Arch Linux User Repository

Before running makepkg, you must do this (as normal user):

$ gpg --auto-key-locate nodefault,wkd --locate-keys torbrowser@torproject.org

If you want to update tor-browser from AUR without AUR helpers you can run in a terminal:

$ tor-browser -u

@jahway603

As I already told @rek2 back then, you must understand that since December 2022 this PKGBUILD has not been containing anywhere the string _en-US.tar.xz about which you complain. So if you still get that error, as I already told @rek2 back then, it means that you are using an outdated PKGBUILD. Please run once and for all in a terminal:

curl --silent --fail 'https://aur.archlinux.org/cgit/aur.git/snapshot/tor-browser.tar.gz' | tar xz
(cd tor-browser && makepkg -sifc)
rm -r tor-browser

Packages need to build from source. Since this is a binary source, this should be resubmitted as tor-browser-bin.

Having same issue reported in my 2023-01-30 comment - please update the PKGBUILD

Then I guess when your AUR helper replaces it by a new package, it does more than just a tor-browser -r on the first run that follows the update: I can assure you because I checked several times before writing here to be sure: almost everything is erased. Add-ons and bookmarks are kept because they're part of ~/.local/opt/tor-browser/app/Browser/TorBrowSer/Data and that part is kept. From what I just checked ~/.local/opt/tor-browser/app/Browser/TorBrowSer/Data is kept as is as almost everything in it have a creation date going to the first install/run of the Tor Browser in the computer lifetime. Almost every other directories have a creation date on the last update & run from the AUR helper.

You can easily check all of this like that: downgrade your tor-browser package, download a random file at the default location or touch ~/.local/opt/tor-browser/app/Browser/Downloads. Update your tor-browser package. Launch it. The Downloads directory won't be here anymore. Only downgrading even works for the test as it's seen as a different version. On top of that, if you have ~/.local/opt/tor-browser/app/Browser/ or any lower level directory that seems to be replaced/rewritten open in Nautilus for example, you'll see that Nautilus automatically goes back to ~/.local/opt/tor-browser/app/ because the directory it was in suddenly disappeared.

@ttxs25830 If you can provide a list of mirrors I can add them to the PKGBUILD using the same machinery that I used in the gnunet-fuse package.

@Porkepix

The ~/.local/opt/tor-browser/app/Browser directory is kept between updates. You can simulate an update by launching tor-browser -r from the terminal. If I install a browser extension and I update the browser the extension is kept. As for the PGP signature issue, I have no idea.

I use proton mail along with proton vpn. I hope that a vpn can be accessed in every country. This might help you.

Can we have something like tor-browser-bin? It's hard to access any domain owned by torproject in some region, so we need an package can install tor directly. (I'm living in one, and that's the reason i can't do it my self)

One issue encountered with the package I could verify again, it looks like it's somehow doing a big replacement of the install directory (/home/[user]/.local/opt/tor-browser/app/Browser) on update, I don't know which instruction exactly asks for it (nor where the install location is defined), but thing is the tor-browser consider this place as its home and therefore defaults at downloading files into /home/[user]/.local/opt/tor-browser/app/Browser/Downloads. The gist of it seems that after an upgrade from the package manager, it seems to act as if it was a first install rather than an update. Problem is that due to this replacement, if user downloaded things to the default location there, it gets purely wiped on browser update through AUR helper (this does not happen with the internal update method).

I also use this message for to ask about a curiosity: I've read the pinned comment here but could notice something curious: a fresh Arch install was able to install the package and get the GPG key by itself, therefore having no signature issue without any need to run the commands in the pined comment. On the other hand, an older Arch install, that could install it without signature issue back in years now gets the signature mismatch, any idea as to why it would behave differently?

Diff for 12.0.4:

diff --git a/.SRCINFO b/.SRCINFO
index caa0aad..f57ad0f 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,6 +1,6 @@
 pkgbase = tor-browser
    pkgdesc = Tor Browser Bundle: anonymous browsing using Firefox and Tor
-   pkgver = 12.0.3
+   pkgver = 12.0.4
    pkgrel = 1
    url = https://www.torproject.org/projects/torbrowser.html
    install = tor-browser.install
@@ -26,8 +26,8 @@ pkgbase = tor-browser
    optdepends = gst-libav: H.264 video
    optdepends = libpulse: PulseAudio audio driver
    optdepends = libnotify: Gnome dialog boxes
-   noextract = tor-browser-linux32-12.0.3_ALL.tar.xz
-   noextract = tor-browser-linux64-12.0.3_ALL.tar.xz
+   noextract = tor-browser-linux32-12.0.4_ALL.tar.xz
+   noextract = tor-browser-linux64-12.0.4_ALL.tar.xz
    source = tor-browser.desktop.in
    source = tor-browser.in
    source = tor-browser.png
@@ -37,13 +37,13 @@ pkgbase = tor-browser
    sha256sums = 1143d23e347605b498b3793992e84e95563efd94aa4da17837b37104a6d4a090
    sha256sums = f25ccf68b47f5eb14c6fec0664c74f30ea9c6c58d42fc6abac3b64670aaa3152
    sha256sums = 7b28b5dbe8ad573bb46e61b4d542b33e01ca240825ca640b4893fee6203b021f
-   source_i686 = https://dist.torproject.org/torbrowser/12.0.3/tor-browser-linux32-12.0.3_ALL.tar.xz
-   source_i686 = https://dist.torproject.org/torbrowser/12.0.3/tor-browser-linux32-12.0.3_ALL.tar.xz.asc
-   sha256sums_i686 = b75b67119b62462836afc18d269a93f89d17a3108b33252c23db57e9a6b49589
+   source_i686 = https://dist.torproject.org/torbrowser/12.0.4/tor-browser-linux32-12.0.4_ALL.tar.xz
+   source_i686 = https://dist.torproject.org/torbrowser/12.0.4/tor-browser-linux32-12.0.4_ALL.tar.xz.asc
+   sha256sums_i686 = 9a2f1bb7123a75ee6243c1f3369bee15d2478f38b4df36494fae5db161220c70
    sha256sums_i686 = SKIP
-   source_x86_64 = https://dist.torproject.org/torbrowser/12.0.3/tor-browser-linux64-12.0.3_ALL.tar.xz
-   source_x86_64 = https://dist.torproject.org/torbrowser/12.0.3/tor-browser-linux64-12.0.3_ALL.tar.xz.asc
-   sha256sums_x86_64 = 6ce198fd17700fa3bb408b8e881c3b3959d97e9ba6186b28ea1c0c249c0dda0d
+   source_x86_64 = https://dist.torproject.org/torbrowser/12.0.4/tor-browser-linux64-12.0.4_ALL.tar.xz
+   source_x86_64 = https://dist.torproject.org/torbrowser/12.0.4/tor-browser-linux64-12.0.4_ALL.tar.xz.asc
+   sha256sums_x86_64 = 553d1b0f8bfc481ab47a6158b3110bade638a3ebbe1507f20449d233399177b6
    sha256sums_x86_64 = SKIP

 pkgname = tor-browser
diff --git a/PKGBUILD b/PKGBUILD
index e2a2ad6..8d6ba14 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -17,7 +17,7 @@


 pkgname='tor-browser'
-pkgver='12.0.3'
+pkgver='12.0.4'
 pkgrel=1
 pkgdesc='Tor Browser Bundle: anonymous browsing using Firefox and Tor'
 url='https://www.torproject.org/projects/torbrowser.html'
@@ -70,9 +70,9 @@ sha256sums=('5dd2b61bd4edf4d1499a81127f97a1de7ec272a885df97331b61969a5a07f05f'
             '1143d23e347605b498b3793992e84e95563efd94aa4da17837b37104a6d4a090'
             'f25ccf68b47f5eb14c6fec0664c74f30ea9c6c58d42fc6abac3b64670aaa3152'
             '7b28b5dbe8ad573bb46e61b4d542b33e01ca240825ca640b4893fee6203b021f')
-sha256sums_i686=("$(_dist_checksum "${_tag_i686}")"
+sha256sums_i686=('9a2f1bb7123a75ee6243c1f3369bee15d2478f38b4df36494fae5db161220c70'
                  'SKIP')
-sha256sums_x86_64=("$(_dist_checksum "${_tag_x86_64}")"
+sha256sums_x86_64=('553d1b0f8bfc481ab47a6158b3110bade638a3ebbe1507f20449d233399177b6'
                    'SKIP')

 noextract=("${pkgname}-${_tag_i686}-${pkgver}_${_pkgsuffx}.tar.xz"