brave-browser

Baremetal build scripts for Brave Browser 1.93.76 (Chromium 150).

Builds all toolchain dependencies from source (Node.js, Python, curl) into a self-contained prefix, downloads WidevineCDM, compiles Brave with official branding, and installs it system-wide at /usr/lib/brave/.

Prerequisites

50+ GB free disk space on a local (non-NFS) filesystem for the Chromium source tree and build output. The build machine needs:

git  pkg-config  gperf  bison  flex

Plus the system libraries listed in sysdeps.build.sh (X11, Wayland, GTK3, NSS, ALSA, CUPS, D-Bus, DRM, VA-API). Check for missing items without installing anything:

bash sysdeps.build.sh

Configuration

Copy and edit build.local to set your paths:

# Where the Chromium source tree and build output are written (needs 50+ GB, must be local):
BUILD_DIR=/scratch/local/brave-build/1.93.76

# Install prefix for built packages (node, python, curl, brave):
PREFIX=/opt/brave/1.93.76

Build

bash buildall.sh

This builds in order: Node.js → Python → curl → WidevineCDM → Brave. Each package is stamped with a .built tag so interrupted builds resume from where they left off.

Rebuild a single package

bash rebuild.sh brave        # wipe and rebuild just brave
bash rebuild.sh -n all       # dry run — show what would be removed

Install

The build produces a self-contained install script on the local filesystem (accessible by root despite NFS root_squash):

sudo bash /path/to/BUILD_DIR/install.sh

This installs to /usr/lib/brave/, creates a wrapper at /usr/lib/mariux64/brave, symlinks /usr/bin/brave, and produces a deployment tar:

PREFIX/brave-1.93.76-linux-x64.tar

The tar can be extracted on any compatible system:

sudo tar -C / -xf brave-1.93.76-linux-x64.tar

Layout

File	Purpose
`build.profile`	Shared variables sourced by all scripts
`build.local`	Machine-local overrides (not committed)
`buildall.sh`	Top-level orchestrator
`*.build.sh`	Per-package build scripts
`rebuild.sh`	Wipe a package so buildall.sh rebuilds it
`sysdeps.build.sh`	Check system library prerequisites
`install.sh`	Install from PREFIX to /usr/lib/brave/
`sysinstall.build.sh`	Generate standalone install.sh on local scratch
`launcher.build.sh`	Build the /usr/lib/mariux64/brave wrapper
`profile.build.sh`	Assemble the shell profile for the built prefix
`brave-core/`	brave-core submodule (the Brave source tree)

Build configuration

Key GN args set in brave.build.sh:

Arg	Value	Why
`is_official_build`	`true`	Brave branding and component routing
`brave_channel`	`""`	Empty = stable/release channel
`bundle_widevine_cdm`	`true`	WidevineCDM bundled next to binary
`enable_brave_rewards`	`false`	Avoids requiring payment provider keys
`symbol_level`	`0`	No debug symbols — halves binary size
`enable_nacl`	`false`	NaCl is deprecated; saves ~10 min
`rtc_use_pipewire`	`false`	Disable if PipeWire is not available

Sandbox

Brave runs with the Linux user namespace sandbox (--disable-setuid-sandbox). Requires CONFIG_USER_NS=y and unprivileged user namespaces enabled on the host kernel.

Component versions

Component	Version
Brave	1.93.76
Chromium	150.1.93.0
Node.js	24.16.0
Python	3.13.14
curl	8.11.0
WidevineCDM	4.10.3050.0

mariux64/brave-browser

About

Resources

Uh oh!

Stars

Watchers

Forks

Releases 1

Languages