apkkit issueshttps://git.adelielinux.org/adelie/apkkit/-/issues2019-07-11T14:01:42Zhttps://git.adelielinux.org/adelie/apkkit/-/issues/9Rearchitect filters system2019-07-11T14:01:42ZA. WilcoxRearchitect filters systemGlobal variables are ugly. Split packages (-debug, -doc, etc) should be considered at some point, as well, which could take advantage of split packages as well.Global variables are ugly. Split packages (-debug, -doc, etc) should be considered at some point, as well, which could take advantage of split packages as well.https://git.adelielinux.org/adelie/apkkit/-/issues/8Mangle data.tar.gz without abuild-tar2019-07-11T14:01:42ZA. WilcoxMangle data.tar.gz without abuild-tarRight now we are relying on upstream abuild-tar to mangle the data.tar.gz file in the way apk-tools expects.
A pure Python implementation instead of Popen is greatly desirable.Right now we are relying on upstream abuild-tar to mangle the data.tar.gz file in the way apk-tools expects.
A pure Python implementation instead of Popen is greatly desirable.https://git.adelielinux.org/adelie/apkkit/-/issues/7Allow hash type selection in API2019-07-11T14:01:42ZA. WilcoxAllow hash type selection in APIRight now we only sign packages with SHA-256 (Adélie requirement). As upstream is quite satisfied with the insecure SHA-1 hash and does not plan to merge our SHA-256 code in, we should find a way to handle SHA-1 hashes so that we can in...Right now we only sign packages with SHA-256 (Adélie requirement). As upstream is quite satisfied with the insecure SHA-1 hash and does not plan to merge our SHA-256 code in, we should find a way to handle SHA-1 hashes so that we can interop better with their packages.https://git.adelielinux.org/adelie/apkkit/-/issues/6Allow passwords for private keys when signing packages2019-07-11T14:01:42ZA. WilcoxAllow passwords for private keys when signing packages``getpass`` was annoying me so I temporarily disabled it. Ideally, it would be a good idea to somehow detect when keys require passphrases, and only prompt when necessary.``getpass`` was annoying me so I temporarily disabled it. Ideally, it would be a good idea to somehow detect when keys require passphrases, and only prompt when necessary.https://git.adelielinux.org/adelie/apkkit/-/issues/3NEEDED is not parsed for extra dependencies2019-07-11T14:01:42ZA. WilcoxNEEDED is not parsed for extra dependenciesIt would be a very good idea to parse ``NEEDED`` or ``NEEDED.ELF.2`` for additional runtime dependencies, for a few reasons:
* ``RDEPEND`` can be outdated or just plain *wrong* sometimes.
* ``RDEPEND`` by design never contains anythi...It would be a very good idea to parse ``NEEDED`` or ``NEEDED.ELF.2`` for additional runtime dependencies, for a few reasons:
* ``RDEPEND`` can be outdated or just plain *wrong* sometimes.
* ``RDEPEND`` by design never contains anything in the ``@system`` profile or compiler runtimes, including libstdc++ and friends, which could cause issues if someone managed to build an entire system out of simple C apps then tried to install a C++ app without the runtime.
The apk-tools package upstream already seems to support ``so:foo`` where ``foo`` is a SONAME, therefore the apk side should be fairly easy. What we really should do, however, is strip SONAMEs that are provided by packages in ``RDEPEND``.