(Presuming updating mullvad-browser is left up to Arch's package manager and not the browser's self updater)
You all may be interested in following https://gitlab.torproject.org/tpo/applications/tor-browser-build/-/issues/41083 and its associated issues and MRs. With respect to ignoring the updater, the 'right' way to do this is to add a particular file in the install directory. See this comment for specifics: - https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42482#note_3019228
This will be the supported way for downstream packagers to disable the updater and manage their own updates from the 13.5 series on.
Pinned Comments
tarball commented on 2024-06-26 08:35 (UTC)
Make sure to fetch the developers' signing key before building the package.
The official instructions are here. The link is also mentioned in the
PKGBUILD
.If the site is blocked in your region, you'll have to work around it or trust me that this is what it says:
which (as of 2024-06-26) should also show this fingerprint:
If your gpg says otherwise, you may have been fed garbage.