Re: [Tails-dev] Tails for arm64 (with support for Apple Sili…

Borrar esta mensaxe

Responder a esta mensaxe
Autor: n9iu7pk
Data:  
Para: noisycoil, The Tails public development discussion list
Asunto: Re: [Tails-dev] Tails for arm64 (with support for Apple Silicon)
Hi NoisyCoil,

anyhow I'm not finished with building, next step would be an apple
silicon arm64e image as soon as I've got hardware. Also an rpi5 image
build with on an arm platform. Would take some time/days, don't expect
fast results.

How did you build the Tails packages for arm? I once fetched the sources
from the apt repos and tried to re-compile/-build them on an arm
platform (pain point have been all the dependencies as arm deb's). That
was partially successful, but not for all packages.

Another point would be Tails snapshots from debian's apt repos (as
currently that's mapped by the DNS hijack to latest always). I assume,
that would be possible also for arm packages, on could follow the x86_64
versions of packages of a given Tails snapshot to also create an arm
snapshot - arm and x86 versions should not differ?

> - If you are running the image on a RPi5, then you could as well build it there (unless you have a good reason not to). This is what I am doing right now, as natively building Tails on a 8GB RPi5 is MUCH faster than building it on a 16-core 32-threads 64GB AMD machine. I'm talking 1.5hr tops (often less) on RPi5 vs. even 13 hrs on amd64.

I know that from experiments years ago with arm vm's runing with qemu on
intel platforms. I was curious whether that would work for Tails
somehow: It does! VERY slow but not that slow, that it is impossible.
And YES, it's better to use an arm64 platform with >= 8GM RAM (rpi,
rock, apple silicon and may others).

> - What you're saying about debian-security sounds weird to me. I never had issues accessing the debian-security repo via http, neither in general nor during Tails builds. E.g. a plain `curl http://deb.debian.org:80/debian-security/dists/bookworm-security/Release <http://deb.debian.org/debian-security/dists/bookworm-security/Release>` works.

Digged deeper into, might be caused by hybrid IPv4/IPv6 environment,
debian-security had been resolved to IPv6 addresses that failed to be
accessed as http resource.

> - Yes, you picked the right branch. I am working on rebasing everything on stable (with new features), so a big rebase is coming soon, but the new branch names will still be wip/arm64, wip/asahi and wip/raspi. 'stable' and 'devel' are just (probably non-up-to-date versions of) Tails' regular stable and devel, with no arm64-related changes.

Somehow confused: base_branch defines, which branch will be cloned/used
insde of the build VM while rake build. In case of "stable" even NOT the
wip/raspi branch will be used to build, so how could a raspi image be
build on "stable"?

Best regards!
n9iu7pk

PGP 7426 4598 B5AD 4D12 1699 C710 [ D602 E331 4D12 FFCB ]
https://keys.openpgp.org/search?q=D602E3314D12FFCB