Subject: [alpine-devel] Bug on mkimage.sh logic.

From: Magicloud Magiclouds <[email-masked]>
Date: Thu, 21 Feb 2019 17:42:02 +0800

Hi,

I think I can build image of other architecture by using mkimage.sh
from aports/scripts. But when doing that, it would verify files signed
by aarch64 keys using x86_64 keys, and failed trusting.

```
$ ./mkimage.sh --arch aarch64 --repository http://dl-cdn.alpinelinux.org/alpine/
edge/main --profile arm
OK: 0 MiB in 0 packages
fetch http://dl-cdn.alpinelinux.org/alpine/edge/main/aarch64/APKINDEX.tar.gz
ERROR: http://dl-cdn.alpinelinux.org/alpine/edge/main: UNTRUSTED signature
WARNING: Ignoring APKINDEX.066df28d.tar.gz: No such file or directory
1 errors; 0 distinct packages available
```

-- 
竹密岂妨流水过
山高哪阻野云飞

And for G+, please use magiclouds#gmail.com.

---
Unsubscribe:  [email-masked]
Help:         [email-masked]
---

---

From: Tuan Hoang <[email-masked]>
Date: Mon, 25 Feb 2019 15:42:36 +0100

Hi,

mkimage.sh should be running on the host of the same architecture as the target. (i.e. creating images for arm on arm machines).
Since x86_64 and aarch64 have different signing keys respectively, UNTRUSTED signature is error expected.

You could use qemu (emulation mode on x86) to run Alpine aarch64 to build aarch64 image though.

There was somebody mentioned using Docker multi-arch support feature to build aarch64 images on x86 host but I didn't remember exactly.

Cheers,

---

---

From: Magicloud Magiclouds <[email-masked]>
Date: Thu, 21 Feb 2019 18:30:24 +0800

Also, in the progress, apk tries to load raspberrypi-bootloader (in
aarch64) from x86_64 repos. So I guess this tool does not support
cross platform despite what it looks like?

-- 
竹密岂妨流水过
山高哪阻野云飞

---