Nordix / bomres

Software Bill-of-Material Resolver
Apache License 2.0
7 stars 6 forks source link

Missing dependency of subpackage #99

Open hans-lammda opened 1 year ago

hans-lammda commented 1 year ago

Problem: discover during signing of APKINDEX.tar.gz during hardening of lighttpd

APKBUILD build() { abuild-meson \ -Db_lto=true \ -Dwith_pcre2=true \ -Dwith_webdav_locks=enabled \ -Dwith_webdav_props=enabled \ . output meson compile -C output

WARNING: No provider for the dependencies: so:libxml2.so.2 WARNING: Total of 1 unsatisfiable package names. Your repository may be broken.

P:lighttpd-mod_webdav o:lighttpd D:so:libc.musl-x86_64.so.1 so:libsqlite3.so.0 so:libxml2.so.2

P:lighttpd o:lighttpd D:/bin/sh so:libc.musl-x86_64.so.1 so:libpcre2-8.so.0 so:libz.so.1

Workaround

By removing webdav support, the subpackage is no longer included in APKINDEX build() { abuild-meson \ -Db_lto=true \ -Dwith_pcre2=true \ . output meson compile -C output }