Packages

FreedomFox -- a hardened, deep-rebranded Firefox for LinuxDoors, based on LibreWolf. LibreWolf is an MPL-2.0 community fork of Firefox focused on privacy/security; this package applies LibreWolf's privacy layer to a current Firefox ESR and rebrands the identity to FreedomFox (LinuxDoors). NOT a mirror of LibreWolf and NOT official LibreWolf -- LibreWolf's own branding-removal and branding patches are deliberately skipped and replaced with original FreedomFox (LinuxDoors-family) art, exactly as LibreWolf itself does to Firefox and as this project already does for LinuxUltraOffice<-LibreOffice and ungoogled-chromium<-Chromium. || BASE: firefox-153.2.0esr.source.tar.xz (the same source packages/firefox builds; carries the current Firefox-ESR security fixes -- 'latest security updates from firefox'). LibreWolf's patch set on gitlab.com/librewolf-community/browser/source targets Firefox 149, so this is a real rebase: build.sh applies the privacy/behaviour/build patches best-effort (patch --forward --fuzz=3), logs any that don't apply to $SRC_DIR/freedomfox-patch-report.txt, and continues -- the version-INDEPENDENT settings/ layer (settings/librewolf.cfg -> renamed freedomfox.cfg, an ~786-line autoconfig locking RFP/telemetry-off/strict-cookies/no-Pocket/no-sponsored/etc, plus local-settings.js and distribution/policies.json) carries the bulk of the hardening regardless of which source patches fuzz. LibreWolf's branding + non-Linux patches (moz-official, vendor-name, mozilla_dirs, firefox-in-ua, xdg-dir, dbus_name, arm/macos/windows/musl/tumbleweed/flatpak) are SKIPPED. || OVERLAY: extra_sources freedomfox-overlay-153.2.0esr.tar.gz is assembled locally from LibreWolf source repo @135b0253 (patches/, patches.txt, mozconfig.new -- MPL-2.0) + codeberg.org/librewolf/settings @b4891cbb (librewolf.cfg/local-settings.js/policies.json -- MPL-2.0, LICENSE.txt included) -- see PROVENANCE.txt inside it. || BUILD: mozconfig = packages/firefox's proven system-lib set (system av1/icu/libevent/libvpx/nspr/nss/webp/jpeg/png/zlib, ALSA, --host/--target=x86_64-unknown-linux-gnu for .101's clang triple, RUST_MIN_STACK=256MiB for the gkrust fat-LTO stack crash) + LibreWolf hardening flags from mozconfig.new (--enable-hardening --enable-stl-hardening --disable-default-browser-agent --allow-addon-sideload --with-unsigned-addon-scopes=app,system, MOZ_REQUIRE_SIGNING= , CFLAGS/CXXFLAGS -ftrivial-auto-var-init=zero -fwrapv) + --with-branding=browser/branding/freedomfox --with-app-name=freedomfox, MOZ_APP_DISPLAYNAME=FreedomFox MOZ_APP_VENDOR=LinuxDoors MOZ_APP_REMOTINGNAME=freedomfox. Drops LibreWolf's --enable-bootstrap / --with-l10n-base (system toolchain + en-US only, same as packages/firefox). Branding art is generated in build.sh with pycairo on .101 (flat, crisp, door/gold/violet palette -- the LinuxDoors family mark, consistent with the site/installer/GRUB/LinuxUltraOffice; no fox motif, no Firefox/LibreWolf logo). distribution/policies.json is LibreWolf's merged with a locked general.useragent.override adding 'LinuxDoors/<ver>' (the browser-Install-detection tag on linuxdoors.com, same mechanism packages/firefox uses) and FreedomFox support URLs. || ship_in_iso: true -- user asked for it bundled in linuxdoors.iso alongside Firefox and ungoogled-chromium, once built + GUI-verified on .101. || Expect this to be a multi-hour, multi-iteration build (Firefox-scale + a patch-rebase phase), same discipline as packages/firefox and packages/linuxultraoffice. || 153.2.0esr-lw1 -> 155.0.1-lw1 (2026-09-14): rebased onto Firefox's REGULAR/rapid-release channel (155.0.1, real sha256 verified against Mozilla's own published SHA256SUMS) rather than another ESR point release, per explicit user direction to track what a real desktop Firefox install actually runs -- packages/firefox itself deliberately stays on 153.2.0esr, unaffected. Real risk going in, confirmed rather than assumed: LibreWolf's own patches are only ever tested against ESR, never the rapid channel, s