busybox.yaml

package:
  name: busybox
  version: 1.36.1
  epoch: 6
  description: "swiss-army knife for embedded systems"
  copyright:
    - license: GPL-2.0-only
  dependencies:
    provider-priority: 10
  scriptlets:
    trigger:
      paths:
        - /bin
        - /sbin
        - /usr/bin
        - /usr/sbin
      script: |
        #!/bin/busybox sh
        /bin/busybox --install -s

environment:
  contents:
    packages:
      - build-base
      - busybox
      - ca-certificates-bundle

pipeline:
  - uses: fetch
    with:
      uri: https://distfiles.alpinelinux.org/distfiles/edge/busybox-${{package.version}}.tar.bz2
      expected-sha256: b8cc24c9574d809e7279c3be349795c5d5ceb6fdf19ca709f80cde50e47de314

  - uses: patch
    with:
      patches: CVE-2022-28391-1.patch

  - uses: patch
    with:
      patches: CVE-2022-28391-2.patch

  - name: Configure
    runs: |
      cp busyboxconfig .config

  - runs: |
      make CC="${{host.triplet.gnu}}-gcc" V=1 -j$(nproc)

  - name: Install
    runs: |
      mkdir -p "${{targets.destdir}}"/usr/sbin
      mkdir -p "${{targets.destdir}}"/usr/bin
      mkdir -p "${{targets.destdir}}"/tmp
      mkdir -p "${{targets.destdir}}"/var/cache/misc
      mkdir -p "${{targets.destdir}}"/bin
      mkdir -p "${{targets.destdir}}"/sbin
      mkdir -p "${{targets.destdir}}"/etc
      mkdir -p "${{targets.destdir}}"/usr/share/man/man1
      chmod 1777 "${{targets.destdir}}"/tmp
      install -m755 busybox "${{targets.destdir}}"/bin/busybox
      install -m644 securetty "${{targets.destdir}}"/etc/securetty

      mkdir -p "${{targets.destdir}}"/etc/busybox-paths.d
      ./busybox --list-path > "${{targets.destdir}}"/etc/busybox-paths.d/busybox

subpackages:
  - name: busybox-full
    dependencies:
      provides:
        - busybox=1.36.0-r4
      provider-priority: 5
    options:
      no-commands: true
    pipeline:
      - name: Configure
        runs: |
          cp busyboxconfig-full .config
      - runs: |
          make CC="${{host.triplet.gnu}}-gcc" V=1 -j$(nproc)
      - name: Install
        runs: |
          mkdir -p "${{targets.subpkgdir}}"/usr/sbin
          mkdir -p "${{targets.subpkgdir}}"/usr/bin
          mkdir -p "${{targets.subpkgdir}}"/tmp
          mkdir -p "${{targets.subpkgdir}}"/var/cache/misc
          mkdir -p "${{targets.subpkgdir}}"/bin
          mkdir -p "${{targets.subpkgdir}}"/sbin
          mkdir -p "${{targets.subpkgdir}}"/etc
          mkdir -p "${{targets.subpkgdir}}"/usr/share/man/man1
          chmod 1777 "${{targets.subpkgdir}}"/tmp
          install -m755 busybox "${{targets.subpkgdir}}"/bin/busybox
          install -m644 securetty "${{targets.subpkgdir}}"/etc/securetty

          mkdir -p "${{targets.subpkgdir}}"/etc/busybox-paths.d
          ./busybox --list-path > "${{targets.subpkgdir}}"/etc/busybox-paths.d/busybox-full
    scriptlets:
      trigger:
        paths:
          - /bin
          - /sbin
          - /usr/bin
          - /usr/sbin
        script: |
          #!/bin/busybox sh
          /bin/busybox --install -s
    test:
      environment:
        contents:
          packages:
            - wolfi-base
      pipeline:
        - runs: |
            busybox --help
            busybox --list-full >full.txt
            # These programs are expected to be present
            for p in nc netcat wget; do
                if ! grep "bin/$p" full.txt; then
                    echo "$p is not present in busybox --list-full output"
                    exit 1
                fi
                "$p" --help ||
                  { echo "$p --help exited $?. expected pass"; exit 1; }
            done

test:
  pipeline:
    - runs: |
        busybox --help
        busybox --list-full >full.txt

        # These programs have been intentionally removed from default busybox
        for p in nc netcat wget; do
            if grep "bin/$p" full.txt; then
                echo "Found '$p' in list-full output"
                exit 1
            fi
            command -v "$p" &&
              { echo "command '$p' is present. It should not be."; exit 1; }
        done

update:
  enabled: true
  release-monitor:
    identifier: 230