revert dynamic matrix, add rclone-openrc to static build matrix

change build behaviour to support dynamic package selection
add rclone-openrc
2026-10-07 14:09:12 +02:00 · 2026-10-07 14:02:11 +02:00 · 2026-10-07 13:42:30 +02:00 · 2026-10-06 23:02:04 +02:00 · 2026-10-06 22:54:17 +02:00 · 2026-10-06 22:39:50 +02:00
41 changed files with 652 additions and 80 deletions
@@ -62,6 +62,18 @@ jobs:
        id: package-selection
        run: scripts/apk/ci-package-cache.sh prepare

+      - name: Validate selected package matrix
+        run: |
+          for package in ${ALPINE_PACKAGES}; do
+            case "${package}" in
+              seaweedfs|greptimedb|lavinmq|gitea|nifi|rclone-openrc) ;;
+              *)
+                printf 'selected package is missing from the CI build matrix: %s\n' "${package}" >&2
+                exit 1
+                ;;
+            esac
+          done
+
  build:
    needs: preflight
    if: needs.preflight.outputs.packages_selected == 'true'
@@ -70,7 +82,7 @@ jobs:
    strategy:
      fail-fast: false
      matrix:
-        package: [seaweedfs, greptimedb, lavinmq, gitea]
+        package: [seaweedfs, greptimedb, lavinmq, gitea, nifi, rclone-openrc]
    container:
      image: "alpine:3.24"
    env:
@@ -136,33 +148,10 @@ jobs:
          scripts/apk/ci-package-cache.sh prepare
          printf 'ALPINE_PACKAGES=%s\n' "$selected_packages" >> "$GITHUB_ENV"

-      - name: Download SeaweedFS artifacts
-        if: contains(needs.preflight.outputs.selected_packages, 'seaweedfs')
+      - name: Download package artifacts
        uses: actions/download-artifact@v3
        with:
-          name: alpine-package-seaweedfs-${{ github.sha }}
-          path: packages/worker-artifacts/seaweedfs
-
-      - name: Download GreptimeDB artifacts
-        if: contains(needs.preflight.outputs.selected_packages, 'greptimedb')
-        uses: actions/download-artifact@v3
-        with:
-          name: alpine-package-greptimedb-${{ github.sha }}
-          path: packages/worker-artifacts/greptimedb
-
-      - name: Download LavinMQ artifacts
-        if: contains(needs.preflight.outputs.selected_packages, 'lavinmq')
-        uses: actions/download-artifact@v3
-        with:
-          name: alpine-package-lavinmq-${{ github.sha }}
-          path: packages/worker-artifacts/lavinmq
-
-      - name: Download Gitea artifacts
-        if: contains(needs.preflight.outputs.selected_packages, 'gitea')
-        uses: actions/download-artifact@v3
-        with:
-          name: alpine-package-gitea-${{ github.sha }}
-          path: packages/worker-artifacts/gitea
+          path: packages/worker-artifacts

      - name: Merge package artifacts
        run: scripts/apk/merge-ci-artifacts.sh
@@ -1,30 +0,0 @@
-name: Package Update Status
-
-on:
-  schedule:
-    - cron: "17 5 * * 1"
-  workflow_dispatch:
-
-jobs:
-  package-status:
-    runs-on: ubuntu-latest
-    container:
-      image: alpine:3.24
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v3
-
-      - name: Check packaged upstream versions
-        run: |
-          apk add --no-cache --update abuild-rootbld alpine-sdk bash ca-certificates doas git nodejs sudo curl git jq
-          APK_UPDATE_CHECK_MODE=warn scripts/apk/outdated.sh > update-check.txt
-          cat update-check.txt
-          if [ -n "${GITHUB_STEP_SUMMARY:-}" ]; then
-            {
-              echo "## Upstream package update check"
-              echo
-              echo '```text'
-              cat update-check.txt
-              echo '```'
-            } >> "$GITHUB_STEP_SUMMARY"
-          fi
@@ -3,6 +3,7 @@
 packages/
 packaging/alpine/*/*/pkg/
 packaging/alpine/*/*/src/
+packaging/alpine/*/*/tmp/
 packaging/alpine/*/*/*.apk
 packaging/alpine/*/*/*.tar.*
 !packaging/alpine/*/*/*-vendor.tar.gz
@@ -1,7 +1,5 @@
 # Alpine Packages

-[![Package update check](https://code.factoring.digital/public/alpine-packages/actions/workflows/package-status.yml/badge.svg?branch=main&event=schedule)](https://code.factoring.digital/public/alpine-packages/actions?workflow=package-status.yml)
-
 Alpine stable packaging for internal packages. This repository carries selected
 upstream releases ahead of Alpine community packages when we need newer
 features, packaging fixes, or service layouts on the current Alpine branch.
@@ -23,8 +21,10 @@ https://code.factoring.digital/api/packages/public/alpine/v3.24/alpine-packages
 |-----------------------------------------------------------|--------------|-----------------|----------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------|
 | [SeaweedFS](packaging/alpine/local/seaweedfs/README.md)   | `seaweedfs`  | `4.48`          | Binary repackaging of official upstream release tarballs | Ships current SeaweedFS features with Alpine OpenRC role splits.                                                |
 | [GreptimeDB](packaging/alpine/local/greptimedb/README.md) | `greptimedb` | `1.2.1`         | Source build from upstream release                       | Provides a current GreptimeDB build and component OpenRC packages before it is available from Alpine community. |
-| [LavinMQ](packaging/alpine/local/lavinmq/README.md)       | `lavinmq`    | `2.10.0`        | Source build from upstream release                       | Provides a current LavinMQ build on Alpine 3.24 with matching Crystal support.                                  |
-| [Gitea](packaging/alpine/local/gitea/README.md)           | `gitea`      | `1.27.3`        | Binary repackaging of official upstream release binaries | Ships current Gitea releases with the expected Alpine runtime layout and OpenRC service.                        |
+| [LavinMQ](packaging/alpine/local/lavinmq/README.md)       | `lavinmq`    | `2.10.1`        | Source build from upstream release                       | Provides a current LavinMQ build on Alpine 3.24 with matching Crystal support.                                  |
+| [Gitea](packaging/alpine/local/gitea/README.md)           | `gitea`      | `28.1.0`        | Binary repackaging of official upstream release binaries | Ships current Gitea releases with the expected Alpine runtime layout and OpenRC service.                        |
+| [Apache NiFi](packaging/alpine/local/nifi/README.md)      | `nifi`       | `2.12.0`        | Binary repackaging of the official Standard distribution | Provides Apache NiFi 2 with a secure default configuration and OpenRC service.                                  |
+| [rclone OpenRC](packaging/alpine/local/rclone-openrc/README.md) | `rclone-openrc` | `0.1.0` | OpenRC integration for Alpine's rclone package | Provides reusable, instance-capable OpenRC supervision for rclone commands. |

 ## Use In Production

@@ -169,6 +169,9 @@ weed version

 apk add greptimedb greptimedb-docs greptimedb-standalone-openrc
 greptime --version
+
+apk add rclone-openrc
+rclone version
 ```

 Run package-local runtime tests:
@@ -1,6 +1,6 @@
 # Maintainer: Joachim Schlöffel <joachim.schloeffel@financial-service-plus.de>
 pkgname=gitea
-pkgver=28.0.0
+pkgver=28.1.0
 pkgrel=0
 pkgdesc="Self-hosted Git service written in Go"
 url="https://about.gitea.com/"
@@ -14,6 +14,7 @@ pkgusers="gitea"
 pkggroups="www-data"
 subpackages="
 	$pkgname-doc
+	$pkgname-logrotate:_logrotate:noarch
 	$pkgname-openrc:_openrc:noarch
 	"
 options="!check !strip !tracedeps"
@@ -33,6 +34,7 @@ source="
 	$pkgname-src-$pkgver.tar.gz::https://github.com/go-gitea/gitea/releases/download/v$pkgver/gitea-src-$pkgver.tar.gz
 	gitea.ini
 	gitea.initd
+	gitea.logrotate
 	"
 builddir="$srcdir/gitea-src-$pkgver"

@@ -68,10 +70,19 @@ _openrc() {
 	install -Dm755 "$srcdir"/gitea.initd "$subpkgdir"/etc/init.d/gitea
 }

+_logrotate() {
+	pkgdesc="Log rotation configuration for $pkgname"
+	depends="$pkgname=$pkgver-r$pkgrel logrotate"
+
+	install -Dm644 "$srcdir"/gitea.logrotate \
+		"$subpkgdir"/etc/logrotate.d/$pkgname
+}
+
 sha512sums="
-434eedf3cf9348b708d15170f3f47486e20253ef607ef5e4c8494e5a833342c1580179d6de6b8b29278fc2d570d24380ace142530102d0e14644891ff0e7bd4d  gitea-28.0.0-linux-amd64.xz
-a11dc1fff26d6e43541cbfa827be5cb95cec5b0336c944a1bbd294fdc212ca5eac983892879f453f3ab7eb0ddb7ea812a37c7e5aab2b8e1f886a3c790741e802  gitea-28.0.0-linux-arm64.xz
-bd5b600754388c6fe15ee91929231e804c74f4e694f892904e363ac9b923e9957c1f4f3a2489e216b7b05763022d6b8fdb9e01a49271c6f64313277a9a304797  gitea-src-28.0.0.tar.gz
+dee8e5f0b088403e70829f193763e3cc9f3a9ab4b4fe7d5dca72e858bdc4859f2b03cd38314086e2bf7a421eb34f6141b92e11679ad6f9980b8a979a6cabb213  gitea-28.1.0-linux-amd64.xz
+413ed83dab64d0bd20684d1ea5350b58c6e74e5aa6f034ee91004d0ee3edadc2ce242e9a298d434744ed00a7bdc5ff4a369d508d385cd40f3b81c59db061ce3a  gitea-28.1.0-linux-arm64.xz
+619b6ef374153816dfdb24896f455b3d5e96c033eae98f0c6f6ad027f817f57328cca3b239caa1bba8fe3c3f0f89fc87c9dac741f7719bb1c3501577048cb0bd  gitea-src-28.1.0.tar.gz
 4e20b24c34af01a27589a13d9140d559909cc44507febe5de692d7bc154d65f4b01b79d2f1dcce9fed77b60ac3b1a52cc0ec72161e5a2484a4c718d26d3c630d  gitea.ini
 9474d707df8b049c93ec4642f71195adff699e1e812f315cac4295b3ab29eeb9ba8b83bf3307c50b04e072a4a9dc4c4f84ac490ee22291bd50015009795c1598  gitea.initd
+456a565123b46c0c3a36adbde4c881ee04557a2f1ba492a76205c28f72598bf3b7b96192ddeae4f9ab197fdc75bb5e10a3421574e1bf831192220b4540bb39fc  gitea.logrotate
 "
@@ -19,6 +19,13 @@ rc-update add gitea default
 rc-service gitea start
 ```

+Install daily rotation for the OpenRC service log, retaining 14 compressed
+archives:
+
+```sh
+apk add gitea-logrotate
+```
+
 Refresh checksums:

 ```sh
@@ -0,0 +1,10 @@
+/var/log/gitea/http.log {
+	daily
+	rotate 14
+	missingok
+	notifempty
+	compress
+	delaycompress
+	copytruncate
+	su gitea www-data
+}
@@ -5,7 +5,7 @@ repo_root="${REPO_ROOT:-$(cd "$(dirname "${BASH_SOURCE[0]}")/../../../../.." &&
 # shellcheck source=scripts/apk/test-install-lib.sh
 . "${repo_root}/scripts/apk/test-install-lib.sh"

-apk_test_install_run "${repo_root}" "${PACKAGE_NAME:-gitea}" "${PACKAGE_VERSION:-1.27.0-r1}" <<'SCRIPT'
+apk_test_install_run "${repo_root}" "${PACKAGE_NAME:-gitea}" "${PACKAGE_VERSION:-28.0.0-r1}" <<'SCRIPT'
    set -e

    if [ -n "${ALPINE_REPOSITORY_URL}" ]; then
@@ -29,7 +29,7 @@ apk_test_install_run "${repo_root}" "${PACKAGE_NAME:-gitea}" "${PACKAGE_VERSION:
      printf "%s\n" /repo >> /etc/apk/repositories
    fi
    apk update
-    apk add --upgrade "${PACKAGE_NAME}" "${PACKAGE_NAME}-doc" "${PACKAGE_NAME}-openrc"
+    apk add --upgrade "${PACKAGE_NAME}" "${PACKAGE_NAME}-doc" "${PACKAGE_NAME}-logrotate" "${PACKAGE_NAME}-openrc"
    installed_after="$(apk list -I "${PACKAGE_NAME}" | awk "{print \$1}")"
    printf "Installed package after local upgrade: %s\n" "${installed_after}"
    test "${installed_after}" = "${PACKAGE_NAME}-${PACKAGE_VERSION}"
@@ -45,6 +45,9 @@ apk_test_install_run "${repo_root}" "${PACKAGE_NAME:-gitea}" "${PACKAGE_VERSION:
    test -d /usr/share/webapps/gitea/public
    test -d /usr/share/webapps/gitea/templates
    test -f /etc/init.d/gitea
+    test -f /etc/logrotate.d/gitea
+    apk info -e logrotate
+    logrotate -d /etc/logrotate.conf

    gitea --version

@@ -1,7 +1,7 @@
 # Maintainer: Joachim Schlöffel <joachim.schloeffel@financial-service-plus.de>
 pkgname=greptimedb
 pkgver=1.2.1
-pkgrel=3
+pkgrel=4
 pkgdesc="Cloud-native observability database for metrics, logs, and traces"
 url="https://github.com/GreptimeTeam/greptimedb"
 arch="x86_64"
@@ -38,6 +38,7 @@ subpackages="
 	$pkgname-docs:_docs:noarch
 	$pkgname-flownode-openrc:_openrc_flownode:noarch
 	$pkgname-frontend-openrc:_openrc_frontend:noarch
+	$pkgname-logrotate:_logrotate:noarch
 	$pkgname-metasrv-openrc:_openrc_metasrv:noarch
 	$pkgname-standalone-openrc:_openrc_standalone:noarch
 	"
@@ -53,6 +54,7 @@ source="
 	greptimedb.flownode.confd
 	greptimedb.frontend.confd
 	greptimedb.initd
+	greptimedb.logrotate
 	greptimedb.metasrv.confd
 	greptimedb.standalone.confd
 	metasrv.toml
@@ -136,6 +138,14 @@ _openrc_frontend() { _openrc_service frontend; }
 _openrc_metasrv() { _openrc_service metasrv; }
 _openrc_standalone() { _openrc_service standalone; }

+_logrotate() {
+	pkgdesc="Log rotation configuration for $pkgname"
+	depends="$pkgname=$pkgver-r$pkgrel logrotate"
+
+	install -Dm644 "$srcdir"/greptimedb.logrotate \
+		"$subpkgdir"/etc/logrotate.d/$pkgname
+}
+
 _docs() {
 	pkgdesc="$pkgdesc (configuration examples and reference)"
 	depends=""
@@ -154,6 +164,7 @@ e3e19ab3c7a345ecf8cf0a507f7fc95dd3b036a4a797385cf77fcf1999f2e4f053042c7bbda8de73
 daf8efacc8bf2b74abd9f4900f889585295b57333a8a562a722de0596d35f25d5f9149e0879f4140bfdf727caa59c3f55b1380212722df92c588d912275530b8  greptimedb.flownode.confd
 e3e61b1df00f8172a3b1d4a0d37ed2574a8c5cd27676b4e2ce14d15ad8933d233baabe8da374f715d00cfaee26f665244c1ba00f70197fcc713c4e9af9c3229e  greptimedb.frontend.confd
 f72f52aa8277fc56eb071b5118990b8f4e09d143634c2f7fc54ed1f5ff065631c8630c45fe90d3db1f3ea0540c1ab3154a383d2000b4c5978e889ca02a1b6564  greptimedb.initd
+775b4db7e7bc6127376b22fed8330b952c5027e3bfbfa29bb6ae034e6c75e7fed8ddfc0ad9761f369acd37398dfbd145cfea210828f2fc0bec9be92b051e6a75  greptimedb.logrotate
 df495367d85844dcba99e5aa01e5a23fd14799b7521a72d9ea00d29fc0e5fbc5c5d06ee88e88d9637e260f8337249a39d2b0115de58da4899824d20bd844254a  greptimedb.metasrv.confd
 882a79e969cac42adfada22060e6507fb687755a6d266d6728154b3e4da5777d2eaf5ad9bc331ed050448249ca609e6a61977b624d9faf25d83ed975345452cf  greptimedb.standalone.confd
 8120ec338ebe1330d43b20d9b34a8f5f778ea13cb056febd3c8e9dc189d0de2380b90e5474a0990294d7004827c6133d44d2dd3e32d463b9259c47c82592d257  metasrv.toml
@@ -28,6 +28,8 @@ Installs `/usr/bin/greptime` and component OpenRC packages:
 - `greptimedb-datanode-openrc`: `greptime datanode start`
 - `greptimedb-flownode-openrc`: `greptime flownode start`
 - `greptimedb-frontend-openrc`: `greptime frontend start`
+- `greptimedb-logrotate`: daily rotation for the OpenRC service logs, retaining
+  14 compressed archives

 Default TOML files are installed in `/etc/greptimedb`. Standalone ports:

@@ -0,0 +1,10 @@
+/var/log/greptimedb/greptimedb.*.log {
+	daily
+	rotate 14
+	missingok
+	notifempty
+	compress
+	delaycompress
+	copytruncate
+	su greptimedb greptimedb
+}
@@ -26,6 +26,7 @@ apk_test_install_run "${repo_root}" "${PACKAGE_NAME:-greptimedb}" "${PACKAGE_VER
      "${PACKAGE_NAME}-docs" \
      "${PACKAGE_NAME}-flownode-openrc" \
      "${PACKAGE_NAME}-frontend-openrc" \
+      "${PACKAGE_NAME}-logrotate" \
      "${PACKAGE_NAME}-metasrv-openrc" \
      "${PACKAGE_NAME}-standalone-openrc"

@@ -34,5 +35,8 @@ apk_test_install_run "${repo_root}" "${PACKAGE_NAME:-greptimedb}" "${PACKAGE_VER
    ls -1 /etc/greptimedb
    test -f "/usr/share/doc/${PACKAGE_NAME}/config/config.md"
    test -f "/usr/share/doc/${PACKAGE_NAME}/config/standalone.example.toml"
+    test -f /etc/logrotate.d/greptimedb
+    apk info -e logrotate
+    logrotate -d /etc/logrotate.conf
    find /etc/init.d -maxdepth 1 -name "greptimedb.*" -print | sort
 SCRIPT
@@ -1,7 +1,7 @@
 # Maintainer: Joachim Schlöffel <joachim.schloeffel@financial-service-plus.de>
 pkgname=lavinmq
-pkgver=2.10.0
-pkgrel=2
+pkgver=2.10.1
+pkgrel=1
 pkgdesc="High-performance AMQP and MQTT message queue server"
 url="https://github.com/cloudamqp/lavinmq"
 arch="x86_64"
@@ -26,6 +26,7 @@ pkgusers="lavinmq"
 pkggroups="lavinmq"
 subpackages="
 	$pkgname-doc
+	$pkgname-logrotate:_logrotate:noarch
 	$pkgname-openrc:_openrc:noarch
 	"
 source="
@@ -34,6 +35,7 @@ source="
 	$pkgname-$pkgver-assets.tar.gz
 	lavinmq.confd
 	lavinmq.initd
+	lavinmq.logrotate
 	use-vendored-build-inputs.patch
 	"

@@ -71,11 +73,20 @@ _openrc() {
 		"$subpkgdir"/etc/conf.d/lavinmq
 }

+_logrotate() {
+	pkgdesc="Log rotation configuration for $pkgname"
+	depends="$pkgname=$pkgver-r$pkgrel logrotate"
+
+	install -Dm644 "$srcdir"/lavinmq.logrotate \
+		"$subpkgdir"/etc/logrotate.d/$pkgname
+}
+
 sha512sums="
-b494892dada6eb713025bc3245e16035a63265805d77c537b4530226195f00dacab1fb14de5bf4c999165faa6bf2f7ef7c6b8ffb4c6f4a921977f1c13a4f1545  lavinmq-2.10.0.tar.gz
-d0dfdd5c0e474024f57deb9e31c76e3f176e798c8d21dea53d3aea1b05436bd03fa34e69ccddf322bc89adedce5f379df5a316cddbbdfe12520e5bf672ad8228  lavinmq-2.10.0-shards.tar.gz
-ae3cea2534b211abbcbd1e4fcb6da73dfaf383a19aef1c45f367cba77492cc20a7ce8283fc42f26c0a023149114c369bed307fb8cde0b8f27fba61165092e986  lavinmq-2.10.0-assets.tar.gz
+1c2c932a0698227abfe8353988ea75b48f9048f183d85410797af5bc14495e2cb4497e72acc8fc9ff9ef8f78e8ebb648a1b40b5cf7f1b86e18597d10297417ff  lavinmq-2.10.1.tar.gz
+d0dfdd5c0e474024f57deb9e31c76e3f176e798c8d21dea53d3aea1b05436bd03fa34e69ccddf322bc89adedce5f379df5a316cddbbdfe12520e5bf672ad8228  lavinmq-2.10.1-shards.tar.gz
+ae3cea2534b211abbcbd1e4fcb6da73dfaf383a19aef1c45f367cba77492cc20a7ce8283fc42f26c0a023149114c369bed307fb8cde0b8f27fba61165092e986  lavinmq-2.10.1-assets.tar.gz
 62a609d50f28db960098c4c84ce4f1dad78413366a9a9aca18fe321114d687be3bf7b71924d4ace69bd74383c5ac40d2ee09ae0eef9c1bfe653b97448e42e110  lavinmq.confd
 1853196e70297b5c4a2207fde50df735620cf6d99c4994644fd676bffaf863d67300ad7ae771c4bbb86fce1a0485c2a7968cf912c5f5bb878e08b15e5a28ba1b  lavinmq.initd
+9999dd6a96bd29a3d0bda1b2110af940b15acf1250a0f3ba6c93d16bd62063ab1c1dfa4c237da99bbb401150517abde59e2c7275f4b72c3eb7c90e1ce61d43b9  lavinmq.logrotate
 e7617099f745ecbf2f0686830d0a1b28044741ebd543798505b5b3c08f1be96b6cc478eb18f6785af49b100c2f49d837775f0721ac27519ddf3f081e681c581c  use-vendored-build-inputs.patch
 "
@@ -11,7 +11,7 @@ Build command:
 make
 ```

-LavinMQ 2.10.0 requires Crystal 1.21.0 or newer. The package uses Alpine
+LavinMQ 2.10.1 requires Crystal 1.21.0 or newer. The package uses Alpine
 edge's native Crystal package, avoiding a glibc toolchain in the Alpine musl
 build.

@@ -38,12 +38,47 @@ rc-update add lavinmq default
 rc-service lavinmq start
 ```

+Install daily rotation for the OpenRC service log, retaining 14 compressed
+archives:
+
+```sh
+apk add lavinmq-logrotate
+```
+
 Wrapper settings in `/etc/conf.d/lavinmq`:

 - `LAVINMQ_CONFIG`: config file path passed with `--config`
 - `LAVINMQ_DATA_DIR`: data directory passed with `-D`
 - `LAVINMQ_OPTS`: extra LavinMQ arguments appended after package defaults

+## Updating LavinMQ
+
+1. In `APKBUILD`, set `pkgver` to the new upstream version and reset `pkgrel`
+   to `0`.
+2. Add versioned vendored archives for the locked Shards dependencies and
+   frontend assets. If the new upstream `shard.lock` and the asset rules in its
+   `Makefile` are unchanged, the existing archives can be reused under the new
+   names:
+
+   ```sh
+   cd packaging/alpine/local/lavinmq
+   cp lavinmq-2.10.1-shards.tar.gz lavinmq-<version>-shards.tar.gz
+   cp lavinmq-2.10.1-assets.tar.gz lavinmq-<version>-assets.tar.gz
+   git add -f lavinmq-<version>-shards.tar.gz lavinmq-<version>-assets.tar.gz
+   ```
+
+   When `shard.lock` changes, extract the upstream source, run
+   `shards install --production` in it, and create the shards archive with
+   `tar -czf lavinmq-<version>-shards.tar.gz lib`. If the asset rules change,
+   download the files specified by the new `Makefile` to a staging directory
+   and create `lavinmq-<version>-assets.tar.gz` from that directory's contents.
+3. From the repository root, refresh checksums and build the package:
+
+   ```sh
+   ALPINE_PACKAGE=lavinmq mise run apk:checksum
+   ALPINE_PACKAGE=lavinmq mise run apk:build
+   ```
+
 ## Package Commands

 Refresh checksums:
@@ -0,0 +1,10 @@
+/var/log/lavinmq/lavinmq.log {
+	daily
+	rotate 14
+	missingok
+	notifempty
+	compress
+	delaycompress
+	copytruncate
+	su lavinmq lavinmq
+}
@@ -20,7 +20,7 @@ apk_test_install_run "${repo_root}" "${PACKAGE_NAME:-lavinmq}" "${PACKAGE_VERSIO
      printf "%s\n" /repo >> /etc/apk/repositories
    fi
    apk update
-    apk add "${PACKAGE_NAME}" "${PACKAGE_NAME}-doc" "${PACKAGE_NAME}-openrc"
+    apk add "${PACKAGE_NAME}" "${PACKAGE_NAME}-doc" "${PACKAGE_NAME}-logrotate" "${PACKAGE_NAME}-openrc"

    test -x /usr/bin/lavinmq
    test -x /usr/bin/lavinmqctl
@@ -30,6 +30,9 @@ apk_test_install_run "${repo_root}" "${PACKAGE_NAME:-lavinmq}" "${PACKAGE_VERSIO
    test "$(stat -c "%U:%G %a" /var/lib/lavinmq)" = "lavinmq:lavinmq 750"
    test -f /etc/conf.d/lavinmq
    test -f /etc/init.d/lavinmq
+    test -f /etc/logrotate.d/lavinmq
+    apk info -e logrotate
+    logrotate -d /etc/logrotate.conf
    test -f /usr/share/doc/lavinmq/README.md
    test -f /usr/share/doc/lavinmq/changelog

@@ -0,0 +1,75 @@
+# Maintainer: Joachim Schlöffel <joachim.schloeffel@financial-service-plus.de>
+pkgname=nifi
+pkgver=2.12.0
+pkgrel=0
+pkgdesc="Reliable system for processing and distributing data"
+url="https://nifi.apache.org/"
+arch="x86_64 aarch64"
+license="Apache-2.0"
+depends="openjdk21-jre-headless"
+makedepends="unzip"
+install="$pkgname.pre-install"
+pkgusers="nifi"
+pkggroups="nifi"
+subpackages="
+	$pkgname-openrc:_openrc:noarch
+	"
+options="!check !strip !tracedeps"
+source="
+	$pkgname-$pkgver-bin.zip::https://dlcdn.apache.org/nifi/$pkgver/nifi-$pkgver-bin.zip
+	nifi.confd
+	nifi.initd
+	nifi.wrapper
+	"
+package() {
+	local _dir
+
+	install -d "$pkgdir"/usr/lib/nifi "$pkgdir"/etc/nifi
+	cp -a "$builddir"/. "$pkgdir"/usr/lib/nifi/
+	chmod -R a+rX "$pkgdir"/usr/lib/nifi
+
+	cp -a "$pkgdir"/usr/lib/nifi/conf/. "$pkgdir"/etc/nifi/
+	rm -r "$pkgdir"/usr/lib/nifi/conf
+	ln -s /etc/nifi "$pkgdir"/usr/lib/nifi/conf
+
+	install -d -m 0750 -o nifi -g nifi "$pkgdir"/var/lib/nifi
+	for _dir in \
+		assets \
+		connector_assets \
+		content_repository \
+		database_repository \
+		diagnostics \
+		extensions \
+		flowfile_repository \
+		nar_repository \
+		provenance_repository \
+		state \
+		status_repository \
+		work; do
+		install -d -m 0750 -o nifi -g nifi "$pkgdir"/var/lib/nifi/$_dir
+		ln -s /var/lib/nifi/$_dir "$pkgdir"/usr/lib/nifi/$_dir
+	done
+	install -d -m 0750 -o nifi -g nifi "$pkgdir"/var/log/nifi
+	ln -s /var/log/nifi "$pkgdir"/usr/lib/nifi/logs
+	ln -s /run/nifi "$pkgdir"/usr/lib/nifi/run
+
+	chown -R nifi:nifi "$pkgdir"/etc/nifi
+	chmod 0750 "$pkgdir"/etc/nifi
+
+	install -Dm755 "$srcdir"/nifi.wrapper "$pkgdir"/usr/bin/nifi
+}
+
+_openrc() {
+	pkgdesc="$pkgdesc (OpenRC service)"
+	depends="$pkgname=$pkgver-r$pkgrel openrc"
+
+	install -Dm755 "$srcdir"/nifi.initd "$subpkgdir"/etc/init.d/nifi
+	install -Dm644 "$srcdir"/nifi.confd "$subpkgdir"/etc/conf.d/nifi
+}
+
+sha512sums="
+5891039ccf15234bb21c2d1ce65027357ca7603ad8fdfc946dd4b6499ab8061fb07a6a56f8e8c5bb7635d446354ca7cc76ba40e55921818931f193a75f247334  nifi-2.12.0-bin.zip
+fd576c2d2333aa79f7dac90e83f9cf6e0faed9748ebce0dfc1c18bcd1da0ec1d0da90d4004055bbddcb0f011a0e9efdc08f0eed2f3c19d49b1746019f2be1da9  nifi.confd
+9f8a005fcd6a6f75a553321c27c672c4c202e8b86ff5fa0a1bd5eb0e7305592e67d8dc6a915d1f1bc01b39916b0fb0e61478cb6ae5aee4ae8b3be36c80c5662a  nifi.initd
+7764c6a53f0fb109ecde4959b438a0eeb669b00eafdbdb2abe5255f4053a237d4e97349594b3bf053abd55a96f8e217aa0cf0fec59a7c14f1db2490e747f713e  nifi.wrapper
+"
@@ -0,0 +1,50 @@
+# Apache NiFi Alpine Package
+
+Repackages Apache NiFi 2.12.0 Standard for Alpine. The package requires Java
+21 and retains NiFi 2's secure default: HTTPS listens on `127.0.0.1:8443` and
+uses generated single-user credentials.
+
+## Install
+
+```sh
+apk add nifi nifi-openrc
+rc-update add nifi default
+rc-service nifi start
+```
+
+Open `https://127.0.0.1:8443/nifi` and retrieve the generated credentials:
+
+```sh
+grep 'Generated \(Username\|Password\)' /var/log/nifi/nifi-app.log
+```
+
+Set fixed single-user credentials as the service account:
+
+```sh
+doas -u nifi nifi set-single-user-credentials '<username>' '<password>'
+rc-service nifi restart
+```
+
+## Runtime Layout
+
+```text
+/usr/bin/nifi              Administration command wrapper
+/usr/lib/nifi              NiFi binaries and bundled NARs
+/etc/nifi                  Mutable NiFi configuration and authorization state
+/var/lib/nifi              Repositories, state, extensions, and work files
+/var/log/nifi              Application logs
+/etc/conf.d/nifi           OpenRC account defaults
+/etc/init.d/nifi           OpenRC service
+```
+
+Edit `/etc/nifi/nifi.properties` to bind a different HTTPS address, configure
+TLS, or select LDAP, OIDC, or another supported authentication provider.
+
+## Package Commands
+
+```sh
+ALPINE_PACKAGE=nifi mise run apk:checksum
+ALPINE_PACKAGE=nifi mise run apk:build
+ALPINE_PACKAGE=nifi SKIP_BUILD=1 mise run apk:test-install
+ALPINE_PACKAGE=nifi mise run apk:runtime-test
+```
@@ -0,0 +1,3 @@
+# Defaults for Apache NiFi.
+NIFI_USER="nifi"
+NIFI_GROUP="nifi"
@@ -0,0 +1,26 @@
+#!/sbin/openrc-run
+
+description="Apache NiFi dataflow service"
+
+supervisor=supervise-daemon
+name=nifi
+command="/usr/lib/nifi/bin/nifi.sh"
+command_args="run"
+command_user="${NIFI_USER:-nifi}:${NIFI_GROUP:-nifi}"
+directory="/usr/lib/nifi"
+pidfile="/run/nifi/nifi.pid"
+supervise_daemon_args="--chdir /usr/lib/nifi --env HOME=/var/lib/nifi --pidfile ${pidfile}"
+
+depend() {
+	need net
+	use dns logger
+}
+
+start_pre() {
+	local service_owner="${NIFI_USER:-nifi}:${NIFI_GROUP:-nifi}"
+
+	checkpath -d -m 0750 -o "$service_owner" \
+		/run/nifi \
+		/var/lib/nifi \
+		/var/log/nifi
+}
@@ -0,0 +1,7 @@
+#!/bin/sh
+
+addgroup -S nifi 2>/dev/null
+adduser -S -D -H -h /var/lib/nifi -s /sbin/nologin \
+	-G nifi -g nifi nifi 2>/dev/null
+
+exit 0
@@ -0,0 +1,3 @@
+#!/bin/sh
+
+exec /usr/lib/nifi/bin/nifi.sh "$@"
@@ -0,0 +1,34 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+apk add nifi nifi-openrc curl
+
+test -x /usr/bin/nifi
+test -x /usr/lib/nifi/bin/nifi.sh
+test -d /etc/nifi
+test -L /usr/lib/nifi/conf
+test "$(readlink /usr/lib/nifi/conf)" = /etc/nifi
+test -d /var/lib/nifi
+test -d /var/log/nifi
+test -f /etc/init.d/nifi
+test -f /etc/conf.d/nifi
+test -d /usr/lib/nifi/docs
+test "$(stat -c '%U:%G %a' /var/lib/nifi)" = "nifi:nifi 750"
+
+rc-update add nifi default || true
+test -L /etc/runlevels/default/nifi
+rc-service nifi start
+
+for _attempt in $(seq 1 300); do
+	if curl --fail --insecure --silent --show-error \
+		https://localhost:8443/nifi/ >/dev/null; then
+		break
+	fi
+	sleep 1
+done
+
+curl --fail --insecure --silent --show-error https://localhost:8443/nifi/ >/dev/null
+grep -q 'Generated Username' /var/log/nifi/nifi-app.log
+grep -q 'Generated Password' /var/log/nifi/nifi-app.log
+rc-service nifi status
+rc-service nifi stop
@@ -0,0 +1,39 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+repo_root="${REPO_ROOT:-$(cd "$(dirname "${BASH_SOURCE[0]}")/../../../../.." && pwd)}"
+# shellcheck source=scripts/apk/test-install-lib.sh
+. "${repo_root}/scripts/apk/test-install-lib.sh"
+
+apk_test_install_run "${repo_root}" "${PACKAGE_NAME:-nifi}" "${PACKAGE_VERSION:-2.12.0-r0}" <<'SCRIPT'
+    set -e
+
+    if [ -n "${ALPINE_REPOSITORY_URL}" ]; then
+      if [ -n "${ALPINE_REPOSITORY_KEY_URL}" ]; then
+        apk add --no-cache curl >/dev/null
+        cd /etc/apk/keys
+        curl -fsSLOJ "${ALPINE_REPOSITORY_KEY_URL}"
+      fi
+      printf "%s\n" "${ALPINE_REPOSITORY_URL}" >> /etc/apk/repositories
+    else
+      cp "/repo/${ALPINE_ARCH}"/*.rsa.pub /etc/apk/keys/
+      printf "%s\n" /repo >> /etc/apk/repositories
+    fi
+    apk update
+    apk add "${PACKAGE_NAME}" "${PACKAGE_NAME}-openrc"
+
+    test -x /usr/bin/nifi
+    test -x /usr/lib/nifi/bin/nifi.sh
+    test -d /etc/nifi
+    test -L /usr/lib/nifi/conf
+    test "$(readlink /usr/lib/nifi/conf)" = /etc/nifi
+    test -d /var/lib/nifi
+    test -d /var/log/nifi
+    test -f /etc/init.d/nifi
+    test -f /etc/conf.d/nifi
+    test -d /usr/lib/nifi/docs
+    test "$(stat -c '%U:%G %a' /var/lib/nifi)" = "nifi:nifi 750"
+
+    rc-update add nifi default
+    test -L /etc/runlevels/default/nifi
+SCRIPT
@@ -0,0 +1,3 @@
+provider="github"
+repo="apache/nifi"
+version_prefix="rel/nifi-"
@@ -0,0 +1,29 @@
+# Maintainer: Joachim Schlöffel <joachim.schloeffel@financial-service-plus.de>
+pkgname=rclone-openrc
+pkgver=0.1.0
+pkgrel=0
+pkgdesc="Generic, instance-capable OpenRC service for rclone"
+url="https://rclone.org/"
+arch="noarch"
+license="MIT"
+depends="openrc rclone"
+install="$pkgname.pre-install"
+pkgusers="rclone"
+pkggroups="rclone"
+options="!check"
+source="
+	rclone.confd
+	rclone.initd
+	"
+
+package() {
+	install -d -m 0750 -o root -g rclone "$pkgdir"/etc/rclone
+	install -d -m 0750 -o rclone -g rclone "$pkgdir"/var/lib/rclone/cache
+	install -Dm644 "$srcdir"/rclone.confd "$pkgdir"/etc/conf.d/rclone
+	install -Dm755 "$srcdir"/rclone.initd "$pkgdir"/etc/init.d/rclone
+}
+
+sha512sums="
+91a05da2c5740a810faf0226ab5fcb3d92a9db56b42c10decaed91481d3129cfc37f5f726a6dc1b5b1246ad4d1386cbe918e109f152969912ea670dbff35fe70  rclone.confd
+e92ce86aa21ce1a94beb8304c806b4c0045d412477d7a232e37b0f28354af3060de054c5ae3d1ea353b92d19137a0cfa00b0891b0e179aa32bc6b2c7ecdfc7ea  rclone.initd
+"
@@ -0,0 +1,59 @@
+# rclone OpenRC Alpine Package
+
+Provides a generic, instance-capable OpenRC service for Alpine's `rclone`
+package. It does not repackage the rclone binary.
+
+## Install
+
+```sh
+apk add rclone-openrc
+```
+
+The package creates the unprivileged `rclone` account, `/etc/rclone` for
+configuration and credentials, and `/var/lib/rclone/cache` for rclone state.
+It deliberately does not create remotes, credentials, authorized-key files, or
+SSH host keys; provision those as machine-specific secrets.
+
+## Create an Instance
+
+Copy the template and symlink the generic service under an instance name:
+
+```sh
+cp /etc/conf.d/rclone /etc/conf.d/rclone.sftp
+ln -s rclone /etc/init.d/rclone.sftp
+```
+
+For an SFTP server, configure `/etc/conf.d/rclone.sftp`:
+
+```sh
+RCLONE_COMMAND="serve sftp"
+RCLONE_REMOTE="/srv/storage"
+RCLONE_ARGS="
+  --addr :2022
+  --authorized-keys /etc/rclone/authorized_keys
+  --key /etc/rclone/ssh_host_ed25519_key
+  --log-level INFO
+"
+```
+
+Then enable and start it:
+
+```sh
+rc-update add rclone.sftp default
+rc-service rclone.sftp start
+```
+
+Other instances, such as `rclone.webdav` or `rclone.rcd`, use their own
+`/etc/conf.d/rclone.<name>` file with the same generic init script. The service
+runs rclone in the foreground under `supervise-daemon`, which restarts it after
+an unexpected exit. Set `RCLONE_RESPAWN_MAX` to a positive value to limit
+restart attempts.
+
+## Package Commands
+
+```sh
+ALPINE_PACKAGE=rclone-openrc mise run apk:checksum
+ALPINE_PACKAGE=rclone-openrc mise run apk:build
+ALPINE_PACKAGE=rclone-openrc SKIP_BUILD=1 mise run apk:test-install
+ALPINE_PACKAGE=rclone-openrc mise run apk:runtime-test
+```
@@ -0,0 +1,7 @@
+#!/bin/sh
+
+addgroup -S rclone 2>/dev/null
+adduser -S -D -H -h /var/lib/rclone -s /sbin/nologin \
+	-G rclone -g rclone rclone 2>/dev/null
+
+exit 0
@@ -0,0 +1,23 @@
+# Defaults for rclone OpenRC instances.
+#
+# To create an instance, copy this file to /etc/conf.d/rclone.<name> and create
+# /etc/init.d/rclone.<name> as a symlink to /etc/init.d/rclone. For example:
+#
+#   cp /etc/conf.d/rclone /etc/conf.d/rclone.sftp
+#   ln -s rclone /etc/init.d/rclone.sftp
+#
+# Each instance must set RCLONE_COMMAND. RCLONE_REMOTE is optional because
+# commands such as "rcd" do not use a remote.
+RCLONE_COMMAND=""
+RCLONE_REMOTE=""
+RCLONE_ARGS=""
+
+RCLONE_CONFIG="/etc/rclone/rclone.conf"
+RCLONE_CACHE_DIR="/var/lib/rclone/cache"
+RCLONE_USER="rclone"
+RCLONE_GROUP="rclone"
+
+# Restart a long-running rclone command after an unexpected exit. Set
+# RCLONE_RESPAWN_MAX to a positive number to limit restart attempts.
+RCLONE_RESPAWN_DELAY="5"
+RCLONE_RESPAWN_MAX="0"
@@ -0,0 +1,31 @@
+#!/sbin/openrc-run
+
+instance_name="${RC_SVCNAME#rclone.}"
+description="rclone ${instance_name} service"
+
+supervisor="supervise-daemon"
+command="/usr/bin/rclone"
+command_user="${RCLONE_USER:-rclone}:${RCLONE_GROUP:-rclone}"
+pidfile="/run/rclone/${RC_SVCNAME}.pid"
+respawn_delay="${RCLONE_RESPAWN_DELAY:-5}"
+respawn_max="${RCLONE_RESPAWN_MAX:-0}"
+supervise_daemon_args="--chdir /var/lib/rclone --pidfile ${pidfile}"
+command_args="${RCLONE_COMMAND:-} ${RCLONE_REMOTE:-} --config ${RCLONE_CONFIG:-/etc/rclone/rclone.conf} --cache-dir ${RCLONE_CACHE_DIR:-/var/lib/rclone/cache} ${RCLONE_ARGS:-}"
+
+depend() {
+	need net
+	use dns logger
+}
+
+start_pre() {
+	local service_owner="${RCLONE_USER:-rclone}:${RCLONE_GROUP:-rclone}"
+
+	if [ -z "${RCLONE_COMMAND:-}" ]; then
+		eerror "RCLONE_COMMAND is required; configure /etc/conf.d/${RC_SVCNAME}"
+		return 1
+	fi
+
+	checkpath -d -m 0750 -o "$service_owner" \
+		/run/rclone \
+		"${RCLONE_CACHE_DIR:-/var/lib/rclone/cache}"
+}
@@ -0,0 +1,20 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+apk add rclone-openrc
+
+test -x /usr/bin/rclone
+test -f /etc/conf.d/rclone
+test -f /etc/init.d/rclone
+test "$(stat -c '%U:%G %a' /etc/rclone)" = "root:rclone 750"
+test "$(stat -c '%U:%G %a' /var/lib/rclone/cache)" = "rclone:rclone 750"
+
+cp /etc/conf.d/rclone /etc/conf.d/rclone.rcd
+ln -s rclone /etc/init.d/rclone.rcd
+sed -i 's|^RCLONE_COMMAND=""|RCLONE_COMMAND="rcd"|' /etc/conf.d/rclone.rcd
+sed -i 's|^RCLONE_ARGS=""|RCLONE_ARGS="--rc-addr 127.0.0.1:5572 --rc-no-auth"|' /etc/conf.d/rclone.rcd
+
+rc-update add rclone.rcd default || true
+rc-service rclone.rcd start
+rc-service rclone.rcd status
+rc-service rclone.rcd stop
@@ -0,0 +1,36 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+repo_root="${REPO_ROOT:-$(cd "$(dirname "${BASH_SOURCE[0]}")/../../../../.." && pwd)}"
+# shellcheck source=scripts/apk/test-install-lib.sh
+. "${repo_root}/scripts/apk/test-install-lib.sh"
+
+apk_test_install_run "${repo_root}" "${PACKAGE_NAME:-rclone-openrc}" "${PACKAGE_VERSION:-}" <<'SCRIPT'
+    set -e
+
+    if [ -n "${ALPINE_REPOSITORY_URL}" ]; then
+      if [ -n "${ALPINE_REPOSITORY_KEY_URL}" ]; then
+        apk add --no-cache curl >/dev/null
+        cd /etc/apk/keys
+        curl -fsSLOJ "${ALPINE_REPOSITORY_KEY_URL}"
+      fi
+      printf "%s\n" "${ALPINE_REPOSITORY_URL}" >> /etc/apk/repositories
+    else
+      cp "/repo/${ALPINE_ARCH}"/*.rsa.pub /etc/apk/keys/
+      printf "%s\n" /repo >> /etc/apk/repositories
+    fi
+    apk update
+    apk add "${PACKAGE_NAME}"
+
+    test -x /usr/bin/rclone
+    test -f /etc/conf.d/rclone
+    test -f /etc/init.d/rclone
+    test -d /etc/rclone
+    test "$(stat -c '%U:%G %a' /etc/rclone)" = "root:rclone 750"
+    test "$(stat -c '%U:%G %a' /var/lib/rclone/cache)" = "rclone:rclone 750"
+
+    cp /etc/conf.d/rclone /etc/conf.d/rclone.sftp
+    ln -s rclone /etc/init.d/rclone.sftp
+    rc-update add rclone.sftp default
+    test -L /etc/runlevels/default/rclone.sftp
+SCRIPT
@@ -1,7 +1,7 @@
 # Maintainer: Joachim Schlöffel <joachim.schloeffel@financial-service-plus.de>
 pkgname=seaweedfs
 pkgver=4.48
-pkgrel=1
+pkgrel=3
 pkgdesc="Distributed storage system for object storage, file systems, and Iceberg tables"
 url="https://github.com/seaweedfs/seaweedfs"
 arch="x86_64 aarch64"
@@ -15,6 +15,7 @@ subpackages="
 	$pkgname-bash-completion:_bashcomp:noarch
 	$pkgname-doc
 	$pkgname-filer-openrc:_openrc_filer:noarch
+	$pkgname-logrotate:_logrotate:noarch
 	$pkgname-master-openrc:_openrc_master:noarch
 	$pkgname-s3-openrc:_openrc_s3:noarch
 	$pkgname-sftp-openrc:_openrc_sftp:noarch
@@ -45,6 +46,7 @@ source="
 	seaweedfs.admin.confd
 	seaweedfs.filer.confd
 	seaweedfs.initd
+	seaweedfs.logrotate
 	seaweedfs.master.confd
 	seaweedfs.s3.confd
 	seaweedfs.sftp.confd
@@ -62,7 +64,8 @@ prepare() {
 }

 build() {
-	go build -mod=readonly -buildvcs=false -trimpath -o "$builddir/weed-bin" ./weed
+	go build -mod=readonly -buildvcs=false -trimpath \
+		-tags "sqlite rclone gocdk" -o "$builddir/weed-bin" ./weed

 	cd "$_worker_builddir"
 	cargo build --locked --release -p weed-lance-worker
@@ -109,6 +112,14 @@ _openrc_volume() { _openrc_service volume; }
 _openrc_webdav() { _openrc_service webdav; }
 _openrc_worker() { _openrc_service worker; }

+_logrotate() {
+	pkgdesc="Log rotation configuration for $pkgname"
+	depends="$pkgname=$pkgver-r$pkgrel logrotate"
+
+	install -Dm644 "$srcdir"/seaweedfs.logrotate \
+		"$subpkgdir"/etc/logrotate.d/$pkgname
+}
+
 _worker_lance() {
 	pkgdesc="SeaweedFS Lance table maintenance worker"
 	depends="$pkgname=$pkgver-r$pkgrel libgcc"
@@ -149,6 +160,7 @@ b7caad9dff0bb812d4046b8e0285ac4e88a7af3a742a168579df08762da735a025725f78286e17bd
 82e2793bf483ffb5b0c8fbe38e6c9df75afe01f824f8414cafd91e4bed5c79c13dae1ca659070401d4968d16ed4b26455b0c6208f777705527bceb2e5f286988  seaweedfs.admin.confd
 5ad952c37c62a770327bd70f7349fa677406606f0b9bf03fdc8f6c6804701f1e77710ab20d6153f9e0cfb549ec161d68a3316abab9c59837bbe3f91ee99e5ce0  seaweedfs.filer.confd
 19cbd65d701b0995e088f265d88f481f14e214ecbd8a783f7e7b17e811e421a28425f96d073757cc07fbb17e8eb084d14d41f46baee82ee13e043ce0c0c5bde9  seaweedfs.initd
+816e763164c2cec66509c213ed56cb633f13d1daf48a511d1a9cfdf692a6ad945cf599cb0e706202b8fd522022ce512eae6170422e478abdf95334b0088ac4cc  seaweedfs.logrotate
 57ba77519bb266f0117eaadae3af5ae6bc99bb653668ff526202f327df1c8d93973c0e19dae0c53a19e06389868043c04e53f16f01c851b77fe1387e92cc993b  seaweedfs.master.confd
 22a3ea6c83266a979ea7c848fc74b40fc0f2ade960b273fa11e63d4a72a1328bd688c9918be3e9234cfb19f889fd9c931388bb5c2863cea3500e534b8bd90282  seaweedfs.s3.confd
 3e9c41bc61cdd9a4c53ece64d847eca26ab7d0ce0cc98e72462c3dbb225a40de10a02201362801015a9c629d77d5c0d54c7228e9d20111fb6f478b2267d2db98  seaweedfs.sftp.confd
@@ -2,8 +2,9 @@

 Builds SeaweedFS 4.48 from its upstream source release for `x86_64` and
 `aarch64`. The package intentionally builds the upstream baseline feature set,
-without optional build tags. Go and Cargo dependencies are resolved from the
-versions pinned in the upstream `go.sum` and `Cargo.lock` files.
+with the `sqlite`, `rclone`, and `gocdk` optional Go build tags enabled. Go and
+Cargo dependencies are resolved from the versions pinned in the upstream
+`go.sum` and `Cargo.lock` files.

 ## Package Commands

@@ -130,6 +131,15 @@ Bash completion:
 apk add bash-completion seaweedfs-bash-completion
 ```

+Log rotation for the default OpenRC service logs:
+
+```sh
+apk add seaweedfs-logrotate
+```
+
+This rotates `/var/log/seaweedfs/seaweedfs.*.log` daily and retains 14
+compressed archives.
+
 ## Upgrade Or Pin

 Upgrade:
@@ -16,6 +16,7 @@ apk_test_install_run "${repo_root}" "${PACKAGE_NAME:-seaweedfs}" "${PACKAGE_VERS
      seaweedfs-master-openrc \
      seaweedfs-volume-openrc \
      seaweedfs-filer-openrc \
+      seaweedfs-logrotate \
      seaweedfs-worker-lance-openrc

    test -x /usr/bin/weed
@@ -30,6 +31,9 @@ apk_test_install_run "${repo_root}" "${PACKAGE_NAME:-seaweedfs}" "${PACKAGE_VERS
    test -f /etc/init.d/seaweedfs.volume
    test -f /etc/init.d/seaweedfs.filer
    test -f /etc/init.d/seaweedfs.worker-lance
+    test -f /etc/logrotate.d/seaweedfs
+    apk info -e logrotate
+    logrotate -d /etc/logrotate.conf
    test -x /usr/bin/weed-worker
    /usr/bin/weed-worker --help >/dev/null

@@ -0,0 +1,10 @@
+/var/log/seaweedfs/seaweedfs.*.log {
+	daily
+	rotate 14
+	missingok
+	notifempty
+	compress
+	delaycompress
+	copytruncate
+	su seaweedfs seaweedfs
+}
@@ -6,7 +6,7 @@ repo_root="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
 . "${repo_root}/scripts/apk/package-lib.sh"
 repo_name="${ALPINE_REPO_NAME:-local}"
 arch="${ALPINE_ARCH:-$(apk --print-arch)}"
-packages="${SMOKE_PACKAGES:-seaweedfs seaweedfs-master-openrc seaweedfs-filer-openrc seaweedfs-worker-openrc greptimedb lavinmq lavinmq-openrc gitea gitea-openrc}"
+packages="${SMOKE_PACKAGES:-seaweedfs seaweedfs-master-openrc seaweedfs-filer-openrc seaweedfs-worker-openrc greptimedb lavinmq lavinmq-openrc gitea gitea-openrc rclone-openrc}"
 repo_dir="${repo_root}/packages/${repo_name}/${arch}"
 registry_url="${ALPINE_REGISTRY_URL:-}"
 registry_key="${ALPINE_REGISTRY_KEY:-}"
@@ -64,6 +64,11 @@ if command -v gitea >/dev/null 2>&1; then
  test -f /etc/gitea/app.ini
  test -d /var/lib/gitea
 fi
+if command -v rclone >/dev/null 2>&1; then
+  rclone version
+  test -f /etc/conf.d/rclone
+  test -f /etc/init.d/rclone
+fi
 if ls /etc/init.d/seaweedfs.* >/dev/null 2>&1; then
  find /etc/init.d -maxdepth 1 -name 'seaweedfs.*' -print | sort
 fi
@@ -5,7 +5,7 @@ repo_root="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
 alpine_version="${ALPINE_VERSION:-3.24}"
 platform="${ALPINE_BUILD_PLATFORM:-linux/amd64}"
 arch="${ALPINE_ARCH:-x86_64}"
-packages="${SMOKE_PACKAGES:-seaweedfs seaweedfs-master-openrc seaweedfs-filer-openrc seaweedfs-worker-openrc greptimedb lavinmq lavinmq-openrc gitea gitea-openrc}"
+packages="${SMOKE_PACKAGES:-seaweedfs seaweedfs-master-openrc seaweedfs-filer-openrc seaweedfs-worker-openrc greptimedb lavinmq lavinmq-openrc gitea gitea-openrc rclone-openrc}"

 if [[ ! -d "${repo_root}/packages/local/${arch}" ]]; then
  printf 'missing local repository: packages/local/%s\n' "${arch}" >&2
@@ -39,6 +39,11 @@ docker run --rm --platform "${platform}" \
      test -f /etc/gitea/app.ini
      test -d /var/lib/gitea
    fi
+    if command -v rclone >/dev/null 2>&1; then
+      rclone version
+      test -f /etc/conf.d/rclone
+      test -f /etc/init.d/rclone
+    fi
    if ls /etc/init.d/seaweedfs.* >/dev/null 2>&1; then
      ls -1 /etc/init.d/seaweedfs.* | sort
    fi
@@ -76,6 +76,7 @@ Examples:
  apk add greptimedb greptimedb-docs greptimedb-standalone-openrc
  apk add lavinmq lavinmq-openrc
  apk add gitea gitea-openrc
+  apk add rclone-openrc

 Entering ${TEST_SHELL}.
Author	SHA1	Message	Date
Joachim Schlöffel	0d85e29b5e	revert dynamic matrix, add rclone-openrc to static build matrix Build Alpine Packages / preflight (pull_request) Successful in 8s Details Build Alpine Packages / build (gitea) (pull_request) Successful in 7s Details Build Alpine Packages / build (greptimedb) (pull_request) Successful in 6s Details Build Alpine Packages / build (lavinmq) (pull_request) Successful in 6s Details Build Alpine Packages / build (nifi) (pull_request) Successful in 5s Details Build Alpine Packages / build (rclone-openrc) (pull_request) Successful in 9s Details Build Alpine Packages / build (seaweedfs) (pull_request) Successful in 3s Details Build Alpine Packages / verify-and-publish (pull_request) Successful in 27s Details	2026-10-07 14:09:12 +02:00
Joachim Schlöffel	55ce31db00	change build behaviour to support dynamic package selection Build Alpine Packages / preflight (pull_request) Successful in 5s Details Build Alpine Packages / verify-and-publish (pull_request) Canceled after 0s Details Build Alpine Packages / build (pull_request) Canceled after 7m9s Details	2026-10-07 14:02:11 +02:00
Joachim Schlöffel	b40ccdf370	add rclone-openrc Build Alpine Packages / preflight (pull_request) Successful in 5s Details Build Alpine Packages / build (gitea) (pull_request) Successful in 3s Details Build Alpine Packages / build (greptimedb) (pull_request) Successful in 4s Details Build Alpine Packages / build (lavinmq) (pull_request) Successful in 4s Details Build Alpine Packages / build (nifi) (pull_request) Successful in 3s Details Build Alpine Packages / build (seaweedfs) (pull_request) Successful in 4s Details Build Alpine Packages / verify-and-publish (pull_request) Failing after 7s Details	2026-10-07 13:42:30 +02:00
Joachim Schlöffel	7bdcc83050	bump Gitea version to 28.1.0 Build Alpine Packages / preflight (pull_request) Successful in 6s Details Build Alpine Packages / build (gitea) (pull_request) Successful in 54s Details Build Alpine Packages / build (lavinmq) (pull_request) Successful in 2m58s Details Build Alpine Packages / build (nifi) (pull_request) Successful in 6s Details Build Alpine Packages / build (seaweedfs) (pull_request) Successful in 38m57s Details Build Alpine Packages / build (greptimedb) (pull_request) Successful in 1h12m41s Details Build Alpine Packages / verify-and-publish (pull_request) Successful in 1m49s Details Build Alpine Packages / preflight (push) Successful in 5s Details Build Alpine Packages / build (gitea) (push) Successful in 52s Details Build Alpine Packages / build (lavinmq) (push) Successful in 2m30s Details Build Alpine Packages / build (nifi) (push) Successful in 4s Details Build Alpine Packages / build (seaweedfs) (push) Successful in 40m11s Details Build Alpine Packages / build (greptimedb) (push) Successful in 1h8m59s Details Build Alpine Packages / verify-and-publish (push) Successful in 2m2s Details	2026-10-06 23:02:04 +02:00
Joachim Schlöffel	57fc0e658c	remove artificial package status from readme Build Alpine Packages / preflight (pull_request) Successful in 16s Details Build Alpine Packages / build (gitea) (pull_request) Successful in 56s Details Build Alpine Packages / build (nifi) (pull_request) Successful in 11s Details Build Alpine Packages / build (seaweedfs) (pull_request) Successful in 39m22s Details Build Alpine Packages / build (greptimedb) (pull_request) Successful in 1h29m31s Details Build Alpine Packages / build (lavinmq) (pull_request) Successful in 2m56s Details Build Alpine Packages / verify-and-publish (pull_request) Successful in 1m47s Details	2026-10-06 22:54:17 +02:00
Joachim Schlöffel	c9543e113b	add logrotate subpackages Build Alpine Packages / preflight (pull_request) Successful in 14s Details Build Alpine Packages / build (gitea) (pull_request) Successful in 1m0s Details Build Alpine Packages / build (lavinmq) (pull_request) Successful in 2m51s Details Build Alpine Packages / build (nifi) (pull_request) Successful in 5s Details Build Alpine Packages / build (seaweedfs) (pull_request) Successful in 39m45s Details Build Alpine Packages / build (greptimedb) (pull_request) Successful in 1h31m44s Details Build Alpine Packages / verify-and-publish (pull_request) Successful in 1m42s Details	2026-10-06 22:39:50 +02:00
Joachim Schlöffel	450d4815dd	add support for AMQP, RClone and SQLite to SeaweedFS Build Alpine Packages / preflight (pull_request) Successful in 6s Details Build Alpine Packages / build (gitea) (pull_request) Successful in 4s Details Build Alpine Packages / build (greptimedb) (pull_request) Successful in 4s Details Build Alpine Packages / build (lavinmq) (pull_request) Successful in 4s Details Build Alpine Packages / build (nifi) (pull_request) Successful in 4s Details Build Alpine Packages / build (seaweedfs) (pull_request) Successful in 26m9s Details Build Alpine Packages / verify-and-publish (pull_request) Successful in 56s Details Build Alpine Packages / preflight (push) Successful in 15s Details Build Alpine Packages / build (gitea) (push) Successful in 5s Details Build Alpine Packages / build (greptimedb) (push) Successful in 6s Details Build Alpine Packages / build (lavinmq) (push) Successful in 6s Details Build Alpine Packages / build (nifi) (push) Successful in 5s Details Build Alpine Packages / build (seaweedfs) (push) Successful in 26m15s Details Build Alpine Packages / verify-and-publish (push) Successful in 1m30s Details	2026-10-06 14:46:59 +02:00
Joachim Schlöffel	53747a13cc	update readme Build Alpine Packages / preflight (push) Successful in 7s Details Build Alpine Packages / build (gitea) (push) Skipped Details Build Alpine Packages / build (greptimedb) (push) Skipped Details Build Alpine Packages / build (lavinmq) (push) Skipped Details Build Alpine Packages / build (nifi) (push) Skipped Details Build Alpine Packages / build (seaweedfs) (push) Skipped Details Build Alpine Packages / verify-and-publish (push) Skipped Details	2026-10-05 22:03:36 +02:00
Joachim Schlöffel	13570ccbd9	Merge branch 'main' into development Build Alpine Packages / preflight (pull_request) Successful in 5s Details Build Alpine Packages / build (gitea) (pull_request) Successful in 3s Details Build Alpine Packages / build (greptimedb) (pull_request) Successful in 4s Details Build Alpine Packages / build (lavinmq) (pull_request) Successful in 4s Details Build Alpine Packages / build (seaweedfs) (pull_request) Successful in 6s Details Build Alpine Packages / build (nifi) (pull_request) Successful in 3m22s Details Build Alpine Packages / verify-and-publish (pull_request) Successful in 2m53s Details Build Alpine Packages / preflight (push) Successful in 5s Details Build Alpine Packages / build (gitea) (push) Successful in 2s Details Build Alpine Packages / build (greptimedb) (push) Successful in 3s Details Build Alpine Packages / build (lavinmq) (push) Successful in 3s Details Build Alpine Packages / build (seaweedfs) (push) Successful in 6s Details Build Alpine Packages / build (nifi) (push) Successful in 3m22s Details Build Alpine Packages / verify-and-publish (push) Successful in 4m12s Details	2026-10-05 21:09:31 +02:00
fspjo	f89ebac967	add Apache Nifi (#15 ) Reviewed-on: #15	2026-10-05 21:06:42 +02:00
fspjoandJoachim Schlöffel	bded7c8adc	2026/10 (#14 ) Build Alpine Packages / preflight (push) Successful in 4s Details Build Alpine Packages / build (greptimedb) (push) Successful in 4s Details Build Alpine Packages / build (gitea) (push) Successful in 53s Details Build Alpine Packages / build (seaweedfs) (push) Successful in 4s Details Build Alpine Packages / build (lavinmq) (push) Successful in 2m20s Details Build Alpine Packages / verify-and-publish (push) Successful in 42s Details Co-authored-by: Joachim Schlöffel <me@joachim-schloeffel.com> Reviewed-on: #14	2026-10-05 20:23:33 +02:00
Joachim Schlöffel	158fd18984	bump LavinMQ to 2.10.1 Build Alpine Packages / preflight (pull_request) Successful in 4s Details Build Alpine Packages / build (greptimedb) (pull_request) Successful in 5s Details Build Alpine Packages / build (gitea) (pull_request) Successful in 52s Details Build Alpine Packages / build (seaweedfs) (pull_request) Successful in 3s Details Build Alpine Packages / build (lavinmq) (pull_request) Successful in 2m19s Details Build Alpine Packages / verify-and-publish (pull_request) Successful in 38s Details	2026-10-05 20:18:27 +02:00
Joachim Schlöffel	fd0f484d4a	WIP: check CI build Build Alpine Packages / build (gitea) (pull_request) Canceled after 0s Details Build Alpine Packages / build (greptimedb) (pull_request) Canceled after 0s Details Build Alpine Packages / build (lavinmq) (pull_request) Canceled after 0s Details Build Alpine Packages / build (seaweedfs) (pull_request) Canceled after 0s Details Build Alpine Packages / verify-and-publish (pull_request) Canceled after 0s Details Build Alpine Packages / preflight (pull_request) Canceled after 5s Details	2026-10-05 09:31:46 +02:00
fspjo	1716f42970	update package build process (#12 ) Build Alpine Packages / preflight (push) Successful in 15s Details Build Alpine Packages / build (gitea) (push) Successful in 4s Details Build Alpine Packages / build (greptimedb) (push) Successful in 5s Details Build Alpine Packages / build (lavinmq) (push) Successful in 4s Details Build Alpine Packages / build (seaweedfs) (push) Successful in 34m15s Details Build Alpine Packages / verify-and-publish (push) Successful in 1m15s Details Reviewed-on: #12	2026-10-02 09:16:46 +02:00