jordansissel / fpm

Effing package management! Build packages for multiple platforms (deb, rpm, etc) with great ease and sanity.
http://fpm.readthedocs.io/en/latest/
Other
11.15k stars 1.07k forks source link

Sign apk packages #2059

Open dann1 opened 5 months ago

dann1 commented 5 months ago

Due to a change in apk-tools 2.14.3 the apk packages generated by fpm were no longer being able to be installed on alpine >= 3.17. I carried out a discussion with the maintainer and the change was reverted on 2.14.4 with a warning

==> qemu.alpine: (57/57) Installing one-context (6.8.1-r1)
==> qemu.alpine: WARNING: Support for packages without datahash will be dropped in apk-tools 3.

Eventually the signature will be required once again in the package metadata. It would be nice to have the ability to sign apk packages.