Alpine Linux - User contributions [en]

Docker

2023-08-01T13:12:42Z

Besen: add info about cgroups v2

== Installation ==

The Docker package is in the 'Community' repository. See [[Repositories]] how to add a repository.

apk add docker

Connecting to the Docker daemon through its socket requires you to add yourself to the `docker` group.

addgroup username docker

To start the Docker daemon at boot, see [[Alpine_Linux_Init_System]].

rc-update add docker default
service docker start

=== Docker rootless ===

Docker rootless allows unprivileged users to run the docker daemon and docker containers in user namespaces. This is not the same as dockremap explained in the section below. With dockremap the daemon still runs as root.

This requires the <code>docker-rootless-extras</code> package (available in <code>community</code>) and enabling <code>cgroups v2</code>:
edit /etc/rc.conf and set rc_cgroup_mode to unified. Then start the service on boot:

rc-update add cgroups

Additionally, the <code>/etc/subuid</code> and <code>/etc/subgid</code> files need to be set up as explained in [https://docs.docker.com/engine/security/rootless/ the official documentation].

=== Docker Compose ===

'docker-compose' is in the 'Community' repository starting with Alpine Linux 3.10.

apk add docker-compose

== Isolate containers with a user namespace ==
<pre>
adduser -SDHs /sbin/nologin dockremap
addgroup -S dockremap
echo dockremap:$(cat /etc/passwd|grep dockremap|cut -d: -f3):65536 >> /etc/subuid
echo dockremap:$(cat /etc/passwd|grep dockremap|cut -d: -f4):65536 >> /etc/subgid
</pre>

add to '''/etc/docker/daemon.json'''

<pre>
{
"userns-remap": "dockremap"
}
</pre>

''You may also consider these options : '''
"experimental": false,
"live-restore": true,
"ipv6": false,
"icc": false,
"no-new-privileges": false'''''

You'll find all possible configurations here[https://docs.docker.com/engine/reference/commandline/dockerd/#daemon-configuration-file].

== Example: How to install docker from Arch ==

https://wiki.archlinux.org/index.php/Docker

== "WARNING: No {swap,memory} limit support" ==

You might encounter this message when executing <code>docker info</code>.
To correct this situation, we have to enable the <code>cgroup_enable=memory swapaccount=1</code>

==== Alpine 3.8 ====
It may not have been the case before, but with Alpine 3.8, you must config cgroups properly

'''''Warning''''': This seems ''not'' to work with Alpine 3.9 and Docker 18.06. Follow the instructions for grub or extlinux below instead.

<pre>echo "cgroup /sys/fs/cgroup cgroup defaults 0 0" >> /etc/fstab</pre>
<pre>
cat >> /etc/cgconfig.conf <<EOF
mount {
cpuacct = /cgroup/cpuacct;
memory = /cgroup/memory;
devices = /cgroup/devices;
freezer = /cgroup/freezer;
net_cls = /cgroup/net_cls;
blkio = /cgroup/blkio;
cpuset = /cgroup/cpuset;
cpu = /cgroup/cpu;
}
EOF
</pre>

=== Grub ===
If you use Grub, add the cgroup condition into <code>/etc/default/grub</code>, then upgrade your grub

<pre>GRUB_CMDLINE_LINUX_DEFAULT="... cgroup_enable=memory swapaccount=1"</pre>

=== Extlinux ===
With Extlinux, you add the cgroup condition, but inside of <code>/etc/update-extlinux.conf</code>

<pre>default_kernel_opts="... cgroup_enable=memory swapaccount=1"</pre>

then update the config and reboot

<code>update-extlinux</code>

== How to use docker ==

The best documentation on using Docker and creating containers is at the [https://docs.docker.com/ official docker site]. Adding anything to it here would be redundant.

If you create an account at docker.com, you can browse through user images and learn from the syntax in contributed dockerfiles.

Official Docker image files are denoted on the website by a blue ribbon.

== See also ==
* [https://www.erianna.com/creating-a-alpine-linux-repository/ Creating and Hosting an Alpine Linux Package Repository for Docker Packages]
* [[Running Alpine in a Docker Container]]

[[Category:Virtualization]]

Docker

2023-08-01T11:59:11Z

Besen: explain difference between rootless and dockremap

== Installation ==

The Docker package is in the 'Community' repository. See [[Repositories]] how to add a repository.

apk add docker

Connecting to the Docker daemon through its socket requires you to add yourself to the `docker` group.

addgroup username docker

To start the Docker daemon at boot, see [[Alpine_Linux_Init_System]].

rc-update add docker default
service docker start

=== Docker rootless ===

Docker rootless allows unprivileged users to run the docker daemon and docker containers in user namespaces. This is not the same as dockremap explained in the section below. With dockremap the daemon still runs as root.

This requires the <code>docker-rootless-extras</code> package (available in <code>community</code>) and enabling the <code>cgroups</code> service:

rc-update add cgroups

Additionally, the <code>/etc/subuid</code> and <code>/etc/subgid</code> files need to be set up as explained in [https://docs.docker.com/engine/security/rootless/ the official documentation].

=== Docker Compose ===

'docker-compose' is in the 'Community' repository starting with Alpine Linux 3.10.

apk add docker-compose

== Isolate containers with a user namespace ==
<pre>
adduser -SDHs /sbin/nologin dockremap
addgroup -S dockremap
echo dockremap:$(cat /etc/passwd|grep dockremap|cut -d: -f3):65536 >> /etc/subuid
echo dockremap:$(cat /etc/passwd|grep dockremap|cut -d: -f4):65536 >> /etc/subgid
</pre>

add to '''/etc/docker/daemon.json'''

<pre>
{
"userns-remap": "dockremap"
}
</pre>

''You may also consider these options : '''
"experimental": false,
"live-restore": true,
"ipv6": false,
"icc": false,
"no-new-privileges": false'''''

You'll find all possible configurations here[https://docs.docker.com/engine/reference/commandline/dockerd/#daemon-configuration-file].

== Example: How to install docker from Arch ==

https://wiki.archlinux.org/index.php/Docker

== "WARNING: No {swap,memory} limit support" ==

You might encounter this message when executing <code>docker info</code>.
To correct this situation, we have to enable the <code>cgroup_enable=memory swapaccount=1</code>

==== Alpine 3.8 ====
It may not have been the case before, but with Alpine 3.8, you must config cgroups properly

'''''Warning''''': This seems ''not'' to work with Alpine 3.9 and Docker 18.06. Follow the instructions for grub or extlinux below instead.

<pre>echo "cgroup /sys/fs/cgroup cgroup defaults 0 0" >> /etc/fstab</pre>
<pre>
cat >> /etc/cgconfig.conf <<EOF
mount {
cpuacct = /cgroup/cpuacct;
memory = /cgroup/memory;
devices = /cgroup/devices;
freezer = /cgroup/freezer;
net_cls = /cgroup/net_cls;
blkio = /cgroup/blkio;
cpuset = /cgroup/cpuset;
cpu = /cgroup/cpu;
}
EOF
</pre>

=== Grub ===
If you use Grub, add the cgroup condition into <code>/etc/default/grub</code>, then upgrade your grub

<pre>GRUB_CMDLINE_LINUX_DEFAULT="... cgroup_enable=memory swapaccount=1"</pre>

=== Extlinux ===
With Extlinux, you add the cgroup condition, but inside of <code>/etc/update-extlinux.conf</code>

<pre>default_kernel_opts="... cgroup_enable=memory swapaccount=1"</pre>

then update the config and reboot

<code>update-extlinux</code>

== How to use docker ==

The best documentation on using Docker and creating containers is at the [https://docs.docker.com/ official docker site]. Adding anything to it here would be redundant.

If you create an account at docker.com, you can browse through user images and learn from the syntax in contributed dockerfiles.

Official Docker image files are denoted on the website by a blue ribbon.

== See also ==
* [https://www.erianna.com/creating-a-alpine-linux-repository/ Creating and Hosting an Alpine Linux Package Repository for Docker Packages]
* [[Running Alpine in a Docker Container]]

[[Category:Virtualization]]

Docker

2023-07-13T08:45:37Z

Besen:

== Installation ==

The Docker package is in the 'Community' repository. See [[Repositories]] how to add a repository.

apk add docker

Connecting to the Docker daemon through its socket requires you to add yourself to the `docker` group.

addgroup username docker

To start the Docker daemon at boot, see [[Alpine_Linux_Init_System]].

rc-update add docker default
service docker start

=== Docker rootless ===

Docker rootless allows unprivileged users to run the docker daemon and docker containers in user namespaces.

This requires the <code>docker-rootless-extras</code> package (available in <code>community</code>) and enabling the <code>cgroups</code> service:

rc-update add cgroups

Additionally, the <code>/etc/subuid</code> and <code>/etc/subgid</code> files need to be set up as explained in [https://docs.docker.com/engine/security/rootless/ the official documentation].

=== Docker Compose ===

'docker-compose' is in the 'Community' repository starting with Alpine Linux 3.10.

apk add docker-compose

== Isolate containers with a user namespace ==
<pre>
adduser -SDHs /sbin/nologin dockremap
addgroup -S dockremap
echo dockremap:$(cat /etc/passwd|grep dockremap|cut -d: -f3):65536 >> /etc/subuid
echo dockremap:$(cat /etc/passwd|grep dockremap|cut -d: -f4):65536 >> /etc/subgid
</pre>

add to '''/etc/docker/daemon.json'''

<pre>
{
"userns-remap": "dockremap"
}
</pre>

''You may also consider these options : '''
"experimental": false,
"live-restore": true,
"ipv6": false,
"icc": false,
"no-new-privileges": false'''''

You'll find all possible configurations here[https://docs.docker.com/engine/reference/commandline/dockerd/#daemon-configuration-file].

== Example: How to install docker from Arch ==

https://wiki.archlinux.org/index.php/Docker

== "WARNING: No {swap,memory} limit support" ==

You might encounter this message when executing <code>docker info</code>.
To correct this situation, we have to enable the <code>cgroup_enable=memory swapaccount=1</code>

==== Alpine 3.8 ====
It may not have been the case before, but with Alpine 3.8, you must config cgroups properly

'''''Warning''''': This seems ''not'' to work with Alpine 3.9 and Docker 18.06. Follow the instructions for grub or extlinux below instead.

<pre>echo "cgroup /sys/fs/cgroup cgroup defaults 0 0" >> /etc/fstab</pre>
<pre>
cat >> /etc/cgconfig.conf <<EOF
mount {
cpuacct = /cgroup/cpuacct;
memory = /cgroup/memory;
devices = /cgroup/devices;
freezer = /cgroup/freezer;
net_cls = /cgroup/net_cls;
blkio = /cgroup/blkio;
cpuset = /cgroup/cpuset;
cpu = /cgroup/cpu;
}
EOF
</pre>

=== Grub ===
If you use Grub, add the cgroup condition into <code>/etc/default/grub</code>, then upgrade your grub

<pre>GRUB_CMDLINE_LINUX_DEFAULT="... cgroup_enable=memory swapaccount=1"</pre>

=== Extlinux ===
With Extlinux, you add the cgroup condition, but inside of <code>/etc/update-extlinux.conf</code>

<pre>default_kernel_opts="... cgroup_enable=memory swapaccount=1"</pre>

then update the config and reboot

<code>update-extlinux</code>

== How to use docker ==

The best documentation on using Docker and creating containers is at the [http://docs.docker.com/ official docker site]. Adding anything to it here would be redundant.

If you create an account at docker.com, you can browse through user images and learn from the syntax in contributed dockerfiles.

Official Docker image files are denoted on the website by a blue ribbon.

== See also ==
* [https://www.erianna.com/creating-a-alpine-linux-repository/ Creating and Hosting an Alpine Linux Package Repository for Docker Packages]
* [[Running Alpine in a Docker Container]]

[[Category:Virtualization]]

Docker

2023-07-11T13:42:14Z

Besen:

== Installation ==

The Docker package is in the 'Community' repository. See [[Repositories]] how to add a repository.

apk add docker

Connecting to the Docker daemon through its socket requires you to add yourself to the `docker` group.

addgroup username docker

To start the Docker daemon at boot, see [[Alpine_Linux_Init_System]].

rc-update add docker default
service docker start

=== Docker rootless ===

Docker rootless allows unprivileged users to run the docker daemon and docker containers in user namespaces.

This requires the <code>docker-rootless-extras</code> package (available in <code>testing</code>) and enabling the <code>cgroups</code> service:

rc-update add cgroups

Additionally, the <code>/etc/subuid</code> and <code>/etc/subgid</code> files need to be set up as explained in [https://docs.docker.com/engine/security/rootless/ the official documentation].

=== Docker Compose ===

'docker-compose' is in the 'Community' repository starting with Alpine Linux 3.10.

apk add docker-compose

== Isolate containers with a user namespace ==
<pre>
adduser -SDHs /sbin/nologin dockremap
addgroup -S dockremap
echo dockremap:$(cat /etc/passwd|grep dockremap|cut -d: -f3):65536 >> /etc/subuid
echo dockremap:$(cat /etc/passwd|grep dockremap|cut -d: -f4):65536 >> /etc/subgid
</pre>

add to '''/etc/docker/daemon.json'''

<pre>
{
"userns-remap": "dockremap"
}
</pre>

''You may also consider these options : '''
"experimental": false,
"live-restore": true,
"ipv6": false,
"icc": false,
"no-new-privileges": false'''''

You'll find all possible configurations here[https://docs.docker.com/engine/reference/commandline/dockerd/#daemon-configuration-file].

== Example: How to install docker from Arch ==

https://wiki.archlinux.org/index.php/Docker

== "WARNING: No {swap,memory} limit support" ==

You might encounter this message when executing <code>docker info</code>.
To correct this situation, we have to enable the <code>cgroup_enable=memory swapaccount=1</code>

==== Alpine 3.8 ====
It may not have been the case before, but with Alpine 3.8, you must config cgroups properly

'''''Warning''''': This seems ''not'' to work with Alpine 3.9 and Docker 18.06. Follow the instructions for grub or extlinux below instead.

<pre>echo "cgroup /sys/fs/cgroup cgroup defaults 0 0" >> /etc/fstab</pre>
<pre>
cat >> /etc/cgconfig.conf <<EOF
mount {
cpuacct = /cgroup/cpuacct;
memory = /cgroup/memory;
devices = /cgroup/devices;
freezer = /cgroup/freezer;
net_cls = /cgroup/net_cls;
blkio = /cgroup/blkio;
cpuset = /cgroup/cpuset;
cpu = /cgroup/cpu;
}
EOF
</pre>

=== Grub ===
If you use Grub, add the cgroup condition into <code>/etc/default/grub</code>, then upgrade your grub

<pre>GRUB_CMDLINE_LINUX_DEFAULT="... cgroup_enable=memory swapaccount=1"</pre>

=== Extlinux ===
With Extlinux, you add the cgroup condition, but inside of <code>/etc/update-extlinux.conf</code>

<pre>default_kernel_opts="... cgroup_enable=memory swapaccount=1"</pre>

then update the config and reboot

<code>update-extlinux</code>

== How to use docker ==

The best documentation on using Docker and creating containers is at the [http://docs.docker.com/ official docker site]. Adding anything to it here would be redundant.

If you create an account at docker.com, you can browse through user images and learn from the syntax in contributed dockerfiles.

Official Docker image files are denoted on the website by a blue ribbon.

== See also ==
* [https://www.erianna.com/creating-a-alpine-linux-repository/ Creating and Hosting an Alpine Linux Package Repository for Docker Packages]
* [[Running Alpine in a Docker Container]]

[[Category:Virtualization]]

Docker

2023-07-11T13:40:54Z

Besen: clarify that docker-rootless-extras is only available in testing

== Installation ==

The Docker package is in the 'Community' repository. See [[Repositories]] how to add a repository.

apk add docker

Connecting to the Docker daemon through its socket requires you to add yourself to the `docker` group.

addgroup username docker

To start the Docker daemon at boot, see [[Alpine_Linux_Init_System]].

rc-update add docker default
service docker start

=== Docker rootless ===

Docker rootless allows unprivileged users to run the docker daemon and docker containers in user namespaces.

This requires the <code>docker-rootless-extras</code> package (available in <code>[testing]</code> and enabling the <code>cgroups</code> service:

rc-update add cgroups

Additionally, the <code>/etc/subuid</code> and <code>/etc/subgid</code> files need to be set up as explained in [https://docs.docker.com/engine/security/rootless/ the official documentation].

=== Docker Compose ===

'docker-compose' is in the 'Community' repository starting with Alpine Linux 3.10.

apk add docker-compose

== Isolate containers with a user namespace ==
<pre>
adduser -SDHs /sbin/nologin dockremap
addgroup -S dockremap
echo dockremap:$(cat /etc/passwd|grep dockremap|cut -d: -f3):65536 >> /etc/subuid
echo dockremap:$(cat /etc/passwd|grep dockremap|cut -d: -f4):65536 >> /etc/subgid
</pre>

add to '''/etc/docker/daemon.json'''

<pre>
{
"userns-remap": "dockremap"
}
</pre>

''You may also consider these options : '''
"experimental": false,
"live-restore": true,
"ipv6": false,
"icc": false,
"no-new-privileges": false'''''

You'll find all possible configurations here[https://docs.docker.com/engine/reference/commandline/dockerd/#daemon-configuration-file].

== Example: How to install docker from Arch ==

https://wiki.archlinux.org/index.php/Docker

== "WARNING: No {swap,memory} limit support" ==

You might encounter this message when executing <code>docker info</code>.
To correct this situation, we have to enable the <code>cgroup_enable=memory swapaccount=1</code>

==== Alpine 3.8 ====
It may not have been the case before, but with Alpine 3.8, you must config cgroups properly

'''''Warning''''': This seems ''not'' to work with Alpine 3.9 and Docker 18.06. Follow the instructions for grub or extlinux below instead.

<pre>echo "cgroup /sys/fs/cgroup cgroup defaults 0 0" >> /etc/fstab</pre>
<pre>
cat >> /etc/cgconfig.conf <<EOF
mount {
cpuacct = /cgroup/cpuacct;
memory = /cgroup/memory;
devices = /cgroup/devices;
freezer = /cgroup/freezer;
net_cls = /cgroup/net_cls;
blkio = /cgroup/blkio;
cpuset = /cgroup/cpuset;
cpu = /cgroup/cpu;
}
EOF
</pre>

=== Grub ===
If you use Grub, add the cgroup condition into <code>/etc/default/grub</code>, then upgrade your grub

<pre>GRUB_CMDLINE_LINUX_DEFAULT="... cgroup_enable=memory swapaccount=1"</pre>

=== Extlinux ===
With Extlinux, you add the cgroup condition, but inside of <code>/etc/update-extlinux.conf</code>

<pre>default_kernel_opts="... cgroup_enable=memory swapaccount=1"</pre>

then update the config and reboot

<code>update-extlinux</code>

== How to use docker ==

The best documentation on using Docker and creating containers is at the [http://docs.docker.com/ official docker site]. Adding anything to it here would be redundant.

If you create an account at docker.com, you can browse through user images and learn from the syntax in contributed dockerfiles.

Official Docker image files are denoted on the website by a blue ribbon.

== See also ==
* [https://www.erianna.com/creating-a-alpine-linux-repository/ Creating and Hosting an Alpine Linux Package Repository for Docker Packages]
* [[Running Alpine in a Docker Container]]

[[Category:Virtualization]]

Alpine Package Keeper

2022-02-03T19:01:19Z

Besen:

{{TOC right}}

Because Alpine Linux is designed to run from RAM, package management involves two phases:
* Installing / Upgrading / Deleting packages on a running system.
* Restoring a system to a previously configured state (e.g. after reboot), including all previously installed packages and locally modified configuration files. '''(RAM-Based Installs Only)'''
<br />
'''apk''' is the tool used to install, upgrade, or delete software on a running system.<br />
'''lbu''' is the tool used to capture the data necessary to restore a system to a previously configured state.

This page documents the [https://git.alpinelinux.org/apk-tools/ apk tool] - See the [[Alpine_local_backup|Alpine Local Backup page]] for the lbu tool.

= Overview =

The '''apk''' tool supports the following operations:

{|
| [[#Add a Package|add]]
| Add new packages or upgrade packages to the running system
|-
| [[#Remove a Package|del]]
| Delete packages from the running system
|-
| fix
| Attempt to repair or upgrade an installed package
|-
| [[#Update the Package list|update]]
| Update the index of available packages
|-
| [[#Information on Packages|info]]
| Prints information about installed or available packages
|-
| [[#Search for Packages|search]]
| Search for packages or descriptions with wildcard patterns
|-
| [[#Upgrade a Running System|upgrade]]
| Upgrade the currently installed packages
|-
| [[#Cache maintenance|cache]]
| Maintenance operations for locally cached package repository
|-
| version
| Compare version differences between installed and available packages
|-
| index
| create a repository index from a list of packages
|-
| fetch
| download (but not install) packages
|-
| audit
| List changes to the file system from pristine package install state
|-
| verify
| Verify a package signature
|-
| dot
| Create a [http://graphviz.org/ graphviz] graph description for a given package
|-
| [[#apk_policy|policy]]
| Display the repository that updates a given package, plus repositories that also offer the package
|-
| stats
| Display statistics, including number of packages installed and available, number of directories and files, etc.
|-
| manifest
| Display checksums for files contained in a given package
|}

= Packages and Repositories =

Software packages for Alpine Linux are digitally signed tar.gz archives containing programs, configuration files, and dependency metadata. They have the extension <code>.apk</code>, and are often called "a-packs".

The packages are stored in one or more ''repositories''. A repository is simply a directory with a collection of *.apk files. The directory must include a special index file, named {{Path|APKINDEX.tar.gz}} to be considered a repository.

The '''apk''' utility can install packages from multiple repositories. The list of repositories to check is stored in {{Path|/etc/apk/repositories}}, one repository per line. If you booted from a USB stick ({{Path|/media/sda1}}) or CD-ROM ({{Path|/media/cdrom}}), your repository file probably looks something like this:

{{Cat|/etc/apk/repositories|/media/sda1/apks/}}

In addition to local repositories, the '''apk''' utility uses '''busybox wget''' to fetch packages using ''http:'', ''https:'' or ''ftp:'' protocols. The following is a valid repository file:

{{Cat|/etc/apk/repositories|
/media/sda1/apks
http://dl-3.alpinelinux.org/alpine/v2.6/main
https://dl-3.alpinelinux.org/alpine/v2.6/main
ftp://dl-3.alpinelinux.org/alpine/v2.6/main
}}

{{Note| A list of public repositories is in [https://mirrors.alpinelinux.org/ mirrors.alpinelinux.org]. Accepted protocols vary.}}

== Repository pinning ==

You can specify additional "tagged" repositories in {{Path|/etc/apk/repositories}}:

{{Cat|/etc/apk/repositories|
http://nl.alpinelinux.org/alpine/v3.7/main
http://nl.alpinelinux.org/alpine/v3.7/community
@edge http://nl.alpinelinux.org/alpine/edge/main
@edgecommunity http://nl.alpinelinux.org/alpine/edge/community
@testing http://nl.alpinelinux.org/alpine/edge/testing
}}

After which you can "pin" dependencies to these tags using:

{{cmd|apk add stableapp newapp@edge bleedingapp@testing}}

Apk will now by default only use the untagged repositories, but adding a tag to specific package:

1. will prefer the repository with that tag for the named package, even if a later version of the package is available in another repository

2. ''allows'' pulling in dependencies for the tagged package from the tagged repository (though it ''prefers'' to use untagged repositories to satisfy dependencies if possible)

== Commandline repository options ==

By default, the '''apk''' utility will use the system repositories for all operations. This behavior can be overridden by the following options:

{|
| --repositories-file REPOFILE
| Override the system repositories by specifying a repositories file.
|-
| <nowiki>-X|--repository REPO</nowiki>
| Specify a supplemental repository that will be used in addition to the system repositories. This option can be provided multiple times.
|}

= Update the Package list =

Remote repositories change as packages are added and upgraded. To get the latest list of available packages, use the ''update'' command. The command downloads the {{Path|APKINDEX.tar.gz}} from each repository and stores it in the local cache, typically {{Path|/var/cache/apk/}}, {{Path|/var/lib/apk/}} or {{Path|/etc/apk/cache/}}.

{{Cmd|apk update}}



Adding the <code>--update-cache</code>, or for short <code>-U</code> switch to another apk command, as in <code>apk --update-cache upgrade</code> or <code>apk -U add ...</code>, the command has the same effect as first running <code>apk update</code> before the other apk command.

{{Tip|With remote repositories, it is a good idea to always do an '''update''' right '''before''' doing an '''upgrade or add''' command. That way the command will install the latest available packages.}}

= Add a Package =

Use '''add''' to install packages from a repository. Any necessary dependencies are also installed. If you have multiple repositories, the '''add''' command installs the newest package.

{{Cmd|apk add openssh
apk add openssh openntp vim}}

If you only have the main repository enabled in your configuration, apk will not include packages from the other repositories. To install a package from the edge/testing repository without changing your repository configuration file, use the command below. This will tell apk to use that particular repository.

{{cmd|apk add cherokee --update-cache --repository http://dl-cdn.alpinelinux.org/alpine/edge/testing/ --allow-untrusted}}

{{Note|Be careful when using third-party or the testing repository. Your system can go down.}}

= Add a local Package =

To install a locally available apk package, for example if this device has no internet access but you can upload apk packages directly to it, use the '''--allow-untrusted''' flag:

{{cmd|apk add --allow-untrusted /path/to/file.apk}}

Note that multiple packages can be given. When installing a local package, all dependencies should also be specified. For example:

{{cmd|apk add --allow-untrusted /var/tig-2.2-r0.apk /var/git-2.11.1-20.apk}}

= Remove a Package =
Use '''del''' to remove a package (and dependencies that are no longer needed.)

{{cmd|apk del openssh
apk del openssh openntp vim}}

= Upgrade a Running System =

=== Packages in general ===

To get the latest security upgrades and bugfixes available for the ''installed'' packages of a running system, first '''update''' the list of available packages and then '''upgrade''' the installed packages:

{{cmd|apk update
apk upgrade
}}

Or, combining the same into one single command:

{{cmd|apk -U upgrade
}}

Here is an example, showing the procedure on a system that has several additional [[#Repository_pinning|repositories pinned]]:

# apk update
fetch <nowiki>http://dl-3.alpinelinux.org/alpine/v3.6/main/x86_64/APKINDEX.tar.gz</nowiki>
fetch <nowiki>http://dl-3.alpinelinux.org/alpine/v3.6/community/x86_64/APKINDEX.tar.gz</nowiki>
fetch <nowiki>http://dl-3.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz</nowiki>
fetch <nowiki>http://dl-3.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz</nowiki>
fetch <nowiki>http://dl-3.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz</nowiki>
v3.6.2-191-gf98d79930f <nowiki>[http://dl-3.alpinelinux.org/alpine/v3.6/main]</nowiki>
v3.6.2-190-ga5d68c47df <nowiki>[http://dl-3.alpinelinux.org/alpine/v3.6/community]</nowiki>
v3.6.0-4618-g0bf77c9821 <nowiki>[http://dl-3.alpinelinux.org/alpine/edge/main]</nowiki>
v3.6.0-4605-g85ed51dd83 <nowiki>[http://dl-3.alpinelinux.org/alpine/edge/community]</nowiki>
v3.6.0-4624-g11f1b9c8ab <nowiki>[http://dl-3.alpinelinux.org/alpine/edge/testing]</nowiki>
OK: 20118 distinct packages available

# apk upgrade
(1/2) Upgrading extra-cmake-modules@testing (5.38.0-r0 -> 5.39.0-r0)
(2/2) Upgrading extra-cmake-modules-doc@testing (5.38.0-r0 -> 5.39.0-r0)
Executing mdocml-apropos-1.14.1-r0.trigger
OK: 2635 MiB in 803 packages

To upgrade only ''specific'' packages, use the ''-u'' or ''--upgrade'' option of the '''add''' command:

{{cmd|apk update
apk add --upgrade busybox
}}

To enable unattended, automatic upgrades of packages, see the {{pkg|apk-autoupdate}} package.

To upgrade to a newer release, refer to the corresponding release notes and [[Upgrading_Alpine]].

=== Upgrading "diskless" and "data" disk mode installs ===

If booting a "diskless" system from a read-only device, or iso image on writable media, it's not possible to update the boot files (kernel, modules, firmware, ...) that reside on that device.

It becomes possible to update the boot files, though, if using a boot device that is writable and has been prepared with <code>[[Alpine_setup_scripts#setup-bootable|setup-bootable]]</code>.

However, even then, the kernel, with its modules and firmware files, can still not be updated directly through regular packages updates. Instead, there is the <code>update-kernel</code> script that can generate initfs images and install them together with upgraded kernels.

Upgrading can be done as follows.
{{cmd|apk add mkinitfs
}}
This package is required for the generation of the initial filesystem used during boot.
* Additional initfs features that are missing in the default configuration, like the [[Btrfs|btrfs]] filesystem support (at the time of writing, to allow loading .apkovl configs and package cache during boot), may be enabled in <code>/etc/mkinitfs/mkinitfs.conf</code>.
* Available initfs features may be listed with <code>ls /etc/mkinitfs/features.d</code>
{{cmd|ls /etc/mkinitfs/features.d
apk add nano
nano /etc/mkinitfs/mkinitfs.conf
lbu commit
}}
Finally update the kernel and its boot environment.
{{cmd|update-kernel /media/sdXY/boot/
}}
* An <code>update-kernel</code> run needs at least 8 GB free ram memory to avoid a broken modloop-image.
* See <code>update-kernel --help</code> for options to manually add additional module or firmware packages.

= Search for Packages =
The '''search''' command searches the repository Index files for installable packages.

The return format is '''Package'''-'''Version'''. Omit '''Version''' for ''apk add '''Package'''''

Examples:
* To list all packages available, along with their descriptions: {{cmd|apk search -v}}
* To list all packages are part of the ACF system: {{cmd|apk search -v 'acf*' }}
* To list all packages that list NTP as part of their description, use the ''-d'' or ''--description'' option: {{cmd|apk search -v --description 'NTP' }}

= Information on Packages =

== apk info ==

The '''info''' command provides information on the contents of packages, their dependencies, and which files belong to a package.

For a given package, each element can be chosen (for example, ''-w'' to show just the webpage information), or all information displayed with the ''-a'' command.

Example: {{cmd|apk info -a zlib}}

'''zlib-1.2.5-r1 description:'''
A compression/decompression Library

'''zlib-1.2.5-r1 webpage:'''
<nowiki>http://zlib.net</nowiki>

'''zlib-1.2.5-r1 installed size:'''
94208

'''zlib-1.2.5-r1 depends on:'''
libc0.9.32

'''zlib-1.2.5-r1 is required by:'''
libcrypto1.0-1.0.0-r0
apk-tools-2.0.2-r4
openssh-client-5.4_p1-r2
openssh-5.4_p1-r2
libssl1.0-1.0.0-r0
freeswitch-1.0.6-r6
atop-1.25-r0

'''zlib-1.2.5-r1 contains:'''
lib/libz.so.1.2.5
lib/libz.so.1
lib/libz.so

'''zlib-1.2.5-r1 triggers:'''

As shown in the example you can determine
* The '''description''' of the package (''-d'' or ''--description'')
* The '''webpage''' where the application is hosted (''-w'' or ''--webpage'')
* The '''size''' the package will require once installed (in bytes) (''-s'' or ''--size'')
* What packages are required to use this one ('''depends''') (''-R'' or ''--depends'')
* What packages require this one to be installed ('''required by''') (''-r'' or ''--rdepends'')
* The '''contents''' of the package, that is, which files it installs (''-L'' or ''--contents'')
* Any '''triggers''' this package sets. (''-t'' or ''--triggers'') Listed here are directories that are watched; if a change happens to the directory, then the trigger script is run at the end of the apk add/delete. For example, doing a depmod once after installing all packages that add kernel modules.

{{Tip|The '''info''' command is also useful to determine which package a file belongs to. For example: {{cmd|apk info --who-owns /sbin/lbu}} will display

/sbin/lbu is owned by alpine-conf-x.x-rx
}}

=== Listing installed packages ===

To list all installed packages, use:

<pre>apk info</pre>

To list all installed packages in alphabetical order, with a description of each, do:

<pre>apk -vv info|sort</pre>

The apk tool does not have a subcommand to list manually-installed packages that do not have reverse dependencies. To get this information on a traditional system that is not using [[Alpine local backup|lbu]], try this script. Note that this approach will also list core packages like alpine-base that should not be removed.

<pre>#!/bin/sh
apk info | grep -ve '-doc$' | sort | while read pkg
do
rdep=`apk info -qr "$pkg"`
[ -z "$rdep" ] && echo $pkg
done</pre>

== apk policy ==

To display the repository a package was installed from and will be updated from, plus any [[#Repository_pinning|tagged]] or enabled repositories where it is also offered, if any, for this architecture - its '''policy''':

apk policy ''package''

For example:
<pre>
$ apk policy vlc
vlc policy:
2.2.6-r1:
lib/apk/db/installed
http://dl-3.alpinelinux.org/alpine/v3.7/community
3.0.0_rc2-r1:
@edgecommunity http://dl-3.alpinelinux.org/alpine/edge/community
</pre>

= Additional apk Commands =
In progress...

= Local Cache =

{{:Local_APK_cache}}

= Advanced APK Usage =

== Holding a specific package back ==

In certain cases, you may want to upgrade a system, but keep a specific package at a back level. It is possible to add "sticky" or versioned dependencies. For instance, to hold the ''asterisk'' package to the 1.6.2 level or lower:
{{cmd|1=apk add asterisk=1.6.0.21-r0}}
or
{{cmd|apk add 'asterisk<1.6.1'}}

after which a {{cmd|apk upgrade}}

will upgrade the entire system, keeping the asterisk package at the 1.6.0 or lower level

To later upgrade to the current version,

{{cmd|apk add 'asterisk>1.6.1'}}

will ensure that 1.6.1 is the minimum version used.

You can also use "fuzzy" version matching to pin the version to a major/minor release. For example:

{{cmd|1=apk add 'asterisk=~1.6'}}

will match any version of asterisk that starts with 1.6 (such as 1.6.0.21-r0 or 1.6.9.31-r9) <ref>[https://git.alpinelinux.org/apk-tools/commit/?id=693b4bcdb0f22904a521a7c8ac4f13e697dc4d71 Alpine source commit message]</ref>

If you desire deterministic, repeatable package installation (such as with containerized environments) via package pinning, it is important to understand your package repo's version retention rules. For example, most Alpine package repos contain an "edge" branch, which may drop package versions that are not deemed fit to make it into a stable branch. This means that pinning to a version on the edge branch may stop working after the package version is revoked from the repo. Always pin to a package version that is intended for your current Alpine Linux version.

<br>

= Table of comparison with other Linux/Unix-like OSes for packages =

{| class="wikitable"
|-
! OS !! File Format !! Tools
|-
| Alpine || .apk || apk
|-
| Debian || .deb || apt, aptitude, dpkg
|-
| Gentoo || .tbz2 || emerge
|-
| FreeBSD || .txz || pkg
|}

<br>

= Troubleshooting =

== "apk-tools is old" ==

'''apk update''', '''apk upgrade''' or '''apk add''' may report the following:
WARNING: This apk-tools is OLD! Some packages might not function properly

This may happen if you are running Alpine Linux stable version with a certain edge/main, edge/community or testing package(s) also installed. One resolution is to consider upgrading {{pkg|apk-tools}}. If edge is already [https://wiki.alpinelinux.org/wiki/Alpine_Linux_package_management#Repository_pinning tagged] in your repositories, then try:

<pre>apk add --upgrade apk-tools@edge</pre>

== ERROR: UNTRUSTED signature ==

This happens when the release version changes. You need to update you apk keys.

<pre>apk fix --allow-untrusted alpine-keys</pre>

= External Links =
* [https://www.cyberciti.biz/faq/10-alpine-linux-apk-command-examples/ 10 Alpine Linux apk Command Examples] Vivek Gite 2019

[[Category:Package Manager]]

Configure a Wireguard interface (wg)

2019-11-23T15:52:03Z

Besen:

Wireguard is a very promising VPN technology and available since Alpine 3.10 in the community repository.

apk add wireguard-vanilla (or wireguard-virt)

The official documents from wireguard will show examples of how to setup an interface with the use of wg-quick.
In this howto we are not going to use this utility but are going to use plain wg command and busybox ifupdown.

apk add wireguard-tools-wg

Now that you have all the tools installed we can setup the interface.
The setup of your interface config is out of the scope of this document, you should consult the [https://git.zx2c4.com/WireGuard/about/src/tools/man/wg.8 manual page of wg].

After you have finished setting up your wgX interface config you can add it to your /etc/network/interfaces:

auto wg0
iface wg0 inet static
address x.x.x.x
netmask 255.255.255.0
pre-up ip link add dev wg0 type wireguard
pre-up wg setconf wg0 /etc/wireguard/wg0.conf
post-up ip route add x.x.x.x/24 dev wg0
post-down ip link delete dev wg0

This config will do:

* bring the wireguard interface up
* assign a config to this interface (which you have previously created)
* setup the interface address and netmask
* add the route ones the interface is up
* remove the interface when it goes down

To start the interface and stop it you can execute:

ifup wg0
ifdown wg0

[[Category:Networking]]