trigger package rebuild

.gitea/workflows/build.yml

@@ -36,7 +36,10 @@ jobs:
     steps:
       - name: Prepare Environment
         run: |
-          printf '%s\n' 'https://dl-cdn.alpinelinux.org/alpine/edge/community' >> /etc/apk/repositories
+          printf '%s\n' \
+            'https://dl-cdn.alpinelinux.org/alpine/edge/main' \
+            'https://dl-cdn.alpinelinux.org/alpine/edge/community' \
+            >> /etc/apk/repositories
           apk add --no-cache --update atools-apkbuild-lint bash ca-certificates curl git jq nodejs shellcheck tar
 
       - name: Checkout
@@ -66,7 +69,7 @@ jobs:
         run: |
           for package in ${ALPINE_PACKAGES}; do
             case "${package}" in
-              seaweedfs|greptimedb|lavinmq|gitea|nifi|nifi-registry|rclone-openrc) ;;
+              seaweedfs|greptimedb|lavinmq|gitea|nifi|rclone-openrc) ;;
               *)
                 printf 'selected package is missing from the CI build matrix: %s\n' "${package}" >&2
                 exit 1
@@ -82,7 +85,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        package: [seaweedfs, greptimedb, lavinmq, gitea, nifi, nifi-registry, rclone-openrc]
+        package: [seaweedfs, greptimedb, lavinmq, gitea, nifi, rclone-openrc]
     container:
       image: "alpine:3.24"
     env:
@@ -90,7 +93,10 @@ jobs:
     steps:
       - name: Prepare Environment
         run: |
-          printf '%s\n' 'https://dl-cdn.alpinelinux.org/alpine/edge/community' >> /etc/apk/repositories
+          printf '%s\n' \
+            'https://dl-cdn.alpinelinux.org/alpine/edge/main' \
+            'https://dl-cdn.alpinelinux.org/alpine/edge/community' \
+            >> /etc/apk/repositories
           apk add --no-cache --update abuild-rootbld alpine-sdk bash ca-certificates doas git nodejs sudo
           mkdir -p "$ALPINE_RUST_CACHE_ROOT"
           chown -R 1000:1000 /cache/public-alpine-packages/v3.24
@@ -132,7 +138,10 @@ jobs:
     steps:
       - name: Prepare Environment
         run: |
-          printf '%s\n' 'https://dl-cdn.alpinelinux.org/alpine/edge/community' >> /etc/apk/repositories
+          printf '%s\n' \
+            'https://dl-cdn.alpinelinux.org/alpine/edge/main' \
+            'https://dl-cdn.alpinelinux.org/alpine/edge/community' \
+            >> /etc/apk/repositories
           apk add --no-cache --update abuild-rootbld alpine-sdk bash ca-certificates curl doas docker-cli git jq nodejs rsync shellcheck sudo tar
           trivy_archive="trivy_${TRIVY_VERSION}_Linux-64bit.tar.gz"
           curl -fsSL -o "/tmp/${trivy_archive}" "https://github.com/aquasecurity/trivy/releases/download/v${TRIVY_VERSION}/${trivy_archive}"
@@ -198,3 +207,16 @@ jobs:
       - name: Publish Alpine packages
         if: github.ref == 'refs/heads/main'
         run: scripts/apk/publish-gitea.sh
+
+      - name: Verify published Alpine registry
+        if: github.ref == 'refs/heads/main'
+        run: |
+          registry_url="${INSTANCE_URL}/api/packages/${PACKAGE_OWNER}/alpine/${ALPINE_REGISTRY_BRANCH}/${ALPINE_REGISTRY_REPOSITORY}"
+          for arch in ${ALPINE_ARCHES}; do
+            index_path="/tmp/APKINDEX-${arch}.tar.gz"
+            if ! curl --fail --silent --show-error --location \
+              --output "${index_path}" \
+              "${registry_url}/${arch}/APKINDEX.tar.gz" || ! test -s "${index_path}"; then
+              echo "::warning::Published Alpine index is unavailable for ${arch}: ${registry_url}/${arch}/APKINDEX.tar.gz"
+            fi
+          done

README.md

@@ -18,13 +18,12 @@ https://code.factoring.digital/api/packages/public/alpine/v3.24/alpine-packages
 ## Available Packages
 
 | Package                                                         | APK Name        | Package Version | Package Type                                             | Purpose                                                                                                         |
-|-----------------------------------------------------------|--------------|-----------------|----------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------|
+|-----------------------------------------------------------------|-----------------|-----------------|----------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------|
 | [SeaweedFS](packaging/alpine/local/seaweedfs/README.md)         | `seaweedfs`     | `4.48`          | Binary repackaging of official upstream release tarballs | Ships current SeaweedFS features with Alpine OpenRC role splits.                                                |
 | [GreptimeDB](packaging/alpine/local/greptimedb/README.md)       | `greptimedb`    | `1.2.1`         | Source build from upstream release                       | Provides a current GreptimeDB build and component OpenRC packages before it is available from Alpine community. |
-| [LavinMQ](packaging/alpine/local/lavinmq/README.md)       | `lavinmq`    | `2.10.1`        | Source build from upstream release                       | Provides a current LavinMQ build on Alpine 3.24 with matching Crystal support.                                  |
+| [LavinMQ](packaging/alpine/local/lavinmq/README.md)             | `lavinmq`       | `2.10.3`        | Source build from upstream release                       | Provides a current LavinMQ build on Alpine 3.24 with matching Crystal support.                                  |
 | [Gitea](packaging/alpine/local/gitea/README.md)                 | `gitea`         | `28.2.0`        | Binary repackaging of official upstream release binaries | Ships current Gitea releases with the expected Alpine runtime layout and OpenRC service.                        |
 | [Apache NiFi](packaging/alpine/local/nifi/README.md)            | `nifi`          | `2.12.0`        | Binary repackaging of the official Standard distribution | Provides Apache NiFi 2 with a secure default configuration and OpenRC service.                                  |
-| [Apache NiFi Registry](packaging/alpine/local/nifi-registry/README.md)      | `nifi-registry`       | `2.12.0`        | Binary repackaging of the official Standard distribution | Provides Apache NiFi Registry 2 with a secure default configuration and OpenRC service.                                  |
 | [rclone OpenRC](packaging/alpine/local/rclone-openrc/README.md) | `rclone-openrc` | `0.1.0`         | OpenRC integration for Alpine's rclone package           | Provides reusable, instance-capable OpenRC supervision for rclone commands.                                     |
 
 ## Use In Production

packaging/alpine/local/gitea/APKBUILD

@@ -1,7 +1,7 @@
 # Maintainer: Joachim Schlöffel <joachim.schloeffel@financial-service-plus.de>
 pkgname=gitea
 pkgver=28.2.0
-pkgrel=0
+pkgrel=1
 pkgdesc="Self-hosted Git service written in Go"
 url="https://about.gitea.com/"
 arch="x86_64 aarch64"

packaging/alpine/local/lavinmq/APKBUILD

@@ -1,6 +1,6 @@
 # Maintainer: Joachim Schlöffel <joachim.schloeffel@financial-service-plus.de>
 pkgname=lavinmq
-pkgver=2.10.2
+pkgver=2.10.3
 pkgrel=1
 pkgdesc="High-performance AMQP and MQTT message queue server"
 url="https://github.com/cloudamqp/lavinmq"
@@ -82,9 +82,9 @@ _logrotate() {
 }
 
 sha512sums="
-35757407adb6fdd6378c65cde229471bd362b6a7fdc13279658312ef8a7304c0557619a1394a0b4cf33ef25ffb6c039f65c217f2af37bf12fc01b73d84e55e69  lavinmq-2.10.2.tar.gz
+f61036f58271558685c38fea06ae32c07239160e271926b4dd52d9f8bbb3047d3cd7904572723e59269d09deff610f498ff325efaa0cefd22b2567c77c8ea05a  lavinmq-2.10.3.tar.gz
-d0dfdd5c0e474024f57deb9e31c76e3f176e798c8d21dea53d3aea1b05436bd03fa34e69ccddf322bc89adedce5f379df5a316cddbbdfe12520e5bf672ad8228  lavinmq-2.10.2-shards.tar.gz
+d0dfdd5c0e474024f57deb9e31c76e3f176e798c8d21dea53d3aea1b05436bd03fa34e69ccddf322bc89adedce5f379df5a316cddbbdfe12520e5bf672ad8228  lavinmq-2.10.3-shards.tar.gz
-ae3cea2534b211abbcbd1e4fcb6da73dfaf383a19aef1c45f367cba77492cc20a7ce8283fc42f26c0a023149114c369bed307fb8cde0b8f27fba61165092e986  lavinmq-2.10.2-assets.tar.gz
+ae3cea2534b211abbcbd1e4fcb6da73dfaf383a19aef1c45f367cba77492cc20a7ce8283fc42f26c0a023149114c369bed307fb8cde0b8f27fba61165092e986  lavinmq-2.10.3-assets.tar.gz
 62a609d50f28db960098c4c84ce4f1dad78413366a9a9aca18fe321114d687be3bf7b71924d4ace69bd74383c5ac40d2ee09ae0eef9c1bfe653b97448e42e110  lavinmq.confd
 1853196e70297b5c4a2207fde50df735620cf6d99c4994644fd676bffaf863d67300ad7ae771c4bbb86fce1a0485c2a7968cf912c5f5bb878e08b15e5a28ba1b  lavinmq.initd
 9999dd6a96bd29a3d0bda1b2110af940b15acf1250a0f3ba6c93d16bd62063ab1c1dfa4c237da99bbb401150517abde59e2c7275f4b72c3eb7c90e1ce61d43b9  lavinmq.logrotate

packaging/alpine/local/nifi-registry/APKBUILD

@@ -1,72 +0,0 @@
-# Maintainer: Joachim Schlöffel <joachim.schloeffel@financial-service-plus.de>
-pkgname=nifi-registry
-pkgver=2.12.0
-pkgrel=0
-pkgdesc="Central registry for shared NiFi and MiNiFi resources"
-url="https://nifi.apache.org/registry.html"
-arch="x86_64 aarch64"
-license="Apache-2.0"
-depends="openjdk21-jre-headless"
-makedepends="unzip"
-install="$pkgname.pre-install"
-pkgusers="nifi-registry"
-pkggroups="nifi-registry"
-subpackages="
-	$pkgname-openrc:_openrc:noarch
-	"
-options="!check !strip !tracedeps"
-source="
-	$pkgname-$pkgver-bin.zip::https://dlcdn.apache.org/nifi/$pkgver/nifi-registry-$pkgver-bin.zip
-	nifi-registry.confd
-	nifi-registry.initd
-	nifi-registry.wrapper
-	"
-
-package() {
-	local _dir
-
-	install -d "$pkgdir"/usr/lib/nifi-registry "$pkgdir"/etc/nifi-registry
-	cp -a "$builddir"/. "$pkgdir"/usr/lib/nifi-registry/
-	chmod -R a+rX "$pkgdir"/usr/lib/nifi-registry
-	install -d "$pkgdir"/usr/lib/nifi-registry/docs
-
-	cp -a "$pkgdir"/usr/lib/nifi-registry/conf/. "$pkgdir"/etc/nifi-registry/
-	rm -r "$pkgdir"/usr/lib/nifi-registry/conf
-	ln -s /etc/nifi-registry "$pkgdir"/usr/lib/nifi-registry/conf
-
-	install -d -m 0750 -o nifi-registry -g nifi-registry \
-		"$pkgdir"/var/lib/nifi-registry
-	for _dir in database extension_bundles flow_storage work; do
-		install -d -m 0750 -o nifi-registry -g nifi-registry \
-			"$pkgdir"/var/lib/nifi-registry/$_dir
-		ln -s /var/lib/nifi-registry/$_dir \
-			"$pkgdir"/usr/lib/nifi-registry/$_dir
-	done
-	install -d -m 0750 -o nifi-registry -g nifi-registry \
-		"$pkgdir"/var/log/nifi-registry
-	ln -s /var/log/nifi-registry "$pkgdir"/usr/lib/nifi-registry/logs
-	ln -s /run/nifi-registry "$pkgdir"/usr/lib/nifi-registry/run
-
-	chown -R nifi-registry:nifi-registry "$pkgdir"/etc/nifi-registry
-	chmod 0750 "$pkgdir"/etc/nifi-registry
-
-	install -Dm755 "$srcdir"/nifi-registry.wrapper \
-		"$pkgdir"/usr/bin/nifi-registry
-}
-
-_openrc() {
-	pkgdesc="$pkgdesc (OpenRC service)"
-	depends="$pkgname=$pkgver-r$pkgrel openrc"
-
-	install -Dm755 "$srcdir"/nifi-registry.initd \
-		"$subpkgdir"/etc/init.d/nifi-registry
-	install -Dm644 "$srcdir"/nifi-registry.confd \
-		"$subpkgdir"/etc/conf.d/nifi-registry
-}
-
-sha512sums="
-f4410a082f264175bd2f2c8b3366ac61636f1736d8fb3685cee20d8076509ed05f413dfffaaa3ca9a2b1ba49ab510bb006c9ccc9decef0332906a13f8fb9e52b  nifi-registry-2.12.0-bin.zip
-61d8f644a0a2f87b8d6d4ef9820d4195ee4fbaaa7da6ddba347197d4202a983a82b4f376a0ddb5c80c247d7af9d5b26d7890db325e3d124c5025b41cbd19c319  nifi-registry.confd
-87116490a925d9e3133d1561baa06727bcd22637332d7ac35a7e7e8921427a68dc1b52d1560c733b5f8bd38d5ba9e82868dd9fd74d91e13efaa65b764d4b1936  nifi-registry.initd
-1efcb07dbc83f4f1a3e138a16d142ffd825097ef7e209383129b2bc02266f277edc3973143bcc7498982359cffd829d999c9b944acc5860059396a2dd5112950  nifi-registry.wrapper
-"

packaging/alpine/local/nifi-registry/README.md

@@ -1,42 +0,0 @@
-# Apache NiFi Registry Alpine Package
-
-Repackages Apache NiFi Registry 2.12.0 for Alpine. The package requires Java
-21 and preserves the upstream default: an unsecured HTTP service listening on
-port 18080. Configure TLS and authentication before exposing it to an
-untrusted network.
-
-## Install
-
-```sh
-apk add nifi-registry nifi-registry-openrc
-rc-update add nifi-registry default
-rc-service nifi-registry start
-```
-
-Open `http://127.0.0.1:18080/nifi-registry/`.
-
-## Runtime Layout
-
-```text
-/usr/bin/nifi-registry       Administration command wrapper
-/usr/lib/nifi-registry       NiFi Registry binaries and bundled extensions
-/etc/nifi-registry           Mutable configuration and authorization state
-/var/lib/nifi-registry       Database, flow, extension, and work files
-/var/log/nifi-registry       Application logs
-/etc/conf.d/nifi-registry    OpenRC account defaults
-/etc/init.d/nifi-registry    OpenRC service
-```
-
-Edit `/etc/nifi-registry/nifi-registry.properties` to configure HTTPS, TLS,
-authentication, and the listening address. Registry has been deprecated
-upstream in favor of NiFi's Git-based Flow Registry clients, but remains
-available through the NiFi 2.x series.
-
-## Package Commands
-
-```sh
-ALPINE_PACKAGE=nifi-registry mise run apk:checksum
-ALPINE_PACKAGE=nifi-registry mise run apk:build
-ALPINE_PACKAGE=nifi-registry SKIP_BUILD=1 mise run apk:test-install
-ALPINE_PACKAGE=nifi-registry mise run apk:runtime-test
-```

packaging/alpine/local/nifi-registry/nifi-registry.confd

@@ -1,3 +0,0 @@
-# Defaults for Apache NiFi Registry.
-NIFI_REGISTRY_USER="nifi-registry"
-NIFI_REGISTRY_GROUP="nifi-registry"

packaging/alpine/local/nifi-registry/nifi-registry.initd

@@ -1,26 +0,0 @@
-#!/sbin/openrc-run
-
-description="Apache NiFi Registry service"
-
-supervisor=supervise-daemon
-name=nifi-registry
-command="/usr/lib/nifi-registry/bin/nifi-registry.sh"
-command_args="run"
-command_user="${NIFI_REGISTRY_USER:-nifi-registry}:${NIFI_REGISTRY_GROUP:-nifi-registry}"
-directory="/usr/lib/nifi-registry"
-pidfile="/run/nifi-registry/nifi-registry.pid"
-supervise_daemon_args="--chdir /usr/lib/nifi-registry --env HOME=/var/lib/nifi-registry --pidfile ${pidfile}"
-
-depend() {
-	need net
-	use dns logger
-}
-
-start_pre() {
-	local service_owner="${NIFI_REGISTRY_USER:-nifi-registry}:${NIFI_REGISTRY_GROUP:-nifi-registry}"
-
-	checkpath -d -m 0750 -o "$service_owner" \
-		/run/nifi-registry \
-		/var/lib/nifi-registry \
-		/var/log/nifi-registry
-}

packaging/alpine/local/nifi-registry/nifi-registry.pre-install

@@ -1,7 +0,0 @@
-#!/bin/sh
-
-addgroup -S nifi-registry 2>/dev/null
-adduser -S -D -H -h /var/lib/nifi-registry -s /sbin/nologin \
-	-G nifi-registry -g nifi-registry nifi-registry 2>/dev/null
-
-exit 0

packaging/alpine/local/nifi-registry/nifi-registry.wrapper

@@ -1,3 +0,0 @@
-#!/bin/sh
-
-exec /usr/lib/nifi-registry/bin/nifi-registry.sh "$@"

packaging/alpine/local/nifi-registry/scripts/runtime-test.sh

@@ -1,32 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-apk add nifi-registry nifi-registry-openrc curl
-
-test -x /usr/bin/nifi-registry
-test -x /usr/lib/nifi-registry/bin/nifi-registry.sh
-test -d /etc/nifi-registry
-test -L /usr/lib/nifi-registry/conf
-test "$(readlink /usr/lib/nifi-registry/conf)" = /etc/nifi-registry
-test -d /var/lib/nifi-registry
-test -d /var/log/nifi-registry
-test -f /etc/init.d/nifi-registry
-test -f /etc/conf.d/nifi-registry
-test -f /usr/lib/nifi-registry/README
-test -d /usr/lib/nifi-registry/docs
-test "$(stat -c '%U:%G %a' /var/lib/nifi-registry)" = "nifi-registry:nifi-registry 750"
-
-rc-update add nifi-registry default || true
-test -L /etc/runlevels/default/nifi-registry
-rc-service nifi-registry start
-
-for _attempt in $(seq 1 300); do
-	if curl --fail --silent --show-error http://localhost:18080/nifi-registry/ >/dev/null; then
-		break
-	fi
-	sleep 1
-done
-
-curl --fail --silent --show-error http://localhost:18080/nifi-registry/ >/dev/null
-rc-service nifi-registry status
-rc-service nifi-registry stop

packaging/alpine/local/nifi-registry/scripts/test-install.sh

@@ -1,40 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-repo_root="${REPO_ROOT:-$(cd "$(dirname "${BASH_SOURCE[0]}")/../../../../.." && pwd)}"
-# shellcheck source=scripts/apk/test-install-lib.sh
-. "${repo_root}/scripts/apk/test-install-lib.sh"
-
-apk_test_install_run "${repo_root}" "${PACKAGE_NAME:-nifi-registry}" "${PACKAGE_VERSION:-2.12.0-r0}" <<'SCRIPT'
-    set -e
-
-    if [ -n "${ALPINE_REPOSITORY_URL}" ]; then
-      if [ -n "${ALPINE_REPOSITORY_KEY_URL}" ]; then
-        apk add --no-cache curl >/dev/null
-        cd /etc/apk/keys
-        curl -fsSLOJ "${ALPINE_REPOSITORY_KEY_URL}"
-      fi
-      printf "%s\n" "${ALPINE_REPOSITORY_URL}" >> /etc/apk/repositories
-    else
-      cp "/repo/${ALPINE_ARCH}"/*.rsa.pub /etc/apk/keys/
-      printf "%s\n" /repo >> /etc/apk/repositories
-    fi
-    apk update
-    apk add "${PACKAGE_NAME}" "${PACKAGE_NAME}-openrc"
-
-    test -x /usr/bin/nifi-registry
-    test -x /usr/lib/nifi-registry/bin/nifi-registry.sh
-    test -d /etc/nifi-registry
-    test -L /usr/lib/nifi-registry/conf
-    test "$(readlink /usr/lib/nifi-registry/conf)" = /etc/nifi-registry
-    test -d /var/lib/nifi-registry
-    test -d /var/log/nifi-registry
-    test -f /etc/init.d/nifi-registry
-    test -f /etc/conf.d/nifi-registry
-    test -f /usr/lib/nifi-registry/README
-	    test -d /usr/lib/nifi-registry/docs
-    test "$(stat -c '%U:%G %a' /var/lib/nifi-registry)" = "nifi-registry:nifi-registry 750"
-
-    rc-update add nifi-registry default
-    test -L /etc/runlevels/default/nifi-registry
-SCRIPT

packaging/alpine/local/nifi-registry/update-check.conf

@@ -1,3 +0,0 @@
-provider="github"
-repo="apache/nifi"
-version_prefix="rel/nifi-"

packaging/alpine/local/nifi/APKBUILD

@@ -1,7 +1,7 @@
 # Maintainer: Joachim Schlöffel <joachim.schloeffel@financial-service-plus.de>
 pkgname=nifi
 pkgver=2.12.0
-pkgrel=1
+pkgrel=2
 pkgdesc="Reliable system for processing and distributing data"
 url="https://nifi.apache.org/"
 arch="x86_64 aarch64"

scripts/apk/Dockerfile

@@ -4,7 +4,9 @@ FROM alpine:${ALPINE_VERSION}
 ARG BUILDER_UID=1000
 ARG BUILDER_GID=1000
 
-RUN printf '%s\n' 'https://dl-cdn.alpinelinux.org/alpine/edge/community' \
+RUN printf '%s\n' \
+    'https://dl-cdn.alpinelinux.org/alpine/edge/main' \
+    'https://dl-cdn.alpinelinux.org/alpine/edge/community' \
     >> /etc/apk/repositories
 
 RUN apk add --no-cache \

scripts/apk/publish-gitea.sh

@@ -51,6 +51,7 @@ if [[ "${#apks[@]}" -eq 0 ]]; then
 fi
 
 declare -A expected_apks=()
+declare -A package_names=()
 while IFS= read -r package_dir; do
   apk_validate_package_dir "${package_dir}"
   for arch in ${arches}; do
@@ -61,6 +62,10 @@ while IFS= read -r package_dir; do
     while IFS= read -r apk_name; do
       expected_apks["${package_root}/${arch}/${apk_name}"]=1
     done < <(apk_package_apk_names "${package_dir}" "${arch}")
+
+    while IFS= read -r package_version; do
+      package_names["${package_version%%=*}"]=1
+    done < <(apk_package_versioned_names "${package_dir}" "${arch}")
   done
 done < <(apk_all_package_dirs "${repo_root}")
 
@@ -116,3 +121,32 @@ for apk in "${current_apks[@]}"; do
       ;;
   esac
 done
+
+# Alpine's repository path groups registry files, but does not associate package
+# records with the Gitea code repository. Link each package explicitly so it is
+# visible from the repository's Packages tab as well as the owner package list.
+for package_name in "${!package_names[@]}"; do
+  link_url="${instance_url}/api/v1/packages/${owner}/alpine/${package_name}/-/link/${repository}"
+  status="$(
+    curl --silent --show-error --location \
+      --request POST \
+      --user "${user}:${token}" \
+      --write-out '%{http_code}' \
+      --output /tmp/gitea-apk-link-response \
+      "${link_url}"
+  )"
+
+  case "${status}" in
+    201)
+      printf 'linked to repository: %s\n' "${package_name}"
+      ;;
+    409)
+      printf 'already linked to repository: %s\n' "${package_name}"
+      ;;
+    *)
+      printf 'repository link failed for %s: HTTP %s\n' "${package_name}" "${status}" >&2
+      cat /tmp/gitea-apk-link-response >&2
+      exit 1
+      ;;
+  esac
+done