$x" in bettersqlite-*.patch) msg "$x" patch -Np1 -i "$srcdir"/$x -d "$srcdir"/Signal-Desktop-$pkgver/node_modules/@signalapp/better-sqlite3/ ;; esac done mkdir node_modules/@signalapp/better-sqlite3/tokenizer mv "$srcdir"/Signal-FTS5-Extension-$_stokenizerver/target/release/libsignal_tokenizer.a node_modules/@signalapp/better-sqlite3/tokenizer/ mv "$srcdir"/Signal-FTS5-Extension-$_stokenizerver/target/release/signal-tokenizer.h node_modules/@signalapp/better-sqlite3/tokenizer/ npm rebuild \ sharp @signalapp/better-sqlite3 spellchecker websocket \ utf-8-validate bufferutil fs-xattr \ --nodedir=/usr/include/electron/node_headers --build-from-source SIGNAL_ENV=production \ tasje pack } check() { # tests run against downloaded build of electron for glibc, probably can be patched yarn test } package() { cd "$builddir"/tasje_out install -Dm644 resources/app.asar "$pkgdir"/usr/lib/$pkgname/app.asar cp -r resources/app.asar.unpacked "$pkgdir"/usr/lib/$pkgname/app.asar.unpacked install -Dm644 signal.desktop "$pkgdir"/usr/share/applications/$pkgname.desktop # this should be in /usr/lib/signal-desktop. however, it does not simply work and I stopped to care install -Dm755 "$srcdir"/ringrtc-$_ringrtcver/out/release/libsignaldeswebrtc.so "$pkgdir"/usr/lib/libsignaldeswebrtc.so install -Dm755 "$srcdir"/$pkgname "$pkgdir"/usr/bin/$pkgname while read -r size; do install -Dm644 icons/$size.png "$pkgdir"/usr/share/icons/hicolor/$size/apps/$pkgname.png done < icons/size-list } sha512sums=" dc15b9693f22c0e71a1ceebe2bb967b6034dc2e3e1ced1e9be7eeca30e9253ed4c4baa49c6f87536c55118cabf2bc16d6f65f7f1bfcb73640eeb9a9942406dad Signal-Desktop-6.39.1.tar.gz 855f053a1329d12e20f254f607db0c0db9f6e1a3eb10061996da75805bf462a5dee0f4f841ec679980c77da87d600f92a21cd643c36d44e017cb3cbf57003b09 libsignal-0.32.1.tar.gz ba6cdfeeadab0bec9a10a0ce9bc19a58a060e8dc5b0007e59c38011454bebf112fda0bdc291cc3e995b3e1d468b96a1a85c840b058ed0f57f5cccb3050600dbc ringrtc-2.34.1.tar.gz 1d61be0ff5358251760d7916aced3e4a957c183f9f5313ebff266987d99ada4adec8d4d95a9a94a14539e4f182c3fb6fb574937494afb7a3ae1e9ad9c11871de webrtc-5845i.tar.zst 84a1f2fc29262a12842e94698d124a85b823128e72a493b0be8ea92fbb72c5c268499f4a6827cdedaae06ec73cce4039a39fe5c5d536cbef330e59ba0183da28 stokenizer-0.2.1.tar.gz be5b4e823543b79175a12314f10c6326d9f0d59f470136962daed4665887006acc05b48b40dc1b67747396d8f6f7d23be298c1e110ccdd35ff9b09d5e6b80bab bettersqlite-use-system-sqlcipher.patch 90d47914e30f095515c47c9ef7c763a7a2583a281228d6ea7e2a3444be670b3ae506c82b4fcea8a228f88f688a43c23c8dcef52b65805d2105287234550718a5 libsignal-auditable.patch 60a45285d885922f5c21f64b761a10efbee9081baf3efa4c8c13abc6a43dc4d27662ed10e239b0fa2071ab9e3a0dbbb4b11d6e3d26fe2b74a19f39e72b74a5bd signal-disable-updates.patch d50eb5724502df9ea4d795db8cfc27af767c25168d7db2af512e615be7cc2ca290210a9ae78e1abb153c0198677e858ad3d74926c958099d0319295e7d9e7f1d signal-update-links.patch 646d303fe58cae3f0896ae0275a66695b902fae6ddde7c568cc9798157dee9f45ceff907bc951fadc4c511d512a73d114b4e4f7c8914e2311c63929d29e1621a signal-show-window-please.patch ab51b8fdcda1d8811213d2c5d8cb5d8457b478a02e23ce40f36b38ec56d45a3bd7a2d184720c27046f98a27771551cfad93c1290fe93856cc02695d318b33e47 ringrtc-webrtc-renamed.patch 9d92389637cdda83a0a7039fa6c52516d7bc491d0b1e42d5374b9d1f4fa7b9c930642f2dca896da17a2dc3344fa1bb97434c8dddd0539a4fedfd0dec809fc875 webrtc-shared-like-my-wife.patch 354f516a74c5491727afe084ef7688b3e1359d230daa720ffc30b33d3ea7579c9f37a50fbdc5fe2e8dc5322e42a0a39e4ae3449d4cf5b77daed2229bd743028c webrtc-use-alpine-target.patch 679b286d8f9f682d4de41402ffa6834d3085981ca5458cf0e02d3faa0c3c05b17f61b49b07b7fa42d9f91e737dc2f4e6086978332bb4111f8e9d3107736147ef webrtc-clang-debug-info.patch 83fe8a7d8514018f8b5c217d3513345842f6037e6877cd5129479f03d91729b32621e814b4bdb0906df1fe825146bc7f1f72664434985e5e93f6df641a019420 webrtc-gcc13.patch 87534e7b5ad7365509eab75629e6bd1a9ed61ee92f7e358405a0abaf0df57de14623fb3894eb082f8785422e5c087e1c50f9e2e5cafbb2529591fd7bf447f7f5 signal-desktop "