Alpine Linux - User contributions [en]

Release Notes for Alpine 3.23.0

2025-12-02T04:25:48Z

Bratkartoffel: Add OpenJDK25

As always, make sure to read [[Upgrading Alpine to a new major release]] when upgrading to a new release.

If you experience any issues with the upgrade, please let us know and file an issue in our repositories.

== Important changes ==

=== {{pkg|apk-tools}} v3 ===

After 5 years of development in the <code>master</code> branch of apk-tools, apk v3 is now ready for Alpine v3.23.0. This should be a safe and seamless upgrade from apk v2, but might has some breaking changes if you use <code>libapk</code>.

Note that we will only transition the package manager to v3, but will keep the v2 index and package format. We plan to move to the v3 index and package format after Alpine v3.23.

For more information, take a look at the release notes of apk v3: TODO

=== /usr merge ===

New installations can opt-in to being /usr-merged, by setting the <code>BOOTSTRAP_USR_MERGED</code> environment variable to <code>1</code> before running <code>setup-disk</code>. Manual migration is also possible by installing the <code>merge-usr</code> package and running its binary as root. For more details see the [https://alpinelinux.org/posts/2025-10-01-usr-merge.html official announcement].

=== {{Pkg|linux-stable}} replaces {{Pkg|linux-edge}} ===

For years, {{Pkg|linux-lts}} and {{Pkg|linux-edge}} grew apart and developed their own kernel configs, different architectures, etc.

Now {{Pkg|linux-edge}} gets replaced with {{Pkg|linux-stable}} which has the identical configuration as {{Pkg|linux-lts}}, but follows the stable releases instead of the long-term releases (see https://kernel.org/).

If you had {{Pkg|linux-edge}} installed, apk automatically installs {{Pkg|linux-stable}} as a replacement. There is a reasonably amount of kernel config differences, if you need a config option that existed previously in {{Pkg|linux-edge}}, please open a issue to add the required option to {{Pkg|linux-lts}}. Also this change might involve manual boot loader configuration, as the kernel has been renamed and follows {{Pkg|linux-lts}}' packaging recipe.

== Significant changes ==

=== Static binaries are built as PIE ===

{{Note|TODO: https://gitlab.alpinelinux.org/alpine/aports/-/issues/17294#note_524739}}

=== LLVM metapackage ===

{{Note|TODO}}

=== nftrules ===

{{Note|TODO: https://gitlab.alpinelinux.org/alpine/aports/-/merge_requests/67137}}

=== curl HTTP/3 ===

{{Note|TODO: https://gitlab.alpinelinux.org/alpine/aports/-/merge_requests/89382}}

== Note-worthy updates ==

As always, many packages were upgraded. Make sure to read the individual release notes of the projects you use.

* BIRD 3.1.4
* busybox 1.37.0
* Deno 2.3.1
* ffmpeg 8
* GCC 15.2.0
* GNOME 49
* Go 1.25
* ISC BIND 9.20.16
* ISC Kea 3.0.3
* KDE Plasma 6.5.2
* Linux 6.18
* LLVM 21.1.2
* LXQt 2.30
* .NET 10
* nginx 1.28
* NodeJS 24.11.1 (LTS)
* OpenJDK 25
* PHP 8.5.0
* Qt 6.10
* Ruby 3.4.7
* Rust 1.91.1
* wlroots 0.19
* zigbee2mqtt 2.6.3

=== GCC 15 ===

=== LLVM 21 ===

=== ifupdown-ng 0.13 ===

{{Note|TODO}}

=== GNOME 49 ===

https://release.gnome.org/49/

* We kept gnome-session (and gdm) at 48 because of the [https://release.gnome.org/49/developers/index.html#stronger-systemd-dependencies stricter systemd dependency] ({{Issue|17514}})
* Our gdk-pixbuf didn't enable the glycin sandboxing library yet ({{Issue|17550}})

=== ffmpeg 8 ===

The {{Pkg|ffmpeg}} package got upgraded from version 6 to 8.

Most consumers of ffmpeg are now built against ffmpeg 8, but some packages might still use ffmpeg 6 or 7, depending on its API compatability. Therefore the {{Pkg|ffmpeg6}} and {{Pkg|ffmpeg7}} packages are also still available.

Also note that {{Pkg|ffmpeg4}} got removed and all consumers were migrated to at least ffmpeg 6.

=== ifstate 2 ===

The declarative network configuration tool {{Pkg|ifstate}} has been upgraded from version 1.x to version 2. It is not possible to use the old configuration file of ifstate 1.x with ifstate 2.x! The configuration file '''must''' be adapted to the new schema and file name to prevent breaking the host's network the next time it is booted! More information about the required config changes can be found in the [https://ifstate.net/2.2/docs/upgrades/#ifstate-20 ifstate documentation].

== Significant removals ==



=== More Qt5 removals ===

{{Note|TODO}}

=== ffmpeg4 ===

{{Note|TODO}}

=== LLVM 17 ===

=== rssh ===

rssh package has been removed due to the dead upstream.

=== ircservices ===

unmaintained upstream for years

<hr><center>[[Release Notes for Alpine 3.22.0|← Previous page: Release Notes for Alpine 3.22.0]]</center>

Release Notes for Alpine 3.19.0

2023-11-21T07:57:05Z

Bratkartoffel: Add Java 21

== Base System ==

=== iptables-nft ===

The <code>/sbin/iptables{,-save,-restore}</code> symlinks now point to xtables-nft-multi instead of xtables-legacy-multi. This means they use the nftables kernel backend instead of the legacy iptables one.

Since the new iptables- binaries also don't use the iptables backend, to work with any existing rules and save them, you need to install {{pkg|iptables-legacy}} and use <code>iptables-legacy-save</code>.

Because mixing backends is not supported, you should reboot your system if you have to use the iptables commands after upgrading.

=== netns ===

The OpenRC package contains a patch to make it possible to start most services in netns namespaces. See also [[Netns|netns]].

== Others ==

=== HashiCorp packages ===

Due to the relicensing of HashiCorp software to BUSL-1.1 (a non-Open-Source license) ([https://www.hashicorp.com/blog/hashicorp-adopts-business-source-license link]), [https://www.vaultproject.io/ Vault] was removed from Alpine.

Other packages ({{pkg|consul}}, {{pkg|nomad}}, {{pkg|packer}}, {{pkg|terraform}}) might be affected as well.

=== Java 21 ===

The latest LTS java release, openjdk21, is now available in the community repository.

[[Category:News]]

Release Notes for Alpine 3.15.0

2021-10-31T11:39:41Z

Bratkartoffel:

== aports ==

=== QtWebKit was removed due to lack of upstream support ===

qt5-qtwebkit, kdewebkit, wkhtmltopdf, and py3-pdfkit have been removed due to known vulnerabilities and lack of upstream support for qtwebkit. Other programs have been adjusted to use qt5-qtwebengine where appropriate. The most direct replacement for wkhtmltopdf is weasyprint, which is available in the Alpine Linux community repository. puppeteer and pandoc are also options, depending on your needs. See [https://gitlab.alpinelinux.org/alpine/aports/-/issues/12888 #12888] for more information.

=== radvd no longer enables ipv6 forwarding ===

The radvd init script no longer enables ipv6 forwarding. To enable ipv6 forwarding (necessary for most networks), add <code>net.ipv6.conf.all.forwarding=1</code> to {{path|/etc/sysctl.conf}} or to a file in {{path|/etc/sysctl.d}}.

=== New package signing keys ===

New signing keys have been generated for v3.15 ongoing. The key size has been increased from 2048 bits to 4096 bits. Make sure you have <code>alpine-keys-2.4-r0</code> or later before upgrading to 3.15 (or downgrading from edge).

=== Ruby 3.0 ===

Ruby has been upgraded to version 3.0.

=== LLVM12 added ===

LLVM12 is now available.

=== KDE ===

KDE Plasma has been upgraded to version 5.23, and KDE Applications have been upgraded to 21.08.
Plasma Mobile Gear has been upgraded to 21.10.

=== Node.js ===

Node.js (LTS) has been upgraded to version 16.13.0. nodejs-current has been upgraded to 17.0.1.

=== PHP ===

PHP 7.4 started to phase out (1 year of security support left).
Transition to 8.0 is not finished yet as some app still require old version.

=== Postgresql 14 ===

Postgresql has been upgraded to version 14.0.

=== Mercurial ===

mercurial has been upgraded to 5.9.3

=== MIPS64 discontinued ===

The build hardware we use for building the packages is broken and the architecture is EOL, so there is no new hardware available anymore. As a consequence, there will be no v3.15 release for mips64, and existing releases can no longer receive security updates, so continued use of this architecture is not recommended.

=== Dlang build tools (DMD, DUB, LDC) have been updated ===

Both compilers have been updated to frontend version v2.098.0 (LDC equivalent: v1.28.0).
Dub has been updated to v1.27.0.
LDC now always uses `--export-dynamic` so that code compiled without debug infos (`-g`) will still have the function name in its stack trace.

=== OpenJDK 17 added ===

The latest OpenJDK LTS version (17) has been added to this release and is available via the community repository.

Release Notes for Alpine 3.13.0

2021-01-21T07:29:32Z

Bratkartoffel:

== aports ==

=== musl 1.2 ===

musl has been upgraded to 1.2. This release changes the definition of <code>time_t</code> on 32-bit systems. See the [https://musl.libc.org/time64.html musl time64 release notes] for more details.

==== time64 requirements ====

The following important information applies for users of x86, armv7, and armhf (currently supported 32-bit architectures), including 32-bit Docker containers on 64-bit hosts.

All self-compiled packages must be manually rebuilt after upgrading, even if relocation/SONAME errors are not encountered.

musl 1.2 uses new time64-compatible system calls. Due to [https://github.com/opencontainers/runc/issues/2151 runc issue 2151], these system calls incorrectly return EPERM instead of ENOSYS when invoked under a Docker or libseccomp version predating their release. Therefore, Alpine Linux 3.13.0 requires the host Docker to be version 19.03.9 (which contains backported [https://github.com/moby/moby/commit/89fabf0f241292e929fbb2fbb794d58d8d697ab5 moby commit 89fabf0]) or greater and the host libseccomp to be version 2.4.2 (which contains backported [https://github.com/seccomp/libseccomp/commit/bf747eb21e428c2b3ead6ebcca27951b681963a0 libseccomp commit bf747eb]) or greater, compiled against Linux UAPI headers 5.4 (which contain time64 syscall definitions) or greater. [https://github.com/docker/for-win/issues/8326 Docker for Windows issue 8326] tracks the process of updating libseccomp in Docker for Windows.

Therefore, the following platforms are not suitable as Docker hosts for 32-bit Alpine Linux 3.13.0, due to containing out-of-date libseccomp: Amazon Linux 1 or 2, CentOS 7 or 8, Debian stable without debian-backports, Raspbian stable, Ubuntu 14.04 or earlier, and Windows. This applies regardless of whether the Linux distribution Docker packages or separate Docker package repositories are used.

To check if your host libseccomp is time64-compatible, invoke <code>scmp_sys_resolver -a x86 clock_gettime64</code> for x86 containers, or <code>scmp_sys_resolver -a arm clock_gettime64</code> for armhf or armv7 containers. If 403 is returned, time64 is supported. If -10214 is returned, time64 is not supported. Note that Docker must still be at least version 19.03.9, regardless of the result of this command.

In order to run under old Docker or libseccomp versions, [https://github.com/moby/moby/blob/master/profiles/seccomp/default.json the moby default seccomp profile] should be downloaded and on line 2, <code>defaultAction</code> changed to <code>SCMP_ACT_TRACE</code>, then <code>--security-opt=seccomp=default.json</code> passed to <code>docker create</code> or <code>docker run</code>. This will cause the system calls to return ENOSYS instead of EPERM, allowing the container to fall back to 32-bit time system calls. In this case, the container will not be compatible with dates past 2038. Alternatively, <code>--security-opt=seccomp=unconfined</code> can be passed with no <code>default.json</code> required, but note that this will slightly decrease the security of the host against malicious code in the container.

=== Deprecation of Berkeley DB (BDB) ===

Oracle has changed the license of BDB to AGPL-3.0, making it unsuitable to link to packages with GPL-incompatible licenses. Since the old version is no longer maintained, the <code>db</code> package is now deprecated. Alpine Linux packages are being transitioned to alternatives or, where no alternatives exist, removed entirely.

Support for Postfix <code>hash</code> and <code>btree</code> databases has been removed. <code>lmdb</code> is the recommended replacement. Before upgrading, all tables in <code>/etc/postfix/main.cf</code> using <code>hash</code> and <code>btree</code> must be changed to a supported alternative. See the [http://www.postfix.org/DATABASE_README.html Postfix lookup table documentation] for more information.

=== Switching from busybox ifupdown to ifupdown-ng ===

The default ifupdown implementation has been switched from busybox to [https://github.com/ifupdown-ng/ifupdown-ng/ ifupdown-ng]. ifupdown-ng is intended to be compatible with debian ifupdown and busybox ifupdown, but all users of <code>/etc/network/interfaces</code> should read the [https://github.com/ifupdown-ng/ifupdown-ng/blob/master/README.md ifupdown-ng readme] and the [https://github.com/ifupdown-ng/ifupdown-ng/blob/master/doc/ADMIN-GUIDE.md ifupdown-ng admin guide] before upgrading.

ifupdown-ng has native vlan support, so the <code>vlan</code> package is no longer required and can be uninstalled. The <code>bridge</code> and <code>bond</code> packages are still required.

=== GCC 10 ===

GCC has been upgraded to version 10. GCC 10 sets the <code>-fno-common</code> option by default. All Alpine Linux packages have been fixed, but users compiling other software on Alpine Linux may need to make changes to their code. For more information, see the [https://gcc.gnu.org/gcc-10/porting_to.html GCC 10 porting guide].

=== PHP 8.0 ===

PHP 8.0 with a common set of extensions is now available as <code>php8</code>. PHP 7.4 (<code>php7</code>) remains the default.

=== xorg-server has moved to community ===

xorg-server and related packages have been moved from main to community. To install it, ensure {{Path|/etc/apk/repositories}} contains the community repository.

Running <code>setup-xorg-base</code> will automatically enable the community repo before installing xorg-server.

=== nextcloud updated from 18 to 20 ===

Comapred to 3.12, the nextcloud aport skipped version 19. As a direct upgrade from 18 to 20 is [https://docs.nextcloud.com/server/latest/admin_manual/maintenance/upgrade.html not supported] by nextcloud, the upgrade procedure is not as straight forward as usually.

# Take a note and remove all nextcloud-* aports
# Install corresponding the nextcloud19-* aports
# Run <code>occ upgrade</code> as any regular update
# Verify everything still works
# Remove the nextcloud19-* aports again
# Install the regular nextcloud-* aports again
# Run Steps 3 and 4 again
# The upgrade should now be finished

As the last step you should visit your administrator settings overview page and run any missing db-updates as shown (e.g. <code>db:add-missing-indices db:add-missing-primary-keys db:add-missing-columns db:convert-filecache-bigint</code>)

=== spamassassin ===
The configuration file found at <code>/etc/conf.d/spamd</code> has been moved from the <code>spamassassin</code> to the <code>spamassassin-openrc</code> package

== busybox ==

=== Removed applets ===

The following applets have been removed:

* '''hdparm''': Missing many features. Use <code>hdparm</code> instead.
* '''fdformat''': Rarely used. Use <code>util-linux</code> instead.
* '''readprofile''': Rarely used. Consider <code>perf</code> or use <code>util-linux</code> instead.
* '''lspci''': Missing many features, such as hwdb support. Use <code>pciutils</code> or <code>grep . /sys/bus/pci/devices/*/*</code> instead.
* '''conspy''': Rarely used.
* '''smemcap''': Rarely used.
* '''dumpleases''': Rarely used.

Alternatives for conspy, smemcap, and dumpleases are not currently packaged due to a lack of interest. If you require these programs, please file an issue at [https://gitlab.alpinelinux.org/alpine/aports/ Alpine GitLab].

=== Changes ===

The following applets now support long options:

* gzip
* install
* ipcalc

== apk-tools ==

=== Man page ===

apk-tools now has an official man-page: <code>apk-tools-docs</code>. If the <code>docs</code> package is installed, man pages will automatically be installed and updated for all installed packages.

Release Notes for Alpine 3.13.0

2021-01-19T11:42:21Z

Bratkartoffel:

== aports ==

=== musl 1.2 ===

musl has been upgraded to 1.2. This release changes the definition of <code>time_t</code> on 32-bit systems. See the [https://musl.libc.org/time64.html musl time64 release notes] for more details.

==== time64 requirements ====

The following important information applies for users of x86, armv7, and armhf (currently supported 32-bit architectures), including 32-bit Docker containers on 64-bit hosts.

All self-compiled packages must be manually rebuilt after upgrading, even if relocation/SONAME errors are not encountered.

musl 1.2 uses new time64-compatible system calls. Due to [https://github.com/opencontainers/runc/issues/2151 runc issue 2151], these system calls incorrectly return EPERM instead of ENOSYS when invoked under a Docker or libseccomp version predating their release. Therefore, Alpine Linux 3.13.0 requires the host Docker to be version 19.03.9 (which contains backported [https://github.com/moby/moby/commit/89fabf0f241292e929fbb2fbb794d58d8d697ab5 moby commit 89fabf0]) or greater and the host libseccomp to be version 2.4.2 (which contains backported [https://github.com/seccomp/libseccomp/commit/bf747eb21e428c2b3ead6ebcca27951b681963a0 libseccomp commit bf747eb]) or greater, compiled against Linux UAPI headers 5.4 (which contain time64 syscall definitions) or greater. [https://github.com/docker/for-win/issues/8326 Docker for Windows issue 8326] tracks the process of updating libseccomp in Docker for Windows.

Therefore, the following platforms are not suitable as Docker hosts for 32-bit Alpine Linux 3.13.0, due to containing out-of-date libseccomp: Amazon Linux 1 or 2, CentOS 7 or 8, Debian stable without debian-backports, Raspbian stable, Ubuntu 14.04 or earlier, and Windows. This applies regardless of whether the Linux distribution Docker packages or separate Docker package repositories are used.

To check if your host libseccomp is time64-compatible, invoke <code>scmp_sys_resolver -a x86 clock_gettime64</code> for x86 containers, or <code>scmp_sys_resolver -a arm clock_gettime64</code> for armhf or armv7 containers. If 403 is returned, time64 is supported. If -10214 is returned, time64 is not supported. Note that Docker must still be at least version 19.03.9, regardless of the result of this command.

In order to run under old Docker or libseccomp versions, [https://github.com/moby/moby/blob/master/profiles/seccomp/default.json the moby default seccomp profile] should be downloaded and on line 2, <code>defaultAction</code> changed to <code>SCMP_ACT_TRACE</code>, then <code>--security-opt=seccomp=default.json</code> passed to <code>docker create</code> or <code>docker run</code>. This will cause the system calls to return ENOSYS instead of EPERM, allowing the container to fall back to 32-bit time system calls. In this case, the container will not be compatible with dates past 2038. Alternatively, <code>--security-opt=seccomp=unconfined</code> can be passed with no <code>default.json</code> required, but note that this will slightly decrease the security of the host against malicious code in the container.

=== Deprecation of Berkeley DB (BDB) ===

Oracle has changed the license of BDB to AGPL-3.0, making it unsuitable to link to packages with GPL-incompatible licenses. Since the old version is no longer maintained, the <code>db</code> package is now deprecated. Alpine Linux packages are being transitioned to alternatives or, where no alternatives exist, removed entirely.

Support for Postfix <code>hash</code> and <code>btree</code> databases has been removed. <code>lmdb</code> is the recommended replacement. Before upgrading, all tables in <code>/etc/postfix/main.cf</code> using <code>hash</code> and <code>btree</code> must be changed to a supported alternative. See the [http://www.postfix.org/DATABASE_README.html Postfix lookup table documentation] for more information.

=== Switching from busybox ifupdown to ifupdown-ng ===

The default ifupdown implementation has been switched from busybox to [https://github.com/ifupdown-ng/ifupdown-ng/ ifupdown-ng]. ifupdown-ng is intended to be compatible with debian ifupdown and busybox ifupdown, but all users of <code>/etc/network/interfaces</code> should read the [https://github.com/ifupdown-ng/ifupdown-ng/blob/master/README.md ifupdown-ng readme] and the [https://github.com/ifupdown-ng/ifupdown-ng/blob/master/doc/ADMIN-GUIDE.md ifupdown-ng admin guide] before upgrading.

ifupdown-ng has native vlan support, so the <code>vlan</code> package is no longer required and can be uninstalled. The <code>bridge</code> and <code>bond</code> packages are still required.

=== GCC 10 ===

GCC has been upgraded to version 10. GCC 10 sets the <code>-fno-common</code> option by default. All Alpine Linux packages have been fixed, but users compiling other software on Alpine Linux may need to make changes to their code. For more information, see the [https://gcc.gnu.org/gcc-10/porting_to.html GCC 10 porting guide].

=== PHP 8.0 ===

PHP 8.0 with a common set of extensions is now available as <code>php8</code>. PHP 7.4 (<code>php7</code>) remains the default.

=== xorg-server has moved to community ===

xorg-server and related packages have been moved from main to community. To install it, ensure {{Path|/etc/apk/repositories}} contains the community repository.

Running <code>setup-xorg-base</code> will automatically enable the community repo before installing xorg-server.

=== nextcloud was updated from 18 to 20 ===

Comapred to 3.12, the nextcloud aport skipped version 19. As a direct upgrade from 18 to 20 is [https://docs.nextcloud.com/server/latest/admin_manual/maintenance/upgrade.html not supported] by nextcloud, the upgrade procedure is not as straight forward as usually.

# Take a note and remove all nextcloud-* aports
# Install corresponding the nextcloud19-* aports
# Run <code>occ upgrade</code> as any regular update
# Verify everything still works
# Remove the nextcloud19-* aports again
# Install the regular nextcloud-* aports again
# Run Steps 3 and 4 again
# The upgrade should now be finished

As the last step you should visit your administrator settings overview page and run any missing db-updates as shown (e.g. <code>db:add-missing-indices db:add-missing-primary-keys db:add-missing-columns db:convert-filecache-bigint</code>)

== busybox ==

=== Removed applets ===

The following applets have been removed:

* '''hdparm''': Missing many features. Use <code>hdparm</code> instead.
* '''fdformat''': Rarely used. Use <code>util-linux</code> instead.
* '''readprofile''': Rarely used. Consider <code>perf</code> or use <code>util-linux</code> instead.
* '''lspci''': Missing many features, such as hwdb support. Use <code>pciutils</code> or <code>grep . /sys/bus/pci/devices/*/*</code> instead.
* '''conspy''': Rarely used.
* '''smemcap''': Rarely used.
* '''dumpleases''': Rarely used.

Alternatives for conspy, smemcap, and dumpleases are not currently packaged due to a lack of interest. If you require these programs, please file an issue at [https://gitlab.alpinelinux.org/alpine/aports/ Alpine GitLab].

=== Changes ===

The following applets now support long options:

* gzip
* install
* ipcalc

== apk-tools ==

=== Man page ===

apk-tools now has an official man-page: <code>apk-tools-docs</code>. If the <code>docs</code> package is installed, man pages will automatically be installed and updated for all installed packages.