openwrt/package
Paul Spooren 084697eb62
Some checks are pending
Build all core packages / Build all core packages for selected target (push) Waiting to run
Build host tools / Build host tools for linux and macos based systems (push) Waiting to run
package: do not sign individual APK packages
APK, unlike OPKG, can sign individual packages and not just indexes.
Since OpenWrt uses a distributed build infrastructure and only the build
master owns the private keys, signing of individual buildworkers doesn't
work. Right now, each buildworker creates a temporary build key to sign
packages, then transmits the package index to the buildmaster for a
signature.

As a result, all individual packages contain a nonsensical signature,
making them harder to reproduce. This commit removes the individual
package signing.

Since APK requires signatures per default, explicitly allow installation
of unsigned packages during the build process.

The config option here is for historical reasons misleading,
SIGNED_PACKAGES refers to the package index, not the individual
packages.

Signed-off-by: Paul Spooren <mail@aparcar.org>
2025-10-09 12:52:43 +02:00
..
base-files base-files: add ucidef_set_interface_netdev_range function 2025-10-06 19:06:26 +02:00
boot sunxi: add F1C100 (arm926ej-s) support 2025-10-06 10:26:56 +02:00
devel perf: fix disabling BUILD_BPF_SKEL 2025-08-31 23:49:13 +02:00
firmware linux-firmware: update to 20250917 2025-09-23 23:09:49 +02:00
kernel kernel: modules: add Mellanox Spectrum hotplug renaming script 2025-10-06 19:06:26 +02:00
libs openssl: update to 3.5.4 2025-10-04 16:22:43 +02:00
network odhcpd: update to Git HEAD (2025-10-07) 2025-10-08 10:16:12 +02:00
system packages: bump APK to improve reproducibility 2025-10-08 11:13:33 +02:00
utils ucode: add patches that make it easier to deal with non-blocking fds 2025-10-09 09:57:30 +02:00
Makefile package: do not sign individual APK packages 2025-10-09 12:52:43 +02:00