Update whitelist

This reverts commit 58fe440996.

.github/workflows/build_bromite_dev.yaml

@@ -81,7 +81,7 @@ jobs:
           
           cd bromite-buildtools
           
-      - name: Checking build-deps for ${{ env.VERSION }}
+      - name: Building build-deps container ${{ env.VERSION }}
         shell: bash
         run: |
           IS_PRESENT=$(docker inspect --type=image uazo/build-deps:$VERSION > /dev/null ; echo $?)
@@ -97,7 +97,7 @@ jobs:
             fi
           fi
         
-      - name: Checking chromium for ${{ env.VERSION }}
+      - name: Building chromium container ${{ env.VERSION }}
         shell: bash
         run: |
           IS_PRESENT=$(docker inspect --type=image uazo/chromium:$VERSION > /dev/null ; echo $?)
@@ -112,7 +112,7 @@ jobs:
             fi
           fi
 
-      - name: Checking bromite for ${{ env.BROMITE_SHA }}
+      - name: Building bromite container ${{ env.BROMITE_SHA }}
         shell: bash
         run: |
           IS_PRESENT=$(docker inspect --type=image uazo/bromite:$BROMITE_SHA > /dev/null ; echo $?)
@@ -127,7 +127,7 @@ jobs:
             fi
           fi
           
-      - name: Checking bromite-build for ${{ env.BROMITE_SHA }}
+      - name: Building bromite-build container ${{ env.BROMITE_SHA }}
         shell: bash
         run: |
           IS_PRESENT=$(docker inspect --type=image uazo/bromite-build:$BROMITE_SHA > /dev/null ; echo $?)
@@ -250,9 +250,9 @@ jobs:
 
              echo "::group::-------- gn gen"
              [[ "$USEGOMA" = "true" ]] && \
-                gn gen --args="import(\"/home/lg/working_dir/bromite/build/GN_ARGS\") use_goma=true goma_dir=\"$WORKSPACE/goma\" $(cat ../../build_args.gni) " out/bromite \
+                gn gen --args="import(\"/home/lg/working_dir/bromite/build/bromite.gn_args\") use_goma=true goma_dir=\"$WORKSPACE/goma\" $(cat ../../build_args.gni) " out/bromite \
                 || \
-                gn gen --args="import(\"/home/lg/working_dir/bromite/build/GN_ARGS\") $(cat ../../build_args.gni) " out/bromite              
+                gn gen --args="import(\"/home/lg/working_dir/bromite/build/bromite.gn_args\") $(cat ../../build_args.gni) " out/bromite              
              echo "::endgroup::"
 
              echo "::group::-------- gn args"

.github/workflows/release.yaml

@@ -45,7 +45,7 @@ jobs:
         run: |
           wget https://github.com/ericchiang/pup/releases/download/v0.4.0/pup_v0.4.0_linux_amd64.zip
           unzip pup_v0.4.0_linux_amd64.zip && rm pup_v0.4.0_linux_amd64.zip
-          BRANCH=$(curl https://github.com/uazo/bromite/branch_commits/$BROMITE_SHA | ./pup -p li.branch a text{})
+          BRANCH=$(curl https://github.com/uazo/bromite/branch_commits/$BROMITE_SHA | ./pup -p li.branch:last-child a text{} | xargs)
           echo "BRANCH=$BRANCH" >> $GITHUB_ENV
 
           wget https://github.com/cli/cli/releases/download/v2.4.0/gh_2.4.0_linux_amd64.tar.gz
@@ -74,7 +74,7 @@ jobs:
           cd bromite
           VERSION=v$(cat ${{ env.OUTPUTFILE }}/RELEASE)-${{ github.event.inputs.build }}
           ../gh_2.4.0_linux_amd64/bin/gh release create $VERSION-$BROMITE_SHA \
-            ../$APK --notes ""
+            ../$APK --notes "" -p
 
 #      - name: Enable proxy on container
 #        shell: bash

apply-single-patch.sh

@@ -70,12 +70,11 @@ if [[ DOBUILD -eq 1 ]]; then
 
         DOEXPORT=1
 
-fi
+        if [[ OK -eq 1 ]]; then
-
+                if [ -z "$SILENT" ]; then
-if [[ OK -eq 0 ]]; then
+                   echo "Read to add $PATCH. Press return"
-        if [ -z "$SILENT" ]; then
+                   read  -n 1
-           echo "Read to add $PATCH. Press return"
+                fi
-           read  -n 1
         fi
 fi
 

create-from-patch.sh

@@ -10,7 +10,7 @@ fi
 
 if [ -z "$2" ]
 then
-        PATCH_NEW_PATH="~/bromite/build/patches-new"
+        PATCH_NEW_PATH=~/bromite/build/patches-new
 else
         PATCH_NEW_PATH=$2
 fi

export-all-patch.sh

@@ -32,3 +32,16 @@ for patch in $ALLPATCHS_E; do
 	bash ~/bromite-buildtools/export-single-patch.sh $patch $PATCH_FILE
 
 done
+
+PATCH_LIST=~/bromite/build/bromite_patches_list.txt
+mkdir ~/bromite/build/patches-new/changed
+mkdir ~/bromite/build/patches-new/contrib
+for current_file in $(cat $PATCH_LIST); do
+	if [[ "$current_file" == *".patch" ]]; then
+		if [[ $current_file =~ ^changed/.* ]]; then
+			mv ~/bromite/build/patches-new/$(basename $current_file) ~/bromite/build/patches-new/changed
+		elif [[ $current_file =~ ^contrib/.* ]]; then
+			mv ~/bromite/build/patches-new/$(basename $current_file) ~/bromite/build/patches-new/contrib
+		fi
+	fi
+done

export-patch-list.sh

@@ -0,0 +1,25 @@
+#!/bin/bash
+
+VERSION=$(cat ~/bromite/build/RELEASE)
+CURRENT_RELEASE=$(git -C ~/chromium/src/ rev-parse --verify refs/tags/$VERSION)
+
+ALLPATCHS_E=$(git -C ~/chromium/src/ rev-list HEAD...$CURRENT_RELEASE)
+
+mkdir ~/bromite/build/patches-new
+rm ~/bromite/build/patches-new/patch-list
+
+NO_NAME=1
+
+for patch in $ALLPATCHS_E; do
+
+	PATCH_FILE=$(git -C ~/chromium/src/ show -s $patch | grep FILE: | sed 's/FILE://g' | sed 's/^[ \t]*//;s/[ \t]*$//')
+	if [[ "$PATCH_FILE" == *"Automated-domain-substitution"* ]]; then
+		continue
+	fi
+
+	echo $PATCH_FILE >>~/bromite/build/patches-new/patch-list
+
+done
+
+tac ~/bromite/build/patches-new/patch-list >~/bromite/build/patches-new/zz-patch-list.txt
+rm ~/bromite/build/patches-new/patch-list

export-single-patch.sh

@@ -32,9 +32,9 @@ sed -i '/^ mode change/d' ~/bromite/build/patches-new/$PATCH_FILE
 sed -i '/^old mode /d' ~/bromite/build/patches-new/$PATCH_FILE
 sed -i '/^new mode /d' ~/bromite/build/patches-new/$PATCH_FILE
 
-echo "-- " >> ~/bromite/build/patches-new/$PATCH_FILE
+echo "--" >> ~/bromite/build/patches-new/$PATCH_FILE
-echo "2.20.1" >> ~/bromite/build/patches-new/$PATCH_FILE
+echo "2.25.1" >> ~/bromite/build/patches-new/$PATCH_FILE
-echo "" >> ~/bromite/build/patches-new/$PATCH_FILE
+#echo "" >> ~/bromite/build/patches-new/$PATCH_FILE
 
 echo "   done."
 echo ""

images/bromite-build/build_args.gni

@@ -15,6 +15,7 @@ if(getenv("TARGET_CPU") != "") {
 
 enable_kythe_annotations = true
 clang_use_chrome_plugins = false
+chrome_public_manifest_package = "org.bromite.bromite.dev"
 
 if(_is_debug_build == "true") {
 # print("Debug build on")
@@ -24,6 +25,11 @@ if(_is_debug_build == "true") {
   symbol_level = 1
   strip_debug_info = false
   generate_linker_map = false
+
+  # since is_cfi require use_thin_lto
+  # but not work in debug mode
+  is_cfi = false # disable it
+  use_cfi_cast = false # disable it
 } else {
   generate_linker_map = true
 }

images/bromite-build/pre-start.sh

@@ -34,8 +34,8 @@ vpython -vpython-spec .vpython -vpython-root $VPYTHON_VIRTUALENV_ROOT -vpython-l
 vpython3 -vpython-spec .vpython3 -vpython-root $VPYTHON_VIRTUALENV_ROOT -vpython-log-level debug -vpython-tool install
 
 echo -e ${RED} -------- download x86_64 android image ${NC}
-echo -e "\$ParanoidMode CheckIntegrity\n\nchromium/third_party/android_sdk/public/avds/android-31/google_apis/x86_64 Ur_zl6_BRKRkf_9X3SMZ3eH2auoOyJ2kLslpTZZwi3gC" | .cipd_client ensure -ensure-file - -root $WORKSPACE/chromium/src/.android
+#echo -e "\$ParanoidMode CheckIntegrity\n\nchromium/third_party/android_sdk/public/avds/android-31/google_apis/x86_64 Ur_zl6_BRKRkf_9X3SMZ3eH2auoOyJ2kLslpTZZwi3gC" | .cipd_client ensure -ensure-file - -root $WORKSPACE/chromium/src/.android
-echo -e "\$ParanoidMode CheckIntegrity\n\nchromium/third_party/android_sdk/public/emulator gMHhUuoQRKfxr-MBn3fNNXZtkAVXtOwMwT7kfx8jkIgC\nchromium/third_party/android_sdk/public/system-images/android-31/google_apis/x86_64 R6Jh5_P21Euu-kdb11zcNjdJKN4vV1mdQTb8t4gph4IC" | .cipd_client ensure -ensure-file - -root $WORKSPACE/chromium/src/.emulator_sdk
+#echo -e "\$ParanoidMode CheckIntegrity\n\nchromium/third_party/android_sdk/public/emulator gMHhUuoQRKfxr-MBn3fNNXZtkAVXtOwMwT7kfx8jkIgC\nchromium/third_party/android_sdk/public/system-images/android-31/google_apis/x86_64 R6Jh5_P21Euu-kdb11zcNjdJKN4vV1mdQTb8t4gph4IC" | .cipd_client ensure -ensure-file - -root $WORKSPACE/chromium/src/.emulator_sdk
 
 echo -e ${RED} -------- download kythe resources ${NC}
 wget https://chromium.googlesource.com/chromium/tools/build/+/main/recipes/recipe_modules/codesearch/resources/add_kythe_metadata.py?format=TEXT -O ~/add_kythe_metadata.py.base64

images/bromite-source/apply-bromite-patches.sh

@@ -10,6 +10,7 @@ cd chromium/src
 echo -e ${RED} ------- apply patchs ${NC}
 for file in $(cat ../../bromite/build/bromite_patches_list.txt) ; do
 
+   if [[ "$file" == *".patch" ]]; then
 	#if [[ "$file" == *"Automated-domain-substitution"* ]]; then
 	#	echo -e ${RED} " -> Excluding $file" ${NC}
 	#	continue
@@ -17,7 +18,7 @@ for file in $(cat ../../bromite/build/bromite_patches_list.txt) ; do
 	
 	echo -e ${RED} " -> Apply $file" ${NC}
 
-	REPL="0,/^---/s//FILE:"$file"\n---/"
+	REPL="0,/^---/s//FILE:"$(basename $file)"\n---/"
 	cat ../../bromite/build/patches/$file | sed $REPL | git am
 
 	if [ $? -ne 0 ]
@@ -27,4 +28,6 @@ for file in $(cat ../../bromite/build/bromite_patches_list.txt) ; do
 	fi
 
 	echo " "
+    fi
+    
 done

images/github-runner/Dockerfile

@@ -77,7 +77,7 @@ RUN useradd -m runner \
 
 # Build args
 ARG TARGETPLATFORM=amd64
-ARG RUNNER_VERSION=2.302.4
+ARG RUNNER_VERSION=2.302.5
 WORKDIR /runner
 
 # Runner download supports amd64 as x64

images/github-runner/startup.sh

@@ -48,7 +48,9 @@ echo "Registering runner ${runner_id}"
   --url "${registration_url}" \
   --allowedauthorslist "${ALLOWEDAUTHORSLIST}" \
   --unattended \
-  --replace
+  --replace \
+  --disableupdate \
+  --ephemeral
 
 trap 'remove_runner; exit 130' SIGINT
 trap 'remove_runner; exit 143' SIGTERM

images/squid/whitelist

@@ -4,6 +4,13 @@
 .githubusercontent.com
 .ubuntu.com
 
+# for .net
+.dot.net
+dotnet.microsoft.com
+dotnetcli.azureedge.net
+aka.ms
+packages.microsoft.com
+
 # for buildeps
 #chromium.googlesource.com