Repository Issue Activity (beta)

#2408 EROFS follow-ups: mount/umount hardening, layer splitting, go-erofs bump

#2423 build: NewOptions returns an unvalidated ImageConfiguration, so an invalid layer format silently builds a tar

#2417 GenerateIndex in v1.2.38 hard-fails on images with an unreadable config (regression from #2249)

#2399 DRAFT: RSA SHA1 signature support will be removed on 2026-09-30

#1969 installed db should be sorted

#1965 apko adds users to /etc/passwd without adding corresponding entry in /etc/shadow

#42 Plans to extend beyond alpine?

#2268 Concurrent use of package cache may end in "unexpected EOF"

#2252 apko does not follow content-disposition headers when fetching key files

#2251 Package index fetches fail if APKINDEX.tar.gz doesn't support HEAD requests (e.g. Gitea/Forgejo package repositories)

#1903 bug: apko should retry package installs

#2196 v1.2.7 is broken on amd64: bundling image: permission denied

#2195 v1.2.6+: APKINDEX cache write fails with "permission denied" on Google Cloud Build

#2173 feature: smart layer construction for better layer caching

#2074 Incorrect Go version in CONTRIBUTING.md

#2043 New v1.1.0 apko release is missing precompiled binaries

#2085 feature request: lockfile support for minirootfs and cpio

#2084 SBOM does not get built for minirootfs

#1861 Unable to correctly resolve packages if a provides is used with a constraint

#777 ResolveWorld is very inefficient

#1377 How to provide duplicate (but older) package version?

#687 conflicts not properly processed

#1590 Fuzzy version matching does not work and does not raise an error

#1181 Error: could not find package either named so:libboost_log-gcc10-mt-x64-1_83.so.1.83.0

#593 version sorting is not stable in apko's solver