The 'apk' utility is intended to run as root, however it is not
strictly necessary depending on the tasks it needs to execute.

If invoked as euid 0 but ruid something else, the mismatch is
detected by the (shell) interpreter, which sets euid to ruid,
which can cause a trigger expecting privileges to fail silently.

Fixes: horizon#379

Max Rees authored 5 years ago and Anna Wilcox committed 1 year ago

Before:

$ abuild-apk del mutt
(1/3) Purging mutt (1.12.1-r0)
(2/3) Purging gdbm (1.18.1-r0)
(3/3) Purging libidn (1.35-r0)
OK: 3752 MiB in 805 packages
$ apk cache sync --purge || echo nope, sorry
$ ls /home/apk-cache/*gdbm*
/home/apk-cache/gdbm-1.18.1-r0.b0b17e93.apk

After:

$ apk cache sync --purge || echo nope, sorry
ERROR: Unable to delete gdbm-1.18.1-r0.b0b17e93.apk: Permission denied
nope, sorry

Max Rees authored 4 years ago and Anna Wilcox committed 1 year ago

This would allow future distribution of tarballs that already have
help.h and the doc/*.[0-9] manpages pre-generated. Such a tarball could
then be built successfully with LUA=no.

Max Rees authored 4 years ago and Anna Wilcox committed 1 year ago

Co-authored-by: Samuel Holland <samuel@sholland.org>

Instead of a package just providing the name

fixes commit "del: fix --rdepends" to not delete provided names
if not using --rdepends

fixes #10898

Fixes commit d5ff6c96 "support --from=FROMSPEC". The condition
to generate the reverse dependencies changed causing it not to
be always generated. Fix this by unconditionally generating it.

fixes #10896

Seems originally it was indeed -L, but was inadvertently changed
to -l in 2.12_rc1 in options refactoring commit 1d7123d8. Since
already the 2.12-stable uses -l, update just documentation.

fixes #10894

fixes #10776

implement it also for connecting to hosts

fixes #10869

This is a fixup to the backport commit 67f5a753:
  db, apps: sort display results based on package names

This makes apk_db_foreach_matching_name() act consistently on
between 2.14-stable and master. And updates the call sites where
differing behaviour is needed, and fixes dot and other call sites
to work again.

fixes #10893

fixes #10889

the stat64 family of functions were provided as transitional functions,
but when building on glibc with _GNU_SOURCE, or any other supported system,
the stat functions are equivalent to their stat64 counterparts

fixes #10886

Ignore any link that has the busybox binary as target.
These links are created by a trigger script and not managed by apk.

Do not attempt to get xattrs from symlinks. Their extraction is not
supported either.

Do not use alloca.

Allow omitting loading of system installed database and system
repositories for the commands that operate on package indexes
only.

Handle file: URLs correctly, and don't do linkat() syscall if
it is a remote repository.

Also account the file size to progress always.

ref #10873

fixes #10871

This will also fix "search" to display one match from each principal
pkgname group. "search -e vim" will now show both vim and gvim.

fixes #10864
fixes #10777