alpine issueshttps://gitlab.alpinelinux.org/groups/alpine/-/issues2022-02-23T19:51:35Zhttps://gitlab.alpinelinux.org/alpine/infra/infra/-/issues/10683mips runner2022-02-23T19:51:35ZJ0WImips runnerSince there is a lot of activity for the mips architecture (see also https://github.com/docker-library/official-images/issues/6709) I'd like to request a GitLab runner for it.Since there is a lot of activity for the mips architecture (see also https://github.com/docker-library/official-images/issues/6709) I'd like to request a GitLab runner for it.Ariadne Conillariadne@ariadne.spaceAriadne Conillariadne@ariadne.spacehttps://gitlab.alpinelinux.org/alpine/tsc/-/issues/27Officially decommission mips642022-02-23T19:51:36ZKevin DaudtOfficially decommission mips64The mips64 builder is gone. There is no way we can build any packages anymore, we can no longer fix any security issues, so it's prudent to officially decommission mips64.The mips64 builder is gone. There is no way we can build any packages anymore, we can no longer fix any security issues, so it's prudent to officially decommission mips64.Carlo LandmeterCarlo Landmeterhttps://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10818[2.12-stable] Issues updating apk index2022-02-23T20:05:58ZKevin Daudt[2.12-stable] Issues updating apk indexOn build-edge-armhf, abuild-sign fails to update the index. From the log:
```
main built: 0
main tried: 0
main deleted: 0
main total built: 1516
main total relevant aports: 1516
main total aports: 1546
DEBUG: pa...On build-edge-armhf, abuild-sign fails to update the index. From the log:
```
main built: 0
main tried: 0
main deleted: 0
main total built: 1516
main total relevant aports: 1516
main total aports: 1546
DEBUG: path=/home/buildozer/packages//community/armhf/erlang-24.2.1-r0.apk
Deleting erlang-reltool-24.1.7-r0.apk
Deleting erlang-debugger-24.1.7-r0.apk
Deleting erlang-dialyzer-24.1.7-r0.apk
Deleting erlang-observer-24.1.7-r0.apk
Deleting erlang-wx-24.1.7-r0.apk
Deleting erlang-et-24.1.7-r0.apk
Deleting erlang-24.1.7-r0.apk
Deleting erlang-megaco-24.1.7-r0.apk
Deleting erlang-dev-24.1.7-r0.apk
Deleting erlang-odbc-24.1.7-r0.apk
Updating apk index
tar: -: Wrote only 4096 of 10240 bytes
tar: Error is not recoverable: exiting now
community built: 1
community tried: 1
community deleted: 10
community total built: 3763
community total relevant aports: 3763
community total aports: 4471
testing built: 0
testing tried: 0
testing deleted: 0
testing total built: 2176
testing total relevant aports: 2176
testing total aports: 2575
```
this possibly also affected aarch64, though not confirmed, but users reported packages with bad signatures.
```
$ apk --version
apk-tools 2.12.9, compiled for armhf.
```https://gitlab.alpinelinux.org/alpine/cloud/alpine-cloud-images/-/issues/131Remove Unnecessary Default Packages2022-02-24T02:58:12ZJake Buchholz GöktürkRemove Unnecessary Default PackagesWe used to need to install...
* `iproute2-minimal`
* `nvme-cli`
...but those should now only be installed as dependencies for whatever needs them (i.e. `tiny-cloud`)
Also review default `kernel_modules`, `kernel_options`, and `initfs_f...We used to need to install...
* `iproute2-minimal`
* `nvme-cli`
...but those should now only be installed as dependencies for whatever needs them (i.e. `tiny-cloud`)
Also review default `kernel_modules`, `kernel_options`, and `initfs_features`.https://gitlab.alpinelinux.org/alpine/aports/-/issues/1488[v2.5] Vulnerability in libxml2 <= 2.9.0 allows remote code execution2022-02-24T08:05:35ZLeonardo Arena[v2.5] Vulnerability in libxml2 <= 2.9.0 allows remote code executionhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5134
Solution:
\- Patch:
http://git.gnome.org/browse/libxml2/patch/?id=6a36fbe3b3e001a8a840b5c1fdd81cefc9947f0d
*(from redmine: issue id 1488, created on 2012-12-05, closed on 20...http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5134
Solution:
\- Patch:
http://git.gnome.org/browse/libxml2/patch/?id=6a36fbe3b3e001a8a840b5c1fdd81cefc9947f0d
*(from redmine: issue id 1488, created on 2012-12-05, closed on 2012-12-17)*
* Changesets:
* Revision a19dcca62117d3b62e98097b12ca9ba5311ca693 by Natanael Copa on 2012-12-07T11:13:53Z:
```
main/libxml2: fix CVE-2012-5134
fixes #1488
```Alpine 2.5.1https://gitlab.alpinelinux.org/alpine/aports/-/issues/13459comunity/homer-api: outdated and needs to be replaced with testing/home-app2022-02-24T11:26:15ZAndy Postnikovcomunity/homer-api: outdated and needs to be replaced with testing/home-appThe page https://github.com/sipcapture/homer-api states that project obsolete and should be replaced by https://github.com/sipcapture/homer-app
Its going to become required before 3.16 because php7 will be moved to testingThe page https://github.com/sipcapture/homer-api states that project obsolete and should be replaced by https://github.com/sipcapture/homer-app
Its going to become required before 3.16 because php7 will be moved to testing3.16.0Kaarle RitvanenKaarle Ritvanenhttps://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10790how to select a specific package "provider" in apkbuild?2022-02-24T11:54:45ZClayton Crafthow to select a specific package "provider" in apkbuild?when working in postmarketOS, I came across a situation where it's desirable to always install a specific package *except* in some limited cases where a package is installed then some other package should be installed. Here's an example:...when working in postmarketOS, I came across a situation where it's desirable to always install a specific package *except* in some limited cases where a package is installed then some other package should be installed. Here's an example:
- package `BAR` is a reimplementation/replacement for package `FOO`
- package `FOO` should be installed when something `depends=FOO`
- a provisioning script effectively runs `apk add FOO`
- the special case is if package `BAZZ` is installed, then we want package `BAR` to be installed instead of `FOO`
One experiment to get this working involved using the following APKBUILD config:
**APKBUILD for FOO:**
```
...
provides=FOO
provider_priority=1
...
```
**APKBUILD for BAR:**
```
depends="<other stuff, but not FOO>"
...
provides=FOO
provider_priority=0
...
```
**APKBUILD for BAZ:**
```
...
subpackage="$pkgname-FOO"
...
FOO() {
install_if="$pkgname=$pkgver-r$pkgrel FOO"
depends="BAR"
mkdir "$subpkgdir"
}
...
```
When using the above, apk always selects `FOO` even if `BAR` is installed. Is there some other way to accomplish this purely in the APKBUILDs for these packages?https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/6591APK is executing scripts inside /var/cache, and it prevents normal operation2022-02-24T12:39:57ZJakub SkrzypnikAPK is executing scripts inside /var/cache, and it prevents normal operationHello,
I was trying complex ZFS pools, so I added the /var/cache as separate
ZFS volume.
As security mesaure, I’ve disabled execution on it, to reduce attack
surface.
And it broke APK:
ERROR: packagename }}-{{packageversion : s...Hello,
I was trying complex ZFS pools, so I added the /var/cache as separate
ZFS volume.
As security mesaure, I’ve disabled execution on it, to reduce attack
surface.
And it broke APK:
ERROR: packagename }}-{{packageversion : script exited with error 1
From some debugging I’ve figured out that APK executes post/pre-install
scripts inside /var/cache directly after unpacking .apk files.
PROPOSED SOLUTION: Move the unpacking and processing phase into /tmp,
remove files after processing
*(from redmine: issue id 6591, created on 2016-12-27)*
* Relations:
* relates #129Timo TeräsTimo Teräshttps://gitlab.alpinelinux.org/alpine/aports/-/issues/13163main/linux-lts: Random crash after upgrade to 5.15.x2022-02-25T02:44:55ZSaijin-Naibmain/linux-lts: Random crash after upgrade to 5.15.xPlatform:
```
GeoBook Geo120 US Minecraft Edition
Intel Celeron N3450
4GB LPDDR4
64GB eMMC
```
/etc/default/grub:
```
GRUB_TIMEOUT=2
GRUB_DISABLE_SUBMENU=y
GRUB_DISABLE_RECOVERY=true
GRUB_CMDLINE_LINUX_DEFAULT="modules=sd-mo...Platform:
```
GeoBook Geo120 US Minecraft Edition
Intel Celeron N3450
4GB LPDDR4
64GB eMMC
```
/etc/default/grub:
```
GRUB_TIMEOUT=2
GRUB_DISABLE_SUBMENU=y
GRUB_DISABLE_RECOVERY=true
GRUB_CMDLINE_LINUX_DEFAULT="modules=sd-mod,usb-storage,ext4 quiet intel_pstate=active intel_pstate=powersave rootfstype=ext4"
```
rc-update:
```
acpid | default
binfmt | boot
bluetooth | default
bootmisc | boot
crond | default
dbus | default
devfs | sysinit
dmesg | sysinit
elogind | default
fuse | default
fwupd | default
hostname | boot
hwclock | boot
hwdrivers | sysinit
killprocs | shutdown
lightdm | default
loadkmap | boot
lvm | boot
modules | boot
mount-ro | shutdown
networking | default
ntpd | default
pulseaudio | default
savecache | shutdown
swap | boot
sysctl | boot
syslog | boot
udev | sysinit
udev-postmount | default
udev-settle | default
udev-trigger | sysinit
urandom | boot
wpa_supplicant | default
```
When I check dmesg for words like error, warn, crit, firmware, etc. nothing shows.
When I remove the intel_pstate lines from my grub config, the machine will usually lock up during boot. With them present, I can use a console session seemingly normally, and can work in the DE from anywhere from 0seconds to a minute or two before locking up.https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10809unexpected end of file on package installation2022-02-25T08:43:57ZPaul Spoorenunexpected end of file on package installationAPK keeps failing to install the attached package at random. Sometime it works, sometime it doesn't. It's always this specific package, none of the other 141 packages caused any issues.
The error message is:
```
(88/142) Installing libn...APK keeps failing to install the attached package at random. Sometime it works, sometime it doesn't. It's always this specific package, none of the other 141 packages caused any issues.
The error message is:
```
(88/142) Installing libnftnl11 (1.2.1-r1)
ERROR: libnftnl11_1.2.1-r1: unexpected end of file
```
[libnftnl11_1.2.1-r1.apk](/uploads/200206686d3cac6ec887983325c91ff1/libnftnl11_1.2.1-r1.apk)
Looking at the `adbdump` I don't see anything suspicious
<details>
```
❯ ./staging_dir/host/bin/apk adbdump staging_dir/packages/ramips/libnftnl11_1.2.1-r1.apk
#%SCHEMA: 676B6370
# ADB block, size: 1180, compat: 0, ver: 0
info:
name: libnftnl11
version: 1.2.1-r1
unique-id: 361b41450a34275235653cb9125493bc60dbee17
arch: mipsel_24kc
license: GPL-2.0-or-later
origin: package/libs/libnftnl
maintainer: Steven Barth <steven@midlink.org>
installed-size: 136 KiB
depends: # 1 items
- libmnl0
provides: # 1 items
- libnftnl=0
abi: 11
paths: # 6 items
- acl:
mode: 755
user: root
group: wheel
- name: lib
acl:
mode: 755
user: root
group: wheel
- name: lib/apk
acl:
mode: 755
user: root
group: wheel
- name: lib/apk/packages
acl:
mode: 755
user: root
group: wheel
files: # 1 items
- name: libnftnl.list
acl:
mode: 644
user: root
group: wheel
size: 140
mtime: 1643932995
hash: |
b38c327a11b752bc913bb57f5017704922256a17c3718be124f49518ccc4fedc
- name: usr
acl:
mode: 755
user: root
group: wheel
- name: usr/lib
acl:
mode: 755
user: root
group: wheel
files: # 2 items
- name: libnftnl.so.11
acl:
mode: 755
user: root
group: wheel
size: 18
mtime: 1643932995
target: 00a06c69626e66746e6c2e736f2e31312e362e30
- name: libnftnl.so.11.6.0
acl:
mode: 755
user: root
group: wheel
size: 133859
mtime: 1643932995
hash: |
9e8ee573686728590cffd660edc78f859a6036181f61231375bd881141d39e11
scripts:
post-install: |
#!/bin/sh
[ "${IPKG_NO_SCRIPT}" = "1" ] && exit 0
[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
. ${IPKG_INSTROOT}/lib/functions.sh
export root="${IPKG_INSTROOT}"
export pkgname="libnftnl"
add_group_and_user
default_postinst
pre-deinstall: |
#!/bin/sh
[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
. ${IPKG_INSTROOT}/lib/functions.sh
export root="${IPKG_INSTROOT}"
export pkgname="libnftnl"
default_prerm
# sig v00 h04 57a47f38c520a78667e4c8189bd9a340304402202ac7dd628388c9c9b6db69a8a0f84043e873fb866ff081041dc77ad25f3cba590220..: UNTRUSTED signature
# data block, size: 148
# data block, size: 133867
```
</details>https://gitlab.alpinelinux.org/alpine/infra/docker/appstream-generator/-/issues/2Make generator logs available in a public endpoint2022-02-25T12:04:50ZPablo Correa GomezMake generator logs available in a public endpointI took this [from Debian](https://salsa.debian.org/pkgutopia-team/debian-asgen-config/-/blob/master/scripts/update-metadata.sh). Would be pretty useful in case there is some issues in the generator, which otherwise basically only the inf...I took this [from Debian](https://salsa.debian.org/pkgutopia-team/debian-asgen-config/-/blob/master/scripts/update-metadata.sh). Would be pretty useful in case there is some issues in the generator, which otherwise basically only the infrastructure maintainer can troubleshoot.Rasmus Thomsenoss@cogitri.devRasmus Thomsenoss@cogitri.devhttps://gitlab.alpinelinux.org/alpine/aports/-/issues/13054feat sane-airscan2022-02-25T12:28:28ZDocbrokefeat sane-airscanPlease add sane-airscan to support wireless scanners using airscan/wsd protocoals
https://github.com/alexpevzner/sane-airscanPlease add sane-airscan to support wireless scanners using airscan/wsd protocoals
https://github.com/alexpevzner/sane-airscanhttps://gitlab.alpinelinux.org/alpine/aports/-/issues/13554trivy --version reports version of aports repo2022-02-25T12:50:53ZHenrik Riomartrivy --version reports version of aports repo`trivy --version` does not return 0.24.0 but the version of the aports.git repo.
```
$ apk policy trivy ...`trivy --version` does not return 0.24.0 but the version of the aports.git repo.
```
$ apk policy trivy
trivy policy:
0.24.0-r0:
lib/apk/db/installed
etc/apk/cache
http://nl.alpinelinux.org/alpine/edge/testing
$ trivy --version
Version: v3.15.0-7143-g9d9a8df9f7
```TBKTBKhttps://gitlab.alpinelinux.org/alpine/aports/-/issues/13555ruby-ffi unavailble at Alpine 3.102022-02-25T13:12:08ZOliver Koppruby-ffi unavailble at Alpine 3.10According to https://pkgs.alpinelinux.org/package/v3.10/community/armv7/ruby-ffi, there should be a ruby-ffi. However, the directory index at http://dl-cdn.alpinelinux.org/alpine/v3.10/main/armv7/ doesn't list it.
Can it be re-added to ...According to https://pkgs.alpinelinux.org/package/v3.10/community/armv7/ruby-ffi, there should be a ruby-ffi. However, the directory index at http://dl-cdn.alpinelinux.org/alpine/v3.10/main/armv7/ doesn't list it.
Can it be re-added to alpine v3.10? I am sticking to that version, because I need ruby 2.5.x.
If I understand my error messages correctly, I would like to ask for version 1.9.25-r0 (because this seems to be compatible with the ruby-bundler version available in Alpine 3.10):
/usr/lib/ruby/gems/2.5.0/gems/bundler-2.0.2/lib/bundler/spec_set.rb:87:in `block in materialize': Could not find ffi-1.9.25 in any of the sources (Bundler::GemNotFound)
The excerpt of my `Dockerfile` is as follows:
```Dockerfile
FROM reitzig/texlive-base:2021.5
[...]
RUN echo "http://dl-cdn.alpinelinux.org/alpine/v3.10/main" >> /etc/apk/repositories && apk update && apk add --no-cache --update 'ruby<2.6.0' 'ruby-bundler=2.0.2-r0' 'ruby-ffi=1.9.25' 'ruby-io-console<2.6.0'
```https://gitlab.alpinelinux.org/alpine/aports/-/issues/12920testing/rke: upgrade to 1.2.112022-02-25T15:39:17ZLucas Ramagetesting/rke: upgrade to 1.2.11https://gitlab.alpinelinux.org/alpine/cloud/alpine-cloud-images/-/issues/100Support cloud-init2022-02-26T00:46:12ZMike Crutemike@crute.usSupport cloud-initThis image currently uses [tiny-ec2-bootstrap](https://github.com/mcrute/tiny-ec2-bootstrap/) which is a very minimal re-implementation of cloud-init functionality. As cloud-init support for Alpine begins to take shape, and to support #9...This image currently uses [tiny-ec2-bootstrap](https://github.com/mcrute/tiny-ec2-bootstrap/) which is a very minimal re-implementation of cloud-init functionality. As cloud-init support for Alpine begins to take shape, and to support #99, we should start to think about moving to cloud-init instead of tiny-ec2-bootstrap.
The original rationale for tiny-ec2-bootstrap was twofold: cloud-init is a complicated ball of mud and adding Alpine support was seriously non-trivial (and IMO not needed to support a single cloud provider like EC2), and the dependency graph for cloud-init pulls in a ton of additional dependencies which increase image size (significantly, relative to current image size, as I recall). The later is still likely the case but will have to be looked past to support #99. The former I think is being worked on in upstream.https://gitlab.alpinelinux.org/alpine/aports/-/issues/10984inkscape does not install: so:libgsl.so.23 (missing)2022-02-26T04:27:40ZNico Schotteliusinkscape does not install: so:libgsl.so.23 (missing)```
manager:~# apk add inkscape
ERROR: unsatisfiable constraints:
so:libgsl.so.23 (missing):
required by: inkscape-0.92.4-r4[so:libgsl.so.23]
manager:~# grep -v ^# /etc/apk/repositories
http://mirror.ungleich.ch/mirror/packages/a...```
manager:~# apk add inkscape
ERROR: unsatisfiable constraints:
so:libgsl.so.23 (missing):
required by: inkscape-0.92.4-r4[so:libgsl.so.23]
manager:~# grep -v ^# /etc/apk/repositories
http://mirror.ungleich.ch/mirror/packages/alpine/edge/main
http://mirror.ungleich.ch/mirror/packages/alpine/edge/community
http://mirror.ungleich.ch/mirror/packages/alpine/edge/testing
```https://gitlab.alpinelinux.org/alpine/aports/-/issues/13550CVE-2021-42377 version busybox:1.35.0-r22022-02-26T07:26:27ZClaudio VieiraCVE-2021-42377 version busybox:1.35.0-r2We are having problems with the vulnerability indication in the reported version.
Does anyone know anything?
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42377We are having problems with the vulnerability indication in the reported version.
Does anyone know anything?
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42377https://gitlab.alpinelinux.org/alpine/aports/-/issues/13557inkscape does not install: so:libgsl.so.25 (missing)2022-02-26T07:38:31ZAkira Yokosawainkscape does not install: so:libgsl.so.25 (missing)This is similar to issue #10984.
```
# apk add inkscape
ERROR: unable to select packages:
so:libgsl.so.25 (no such package):
required by: inkscape-1.1.2-r1[so:libgsl.so.25]
# grep -v ^# /etc/apk/repositories
https://dl-cdn.alpine...This is similar to issue #10984.
```
# apk add inkscape
ERROR: unable to select packages:
so:libgsl.so.25 (no such package):
required by: inkscape-1.1.2-r1[so:libgsl.so.25]
# grep -v ^# /etc/apk/repositories
https://dl-cdn.alpinelinux.org/alpine/edge/main
https://dl-cdn.alpinelinux.org/alpine/edge/community
```
Looks like recently updated gsl 2.7.1-r0 has libgsl.so.27 only.https://gitlab.alpinelinux.org/alpine/aports/-/issues/8603add dotnet core Runtime and SDK packages2022-02-26T15:59:42Zalgitbotadd dotnet core Runtime and SDK packages.NET team has provided the docker image for Alpine Linux and suggested
us to have community driven package:
https://github.com/dotnet/dotnet-docker/issues/22\#issuecomment-346215352.
.NET Core 2.1 is the upcoming version, currently in pr....NET team has provided the docker image for Alpine Linux and suggested
us to have community driven package:
https://github.com/dotnet/dotnet-docker/issues/22\#issuecomment-346215352.
.NET Core 2.1 is the upcoming version, currently in preview:
docker run -it microsoft/dotnet:2.1-sdk-alpine
this container has runtime dependencies, runtime and SDK. To test:
<code class="text">
dotnet new console -n mytest
cd mytest
dotnet run
</code>
Runtime Dependencies:
https://github.com/dotnet/dotnet-docker/blob/ccccaf7/2.1/runtime-deps/alpine/amd64/Dockerfile
Runtime:
https://github.com/dotnet/dotnet-docker/blob/ccccaf7/2.1/runtime/alpine/amd64/Dockerfile
SDK:
https://github.com/dotnet/dotnet-docker/blob/ccccaf7/2.1/sdk/alpine/amd64/Dockerfile
If anyone has knowledge how to build Alpine packages out of Docker,
please create separate packages for runtime and SDK (as we can switch
runtime / SDK in existing installation).
Packages from other official distros (.NET Core 2.0 released version):
https://packages.microsoft.com/
*(from redmine: issue id 8603, created on 2018-03-04)*