For anybody having problems building recent version in kernel lockdown, changing: cp --archive --verbose Browser/. "$pkgdir/opt/$pkg/" into: rsync -a --no-xattrs Browser/. "$pkgdir/opt/$pkg/" in the pkgbuild seemed to work.

Make sure to fetch the developers' signing key before building the package.

The official instructions are here. The link is also mentioned in the PKGBUILD.

If the site is blocked in your region, you'll have to work around it or trust me that this is what it says:

% gpg --auto-key-locate nodefault,wkd --locate-keys torbrowser@torproject.org

which (as of 2024-06-26) should also show this fingerprint:

EF6E 286D DA85 EA2A 4BA7  DE68 4E2C 6E87 9329 8290

If your gpg says otherwise, you may have been fed garbage.

aerofluvial's response worked perfectly. Definitely more of a workaround than a fix though. Thank you for sharing.

For anybody having problems building recent version in kernel lockdown, changing: cp --archive --verbose Browser/. "$pkgdir/opt/$pkg/" into: rsync -a --no-xattrs Browser/. "$pkgdir/opt/$pkg/" in the pkgbuild seemed to work.

Tried both reinstalling coreutils and restart. There are my permissions for /usr/bin/cp:

.rwxr-xr-x@  133k root 20 Apr 10:58 <U+F086F> cp

edit: I'm thinking the "@" symbol in the permissions may be the perpetrator (don't see that symbol on my pi).

Maybe cp or one of the libraries it depends on is damaged on disk? Or RAM overclock pushed too far? I'd try rebooting and/or reinstalling coreutils.

Might just be a me issue, but I can't seem to install/update this package anymore. The below line keeps failing. Replaced my actual username with <user>.

           PID: 48425 (cp)
           UID: 1000 
           GID: 1000
        Signal: 11 (SEGV)
     Timestamp: Tue 2026-05-19 14:47:29 EDT (6s ago)
  Command Line: cp --archive --verbose Browser/. /home/<user>/.cache/yay/mullvad-browser-bin/pkg/mullvad-browser-bin/opt/mullvad-browser/
    Executable: /usr/bin/cp
 Control Group: /user.slice/user-1000.slice/user@1000.service/app.slice/app-org.kde.konsole-37670.scope/tab(37688).scope
          Unit: user@1000.service
     User Unit: app-org.kde.konsole-37670.scope
         Slice: user-1000.slice
     Owner UID: 1000 (<user>)
       Boot ID: ea4f5cda671846afbbdd68f2b1869ee2
    Machine ID: 3ad7015a481047fba624b3b93c0ceb37
      Hostname: archlinux
       Storage: /var/lib/systemd/coredump/core.cp.1000.ea4f5cda671846afbbdd68f2b1869ee2.48425.1779216449000000.zst (present)
  Size on Disk: 34K
       Message: Process 48425 (cp) of user 1000 dumped core.

                Stack trace of thread 48425:
                #0  0x00007f7be585bfa7 attr_copy_file (libattr.so.1 + 0x2fa7)
                #1  0x0000561c926c8044 n/a (/usr/bin/cp + 0x6044)
                #2  0x0000561c926cafb7 n/a (/usr/bin/cp + 0x8fb7)
                #3  0x0000561c926c9f4a n/a (/usr/bin/cp + 0x7f4a)
                #4  0x0000561c926ce007 n/a (/usr/bin/cp + 0xc007)
                #5  0x0000561c926c7b6b n/a (/usr/bin/cp + 0x5b6b)
                #6  0x0000561c926c5cd4 n/a (/usr/bin/cp + 0x3cd4)
                #7  0x00007f7be5627741 n/a (libc.so.6 + 0x27741)
                #8  0x00007f7be5627879 __libc_start_main (libc.so.6 + 0x27879)
                #9  0x0000561c926c5f65 n/a (/usr/bin/cp + 0x3f65)
                ELF object binary architecture: AMD x86-64

Something else changed your $PATH (maybe ~/.profile, /etc/makepkg*, or /etc/profile.d). This package does not modify it in any way.

mode of './Browser/removed-files' changed from 0600 (rw-------) to 0644 (rw-r--r--)
mode of './Browser/start-mullvad-browser' changed from 0700 (rwx------) to 0744 (rwxr--r--)
mode of './Browser/start-mullvad-browser.desktop' changed from 0700 (rwx------) to 0744 (rwxr--r--)
mode of './Browser/update-settings.ini' changed from 0600 (rw-------) to 0644 (rw-r--r--)
mode of './Browser/updater' changed from 0700 (rwx------) to 0744 (rwxr--r--)
mode of './Browser/updater.ini' changed from 0600 (rw-------) to 0644 (rw-r--r--)
mode of './Browser/vaapitest' changed from 0700 (rwx------) to 0744 (rwxr--r--)
mode of './Browser/version.json' changed from 0600 (rw-------) to 0644 (rw-r--r--)
mode of './start-mullvad-browser.desktop' changed from 0700 (rwx------) to 0744 (rwxr--r--)
find: The current directory is included in the PATH environment variable, which is insecure in combination with the -execdir action of find.  Please remove the current directory from your $PATH (that is, remove ".", doubled colons, or leading or trailing colons)

sick of this shit package having to constantly manually intervene, why even have a fkn bin for, mullvad can fuck off

@tarball Could the PKGBUILD line #98 be changed from

find . -executable -execdir chmod --verbose a+x '{}' +

to

find . -perm -u=x -execdir chmod --verbose a+x '{}' +

The current approach with -executable will not work in some case (e.g., the BUILDDIR is located on an FS mounted with noexec).

hey @tarball, you're using an incorrect ffmpeg dependency for mullvad here. It should be ffmpeg4.4 and not ffmpeg. The latest ffmpeg is not compatible with firefox-based browser. See the correct firefox dependencies listed out in extra/firefox here: https://archlinux.org/packages/extra/x86_64/firefox/ Due to this incompatibility, video stutters in mullvad and you can check for proper compatibility when you navigate to about:support and look under "Media". All codecs should have software decoding support, which they won't unless your system has ffmpeg4.4