Manjaro and Arch repository with privacy oriented software

[as400]

I would like to invite all of you to the site and repo we have created recently.
Having noticed that some privacy oriented software was not easily available, we started to prepare, build and provide some of it with this repository. This makes it easy to install and upgrade these applications without having to build them yourself.

As for now there is Ungoogled Chromium (caidao) and LibreWolf (librewolf) available. But stay tuned, there will be more.
More information (including how to use it) available on https://privacyshark.zero-credibility.net/

Ale the credits for the work go to @llsf with my little help.

Edit 01.08.2020

What we have now:

1. Caidao - ungoogled Chromium
2. LibreWolf - browser based on Firefox with more than 500 privacy/security/performance settings, patches.
3. Signal desktop.
4. Ferdi Messenger - more info at https://getferdi.com/.
5. Teams-for-linux - unofficial client for MS Teams - https://github.com/IsmaelMartinez/teams-for-linux.
6. lrzip-git - A compression utility that excels at compressing large files - https://github.com/ckolivas/lrzip.
7. uhk-agent - https://github.com/UltimateHackingKeyboard/agent
8. Bitwarden - Open Source password Manager
9. Hamsket - Open Source and Cross Platform messaging and emailing app
10. Jitsi Meet Desktop - Open Source Video Calls and chat
11. Standardnotes - Open Source, and completely encrypted notes app

[llsf]

I intend to add signal-desktop and wire-desktop next.

If there are any questions, problems or requests, I'm all ears

If you have any packages that might be worth adding (be it because it would take days to build or because it would fit the privacy / security focus of the repo), just ask. I have to spin up an aarch64 instance "in the cloud" for the heavier builds every now and then anyway, so I could as well make use of it

It should be avoided to add to many packages to the repo "just cause", as that would increase the maintenance burden and could thus lead to the important packages not being kept up to date as much as possible, so one might have to see where it goes.

For now, I'll keep adding a few packages that I already build all the time anyway, so the the increased effort on my part is marginal.

[belfastraven]

@as400 ,@llsf
I think you are doing a great thing here,  but the name of the web site is a bit alarming ..
"zero-credibility" ?  SO I actually shouldn't download anything ?  


I decided to try anyway  by installing caidao  (I am currently running chromium).  It installs successfully,  but errors when I try to run.  On an up-to-date Manjaro system (using the stable repos),
this gives the following error:  error while loading shared libraries : libre2.so.0.

The version of re2 I have installed is re2-1:20200303-1.    Have you built with the latest libraries?    

thanks.

[vrabac]

How about to provide PKGBUILD files if they are not already in alarm / aur repository? privacy oriented software is something what should NOT be installed from unknown sources / binaries which you provide with your repository.

Any way good luck with that.

[as400]

@as400 ,@llsf
I think you are doing a great thing here,  but the name of the web site is a bit alarming ..
"zero-credibility" ?  SO I actually shouldn't download anything ?  


I decided to try anyway  by installing caidao  (I am currently running chromium).  It installs successfully,  but errors when I try to run.  On an up-to-date Manjaro system (using the stable repos),
this gives the following error:  error while loading shared libraries : libre2.so.0.

The version of re2 I have installed is re2-1:20200303-1.    Have you built with the latest libraries?    

thanks.

Thanks, @belfastraven. The name is just kind of pawky

About the error you're getting I have the same re2 installed and it works. Solution:

Code:

cd /usr/lib
ln -s libre2.so libre2.so.0

And you should be good to go.


@vrabac - thanks for your thought. In the end - which repo is 100% trusted ? They are all driven by people that you don't know.

As to the PKGBUILD files:

https://gitlab.com/ohfp/pinebookpro-things

https://gitlab.com/ohfp/caidao

[llsf]

@belfastraven : the name originally came from the culture, but I think it's certainly appropriately inappropriate for a repo like this one :D

I must've missed the re2-error on aarch64; I had already done a rebuild for x86_64 when it occured there, but with my PBP being down for a few days I didn't catch it there. A new version (80.0.3987.149-1) will be up in the repo in a short bit of time – the issue is fixed there.

@vrabac 

I do intend to "consolidate" all the PKGBUILDs for all packages in one git repo, but at the moment they're still somewhat spread out. As @as400 mentioned, https://gitlab.com/ohfp/pinebookpro-things, https://gitlab.com/ohfp/caidao and https://gitlab.com/librewolf-community/browser/linux (and https://gitlab.com/librewolf-community/browser/arch) are the places to look for them.

I do encourage building things yourself. A repository just adds convenience, especially with large packages like chromium builds. Where possible, things are run in a Gitlab pipeline and can be reviewed even further (eg. https://gitlab.com/ohfp/caidao/-/jobs), but I could, of course, still fake a build and release/upload a different binary. This is, in the end, a matter of trust, and your threat model – so feel encouraged to grab the PKGBUILDs and use them as you please :)

[belfastraven]

@belfastraven : the name originally came from the culture, but I think it's certainly appropriately inappropriate for a repo like this one

I must've missed the re2-error on aarch64; I had already done a rebuild for x86_64 when it occured there, but with my PBP being down for a few days I didn't catch it there. A new version (80.0.3987.149-1) will be up in the repo in a short bit of time – the issue is fixed there.


The fix showed up automatically though  pamac and caidao is  working fine now.  Thanks.   I do cross-compile kernels on my desktop,  but haven't tried for anything like this yet.  I appreciate your quick fix.  

[as400]

Signal and Wire desktop apps for aarch64 added to the repo.

[as400]

New additions and updates. What we have now is:

1. Caidao - ungoogled Chromium
2. LibreFox - browser based on Firefox with more than 500 privacy/security/performance settings, patches.
3. Signal desktop.
4. Wire desktop.
5. Ferdi Messenger - more info at https://getferdi.com/.
6. Teams-for-linux - unofficial client for MS Teams - https://github.com/IsmaelMartinez/teams-for-linux.
7. lrzip-git - A compression utility that excels at compressing large files - https://github.com/ckolivas/lrzip.


Enjoy

[as400]

Updates:

1. Caidao updated to version - 80.3987.162-1.
2. LibreWolf updated to version - 74.0-5.

Also LibreWolf for aarch64 was compiled with WebRTC support. I you want to use it, it has to be explicitly enabled.
More info on how to do this ---> https://privacyshark.zero-credibility.net/#howto