Repositories

From Alpine Linux
Revision as of 19:36, 26 July 2023 by Zcrayfish (talk | contribs) (→‎See also: Changed a hyperlink to https)

There are three repositories:

  • main packages are the software that have direct support and updates from the Alpine core and main team. They also have official special documentation, are always available for all releases and will have substitutions if some are not continued from upstream. Commonly these packages are selected due to their responsibility and stability with respect to upstream availability. Packages from community or (rarely) testing, that are accepted go to the main repository.
  • community packages are those made by users in team with the official developers and close to the Alpine package process. They are supported by those user(s) contributions and could end if the user(s) stops; they may also be removed in a future release due to lack of support by upstream authors. Packages from testing that are accepted go to the community repository.
  • testing packages are where new packages go. These are made by any contributor to Alpine. Testing has no release linked. The testing repository is only available on edge. Packages from testing that are accepted go to the community repository or (rarely) the main repository.

Managing repositories

The package repositories that apk uses to retrieve package files for installation are specified in file /etc/apk/repositories. Each line of this file specifies the location of a package repository, and optionally a tag. Lines that start with a hash character (#) are ignored.

The location may be an http:// or https:// URL, or the path to a directory on the local filesystem. A tagged repository is prefixed with the @tag specifier, followed by a space and the repository location.

The default will look something like:

Contents of /etc/apk/repositories

#/media/cdrom/apks http://dl-cdn.alpinelinux.org/alpine/v3.16/main http://dl-cdn.alpinelinux.org/alpine/v3.16/community

After making changes to /etc/apk/repositories you should update the package index using:

# apk update

Changing repositories to https

For better security you should probably change the url's from http to https. [1]

Note: Some Alpine Linux package mirrors may not support https. If that is the case, you will need to change mirrors or revert back. You can check if your mirror supports https on https://mirrors.alpinelinux.org

Avoid manually changing the repositories file for a new release

You can avoid having to manually update the version in /etc/apk/repositories for each Alpine Linux release by changing v3.16 to latest-stable.

Example:

Contents of /etc/apk/repositories

#/media/cdrom/apks https://dl-cdn.alpinelinux.org/alpine/latest-stable/main https://dl-cdn.alpinelinux.org/alpine/latest-stable/community #http://dl-cdn.alpinelinux.org/alpine/edge/main #http://dl-cdn.alpinelinux.org/alpine/edge/community #http://dl-cdn.alpinelinux.org/alpine/edge/testing
Warning: Changing the repositories to latest-stable may initiate unexpected release upgrades.


Release Branches

There are several release branches for Alpine Linux available at the same time. Each May and November we make a release branch from edge. The main repository is typically supported for 2 years and the community repository is supported until next stable release.

Security fixes beyond that can be made on request when there are patches available.

Main

main has a support cycle of 2 years. We also try to limit the amount of packages in main to only include base system packages, in base you can think of packages which are needed by other packages or are needed to setup a basic system. Packages in main must not have dependencies in other repositories.

Community

The community repository was introduced with Alpine Linux version 3.3.0. community has a maximum support cycle of 6 months. After that you will need to update to the new release to continue to have support.

Edge

edge is the name given to the current development tree of Alpine Linux. It consists of an APK repository called edge and contains the latest build of all available Alpine Linux packages. Those packages are updated on a regular basis.

Warning: edge is under constant development so be careful using it in production. It is possible that bugs in edge could cause data loss or could break your system.


End users should not use edge as their main day-to-day workstation or as a productive system. Because edge is a development branch, many changes are not heavily tested (or tested at all) and packages in edge can and sometimes do break without warning.

However, testing edge is a very valuable activity which helps the Alpine Linux development to ensure that the quality of the stable releases is high. Testing edge is a great way to contribute to the Alpine Linux development.

Upgrading to edge

An upgrade of Alpine Linux from a stable version to the rolling development version edge basically requires the same steps as Upgrading to latest release.

The crucial difference is, that when editing the /etc/apk/repositories file, all referenced repository versions (such as v3.2 or latest-stable) therein need to be pointing to edge.

When using edge branch, testing repository can be added if the packages that one needs are available only in testing repository.

Note: Remember that, packages in testing repository have no support.


Contents of /etc/apk/repositories

#/media/cdrom/apks http://dl-cdn.alpinelinux.org/alpine/edge/main http://dl-cdn.alpinelinux.org/alpine/edge/community http://dl-cdn.alpinelinux.org/alpine/edge/testing

After upgrading to edge, the currently installed edge version may be checked with

$ cat /etc/alpine-release

and referring to the build date that is attached to the release.

Warning: Do not enable stable and edge repos at the same time. This can break your system. Either use edge or stable. If you mix stable and edge repositories, you're on your own.


Testing

The testing repository was introduced with Alpine Linux edge development. No support (staging only) and only built for edge. If it stays here long enough it gets moved to unmaintained/purged (gets cleaned up every 6 months).

Before a package can move from testing to main or community, the following requirements must be met:

  1. Package must work correctly, including the init.d script (if provided) and default configuration.
  2. Packaging must be done correctly, with files installed in the right places, e.g. configs are in /etc/ and not in /usr/etc.
  3. Package dependencies are handled correctly. Abuild can (and should) autodetect shared libs, for example sqlite-libs provides so:libsqlite3.so.0. Any package linked to sqlite should have an automatically (by abuild) added depend=so:libsqlite3.so.0 and the user should not have to manually add a depend="sqlite-libs" in the APKBUILD.
  4. There is a maintainer who claims responsibility for the maintenance of the package and can help fix things if they break in the future.

Using the testing repository on stable branches

Warning: Only do this if you're 100% sure what you're doing! Installing packages from edge that link to something in main or community usually will not work. Alpine does not officially support mixing branches this way.


Edit the file /etc/apk/repositories and add (or uncomment) a line that points to the "testing" directory, while also tagging the repository, for example:

Contents of /etc/apk/repositories

https://dl-cdn.alpinelinux.org/alpine/v3.16/main https://dl-cdn.alpinelinux.org/alpine/v3.16/community @testing https://dl-cdn.alpinelinux.org/alpine/edge/testing

In that case, the tag is @testing, which allows you to pull packages from that repository without potentially messing up your install (too badly):

$ apk add wireguard-go@testing

See also