staging/stintel/package/Makefile, branch master

build: propagate errors when generating apk indexes

2026-02-13T20:17:21Z

The build would continue even if the some of the intermediate commands failed, as long as the last command in the final iteration of the loop was successful. Add 'set -e' to the subshell so that we immediately exit. Previously, only the exit status of the final make-index-json.py mattered. Fixes: https://github.com/openwrt/openwrt/issues/21981 Signed-off-by: Matt Merhar Link: https://github.com/openwrt/openwrt/pull/21993 Signed-off-by: Robert Marko

build: use STAGING_DIR for special APK package versions

2026-02-01T10:16:54Z

Removing tmp/ after having built base-files or toolchain currently breaks rootfs generation: $ rm -rf tmp $ make V=w ... make[2] package/install cat: .../openwrt/tmp/base-files.version: No such file or directory cat: .../openwrt/openwrt/tmp/libc.version: No such file or directory ERROR: 'base-files=' is not a valid world dependency, format is name(@tag)([<>~=]version) make[2]: *** [package/Makefile:100: package/install] Error 99 The only way to recover from here is to clean toolchain and base-files via $ make package/{base-files,toolchain}/clean tmp is supposed to be ephemeral, so clearing it is an expected action, which normally just triggers a regeneration of all files there. Fix this by moving the version files to $(STAGING_DIR). Fixes: 63e178f067 ("build: lock versions for special APK packages") Signed-off-by: Jonas Gorski Link: https://github.com/openwrt/openwrt/pull/21803 Signed-off-by: Robert Marko

build: avoid errors during release candidate kernel packaging

2025-12-20T10:06:47Z

The build system allows to use Linux release candidate kernels (-rcX). For this a target/linux/generic/kernel-6.XY as follows is needed: LINUX_VERSION-6.XY = -rc1 LINUX_KERNEL_HASH-6.XY-rc1 = 18ba6ebd72f46b881e0d73e390b2888b7b43... Sadly the builds fail with a packaging error. fakeroot /home/openwrt/openwrt/openwrt/staging_dir/host/bin/apk mkpkg --info "name:kernel" --info "version:6.15-rc1~c4bf...1f6-r1" ERROR: info field 'version' has invalid value: package version is invalid The apk metadata specification reads: "... Currently the APK version specification is as follows: number{.number}...{letter}{_suffix{number}}...{~hash}{-r#} ... Optionally one or more _suffix{number} components can follow. The list of valid suffixes (and their sorting order) is: alpha, beta, pre, rc, , cvs, svn, git, hg, p." Given that the kernel uses "-rcX" naming scheme and apk requires "_rcX" instead, simply translate the dash to an underscore for these builds. Signed-off-by: Markus Stockhausen Link: https://github.com/openwrt/openwrt/pull/21214 Signed-off-by: Robert Marko

package: do not sign individual APK packages

2025-10-09T10:52:43Z

APK, unlike OPKG, can sign individual packages and not just indexes. Since OpenWrt uses a distributed build infrastructure and only the build master owns the private keys, signing of individual buildworkers doesn't work. Right now, each buildworker creates a temporary build key to sign packages, then transmits the package index to the buildmaster for a signature. As a result, all individual packages contain a nonsensical signature, making them harder to reproduce. This commit removes the individual package signing. Since APK requires signatures per default, explicitly allow installation of unsigned packages during the build process. The config option here is for historical reasons misleading, SIGNED_PACKAGES refers to the package index, not the individual packages. Signed-off-by: Paul Spooren

package: generate sha256sums by default

2025-10-03T09:00:23Z

Right now the sha256sums are only created for the targets/ folder (i.e. firmware images) and only the buildbot generates those sha256sums. Instead, let the build system create the sha256sums directly. Signed-off-by: Paul Spooren

package: rework contents of package index.json

2025-06-11T14:55:31Z

Rework the generation of the index.json version of the package indexes to match the original intent (i.e., for use by the ASU server and other downstream projects). The current file contains package names that have ABI versioning, making them unusable by ASU, so we now remove the ABI suffixes. Also adds a 'version' field to the json, so downstream utilities can detect the new semantics of the package name fields. Links: https://github.com/openwrt/openwrt/commit/218ce40cd738f3373438aab82467807a8707fb9c Signed-off-by: Eric Fahlgren Link: https://github.com/openwrt/openwrt/pull/19051 Signed-off-by: Robert Marko

build: lock versions for special APK packages

2025-02-04T13:48:59Z

The three packages base-files, libc and kernel are special, the former can't be upgraded in place since it's content are modified on startup, the latter two are virtual packages only used as constraints for the package manager. Historically base-files was "locked" via a special OPKG function, the latter two were hidden from the package index and thereby never picked as possible upgrade. Time moved forward and we now have APK and tools like OWUT. The latter compares available packages with installed packages and generates user readable output, requiring versions for libc and kernel, too. At the same time, APK uses a different looking mechanism, which is set during installation instead of part of the package metadata. In short, this patch adds version constraints to the three packages, allowing them to be part of the package index. Fixes: #17774 Fixes: #17775 Fixes: efahl/owut#31 Signed-off-by: Paul Spooren

build: fix filtering of non-upgradable packages

2024-11-21T16:55:45Z

Add anchor to name search so that we don't inadvertently filter out packages containing, say, "kernel-" as part of their name. Fixes: openwrt/packages#25372 Signed-off-by: Eric Fahlgren Link: https://github.com/openwrt/openwrt/pull/17032 Signed-off-by: Robert Marko

build: apk: Remove /run/apk/db.lock

2024-11-16T13:22:22Z

Do not add the file /run/apk/db.lock to the root file system. The /run folder should be on a tmpfs. At runtime we should make /run point to a tmpfs. At build time we should just remove the folder. Signed-off-by: Hauke Mehrtens Link: https://github.com/openwrt/openwrt/pull/16961 Signed-off-by: Christian Marangi

package: use /dev/null for apk --repositories-file

2024-11-15T11:27:44Z

In preparation for APK version bump, use /dev/null instead of /dev/zero for --repositories-file to mute an error in recent APK files. New APK version use modern istream logic that are more sensible to the kind of file passed and /dev/null is required to correctly handle an empty repository file. Signed-off-by: Christian Marangi