Sequoia OpenPGP + Thunderbird Setup

This repository contains a helper script to configure Thunderbird with the Sequoia OpenPGP backend.

This project does not vendor sequoia-sq or sequoia-octopus-librnp in-tree. Users can clone upstream sources directly.

1) Clone this repository

git clone https://github.com/rafitox/sequoia-openpgp.git
cd sequoia-openpgp

2) (Optional) Install Sequoia CLI (sq) from upstream source

If you want the sq command-line tool, clone Sequoia and build it:

git clone https://gitlab.com/sequoia-pgp/sequoia.git
cd sequoia
cargo build --release --bin sq
./target/release/sq --version
cd ..

Optional system-wide install:

sudo install -m 0755 sequoia/target/release/sq /usr/local/bin/sq
sq --version

Official Sequoia installation reference (Debian)

Reference: https://book.sequoia-pgp.org/installation.html#debian

From the official Sequoia documentation:

sq has been part of the Debian distribution since “bookworm” (Debian 12). Up-to-date versions are part of “trixie” (Debian 13) and later.

sudo apt install sq

3) Run the Thunderbird setup script

From this repository root:

chmod +x thunderbird_sequoia_installation.sh
./thunderbird_sequoia_installation.sh

The script will:

• install Thunderbird and required build dependencies;
• clone sequoia-octopus-librnp from upstream if missing;
• build sequoia-octopus-librnp in release mode;
• install libsequoia_octopus_librnp.so in Thunderbird's library directory;
• divert original librnp.so to librnp-orig.so;
• point librnp.so to libsequoia_octopus_librnp.so.

4) Verify Sequoia backend is active

ls -l /usr/lib/thunderbird/librnp.so
ls -l /usr/lib/thunderbird/libsequoia_octopus_librnp.so
dpkg-divert --list /usr/lib/thunderbird/librnp.so

Expected result: librnp.so points to libsequoia_octopus_librnp.so, and a diversion exists for librnp-orig.so.

Notes

• Target platform: Pop!_OS / Ubuntu-based systems.
• If Thunderbird is updated, rerun ./thunderbird_sequoia_installation.sh if linkage is reset.