melange 基于源码构建apk 包的工具

go install chainguard.dev/melange@latest

package:

  name: hello

  version: 2.12

  epoch: 0

  description: "the GNU hello world program"

  target-architecture:

  - amd64

  copyright:

    - paths:

      - "*"

      attestation: |

        Copyright 1992, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2005,

        2006, 2007, 2008, 2010, 2011, 2013, 2014, 2022 Free Software Foundation,

        Inc.

      license: GPL-3.0-or-later

  dependencies:

    runtime:

environment:

  contents:

    repositories:

      - https://mirrors.aliyun.com/alpine/edge/main

    packages:

      - alpine-baselayout-data

      - busybox

      - build-base

      - scanelf

      - ssl_client

      - ca-certificates-bundle

pipeline:

  - uses: fetch

    with:

      uri: https://ftp.gnu.org/gnu/hello/hello-${{package.version}}.tar.gz

      expected-sha256: cf04af86dc085268c5f4470fbae49b18afbc221b78096aab842d934a76bad0ab

  - uses: autoconf/configure

  - uses: autoconf/make

  - uses: autoconf/make-install

  - uses: strip

 docker run --rm --privileged -v "${PWD}":/work \

    cgr.dev/chainguard/melange build demo.yaml \

    --arch amd64