<feed xmlns='http://www.w3.org/2005/Atom'>
<title>abuild, branch v3.3.0</title>
<subtitle>Build script to build alpine 1.9.x
</subtitle>
<link rel='alternate' type='text/html' href='https://git-old.alpinelinux.org/abuild/'/>
<entry>
<title>==== release 3.3.0 ====</title>
<updated>2019-01-23T18:22:31+00:00</updated>
<author>
<name>Natanael Copa</name>
<email>ncopa@alpinelinux.org</email>
</author>
<published>2019-01-23T18:22:31+00:00</published>
<link rel='alternate' type='text/html' href='https://git-old.alpinelinux.org/abuild/commit/?id=22753f570160c10ad093615f085a925d4643c359'/>
<id>22753f570160c10ad093615f085a925d4643c359</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>abuild: replace $0 with $abuild_path, add $forceroot where missing</title>
<updated>2019-01-10T16:08:51+00:00</updated>
<author>
<name>Disassembler</name>
<email>disassembler@dasm.cz</email>
</author>
<published>2018-10-23T09:02:54+00:00</published>
<link rel='alternate' type='text/html' href='https://git-old.alpinelinux.org/abuild/commit/?id=9b04be2f79c893ab7c7394fca0da5929b39396a9'/>
<id>9b04be2f79c893ab7c7394fca0da5929b39396a9</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>abuild: use pigz to compress control.tar.gz and manpages</title>
<updated>2019-01-10T16:08:51+00:00</updated>
<author>
<name>Natanael Copa</name>
<email>ncopa@alpinelinux.org</email>
</author>
<published>2018-11-08T11:47:58+00:00</published>
<link rel='alternate' type='text/html' href='https://git-old.alpinelinux.org/abuild/commit/?id=909623950f17989ad145c6162ce62ee64701f0fc'/>
<id>909623950f17989ad145c6162ce62ee64701f0fc</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>abuild-sign: fall back to libressl if openssl is missing</title>
<updated>2019-01-10T16:08:51+00:00</updated>
<author>
<name>Natanael Copa</name>
<email>ncopa@alpinelinux.org</email>
</author>
<published>2018-11-08T11:43:47+00:00</published>
<link rel='alternate' type='text/html' href='https://git-old.alpinelinux.org/abuild/commit/?id=bbe4a4fdfdc4f5e9014d3316ae36862a30cce597'/>
<id>bbe4a4fdfdc4f5e9014d3316ae36862a30cce597</id>
<content type='text'>
openssl binary may be missing while migrating system from libressl to
openssl. Make sure we can always sign the backage if either is there.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
openssl binary may be missing while migrating system from libressl to
openssl. Make sure we can always sign the backage if either is there.
</pre>
</div>
</content>
</entry>
<entry>
<title>==== release 3.3.0_pre2 ====</title>
<updated>2019-01-09T15:28:33+00:00</updated>
<author>
<name>Natanael Copa</name>
<email>ncopa@alpinelinux.org</email>
</author>
<published>2019-01-09T15:28:33+00:00</published>
<link rel='alternate' type='text/html' href='https://git-old.alpinelinux.org/abuild/commit/?id=832ab44934e98c0612a7e0e75725227547705687'/>
<id>832ab44934e98c0612a7e0e75725227547705687</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>abuild: avoid add depends to itself</title>
<updated>2019-01-09T15:23:46+00:00</updated>
<author>
<name>Natanael Copa</name>
<email>ncopa@alpinelinux.org</email>
</author>
<published>2019-01-09T15:23:46+00:00</published>
<link rel='alternate' type='text/html' href='https://git-old.alpinelinux.org/abuild/commit/?id=13aec9a1419dc53aede75c404bd84007b375b0c1'/>
<id>13aec9a1419dc53aede75c404bd84007b375b0c1</id>
<content type='text'>
packages should never depend on themselves which does not make sense.
This may happen if main package depends on a subpackage, then the
subpackages will inherit the global depends and the subpackage ends up
depend on itself.

Fix abuild to avoid this.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
packages should never depend on themselves which does not make sense.
This may happen if main package depends on a subpackage, then the
subpackages will inherit the global depends and the subpackage ends up
depend on itself.

Fix abuild to avoid this.
</pre>
</div>
</content>
</entry>
<entry>
<title>abuild: fix typo</title>
<updated>2018-12-02T19:50:28+00:00</updated>
<author>
<name>Carlo Landmeter</name>
<email>clandmeter@alpinelinux.org</email>
</author>
<published>2018-12-02T19:50:28+00:00</published>
<link rel='alternate' type='text/html' href='https://git-old.alpinelinux.org/abuild/commit/?id=2f8bbc819e1e121f97162a674528c924cd0687c0'/>
<id>2f8bbc819e1e121f97162a674528c924cd0687c0</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>abuild.in: add multithreaded compression</title>
<updated>2018-11-08T10:27:47+00:00</updated>
<author>
<name>Tiago Ilieve</name>
<email>tiago.myhro@gmail.com</email>
</author>
<published>2018-10-28T12:34:02+00:00</published>
<link rel='alternate' type='text/html' href='https://git-old.alpinelinux.org/abuild/commit/?id=0bfe4efa99eb52eb137b478b88d8b66853fabc80'/>
<id>0bfe4efa99eb52eb137b478b88d8b66853fabc80</id>
<content type='text'>
The 'Compressing data' step takes a significant amount of time when
packaging software with huge binaries, like Kubernetes. This can
certainly be shortened using multithreaded compression, like 'pigz'.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The 'Compressing data' step takes a significant amount of time when
packaging software with huge binaries, like Kubernetes. This can
certainly be shortened using multithreaded compression, like 'pigz'.
</pre>
</div>
</content>
</entry>
<entry>
<title>abuild: print build start, end date and elapsed time</title>
<updated>2018-11-08T09:55:46+00:00</updated>
<author>
<name>Timo Teräs</name>
<email>timo.teras@iki.fi</email>
</author>
<published>2018-11-08T08:47:28+00:00</published>
<link rel='alternate' type='text/html' href='https://git-old.alpinelinux.org/abuild/commit/?id=100202920be59bb6841ccdd937c5f88c72266de3'/>
<id>100202920be59bb6841ccdd937c5f88c72266de3</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>abuild-rmtemp: Do not follow symbolic links</title>
<updated>2018-10-11T15:46:45+00:00</updated>
<author>
<name>Sören Tempel</name>
<email>soeren+git@soeren-tempel.net</email>
</author>
<published>2018-10-11T14:44:45+00:00</published>
<link rel='alternate' type='text/html' href='https://git-old.alpinelinux.org/abuild/commit/?id=17cb68e9fb8a1fcb830c0895b3bd9fab91d4b66c'/>
<id>17cb68e9fb8a1fcb830c0895b3bd9fab91d4b66c</id>
<content type='text'>
Symbolic links might point to files outside of the chroot and
thus might delete files outside the chroot. This allows deletion
of arbitrary directories on the host from a malicious APKBUILD.

Following hard links shouldn't be a problem since hard links (usually)
cannot refer to directories and since remove(3) removes the link, not
the file it points to it shouldn't cause a problem.

I noticed this because alpine-baselayout creates /var/run as a symlink
to /run. Therefore causing /run to be deleted on the host when using
abuild-rmtemp which in turn causes a bunch of software to no longer
function properly (including OpenRC).
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Symbolic links might point to files outside of the chroot and
thus might delete files outside the chroot. This allows deletion
of arbitrary directories on the host from a malicious APKBUILD.

Following hard links shouldn't be a problem since hard links (usually)
cannot refer to directories and since remove(3) removes the link, not
the file it points to it shouldn't cause a problem.

I noticed this because alpine-baselayout creates /var/run as a symlink
to /run. Therefore causing /run to be deleted on the host when using
abuild-rmtemp which in turn causes a bunch of software to no longer
function properly (including OpenRC).
</pre>
</div>
</content>
</entry>
</feed>
