From d51ff30b2422f5e2498193fd1f69bcafe02d2436 Mon Sep 17 00:00:00 2001 From: Donatas Abraitis Date: Fri, 14 Jun 2024 11:37:23 +0300 Subject: [PATCH 1/2] docker: Set ABUILD_APK_INDEX_OPTS for libyang In build() stage of abuild, it does `apk index ...` where libyang* packages are unsigned. We don't sign them here, and thus we need to specify `--allow-untrusted`. Signed-off-by: Donatas Abraitis --- docker/alpine/libyang/APKBUILD | 1 + 1 file changed, 1 insertion(+) diff --git a/docker/alpine/libyang/APKBUILD b/docker/alpine/libyang/APKBUILD index 04e943fe48f7..e903f9a9c2be 100755 --- a/docker/alpine/libyang/APKBUILD +++ b/docker/alpine/libyang/APKBUILD @@ -21,6 +21,7 @@ source="$pkgname-$pkgver.tar.gz::https://github.com/CESNET/libyang/archive/v$pkg # - CVE-2021-28906 build() { + export ABUILD_APK_INDEX_OPTS="--allow-untrusted" if [ "$CBUILD" != "$CHOST" ]; then CMAKE_CROSSOPTS="-DCMAKE_SYSTEM_NAME=Linux -DCMAKE_HOST_SYSTEM_NAME=Linux" fi From a421c98617423e79e172b158392f5b59ceee35a3 Mon Sep 17 00:00:00 2001 From: Donatas Abraitis Date: Fri, 14 Jun 2024 16:33:32 +0300 Subject: [PATCH 2/2] docker: Set ABUILD_APK_INDEX_OPTS for frr build In build() stage of abuild, it does `apk index ...` where frr* packages are unsigned. We don't sign them here, and thus we need to specify `--allow-untrusted`. Signed-off-by: Donatas Abraitis --- alpine/APKBUILD.in | 2 ++ 1 file changed, 2 insertions(+) diff --git a/alpine/APKBUILD.in b/alpine/APKBUILD.in index 9a29ff3a9636..fcb6cfae10c0 100644 --- a/alpine/APKBUILD.in +++ b/alpine/APKBUILD.in @@ -34,6 +34,8 @@ _localstatedir=/var/run/frr _user=frr build() { + export ABUILD_APK_INDEX_OPTS="--allow-untrusted" + cd "$builddir" ./configure \