I have noticed two problems in my own testing:
1)
I think that the ALTERNATIVES supports in our apk might be faulty, at least
at the image generation in the build system.
I have filed a bug for that:
apk: ALTERNATIVES support at build stage seems faulty
https://github.com/openwrt/openwrt/issu
Hi,
> I understood that index based trust is now impemented in APK:
> https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/11008
yep, I've tested that and this part works fine.
Although having my QA hat on, there might be probably one missed use case with
`apk verify` which is probably not u