Skip to content

apko: publish -dev image variant, keep default tags minimal - #22440

Closed
falcorocks wants to merge 1 commit into
developfrom
falcorocks/apko-minimal-default-dev-variant
Closed

falcorocks wants to merge 1 commit into
developfrom
falcorocks/apko-minimal-default-dev-variant

Conversation

@falcorocks

@falcorocks falcorocks commented Aug 17, 2026 •

Copy link
Copy Markdown
Contributor

What

  • Move apk-tools out of the default apko/*.yaml configs into per-image apko/<svc>-dev.yaml overlays — each is a pure-YAML apko include: of the base plus apk-tools, so the base stays the single source of truth.
  • Declare apko_configs: [base, -dev] per image in .github/images.apko.json, publishing both the default tag (minimal) and a -dev tag (with apk-tools) to the same repo.
  • Thread apko-config + tag-suffix through build-images.apko.yaml and pin the factory reusable workflows to the release that supports apko_configs.

busybox stays in the default images.

Result

  • <image>:<tag> — minimal (no apk-tools, no apk DB)
  • <image>:<tag>-dev — includes apk-tools

No extra melange build legs: -dev variants reuse the same prebuilt APKs.

@falcorocks
falcorocks requested review from a team as code owners August 17, 2026 12:08
@falcorocks falcorocks self-assigned this Aug 17, 2026
Move apk-tools out of the default apko configs into per-image -dev
overlays that include the base config and add apk-tools. Default tags
now publish minimal images; a -dev tag carrying apk-tools is published
alongside, driven by an apko_configs list per image in the catalog.

Bump the factory pin to the revision that supports apko_configs
fan-out and the tag-suffix input. No extra melange build legs: -dev
variants reuse the same prebuilt APKs.
@falcorocks
falcorocks force-pushed the falcorocks/apko-minimal-default-dev-variant branch from 40d503c to ea4b5f0 Compare August 17, 2026 12:09
@falcorocks

Copy link
Copy Markdown
Contributor Author

Superseded by #22442, which strips the melange --package-metadata ELF note (.note.package) from the Rust binaries — the actual cause of the downstream multi-OS SBOM failure. Removing apk-tools / adding a -dev split does not address it. Closing in favor of #22442.

@falcorocks falcorocks closed this Aug 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants