1. 09 Aug, 2019 2 commits
  2. 07 Aug, 2019 2 commits
  3. 05 Aug, 2019 1 commit
    • Oliver Smith's avatar
      abuild: rename makedepends_host virtual package · c54d39d8
      Oliver Smith authored
      With a recent change in apk [1], virtual packages of the same name will
      upgrade each other. Adjust abuild to this by not using the same virtual
      package name for two types of dependencies.
      
      This fixes the way crosscompilers are built in postmarketOS [2], which
      is essentially the same as running this on Alpine's gcc aport:
      $ cd aports/main/gcc
      $ C_TARGET_ARCH=armhf CTARGET=armv6-alpine-linux-musleabihf \
        BOOTSTRAP=nobuildbase CBUILDROOT=/ abuild -r
      ...
      >>> gcc-armhf: Installing for host:
      (1/24) Upgrading .makedepends-gcc-armhf (20190714.104731 -> 20190714.104741)
      (2/24) Purging binutils-armhf (2.31.1-r2)
      ...
      
      [1] apk-tools.git 37fbafcd928c466c82c892a7868d686d710e5d07
          ("add: make virtual packages upgradeable (ref #9957)")
      [2] https://gitlab.com/postmarketOS/pmaports/blob/master/cross/gcc-armhf/APKBUILD
      
      Fixes: apk-tools#10649
      c54d39d8
  4. 30 Jul, 2019 1 commit
  5. 17 Jul, 2019 12 commits
  6. 08 Jul, 2019 1 commit
  7. 20 Jun, 2019 1 commit
    • Max Rees's avatar
      abuild-sudo: don't allow --keys-dir · 297de93a
      Max Rees authored
      Not allowing --allow-untrusted is obviously a good idea, but it can be
      trivially bypassed if --keys-dir is allowed:
      
      $ abuild-apk add foo-1-r0.apk
      ERROR: foo-1-r0.apk: UNTRUSTED signature
      $ abuild-apk --allow-untrusted add foo-1-r0.apk
      abuild-apk: --allow-untrusted: not allowed option
      $ cp -rp /etc/apk/keys /tmp/keys
      $ cp untrusted.pub /tmp/keys
      $ abuild-apk --keys-dir /tmp/keys add foo-1-r0.apk
      (1/1) Installing foo (1-r0)
      OK: 4319 MiB in 806 packages
      
      If both --allow-untrusted and --keys-dir are not allowed, then it should
      no longer be possible for an unprivileged member of the abuild group to
      add an untrusted package.
      
      $ abuild-apk --keys-dir /tmp/keys add foo-1-r0.apk
      abuild-apk: --keys-dir: not allowed option
      297de93a
  8. 14 Jun, 2019 1 commit
  9. 12 Jun, 2019 9 commits
  10. 03 May, 2019 2 commits
  11. 30 Apr, 2019 4 commits
  12. 29 Apr, 2019 4 commits