staging/blocktrron/package/Makefile, branch master

package: do not sign individual APK packages

2025-10-09T10:52:43Z

APK, unlike OPKG, can sign individual packages and not just indexes. Since OpenWrt uses a distributed build infrastructure and only the build master owns the private keys, signing of individual buildworkers doesn't work. Right now, each buildworker creates a temporary build key to sign packages, then transmits the package index to the buildmaster for a signature. As a result, all individual packages contain a nonsensical signature, making them harder to reproduce. This commit removes the individual package signing. Since APK requires signatures per default, explicitly allow installation of unsigned packages during the build process. The config option here is for historical reasons misleading, SIGNED_PACKAGES refers to the package index, not the individual packages. Signed-off-by: Paul Spooren

package: generate sha256sums by default

2025-10-03T09:00:23Z

Right now the sha256sums are only created for the targets/ folder (i.e. firmware images) and only the buildbot generates those sha256sums. Instead, let the build system create the sha256sums directly. Signed-off-by: Paul Spooren

package: rework contents of package index.json

2025-06-11T14:55:31Z

Rework the generation of the index.json version of the package indexes to match the original intent (i.e., for use by the ASU server and other downstream projects). The current file contains package names that have ABI versioning, making them unusable by ASU, so we now remove the ABI suffixes. Also adds a 'version' field to the json, so downstream utilities can detect the new semantics of the package name fields. Links: https://github.com/openwrt/openwrt/commit/218ce40cd738f3373438aab82467807a8707fb9c Signed-off-by: Eric Fahlgren Link: https://github.com/openwrt/openwrt/pull/19051 Signed-off-by: Robert Marko

build: lock versions for special APK packages

2025-02-04T13:48:59Z

The three packages base-files, libc and kernel are special, the former can't be upgraded in place since it's content are modified on startup, the latter two are virtual packages only used as constraints for the package manager. Historically base-files was "locked" via a special OPKG function, the latter two were hidden from the package index and thereby never picked as possible upgrade. Time moved forward and we now have APK and tools like OWUT. The latter compares available packages with installed packages and generates user readable output, requiring versions for libc and kernel, too. At the same time, APK uses a different looking mechanism, which is set during installation instead of part of the package metadata. In short, this patch adds version constraints to the three packages, allowing them to be part of the package index. Fixes: #17774 Fixes: #17775 Fixes: efahl/owut#31 Signed-off-by: Paul Spooren

build: fix filtering of non-upgradable packages

2024-11-21T16:55:45Z

Add anchor to name search so that we don't inadvertently filter out packages containing, say, "kernel-" as part of their name. Fixes: openwrt/packages#25372 Signed-off-by: Eric Fahlgren Link: https://github.com/openwrt/openwrt/pull/17032 Signed-off-by: Robert Marko

build: apk: Remove /run/apk/db.lock

2024-11-16T13:22:22Z

Do not add the file /run/apk/db.lock to the root file system. The /run folder should be on a tmpfs. At runtime we should make /run point to a tmpfs. At build time we should just remove the folder. Signed-off-by: Hauke Mehrtens Link: https://github.com/openwrt/openwrt/pull/16961 Signed-off-by: Christian Marangi

package: use /dev/null for apk --repositories-file

2024-11-15T11:27:44Z

In preparation for APK version bump, use /dev/null instead of /dev/zero for --repositories-file to mute an error in recent APK files. New APK version use modern istream logic that are more sensible to the kind of file passed and /dev/null is required to correctly handle an empty repository file. Signed-off-by: Christian Marangi

build: create package index.json

2024-11-12T17:34:51Z

Duplicate the old opkg index.json using the new apk database. Needed to get the ASU server working on new snapshots. Signed-off-by: Eric Fahlgren Link: https://github.com/openwrt/openwrt/pull/16931 Signed-off-by: Christian Marangi

imagebuilder: fix package inclusion and APK index

2024-11-09T15:46:35Z

We need to exclude packages from the APK index which must not be upgraded. To do so, the packages `libc`, `kernel` and `base-files` are excluded to APK never suggestes them as upgradable. The previous logic would however match packages like `libcomerr0`, causing build failures. Make the copying and excluding logic more precise by adding a single dash. Signed-off-by: Paul Spooren

imagebuilder: fix APK for packages dir and cache

2024-11-09T15:46:35Z

This commit solves multiple issues. First of just install the three special packages base-files, libc and kernel directly from the index. In upstream indexes, those will never appear to prevent accidental upgrades may breaking the system. Next, enable caching for the ImageBuilder, which speeds up consecutive builds from ~33 seconds to ~5 seconds. Using cache however makes APK create the folder `/var/cache/apk/` which conflicts with the base-files installation, which ships a symlink from `/var` to `/tmp`, so specify `--no-cache` for the rootfs initialization. Lastly, drop the use of `apk update` since APK automatically does that. Signed-off-by: Paul Spooren